infra-kit 0.1.114 → 0.1.115

package/src/commands/init/migrate-config.ts

@@ -1,6 +1,6 @@
 import fs from 'node:fs/promises'
-import os from 'node:os'
 import path from 'node:path'
+import { pathToFileURL } from 'node:url'
 import yaml from 'yaml'
 import { z } from 'zod'
 
@@ -11,6 +11,9 @@ import {
   resetInfraKitConfigCache,
 } from 'src/lib/infra-kit-config'
 import { logger } from 'src/lib/logger'
+import { fileExists, tildify } from 'src/lib/path-display'
+import { getFactoryConfigPath } from 'src/lib/vendor/factory-config'
+import { factoryConfigSchema } from 'src/lib/vendor/factory-config-schema'
 
 interface MigrateLayer {
   label: string
@@ -22,35 +25,6 @@ interface MigrateLayer {
   schema: z.ZodType
 }
 
-/**
- * Replace the user's home prefix with `~` so logged paths stay short.
- *
- * @example
- * // os.homedir() === '/Users/arthur'
- * tildify('/Users/arthur/.infra-kit/config.yml') // => '~/.infra-kit/config.yml'
- */
-const tildify = (filePath: string): string => {
-  const home = os.homedir()
-
-  return filePath.startsWith(home) ? `~${filePath.slice(home.length)}` : filePath
-}
-
-/**
- * `fs.access` reduced to a boolean, swallowing ENOENT.
- *
- * @example
- * await fileExists('/etc/hosts') // => true
- */
-const fileExists = async (filePath: string): Promise<boolean> => {
-  try {
-    await fs.access(filePath)
-
-    return true
-  } catch {
-    return false
-  }
-}
-
 /**
  * Swap a resolved `.json` config path back to its legacy `.yml` sibling.
  *
@@ -87,8 +61,13 @@ export const migrateLegacyConfig = async (): Promise<void> => {
   const layers: MigrateLayer[] = [
     { label: 'infra-kit.json', yml: legacyYmlPath(paths.main), json: paths.main, schema: infraKitConfigSchema },
     {
-      label: '~/.infra-kit/config.json',
-      yml: legacyYmlPath(paths.userGlobal),
+      label: '~/.infra-kit/infra-kit.json',
+      // The user-global JSON filename changed (config.json → infra-kit.json), but
+      // the legacy YAML it converts from kept the old `config.yml` name. Pin it
+      // here so it does not drift to `infra-kit.yml` via legacyYmlPath(); the
+      // main/userProject layers keep deriving their `.yml` sibling normally
+      // because their `.json` filename never changed.
+      yml: path.join(path.dirname(paths.userGlobal), 'config.yml'),
       json: paths.userGlobal,
       schema: infraKitOverrideConfigSchema,
     },
@@ -145,6 +124,155 @@ export const migrateLegacyConfig = async (): Promise<void> => {
   }
 }
 
