handoff-app 2.0.0-1 → 2.0.0-3

package/dist/app-builder/build.js

@@ -1,4 +1,27 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
     function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
     return new (P || (P = Promise))(function (resolve, reject) {
@@ -13,6 +36,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.devApp = exports.watchApp = exports.getRegistryBuildOutputPath = exports.HandoffBuildError = exports.DEFAULT_BUILD_TARGET = void 0;
+const p = __importStar(require("@clack/prompts"));
 const cross_spawn_1 = __importDefault(require("cross-spawn"));
 const fs_extra_1 = __importDefault(require("fs-extra"));
 const path_1 = __importDefault(require("path"));
@@ -21,7 +45,7 @@ const patterns_1 = require("../pipeline/patterns");
 const builder_1 = __importDefault(require("../transformers/preview/component/builder"));
 const css_1 = require("../transformers/preview/component/css");
 const javascript_1 = require("../transformers/preview/component/javascript");
-const adapter_1 = require("../registry/db/adapter");
+const driver_1 = require("../registry/db/driver");
 const resolve_1 = require("../registry/asset-storage/resolve");
 const logger_1 = require("../utils/logger");
 const client_config_1 = require("./client-config");
@@ -78,6 +102,51 @@ const assertStaticBuildAllowed = (handoff) => {
             'or package the registry app with `handoff-app build --target registry`.');
     }
 };
+/**
+ * Run the Next.js production build while keeping its delayed output out of the successful CLI flow.
+ * Captured output is replayed only when the child fails so compiler diagnostics remain available.
+ */
+const runNextBuild = (appPath, target, errorLabel) => __awaiter(void 0, void 0, void 0, function* () {
+    const spinner = p.spinner();
+    spinner.start('Building Next.js app...');
+    const stdout = [];
+    const stderr = [];
+    yield new Promise((resolve, reject) => {
+        var _a, _b;
+        const buildProcess = (0, cross_spawn_1.default)('npx', ['next', 'build'], {
+            cwd: appPath,
+            stdio: ['inherit', 'pipe', 'pipe'],
+            env: Object.assign(Object.assign({}, process.env), { NODE_ENV: 'production', HANDOFF_BUILD_TARGET: target }),
+        });
+        (_a = buildProcess.stdout) === null || _a === void 0 ? void 0 : _a.on('data', (chunk) => stdout.push(Buffer.from(chunk)));
+        (_b = buildProcess.stderr) === null || _b === void 0 ? void 0 : _b.on('data', (chunk) => stderr.push(Buffer.from(chunk)));
+        let settled = false;
+        const fail = (message) => {
+            if (settled)
+                return;
+            settled = true;
+            spinner.stop('Next.js app build failed');
+            logger_1.Logger.childProcessBuffer(Buffer.concat(stdout));
+            logger_1.Logger.childProcessBuffer(Buffer.concat(stderr));
+            reject(new Error(message));
+        };
+        buildProcess.once('error', (error) => {
+            fail(`${errorLabel} failed to start\nSpawn error: ${error.message}`);
+        });
+        buildProcess.once('close', (code, signal) => {
+            if (settled)
+                return;
+            if (code === 0) {
+                settled = true;
+                spinner.stop('Next.js app built successfully');
+                resolve();
+                return;
+            }
+            const reason = signal ? ` because it was terminated by signal ${signal}` : ` with exit code ${code}`;
+            fail(`${errorLabel} failed${reason}`);
+        });
+    });
+});
 /**
  * Output directory for the packaged registry app. Lives under the configurable sites output
