infra-kit 0.1.134 → 0.3.1

package/dist/chunk-LTKR3F4N.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/release-slug/release-slug.ts"],
-  "sourcesContent": ["/**\n * Shared, dependency-light release-slug helper.\n *\n * Extracted from `lib/vite/vite.ts` so BOTH the published `infra-kit/vite` helper\n * (which re-exports it) and the dev-server's dev-context fragment writer derive the\n * `<release>` hostname segment from ONE implementation \u2014 the recorded slug and the\n * helper-computed slug can never drift. Pure (regex only, no imports) so importing it\n * into the lightweight `infra-kit/vite` bundle stays cheap.\n */\n\n/**\n * Slugify an arbitrary string into a single DNS label: lowercase, collapse every\n * non-alphanumeric run to `-`, and drop leading/trailing separators. Returns `''`\n * when the input carries no alphanumeric run (the caller must treat that as \"no label\").\n *\n * portless rejects any hostname outside `[a-z0-9.-]`, so every segment fed into a\n * `<release>.<packageName>.localhost` alias must pass through here. A scoped npm name\n * (`@hulyo/client-ui`) is the motivating case: registering it raw fails with\n * `Invalid hostname`, and because the driver swallows that into a best-effort `false`,\n * the whole hero-URL path degrades silently to `localhost:<port>`.\n *\n * Distinct from {@link slugifyRelease}: this does NOT strip a git-flow prefix, so a\n * package legitimately named `fix-utils` keeps its `fix-` prefix.\n *\n * @example\n * slugifyHostLabel('@hulyo/client-ui') // => 'hulyo-client-ui'\n * slugifyHostLabel('backend-api')      // => 'backend-api'\n */\nexport const slugifyHostLabel = (label: string): string => {\n  // Collect the alphanumeric runs and join with `-`. Doing it this way (rather\n  // than collapse-then-trim) is linear and sidesteps a super-linear trim regex,\n  // while inherently dropping any leading/trailing separators.\n  const runs = label.toLowerCase().match(/[a-z0-9]+/g)\n\n  return runs ? runs.join('-') : ''\n}\n\n/**\n * Slugify a git branch into a `<release>` token: strip a leading git-flow prefix\n * (`feature/`, `release/`, \u2026), then reduce the remainder to a single DNS label.\n *\n * @example\n * slugifyRelease('release/2.4')     // => '2-4'\n * slugifyRelease('feature/HUL-123') // => 'hul-123'\n */\nexport const slugifyRelease = (branch: string): string => {\n  return slugifyHostLabel(branch.replace(/^(?:feature|feat|release|hotfix|bugfix|fix|chore)\\//i, ''))\n}\n\n/**\n * The `<release>` label used when no git branch resolves (outside a repo, or a branch that slugifies to\n * nothing). Both the dev-server's alias writer and `infra-kit/vite`'s template interpolation fall back\n * to this SAME constant \u2014 a divergence here would emit a hostname no alias backs.\n */\nexport const DEFAULT_RELEASE_SLUG = 'local'\n"],
-  "mappings": "AA4BO,IAAMA,EAAoBC,GAA0B,CAIzD,IAAMC,EAAOD,EAAM,YAAY,EAAE,MAAM,YAAY,EAEnD,OAAOC,EAAOA,EAAK,KAAK,GAAG,EAAI,EACjC,EAUaC,EAAkBC,GACtBJ,EAAiBI,EAAO,QAAQ,uDAAwD,EAAE,CAAC,EAQvFC,EAAuB",
-  "names": ["slugifyHostLabel", "label", "runs", "slugifyRelease", "branch", "DEFAULT_RELEASE_SLUG"]
-}

package/dist/chunk-TFHVQOVF.js

@@ -1,4 +0,0 @@
-import{v as i}from"./chunk-3F7XYJWY.js";var s=()=>{let n="",r=[],o=!1;return{start(t){n=t,r=[],o=!1},setInteractive(){o=!0},addOption(t,a){r.push({flag:t,value:a})},formatOptions(){return r.map(t=>typeof t.value=="boolean"?t.value?t.flag:"":Array.isArray(t.value)?`${t.flag} "${t.value.join(", ")}"`:`${t.flag} "${t.value}"`).filter(Boolean).join(" ")},snapshot(){return r.length===0?null:{formattedOptions:this.formatOptions()}},print(){!o||r.length===0||!n||i.info(`\u{1F4DF} Equivalent command: 
-pnpm exec infra-kit ${n} ${this.formatOptions()}
-`)},reset(){n="",r=[],o=!1}}},e=s();import f from"@inquirer/confirm";import l from"node:process";var m=async(n,r)=>{let o=n?!0:await f({message:r});n||e.setInteractive(),o||(i.info("Operation cancelled. Exiting..."),l.exit(0))};export{e as a,m as b};
-//# sourceMappingURL=chunk-TFHVQOVF.js.map

package/dist/chunk-TFHVQOVF.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/command-echo/command-echo.ts", "../src/lib/command-echo/confirm-or-exit.ts"],
-  "sourcesContent": ["import { logger } from 'src/lib/logger'\n\ninterface CommandOption {\n  flag: string\n  value: string | string[] | boolean\n}\n\nconst createCommandEcho = () => {\n  let cliPath = ''\n  let options: CommandOption[] = []\n  let isInteractive = false\n\n  return {\n    /**\n     * Bind the echo to the command about to run, and clear the previous one's recording.\n     *\n     * `cliPath` must be the argv Commander actually parsed (`release create`), which is why the ONLY\n     * caller is program.ts's `preAction` hook, feeding it `commandPath(actionCommand)`. Commands used to\n     * name themselves here, and that is precisely how the printed line rotted: they passed the flat\n     * `release-create`, which stopped being a command the day the flat aliases were dropped, so the\n     * \"equivalent command\" we told the user to retype no longer parsed. Commander is the only thing that\n     * knows the real path, so it is the only thing allowed to say it.\n     */\n    start(path: string): void {\n      cliPath = path\n      options = []\n      isInteractive = false\n    },\n\n    /**\n     * Mark that the command had interactive input (prompts)\n     * Call this once when ANY prompt happens\n     */\n    setInteractive(): void {\n      isInteractive = true\n    },\n\n    /**\n     * Track an option selection\n     * @param flag The CLI flag (e.g., \"--versions\")\n     * @param value The selected value\n     */\n    addOption(flag: string, value: string | string[] | boolean): void {\n      options.push({ flag, value })\n    },\n\n    /**\n     * Format the tracked options into a replayable flag string (empty when none).\n     */\n    formatOptions(): string {\n      return options\n        .map((opt) => {\n          if (typeof opt.value === 'boolean') {\n            return opt.value ? opt.flag : ''\n          }\n\n          if (Array.isArray(opt.value)) {\n            return `${opt.flag} \"${opt.value.join(', ')}\"`\n          }\n\n          return `${opt.flag} \"${opt.value}\"`\n        })\n        .filter(Boolean)\n        .join(' ')\n    },\n\n    /**\n     * The recorded interactive flags for the session shell's report side channel, so the transcript's\n     * equivalent line carries the resolved options (`--versions \"1.2.5\"`), not just the bare command.\n     * `null` when nothing was recorded \u2014 the caller then falls back to the bare spawned argv.\n     */\n    snapshot(): { formattedOptions: string } | null {\n      if (options.length === 0) {\n        return null\n      }\n\n      return { formattedOptions: this.formatOptions() }\n    },\n\n    /**\n     * Print the equivalent CLI command if there was interactive input.\n     *\n     * Silent without a bound `cliPath`: the only caller that binds one is Commander's `preAction`, so an\n     * unbound echo means the command ran off the CLI (an MCP tool), where a `pnpm exec` line would be\n     * nonsense. Printing a path-less `pnpm exec infra-kit --yes` would be worse than printing nothing.\n     */\n    print(): void {\n      if (!isInteractive || options.length === 0 || !cliPath) {\n        return\n      }\n\n      logger.info(`\uD83D\uDCDF Equivalent command: \\npnpm exec infra-kit ${cliPath} ${this.formatOptions()}\\n`)\n    },\n\n    /**\n     * Reset state (useful for testing)\n     */\n    reset(): void {\n      cliPath = ''\n      options = []\n      isInteractive = false\n    },\n  }\n}\n\n// Singleton instance (same pattern as logger)\nexport const commandEcho = createCommandEcho()\n", "import confirm from '@inquirer/confirm'\nimport process from 'node:process'\n\nimport { logger } from 'src/lib/logger'\n\nimport { commandEcho } from './command-echo'\n\n/**\n * Shared interactive-confirmation gate for mutating commands.\n *\n * When `confirmedCommand` is truthy (CLI `--yes` or an MCP call, which always\n * injects `confirmedCommand: true`) the prompt is skipped and execution\n * proceeds. Otherwise it prompts the user, marks the echo as interactive, and\n * exits cleanly if the user declines.\n *\n * The `process.exit(0)` only runs on the interactive-decline path, which is\n * unreachable under MCP \u2014 so this stays safe for the long-lived MCP server.\n *\n * Callers remain responsible for their own `commandEcho.addOption('--yes', \u2026)`\n * bookkeeping, which varies between commands.\n */\nexport const confirmOrExit = async (confirmedCommand: boolean | undefined, message: string): Promise<void> => {\n  const answer = confirmedCommand ? true : await confirm({ message })\n\n  if (!confirmedCommand) {\n    commandEcho.setInteractive()\n  }\n\n  if (!answer) {\n    logger.info('Operation cancelled. Exiting...')\n    process.exit(0)\n  }\n}\n"],
-  "mappings": "wCAOA,IAAMA,EAAoB,IAAM,CAC9B,IAAIC,EAAU,GACVC,EAA2B,CAAC,EAC5BC,EAAgB,GAEpB,MAAO,CAWL,MAAMC,EAAoB,CACxBH,EAAUG,EACVF,EAAU,CAAC,EACXC,EAAgB,EAClB,EAMA,gBAAuB,CACrBA,EAAgB,EAClB,EAOA,UAAUE,EAAcC,EAA0C,CAChEJ,EAAQ,KAAK,CAAE,KAAAG,EAAM,MAAAC,CAAM,CAAC,CAC9B,EAKA,eAAwB,CACtB,OAAOJ,EACJ,IAAKK,GACA,OAAOA,EAAI,OAAU,UAChBA,EAAI,MAAQA,EAAI,KAAO,GAG5B,MAAM,QAAQA,EAAI,KAAK,EAClB,GAAGA,EAAI,IAAI,KAAKA,EAAI,MAAM,KAAK,IAAI,CAAC,IAGtC,GAAGA,EAAI,IAAI,KAAKA,EAAI,KAAK,GACjC,EACA,OAAO,OAAO,EACd,KAAK,GAAG,CACb,EAOA,UAAgD,CAC9C,OAAIL,EAAQ,SAAW,EACd,KAGF,CAAE,iBAAkB,KAAK,cAAc,CAAE,CAClD,EASA,OAAc,CACR,CAACC,GAAiBD,EAAQ,SAAW,GAAK,CAACD,GAI/CO,EAAO,KAAK;AAAA,sBAAgDP,CAAO,IAAI,KAAK,cAAc,CAAC;AAAA,CAAI,CACjG,EAKA,OAAc,CACZA,EAAU,GACVC,EAAU,CAAC,EACXC,EAAgB,EAClB,CACF,CACF,EAGaM,EAAcT,EAAkB,EC1G7C,OAAOU,MAAa,oBACpB,OAAOC,MAAa,eAoBb,IAAMC,EAAgB,MAAOC,EAAuCC,IAAmC,CAC5G,IAAMC,EAASF,EAAmB,GAAO,MAAMG,EAAQ,CAAE,QAAAF,CAAQ,CAAC,EAE7DD,GACHI,EAAY,eAAe,EAGxBF,IACHG,EAAO,KAAK,iCAAiC,EAC7CC,EAAQ,KAAK,CAAC,EAElB",
-  "names": ["createCommandEcho", "cliPath", "options", "isInteractive", "path", "flag", "value", "opt", "logger", "commandEcho", "confirm", "process", "confirmOrExit", "confirmedCommand", "message", "answer", "confirm", "commandEcho", "logger", "process"]
-}

package/dist/chunk-TUVUKM4K.js

@@ -1,2 +0,0 @@
-import{a as v,b as x,c as y}from"./chunk-LTKR3F4N.js";import{Buffer as K}from"node:buffer";import{execFileSync as L}from"node:child_process";import g from"node:fs";import O from"node:net";import u from"node:path";import p from"node:process";import{pathToFileURL as _}from"node:url";import{z as l}from"zod";import{z as i}from"zod";var P=i.strictObject({requiredScripts:i.array(i.string().min(1)).optional(),requiredFiles:i.array(i.string().min(1)).optional(),turbo:i.strictObject({requiredTasks:i.array(i.string().min(1)).optional()}).optional(),dev:i.strictObject({proxy:i.strictObject({templates:i.strictObject({local:i.string().min(1),cloud:i.string().min(1)}),routes:i.record(i.string().min(1),i.strictObject({packageName:i.string().min(1),from:i.array(i.enum(["local","cloud"])).min(1),default:i.enum(["local","cloud"]).optional()}).refine(e=>e.from.length<=1||e.default!==void 0,{message:"default is required when `from` has more than one source"}).refine(e=>e.default===void 0||e.from.includes(e.default),{message:"default must be listed in `from`"}))}).optional()}).optional()});var R="INFRA_KIT_ENV",k="infra-kit.config.ts",N=u.join(".infra-kit","dev-context"),T=u.join(".infra-kit","dev-context.json"),D=l.object({package:l.string(),port:l.number(),pid:l.number().optional(),writtenAt:l.number().optional(),release:l.string().optional(),alias:l.string().optional(),proxyPort:l.number().optional(),origin:l.string().optional()}),j=(e,t)=>{let r=t?.username??e.E2E__BASIC_AUTH_USERNAME,n=t?.password??e.E2E__BASIC_AUTH_PASSWORD;return!r||!n?void 0:`Basic ${K.from(`${r}:${n}`).toString("base64")}`};var b=(e,t)=>e.replaceAll("<release>",t.release).replaceAll("<packageName>",t.packageName).replaceAll("<env>",t.env),C=80,F="127.0.0.1",S=(e,t)=>{if(t==null||t===C)return e;let r;try{r=new URL(e)}catch{throw new Error(`infra-kit/vite: dev.proxy templates.local resolved to "${e}", which is not a valid URL, so the proxy port ${t} cannot be applied.`)}if(r.port!=="")return e;r.port=String(t);let n=r.toString();return!e.endsWith("/")&&n.endsWith("/")?n.slice(0,-1):n},U=1024,V=(e,t)=>t!=null&&t>=U?S(e.replace(/^https:\/\//iu,"http://"),t):S(e,t),M=e=>{let{route:t,templates:r,env:n,getRelease:a,info:o}=e;if(o?.origin)return o.origin;let s=b(r.local,{release:o?.release??a(),packageName:v(t.packageName),env:n??""});return V(s,o?.proxyPort)},H=(e,t)=>{let r=e.default??e.from[0];return e.from.includes("local")&&t.has(e.packageName)?"local":r},$=new Set(["localhost","127.0.0.1","::1"]),B=e=>{let t;try{t=new URL(e).hostname.toLowerCase()}catch{return!1}let r=t.startsWith("[")&&t.endsWith("]")?t.slice(1,-1):t;return r.endsWith(".localhost")||$.has(r)},W=({routePath:e,route:t,templates:r,localSet:n,env:a,getRelease:o,localInfo:s})=>{if(H(t,n)==="local"){let f=M({route:t,templates:r,env:a,getRelease:o,info:s?.get(t.packageName)});return B(f)?{target:f,changeOrigin:!0,secure:!1}:{target:f,changeOrigin:!0}}if(!a)throw new Error(`infra-kit/vite: proxy route "${e}" resolves to a cloud backend but ${R} is not set. Source an environment from Doppler first (e.g. \`infra-kit env-load -c dev\`).`);return{target:b(r.cloud,{release:"",packageName:t.packageName,env:a}),changeOrigin:!0,secure:!1,cookieDomainRewrite:"localhost"}},J=({proxy:e,localSet:t,env:r,getRelease:n,authHeader:a,localInfo:o})=>{let s={},c=a?{Authorization:a}:void 0;for(let[d,f]of Object.entries(e.routes)){let m=W({routePath:d,route:f,templates:e.templates,localSet:t,env:r,getRelease:n,localInfo:o});s[d]=c?{...m,headers:c}:m}return s},G=e=>{let t;return()=>(t??={value:e()},t.value)},q=async e=>{let t=u.join(e,k);if(!g.existsSync(t))return;let r=g.statSync(t),o=(await import(`${_(t).href}?mtime=${Number(r.mtimeMs)}`)).default;if(o===void 0)return;let s=typeof o=="function"?await o():o,c=P.safeParse(s);if(!c.success)throw new Error(`infra-kit/vite: invalid ${k} at ${t}: ${l.prettifyError(c.error)}`);return c.data.dev},z=e=>{if(Array.isArray(e))return e.filter(t=>typeof t=="string");if(e!==null&&typeof e=="object"){let t=e.packages??e.localPackages;if(Array.isArray(t))return t.filter(r=>typeof r=="string")}return[]},I=(e,t)=>{let r=u.resolve(e);for(;;){let n=u.join(r,t);if(g.existsSync(n))return n;let a=u.dirname(r);if(a===r)return;r=a}},h=()=>({packages:new Set,info:new Map}),X=e=>{if(e==null)return!0;try{return p.kill(e,0),!0}catch(t){return t.code==="EPERM"}},Y=e=>{let t;try{t=g.readdirSync(e)}catch{return h()}let r=new Set,n=new Map;for(let a of t)if(a.endsWith(".json"))try{let o=D.safeParse(JSON.parse(g.readFileSync(u.join(e,a),"utf-8")));if(!o.success||!X(o.data.pid))continue;r.add(o.data.package),n.set(o.data.package,{port:o.data.port,origin:o.data.origin,release:o.data.release,alias:o.data.alias,proxyPort:o.data.proxyPort})}catch{continue}return{packages:r,info:n}},Q=e=>{let t=I(e,N);if(t)return Y(t);let r=I(e,T);if(!r)return h();try{return{packages:new Set(z(JSON.parse(g.readFileSync(r,"utf-8")))),info:new Map}}catch{return h()}};var Z=e=>L("git",["rev-parse","--abbrev-ref","HEAD"],{cwd:e,encoding:"utf-8"}).trim(),ee=()=>new Promise((e,t)=>{let r=O.createServer();r.unref(),r.on("error",t),r.listen(0,"127.0.0.1",()=>{let n=r.address(),a=typeof n=="object"&&n!==null?n.port:0;r.close(()=>e(a))})}),te="INFRA_KIT_UI_PORTS",re=e=>{try{let t=JSON.parse(g.readFileSync(u.join(e,"package.json"),"utf-8"));return typeof t.name=="string"?t.name:null}catch{return null}},ne=e=>{let t=p.env[te];if(t==null||t==="")return null;let r=re(e);if(r==null)return null;try{let n=JSON.parse(t)[r];if(typeof n=="number")return{port:n};if(n===null||typeof n!="object")return null;let{port:a,alias:o}=n;return typeof a!="number"?null:{port:a,alias:typeof o=="string"?o:void 0}}catch{return null}},oe=443,ae=async(e={})=>{let t=e.cwd??p.cwd();if(e.command==="build")return{proxy:{}};let r=e.port==null?ne(t):null,n=e.port??r?.port??await ee(),a=r!=null,o=e.host??F,s=r?.alias==null?void 0:{protocol:"wss",host:r.alias,clientPort:oe},c={port:n,host:o,...a?{strictPort:a}:{},...s?{hmr:s}:{}},d=await q(t);if(!d?.proxy)return{...c,proxy:{}};let{packages:f,info:m}=Q(t),w=p.env[R],A=j(p.env,e.basicAuth),E=G(()=>{try{return x(Z(t))||y}catch{return y}});return{...c,proxy:J({proxy:d.proxy,localSet:f,env:w,getRelease:E,authHeader:A,localInfo:m})}},ve=async(e={})=>(await ae(e)).proxy;export{P as a,J as b,q as c,ae as d,ve as e};
-//# sourceMappingURL=chunk-TUVUKM4K.js.map