+/**
+ * Rename the user-global config from the legacy `config.json` filename to the
+ * canonical `infra-kit.json` (and its `config.example.jsonc` reference to
+ * `infra-kit.example.jsonc`), so every merge-chain layer shares one filename.
+ * Run by `infra-kit init` before the user-global config is seeded, so a user's
+ * existing overrides are carried forward instead of being shadowed by a fresh
+ * `{}` stub written under the new name.
+ *
+ * Best-effort and non-fatal per file: a missing source is skipped silently
+ * (idempotent — nothing to rename on a second run), and an already-present
+ * target is never overwritten (the stale `config.json` is left in place so no
+ * bytes are lost — the user reconciles it manually). Resets the config cache
+ * when anything was renamed.
+ *
+ * @example
+ * await migrateUserGlobalConfigFilename()
+ * // ✓ Renamed ~/.infra-kit/config.json → ~/.infra-kit/infra-kit.json
+ * // (no output when there is nothing legacy to rename)
+ */
+export const migrateUserGlobalConfigFilename = async (): Promise<void> => {
+  let paths: Awaited<ReturnType<typeof getInfraKitConfigPaths>>
+
+  try {
+    paths = await getInfraKitConfigPaths()
+  } catch {
+    // No resolvable project (e.g. init run outside a repo) — nothing to rename.
+    return
+  }
+
+  const dir = path.dirname(paths.userGlobal)
+  // The config.json → infra-kit.json rename carries forward a user's REAL config and
+  // is load-bearing. The example-file rename is now largely redundant: seedUserGlobalConfig
+  // rewrites infra-kit.example.jsonc unconditionally moments later, so a renamed legacy
+  // example is overwritten anyway (and if infra-kit.example.jsonc already exists, the
+  // no-overwrite guard simply leaves an orphaned config.example.jsonc behind — harmless).
+  const pairs: { from: string; to: string }[] = [
+    { from: path.join(dir, 'config.json'), to: paths.userGlobal },
+    { from: path.join(dir, 'config.example.jsonc'), to: path.join(dir, 'infra-kit.example.jsonc') },
+  ]
+
+  let renamed = 0
+
+  for (const { from, to } of pairs) {
+    const [fromExists, toExists] = await Promise.all([fileExists(from), fileExists(to)])
+
+    if (!fromExists) continue
+
+    if (toExists) {
+      logger.info(`⚠ Skipped ${tildify(from)} — ${tildify(to)} already exists (remove the stale file manually)`)
+
+      continue
+    }
+
+    // Same-directory rename is atomic; per-file try/catch keeps a TOCTOU race or
+    // I/O error (EACCES, read-only FS) non-fatal so one bad file never aborts init.
+    try {
+      await fs.mkdir(path.dirname(to), { recursive: true })
+      await fs.rename(from, to)
+
+      logger.info(`✓ Renamed ${tildify(from)} → ${tildify(to)}`)
+      renamed++
+    } catch (err) {
+      logger.info(`⚠ Skipped ${tildify(from)} — ${(err as Error).message}`)
+    }
+  }
+
+  if (renamed > 0) {
+    resetInfraKitConfigCache()
+  }
+}
+
+/**
+ * Convert a legacy machine-local factory config from executable TypeScript
+ * (`~/.infra-kit/vendor.config.ts`) to static JSON (`~/.infra-kit/vendor.json`) as
+ * part of `infra-kit init`. The factory config used to be a `.ts` module loaded via
+ * dynamic `import()`; it is now strict JSON read with `JSON.parse`. This one-shot
+ * migration dynamic-imports the old `.ts` (the ONLY remaining dynamic import of the
+ * factory file), resolves a factory-function or object default export, validates it,
+ * writes `vendor.json`, and removes the old `.ts`.
+ *
+ * Best-effort, non-fatal, idempotent (no old `.ts` → no-op), and never overwrites an
+ * existing `vendor.json`. When the old export was a FUNCTION, its resolved output is
+ * frozen into static JSON — so a DISTINCT warning is emitted (not a plain
+ * `✓ Migrated`) because dynamic re-evaluation (env vars, directory globbing) no
+ * longer happens. No `resetInfraKitConfigCache()` — the factory loader shares no
+ * cache with the `infra-kit.json` layers.
+ *
+ * @example
+ * await migrateFactoryConfigToJson()
+ * // ✓ Migrated ~/.infra-kit/vendor.config.ts → ~/.infra-kit/vendor.json
+ * // (no output when there is nothing legacy to convert)
+ */
+export const migrateFactoryConfigToJson = async (): Promise<void> => {
+  const newJson = getFactoryConfigPath() // ~/.infra-kit/vendor.json
+  const dir = path.dirname(newJson)
+  const oldTs = path.join(dir, 'vendor.config.ts')
+
+  const [oldExists, newExists] = await Promise.all([fileExists(oldTs), fileExists(newJson)])
+
+  if (!oldExists) return // idempotent: nothing to migrate (incl. after a prior successful run)
+
+  if (newExists) {
+    logger.info(
+      `⚠ Skipped ${tildify(oldTs)} — ${tildify(newJson)} already exists (remove the stale vendor.config.ts manually)`,
+    )
+
+    return
+  }
+
+  // The factory `.ts` is executable; read it once via dynamic import (Node native
+  // type stripping) with an mtime cache-bust, resolving a factory-function or object
+  // default export. Per-file try/catch keeps a malformed module or I/O error
+  // non-fatal so one bad file never aborts init.
+  try {
+    const stat = await fs.stat(oldTs)
+    const moduleUrl = `${pathToFileURL(oldTs).href}?mtime=${Number(stat.mtimeMs)}`
+    const imported = (await import(moduleUrl)) as { default?: unknown }
+    const raw = imported.default
+    const wasFunction = typeof raw === 'function'
+    const resolved = wasFunction ? await (raw as () => unknown)() : raw
+
+    const result = factoryConfigSchema.safeParse(resolved)
+
+    if (!result.success) {
+      logger.info(`⚠ Skipped ${tildify(oldTs)} — invalid factory config: ${z.prettifyError(result.error)}`)
+
+      return // leave the old .ts in place so the user can fix and re-run; do not delete unconverted data
+    }
+
+    await fs.mkdir(dir, { recursive: true })
+    await fs.writeFile(newJson, `${JSON.stringify(result.data, null, 2)}\n`, 'utf-8')
+    await fs.rm(oldTs, { force: true })
+
+    if (wasFunction) {
+      // The old export was a function: its values were resolved ONCE and frozen into
+      // static JSON. Disclose the lost dynamism instead of reporting a clean success.
+      logger.info(
+        `⚠ Migrated ${tildify(oldTs)} → ${tildify(newJson)} as a STATIC SNAPSHOT — the old file was a ` +
+          `function (export default () => ({...})); computed values (env vars, directory globbing) were ` +
+          `frozen at their current values and no longer re-evaluate. Edit ${tildify(newJson)} directly to change them.`,
+      )
+    } else {
+      logger.info(`✓ Migrated ${tildify(oldTs)} → ${tildify(newJson)}`)
+    }
+  } catch (err) {
+    logger.info(`⚠ Skipped ${tildify(oldTs)} — ${(err as Error).message}`)
+  }
+}
+
 /**
  * Surgically strip the removed `ide.config.mode` field from a parsed config
  * object (single-provider or array form). The windows-removal made `mode` a dead