  * directory (`sitesOutputDirectory`, default `out`) alongside the static target's `out/<projectId>`
@@ -147,9 +216,8 @@ const initializeProjectApp = (handoff_1, ...args_1) => __awaiter(void 0, [handof
     // Resolved runtime mode + registry connection inputs (names only) baked into the Next bundle so the
     // deployed registry app resolves its mode/DB env-var name without any build-machine filesystem.
     const escapedRuntimeMode = escapeForSingleQuotedJsString(runtimeMode);
-    const escapedRegistryAdapter = escapeForSingleQuotedJsString((0, adapter_1.resolveRegistryAdapter)(handoff.config));
-    const escapedDatabaseUrlEnv = escapeForSingleQuotedJsString((0, adapter_1.resolveDatabaseUrlEnv)(handoff.config));
-    const escapedApiTokenEnv = escapeForSingleQuotedJsString((0, adapter_1.resolveApiTokenEnv)(handoff.config));
+    const escapedRegistryDriver = escapeForSingleQuotedJsString((0, driver_1.resolveRegistryDriver)(handoff.config));
+    const escapedDatabaseUrlEnv = escapeForSingleQuotedJsString((0, driver_1.resolveDatabaseUrlEnv)(handoff.config));
     // Asset storage selection baked (provider + module + env-var names + non-secret options JSON).
     const assetStorage = (0, resolve_1.resolveAssetStorageFromConfig)(handoff.config);
     const escapedAssetStorageAdapter = escapeForSingleQuotedJsString(assetStorage.adapterKind);
@@ -165,9 +233,8 @@ const initializeProjectApp = (handoff_1, ...args_1) => __awaiter(void 0, [handof
         '%HANDOFF_EXPORT_PATH%': escapedExportPath,
         '%HANDOFF_WEBSOCKET_PORT%': escapedWebsocketPort,
         '%HANDOFF_RUNTIME_MODE%': escapedRuntimeMode,
-        '%HANDOFF_REGISTRY_ADAPTER%': escapedRegistryAdapter,
+        '%HANDOFF_REGISTRY_DRIVER%': escapedRegistryDriver,
         '%HANDOFF_REGISTRY_DATABASE_URL_ENV%': escapedDatabaseUrlEnv,
-        '%HANDOFF_REGISTRY_API_TOKEN_ENV%': escapedApiTokenEnv,
         '%HANDOFF_ASSET_STORAGE_ADAPTER%': escapedAssetStorageAdapter,
         '%HANDOFF_ASSET_STORAGE_MODULE%': escapedAssetStorageModule,
         '%HANDOFF_ASSET_STORAGE_TOKEN_ENV%': escapedAssetStorageTokenEnv,
@@ -216,20 +283,7 @@ const buildApp = (handoff_1, ...args_1) => __awaiter(void 0, [handoff_1, ...args
     (0, static_export_1.validateReferencedArtifacts)(handoff);
     // Build app. The static target drives Next's `output: 'export'` via HANDOFF_BUILD_TARGET so the
     // export gate is tied to the resolved target, not to NODE_ENV.
-    const buildResult = cross_spawn_1.default.sync('npx', ['next', 'build'], {
-        cwd: appPath,
-        stdio: ['inherit', 'pipe', 'pipe'],
-        env: Object.assign(Object.assign({}, process.env), { NODE_ENV: 'production', HANDOFF_BUILD_TARGET: target }),
-    });
-    logger_1.Logger.childProcessBuffer(buildResult.stdout);
-    logger_1.Logger.childProcessBuffer(buildResult.stderr);
-    if (buildResult.status !== 0) {
-        let errorMsg = `Next.js build failed with exit code ${buildResult.status}`;
-        if (buildResult.error) {
-            errorMsg += `\nSpawn error: ${buildResult.error.message}`;
-        }
-        throw new Error(errorMsg);
-    }
+    yield runNextBuild(appPath, target, 'Next.js build');
     // Reproduce the docs read API (`/api/docs/*`) as route-shaped static files in the export output,
     // since `output: 'export'` disables the live API routes.
     const exportDir = path_1.default.resolve(appPath, 'out');
@@ -295,7 +349,11 @@ and \`.next/static/\` already copied alongside so the server serves them.
 ## Required environment variables (supplied at deploy time, never baked in)
 
