infra-kit 0.3.12 → 0.3.13

package/dist/chunk-M5FC2MOJ.js

@@ -1,220 +0,0 @@
-import{a as gs,b as ks,c as gt,d as Sr,e as ws,f as bs,g as Rs,h as xs,i as to,j as Es,k as Ar,l as or,m as nr,n as xt,o as Et,s as sr,t as Pt,u as ir}from"./chunk-ADCSGQAU.js";import{a as Rt}from"./chunk-LJVPQQ75.js";import{a as ht,c as Q,d as w,e as bt,f as ee,i as m,j as x,k as W}from"./chunk-VISEADOF.js";import{B as l,D as ds,F as us,M as ms,P as fs,Q as hs,R as Re,S as vs,T as ro,U as ne,W as D,X as E,Y as ys,Z as Ze,a as dt,b as g,d as ut,e as ts,f as mt,g as N,h as pe,i as be,j as os,k as eo,l as X,m as O,n as Oe,o as ns,p as ss,q as oe,r as R,s as Ye,t as is,u as ft,v as as,w as cs,x as ls,y as ps}from"./chunk-DWZSB6O6.js";import{a as q,b as vt,c as $r,d as Ps,e as yt,f as Xe,g as Qe,h as kt,i as er,j as Ne,k as rr,l as wt,n as tr,o as Ts,p as De,q as je,r as se}from"./chunk-CHETBZ6M.js";import Or from"node:path";import nc from"node:process";import{z as H}from"zod";var xe={requiredScripts:["build","ts-check","eslint-check","prettier-check","test"],requiredFiles:["tsconfig.json","eslint.config.js","readme.md"],turboTasks:[]},oo={requiredScripts:["build","dev","test","qa","infra-kit-check","fix"],requiredFiles:["turbo.json","pnpm-workspace.yaml"],turboTasks:["build","test","ts-check","eslint-check","prettier-check","infra-kit-check"]},no=(e,r=xe)=>({requiredScripts:e.requiredScripts??[...r.requiredScripts],requiredFiles:e.requiredFiles??[...r.requiredFiles],turboTasks:e.turbo?.requiredTasks??[...r.turboTasks]});import Ba from"node:fs/promises";var de=async e=>{try{return await Ba.access(e),!0}catch{return!1}};import tc from"node:path";import{packageConfigSchema as Ka}from"@slip-stream-kit/config/internal";import Cs from"node:fs/promises";import Ss from"node:path";import{pathToFileURL as Ga}from"node:url";import{z as Ua}from"zod";var Ee="infra-kit.config.ts",so=async e=>{try{let r=await Cs.readFile(Ss.join(e,"package.json"),"utf-8");return JSON.parse(r)}catch{return{}}},Ir=async(e,r=xe)=>{let t=Ss.join(e,Ee);if(!await de(t))throw new Error(`${Ee} not found at ${t}`);let o=await Cs.stat(t),i=(await import(`${Ga(t).href}?mtime=${Number(o.mtimeMs)}`)).default;if(i===void 0)throw new Error(`${Ee} at ${t} has no default export`);let a=typeof i=="function"?await i():i,c=Ka.safeParse(a);if(!c.success)throw new Error(`Invalid ${Ee} at ${t}: ${Ua.prettifyError(c.error)}`);return no(c.data,r)};import $s from"node:fs/promises";import Tt from"node:path";import za from"yaml";var qa="pnpm-workspace.yaml",Ha=async e=>(await $s.readdir(e,{withFileTypes:!0}).catch(()=>[])).filter(t=>t.isDirectory()).map(t=>Tt.join(e,t.name)),Ya=async(e,r)=>{let t=[];for(let o of e){if(r==="*"){t.push(...await Ha(o));continue}let s=Tt.join(o,r);await de(s)&&t.push(s)}return t},Za=async(e,r)=>{let t=[e];for(let o of r.split("/"))t=await Ya(t,o);return t},_r=async e=>{let r=await $s.readFile(Tt.join(e,qa),"utf-8"),o=((za.parse(r)??{}).packages??[]).filter(n=>!n.startsWith("!")&&!n.startsWith("vendor")),s=new Set;for(let n of o){let i=await Za(e,n);for(let a of i)await de(Tt.join(a,"package.json"))&&s.add(a)}return[...s].sort()};var io=async(e,r=xe)=>{try{let t=await Ir(e,r);return{check:{name:Ee,status:"pass",message:"present and valid"},rules:t}}catch(t){return{check:{name:Ee,status:"fail",message:t.message},rules:null}}};import Xa from"node:fs/promises";import Qa from"node:path";var ao=async(e,r)=>Promise.all(r.map(async t=>{let o=await Xa.stat(Qa.join(e,t)).catch(()=>null);return o?o.isFile()?{name:`file:${t}`,status:"pass",message:"exists"}:{name:`file:${t}`,status:"fail",message:`not a file: ${t} (found a directory)`}:{name:`file:${t}`,status:"fail",message:`missing file: ${t}`}}));var co=(e,r)=>r.map(t=>{let o=e[t];return typeof o!="string"?{name:`script:${t}`,status:"fail",message:`missing "${t}" in package.json scripts`}:o.trim().length===0?{name:`script:${t}`,status:"fail",message:`"${t}" is empty in package.json scripts`}:{name:`script:${t}`,status:"pass",message:"defined"}});import ec from"node:fs/promises";import rc from"node:path";var ar="turbo.json",lo=async(e,r)=>{if(r.length===0)return[];let t;try{let s=await ec.readFile(rc.join(e,ar),"utf-8");t=JSON.parse(s)}catch(s){return[{name:ar,status:"fail",message:`cannot read/parse ${ar}: ${s.message}`}]}let o=t.tasks;return o===null||typeof o!="object"?[{name:ar,status:"fail",message:`no "tasks" object defined in ${ar}`}]:r.map(s=>{let n=s in o||`//#${s}`in o;return{name:`turbo:${s}`,status:n?"pass":"fail",message:n?"defined":`missing turbo task "${s}" in ${ar}`}})};var po=async(e,r=xe)=>{let t=await so(e),o=t.name??tc.basename(e),{check:s,rules:n}=await io(e,r),i=[s];n&&(i.push(...co(t.scripts??{},n.requiredScripts)),i.push(...await ao(e,n.requiredFiles)),i.push(...await lo(e,n.turboTasks)));let a=i.every(c=>c.status==="pass");return{packageDir:e,packageName:o,checks:i,passed:a}};var h=e=>[{type:"text",text:e}],y=e=>e;var oc=(e,r)=>[...r.map(t=>({name:`devServersPresets:config:${t.app}`,status:"fail",message:`could not load apps/${t.app}/ui/infra-kit.config.ts (referenced by a preset proxy override): ${t.message}`})),...e.map(t=>({name:`devServersPresets:${t.preset}`,status:"fail",message:t.message}))],As=async e=>{let r=(await E()).devServersPresets;if(!r||Object.keys(r).length===0)return null;let t=ms(r);if(t.length>0){let u=t.map(d=>({name:`devServersPresets:${d.preset}`,status:"fail",message:d.message}));return{packageDir:e,packageName:"devServersPresets",checks:u,passed:!1}}let o=ds(e),s=us(e),n={api:o.map(u=>u.name),ui:s.map(u=>u.name)},{ctx:i,loadErrors:a}=await gs(e,r,n,o),c=oc(fs(r,i),a),p=c.length===0?[{name:"devServersPresets:proxy-locality",status:"pass",message:"every local proxy override resolves to a backend the preset launches"}]:c;return{packageDir:e,packageName:"devServersPresets",checks:p,passed:c.length===0}};var sc=async e=>{let r=Or.resolve(e);for(;r!==Or.dirname(r);){if(await de(Or.join(r,"package.json")))return r;r=Or.dirname(r)}if(await de(Or.join(r,"package.json")))return r;throw new Error(`No package.json found in or above ${e} \u2014 cd into a package directory, or pass --root to audit a monorepo root`)},ic=async e=>e.root?[{dir:await R(),baseline:oo}]:e.all?(await _r(await R())).map(t=>({dir:t})):[{dir:await sc(e.cwd??nc.cwd())}],ac=e=>{let r=0,t=0;for(let i of e)for(let a of i.checks)r+=1,a.status!=="pass"&&(t+=1,l.info(`[FAIL] ${i.packageName} ${a.name}: ${a.message}`));let o=e.every(i=>i.passed),s=(i,a)=>`${i} ${a}${i===1?"":"s"}`,n=`${s(r,"check")}, ${s(e.length,"target")}`;return l.info(o?`\u2705 audit passed \u2014 ${n}`:`\u274C audit failed \u2014 ${t}/${n}`),o},Is=async(e={})=>{let r=await ic(e),t=[];for(let n of r)t.push(await po(n.dir,n.baseline));if(e.root){let n=await As(r[0].dir);n&&t.push(n)}let s={allPassed:ac(t),packages:t.map(n=>({name:n.packageName,passed:n.passed,checks:n.checks}))};return{content:h(JSON.stringify(s,null,2)),structuredContent:s}},cc={all:H.boolean().optional().describe("Audit every non-vendor workspace package"),root:H.boolean().optional().describe("Audit the monorepo root (turbo pipeline + root commands)")},lc={allPassed:H.boolean().describe("Whether every audited package passed all checks"),packages:H.array(H.object({name:H.string(),passed:H.boolean(),checks:H.array(H.object({name:H.string(),status:H.enum(["pass","fail"]),message:H.string()}))})).describe("Per-package check results")},uo=y({name:"audit",description:"Audit packages against infra-kit.config.ts rules (config present and valid, required scripts, required files, and turbo tasks for the root). Defaults to the current package; all=true audits every non-vendor workspace package; root=true audits the monorepo root.",inputSchema:cc,outputSchema:lc,handler:e=>Is({all:e.all,root:e.root})});import{z as Nr}from"zod";var _s=async()=>{let[e,r]=await Promise.all([E(),D()]),t=Object.keys(e).sort();l.info(`Merged config for ${r.projectName} \u2014 ${t.length} section(s): ${t.join(", ")}`),l.info(`  source: ${r.main}`);let o={config:e,configPath:r.main,projectName:r.projectName};return{content:h(JSON.stringify(o,null,2)),structuredContent:o}},pc={config:Nr.record(Nr.string(),Nr.unknown()).describe("The fully resolved infra-kit configuration \u2014 the same object every command sees at runtime, after the project infra-kit.json, the user-global, and the user-scope per-project override layers are merged (later layers win). Top-level sections include envManagement, ide, worktrees, envAutoLoad, dev, devServersPresets, and devProxy."),configPath:Nr.string().describe("Absolute path to the project-level infra-kit.json (the base layer / committed source of truth)."),projectName:Nr.string().describe("Repository name the config is keyed to (the main-repo basename; shared across all worktrees of the repo).")},mo=y({name:"config-get",description:"Return the fully merged infra-kit configuration (project + user-global + per-project override layers) as it is resolved at runtime. Read-only introspection \u2014 makes no changes; use `config edit` (CLI-only) to modify the override file. Fails with the loader error when run outside a configured infra-kit repo.",inputSchema:{},outputSchema:pc,handler:()=>_s()});import hc from"node:fs";import{z as j}from"zod";import Dr from"node:fs";import cr from"node:path";import dc from"node:process";var uc=cr.join(".infra-kit","dev-context"),mc=".infra-kit",Os=(e,r)=>{let t=cr.resolve(e);for(;;){let o=cr.join(t,r);if(Dr.existsSync(o))return o;let s=cr.dirname(t);if(s===t)return;t=s}},fc=e=>{let r=Os(e,uc);if(r)return r;let t=Os(e,mc);return t?cr.join(t,"dev-context"):void 0},fo=e=>typeof e=="number"&&Number.isFinite(e)?e:0,Ct=e=>typeof e=="string"?e:"",gc=(e,r,t)=>{let o=cr.join(e,r);try{let s=Dr.statSync(o),n=JSON.parse(Dr.readFileSync(o,"utf-8"));if(typeof n!="object"||n===null)return null;let i=n;return{app:r.replace(/\.json$/,""),package:Ct(i.package),port:fo(i.port),alias:Ct(i.alias),origin:Ct(i.origin),release:Ct(i.release),pid:fo(i.pid),writtenAt:fo(i.writtenAt),mtimeMs:Math.round(s.mtimeMs),ageMs:Math.max(0,Math.round(t-s.mtimeMs))}}catch{return null}},go=(e=dc.cwd())=>{let r=Date.now(),t=fc(e);if(!t||!Dr.existsSync(t))return{session:"none",fragmentDir:t,readAt:r,apps:[]};let o;try{o=Dr.readdirSync(t).filter(n=>n.endsWith(".json"))}catch{return{session:"none",fragmentDir:t,readAt:r,apps:[]}}let s=o.map(n=>gc(t,n,r)).filter(n=>n!==null).sort((n,i)=>n.app.localeCompare(i.app));return{session:s.length>0?"active":"none",fragmentDir:t,readAt:r,apps:s}};var Ns=async(e={})=>{let r=e.now??Date.now,t=e.isListening??Sr,o=go(e.cwd),s=r(),n=await Promise.all(o.apps.map(async d=>{let f=Math.max(0,Math.round((s-d.mtimeMs)/1e3)),k=await t(d.port);return{app:d.app,package:d.package,port:d.port,pid:d.pid,alias:d.alias,origin:d.origin,release:d.release,writtenAt:d.writtenAt>0?new Date(d.writtenAt).toISOString():null,fragmentMtime:new Date(d.mtimeMs).toISOString(),ageSeconds:f,live:k}})),i=n.length>0,a=o.fragmentDir??null,c=a!==null&&(hc.statSync(a,{throwIfNoEntry:!1})?.isDirectory()??!1),p=a===null?"nothing (no .infra-kit anchor exists up-tree)":a;if(i){l.info(`infra-kit dev: ${n.length} app(s) with a dev-context fragment in ${p}:`);for(let d of n){let f=d.live?"live":"NOT responding",k=`written ${d.ageSeconds}s ago`;l.info(`  ${d.app} (${d.package}) \u2192 ${d.origin} on :${d.port} \u2014 ${f}, ${k}`)}}else{let d=c?"no readable fragment found there":"that directory does not exist";l.info(`No active infra-kit dev session \u2014 searched ${p} (${d}).`)}let u={active:i,apps:n,contextDir:a,contextDirExists:c};return{content:h(JSON.stringify(u,null,2)),structuredContent:u}},vc={active:j.boolean().describe("True when at least one dev-context fragment exists on disk (an infra-kit dev session has apps registered). False means no active dev session was found \u2014 this is a clean result, NOT an error."),contextDir:j.string().nullable().describe("The RESOLVED dev-context fragment directory \u2014 found by searching UPWARD from the working directory. This is where the read looked, NOT proof anything is there: when no fragment directory exists the resolver derives one from an up-tree `.infra-kit`, so this can name a path (even under $HOME) that was never written to. Check contextDirExists before drawing any conclusion from it. Null when no `.infra-kit` anchor exists up-tree at all."),contextDirExists:j.boolean().describe('Whether contextDir actually exists on disk. False with a non-null contextDir means the path was DERIVED, not read \u2014 the usual state in a repo where `infra-kit dev` has never run. Distinguishes "looked and found nothing" from "had nowhere to look".'),apps:j.array(j.object({app:j.string().describe("App folder name (the fragment filename without .json)."),package:j.string().describe("The app package name the vite helper reads to decide a local route."),port:j.number().describe("The actual bound port the dev server is listening on."),pid:j.number().describe("PID of the dev-server process that wrote the fragment (ownership / staleness metadata)."),alias:j.string().describe("Registered portless hostname for the app."),origin:j.string().describe("Authoritative local origin the vite helper proxies to for this app."),release:j.string().describe("Release slug the runner recorded for this worktree."),writtenAt:j.string().nullable().describe("ISO 8601 time the runner self-reported writing the fragment (writer clock \u2014 may be wrong; prefer fragmentMtime). Null when the fragment did not record it."),fragmentMtime:j.string().describe("ISO 8601 filesystem mtime of the fragment file \u2014 the AUTHORITATIVE freshness signal."),ageSeconds:j.number().describe("Seconds since the fragment was last written on disk. A large value with live:false means a stale/abandoned fragment."),live:j.boolean().describe("Whether a TCP connection to the app port succeeds RIGHT NOW (a real engine liveness probe, not an inference). A fresh fragment with live:false is a crashed or killed dev server whose fragment was not cleaned up.")})).describe("One entry per dev-context fragment on disk, sorted by app name. Empty when no dev session is active.")},ho=y({name:"dev-status",description:"Report what `infra-kit dev` currently has running by READING the on-disk dev-context fragments (never starts a server). Advisory + read-only: surfaces each app\u2019s package, bound port, portless alias, local origin, fragment freshness (mtime / ageSeconds), and a live TCP liveness probe of the port. The fragment directory is found by searching UPWARD from the working directory, so this agrees with the `infra-kit://dev-context` resource and with the vite helper\u2019s routing decision; `contextDir` / `contextDirExists` report where it looked and whether that directory is real. Returns { active: false, apps: [] } when no dev session is active.",inputSchema:{},outputSchema:vc,handler:()=>Ns()});import J from"node:fs";import kl from"node:os";import ae from"node:path";import{z as gr}from"zod";import{$ as Do}from"zx";import{execFileSync as yc}from"node:child_process";var Ds=(e,r)=>{let t=e.filter(o=>!o.live).map(o=>o.name);return r?{prunable:[],withheld:t}:{prunable:t,withheld:[]}},kc=[/\binfra-kit\s+dev\b/,/cli\.js\s+dev\b/,/dev-server\.(?:js|ts)\b/],wc=e=>kc.some(r=>r.test(e)),bc="/bin/ps",Rc=()=>yc(bc,["-eo","command="],{encoding:"utf8",maxBuffer:8<<20}).split(`
-`),js=(e=Rc)=>{try{return e().some(wc)}catch{return!0}};import _c from"@inquirer/select";import{Buffer as Oc}from"node:buffer";import Nc from"node:fs";import Dc from"node:path";import Eo from"node:process";import{z as Wr}from"zod";import{$ as At}from"zx";var xc="Could not find requested project",Ec="Could not find requested config",Fs="Invalid Auth token",Ms="does not have access to requested config",jr=e=>e.includes(Fs)||e.includes(Ms)?"auth":e.includes(xc)?"project":e.includes(Ec)?"config":"unknown",Fr=e=>e.includes(Ms)?"mis-scoped":e.includes(Fs)?"revoked":null;var Ls=e=>[`Doppler rejected the service token for env "${e}" \u2014 it is invalid, revoked, or scoped to a different config.`,`Fix: run \`infra-kit env-token-set ${e}\` with a token scoped to that config.`,"CI / agents: set INFRA_KIT_ENV_TOKEN to a token scoped to that config."].join(`
-`),lr=class extends ht{authKind;constructor(r,t=null,o){super(o??Ls(r),r),this.name="DopplerAuthError",this.authKind=t}};var vo=({kind:e,project:r,config:t,available:o})=>{let s=e==="project"?[`Doppler project "${r}" not found (set in infra-kit.json \u2192 envManagement.config.name).`]:[`Doppler config "${t}" not found in project "${r}".`];if(o&&o.length>0){let n=e==="project"?"Available projects":`Available configs in "${r}"`;s.push(`${n}: ${o.join(", ")}.`)}return s.push(e==="project"?"Fix: update envManagement.config.name to an existing project, or create it in Doppler.":"Fix: pass an existing config, or create it in Doppler."),s.join(`
-`)};import{$ as St}from"zx";var Pc=5e3,Tc="DOPPLER_CONFIG",Fe=async()=>{let{envManagement:e}=await E();return e.config.name},Mr=async({childEnv:e,project:r,config:t})=>{let o=St.quiet;St.quiet=!0;try{let n=(await St({env:e})`doppler secrets get ${Tc} --plain --project ${r} --config ${t}`.timeout(Pc)).stdout.trim();return n!==t?{outcome:"mis-scoped",scopedTo:n}:{outcome:"valid",scopedTo:n}}catch(s){return{outcome:Cc(s)}}finally{St.quiet=o}},Cc=e=>{let r=dt(e)??(e instanceof Error?e.message:String(e));return jr(r)!=="auth"?"unreachable":Fr(r)??"unreachable"};import Ws from"node:process";var re="INFRA_KIT_ENV_TOKEN",pr=async e=>{let r=Ws.env[re];if(r)return{token:r,source:"env"};let o=(await ee())?.envs[e];if(o)return{token:o,source:"store"};throw new ht(Sc(e,await bt()),e)},Yf=async e=>Ws.env[re]?!0:!!(await ee())?.envs[e],Sc=(e,r)=>[`No Doppler service token for env "${e}".`,`Mint one at https://dashboard.doppler.com \u2014 this project \u2192 config "${e}" \u2192 Access tab \u2192 "Generate Service Token".`,`Fix: run \`infra-kit env-token-set ${e}\` and paste it.`,`It is stored in ${w(r)} (mode 0600, never in the repo).`,`CI / agents: set ${re} instead \u2014 it takes precedence and needs no home config.`].join(`
-`);import Vs from"node:fs/promises";import yo from"node:path";import $c from"yaml";var Js=".github/workflows",Me=async e=>{let r=await R();return Bs(yo.resolve(r,Js,e))},ko=async()=>{let e=await R(),r=yo.resolve(e,Js),t;try{t=await Vs.readdir(r)}catch{return[]}let o=t.filter(n=>n.endsWith(".yml")||n.endsWith(".yaml")).sort(),s=await Promise.all(o.map(n=>Bs(yo.resolve(r,n))));return[...new Set(s.flat())]},Bs=async e=>{let r;try{r=$c.parse(await Vs.readFile(e,"utf-8"))}catch{return[]}let t=dr(r,"on")??dr(r,"true"),o=dr(dr(dr(dr(t,"workflow_dispatch"),"inputs"),"environment"),"options");return Array.isArray(o)?o.filter(s=>typeof s=="string"&&s.length>0):[]},dr=(e,r)=>{if(!(typeof e!="object"||e===null||Array.isArray(e)))return e[r]};var $t=async()=>{let e=await ko(),r=await ee(),t=e.map(n=>({env:n,source:"gh-workflow"})),o=new Set(e),s=Object.keys(r?.envs??{}).filter(n=>!o.has(n)).sort().map(n=>({env:n,source:"token-only"}));return[...t,...s]},Le=async()=>(await $t()).map(r=>r.env);import Ks from"node:fs";import{$ as Ac}from"zx";import We from"node:fs";import Lr from"node:path";var wo=({autoLoaded:e,projectDir:r,canonicalProjectRoot:t})=>!e||!r||!t?!1:t===r,ue=e=>{if(!e)return"";try{return We.realpathSync(e)}catch{return""}},bo=(e,r)=>{try{let t=De(e);We.mkdirSync(t,{recursive:!0,mode:448}),je(Lr.join(t,q),r,384)}catch(t){l.debug(`warm-cache write skipped: ${t.message}`)}},Ro=(e=Date.now(),r=$r)=>{let t=Ts(),o;try{o=We.readdirSync(t,{withFileTypes:!0})}catch{return}for(let s of o){if(!s.isDirectory())continue;let n=Lr.join(t,s.name);try{let{mtimeMs:i}=We.statSync(Lr.join(n,q));e-i>=r*1e3&&We.rmSync(n,{recursive:!0,force:!0})}catch{}}},xo=(e,r)=>{try{let t=De(e);if(r){We.rmSync(t,{recursive:!0,force:!0});return}if(!We.existsSync(Lr.join(t,q)))return;je(Lr.join(t,vt),`# infra-kit warm cache cleared
-`,384)}catch(t){l.debug(`warm-cache invalidate skipped: ${t.message}`)}};var Gs=e=>e.split(`
-`).filter(r=>r.startsWith("worktree ")).map(r=>r.slice(9).trim()).filter(Boolean),Ic=async()=>{let e;try{e=(await Ac({quiet:!0})`git worktree list --porcelain`).stdout}catch(t){return l.debug(`warm-cache purge skipped (not a git repo?): ${t.message}`),[]}let r=[];for(let t of Gs(e)){let o=ue(t);if(!o)continue;let s=De(o);try{if(!Ks.existsSync(s))continue;Ks.rmSync(s,{recursive:!0,force:!0}),r.push(s)}catch(n){l.debug(`warm-cache purge skipped for ${s}: ${n.message}`)}}return r};var jc=e=>e?[`${Ne}=${Ve("1")}`]:[`unset ${Ne}`,`unset ${rr}`],Fc="DOPPLER_CONFIG",Us=new Set(["DOPPLER_TOKEN",re]),zs=!1,Mc=e=>{e.length===0||zs||(zs=!0,l.warn(`infra-kit: not exporting ${e.join(", ")} from Doppler into your shell \u2014 a service token must not be sourced into every process.`))},Hs=({pairs:e,config:r,project:t,projectRoot:o,loadedAt:s,autoLoaded:n})=>{let i=e.filter(([a])=>!Us.has(a));return Mc(e.filter(([a])=>Us.has(a)).map(([a])=>a)),["set -a",...i.map(([a,c])=>`${a}=${Ve(c)}`),`${yt}=${Ve(r)}`,`${Xe}=${Ve(r)}`,`${Qe}=${Ve(t)}`,`${kt}=${Ve(o)}`,`${er}=${Ve(s)}`,...jc(n),"set +a"]},Lc=async()=>{try{return await R()}catch{return""}},Ys=async({config:e,autoLoaded:r=!1,beforeWrite:t,projectDir:o})=>{let s=await Fe(),n=await Lc(),i=await Jc(s,e),a=new Date().toISOString(),p=`${Hs({pairs:i,config:e,project:s,projectRoot:n,loadedAt:a,autoLoaded:r}).join(`
-`)}
-`,u=tr(),d=Dc.resolve(u,q);if(t&&!t())return null;Nc.mkdirSync(u,{recursive:!0,mode:448}),je(d,p,384);let f=ue(n);return wo({autoLoaded:r,projectDir:o,canonicalProjectRoot:f})&&(bo(o,p),Ro()),{filePath:d,variableCount:i.length,project:s,config:e}},Zs=async e=>{let{config:r}=e,t="";if(r)t=r;else{let n=await Le();m.setInteractive(),t=await x(i=>_c({message:"Select environment config",choices:n.map(a=>({name:a,value:a}))},i),{output:Eo.stderr})}m.addOption("--config",t);let o=await Ys({config:t,autoLoaded:!1});if(!o)throw new Error("env-load: write was unexpectedly aborted");Eo.stdout.write(`${o.filePath}
-`),m.print();let s={filePath:o.filePath,variableCount:o.variableCount,project:o.project,config:o.config};return{content:h(JSON.stringify(s,null,2)),structuredContent:s}},qs=1024*1024,Wc=3e4,Vc=["DOPPLER_TOKEN","DOPPLER_PROJECT","DOPPLER_CONFIG"],ur=(e,r=Eo.env)=>{let t={...r};for(let o of Vc)delete t[o];return t.DOPPLER_TOKEN=e,t},Jc=async(e,r)=>{let{token:t}=await pr(r),o=ur(t),s=At.quiet;At.quiet=!0;try{let n;try{n=await At({env:o})`doppler secrets download --no-file --format json --project ${e} --config ${r}`.timeout(Wc)}catch(a){throw Bc(a,e,r)}Kc(n.stdout);let i=Qs(n.stdout);return Xs(i,r),i}finally{At.quiet=s}},Xs=(e,r)=>{let t=e.find(([o])=>o===Fc)?.[1];if(!(t===void 0||t===r))throw new lr(r,null,`Doppler returned secrets for config "${t}" but "${r}" was requested \u2014 the service token for env "${r}" is scoped to the wrong config. Refusing to load another environment's secrets.
