infra-kit 0.3.14 → 0.4.0

package/dist/chunk-SSBYKOHY.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/logger/index.ts", "../src/dev/discovery.ts", "../src/dev/presets.ts", "../src/lib/infra-kit-config/infra-kit-config.ts", "../src/lib/git-utils/git-utils.ts", "../src/lib/errors/operation-error.ts", "../src/lib/mcp-mode/mcp-mode.ts", "../src/lib/release-id/release-id.ts"],
-  "sourcesContent": ["import process from 'node:process'\nimport pino from 'pino'\nimport pretty from 'pino-pretty'\n\n// eslint-disable-next-line sonarjs/publicly-writable-directories\nexport const LOG_FILE_PATH = '/tmp/mcp-infra-kit.log'\n\n/**\n * Key paths pino censors before anything reaches a destination. The load-bearing case is the MCP\n * tool-handler, which logs every tool's `params` object \u2014 twice (at entry, and again in its catch) \u2014\n * into a WORLD-READABLE `/tmp/mcp-infra-kit.log`. A token-carrying key in that object would be\n * written to a file every user on the box can read.\n *\n * The wildcard forms cover the nesting we actually produce: `{ params: { \u2026 } }` and `{ err: { \u2026 } }`\n * are both one level deep, so `*.token` catches `params.token` without enumerating every wrapper.\n *\n * LIMIT \u2014 read this before trusting it: pino's `redact` is KEY-PATH based. It cannot see a token that\n * was INTERPOLATED into a message string (`logger.info(\\`token ${t}\\`)`) \u2014 that string is opaque to\n * it and would be written verbatim. So this is a backstop, not the rule. The RULE is that a token\n * never enters a message string; everything user-facing renders it through `redactToken` first.\n */\nconst REDACT_PATHS = [\n  'token',\n  '*.token',\n  'serviceToken',\n  '*.serviceToken',\n  'DOPPLER_TOKEN',\n  '*.DOPPLER_TOKEN',\n  'INFRA_KIT_ENV_TOKEN',\n  '*.INFRA_KIT_ENV_TOKEN',\n]\n\nexport const initLoggerMcp = () => {\n  const logLevel = process.argv.includes('--debug') ? 'debug' : 'info'\n\n  const logger = pino({ level: logLevel, redact: REDACT_PATHS }, pino.destination({ dest: LOG_FILE_PATH }))\n\n  logger.info(`Logger initialized with level: ${logLevel}. Logging to: ${LOG_FILE_PATH}`)\n\n  return logger\n}\n\nexport const initLoggerCLI = () => {\n  const logLevel = process.argv.includes('--debug') ? 'debug' : 'info'\n\n  const ignoreFields = ['time', 'pid', 'hostname']\n\n  if (logLevel === 'debug') {\n    ignoreFields.push('level')\n  }\n\n  const logger = pino(\n    { level: logLevel, redact: REDACT_PATHS },\n    pretty({\n      destination: 2,\n      ignore: ignoreFields.join(','),\n      colorize: true,\n    }),\n  )\n\n  return logger\n}\n\n// Singleton logger instance for CLI usage\nexport const logger = initLoggerCLI()\n", "/**\n * Filesystem discovery helpers for the dev-server.\n *\n * These functions read the filesystem (walking for the monorepo root, scanning\n * `apps/` and `packages/`) but never `chdir` and never resolve ports / prefixes \u2014\n * that stays with the pure {@link file://./ports.ts} layer. The starting directory\n * is passed in so discovery is testable against a fixture root.\n */\nimport * as fs from 'node:fs'\nimport * as path from 'node:path'\n\n/** Bare metadata for a discovered API app (no resolved port / prefix). */\nexport interface DiscoveredApiApp {\n  /** App folder name (e.g. backoffice, client). */\n  name: string\n  /** Package name from package.json (e.g. sls-trvl-client), or the folder name as fallback. */\n  packageName: string\n  path: string\n}\n\n/** Walk up from `startDir` (max 10 levels) to the dir containing `pnpm-workspace.yaml`. */\nexport function findMonorepoRoot(startDir: string): string {\n  let currentDir = startDir\n\n  for (let i = 0; i < 10; i++) {\n    const workspaceFile = path.join(currentDir, 'pnpm-workspace.yaml')\n\n    if (fs.existsSync(workspaceFile)) {\n      return currentDir\n    }\n    currentDir = path.dirname(currentDir)\n  }\n\n  throw new Error('Could not find monorepo root (pnpm-workspace.yaml)')\n}\n\n/** Read the `name` field from `<apiPath>/package.json`, falling back to `appName`. */\nexport function getPackageName(apiPath: string, appName: string): string {\n  const pkgPath = path.join(apiPath, 'package.json')\n\n  if (!fs.existsSync(pkgPath)) return appName\n\n  try {\n    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8')) as { name?: string }\n\n    return typeof pkg.name === 'string' ? pkg.name : appName\n  } catch {\n    return appName\n  }\n}\n\n/** Discover every `apps/<app>` that has an `api/serverless.yml` (bare metadata only). */\nexport function discoverApiApps(root: string): DiscoveredApiApp[] {\n  const appsDir = path.join(root, 'apps')\n  const apps: DiscoveredApiApp[] = []\n\n  if (!fs.existsSync(appsDir)) {\n    throw new Error(`Apps directory not found: ${appsDir}`)\n  }\n\n  const appDirs = fs\n    .readdirSync(appsDir, { withFileTypes: true })\n    .filter((dirent) => {\n      return dirent.isDirectory()\n    })\n    .map((dirent) => {\n      return dirent.name\n    })\n\n  for (const appName of appDirs) {\n    const apiPath = path.join(appsDir, appName, 'api')\n    const serverlessPath = path.join(apiPath, 'serverless.yml')\n\n    if (fs.existsSync(serverlessPath)) {\n      apps.push({\n        name: appName,\n        packageName: getPackageName(apiPath, appName),\n        path: apiPath,\n      })\n    }\n  }\n\n  return apps\n}\n\n/** Bare metadata for a discovered UI app (a frontend with its own framework `dev` script). */\nexport interface DiscoveredUiApp {\n  /** App folder name (e.g. backoffice, client). */\n  name: string\n  /** package.json `name` \u2014 used as the exact `turbo run dev --filter` target. */\n  packageName: string\n  /** Absolute path to `apps/<app>/ui`. */\n  path: string\n  /**\n   * True when this UI's vite config wires `infra-kit/vite`'s `infraKitDev()` helper \u2014 the ONLY thing\n   * that makes it honor the runner-assigned `INFRA_KIT_UI_PORTS` port (which it binds with `strictPort`).\n   *\n   * The runner treats frameworks opaquely, so it cannot assume a pre-assigned port is the port the child\n   * will bind. Without this signal it would print a confident, wrong URL for any UI that picks its own\n   * port (vike, astro, a hand-rolled vite config). Unwired \u2192 the runner claims no port and the UI keeps\n   * its honest \"vite prints its URL below\" reference line.\n   */\n  managedPort: boolean\n}\n\n/** Vite config filenames checked for the helper import, in vite's own resolution order. */\nconst VITE_CONFIG_FILES = [\n  'vite.config.ts',\n  'vite.config.mts',\n  'vite.config.cts',\n  'vite.config.js',\n  'vite.config.mjs',\n  'vite.config.cjs',\n]\n\n/**\n * Every module specifier that binds a UI to infra-kit's dev wiring \u2014 whether through the raw\n * `infraKitDev` helper or through the `@slip-stream-kit/vite` plugin that wraps it.\n *\n * A LIST, not a single literal, because the wiring moved packages twice: it used to ship from the\n * `infra-kit` CLI itself, then from `@slip-stream-kit/config` (the split that let the CLI become a\n * global install \u2014 a local `node_modules/.bin/infra-kit` would otherwise shadow the global bin, see\n * that package's readme), and the plugin form now ships from `@slip-stream-kit/vite`. Consumers migrate\n * one repo at a time, so all three specifiers are live.\n *\n * This is what makes `managedPort` true, so a MISSING entry is not cosmetic: the runner would stop\n * claiming the port for every UI on that specifier, and with it the hero URL.\n *\n * Note this is a SUBSTRING match, which is why the config package could not be called `@infra-kit/vite`:\n * that name *contains* `infra-kit/vite`, so the legacy entry would have matched it by accident and\n * hidden the very coupling the split makes explicit. Neither `@slip-stream-kit/config/vite` nor\n * `@slip-stream-kit/vite` contains any other entry, so no entry here shadows another.\n *\n * Drop the legacy entry once every consumer repo is migrated.\n */\nexport const INFRA_KIT_VITE_SPECIFIERS = [\n  '@slip-stream-kit/vite',\n  '@slip-stream-kit/config/vite',\n  'infra-kit/vite',\n] as const\n\n/**\n * True when `<dir>`'s vite config references the `infraKitDev` helper module. A text match, not a\n * module load: the config is TypeScript the runner must not execute, and importing it would run the\n * consumer's own side effects. False negatives (a config that re-exports the helper from a shared\n * preset) cost only the reference line, never a wrong URL \u2014 the safe direction to be wrong in.\n */\nexport function usesInfraKitVite(dir: string): boolean {\n  for (const file of VITE_CONFIG_FILES) {\n    const configPath = path.join(dir, file)\n\n    if (!fs.existsSync(configPath)) continue\n\n    try {\n      const source = fs.readFileSync(configPath, 'utf-8')\n\n      return INFRA_KIT_VITE_SPECIFIERS.some((specifier) => {\n        return source.includes(specifier)\n      })\n    } catch {\n      return false\n    }\n  }\n\n  return false\n}\n\n/**\n * True when `<dir>`'s vite config wires the `infraKit()` PLUGIN specifically \u2014 not just the raw\n * `infraKitDev()` helper it wraps (see {@link usesInfraKitVite}, which matches either). Only the\n * plugin watches `.infra-kit/dev-context` and restarts vite when the resolved proxy changes; a\n * config that calls the helper directly bakes its proxy at config load and will not react to a\n * backend recovering mid-session (see `dev-server.ts`'s boot warning for this).\n *\n * No structural signal exists to check instead: the plugin writes nothing to disk at config load,\n * so this is the same conservative text match as {@link usesInfraKitVite} \u2014 a config source read,\n * not a module load. The substring is the plugin's call syntax, `infraKit(`; it cannot false-match\n * `infraKitDev(`, whose next character after `infraKit` is `D`, not `(`. A false negative (e.g. the\n * plugin re-exported from a shared preset under a different call shape) only costs a spurious\n * warning \u2014 never a missed one \u2014 which is the safe direction here.\n */\nexport function usesInfraKitVitePlugin(dir: string): boolean {\n  for (const file of VITE_CONFIG_FILES) {\n    const configPath = path.join(dir, file)\n\n    if (!fs.existsSync(configPath)) continue\n\n    try {\n      return fs.readFileSync(configPath, 'utf-8').includes('infraKit(')\n    } catch {\n      return false\n    }\n  }\n\n  return false\n}\n\n/** True when `<dir>/package.json` declares a non-empty `scripts.dev`. */\nfunction hasDevScript(dir: string): boolean {\n  const pkgPath = path.join(dir, 'package.json')\n\n  if (!fs.existsSync(pkgPath)) return false\n\n  try {\n    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8')) as { scripts?: Record<string, string> }\n\n    return typeof pkg.scripts?.dev === 'string' && pkg.scripts.dev.length > 0\n  } catch {\n    return false\n  }\n}\n\n/**\n * Discover every `apps/<app>/ui` whose package.json declares a `dev` script \u2014 the frontends\n * `infra-kit dev --ui` runs (via one delegated `turbo run dev`). Lenient: no `apps/` dir \u2192 `[]`\n * (UIs are optional), unlike {@link discoverApiApps} which requires it.\n */\nexport function discoverUiApps(root: string): DiscoveredUiApp[] {\n  const appsDir = path.join(root, 'apps')\n  const apps: DiscoveredUiApp[] = []\n\n  if (!fs.existsSync(appsDir)) return apps\n\n  const appDirs = fs\n    .readdirSync(appsDir, { withFileTypes: true })\n    .filter((dirent) => {\n      return dirent.isDirectory()\n    })\n    .map((dirent) => {\n      return dirent.name\n    })\n\n  for (const appName of appDirs) {\n    const uiPath = path.join(appsDir, appName, 'ui')\n\n    if (fs.existsSync(uiPath) && hasDevScript(uiPath)) {\n      apps.push({\n        name: appName,\n        packageName: getPackageName(uiPath, appName),\n        path: uiPath,\n        managedPort: usesInfraKitVite(uiPath),\n      })\n    }\n  }\n\n  return apps\n}\n\n/** Normalize the `--app` include list: drop empties, and collapse an empty list to `null`. */\nexport function normalizeAppInclude(include?: string[] | null): string[] | null {\n  const filtered = include?.filter(Boolean) ?? []\n\n  return filtered.length > 0 ? filtered : null\n}\n\n/**\n * Infer the current app's folder name from `startDir`, so a per-app script can\n * run `infra-kit dev --self` without hardcoding its own app name. Walks up to the\n * monorepo root (via {@link findMonorepoRoot}), then takes the first path segment\n * of `startDir` relative to `<root>/apps` \u2014 e.g. `apps/config-handler/api` and\n * `apps/config-handler` both resolve to `config-handler`. Throws when `startDir`\n * isn't inside `<root>/apps/<app>/...