package/dist/chunk-TUVUKM4K.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/vite/vite.ts", "../src/lib/package-config/package-config-schema.ts"],
-  "sourcesContent": ["import { Buffer } from 'node:buffer'\nimport { execFileSync } from 'node:child_process'\nimport fs from 'node:fs'\nimport net from 'node:net'\nimport path from 'node:path'\nimport process from 'node:process'\nimport { pathToFileURL } from 'node:url'\nimport { z } from 'zod'\n\nimport type {\n  InfraKitDev,\n  InfraKitDevProxy,\n  InfraKitDevProxyRoute,\n  InfraKitDevProxySource,\n} from '../package-config/package-config'\nimport { packageConfigSchema } from '../package-config/package-config-schema'\nimport { DEFAULT_RELEASE_SLUG, slugifyHostLabel, slugifyRelease } from '../release-slug/release-slug'\n\n/**\n * Env-name handle read at vite-config time to fill the `<env>` placeholder in a\n * cloud proxy target. Inlined (not imported from `src/lib/constants`) to keep the\n * `infra-kit/vite` bundle's import graph tiny \u2014 see the module header. Kept\n * byte-identical to `INFRA_KIT_ENV_VAR` in `src/lib/constants/constants.ts`.\n */\nconst INFRA_KIT_ENV = 'INFRA_KIT_ENV'\n\n/** Per-package config filename, mirrored from the CLI's `PACKAGE_CONFIG_FILE`. */\nconst PACKAGE_CONFIG_FILE = 'infra-kit.config.ts'\n\n/**\n * Repo-relative dev-context fragment DIRECTORY, searched upward from cwd. Each\n * runner (single-process or cmux pane) writes its OWN `<app>.json` fragment here\n * recording its real bound port + release; the helper merges them (see\n * {@link readLocalContext}). This is the current source of truth.\n */\nconst DEV_CONTEXT_DIR = path.join('.infra-kit', 'dev-context')\n\n/**\n * Legacy single-file dev-context manifest, searched upward from cwd. Read only as\n * a transitional back-compat path when {@link DEV_CONTEXT_DIR} is absent (the\n * directory wins per-package when both exist).\n */\nconst DEV_CONTEXT_FILE = path.join('.infra-kit', 'dev-context.json')\n\n/**\n * One `.infra-kit/dev-context/<app>.json` fragment. `package` is the load-bearing\n * field the helper reads (\u2192 localSet); `origin` is **the authoritative local target** \u2014\n * the exact origin the runner registered, obeyed verbatim by {@link resolveLocalTarget}.\n * The runner is the only party that knows the scheme and port its alias is really served\n * on, so the helper never re-derives them when `origin` is present.\n *\n * `release`, `alias` and `proxyPort` are the LEGACY inputs, read only when `origin` is\n * absent \u2014 which can only happen when an OLD CLI wrote the fragment (a CLI-only rollback).\n * `port` is no longer a proxy target (the direct `127.0.0.1:<port>` branch is gone) \u2014 it\n * survives as diagnostic provenance. `pid` is the staleness guard: {@link readFragmentDir}\n * drops a fragment whose writer is no longer alive, so a crashed runner cannot keep a\n * package pinned `local` at a dead alias. `writtenAt` is provenance only.\n *\n * Kept lenient (not `.strict()`) so extra writer fields never reject a valid fragment, and\n * deliberately un-`refine`d: a rejected fragment would drop a started package to `cloud`\n * instead of falling into legacy mode, which is what makes the rollback path work.\n */\nconst devContextFragmentSchema = z.object({\n  package: z.string(),\n  port: z.number(),\n  pid: z.number().optional(),\n  writtenAt: z.number().optional(),\n  release: z.string().optional(),\n  alias: z.string().optional(),\n  proxyPort: z.number().optional(),\n  origin: z.string().optional(),\n})\n\n/**\n * A single Vite `server.proxy` entry. `changeOrigin` is always set. `cookieDomainRewrite` is cloud-only\n * (it keeps an HTTPS cloud BE's cookies usable from a local FE). `secure: false` appears on BOTH sources\n * but for different reasons: a cloud target may serve a cert the local store rejects, and a local target\n * is served by portless from its own private CA \u2014 set there only for a loopback host (see\n * {@link isLoopbackTarget}). `headers` is present only when HTTP Basic Auth is injected (see\n * {@link buildBasicAuthHeader}) \u2014 it carries the `Authorization` header applied\n * uniformly to every route so upstream environments behind auth (e2e/staging)\n * stay reachable.\n */\nexport interface InfraKitViteProxyEntry {\n  target: string\n  changeOrigin: true\n  secure?: false\n  cookieDomainRewrite?: 'localhost'\n  headers?: Record<string, string>\n}\n\n/** A Vite `server.proxy`-shaped map: path-prefix \u2192 proxy entry. */\nexport type InfraKitViteProxy = Record<string, InfraKitViteProxyEntry>\n\n/** Explicit HTTP Basic Auth credentials, overriding the `E2E__BASIC_AUTH_*` env vars. */\nexport interface InfraKitBasicAuth {\n  username: string\n  password: string\n}\n\nexport interface InfraKitDevOptions {\n  /** Package dir whose `infra-kit.config.ts` is loaded. Defaults to `process.cwd()`. */\n  cwd?: string\n  /**\n   * Explicit HTTP Basic Auth credentials injected into every proxy route as an\n   * `Authorization` header. Takes precedence over the `E2E__BASIC_AUTH_USERNAME`\n   * / `E2E__BASIC_AUTH_PASSWORD` env vars. Omit to use the env-based default.\n   */\n  basicAuth?: InfraKitBasicAuth\n  /**\n   * Vite's `command`. Pass it (`defineConfig(async ({ command }) => ({ server: await infraKitDev({ command }) }))`)\n   * so `build` is a no-op: `server` is irrelevant to a build and proxy resolution would otherwise\n   * fail-fast on a cloud route with no sourced env. Omit (or `'serve'`) for the dev-server config.\n   */\n  command?: 'build' | 'serve'\n  /**\n   * Explicit dev-server port. Omit for a **per-worktree dynamic** free port (a fresh OS-assigned\n   * port) so N simultaneous git worktrees never collide on Vite's default `5173`; Vite prints the\n   * chosen URL. Pass a fixed number only when an external contract pins the port.\n   */\n  port?: number\n  /**\n   * Interface the dev server binds. Defaults to {@link LOOPBACK_V4} so a portless alias can reach it\n   * (Vite's own `localhost` default binds `[::1]` only, which the proxy cannot dial). Override when\n   * the dev server must be reachable off the loopback \u2014 `'0.0.0.0'` or `true` inside a container, on\n   * a LAN, or for an e2e runner on another host.\n   */\n  host?: string | boolean\n}\n\n/**\n * Build the `Authorization: Basic <base64(user:pass)>` header value. Credentials\n * come from `override` when given, else from `E2E__BASIC_AUTH_USERNAME` /\n * `E2E__BASIC_AUTH_PASSWORD` (NOTE: double underscore). Returns `undefined` when\n * either half is missing, so callers add no `headers` key at all.\n */\nconst buildBasicAuthHeader = (env: NodeJS.ProcessEnv, override?: InfraKitBasicAuth): string | undefined => {\n  const username = override?.username ?? env.E2E__BASIC_AUTH_USERNAME\n  const password = override?.password ?? env.E2E__BASIC_AUTH_PASSWORD\n\n  if (!username || !password) return undefined\n\n  const encoded = Buffer.from(`${username}:${password}`).toString('base64')\n\n  return `Basic ${encoded}`\n}\n\n/**\n * Re-exported from the shared, dependency-light `lib/release-slug` module so the\n * published `infra-kit/vite` surface (`entry/vite.ts:7`) is unchanged while the\n * dev-server's fragment writer derives `<release>` from the SAME implementation\n * (no slug drift). See {@link slugifyRelease}.\n */\nexport { slugifyRelease }\n\n/** Fill the `<release>`/`<packageName>`/`<env>` placeholders in a URL template. */\nconst interpolate = (template: string, values: { release: string; packageName: string; env: string }): string => {\n  return template\n    .replaceAll('<release>', values.release)\n    .replaceAll('<packageName>', values.packageName)\n    .replaceAll('<env>', values.env)\n}\n\n/** The port a bare `http://` target implies, and the proxy's default \u2014 never spelled out in a URL. */\nconst DEFAULT_HTTP_PORT = 80\n\n/**\n * The interface the vite dev server binds. Pinned to IPv4 loopback because portless dials its routes\n * on `127.0.0.1`, while vite's default `host: 'localhost'` combined with its\n * `dns.setDefaultResultOrder('verbatim')` binds `[::1]` ONLY \u2014 the alias then resolves, the proxy\n * connects, and the connection is refused, surfacing as a 502 on every UI request. Backends never hit\n * this because `ServerlessLocalRun` already binds `127.0.0.1`. Still loopback-only: this narrows the\n * address family, it does not expose the dev server to the network.\n */\nconst LOOPBACK_V4 = '127.0.0.1'\n\n/**\n * Graft the proxy's listen port onto an interpolated local target. The `dev.proxy` local template is\n * written port-free (`https://<release>.<packageName>.localhost`) because the proxy serves TLS on `:443`,\n * the only port a port-free HTTPS URL can come from. A consumer who trades the clean URL for a zero-sudo\n * unprivileged port still needs the frontend to reach it, so the runner records the port it actually bound\n * and we append it here. A template that already pins its own port keeps it.\n */\nconst withProxyPort = (target: string, proxyPort: number | undefined): string => {\n  if (proxyPort == null || proxyPort === DEFAULT_HTTP_PORT) return target\n\n  let url: URL\n\n  try {\n    url = new URL(target)\n  } catch {\n    throw new Error(\n      `infra-kit/vite: dev.proxy templates.local resolved to \"${target}\", which is not a valid URL, so the proxy port ${proxyPort} cannot be applied.`,\n    )\n  }\n\n  if (url.port !== '') return target\n  url.port = String(proxyPort)\n\n  // `URL.toString()` synthesizes a `/` pathname for an authority-only URL, so the common port-free\n  // template would come back as `\u2026localhost:1355/`. Strip that ONLY when the template had no trailing\n  // slash of its own \u2014 a template ending in `/` (e.g. `\u2026localhost/base/`) means it, and silently\n  // trimming it would change the path the frontend proxies to.\n  const grafted = url.toString()\n\n  return !target.endsWith('/') && grafted.endsWith('/') ? grafted.slice(0, -1) : grafted\n}\n\n/**\n * The lowest port a daemon can bind without root. An origin-less fragment recording a port AT OR ABOVE\n * this was written by an old CLI whose `spawnDaemon` always passed `--no-tls`, so infra-kit itself could\n * only ever have put PLAIN HTTP there. Below it (80/443) the daemon was installed out-of-band, where\n * portless defaults to TLS ON \u2014 which is precisely why the legacy scheme is left alone down there.\n */\nconst LEGACY_SELF_SPAWNED_PORT_FLOOR = 1024\n\n/**\n * Legacy target resolution \u2014 reached ONLY for an origin-less fragment, i.e. one written by an OLD CLI\n * (a CLI-only rollback). It must reproduce the old helper rather than reject anything, because that is\n * what lets the CLI be reverted without touching a single consumer repo.\n *\n * `proxyPort >= 1024`: force the scheme to `http`. **Mitigation, not a proof** \u2014 infra-kit's own\n * `spawnDaemon` always passed `--no-tls`, so an unprivileged daemon *infra-kit created* was always plain\n * HTTP; a HAND-STARTED TLS daemon on such a port (portless's own default is TLS) would be wrongly\n * downgraded here. That corner is accepted: forcing `http` reproduces what the old CLI + old helper\n * already emitted, so it regresses nothing that worked.\n *\n * `proxyPort < 1024` (80/443) or absent: the daemon was installed out-of-band and may well be TLS, and we\n * cannot know. Reproduce the old helper verbatim and NEVER rewrite the scheme \u2014 forcing `http` on a `:443`\n * fragment would emit `http://<alias>:443`, plain HTTP into a TLS listener, the exact silent failure this\n * design exists to remove.\n */\nconst resolveLegacyTarget = (target: string, proxyPort: number | undefined): string => {\n  if (proxyPort != null && proxyPort >= LEGACY_SELF_SPAWNED_PORT_FLOOR) {\n    return withProxyPort(target.replace(/^https:\\/\\//iu, 'http://'), proxyPort)\n  }\n\n  return withProxyPort(target, proxyPort)\n}\n\n/**\n * The proxy target for a route resolved to `local`. The runner PUBLISHES the contract and the helper OBEYS\n * it: when the fragment carries an `origin`, that string is the target verbatim \u2014 the runner is the only\n * party that knows the scheme and port the alias it registered is actually served on, and this helper ships\n * on its own release cadence, so any re-derivation here is a guess that can silently disagree.\n *\n * `templates.local` is consulted ONLY in legacy mode (see {@link resolveLegacyTarget}).\n *\n * The target proxies to a stable HOSTNAME, and the runner re-points that alias at the freshly-bound port\n * on every `--watch` restart, so it self-heals without Vite reloading its config.\n */\nconst resolveLocalTarget = (args: {\n  route: InfraKitDevProxyRoute\n  templates: InfraKitDevProxy['templates']\n  env: string | undefined\n  getRelease: () => string\n  info: LocalPackageInfo | undefined\n}): string => {\n  const { route, templates, env, getRelease, info } = args\n\n  if (info?.origin) return info.origin\n\n  const target = interpolate(templates.local, {\n    // Prefer THIS package's runner-recorded release slug (R4) over the single global git derivation,\n    // so cross-branch FE/BE pairings don't drift the emitted `<release>` from the segment the runner\n    // aliased. Fall back to the global git slug only when the fragment carried no release.\n    release: info?.release ?? getRelease(),\n    // The local template resolves to a `<release>.<packageName>.localhost` alias the dev-server\n    // registered with portless \u2014 which slugifies the package name to a legal DNS label. Slugify\n    // identically here or a scoped name (`@hulyo/client-ui`) emits a target that no alias backs.\n    packageName: slugifyHostLabel(route.packageName),\n    env: env ?? '',\n  })\n\n  return resolveLegacyTarget(target, info?.proxyPort)\n}\n\n/**\n * Pick the effective source for a route: `local` when the route lists `local` as\n * a capability AND its packageName is in the local dev set; otherwise the fallback\n * \u2014 the declared `default` for a multi-source route, or the sole `from` entry for\n * a single-source one. Always resolves (the schema guarantees a usable fallback).\n */\nconst pickSource = (route: InfraKitDevProxyRoute, localSet: ReadonlySet<string>): InfraKitDevProxySource => {\n  // `from` is guaranteed non-empty by the schema, so `from[0]` is always present.\n  const fallback = route.default ?? route.from[0]!\n\n  return route.from.includes('local') && localSet.has(route.packageName) ? 'local' : fallback\n}\n\ninterface ResolveRouteArgs {\n  routePath: string\n  route: InfraKitDevProxyRoute\n  templates: InfraKitDevProxy['templates']\n  localSet: ReadonlySet<string>\n  env: string | undefined\n  getRelease: () => string\n  /** Per-package runtime data (recorded release/port) from the dev-context merge. */\n  localInfo?: ReadonlyMap<string, LocalPackageInfo>\n}\n\n/** Hostnames that can only be this machine \u2014 the only ones a private-CA cert is allowed to go unchecked on. */\nconst LOOPBACK_HOSTNAMES = new Set(['localhost', '127.0.0.1', '::1'])\n\n/**\n * Is `target` unambiguously on this machine? Only then may {@link resolveRoute} disable cert validation:\n * `templates.local` is an unconstrained string in a consumer-authored config, so an unconditional\n * `secure: false` in a PUBLISHED helper would silently switch off validation for whatever URL a consumer\n * wrote there. Scoping it to `.localhost`/loopback is what makes \"no MITM surface\" true by construction.\n * An unparseable target is NOT local (the caller then leaves `secure` unset \u2014 fail closed).\n */\nconst isLoopbackTarget = (target: string): boolean => {\n  let hostname: string\n\n  try {\n    hostname = new URL(target).hostname.toLowerCase()\n  } catch {\n    return false\n  }\n\n  // `URL.hostname` brackets an IPv6 literal (`[::1]`); compare the bare address.\n  const bare = hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname\n\n  return bare.endsWith('.localhost') || LOOPBACK_HOSTNAMES.has(bare)\n}\n\n/** Resolve one route into a Vite proxy entry (or throw an actionable error). */\nconst resolveRoute = ({\n  routePath,\n  route,\n  templates,\n  localSet,\n  env,\n  getRelease,\n  localInfo,\n}: ResolveRouteArgs): InfraKitViteProxyEntry => {\n  const source = pickSource(route, localSet)\n\n  if (source === 'local') {\n    const target = resolveLocalTarget({ route, templates, env, getRelease, info: localInfo?.get(route.packageName) })\n\n    // The local target is now HTTPS, served with a cert minted by portless's own private CA. Node's\n    // http-proxy validates the upstream chain against the system store, which does not contain that CA,\n    // so every proxied request fails with SELF_SIGNED_CERT_IN_CHAIN (confirmed empirically \u2014 see\n    // `.omc/research/portless-https-spike.md`). Only a loopback target earns the exemption.\n    return isLoopbackTarget(target) ? { target, changeOrigin: true, secure: false } : { target, changeOrigin: true }\n  }\n\n  if (!env) {\n    throw new Error(\n      `infra-kit/vite: proxy route \"${routePath}\" resolves to a cloud backend but ${INFRA_KIT_ENV} is not set. Source an environment from Doppler first (e.g. \\`infra-kit env-load -c dev\\`).`,\n    )\n  }\n\n  const target = interpolate(templates.cloud, { release: '', packageName: route.packageName, env })\n\n  return { target, changeOrigin: true, secure: false, cookieDomainRewrite: 'localhost' }\n}\n\ninterface ResolveProxyArgs {\n  proxy: InfraKitDevProxy\n  localSet: ReadonlySet<string>\n  env: string | undefined\n  getRelease: () => string\n  /** Pre-computed `Authorization` header value applied uniformly to every route. */\n  authHeader?: string\n  /** Per-package runtime data (recorded release/port) from the dev-context merge. */\n  localInfo?: ReadonlyMap<string, LocalPackageInfo>\n}\n\n/**\n * Pure resolver: turn a `dev.proxy` config + resolved inputs (local set, env,\n * lazy release) into a Vite `server.proxy` map. Side-effect-free so the\n * resolution shape is fully unit-testable. When `authHeader` is set, every route\n * entry gets a matching `headers.Authorization`; otherwise no `headers` key.\n */\nexport const resolveProxyConfig = ({\n  proxy,\n  localSet,\n  env,\n  getRelease,\n  authHeader,\n  localInfo,\n}: ResolveProxyArgs): InfraKitViteProxy => {\n  const result: InfraKitViteProxy = {}\n  const headers = authHeader ? { Authorization: authHeader } : undefined\n\n  for (const [routePath, route] of Object.entries(proxy.routes)) {\n    const entry = resolveRoute({ routePath, route, templates: proxy.templates, localSet, env, getRelease, localInfo })\n\n    result[routePath] = headers ? { ...entry, headers } : entry\n  }\n\n  return result\n}\n\n/** Memoize a zero-arg thunk so `<release>` git resolution runs at most once. */\nconst once = <T>(fn: () => T): (() => T) => {\n  let cached: { value: T } | undefined\n\n  return () => {\n    cached ??= { value: fn() }\n\n    return cached.value\n  }\n}\n\n/**\n * Load a package's `infra-kit.config.ts` and return its `dev` block, or\n * `undefined` when the config or the `dev` key is absent. The `.ts` config is\n * evaluated via Node's native type stripping (Node >= 24) \u2014 the same mechanism\n * the CLI's config loader uses. Cache-busted by mtime so repeated dev-server\n * reloads pick up edits.\n */\nexport const loadDev = async (cwd: string): Promise<InfraKitDev | undefined> => {\n  const configPath = path.join(cwd, PACKAGE_CONFIG_FILE)\n\n  if (!fs.existsSync(configPath)) return undefined\n\n  const stat = fs.statSync(configPath)\n  const moduleUrl = `${pathToFileURL(configPath).href}?mtime=${Number(stat.mtimeMs)}`\n\n  const imported = (await import(moduleUrl)) as { default?: unknown }\n  const rawExport = imported.default\n\n  if (rawExport === undefined) return undefined\n\n  const resolved = typeof rawExport === 'function' ? await (rawExport as () => unknown)() : rawExport\n\n  const parsed = packageConfigSchema.safeParse(resolved)\n\n  if (!parsed.success) {\n    throw new Error(`infra-kit/vite: invalid ${PACKAGE_CONFIG_FILE} at ${configPath}: ${z.prettifyError(parsed.error)}`)\n  }\n\n  return parsed.data.dev\n}\n\n/** Coerce a parsed dev-context.json into the set of locally-running package names. */\nconst extractPackages = (parsed: unknown): string[] => {\n  if (Array.isArray(parsed)) {\n    return parsed.filter((v): v is string => {\n      return typeof v === 'string'\n    })\n  }\n\n  if (parsed !== null && typeof parsed === 'object') {\n    const candidate = (parsed as Record<string, unknown>).packages ?? (parsed as Record<string, unknown>).localPackages\n\n    if (Array.isArray(candidate)) {\n      return candidate.filter((v): v is string => {\n        return typeof v === 'string'\n      })\n    }\n  }\n\n  return []\n}\n\n/** Search upward from `start` for `relative`, returning the first hit or undefined. */\nconst findUp = (start: string, relative: string): string | undefined => {\n  let dir = path.resolve(start)\n\n  for (;;) {\n    const candidate = path.join(dir, relative)\n\n    if (fs.existsSync(candidate)) return candidate\n\n    const parent = path.dirname(dir)\n\n    if (parent === dir) return undefined\n\n    dir = parent\n  }\n}\n\n/** Per-package runtime data merged from the dev-context fragment directory. */\nexport interface LocalPackageInfo {\n  /** The real bound port the runner recorded. Provenance only \u2014 the proxy target is the alias host. */\n  port: number\n  /**\n   * The authoritative local target (`https://<release>.<packageName>.localhost`), published by the\n   * runner. Present \u2192 {@link resolveLocalTarget} uses it verbatim and consults no template. Absent \u2192\n   * the fragment came from an old CLI and the legacy template path runs.\n   */\n  origin?: string\n  /** LEGACY (no `origin`): the runner-recorded release slug, preferred over the helper's git derivation. */\n  release?: string\n  /** LEGACY (no `origin`): `<release>.<packageName>.localhost`, present only when an alias was registered. */\n  alias?: string\n  /** LEGACY (no `origin`): the port {@link alias} resolves on. `80` (the default) is implicit in the template. */\n  proxyPort?: number\n}\n\n/**\n * The locally-running package set plus a `package \u2192 { port, release }` map merged\n * from the dev-context fragments. `packages` feeds `pickSource`; `info` lets a\n * `local` route emit the per-package recorded release (see {@link resolveRoute}).\n */\nexport interface LocalContext {\n  packages: ReadonlySet<string>\n  info: ReadonlyMap<string, LocalPackageInfo>\n}\n\n/** An empty {@link LocalContext} (frontend-only / dev-context absent). */\nconst emptyLocalContext = (): LocalContext => {\n  return { packages: new Set(), info: new Map() }\n}\n\n/**\n * Is the runner that wrote a fragment still alive? Signal `0` performs the permission and existence\n * checks without delivering anything. `ESRCH` is the one answer that means \"gone\"; `EPERM` means the\n * pid exists under another uid, which is still a live process. A fragment with no `pid` predates the\n * field and is trusted (back-compat) rather than dropped.