-Fix: run \`infra-kit env-token-set ${r}\` with a token scoped to "${r}".`)},Bc=(e,r,t)=>{let o=dt(e)??(e instanceof Error?e.message:String(e)),s=jr(o);return s==="auth"?new lr(t,Fr(o)):s==="unknown"?e instanceof Error?e:new Error(String(e)):new Error(vo({kind:s,project:r,config:t,available:null}))},Kc=e=>{let r=Oc.byteLength(e,"utf-8");if(r>qs)throw new Error(`doppler returned unexpectedly large output (${r} bytes > ${qs}) \u2014 refusing to write to disk`)},Ve=e=>`'${e.replaceAll("'","'\\''")}'`,Gc=/^[A-Z_]\w*$/i,Qs=e=>{let r;try{r=JSON.parse(e)}catch{throw new Error(`doppler returned non-JSON output for env-load (got: ${JSON.stringify(e.slice(0,80))})`)}if(r===null||typeof r!="object"||Array.isArray(r))throw new Error("doppler returned unexpected JSON shape for env-load (expected an object of KEY: value pairs)");let t=[];for(let[o,s]of Object.entries(r)){if(!Gc.test(o))throw new Error(`doppler returned an invalid env var name for env-load (got: ${JSON.stringify(o.slice(0,80))})`);if(typeof s!="string")throw new TypeError(`doppler returned a non-string value for "${o}" (got ${typeof s})`);t.push([o,s])}if(t.length===0)throw new Error("doppler returned empty output for env-load");return t},Po=y({name:"env-load",description:'Download the env vars for a Doppler config and write them to a temporary shell script. Does NOT mutate the calling process \u2014 returns the path to a script that must be sourced ("source <filePath>") for the vars to take effect. The infra-kit shell wrapper auto-sources; direct MCP callers must handle sourcing themselves or surface filePath to the user. "config" is required when invoked via MCP (the CLI interactive picker is unreachable without a TTY).',inputSchema:{config:Wr.string().describe('Doppler config / environment name to load (e.g. "dev", "arthur", "renana"). Required for MCP calls.')},outputSchema:{filePath:Wr.string().describe("Path to the file that must be sourced to apply variables"),variableCount:Wr.number().describe("Number of variables loaded"),project:Wr.string().describe("Doppler project name"),config:Wr.string().describe("Doppler config name")},handler:Zs});import V from"node:fs";import Jr from"node:path";var mr=(e,r,t)=>{let o=e.indexOf(r),s=e.indexOf(t);return o!==-1&&s!==-1&&s>=o},Pe=(e,r,t)=>{let o=e.indexOf(r),s=e.indexOf(t);if(o===-1||s===-1||s<o)return null;let n=e.slice(0,o).replace(/\n+$/,""),i=e.slice(s+t.length).replace(/^\n+/,"");return n+(i?`
-${i}`:"")};var ei=(e,r,t)=>`${e}
-${r}
-${t}`,Vr=({content:e,body:r,startMarker:t,endMarker:o,placement:s="replace-in-place"})=>{let n=ei(t,r,o),i=mr(e,t,o);if(s==="replace-in-place"&&i){let p=e.indexOf(t),u=e.indexOf(o)+o.length;return e.slice(0,p)+n+e.slice(u)}let c=(i?Pe(e,t,o)??e:e).replace(/\n+$/,"");return c.length>0?`${c}
-${n}
-`:`${n}
-`};var Br="<!-- infra-kit:begin -->",Kr="<!-- infra-kit:end -->",Uc="<!-- infra-kit:version ",zc="<!-- infra-kit:import:begin -->",qc="<!-- infra-kit:import:end -->",Hc="AGENTS.md",Yc="CLAUDE.md",Zc=e=>`${Uc}${e} -->`,Xc=e=>[Zc(e),"","# infra-kit","","This repository uses the **infra-kit** CLI for environment, worktree, and release workflows.","This block is generated by `infra-kit init` \u2014 edit text *outside* the markers, never inside.","","## Commands (`ik` = `pnpm exec infra-kit`)","","- `ik env-load -c <config>` / `ik env-clear` / `ik env-status` \u2014 load, clear, or inspect Doppler env vars for a config (e.g. `dev`). Source the returned file to apply.","- `ik worktrees add` / `worktrees list` / `reopen` / `worktrees remove` / `worktrees sync` \u2014 manage release and feature git worktrees.","- `ik release create` / `release list` / `release deploy-all` / `release deploy-selected` / `release deliver` / `release desc-edit` \u2014 release-branch and deploy flow.","- `ik release merge-dev` \u2014 merge the dev branch into every release branch.","- `ik audit` \u2014 audit packages against `infra-kit.config.ts` rules.","- `ik doctor` \u2014 check gh / doppler / aws / rtk install + auth and repo setup.","- `ik init` \u2014 (re)install shell integration and regenerate these agent-instruction files.","","## Conventions","","- Tickets are prefixed by area: `[FE]` frontend, `[BE]` backend, `[DO]` DevOps/infra, `[APP]` mobile app, `[IDEA]` proposal, `[ROOT]` cross-cutting. Pick the single dominant area.","- Environment variables are managed through Doppler via `ik env-load` \u2014 never commit secrets."].join(`
-`),ri=e=>{if(V.existsSync(e)&&V.lstatSync(e).isSymbolicLink())throw new Error(`Refusing to write ${e} because the destination is a symlink`)},ti=e=>{let r=new Date().toISOString().replace(/[:.]/g,"-");V.copyFileSync(e,`${e}.backup.${r}`)},oi=(e,r)=>{ri(e);let t=V.existsSync(e);return(t?V.readFileSync(e,"utf-8"):null)===r?"unchanged":(t&&ti(e),V.mkdirSync(Jr.dirname(e),{recursive:!0}),V.writeFileSync(e,r,"utf-8"),t?"updated":"created")},Qc=(e,r)=>V.existsSync(e)?V.readFileSync(e,"utf-8"):r,el=(e,r,t)=>{let o=V.readFileSync(e,"utf-8");if(!mr(o,r,t))throw new Error(`Post-write validation failed: managed block missing from ${e}`)},rl=e=>{if(!V.existsSync(e))return"unchanged";ri(e);let r=V.readFileSync(e,"utf-8"),t=Pe(r,Br,Kr);return t===null?"unchanged":t.trim()===""?(ti(e),V.rmSync(e),"removed"):oi(e,t)},ni=async()=>{let e;try{e=(await D()).main}catch{return l.info("Skipped agent-instruction files \u2014 not inside an infra-kit repo"),{skipped:!0,root:null,written:[]}}if(!V.existsSync(e))return l.info("Skipped agent-instruction files \u2014 no infra-kit.json at the repo root"),{skipped:!0,root:null,written:[]};let r=Jr.dirname(e),t=Rt.version,o=Xc(t),s=Jr.join(r,Hc),n=Jr.join(r,Yc),i=Qc(n,"");i=Pe(i,zc,qc)??i,i=Vr({content:i,body:o,startMarker:Br,endMarker:Kr,placement:"replace-in-place"});let a=[{path:n,action:oi(n,i)},{path:s,action:rl(s)}];el(n,Br,Kr);for(let c of a)c.action==="unchanged"&&c.path!==n||l.info(`  ${c.action.padEnd(9)} ${Jr.relative(r,c.path)}`);return l.info(`Agent-instruction files synced (infra-kit ${t})`),{skipped:!1,root:r,written:a}};import me from"node:fs";import fi from"node:os";import Gr from"node:path";import gi from"node:process";import _t from"node:fs/promises";import tl from"node:path";import ol from"node:process";var si=`  // "envManagement": {                            // required in layer 1; provider-tagged
-  //   "provider": "doppler",
-  //   "config": { "name": "my-doppler-project" }
-  // },
-  //
-  // "ide": {
-  //   "provider": "cursor",
-  //   "config": { "workspaceConfigPath": "/path/to/your.code-workspace" }
-  // },
-  // // Or, for Zed (no workspace file \u2014 one window with all worktrees via "zed <root> <wt...>"):
-  // "ide": { "provider": "zed", "config": {} },
-  // // Or drive BOTH editors at once with an array (at most one entry per provider):
-  // "ide": [
-  //   { "provider": "cursor", "config": { "workspaceConfigPath": "/path/to/your.code-workspace" } },
-  //   { "provider": "zed", "config": {} }
-  // ],
-  //
-  // "taskManager": {
-  //   "provider": "jira",
-  //   "config": { "baseUrl": "https://acme.atlassian.net", "projectId": 123 }
-  // },
-  //
-  // "worktrees": {
-  //   "openInGithubDesktop": false,
-  //   "openInCmux": true,
-  //   // cmux pane layout for opened worktrees: "two-columns" (default, left | right)
-  //   // or "three-pane" (left split top/bottom + full-height right).
-  //   "cmux": { "layout": "two-columns" }
-  // },
-  //
-  // // Auto-load Doppler env when working inside this project/worktree. Omit to
-  // // disable. "trigger" (pick one): "shell-startup" (new shells) | "cli-invocation"
-  // // (before each infra-kit command, primes subsequent commands). "config" is the
-  // // environment to load \u2014 must have a service token (infra-kit env-token-set) or
-  // // auto-load quietly disables. Requires the committed infra-kit.json at the git
-  // // repo root, and the zsh shell integration (infra-kit init + a new shell). zsh only.
-  // "envAutoLoad": { "trigger": "shell-startup", "config": "dev" },
-  //
-  // // Per-app local-dev overrides, keyed by APP FOLDER name (the directory under
-  // // apps/). Both fields optional: "port" pins the local listen port (otherwise
-  // // <APP>_PORT / PORT / a built-in default), "prefixUrl" pins the URL prefix the
-  // // app is served under. An unknown app name is ignored at resolve time, never a
-  // // parse error.
-  // "dev": {
-  //   "client": { "port": 4001, "prefixUrl": "/api" }
-  // },
-  //
-  // // Named \`infra-kit dev <preset>\` sessions. The keys under "apps" are PACKAGES \u2014
-  // // "<app>/api" or "<app>/ui". A bare "<app>" is a FOLDER, not a package, and is
-  // // REJECTED. Per target: "watchDeps" (api targets) rebuilds the shared-package
-  // // dependency closure and restarts on change; "proxy" maps a route path to
-  // // "local" | "cloud" for this session only. "cmux": true runs each launched target
-  // // in its own cmux pane. Omit "apps" entirely to launch every discovered target.
-  // "devServersPresets": {
-  //   "backend": {
-  //     "apps": {
-  //       "client/api": { "watchDeps": true, "proxy": { "/api": "local", "/auth": "cloud" } },
-  //       "client/ui": {}
-  //     },
-  //     "cmux": true
-  //   }
-  // },
-  //
-  // // DEPRECATED \u2014 accepted but IGNORED; safe to delete. Remove it and this note in a
-  // // future release.
-  // //
-  // // The proxy port is no longer configurable. Every dev URL is now
-  // // https://<release>.<package>.localhost with NO port, and the only port that can
-  // // serve a port-free HTTPS URL is 443 \u2014 so a setting here could only put the port
-  // // back into the URL. Set up the daemon once (the install is the only step needing
-  // // root; trusting its local CA does not). Run \`infra-kit doctor\`: it checks both and
-  // // prints each fix as a command you can paste, with the paths filled in for your
-  // // machine. Do not type a bare \`portless\` \u2014 it lives in node_modules, not on PATH.
-  // // infra-kit itself never elevates.
-  // "devProxy": { "port": 443 }
-  //
-  // // Doppler SERVICE TOKENS are not a config key and never belong in this file. They live in
-  // // tokens.json \u2014 a SIBLING of this file, at ~/.infra-kit/projects/<repo>/tokens.json (mode 0600) \u2014
-  // // shaped { "envs": { "<env>": "dp.st\u2026" } }. Write it with \`infra-kit env-token-set <env>\` (which
-  // // also fixes its modes), or by hand: both are supported, which is why the store carries no
-  // // repo-identity field and no mandatory version. Pasting a token into an
-  // // infra-kit.json (any layer) is REJECTED: the loader refuses to parse it and tells you to revoke
-  // // the token first, because a config file can be committed, backed up by your editor, or shared.`,To=()=>`// infra-kit user-global config \u2014 ~/.infra-kit/infra-kit.json
-//
-// Merge chain (later layers override earlier ones at top-level keys):
-//   1. <repo>/infra-kit.json                            \u2014 committed project config (required)
-//   2. ~/.infra-kit/infra-kit.json                      \u2014 user-global (the sibling of this file)
-//   3. ~/.infra-kit/projects/<repo-name>/infra-kit.json \u2014 user-scope per-project override
-//
-// Merge is shallow: setting a top-level key replaces that whole section from
-// layer 1. Arrays do not concatenate. Top-level keys recognized:
-// envManagement, ide, taskManager, worktrees, envAutoLoad, dev,
-// devServersPresets, devProxy. The schema is strict \u2014 an unrecognized top-level
-// key is a parse error, not a silently ignored one.
-//
-// This .example.jsonc is reference only \u2014 it is NOT loaded. Put real global
-// overrides in the sibling infra-kit.json (strict JSON: no comments, double-quoted
-// keys). Per-project tweaks belong in layer 3 \u2014 run \`infra-kit config edit\`.
-//
-// Every recognized key is documented below. NOTE: \`envManagement\` is REQUIRED in
-// the committed project infra-kit.json (layer 1) and is usually NOT set in this
-// user-global layer \u2014 it is shown here only to document the full, valid config shape.
-{
-${si}
-}
-`,Co=e=>`// infra-kit user override for ${e} \u2014 ~/.infra-kit/projects/${e}/infra-kit.json
-//
-// Layer 3 (highest precedence) of the config merge chain. Shallow-merged on top of
-// <repo>/infra-kit.json (layer 1) and ~/.infra-kit/infra-kit.json (layer 2) \u2014 a
-// top-level key set here replaces that whole section wholesale; arrays do not
-// concatenate. Top-level keys recognized: envManagement, ide,
-// taskManager, worktrees, envAutoLoad, dev, devServersPresets, devProxy. The schema
-// is strict \u2014 an unrecognized top-level key is a parse error, not a silently ignored
-// one.
-//
-// This .example.jsonc is reference only \u2014 it is NOT loaded. Put real overrides
-// in the sibling infra-kit.json (strict JSON: no comments, double-quoted keys).
-//
-// Every recognized key is documented below. NOTE: \`envManagement\` is REQUIRED in
-// the committed project infra-kit.json (layer 1) and is usually NOT set in this
-// override layer \u2014 it is shown here only to document the full, valid config shape.
-{
-${si}
-}
-`,So=()=>`// infra-kit factory registry \u2014 ~/.infra-kit/vendor.json
-//
-// Machine-local registry the vendor commands (sync/manifest/diff) read to know
-// where your project repos live and which ones to stamp. This .example.jsonc is
-// reference only \u2014 it is NOT loaded. The real file is the strict-JSON sibling
-// vendor.json (no comments, double-quoted keys); run \`infra-kit vendor config --init\`
-// to scaffold it.