` (repo root, or an unrelated path).\n *\n * @example\n * resolveSelfAppName('/repo/apps/config-handler/api') // => 'config-handler'\n */\nexport function resolveSelfAppName(startDir: string): string {\n  const root = findMonorepoRoot(startDir)\n  const relative = path.relative(path.join(root, 'apps'), startDir)\n  const firstSegment = relative.split(path.sep)[0]\n  const isOutsideApps = relative === '' || relative.startsWith('..') || path.isAbsolute(relative)\n\n  if (isOutsideApps || !firstSegment) {\n    throw new Error(\n      `--self: not inside an apps/<app> directory (cwd: ${startDir}). Run from an app folder or use --app=<name>.`,\n    )\n  }\n\n  return firstSegment\n}\n\n/** App-part directory names that are apps in their own right, never shared packages. See {@link getPackageDistDirs}. */\nconst APP_PART_DIRS = new Set(['api', 'ui'])\n\n/** `<dir>/dist` when it exists and is a directory, else `undefined`. */\nconst existingDistDir = (dir: string): string | undefined => {\n  const distDir = path.join(dir, 'dist')\n\n  return fs.existsSync(distDir) && fs.statSync(distDir).isDirectory() ? distDir : undefined\n}\n\n/** Immediate subdirectory names of `dir`, or `[]` when `dir` does not exist. */\nconst subdirNames = (dir: string): string[] => {\n  if (!fs.existsSync(dir)) return []\n\n  return fs\n    .readdirSync(dir, { withFileTypes: true })\n    .filter((d) => {\n      return d.isDirectory()\n    })\n    .map((d) => {\n      return d.name\n    })\n}\n\n/**\n * Existing dist directories of every SHARED workspace package \u2014 the compiled outputs `turbo watch`\n * rewrites. Watched (alongside app dist) because editing a shared lib rewrites only the lib's `dist`,\n * never the dependent app's, so a package-dist change is the only signal that a lib was rebuilt.\n *\n * Two homes, because the pnpm workspace globs cover `packages/<pkg>` as well as `apps/<app>/<part>`:\n *  - `packages/<pkg>/dist` \u2014 the obvious one.\n *  - `apps/<app>/<part>/dist` where `<part>` is neither `api` nor `ui` and the dir is a real workspace\n *    member (it has a `package.json`). A shared library may legally live beside the app that owns it \u2014\n *    hulyo's `@pkg/ai-mcp` is `apps/ai/mcp`, and two backends depend on it. Scanning only `packages`\n *    left such a package watched by nobody: turbo rebuilt its dist, the runner never saw the change, and\n *    every dependent backend kept serving stale code.\n *\n * `api`/`ui` parts are excluded deliberately: an api's dist is already covered by {@link getAppDistDirs},\n * and treating a frontend's dist as a shared package would bounce every backend on a UI rebuild.\n */\nexport function getPackageDistDirs(root: string): string[] {\n  const dirs: string[] = []\n\n  for (const name of subdirNames(path.join(root, 'packages'))) {\n    const distDir = existingDistDir(path.join(root, 'packages', name))\n\n    if (distDir !== undefined) dirs.push(distDir)\n  }\n\n  const appsDir = path.join(root, 'apps')\n\n  for (const app of subdirNames(appsDir)) {\n    for (const part of subdirNames(path.join(appsDir, app))) {\n      if (APP_PART_DIRS.has(part)) continue\n\n      const partDir = path.join(appsDir, app, part)\n\n      // A workspace member, not a stray build artifact directory.\n      if (!fs.existsSync(path.join(partDir, 'package.json'))) continue\n\n      const distDir = existingDistDir(partDir)\n\n      if (distDir !== undefined) dirs.push(distDir)\n    }\n  }\n\n  return dirs\n}\n\n/** Existing `<app.path>/dist` directories for the given apps (order preserved). */\nexport function getAppDistDirs(apps: Array<{ path: string }>): string[] {\n  return apps\n    .map((app) => {\n      return path.join(app.path, 'dist')\n    })\n    .filter((dir) => {\n      return fs.existsSync(dir)\n    })\n}\n\n/** How a watched dist change should be routed. */\nexport interface ChangeClassification {\n  kind: 'app' | 'package'\n  /** For app changes: the matched app dist dir (undefined when nothing matched). */\n  app?: string\n  /** For package changes: the matched `packages/<pkg>/dist` dir (the change identity used to scope restarts). */\n  packageDir?: string\n}\n\n/**\n * Route a changed compiled-output path: a `packages/<pkg>/dist` change is a shared-package\n * rebuild \u2014 the matched package dist dir is returned so the caller can restart only the apps\n * whose dependency closure includes it. An `<app>/dist` change restarts only that app (the\n * matched app dist dir is returned; `undefined` when the path matches neither). Package matches\n * take precedence.\n */\nexport function classifyDistChange(\n  changedPath: string,\n  appDistDirs: string[],\n  packageDistDirs: string[],\n): ChangeClassification {\n  const normalized = path.normalize(changedPath)\n\n  const matchedPackageDir = packageDistDirs.find((dir) => {\n    return normalized.startsWith(path.normalize(dir))\n  })\n\n  if (matchedPackageDir) {\n    return { kind: 'package', packageDir: matchedPackageDir }\n  }\n\n  const matchedDir = appDistDirs.find((dir) => {\n    return normalized.startsWith(path.normalize(dir))\n  })\n\n  return { kind: 'app', app: matchedDir }\n}\n", "/**\n * Pure resolution of a named dev preset into a concrete run plan.\n *\n * A preset (declared under `devServersPresets` in the per-project infra-kit.json) names\n * launch targets (`client/api`, `client/ui`, with `*` allowed in the app position), optional\n * per-target `watchDeps` (api + ui), per-route proxy-source overrides, and a `cmux` layout\n * flag. This module turns that declarative shape into a flat {@link ResolvedPreset}\n * the runner consumes. Side-effect free: the discovered app parts are passed in\n * (never read from disk here), so resolution is fully unit-testable.\n *\n * Every target key names exactly one workspace package \u2014 the app folder plus the part\n * (`apps/<app>/api` or `apps/<app>/ui`). A bare `<app>` is not a package and is rejected.\n */\nimport type { DevPreset, DevPresets, ProxySource } from 'src/lib/infra-kit-config'\n\n/** The two launchable halves of an `apps/<app>` folder. */\nexport type AppPart = 'api' | 'ui'\n\n/** One concrete thing to launch: a single part of a single app. */\nexport interface ResolvedTarget {\n  /** App folder name (e.g. `client`). */\n  app: string\n  /** Which half of the app to launch. */\n  part: AppPart\n  /**\n   * Participate in dependency-closure watching (uniform for api + ui): react to a change in\n   * this target's own workspace-dependency closure. Default `true` (opt-in participation).\n   * Resolution is specificity-ordered: an explicit value on a more-specific key (a concrete\n   * app, or an explicit `/part`) wins over a `*` glob; at equal specificity an explicit\n   * `false` wins over `true` (order-independent opt-out). See {@link resolveWatch}.\n   */\n  watchDeps: boolean\n}\n\n/** Which apps have an `api` / `ui` part on disk \u2014 the resolver's view of discovery. */\nexport interface DiscoveredParts {\n  /** App names that have `apps/<app>/api`. */\n  api: string[]\n  /** App names that have `apps/<app>/ui`. */\n  ui: string[]\n}\n\n/** A fully-resolved preset: the flat run plan derived from its declarative shape. */\nexport interface ResolvedPreset {\n  /** Every (app, part) to launch, de-duplicated. */\n  targets: ResolvedTarget[]\n  /** Run each target in its own cmux pane. */\n  cmux: boolean\n  /**\n   * app \u2192 (route path \u2192 source) overrides, as DECLARED by the preset.\n   *\n   * Not an input to proxy resolution, and never has been: the vite helper derives a route's source from\n   * the dev-context fragments the runner writes, so a route is local iff its backend is actually up. This\n   * map is the declared INTENT, and it has two readers:\n   *  - `validatePresetProxy` \u2014 the STATIC check, run by `infra-kit audit` and the bare-invocation wizard.\n   *    Note it does NOT run on the `infra-kit dev <preset>` path, so it cannot be relied on to have\n   *    caught anything by the time a run starts;\n   *  - `local-pairing.ts` \u2014 the RUNTIME check, which folds a `local` pin into the set of packages the run\n   *    intended to serve locally, and refuses when one of them is not actually up.\n   */\n  proxy: Record<string, Record<string, ProxySource>>\n  /** Apps whose `api` part is launched \u2014 their backends are local (derived). */\n  localApps: string[]\n  /** Concretely-named `<app>/<part>` targets that matched no discovered app/part (for a warning). */\n  unmatched: string[]\n}\n\n/** The target keys resolution falls back to when a preset omits `apps`: every discovered package. */\nconst ALL_TARGETS_KEYS: NonNullable<DevPreset['apps']> = { '*/api': {}, '*/ui': {} }\n\n/** A preset target key that does not name an `<app>/<part>` package. */\nexport interface PresetKeyIssue {\n  /** Preset name the bad key is under. */\n  preset: string\n  /** The offending key, verbatim. */\n  key: string\n  /** Human-readable, actionable explanation (already prefixed with the preset name). */\n  message: string\n}\n\ninterface ParsedKey {\n  /** App name or `*` (all discovered apps). */\n  appGlob: string\n  /** The single part the key selects. */\n  part: AppPart\n}\n\n/**\n * Explain why `key` is not a valid target, or null when it parses. Keys name one workspace\n * package, so the `/api`|`/ui` part is mandatory \u2014 a bare `client` names a folder, not a package.\n */\nexport const explainTargetKey = (key: string): string | null => {\n  const segments = key.split('/')\n  const [appGlob, part] = segments\n\n  if (segments.length !== 2 || !appGlob) {\n    return `devServersPresets: invalid target \"${key}\" (expected \"<app>/api\" or \"<app>/ui\")`\n  }\n\n  if (part !== 'api' && part !== 'ui') {\n    return `devServersPresets: invalid target part \"${part}\" in \"${key}\" (expected \"api\" or \"ui\")`\n  }\n\n  return null\n}\n\n/**\n * Parse a preset target key into an app glob + its part. Throws when the key is not an\n * `<app>/<part>` package identity (see {@link explainTargetKey}).\n *\n * A `*` app glob is legal (`*` plus a part), and expands to every discovered app.\n *\n * @example\n * parseTargetKey('client/api')  // => { appGlob: 'client', part: 'api' }\n */\nexport const parseTargetKey = (key: string): ParsedKey => {\n  const error = explainTargetKey(key)\n\n  if (error) {\n    throw new Error(error)\n  }\n\n  const [appGlob, part] = key.split('/') as [string, AppPart]\n\n  return { appGlob, part }\n}\n\n/** Every `preset \u2192 invalid target key` in the map, with the reason (empty when all keys parse). */\nexport const validatePresetKeys = (presets: DevPresets): PresetKeyIssue[] => {\n  const issues: PresetKeyIssue[] = []\n\n  for (const [preset, def] of Object.entries(presets)) {\n    for (const key of Object.keys(def.apps ?? {})) {\n      const error = explainTargetKey(key)\n\n      if (error) {\n        issues.push({ preset, key, message: `preset \"${preset}\": ${error}` })\n      }\n    }\n  }\n\n  return issues\n}\n\n/** App names that have `part` on disk, per the discovery result. */\nconst appsWithPart = (discovered: DiscoveredParts, part: AppPart): string[] => {\n  return part === 'api' ? discovered.api : discovered.ui\n}\n\n/** Every discovered app name (union of api + ui halves), sorted for deterministic output. */\nconst allApps = (discovered: DiscoveredParts): string[] => {\n  return [...new Set([...discovered.api, ...discovered.ui])].sort()\n}\n\n/** Stable `app/part` identity key for de-duplicating targets across preset keys. */\nconst targetId = (app: string, part: AppPart): string => {\n  return `${app}/${part}`\n}\n\n/** A resolved target plus the provenance the merge needs to order later keys by specificity. */\ninterface ResolvedTargetInternal extends ResolvedTarget {\n  /** Specificity rank of the key that set `watchDeps` (see {@link keyRank}) \u2014 a higher rank wins. */\n  rank: number\n  /** Whether `watchDeps` came from an explicit preset value (vs the participate-default). */\n  explicitValue: boolean\n}\n\ninterface ResolveState {\n  targets: Map<string, ResolvedTargetInternal>\n  proxy: Record<string, Record<string, ProxySource>>\n  unmatched: string[]\n}\n\n/**\n * Specificity rank of a preset key, higher = more specific. Every key names a part, so the\n * only axis left is the app: a concrete `client/api` (1) beats a `*` glob key (0).\n */\nconst keyRank = (isGlob: boolean): number => {\n  return isGlob ? 