package/src/commands/vendor-check/__tests__/runtime-isolation.test.ts

@@ -0,0 +1,71 @@
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+import { writeManifest } from 'src/lib/vendor'
+import { execMock, zxModuleMock } from 'src/lib/vendor/__tests__/zx-mock'
+
+import { vendorCheck } from '../vendor-check'
+
+// Spy on every subprocess-spawning and config-loading collaborator. The
+// invariant under test is RUNTIME: invoking `vendor check` must spawn zero
+// subprocess and load zero vendor.config.ts — regardless of what the single
+// bundled CLI artifact happens to contain.
+vi.mock('zx', () => {
+  return zxModuleMock()
+})
+
+const loadVendorConfigMock = vi.fn()
+
+vi.mock('src/lib/vendor/config', async (importActual) => {
+  const actual = await importActual<typeof import('src/lib/vendor/config')>()
+
+  return { ...actual, loadVendorConfig: loadVendorConfigMock }
+})
+
+const loadFactoryConfigMock = vi.fn()
+
+vi.mock('src/lib/vendor/factory-config', async (importActual) => {
+  const actual = await importActual<typeof import('src/lib/vendor/factory-config')>()
+
+  return { ...actual, loadFactoryConfig: loadFactoryConfigMock }
+})
+
+let root: string
+let vendorRoot: string
+
+beforeEach(() => {
+  vi.clearAllMocks()
+  root = fs.mkdtempSync(path.join(os.tmpdir(), 'vendor-isolation-test-'))
+  vendorRoot = path.join(root, 'vendor')
+  fs.mkdirSync(path.join(vendorRoot, 'configs'), { recursive: true })
+  fs.writeFileSync(path.join(vendorRoot, 'configs', 'a.js'), 'aaa')
+  writeManifest(vendorRoot, { source: 's', commit: 'c' })
+})
+
+afterEach(() => {
+  fs.rmSync(root, { recursive: true, force: true })
+})
+
+describe('vendor check runtime isolation', () => {
+  it('spawns no subprocess and loads no vendor.config.ts on a clean check', async () => {
+    const { structuredContent } = await vendorCheck({ cwd: root })
+
+    expect(structuredContent.ok).toBe(true)
+    expect(execMock).not.toHaveBeenCalled()
+    expect(loadVendorConfigMock).not.toHaveBeenCalled()
+    expect(loadFactoryConfigMock).not.toHaveBeenCalled()
+  })
+
+  it('spawns no subprocess even when reporting drift', async () => {
+    fs.writeFileSync(path.join(vendorRoot, 'configs', 'a.js'), 'CHANGED')
+
+    const { structuredContent } = await vendorCheck({ cwd: root })
+
+    expect(structuredContent.ok).toBe(false)
+    expect(execMock).not.toHaveBeenCalled()
+    expect(loadVendorConfigMock).not.toHaveBeenCalled()
+    expect(loadFactoryConfigMock).not.toHaveBeenCalled()
+  })
+})