-{
-  // "workspaceDir": "~/projects",   // string (absolute or ~-prefixed) \u2014 where target repos are cloned
-  // "targets": ["my-repo-a", "my-repo-b"]   // string[] (>=1) \u2014 repo dir names resolved under workspaceDir
-}
-`;var ii=!1,nl=e=>e.replace(/\.json$/,".example.jsonc"),sl=async e=>{try{return await _t.readFile(e,"utf-8")}catch{return null}},Ot=async e=>{let r=e.userProject,t=nl(r);await _t.mkdir(tl.dirname(r),{recursive:!0});let o=!await Q(r);o&&await _t.writeFile(r,`{}
-`,"utf-8");let s=Co(e.projectName),n=await sl(t)!==s;return n&&await _t.writeFile(t,s,"utf-8"),o&&ys(),{configPath:r,examplePath:t,createdConfig:o,refreshedExample:n}},Nt=e=>`Created ${w(e.configPath)} \u2014 see ${w(e.examplePath)} for the annotated reference.`,il=async()=>{if(ol.env.INFRA_KIT_NO_SEED||ii)return;ii=!0;let e;try{e=await D()}catch{return}if(await Q(e.main))try{let r=await Ot(e);r.createdConfig?l.info(Nt(r)):r.refreshedExample&&l.debug(`Refreshed ${w(r.examplePath)} to match the current schema.`)}catch(r){l.debug({err:r,msg:`Skipped seeding ${w(e.userProject)} (config bootstrap failed).`})}};import Y from"node:fs/promises";import ie from"node:path";import{pathToFileURL as ll}from"node:url";import pl from"yaml";import{z as li}from"zod";import al from"node:fs/promises";import $o from"node:os";import Ao from"node:path";import{z as cl}from"zod";import{z as Dt}from"zod";var ai="vendor.json",jt=Dt.object({workspaceDir:Dt.string().min(1),targets:Dt.array(Dt.string()).min(1)}).strict();var Io=()=>Ao.join($o.homedir(),hs,ai),Sh=e=>{if(e==="~")return $o.homedir();if(e.startsWith("~/"))return Ao.join($o.homedir(),e.slice(2));if(Ao.isAbsolute(e))return e;throw new Error(`workspaceDir must be absolute or ~-prefixed, got: ${e}`)},$h=async()=>{let e=Io(),r;try{r=await al.readFile(e,"utf-8")}catch{throw new Error(`Factory config not found at ${e}. infra-kit needs a machine-local factory registry to know where your project repos live and which to stamp. Run \`infra-kit vendor config --init\` to scaffold it, or create it manually as JSON:
-
-  {
-    "workspaceDir": "~/projects",
-    "targets": ["my-repo"]
-  }
-`)}let t;try{t=r.trim()===""?{}:JSON.parse(r)}catch(s){throw new Error(`Invalid JSON in vendor.json at ${e}: ${s.message}`)}let o=jt.safeParse(t);if(!o.success)throw new Error(`Invalid factory config at ${e}: ${cl.prettifyError(o.error)}`);return o.data};var ci=e=>e.replace(/\.json$/,".yml"),pi=async()=>{let e;try{e=await D()}catch{return}let r=[{label:"infra-kit.json",yml:ci(e.main),json:e.main,schema:vs},{label:"~/.infra-kit/infra-kit.json",yml:ie.join(ie.dirname(e.userGlobal),"config.yml"),json:e.userGlobal,schema:ro},{label:`~/.infra-kit/projects/${e.projectName}/infra-kit.json`,yml:ci(e.userProject),json:e.userProject,schema:ro}],t=0;for(let o of r){let[s,n]=await Promise.all([Q(o.yml),Q(o.json)]);if(s){if(n){l.info(`\u26A0 Skipped ${w(o.yml)} \u2014 ${w(o.json)} already exists (remove the stale .yml manually)`);continue}try{let i=await Y.readFile(o.yml,"utf-8"),a=pl.parse(i)??{},c=o.schema.safeParse(a);if(!c.success){l.info(`\u26A0 Skipped ${w(o.yml)} \u2014 invalid config: ${li.prettifyError(c.error)}`);continue}await Y.mkdir(ie.dirname(o.json),{recursive:!0}),await Y.writeFile(o.json,`${JSON.stringify(c.data,null,2)}
-`,"utf-8"),await Y.rm(o.yml,{force:!0}),l.info(`\u2713 Migrated ${w(o.yml)} \u2192 ${w(o.json)}`),t++}catch(i){l.info(`\u26A0 Skipped ${w(o.yml)} \u2014 ${i.message}`)}}}t>0&&Ze()},di=async()=>{let e;try{e=await D()}catch{return}let r=ie.dirname(e.userGlobal),t=[{from:ie.join(r,"config.json"),to:e.userGlobal},{from:ie.join(r,"config.example.jsonc"),to:ie.join(r,"infra-kit.example.jsonc")}],o=0;for(let{from:s,to:n}of t){let[i,a]=await Promise.all([Q(s),Q(n)]);if(i){if(a){l.info(`\u26A0 Skipped ${w(s)} \u2014 ${w(n)} already exists (remove the stale file manually)`);continue}try{await Y.mkdir(ie.dirname(n),{recursive:!0}),await Y.rename(s,n),l.info(`\u2713 Renamed ${w(s)} \u2192 ${w(n)}`),o++}catch(c){l.info(`\u26A0 Skipped ${w(s)} \u2014 ${c.message}`)}}}o>0&&Ze()},ui=async()=>{let e=Io(),r=ie.dirname(e),t=ie.join(r,"vendor.config.ts"),[o,s]=await Promise.all([Q(t),Q(e)]);if(o){if(s){l.info(`\u26A0 Skipped ${w(t)} \u2014 ${w(e)} already exists (remove the stale vendor.config.ts manually)`);return}try{let n=await Y.stat(t),c=(await import(`${ll(t).href}?mtime=${Number(n.mtimeMs)}`)).default,p=typeof c=="function",u=p?await c():c,d=jt.safeParse(u);if(!d.success){l.info(`\u26A0 Skipped ${w(t)} \u2014 invalid factory config: ${li.prettifyError(d.error)}`);return}await Y.mkdir(r,{recursive:!0}),await Y.writeFile(e,`${JSON.stringify(d.data,null,2)}
-`,"utf-8"),await Y.rm(t,{force:!0}),p?l.info(`\u26A0 Migrated ${w(t)} \u2192 ${w(e)} as a STATIC SNAPSHOT \u2014 the old file was a function (export default () => ({...})); computed values (env vars, directory globbing) were frozen at their current values and no longer re-evaluate. Edit ${w(e)} directly to change them.`):l.info(`\u2713 Migrated ${w(t)} \u2192 ${w(e)}`)}catch(n){l.info(`\u26A0 Skipped ${w(t)} \u2014 ${n.message}`)}}},dl=e=>{let r=e.ide;if(r===null||typeof r!="object")return{changed:!1,result:e};let t=!1,o=n=>{if(n===null||typeof n!="object"||!("config"in n))return n;let i=n.config;if(i===null||typeof i!="object"||!("mode"in i))return n;t=!0;let a=Object.fromEntries(Object.entries(i).filter(([c])=>c!=="mode"));return{...n,config:a}},s=Array.isArray(r)?r.map(o):o(r);return t?{changed:!0,result:{...e,ide:s}}:{changed:!1,result:e}},mi=async()=>{let e;try{e=await D()}catch{return}let r=[e.main,e.userGlobal,e.userProject],t=0;for(let o of r)if(await Q(o))try{let s=await Y.readFile(o,"utf-8");if(s.trim()==="")continue;let n=JSON.parse(s),{changed:i,result:a}=dl(n);if(!i)continue;await Y.writeFile(o,`${JSON.stringify(a,null,2)}
-`,"utf-8"),l.info(`\u2713 Normalized ide config in ${w(o)} (removed legacy "mode")`),t++}catch(s){l.info(`\u26A0 Skipped normalizing ${w(o)} \u2014 ${s.message}`)}t>0&&Ze()};var Ur="# -- infra-kit:begin --",fr="# -- infra-kit:end --",ul=[["# region infra-kit","# endregion infra-kit"]],ml="# infra-kit shell functions",Qh=async()=>{let e=Gr.join(fi.homedir(),".zshrc"),r=me.existsSync(e)?vl(me.readFileSync(e,"utf-8")):"",t=Vr({content:r,body:hi(),startMarker:Ur,endMarker:fr,placement:"append-end"});me.writeFileSync(e,t),l.info(`Added infra-kit shell functions to ${e}`),await pi(),await mi(),await di(),await ui(),fl(),await ni(),await gl();let o=gi.env.SHELL??"";o.includes("zsh")||l.warn(`Your login shell ($SHELL=${o||"unset"}) is not zsh. The infra-kit shell integration (env-load/env-clear/auto-load) is zsh-only and won't activate in bash/fish.`),l.info("Run `source ~/.zshrc` or open a new terminal to activate.")},fl=()=>{let e=Gr.join(fi.homedir(),".infra-kit"),r=Gr.join(e,"infra-kit.json");if(me.mkdirSync(e,{recursive:!0}),me.writeFileSync(Gr.join(e,"infra-kit.example.jsonc"),To(),"utf-8"),me.writeFileSync(Gr.join(e,"vendor.example.jsonc"),So(),"utf-8"),me.existsSync(r)){l.info(`User-global config already present at ${r} (refreshed reference examples)`);return}me.writeFileSync(r,`{}
-`,"utf-8"),l.info(`Wrote user-global config to ${r} (see the sibling .example.jsonc files for reference)`)},gl=async()=>{if(!gi.env.INFRA_KIT_NO_SEED)try{let e=await D();if(!me.existsSync(e.main))return;let r=await Ot(e);r.createdConfig&&l.info(Nt(r))}catch(e){l.debug({err:e,msg:"Skipped seeding the user-project config (init)."})}},hl=e=>e.startsWith("#")||e.startsWith("alias ")||e.startsWith("env-load")||e.startsWith("env-clear")||e.startsWith("env-status")||e.startsWith("if ")||e.startsWith("  export INFRA_KIT_SESSION")||e.startsWith("export _INFRA_KIT_")||e.startsWith(": ${_INFRA_KIT_")||e.startsWith("fi")||e.startsWith("zmodload ")||e.startsWith("autoload ")||e.startsWith("add-zsh-hook ")||e.startsWith("_infra_kit_autoload"),vl=e=>{let r=Pe(e,Ur,fr);if(r!==null)return r;for(let[a,c]of ul){let p=Pe(e,a,c);if(p!==null)return p}let t=e.indexOf(ml);if(t===-1)return e;let o=e.slice(0,t).replace(/\n+$/,""),s=e.slice(t).split(`
-`),n=0;for(;n<s.length&&hl(s[n]);)n++;let i=s.slice(n).join(`
-`);return o+(i?`
-${i}`:"")},hi=()=>{let e="pnpm exec infra-kit";return["zmodload zsh/stat 2>/dev/null","zmodload zsh/datetime 2>/dev/null","zmodload zsh/sched 2>/dev/null",'if [[ -z "${INFRA_KIT_SESSION}" ]]; then',"  export INFRA_KIT_SESSION=$(head -c 4 /dev/urandom | xxd -p)","fi",": ${_INFRA_KIT_LAST_LOAD_MTIME:=0}",": ${_INFRA_KIT_LAST_CLEAR_MTIME:=0}",": ${_INFRA_KIT_SHELL_STARTED:=${EPOCHSECONDS:-0}}",": ${_INFRA_KIT_WARM_TTL:=7200}","export _INFRA_KIT_LAST_LOAD_MTIME _INFRA_KIT_LAST_CLEAR_MTIME _INFRA_KIT_SHELL_STARTED _INFRA_KIT_WARM_TTL",`env-load() { local f m; f=$(${e} env-load "$@") || return; m=$(zstat +mtime -- "$f" 2>/dev/null || echo 0); _INFRA_KIT_LAST_LOAD_MTIME=$m; source "$f"; ${e} env-status; }`,`env-clear() { local f m; f=$(${e} env-clear "$@") || return; m=$(zstat +mtime -- "$f" 2>/dev/null || echo 0); _INFRA_KIT_LAST_CLEAR_MTIME=$m; source "$f"; ${e} env-status; }`,`env-status() { ${e} env-status; }`,"_infra_kit_notify() {","  zle && print -u2 -n $'\\r\\e[K'",'  print -u2 -- "$1"',"  zle && zle reset-prompt","}","_infra_kit_autoload() {",'  [[ -z "$INFRA_KIT_SESSION" ]] && return','  local cache_root="${XDG_CACHE_HOME:-$HOME/.cache}/infra-kit"','  local dir="$cache_root/$INFRA_KIT_SESSION"','  local load_file="$dir/env-load.sh"','  local clear_file="$dir/env-clear.sh"',"  local load_mtime=0 clear_mtime=0",'  [[ -f "$load_file" ]] && load_mtime=$(zstat +mtime -- "$load_file" 2>/dev/null || echo 0)','  [[ -f "$clear_file" ]] && clear_mtime=$(zstat +mtime -- "$clear_file" 2>/dev/null || echo 0)',"  if (( load_mtime > _INFRA_KIT_LAST_LOAD_MTIME && load_mtime >= _INFRA_KIT_SHELL_STARTED && load_mtime >= clear_mtime )); then",'    source "$load_file"',"    _INFRA_KIT_LAST_LOAD_MTIME=$load_mtime",'    _infra_kit_notify "infra-kit: auto-loaded vars for ${INFRA_KIT_ENV_CONFIG:-?}"',"  fi","  if (( clear_mtime > _INFRA_KIT_LAST_CLEAR_MTIME && clear_mtime >= _INFRA_KIT_SHELL_STARTED && clear_mtime > load_mtime )); then",'    source "$clear_file"',"    _INFRA_KIT_LAST_CLEAR_MTIME=$clear_mtime",'    _infra_kit_notify "infra-kit: auto-cleared env"',"  fi","}","autoload -Uz add-zsh-hook","if (( _INFRA_KIT_SHELL_STARTED > 0 )); then","  add-zsh-hook precmd _infra_kit_autoload","fi","_INFRA_KIT_AUTOLOAD_WINDOW=6","export _INFRA_KIT_AUTOLOAD_WINDOW","_infra_kit_poll_autoload() {","  _infra_kit_autoload","  if (( _INFRA_KIT_LAST_LOAD_MTIME < _INFRA_KIT_SHELL_STARTED )) && (( ${EPOCHSECONDS:-0} - _INFRA_KIT_SHELL_STARTED < _INFRA_KIT_AUTOLOAD_WINDOW )); then","    (( $+builtins[sched] )) && sched +1 _infra_kit_poll_autoload","  fi","}","_infra_kit_warm_source() {",'  local canon="$1" key',"  if (( $+commands[shasum] )); then",'    key=$(printf %s "$canon" | shasum -a 256 | cut -c1-64)',"  elif (( $+commands[sha256sum] )); then",'    key=$(printf %s "$canon" | sha256sum | cut -c1-64)',"  else","    return","  fi",'  local cache_root="${XDG_CACHE_HOME:-$HOME/.cache}/infra-kit"','  local warm="$cache_root/projects/$key/env-load.sh"','  local wclear="$cache_root/projects/$key/env-clear.sh"','  [[ -f "$warm" ]] || return',"  local wm=0 cm=0",'  wm=$(zstat +mtime -- "$warm" 2>/dev/null || echo 0)','  [[ -f "$wclear" ]] && cm=$(zstat +mtime -- "$wclear" 2>/dev/null || echo 0)',"  (( cm >= wm )) && return","  (( ${EPOCHSECONDS:-0} - wm >= _INFRA_KIT_WARM_TTL )) && return",'  source "$warm"','  _infra_kit_notify "infra-kit: loaded cached vars for ${INFRA_KIT_ENV_CONFIG:-?} (refreshing\u2026)"',"}","_infra_kit_startup_autoload() {",'  [[ -z "$INFRA_KIT_SESSION" ]] && return','  local dir="$PWD" prev=""','  while [[ -n "$dir" && "$dir" != "$prev" ]]; do','    if [[ -f "$dir/infra-kit.json" ]]; then','      [[ -n "$INFRA_KIT_ENV_CONFIG" && "$dir" == "$INFRA_KIT_ENV_PROJECT_ROOT" ]] && return','      local canon="${dir:A}"','      _infra_kit_warm_source "$canon"',`      ( ${e} env-autoload --project-dir "$canon" & ) >/dev/null 2>&1`,"      (( $+builtins[sched] )) && sched +1 _infra_kit_poll_autoload","      return","    fi",'    prev="$dir"','    dir="${dir:h}"',"  done","}","if (( _INFRA_KIT_SHELL_STARTED > 0 )); then","  _infra_kit_startup_autoload","fi"].join(`
-`)},vi=()=>`${Ur}
-${hi()}
-${fr}`;import yl from"node:fs/promises";var _o=async(e,r)=>{if(!r)return{hasOverrides:!1,overrideKeys:[],unreadable:!1};try{let t=await yl.readFile(e,"utf-8"),o=t.trim()===""?{}:JSON.parse(t);if(typeof o!="object"||o===null||Array.isArray(o))return{hasOverrides:!1,overrideKeys:[],unreadable:!0};let s=Object.keys(o);return{hasOverrides:s.length>0,overrideKeys:s,unreadable:!1}}catch{return{hasOverrides:!1,overrideKeys:[],unreadable:!0}}},Oo=e=>e.unreadable?"(unreadable \u2014 invalid JSON)":e.overrideKeys.length===0?"(empty \u2014 no overrides)":`(${e.overrideKeys.length} override(s): ${e.overrideKeys.join(", ")})`;var Je=async(e,r,t,o)=>{try{return await Do`${r}`,{name:e,status:"pass",message:t}}catch{return{name:e,status:"fail",message:o}}},wl=()=>{let e="zshrc init block",r=ae.join(kl.homedir(),".zshrc");if(!J.existsSync(r))return{name:e,status:"fail",message:"~/.zshrc not found. Run: infra-kit init"};let t=J.readFileSync(r,"utf-8"),o=t.indexOf(Ur),s=t.indexOf(fr);if(o===-1||s===-1||s<o)return{name:e,status:"fail",message:"infra-kit shell block missing from ~/.zshrc. Run: infra-kit init"};let n=t.slice(o,s+fr.length).trim(),i=vi().trim();return n!==i?{name:e,status:"fail",message:"infra-kit shell block in ~/.zshrc is out of date. Run: infra-kit init"}:{name:e,status:"pass",message:"infra-kit shell block in ~/.zshrc is up to date"}},bl=async()=>{let e="warm cache",r;try{r=await R()}catch{return{name:e,status:"pass",message:"warm cache: not a git project"}}let t=ue(r);if(!t)return{name:e,status:"pass",message:"warm cache: unavailable"};let o=ae.join(De(t),q);if(!J.existsSync(o))return{name:e,status:"pass",message:"warm cache: none yet (populated on next auto-load)"};let s=Math.floor((Date.now()-J.statSync(o).mtimeMs)/1e3),n=Math.floor(s/60),i=Math.floor($r/60);return s>=$r?{name:e,status:"pass",message:`warm cache: present but stale (${n}m old, TTL ${i}m) \u2014 will refresh`}:{name:e,status:"pass",message:`warm cache: present, ${n}m old`}},Rl=async()=>{let e="pnpm enableGlobalVirtualStore";try{let r=await R(),t=ae.join(r,"pnpm-workspace.yaml");if(!J.existsSync(t))return{name:e,status:"fail",message:`pnpm-workspace.yaml not found at ${t}`};let o=J.readFileSync(t,"utf-8");return/^\s*enableGlobalVirtualStore\s*:\s*true\s*$/m.test(o)?{name:e,status:"pass",message:"enableGlobalVirtualStore: true is set"}:{name:e,status:"fail",message:"enableGlobalVirtualStore: true is missing in pnpm-workspace.yaml"}}catch(r){return{name:e,status:"fail",message:`Failed to read pnpm-workspace.yaml: ${r.message}`}}},xl=async()=>{try{return Ze(),{config:await E(),error:null}}catch(e){return{config:null,error:e}}},El=e=>{let r="infra-kit config valid";return e.error?{name:r,status:"fail",message:e.error.message}:{name:r,status:"pass",message:"infra-kit.json is valid (user overrides applied if present)"}},Pl=384,No=448,Tl=e=>e.map(r=>{let t=r.source===null?"no token":`token (${r.source})`;return`${r.env}: ${t}`}).join(", "),Cl=async(e,r)=>Promise.all(e.map(async t=>{try{let{source:o}=await r(t);return{env:t,source:o}}catch{return{env:t,source:null}}})),Sl=async(e,r={})=>{let t="env tokens configured",o=r.readStore??ee,s=r.resolveToken??pr;if(!e.config)return{name:t,status:"pass",message:"Skipped \u2014 infra-kit config could not be read (see config check)"};try{await o()}catch(d){return{name:t,status:"fail",message:`Token store unreadable \u2014 ${d.message}`}}let n=await Le(),i=e.config.envAutoLoad?.config,a=i&&!n.includes(i)?[...n,i]:n,c=await Cl(a,s),p=Tl(c);if(i===void 0)return{name:t,status:"pass",message:`No envAutoLoad configured \u2014 no env is load-bearing. ${p}`};let u=c.find(d=>d.env===i);return!u||u.source===null?{name:t,status:"fail",message:`No Doppler service token for the auto-load env "${i}" \u2014 your shell env will not load. Fix: run \`infra-kit env-token-set ${i}\`. ${p}`}:{name:t,status:"pass",message:`auto-load env "${i}": token (${u.source}). ${p}`}},$l={valid:{status:"pass",describe:"live and correctly scoped"},revoked:{status:"fail",describe:"REJECTED by Doppler (revoked or invalid)"},"mis-scoped":{status:"fail",describe:"live but scoped to a DIFFERENT config"},unreachable:{status:"pass",describe:"could not be checked (Doppler unreachable)"}},Al=async(e,r={})=>{let t="env token valid",o=r.resolveToken??pr,s=r.probe??Mr;if(!e.config)return{name:t,status:"pass",message:"Skipped \u2014 infra-kit config could not be read (see config check)"};let n=e.config.envAutoLoad?.config;if(n===void 0)return{name:t,status:"pass",message:"Skipped \u2014 no envAutoLoad env to probe"};let i;try{i=(await o(n)).token}catch{return{name:t,status:"pass",message:`Skipped \u2014 no token for env "${n}" (see env tokens configured)`}}let a=e.config.envManagement.config.name,c=await s({childEnv:ur(i),project:a,config:n}),p=$l[c.outcome],u=c.outcome==="revoked"||c.outcome==="mis-scoped"?` Fix: run \`infra-kit env-token-set ${n}\` with a token scoped to "${n}".`:"";return{name:t,status:p.status,message:`The token for env "${n}" (project "${a}") is ${p.describe}.${u}`}},zr=(e,r)=>{let t=r(e);return t===null?null:t.mode&511},Il=async(e,r={})=>{let t="tokens.json perms",o=r.storePath??bt,s=r.statPath??_l,n=r.chmodPath??J.chmodSync,i;try{i=await o()}catch{return{name:t,status:"pass",message:"Skipped \u2014 the token store path could not be resolved"}}if(zr(i,s)===null)return{name:t,status:"pass",message:`No token store yet at ${w(i)}`};let a=ae.dirname(i),c=ae.dirname(a),p=ae.dirname(c),d=[{target:p,expected:No,actual:zr(p,s)},{target:c,expected:No,actual:zr(c,s)},{target:a,expected:No,actual:zr(a,s)},{target:i,expected:Pl,actual:zr(i,s)}].filter(k=>k.actual!==null&&k.actual!==k.expected);if(d.length===0)return{name:t,status:"pass",message:`${w(i)} is 0600 (0700 dirs)`};let f=d.map(k=>`${w(k.target)} is ${yi(k.actual)}, expected ${yi(k.expected)}`).join("; ");if(!e)return{name:t,status:"fail",message:`${f}. Fix: run \`infra-kit doctor --fix\`, or chmod them by hand.`};for(let k of d)n(k.target,k.expected);return{name:t,status:"pass",message:`Tightened ${d.length} path(s): ${f}`}},yi=e=>`0${e.toString(8).padStart(3,"0")}`,_l=e=>{try{return J.statSync(e)}catch{return null}},Ol=async()=>{let e="user override path";try{let r=await D(),t=J.existsSync(r.userProject),o=await _o(r.userProject,t),s=t?Oo(o):"(not created \u2014 seed failed?)";return{name:e,status:"pass",message:`${w(r.userProject)} ${s} \u2014 project: ${r.projectName}`}}catch(r){return{name:e,status:"fail",message:r.message}}},Nl=async()=>{let e="legacy user-global config",r;try{r=await D()}catch{return{name:e,status:"pass",message:"Skipped \u2014 infra-kit config paths could not be resolved"}}let t=ae.join(ae.dirname(r.userGlobal),"config.json");return J.existsSync(t)?J.existsSync(r.userGlobal)?{name:e,status:"fail",message:`Stale legacy config.json found at ${w(t)} \u2014 ${w(r.userGlobal)} is active; remove the old file.`}:{name:e,status:"fail",message:`Legacy user-global config.json found at ${w(t)} \u2014 run \`infra-kit init\` to migrate it (your overrides are not being applied).`}:{name:e,status:"pass",message:"No legacy user-global config.json"}},Dl={cursor:{command:["cursor","--version"],label:"Cursor",failMsg:"Cursor is not installed. Install from: https://cursor.com/"},zed:{command:["zed","--version"],label:"Zed",failMsg:"Zed is not installed. Install from: https://zed.dev/"}},jl=async e=>{let r=Dl[e];try{return await Do`${r.command}`,{ok:!0,label:r.label,failMsg:r.failMsg}}catch{return{ok:!1,label:r.label,failMsg:r.failMsg}}},Fl=async e=>{let r="ide installed";if(!e.config)return{name:r,status:"pass",message:"Skipped \u2014 infra-kit config could not be read (see config check)"};let t=ne(e.config).map(n=>n.provider);if(t.length===0)return{name:r,status:"pass",message:"No IDE configured (ide unset)"};let o=await Promise.all(t.map(n=>jl(n))),s=o.filter(n=>!n.ok);return s.length===0?{name:r,status:"pass",message:`Installed: ${o.map(n=>n.label).join(", ")}`}:{name:r,status:"fail",message:s.map(n=>n.failMsg).join("; ")}},Ml=[1,2,3,5,7],Ll=async()=>{let e="rtk configured";try{let t=(await Do`rtk init --show`).stdout.split(`
-`).map(s=>s.trim()).filter(s=>s.startsWith("[ok]")||s.startsWith("[--]")),o=[];for(let s of Ml){let n=t[s-1];(!n||!n.startsWith("[ok]"))&&o.push(s)}return o.length>0?{name:e,status:"fail",message:`rtk setup incomplete (items ${o.join(", ")} not [ok]). Run: rtk init -g --auto-patch`}:{name:e,status:"pass",message:"rtk hook, RTK.md, global CLAUDE.md, settings.json, and Cursor hook are configured"}}catch(r){return{name:e,status:"fail",message:`Failed to run 'rtk init --show': ${r.message}`}}},Wl=async()=>{let e;try{e=(await D()).main}catch{return[]}if(!J.existsSync(e))return[];let r=ae.join(ae.dirname(e),"CLAUDE.md"),t=J.existsSync(r)?J.readFileSync(r,"utf-8"):"",o=mr(t,Br,Kr);return[{name:"CLAUDE.md block",status:o?"pass":"fail",message:o?"CLAUDE.md block present":"infra-kit block missing from CLAUDE.md. Run: infra-kit init"}]},wi=e=>gt(["service","install"],{sudo:!0,bin:e}),bi=e=>gt(["trust"],{bin:e}),Vl=new Set(["SELF_SIGNED_CERT_IN_CHAIN","UNABLE_TO_VERIFY_LEAF_SIGNATURE"]),ki="ERR_TLS_CERT_ALTNAME_INVALID",Jl=async(e,r)=>{let t=`portless serving TLS on :${Re}`;return await e(Re,!0)?{name:t,status:"pass",message:`portless is serving HTTPS on :${Re}`}:{name:t,status:"fail",message:`No portless daemon is serving HTTPS on :${Re}. Install it once (needs root): \`${wi(r)}\`.`}},Bl=async(e,r,t,o)=>{let s="portless CA chain valid",n=["localhost",...r.slice(0,1).map(p=>p.name)],a=(await Promise.all(n.map(async p=>({servername:p,result:await e(Re,p)})))).filter(p=>!p.result.ok);if(a.length===0)return{name:s,status:"pass",message:`Served certificate chains to ${w(t)} (${n.join(", ")})`};let c=a.map(p=>p.result.ok?"":p.result.code);return c.includes(ki)?{name:s,status:"fail",message:`Internal check error: the TLS probe got ${ki} for servername(s) ${a.map(p=>p.servername).join(", ")} \u2014 doctor's probe is wrong, your trust store is not implicated. Please report this.`}:c.some(p=>Vl.has(p))?{name:s,status:"fail",message:`The daemon is serving a certificate that does not chain to ${w(t)}. Its CA was regenerated \u2014 run \`${bi(o)}\`, or reinstall: \`${wi(o)}\`.`}:{name:s,status:"fail",message:`TLS handshake failed (${c.join(", ")})`}},Kl=(e,r,t)=>{let o="portless CA trusted";return e?{name:o,status:"pass",message:`${w(r)} matches the recorded ca.trusted fingerprint`}:{name:o,status:"fail",message:`The portless CA is not trusted (or was regenerated). Run: \`${bi(t)}\` (no sudo needed).`}},Gl=async(e,r,t)=>{let o="portless routes";if(e.length===0)return{name:o,status:"pass",message:"No portless routes registered"};let n=(await Promise.all(e.map(async i=>({route:i,live:await r(i.port)})))).filter(i=>!i.live).map(i=>i.route.name);return n.length===0?{name:o,status:"pass",message:`${e.length} portless route(s), all live`}:{name:o,status:"fail",message:`${n.length} stale portless route(s): ${n.join(", ")}. Remove with \`${gt(["alias","--remove","<name>"],{bin:t})}\`.`}},Ul=async(e={})=>{let r=e.resolveBin??ks,t=e.isProxyServing??ws,o=e.handshake??xs,s=e.caTrusted??Rs,n=e.routes??to,i=e.isListening??Sr,a=(e.caPath??bs)(),c=r();if(c===null)return[{name:"portless installed",status:"fail",message:"portless is not resolvable from node_modules \u2014 run `pnpm install`."}];let p={name:"portless installed",status:"pass",message:"portless is resolvable from node_modules"},u=n(),d=await Jl(t,c),f=d.status==="fail"?{name:"portless CA chain valid",status:"pass",message:"Skipped \u2014 no daemon to handshake with"}:await Bl(o,u,a,c);return[p,d,f,Kl(s(),a,c),await Gl(u,i,c)]},zl=async(e={})=>{let r="portless routes",t=e.routes??to,o=e.isListening??Sr,s=e.devSessionRunning??js,n=t();if(n.length===0)return{name:r,status:"pass",message:"No portless routes registered"};let i=await Promise.all(n.map(async u=>({name:u.name,port:u.port,live:await o(u.port)}))),{prunable:a,withheld:c}=Ds(i,s());if(c.length>0)return{name:r,status:"fail",message:`${c.length} route(s) look stale (${c.join(", ")}), but a dev session is running \u2014 a UI that has not bound its port yet is indistinguishable from a dead one, so nothing was removed. Stop dev and re-run \`infra-kit doctor --fix\`.