 - \`${databaseUrlEnv}\` — PostgreSQL/Neon connection string, read at request time.
-- \`HANDOFF_REGISTRY_API_TOKEN\` — bearer token for registry management mutations (if used).
+- \`AUTH_SECRET\` — a long, random secret used to sign browser sessions.
+- \`AUTH_URL\` — the canonical public registry URL, including the configured base path.
+
+Optional email delivery uses \`RESEND_API_KEY\` and \`AUTH_FROM_EMAIL\`. Without them, invitation
+links are shown once to an administrator for manual delivery.
 
 ## Database migrations
 
@@ -306,10 +364,25 @@ pipeline) before deploying new code:
 ${databaseUrlEnv}="postgres://…" handoff-app db:migrate
 \`\`\`
 
-\`db:migrate\` reads your project config + DB env vars, resolves the same database adapter the app was
+\`db:migrate\` reads your project config + DB env vars, resolves the same database driver the app was
 built with, and applies the package-owned migration set. It runs independently of \`build\` and of
 starting the server, so run it as a release/one-shot job.
 
+## Complete the one-time installation
+
+After migrations and deployment, open \`/install\` immediately and create the initial administrator.
+The installer verifies the deployment but never changes the schema. An exposed, uninstalled registry
+can be claimed by its first visitor, so do not leave this step unattended.
+
+Once installation completes, sign in and authorize a workspace:
+
+\`\`\`bash
+handoff-app login --url https://registry.example.com
+\`\`\`
+
+The browser approval issues a revocable, user-owned credential. The former
+\`HANDOFF_REGISTRY_API_TOKEN\` fixed server secret is no longer accepted.
+
 ## Run it (self-hosting)
 