package/src/commands/vendor-check/__tests__/vendor-check.test.ts

@@ -0,0 +1,87 @@
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import { afterEach, beforeEach, describe, expect, it } from 'vitest'
+
+import { writeManifest } from 'src/lib/vendor'
+
+import { vendorCheck } from '../vendor-check'
+
+let root: string
+let vendorRoot: string
+
+const writeVendor = (rel: string, content: string): void => {
+  const full = path.join(vendorRoot, rel)
+
+  fs.mkdirSync(path.dirname(full), { recursive: true })
+  fs.writeFileSync(full, content, 'utf8')
+}
+
+beforeEach(() => {
+  root = fs.mkdtempSync(path.join(os.tmpdir(), 'vendor-check-test-'))
+  vendorRoot = path.join(root, 'vendor')
+})
+
+afterEach(() => {
+  fs.rmSync(root, { recursive: true, force: true })
+})
+
+describe('vendorCheck exit-code matrix', () => {
+  it('missing vendor/ → ok (skip)', async () => {
+    const { structuredContent } = await vendorCheck({ cwd: root })
+
+    expect(structuredContent.status).toBe('skipped')
+    expect(structuredContent.ok).toBe(true)
+  })
+
+  it('missing manifest → not ok', async () => {
+    writeVendor('a.js', 'a')
+    const { structuredContent } = await vendorCheck({ cwd: root })
+
+    expect(structuredContent.status).toBe('missing-manifest')
+    expect(structuredContent.ok).toBe(false)
+  })
+
+  it('clean tree → ok', async () => {
+    writeVendor('configs/a.js', 'a')
+    writeVendor('packages/p/b.ts', 'b')
+    writeManifest(vendorRoot, { source: 's', commit: 'c' })
+
+    const { structuredContent } = await vendorCheck({ cwd: root })
+
+    expect(structuredContent.status).toBe('clean')
+    expect(structuredContent.ok).toBe(true)
+    expect(structuredContent.fileCount).toBe(2)
+  })
+
+  it('drifted tree → not ok with categorized paths', async () => {
+    writeVendor('a.js', 'a')
+    writeVendor('b.js', 'b')
+    writeManifest(vendorRoot, { source: 's', commit: 'c' })
+
+    fs.writeFileSync(path.join(vendorRoot, 'a.js'), 'CHANGED')
+    writeVendor('c.js', 'c')
+    fs.rmSync(path.join(vendorRoot, 'b.js'))
+
+    const { structuredContent } = await vendorCheck({ cwd: root })
+
+    expect(structuredContent.status).toBe('drift')
+    expect(structuredContent.ok).toBe(false)
+    expect(structuredContent.modified).toEqual(['a.js'])
+    expect(structuredContent.added).toEqual(['c.js'])
+    expect(structuredContent.removed).toEqual(['b.js'])
+  })
+
+  it('unknown future schemaVersion → not ok (fail-closed)', async () => {
+    writeVendor('a.js', 'a')
+    const manifest = writeManifest(vendorRoot, { source: 's', commit: 'c' })
+    const bumped = { ...manifest, schemaVersion: (manifest.schemaVersion ?? 1) + 1 }
+
+    fs.writeFileSync(path.join(vendorRoot, '.sync-manifest.json'), JSON.stringify(bumped))
+
+    const { structuredContent } = await vendorCheck({ cwd: root })
+
+    expect(structuredContent.status).toBe('unknown-schema')
+    expect(structuredContent.ok).toBe(false)
+  })
+})

package/src/commands/vendor-check/index.ts

@@ -0,0 +1 @@
+export { vendorCheck, vendorCheckMcpTool } from './vendor-check'

