hatchkit 0.2.1 → 0.2.2

package/dist/explain.js.map

@@ -1 +1 @@
-{"version":3,"file":"explain.js","sourceRoot":"","sources":["../src/explain.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAY1B,MAAM,KAAK,GAAiB;IAC1B,OAAO,EAAE,wEAAwE;IACjF,YAAY,EAAE;QACZ,kHAAkH;QAClH,6GAA6G;QAC7G,+HAA+H;QAC/H,+DAA+D;KAChE;IACD,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EACT,0MAA0M;SAC7M;QACD;YACE,IAAI,EAAE,SAAS;YACf,WAAW,EACT,mJAAmJ;SACtJ;QACD;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,8NAA8N;SACjO;QACD;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EACT,6HAA6H;SAChI;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EACT,8LAA8L;SACjM;KACF;IACD,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,oFAAoF;YAC7F,IAAI,EAAE,gDAAgD;SACvD;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,oEAAoE;YAC7E,IAAI,EAAE,mDAAmD;SAC1D;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EACL,oGAAoG;YACtG,IAAI,EAAE,oEAAoE;SAC3E;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,8DAA8D;YACvE,IAAI,EAAE,yBAAyB;SAChC;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,sOAAsO;YACxO,IAAI,EAAE,mEAAmE;SAC1E;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,kEAAkE;YAC3E,IAAI,EAAE,yDAAyD;SAChE;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EACL,6FAA6F;YAC/F,IAAI,EAAE,+EAA+E;SACtF;QACD;YACE,IAAI,EAAE,+CAA+C;YACrD,OAAO,EACL,6KAA6K;YAC/K,IAAI,EAAE,kKAAkK;SACzK;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,sEAAsE;YAC/E,IAAI,EAAE,wEAAwE;SAC/E;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,gEAAgE;YACzE,IAAI,EAAE,iFAAiF;SACxF;QACD;YACE,IAAI,EAAE,gCAAgC;YACtC,OAAO,EACL,2HAA2H;YAC7H,IAAI,EAAE,4EAA4E;SACnF;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,iDAAiD;YAC1D,IAAI,EAAE,wEAAwE;SAC/E;KACF;IACD,QAAQ,EAAE;QACR,iEAAiE;QACjE,oDAAoD;QACpD,2FAA2F;QAC3F,8GAA8G;QAC9G,0FAA0F;QAC1F,kEAAkE;QAClE,yFAAyF;KAC1F;IACD,iBAAiB,EAAE;QACjB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,qDAAqD,EAAE;QAC/E,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,qDAAqD,EAAE;QAChF,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,8DAA8D,EAAE;QAC/F,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,4CAA4C,EAAE;QACvF,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,+CAA+C,EAAE;QAC1F;YACE,IAAI,EAAE,uCAAuC;YAC7C,IAAI,EAAE,8CAA8C;SACrD;QACD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,iDAAiD,EAAE;QAC9E,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,qCAAqC,EAAE;QAClE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,qDAAqD,EAAE;QAClF,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,8DAA8D,EAAE;KACzF;IACD,eAAe,EAAE;QACf;YACE,IAAI,EAAE,gCAAgC;YACtC,KAAK,EAAE,iDAAiD;SACzD;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,mEAAmE;SAC3E;QACD,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,mDAAmD,EAAE;QAC9F,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE;KACpE;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAExC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY;QAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CACN,GAAG,CACD,mGAAmG,CACpG,CACF,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}
+{"version":3,"file":"explain.js","sourceRoot":"","sources":["../src/explain.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAY1B,MAAM,KAAK,GAAiB;IAC1B,OAAO,EAAE,wEAAwE;IACjF,YAAY,EAAE;QACZ,kHAAkH;QAClH,6GAA6G;QAC7G,+HAA+H;QAC/H,+DAA+D;KAChE;IACD,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EACT,0MAA0M;SAC7M;QACD;YACE,IAAI,EAAE,SAAS;YACf,WAAW,EACT,mJAAmJ;SACtJ;QACD;YACE,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,8NAA8N;SACjO;QACD;YACE,IAAI,EAAE,UAAU;YAChB,WAAW,EACT,6HAA6H;SAChI;QACD;YACE,IAAI,EAAE,aAAa;YACnB,WAAW,EACT,8LAA8L;SACjM;KACF;IACD,QAAQ,EAAE;QACR;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,oFAAoF;YAC7F,IAAI,EAAE,gDAAgD;SACvD;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,oEAAoE;YAC7E,IAAI,EAAE,mDAAmD;SAC1D;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EACL,oGAAoG;YACtG,IAAI,EAAE,oEAAoE;SAC3E;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,8DAA8D;YACvE,IAAI,EAAE,yBAAyB;SAChC;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,OAAO,EACL,sOAAsO;YACxO,IAAI,EAAE,mEAAmE;SAC1E;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,kEAAkE;YAC3E,IAAI,EAAE,yDAAyD;SAChE;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EACL,6FAA6F;YAC/F,IAAI,EAAE,+EAA+E;SACtF;QACD;YACE,IAAI,EAAE,+CAA+C;YACrD,OAAO,EACL,qLAAqL;YACvL,IAAI,EAAE,kKAAkK;SACzK;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,sEAAsE;YAC/E,IAAI,EAAE,wEAAwE;SAC/E;QACD;YACE,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,gEAAgE;YACzE,IAAI,EAAE,iFAAiF;SACxF;QACD;YACE,IAAI,EAAE,gCAAgC;YACtC,OAAO,EACL,2HAA2H;YAC7H,IAAI,EAAE,4EAA4E;SACnF;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,iDAAiD;YAC1D,IAAI,EAAE,wEAAwE;SAC/E;KACF;IACD,QAAQ,EAAE;QACR,iEAAiE;QACjE,oDAAoD;QACpD,2FAA2F;QAC3F,8GAA8G;QAC9G,0FAA0F;QAC1F,kEAAkE;QAClE,yFAAyF;KAC1F;IACD,iBAAiB,EAAE;QACjB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,qDAAqD,EAAE;QAC/E,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,qDAAqD,EAAE;QAChF,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,8DAA8D,EAAE;QAC/F,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,4CAA4C,EAAE;QACvF,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,+CAA+C,EAAE;QAC1F;YACE,IAAI,EAAE,uCAAuC;YAC7C,IAAI,EAAE,8CAA8C;SACrD;QACD,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,iDAAiD,EAAE;QAC9E,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,qCAAqC,EAAE;QAClE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,qDAAqD,EAAE;QAClF,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,8DAA8D,EAAE;KACzF;IACD,eAAe,EAAE;QACf;YACE,IAAI,EAAE,gCAAgC;YACtC,KAAK,EAAE,iDAAiD;SACzD;QACD;YACE,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,mEAAmE;SAC3E;QACD,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,mDAAmD,EAAE;QAC9F,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,8BAA8B,EAAE;KACpE;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAExC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAC7C,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,YAAY;QAAE,GAAG,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,GAAG,CAAC,IAAI,CACN,GAAG,CACD,mGAAmG,CACpG,CACF,CAAC;IACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { existsSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { confirm } from "@inquirer/prompts";
 import chalk from "chalk";
@@ -11,9 +11,10 @@ import { pushProjectKeyToCoolify, pushProjectKeyToGh, rotateProjectKey, setProje
 import { handleCreateFailure, runRollback } from "./deploy/rollback.js";
 import { runTerraform } from "./deploy/terraform.js";
 import { collectProjectConfig } from "./prompts.js";
-import { runProvision, runUnprovision } from "./provision/index.js";
+import { runProvision, runUnprovision, } from "./provision/index.js";
 import { scaffoldApp } from "./scaffold/app.js";
 import { scaffoldInfra } from "./scaffold/infra.js";
+import { readManifest } from "./scaffold/manifest.js";
 import { mlEnvVarName, printMlSummary, resolveMlServices } from "./scaffold/ml-client.js";
 import { runUpdate } from "./scaffold/update.js";
 import { installCancelHandler, isCancelInProgress, uninstallCancelHandler, } from "./utils/cancel-handler.js";
@@ -438,10 +439,10 @@ function opts(result) {
  *  dir already lives inside the project (`packages/server`,
  *  `apps/web`, etc.). Returns undefined when no manifest is found —
  *  callers fall back to "skip s3" with a hint. */
-function inferProjectDir(serverEnvDir) {
-    if (!serverEnvDir)
+function inferProjectDir(startDir) {
+    if (!startDir)
         return undefined;
-    let cur = serverEnvDir;
+    let cur = startDir;
     for (let i = 0; i < 4; i++) {
         if (existsSync(join(cur, ".hatchkit.json")))
             return cur;
@@ -452,15 +453,164 @@ function inferProjectDir(serverEnvDir) {
     }
     return undefined;
 }
+function manifestBucketEntries(manifest) {