 Standalone is the documented artifact for self-hosting on a Node.js server, VPS, Docker, or
@@ -352,15 +425,15 @@ containers, custom Node servers, and other non-Vercel hosts.
 });
 /**
  * Resolve the set of npm packages the packaged registry app must be able to `require`/`import` at
- * runtime, given the configured database adapter. `next`/`react`/`react-dom` run the server and React
+ * runtime, given the configured database driver. `next`/`react`/`react-dom` run the server and React
  * runtime; `drizzle-orm` backs both the request-time DB client and the migration runner; the driver
- * is adapter-specific (the Neon serverless driver also needs `ws` for its Node WebSocket transport).
+ * package is driver-specific (the Neon serverless driver also needs `ws` for its Node WebSocket transport).
  */
 const getRequiredRegistryRuntimeModules = (handoff) => {
     var _a;
-    const base = ['next', 'react', 'react-dom', 'drizzle-orm'];
-    const adapter = (0, adapter_1.resolveRegistryAdapter)(handoff.config);
-    const driver = adapter === 'neon' ? ['@neondatabase/serverless', 'ws'] : ['pg'];
+    const base = ['next', 'next-auth', 'react', 'react-dom', 'drizzle-orm'];
+    const driver = (0, driver_1.resolveRegistryDriver)(handoff.config);
+    const driverModules = driver === 'neon' ? ['@neondatabase/serverless', 'ws'] : ['pg'];
     // Asset-storage SDKs the deployed registry must be able to load at request time. The pre-packaged
     // Vercel Blob adapter needs `@vercel/blob`; a custom adapter may declare its installed SDK
     // package(s) via `assetStorage.options.sdkModules` so the trace/assertion covers them.
@@ -373,7 +446,7 @@ const getRequiredRegistryRuntimeModules = (handoff) => {
     if (Array.isArray(sdkModules)) {
         storage.push(...sdkModules.filter((mod) => typeof mod === 'string'));
     }
-    return [...base, ...driver, ...storage];
+    return [...base, ...driverModules, ...storage];
 };
 /**
  * Build-time guard against the empty-`node_modules` regression (the artifact would otherwise boot-fail
@@ -482,7 +555,7 @@ const assembleRegistryStandalone = (handoff, appPath, standaloneRoot, entryDir)
  *   - `vercel` → the Vercel Build Output API directory (`.vercel/output`) at the repo root: the
  *     traced bundle wrapped as a Node function plus CDN static assets and a route table.
  *
- * Mode is forced to `registry`; the database adapter is honored from config (single-sourced so build
+ * Mode is forced to `registry`; the database driver is honored from config (single-sourced so build
  * and `db:migrate` never diverge). No connection-string value is ever baked — only env-var *names*.
  */
 const buildRegistryApp = (handoff_1, ...args_1) => __awaiter(void 0, [handoff_1, ...args_1], void 0, function* (handoff, buildPackage = 'standalone') {
@@ -495,15 +568,15 @@ const buildRegistryApp = (handoff_1, ...args_1) => __awaiter(void 0, [handoff_1,
     if (sourceMode !== 'registry') {
         logger_1.Logger.info(`Source runtime.mode is "${sourceMode}"; forcing "registry" mode in the packaged registry app.`);
     }
-    // The adapter stays single-sourced from config (never flipped by the package flag), so build and
+    // The driver stays single-sourced from config (never flipped by the package flag), so build and
     // `db:migrate` always resolve the same one. `pg` uses long-lived TCP connections that pool poorly on
     // serverless; warn (non-fatally) so the operator points DATABASE_URL at a pooled endpoint or selects
-    // the Neon adapter. The connection-string value is not available at build time, so this cannot be
+    // the Neon driver. The connection-string value is not available at build time, so this cannot be
     // validated — it is guidance only and never fails the build.
-    if (buildPackage === 'vercel' && (0, adapter_1.resolveRegistryAdapter)(handoff.config) === 'pg') {
-        logger_1.Logger.warn('Registry Vercel build uses the "pg" adapter (standard TCP connections), which pools poorly on ' +
+    if (buildPackage === 'vercel' && (0, driver_1.resolveRegistryDriver)(handoff.config) === 'pg') {
+        logger_1.Logger.warn('Registry Vercel build uses the "pg" driver (standard TCP connections), which pools poorly on ' +
             'serverless and can exhaust the database connection limit. Point DATABASE_URL at a pooled endpoint ' +
-            '(PgBouncer / transaction pooling), or set runtime.registry.database.adapter: "neon" for a ' +
+            '(PgBouncer / transaction pooling), or set runtime.registry.database.driver: "neon" for a ' +
             'serverless-native HTTP/WebSocket driver. The build will continue.');
     }
     // Stage the app without any workspace-derived artifacts — the registry serves from the database.
@@ -524,20 +597,7 @@ const buildRegistryApp = (handoff_1, ...args_1) => __awaiter(void 0, [handoff_1,
     yield fs_extra_1.default.remove((0, vercel_output_1.getVercelOutputPath)(handoff));
     // Build the dynamic app. `output: 'standalone'` (driven by HANDOFF_BUILD_TARGET) traces the runtime
     // and the selected Postgres/Neon driver into a self-contained bundle — never a static export.
-    const buildResult = cross_spawn_1.default.sync('npx', ['next', 'build'], {
-        cwd: appPath,
-        stdio: ['inherit', 'pipe', 'pipe'],
-        env: Object.assign(Object.assign({}, process.env), { NODE_ENV: 'production', HANDOFF_BUILD_TARGET: 'registry' }),
-    });
-    logger_1.Logger.childProcessBuffer(buildResult.stdout);
-    logger_1.Logger.childProcessBuffer(buildResult.stderr);
-    if (buildResult.status !== 0) {
-        let errorMsg = `Registry app build failed with exit code ${buildResult.status}`;
-        if (buildResult.error) {
-            errorMsg += `\nSpawn error: ${buildResult.error.message}`;
-        }
-        throw new Error(errorMsg);
-    }
+    yield runNextBuild(appPath, 'registry', 'Registry app build');
     // Assemble the deployable package. Standalone tracing is rooted at the package (modulePath), so the
     // app's traced files land under `<relAppDir>` inside the standalone tree; static assets and public
     // files are not traced and must be copied alongside the server entry.
@@ -561,7 +621,7 @@ const buildRegistryApp = (handoff_1, ...args_1) => __awaiter(void 0, [handoff_1,
     // `handoff-app` source/CLI (`handoff-app db:migrate`) as a controlled release step (e.g. CI/CD),
     // never from the deployed bundle. See the generated README for the migrate-then-deploy flow.
     const entryRelativePath = path_1.default.relative(output, serverEntry).split(path_1.default.sep).join('/');
-    yield writeRegistryDeploymentReadme(output, entryRelativePath, (0, adapter_1.resolveDatabaseUrlEnv)(handoff.config));
+    yield writeRegistryDeploymentReadme(output, entryRelativePath, (0, driver_1.resolveDatabaseUrlEnv)(handoff.config));
     logger_1.Logger.success(`Packaged registry app at ${output} (start: \`node ${entryRelativePath}\`, migrate: \`handoff-app db:migrate\`).`);
 });
 /**