0 : 1\n}\n\n/**\n * Merge a preset key's `watchDeps` into any prior resolution for the same target. A key that\n * omits `watchDeps` never clobbers a prior explicit value (and, absent any explicit value,\n * seeds the participate-default `true`). A more-specific key ({@link keyRank}) wins in either\n * direction, so a `*` glob cannot override a concrete `client/api` and vice-versa. Two explicit\n * keys can never tie: each target is named by at most one key per rank (one glob, one concrete),\n * so the merge is order-independent.\n */\nconst resolveWatch = (\n  prior: ResolvedTargetInternal | undefined,\n  next: { watchDeps: boolean | undefined; rank: number },\n): { watchDeps: boolean; rank: number; explicitValue: boolean } => {\n  // This key configured nothing \u2192 keep the prior resolution, or seed the participate-default.\n  if (next.watchDeps === undefined) {\n    return prior ?? { watchDeps: true, rank: next.rank, explicitValue: false }\n  }\n\n  // No prior explicit value (fresh, or only a default) \u2192 this explicit value takes it.\n  if (!prior || !prior.explicitValue) {\n    return { watchDeps: next.watchDeps, rank: next.rank, explicitValue: true }\n  }\n\n  // Two explicit values: the more-specific key wins, in either direction.\n  return next.rank > prior.rank ? { watchDeps: next.watchDeps, rank: next.rank, explicitValue: true } : prior\n}\n\n/**\n * Fold one (app, part) into the accumulator: record a target when the part exists,\n * merge `watchDeps` with any prior target of the same identity by specificity\n * ({@link resolveWatch}), and flag a named-but-missing package as unmatched\n * (glob-expanded misses are silent).\n */\nconst addTarget = (\n  state: ResolveState,\n  discovered: DiscoveredParts,\n  spec: { app: string; part: AppPart; watchDeps: boolean | undefined; isGlob: boolean },\n): void => {\n  const { app, part, watchDeps, isGlob } = spec\n\n  if (!appsWithPart(discovered, part).includes(app)) {\n    // A glob expands over discovery, so its misses are expected; a concretely-named\n    // `<app>/<part>` that can't be found is a mistake worth surfacing.\n    if (!isGlob) {\n      state.unmatched.push(targetId(app, part))\n    }\n\n    return\n  }\n\n  const id = targetId(app, part)\n  const merged = resolveWatch(state.targets.get(id), { watchDeps, rank: keyRank(isGlob) })\n\n  state.targets.set(id, { app, part, ...merged })\n}\n\n/**\n * Resolve a preset against the discovered app parts. Expands `*` app globs,\n * de-duplicates targets, derives the local-backend set from the launched `api`\n * targets, and collects per-app proxy overrides. Unknown app/route names are\n * tolerated (a missing named target lands in `unmatched`, not an exception) so a\n * stale preset degrades gracefully \u2014 but a key that is not an `<app>/<part>`\n * package identity throws, since it can't be resolved at all.\n *\n * @example\n * resolvePreset(\n *   { apps: { 'client/ui': {}, 'client/api': { watchDeps: false } } },\n *   { api: ['client'], ui: ['client'] },\n * )\n * // => {\n * //   targets: [{ app: 'client', part: 'ui', watchDeps: true },   // default participate\n * //             { app: 'client', part: 'api', watchDeps: false }], // explicit opt-out\n * //   cmux: false, proxy: {}, localApps: ['client'], unmatched: [],\n * // }\n */\nexport const resolvePreset = (preset: DevPreset, discovered: DiscoveredParts): ResolvedPreset => {\n  const entries = Object.entries(preset.apps ?? ALL_TARGETS_KEYS)\n  const state: ResolveState = { targets: new Map(), proxy: {}, unmatched: [] }\n\n  for (const [key, cfg] of entries) {\n    const { appGlob, part } = parseTargetKey(key)\n    const isGlob = appGlob === '*'\n    const apps = isGlob ? allApps(discovered) : [appGlob]\n\n    for (const app of apps) {\n      addTarget(state, discovered, { app, part, watchDeps: cfg.watchDeps, isGlob })\n\n      if (cfg.proxy) {\n        state.proxy[app] = { ...(state.proxy[app] ?? {}), ...cfg.proxy }\n      }\n    }\n  }\n\n  const targets: ResolvedTarget[] = [...state.targets.values()].map(({ app, part, watchDeps }) => {\n    return { app, part, watchDeps }\n  })\n  const localApps = [\n    ...new Set(\n      targets\n        .filter((t) => {\n          return t.part === 'api'\n        })\n        .map((t) => {\n          return t.app\n        }),\n    ),\n  ]\n\n  return { targets, cmux: preset.cmux ?? false, proxy: state.proxy, localApps, unmatched: state.unmatched }\n}\n\n/** What the run launched, as passed to {@link deriveTargetLabel}. */\nexport interface TargetLabelInput {\n  /** Named preset (`infra-kit dev <preset>`) \u2014 its name is the label when present. */\n  preset?: string\n  /** The `<app>/<part>` package keys actually being launched, after preset resolution and `--app`. */\n  running: string[]\n  /** Every `<app>/<part>` package key discovered in the monorepo. */\n  discovered: string[]\n}\n\n/**\n * The header's target label. A named preset labels itself; otherwise the label is the set of\n * `<app>/<part>` packages actually launching, collapsing to `*` when that set is everything\n * discovered. Never a bare app name: `client` is not a target anywhere in this system (see\n * {@link parseTargetKey}) and would hide which half of the app is running \u2014 the whole point of\n * the wizard's part-level selection.\n *\n * @example\n * deriveTargetLabel({ running: ['client/ui', 'client/api'], discovered: ['client/api', 'client/ui', 'seo/ui'] })\n * // => 'client/api + client/ui'\n * deriveTargetLabel({ running: ['client/api'], discovered: ['client/api'] }) // => '*'\n * deriveTargetLabel({ preset: 'full', running: ['client/api'], discovered: ['client/api', 'seo/ui'] }) // => 'full'\n */\nexport const deriveTargetLabel = (input: TargetLabelInput): string => {\n  if (input.preset != null) {\n    return input.preset\n  }\n  if (input.running.length === 0) {\n    return 'nothing'\n  }\n\n  const running = new Set(input.running)\n  const isEverything = input.discovered.every((key) => {\n    return running.has(key)\n  })\n\n  return isEverything ? '*' : [...running].sort().join(' + ')\n}\n\n/** A devServersPresets proxy-locality violation surfaced by the audit. */\nexport interface PresetProxyIssue {\n  /** Preset name the violation is in. */\n  preset: string\n  /** Frontend app folder the override is under (e.g. `client`). */\n  app: string\n  /** Route path forced to a source (e.g. `/api`). */\n  route: string\n  /** Backend pkg the route maps to; undefined when the route is not declared in the frontend config. */\n  pkg?: string\n  /** `unknown-route` = route absent from the frontend config; `backend-not-launched` = local target not launched. */\n  kind: 'unknown-route' | 'backend-not-launched'\n  /** Human-readable, actionable explanation. */\n  message: string\n}\n\n/**\n * Cross-file lookups the proxy validator needs, kept injectable so the rule stays\n * filesystem-free (and unit-testable). The impure side (audit) builds these from\n * discovery + each frontend's loaded `infra-kit.config.ts`.\n */\nexport interface PresetProxyContext {\n  /** Discovered app parts, for resolving each preset's launch set. */\n  discovered: DiscoveredParts\n  /** App folder name \u2192 its `apps/<app>/api` package name. */\n  apiPkgByApp: Record<string, string>\n  /** (frontend app folder, route path) \u2192 backend pkg from that frontend's config; undefined when the route is absent. */\n  routePkg: (app: string, route: string) => string | undefined\n}\n\ninterface CheckLocalRouteArgs {\n  preset: string\n  app: string\n  route: string\n  launchedPkgs: ReadonlySet<string>\n  ctx: PresetProxyContext\n}\n\n/** App folder whose `api` package is `pkg` (for the remediation hint), or undefined. */\nconst ownerApp = (apiPkgByApp: Record<string, string>, pkg: string): string | undefined => {\n  return Object.keys(apiPkgByApp).find((app) => {\n    return apiPkgByApp[app] === pkg\n  })\n}\n\n/**\n * Validate one `route \u2192 'local'` override: the route must be declared in the\n * frontend config, and the backend pkg it maps to must be in the preset's launched\n * set. Returns the issue, or null when the override is satisfiable.\n */\nconst checkLocalRoute = ({ preset, app, route, launchedPkgs, ctx }: CheckLocalRouteArgs): PresetProxyIssue | null => {\n  const pkg = ctx.routePkg(app, route)\n\n  if (pkg === undefined) {\n    return {\n      preset,\n      app,\n      route,\n      kind: 'unknown-route',\n      message: `preset \"${preset}\": proxy override \"${route}\" on \"${app}\" names a route not declared in ${app}'s infra-kit.config.ts dev.proxy.routes`,\n    }\n  }\n\n  if (launchedPkgs.has(pkg)) {\n    return null\n  }\n\n  const owner = ownerApp(ctx.apiPkgByApp, pkg)\n  const hint = owner ? `add \"${owner}/api\" to the preset` : `launch the api whose package is \"${pkg}\"`\n\n  return {\n    preset,\n    app,\n    route,\n    pkg,\n    kind: 'backend-not-launched',\n    message: `preset \"${preset}\": proxy override \"${route}\" \u2192 \"local\" requires backend \"${pkg}\" to run locally, but the preset does not launch it \u2014 ${hint}, or set \"${route}\" to \"cloud\"`,\n  }\n}\n\n/**\n * Audit every preset's per-route proxy overrides: a route pinned to `local` is only\n * valid when the backend package it resolves to (per the frontend's\n * `infra-kit.config.ts`) is actually launched by that same preset. Catches the\n * `{ \"client/ui\": { \"proxy\": { \"/api\": \"local\" } } }` case where no local backend\n * is running to serve `/api`. `cloud` overrides are always satisfiable and skipped.\n *\n * @example\n * validatePresetProxy(\n *   { 'client-remote': { apps: { 'client/ui': { proxy: { '/api': 'local' } } } } },\n *   { discovered: { api: ['client'], ui: ['client'] }, apiPkgByApp: { client: 'backend-api' },\n *     routePkg: () => 'backend-api' },\n * )\n * // => [{ preset: 'client-remote', app: 'client', route: '/api', pkg: 'backend-api',\n * //       kind: 'backend-not-launched', message: '\u2026' }]\n */\nexport const validatePresetProxy = (presets: DevPresets, ctx: PresetProxyContext): PresetProxyIssue[] => {\n  const issues: PresetProxyIssue[] = []\n\n  for (const [preset, def] of Object.entries(presets)) {\n    const resolved = resolvePreset(def, ctx.discovered)\n    const launchedPkgs = new Set(\n      resolved.localApps\n        .map((app) => {\n          return ctx.apiPkgByApp[app]\n        })\n        .filter((pkg): pkg is string => {\n          return pkg !== undefined\n        }),\n    )\n\n    for (const [app, routes] of Object.entries(resolved.proxy)) {\n      for (const [route, source] of Object.entries(routes)) {\n        if (source !== 'local') {\n          continue\n        }\n\n        const issue = checkLocalRoute({ preset, app, route, launchedPkgs, ctx })\n\n        if (issue) {\n          issues.push(issue)\n        }\n      }\n    }\n  }\n\n  return issues\n}\n", "import fs from 'node:fs/promises'\nimport os from 'node:os'\nimport path from 'node:path'\nimport process from 'node:process'\nimport { z } from 'zod'\n\nimport { getMainRepoRoot, getProjectRoot } from 'src/lib/git-utils'\nimport { isMcpMode } from 'src/lib/mcp-mode'\n\nconst INFRA_KIT_CONFIG_FILE = 'infra-kit.json'\n\n/**\n * Directory under the user's home that holds all machine-local infra-kit config:\n * the runtime `infra-kit.json` merge layer, per-project overrides, and the factory\n * registry (`vendor.json`). Single source of truth for `.infra-kit`, reused\n * by the vendor factory-config loader (no import cycle \u2014 this module imports no\n * `lib/vendor` code).\n */\nexport const USER_CONFIG_DIR_NAME = '.infra-kit'\nconst USER_GLOBAL_CONFIG_FILE = 'infra-kit.json'\nconst USER_PROJECTS_DIR = 'projects'\n\n// envManagement\nconst dopplerEnvManagementSchema = z.object({\n  provider: z.literal('doppler'),\n  config: z.object({\n    name: z.string().min(1),\n  }),\n})\n\nconst envManagementSchema = z.discriminatedUnion('provider', [dopplerEnvManagementSchema])\n\n// ide\n// There is one attach style: each worktree is added to the configured editor's\n// workspace and opened (no per-window mode). Cursor needs a `.code-workspace`\n// path to reconcile its `folders` array against.\nconst cursorIdeConfigSchema = z.object({\n  workspaceConfigPath: z.string().min(1),\n})\n\nconst cursorIdeSchema = z.object({\n  provider: z.literal('cursor'),\n  config: cursorIdeConfigSchema,\n})\n\n// Zed has no portable workspace file (no `.code-workspace`) and no folder-remove\n// CLI: a multi-worktree workspace is realized by a single `zed <root> <wt...>`\n// invocation. So `config` carries no settings \u2014 there's no path to point at.