\n */\nconst isFragmentWriterAlive = (pid: number | undefined): boolean => {\n  if (pid == null) return true\n\n  try {\n    process.kill(pid, 0)\n\n    return true\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === 'EPERM'\n  }\n}\n\n/**\n * Merge every `<app>.json` fragment in the dev-context directory into a\n * {@link LocalContext}. Two DISTINCT failure branches (do NOT collapse them into\n * one directory-wide catch):\n *  - `readdir`-ENOENT (directory vanished mid-race) \u2192 empty context, matching the\n *    dir-absent back-compat behaviour.\n *  - a single corrupt/truncated/invalid `<app>.json` \u2192 that ONE fragment is\n *    SKIPPED (per-fragment `safeParse` isolation); the rest still merge, so one bad\n *    fragment never collapses the whole localSet to empty (which would silently\n *    drop a started package to cloud).\n */\nconst readFragmentDir = (dir: string): LocalContext => {\n  let entries: string[]\n\n  try {\n    entries = fs.readdirSync(dir)\n  } catch {\n    return emptyLocalContext()\n  }\n\n  const packages = new Set<string>()\n  const info = new Map<string, LocalPackageInfo>()\n\n  for (const name of entries) {\n    if (!name.endsWith('.json')) continue\n\n    try {\n      const parsed = devContextFragmentSchema.safeParse(JSON.parse(fs.readFileSync(path.join(dir, name), 'utf-8')))\n\n      if (!parsed.success) continue\n\n      // A runner killed with SIGKILL (or crashed) leaves its fragment AND its portless alias behind.\n      // Trusting it would route this package's `/api` at an alias nothing serves \u2014 a silent 502 with\n      // no diagnostic. The writer already stamps its pid; honour it.\n      if (!isFragmentWriterAlive(parsed.data.pid)) continue\n\n      packages.add(parsed.data.package)\n      info.set(parsed.data.package, {\n        port: parsed.data.port,\n        origin: parsed.data.origin,\n        release: parsed.data.release,\n        alias: parsed.data.alias,\n        proxyPort: parsed.data.proxyPort,\n      })\n    } catch {\n      // Corrupt/truncated fragment (JSON.parse / read failure): skip ONLY this one.\n      continue\n    }\n  }\n\n  return { packages, info }\n}\n\n/**\n * Read the locally-running package context, searched upward from `cwd`. Prefers\n * the `.infra-kit/dev-context/` fragment DIRECTORY (merged via\n * {@link readFragmentDir}); when it is absent, falls back to the legacy single\n * `.infra-kit/dev-context.json` file (read as before \u2014 no per-package release);\n * when neither exists \u2192 empty context (frontend-only, every route resolves cloud).\n */\nexport const readLocalContext = (cwd: string): LocalContext => {\n  const dir = findUp(cwd, DEV_CONTEXT_DIR)\n\n  if (dir) return readFragmentDir(dir)\n\n  const legacy = findUp(cwd, DEV_CONTEXT_FILE)\n\n  if (!legacy) return emptyLocalContext()\n\n  try {\n    return { packages: new Set(extractPackages(JSON.parse(fs.readFileSync(legacy, 'utf-8')))), info: new Map() }\n  } catch {\n    return emptyLocalContext()\n  }\n}\n\n/**\n * Read the set of locally-running packages (searched upward from `cwd`). Thin\n * wrapper over {@link readLocalContext} preserving the historical `Set`-returning\n * contract. Absent dev-context \u2192 empty set (frontend-only cloud resolution).\n */\nexport const readLocalSet = (cwd: string): ReadonlySet<string> => {\n  return readLocalContext(cwd).packages\n}\n\n/** Current git branch of `cwd` (raw, un-slugified). */\nconst readGitBranch = (cwd: string): string => {\n  // eslint-disable-next-line sonarjs/no-os-command-from-path\n  return execFileSync('git', ['rev-parse', '--abbrev-ref', 'HEAD'], { cwd, encoding: 'utf-8' }).trim()\n}\n\n/**\n * An OS-assigned free TCP port on 127.0.0.1 \u2014 the per-worktree dev-server port (mirrors the\n * backend's `listen(0)`). This probes then releases the port, so there is a small TOCTOU window\n * before Vite binds it; Vite's default `strictPort: false` absorbs a lost race by stepping to the\n * next free port. Only a consumer that sets `strictPort: true` would hard-fail on the rare collision.\n */\nconst getFreePort = (): Promise<number> => {\n  return new Promise((resolve, reject) => {\n    const srv = net.createServer()\n\n    srv.unref()\n    srv.on('error', reject)\n    srv.listen(0, '127.0.0.1', () => {\n      const address = srv.address()\n      const port = typeof address === 'object' && address !== null ? address.port : 0\n\n      srv.close(() => {\n        return resolve(port)\n      })\n    })\n  })\n}\n\n/** Env var carrying the runner-assigned `{ \"<ui-package>\": <port> }` map (Layer B). */\nconst UI_PORTS_ENV = 'INFRA_KIT_UI_PORTS'\n\n/** This package's `package.json` `name`, or `null` (unreadable / nameless). */\nconst readPackageName = (cwd: string): string | null => {\n  try {\n    const parsed = JSON.parse(fs.readFileSync(path.join(cwd, 'package.json'), 'utf-8')) as { name?: unknown }\n\n    return typeof parsed.name === 'string' ? parsed.name : null\n  } catch {\n    return null\n  }\n}\n\n/**\n * What the runner assigned THIS UI. `alias` is present only in the widened record form, i.e. only when the\n * runner both assigned the port AND registered the hostname \u2014 which is exactly the condition for pointing\n * HMR at that hostname. The legacy bare-number form yields no alias.\n */\ninterface ManagedUi {\n  port: number\n  alias?: string\n}\n\n/**\n * What `infra-kit dev` assigned THIS UI via `INFRA_KIT_UI_PORTS` (Layer B), or `null` when the map is\n * absent / this package isn't in it / it's malformed. Present \u2192 the helper binds the port with\n * `strictPort` so vite lands on exactly the port the runner already aliased. Absent (a standalone\n * `vite dev`) \u2192 the caller falls back to a free port, byte-identical to today.\n *\n * Accepts BOTH the widened `{ port, alias }` record and the legacy bare `<port>` number an older runner\n * writes \u2014 a new helper paired with an old CLI must still bind the assigned port.\n */\nconst resolveManagedUi = (cwd: string): ManagedUi | null => {\n  const raw = process.env[UI_PORTS_ENV]\n\n  if (raw == null || raw === '') return null\n\n  const name = readPackageName(cwd)\n\n  if (name == null) return null\n\n  try {\n    const entry = (JSON.parse(raw) as Record<string, unknown>)[name]\n\n    if (typeof entry === 'number') return { port: entry }\n\n    if (entry === null || typeof entry !== 'object') return null\n\n    const { port, alias } = entry as { port?: unknown; alias?: unknown }\n\n    if (typeof port !== 'number') return null\n\n    return { port, alias: typeof alias === 'string' ? alias : undefined }\n  } catch {\n    return null\n  }\n}\n\n/** The port an `https://` alias is served on \u2014 never spelled out in a URL, and what the HMR client dials. */\nconst HTTPS_PORT = 443\n\n/**\n * Vite's `server.hmr` override, pointing the HMR client at the alias instead of at the raw dev-server port.\n * The page is loaded over `https://<alias>`, so its websocket must be `wss://` on the same origin or the\n * browser blocks it as mixed content; `clientPort` is the proxy's implicit `:443`, not vite's bound port.\n */\nexport interface InfraKitViteHmr {\n  protocol: 'wss'\n  host: string\n  clientPort: number\n}\n\n/**\n * Resolve a package's `dev` block into a ready-made Vite `server` config: a per-worktree dev-server\n * `port` plus the `proxy` map. Loads the package's `infra-kit.config.ts`, merges the local dev set\n * from the `.infra-kit/dev-context/` fragment directory, and interpolates the local/cloud templates.\n * `<env>` comes from `INFRA_KIT_ENV`; `<release>` from each package's runner-recorded fragment when\n * present, else the slugified git branch (computed lazily, only when a local route needs it).\n *\n * `port` defaults to a fresh OS-assigned free port so simultaneous git worktrees never collide on\n * Vite's `5173` (override via `options.port`). `host` defaults to {@link LOOPBACK_V4} so the portless\n * alias can actually reach it (override via `options.host` for containers/LAN). `hmr` is emitted only\n * when `infra-kit dev` registered an alias for this UI, so a bare `vite dev` keeps vite's own HMR\n * defaults. Pass `command` so `build` is a no-op (empty proxy, no port) \u2014 a build ignores `server` and\n * proxy resolution would otherwise fail-fast on a cloud route with no sourced env.\n *\n * @example\n * // vite.config.ts \u2014 the whole `server` field is the helper's output\n * import { infraKitDev } from 'infra-kit/vite'\n * export default defineConfig(async ({ command }) => ({ server: await infraKitDev({ command }) }))\n */\nexport const infraKitDev = async (\n  options: InfraKitDevOptions = {},\n): Promise<{\n  port?: number\n  host?: string | boolean\n  strictPort?: boolean\n  hmr?: InfraKitViteHmr\n  proxy: InfraKitViteProxy\n}> => {\n  const cwd = options.cwd ?? process.cwd()\n\n  // A build ignores `server`; skip the port + proxy work (proxy resolution would fail-fast on a\n  // cloud route with no sourced env).\n  if (options.command === 'build') return { proxy: {} }\n\n  // Port precedence: explicit `options.port` > the runner-assigned Layer-B port (bound `strictPort` so\n  // vite lands on exactly the aliased port) > a fresh free port (today's default; the portless-off path).\n  const managed = options.port == null ? resolveManagedUi(cwd) : null\n  const port = options.port ?? managed?.port ?? (await getFreePort())\n  const strictPort = managed != null\n  const host = options.host ?? LOOPBACK_V4\n\n  // Override HMR ONLY when the runner handed us the alias it registered. A bare `vite dev` (no runner)\n  // has no alias, and a computable hostname is not a registered one \u2014 pointing the HMR client at a\n  // hostname nothing resolves would break hot reload on a path that works today.\n  const hmr: InfraKitViteHmr | undefined =\n    managed?.alias == null ? undefined : { protocol: 'wss', host: managed.alias, clientPort: HTTPS_PORT }\n  const server = { port, host, ...(strictPort ? { strictPort } : {}), ...(hmr ? { hmr } : {}) }\n  const dev = await loadDev(cwd)\n\n  if (!dev?.proxy) return { ...server, proxy: {} }\n\n  const { packages: localSet, info: localInfo } = readLocalContext(cwd)\n  const env = process.env[INFRA_KIT_ENV]\n  const authHeader = buildBasicAuthHeader(process.env, options.basicAuth)\n  const getRelease = once(() => {\n    // Mirrors the dev-server's `readAppRelease`: outside a git repo both sides must land on the SAME\n    // label, or this target names a host the runner never aliased.\n    try {\n      return slugifyRelease(readGitBranch(cwd)) || DEFAULT_RELEASE_SLUG\n    } catch {\n      return DEFAULT_RELEASE_SLUG\n    }\n  })\n\n  return {\n    ...server,\n    proxy: resolveProxyConfig({ proxy: dev.proxy, localSet, env, getRelease, authHeader, localInfo }),\n  }\n}\n\n/**\n * Convenience wrapper returning just the proxy map (for spreading into\n * `server.proxy` directly). Equivalent to `(await infraKitDev(options)).proxy`.\n */\nexport const infraKitProxy = async (options: InfraKitDevOptions = {}): Promise<InfraKitViteProxy> => {\n  return (await infraKitDev(options)).proxy\n}\n", "import { z } from 'zod'\n\n/**\n * Schema for the resolved (post-factory) package config object. `strictObject`\n * rejects unknown keys so typos in `infra-kit.config.ts` surface as validation\n * errors instead of being silently ignored.\n *\n * Kept in its own module \u2014 separate from the public `defineConfig`/types entry \u2014\n * so the published `infra-kit` type surface stays free of a `zod` import.\n */\nexport const packageConfigSchema = z.strictObject({\n  requiredScripts: z.array(z.string().min(1)).optional(),\n  requiredFiles: z.array(z.string().min(1)).optional(),\n  turbo: z\n    .strictObject({\n      requiredTasks: z.array(z.string().min(1)).optional(),\n    })\n    .optional(),\n  dev: z\n    .strictObject({\n      proxy: z\n        .strictObject({\n          templates: z.strictObject({\n            local: z.string().min(1),\n            cloud: z.string().min(1),\n          }),\n          routes: z.record(\n            z.string().min(1),\n            z\n              .strictObject({\n                packageName: z.string().min(1),\n                from: z.array(z.enum(['local', 'cloud'])).min(1),\n                default: z.enum(['local', 'cloud']).optional(),\n              })\n              .refine(\n                (route) => {\n                  return route.from.length <= 1 || route.default !== undefined\n                },\n                {\n                  message: 'default is required when `from` has more than one source',\n                },\n              )\n              .refine(\n                (route) => {\n                  return route.default === undefined || route.from.includes(route.default)\n                },\n                {\n                  message: 'default must be listed in `from`',\n                },\n              ),\n          ),\n        })\n        .optional(),\n    })\n    .optional(),\n})\n"],
-  "mappings": "sDAAA,OAAS,UAAAA,MAAc,cACvB,OAAS,gBAAAC,MAAoB,qBAC7B,OAAOC,MAAQ,UACf,OAAOC,MAAS,WAChB,OAAOC,MAAU,YACjB,OAAOC,MAAa,eACpB,OAAS,iBAAAC,MAAqB,WAC9B,OAAS,KAAAC,MAAS,MCPlB,OAAS,KAAAC,MAAS,MAUX,IAAMC,EAAsBD,EAAE,aAAa,CAChD,gBAAiBA,EAAE,MAAMA,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EACrD,cAAeA,EAAE,MAAMA,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,EACnD,MAAOA,EACJ,aAAa,CACZ,cAAeA,EAAE,MAAMA,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS,CACrD,CAAC,EACA,SAAS,EACZ,IAAKA,EACF,aAAa,CACZ,MAAOA,EACJ,aAAa,CACZ,UAAWA,EAAE,aAAa,CACxB,MAAOA,EAAE,OAAO,EAAE,IAAI,CAAC,EACvB,MAAOA,EAAE,OAAO,EAAE,IAAI,CAAC,CACzB,CAAC,EACD,OAAQA,EAAE,OACRA,EAAE,OAAO,EAAE,IAAI,CAAC,EAChBA,EACG,aAAa,CACZ,YAAaA,EAAE,OAAO,EAAE,IAAI,CAAC,EAC7B,KAAMA,EAAE,MAAMA,EAAE,KAAK,CAAC,QAAS,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,EAC/C,QAASA,EAAE,KAAK,CAAC,QAAS,OAAO,CAAC,EAAE,SAAS,CAC/C,CAAC,EACA,OACEE,GACQA,EAAM,KAAK,QAAU,GAAKA,EAAM,UAAY,OAErD,CACE,QAAS,0DACX,CACF,EACC,OACEA,GACQA,EAAM,UAAY,QAAaA,EAAM,KAAK,SAASA,EAAM,OAAO,EAEzE,CACE,QAAS,kCACX,CACF,CACJ,CACF,CAAC,EACA,SAAS,CACd,CAAC,EACA,SAAS,CACd,CAAC,ED/BD,IAAMC,EAAgB,gBAGhBC,EAAsB,sBAQtBC,EAAkBC,EAAK,KAAK,aAAc,aAAa,EAOvDC,EAAmBD,EAAK,KAAK,aAAc,kBAAkB,EAoB7DE,EAA2BC,EAAE,OAAO,CACxC,QAASA,EAAE,OAAO,EAClB,KAAMA,EAAE,OAAO,EACf,IAAKA,EAAE,OAAO,EAAE,SAAS,EACzB,UAAWA,EAAE,OAAO,EAAE,SAAS,EAC/B,QAASA,EAAE,OAAO,EAAE,SAAS,EAC7B,MAAOA,EAAE,OAAO,EAAE,SAAS,EAC3B,UAAWA,EAAE,OAAO,EAAE,SAAS,EAC/B,OAAQA,EAAE,OAAO,EAAE,SAAS,CAC9B,CAAC,EAiEKC,EAAuB,CAACC,EAAwBC,IAAqD,CACzG,IAAMC,EAAWD,GAAU,UAAYD,EAAI,yBACrCG,EAAWF,GAAU,UAAYD,EAAI,yBAE3C,MAAI,CAACE,GAAY,CAACC,EAAU,OAIrB,SAFSC,EAAO,KAAK,GAAGF,CAAQ,IAAIC,CAAQ,EAAE,EAAE,SAAS,QAAQ,CAEjD,EACzB,EAWA,IAAME,EAAc,CAACC,EAAkBC,IAC9BD,EACJ,WAAW,YAAaC,EAAO,OAAO,EACtC,WAAW,gBAAiBA,EAAO,WAAW,EAC9C,WAAW,QAASA,EAAO,GAAG,EAI7BC,EAAoB,GAUpBC,EAAc,YASdC,EAAgB,CAACC,EAAgBC,IAA0C,CAC/E,GAAIA,GAAa,MAAQA,IAAcJ,EAAmB,OAAOG,EAEjE,IAAIE,EAEJ,GAAI,CACFA,EAAM,IAAI,IAAIF,CAAM,CACtB,MAAQ,CACN,MAAM,IAAI,MACR,0DAA0DA,CAAM,kDAAkDC,CAAS,qBAC7H,CACF,CAEA,GAAIC,EAAI,OAAS,GAAI,OAAOF,EAC5BE,EAAI,KAAO,OAAOD,CAAS,EAM3B,IAAME,EAAUD,EAAI,SAAS,EAE7B,MAAO,CAACF,EAAO,SAAS,GAAG,GAAKG,EAAQ,SAAS,GAAG,EAAIA,EAAQ,MAAM,EAAG,EAAE,EAAIA,CACjF,EAQMC,EAAiC,KAkBjCC,EAAsB,CAACL,EAAgBC,IACvCA,GAAa,MAAQA,GAAaG,EAC7BL,EAAcC,EAAO,QAAQ,gBAAiB,SAAS,EAAGC,CAAS,EAGrEF,EAAcC,EAAQC,CAAS,EAclCK,EAAsBC,GAMd,CACZ,GAAM,CAAE,MAAAC,EAAO,UAAAC,EAAW,IAAAC,EAAK,WAAAC,EAAY,KAAAC,CAAK,EAAIL,EAEpD,GAAIK,GAAM,OAAQ,OAAOA,EAAK,OAE9B,IAAMZ,EAASN,EAAYe,EAAU,MAAO,CAI1C,QAASG,GAAM,SAAWD,EAAW,EAIrC,YAAaE,EAAiBL,EAAM,WAAW,EAC/C,IAAKE,GAAO,EACd,CAAC,EAED,OAAOL,EAAoBL,EAAQY,GAAM,SAAS,CACpD,EAQME,EAAa,CAACN,EAA8BO,IAA0D,CAE1G,IAAMC,EAAWR,EAAM,SAAWA,EAAM,KAAK,CAAC,EAE9C,OAAOA,EAAM,KAAK,SAAS,OAAO,GAAKO,EAAS,IAAIP,EAAM,WAAW,EAAI,QAAUQ,CACrF,EAcMC,EAAqB,IAAI,IAAI,CAAC,YAAa,YAAa,KAAK,CAAC,EAS9DC,EAAoBlB,GAA4B,CACpD,IAAImB,EAEJ,GAAI,CACFA,EAAW,IAAI,IAAInB,CAAM,EAAE,SAAS,YAAY,CAClD,MAAQ,CACN,MAAO,EACT,CAGA,IAAMoB,EAAOD,EAAS,WAAW,GAAG,GAAKA,EAAS,SAAS,GAAG,EAAIA,EAAS,MAAM,EAAG,EAAE,EAAIA,EAE1F,OAAOC,EAAK,SAAS,YAAY,GAAKH,EAAmB,IAAIG,CAAI,CACnE,EAGMC,EAAe,CAAC,CACpB,UAAAC,EACA,MAAAd,EACA,UAAAC,EACA,SAAAM,EACA,IAAAL,EACA,WAAAC,EACA,UAAAY,CACF,IAAgD,CAG9C,GAFeT,EAAWN,EAAOO,CAAQ,IAE1B,QAAS,CACtB,IAAMf,EAASM,EAAmB,CAAE,MAAAE,EAAO,UAAAC,EAAW,IAAAC,EAAK,WAAAC,EAAY,KAAMY,GAAW,IAAIf,EAAM,WAAW,CAAE,CAAC,EAMhH,OAAOU,EAAiBlB,CAAM,EAAI,CAAE,OAAAA,EAAQ,aAAc,GAAM,OAAQ,EAAM,EAAI,CAAE,OAAAA,EAAQ,aAAc,EAAK,CACjH,CAEA,GAAI,CAACU,EACH,MAAM,IAAI,MACR,gCAAgCY,CAAS,qCAAqCE,CAAa,6FAC7F,EAKF,MAAO,CAAE,OAFM9B,EAAYe,EAAU,MAAO,CAAE,QAAS,GAAI,YAAaD,EAAM,YAAa,IAAAE,CAAI,CAAC,EAE/E,aAAc,GAAM,OAAQ,GAAO,oBAAqB,WAAY,CACvF,EAmBae,EAAqB,CAAC,CACjC,MAAAC,EACA,SAAAX,EACA,IAAAL,EACA,WAAAC,EACA,WAAAgB,EACA,UAAAJ,CACF,IAA2C,CACzC,IAAMK,EAA4B,CAAC,EAC7BC,EAAUF,EAAa,CAAE,cAAeA,CAAW,EAAI,OAE7D,OAAW,CAACL,EAAWd,CAAK,IAAK,OAAO,QAAQkB,EAAM,MAAM,EAAG,CAC7D,IAAMI,EAAQT,EAAa,CAAE,UAAAC,EAAW,MAAAd,EAAO,UAAWkB,EAAM,UAAW,SAAAX,EAAU,IAAAL,EAAK,WAAAC,EAAY,UAAAY,CAAU,CAAC,EAEjHK,EAAON,CAAS,EAAIO,EAAU,CAAE,GAAGC,EAAO,QAAAD,CAAQ,EAAIC,CACxD,CAEA,OAAOF,CACT,EAGMG,EAAWC,GAA2B,CAC1C,IAAIC,EAEJ,MAAO,KACLA,IAAW,CAAE,MAAOD,EAAG,CAAE,EAElBC,EAAO,MAElB,EASaC,EAAU,MAAOC,GAAkD,CAC9E,IAAMC,EAAaC,EAAK,KAAKF,EAAKG,CAAmB,EAErD,GAAI,CAACC,EAAG,WAAWH,CAAU,EAAG,OAEhC,IAAMI,EAAOD,EAAG,SAASH,CAAU,EAI7BK,GADY,MAAM,OAFN,GAAGC,EAAcN,CAAU,EAAE,IAAI,UAAU,OAAOI,EAAK,OAAO,CAAC,KAGtD,QAE3B,GAAIC,IAAc,OAAW,OAE7B,IAAME,EAAW,OAAOF,GAAc,WAAa,MAAOA,EAA4B,EAAIA,EAEpFG,EAASC,EAAoB,UAAUF,CAAQ,EAErD,GAAI,CAACC,EAAO,QACV,MAAM,IAAI,MAAM,2BAA2BN,CAAmB,OAAOF,CAAU,KAAKU,EAAE,cAAcF,EAAO,KAAK,CAAC,EAAE,EAGrH,OAAOA,EAAO,KAAK,GACrB,EAGMG,EAAmBH,GAA8B,CACrD,GAAI,MAAM,QAAQA,CAAM,EACtB,OAAOA,EAAO,OAAQI,GACb,OAAOA,GAAM,QACrB,EAGH,GAAIJ,IAAW,MAAQ,OAAOA,GAAW,SAAU,CACjD,IAAMK,EAAaL,EAAmC,UAAaA,EAAmC,cAEtG,GAAI,MAAM,QAAQK,CAAS,EACzB,OAAOA,EAAU,OAAQD,GAChB,OAAOA,GAAM,QACrB,CAEL,CAEA,MAAO,CAAC,CACV,EAGME,EAAS,CAACC,EAAeC,IAAyC,CACtE,IAAIC,EAAMhB,EAAK,QAAQc,CAAK,EAE5B,OAAS,CACP,IAAMF,EAAYZ,EAAK,KAAKgB,EAAKD,CAAQ,EAEzC,GAAIb,EAAG,WAAWU,CAAS,EAAG,OAAOA,EAErC,IAAMK,EAASjB,EAAK,QAAQgB,CAAG,EAE/B,GAAIC,IAAWD,EAAK,OAEpBA,EAAMC,CACR,CACF,EA+BMC,EAAoB,KACjB,CAAE,SAAU,IAAI,IAAO,KAAM,IAAI,GAAM,GAS1CC,EAAyBC,GAAqC,CAClE,GAAIA,GAAO,KAAM,MAAO,GAExB,GAAI,CACF,OAAAC,EAAQ,KAAKD,EAAK,CAAC,EAEZ,EACT,OAASE,EAAO,CACd,OAAQA,EAAgC,OAAS,OACnD,CACF,EAaMC,EAAmBP,GAA8B,CACrD,IAAIQ,EAEJ,GAAI,CACFA,EAAUtB,EAAG,YAAYc,CAAG,CAC9B,MAAQ,CACN,OAAOE,EAAkB,CAC3B,CAEA,IAAMO,EAAW,IAAI,IACflD,EAAO,IAAI,IAEjB,QAAWmD,KAAQF,EACjB,GAAKE,EAAK,SAAS,OAAO,EAE1B,GAAI,CACF,IAAMnB,EAASoB,EAAyB,UAAU,KAAK,MAAMzB,EAAG,aAAaF,EAAK,KAAKgB,EAAKU,CAAI,EAAG,OAAO,CAAC,CAAC,EAO5G,GALI,CAACnB,EAAO,SAKR,CAACY,EAAsBZ,EAAO,KAAK,GAAG,EAAG,SAE7CkB,EAAS,IAAIlB,EAAO,KAAK,OAAO,EAChChC,EAAK,IAAIgC,EAAO,KAAK,QAAS,CAC5B,KAAMA,EAAO,KAAK,KAClB,OAAQA,EAAO,KAAK,OACpB,QAASA,EAAO,KAAK,QACrB,MAAOA,EAAO,KAAK,MACnB,UAAWA,EAAO,KAAK,SACzB,CAAC,CACH,MAAQ,CAEN,QACF,CAGF,MAAO,CAAE,SAAAkB,EAAU,KAAAlD,CAAK,CAC1B,EASaqD,EAAoB9B,GAA8B,CAC7D,IAAMkB,EAAMH,EAAOf,EAAK+B,CAAe,EAEvC,GAAIb,EAAK,OAAOO,EAAgBP,CAAG,EAEnC,IAAMc,EAASjB,EAAOf,EAAKiC,CAAgB,EAE3C,GAAI,CAACD,EAAQ,OAAOZ,EAAkB,EAEtC,GAAI,CACF,MAAO,CAAE,SAAU,IAAI,IAAIR,EAAgB,KAAK,MAAMR,EAAG,aAAa4B,EAAQ,OAAO,CAAC,CAAC,CAAC,EAAG,KAAM,IAAI,GAAM,CAC7G,MAAQ,CACN,OAAOZ,EAAkB,CAC3B,CACF,EAYA,IAAMc,EAAiBC,GAEdC,EAAa,MAAO,CAAC,YAAa,eAAgB,MAAM,EAAG,CAAE,IAAAD,EAAK,SAAU,OAAQ,CAAC,EAAE,KAAK,EAS/FE,GAAc,IACX,IAAI,QAAQ,CAACC,EAASC,IAAW,CACtC,IAAMC,EAAMC,EAAI,aAAa,EAE7BD,EAAI,MAAM,EACVA,EAAI,GAAG,QAASD,CAAM,EACtBC,EAAI,OAAO,EAAG,YAAa,IAAM,CAC/B,IAAME,EAAUF,EAAI,QAAQ,EACtBG,EAAO,OAAOD,GAAY,UAAYA,IAAY,KAAOA,EAAQ,KAAO,EAE9EF,EAAI,MAAM,IACDF,EAAQK,CAAI,CACpB,CACH,CAAC,CACH,CAAC,EAIGC,GAAe,qBAGfC,GAAmBV,GAA+B,CACtD,GAAI,CACF,IAAMW,EAAS,KAAK,MAAMC,EAAG,aAAaC,EAAK,KAAKb,EAAK,cAAc,EAAG,OAAO,CAAC,EAElF,OAAO,OAAOW,EAAO,MAAS,SAAWA,EAAO,KAAO,IACzD,MAAQ,CACN,OAAO,IACT,CACF,EAqBMG,GAAoBd,GAAkC,CAC1D,IAAMe,EAAMC,EAAQ,IAAIP,EAAY,EAEpC,GAAIM,GAAO,MAAQA,IAAQ,GAAI,OAAO,KAEtC,IAAME,EAAOP,GAAgBV,CAAG,EAEhC,GAAIiB,GAAQ,KAAM,OAAO,KAEzB,GAAI,CACF,IAAMC,EAAS,KAAK,MAAMH,CAAG,EAA8BE,CAAI,EAE/D,GAAI,OAAOC,GAAU,SAAU,MAAO,CAAE,KAAMA,CAAM,EAEpD,GAAIA,IAAU,MAAQ,OAAOA,GAAU,SAAU,OAAO,KAExD,GAAM,CAAE,KAAAV,EAAM,MAAAW,CAAM,EAAID,EAExB,OAAI,OAAOV,GAAS,SAAiB,KAE9B,CAAE,KAAAA,EAAM,MAAO,OAAOW,GAAU,SAAWA,EAAQ,MAAU,CACtE,MAAQ,CACN,OAAO,IACT,CACF,EAGMC,GAAa,IAgCNC,GAAc,MACzBC,EAA8B,CAAC,IAO3B,CACJ,IAAMtB,EAAMsB,EAAQ,KAAON,EAAQ,IAAI,EAIvC,GAAIM,EAAQ,UAAY,QAAS,MAAO,CAAE,MAAO,CAAC,CAAE,EAIpD,IAAMC,EAAUD,EAAQ,MAAQ,KAAOR,GAAiBd,CAAG,EAAI,KACzDQ,EAAOc,EAAQ,MAAQC,GAAS,MAAS,MAAMrB,GAAY,EAC3DsB,EAAaD,GAAW,KACxBE,EAAOH,EAAQ,MAAQI,EAKvBC,EACJJ,GAAS,OAAS,KAAO,OAAY,CAAE,SAAU,MAAO,KAAMA,EAAQ,MAAO,WAAYH,EAAW,EAChGQ,EAAS,CAAE,KAAApB,EAAM,KAAAiB,EAAM,GAAID,EAAa,CAAE,WAAAA,CAAW,EAAI,CAAC,EAAI,GAAIG,EAAM,CAAE,IAAAA,CAAI,EAAI,CAAC,CAAG,EACtFE,EAAM,MAAMC,EAAQ9B,CAAG,EAE7B,GAAI,CAAC6B,GAAK,MAAO,MAAO,CAAE,GAAGD,EAAQ,MAAO,CAAC,CAAE,EAE/C,GAAM,CAAE,SAAUG,EAAU,KAAMC,CAAU,EAAIC,EAAiBjC,CAAG,EAC9DkC,EAAMlB,EAAQ,IAAImB,CAAa,EAC/BC,EAAaC,EAAqBrB,EAAQ,IAAKM,EAAQ,SAAS,EAChEgB,EAAaC,EAAK,IAAM,CAG5B,GAAI,CACF,OAAOC,EAAezC,EAAcC,CAAG,CAAC,GAAKyC,CAC/C,MAAQ,CACN,OAAOA,CACT,CACF,CAAC,EAED,MAAO,CACL,GAAGb,EACH,MAAOc,EAAmB,CAAE,MAAOb,EAAI,MAAO,SAAAE,EAAU,IAAAG,EAAK,WAAAI,EAAY,WAAAF,EAAY,UAAAJ,CAAU,CAAC,CAClG,CACF,EAMaW,GAAgB,MAAOrB,EAA8B,CAAC,KACzD,MAAMD,GAAYC,CAAO,GAAG",
-  "names": ["Buffer", "execFileSync", "fs", "net", "path", "process", "pathToFileURL", "z", "z", "packageConfigSchema", "route", "INFRA_KIT_ENV", "PACKAGE_CONFIG_FILE", "DEV_CONTEXT_DIR", "path", "DEV_CONTEXT_FILE", "devContextFragmentSchema", "z", "buildBasicAuthHeader", "env", "override", "username", "password", "Buffer", "interpolate", "template", "values", "DEFAULT_HTTP_PORT", "LOOPBACK_V4", "withProxyPort", "target", "proxyPort", "url", "grafted", "LEGACY_SELF_SPAWNED_PORT_FLOOR", "resolveLegacyTarget", "resolveLocalTarget", "args", "route", "templates", "env", "getRelease", "info", "slugifyHostLabel", "pickSource", "localSet", "fallback", "LOOPBACK_HOSTNAMES", "isLoopbackTarget", "hostname", "bare", "resolveRoute", "routePath", "localInfo", "INFRA_KIT_ENV", "resolveProxyConfig", "proxy", "authHeader", "result", "headers", "entry", "once", "fn", "cached", "loadDev", "cwd", "configPath", "path", "PACKAGE_CONFIG_FILE", "fs", "stat", "rawExport", "pathToFileURL", "resolved", "parsed", "packageConfigSchema", "z", "extractPackages", "v", "candidate", "findUp", "start", "relative", "dir", "parent", "emptyLocalContext", "isFragmentWriterAlive", "pid", "process", "error", "readFragmentDir", "entries", "packages", "name", "devContextFragmentSchema", "readLocalContext", "DEV_CONTEXT_DIR", "legacy", "DEV_CONTEXT_FILE", "readGitBranch", "cwd", "execFileSync", "getFreePort", "resolve", "reject", "srv", "net", "address", "port", "UI_PORTS_ENV", "readPackageName", "parsed", "fs", "path", "resolveManagedUi", "raw", "process", "name", "entry", "alias", "HTTPS_PORT", "infraKitDev", "options", "managed", "strictPort", "host", "LOOPBACK_V4", "hmr", "server", "dev", "loadDev", "localSet", "localInfo", "readLocalContext", "env", "INFRA_KIT_ENV", "authHeader", "buildBasicAuthHeader", "getRelease", "once", "slugifyRelease", "DEFAULT_RELEASE_SLUG", "resolveProxyConfig", "infraKitProxy"]
-}