package/dist/app-builder/client-config.js

@@ -17,7 +17,8 @@ const fs_extra_1 = __importDefault(require("fs-extra"));
 const path_1 = __importDefault(require("path"));
 const config_1 = require("../config");
 const resolve_1 = require("../registry/asset-storage/resolve");
-const adapter_1 = require("../registry/db/adapter");
+const connection_1 = require("../registry/connection");
+const driver_1 = require("../registry/db/driver");
 const paths_1 = require("./paths");
 /**
  * Publishes the tokens API files to the public directory.
@@ -55,7 +56,7 @@ exports.generateTokensApi = generateTokensApi;
  * Build the server-only runtime config consumed by the docs read API.
  *
  * The browser-facing `client.config.json` carries only the resolved mode; the server additionally
- * needs the registry connection *inputs* (selected adapter + the *name* of the database-URL env
+ * needs the registry connection *inputs* (selected driver + the *name* of the database-URL env
  * var) to back the registry-mode docs read API. These are non-secret — the connection-string value
  * itself is never persisted, only resolved from the env var at request time.
  */
@@ -65,9 +66,8 @@ const buildServerRuntimeConfig = (config, modeOverride) => {
     return {
         mode: (_b = modeOverride !== null && modeOverride !== void 0 ? modeOverride : (_a = config === null || config === void 0 ? void 0 : config.runtime) === null || _a === void 0 ? void 0 : _a.mode) !== null && _b !== void 0 ? _b : 'workspace',
         registry: {
-            adapter: (0, adapter_1.resolveRegistryAdapter)(config),
-            databaseUrlEnv: (0, adapter_1.resolveDatabaseUrlEnv)(config),
-            apiTokenEnv: (0, adapter_1.resolveApiTokenEnv)(config),
+            driver: (0, driver_1.resolveRegistryDriver)(config),
+            databaseUrlEnv: (0, driver_1.resolveDatabaseUrlEnv)(config),
         },
         assetStorage: {
             adapter: assetStorage.adapterKind,
@@ -84,17 +84,18 @@ const buildServerRuntimeConfig = (config, modeOverride) => {
  * connection inputs from. Both are always written together so they never drift.
  */
 const persistClientConfig = (handoff_1, ...args_1) => __awaiter(void 0, [handoff_1, ...args_1], void 0, function* (handoff, options = {}) {
+    var _a;
     const appPath = (0, paths_1.getAppPath)(handoff);
     // Ensure directory exists
     yield fs_extra_1.default.ensureDir(appPath);
     const clientConfig = (0, config_1.getClientConfig)(handoff.config);
-    if (options.runtimeModeOverride) {
-        // A forced registry mode (the registry build target) is never a connected workspace, so the
-        // baked client config must report `connected: false` even when packaged from a connected
-        // workspace project.
-        const connected = options.runtimeModeOverride === 'registry' ? false : clientConfig.runtime.connected;
-        clientConfig.runtime = Object.assign(Object.assign({}, clientConfig.runtime), { mode: options.runtimeModeOverride, connected });
-    }
+    const mode = (_a = options.runtimeModeOverride) !== null && _a !== void 0 ? _a : clientConfig.runtime.mode;
+    // A registry build target is never a connected workspace, so it must bake `connected: false`
+    // even when packaged from a connected project. Otherwise a workspace is connected whenever a
+    // registry URL resolves — from config/env or a saved device login — so `login` alone surfaces
+    // the publish/checkout UI without also requiring HANDOFF_REGISTRY_URL.
+    const connected = mode === 'registry' ? false : Boolean((yield (0, connection_1.resolveAuthenticatedRegistryConnection)(handoff.config, handoff.workingPath)).url);
+    clientConfig.runtime = Object.assign(Object.assign({}, clientConfig.runtime), { mode, connected });
     yield fs_extra_1.default.writeJson(path_1.default.resolve(appPath, 'client.config.json'), { config: clientConfig }, { spaces: 2 });
     yield fs_extra_1.default.writeJson(path_1.default.resolve(appPath, 'runtime.server.json'), buildServerRuntimeConfig(handoff.config, options.runtimeModeOverride), { spaces: 2 });
 });