\nconst zedIdeConfigSchema = z.object({})\n\nconst zedIdeSchema = z.object({\n  provider: z.literal('zed'),\n  config: zedIdeConfigSchema,\n})\n\nconst ideSchema = z.discriminatedUnion('provider', [cursorIdeSchema, zedIdeSchema])\n\n// `ide` accepts a single provider (back-compat) OR an array to drive multiple\n// editors at once (e.g. Cursor + Zed). Normalized to an array everywhere via\n// `resolveConfiguredIdes`. Uniqueness-by-provider is enforced at parse time by a\n// `.superRefine` on the full config schema (see below) \u2014 not here, so the message\n// survives `z.union` error aggregation.\nconst idesSchema = z.union([ideSchema, z.array(ideSchema).min(1)])\n\n// taskManager\nconst jiraTaskManagerSchema = z.object({\n  provider: z.literal('jira'),\n  config: z.object({\n    baseUrl: z.string().url(),\n    projectId: z.number().int().positive(),\n  }),\n})\n\nconst taskManagerSchema = z.discriminatedUnion('provider', [jiraTaskManagerSchema])\n\n// cmux pane layout for opened worktree workspaces. Named presets keep the config\n// typo-proof (an enum, not a free string) and let the opener switch on a single\n// value; extend the enum + the opener's switch to add a layout.\n//   two-columns \u2014 left | right, both full-height (default)\n//   three-pane  \u2014 left split top/bottom + full-height right (legacy layout)\nconst cmuxLayouts = ['two-columns', 'three-pane'] as const\n\nconst cmuxConfigSchema = z.object({\n  layout: z.enum(cmuxLayouts).optional(),\n})\n\n// worktrees prompt defaults\nconst worktreesConfigSchema = z.object({\n  openInGithubDesktop: z.boolean().optional(),\n  openInCmux: z.boolean().optional(),\n  cmux: cmuxConfigSchema.optional(),\n})\n\n// dev-server per-app overrides. Maps an app folder name (e.g. `client`) to its\n// local dev port and/or URL prefix. Both keys optional. An app absent from the\n// map falls back to env (`{APP}_PORT` / `PORT`) then the built-in defaults, so\n// the map is intentionally NOT validated against the discovered apps here \u2014 an\n// unknown app name is simply ignored at resolve time (lib/dev), never a parse\n// error that would brick every command.\nconst devAppConfigSchema = z\n  .object({\n    port: z.number().int().positive().optional(),\n    prefixUrl: z.string().min(1).optional(),\n  })\n  .strict()\n\nconst devConfigSchema = z.record(z.string().min(1), devAppConfigSchema)\n\n// devServersPresets: named local-dev sessions, declared in the per-project infra-kit.json\n// (team presets committed; personal ones layered via the user-project override).\n// Each preset names launch targets (apps/<app>/{api,ui}), optional per-backend\n// `watchDeps`, per-route proxy-source overrides, and a `cmux` layout flag; it is\n// consumed by `infra-kit dev <preset>` and resolved by src/dev/presets. Each target key\n// names exactly one workspace package (`<app>/api` or `<app>/ui`) \u2014 a bare `<app>` is a\n// folder, not a package, and is rejected. The SHAPE is strict (typos in a preset surface\n// as parse errors), but unknown app/route NAMES are intentionally NOT validated here \u2014\n// they resolve at run time against the discovered apps, so a stale preset never bricks\n// every command.\nconst proxySourceSchema = z.enum(['local', 'cloud'])\n\nconst devPresetAppSchema = z\n  .object({\n    // api targets only: watch the backend's dist + shared-package subdeps and restart on change.\n    watchDeps: z.boolean().optional(),\n    // route path (e.g. `/api`) \u2192 source, overriding that route's config.ts default for this session.\n    proxy: z.record(z.string().min(1), proxySourceSchema).optional(),\n  })\n  .strict()\n\nconst devPresetSchema = z\n  .object({\n    // Launch-target key \u2014 one package: `client/ui`, `client/api`, `*/api`. Omit `apps` = all.\n    apps: z.record(z.string().min(1), devPresetAppSchema).optional(),\n    // Run each launched target in its own cmux pane (one workspace, N panes).\n    cmux: z.boolean().optional(),\n  })\n  .strict()\n\nconst devPresetsSchema = z.record(z.string().min(1), devPresetSchema)\n\n// DEPRECATED (accepted and ignored). Layer-B local-dev proxy (portless).\n//\n// The proxy port is no longer negotiable: every dev URL is `https://<release>.<packageName>.localhost`\n// with NO port, and the only port that can serve a port-free HTTPS URL is 443. A configurable port would\n// put the port straight back into the URL \u2014 the exact thing this design removes.\n//\n// The key is still PARSED so it does not brick anything: `infraKitConfigObject` is `.strict()` and\n// `getInfraKitConfig` THROWS on an unknown key, so simply deleting it would hard-fail EVERY infra-kit\n// command (not just `dev`) on any machine whose config still carries it \u2014 arriving unannounced, because\n// the CLI self-updates. It is read by nothing and silently ignored. Remove one release from now.\nconst devProxyConfigSchema = z\n  .object({\n    port: z.number().int().positive().optional(),\n  })\n  .strict()\n\n// env auto-load: opt-in convenience that primes Doppler env when you work inside\n// this project / a worktree. Absent => disabled. `trigger` selects the moment\n// (pick one):\n//   shell-startup  \u2014 when a new shell opens inside the project\n//   cli-invocation \u2014 before each `infra-kit` command (primes SUBSEQUENT commands)\n// `config` names which environment to load. It is intentionally NOT validated\n// against `environments` here: an invalid name must DISABLE the feature at\n// resolve time (lib/env-autoload), never throw inside the merged-config parse and\n// brick every command.\nconst envAutoLoadSchema = z\n  .object({\n    trigger: z.enum(['shell-startup', 'cli-invocation']),\n    config: z.string().min(1),\n  })\n  .strict()\n\n// Base object shape, kept separate so `.partial()` (which only works on a plain\n// ZodObject, not the `.superRefine`-wrapped full schema) can derive the override\n// schema from it.\n//\n// `.strict()` for the same reason every leaf schema below is: this is the one config file humans\n// hand-edit, and a non-strict top level silently swallows the typo that matters most. `devServersPreset`\n// (missing `s`) or `dev-proxy` would parse clean and turn the feature off with no message. The `dev` and\n// `devServersPresets` values stay open `z.record`s \u2014 app and preset NAMES are user-chosen \u2014 so strictness\n// applies to the key set, not the contents.\n// GONE: `environments`. It answered three questions at once and was therefore wrong for two of them.\n// Where can I deploy? \u2192 each workflow's own `workflow_dispatch` `environment.options`, which GitHub\n// validates server-side (`lib/workflow-envs`). What can I authenticate to? \u2192 the token store\n// (`lib/env-tokens`). Being a third, hand-maintained copy of both, it drifted from both: hulyo declared\n// 6 envs while every hulyo workflow declared 8, and the client-side check turned that drift into a\n// REFUSAL to deploy to `stage` and `prod`.\n//\n// Deleted outright rather than accepted-and-ignored: the key is removed from every repo in the same\n// change, so nothing that is checked out on a current branch still carries it. Because this schema is\n// `.strict()`, a config that DOES still carry it (an old release branch, an unmigrated worktree) is\n// refused with `Unrecognized key: \"environments\"` \u2014 delete the key there too.\n// protectedEnvs \u2014 may THIS project reach the delivery-shaped environments listed in\n// `DEFAULT_PROTECTED_ENVS` (lib/workflow-envs/protected-envs)? The list stays in code; only the\n// decision is per-project. \"disallow\" (the default) is today's behaviour: filtered from every deploy\n// picker and refused. \"allow\" reaches them from the CLI and over MCP alike. \"cli-only\" reaches them\n// from a terminal but not from an agent \u2014 over MCP it behaves exactly as \"disallow\", because\n// `createToolHandler` injects `confirmedCommand: true`, which is the very flag that skips every\n// interactive confirmation, so there is no human keystroke on that path.\n//\n// An ENUM rather than a boolean because the VALUE extends without touching the KEY, and a key rename\n// here is expensive: `.strict()` turns the old name into a parse error that bricks every command,\n// which is why `devProxy` below is still parsed and ignored rather than deleted. \"cli-only\" is that\n// extension already spent.\n//\n// NEVER give this field a `.default()`. `infraKitOverrideConfigSchema` is `.partial()` of this object,\n// and `.partial()` makes a key optional WITHOUT stripping a `ZodDefault` \u2014 so the default is still\n// injected on absence. `loadLayer` parses EVERY layer through that schema and merges the results, and\n// layer 3 always exists (auto-seeded `{}` on each command), so a default here would parse to\n// `{ protectedEnvs: 'disallow' }` and shallow-merge OVER a layer-1 \"allow\", silently reverting the\n// setting on every machine with no error anywhere. Verified on zod 4.4.3. The fallback is applied at\n// the single read site instead \u2014 see `resolveProtectedEnvAccess`. No other field in this schema has a\n// default, so nothing here demonstrates the trap: this comment is the only warning.\nconst protectedEnvsSchema = z.enum(['disallow', 'allow', 'cli-only'])\n\nexport const infraKitConfigObject = z\n  .object({\n    envManagement: envManagementSchema,\n    ide: idesSchema.optional(),\n    taskManager: taskManagerSchema.optional(),\n    worktrees: worktreesConfigSchema.optional(),\n    envAutoLoad: envAutoLoadSchema.optional(),\n    dev: devConfigSchema.optional(),\n    devServersPresets: devPresetsSchema.optional(),\n    devProxy: devProxyConfigSchema.optional(),\n    protectedEnvs: protectedEnvsSchema.optional(),\n  })\n  .strict()\n\n/**\n * The portless proxy's listen port. `443` \u2014 the implicit HTTPS port \u2014 because that is the ONLY port that\n * can serve a port-free `https://<release>.<packageName>.localhost` URL, which is the whole point.\n *\n * It is privileged, so the daemon must already be running: `infra-kit dev` PROBES it and never elevates\n * (portless binds `:443` by re-execing through `sudo` with an inherited stdio, which a detached child can\n * never answer). One-time, out-of-band: a root `portless service install`, which `dev` and `doctor` print\n * for the user as an absolute-path command (portless is not on `PATH`; see `formatPortlessCommand`). There\n * is deliberately no unprivileged fallback \u2014 a fallback puts the port back in the URL.\n *\n * Not a constant of convenience: it is the single value that decides the scheme, and TLS on 443 is\n * portless's own default (our previous `--no-tls` was the deviation).\n */\nexport const DEFAULT_DEV_PROXY_PORT = 443\n\n// Full schema = base object + a parse-time uniqueness check on the `ide` array.\n// This runs inside the *merged* `safeParse` in getInfraKitConfig, so it's the\n// gate for the final config. (The override layers use the `.partial()` form\n// below, which drops this object-level refinement \u2014 acceptable, the merged\n// parse is authoritative.)\nexport const infraKitConfigSchema = infraKitConfigObject.superRefine((cfg, ctx) => {\n  if (!Array.isArray(cfg.ide)) return\n\n  const seen = new Set<string>()\n\n  for (const entry of cfg.ide) {\n    if (seen.has(entry.provider)) {\n      ctx.addIssue({\n        code: 'custom',\n        message: 'each IDE provider may appear at most once',\n        path: ['ide'],\n      })\n\n      return\n    }\n\n    seen.add(entry.provider)\n  }\n})\n\nexport const infraKitOverrideConfigSchema = infraKitConfigObject.partial()\n\nexport type InfraKitConfig = z.infer<typeof infraKitConfigSchema>\n\n/** This project's access to the delivery-shaped environments. Absent in config means `'disallow'`. */\nexport type ProtectedEnvsSetting = z.infer<typeof protectedEnvsSchema>\n\n/** Resolved env auto-load config (`{ trigger, config }`), or `undefined` when off. */\nexport type EnvAutoLoadConfig = z.infer<typeof envAutoLoadSchema>\n\n/** Per-app dev-server overrides (`{ port?, prefixUrl? }`). */\nexport type DevAppConfig = z.infer<typeof devAppConfigSchema>\n\n/** The full `dev` section: a map of app folder name to its {@link DevAppConfig}. */\nexport type DevConfig = z.infer<typeof devConfigSchema>\n\n/** A proxy route's resolved source in a preset override (`'local' | 'cloud'`). */\nexport type ProxySource = z.infer<typeof proxySourceSchema>\n\n/** A single dev preset (`{ apps?, cmux? }`) from the `devServersPresets` map. */\nexport type DevPreset = z.infer<typeof devPresetSchema>\n\n/** The `devServersPresets` map: preset name \u2192 {@link DevPreset}. */\nexport type DevPresets = z.infer<typeof devPresetsSchema>\n\n/** A single resolved IDE entry (`{ provider, config }`). */\nexport type ConfiguredIde = z.infer<typeof ideSchema>\n\n/**\n * Normalize the `ide` config (single object, array, or unset) into a flat list.