package/dist/chunk-Z6KTUVIC.js

@@ -1,2 +0,0 @@
-var a=e=>e,n={requiredScripts:["build","ts-check","eslint-check","prettier-check","test"],requiredFiles:["tsconfig.json","eslint.config.js","readme.md"],turboTasks:[]},c={requiredScripts:["build","dev","test","qa","infra-kit-check","fix"],requiredFiles:["turbo.json","pnpm-workspace.yaml"],turboTasks:["build","test","ts-check","eslint-check","prettier-check","infra-kit-check"]},f=(e,t=n)=>({requiredScripts:e.requiredScripts??[...t.requiredScripts],requiredFiles:e.requiredFiles??[...t.requiredFiles],turboTasks:e.turbo?.requiredTasks??[...t.turboTasks]});import{z as r}from"zod";var p="vendor.config.ts",o=r.string().refine(e=>{let t=/^(?:[/\\]|[a-z]:)/i.test(e),i=e.split(/[\\/]/).includes("..");return!t&&!i&&e.trim().length>0},{message:'must be a non-empty repo-relative path without ".." segments'}),s=r.object({name:r.string(),source:o,target:o,type:r.enum(["file","directory"]),vendored:r.boolean().optional()}),g=r.object({copy:r.array(s)}).strict(),l=e=>e;export{a,n as b,c,f as d,p as e,g as f,l as g};
-//# sourceMappingURL=chunk-Z6KTUVIC.js.map

package/dist/chunk-Z6KTUVIC.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/package-config/package-config.ts", "../src/lib/vendor/config-schema.ts"],
-  "sourcesContent": ["/**\n * Validation rules for a single workspace package, declared in its\n * `infra-kit.config.js`. Every field is optional: a key left unset falls back to\n * the active baseline ({@link DEFAULT_RULES} for packages, {@link ROOT_DEFAULT_RULES}\n * for the monorepo root), and a key set replaces that default wholesale (per-key,\n * no array concatenation) so a package can opt out with an explicit empty array.\n *\n * Most packages need none of these \u2014 the standard rules live in the baseline, so\n * a typical config is just `defineConfig(() => ({}))`.\n *\n * @example\n * // infra-kit.config.js\n * import { defineConfig } from 'infra-kit'\n *\n * export default defineConfig(() => ({}))\n */\nexport interface InfraKitPackageConfig {\n  /** Scripts that must be present in the package's package.json `scripts` map. */\n  requiredScripts?: string[]\n  /** Files (relative to the package root) that must exist on disk. */\n  requiredFiles?: string[]\n  /** Turborepo expectations \u2014 only meaningful where a turbo.json lives (the root). */\n  turbo?: {\n    /** Tasks that must be defined in turbo.json `tasks`. */\n    requiredTasks?: string[]\n  }\n  /** Local-dev configuration. Accepted-and-inert to the audit; consumed by the dev server. */\n  dev?: InfraKitDev\n}\n\n/** A proxy route's allowed backend source. */\nexport type InfraKitDevProxySource = 'local' | 'cloud'\n\nexport interface InfraKitDevProxyRoute {\n  /** Backend package this route targets when resolved locally. */\n  packageName: string\n  /** Capabilities this route can resolve to. Must be non-empty. */\n  from: InfraKitDevProxySource[]\n  /**\n   * Source used when a local backend for this package isn't active. Required when\n   * `from` lists more than one source; redundant (and omitted) for a single-source\n   * route. When set, must be one of `from`.\n   */\n  default?: InfraKitDevProxySource\n}\n\nexport interface InfraKitDevProxy {\n  /** URL templates. Placeholders like `<release>`/`<packageName>`/`<env>` are substituted at dev time. */\n  templates: {\n    local: string\n    cloud: string\n  }\n  /** Path-prefix (e.g. `/api`, `/api/v1`, `/media`) \u2192 route definition. */\n  routes: Record<string, InfraKitDevProxyRoute>\n}\n\nexport interface InfraKitDev {\n  proxy?: InfraKitDevProxy\n}\n\n/**\n * Accepted shapes for a package config's default export \u2014 mirrors Vite's\n * `defineConfig` input: a plain object, a sync factory, or an async factory.\n */\nexport type InfraKitPackageConfigInput =\n  InfraKitPackageConfig | (() => InfraKitPackageConfig) | (() => Promise<InfraKitPackageConfig>)\n\n/**\n * Identity helper that gives `infra-kit.config.js` authors full type inference\n * and editor autocomplete without changing the value \u2014 exactly like Vite's\n * `defineConfig`. Resolution of the factory form happens in the loader, not here.\n *\n * @example\n * export default defineConfig(() => ({}))\n *\n * @example\n * export default defineConfig(() => ({ requiredScripts: [] }))\n */\nexport const defineConfig = (config: InfraKitPackageConfigInput): InfraKitPackageConfigInput => {\n  return config\n}\n\n/** Fully-resolved rules with every defaultable field present. */\nexport interface ResolvedPackageRules {\n  requiredScripts: string[]\n  requiredFiles: string[]\n  turboTasks: string[]\n}\n\n/**\n * Baseline rules for a standard TypeScript workspace package, applied to any key\n * a package leaves unset. These are the \"under the hood\" defaults so a conforming\n * package's config can stay empty; non-standard packages override the relevant key.\n */\nexport const DEFAULT_RULES: Readonly<ResolvedPackageRules> = {\n  requiredScripts: ['build', 'ts-check', 'eslint-check', 'prettier-check', 'test'],\n  requiredFiles: ['tsconfig.json', 'eslint.config.js', 'readme.md'],\n  turboTasks: [],\n}\n\n/**\n * Baseline rules for the monorepo root (`infra-kit audit --root`). Checks the\n * root commands, the workspace/turbo files, and that the turbo pipeline defines\n * the expected tasks \u2014 so the root's own config can also stay empty.\n */\nexport const ROOT_DEFAULT_RULES: Readonly<ResolvedPackageRules> = {\n  requiredScripts: ['build', 'dev', 'test', 'qa', 'infra-kit-check', 'fix'],\n  requiredFiles: ['turbo.json', 'pnpm-workspace.yaml'],\n  turboTasks: ['build', 'test', 'ts-check', 'eslint-check', 'prettier-check', 'infra-kit-check'],\n}\n\n/**\n * Merge a parsed package config over a baseline. Each key is replaced wholesale\n * when the package provides it, otherwise the baseline value is used.\n *\n * @example\n * resolvePackageConfig({ requiredScripts: [] })\n * // => { requiredScripts: [], requiredFiles: [...DEFAULT_RULES.requiredFiles], turboTasks: [] }\n */\nexport const resolvePackageConfig = (\n  config: InfraKitPackageConfig,\n  baseline: Readonly<ResolvedPackageRules> = DEFAULT_RULES,\n): ResolvedPackageRules => {\n  return {\n    requiredScripts: config.requiredScripts ?? [...baseline.requiredScripts],\n    requiredFiles: config.requiredFiles ?? [...baseline.requiredFiles],\n    turboTasks: config.turbo?.requiredTasks ?? [...baseline.turboTasks],\n  }\n}\n", "import { z } from 'zod'\n\n/**\n * Pure (node-free) vendor config schema + authoring helper. Kept separate from\n * `config.ts` (which imports node builtins for the runtime loader) so the public\n * lib entry can re-export `defineVendorConfig` without dragging node types into\n * the emitted `.d.ts`.\n */\n\n/**\n * Filename a source repo provides at its root to declare WHAT `vendor sync`\n * copies (`copy[]`). Lives ONLY on the write path \u2014 `vendor check` never loads it.\n * WHERE/WHICH to stamp (`workspaceDir` + `targets`) is machine-local and lives in\n * the user-global factory config (`~/.infra-kit/vendor.json`).\n */\nexport const VENDOR_CONFIG_FILE = 'vendor.config.ts'\n\n/**\n * A non-empty, repo-relative path with no `..` segments and no absolute prefix\n * (POSIX `/`, UNC/`\\`, or a Windows drive like `C:`). Containment guard for\n * vendor copy items so a malicious/typo config can't read or write outside the\n * source/target repo roots. Kept as a string/regex check (no `node:path`) to\n * respect this file's node-free constraint \u2014 `sync-ops.ts` does the resolved\n * runtime containment assert as defense in depth.\n */\nconst safeRelPath = z.string().refine(\n  (p) => {\n    const isAbsolute = /^(?:[/\\\\]|[a-z]:)/i.test(p)\n    const hasDotDotSegment = p.split(/[\\\\/]/).includes('..')\n\n    return !isAbsolute && !hasDotDotSegment && p.trim().length > 0\n  },\n  { message: 'must be a non-empty repo-relative path without \"..\" segments' },\n)\n\n/**\n * One item to sync from the source repo into each target. `vendored: true` marks\n * workspace packages that must land under `vendor/` (the single-source-of-truth\n * code); everything else is root-level tooling that stays at the repo root.\n */\nexport const vendorCopyItemSchema = z.object({\n  name: z.string(),\n  source: safeRelPath,\n  target: safeRelPath,\n  type: z.enum(['file', 'directory']),\n  vendored: z.boolean().optional(),\n})\n\nexport const vendorConfigSchema = z\n  .object({\n    /** Files/dirs to copy. Items with `vendored: true` land under `vendor/`. */\n    copy: z.array(vendorCopyItemSchema),\n  })\n  // Reject stray keys so a leftover `targets` (now machine-local, in\n  // ~/.infra-kit/vendor.json) yields a clear \"unrecognized key\" error rather\n  // than being silently ignored.\n  .strict()\n\nexport type VendorCopyItem = z.infer<typeof vendorCopyItemSchema>\nexport type VendorConfig = z.infer<typeof vendorConfigSchema>\n\n/**\n * Identity helper for authoring a type-safe `vendor.config.ts` in a source repo.\n * Re-exported from the public lib entry so a source repo can\n * `import { defineVendorConfig } from 'infra-kit'`.\n *\n * NOTE: a `vendor.config.ts` must be type-strippable \u2014 Node's native type\n * stripping (Node >= 24) loads it without a build step, which forbids `enum`,\n * `namespace`, and parameter properties.\n *\n * @example\n * export default defineVendorConfig({\n *   copy: [{ name: 'Configs', source: 'vendor/configs', target: 'vendor/configs', type: 'directory', vendored: true }],\n * })\n */\nexport const defineVendorConfig = (config: VendorConfig): VendorConfig => {\n  return config\n}\n"],
-  "mappings": "AA8EO,IAAMA,EAAgBC,GACpBA,EAeIC,EAAgD,CAC3D,gBAAiB,CAAC,QAAS,WAAY,eAAgB,iBAAkB,MAAM,EAC/E,cAAe,CAAC,gBAAiB,mBAAoB,WAAW,EAChE,WAAY,CAAC,CACf,EAOaC,EAAqD,CAChE,gBAAiB,CAAC,QAAS,MAAO,OAAQ,KAAM,kBAAmB,KAAK,EACxE,cAAe,CAAC,aAAc,qBAAqB,EACnD,WAAY,CAAC,QAAS,OAAQ,WAAY,eAAgB,iBAAkB,iBAAiB,CAC/F,EAUaC,EAAuB,CAClCH,EACAI,EAA2CH,KAEpC,CACL,gBAAiBD,EAAO,iBAAmB,CAAC,GAAGI,EAAS,eAAe,EACvE,cAAeJ,EAAO,eAAiB,CAAC,GAAGI,EAAS,aAAa,EACjE,WAAYJ,EAAO,OAAO,eAAiB,CAAC,GAAGI,EAAS,UAAU,CACpE,GC/HF,OAAS,KAAAC,MAAS,MAeX,IAAMC,EAAqB,mBAU5BC,EAAcF,EAAE,OAAO,EAAE,OAC5BG,GAAM,CACL,IAAMC,EAAa,qBAAqB,KAAKD,CAAC,EACxCE,EAAmBF,EAAE,MAAM,OAAO,EAAE,SAAS,IAAI,EAEvD,MAAO,CAACC,GAAc,CAACC,GAAoBF,EAAE,KAAK,EAAE,OAAS,CAC/D,EACA,CAAE,QAAS,8DAA+D,CAC5E,EAOaG,EAAuBN,EAAE,OAAO,CAC3C,KAAMA,EAAE,OAAO,EACf,OAAQE,EACR,OAAQA,EACR,KAAMF,EAAE,KAAK,CAAC,OAAQ,WAAW,CAAC,EAClC,SAAUA,EAAE,QAAQ,EAAE,SAAS,CACjC,CAAC,EAEYO,EAAqBP,EAC/B,OAAO,CAEN,KAAMA,EAAE,MAAMM,CAAoB,CACpC,CAAC,EAIA,OAAO,EAmBGE,EAAsBC,GAC1BA",
-  "names": ["defineConfig", "config", "DEFAULT_RULES", "ROOT_DEFAULT_RULES", "resolvePackageConfig", "baseline", "z", "VENDOR_CONFIG_FILE", "safeRelPath", "p", "isAbsolute", "hasDotDotSegment", "vendorCopyItemSchema", "vendorConfigSchema", "defineVendorConfig", "config"]
-}