package/src/commands/vendor-check/vendor-check.ts

@@ -0,0 +1,127 @@
+import { existsSync } from 'node:fs'
+import path from 'node:path'
+import process from 'node:process'
+import { z } from 'zod'
+
+import { getProjectRoot } from 'src/lib/git-utils'
+import { logger } from 'src/lib/logger'
+import { MANIFEST_FILE, VENDOR_DIR, compareToManifest, isUnknownSchema, readManifest } from 'src/lib/vendor'
+import { defineMcpTool, textContent } from 'src/types'
+
+/** Max drifted paths to print per category before truncating. */
+const MAX_REPORTED = 30
+
+type VendorCheckStatus = 'clean' | 'drift' | 'skipped' | 'missing-manifest' | 'unknown-schema'
+
+interface VendorCheckOptions {
+  /** Repo root to check. Defaults to the git toplevel. */
+  cwd?: string
+}
+
+const report = (label: string, list: string[]): void => {
+  if (list.length === 0) {
+    return
+  }
+
+  logger.info(`\n${label} (${list.length}):`)
+
+  for (const rel of list.slice(0, MAX_REPORTED)) {
+    logger.info(`  ${rel}`)
+  }
+
+  if (list.length > MAX_REPORTED) {
+    logger.info(`  …and ${list.length - MAX_REPORTED} more`)
+  }
+}
+
+/**
+ * Verify that files under `vendor/` still match the checksums recorded in
+ * `vendor/.sync-manifest.json`. Config-free and self-contained (no source repo,
+ * no `vendor.config.ts`, no rsync) so it runs in any consumer's CI. Read-only —
+ * never calls `process.exit`; the CLI action maps `structuredContent.ok` to the
+ * exit code, and the MCP tool reuses the same handler.
+ *
+ * Exit-code contract (preserved from the legacy `vendor-check.mjs`):
+ *   clean → ok; drift → not ok; missing `vendor/` → ok (skip);
+ *   missing manifest → not ok; unknown (newer) schemaVersion → not ok (fail-closed).
+ *
+ * @example
+ * await vendorCheck()                 // checks the current repo's vendor/
+ * await vendorCheck({ cwd: '/repo' }) // checks a specific root (tests)
+ */
+export const vendorCheck = async (options: VendorCheckOptions = {}) => {
+  const root = options.cwd ?? (await getProjectRoot())
+  const vendorRoot = path.join(root, VENDOR_DIR)
+
+  const base = { modified: [] as string[], added: [] as string[], removed: [] as string[], fileCount: 0 }
+
+  if (!existsSync(vendorRoot)) {
+    logger.info(`ℹ️  No ${VENDOR_DIR}/ folder found — nothing to check.`)
+    const structuredContent = { status: 'skipped' as VendorCheckStatus, ok: true, ...base }
+
+    return { content: textContent(JSON.stringify(structuredContent, null, 2)), structuredContent }
+  }
+
+  if (!existsSync(path.join(vendorRoot, MANIFEST_FILE))) {
+    logger.error(`❌ Missing ${VENDOR_DIR}/${MANIFEST_FILE}. Re-run the vendor sync to generate it.`)
+    const structuredContent = { status: 'missing-manifest' as VendorCheckStatus, ok: false, ...base }
+
+    return { content: textContent(JSON.stringify(structuredContent, null, 2)), structuredContent }
+  }
+
+  const manifest = readManifest(vendorRoot)
+
+  if (isUnknownSchema(manifest)) {
+    logger.error(
+      `❌ ${VENDOR_DIR}/${MANIFEST_FILE} has a newer schemaVersion (${String(manifest.schemaVersion)}) than this CLI supports. Upgrade infra-kit.`,
+    )
+    const structuredContent = { status: 'unknown-schema' as VendorCheckStatus, ok: false, ...base }
+
+    return { content: textContent(JSON.stringify(structuredContent, null, 2)), structuredContent }
+  }
+
+  const { modified, added, removed } = compareToManifest(vendorRoot, manifest)
+  const drifted = modified.length > 0 || added.length > 0 || removed.length > 0
+
+  if (drifted) {
+    logger.error(`❌ ${VENDOR_DIR}/ has drifted from ${VENDOR_DIR}/${MANIFEST_FILE}.`)
+    logger.error('   These files are mirrored from the source repo — edit them upstream, not here.')
+    report('Modified', modified)
+    report('Added (not in manifest)', added)
+    report('Removed (in manifest, now missing)', removed)
+  } else {
+    logger.info(`✅ ${VENDOR_DIR}/ matches manifest (${manifest.fileCount} files).`)
+  }
+
+  const structuredContent = {
+    status: (drifted ? 'drift' : 'clean') as VendorCheckStatus,
+    ok: !drifted,
+    fileCount: manifest.fileCount,
+    modified,
+    added,
+    removed,
+  }
+
+  return { content: textContent(JSON.stringify(structuredContent, null, 2)), structuredContent }
+}
+
+const vendorCheckOutputSchema = {
+  status: z.enum(['clean', 'drift', 'skipped', 'missing-manifest', 'unknown-schema']),
+  ok: z.boolean().describe('Whether the vendor tree matches its manifest (false → CI should fail)'),
+  fileCount: z.number(),
+  modified: z.array(z.string()),
+  added: z.array(z.string()),
+  removed: z.array(z.string()),
+}
+
+// MCP Tool Registration (read-only; safe to expose).
+export const vendorCheckMcpTool = defineMcpTool({
+  name: 'vendor-check',
+  description:
+    'Verify that files under vendor/ match the checksums in vendor/.sync-manifest.json. Self-contained (no source repo or config needed). Returns ok=false on drift, missing manifest, or an unknown future schemaVersion; ok=true when clean or when no vendor/ folder exists.',
+  inputSchema: {},
+  outputSchema: vendorCheckOutputSchema,
+  handler: () => {
+    return vendorCheck({ cwd: process.cwd() })
+  },
+})