\n * Validation-free: assumes already-parsed input (uniqueness is enforced by the\n * schema). The one source of truth for \"which editors are configured.\"\n *\n * @example\n * resolveConfiguredIdes({ ide: { provider: 'cursor', config: {...} } }) // => [cursor]\n * resolveConfiguredIdes({ ide: [cursor, zed] })                         // => [cursor, zed]\n * resolveConfiguredIdes({})                                             // => []\n */\nexport const resolveConfiguredIdes = (config: InfraKitConfig): ConfiguredIde[] => {\n  const ide = config.ide\n\n  if (!ide) return []\n\n  return Array.isArray(ide) ? ide : [ide]\n}\n\n/** A cmux pane layout preset (see {@link cmuxLayouts}). */\nexport type CmuxLayout = (typeof cmuxLayouts)[number]\n\n/** The layout applied when `worktrees.cmux.layout` is left unset. */\nexport const DEFAULT_CMUX_LAYOUT: CmuxLayout = 'two-columns'\n\n/**\n * Resolve the cmux pane layout for opened worktree workspaces, falling back to\n * {@link DEFAULT_CMUX_LAYOUT} when unconfigured. The one source of truth for\n * \"which layout should the cmux opener build.\"\n *\n * @example\n * resolveCmuxLayout({ worktrees: { cmux: { layout: 'three-pane' } } }) // => 'three-pane'\n * resolveCmuxLayout({})                                                // => 'two-columns'\n */\nexport const resolveCmuxLayout = (config: InfraKitConfig): CmuxLayout => {\n  return config.worktrees?.cmux?.layout ?? DEFAULT_CMUX_LAYOUT\n}\n\nexport interface InfraKitConfigPaths {\n  /** Committed project config (required). */\n  main: string\n  /** User-scope global overrides applied to every project. */\n  userGlobal: string\n  /** User-scope per-project overrides \u2014 `<userProjectsDir>/<projectName>/infra-kit.json`. */\n  userProject: string\n  /** Repo basename (`path.basename(projectRoot)`) used to namespace the user-project file. */\n  projectName: string\n}\n\ninterface CacheEntry {\n  /** `cwd + homedir` \u2014 see {@link pathsCacheKey}. Required alongside `mtimes`: mtimes alone can\n   * collide across two different repo roots (or two homedirs), which would serve one repo's config\n   * to a request for another inside a long-lived process (the MCP server). */\n  key: string\n  mtimes: Record<keyof Omit<InfraKitConfigPaths, 'projectName'>, number | null>\n  value: InfraKitConfig\n}\n\nlet cached: CacheEntry | null = null\n\ninterface PathsCacheEntry {\n  key: string\n  value: InfraKitConfigPaths\n}\n\n/**\n * Memo slot for {@link getInfraKitConfigPaths}. SINGLE-ENTRY, not a `Map`: the resolver's only\n * inputs are `process.cwd()` and `os.homedir()`, and production never mutates either (there is zero\n * `process.chdir` outside tests), so one key covers the whole process lifetime. A `Map` would buy\n * nothing there and could hand a chdir'ing test file a stale sibling entry; a single slot that\n * recomputes on key mismatch is strictly safer and identically fast.\n */\nlet cachedPaths: PathsCacheEntry | null = null\n\n/**\n * Cache key for {@link cachedPaths}. `homedir` is load-bearing, not decoration: the resolver reads\n * it directly, and a dozen test files swap it for a fresh `mkdtemp` home WITHOUT chdir'ing \u2014 a\n * cwd-only key would hand test B test A's already-deleted temp home.\n *\n * @example\n * pathsCacheKey() // => '/Users/arthur/projects/api /Users/arthur'\n */\nconst pathsCacheKey = (): string => {\n  return `${process.cwd()} ${os.homedir()}`\n}\n\n/**\n * Resolve every file path that participates in the config merge chain. Always\n * returns paths even for files that don't yet exist, so callers can use them\n * for \"where would my override go?\" prompts.\n *\n * Memoized on `cwd + homedir` (see {@link cachedPaths}) because the two `git rev-parse` spawns below\n * run BEFORE the mtime cache in `getInfraKitConfig`, so without this every call paid for both. The\n * memo is populated on success only \u2014 `getProjectRoot` rejects outside a git repo and callers depend\n * on that rejection, so a cached rejection would be a stateful negative path. Cleared by\n * {@link resetInfraKitConfigCache}.\n *\n * Safe to memoize: this is a pure path resolver (inputs = cwd + homedir; it returns paths, never\n * file contents), so filesystem mutation cannot invalidate it.\n *\n * @example\n * const paths = await getInfraKitConfigPaths()\n * // {\n * //   main:        '/Users/arthur/projects/api/infra-kit.json',\n * //   userGlobal:  '/Users/arthur/.infra-kit/infra-kit.json',\n * //   userProject: '/Users/arthur/.infra-kit/projects/api/infra-kit.json',\n * //   projectName: 'api',\n * // }\n */\nexport const getInfraKitConfigPaths = async (): Promise<InfraKitConfigPaths> => {\n  const key = pathsCacheKey()\n\n  if (cachedPaths && cachedPaths.key === key) {\n    return cachedPaths.value\n  }\n\n  const projectRoot = await getProjectRoot()\n  // Namespace the per-project override on the MAIN repo root, not `projectRoot`.\n  // Inside a linked worktree `projectRoot` is the worktree's own path, so its\n  // basename is the worktree's leaf dir (e.g. `feature-x`), which would key the\n  // override to a different, per-worktree file. `getMainRepoRoot` resolves the\n  // shared git common dir so every worktree of a repo converges on one key. The\n  // second `git rev-parse` this costs is fine \u2014 the merged config is mtime-cached.\n  const mainRepoRoot = await getMainRepoRoot(projectRoot)\n  const projectName = path.basename(mainRepoRoot)\n  const userConfigDir = path.join(os.homedir(), USER_CONFIG_DIR_NAME)\n\n  const value: InfraKitConfigPaths = {\n    main: path.join(projectRoot, INFRA_KIT_CONFIG_FILE),\n    userGlobal: path.join(userConfigDir, USER_GLOBAL_CONFIG_FILE),\n    userProject: path.join(userConfigDir, USER_PROJECTS_DIR, projectName, INFRA_KIT_CONFIG_FILE),\n    projectName,\n  }\n\n  // Populate only after both git calls RESOLVED \u2014 never cache a rejection.\n  cachedPaths = { key, value }\n\n  return value\n}\n\n/**\n * Read and validate `infra-kit.json`, with optional override layers shallow-merged\n * on top in this order (later wins):\n *   1. project `infra-kit.json`                            \u2014 committed source of truth\n *   2. `~/.infra-kit/infra-kit.json`                       \u2014 user-global defaults\n *   3. `~/.infra-kit/projects/<repo-name>/infra-kit.json`  \u2014 user-scope per-project overrides\n *\n * Top-level keys (entire capability sections like `ide`, `envManagement`)\n * replace wholesale. Results are cached per file mtimes so the long-running\n * MCP server picks up edits without a restart.\n *\n * @example\n * // infra-kit.json:           { \"environments\": [\"dev\"], \"envManagement\": { \"provider\": \"doppler\", \"config\": { \"name\": \"p\" } } }\n * // ~/.infra-kit/infra-kit.json: { \"ide\": { \"provider\": \"cursor\", \"config\": { \"workspaceConfigPath\": \"./ws.code-workspace\" } } }\n * const cfg = await getInfraKitConfig()\n * // => { environments: ['dev'], envManagement: {...}, ide: { provider: 'cursor', config: { workspaceConfigPath: './ws.code-workspace' } } }\n */\nexport const getInfraKitConfig = async (): Promise<InfraKitConfig> => {\n  const key = pathsCacheKey()\n  const paths = await getInfraKitConfigPaths()\n\n  let mainStat: Awaited<ReturnType<typeof fs.stat>>\n\n  try {\n    mainStat = await fs.stat(paths.main)\n  } catch {\n    cached = null\n\n    // Bridge the YAML\u2192JSON cutover: if a legacy infra-kit.yml is sitting where\n    // the JSON config should be, point the user at the one-shot migration.\n    const legacyYmlPath = paths.main.replace(/\\.json$/, '.yml')\n\n    if (await statIfExists(legacyYmlPath)) {\n      throw new Error(\n        `infra-kit.json not found at ${paths.main}. A legacy infra-kit.yml exists \u2014 run \\`infra-kit init\\` to convert it.`,\n      )\n    }\n\n    throw new Error(\n      isMcpMode()\n        ? `infra-kit.json not found at ${paths.main} \u2014 the directory the infra-kit MCP server was launched in is not an infra-kit project. The operator must relaunch the server with its working directory set to an infra-kit project repo.`\n        : `infra-kit.json not found at ${paths.main} \u2014 this git repo is not an infra-kit project. Run \\`infra-kit init\\` here to create it, cd into an infra-kit project repo, or check out a branch that has infra-kit.json.`,\n    )\n  }\n\n  const [userGlobalStat, userProjectStat] = await Promise.all([\n    statIfExists(paths.userGlobal),\n    statIfExists(paths.userProject),\n  ])\n\n  const mtimes = {\n    main: Number(mainStat.mtimeMs),\n    userGlobal: userGlobalStat ? Number(userGlobalStat.mtimeMs) : null,\n    userProject: userProjectStat ? Number(userProjectStat.mtimeMs) : null,\n  }\n\n  if (cached && cached.key === key && shallowEqual(cached.mtimes, mtimes)) {\n    return cached.value\n  }\n\n  const layers: ConfigLayer[] = [\n    { label: 'infra-kit.json', path: paths.main, required: true },\n    { label: '~/.infra-kit/infra-kit.json', path: paths.userGlobal, required: false },\n    {\n      label: `~/.infra-kit/projects/${paths.projectName}/infra-kit.json`,\n      path: paths.userProject,\n      required: false,\n    },\n  ]\n\n  let merged: Record<string, unknown> = {}\n\n  for (const layer of layers) {\n    const data = await loadLayer(layer)\n\n    if (data === null) continue\n\n    merged = { ...merged, ...data }\n  }\n\n  const finalResult = infraKitConfigSchema.safeParse(merged)\n\n  if (!finalResult.success) {\n    throw new Error(`Invalid merged infra-kit config: ${z.prettifyError(finalResult.error)}`)\n  }\n\n  cached = { key, mtimes, value: finalResult.data }\n\n  return finalResult.data\n}\n\n/**\n * Drop ONLY the merged-config cache ({@link cached}), keeping the path memo ({@link cachedPaths})\n * intact. For writers of a merge layer \u2014 the config bootstrap, which creates the layer-3\n * `~/.infra-kit/projects/<repo>/infra-kit.json`.\n *\n * WHY this exists separately from {@link resetInfraKitConfigCache}: writing the layer-3 file changes\n * the MERGE RESULT (a stale merged config would miss the new layer) but it cannot change the\n * RESOLVED PATHS \u2014 those are a pure function of `cwd + homedir`, and creating a file mutates\n * neither. Blowing away the path memo there would just make the very run that creates the file\n * re-spawn both `git rev-parse` processes for nothing: 4 spawns instead of 2.\n *\n * @example\n * await fs.writeFile(paths.userProject, '{}\\n', 'utf-8')\n * resetMergedConfigCache()\n * await getInfraKitConfig()      // sees the new layer-3 layer\n * await getInfraKitConfigPaths() // still served from the memo \u2014 zero extra git spawns\n */\nexport const resetMergedConfigCache = (): void => {\n  cached = null\n}\n\n/**\n * For tests \u2014 drops BOTH in-memory caches: the mtime-fingerprinted merged config and the\n * `cwd + homedir`-keyed path memo ({@link cachedPaths}). The next read re-spawns `git rev-parse`\n * and re-hits disk. Production writers want the narrower {@link resetMergedConfigCache}.\n *\n * @example\n * resetInfraKitConfigCache()\n * await getInfraKitConfig() // re-resolves paths and re-reads files even if mtimes look unchanged\n */\nexport const resetInfraKitConfigCache = (): void => {\n  cached = null\n  cachedPaths = null\n}\n\n/**\n * `fs.stat` that returns `null` instead of throwing on ENOENT. Used so the\n * resolver can probe optional files in the merge chain without try/catch noise.\n *\n * @example\n * const stat = await statIfExists('/does/not/exist') // => null\n */\nconst statIfExists = async (filePath: string): Promise<Awaited<ReturnType<typeof fs.stat>> | null> => {\n  try {\n    return await fs.stat(filePath)\n  } catch {\n    return null\n  }\n}\n\n/**\n * `fs.readFile` that returns `null` instead of throwing on ENOENT.\n *\n * @example\n * const raw = await readIfExists('/missing.json') // => null\n * const raw = await readIfExists('/exists.json')  // => '{ \"environments\": [\"dev\"] }\\n'\n */\nconst readIfExists = async (filePath: string): Promise<string | null> => {\n  try {\n    return await fs.readFile(filePath, 'utf-8')\n  } catch {\n    return null\n  }\n}\n\n/**\n * Reference-equality comparison of every key in two flat records. Used to\n * cheaply detect whether the cached mtime fingerprint still matches.