package/dist/dev-wizard-run-HGQO6FZV.js

@@ -1,2 +0,0 @@
-import{a as l}from"./chunk-TFHVQOVF.js";import{I as k,Q as w,v as d,w as v,x,y}from"./chunk-3F7XYJWY.js";import{e as W}from"./chunk-CHETBZ6M.js";import{c as b}from"./chunk-TUVUKM4K.js";import"./chunk-LTKR3F4N.js";import R from"@inquirer/checkbox";import N from"@inquirer/confirm";import $,{Separator as O}from"@inquirer/select";import B from"node:path";import h from"node:process";var f=e=>e.split("/")[0],z=e=>new Map(e.apps.map(r=>[r.name,r])),S=(e,r)=>{let a={},s=!1;for(let t of e.backends){let n=t.localCapable&&t.ownerApp!=null&&r.has(t.ownerApp);n||(s=!0);for(let o of t.routes)a[o]=n?"local":"cloud"}return{overrides:a,anyCloud:s}},M=(e,r)=>{let a=z(r),s=e.targets.filter(c=>c.endsWith("/ui")),t=new Set(e.targets.filter(c=>c.endsWith("/api")).map(f)),n={},o=!1;for(let c of s){let u=a.get(f(c)),{overrides:p,anyCloud:i}=u?S(u,t):{overrides:{},anyCloud:!1};i&&(o=!0),n[c]=Object.keys(p).length>0?{proxy:p}:{}}for(let c of t)n[`${c}/api`]??={};return{presetDef:{apps:n,cmux:e.cmux},anyCloudRoute:o,targetKeys:Object.keys(n).sort()}},C=(e,r,a)=>{let s=z(a),t=[...new Set(e.targetKeys.map(f))].sort(),n=new Set(e.targetKeys),o=t.every(u=>{let p=s.get(u);if(!p)return!1;let i=!p.hasUi||n.has(`${u}/ui`),m=!p.hasApi||n.has(`${u}/api`);return i&&m}),c=[`--app=${t.join(",")}`];return r.watch&&c.push("--watch"),r.cmux&&c.push("--cmux"),{flags:c.join(" "),exact:o}};var g={output:h.stderr,clearPromptOnDone:!0},j={select:e=>$({message:e.message,choices:e.choices,default:e.default},g),checkbox:e=>R({message:e.message,choices:e.choices},g),confirm:e=>N({message:e.message,default:e.default},g)},q=(e,r)=>{let a=new Map;for(let[s,t]of Object.entries(e)){let n=a.get(t.packageName),o=t.from.includes("local");n?(n.routes.push(s),n.localCapable=n.localCapable||o):a.set(t.packageName,{packageName:t.packageName,routes:[s],localCapable:o,ownerApp:r.get(t.packageName)})}return[...a.values()]},K=async e=>{let r=x(e),a=y(e),s=await w(),t=new Map(r.map(i=>[i.packageName,i.name])),n=new Map(r.map(i=>[i.name,i.packageName])),o=new Set(a.map(i=>i.name)),c=new Set(r.map(i=>i.name)),u=[...new Set([...c,...o])].sort();return{apps:await Promise.all(u.map(async i=>{let m=o.has(i),P=m?(await b(B.join(e,"apps",i,"ui")))?.proxy?.routes:void 0;return{name:i,hasApi:c.has(i),hasUi:m,apiPackage:n.get(i),backends:P?q(P,t):[]}})),presets:Object.keys(s.devServersPresets??{}),environments:s.environments}},U=e=>{let r=[];for(let a of e.apps){if(a.hasUi){let s=a.backends.flatMap(n=>n.routes),t=s.length>0?`frontend \u2014 proxies ${[...s].sort().join(", ")}`:"frontend";r.push({name:`${a.name}/ui`,value:`${a.name}/ui`,description:t})}a.hasApi&&r.push({name:`${a.name}/api`,value:`${a.name}/api`,description:"backend"})}return r},_=e=>{let r={api:e.apps.filter(t=>t.hasApi).map(t=>t.name),ui:e.apps.filter(t=>t.hasUi).map(t=>t.name)},a={},s=new Map;for(let t of e.apps){t.apiPackage!=null&&(a[t.name]=t.apiPackage);for(let n of t.backends)for(let o of n.routes)s.set(`${t.name} ${o}`,n.packageName)}return{discovered:r,apiPkgByApp:a,routePkg:(t,n)=>s.get(`${t} ${n}`)}},I=(e,r)=>k({__wizard__:e},_(r)).map(a=>a.message),A=async(e,r)=>{if(r.apps.length===0)return d.warn("No apps discovered to run."),null;let a=await e.checkbox({message:"\u{1F4E6} Which packages?",choices:U(r)});if(a.length===0)return d.warn("No packages selected."),null;let s=await e.confirm({message:"\u{1F440} Rebuild & restart on save (watch)?",default:!1}),t=await e.confirm({message:"\u{1F9E9} Run each app in its own cmux pane?",default:!1}),n={targets:a,watch:s,cmux:t},o=M(n,r);o.anyCloudRoute&&(n.env=await e.select({message:"\u2601\uFE0F  Point cloud routes at which environment?",choices:r.environments.map(p=>({name:p,value:p}))}),h.env[W]=n.env);let c=I(o.presetDef,r);if(c.length>0){d.warn("\u26A0\uFE0F  Proxy audit found issues with this selection:");for(let p of c)d.warn(`   \u2022 ${p}`);return null}E(o,n,r);let u=o.targetKeys.filter(p=>p.endsWith("/api")).map(p=>p.split("/")[0]);return t&&u.length>0?{include:u,presetDef:o.presetDef,watch:s,cmux:!0}:(t&&d.info("\u2139\uFE0F  cmux needs at least one local backend (panes are backend-only) \u2014 running in-process instead."),{presetDef:o.presetDef,watch:s,cmux:!1})},E=(e,r,a)=>{l.setInteractive();let s=C(e,r,a);l.addOption(s.flags,!0),l.print(),s.exact||d.info("\u2139\uFE0F  This part-level selection has no exact single-flag form \u2014 save it as a devPreset to reproduce it.")},T=async(e,r)=>{let a=await e.confirm({message:"\u{1F440} Rebuild & restart on save (watch)?",default:!1});return l.setInteractive(),l.addOption(r,!0),a&&l.addOption("--watch",!0),l.print(),{preset:r,watch:a,cmux:!1}},D=" manual",F=async(e,r)=>{if(r.presets.length===0)return A(e,r);let a=await e.select({message:"\u{1F680} Start from a preset, or configure manually?",choices:[...r.presets.map(s=>({name:s,value:s})),new O(" "),{name:"Manual (custom)\u2026",value:D}]});return a===D?A(e,r):T(e,a)},se=async(e=j,r=v(h.cwd()))=>F(e,await K(r));export{D as MANUAL_CHOICE,I as auditManualPlan,j as defaultPrompts,K as gatherWizardModel,se as runDevWizard,F as runWizardFlow};
-//# sourceMappingURL=dev-wizard-run-HGQO6FZV.js.map