package/src/commands/vendor-config/__tests__/vendor-config.test.ts

@@ -0,0 +1,103 @@
+import fs from 'node:fs'
+import os from 'node:os'
+import path from 'node:path'
+import process from 'node:process'
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+import { getFactoryConfigPath } from 'src/lib/vendor/factory-config'
+
+import { vendorConfig } from '../vendor-config'
+
+let home: string
+let source: string
+let factoryPath: string
+
+const writeFactory = (workspaceDir: string, targets: string[]): void => {
+  fs.mkdirSync(path.dirname(factoryPath), { recursive: true })
+  fs.writeFileSync(factoryPath, JSON.stringify({ workspaceDir, targets }), 'utf8')
+}
+
+beforeEach(() => {
+  home = fs.mkdtempSync(path.join(os.tmpdir(), 'vendor-config-home-'))
+  source = fs.mkdtempSync(path.join(os.tmpdir(), 'vendor-config-src-'))
+  vi.spyOn(os, 'homedir').mockReturnValue(home)
+  factoryPath = getFactoryConfigPath()
+  process.exitCode = 0
+})
+
+afterEach(() => {
+  vi.restoreAllMocks()
+  fs.rmSync(home, { recursive: true, force: true })
+  fs.rmSync(source, { recursive: true, force: true })
+  process.exitCode = 0
+})
+
+describe('vendorConfig (print)', () => {
+  it('exits non-zero when the factory config is absent', async () => {
+    await vendorConfig()
+
+    expect(process.exitCode).toBe(1)
+  })
+
+  it('exits zero when workspaceDir and every target are reachable', async () => {
+    const workspaceDir = path.join(home, 'projects')
+
+    fs.mkdirSync(path.join(workspaceDir, 'repo-a'), { recursive: true })
+    writeFactory(workspaceDir, ['repo-a'])
+
+    await vendorConfig()
+
+    expect(process.exitCode).toBe(0)
+  })
+
+  it('exits non-zero when a target is missing', async () => {
+    const workspaceDir = path.join(home, 'projects')
+
+    fs.mkdirSync(workspaceDir, { recursive: true })
+    writeFactory(workspaceDir, ['missing-repo'])
+
+    await vendorConfig()
+
+    expect(process.exitCode).toBe(1)
+  })
+})
+
+describe('vendorConfig --init', () => {
+  it('scaffolds the factory config as strict JSON with a placeholder workspaceDir', async () => {
+    await vendorConfig({ init: true, cwd: source })
+
+    const written = fs.readFileSync(factoryPath, 'utf8')
+    const parsed = JSON.parse(written)
+
+    // Strict JSON — no executable export, no `infra-kit` import.
+    expect(written).not.toContain('export default')
+    expect(written).not.toContain(`from 'infra-kit'`)
+    expect(parsed.workspaceDir).toBe('~/projects')
+  })
+
+  it('seeds targets from a legacy source vendor.config.ts', async () => {
+    // The SOURCE config stays TypeScript (only the machine-local factory file moved to JSON).
+    fs.writeFileSync(
+      path.join(source, 'vendor.config.ts'),
+      `export default { targets: ['travelist-monorepo', 'hulyo-monorepo'], copy: [] }`,
+      'utf8',
+    )
+
+    await vendorConfig({ init: true, cwd: source })
+
+    const parsed = JSON.parse(fs.readFileSync(factoryPath, 'utf8'))
+
+    expect(parsed.targets).toEqual(['travelist-monorepo', 'hulyo-monorepo'])
+  })
+
+  it('leaves an existing factory config untouched', async () => {
+    const workspaceDir = path.join(home, 'projects')
+
+    writeFactory(workspaceDir, ['original-repo'])
+    const before = fs.readFileSync(factoryPath, 'utf8')
+
+    await vendorConfig({ init: true, cwd: source })
+
+    expect(fs.readFileSync(factoryPath, 'utf8')).toBe(before)
+  })
+})

package/src/commands/vendor-config/index.ts

@@ -0,0 +1 @@
+export { vendorConfig } from './vendor-config'