`};if(a.length===0)return{name:r,status:"pass",message:`${n.length} portless route(s), all live`};let p=e.removeAlias??Es().removeAlias;for(let u of a)await p(u);return{name:r,status:"pass",message:`Removed ${a.length} stale portless route(s): ${a.join(", ")}`}},Ri=async(e={})=>{let r=await xl(),t=await Promise.all([Je("gh installed",["gh","--version"],"GitHub CLI is installed","GitHub CLI is not installed. Install from: https://cli.github.com/"),Je("gh authenticated",["gh","auth","status"],"GitHub CLI is authenticated","GitHub CLI is not authenticated. Run: gh auth login"),Je("doppler installed",["doppler","--version"],"Doppler CLI is installed","Doppler CLI is not installed. Install from: https://docs.doppler.com/docs/install-cli"),Je("aws installed",["aws","--version"],"AWS CLI is installed","AWS CLI is not installed. Install from: https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html"),Je("rtk installed",["rtk","--version"],"RTK is installed","RTK is not installed. Install from: https://github.com/rtk-ai/rtk"),Je("typescript-language-server installed",["typescript-language-server","--version"],"typescript-language-server is installed","typescript-language-server is not installed. Install from: https://github.com/typescript-language-server/typescript-language-server#installing"),Je("cmux installed",["cmux","--version"],"cmux is installed","cmux is not installed. Install from: https://cmux.com/"),Ll(),Promise.resolve(wl()),bl(),Rl(),Promise.resolve(El(r)),Sl(r),Al(r),Il(e.fix??!1),Ol(),Nl(),Fl(r)]),o=await Ul();if(e.fix){let i=await zl(),a=o.findIndex(c=>c.name===i.name);a>=0?o[a]=i:o.push(i)}let s=[...t,...o,...await Wl()],n={checks:s.map(i=>({name:i.name,status:i.status,message:i.message})),allPassed:s.every(i=>i.status==="pass")};return{content:h(JSON.stringify(n,null,2)),structuredContent:n}},jo=y({name:"doctor",description:"Check installation and authentication status of gh, doppler, aws, and rtk CLIs",inputSchema:{},outputSchema:{checks:gr.array(gr.object({name:gr.string().describe("Name of the check"),status:gr.enum(["pass","fail"]).describe("Check result"),message:gr.string().describe("Details about the check result")})).describe("List of all check results"),allPassed:gr.boolean().describe("Whether all checks passed")},handler:()=>Ri()});import{Chalk as ql}from"chalk";import Fo from"node:process";var Hl="Tools & CLIs",Yl="Shell & integration",Zl="Project config",Xl="Doppler env tokens",Ql="Dev proxy (portless)",ep=`portless serving TLS on :${Re}`,Mo=[[Hl,["gh installed","gh authenticated","doppler installed","aws installed","rtk installed","typescript-language-server installed","cmux installed","ide installed"]],[Yl,["rtk configured","zshrc init block","warm cache","pnpm enableGlobalVirtualStore","CLAUDE.md block"]],[Zl,["infra-kit config valid","user override path","legacy user-global config"]],[Xl,["env tokens configured","env token valid","tokens.json perms"]],[Ql,["portless installed",ep,"portless CA chain valid","portless CA trusted","portless routes"]]],xi="Other",rp=Mo.map(([e])=>e),tp=new Map(Mo.flatMap(([e,r])=>r.map(t=>[t,e]))),Av=Mo.flatMap(([,e])=>e),op=new Set(["portless routes","tokens.json perms"]),np=e=>{let r=new Map;for(let o of e){let s=tp.get(o.name)??xi,n=r.get(s);n?n.push(o):r.set(s,[o])}return[...rp,xi].flatMap(o=>{let s=r.get(o);return s&&s.length>0?[{label:o,checks:s}]:[]})},Ei={unicode:{pass:"\u2713",fail:"\u2717",separator:"\xB7",rule:"\u2500"},ascii:{pass:"ok",fail:"!!",separator:"-",rule:"-"}},sp=24,ip=(e,r)=>{let t=e.split(/\s+/).filter(n=>n.length>0),o=[],s="";for(let n of t)s.length===0?s=n:`${s} ${n}`.length<=r?s=`${s} ${n}`:(o.push(s),s=n);return s.length>0&&o.push(s),o.length>0?o:[""]},Ti=e=>{let r=e.filter(t=>t.status==="fail").length;return{passed:e.length-r,failed:r}},ap=e=>{let r=new ql({level:e?1:0});return{header:t=>r.bold.cyan(t),pass:t=>r.green(t),fail:t=>r.red(t),dim:t=>r.dim(t),bold:t=>r.bold(t)}},cp=(e,r,t,o)=>{if(e.failed===0){let i=`${r}/${r} ok`;return{text:t.pass(i),plainWidth:i.length}}let s=`${e.passed}/${r}`,n=`${e.failed} failed`;return{text:`${t.dim(s)} ${o.separator} ${t.fail(n)}`,plainWidth:s.length+n.length+3}},hr="  ",Pi="    ",lp=(e,r,t,o)=>{let s=Ti(e.checks),n=cp(s,e.checks.length,r,t),i=Math.max(1,o-hr.length-e.label.length-n.plainWidth);return`${hr}${r.header(e.label)}${" ".repeat(i)}${n.text}`},pp=(e,r,t,o,s)=>{let n=e.status==="fail",i=o.pass.length,a=n?o.fail:o.pass,c=e.name.padEnd(r),p=n?t.fail(a):t.pass(a),u=n?t.fail(c):c,d=Pi.length+i+1+r+2,f=Math.max(sp,s-d),[k,...b]=ip(e.message,f),v=B=>n?B:t.dim(B);return[`${Pi}${p} ${u}  ${v(k??"")}`.trimEnd(),...b.map(B=>`${" ".repeat(d)}${v(B)}`)]},dp=(e,r,t,o)=>{let s=Ti(e),n=t.rule.repeat(Math.max(12,Math.min(o-hr.length,56))),i=e.filter(f=>f.status==="fail"&&op.has(f.name)).length,a=r.pass(`${s.passed} passed`),c=r.fail(`${s.failed} failed`),p=s.failed===0?a:`${a} ${t.separator} ${c}`,u=r.dim(`${i} fixable \u2014 run \`infra-kit doctor --fix\``),d=i>0?`  ${u}`:"";return[`${hr}${r.dim(n)}`,`${hr}${p}${d}`]},up=(e,r={})=>{let t=r.color??!1,o=r.unicode??!0,s=r.width??80,n=ap(t),i=o?Ei.unicode:Ei.ascii;if(e.length===0)return[n.bold("infra-kit doctor"),"",`${hr}${n.dim("No checks ran.")}`];let a=Math.max(...e.map(p=>p.name.length)),c=np(e).flatMap(p=>[lp(p,n,i,s),...p.checks.flatMap(u=>pp(u,a,n,i,s)),""]);return[n.bold("infra-kit doctor"),"",...c,...dp(e,n,i,s)]},mp=new Set(["","0","false","none"]),fp=["LC_ALL","LC_CTYPE","LANG"],gp=(e,r)=>e.NO_COLOR!==void 0&&e.NO_COLOR!==""?!1:e.FORCE_COLOR!==void 0?!mp.has(e.FORCE_COLOR.toLowerCase()):!!r.isTTY,hp=(e,r)=>{if(r)return!1;let t=fp.map(o=>e[o]).find(o=>o!==void 0&&o!=="");return t===void 0?!0:/UTF-?8/i.test(t)},vp=(e={})=>{let r=e.env??Fo.env,t=e.stream??Fo.stderr;return{color:gp(r,t),unicode:hp(r,e.ascii??!1),width:t.columns??80}},yp=(e,r={})=>{(r.write??(o=>{Fo.stderr.write(o)}))(`${up(e,vp(r)).join(`
-`)}
-`)};import Lo from"node:fs";import Ci from"node:path";import kp from"node:process";import{z as vr}from"zod";var wp=async e=>{let r="";try{r=await R()}catch{return}let t=ue(r);t&&xo(t,e)},bp=e=>[...e.map(r=>`unset ${r}`),`unset ${yt}`,`unset ${Xe}`,`unset ${Qe}`,`unset ${kt}`,`unset ${er}`,`unset ${Ne}`,`export ${rr}='1'`],Si=async({purge:e=!1}={})=>{let r=tr(),t=Ci.join(r,q),o=Lo.existsSync(t);if(!o&&!e)throw new Error("No loaded environment found. Run `env-load` first.");await wp(e);let s=o?wt(t):[],n=bp(s),i=Ci.resolve(r,vt);Lo.mkdirSync(r,{recursive:!0,mode:448}),je(i,`${n.join(`
-`)}
-`,384),kp.stdout.write(`${i}
-`),o&&Lo.rmSync(t,{force:!0});let a={filePath:i,variableCount:s.length,unsetStatements:n,purged:e};return{content:h(JSON.stringify(a,null,2)),structuredContent:a}},Wo=y({name:"env-clear",description:'Generate a shell script that unsets every env var previously loaded by env-load for this session, plus the infra-kit session metadata vars. Does NOT mutate the calling process. When `infra-kit init` has installed the zsh shell integration, the user\'s terminal auto-sources the unset script on its next prompt (precmd hook) \u2014 so calling this via MCP will clear the vars in the shell that launched Claude Code automatically. Other callers must source "<filePath>" themselves or surface it to the user. Errors if no env is currently loaded.',requiresHumanConfirm:!0,inputSchema:{confirm:vr.boolean().optional().describe("Set true to execute; omit for a dry-run gate that echoes the resolved action.")},outputSchema:{filePath:vr.string().describe("Path to the file that must be sourced to apply"),variableCount:vr.number().describe("Number of variables cleared"),unsetStatements:vr.array(vr.string()).describe("Unset statements generated"),purged:vr.boolean().describe("Whether the project warm cache was purged outright")},handler:()=>Si()});import Rp from"node:process";import{z as Te}from"zod";var xp=(e,r,t)=>e.map(({env:o,source:s})=>({env:o,source:s,hasToken:!!(t||r[o])})),$i=["Environment","Source","Token"],Ep=e=>{let r=e.map(n=>[n.env,n.source,n.hasToken?"set":"not set"]),t=$i.map((n,i)=>Math.max(n.length,...r.map(a=>(a[i]??"").length))),o=n=>n.map((i,a)=>i.padEnd(t[a]??0)).join(" | ").trimEnd(),s=t.map(n=>"\u2500".repeat(n)).join("\u2500\u253C\u2500");return["Environments:","",o($i),s,...r.map(o)]},Ii=async()=>{let e=await Fe(),r=await $t(),t=await ee(),o=Rp.env[re],s=xp(r,t?.envs??{},o);if(l.info(`Doppler project: ${e}
-`),s.length===0)return l.info("No environments found."),l.info("  Declare them in a workflow's `workflow_dispatch` `environment.options`,"),l.info("  or add a token for one manually."),Ai({project:e,envs:s});for(let n of Ep(s))l.info(n);return Ai({project:e,envs:s})},Ai=({project:e,envs:r})=>{let t={project:e,configs:r.map(o=>o.env),tokens:r};return{content:h(JSON.stringify(t,null,2)),structuredContent:t}},Vo=y({name:"env-list",description:"List the environments this project has. The list is the union of two local sources: every environment declared in a GitHub workflow's `workflow_dispatch` `environment.options` (source `gh-workflow`), and every environment the local token store holds a token for (source `token-only`). Not a live fetch from Doppler \u2014 a Doppler service token is config-scoped and cannot enumerate sibling configs. Also returns the Doppler project name, and reports per environment whether a service token resolves locally (from the token store or INFRA_KIT_ENV_TOKEN) \u2014 presence only, never the token value, and never a live Doppler probe. Read-only.",inputSchema:{},outputSchema:{project:Te.string().describe("Detected Doppler project name"),configs:Te.array(Te.string()).describe("Every environment name known to this project"),tokens:Te.array(Te.object({env:Te.string().describe("Environment / Doppler config name"),source:Te.enum(["gh-workflow","token-only"]).describe("Where we learned this environment exists \u2014 a workflow declaration, or a token we hold"),hasToken:Te.boolean().describe("Whether a service token resolves locally for this environment")})).describe("Per-environment token presence \u2014 never the token value")},handler:Ii});import Pp from"node:path";import Be from"node:process";import{z as Ce}from"zod";var _i=async()=>{l.info("Environment session status:");let e=tr(),r=Be.env[Ps],t=Pp.join(e,q),o=0,s=0,n=Be.env[Xe]??null,i=Be.env[Qe]??null,a=Be.env[er]??null,c=Be.env[Ne]==="1",p=!!Be.env[rr];if(n){let d=wt(t);d.length>0&&(s=d.length,o=d.filter(b=>b in Be.env).length);let f=a?.replace(/\.\d{3}Z$/,"")??null,k=c?"auto-loaded":"manually loaded";if(l.info(`  ${n}: ${o} of ${s} vars loaded (${k}, project: ${i}, loadedAt: ${f}, session: ${r})
-`),s>0&&o<s){let b=s-o;l.warn(`  ${b} cached var(s) are not present in the current process \u2014 env-load needs to be re-sourced, or vars were unset manually.`)}}else{let d=p?" (cleared \u2014 auto-load suppressed until a new shell or explicit env-load)":"";l.info(`  Session ${r}: no env loaded${d}
-`)}let u={sessionId:r,sessionLoadedCount:o,sessionTotalCount:s,sessionConfig:n,sessionProject:i,sessionLoadedAt:a,autoLoaded:c,cleared:p};return{content:h(JSON.stringify(u,null,2)),structuredContent:u}},Jo=y({name:"env-status",description:"Report which Doppler project/config is currently loaded in the terminal session, when it was loaded, how many variables are cached, whether it was auto-loaded, and whether a clear is suppressing auto-load. Pure local introspection \u2014 makes NO Doppler call (use doctor for auth). Read-only \u2014 use env-load / env-clear to change the terminal session.",inputSchema:{},outputSchema:{sessionId:Ce.string().describe("Current terminal session ID"),sessionLoadedCount:Ce.number().describe("Number of cached vars active in the current session"),sessionTotalCount:Ce.number().describe("Total number of cached var names"),sessionConfig:Ce.string().nullable().describe("Doppler config name of the loaded session (environment name)"),sessionProject:Ce.string().nullable().describe("Doppler project name of the loaded session"),sessionLoadedAt:Ce.string().nullable().describe("ISO 8601 timestamp of when the env was loaded"),autoLoaded:Ce.boolean().describe("True when the loaded env was applied by env auto-load (not a manual env-load)"),cleared:Ce.boolean().describe("True when env-clear is currently suppressing auto-load in this shell")},handler:_i});import Tp from"node:process";import{z as Se}from"zod";var Oi="****",Bo=e=>typeof e!="string"||e.length<8?Oi:`${Oi}${e.slice(-4)}`;var Ni=(e,r,t)=>e.map(o=>{let s=t||r[o];return s?{env:o,source:t?`env:${re}`:"store",redactedToken:Bo(s),present:!0}:{env:o,source:"-",redactedToken:"-",present:!1}}),Cp=["ENV","SOURCE","TOKEN","PRESENT"],Di=(e,r)=>{let t=[...Cp,...r?["CHECK"]:[]],o=e.map(n=>[n.env,n.source,n.redactedToken,n.present?"yes":"no",...r?[n.status??"-"]:[]]),s=t.map((n,i)=>Math.max(n.length,...o.map(a=>(a[i]??"").length)));return[t,...o].map(n=>n.map((i,a)=>i.padEnd(s[a])).join("  ").trimEnd())},ji=async({check:e}={})=>{let r=await Le(),t=await ee(),o=Tp.env[re],s=Ni(r,t?.envs??{},o);if(e){let a=await Fe();for(let c of s){if(!c.present)continue;let p=o||t.envs[c.env],u=await Mr({childEnv:ur(p),project:a,config:c.env});c.status=u.outcome}}for(let a of Di(s,!!e))l.info(a);let n=s.filter(a=>!a.present);n.length>0&&l.info(`
-No token for: ${n.map(a=>a.env).join(", ")}. Add one with \`infra-kit env-token-set <env>\`.`);let i={tokens:s};return{content:h(JSON.stringify(i,null,2)),structuredContent:i}},Ko=y({name:"env-token-list",description:'List the Doppler service tokens configured for this repo: one row per environment declared in infra-kit.json, with its source (the local token store, or the INFRA_KIT_ENV_TOKEN env var) and a REDACTED token (last 4 chars at most \u2014 the raw value is never returned). With check=true, also asks Doppler whether each token is valid and correctly scoped (valid | revoked | mis-scoped | unreachable; "unreachable" means the probe could not tell, NOT that the token is bad). Read-only.',inputSchema:{check:Se.boolean().optional().describe("Probe Doppler for each token\u2019s validity and scope (one cheap call per environment).")},outputSchema:{tokens:Se.array(Se.object({env:Se.string().describe("Environment / Doppler config name"),source:Se.string().describe('"store", "env:INFRA_KIT_ENV_TOKEN", or "-" when absent'),redactedToken:Se.string().describe("Redacted token \u2014 last 4 chars at most, never the raw value"),present:Se.boolean().describe("Whether a token is configured for this environment"),status:Se.string().optional().describe("Only with check=true: valid | revoked | mis-scoped | unreachable")})).describe("One row per declared environment")},handler:ji});import{z as Ue}from"zod";import{$ as Z}from"zx";import{$ as Ay}from"zx";import{$ as L}from"zx";import{$ as Hr}from"zx";import qr from"node:process";var Go=async(e,r)=>{if(e.ok)return;let t=await e.text();throw l.error({status:e.status,statusText:e.statusText,error:t},r),new Error(`HTTP ${e.status}: ${e.statusText}`)},Uo=async(e,r)=>{try{let{baseUrl:t,token:o,email:s,projectId:n}=r,i={name:e.name,projectId:e.projectId||n,description:e.description||"",released:e.released||!1,archived:e.archived||!1},a=`${t}/rest/api/3/version`,c=btoa(`${s}:${o}`),p=await fetch(a,{method:"POST",headers:{Accept:"application/json","Content-Type":"application/json",Authorization:`Basic ${c}`},body:JSON.stringify(i)});return await Go(p,"Failed to create Jira version"),{success:!0,version:await p.json()}}catch(t){throw l.error({error:t},"Error creating Jira version"),t}},yr=async e=>{try{let{baseUrl:r,token:t,email:o,projectId:s}=e,n=`${r}/rest/api/3/project/${s}/versions`,i=btoa(`${o}:${t}`),a=await fetch(n,{method:"GET",headers:{Accept:"application/json",Authorization:`Basic ${i}`}});return await Go(a,"Failed to get Jira project versions"),await a.json()}catch(r){throw l.error({error:r},"Error getting Jira project versions"),r}},Ft=async(e,r)=>{try{return(await yr(r)).find(s=>s.name===e)||null}catch(t){throw l.error({error:t,versionName:e},"Error finding Jira version by name"),t}},Mt=async(e,r)=>{try{let{baseUrl:t,token:o,email:s}=r,n={};e.released!==void 0&&(n.released=e.released),e.archived!==void 0&&(n.archived=e.archived),e.releaseDate!==void 0&&(n.releaseDate=e.releaseDate),e.description!==void 0&&(n.description=e.description);let i=`${t}/rest/api/3/version/${e.versionId}`,a=btoa(`${s}:${o}`),c=await fetch(i,{method:"PUT",headers:{Accept:"application/json","Content-Type":"application/json",Authorization:`Basic ${a}`},body:JSON.stringify(n)});return await Go(c,"Failed to update Jira version"),{success:!0,version:await c.json()}}catch(t){throw l.error({error:t},"Error updating Jira version"),t}},zo=async(e,r)=>{try{let{versionName:t}=e,o=await Ft(t,r);if(!o)throw l.error({versionName:t},"Jira version not found"),new Error(`Version "${t}" not found in Jira project`);return await Mt({versionId:o.id,released:!0,releaseDate:new Date().toISOString().split("T")[0]},r)}catch(t){throw l.error({error:t},"Error delivering Jira release"),t}},kr=async()=>{let e=qr.env.JIRA_BASE_URL,r=qr.env.JIRA_TOKEN||qr.env.JIRA_API_TOKEN,t=qr.env.JIRA_PROJECT_ID,o=qr.env.JIRA_EMAIL,s=[];if(e||s.push("JIRA_BASE_URL (e.g., https://your-domain.atlassian.net)"),r||s.push("JIRA_TOKEN or JIRA_API_TOKEN (your Jira API token)"),t||s.push("JIRA_PROJECT_ID (numeric project ID)"),o||s.push("JIRA_EMAIL (your Jira email address)"),s.length>0){let i=["Jira configuration is required but incomplete.","Please configure the following environment variables:",...s.map(a=>`  - ${a}`),"","You can set these in your .env file or as environment variables."].join(`
-`);throw new Error(i)}let n=Number.parseInt(t,10);if(Number.isNaN(n))throw new TypeError(`Invalid JIRA_PROJECT_ID: "${t}" must be a numeric value (e.g., 10001)`);return{baseUrl:e.replace(/\/$/,""),token:r,projectId:n,email:o}},Ke=async()=>{try{return await kr()}catch(e){return l.warn({error:e},"Jira configuration not available, skipping Jira integration"),null}};var Fi="dev",Lt=e=>e==="hotfix"?"main":"dev",qo=async(e="regular")=>{let r=Lt(e);Hr.quiet=!0,await Hr`git fetch origin`,await Hr`git switch ${r}`,await Hr`git pull origin ${r}`,Hr.quiet=!1},Ho=async e=>{let{id:r,jiraConfig:t,description:o,type:s="regular"}=e,n=X(r),i=await Uo({name:n,projectId:t.projectId,description:o||"",released:!1,archived:!1},t),a=`${t.baseUrl}/projects/${i.version.projectId}/versions/${i.version.id}/tab/release-report-all-issues`,c=await Wt({id:r,jiraVersionUrl:a,type:s,description:o});return{version:O(r),type:s,branchName:c.branchName,prUrl:c.prUrl,jiraVersionUrl:a}},I=async()=>{let e=new Map,r=await Ke();if(!r)return e;try{let t=await yr(r);for(let o of t)o.description&&e.set(o.name,o.description)}catch{}return e},Yr=(e,r,t)=>{let o=t?" ".repeat(t-e.length+3):"   ",s=`[${r}]`.padEnd(11);return`${e}${o}${s}`},S=e=>e.toLowerCase().startsWith("hotfix")?"hotfix":"regular",Mi=e=>e.flatMap(r=>{let t=N(r);return t?[{branch:r,id:t,label:O(t)}]:[]}),fe=e=>{try{return be(pe(e))}catch(r){throw new g(r,{operation:`resolve release ref "${e}"`,remediation:'pass a version (e.g. "1.2.5") or a release name (e.g. "checkout-redesign")'})}},Zr=e=>{if(e===Fi)return Fi;let r=N(e);return r?O(r):e},Ge=e=>e.flatMap(r=>{let t=N(r);return t?[O(t)]:[]}),$p=(e,r)=>r?r.get(e)||"regular":void 0,M=e=>{let{branches:r,descriptions:t,types:o}=e;return Mi(r).map(({branch:s,id:n,label:i})=>({value:s,label:i,description:t.get(X(n)),type:$p(s,o)}))};var Ap=e=>e.map(r=>({pr:r,id:N(r.headRefName)})).filter(r=>r.id!==null).sort((r,t)=>ns(r.id,t.id,{a:r.pr.createdAt,b:t.pr.createdAt})).map(r=>r.pr),Ip=async()=>{let e=await L`gh pr list --search "Release in:title" --base dev --json number,title,headRefName,state,baseRefName,createdAt`,r=await L`gh pr list --search "Hotfix in:title" --base main --json number,title,headRefName,state,baseRefName,createdAt`,t=[...JSON.parse(e.stdout),...JSON.parse(r.stdout)],o=new Set;return t.filter(s=>o.has(s.headRefName)?!1:(o.add(s.headRefName),!0))},Li=async()=>{try{let e=await Ip();if(e.length===0)throw new g(void 0,{operation:"find open release PRs",remediation:"open a release PR first, or check you are in the right repo"});return Ap(e)}catch(e){throw e instanceof g?e:(l.error({error:e},"\u274C Error fetching release PRs"),new g(e,{operation:"fetch release PRs"}))}},Vt=async()=>(await Li()).map(r=>r.headRefName),$=async()=>(await Li()).map(r=>({branch:r.headRefName,title:r.title,createdAt:r.createdAt})),Jt=async e=>{let{branch:r,body:t}=e;try{L.quiet=!0,await L`gh pr edit ${r} --body ${t}`,L.quiet=!1}catch(o){throw l.error({error:o,branch:r},`Error updating release PR body for ${r}`),o}},Wt=async e=>{let{id:r,jiraVersionUrl:t,type:o,description:s}=e,n=os(r,o),i=Lt(o),a=be(r),c=s&&s.trim()!==""?`${t}
-
-${s}`:`${t} 
-`;try{L.quiet=!0,await L`git switch ${i}`,await L`git pull origin ${i}`,await L`git checkout -b ${a}`,await L`git push -u origin ${a}`,await L`git commit --allow-empty-message --allow-empty --message ''`,await L`git push origin ${a}`;let u=(await L`gh pr create --title ${n} --body ${c} --base ${i} --head ${a}`).stdout.trim();return await L`git switch ${i}`,L.quiet=!1,{branchName:a,prUrl:u}}catch(p){throw l.error({error:p,branchName:a},`Error creating release branch ${a}`),p}};var K=async e=>{let{operation:r}=e;if(await as())throw new g(void 0,{operation:r,remediation:"run this from the main repository checkout, not a linked git worktree",stderrExcerpt:"command run from inside a linked worktree"});if(!await ft())throw new g(void 0,{operation:r,remediation:"commit or stash your changes, then retry",stderrExcerpt:"working tree has uncommitted changes"})};import Np from"node:process";var Xr=class extends Error{name="PromptCancelledError";constructor(){super("Prompt cancelled")}};import _p from"node:process";var Bt={enabled:!1},Op=(e,r=t=>{_p.stdout.write(t)})=>(Bt.enabled&&e&&e.structuredContent!=null&&r(`${JSON.stringify(e.structuredContent,null,2)}
-`),e),Wi=e=>{e.options.some(t=>t.long==="--json")||e.option("--json","Output the structured result as JSON on stdout (human logs stay on stderr)"),e.commands.forEach(Wi)};var Vi=()=>{if(ut()||!Np.stdin.isTTY||Bt.enabled)throw new g(void 0,{operation:"interactive branch selection",remediation:"pass the branch selection explicitly (CLI: `--version`/`--versions`/`--all`; MCP: the `version`/`versions`/`all` fields) for non-interactive, --json, or MCP runs"})},$e=async e=>{Vi();let{runBranchPicker:r}=await import("./boot-OA6HGGO6.js"),t=await r(e);if(t===null)throw new Xr;return t},wr=async(e,r)=>{Vi();let{runBranchMultiPicker:t}=await import("./boot-OA6HGGO6.js"),o=await t(e,r);if(o===null)throw new Xr;return o};var Ji=async e=>{let{all:r,confirmedCommand:t}=e;await K({operation:"merge dev into release branches"});let s=(await $()).filter(p=>S(p.title)==="regular").map(p=>p.branch);if(s.length===0)return l.info("\u2139\uFE0F No open release branches found"),m.print(),{content:h(JSON.stringify({successfulMerges:0,failedMerges:0,failedBranches:[],totalBranches:0},null,2)),structuredContent:{successfulMerges:0,failedMerges:0,failedBranches:[],totalBranches:0}};let n=[];if(r)n=s;else{m.setInteractive();let p=await I();n=await wr(M({branches:s,descriptions:p}),{required:!0})}n.length===s.length?m.addOption("--all",!0):m.addOption("--versions",Ge(n)),await W(t,`Are you sure you want to merge dev into these branches: ${n.join(", ")}?`),t||m.addOption("--yes",!0),Z.quiet=!0;try{await Z`git fetch origin`,await Z`git switch dev`,await Z`git pull origin dev`}catch(p){throw Z.quiet=!1,new g(p,{operation:"switch to dev before merging",remediation:"dev may be checked out in another worktree \u2014 check `git worktree list`"})}let a=[];for(let p of n)await Dp(p)||a.push(p);if(Z.quiet=!1,a.length>0){l.info(`
-\u26A0\uFE0F  ${a.length} branch(es) failed to merge automatically.