package/dist/dev-wizard-run-HGQO6FZV.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/dev/dev-wizard-run.ts", "../src/dev/dev-wizard.ts"],
-  "sourcesContent": ["/**\n * Impure driver for the interactive `infra-kit dev` wizard: filesystem/config discovery, the inquirer\n * prompt flow (step-0 preset-or-manual, then the manual matrix), the pre-flight proxy audit, and the\n * `commandEcho` teaching line. The pure answer\u2192plan mapping lives in {@link file://./dev-wizard.ts}.\n *\n * Prompts are behind the injectable {@link WizardPrompts} seam so the flow is testable without a TTY.\n * This module is reached ONLY from the bare-invocation TTY branch of the entry point; every flagged /\n * non-TTY / `--json` / MCP invocation bypasses it entirely.\n */\nimport inquirerCheckbox from '@inquirer/checkbox'\nimport inquirerConfirm from '@inquirer/confirm'\nimport inquirerSelect, { Separator } from '@inquirer/select'\nimport path from 'node:path'\nimport process from 'node:process'\n\nimport { discoverApiApps, discoverUiApps, findMonorepoRoot } from 'src/dev/discovery'\nimport { commandEcho } from 'src/lib/command-echo'\nimport { INFRA_KIT_ENV_VAR } from 'src/lib/constants'\nimport { getInfraKitConfig } from 'src/lib/infra-kit-config'\nimport type { DevPreset } from 'src/lib/infra-kit-config'\nimport { logger } from 'src/lib/logger'\nimport { loadDev } from 'src/lib/vite/vite'\n\nimport { deriveManualPlan, equivalentCommand } from './dev-wizard.js'\nimport type { DerivedPlan, ManualSelection, ProxyBackend, WizardApp, WizardModel } from './dev-wizard.js'\nimport { validatePresetProxy } from './presets.js'\nimport type { DiscoveredParts, PresetProxyContext } from './presets.js'\n\n/** A wizard prompt choice \u2014 all values are strings, so the seam needs no generics. */\nexport interface WizardChoice {\n  name: string\n  value: string\n  description?: string\n  checked?: boolean\n  disabled?: boolean | string\n}\n\n/**\n * Injectable prompt seam (a string-valued subset of `@inquirer/*`). The default implementation\n * ({@link defaultPrompts}) delegates to the real prompts, rendering to stderr so the dev-server's\n * stdout stays clean. Tests pass a scripted object.\n */\nexport interface WizardPrompts {\n  select: (cfg: { message: string; choices: (WizardChoice | Separator)[]; default?: string }) => Promise<string>\n  checkbox: (cfg: { message: string; choices: WizardChoice[] }) => Promise<string[]>\n  confirm: (cfg: { message: string; default?: boolean }) => Promise<boolean>\n}\n\n/**\n * Shared `@inquirer/*` context. Rendered to stderr (mirrors the bare-`infra-kit` command palette).\n *\n * `clearPromptOnDone` erases each answered prompt instead of leaving a `\u2714 <question> <answer>` line\n * behind, so the wizard collapses to nothing once it finishes and the dev-server's ready header lands\n * at the top of a clean screen. The choices are not lost: {@link echoManual} / {@link runPresetBranch}\n * print the equivalent flag command, which is the durable record of what was picked.\n */\nconst promptContext = { output: process.stderr, clearPromptOnDone: true }\n\n/** Real `@inquirer/*` prompts, rendered to stderr and erased once answered. */\nexport const defaultPrompts: WizardPrompts = {\n  select: (cfg) => {\n    return inquirerSelect({ message: cfg.message, choices: cfg.choices, default: cfg.default }, promptContext)\n  },\n  checkbox: (cfg) => {\n    return inquirerCheckbox({ message: cfg.message, choices: cfg.choices }, promptContext)\n  },\n  confirm: (cfg) => {\n    return inquirerConfirm({ message: cfg.message, default: cfg.default }, promptContext)\n  },\n}\n\n/** What the wizard hands back to the entry point (merged into `DevServerOptions`), or null on cancel. */\nexport interface WizardResult {\n  /** Named preset (preset branch) \u2014 passed through as `options.preset`. */\n  preset?: string\n  /** In-memory preset (manual branch, non-cmux) \u2014 passed through as `options.presetDef`. */\n  presetDef?: DevPreset\n  /**\n   * App-name include list for the cmux path only: which discovered API apps get a pane. Paired with\n   * `presetDef`, which tells each pane the exact parts to run. An app selected UI-only gets no pane\n   * (cmux panes are opened per API app). Unset for the non-cmux manual path.\n   */\n  include?: string[]\n  watch: boolean\n  cmux: boolean\n}\n\n/** Group one frontend's `dev.proxy.routes` into {@link ProxyBackend}s keyed by backend package. */\nconst groupBackends = (\n  routes: Record<string, { packageName: string; from: readonly string[] }>,\n  ownerByPkg: Map<string, string>,\n): ProxyBackend[] => {\n  const byPkg = new Map<string, ProxyBackend>()\n\n  for (const [route, def] of Object.entries(routes)) {\n    const existing = byPkg.get(def.packageName)\n    const localCapable = def.from.includes('local')\n\n    if (existing) {\n      existing.routes.push(route)\n      existing.localCapable = existing.localCapable || localCapable\n    } else {\n      byPkg.set(def.packageName, {\n        packageName: def.packageName,\n        routes: [route],\n        localCapable,\n        ownerApp: ownerByPkg.get(def.packageName),\n      })\n    }\n  }\n\n  return [...byPkg.values()]\n}\n\n/** Discover apps + configs and assemble the {@link WizardModel} (backends resolved per frontend). */\nexport const gatherWizardModel = async (root: string): Promise<WizardModel> => {\n  const apiApps = discoverApiApps(root)\n  const uiApps = discoverUiApps(root)\n  const config = await getInfraKitConfig()\n\n  const ownerByPkg = new Map(\n    apiApps.map((a) => {\n      return [a.packageName, a.name] as const\n    }),\n  )\n  const apiPkgByName = new Map(\n    apiApps.map((a) => {\n      return [a.name, a.packageName] as const\n    }),\n  )\n  const uiNames = new Set(\n    uiApps.map((a) => {\n      return a.name\n    }),\n  )\n  const apiNames = new Set(\n    apiApps.map((a) => {\n      return a.name\n    }),\n  )\n  const allNames = [...new Set([...apiNames, ...uiNames])].sort()\n\n  const apps: WizardApp[] = await Promise.all(\n    allNames.map(async (name): Promise<WizardApp> => {\n      const hasUi = uiNames.has(name)\n      const routes = hasUi ? (await loadDev(path.join(root, 'apps', name, 'ui')))?.proxy?.routes : undefined\n\n      return {\n        name,\n        hasApi: apiNames.has(name),\n        hasUi,\n        apiPackage: apiPkgByName.get(name),\n        backends: routes ? groupBackends(routes, ownerByPkg) : [],\n      }\n    }),\n  )\n\n  return { apps, presets: Object.keys(config.devServersPresets ?? {}), environments: config.environments }\n}\n\n/**\n * Build the flat `<app>/<part>` checkbox choices, grouped per app as `ui` then `api`. A frontend choice\n * carries a description of the routes it proxies, so ticking the matching api part reads as \"run that\n * route locally\". This is the checkbox the user directly picks their targets from.\n *\n * Nothing starts checked: the manual branch is opt-in, so a run only ever launches what was explicitly\n * ticked. Pre-checking every part would make the fast path (accept the defaults) boot the whole monorepo\n * \u2014 the exact opposite of why someone reached for \"Manual\" over a preset.\n */\nconst buildPartChoices = (model: WizardModel): WizardChoice[] => {\n  const choices: WizardChoice[] = []\n\n  for (const app of model.apps) {\n    if (app.hasUi) {\n      const routes = app.backends.flatMap((b) => {\n        return b.routes\n      })\n      const description = routes.length > 0 ? `frontend \u2014 proxies ${[...routes].sort().join(', ')}` : 'frontend'\n\n      choices.push({ name: `${app.name}/ui`, value: `${app.name}/ui`, description })\n    }\n    if (app.hasApi) {\n      choices.push({ name: `${app.name}/api`, value: `${app.name}/api`, description: 'backend' })\n    }\n  }\n\n  return choices\n}\n\n/** Build the audit context from the gathered model (no re-reading of configs). */\nconst buildAuditContext = (model: WizardModel): PresetProxyContext => {\n  const discovered: DiscoveredParts = {\n    api: model.apps\n      .filter((a) => {\n        return a.hasApi\n      })\n      .map((a) => {\n        return a.name\n      }),\n    ui: model.apps\n      .filter((a) => {\n        return a.hasUi\n      })\n      .map((a) => {\n        return a.name\n      }),\n  }\n  const apiPkgByApp: Record<string, string> = {}\n  const routeToPkg = new Map<string, string>()\n\n  for (const app of model.apps) {\n    // Map EVERY discovered api app to its own api package \u2014 including api-only apps a frontend proxies\n    // to cross-app \u2014 so `launchedPkgs` in validatePresetProxy is faithful (mirrors preset-proxy-check.ts).\n    // Deriving this from proxy backends alone would miss api-only owners and false-positive the audit.\n    if (app.apiPackage != null) apiPkgByApp[app.name] = app.apiPackage\n    for (const b of app.backends) {\n      for (const route of b.routes) {\n        routeToPkg.set(`${app.name} ${route}`, b.packageName)\n      }\n    }\n  }\n\n  return {\n    discovered,\n    apiPkgByApp,\n    routePkg: (app, route) => {\n      return routeToPkg.get(`${app} ${route}`)\n    },\n  }\n}\n\n/**\n * Run the assembled plan through the SAME proxy-locality rule the root audit uses. Returns issue\n * messages (empty when clean). Catches a `local` override whose backend won't launch \u2014 the wizard's\n * derivation launches owners, so a hit means the backend has no discoverable owning app.\n */\nexport const auditManualPlan = (presetDef: DevPreset, model: WizardModel): string[] => {\n  return validatePresetProxy({ __wizard__: presetDef }, buildAuditContext(model)).map((i) => {\n    return i.message\n  })\n}\n\n/** The manual-branch flow: app + per-app proxy + env + watch + cmux \u2192 audited plan \u2192 echo. */\nconst runManualBranch = async (prompts: WizardPrompts, model: WizardModel): Promise<WizardResult | null> => {\n  if (model.apps.length === 0) {\n    logger.warn('No apps discovered to run.')\n\n    return null\n  }\n\n  const selectedTargets = await prompts.checkbox({ message: '\uD83D\uDCE6 Which packages?', choices: buildPartChoices(model) })\n\n  if (selectedTargets.length === 0) {\n    logger.warn('No packages selected.')\n\n    return null\n  }\n\n  const watch = await prompts.confirm({ message: '\uD83D\uDC40 Rebuild & restart on save (watch)?', default: false })\n  const cmux = await prompts.confirm({ message: '\uD83E\uDDE9 Run each app in its own cmux pane?', default: false })\n\n  const selection: ManualSelection = { targets: selectedTargets, watch, cmux }\n  const plan = deriveManualPlan(selection, model)\n\n  if (plan.anyCloudRoute) {\n    selection.env = await prompts.select({\n      message: '\u2601\uFE0F  Point cloud routes at which environment?',\n      choices: model.environments.map((e) => {\n        return { name: e, value: e }\n      }),\n    })\n    process.env[INFRA_KIT_ENV_VAR] = selection.env\n  }\n\n  const issues = auditManualPlan(plan.presetDef, model)\n\n  if (issues.length > 0) {\n    logger.warn('\u26A0\uFE0F  Proxy audit found issues with this selection:')\n    for (const issue of issues) {\n      logger.warn(`   \u2022 ${issue}`)\n    }\n\n    return null\n  }\n\n  echoManual(plan, selection, model)\n\n  // cmux opens one pane per selected API app. `include` picks WHICH apps get a pane; `presetDef` tells\n  // each pane exactly which of its parts to run. Without the latter a pane runs `--app=<name>`, which\n  // expands to every part the app has \u2014 silently starting a UI the user just unticked.\n  const apiApps = plan.targetKeys\n    .filter((k) => {\n      return k.endsWith('/api')\n    })\n    .map((k) => {\n      return k.split('/')[0]!\n    })\n\n  // An empty include would collapse to `null` in `normalizeAppInclude` and make cmux run EVERY api app,\n  // so a cmux run with no selected backends (e.g. an all-frontend selection) falls back to in-process.\n  if (cmux && apiApps.length > 0) {\n    return { include: apiApps, presetDef: plan.presetDef, watch, cmux: true }\n  }\n\n  if (cmux) {\n    logger.info('\u2139\uFE0F  cmux needs at least one local backend (panes are backend-only) \u2014 running in-process instead.')\n  }\n\n  return { presetDef: plan.presetDef, watch, cmux: false }\n}\n\n/** Print the equivalent flag command (and, for a part-level selection, the save-as-preset hint). */\nconst echoManual = (plan: DerivedPlan, selection: ManualSelection, model: WizardModel): void => {\n  commandEcho.setInteractive()\n\n  const eq = equivalentCommand(plan, selection, model)\n\n  commandEcho.addOption(eq.flags, true)\n  commandEcho.print()\n\n  if (!eq.exact) {\n    logger.info('\u2139\uFE0F  This part-level selection has no exact single-flag form \u2014 save it as a devPreset to reproduce it.')\n  }\n}\n\n/** The preset-branch flow: run a named preset, asking only whether to watch (presets can't encode it). */\nconst runPresetBranch = async (prompts: WizardPrompts, preset: string): Promise<WizardResult> => {\n  const watch = await prompts.confirm({ message: '\uD83D\uDC40 Rebuild & restart on save (watch)?', default: false })\n\n  commandEcho.setInteractive()\n  commandEcho.addOption(preset, true)\n  if (watch) commandEcho.addOption('--watch', true)\n  commandEcho.print()\n\n  return { preset, watch, cmux: false }\n}\n\n/** Sentinel value for the \"Manual (custom)\" step-0 choice (a preset name can never be empty). */\nexport const MANUAL_CHOICE = ' manual'\n\n/**\n * Drive the wizard's branch flow over an ALREADY-gathered model (no disk/config access). Split from\n * {@link runDevWizard} so the flow is unit-testable with scripted prompts + a fixture model.\n */\nexport const runWizardFlow = async (prompts: WizardPrompts, model: WizardModel): Promise<WizardResult | null> => {\n  if (model.presets.length === 0) {\n    return runManualBranch(prompts, model)\n  }\n\n  const choice = await prompts.select({\n    message: '\uD83D\uDE80 Start from a preset, or configure manually?',\n    choices: [\n      ...model.presets.map((p) => {\n        return { name: p, value: p }\n      }),\n      new Separator(' '),\n      { name: 'Manual (custom)\u2026', value: MANUAL_CHOICE },\n    ],\n  })\n\n  return choice === MANUAL_CHOICE ? runManualBranch(prompts, model) : runPresetBranch(prompts, choice)\n}\n\n/**\n * Gather the model from disk/config, then drive the wizard flow, returning the resolved run options (or\n * null on cancel / empty selection). The entry point calls this on a bare TTY `infra-kit dev`.\n */\nexport const runDevWizard = async (\n  prompts: WizardPrompts = defaultPrompts,\n  root: string = findMonorepoRoot(process.cwd()),\n): Promise<WizardResult | null> => {\n  return runWizardFlow(prompts, await gatherWizardModel(root))\n}\n", "/**\n * Pure core of the interactive `infra-kit dev` wizard (the no-args, TTY path).\n *\n * The wizard is FRONTEND-CENTRIC: you pick apps to run, and for each frontend you choose, per backend\n * it proxies to, whether that backend runs LOCALLY (its `/api` is launched \u2192 the route resolves local)\n * or stays CLOUD (not launched \u2192 the route proxies to the `<env>` cloud target). A backend runs iff a\n * frontend points at it locally, or its app is selected and not demoted to cloud. This module turns\n * those answers into an in-memory {@link DevPreset} the runner consumes verbatim (part-level targets\n * that the app-name-only `--app` include cannot express) \u2014 and is side-effect-free so the mapping is\n * fully unit-testable. The impure I/O (discovery, inquirer prompts, audit, launch) lives in\n * {@link file://./dev-wizard-run.ts}.\n */\nimport type { DevPreset, ProxySource } from 'src/lib/infra-kit-config'\n\n/**\n * One backend a frontend's proxy routes can be pointed at, grouped by the backend package. A frontend\n * that maps `/api` and `/media` to the same package yields ONE {@link ProxyBackend} with both routes \u2014\n * launching the package flips every one of its `local`-capable routes together (see `pickSource`).