package/dist/app-builder/paths.js

@@ -51,13 +51,11 @@ const mirrorDirectory = (sourcePath, destinationPath) => __awaiter(void 0, void
     yield fs_extra_1.default.copy(sourcePath, destinationPath, { overwrite: true });
 });
 /**
- * Stage the fetch-produced asset download bundles (`exported/<id>/{collection}.zip`) into the app
- * public root, where the docs read API's workspace asset store serves them at
- * `/api/docs/assets/{collection}/{collection}.zip` (the canonical download URL). `fetch` writes these
- * bundles, but a plain `build`/`start` cleans and re-stages `.handoff` without carrying them, so the
- * download links would 404 until a fetch happened to run. Copying the committed export bundles here
- * makes the route resolve deterministically in workspace dev and static builds. Absent bundles (a
- * project with no logos/icons) are skipped.
+ * Copy the fetch-produced asset bundles (`exported/<id>/{collection}.zip`) into the app's public
+ * root, where the docs read API serves them at `/api/docs/assets/{collection}/{collection}.zip`.
+ * `fetch` writes these bundles, but `build`/`start` cleans and re-stages `.handoff` without them, so
+ * the download links 404 until the next fetch. Copying them here keeps the route working in workspace
+ * dev and static builds. Projects with no logos/icons have no bundles, so those are skipped.
  */
 const stageAssetDownloadBundles = (handoff, destinationPublicPath) => __awaiter(void 0, void 0, void 0, function* () {
     const bundles = [
@@ -90,8 +88,8 @@ const syncPublicFiles = (handoff) => __awaiter(void 0, void 0, void 0, function*
         });
         yield mirrorDirectory(sourceApiPath, destinationApiPath);
     }
-    // Stage the asset download bundles regardless of whether the workspace has a `public/` dir — they
-    // come from the fetch output, not the workspace public tree.
+    // Stage the asset bundles even when the workspace has no `public/` dir; they come from the fetch
+    // output, not the workspace public tree.
     yield stageAssetDownloadBundles(handoff, destinationPublicPath);
 });
 exports.syncPublicFiles = syncPublicFiles;

package/dist/app-builder/static-export.js

@@ -181,12 +181,12 @@ const materializeDocsReadModel = (handoff, outDir) => __awaiter(void 0, void 0,
 });
 exports.materializeDocsReadModel = materializeDocsReadModel;
 /**
- * Materialize the whole-collection asset download bundles at the canonical asset route
- * (`api/docs/assets/{collection}/{collection}.zip`) — the same URL the docs read API serves in
- * registry mode, so the "Download" links resolve identically on a static host. The bundles come from
- * the fetch output (`exported/<id>/{collection}.zip`); `next build` never re-creates them, and the
- * fetch-time copy into the app `public/` is wiped by the build's clean+restage, so they are copied
- * here. Absent bundles (a project with no logos/icons) are skipped, not an error.
+ * Write the whole-collection asset bundles to the asset route
+ * (`api/docs/assets/{collection}/{collection}.zip`), the same URL the docs read API serves in
+ * registry mode, so the "Download" links work identically on a static host. The bundles come from the
+ * fetch output (`exported/<id>/{collection}.zip`); `next build` never re-creates them and the
+ * fetch-time copy into `public/` is wiped by the build's clean+restage, so we copy them here again.
+ * Projects with no logos/icons have no bundles, so those are skipped rather than treated as an error.
  */
 const materializeAssetDownloads = (handoff, docsRoot) => __awaiter(void 0, void 0, void 0, function* () {
     const bundles = [