\n *\n * @example\n * shallowEqual({ a: 1, b: 2 }, { a: 1, b: 2 }) // => true\n * shallowEqual({ a: 1 },       { a: 1, b: 2 }) // => false\n * shallowEqual({ a: 1 },       { a: 2 })       // => false\n */\nconst shallowEqual = <T extends Record<string, unknown>>(a: T, b: T): boolean => {\n  const keys = Object.keys(a)\n\n  if (keys.length !== Object.keys(b).length) return false\n\n  return keys.every((k) => {\n    return a[k] === b[k]\n  })\n}\n\ninterface ConfigLayer {\n  label: string\n  path: string\n  required: boolean\n}\n\n/**\n * Read a single layer of the merge chain: parse the JSON if the file exists\n * and validate it against the override schema. Returns `null` if an optional\n * layer is missing; throws if the layer is required, malformed, or invalid.\n * An empty/whitespace-only file is treated as `{}` (JSON.parse would throw).\n *\n * @example\n * await loadLayer({ label: '~/.infra-kit/infra-kit.json', path: '/missing.json', required: false })\n * // => null\n * @example\n * // /home/me/.infra-kit/infra-kit.json: '{ \"ide\": { \"provider\": \"cursor\", \"config\": { \"workspaceConfigPath\": \"./ws.code-workspace\" } } }'\n * await loadLayer({ label: '~/.infra-kit/infra-kit.json', path: '/home/me/.infra-kit/infra-kit.json', required: false })\n * // => { ide: { provider: 'cursor', config: { workspaceConfigPath: './ws.code-workspace' } } }\n */\nconst loadLayer = async (layer: ConfigLayer): Promise<Record<string, unknown> | null> => {\n  const raw = await readIfExists(layer.path)\n\n  if (raw === null) {\n    if (layer.required) {\n      throw new Error(`${layer.label} not found at ${layer.path}`)\n    }\n\n    return null\n  }\n\n  let parsedRaw: unknown\n\n  try {\n    parsedRaw = raw.trim() === '' ? {} : JSON.parse(raw)\n  } catch (err) {\n    throw new Error(`Invalid JSON in ${layer.label} at ${layer.path}: ${(err as Error).message}`)\n  }\n\n  // `envTokens` is ALREADY rejected below \u2014 the override schema keeps `.strict()`, so it lands as a\n  // generic `unrecognized_keys` issue. That generic message is wrong for this one key: the user has\n  // pasted a live Doppler service token into a file that may be committed, backed up by their editor,\n  // or opened by `config edit`. The first instruction has to be REVOKE, not \"fix your config\". Narrow\n  // by construction \u2014 every other unknown key keeps the generic error.\n  if (isRecord(parsedRaw) && 'envTokens' in parsedRaw) {\n    throw new Error(buildEnvTokensRejectionMessage(layer))\n  }\n\n  const result = infraKitOverrideConfigSchema.safeParse(parsedRaw)\n\n  if (!result.success) {\n    throw new Error(`Invalid ${layer.label} at ${layer.path}: ${z.prettifyError(result.error)}`)\n  }\n\n  return result.data as Record<string, unknown>\n}\n\n/**\n * Narrow parsed JSON to a plain object so a key probe is safe (JSON's top level may be an array, a\n * string, or `null`).\n *\n * @example\n * isRecord({ envTokens: {} }) // => true\n * isRecord(['envTokens'])     // => false\n * isRecord(null)              // => false\n */\nconst isRecord = (value: unknown): value is Record<string, unknown> => {\n  return typeof value === 'object' && value !== null && !Array.isArray(value)\n}\n\n/**\n * The REVOKE-first refusal for a service token found in an `infra-kit.json`. Ordered by urgency: the\n * credential is already exposed, so revoking it beats editing the file. Tokens live in a SIBLING\n * `tokens.json` (0600) that this loader never reads \u2014 see `lib/env-tokens`.\n *\n * @example\n * buildEnvTokensRejectionMessage({ label: 'infra-kit.json', path: '/r/infra-kit.json', required: true })\n * // => 'Refusing to load infra-kit.json \u2014 `envTokens` is not a config key. \u2026'\n */\nconst buildEnvTokensRejectionMessage = (layer: ConfigLayer): string => {\n  return [\n    `Refusing to load ${layer.label} \u2014 \\`envTokens\\` is not a config key.`,\n    'A service token in a config file can be committed, backed up by your editor, or shared.',\n    '  1. REVOKE the token in Doppler now \u2014 treat it as compromised.',\n    `  2. Remove the \\`envTokens\\` key from ${layer.path}.`,\n    '  3. Re-add it privately: `infra-kit env-token-set <env>`',\n    '     (it is written to ~/.infra-kit/projects/<repo>/tokens.json, mode 0600, never to the repo).',\n  ].join('\\n')\n}\n", "import path from 'node:path'\nimport process from 'node:process'\nimport { $ } from 'zx'\n\nimport { OperationError, extractStderr } from 'src/lib/errors/operation-error'\nimport { isMcpMode } from 'src/lib/mcp-mode'\nimport { isReleaseBranch } from 'src/lib/release-id'\n\n/**\n * A single record from `git worktree list --porcelain`. The porcelain format is\n * the source of truth for worktrees: it carries the absolute `path` (which the\n * human format's `[branch]` scrape discards), and it distinguishes detached /\n * bare / prunable / locked states that the scrape collapses to `null`.\n *\n * `branch` is the short name (`release/v1.2.3`, `feature/x`) with `refs/heads/`\n * stripped, or `null` for a detached, bare, or otherwise branch-less checkout.\n */\nexport interface WorktreeEntry {\n  path: string\n  branch: string | null\n  detached: boolean\n  bare: boolean\n  prunable: boolean\n  locked: boolean\n}\n\n/**\n * List every git worktree of the repo containing `cwd`, parsed from\n * `git worktree list --porcelain`.\n *\n * Porcelain is a stable, documented, line-oriented format: one record per\n * worktree, records separated by a blank line, each opening with a\n * `worktree <abs-path>` line. Attribute lines (`branch`, `detached`, `bare`,\n * `locked`, `prunable`) follow. This replaces the legacy `endsWith(']')` scrape\n * of the human format, which lost the path and returned `null` for detached\n * worktrees.\n *\n * The main checkout is included in the output (as its own record), exactly as\n * git reports it.\n */\nexport const listWorktrees = async (cwd: string): Promise<WorktreeEntry[]> => {\n  const output = await $({ cwd })`git worktree list --porcelain`\n\n  const entries: WorktreeEntry[] = []\n  let current: WorktreeEntry | null = null\n\n  for (const line of output.stdout.split('\\n')) {\n    if (line.startsWith('worktree ')) {\n      // A new record opens; flush the previous one.\n      if (current) entries.push(current)\n\n      current = {\n        path: line.slice('worktree '.length),\n        branch: null,\n        detached: false,\n        bare: false,\n        prunable: false,\n        locked: false,\n      }\n\n      continue\n    }\n\n    if (!current) continue\n\n    if (line.startsWith('branch ')) {\n      current.branch = line.slice('branch '.length).replace(/^refs\\/heads\\//, '')\n    } else if (line === 'detached') {\n      current.detached = true\n    } else if (line === 'bare') {\n      current.bare = true\n    } else if (line === 'locked' || line.startsWith('locked ')) {\n      current.locked = true\n    } else if (line === 'prunable' || line.startsWith('prunable ')) {\n      current.prunable = true\n    }\n  }\n\n  if (current) entries.push(current)\n\n  return entries\n}\n\n/**\n * Get current git worktrees\n *\n * Thin wrapper over {@link listWorktrees}: harvests branch names from the\n * porcelain records and filters by release / feature shape. Detached, bare, and\n * branch-less records drop out naturally (their `branch` is `null`).\n *\n * @returns [release/v1.18.22, release/v1.18.23, release/v1.18.24] or [feature/mobile-app, feature/explore-page, feature/login-page]\n */\nexport const getCurrentWorktrees = async (type: 'release' | 'feature'): Promise<string[]> => {\n  const entries = await listWorktrees(process.cwd())\n\n  const matches = (branch: string): boolean => {\n    return type === 'release' ? isReleaseBranch(branch) : branch.startsWith('feature/')\n  }\n\n  return entries\n    .map((entry) => {\n      return entry.branch\n    })\n    .filter((branch): branch is string => {\n      return branch !== null && matches(branch)\n    })\n}\n\n/**\n * Trim git's `not a git repository (or any of the parent directories): .git` tail \u2014 and ONLY that.\n * Returns undefined for every other failure so `OperationError` falls through to the real stderr:\n * dubious ownership, EACCES, a corrupt repo, and a missing `git` binary must each report themselves.\n */\nconst normalizeGitRootStderr = (error: unknown): string | undefined => {\n  const raw = extractStderr(error)\n\n  return raw && /not a git repository/i.test(raw) ? 'not a git repository' : undefined\n}\n\n/**\n * Remediation text for a failed project-root resolution.\n *\n * Channel-aware: an MCP server's cwd is fixed at spawn and the CLI has no\n * `--project`/`--cwd`/`-C`, so an agent told to \"cd\" has NO available action \u2014\n * the only actor who can act is the human operator.\n *\n * `hasStderr` gates the stderr-referencing clause: with no stderr (missing `git`\n * binary, ENOENT) the message must not point at evidence it does not carry.\n */\nconst projectRootRemediation = ({ hasStderr }: { hasStderr: boolean }): string => {\n  if (isMcpMode()) {\n    return 'the infra-kit MCP server resolves its project from the working directory it was launched in; the operator must relaunch the server with its working directory set to an infra-kit project repo'\n  }\n\n  const base = 'run infra-kit from inside an infra-kit project repo (or one of its git worktrees)'\n\n  return hasStderr ? `${base}; if you are already in one, the stderr in this message is the real cause` : base\n}\n\n/**\n * Get the current project root directory\n */\nexport const getProjectRoot = async (): Promise<string> => {\n  try {\n    const result = await $({ quiet: true })`git rev-parse --show-toplevel`\n\n    return result.stdout.trim()\n  } catch (error) {\n    const stderrExcerpt = normalizeGitRootStderr(error) ?? extractStderr(error)\n\n    throw new OperationError(error, {\n      operation: `resolve the project root from ${process.cwd()}`,\n      stderrExcerpt,\n      remediation: projectRootRemediation({ hasStderr: stderrExcerpt !== undefined }),\n    })\n  }\n}\n\n/**\n * Absolute path to the MAIN repository root \u2014 invariant across the main checkout\n * and all of its linked worktrees. A linked worktree's `--show-toplevel` is the\n * worktree's own path, but its `--git-common-dir` still points at the shared\n * `<main>/.git`, so the parent of the resolved common dir is always the main repo.\n * This is the stable identity to key per-repo state on (unlike `getProjectRoot`,\n * whose basename is the worktree's leaf directory inside a worktree).\n *\n * Submodules are the one exception: their common dir is\n * `<super>/.git/modules/<name>`, whose parent (`.../.git/modules`) is not a repo\n * root \u2014 there is no meaningful \"main repo\" to converge on \u2014 so we fall back to\n * the caller-supplied toplevel unchanged. Callers must pass a git toplevel as\n * `cwd` (e.g. the result of {@link getProjectRoot}); the fallback assumes it.\n *\n * @example\n * // main checkout: common dir '.git' \u2192 resolve \u2192 '<main>/.git' \u2192 dirname \u2192 '<main>'\n * await getMainRepoRoot('/Users/me/projects/hulyo')            // => '/Users/me/projects/hulyo'\n * // linked worktree: common dir '<main>/.git' \u2192 dirname \u2192 '<main>'\n * await getMainRepoRoot('/Users/me/projects/hulyo-worktrees/feature/x') // => '/Users/me/projects/hulyo'\n */\nexport const getMainRepoRoot = async (cwd?: string): Promise<string> => {\n  const root = cwd ?? (await getProjectRoot())\n  const commonDir = (await $({ cwd: root, quiet: true })`git rev-parse --git-common-dir`).stdout.trim()\n  const resolved = path.resolve(root, commonDir)\n\n  // Submodule: common dir sits under `<super>/.git/modules/<name>` \u2014 no stable\n  // main-repo root to key on, so keep the caller's own toplevel.\n  if (resolved.includes(`${path.sep}.git${path.sep}modules${path.sep}`)) return root\n\n  return path.dirname(resolved)\n}\n\n/**\n * Get the current git branch name (e.g. `dev`, `main`, `release/v1.2.3`).\n */\nexport const getCurrentBranch = async (): Promise<string> => {\n  const result = await $`git rev-parse --abbrev-ref HEAD`\n\n  return result.stdout.trim()\n}\n\n/**\n * Whether the working tree has no staged, unstaged, or untracked changes.\n */\nexport const isWorkingTreeClean = async (): Promise<boolean> => {\n  const result = await $`git status --porcelain`\n\n  return result.stdout.trim().length === 0\n}\n\n/**\n * Whether the current checkout is a linked git worktree rather than the main\n * repository checkout.