+    const buckets = manifest?.s3Buckets;
+    if (!buckets)
+        return [];
+    const out = [];
+    for (const [key, value] of Object.entries(buckets)) {
+        if (key === "tokenId" || key === "accountId")
+            continue;
+        if (value && typeof value === "object" && "name" in value) {
+            out.push(value);
+        }
+    }
+    return out;
+}
+function readIfExists(path) {
+    if (!existsSync(path))
+        return "";
+    try {
+        return readFileSync(path, "utf-8");
+    }
+    catch {
+        return "";
+    }
+}
+function readProjectEnvText(projectDir, baseName) {
+    const chunks = [];
+    if (projectDir) {
+        for (const dir of [
+            ".",
+            "packages/server",
+            "packages/client",
+            "packages/web",
+            "apps/server",
+            "apps/api",
+            "apps/web",
+            "apps/client",
+            "server",
+            "client",
+            "web",
+        ]) {
+            const abs = resolve(projectDir, dir);
+            chunks.push(readIfExists(join(abs, ".env.production")));
+            chunks.push(readIfExists(join(abs, ".env.development")));
+        }
+    }
+    if (baseName) {
+        const provisionedDir = join(dirname(getConfigPath()), "provisioned");
+        if (existsSync(provisionedDir)) {
+            for (const file of readdirSync(provisionedDir)) {
+                if (file.startsWith(`${baseName}.`) && file.endsWith(".env")) {
+                    chunks.push(readIfExists(join(provisionedDir, file)));
+                }
+            }
+        }
+    }
+    return chunks.join("\n");
+}
+function servicesAlreadyAdded(args) {
+    const text = readProjectEnvText(args.projectDir, args.baseName);
+    const added = new Set();
+    if (/(^|\n)(PUBLIC_)?GLITCHTIP_DSN=/m.test(text))
+        added.add("glitchtip");
+    if (/(^|\n)(PUBLIC_)?OPENPANEL_CLIENT_ID=/m.test(text))
+        added.add("openpanel");
+    if (/(^|\n)(NEXT_PUBLIC_|PUBLIC_)?PLAUSIBLE_DOMAIN=/m.test(text))
+        added.add("plausible");
+    if (/(^|\n)RESEND_API_KEY=/m.test(text))
+        added.add("resend");
+    if (/(^|\n)R2(_[A-Z0-9]+)?_ACCESS_KEY_ID=/m.test(text))
+        added.add("s3");
+    if (manifestBucketEntries(args.manifest).some((bucket) => bucket.tokenId))
+        added.add("s3");
+    if (args.manifest?.integrations?.email)
+        added.add("email");
+    if (args.manifest?.integrations?.searchConsole)
+        added.add("search-console");
+    return added;
+}
+function servicesImpossibleForProject(manifest) {
+    const blocked = new Set();
+    if (!manifest)
+        return blocked;
+    if (!manifest.domain) {
+        blocked.add("email");
+        blocked.add("search-console");
+    }
+    if (manifest.surfaces === "server-only")
+        blocked.add("plausible");
+    if (manifest.surfaces === "client-only") {
+        blocked.add("resend");
+        blocked.add("s3");
+    }
+    if (manifestBucketEntries(manifest).length === 0)
+        blocked.add("s3");
+    return blocked;
+}
+function recordProvisionedEvent(ledger, event) {
+    if (event.service === "glitchtip")
+        ledger.record({ kind: "glitchtip", project: event.project });
+    if (event.service === "openpanel")
+        ledger.record({ kind: "openpanel", project: event.project });
+    if (event.service === "plausible")
+        ledger.record({ kind: "plausible", project: event.project });
+    if (event.service === "resend")
+        ledger.record({ kind: "resend", client: event.client });
+    if (event.service === "s3" && event.minted) {
+        ledger.record({
+            kind: "r2Token",
+            tokenId: event.tokenId,
+            accountId: event.accountId,
+            audience: "account",
+        });
+    }
+    if (event.service === "search-console" && event.dnsRecord?.created) {
+        ledger.record({
+            kind: "cloudflareDnsRecord",