\n */\nexport interface ProxyBackend {\n  /** Backend package name (a route's `packageName`). */\n  packageName: string\n  /** Route paths that resolve to this package (for display + the audit's per-route overrides). */\n  routes: string[]\n  /** True when at least one of `routes` lists `local` in its `from` capabilities \u2014 i.e. it is toggleable. A `false` backend is fixed-cloud, shown as info. */\n  localCapable: boolean\n  /** App folder whose `api` package is {@link packageName}, or undefined when no discovered app owns it (a `local` choice then has nothing to launch \u2014 the audit flags it). */\n  ownerApp?: string\n}\n\n/** A discovered app as the wizard sees it: which parts exist + which backends its frontend proxies to. */\nexport interface WizardApp {\n  /** App folder name (e.g. `client`). */\n  name: string\n  /** Has `apps/<app>/api` (a launchable backend). */\n  hasApi: boolean\n  /** Has `apps/<app>/ui` (a launchable frontend). */\n  hasUi: boolean\n  /**\n   * This app's OWN `api` package name (from `apps/<app>/api`), or undefined when it has no api. Carried\n   * so the audit can build a faithful `app \u2192 apiPackage` map for EVERY discovered api app \u2014 including\n   * api-only apps a frontend proxies to cross-app \u2014 mirroring the root audit (`preset-proxy-check.ts`).\n   */\n  apiPackage?: string\n  /** Backends this app's frontend proxies to (empty for api-only apps or a frontend with no `dev.proxy`). */\n  backends: ProxyBackend[]\n}\n\n/** Everything the wizard needs, gathered impurely by {@link file://./dev-wizard-run.ts}. */\nexport interface WizardModel {\n  /** All discovered apps (api and/or ui), sorted by name. */\n  apps: WizardApp[]\n  /** `devServersPresets` names (drives the preset-or-manual step-0). */\n  presets: string[]\n  /** Configured `environments` (the cloud-env `select` options). */\n  environments: string[]\n}\n\n/** The manual-branch answers collected from the prompts, fed to {@link deriveManualPlan}. */\nexport interface ManualSelection {\n  /**\n   * The `<app>/<part>` target keys the user ticked directly (e.g. `client/ui`, `client/api`). A frontend's\n   * proxy route resolves LOCAL iff the backend's owner-api part is in this set \u2014 otherwise CLOUD \u2014 so the\n   * part checkbox IS the local/cloud decision; there is no separate per-backend question.\n   */\n  targets: string[]\n  /** Chosen cloud env for cloud routes (undefined when nothing resolves cloud). */\n  env?: string\n  /** Rebuild + restart on save. */\n  watch: boolean\n  /** One cmux pane per app. */\n  cmux: boolean\n}\n\n/** The resolved run plan derived from a {@link ManualSelection}. */\nexport interface DerivedPlan {\n  /** In-memory preset handed to the runner (`options.presetDef`). */\n  presetDef: DevPreset\n  /** At least one route resolves to cloud \u2192 an env must be chosen (pre-flight gate). */\n  anyCloudRoute: boolean\n  /** Resolved `<app>/<part>` target keys, sorted \u2014 for the echo + audit display. */\n  targetKeys: string[]\n}\n\n/** App folder name from an `<app>/<part>` target key. */\nconst appOf = (key: string): string => {\n  return key.split('/')[0]!\n}\n\n/** Index a model's apps by folder name for O(1) lookup. */\nconst byName = (model: WizardModel): Map<string, WizardApp> => {\n  return new Map(\n    model.apps.map((a) => {\n      return [a.name, a]\n    }),\n  )\n}\n\n/**\n * Resolve ONE selected frontend's proxy routes against the set of api parts the user ticked: a route is\n * `local` iff its backend is `localCapable` AND that backend's owner-api part was selected \u2014 otherwise\n * `cloud`. Kept separate from {@link deriveManualPlan} so the per-app override loop stays flat.\n */\nconst resolveUiProxy = (\n  app: WizardApp,\n  selectedApiApps: ReadonlySet<string>,\n): { overrides: Record<string, ProxySource>; anyCloud: boolean } => {\n  const overrides: Record<string, ProxySource> = {}\n  let anyCloud = false\n\n  for (const backend of app.backends) {\n    const isLocal = backend.localCapable && backend.ownerApp != null && selectedApiApps.has(backend.ownerApp)\n\n    if (!isLocal) anyCloud = true\n    for (const route of backend.routes) {\n      overrides[route] = isLocal ? 'local' : 'cloud'\n    }\n  }\n\n  return { overrides, anyCloud }\n}\n\n/**\n * Turn a part-level {@link ManualSelection} into an in-memory {@link DevPreset}. Because the user picks\n * `<app>/<part>` targets directly, the mapping is straightforward:\n *  - every selected `<app>/ui` runs that frontend;\n *  - every selected `<app>/api` runs that backend locally;\n *  - each frontend's proxy route resolves `local` iff the backend's owner-api part was also selected\n *    (even cross-app), else `cloud` \u2014 i.e. ticking the api part IS the local choice.\n *\n * @example\n * // client frontend only (its /api left unticked \u2192 its proxy route resolves to cloud):\n * deriveManualPlan(\n *   { targets: ['client/ui'], watch: false, cmux: false },\n *   { apps: [{ name: 'client', hasApi: true, hasUi: true,\n *              backends: [{ packageName: 'client-api', routes: ['/api'], localCapable: true, ownerApp: 'client' }] }],\n *     presets: [], environments: ['dev'] },\n * ).targetKeys // => ['client/ui']\n */\nexport const deriveManualPlan = (selection: ManualSelection, model: WizardModel): DerivedPlan => {\n  const apps = byName(model)\n  const uiKeys = selection.targets.filter((t) => {\n    return t.endsWith('/ui')\n  })\n  const apiApps = new Set(\n    selection.targets\n      .filter((t) => {\n        return t.endsWith('/api')\n      })\n      .map(appOf),\n  )\n\n  const presetApps: Record<string, { proxy?: Record<string, ProxySource> }> = {}\n  let anyCloud = false\n\n  for (const key of uiKeys) {\n    const app = apps.get(appOf(key))\n    const { overrides, anyCloud: cloud } = app ? resolveUiProxy(app, apiApps) : { overrides: {}, anyCloud: false }\n\n    if (cloud) anyCloud = true\n    presetApps[key] = Object.keys(overrides).length > 0 ? { proxy: overrides } : {}\n  }\n  for (const name of apiApps) {\n    presetApps[`${name}/api`] ??= {}\n  }\n\n  return {\n    presetDef: { apps: presetApps, cmux: selection.cmux },\n    anyCloudRoute: anyCloud,\n    targetKeys: Object.keys(presetApps).sort(),\n  }\n}\n\n/** The equivalent non-interactive command, plus whether it reproduces the selection exactly. */\nexport interface EquivalentCommand {\n  /** The `--app=\u2026`-form flag string (no leading `infra-kit dev`). */\n  flags: string\n  /**\n   * True when `--app` reproduces the plan exactly \u2014 i.e. every involved app runs ALL the parts it has.\n   * False for a part-level selection (e.g. frontend-only), which `--app` (app-name granularity) cannot\n   * express; the caller then hints \"save as a preset\" for exact reproduction.\n   */\n  exact: boolean\n}\n\n/**\n * Build the equivalent `infra-kit dev --app=\u2026 [--watch] [--cmux]` flag string for a derived plan.\n * `exact` is true only when the target set covers every part each involved app HAS (a whole-app\n * selection), since `--app` filters by app name, not part.\n */\nexport const equivalentCommand = (\n  plan: DerivedPlan,\n  selection: ManualSelection,\n  model: WizardModel,\n): EquivalentCommand => {\n  const apps = byName(model)\n  const involved = [...new Set(plan.targetKeys.map(appOf))].sort()\n  const present = new Set(plan.targetKeys)\n\n  const exact = involved.every((name) => {\n    const app = apps.get(name)\n\n    if (!app) return false\n\n    const uiOk = !app.hasUi || present.has(`${name}/ui`)\n    const apiOk = !app.hasApi || present.has(`${name}/api`)\n\n    return uiOk && apiOk\n  })\n\n  const parts = [`--app=${involved.join(',')}`]\n\n  if (selection.watch) parts.push('--watch')\n  if (selection.cmux) parts.push('--cmux')\n\n  return { flags: parts.join(' '), exact }\n}\n"],
-  "mappings": "qNASA,OAAOA,MAAsB,qBAC7B,OAAOC,MAAqB,oBAC5B,OAAOC,GAAkB,aAAAC,MAAiB,mBAC1C,OAAOC,MAAU,YACjB,OAAOC,MAAa,eCwEpB,IAAMC,EAASC,GACNA,EAAI,MAAM,GAAG,EAAE,CAAC,EAInBC,EAAUC,GACP,IAAI,IACTA,EAAM,KAAK,IAAKC,GACP,CAACA,EAAE,KAAMA,CAAC,CAClB,CACH,EAQIC,EAAiB,CACrBC,EACAC,IACkE,CAClE,IAAMC,EAAyC,CAAC,EAC5CC,EAAW,GAEf,QAAWC,KAAWJ,EAAI,SAAU,CAClC,IAAMK,EAAUD,EAAQ,cAAgBA,EAAQ,UAAY,MAAQH,EAAgB,IAAIG,EAAQ,QAAQ,EAEnGC,IAASF,EAAW,IACzB,QAAWG,KAASF,EAAQ,OAC1BF,EAAUI,CAAK,EAAID,EAAU,QAAU,OAE3C,CAEA,MAAO,CAAE,UAAAH,EAAW,SAAAC,CAAS,CAC/B,EAmBaI,EAAmB,CAACC,EAA4BX,IAAoC,CAC/F,IAAMY,EAAOb,EAAOC,CAAK,EACnBa,EAASF,EAAU,QAAQ,OAAQG,GAChCA,EAAE,SAAS,KAAK,CACxB,EACKC,EAAU,IAAI,IAClBJ,EAAU,QACP,OAAQG,GACAA,EAAE,SAAS,MAAM,CACzB,EACA,IAAIjB,CAAK,CACd,EAEMmB,EAAsE,CAAC,EACzEV,EAAW,GAEf,QAAWR,KAAOe,EAAQ,CACxB,IAAMV,EAAMS,EAAK,IAAIf,EAAMC,CAAG,CAAC,EACzB,CAAE,UAAAO,EAAW,SAAUY,CAAM,EAAId,EAAMD,EAAeC,EAAKY,CAAO,EAAI,CAAE,UAAW,CAAC,EAAG,SAAU,EAAM,EAEzGE,IAAOX,EAAW,IACtBU,EAAWlB,CAAG,EAAI,OAAO,KAAKO,CAAS,EAAE,OAAS,EAAI,CAAE,MAAOA,CAAU,EAAI,CAAC,CAChF,CACA,QAAWa,KAAQH,EACjBC,EAAW,GAAGE,CAAI,MAAM,IAAM,CAAC,EAGjC,MAAO,CACL,UAAW,CAAE,KAAMF,EAAY,KAAML,EAAU,IAAK,EACpD,cAAeL,EACf,WAAY,OAAO,KAAKU,CAAU,EAAE,KAAK,CAC3C,CACF,EAmBaG,EAAoB,CAC/BC,EACAT,EACAX,IACsB,CACtB,IAAMY,EAAOb,EAAOC,CAAK,EACnBqB,EAAW,CAAC,GAAG,IAAI,IAAID,EAAK,WAAW,IAAIvB,CAAK,CAAC,CAAC,EAAE,KAAK,EACzDyB,EAAU,IAAI,IAAIF,EAAK,UAAU,EAEjCG,EAAQF,EAAS,MAAOH,GAAS,CACrC,IAAMf,EAAMS,EAAK,IAAIM,CAAI,EAEzB,GAAI,CAACf,EAAK,MAAO,GAEjB,IAAMqB,EAAO,CAACrB,EAAI,OAASmB,EAAQ,IAAI,GAAGJ,CAAI,KAAK,EAC7CO,EAAQ,CAACtB,EAAI,QAAUmB,EAAQ,IAAI,GAAGJ,CAAI,MAAM,EAEtD,OAAOM,GAAQC,CACjB,CAAC,EAEKC,EAAQ,CAAC,SAASL,EAAS,KAAK,GAAG,CAAC,EAAE,EAE5C,OAAIV,EAAU,OAAOe,EAAM,KAAK,SAAS,EACrCf,EAAU,MAAMe,EAAM,KAAK,QAAQ,EAEhC,CAAE,MAAOA,EAAM,KAAK,GAAG,EAAG,MAAAH,CAAM,CACzC,EDhKA,IAAMI,EAAgB,CAAE,OAAQC,EAAQ,OAAQ,kBAAmB,EAAK,EAG3DC,EAAgC,CAC3C,OAASC,GACAC,EAAe,CAAE,QAASD,EAAI,QAAS,QAASA,EAAI,QAAS,QAASA,EAAI,OAAQ,EAAGH,CAAa,EAE3G,SAAWG,GACFE,EAAiB,CAAE,QAASF,EAAI,QAAS,QAASA,EAAI,OAAQ,EAAGH,CAAa,EAEvF,QAAUG,GACDG,EAAgB,CAAE,QAASH,EAAI,QAAS,QAASA,EAAI,OAAQ,EAAGH,CAAa,CAExF,EAmBMO,EAAgB,CACpBC,EACAC,IACmB,CACnB,IAAMC,EAAQ,IAAI,IAElB,OAAW,CAACC,EAAOC,CAAG,IAAK,OAAO,QAAQJ,CAAM,EAAG,CACjD,IAAMK,EAAWH,EAAM,IAAIE,EAAI,WAAW,EACpCE,EAAeF,EAAI,KAAK,SAAS,OAAO,EAE1CC,GACFA,EAAS,OAAO,KAAKF,CAAK,EAC1BE,EAAS,aAAeA,EAAS,cAAgBC,GAEjDJ,EAAM,IAAIE,EAAI,YAAa,CACzB,YAAaA,EAAI,YACjB,OAAQ,CAACD,CAAK,EACd,aAAAG,EACA,SAAUL,EAAW,IAAIG,EAAI,WAAW,CAC1C,CAAC,CAEL,CAEA,MAAO,CAAC,GAAGF,EAAM,OAAO,CAAC,CAC3B,EAGaK,EAAoB,MAAOC,GAAuC,CAC7E,IAAMC,EAAUC,EAAgBF,CAAI,EAC9BG,EAASC,EAAeJ,CAAI,EAC5BK,EAAS,MAAMC,EAAkB,EAEjCb,EAAa,IAAI,IACrBQ,EAAQ,IAAKM,GACJ,CAACA,EAAE,YAAaA,EAAE,IAAI,CAC9B,CACH,EACMC,EAAe,IAAI,IACvBP,EAAQ,IAAKM,GACJ,CAACA,EAAE,KAAMA,EAAE,WAAW,CAC9B,CACH,EACME,EAAU,IAAI,IAClBN,EAAO,IAAKI,GACHA,EAAE,IACV,CACH,EACMG,EAAW,IAAI,IACnBT,EAAQ,IAAKM,GACJA,EAAE,IACV,CACH,EACMI,EAAW,CAAC,GAAG,IAAI,IAAI,CAAC,GAAGD,EAAU,GAAGD,CAAO,CAAC,CAAC,EAAE,KAAK,EAiB9D,MAAO,CAAE,KAfiB,MAAM,QAAQ,IACtCE,EAAS,IAAI,MAAOC,GAA6B,CAC/C,IAAMC,EAAQJ,EAAQ,IAAIG,CAAI,EACxBpB,EAASqB,GAAS,MAAMC,EAAQC,EAAK,KAAKf,EAAM,OAAQY,EAAM,IAAI,CAAC,IAAI,OAAO,OAAS,OAE7F,MAAO,CACL,KAAAA,EACA,OAAQF,EAAS,IAAIE,CAAI,EACzB,MAAAC,EACA,WAAYL,EAAa,IAAII,CAAI,EACjC,SAAUpB,EAASD,EAAcC,EAAQC,CAAU,EAAI,CAAC,CAC1D,CACF,CAAC,CACH,EAEe,QAAS,OAAO,KAAKY,EAAO,mBAAqB,CAAC,CAAC,EAAG,aAAcA,EAAO,YAAa,CACzG,EAWMW,EAAoBC,GAAuC,CAC/D,IAAMC,EAA0B,CAAC,EAEjC,QAAWC,KAAOF,EAAM,KAAM,CAC5B,GAAIE,EAAI,MAAO,CACb,IAAM3B,EAAS2B,EAAI,SAAS,QAASC,GAC5BA,EAAE,MACV,EACKC,EAAc7B,EAAO,OAAS,EAAI,2BAAsB,CAAC,GAAGA,CAAM,EAAE,KAAK,EAAE,KAAK,IAAI,CAAC,GAAK,WAEhG0B,EAAQ,KAAK,CAAE,KAAM,GAAGC,EAAI,IAAI,MAAO,MAAO,GAAGA,EAAI,IAAI,MAAO,YAAAE,CAAY,CAAC,CAC/E,CACIF,EAAI,QACND,EAAQ,KAAK,CAAE,KAAM,GAAGC,EAAI,IAAI,OAAQ,MAAO,GAAGA,EAAI,IAAI,OAAQ,YAAa,SAAU,CAAC,CAE9F,CAEA,OAAOD,CACT,EAGMI,EAAqBL,GAA2C,CACpE,IAAMM,EAA8B,CAClC,IAAKN,EAAM,KACR,OAAQV,GACAA,EAAE,MACV,EACA,IAAKA,GACGA,EAAE,IACV,EACH,GAAIU,EAAM,KACP,OAAQV,GACAA,EAAE,KACV,EACA,IAAKA,GACGA,EAAE,IACV,CACL,EACMiB,EAAsC,CAAC,EACvCC,EAAa,IAAI,IAEvB,QAAWN,KAAOF,EAAM,KAAM,CAIxBE,EAAI,YAAc,OAAMK,EAAYL,EAAI,IAAI,EAAIA,EAAI,YACxD,QAAWC,KAAKD,EAAI,SAClB,QAAWxB,KAASyB,EAAE,OACpBK,EAAW,IAAI,GAAGN,EAAI,IAAI,IAAIxB,CAAK,GAAIyB,EAAE,WAAW,CAG1D,CAEA,MAAO,CACL,WAAAG,EACA,YAAAC,EACA,SAAU,CAACL,EAAKxB,IACP8B,EAAW,IAAI,GAAGN,CAAG,IAAIxB,CAAK,EAAE,CAE3C,CACF,EAOa+B,EAAkB,CAACC,EAAsBV,IAC7CW,EAAoB,CAAE,WAAYD,CAAU,EAAGL,EAAkBL,CAAK,CAAC,EAAE,IAAKY,GAC5EA,EAAE,OACV,EAIGC,EAAkB,MAAOC,EAAwBd,IAAqD,CAC1G,GAAIA,EAAM,KAAK,SAAW,EACxB,OAAAe,EAAO,KAAK,4BAA4B,EAEjC,KAGT,IAAMC,EAAkB,MAAMF,EAAQ,SAAS,CAAE,QAAS,4BAAsB,QAASf,EAAiBC,CAAK,CAAE,CAAC,EAElH,GAAIgB,EAAgB,SAAW,EAC7B,OAAAD,EAAO,KAAK,uBAAuB,EAE5B,KAGT,IAAME,EAAQ,MAAMH,EAAQ,QAAQ,CAAE,QAAS,+CAAyC,QAAS,EAAM,CAAC,EAClGI,EAAO,MAAMJ,EAAQ,QAAQ,CAAE,QAAS,+CAAyC,QAAS,EAAM,CAAC,EAEjGK,EAA6B,CAAE,QAASH,EAAiB,MAAAC,EAAO,KAAAC,CAAK,EACrEE,EAAOC,EAAiBF,EAAWnB,CAAK,EAE1CoB,EAAK,gBACPD,EAAU,IAAM,MAAML,EAAQ,OAAO,CACnC,QAAS,yDACT,QAASd,EAAM,aAAa,IAAKsB,IACxB,CAAE,KAAMA,EAAG,MAAOA,CAAE,EAC5B,CACH,CAAC,EACDtD,EAAQ,IAAIuD,CAAiB,EAAIJ,EAAU,KAG7C,IAAMK,EAASf,EAAgBW,EAAK,UAAWpB,CAAK,EAEpD,GAAIwB,EAAO,OAAS,EAAG,CACrBT,EAAO,KAAK,6DAAmD,EAC/D,QAAWU,KAASD,EAClBT,EAAO,KAAK,aAAQU,CAAK,EAAE,EAG7B,OAAO,IACT,CAEAC,EAAWN,EAAMD,EAAWnB,CAAK,EAKjC,IAAMhB,EAAUoC,EAAK,WAClB,OAAQO,GACAA,EAAE,SAAS,MAAM,CACzB,EACA,IAAKA,GACGA,EAAE,MAAM,GAAG,EAAE,CAAC,CACtB,EAIH,OAAIT,GAAQlC,EAAQ,OAAS,EACpB,CAAE,QAASA,EAAS,UAAWoC,EAAK,UAAW,MAAAH,EAAO,KAAM,EAAK,GAGtEC,GACFH,EAAO,KAAK,iHAAkG,EAGzG,CAAE,UAAWK,EAAK,UAAW,MAAAH,EAAO,KAAM,EAAM,EACzD,EAGMS,EAAa,CAACN,EAAmBD,EAA4BnB,IAA6B,CAC9F4B,EAAY,eAAe,EAE3B,IAAMC,EAAKC,EAAkBV,EAAMD,EAAWnB,CAAK,EAEnD4B,EAAY,UAAUC,EAAG,MAAO,EAAI,EACpCD,EAAY,MAAM,EAEbC,EAAG,OACNd,EAAO,KAAK,sHAAuG,CAEvH,EAGMgB,EAAkB,MAAOjB,EAAwBkB,IAA0C,CAC/F,IAAMf,EAAQ,MAAMH,EAAQ,QAAQ,CAAE,QAAS,+CAAyC,QAAS,EAAM,CAAC,EAExG,OAAAc,EAAY,eAAe,EAC3BA,EAAY,UAAUI,EAAQ,EAAI,EAC9Bf,GAAOW,EAAY,UAAU,UAAW,EAAI,EAChDA,EAAY,MAAM,EAEX,CAAE,OAAAI,EAAQ,MAAAf,EAAO,KAAM,EAAM,CACtC,EAGagB,EAAgB,UAMhBC,EAAgB,MAAOpB,EAAwBd,IAAqD,CAC/G,GAAIA,EAAM,QAAQ,SAAW,EAC3B,OAAOa,EAAgBC,EAASd,CAAK,EAGvC,IAAMmC,EAAS,MAAMrB,EAAQ,OAAO,CAClC,QAAS,wDACT,QAAS,CACP,GAAGd,EAAM,QAAQ,IAAKoC,IACb,CAAE,KAAMA,EAAG,MAAOA,CAAE,EAC5B,EACD,IAAIC,EAAU,GAAG,EACjB,CAAE,KAAM,wBAAoB,MAAOJ,CAAc,CACnD,CACF,CAAC,EAED,OAAOE,IAAWF,EAAgBpB,EAAgBC,EAASd,CAAK,EAAI+B,EAAgBjB,EAASqB,CAAM,CACrG,EAMaG,GAAe,MAC1BxB,EAAyB7C,EACzBc,EAAewD,EAAiBvE,EAAQ,IAAI,CAAC,IAEtCkE,EAAcpB,EAAS,MAAMhC,EAAkBC,CAAI,CAAC",
-  "names": ["inquirerCheckbox", "inquirerConfirm", "inquirerSelect", "Separator", "path", "process", "appOf", "key", "byName", "model", "a", "resolveUiProxy", "app", "selectedApiApps", "overrides", "anyCloud", "backend", "isLocal", "route", "deriveManualPlan", "selection", "apps", "uiKeys", "t", "apiApps", "presetApps", "cloud", "name", "equivalentCommand", "plan", "involved", "present", "exact", "uiOk", "apiOk", "parts", "promptContext", "process", "defaultPrompts", "cfg", "inquirerSelect", "inquirerCheckbox", "inquirerConfirm", "groupBackends", "routes", "ownerByPkg", "byPkg", "route", "def", "existing", "localCapable", "gatherWizardModel", "root", "apiApps", "discoverApiApps", "uiApps", "discoverUiApps", "config", "getInfraKitConfig", "a", "apiPkgByName", "uiNames", "apiNames", "allNames", "name", "hasUi", "loadDev", "path", "buildPartChoices", "model", "choices", "app", "b", "description", "buildAuditContext", "discovered", "apiPkgByApp", "routeToPkg", "auditManualPlan", "presetDef", "validatePresetProxy", "i", "runManualBranch", "prompts", "logger", "selectedTargets", "watch", "cmux", "selection", "plan", "deriveManualPlan", "e", "INFRA_KIT_ENV_VAR", "issues", "issue", "echoManual", "k", "commandEcho", "eq", "equivalentCommand", "runPresetBranch", "preset", "MANUAL_CHOICE", "runWizardFlow", "choice", "p", "Separator", "runDevWizard", "findMonorepoRoot"]
-}