-`),l.info("\u{1F4CB} Manual merge script for failed branches:");for(let p of a)l.info(`# Merge dev into ${p} and resolve conflicts if any 
-
-git switch ${p} && git pull origin ${p} && git merge origin/dev
-git push origin ${p} && git switch dev
-`);l.info(`\u2705 ${n.length-a.length}/${n.length} merges completed successfully.`)}else l.info(`\u2705 All merges completed successfully!
-`);m.print();let c={successfulMerges:n.length-a.length,failedMerges:a.length,failedBranches:a,totalBranches:n.length};return{content:h(JSON.stringify(c,null,2)),structuredContent:c}},Dp=async e=>{try{return await Z`git switch ${e}`,await Z`git pull origin ${e}`,await Z`git merge origin/dev --no-edit`,await Z`git push origin ${e}`,await Z`git switch dev`,l.info(`Successfully merged dev into ${e}`),!0}catch(r){let t=new g(r,{operation:`merge dev into ${e}`,remediation:"resolve conflicts manually or rerun after 'git fetch origin'"});return l.error({error:r,branch:e,msg:t.message}),await Z`git merge --abort`,!1}},Yo=y({name:"gh-merge-dev",description:"Merge origin/dev into every open regular (non-hotfix) release branch and push the result. Mutates local git state and the remote release branches. When invoked via MCP, pass all=true \u2014 the branch picker is unreachable without a TTY, and the confirmation prompt is auto-skipped for MCP calls, so the caller is responsible for gating. Irreversible once pushed.",requiresHumanConfirm:!0,inputSchema:{all:Ue.boolean().optional().describe("Target every open regular release branch. Must be true for MCP calls (the interactive picker is unavailable without a TTY)."),confirm:Ue.boolean().optional().describe("Set true to execute; omit for a dry-run gate that echoes the resolved action.")},outputSchema:{successfulMerges:Ue.number().describe("Number of successful merges"),failedMerges:Ue.number().describe("Number of failed merges"),failedBranches:Ue.array(Ue.string()).describe("List of branches that failed to merge"),totalBranches:Ue.number().describe("Total number of branches processed")},handler:Ji});import{z as rt}from"zod";import{$ as G}from"zx";var Bi=(e,r)=>{if(!(typeof e!="string"||e.length===0))return e.slice(-r).trim()},Qr=e=>{if(e===null||typeof e!="object")return{message:String(e)};let r=e,t={};e instanceof Error?(t.name=e.name,t.message=e.message):typeof r.message=="string"&&(t.message=r.message);let o=r.exitCode;(typeof o=="number"||o===null)&&(t.exitCode=o);let s=Bi(r.stderr,500);s&&(t.stderr=s);let n=Bi(r.stdout,200);return n&&(t.stdout=n),t};import{$ as Ki}from"zx";var et=async e=>{let{branches:r,worktreeDir:t,pruneFolder:o=!1}=e,s=await Promise.allSettled(r.map(async i=>{let a=`${t}/${i}`;return await nr(a),await Ki`git worktree remove ${a}`,i})),n=[];for(let[i,a]of s.entries())if(a.status==="fulfilled")n.push(a.value);else{let c=r[i],p=new g(a.reason,{operation:`remove worktree for ${c}`,remediation:"check 'git worktree list' for the path; uncommitted changes block removal"});l.error({error:a.reason,msg:p.message})}return o&&n.length===r.length&&await Ki`git worktree prune`,n};var br=async(e,r,t)=>{try{return await t()}catch(o){throw l.error({err:Qr(o)},`\u274C Failed to ${e}`),new g(o,{operation:e,remediation:r})}},Ui=async e=>{let r=await G`gh pr list --head ${e} --state all --json number,state,title --limit 1`;return JSON.parse(r.stdout)[0]??null},jp=async e=>{let r=eo(e),t=await G`gh pr list --head dev --base main --state merged --json number,state,title --limit 20`;return JSON.parse(t.stdout).find(n=>n.title===r)??null},Gi=async()=>{let e=await G`gh pr list --head dev --base main --state open --json number,state,title --limit 5`;return JSON.parse(e.stdout)[0]??null},Fp=async e=>{let r=fe(e),t=await Ui(r);if(!t)throw l.error(`\u274C No PR found for branch ${r}.`),new g(void 0,{operation:`deliver release ${r}`,remediation:`confirm a PR exists ('gh pr list --head ${r} --state all')`});return{selectedReleaseBranch:r,releasePrTitle:t.title}},Mp=async()=>{let e=await $(),r=e.map(i=>i.branch),t=new Map(e.map(i=>[i.branch,S(i.title)]));m.setInteractive();let o=await I(),s=await $e(M({branches:r,descriptions:o,types:t})),n=e.find(i=>i.branch===s);if(!n)throw l.error(`\u274C Release branch ${s} not found in open PRs.`),new g(void 0,{operation:`deliver release ${s}`,remediation:`confirm an open PR exists for ${s} ('gh pr list')`});return{selectedReleaseBranch:s,releasePrTitle:n.title}},Lp=async e=>{if(!(await oe("release")).includes(e))return;let o=`${await R()}${se}`;if((await et({branches:[e],worktreeDir:o})).length===0)throw new g(void 0,{operation:`remove worktree for ${e} before merge`,remediation:`run manually: git worktree remove ${o}/${e} (use --force if uncommitted changes)`})},Wp=async e=>{let{selectedReleaseBranch:r,releaseType:t}=e,o=t==="hotfix"?"main":"dev",s=await Ui(r);if(!s)throw new g(void 0,{operation:`look up release PR for ${r}`,remediation:"verify the PR exists in GitHub"});if(s.state==="MERGED"){l.info(`\u2713 Release PR ${r} already merged \u2014 skipping`);return}if(s.state==="CLOSED")throw new g(void 0,{operation:`merge release PR ${r} into ${o}`,remediation:"the PR is closed without merge; reopen it or create a new release"});await br(`merge release PR ${r} into ${o}`,`check 'gh pr view ${r}' for mergeability and required reviews`,async()=>{await G`gh pr merge ${r} --squash --admin --delete-branch`})},Vp=async e=>{let r=O(e),t=eo(e),o=await Gi();if(o){let n=o.number;return o.title!==t&&(l.info(`Adopting open dev \u2192 main PR #${n} ("${o.title}") and retitling for ${r}`),await br(`retitle dev \u2192 main PR #${n} to "${t}"`,`update manually: gh pr edit ${n} --title "${t}"`,async()=>{await G`gh pr edit ${n} --title ${t}`})),n}await br(`create RC PR (dev \u2192 main) for ${r}`,"run 'gh pr create --base main --head dev' manually to surface the underlying error (e.g. no commits between dev and main)",async()=>{await G`gh pr create --base main --head dev --title ${t} --body ""`});let s=await Gi();if(!s)throw new g(void 0,{operation:`look up RC PR for ${r}`,remediation:"verify the RC PR was created ('gh pr list --head dev --base main')"});return s.number},Jp=async e=>{let r=O(e);if(await jp(e)){l.info(`\u2713 RC PR for ${r} already merged into main \u2014 skipping`);return}let o=await Vp(e);await br(`merge RC PR #${o} (dev \u2192 main) for ${r}`,`check 'gh pr view ${o}' for mergeability and required reviews`,async()=>{await G`gh pr merge ${o} --squash --admin`})},Bp=async()=>{G.quiet=!1,await br("dispatch deploy-all workflow on main","check 'gh workflow list' and that you have permission to dispatch deploy-all.yml",async()=>{await G`gh workflow run deploy-all.yml --ref main -f environment=prod`}),G.quiet=!0},Kp=async()=>{await br("sync main back into dev","run manually: git switch main && git pull && git switch dev && git pull && git merge main --no-edit && git push",async()=>{await G`git switch main && git pull && git switch dev && git pull && git merge main --no-edit && git push`})},Gp=async e=>{try{await ls(e)}catch(r){l.warn({err:Qr(r)},`Failed to delete local branch ${e} (non-blocking)`)}try{await ps(e)}catch(r){l.warn({err:Qr(r)},`Failed to delete remote branch ${e} (non-blocking)`)}},Up=async e=>{let r=await Ke();if(!r){l.info("\u{1F514} Jira is not configured, skipping Jira release delivery");return}try{let t=X(e);await zo({versionName:t},r)}catch(t){l.error({err:Qr(t)},"Failed to deliver Jira release (non-blocking)")}},zi=async e=>{let{version:r,confirmedCommand:t}=e;await K({operation:"deliver release"});let{selectedReleaseBranch:o,releasePrTitle:s}=r?await Fp(r):await Mp(),n=N(o);if(!n)throw new g(void 0,{operation:`deliver release ${o}`,remediation:'pass a version (e.g. "1.2.5") or a release name (e.g. "checkout-redesign")'});let i=O(n);m.addOption("--version",i),l.info(`Delivering ${n.kind==="name"?"named release":"version"} ${o}`);let a=S(s);await W(t,`Are you sure you want to deliver version ${o} to production?`),m.addOption("--yes",!0),G.quiet=!0,await Lp(o),await Wp({selectedReleaseBranch:o,releaseType:a}),a!=="hotfix"&&await Jp(n),await Bp(),await Kp(),await Gp(o),G.quiet=!1,await Up(n),l.info(`Successfully delivered ${o} to production!`),m.print();let c={releaseBranch:o,version:i,type:a,success:!0};return{content:h(JSON.stringify(c,null,2)),structuredContent:c}},Zo=y({name:"gh-release-deliver",description:'Deliver a release to production. For hotfixes: squash-merges the release branch to main and dispatches the deploy-all workflow. For regular releases: squash-merges to dev, opens an RC PR, merges dev into main, dispatches the deploy-all workflow, then syncs main back to dev. Also releases the matching Jira fix version if Jira is configured. Dispatches the deploy workflow fire-and-forget \u2014 the tool returns once the workflow is accepted by GitHub, not when the deployment finishes. PR-merge steps are idempotent: re-running after a partial failure skips PRs that are already merged. Irreversible production operation: the confirmation prompt is auto-skipped for MCP calls, so the caller is responsible for gating. "version" is required when invoked via MCP (the picker is unreachable without a TTY).',inputSchema:{version:rt.string().describe('Accepts a release version (e.g. "1.2.5") OR a release name (e.g. "checkout-redesign") to deliver to production. Required for MCP calls.')},outputSchema:{releaseBranch:rt.string().describe("The release branch that was delivered"),version:rt.string().describe("The version that was delivered"),type:rt.enum(["regular","hotfix"]).describe("Release type"),success:rt.boolean().describe("Whether the delivery was successful")},handler:zi});import Hp from"@inquirer/confirm";import{z as ge}from"zod";import{$ as Xo}from"zx";import zp from"@inquirer/select";var Rr=async(e,r)=>{if(e.length===0)throw new g(void 0,{operation:r,remediation:"pass --env <name> explicitly",stderrExcerpt:"the workflow declares no `environment` choices to pick from"});return x(t=>zp({message:"\u{1F9EA} Select environment",choices:e.map(o=>({name:o,value:o}))},t))};var qp=["prod"],qi=e=>qp.includes(e),xr=e=>e.filter(r=>!qi(r)),Er=(e,r)=>{if(qi(e))throw new g(void 0,{operation:r,remediation:"use `infra-kit release deliver` \u2014 it merges the release to main, opens the RC PR, deploys from main, and releases the Jira version",stderrExcerpt:`"${e}" is delivered, not deployed ad-hoc`})};var Yp="deploy-all.yml",Zp=async e=>{let{confirmedCommand:r,branch:t,env:o}=e;if(r)return!0;m.setInteractive();let s=await x(n=>Hp({message:`Deploy ${t} \u2192 ${o}?`,default:!1},n));return s&&m.addOption("--yes",!0),s},Hi=async e=>{let{version:r,env:t,skipTerraform:o,confirmedCommand:s}=e,n="";if(r)n=r==="dev"?"dev":fe(r);else{m.setInteractive();let u=await $(),d=u.map(b=>b.branch),f=new Map(u.map(b=>[b.branch,S(b.title)])),k=await I();n=await $e([{value:"dev",label:"dev"},...M({branches:d,descriptions:k,types:f})])}let i=Zr(n);m.addOption("--version",i);let a=xr(await Me(Yp)),c="";t?c=t:(m.setInteractive(),c=await Rr(a,"launch deploy-all workflow")),m.addOption("--env",c),Er(c,"launch deploy-all workflow");let p=o??!1;if(p&&m.addOption("--skip-terraform",!0),!await Zp({confirmedCommand:s,branch:n,env:c})){l.info("Deployment cancelled");let u={releaseBranch:n,version:i,environment:c,skipTerraformDeploy:p,success:!1};return{content:h(JSON.stringify(u,null,2)),structuredContent:u}}try{Xo.quiet=!0,await Xo`gh workflow run deploy-all.yml --ref ${n} -f environment=${c} ${p?["-f","skip_terraform_deploy=true"]:[]}`,Xo.quiet=!1,l.info(`Successfully launched deploy-all workflow_dispatch for release branch: ${n} and environment: ${c}`),m.print();let d={releaseBranch:n,version:i,environment:c,skipTerraformDeploy:p,success:!0};return{content:h(JSON.stringify(d,null,2)),structuredContent:d}}catch(u){throw l.error({error:u},"\u274C Error launching workflow"),new g(u,{operation:"launch deploy-all workflow",remediation:"check 'gh workflow list' and that deploy-all.yml exists on the target ref"})}},Qo=y({name:"gh-release-deploy-all",description:'Dispatch the deploy-all.yml GitHub Actions workflow to deploy every service from a release branch to the given environment. Fire-and-forget \u2014 returns once GitHub accepts the workflow_dispatch, NOT when the deployment finishes; watch the workflow run for completion status. Use gh-release-deploy-selected for a subset of services. Pass version="dev" to deploy from the dev branch instead of a release branch. Both "version" and "env" are required when invoked via MCP (interactive pickers are unavailable without a TTY).',requiresHumanConfirm:!0,inputSchema:{version:ge.string().describe('Accepts a release version (e.g. "1.2.5") OR a release name (e.g. "checkout-redesign") \u2014 resolves to the release/vX.Y.Z or release/<name> branch. Pass "dev" to deploy from the dev branch instead. Required for MCP calls.'),env:ge.string().describe('Target environment name \u2014 must match an env configured for the project (e.g. "dev", "renana", "oriana"). Required for MCP calls.'),skipTerraform:ge.boolean().optional().describe("Skip the terraform deployment stage."),confirm:ge.boolean().optional().describe("Set true to execute; omit for a dry-run gate that echoes the resolved action.")},outputSchema:{releaseBranch:ge.string().describe("The release branch that was deployed"),version:ge.string().describe("The version that was deployed"),environment:ge.string().describe("The environment deployed to"),skipTerraformDeploy:ge.boolean().describe("Whether terraform deployment was skipped"),success:ge.boolean().describe("Whether the deployment was successful")},handler:Hi});import Xp from"@inquirer/checkbox";import Qp from"@inquirer/confirm";import ed from"node:fs/promises";import{resolve as rd}from"node:path";import td from"yaml";import{z as U}from"zod";import{$ as en}from"zx";var Kt="deploy-selected-services.yml",od="skip_terraform_deploy",nd=async e=>{let{confirmedCommand:r,branch:t,env:o}=e;if(r)return!0;m.setInteractive();let s=await x(n=>Qp({message:`Deploy ${t} \u2192 ${o}?`,default:!1},n));return s&&m.addOption("--yes",!0),s},Yi=async e=>{let{version:r,env:t,services:o,skipTerraform:s,confirmedCommand:n}=e,i="";if(r)i=r==="dev"?"dev":fe(r);else{m.setInteractive();let v=await $(),P=v.map(A=>A.branch),B=new Map(v.map(A=>[A.branch,S(A.title)])),_=await I();i=await $e([{value:"dev",label:"dev"},...M({branches:P,descriptions:_,types:B})])}let a=Zr(i);m.addOption("--version",a);let c=xr(await Me(Kt)),p="";t?p=t:(m.setInteractive(),p=await Rr(c,"launch deploy-selected workflow")),m.addOption("--env",p),Er(p,"launch deploy-selected workflow");let u=await sd();if(u.length===0)throw new g(void 0,{operation:"launch deploy-selected workflow",remediation:`declare boolean service inputs in .github/workflows/${Kt}`,stderrExcerpt:`no services found in .github/workflows/${Kt}`});let d=[];if(o&&o.length>0?d=o:(m.setInteractive(),d=await x(v=>Xp({message:"\u{1F680} Select services to deploy (space to select, enter to confirm)",choices:u.map(P=>({name:P,value:P}))},v))),m.addOption("--services",d),d.length===0)throw new g(void 0,{operation:"launch deploy-selected workflow",remediation:`pass at least one service from: ${u.join(", ")}`,stderrExcerpt:"no services selected"});let f=d.filter(v=>!u.includes(v));if(f.length>0)throw new g(void 0,{operation:"launch deploy-selected workflow",remediation:`pass services from: ${u.join(", ")}`,stderrExcerpt:`invalid services: ${f.join(", ")}`});let k=s??!1;k&&m.addOption("--skip-terraform",!0);let b=v=>{let P={releaseBranch:i,version:a,environment:p,services:d,skipTerraformDeploy:k,success:v};return{content:h(JSON.stringify(P,null,2)),structuredContent:P}};if(!await nd({confirmedCommand:n,branch:i,env:p}))return l.info("Deployment cancelled"),b(!1);try{en.quiet=!0;let v=d.flatMap(B=>["-f",`${B}=true`]);return await en`gh workflow run deploy-selected-services.yml --ref ${i} -f environment=${p} ${v} ${k?["-f","skip_terraform_deploy=true"]:[]}`,en.quiet=!1,l.info(`Successfully launched deploy-selected-services workflow_dispatch for release branch: ${i}, environment: ${p}, services: ${d.join(", ")}`),m.print(),b(!0)}catch(v){throw l.error({error:v},"\u274C Error launching workflow"),new g(v,{operation:"launch deploy-selected workflow",remediation:"check 'gh workflow list' and that deploy-selected-services.yml exists on the target ref"})}},sd=async()=>{let e=await R(),r=rd(e,".github/workflows",Kt),t;try{t=td.parse(await ed.readFile(r,"utf-8"))}catch{return[]}let s=t?.on?.workflow_dispatch?.inputs;return typeof s!="object"||s===null?[]:Object.entries(s).filter(([n,i])=>i?.type==="boolean"&&n!==od).map(([n])=>n)},rn=y({name:"gh-release-deploy-selected",requiresHumanConfirm:!0,description:'Dispatch the deploy-selected-services.yml GitHub Actions workflow to deploy a chosen subset of services from a release branch to the given environment. Fire-and-forget \u2014 returns once GitHub accepts the workflow_dispatch, NOT when the deployment finishes; watch the workflow run for completion status. Service names are validated against the boolean inputs declared in the workflow. Use gh-release-deploy-all for every service. "version", "env", and "services" are all required when invoked via MCP (interactive pickers are unavailable without a TTY).',inputSchema:{version:U.string().describe('Accepts a release version (e.g. "1.2.5") OR a release name (e.g. "checkout-redesign") \u2014 resolves to the release/vX.Y.Z or release/<name> branch. Pass "dev" to deploy from the dev branch instead. Required for MCP calls.'),env:U.string().describe('Target environment name \u2014 must match an env configured for the project (e.g. "dev", "renana", "oriana"). Required for MCP calls.'),services:U.array(U.string()).describe('Service names to deploy. Each must match a boolean input declared in .github/workflows/deploy-selected-services.yml (e.g. "client-be", "client-fe"). Required for MCP calls.'),skipTerraform:U.boolean().optional().describe("Skip the terraform deployment stage."),confirm:U.boolean().optional().describe("Set true to execute; omit for a dry-run gate that echoes the resolved action.")},outputSchema:{releaseBranch:U.string().describe("The release branch that was deployed"),version:U.string().describe("The version that was deployed"),environment:U.string().describe("The environment deployed to"),services:U.array(U.string()).describe("The services that were deployed"),skipTerraformDeploy:U.boolean().describe("Whether terraform deployment was skipped"),success:U.boolean().describe("Whether the deployment was successful")},handler:Yi});import{z as Pr}from"zod";var Zi=async()=>{let r=(await $()).flatMap(i=>{let a=N(i.branch);return a?[{version:O(a),jiraKey:X(a),type:S(i.title)}]:[]}),t=await I(),o=Math.max(...r.map(i=>i.version.length)),s=r.map(i=>{let a=Yr(i.version,i.type,o),c=t.get(i.jiraKey);return c?`${a}  ${c}`:a});l.info(`All release branches: 
-`),l.info(`
-${s.join(`
-`)}
-`);let n={releases:r.map(i=>({version:i.version,type:i.type,description:t.get(i.jiraKey)||null})),count:r.length};return{content:h(JSON.stringify(n,null,2)),structuredContent:n}},tn=y({name:"gh-release-list",description:"List every open release PR with its version, type (regular / hotfix), and associated Jira fix-version description. Read-only; sourced from GitHub and Jira.",inputSchema:{},outputSchema:{releases:Pr.array(Pr.object({version:Pr.string().describe("Release version"),type:Pr.enum(["regular","hotfix"]).describe("Release type"),description:Pr.string().nullable().describe("Jira version description")})).describe("List of all release branches"),count:Pr.number().describe("Number of release branches")},handler:Zi});import id from"node:process";var on=e=>({...e}),nn=e=>{let{env:r,branch:t,sha:o,ambient:s=id.env}=e,n={VITE_DOMAIN_ENV:r,VITE_BRANCH_NAME:t,VITE_COMMIT_HASH:o},i={},a=[];for(let[c,p]of Object.entries(s)){if(c.startsWith("VITE_")){a.push(c);continue}i[c]=p}return a.sort(),{childEnv:{...i,...n,DEPLOY_ENV:r,DEPLOY_BRANCH:t,DEPLOY_SHA:o,TURBO_TELEMETRY_DISABLED:"1"},contract:n,stripped:a}},Gt=e=>{let r=Object.entries(e.contract).map(([t,o])=>`  ${t.padEnd(17)}= ${o}`);return e.stripped.length>0&&r.push(`  stripped from shell: ${e.stripped.join(", ")}`),r.join(`