+            zoneId: event.dnsRecord.zoneId,
+            recordId: event.dnsRecord.id,
+            name: event.dnsRecord.name,
+            type: event.dnsRecord.type,
+        });
+    }
+    if (event.service === "email") {
+        if (event.destinationCreatedThisRun) {
+            ledger.record({
+                kind: "cloudflareEmailDestination",
+                accountId: event.accountId,
+                destinationId: event.destinationId,
+                email: event.destinationEmail,
+            });
+        }
+        for (const dns of event.dnsRecords) {
+            ledger.record({
+                kind: "cloudflareDnsRecord",
+                zoneId: event.zoneId,
+                recordId: dns.id,
+                name: dns.name,
+                type: dns.type,
+            });
+        }
+        for (const rule of event.rules) {
+            if (!rule.created)
+                continue;
+            ledger.record({
+                kind: "cloudflareEmailRoutingRule",
+                zoneId: event.zoneId,
+                ruleId: rule.id,
+                address: rule.address,
+            });
+        }
+    }
+}
 async function handleAdd() {
     // Positional args are optional — anything missing is prompted for.
     //   hatchkit add                             (fully interactive)
     //   hatchkit add raptor-runner               (prompts for services)
     //   hatchkit add raptor-runner all
     //   hatchkit add raptor-runner glitchtip,resend
-    const positional = args.slice(1).filter((a) => !a.startsWith("--"));
-    let baseName = positional[0];
-    const rawService = positional[1];
     const allServices = [
         "glitchtip",
         "openpanel",
@@ -470,6 +620,24 @@ async function handleAdd() {
         "email",
         "search-console",
     ];
+    const isServiceExpr = (value) => {
+        if (!value)
+            return false;
+        if (value === "all")
+            return true;
+        return value
+            .split(",")
+            .map((s) => s.trim().toLowerCase())
+            .every((s) => allServices.includes(s));
+    };
+    const positional = args.slice(1).filter((a) => !a.startsWith("--"));
+    const inferredProjectDir = inferProjectDir(process.cwd());
+    const inferredManifest = inferredProjectDir ? readManifest(inferredProjectDir) : null;
+    const firstArgIsService = isServiceExpr(positional[0]);
+    let baseName = firstArgIsService
+        ? inferredManifest?.name
+        : (positional[0] ?? inferredManifest?.name);
+    const rawService = firstArgIsService ? positional[0] : positional[1];
     if (!baseName) {
         const { input } = await import("@inquirer/prompts");
         const { validateProjectName } = await import("./utils/validate.js");
@@ -478,37 +646,54 @@ async function handleAdd() {
             validate: validateProjectName,
         });
     }
+    const alreadyAdded = servicesAlreadyAdded({
+        baseName,
+        projectDir: inferredProjectDir,
+        manifest: inferredManifest,
+    });
+    const impossible = servicesImpossibleForProject(inferredManifest);
+    const hiddenServices = new Set([...alreadyAdded, ...impossible]);
+    const addableServices = allServices.filter((service) => !hiddenServices.has(service));
     let services;
     if (!rawService) {
+        if (addableServices.length === 0) {
+            console.log(chalk.green(`  Nothing to add — ${baseName} already has every supported service.`));
+            return;
+        }
         const { multiselect } = await import("./utils/multiselect.js");
+        const serviceChoices = [
+            { name: "GlitchTip (error tracking)", value: "glitchtip", checked: false },
+            { name: "OpenPanel (product analytics)", value: "openpanel", checked: false },
+            { name: "Plausible (web analytics)", value: "plausible", checked: false },
+            { name: "Resend (transactional email)", value: "resend", checked: false },