\n *\n * A linked worktree's git dir lives under `<main>/.git/worktrees/<name>`, so it\n * differs from the shared common dir; in the main checkout the two resolve to\n * the same path. Both are anchored to the toplevel so `--git-common-dir` (which\n * git may report relative to cwd) resolves consistently.\n */\nexport const isInsideLinkedWorktree = async (): Promise<boolean> => {\n  const cwd = await getProjectRoot()\n\n  const [gitDirResult, commonDirResult] = await Promise.all([\n    $({ cwd })`git rev-parse --absolute-git-dir`,\n    $({ cwd })`git rev-parse --git-common-dir`,\n  ])\n\n  const gitDir = gitDirResult.stdout.trim()\n  const commonDir = path.resolve(cwd, commonDirResult.stdout.trim())\n\n  return gitDir !== commonDir\n}\n\n/**\n * Get the current repository name (basename of the project root)\n */\nexport const getRepoName = async (): Promise<string> => {\n  const projectRoot = await getProjectRoot()\n\n  return path.basename(projectRoot)\n}\n\n/**\n * Delete a local branch if it exists and is not the current checkout.\n *\n * Idempotent: a no-op when the branch is absent (`git branch --list` prints\n * nothing). Uses force `-D` because a delivered release branch was\n * squash-merged \u2014 its tip is unreachable from the base, so `-d` would refuse\n * with \"not fully merged\". The delete itself still rejects if the branch is\n * checked out in another worktree; callers decide how to handle that.\n */\nexport const deleteLocalBranch = async (branch: string): Promise<void> => {\n  const listed = await $`git branch --list ${branch}`\n\n  if (listed.stdout.trim().length === 0) return\n\n  if ((await getCurrentBranch()) === branch) return\n\n  await $`git branch -D ${branch}`\n}\n\n/**\n * Delete a branch on the `origin` remote if it exists.\n *\n * Idempotent: a no-op when the branch is absent on the remote. Existence is\n * probed with `git ls-remote --heads` (empty stdout = absent) rather than\n * `--exit-code`, so a genuine network/auth failure rejects and propagates to\n * the caller instead of being silently misread as \"branch absent\".\n */\nexport const deleteRemoteBranch = async (branch: string): Promise<void> => {\n  const refs = await $`git ls-remote --heads origin ${branch}`\n\n  if (refs.stdout.trim().length === 0) return\n\n  await $`git push origin --delete ${branch}`\n}\n", "const STDERR_EXCERPT_MAX_BYTES = 200\n\nexport interface OperationErrorContext {\n  operation: string\n  remediation?: string\n  stderrExcerpt?: string\n}\n\n/**\n * Duck-typed read of zx's `ProcessOutput.stderr` (and similar shapes) without\n * importing zx types just for an `instanceof` check.\n *\n * @example\n * extractStderr(new Error('x'))               // undefined\n * extractStderr({ stderr: 'fatal: ...' })     // 'fatal: ...'\n * extractStderr({ stderr: '' })               // undefined  (empty treated as missing)\n */\nexport const extractStderr = (cause: unknown): string | undefined => {\n  if (cause === null || typeof cause !== 'object') return undefined\n  const stderr = (cause as { stderr?: unknown }).stderr\n\n  return typeof stderr === 'string' && stderr.length > 0 ? stderr : undefined\n}\n\n/**\n * Compose the human-and-agent-readable message body for an `OperationError`:\n * `\"failed to <operation> [\u2014 stderr: <excerpt>] [\u2014 try: <remediation>]\"`.\n * `stderrExcerpt` overrides anything duck-typed off `cause`; both are trimmed\n * and capped at {@link STDERR_EXCERPT_MAX_BYTES} so a runaway subprocess can't\n * blow up the message.\n */\nconst buildMessage = (cause: unknown, ctx: OperationErrorContext): string => {\n  const stderr = ctx.stderrExcerpt ?? extractStderr(cause)\n  const parts = [`failed to ${ctx.operation}`]\n\n  if (stderr) parts.push(`stderr: ${stderr.slice(0, STDERR_EXCERPT_MAX_BYTES).trim()}`)\n  if (ctx.remediation) parts.push(`try: ${ctx.remediation}`)\n\n  return parts.join(' \u2014 ')\n}\n\n/**\n * Error type for any handler-level failure that should surface to the caller\n * (CLI user or MCP-connected agent) with a remediation hint. Wraps an\n * underlying cause and renders a single-line, structured message so logs and\n * agent tool-result text stay scannable.\n *\n * Pattern modeled on the exemplary Doppler errors in\n * `src/integrations/doppler/doppler-errors.ts`.\n *\n * @example\n * // wrap a zx subprocess failure\n * try {\n *   await $`git worktree add ${path} ${branch}`\n * } catch (err) {\n *   throw new OperationError(err, {\n *     operation: `git worktree add for ${branch}`,\n *     remediation: 'check the branch name and that the parent dir is writable',\n *   })\n * }\n * @example\n * // validation failure with no underlying cause\n * throw new OperationError(undefined, {\n *   operation: 'launch deploy-all workflow',\n *   remediation: `pass one of: ${environments.join(', ')}`,\n *   stderrExcerpt: `invalid environment: ${selectedEnv}`,\n * })\n */\nexport class OperationError extends Error {\n  readonly operation: string\n  readonly remediation?: string\n\n  constructor(cause: unknown, ctx: OperationErrorContext) {\n    super(buildMessage(cause, ctx), { cause })\n    this.name = 'OperationError'\n    this.operation = ctx.operation\n    this.remediation = ctx.remediation\n  }\n}\n", "/**\n * MCP-mode flag for the CLI. `process.stdin` is the JSON-RPC transport when the\n * binary runs as an MCP server, so anything that would read keystrokes from it\n * (raw `data` listeners, Ink screens, `@inquirer` prompts) must be gated off.\n *\n * This exists because `process.stdin.isTTY` CANNOT answer that question:\n * `commands/mcp/mcp.ts` spawns the server with `stdio: 'inherit'`, so a\n * terminal-launched `infra-kit mcp` hands the child a real TTY stdin and an\n * isTTY-keyed guard does not fire. Piped stdio (how Claude Code spawns it) only\n * makes isTTY look sufficient by coincidence.\n *\n * Set in `createMcpServer()` \u2014 the importable, transport-free entry that every\n * MCP launch goes through \u2014 not in `entry/mcp.ts`, which starts a server at\n * module scope and so can never assert the flag was actually set.\n */\n\n/** Mutable holder (object so `prefer-const` holds while the flag toggles per run). */\nexport const mcpMode = { enabled: false }\n\n/** True when this process is serving MCP, i.e. `process.stdin` carries JSON-RPC. */\nexport const isMcpMode = (): boolean => {\n  return mcpMode.enabled\n}\n", "/**\n * A release identity is either a semantic version or a free-form kebab-case\n * name. `raw` is the canonical token for the id: the no-`v` semver string for\n * versions (e.g. `1.2.3`) and the name itself for named releases.\n */\nexport type ReleaseId =\n  | { kind: 'version'; semver: { major: number; minor: number; patch: number }; raw: string }\n  | { kind: 'name'; name: string; raw: string }\n\n/** Matches a bare or `v`-prefixed semver token, e.g. `1.2.3` or `v1.2.3`. */\nconst VERSION_RE = /^v?(\\d+)\\.(\\d+)\\.(\\d+)$/\n\n/** Matches the semver core after the `v` in a `release/v\u2026` branch. */\nconst BRANCH_SEMVER_RE = /^(\\d+)\\.(\\d+)\\.(\\d+)$/\n\n/** Kebab-case: lowercase alphanumeric segments joined by single hyphens. */\nconst KEBAB_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/\n\nconst RELEASE_BRANCH_PREFIX = 'release/'\nconst VERSION_BRANCH_PREFIX = 'release/v'\nconst REFS_HEADS_PREFIX = 'refs/heads/'\n\nconst NEXT_TOKEN = 'next'\nconst MAX_NAME_LENGTH = 50\n\n/**\n * Names that would collide with branch/release semantics or read as a special\n * token. Banned regardless of kebab-case validity.\n */\nconst RESERVED_NAMES: ReadonlySet<string> = new Set(['dev', 'main', 'next', 'hotfix', 'regular', 'release'])\n\n/** Thrown by {@link validateName} when a release name is not acceptable. */\nexport class InvalidReleaseNameError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'InvalidReleaseNameError'\n  }\n}\n\n/** Thrown by {@link parseReleaseRef} when a release ref cannot be parsed. */\nexport class InvalidReleaseRefError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'InvalidReleaseRefError'\n  }\n}\n\nconst stripRefsHeads = (input: string): string => {\n  return input.startsWith(REFS_HEADS_PREFIX) ? input.slice(REFS_HEADS_PREFIX.length) : input\n}\n\nconst makeVersion = (major: number, minor: number, patch: number): ReleaseId => {\n  return {\n    kind: 'version',\n    semver: { major, minor, patch },\n    raw: `${major}.${minor}.${patch}`,\n  }\n}\n\n/**\n * Validate a release name. Throws {@link InvalidReleaseNameError} with a\n * specific message unless the name is kebab-case, at most 50 characters, and\n * not a reserved word. Semver-looking tokens (e.g. `1.2.3`) are already\n * excluded by the kebab-case rule since they contain dots.\n */\nexport const validateName = (name: string): void => {\n  if (name.length === 0) {\n    throw new InvalidReleaseNameError('Release name is empty. Provide a kebab-case name like \"checkout-redesign\".')\n  }\n\n  if (name.length > MAX_NAME_LENGTH) {\n    throw new InvalidReleaseNameError(\n      `Release name \"${name}\" is ${name.length} characters; the maximum is ${MAX_NAME_LENGTH}.`,\n    )\n  }\n\n  if (!KEBAB_RE.test(name)) {\n    throw new InvalidReleaseNameError(\n      `Release name \"${name}\" is not kebab-case. Use lowercase letters, digits, and single hyphens, e.g. \"checkout-redesign\".`,\n    )\n  }\n\n  if (RESERVED_NAMES.has(name)) {\n    throw new InvalidReleaseNameError(\n      `Release name \"${name}\" is reserved. Reserved names: ${[...RESERVED_NAMES].join(', ')}.`,\n    )\n  }\n}\n\n/**\n * Lenient parse of a git branch name into a {@link ReleaseId}. Tolerates a\n * leading `refs/heads/`. Returns `null` for anything that is not a valid\n * `release/v<semver>` or `release/<name>` branch. Never throws.\n *\n * Precedence is version-first: `release/v<semver>` is a version, but if the\n * segment after `release/v` is not a valid semver (e.g. `release/vnext`), the\n * whole token after `release/` is treated as a candidate name instead.\n */\nexport const parseBranchName = (branch: string): ReleaseId | null => {\n  const stripped = stripRefsHeads(branch.trim())\n\n  if (!stripped.startsWith(RELEASE_BRANCH_PREFIX)) return null\n\n  if (stripped.startsWith(VERSION_BRANCH_PREFIX)) {\n    const semverPart = stripped.slice(VERSION_BRANCH_PREFIX.length)\n    const match = BRANCH_SEMVER_RE.exec(semverPart)\n\n    if (match) {\n      return makeVersion(Number(match[1]), Number(match[2]), Number(match[3]))\n    }\n  }\n\n  const namePart = stripped.slice(RELEASE_BRANCH_PREFIX.length)\n\n  try {\n    validateName(namePart)\n  } catch {\n    return null\n  }\n\n  return { kind: 'name', name: namePart, raw: namePart }\n}\n\n/**\n * Strict parse of a release ref into a {@link ReleaseId}. Throws\n * {@link InvalidReleaseRefError} on invalid input. Precedence (order matters):\n *   1. `release/\u2026` (or `refs/heads/release/\u2026`) \u2192 delegate to parseBranchName.\n *   2. semver token (`1.2.3` / `v1.2.3`) \u2192 version.\n *   3. `next` \u2192 throws; callers must resolve `next` to a concrete version\n *      via computeNextVersion before calling this.\n *   4. otherwise \u2192 validateName, returning a named release.\n */\nexport const parseReleaseRef = (input: string): ReleaseId => {\n  const trimmed = input.trim()\n  const branchCandidate = stripRefsHeads(trimmed)\n\n  if (branchCandidate.startsWith(RELEASE_BRANCH_PREFIX)) {\n    const parsed = parseBranchName(trimmed)\n\n    if (!parsed) {\n      throw new InvalidReleaseRefError(\n        `\"${input}\" looks like a release branch but is not a valid release/v<semver> or release/<name> ref.`,\n      )\n    }\n\n    return parsed\n  }\n\n  const versionMatch = VERSION_RE.exec(trimmed)\n\n  if (versionMatch) {\n    return makeVersion(Number(versionMatch[1]), Number(versionMatch[2]), Number(versionMatch[3]))\n  }\n\n  if (trimmed.toLowerCase() === NEXT_TOKEN) {\n    throw new InvalidReleaseRefError(\n      'The \"next\" token must be resolved to a concrete version (via computeNextVersion) before parsing a release ref.',\n    )\n  }\n\n  try {\n    validateName(trimmed)\n  } catch (err) {\n    const reason = err instanceof Error ? err.message : String(err)\n\n    throw new InvalidReleaseRefError(`Cannot parse \"${input}\" as a release ref: ${reason}`)\n  }\n\n  return { kind: 'name', name: trimmed, raw: trimmed }\n}\n\n/** Render the branch name for a release id: `release/v1.2.3` | `release/<name>`. */\nexport const formatBranchName = (id: ReleaseId): string => {\n  if (id.kind === 'version') return `${VERSION_BRANCH_PREFIX}${id.raw}`\n\n  return `${RELEASE_BRANCH_PREFIX}${id.name}`\n}\n\n/**\n * Render a PR title: `Release v1.2.3` / `Hotfix v1.2.3` for versions,\n * `Release <name>` / `Hotfix <name>` for names.