package/dist/app-builder/vercel-output.js

@@ -74,7 +74,7 @@ const writeStaticVercelOutput = (handoff, exportDir) => __awaiter(void 0, void 0
 });
 exports.writeStaticVercelOutput = writeStaticVercelOutput;
 /**
- * Node.js runtime identifier baked into the registry function's `.vc-config.json`. The `pg` adapter
+ * Node.js runtime identifier baked into the registry function's `.vc-config.json`. The `pg` driver
  * (and the Neon serverless driver in its Node fallback) need the Node.js runtime, not the edge
  * runtime — this is the required baseline. Vercel resolves the patch
  * version within this major; pinning the major keeps the artifact stable.
@@ -102,7 +102,7 @@ const MUTABLE_REGISTRY_PAGE_SRC_ROUTE = '/[...slug]';
  * data routes resolve the same way they do under the standalone server. `minimalMode:false` keeps
  * the function doing full in-process routing (the catch-all route forwards everything here).
  *
- * Runtime mode, adapter, and the DB env-var *name* are already baked into the resolved config the
+ * Runtime mode, driver, and the DB env-var *name* are already baked into the resolved config the
  * standalone build wrote to `.next/required-server-files.json`; the connection-string value is still
  * read from the named env var at request time, never baked.
  */

package/dist/artifacts/url.d.ts

@@ -17,7 +17,7 @@
 export declare const ARTIFACTS_ROUTE_SEGMENT = "api/docs/artifacts";
 /** Route prefix for docs read API metadata (`.json`) reads. */
 export declare const DOCS_ROUTE_SEGMENT = "api/docs";
-/** Canonical route prefix all asset content URLs are served under (mode-independent). */
+/** Route prefix all asset content URLs are served under, regardless of runtime mode. */
 export declare const ASSETS_ROUTE_SEGMENT = "api/docs/assets";
 /**
  * Normalize a configured basePath to either an empty string or a single-leading-slash,
@@ -50,18 +50,18 @@ export declare const buildComponentDetailUrl: (id: string, basePath?: string | n
  */
 export declare const buildPatternDetailUrl: (id: string, basePath?: string | null) => string;
 /**
- * Build the canonical, basePath-aware content URL for one asset within a collection
+ * Build the basePath-aware content URL for a single asset in a collection
  * (`{basePath}/api/docs/assets/{collection}/{logicalPath}`). This is the same route the docs read API
  * serves in every runtime mode: from the database in registry mode, and from statically materialized
- * files in a static export. Each segment is individually encoded and traversal segments are rejected,
- * mirroring {@link buildArtifactUrl}.
+ * files in a static export. Each segment is encoded on its own and traversal segments are rejected,
+ * matching {@link buildArtifactUrl}.
  *
  * @throws If the collection or logical path has no usable segments, or contains a `.`/`..` segment.
  */
 export declare const buildAssetUrl: (collection: string, logicalPath: string, basePath?: string | null) => string;
 /**
- * Build the canonical download URL for a collection's whole-collection zip bundle
- * (`{basePath}/api/docs/assets/{collection}/{collection}.zip`) — the default target for the docs
- * "Download" links, overridable via `assets_zip_links`.
+ * Build the download URL for a collection's zip bundle
+ * (`{basePath}/api/docs/assets/{collection}/{collection}.zip`). This is the default target for the
+ * docs "Download" links and can be overridden via `assets_zip_links`.
  */
 export declare const buildAssetDownloadUrl: (collection: string, basePath?: string | null) => string;