-`)};import vd from"@inquirer/checkbox";import yd from"@inquirer/confirm";import kd from"@inquirer/select";import{spawn as wd}from"node:child_process";import bd from"node:process";import{z as T}from"zod";import{$ as ot}from"zx";import{$ as tt}from"zx";var ad=async e=>{let r=tt.quiet;tt.quiet=!0;try{let t=`/${e}/environment`,o=await tt`aws sts get-caller-identity --query Account --output text`,s=await tt`aws ssm get-parameter --name ${t} --query Parameter.Value --output text`;return{accountId:o.stdout.trim(),stage:s.stdout.trim()}}catch(t){throw new g(t,{operation:"resolve the AWS account for this deploy",remediation:`check that credentials are loaded and that \`/${e}/environment\` exists in the account they point at \u2014 run \`aws sts get-caller-identity\` to see which account that is`})}finally{tt.quiet=r}},Xi=(e,r)=>{if(r.stage!==e)throw new g(void 0,{operation:"verify the target environment",remediation:"switch AWS_PROFILE to the account for this environment, or pass the env this account is",stderrExcerpt:`you asked for "${e}", but AWS account ${r.accountId} reports "${r.stage}" \u2014 refusing to deploy to an environment you did not name`})},Qi=e=>{let{env:r,isShared:t,isClean:o}=e;if(!(!t||o))throw new g(void 0,{operation:`deploy to shared environment "${r}"`,remediation:"commit or stash first, or deploy to a personal environment instead",stderrExcerpt:"the working tree has uncommitted changes and this environment is shared"})},ea=(e,r)=>{if(r.includes(e))throw new g(void 0,{operation:`deploy to "${e}"`,remediation:"wait for the CI run to finish, or watch it with `gh run watch`",stderrExcerpt:`a CI deploy to "${e}" is already in flight \u2014 running both would interleave`})},sn=async e=>{let{env:r,project:t,isShared:o,isClean:s,runningEnvs:n,skip:i}=e;Er(r,`deploy to "${r}"`),ea(r,n),i.includes("clean-tree")||Qi({env:r,isShared:o,isClean:s});let a=await ad(t);return Xi(r,a),{identity:a,skipped:i}};import na from"node:fs/promises";import oa from"node:path";import ra from"node:fs/promises";import ta from"node:path";var cd=".github/workflows",ld=/script_name:\s*(?<service>[a-z0-9-]+)/,pd=/uses:\s*\.\/\.github\/workflows\/_deploy-(?<service>[a-z0-9-]+)-jobs\.ya?ml/,dd=/inputs\.environment\s*==\s*'(?<env>[a-z0-9-]+)'/g,an=async e=>{let r=ta.resolve(e,cd),t;try{t=await ra.readdir(r)}catch{return new Map}let o=new Map;for(let s of t.filter(n=>n.endsWith(".yml")||n.endsWith(".yaml"))){let n;try{n=await ra.readFile(ta.resolve(r,s),"utf-8")}catch{continue}ud(n,o)}return o},ud=(e,r)=>{for(let t of e.split(/\n(?= {2}[\w-]+:)/i)){let o=ld.exec(t)?.groups?.service??pd.exec(t)?.groups?.service;if(o===void 0||t.trimStart().startsWith("#"))continue;let s=[...t.matchAll(dd)].map(n=>n.groups?.env??"");s.length!==0&&r.set(o,[...new Set([...r.get(o)??[],...s])])}},cn=(e,r)=>e===null?r??null:r===void 0?e:e.filter(t=>r.includes(t));var md="devops/scripts",fd=/^deploy-(?<service>[a-z0-9-]+)\.sh$/,gd=/skip_unless_env_enabled\s+"[^"]*"\s+"[^"]*"\s+"(?<envs>[^"]*)"/,ln=async e=>{let r=oa.resolve(e,md),t;try{t=await na.readdir(r)}catch{return[]}let o=await an(e);return(await Promise.all(t.map(n=>({entry:n,match:fd.exec(n)})).filter(n=>n.match!==null).map(async({entry:n,match:i})=>{let a=oa.resolve(r,n),c=i?.groups?.service??"";return{name:c,scriptPath:a,allowedEnvs:cn(await hd(a),o.get(c))}}))).sort((n,i)=>n.name.localeCompare(i.name))},hd=async e=>{let r;try{r=await na.readFile(e,"utf-8")}catch{return null}let t=r.split(`
-`).filter(s=>!s.trimStart().startsWith("#")).reduce((s,n)=>s??gd.exec(n)?.groups?.envs,void 0);if(t===void 0)return null;let o=t.split(/\s+/).filter(Boolean);return o.length>0?o:null},Ut=(e,r)=>e.allowedEnvs===null||e.allowedEnvs.includes(r),pn=(e,r)=>e.filter(t=>Ut(t,r));var sa="deploy-all.yml",Rd=["dev","stage"],ia="/bin/sh",xd=async()=>{let e=ot.quiet;ot.quiet=!0;try{let r=await ot`gh run list --workflow=${sa} --status=in_progress --json displayTitle`;return JSON.parse(r.stdout).flatMap(o=>/\[(?<env>[a-z0-9-]+)\]/.exec(o.displayTitle??"")?.groups?.env??[])}catch{return[]}finally{ot.quiet=e}},Ed=async(e,r)=>{let t=e.map(s=>({name:s.name,value:s.name})),o=await x(s=>vd({message:`Deploy which services to ${r}?`,choices:t,pageSize:20},s));if(o.length===0)throw new g(void 0,{operation:"select services",remediation:"pick at least one service, or use `local deploy-all`",stderrExcerpt:"no services selected"});return o},Pd=async e=>{let{env:r,isShared:t,count:o}=e;return t?x(s=>kd({message:`"${r}" is a SHARED environment \u2014 deploying ${o} service(s) from this machine. Continue?`,choices:[{name:"No, cancel",value:!1},{name:`Yes, deploy to ${r}`,value:!0}]},s)):x(s=>yd({message:`Deploy ${o} service(s) to ${r} from this machine?`,default:!1},s))},Td=(e,r,t)=>new Promise((o,s)=>{let n=wd(ia,[e.scriptPath],{cwd:t,env:r,stdio:"inherit"});n.on("error",s),n.on("close",i=>{o(i??1)})}),Cd=async e=>{let{chosen:r,childEnv:t,cwd:o,env:s}=e,n=[],i=[];for(let a of r){l.info(`\u2192 ${a.name} \u2192 ${s}`);let c=await Td(a,t,o);if(c!==0){i.push(a.name),l.error(`\u2717 ${a.name} failed (exit ${c})`);break}n.push(a.name),l.info(`\u2713 ${a.name}`)}return{deployed:n,failed:i}},Sd=e=>{let{names:r,services:t,env:o}=e,s=new Map(t.map(a=>[a.name,a])),n=r.filter(a=>!s.has(a));if(n.length>0)throw new g(void 0,{operation:"resolve the requested services",remediation:`known services: ${t.map(a=>a.name).join(", ")}`,stderrExcerpt:`no deploy script for: ${n.join(", ")}`});let i=r.filter(a=>{let c=s.get(a);return c!==void 0&&!Ut(c,o)});if(i.length>0)throw new g(void 0,{operation:`deploy to "${o}"`,remediation:"drop those services, or deploy them to an environment they allow",stderrExcerpt:`not enabled for "${o}": ${i.join(", ")} (the scripts would skip them)`});return r.map(a=>s.get(a))},dn=e=>{let{env:r,accountId:t,names:o,built:s,deployed:n,failed:i,dryRun:a,success:c}=e,p={environment:r,accountId:t,services:o,deployed:n,failed:i,contract:on(s.contract),strippedVars:s.stripped,dryRun:a,success:c};return{content:h(JSON.stringify(p,null,2)),structuredContent:p}},$d=async e=>{let{selection:r,eligible:t,service:o,env:s}=e;return r==="all"?t.map(n=>n.name):o&&o.length>0?o:(m.setInteractive(),Ed(t,s))},aa=async(e,r)=>{let{env:t,service:o,yes:s,dryRun:n,printEnv:i,skipPreflight:a=[]}=e,c=await R(),p=await cs(),u=await ln(c);if(u.length===0)throw new g(void 0,{operation:"discover deployable services",remediation:"run this from a repo that has devops/scripts/deploy-*.sh",stderrExcerpt:`no deploy scripts found under ${c}/devops/scripts`});let d=xr(await Me(sa)),f=t??"";f||(m.setInteractive(),f=await Rr(d,"deploy locally")),m.addOption("--env",f);let k=pn(u,f);if(k.length===0)throw new g(void 0,{operation:`deploy to "${f}"`,remediation:"pick an environment these services allow",stderrExcerpt:`no service on disk is enabled for "${f}"`});let b=await $d({selection:r,eligible:k,service:o,env:f}),v=Sd({names:b,services:u,env:f});if(r==="selected")for(let te of b)m.addOption("--service",te);let P=Rd.includes(f),B=await is(),_=(await ot`git rev-parse HEAD`.quiet()).stdout.trim(),A=nn({env:f,branch:B,sha:_});i&&l.info(`Deploy contract for ${f}:
-${Gt(A)}`);let le=a.filter(te=>te==="clean-tree"||te==="toolchain"),z=(await sn({env:f,project:p,isShared:P,isClean:await ft(),runningEnvs:await xd(),skip:le})).identity.accountId;if(n)return l.info([`Would deploy to "${f}" (AWS account ${z}) from this machine`,Gt(A),"Commands:",...v.map(te=>`  ${ia} ${te.scriptPath}`),"","Dry run: preflight and contract only \u2014 says nothing about whether the deploy would succeed."].join(`
-`)),dn({env:f,accountId:z,names:b,built:A,deployed:[],failed:[],dryRun:!0,success:!0});if(!s&&!await Pd({env:f,isShared:P,count:b.length}))return l.info("Deployment cancelled"),dn({env:f,accountId:z,names:b,built:A,deployed:[],failed:[],dryRun:!1,success:!1});A.stripped.length>0&&l.info(`Stripped ambient VITE_* from the build env: ${A.stripped.join(", ")}`);let{deployed:He,failed:_e}=await Cd({chosen:v,childEnv:A.childEnv,cwd:c,env:f});return _e.length>0&&(l.error(`Partial deploy to "${f}": succeeded [${He.join(", ")||"none"}], failed [${_e.join(", ")}]. There is no rollback \u2014 redeploy the previous commit to restore it.`),bd.exitCode=1),m.print(),dn({env:f,accountId:z,names:b,built:A,deployed:He,failed:_e,dryRun:!1,success:_e.length===0})},ca=async e=>aa(e,"all"),la=async e=>aa(e,"selected"),pa=`Runs the repo's own devops/scripts/deploy-*.sh on THIS machine instead of dispatching CI. Supplies the build contract (VITE_DOMAIN_ENV/BRANCH/COMMIT) that the workflow YAML normally provides and that the scripts do not set themselves, and refuses unless the requested environment matches the AWS account the shell is authenticated to. "prod" is always refused \u2014 it is delivered, not deployed. Services the environment forbids are refused, matching the workflow's own per-service gates. Use dryRun first.`,da={env:T.string().describe('Target environment, e.g. "dev" or a personal env like "arthur". Required for MCP.'),dryRun:T.boolean().optional().describe("Resolve target, contract and commands without deploying."),skipPreflight:T.array(T.enum(["clean-tree","toolchain"])).optional().describe("Waive a named non-critical check. The env/account and prod checks can never be waived."),confirm:T.boolean().optional().describe("Set true to execute; omit for a dry-run gate.")},ua={environment:T.string().describe("Environment deployed to"),accountId:T.string().describe("AWS account the deploy targeted"),services:T.array(T.string()).describe("Services requested"),deployed:T.array(T.string()).describe("Services that completed successfully"),failed:T.array(T.string()).describe("Services that failed"),contract:T.record(T.string(),T.string()).describe("Build contract passed to the scripts"),strippedVars:T.array(T.string()).describe("Ambient VITE_* names removed from the build env"),dryRun:T.boolean().describe("Whether this was a dry run"),success:T.boolean().describe("Whether every requested service deployed")},un=y({name:"local-deploy-all",description:`Deploy EVERY service enabled for an environment, from this machine. ${pa}`,requiresHumanConfirm:!0,inputSchema:da,outputSchema:ua,handler:ca}),mn=y({name:"local-deploy-selected",description:`Deploy a NAMED SUBSET of services from this machine. ${pa}`,requiresHumanConfirm:!0,inputSchema:{...da,service:T.array(T.string()).min(1).describe('Service names as in devops/scripts/deploy-<name>.sh, e.g. ["client-be"]. Required for MCP.')},outputSchema:ua,handler:la});import Md from"@inquirer/confirm";import Pn from"@inquirer/input";import ha from"@inquirer/select";import xn from"node:process";import{z as C}from"zod";import{$ as qt}from"zx";var Ae=e=>e.slice(1).split(".").map(Number),fn=e=>[...e].sort((r,t)=>{let[o,s,n]=Ae(r),[i,a,c]=Ae(t);return o!==i?(o??0)-(i??0):s!==a?(s??0)-(a??0):(n??0)-(c??0)});var fa="next",Ad=/^v?(\d+)\.(\d+)\.(\d+)$/,Id=e=>e.replace(/^.*release\//,""),hn=e=>{let r=Id(e.trim()),t=Ad.exec(r);return t?[Number(t[1]),Number(t[2]),Number(t[3])]:null},ma=e=>`${e[0]}.${e[1]}.${e[2]}`,vn=e=>{let r=[...e.remoteBranches??[],...e.jiraVersions??[]],t=[],o=new Set;for(let s of r){let n=hn(s);if(!n)continue;let i=ma(n);o.has(i)||(o.add(i),t.push(n))}return fn(t.map(s=>ma(s))).map(s=>Ae(`v${s}`))},ze=class extends Error{constructor(){super("No prior release versions found from git or Jira. Specify the version explicitly."),this.name="NoPriorVersionsError"}},zt=(e,r)=>{if(e.length===0)throw new ze;let t=e[e.length-1];if(r==="hotfix"){let[n,i]=t,a=e.reduce((c,p)=>p[0]===n&&p[1]===i?Math.max(c,p[2]):c,0);return`${n}.${i}.${a+1}`}let[o,s]=t;return`${o}.${s+1}.0`},yn=e=>e.trim().toLowerCase()===fa,_d=e=>e==="regular"||e==="hotfix",ga=e=>"name"in e,Od=e=>{let r=e.trim();if(r==="")throw new Error("Release spec is empty");let t=r.indexOf(":"),o=r,s="regular",n="";if(t!==-1){o=r.slice(0,t).trim();let a=r.slice(t+1),c=a.indexOf(":"),p=c===-1?a.trim():a.slice(0,c).trim();n=c===-1?"":a.slice(c+1).trim();let u=p.toLowerCase();if(!_d(u))throw new Error(`Invalid release type "${p}". Expected "regular" or "hotfix".`);s=u}if(yn(o)||hn(o)!==null){let a={version:o,type:s};return n!==""&&(a.description=n),a}let i={name:o,type:s};return n!==""&&(i.description=n),i},kn=e=>{let r=e.id.raw;return e.description!==void 0&&e.description!==""?`${r}:${e.type}:${e.description}`:e.type==="hotfix"?`${r}:hotfix`:r},gn=(e,r)=>r!==void 0&&r!==""?{...e,description:r}:e,Nd=e=>{let r=e.name.trim();return mt(r),gn({id:{kind:"name",name:r,raw:r},type:e.type},e.description)},wn=(e,r)=>{let t=[...r];return e.map(o=>{if(ga(o))return Nd(o);let s=o.version.trim();if(s==="")throw new Error("Release entry has an empty version");if(yn(s)){let a=zt(t,o.type);return t.push(Ae(`v${a}`)),gn({id:pe(a),type:o.type},o.description)}let n=hn(s);if(!n)throw new Error(`Invalid version "${s}". Expected semver like "1.2.5" or the token "next".`);let i=`${n[0]}.${n[1]}.${n[2]}`;return t.push(n),gn({id:pe(i),type:o.type},o.description)})},bn=e=>e.some(r=>!ga(r)&&yn(r.version));var Dd=e=>e.split(`
-`).map(r=>{let t=r.indexOf("	");return t===-1?null:N(r.slice(t+1))}).filter(r=>r!==null&&r.kind==="version").map(r=>r.raw),jd=async()=>{let e=qt.quiet;try{qt.quiet=!0;let r=await qt`git ls-remote --heads origin 'release/v*'`;return Dd(r.stdout)}finally{qt.quiet=e}},Fd=async()=>{let e=await Ke();return e?(await yr(e)).map(t=>t.name):[]},Rn=async()=>{let[e,r]=await Promise.allSettled([jd(),Fd()]);return e.status==="rejected"&&l.warn({error:e.reason},"Failed to list remote release branches; continuing without them"),r.status==="rejected"&&l.warn({error:r.reason},"Failed to fetch Jira versions; continuing without them"),vn({remoteBranches:e.status==="fulfilled"?e.value:[],jiraVersions:r.status==="fulfilled"?r.value:[]})};var Ld='"1.2.5" or "next"',Wd=(e,r)=>{try{return zt(e,r)}catch(t){if(t instanceof ze)return null;throw t}},En=(e,r)=>{try{return wn(e,r)}catch(t){throw t instanceof ze?new g(t,{operation:"resolve release version",remediation:'pass an explicit version (e.g. "1.2.5") instead of "next" when there are no prior versions'}):t instanceof ts?new g(t,{operation:"validate release name",remediation:'use a kebab-case name like "checkout-redesign" (lowercase, digits, single hyphens, not a reserved word)'}):t}},Vd=async(e,r)=>{let t=Wd(e,r),o=t?` [${t}]`:"",s=(await x(i=>Pn({message:`  Version (e.g. ${Ld})${o}: `},i))).trim(),n=s===""?t??"":s;return n===""&&(l.error("No version provided. Exiting..."),xn.exit(1)),n},Jd=async()=>{let e=(await x(r=>Pn({message:'  Name (kebab-case, e.g. "checkout-redesign"): '},r))).trim();e===""&&(l.error("No name provided. Exiting..."),xn.exit(1));try{mt(e)}catch(r){let t=r instanceof Error?r.message:String(r);l.error(`${t} Exiting...`),xn.exit(1)}return e},Bd=async e=>{m.setInteractive();let r=null,t=[],o=async()=>(r===null&&(r=await e(),t.push(...r)),t),s=[],n=!0;for(;n;){let i=s.length+1,a=await x(d=>ha({message:`Release #${i} \u2014 version or name?`,choices:[{name:"version (semver / next)",value:"version"},{name:"name (free-form)",value:"name"}],default:"version"},d)),c=await x(d=>ha({message:`Release #${i} \u2014 select type:`,choices:[{name:"regular",value:"regular"},{name:"hotfix",value:"hotfix"}],default:"regular"},d)),p;if(a==="name"){let d=await Jd();p=En([{name:d,type:c}],[])[0]}else{let d=await Vd(await o(),c);p=En([{version:d,type:c}],t)[0],p.id.kind==="version"&&t.push(Ae(`v${p.id.raw}`))}let u=(await x(d=>Pn({message:"  Description (optional, press Enter to skip): "},d))).trim();s.push({...p,...u!==""?{description:u}:{}}),n=await x(d=>Md({message:"Add another release?",default:!1},d))}return s},Kd=e=>{let t=[e.id.kind==="version"?`v${e.id.raw}`:e.id.name,e.type];return e.description&&t.push(e.description),t.join(" \xB7 ")},va=e=>{for(let r of e)m.addOption("--release",kn(r))},Gd=async(e,r)=>{if(e&&e.length>0){let o=bn(e)?await r():[],s=En(e,o);return va(s),s}let t=await Bd(r);return va(t),t},Ud=e=>{if(new Set(e.map(t=>t.type)).size>1)throw new g(void 0,{operation:"create release",remediation:"create regular and hotfix releases in separate invocations",stderrExcerpt:"mixed regular and hotfix releases in one batch are not supported"})},zd=async(e,r)=>{let t=e.map(Kd).join(`
-  - `);await W(r,`Create the following ${e.length} release(s)?
-  - ${t}
-`),m.addOption("--yes",!0)},qd=async e=>{let{entry:r,jiraConfig:t}=e,o=O(r.id),s=r.id.kind==="version"?`v${r.id.raw}`:r.id.name;try{await qo(r.type);let n=await Ho({id:r.id,jiraConfig:t,description:r.description,type:r.type});return l.info(`\u2705 Successfully created release: ${s} (${r.type})`),l.info(`\u{1F517}  GitHub PR: ${n.prUrl}`),l.info(`\u{1F517}  Jira Version: ${n.jiraVersionUrl}
-`),{result:n}}catch(n){let i=new g(n,{operation:`create release ${s} (${r.type})`,remediation:"verify the version or name is unique and the base branch is clean"});return l.error(`\u274C ${i.message}
-`),{failure:{version:o,error:i.message}}}},Hd=(e,r,t)=>{r===e?l.info(`\u2705 All ${e} release branch(es) were created successfully.`):r>0?(l.warn(`\u26A0\uFE0F  ${r} of ${e} release branches were created successfully.`),l.warn(`\u274C  ${t} release(s) failed.`)):l.error(`\u274C All ${e} release branch(es) failed to create.`)},ya=async e=>{let{releases:r,confirmedCommand:t}=e,o=await kr(),s=null,i=await Gd(r,async()=>(s===null&&(s=await Rn()),s));if(i.length===0)throw new g(void 0,{operation:"create release",remediation:'pass at least one entry in "releases" (e.g. [{ version: "1.2.5", type: "regular" }])',stderrExcerpt:"no releases provided"});Ud(i),await K({operation:"create release"}),await zd(i,!!t);let a=[],c=[];for(let u of i){let{result:d,failure:f}=await qd({entry:u,jiraConfig:o});d&&a.push(d),f&&c.push(f)}Hd(i.length,a.length,c.length),m.print();let p={createdBranches:a.map(u=>u.branchName),successCount:a.length,failureCount:c.length,releases:a,failedReleases:c};return{content:h(JSON.stringify(p,null,2)),structuredContent:p}},Tn=y({name:"release-create",requiresHumanConfirm:!0,description:'Create one or more releases in a single call. Each entry in "releases" carries EITHER a "version" (semver or the literal token "next") OR a "name" (free-form kebab-case identifier) \u2014 exactly one is required and they are mutually exclusive. Each entry also has its own type (regular|hotfix, default regular) and optional description; all entries in one call must share the same type \u2014 mixed regular+hotfix batches are rejected (create them in separate invocations). For each release this tool switches to the appropriate base branch (dev for regular, main for hotfix), cuts the release branch (release/v<semver> for versions, release/<name> for names), opens a GitHub release PR, and creates the matching Jira fix version (v<semver> for versions, <name> for names). The literal token "next" auto-increments from the union of remote release branches and Jira fix versions (regular bumps minor + resets patch; hotfix bumps patch on the highest minor); multiple "next" tokens advance sequentially. Named releases never auto-bump and "next" is version-only. Must be run from the main repository checkout (not a linked worktree) on the matching base branch with a clean working tree. Confirmation is auto-skipped for MCP calls, so the caller is responsible for gating. Continues on per-release failure and reports successes/failures.',inputSchema:{releases:C.array(C.object({version:C.string().optional().describe('Version to create (e.g., "1.2.5") or the literal token "next" for auto-increment. Mutually exclusive with "name".'),name:C.string().optional().describe('Free-form kebab-case release name (e.g., "checkout-redesign"). Mutually exclusive with "version". Named releases never auto-bump.'),type:C.enum(["regular","hotfix"]).optional().default("regular").describe('Release type: "regular" (branches off dev) or "hotfix" (branches off main).'),description:C.string().optional().describe("Optional description for the Jira version.")}).refine(e=>e.version===void 0!=(e.name===void 0),{message:'Each release entry must have exactly one of "version" or "name" (they are mutually exclusive).'}).transform(e=>e.name!==void 0?{name:e.name,type:e.type,...e.description?{description:e.description}:{}}:{version:e.version,type:e.type,...e.description?{description:e.description}:{}})).min(1).describe('One or more releases to create. Each entry has exactly one of "version" or "name", plus its own type and optional description.'),confirm:C.boolean().optional().describe("Set true to execute; omit for a dry-run gate that echoes the resolved action.")},outputSchema:{createdBranches:C.array(C.string()).describe("List of created release branch names"),successCount:C.number().describe("Number of releases created successfully"),failureCount:C.number().describe("Number of releases that failed"),releases:C.array(C.object({version:C.string().describe("Version number"),type:C.enum(["regular","hotfix"]).describe("Release type"),branchName:C.string().describe("Release branch name"),prUrl:C.string().describe("GitHub PR URL"),jiraVersionUrl:C.string().describe("Jira version URL")})).describe("Detailed information for each created release with URLs"),failedReleases:C.array(C.object({version:C.string().describe("Version number that failed"),error:C.string().describe("Error message")})).describe("List of releases that failed with error messages")},handler:ya});import Yd from"@inquirer/input";import{z as Ie}from"zod";var ka=(e,r)=>`${e.baseUrl}/projects/${r.projectId}/versions/${r.id}/tab/release-report-all-issues`,Zd=(e,r)=>r.trim()!==""?`${e}
-
-${r}`:`${e} 
-`,Xd=async()=>{let e=await $(),r=e.map(n=>n.branch),t=new Map(e.map(n=>[n.branch,S(n.title)])),o=await I(),s=await $e(M({branches:r,descriptions:o,types:t}));return{branch:s,type:t.get(s)||"regular"}},Qd=async e=>{let t=(await $()).find(o=>o.branch===e);if(!t)throw new g(void 0,{operation:`edit description for ${e}`,remediation:`confirm an open PR exists for ${e} ('gh pr list')`});return S(t.title)},eu=async e=>{let r=e===""?"(no current description)":`current: "${e}"`,o=(await x(s=>Yd({message:`  New description ${r} (press Enter to keep current): `},s))).trim();return o===""?e:o},wa=async e=>{let{version:r,description:t,confirmedCommand:o}=e,s=await kr(),n;r?(n=fe(r),await Qd(n)):(m.setInteractive(),n=(await Xd()).branch);let i=N(n);if(!i)throw new g(void 0,{operation:`edit description for ${n}`,remediation:'pass a version (e.g. "1.2.5") or a release name (e.g. "checkout-redesign")'});let a=O(i);m.addOption("--version",a);let c=X(i),p=await Ft(c,s);if(!p)throw new g(void 0,{operation:`edit description for ${c}`,remediation:`create the Jira fix version "${c}" first or pick a different release`});let u=p.description??"",d;t!==void 0?(d=t,m.addOption("--description",d)):(m.setInteractive(),d=await eu(u));let f=v=>{let P={version:a,branch:n,jiraVersionUrl:ka(s,p),previousDescription:u,newDescription:d,changed:v};return{content:h(JSON.stringify(P,null,2)),structuredContent:P}};if(d===u)return l.info(`No change \u2014 description for ${c} is already: "${u}"`),m.print(),f(!1);await W(o,`Update description for ${c}?