+            {
+                name: "S3 / R2 (per-bucket scoped credentials from .hatchkit.json)",
+                value: "s3",
+                checked: false,
+            },
+            {
+                name: "Email forwarding (Cloudflare Email Routing — MX/SPF/DMARC + rules)",
+                value: "email",
+                checked: false,
+            },
+            {
+                name: "Google Search Console (DNS verification + domain property)",
+                value: "search-console",
+                checked: false,
+            },
+        ];
         services = await multiselect({
             message: "Which services to add?",
-            choices: [
-                { name: "GlitchTip (error tracking)", value: "glitchtip", checked: true },
-                { name: "OpenPanel (product analytics)", value: "openpanel", checked: true },
-                { name: "Plausible (web analytics)", value: "plausible", checked: false },
-                { name: "Resend (transactional email)", value: "resend", checked: true },
-                {
-                    name: "S3 / R2 (per-bucket scoped credentials from .hatchkit.json)",
-                    value: "s3",
-                    checked: false,
-                },
-                {
-                    name: "Email forwarding (Cloudflare Email Routing — MX/SPF/DMARC + rules)",
-                    value: "email",
-                    checked: false,
-                },
-                {
-                    name: "Google Search Console (DNS verification + domain property)",
-                    value: "search-console",
-                    checked: false,
-                },
-            ],
+            choices: serviceChoices.filter((choice) => addableServices.includes(choice.value)),
             required: true,
         });
     }
     else if (rawService === "all") {
-        services = allServices;
+        services = addableServices;
+        if (services.length === 0) {
+            console.log(chalk.green(`  Nothing to add — ${baseName} already has every supported service.`));
+            return;
+        }
     }
     else {
         const requested = rawService.split(",").map((s) => s.trim().toLowerCase());
@@ -518,7 +703,17 @@ async function handleAdd() {
             console.log(chalk.dim(`  Valid: ${allServices.join(", ")}, or 'all'`));
             process.exit(1);
         }
-        services = requested;
+        const skipped = requested.filter((service) => hiddenServices.has(service));
+        if (skipped.length > 0) {
+            console.log(chalk.red(`  Refusing to add already-present/unavailable service(s): ${skipped.join(", ")}`));
+            console.log(chalk.dim("  Run `hatchkit remove` first if you want Hatchkit to recreate them."));
+            process.exit(1);
+        }
+        services = requested.filter((service) => !hiddenServices.has(service));
+        if (services.length === 0) {
+            console.log(chalk.green(`  Nothing to add — requested service(s) are already present or unavailable.`));
+            return;
+        }
     }
     // Flag parsing:
     //   --no-write                      → never write; print a cache summary only
@@ -573,7 +768,16 @@ async function handleAdd() {
                 : inferProjectDir(needsServer ? resolvePath(serverDirFlag) : undefined),
         };
     }
-    await runProvision({ baseName, services, surfaces, enableDevObs });
+    const ledger = RunLedger.resumeOrStart(baseName);
+    await runProvision({
+        baseName,
+        services,
+        surfaces,
+        enableDevObs,
+        failIfExists: true,
+        onProvisioned: (event) => recordProvisionedEvent(ledger, event),
+    });
+    ledger.complete();
 }
 async function handleProvisionS3() {
     // `hatchkit provision s3` — create the public+private bucket pair
@@ -2021,9 +2225,13 @@ function printHelp(topic) {
                                without the fragment).
 