package/dist/artifacts/url.js

@@ -20,7 +20,7 @@ exports.buildAssetDownloadUrl = exports.buildAssetUrl = exports.buildPatternDeta
 exports.ARTIFACTS_ROUTE_SEGMENT = 'api/docs/artifacts';
 /** Route prefix for docs read API metadata (`.json`) reads. */
 exports.DOCS_ROUTE_SEGMENT = 'api/docs';
-/** Canonical route prefix all asset content URLs are served under (mode-independent). */
+/** Route prefix all asset content URLs are served under, regardless of runtime mode. */
 exports.ASSETS_ROUTE_SEGMENT = 'api/docs/assets';
 /**
  * Normalize a configured basePath to either an empty string or a single-leading-slash,
@@ -87,11 +87,11 @@ exports.buildComponentDetailUrl = buildComponentDetailUrl;
 const buildPatternDetailUrl = (id, basePath) => `${(0, exports.normalizeBasePath)(basePath)}/${exports.DOCS_ROUTE_SEGMENT}/patterns/${encodeURIComponent(id)}.json`;
 exports.buildPatternDetailUrl = buildPatternDetailUrl;
 /**
- * Build the canonical, basePath-aware content URL for one asset within a collection
+ * Build the basePath-aware content URL for a single asset in a collection
  * (`{basePath}/api/docs/assets/{collection}/{logicalPath}`). This is the same route the docs read API
  * serves in every runtime mode: from the database in registry mode, and from statically materialized
- * files in a static export. Each segment is individually encoded and traversal segments are rejected,
- * mirroring {@link buildArtifactUrl}.
+ * files in a static export. Each segment is encoded on its own and traversal segments are rejected,
+ * matching {@link buildArtifactUrl}.
  *
  * @throws If the collection or logical path has no usable segments, or contains a `.`/`..` segment.
  */
@@ -108,9 +108,9 @@ const buildAssetUrl = (collection, logicalPath, basePath) => {
 };
 exports.buildAssetUrl = buildAssetUrl;
 /**
- * Build the canonical download URL for a collection's whole-collection zip bundle
- * (`{basePath}/api/docs/assets/{collection}/{collection}.zip`) — the default target for the docs
- * "Download" links, overridable via `assets_zip_links`.
+ * Build the download URL for a collection's zip bundle
+ * (`{basePath}/api/docs/assets/{collection}/{collection}.zip`). This is the default target for the
+ * docs "Download" links and can be overridden via `assets_zip_links`.
  */
 const buildAssetDownloadUrl = (collection, basePath) => (0, exports.buildAssetUrl)(collection, `${collection}.zip`, basePath);
 exports.buildAssetDownloadUrl = buildAssetDownloadUrl;

package/dist/cli/auth/browser.d.ts

@@ -0,0 +1,2 @@
+/** Fire-and-forget opening of a URL in the system browser. The printed URL remains the fallback. */
+export declare const tryOpenBrowser: (url: string) => void;

package/dist/cli/auth/browser.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tryOpenBrowser = void 0;
+const child_process_1 = require("child_process");
+/** Fire-and-forget opening of a URL in the system browser. The printed URL remains the fallback. */
+const tryOpenBrowser = (url) => {
+    try {
+        const { protocol } = new URL(url);
+        if (protocol !== 'http:' && protocol !== 'https:')
+            return;
+    }
+    catch (_a) {
+        return;
+    }
+    const platform = process.platform;
+    // rundll32 is a plain executable rather than a shell, so spawn hands it the URL as one
+    // untouched argument. `cmd /c start` would re-parse shell metacharacters in it.
+    const command = platform === 'darwin' ? 'open' : platform === 'win32' ? 'rundll32.exe' : 'xdg-open';
+    const args = platform === 'win32' ? ['url.dll,FileProtocolHandler', url] : [url];
+    try {
+        const child = (0, child_process_1.spawn)(command, args, {
+            detached: true,
+            stdio: 'ignore',
+            windowsHide: platform === 'win32',
+        });
+        child.on('error', () => undefined);
+        child.unref();
+    }
+    catch (_b) {
+        // Headless and SSH environments can use the URL printed by the login flow.
+    }
+};
+exports.tryOpenBrowser = tryOpenBrowser;

package/dist/cli/auth/device.d.ts

@@ -0,0 +1,11 @@
+import { type CliAuth } from './store';
+export interface LoginOptions {
+    openBrowser?: boolean;
+}
+/** Complete the device grant and persist the one-time plaintext access token for this workspace. */
+export declare const loginWithDevice: (workingPath: string, remoteUrl: string, options?: LoginOptions) => Promise<CliAuth>;
+/**
+ * Best-effort remote revocation. The caller must clear the local credential regardless of failure.
+ * The bearer header identifies the current token while the body supports RFC 7009-style handlers.
+ */
+export declare const revokeAccessToken: (auth: CliAuth) => Promise<void>;