-  from: "${u}"
-  to:   "${d}"
-`),m.addOption("--yes",!0),await Mt({versionId:p.id,description:d},s);let k=ka(s,p),b=Zd(k,d);return await Jt({branch:n,body:b}),l.info(`\u2705 Updated description for ${c}`),l.info(`\u{1F517}  Jira Version: ${k}`),l.info(`\u{1F517}  PR branch: ${n}
-`),m.print(),f(!0)},Cn=y({name:"release-desc-edit",description:"Edit a release's description in Jira and in the matching GitHub release PR body. Accepts a release version or a release name: targets the Jira fix version named `v<version>` (versioned) or `<name>` (named) and the open PR on branch `release/v<version>` or `release/<name>`. The PR body is rewritten canonically to `<jiraVersionUrl>\\n\\n<description>` \u2014 any prior manual edits to the body are overwritten. Both `version` and `description` are required for MCP calls (the picker/prompt are unreachable without a TTY). Empty `description` clears the description on both sides. Confirmation is auto-skipped for MCP, so the caller is responsible for gating.",inputSchema:{version:Ie.string().describe('Accepts a release version (e.g. "1.2.5") OR a release name (e.g. "checkout-redesign").'),description:Ie.string().describe("New description. Empty string clears the description.")},outputSchema:{version:Ie.string().describe("Release version"),branch:Ie.string().describe('Release branch name (e.g. "release/v1.2.5" or "release/checkout-redesign")'),jiraVersionUrl:Ie.string().describe("Jira fix version URL"),previousDescription:Ie.string().describe("The description before the update"),newDescription:Ie.string().describe("The description after the update"),changed:Ie.boolean().describe("Whether the description actually changed")},handler:wa});import{execFile as uu}from"node:child_process";import Pa from"node:path";import Ta from"node:process";import{z as F}from"zod";import ba from"node:fs/promises";import Ht from"node:path";var nt=async e=>{let{workspacePath:r,folderPaths:t}=e,o=Ht.dirname(r),s;try{s=await ba.readFile(r,"utf-8")}catch(u){throw new Error(`Cursor workspace file not found at ${r}: ${u.message}`)}let n;try{n=JSON.parse(s)}catch(u){throw new Error(`Failed to parse ${r} as JSON. Comments (JSONC) are not supported. ${u.message}`)}let i=n.folders??[],a=new Set(i.map(u=>Ht.resolve(o,u.path))),c=[],p=[];for(let u of t){let d=Ht.resolve(u);if(a.has(d)){p.push(u);continue}let f=Ht.relative(o,d);i.push({path:f}),a.add(d),c.push(u)}return n.folders=i,await ba.writeFile(r,`${JSON.stringify(n,null,2)}
-`,"utf-8"),{added:c,skipped:p}};import{$ as ru}from"zx";var st=async e=>{await ru`cursor ${e}`};import tu from"node:fs/promises";import Zt from"node:path";import Ra from"node:fs/promises";import Yt from"node:path";var it=async e=>{let{workspacePath:r,folderPaths:t}=e,o=Yt.dirname(r),s;try{s=await Ra.readFile(r,"utf-8")}catch(f){throw new Error(`Cursor workspace file not found at ${r}: ${f.message}`)}let n;try{n=JSON.parse(s)}catch(f){throw new Error(`Failed to parse ${r} as JSON. Comments (JSONC) are not supported. ${f.message}`)}let i=n.folders??[],a=new Set(t.map(f=>Yt.resolve(f))),c=new Set,p=i.filter(f=>{let k=Yt.resolve(o,f.path);return a.has(k)?(c.add(k),!1):!0});n.folders=p,await Ra.writeFile(r,`${JSON.stringify(n,null,2)}
-`,"utf-8");let u=[],d=[];for(let f of t){let k=Yt.resolve(f);c.has(k)?u.push(f):d.push(f)}return{removed:u,notFound:d}};var Sn=async e=>{let{workspacePath:r,worktreeDir:t,currentBranches:o}=e,s=Zt.dirname(r),n=Zt.resolve(`${t}/release`),i=await tu.readFile(r,"utf-8"),c=JSON.parse(i).folders??[],p=new Set(o.map(b=>Zt.resolve(`${t}/${b}`))),u=[];for(let b of c){let v=Zt.resolve(s,b.path);(v===n||v.startsWith(`${n}/`))&&!p.has(v)&&u.push(v)}let d=[];u.length>0&&(d=(await it({workspacePath:r,folderPaths:u})).removed);let f=o.map(b=>`${t}/${b}`),{added:k}=f.length>0?await nt({workspacePath:r,folderPaths:f}):{added:[]};return{added:k,removed:d}};import xa from"node:path";var qe=(e,r)=>xa.isAbsolute(e)?e:xa.resolve(r,e);var $n=async e=>{let{projectRoot:r,worktreeDir:t,currentBranches:o,cursorConfig:s}=e;if(!s.workspaceConfigPath)return l.warn("\u26A0\uFE0F Skipping Cursor: workspaceConfigPath is not set."),{ran:!1,added:0,removed:0};let n=qe(s.workspaceConfigPath,r);try{let{added:i,removed:a}=await Sn({workspacePath:n,worktreeDir:t,currentBranches:o});return o.length>0&&await st(n),{ran:!0,added:i.length,removed:a.length}}catch(i){return l.warn({error:i},`\u26A0\uFE0F Failed to reconcile/open Cursor workspace at ${n}`),{ran:!1,added:0,removed:0}}};import{$ as ou}from"zx";var An=async e=>{let{folderPaths:r}=e;for(let t of r)await ou`zed --add ${t}`;return{added:r}};import{$ as nu}from"zx";var In=async e=>{let{worktreePaths:r}=e;if(r.length===0)return{ran:!1,added:0,removed:0};try{return await nu`zed ${r}`,{ran:!0,added:r.length,removed:0}}catch(t){return l.warn({error:t},"\u26A0\uFE0F Failed to open Zed workspace"),{ran:!1,added:0,removed:0}}};import{$ as su}from"zx";var _n=async e=>{let{projectRoot:r,worktreeDir:t,remainingBranches:o}=e,s=[r,...o.map(n=>`${t}/${n}`)];try{return await su`zed --reuse ${s}`,l.info(`\u21BB Refreshed Zed workspace to root + ${o.length} release worktree(s) (other folders in the focused window are not preserved)`),{ran:!0}}catch(n){return l.warn({error:n},"\u26A0\uFE0F Failed to refresh Zed workspace"),{ran:!1}}};var he=e=>{throw new Error(`Unexpected value: ${JSON.stringify(e)}`)};var On=async e=>{let{projectRoot:r,worktreeDir:t,branches:o}=e,s=await E(),n=ne(s),i=o.map(c=>`${t}/${c}`),a=[];for(let c of n)switch(c.provider){case"cursor":{if(!c.config.workspaceConfigPath){l.warn("\u26A0\uFE0F Skipping Cursor: ide.config.workspaceConfigPath is not set in infra-kit config"),a.push({ran:!1,provider:"cursor",added:0,skipped:0});break}let p=qe(c.config.workspaceConfigPath,r),{added:u,skipped:d}=await nt({workspacePath:p,folderPaths:i}),f=d.length>0?` (${d.length} already present)`:"";l.info(`\u2705 Added ${u.length} folder(s) to ${p}${f}`),await st(p),a.push({ran:!0,provider:"cursor",added:u.length,skipped:d.length});break}case"zed":{let{added:p}=await An({folderPaths:i});l.info(`\u2705 Added ${p.length} folder(s) to Zed workspace`),a.push({ran:!0,provider:"zed",added:p.length,skipped:0});break}default:he(c)}return a};var Nn=async e=>{let r=await E(),t=ne(r),{projectRoot:o,worktreeDir:s,worktreePaths:n,currentBranches:i}=e,a=[];for(let c of t)switch(c.provider){case"cursor":{let p=await $n({projectRoot:o,worktreeDir:s,currentBranches:i,cursorConfig:c.config});a.push({...p,provider:"cursor"});break}case"zed":{let p=await In({worktreePaths:n});a.push({...p,provider:"zed"});break}default:he(c)}return a};var Dn=e=>{switch(e){case"cursor":return"Cursor";case"zed":return"Zed";case void 0:return"IDE";default:return he(e)}};var at=async e=>{let{projectRoot:r,worktreeDir:t,currentWorktrees:o,removedWorktrees:s,allowEditorRelaunch:n}=e;if(s.length===0)return[];let i=await E(),a=ne(i),c=s.map(d=>`${t}/${d}`),p=o.filter(d=>!s.includes(d)),u=[];for(let d of a)switch(d.provider){case"cursor":{u.push(await iu({ide:d,projectRoot:r,folderPaths:c}));break}case"zed":{u.push(await au({projectRoot:r,worktreeDir:t,remainingBranches:p,allowEditorRelaunch:n}));break}default:he(d)}return u},iu=async e=>{let{ide:r,projectRoot:t,folderPaths:o}=e;if(!r.config.workspaceConfigPath)return{provider:"cursor",supported:!0,removed:[]};let s=qe(r.config.workspaceConfigPath,t);try{let{removed:n}=await it({workspacePath:s,folderPaths:o});return n.length>0&&l.info(`\u2705 Removed ${n.length} folder(s) from ${s}`),{provider:"cursor",supported:!0,removed:n}}catch(n){return l.warn({error:n},`\u26A0\uFE0F Failed to update Cursor workspace at ${s}`),{provider:"cursor",supported:!0,removed:[]}}},au=async e=>{let{projectRoot:r,worktreeDir:t,remainingBranches:o,allowEditorRelaunch:s}=e;return s?(await _n({projectRoot:r,worktreeDir:t,remainingBranches:o}),{provider:"zed",supported:!0,removed:[]}):(l.info("\u2139\uFE0F Zed folder removal skipped (no interactive session); close removed worktree folders in Zed manually if needed."),{provider:"zed",supported:!0,removed:[]})};var Xt=["workspace","none"];import jn from"node:fs/promises";import ct from"node:path";var Ea=async e=>{try{return await jn.access(e),!0}catch{return!1}},cu=async e=>{if(e&&e.length>0)return e;try{let r=await Ye();return[ct.dirname(r)]}catch(r){throw new g(r,{operation:"discover infra-kit projects",remediation:"run inside an infra-kit repo, or pass --root <dir>"})}},lu=e=>e.isDirectory()||e.isSymbolicLink(),pu=async(e,r)=>{if(!lu(r))return null;let t=ct.join(e,r.name),[o,s]=await Promise.all([Ea(ct.join(t,".git")),Ea(ct.join(t,"infra-kit.json"))]);if(!o||!s)return null;try{let n=await jn.realpath(t);return{name:ct.basename(t),repoRoot:n}}catch{return null}},du=async e=>{try{return await jn.readdir(e,{withFileTypes:!0})}catch{return[]}},Fn=async(e={})=>{let r=await cu(e.roots),t=new Map;for(let o of r){let s=await du(o);for(let n of s){let i=await pu(o,n);i&&!t.has(i.repoRoot)&&t.set(i.repoRoot,i)}}return[...t.values()].sort((o,s)=>o.name.localeCompare(s.name))};var mu=async(e={})=>e.all?bu(e):Ca(e),Ca=async(e={})=>{let{releaseOnly:r=!1,force:t=!1,dryRun:o=!1}=e;await E();try{let s=await R(),n=`${s}${se}`,i=Pa.basename(await Ye(s)),a=await ss(s),c=fu(a,r),p=c.map(v=>v.path),u=c.map(v=>v.branch).filter(v=>Oe(v)),d=c.map(v=>({title:Pt({branch:v.branch??Pa.basename(v.path)}),cwd:v.path}));if(o){let v=await yu({repo:i,releaseOnly:r,force:t,worktreePaths:p,targets:d});return ku(v,n),m.print(),{content:h(JSON.stringify(v,null,2)),structuredContent:v}}let[f,k]=await Promise.all([Nn({projectRoot:s,worktreeDir:n,worktreePaths:p,currentBranches:u}),gu({targets:d,force:t,repoName:i})]),b={repo:i,dryRun:!1,releaseOnly:r,worktreePaths:p,ideProviders:f.filter(v=>v.ran).map(v=>v.provider),cmuxOpened:k.opened,cmuxSkipped:k.skipped,cmuxClosed:k.closed};return wu(b,{ideRan:f.some(v=>v.ran)}),m.print(),{content:h(JSON.stringify(b,null,2)),structuredContent:b}}catch(s){throw s instanceof g?s:(l.error({error:s},"\u274C Error reopening worktree windows"),new g(s,{operation:"reopen worktrees",remediation:"run `infra-kit doctor` to check this project's setup"}))}},fu=(e,r)=>e.filter(t=>t.bare||t.prunable?!1:r?Oe(t.branch):!0),gu=async e=>{let{targets:r,force:t,repoName:o}=e,s=await xt(o),n=t?await hu({targets:r}):[],{opened:i,skipped:a}=await vu({targets:r,force:t,repoName:o,groupRef:s});return{opened:i,skipped:a,closed:n}},hu=async e=>{let{targets:r}=e;if(r.length===0)return[];let t=await or(),o=[];for(let s of r)t.has(await Ar(s.cwd))&&(await nr(s.cwd),o.push(s.title));return o},Sa=async(e,r,t)=>{let o=[],s=[];for(let n of e)!t&&r.has(await Ar(n.cwd))?s.push(n.title):o.push(n);return{toOpen:o,skipped:s}},vu=async e=>{let{targets:r,force:t,repoName:o,groupRef:s=null}=e,n=t?new Set:new Set((await or()).keys()),{toOpen:i,skipped:a}=await Sa(r,n,t),c=[],p=s,u=!1;for(let d of i)try{if(p)await sr({cwd:d.cwd,title:d.title,group:p});else{let f=await sr({cwd:d.cwd,title:d.title});u||(p=await Et(o,[f]),u=!0)}c.push(d.title)}catch(f){l.warn({error:f,title:d.title},`\u26A0\uFE0F Failed to reopen cmux workspace ${d.title}`)}return{opened:c,skipped:a}},yu=async e=>{let{repo:r,releaseOnly:t,force:o,worktreePaths:s,targets:n}=e,i=o?new Set:new Set((await or()).keys()),{toOpen:a,skipped:c}=await Sa(n,i,o);return{repo:r,dryRun:!0,releaseOnly:t,worktreePaths:s,ideProviders:[],cmuxOpened:a.map(p=>p.title),cmuxSkipped:c,cmuxClosed:[]}},ku=(e,r)=>{l.info(`\u{1F50E} reopen --dry-run for ${e.repo} (worktrees dir: ${r})`),l.info(`\u{1F4C2} Would open ${e.worktreePaths.length} folder(s) in the editor:`);for(let t of e.worktreePaths)l.info(`  ${t}`);if(e.cmuxOpened.length>0){l.info(`\u{1FA9F} Would open ${e.cmuxOpened.length} cmux workspace(s):`);for(let t of e.cmuxOpened)l.info(`  ${t}`)}if(e.cmuxSkipped.length>0){l.info(`\u21A9\uFE0F Already open (would skip) ${e.cmuxSkipped.length} cmux workspace(s):`);for(let t of e.cmuxSkipped)l.info(`  ${t}`)}},wu=(e,r)=>{if(e.cmuxClosed.length>0&&l.info(`\u{1F9F9} Closed ${e.cmuxClosed.length} cmux workspace(s)`),r.ideRan){let t=e.ideProviders.map(o=>Dn(o)).join(", ");l.info(`\u2705 Opened editor workspace(s): ${t}`)}if(e.cmuxOpened.length>0){l.info("\u2705 Opened cmux workspaces:");for(let t of e.cmuxOpened)l.info(t)}e.cmuxSkipped.length>0&&l.info(`\u21A9\uFE0F ${e.cmuxSkipped.length} cmux workspace(s) already open \u2014 skipped`),!r.ideRan&&e.cmuxOpened.length===0&&e.cmuxClosed.length===0&&l.info("\u2139\uFE0F Nothing to reopen")},bu=async e=>{let{project:r=[],root:t=[],releaseOnly:o=!1,force:s=!1,dryRun:n=!1}=e,i=await Fn({roots:t}),a=Ru(i,r),c=xu({releaseOnly:o,force:s,dryRun:n}),p=[];for(let d of a)p.push(await Eu(d,c));let u={all:!0,dryRun:n,projects:a,results:p};return Tu(u),m.print(),{content:h(JSON.stringify(u,null,2)),structuredContent:u}},Ru=(e,r)=>{if(r.length===0)return e;let t=new Set(e.map(o=>o.name));for(let o of r)t.has(o)||l.warn(`\u26A0\uFE0F --project ${o} matched no discovered project \u2014 skipping`);return e.filter(o=>r.includes(o.name))},xu=e=>{let r=[];return e.dryRun&&r.push("--dry-run"),e.releaseOnly&&r.push("--release-only"),e.force&&r.push("--force"),r},Eu=async(e,r)=>{try{let t=await Pu(e.repoRoot,r);return{...JSON.parse(t),repo:e.name,ok:!0}}catch(t){let o=t instanceof Error?t.message:String(t);return l.warn({error:t},`\u26A0\uFE0F reopen failed for ${e.name} \u2014 continuing`),{repo:e.name,ok:!1,error:o}}},Pu=(e,r)=>{let t=Ta.argv[1];return t===void 0?Promise.reject(new Error("cannot resolve the infra-kit CLI entry \u2014 process.argv[1] is undefined")):new Promise((o,s)=>{let n=[t,"reopen","--json",...r];uu(Ta.execPath,n,{cwd:e,maxBuffer:16*1024*1024},(i,a)=>{if(i){s(i);return}o(a)})})},Tu=e=>{let r=e.results.filter(n=>n.ok).length,t=e.results.length-r;l.info(`\u{1F310} reopen --all${e.dryRun?" --dry-run":""}: ${e.projects.length} project(s)`);let o=0,s=0;for(let n of e.results)n.ok?(o+=n.cmuxOpened.length,s+=n.cmuxSkipped.length,l.info(`  \u2705 ${n.repo}: ${n.worktreePaths.length} folder(s), ${n.cmuxOpened.length} cmux ${e.dryRun?"planned":"opened"}, ${n.cmuxSkipped.length} skipped`)):l.info(`  \u274C ${n.repo}: ${n.error}`);l.info(`\u{1F4CA} ${r} ok, ${t} failed \u2014 ${o} cmux ${e.dryRun?"planned":"opened"}, ${s} already open`)},Mn=y({name:"reopen",description:"Reopen editor + cmux windows for every active worktree in the current project \u2014 the main checkout plus every linked worktree (release, feature, detached). Additive and idempotent by default: cmux workspaces already open are skipped, so running twice does not double the windows. Zed opens the exact folder set; Cursor reconciles its release-branch-shaped workspace. Set releaseOnly to restrict to release worktrees (the legacy reload scope). Set force to close each cmux workspace first, then reopen (disruptive). Set dryRun to return the plan without spawning anything. Non-destructive to git \u2014 only cmux/editor view state is touched.",inputSchema:{releaseOnly:F.boolean().optional().describe("Restrict to release worktrees (reproduces the legacy worktrees-reload scope)"),force:F.boolean().optional().describe("Close each cmux workspace first, then reopen (disruptive)"),dryRun:F.boolean().optional().describe("Return the plan (paths + cmux titles) without spawning anything")},outputSchema:{repo:F.string().describe("Repository name the reopen ran for"),dryRun:F.boolean().describe("Whether this was a dry run (nothing was spawned)"),releaseOnly:F.boolean().describe("Whether the set was restricted to release worktrees"),worktreePaths:F.array(F.string()).describe("Absolute folder set handed to the editor (root-first)"),ideProviders:F.array(F.string()).describe("Configured IDE providers that opened (cursor | zed); empty in dry run"),cmuxOpened:F.array(F.string()).describe("Titles of cmux workspaces opened this run"),cmuxSkipped:F.array(F.string()).describe("Titles of cmux workspaces skipped because already open (additive mode)"),cmuxClosed:F.array(F.string()).describe("Titles of cmux workspaces closed first (force mode only)")},handler:Ca});import{existsSync as _a}from"node:fs";import Oa from"node:path";import ju from"node:process";import{z as ke}from"zod";import{createHash as Cu}from"node:crypto";import{readFileSync as Su}from"node:fs";var Ln=e=>Cu("sha256").update(Su(e)).digest("hex");import{readFileSync as Nu,writeFileSync as NE}from"node:fs";import Ia from"node:path";import{z as ce}from"zod";import{readdirSync as _u}from"node:fs";import Wn from"node:path";var ve="vendor",$u=new Set(["node_modules","dist",".turbo",".omc","__screenshots__",".vitest-attachments",".output",".source",".nitro",".tanstack"]),Au=new Set([".sync-manifest.json",".eslintcache","log.txt"]),Iu=[".tsbuildinfo"],$a=e=>$u.has(e),Aa=e=>Au.has(e)?!0:Iu.some(r=>e.endsWith(r));var Ou=e=>e.split(Wn.sep).join("/"),Vn=e=>{let r=[],t=o=>{for(let s of _u(o,{withFileTypes:!0})){let n=Wn.join(o,s.name);if(s.isDirectory()){if($a(s.name))continue;t(n);continue}Aa(s.name)||r.push(Ou(Wn.relative(e,n)))}};return t(e),r.sort()};var ye=".sync-manifest.json",Jn=1,Du=ce.object({schemaVersion:ce.number().optional(),source:ce.string(),commit:ce.string(),syncedAt:ce.string(),fileCount:ce.number(),files:ce.record(ce.string(),ce.string())}),Bn=e=>(e.schemaVersion??Jn)>Jn;var Kn=e=>{let r=Ia.join(e,ye),t;try{t=Nu(r,"utf8")}catch{throw new Error(`Missing ${ye} at ${r}`)}let o=Du.safeParse(JSON.parse(t));if(!o.success)throw new Error(`Invalid ${ye} at ${r}: ${ce.prettifyError(o.error)}`);return o.data};var Gn=(e,r)=>{let t=r.files,o=Vn(e),s=[],n=[];for(let c of o){if(!(c in t)){n.push(c);continue}Ln(Ia.join(e,c))!==t[c]&&s.push(c)}let i=new Set(o),a=Object.keys(t).filter(c=>!i.has(c));return{modified:s,added:n,removed:a}};var Un=30,zn=(e,r)=>{if(r.length!==0){l.info(`