package/dist/entry/index.d.ts

@@ -1,4 +0,0 @@
-export { defineConfig } from '../lib/package-config/package-config';
-export type { InfraKitDev, InfraKitDevProxy, InfraKitDevProxyRoute, InfraKitDevProxySource, InfraKitPackageConfig, InfraKitPackageConfigInput, } from '../lib/package-config/package-config';
-export { defineVendorConfig } from '../lib/vendor/config-schema';
-export type { VendorConfig, VendorCopyItem } from '../lib/vendor/config-schema';

package/dist/entry/vite.d.ts

@@ -1,2 +0,0 @@
-export { infraKitDev, infraKitProxy, resolveProxyConfig, slugifyRelease } from '../lib/vite/vite';
-export type { InfraKitBasicAuth, InfraKitDevOptions, InfraKitViteProxy, InfraKitViteProxyEntry } from '../lib/vite/vite';

package/dist/index.js

@@ -1,2 +0,0 @@
-import{a as e,g as o}from"./chunk-Z6KTUVIC.js";export{e as defineConfig,o as defineVendorConfig};
-//# sourceMappingURL=index.js.map

package/dist/lib/package-config/package-config-schema.d.ts

@@ -1,35 +0,0 @@
-import { z } from 'zod';
-/**
- * Schema for the resolved (post-factory) package config object. `strictObject`
- * rejects unknown keys so typos in `infra-kit.config.ts` surface as validation
- * errors instead of being silently ignored.
- *
- * Kept in its own module — separate from the public `defineConfig`/types entry —
- * so the published `infra-kit` type surface stays free of a `zod` import.
- */
-export declare const packageConfigSchema: z.ZodObject<{
-    requiredScripts: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    requiredFiles: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    turbo: z.ZodOptional<z.ZodObject<{
-        requiredTasks: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    }, z.core.$strict>>;
-    dev: z.ZodOptional<z.ZodObject<{
-        proxy: z.ZodOptional<z.ZodObject<{
-            templates: z.ZodObject<{
-                local: z.ZodString;
-                cloud: z.ZodString;
-            }, z.core.$strict>;
-            routes: z.ZodRecord<z.ZodString, z.ZodObject<{
-                packageName: z.ZodString;
-                from: z.ZodArray<z.ZodEnum<{
-                    local: "local";
-                    cloud: "cloud";
-                }>>;
-                default: z.ZodOptional<z.ZodEnum<{
-                    local: "local";
-                    cloud: "cloud";
-                }>>;
-            }, z.core.$strict>>;
-        }, z.core.$strict>>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;

package/dist/lib/package-config/package-config.d.ts

@@ -1,99 +0,0 @@
-/**
- * Validation rules for a single workspace package, declared in its
- * `infra-kit.config.js`. Every field is optional: a key left unset falls back to
- * the active baseline ({@link DEFAULT_RULES} for packages, {@link ROOT_DEFAULT_RULES}
- * for the monorepo root), and a key set replaces that default wholesale (per-key,
- * no array concatenation) so a package can opt out with an explicit empty array.
- *
- * Most packages need none of these — the standard rules live in the baseline, so
- * a typical config is just `defineConfig(() => ({}))`.
- *
- * @example
- * // infra-kit.config.js
- * import { defineConfig } from 'infra-kit'
- *
- * export default defineConfig(() => ({}))
- */
-export interface InfraKitPackageConfig {
-    /** Scripts that must be present in the package's package.json `scripts` map. */
-    requiredScripts?: string[];
-    /** Files (relative to the package root) that must exist on disk. */
-    requiredFiles?: string[];
-    /** Turborepo expectations — only meaningful where a turbo.json lives (the root). */
-    turbo?: {
-        /** Tasks that must be defined in turbo.json `tasks`. */
-        requiredTasks?: string[];
-    };
-    /** Local-dev configuration. Accepted-and-inert to the audit; consumed by the dev server. */
-    dev?: InfraKitDev;
-}
-/** A proxy route's allowed backend source. */
-export type InfraKitDevProxySource = 'local' | 'cloud';
-export interface InfraKitDevProxyRoute {
-    /** Backend package this route targets when resolved locally. */
-    packageName: string;
-    /** Capabilities this route can resolve to. Must be non-empty. */
-    from: InfraKitDevProxySource[];
-    /**
-     * Source used when a local backend for this package isn't active. Required when
-     * `from` lists more than one source; redundant (and omitted) for a single-source
-     * route. When set, must be one of `from`.
-     */
-    default?: InfraKitDevProxySource;
-}
-export interface InfraKitDevProxy {
-    /** URL templates. Placeholders like `<release>`/`<packageName>`/`<env>` are substituted at dev time. */
-    templates: {
-        local: string;
-        cloud: string;
-    };
-    /** Path-prefix (e.g. `/api`, `/api/v1`, `/media`) → route definition. */
-    routes: Record<string, InfraKitDevProxyRoute>;
-}
-export interface InfraKitDev {
-    proxy?: InfraKitDevProxy;
-}
-/**
- * Accepted shapes for a package config's default export — mirrors Vite's
- * `defineConfig` input: a plain object, a sync factory, or an async factory.
- */
-export type InfraKitPackageConfigInput = InfraKitPackageConfig | (() => InfraKitPackageConfig) | (() => Promise<InfraKitPackageConfig>);
-/**
- * Identity helper that gives `infra-kit.config.js` authors full type inference
- * and editor autocomplete without changing the value — exactly like Vite's
- * `defineConfig`. Resolution of the factory form happens in the loader, not here.
- *
- * @example
- * export default defineConfig(() => ({}))
- *
- * @example
- * export default defineConfig(() => ({ requiredScripts: [] }))
- */
-export declare const defineConfig: (config: InfraKitPackageConfigInput) => InfraKitPackageConfigInput;
-/** Fully-resolved rules with every defaultable field present. */
-export interface ResolvedPackageRules {
-    requiredScripts: string[];
-    requiredFiles: string[];
-    turboTasks: string[];
-}
-/**
- * Baseline rules for a standard TypeScript workspace package, applied to any key
- * a package leaves unset. These are the "under the hood" defaults so a conforming
- * package's config can stay empty; non-standard packages override the relevant key.
- */
-export declare const DEFAULT_RULES: Readonly<ResolvedPackageRules>;
-/**
- * Baseline rules for the monorepo root (`infra-kit audit --root`). Checks the
- * root commands, the workspace/turbo files, and that the turbo pipeline defines
- * the expected tasks — so the root's own config can also stay empty.
- */
-export declare const ROOT_DEFAULT_RULES: Readonly<ResolvedPackageRules>;
-/**
- * Merge a parsed package config over a baseline. Each key is replaced wholesale
- * when the package provides it, otherwise the baseline value is used.
- *
- * @example
- * resolvePackageConfig({ requiredScripts: [] })
- * // => { requiredScripts: [], requiredFiles: [...DEFAULT_RULES.requiredFiles], turboTasks: [] }
- */
-export declare const resolvePackageConfig: (config: InfraKitPackageConfig, baseline?: Readonly<ResolvedPackageRules>) => ResolvedPackageRules;

package/dist/lib/release-slug/release-slug.d.ts

@@ -1,43 +0,0 @@
-/**
- * Shared, dependency-light release-slug helper.
- *
- * Extracted from `lib/vite/vite.ts` so BOTH the published `infra-kit/vite` helper
- * (which re-exports it) and the dev-server's dev-context fragment writer derive the
- * `<release>` hostname segment from ONE implementation — the recorded slug and the
- * helper-computed slug can never drift. Pure (regex only, no imports) so importing it
- * into the lightweight `infra-kit/vite` bundle stays cheap.
- */
-/**
- * Slugify an arbitrary string into a single DNS label: lowercase, collapse every
- * non-alphanumeric run to `-`, and drop leading/trailing separators. Returns `''`
- * when the input carries no alphanumeric run (the caller must treat that as "no label").
- *
- * portless rejects any hostname outside `[a-z0-9.-]`, so every segment fed into a
- * `<release>.<packageName>.localhost` alias must pass through here. A scoped npm name
- * (`@hulyo/client-ui`) is the motivating case: registering it raw fails with
- * `Invalid hostname`, and because the driver swallows that into a best-effort `false`,
- * the whole hero-URL path degrades silently to `localhost:<port>`.
- *
- * Distinct from {@link slugifyRelease}: this does NOT strip a git-flow prefix, so a
- * package legitimately named `fix-utils` keeps its `fix-` prefix.
- *
- * @example
- * slugifyHostLabel('@hulyo/client-ui') // => 'hulyo-client-ui'
- * slugifyHostLabel('backend-api')      // => 'backend-api'
- */
-export declare const slugifyHostLabel: (label: string) => string;
-/**
- * Slugify a git branch into a `<release>` token: strip a leading git-flow prefix
- * (`feature/`, `release/`, …), then reduce the remainder to a single DNS label.
- *
- * @example
- * slugifyRelease('release/2.4')     // => '2-4'
- * slugifyRelease('feature/HUL-123') // => 'hul-123'
- */
-export declare const slugifyRelease: (branch: string) => string;
-/**
- * The `<release>` label used when no git branch resolves (outside a repo, or a branch that slugifies to
- * nothing). Both the dev-server's alias writer and `infra-kit/vite`'s template interpolation fall back
- * to this SAME constant — a divergence here would emit a hostname no alias backs.
- */
-export declare const DEFAULT_RELEASE_SLUG = "local";

package/dist/lib/vendor/config-schema.d.ts

@@ -1,58 +0,0 @@
-import { z } from 'zod';
-/**
- * Pure (node-free) vendor config schema + authoring helper. Kept separate from
- * `config.ts` (which imports node builtins for the runtime loader) so the public
- * lib entry can re-export `defineVendorConfig` without dragging node types into
- * the emitted `.d.ts`.
- */
-/**
- * Filename a source repo provides at its root to declare WHAT `vendor sync`
- * copies (`copy[]`). Lives ONLY on the write path — `vendor check` never loads it.
- * WHERE/WHICH to stamp (`workspaceDir` + `targets`) is machine-local and lives in
- * the user-global factory config (`~/.infra-kit/vendor.json`).
- */
-export declare const VENDOR_CONFIG_FILE = "vendor.config.ts";
-/**
- * One item to sync from the source repo into each target. `vendored: true` marks
- * workspace packages that must land under `vendor/` (the single-source-of-truth
- * code); everything else is root-level tooling that stays at the repo root.
- */
-export declare const vendorCopyItemSchema: z.ZodObject<{
-    name: z.ZodString;
-    source: z.ZodString;
-    target: z.ZodString;
-    type: z.ZodEnum<{
-        file: "file";
-        directory: "directory";
-    }>;
-    vendored: z.ZodOptional<z.ZodBoolean>;
-}, z.core.$strip>;
-export declare const vendorConfigSchema: z.ZodObject<{
-    copy: z.ZodArray<z.ZodObject<{
-        name: z.ZodString;
-        source: z.ZodString;
-        target: z.ZodString;
-        type: z.ZodEnum<{
-            file: "file";
-            directory: "directory";
-        }>;
-        vendored: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strip>>;
-}, z.core.$strict>;
-export type VendorCopyItem = z.infer<typeof vendorCopyItemSchema>;
-export type VendorConfig = z.infer<typeof vendorConfigSchema>;
-/**
- * Identity helper for authoring a type-safe `vendor.config.ts` in a source repo.
- * Re-exported from the public lib entry so a source repo can
- * `import { defineVendorConfig } from 'infra-kit'`.
- *
- * NOTE: a `vendor.config.ts` must be type-strippable — Node's native type
- * stripping (Node >= 24) loads it without a build step, which forbids `enum`,
- * `namespace`, and parameter properties.
- *
- * @example
- * export default defineVendorConfig({
- *   copy: [{ name: 'Configs', source: 'vendor/configs', target: 'vendor/configs', type: 'directory', vendored: true }],
- * })
- */
-export declare const defineVendorConfig: (config: VendorConfig) => VendorConfig;