   ${chalk.bold("DNS:")}
-    ${chalk.cyan("dev-setup init")} auto-upserts a DNS-only A record:
+    ${chalk.cyan("dev-setup init")} auto-upserts a DNS-only A record on a
+    dedicated ${chalk.cyan("local.")} subdomain:
     *.local.<your-domain>  A  <your-tailnet-ip>  (DNS-only)
 
+    Custom ${chalk.cyan("--domain")} values must use that ${chalk.cyan("local.")} prefix so
+    Hatchkit never overwrites a production wildcard such as *.example.com.
+
     If Cloudflare credentials are unavailable, add that record manually.
 
   This feature is fully optional: until you run ${chalk.cyan("dev-setup init")},
@@ -2138,6 +2346,7 @@ function printHelp(topic) {
 
   ${chalk.bold("Usage:")}
     hatchkit add [<project-name>] [<services>] [flags]
+    hatchkit add [<services>] [flags]   ${chalk.dim("(inside a project with .hatchkit.json)")}
 
   ${chalk.bold("What it does:")}
     · GlitchTip / OpenPanel: ${chalk.bold("one project per product")}, events tagged by
@@ -2155,6 +2364,11 @@ function printHelp(topic) {
     · A 0600 cache of every value is saved under
       ${chalk.dim("<config-dir>/provisioned/<project>.*.env")} for recoverability.
       ${chalk.dim("Secret values never hit stdout.")}
+    · The interactive menu only shows services not already present for the
+      current project, starts with nothing selected, and refuses explicit
+      requests that would recreate known resources.
+    · Before creating provider resources, add runs read-only existence probes
+      for the selected services and stops on conflicts so cleanup stays safe.
 
   ${chalk.bold("Surfaces:")}
     hatchkit asks which surfaces your project has. Options:
@@ -2190,6 +2404,7 @@ function printHelp(topic) {
 
   ${chalk.bold("Examples:")}
     hatchkit add
+    hatchkit add search-console
     hatchkit add raptor-runner
     hatchkit add raptor-runner all --enable-dev-obs
     hatchkit add raptor-runner glitchtip,resend --no-write
@@ -2513,13 +2728,13 @@ function printHelp(topic) {
     }
     if (topic === "assets") {
         console.log(`
-  ${chalk.bold("hatchkit assets")} — move bytes between local MinIO and prod buckets
+  ${chalk.bold("hatchkit assets")} — move bytes between local S3 and prod buckets
 
   ${chalk.bold("Subcommands:")}
-    assets seed     [--from <dir>]                Local dir → local MinIO bucket.
+    assets seed     [--from <dir>]                Local dir → local S3 bucket.
                                                   Defaults to ./seed/assets.
-    assets push     [--bucket assets|state]       Local MinIO → prod bucket.
-    assets pull     [--bucket assets|state]       Prod bucket → local MinIO.
+    assets push     [--bucket assets|state]       Local S3 → prod bucket.
+    assets pull     [--bucket assets|state]       Prod bucket → local S3.
                                                   Caution: prod data may include PII.
     assets migrate  --from-endpoint=URL           External S3 → prod bucket.
                     --from-bucket=NAME            The adoption escape hatch — copy
@@ -2546,7 +2761,7 @@ function printHelp(topic) {
     the env doesn't carry them (R2's URL-driven assets bucket).
 
   ${chalk.bold("Examples:")}
-    hatchkit assets seed                                # ./seed/assets/ → local MinIO
+    hatchkit assets seed                                # ./seed/assets/ → local S3
     hatchkit assets push --dry-run                      # see what would ship to prod
     hatchkit assets push                                # actually ship it
     hatchkit assets migrate --from-endpoint https://nyc3.digitaloceanspaces.com \\
@@ -2587,7 +2802,7 @@ function printHelp(topic) {
     update          Add features to an already-scaffolded project (run in project dir)
     server add      Retrofit a server into a client-only project
     add             Create GlitchTip / OpenPanel / Plausible / Resend clients for an existing project
-    assets          Move bytes between local MinIO and prod buckets (seed/push/pull/migrate)
+    assets          Move bytes between local S3 and prod buckets (seed/push/pull/migrate)
     remove          Delete the -dev/-prod clients created by 'add' (inverse of add)
     destroy         Roll back everything ${chalk.cyan("hatchkit create")} did for a project
     rename-domain   Move a scaffolded project to a new domain (rewrites tfvars/env/manifest)