-${e} (${r.length}):`);for(let t of r.slice(0,Un))l.info(`  ${t}`);r.length>Un&&l.info(`  \u2026and ${r.length-Un} more`)}},Na=async(e={})=>{let r=e.cwd??await R(),t=Oa.join(r,ve),o={modified:[],added:[],removed:[],fileCount:0};if(!_a(t)){l.info(`\u2139\uFE0F  No ${ve}/ folder found \u2014 nothing to check.`);let u={status:"skipped",ok:!0,...o};return{content:h(JSON.stringify(u,null,2)),structuredContent:u}}if(!_a(Oa.join(t,ye))){l.error(`\u274C Missing ${ve}/${ye}. Re-run the vendor sync to generate it.`);let u={status:"missing-manifest",ok:!1,...o};return{content:h(JSON.stringify(u,null,2)),structuredContent:u}}let s=Kn(t);if(Bn(s)){l.error(`\u274C ${ve}/${ye} has a newer schemaVersion (${String(s.schemaVersion)}) than this CLI supports. Upgrade infra-kit.`);let u={status:"unknown-schema",ok:!1,...o};return{content:h(JSON.stringify(u,null,2)),structuredContent:u}}let{modified:n,added:i,removed:a}=Gn(t,s),c=n.length>0||i.length>0||a.length>0;c?(l.error(`\u274C ${ve}/ has drifted from ${ve}/${ye}.`),l.error("   These files are mirrored from the source repo \u2014 edit them upstream, not here."),zn("Modified",n),zn("Added (not in manifest)",i),zn("Removed (in manifest, now missing)",a)):l.info(`\u2705 ${ve}/ matches manifest (${s.fileCount} files).`);let p={status:c?"drift":"clean",ok:!c,fileCount:s.fileCount,modified:n,added:i,removed:a};return{content:h(JSON.stringify(p,null,2)),structuredContent:p}},Fu={status:ke.enum(["clean","drift","skipped","missing-manifest","unknown-schema"]),ok:ke.boolean().describe("Whether the vendor tree matches its manifest (false \u2192 CI should fail)"),fileCount:ke.number(),modified:ke.array(ke.string()),added:ke.array(ke.string()),removed:ke.array(ke.string())},qn=y({name:"vendor-check",description:"Verify that files under vendor/ match the checksums in vendor/.sync-manifest.json. Self-contained (no source repo or config needed). Returns ok=false on drift, missing manifest, or an unknown future schemaVersion; ok=true when clean or when no vendor/ folder exists.",inputSchema:{},outputSchema:Fu,handler:()=>Na({cwd:ju.cwd()})});import{z as Mu}from"zod";var Da=async()=>{let e=Rt.version;l.info(e);let r={version:e};return{content:h(JSON.stringify(r,null,2)),structuredContent:r}},Hn=y({name:"version",description:"Print the installed infra-kit CLI version",inputSchema:{},outputSchema:{version:Mu.string().describe("Installed infra-kit CLI version (from package.json)")},handler:Da});import ja from"@inquirer/confirm";import Lu from"node:path";import{z as we}from"zod";import{$ as lt}from"zx";var Wu="feature",Vu="release",Ma=async e=>{let{confirmedCommand:r,all:t,versions:o,githubDesktop:s,cmux:n}=e,i=e.ide??e.cursor;await K({operation:"create worktrees"});try{let a=await oe("release"),c=await R(),p=`${c}${se}`;await Fa(`${p}/${Vu}`),await Fa(`${p}/${Wu}`);let u=[];if(o)u=o.split(",").map(_=>be(pe(_.trim())));else{let _=await $(),A=_.map(le=>le.branch);if(A.length===0)return l.info("\u2139\uFE0F No open release branches found"),m.print(),{content:h(JSON.stringify({createdWorktrees:[],count:0},null,2)),structuredContent:{createdWorktrees:[],count:0}};if(t)u=A;else{m.setInteractive();let le=new Map(_.map(z=>[z.branch,S(z.title)])),Cr=await I();u=await wr(M({branches:A,descriptions:Cr,types:le}),{required:!0})}}t?m.addOption("--all",!0):m.addOption("--versions",Ge(u)),await W(r,"Are you sure you want to proceed with these worktree changes?"),r||m.addOption("--yes",!0);let d=await E(),f=i??(ne(d).length>0?"workspace":"none");m.addOption("--ide",f);let k=s??d.worktrees?.openInGithubDesktop??await x(_=>ja({message:"Open created worktrees in GitHub Desktop?"},_));typeof s>"u"&&d.worktrees?.openInGithubDesktop===void 0&&m.setInteractive(),k?m.addOption("--github-desktop",!0):m.addOption("--no-github-desktop",!0);let b=n??d.worktrees?.openInCmux??await x(_=>ja({message:"Open created worktrees in cmux?"},_));typeof n>"u"&&d.worktrees?.openInCmux===void 0&&m.setInteractive(),b?m.addOption("--cmux",!0):m.addOption("--no-cmux",!0);let{branchesToCreate:v}=Ju({selectedReleaseBranches:u,currentWorktrees:a}),P=await Bu(v,p);if(Ku(P),f==="workspace"&&await On({projectRoot:c,worktreeDir:p,branches:P}),k)for(let _ of P)await lt`github ${p}/${_}`,await lt`sleep 5`;if(b){let _=Lu.basename(await Ye(c)),A=await or(),le=await xt(_),Cr=!1;for(let z of P){let He=`${p}/${z}`;if(A.has(await Ar(He)))continue;let _e=Pt({branch:z});try{if(le)await sr({cwd:He,title:_e,group:le});else{let te=await sr({cwd:He,title:_e});Cr||(le=await Et(_,[te]),Cr=!0)}}catch(te){l.warn({error:te,branch:z},`\u26A0\uFE0F Failed to open cmux workspace for ${z}`)}}}m.print();let B={createdWorktrees:P,count:P.length};return{content:h(JSON.stringify(B,null,2)),structuredContent:B}}catch(a){throw ir(a)?a:(l.error({error:a},"\u274C Error managing worktrees"),new g(a,{operation:"create worktrees",remediation:"verify branches don't already exist as worktrees: 'git worktree list'"}))}},Fa=async e=>{await lt`mkdir -p ${e}`},Ju=e=>{let{selectedReleaseBranches:r,currentWorktrees:t}=e,o=t.filter(n=>Oe(n));return{branchesToCreate:r.filter(n=>!o.includes(n))}},Bu=async(e,r)=>{let t=await Promise.allSettled(e.map(async s=>{let n=`${r}/${s}`;return await lt`git worktree add ${n} ${s}`,await lt({cwd:n})`pnpm install`,s})),o=[];for(let[s,n]of t.entries())if(n.status==="fulfilled")o.push(n.value);else{let i=e[s],a=new g(n.reason,{operation:`git worktree add for ${i}`,remediation:"check the branch name and that the parent dir is writable"});l.error({error:n.reason,msg:a.message})}return o},Ku=e=>{if(e.length>0){l.info("\u2705 Created git worktrees:");for(let r of e)l.info(r);l.info("")}else l.info("\u2139\uFE0F No new git worktrees to create")},Yn=y({name:"worktrees-add",description:'Create local git worktrees for release branches under the worktrees directory and run "pnpm install" in each. Mutates the local filesystem. When invoked via MCP, pass either "versions" (comma-separated) or all=true \u2014 the branch picker and "open in Cursor / GitHub Desktop / cmux" follow-up prompts are unreachable without a TTY, and the CLI confirmation is auto-skipped for MCP calls.',inputSchema:{all:we.boolean().optional().describe('Add worktrees for every open release branch. Either "all" or "versions" must be provided for MCP calls (the interactive picker is unavailable without a TTY). Ignored if "versions" is provided.'),versions:we.string().optional().describe('Comma-separated release versions or names to target (e.g. "1.2.5, 1.2.6" or "checkout-redesign, 1.2.5"). Either "versions" or all=true must be provided for MCP calls. Overrides "all" when set.'),ide:we.enum(Xt).optional().describe('Editor open mode for created worktrees, applied to all configured editors (Cursor and/or Zed, per the "ide" config). "workspace" (the only attach style) adds each worktree to every configured editor workspace and opens it. "none" skips the editor. Resolution order: this flag \u2192 "workspace" when at least one "ide" is configured \u2192 "none" otherwise.'),cursor:we.enum(Xt).optional().describe('Deprecated alias for "ide". Prefer "ide". Ignored when "ide" is provided.'),githubDesktop:we.boolean().optional().describe('Open each created worktree in GitHub Desktop. Resolution order: this flag \u2192 "worktrees.openInGithubDesktop" from infra-kit config \u2192 interactive prompt (CLI) / false (MCP, no TTY).'),cmux:we.boolean().optional().describe('Open each created worktree in a new cmux workspace, all rooted at the worktree directory. Pane layout follows "worktrees.cmux.layout" (default "two-columns": left | right; or "three-pane": left split top/bottom + full-height right). Resolution order: this flag \u2192 "worktrees.openInCmux" from infra-kit config \u2192 interactive prompt (CLI) / false (MCP, no TTY).')},outputSchema:{createdWorktrees:we.array(we.string()).describe("List of created git worktree branches"),count:we.number().describe("Number of git worktrees created")},handler:Ma});import{z as Tr}from"zod";var La=async()=>{await E();let e=await oe("release");if(e.length===0)return l.info("\u2139\uFE0F No active worktrees found"),{content:h(JSON.stringify({worktrees:[],count:0},null,2)),structuredContent:{worktrees:[],count:0}};let[r,t]=await Promise.all([$(),I()]),o=new Map(r.map(c=>[c.branch,S(c.title)])),s=e.flatMap(c=>{let p=N(c);if(!p)return[];let u=O(p),d=o.get(c)||"regular",f=t.get(X(p))||null;return[{version:u,type:d,description:f}]}),n=Math.max(...s.map(c=>c.version.length)),i=s.map(c=>{let p=Yr(c.version,c.type,n);return c.description?`${p}  ${c.description}`:p});l.info(`\u{1F33F} Active worktrees:
-
-${i.join(`
-`)}`);let a={worktrees:s,count:s.length};return{content:h(JSON.stringify(a,null,2)),structuredContent:a}},Zn=y({name:"worktrees-list",description:"List existing release-branch worktrees with version, release type (regular / hotfix), and Jira fix-version description. Read-only.",inputSchema:{},outputSchema:{worktrees:Tr.array(Tr.object({version:Tr.string().describe("Release version"),type:Tr.enum(["regular","hotfix"]).describe("Release type"),description:Tr.string().nullable().describe("Jira version description")})).describe("List of all worktrees with details"),count:Tr.number().describe("Number of worktrees")},handler:La});import{z as pt}from"zod";var Gu=e=>{if(ut()){if(e.all)throw new g(void 0,{operation:"remove worktrees",remediation:'name targets explicitly via "versions"; bulk all=true removal is disabled over MCP',stderrExcerpt:"all=true is not permitted for worktrees-remove over MCP"});if(!e.versions)throw new g(void 0,{operation:"remove worktrees",remediation:'pass "versions" (comma-separated release versions/names); the interactive picker needs a TTY',stderrExcerpt:'worktrees-remove over MCP requires "versions"'})}},Uu=(e,r)=>{let t=e.filter(o=>!r.includes(o));if(t.length>0)throw new g(void 0,{operation:"remove worktrees",remediation:`no active worktree for: ${t.join(", ")}. Run 'infra-kit worktrees list' to see current worktrees`,stderrExcerpt:`unmatched worktree target(s): ${t.join(", ")}`})},Wa=async e=>{let{confirmedCommand:r,all:t,versions:o}=e;await K({operation:"remove worktrees"}),await E(),Gu({all:t,versions:o});try{let s=await oe("release");if(s.length===0)return l.info("\u2139\uFE0F No active worktrees to remove"),m.print(),{content:h(JSON.stringify({removedWorktrees:[],count:0},null,2)),structuredContent:{removedWorktrees:[],count:0}};let n=await R(),i=`${n}${se}`,a=[];if(t)a=s;else if(o)a=o.split(",").map(d=>be(pe(d.trim())));else{m.setInteractive();let[d,f]=await Promise.all([I(),$()]),k=new Map(f.map(b=>[b.branch,S(b.title)]));a=await wr(M({branches:s,descriptions:d,types:k}),{required:!0})}Uu(a,s);let c=a.length===s.length;c?m.addOption("--all",!0):m.addOption("--versions",Ge(a)),await W(r,"Are you sure you want to proceed with these worktree changes?"),r||m.addOption("--yes",!0);let p=await et({branches:a,worktreeDir:i,pruneFolder:c});await at({projectRoot:n,worktreeDir:i,currentWorktrees:s,removedWorktrees:p,allowEditorRelaunch:!r}),zu(p),m.print();let u={removedWorktrees:p,count:p.length};return{content:h(JSON.stringify(u,null,2)),structuredContent:u}}catch(s){throw ir(s)||s instanceof g?s:(l.error({error:s},"\u274C Error managing worktrees"),new g(s,{operation:"remove worktrees",remediation:"check 'git worktree list' for the path; uncommitted changes block removal"}))}},zu=e=>{if(e.length>0){l.info("\u274C Removed worktrees:");for(let r of e)l.info(r);l.info("")}else l.info("\u2139\uFE0F No unused worktrees to remove")},Xn=y({name:"worktrees-remove",description:'Remove local git worktrees for the named release branches. Over MCP you MUST pass "versions" (comma-separated); bulk all=true removal is disabled here (it is a one-shot, unconfirmed wipe of every worktree) \u2014 the branch picker and confirmation are unavailable without a TTY. Every named version must be an active worktree, or the call errors without removing anything. What survives: the release branches/commits themselves are never deleted, and the worktrees directory plus its release/feature subfolders are left in place (recreate a worktree with worktrees-add). What is lost: git refuses to remove a worktree with modified tracked files or untracked files, BUT it DOES delete the worktree directory including gitignored contents \u2014 a hydrated .env of Doppler secrets (re-fetch with env-load) and build output such as node_modules/dist (needs reinstall/rebuild). When every worktree is removed it also runs "git worktree prune".',requiresHumanConfirm:!0,inputSchema:{versions:pt.string().describe('Comma-separated release versions or names to remove (e.g. "1.2.5, 1.2.6" or "checkout-redesign, 1.2.5"). Required: each must name an active worktree, or the call errors before removing anything.'),confirm:pt.boolean().optional().describe("Set true to execute; omit for a dry-run gate that echoes the resolved action.")},outputSchema:{removedWorktrees:pt.array(pt.string()).describe("List of removed git worktree branches"),count:pt.number().describe("Number of git worktrees removed")},handler:Wa});import{z as Qn}from"zod";import{$ as qu}from"zx";var Va=async e=>{let{confirmedCommand:r}=e;await K({operation:"sync worktrees"}),await E();try{let t=await oe("release"),o=await R(),s=`${o}${se}`,n=await Vt();await W(r,"Are you sure you want to proceed with these worktree changes?"),r||m.addOption("--yes",!0);let{branchesToRemove:i}=Hu({releasePRsList:n,currentWorktrees:t}),a=await Yu({branches:i,worktreeDir:s});await at({projectRoot:o,worktreeDir:s,currentWorktrees:t,removedWorktrees:a,allowEditorRelaunch:!1}),Zu(a),m.print();let c={removedWorktrees:a,count:a.length};return{content:h(JSON.stringify(c,null,2)),structuredContent:c}}catch(t){throw ir(t)?t:(l.error({error:t},"\u274C Error managing worktrees"),new g(t,{operation:"sync worktrees with remote",remediation:"ensure 'gh auth status' is ok and you can reach origin"}))}},Hu=e=>{let{releasePRsList:r,currentWorktrees:t}=e;return{branchesToRemove:t.filter(n=>Oe(n)).filter(n=>!r.includes(n))}},Yu=async e=>{let{branches:r,worktreeDir:t}=e,o=[];for(let s of r)try{let n=`${t}/${s}`;await nr(n),await qu`git worktree remove ${n}`,o.push(s)}catch(n){let i=new g(n,{operation:`remove stale worktree for ${s}`,remediation:"inspect the worktree dir manually; rerun with the branch checked out elsewhere"});l.error({error:n,branch:s,msg:i.message})}return o},Zu=e=>{if(e.length>0){l.info("\u274C Removed worktrees:");for(let r of e)l.info(r);l.info("")}else l.info("\u2139\uFE0F No unused worktrees to remove")},es=y({name:"worktrees-sync",description:"Remove worktrees whose release PR is no longer open (stale cleanup). Only removes \u2014 never creates; use worktrees-add to create worktrees for new releases. The CLI confirmation is auto-skipped for MCP calls, so the caller is responsible for gating.",inputSchema:{},outputSchema:{removedWorktrees:Qn.array(Qn.string()).describe("List of removed worktree branches"),count:Qn.number().describe("Number of worktrees removed during sync")},handler:Va});var Xu=[{key:"develop",label:"Develop"},{key:"release",label:"Release Management"},{key:"worktrees",label:"Worktrees"},{key:"environment",label:"Environment"},{key:"configuration",label:"Configuration"},{key:"vendor",label:"Vendor"},{key:"setup",label:"Setup & Diagnostics"}],Qt=[{cliName:"dev",menuGroup:"develop",mcpTool:null,mcpExposed:!1,mutating:!0,groupPath:["dev"],longRunning:!0},{cliName:"dev-status",menuGroup:"develop",mcpTool:ho,mcpExposed:!0,mutating:!1,groupPath:["dev-status"]},{cliName:"merge-dev",menuGroup:"release",mcpTool:Yo,mcpExposed:!0,mutating:!0,groupPath:["release","merge-dev"]},{cliName:"release-list",menuGroup:"release",mcpTool:tn,mcpExposed:!0,mutating:!1,groupPath:["release","list"]},{cliName:"release-create",menuGroup:"release",mcpTool:Tn,mcpExposed:!0,mutating:!0,groupPath:["release","create"]},{cliName:"release-desc-edit",menuGroup:"release",mcpTool:Cn,mcpExposed:!0,mutating:!0,groupPath:["release","desc-edit"]},{cliName:"release-deploy-all",menuGroup:"release",mcpTool:Qo,mcpExposed:!0,mutating:!0,groupPath:["release","deploy-all"]},{cliName:"release-deploy-selected",menuGroup:"release",mcpTool:rn,mcpExposed:!0,mutating:!0,groupPath:["release","deploy-selected"]},{cliName:"release-deliver",menuGroup:"release",mcpTool:Zo,mcpExposed:!1,mutating:!0,groupPath:["release","deliver"]},{cliName:"local-deploy-all",menuGroup:"release",mcpTool:un,mcpExposed:!0,mutating:!0,groupPath:["local","deploy-all"]},{cliName:"local-deploy-selected",menuGroup:"release",mcpTool:mn,mcpExposed:!0,mutating:!0,groupPath:["local","deploy-selected"]},{cliName:"worktrees-add",menuGroup:"worktrees",mcpTool:Yn,mcpExposed:!0,mutating:!0,groupPath:["worktrees","add"]},{cliName:"worktrees-list",menuGroup:"worktrees",mcpTool:Zn,mcpExposed:!0,mutating:!1,groupPath:["worktrees","list"]},{cliName:"reopen",menuGroup:"worktrees",mcpTool:Mn,mcpExposed:!0,mutating:!1,groupPath:["reopen"]},{cliName:"worktrees-remove",menuGroup:"worktrees",mcpTool:Xn,mcpExposed:!0,mutating:!0,groupPath:["worktrees","remove"]},{cliName:"worktrees-sync",menuGroup:"worktrees",mcpTool:es,mcpExposed:!0,mutating:!0,groupPath:["worktrees","sync"]},{cliName:"env-status",menuGroup:"environment",mcpTool:Jo,mcpExposed:!0,mutating:!1,groupPath:["env-status"]},{cliName:"env-list",menuGroup:"environment",mcpTool:Vo,mcpExposed:!0,mutating:!1,groupPath:["env-list"]},{cliName:"env-load",menuGroup:"environment",mcpTool:Po,mcpExposed:!0,mutating:!0,groupPath:["env-load"],sessionEnvNotice:!0},{cliName:"env-clear",menuGroup:"environment",mcpTool:Wo,mcpExposed:!0,mutating:!0,groupPath:["env-clear"],sessionEnvNotice:!0},{cliName:"env-token-list",menuGroup:"environment",mcpTool:Ko,mcpExposed:!0,mutating:!1,groupPath:["env-token-list"]},{cliName:"config-get",menuGroup:"configuration",mcpTool:mo,mcpExposed:!0,mutating:!1,groupPath:["config-get"]},{cliName:"config-path",menuGroup:"configuration",mcpTool:null,mcpExposed:!1,mutating:!1,groupPath:["config","path"]},{cliName:"config-edit",menuGroup:"configuration",mcpTool:null,mcpExposed:!1,mutating:!0,groupPath:["config","edit"],entersAltScreen:!0},{cliName:"vendor-check",menuGroup:"vendor",mcpTool:qn,mcpExposed:!0,mutating:!1,groupPath:["vendor","check"]},{cliName:"vendor-config",menuGroup:"vendor",mcpTool:null,mcpExposed:!1,mutating:!0,groupPath:["vendor","config"]},{cliName:"init",menuGroup:"setup",mcpTool:null,mcpExposed:!1,mutating:!0,groupPath:["init"]},{cliName:"doctor",menuGroup:"setup",mcpTool:jo,mcpExposed:!1,mutating:!0,groupPath:["doctor"]},{cliName:"audit",menuGroup:"setup",mcpTool:uo,mcpExposed:!0,mutating:!1,groupPath:["audit"]},{cliName:"version",menuGroup:"setup",mcpTool:Hn,mcpExposed:!0,mutating:!1,groupPath:["version"]},{cliName:"vendor",menuGroup:null,mcpTool:null,mcpExposed:!1,mutating:!1,groupPath:["vendor"]},{cliName:"config",menuGroup:null,mcpTool:null,mcpExposed:!1,mutating:!1,groupPath:["config"]},{cliName:"env-autoload",menuGroup:null,mcpTool:null,mcpExposed:!1,mutating:!0,groupPath:["env-autoload"]},{cliName:"env-token-set",menuGroup:null,mcpTool:null,mcpExposed:!1,mutating:!0,groupPath:["env-token-set"]},{cliName:"env-token-remove",menuGroup:null,mcpTool:null,mcpExposed:!1,mutating:!0,groupPath:["env-token-remove"]},{cliName:"self-update",menuGroup:null,mcpTool:null,mcpExposed:!1,mutating:!0,groupPath:["self-update"]},{cliName:"mcp",menuGroup:null,mcpTool:null,mcpExposed:!1,mutating:!1,groupPath:["mcp"]}];var Qu=()=>Qt.flatMap(e=>e.mcpExposed&&e.mcpTool?[e.mcpTool]:[]),em=e=>Qt.filter(r=>r.menuGroup===e),rm=e=>Qt.some(r=>r.longRunning===!0&&r.groupPath.join(" ")===e);import rs from"node:process";var tm="MODULE_TYPELESS_PACKAGE_JSON",om=(e,r)=>typeof e=="object"&&e!==null?e.code:r,Ja=!1,nm=()=>{if(Ja)return;Ja=!0;let e=rs.emitWarning.bind(rs);rs.emitWarning=((r,...t)=>{om(t[0],t[1])!==tm&&e(r,...t)})};export{h as a,Is as b,_s as c,go as d,Ns as e,jr as f,Fr as g,Fe as h,Yf as i,Ic as j,Ys as k,Zs as l,ur as m,Xs as n,Qs as o,Ot as p,Nt as q,il as r,Io as s,Sh as t,$h as u,Qh as v,_o as w,Oo as x,Ri as y,yp as z,Si as A,Ii as B,_i as C,Bo as D,ji as E,Bt as F,Op as G,Wi as H,Ji as I,zi as J,Hi as K,Yi as L,Zi as M,ca as N,la as O,Od as P,ya as Q,wa as R,Xt as S,mu as T,Na as U,Da as V,Ma as W,La as X,Wa as Y,Va as Z,Xu as _,Qt as $,Qu as aa,em as ba,rm as ca,nm as da};
-//# sourceMappingURL=chunk-M5FC2MOJ.js.map