\n */\nexport const formatPrTitle = (id: ReleaseId, type: 'regular' | 'hotfix'): string => {\n  const prefix = type === 'hotfix' ? 'Hotfix' : 'Release'\n\n  if (id.kind === 'version') return `${prefix} v${id.raw}`\n\n  return `${prefix} ${id.name}`\n}\n\n/** Render a release-candidate PR title: `Release v1.2.3 (RC)` | `Release <name> (RC)`. */\nexport const formatRcTitle = (id: ReleaseId): string => {\n  if (id.kind === 'version') return `Release v${id.raw} (RC)`\n\n  return `Release ${id.name} (RC)`\n}\n\n/** Render the Jira fix-version name: `v1.2.3` | `<name>`. */\nexport const formatJiraName = (id: ReleaseId): string => {\n  if (id.kind === 'version') return `v${id.raw}`\n\n  return id.name\n}\n\n/** Render a short human display label: `1.2.3` | `<name>`. */\nexport const displayLabel = (id: ReleaseId): string => {\n  return id.raw\n}\n\n/** True iff `branch` is a valid release branch under either scheme. */\nexport const isReleaseBranch = (branch: string | null | undefined): boolean => {\n  if (branch === null || branch === undefined) return false\n\n  return parseBranchName(branch) !== null\n}\n\nconst toTime = (value: string | Date | undefined): number | null => {\n  if (value === undefined) return null\n\n  const time = value instanceof Date ? value.getTime() : new Date(value).getTime()\n\n  return Number.isNaN(time) ? null : time\n}\n\n/**\n * Comparator for {@link ReleaseId} values (locked ordering):\n *   - All versions sort before all names.\n *   - Versions: semver ascending (major, then minor, then patch; numeric).\n *   - Names: by date ascending when both dates are provided, otherwise\n *     lexicographic by name. The result is stable and deterministic.\n */\nexport const compareReleaseIds = (\n  a: ReleaseId,\n  b: ReleaseId,\n  dates?: { a?: string | Date; b?: string | Date },\n): number => {\n  if (a.kind === 'version' && b.kind === 'version') {\n    if (a.semver.major !== b.semver.major) return a.semver.major - b.semver.major\n    if (a.semver.minor !== b.semver.minor) return a.semver.minor - b.semver.minor\n\n    return a.semver.patch - b.semver.patch\n  }\n\n  if (a.kind === 'version') return -1\n  if (b.kind === 'version') return 1\n\n  const timeA = toTime(dates?.a)\n  const timeB = toTime(dates?.b)\n\n  if (timeA !== null && timeB !== null && timeA !== timeB) {\n    return timeA - timeB\n  }\n\n  if (a.name < b.name) return -1\n  if (a.name > b.name) return 1\n\n  return 0\n}\n"],
-  "mappings": "AAAA,OAAOA,MAAa,eACpB,OAAOC,MAAU,OACjB,OAAOC,OAAY,cAGZ,IAAMC,EAAgB,yBAgBvBC,EAAe,CACnB,QACA,UACA,eACA,iBACA,gBACA,kBACA,sBACA,uBACF,EAEaC,GAAgB,IAAM,CACjC,IAAMC,EAAWN,EAAQ,KAAK,SAAS,SAAS,EAAI,QAAU,OAExDO,EAASN,EAAK,CAAE,MAAOK,EAAU,OAAQF,CAAa,EAAGH,EAAK,YAAY,CAAE,KAAME,CAAc,CAAC,CAAC,EAExG,OAAAI,EAAO,KAAK,kCAAkCD,CAAQ,iBAAiBH,CAAa,EAAE,EAE/EI,CACT,EAEaC,GAAgB,IAAM,CACjC,IAAMF,EAAWN,EAAQ,KAAK,SAAS,SAAS,EAAI,QAAU,OAExDS,EAAe,CAAC,OAAQ,MAAO,UAAU,EAE/C,OAAIH,IAAa,SACfG,EAAa,KAAK,OAAO,EAGZR,EACb,CAAE,MAAOK,EAAU,OAAQF,CAAa,EACxCF,GAAO,CACL,YAAa,EACb,OAAQO,EAAa,KAAK,GAAG,EAC7B,SAAU,EACZ,CAAC,CACH,CAGF,EAGaF,GAASC,GAAc,ECxDpC,UAAYE,MAAQ,UACpB,UAAYC,MAAU,YAYf,SAASC,GAAiBC,EAA0B,CACzD,IAAIC,EAAaD,EAEjB,QAASE,EAAI,EAAGA,EAAI,GAAIA,IAAK,CAC3B,IAAMC,EAAqB,OAAKF,EAAY,qBAAqB,EAEjE,GAAO,aAAWE,CAAa,EAC7B,OAAOF,EAETA,EAAkB,UAAQA,CAAU,CACtC,CAEA,MAAM,IAAI,MAAM,oDAAoD,CACtE,CAGO,SAASG,EAAeC,EAAiBC,EAAyB,CACvE,IAAMC,EAAe,OAAKF,EAAS,cAAc,EAEjD,GAAI,CAAI,aAAWE,CAAO,EAAG,OAAOD,EAEpC,GAAI,CACF,IAAME,EAAM,KAAK,MAAS,eAAaD,EAAS,OAAO,CAAC,EAExD,OAAO,OAAOC,EAAI,MAAS,SAAWA,EAAI,KAAOF,CACnD,MAAQ,CACN,OAAOA,CACT,CACF,CAGO,SAASG,GAAgBC,EAAkC,CAChE,IAAMC,EAAe,OAAKD,EAAM,MAAM,EAChCE,EAA2B,CAAC,EAElC,GAAI,CAAI,aAAWD,CAAO,EACxB,MAAM,IAAI,MAAM,6BAA6BA,CAAO,EAAE,EAGxD,IAAME,EACH,cAAYF,EAAS,CAAE,cAAe,EAAK,CAAC,EAC5C,OAAQG,GACAA,EAAO,YAAY,CAC3B,EACA,IAAKA,GACGA,EAAO,IACf,EAEH,QAAWR,KAAWO,EAAS,CAC7B,IAAMR,EAAe,OAAKM,EAASL,EAAS,KAAK,EAC3CS,EAAsB,OAAKV,EAAS,gBAAgB,EAEnD,aAAWU,CAAc,GAC9BH,EAAK,KAAK,CACR,KAAMN,EACN,YAAaF,EAAeC,EAASC,CAAO,EAC5C,KAAMD,CACR,CAAC,CAEL,CAEA,OAAOO,CACT,CAuBA,IAAMI,EAAoB,CACxB,iBACA,kBACA,kBACA,iBACA,kBACA,iBACF,EAsBaC,GAA4B,CACvC,wBACA,+BACA,gBACF,EAQO,SAASC,GAAiBC,EAAsB,CACrD,QAAWC,KAAQJ,EAAmB,CACpC,IAAMK,EAAkB,OAAKF,EAAKC,CAAI,EAEtC,GAAQ,aAAWC,CAAU,EAE7B,GAAI,CACF,IAAMC,EAAY,eAAaD,EAAY,OAAO,EAElD,OAAOJ,GAA0B,KAAMM,GAC9BD,EAAO,SAASC,CAAS,CACjC,CACH,MAAQ,CACN,MAAO,EACT,CACF,CAEA,MAAO,EACT,CAgBO,SAASC,GAAuBL,EAAsB,CAC3D,QAAWC,KAAQJ,EAAmB,CACpC,IAAMK,EAAkB,OAAKF,EAAKC,CAAI,EAEtC,GAAQ,aAAWC,CAAU,EAE7B,GAAI,CACF,OAAU,eAAaA,EAAY,OAAO,EAAE,SAAS,WAAW,CAClE,MAAQ,CACN,MAAO,EACT,CACF,CAEA,MAAO,EACT,CAGA,SAASI,GAAaN,EAAsB,CAC1C,IAAMZ,EAAe,OAAKY,EAAK,cAAc,EAE7C,GAAI,CAAI,aAAWZ,CAAO,EAAG,MAAO,GAEpC,GAAI,CACF,IAAMC,EAAM,KAAK,MAAS,eAAaD,EAAS,OAAO,CAAC,EAExD,OAAO,OAAOC,EAAI,SAAS,KAAQ,UAAYA,EAAI,QAAQ,IAAI,OAAS,CAC1E,MAAQ,CACN,MAAO,EACT,CACF,CAOO,SAASkB,GAAehB,EAAiC,CAC9D,IAAMC,EAAe,OAAKD,EAAM,MAAM,EAChCE,EAA0B,CAAC,EAEjC,GAAI,CAAI,aAAWD,CAAO,EAAG,OAAOC,EAEpC,IAAMC,EACH,cAAYF,EAAS,CAAE,cAAe,EAAK,CAAC,EAC5C,OAAQG,GACAA,EAAO,YAAY,CAC3B,EACA,IAAKA,GACGA,EAAO,IACf,EAEH,QAAWR,KAAWO,EAAS,CAC7B,IAAMc,EAAc,OAAKhB,EAASL,EAAS,IAAI,EAExC,aAAWqB,CAAM,GAAKF,GAAaE,CAAM,GAC9Cf,EAAK,KAAK,CACR,KAAMN,EACN,YAAaF,EAAeuB,EAAQrB,CAAO,EAC3C,KAAMqB,EACN,YAAaT,GAAiBS,CAAM,CACtC,CAAC,CAEL,CAEA,OAAOf,CACT,CAGO,SAASgB,GAAoBC,EAA4C,CAC9E,IAAMC,EAAWD,GAAS,OAAO,OAAO,GAAK,CAAC,EAE9C,OAAOC,EAAS,OAAS,EAAIA,EAAW,IAC1C,CAaO,SAASC,GAAmB/B,EAA0B,CAC3D,IAAMU,EAAOX,GAAiBC,CAAQ,EAChCgC,EAAgB,WAAc,OAAKtB,EAAM,MAAM,EAAGV,CAAQ,EAC1DiC,EAAeD,EAAS,MAAW,KAAG,EAAE,CAAC,EAG/C,GAFsBA,IAAa,IAAMA,EAAS,WAAW,IAAI,GAAU,aAAWA,CAAQ,GAEzE,CAACC,EACpB,MAAM,IAAI,MACR,oDAAoDjC,CAAQ,gDAC9D,EAGF,OAAOiC,CACT,CAGA,IAAMC,GAAgB,IAAI,IAAI,CAAC,MAAO,IAAI,CAAC,EAGrCC,EAAmBhB,GAAoC,CAC3D,IAAMiB,EAAe,OAAKjB,EAAK,MAAM,EAErC,OAAU,aAAWiB,CAAO,GAAQ,WAASA,CAAO,EAAE,YAAY,EAAIA,EAAU,MAClF,EAGMC,EAAelB,GACX,aAAWA,CAAG,EAGnB,cAAYA,EAAK,CAAE,cAAe,EAAK,CAAC,EACxC,OAAQmB,GACAA,EAAE,YAAY,CACtB,EACA,IAAKA,GACGA,EAAE,IACV,EAT6B,CAAC,EA4B5B,SAASC,GAAmB7B,EAAwB,CACzD,IAAM8B,EAAiB,CAAC,EAExB,QAAWC,KAAQJ,EAAiB,OAAK3B,EAAM,UAAU,CAAC,EAAG,CAC3D,IAAM0B,EAAUD,EAAqB,OAAKzB,EAAM,WAAY+B,CAAI,CAAC,EAE7DL,IAAY,QAAWI,EAAK,KAAKJ,CAAO,CAC9C,CAEA,IAAMzB,EAAe,OAAKD,EAAM,MAAM,EAEtC,QAAWgC,KAAOL,EAAY1B,CAAO,EACnC,QAAWgC,KAAQN,EAAiB,OAAK1B,EAAS+B,CAAG,CAAC,EAAG,CACvD,GAAIR,GAAc,IAAIS,CAAI,EAAG,SAE7B,IAAMC,EAAe,OAAKjC,EAAS+B,EAAKC,CAAI,EAG5C,GAAI,CAAI,aAAgB,OAAKC,EAAS,cAAc,CAAC,EAAG,SAExD,IAAMR,EAAUD,EAAgBS,CAAO,EAEnCR,IAAY,QAAWI,EAAK,KAAKJ,CAAO,CAC9C,CAGF,OAAOI,CACT,CAGO,SAASK,GAAejC,EAAyC,CACtE,OAAOA,EACJ,IAAK8B,GACQ,OAAKA,EAAI,KAAM,MAAM,CAClC,EACA,OAAQvB,GACG,aAAWA,CAAG,CACzB,CACL,CAkBO,SAAS2B,GACdC,EACAC,EACAC,EACsB,CACtB,IAAMC,EAAkB,YAAUH,CAAW,EAEvCI,EAAoBF,EAAgB,KAAM9B,GACvC+B,EAAW,WAAgB,YAAU/B,CAAG,CAAC,CACjD,EAED,OAAIgC,EACK,CAAE,KAAM,UAAW,WAAYA,CAAkB,EAOnD,CAAE,KAAM,MAAO,IAJHH,EAAY,KAAM7B,GAC5B+B,EAAW,WAAgB,YAAU/B,CAAG,CAAC,CACjD,CAEqC,CACxC,CCzUA,IAAMiC,GAAmD,CAAE,QAAS,CAAC,EAAG,OAAQ,CAAC,CAAE,EAuBtEC,EAAoBC,GAA+B,CAC9D,IAAMC,EAAWD,EAAI,MAAM,GAAG,EACxB,CAACE,EAASC,CAAI,EAAIF,EAExB,OAAIA,EAAS,SAAW,GAAK,CAACC,EACrB,sCAAsCF,CAAG,yCAG9CG,IAAS,OAASA,IAAS,KACtB,2CAA2CA,CAAI,SAASH,CAAG,6BAG7D,IACT,EAWaI,GAAkBJ,GAA2B,CACxD,IAAMK,EAAQN,EAAiBC,CAAG,EAElC,GAAIK,EACF,MAAM,IAAI,MAAMA,CAAK,EAGvB,GAAM,CAACH,EAASC,CAAI,EAAIH,EAAI,MAAM,GAAG,EAErC,MAAO,CAAE,QAAAE,EAAS,KAAAC,CAAK,CACzB,EAGaG,GAAsBC,GAA0C,CAC3E,IAAMC,EAA2B,CAAC,EAElC,OAAW,CAACC,EAAQC,CAAG,IAAK,OAAO,QAAQH,CAAO,EAChD,QAAWP,KAAO,OAAO,KAAKU,EAAI,MAAQ,CAAC,CAAC,EAAG,CAC7C,IAAML,EAAQN,EAAiBC,CAAG,EAE9BK,GACFG,EAAO,KAAK,CAAE,OAAAC,EAAQ,IAAAT,EAAK,QAAS,WAAWS,CAAM,MAAMJ,CAAK,EAAG,CAAC,CAExE,CAGF,OAAOG,CACT,EAGMG,GAAe,CAACC,EAA6BT,IAC1CA,IAAS,MAAQS,EAAW,IAAMA,EAAW,GAIhDC,GAAWD,GACR,CAAC,GAAG,IAAI,IAAI,CAAC,GAAGA,EAAW,IAAK,GAAGA,EAAW,EAAE,CAAC,CAAC,EAAE,KAAK,EAI5DE,EAAW,CAACC,EAAaZ,IACtB,GAAGY,CAAG,IAAIZ,CAAI,GAqBjBa,GAAWC,GACRA,EAAS,EAAI,EAWhBC,GAAe,CACnBC,EACAC,IAGIA,EAAK,YAAc,OACdD,GAAS,CAAE,UAAW,GAAM,KAAMC,EAAK,KAAM,cAAe,EAAM,EAIvE,CAACD,GAAS,CAACA,EAAM,cACZ,CAAE,UAAWC,EAAK,UAAW,KAAMA,EAAK,KAAM,cAAe,EAAK,EAIpEA,EAAK,KAAOD,EAAM,KAAO,CAAE,UAAWC,EAAK,UAAW,KAAMA,EAAK,KAAM,cAAe,EAAK,EAAID,EASlGE,GAAY,CAChBC,EACAV,EACAW,IACS,CACT,GAAM,CAAE,IAAAR,EAAK,KAAAZ,EAAM,UAAAqB,EAAW,OAAAP,CAAO,EAAIM,EAEzC,GAAI,CAACZ,GAAaC,EAAYT,CAAI,EAAE,SAASY,CAAG,EAAG,CAG5CE,GACHK,EAAM,UAAU,KAAKR,EAASC,EAAKZ,CAAI,CAAC,EAG1C,MACF,CAEA,IAAMsB,EAAKX,EAASC,EAAKZ,CAAI,EACvBuB,EAASR,GAAaI,EAAM,QAAQ,IAAIG,CAAE,EAAG,CAAE,UAAAD,EAAW,KAAMR,GAAQC,CAAM,CAAE,CAAC,EAEvFK,EAAM,QAAQ,IAAIG,EAAI,CAAE,IAAAV,EAAK,KAAAZ,EAAM,GAAGuB,CAAO,CAAC,CAChD,EAqBaC,GAAgB,CAAClB,EAAmBG,IAAgD,CAC/F,IAAMgB,EAAU,OAAO,QAAQnB,EAAO,MAAQX,EAAgB,EACxDwB,EAAsB,CAAE,QAAS,IAAI,IAAO,MAAO,CAAC,EAAG,UAAW,CAAC,CAAE,EAE3E,OAAW,CAACtB,EAAK6B,CAAG,IAAKD,EAAS,CAChC,GAAM,CAAE,QAAA1B,EAAS,KAAAC,CAAK,EAAIC,GAAeJ,CAAG,EACtCiB,EAASf,IAAY,IACrB4B,EAAOb,EAASJ,GAAQD,CAAU,EAAI,CAACV,CAAO,EAEpD,QAAWa,KAAOe,EAChBT,GAAUC,EAAOV,EAAY,CAAE,IAAAG,EAAK,KAAAZ,EAAM,UAAW0B,EAAI,UAAW,OAAAZ,CAAO,CAAC,EAExEY,EAAI,QACNP,EAAM,MAAMP,CAAG,EAAI,CAAE,GAAIO,EAAM,MAAMP,CAAG,GAAK,CAAC,EAAI,GAAGc,EAAI,KAAM,EAGrE,CAEA,IAAME,EAA4B,CAAC,GAAGT,EAAM,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,CAAE,IAAAP,EAAK,KAAAZ,EAAM,UAAAqB,CAAU,KACjF,CAAE,IAAAT,EAAK,KAAAZ,EAAM,UAAAqB,CAAU,EAC/B,EACKQ,EAAY,CAChB,GAAG,IAAI,IACLD,EACG,OAAQE,GACAA,EAAE,OAAS,KACnB,EACA,IAAKA,GACGA,EAAE,GACV,CACL,CACF,EAEA,MAAO,CAAE,QAAAF,EAAS,KAAMtB,EAAO,MAAQ,GAAO,MAAOa,EAAM,MAAO,UAAAU,EAAW,UAAWV,EAAM,SAAU,CAC1G,EAyBaY,GAAqBC,GAAoC,CACpE,GAAIA,EAAM,QAAU,KAClB,OAAOA,EAAM,OAEf,GAAIA,EAAM,QAAQ,SAAW,EAC3B,MAAO,UAGT,IAAMC,EAAU,IAAI,IAAID,EAAM,OAAO,EAKrC,OAJqBA,EAAM,WAAW,MAAOnC,GACpCoC,EAAQ,IAAIpC,CAAG,CACvB,EAEqB,IAAM,CAAC,GAAGoC,CAAO,EAAE,KAAK,EAAE,KAAK,KAAK,CAC5D,EAyCMC,GAAW,CAACC,EAAqCC,IAC9C,OAAO,KAAKD,CAAW,EAAE,KAAMvB,GAC7BuB,EAAYvB,CAAG,IAAMwB,CAC7B,EAQGC,GAAkB,CAAC,CAAE,OAAA/B,EAAQ,IAAAM,EAAK,MAAA0B,EAAO,aAAAC,EAAc,IAAAC,CAAI,IAAoD,CACnH,IAAMJ,EAAMI,EAAI,SAAS5B,EAAK0B,CAAK,EAEnC,GAAIF,IAAQ,OACV,MAAO,CACL,OAAA9B,EACA,IAAAM,EACA,MAAA0B,EACA,KAAM,gBACN,QAAS,WAAWhC,CAAM,sBAAsBgC,CAAK,SAAS1B,CAAG,mCAAmCA,CAAG,yCACzG,EAGF,GAAI2B,EAAa,IAAIH,CAAG,EACtB,OAAO,KAGT,IAAMK,EAAQP,GAASM,EAAI,YAAaJ,CAAG,EACrCM,EAAOD,EAAQ,QAAQA,CAAK,sBAAwB,oCAAoCL,CAAG,IAEjG,MAAO,CACL,OAAA9B,EACA,IAAAM,EACA,MAAA0B,EACA,IAAAF,EACA,KAAM,uBACN,QAAS,WAAW9B,CAAM,sBAAsBgC,CAAK,sCAAiCF,CAAG,8DAAyDM,CAAI,aAAaJ,CAAK,cAC1K,CACF,EAkBaK,GAAsB,CAACvC,EAAqBoC,IAAgD,CACvG,IAAMnC,EAA6B,CAAC,EAEpC,OAAW,CAACC,EAAQC,CAAG,IAAK,OAAO,QAAQH,CAAO,EAAG,CACnD,IAAMwC,EAAWpB,GAAcjB,EAAKiC,EAAI,UAAU,EAC5CD,EAAe,IAAI,IACvBK,EAAS,UACN,IAAKhC,GACG4B,EAAI,YAAY5B,CAAG,CAC3B,EACA,OAAQwB,GACAA,IAAQ,MAChB,CACL,EAEA,OAAW,CAACxB,EAAKiC,CAAM,IAAK,OAAO,QAAQD,EAAS,KAAK,EACvD,OAAW,CAACN,EAAOQ,CAAM,IAAK,OAAO,QAAQD,CAAM,EAAG,CACpD,GAAIC,IAAW,QACb,SAGF,IAAMC,EAAQV,GAAgB,CAAE,OAAA/B,EAAQ,IAAAM,EAAK,MAAA0B,EAAO,aAAAC,EAAc,IAAAC,CAAI,CAAC,EAEnEO,GACF1C,EAAO,KAAK0C,CAAK,CAErB,CAEJ,CAEA,OAAO1C,CACT,ECzcA,OAAO2C,MAAQ,mBACf,OAAOC,OAAQ,UACf,OAAOC,MAAU,YACjB,OAAOC,OAAa,eACpB,OAAS,KAAAC,MAAS,MCJlB,OAAOC,MAAU,YACjB,OAAOC,MAAa,eACpB,OAAS,KAAAC,MAAS,KCeX,IAAMC,EAAiBC,GAAuC,CACnE,GAAIA,IAAU,MAAQ,OAAOA,GAAU,SAAU,OACjD,IAAMC,EAAUD,EAA+B,OAE/C,OAAO,OAAOC,GAAW,UAAYA,EAAO,OAAS,EAAIA,EAAS,MACpE,EASMC,GAAe,CAACF,EAAgBG,IAAuC,CAC3E,IAAMF,EAASE,EAAI,eAAiBJ,EAAcC,CAAK,EACjDI,EAAQ,CAAC,aAAaD,EAAI,SAAS,EAAE,EAE3C,OAAIF,GAAQG,EAAM,KAAK,WAAWH,EAAO,MAAM,EAAG,GAAwB,EAAE,KAAK,CAAC,EAAE,EAChFE,EAAI,aAAaC,EAAM,KAAK,QAAQD,EAAI,WAAW,EAAE,EAElDC,EAAM,KAAK,UAAK,CACzB,EA6BaC,EAAN,cAA6B,KAAM,CAC/B,UACA,YAET,YAAYL,EAAgBG,EAA4B,CACtD,MAAMD,GAAaF,EAAOG,CAAG,EAAG,CAAE,MAAAH,CAAM,CAAC,EACzC,KAAK,KAAO,iBACZ,KAAK,UAAYG,EAAI,UACrB,KAAK,YAAcA,EAAI,WACzB,CACF,EC7DO,IAAMG,EAAU,CAAE,QAAS,EAAM,EAG3BC,EAAY,IAChBD,EAAQ,QCXjB,IAAME,GAAa,0BAGbC,GAAmB,wBAGnBC,GAAW,6BAEXC,EAAwB,WACxBC,EAAwB,YACxBC,EAAoB,cAEpBC,GAAa,OAOnB,IAAMC,EAAsC,IAAI,IAAI,CAAC,MAAO,OAAQ,OAAQ,SAAU,UAAW,SAAS,CAAC,EAG9FC,EAAN,cAAsC,KAAM,CACjD,YAAYC,EAAiB,CAC3B,MAAMA,CAAO,EACb,KAAK,KAAO,yBACd,CACF,EAGaC,EAAN,cAAqC,KAAM,CAChD,YAAYD,EAAiB,CAC3B,MAAMA,CAAO,EACb,KAAK,KAAO,wBACd,CACF,EAEME,EAAkBC,GACfA,EAAM,WAAWC,CAAiB,EAAID,EAAM,MAAMC,EAAkB,MAAM,EAAID,EAGjFE,EAAc,CAACC,EAAeC,EAAeC,KAC1C,CACL,KAAM,UACN,OAAQ,CAAE,MAAAF,EAAO,MAAAC,EAAO,MAAAC,CAAM,EAC9B,IAAK,GAAGF,CAAK,IAAIC,CAAK,IAAIC,CAAK,EACjC,GASWC,EAAgBC,GAAuB,CAClD,GAAIA,EAAK,SAAW,EAClB,MAAM,IAAIX,EAAwB,4EAA4E,EAGhH,GAAIW,EAAK,OAAS,GAChB,MAAM,IAAIX,EACR,iBAAiBW,CAAI,QAAQA,EAAK,MAAM,iCAC1C,EAGF,GAAI,CAACC,GAAS,KAAKD,CAAI,EACrB,MAAM,IAAIX,EACR,iBAAiBW,CAAI,mGACvB,EAGF,GAAIZ,EAAe,IAAIY,CAAI,EACzB,MAAM,IAAIX,EACR,iBAAiBW,CAAI,kCAAkC,CAAC,GAAGZ,CAAc,EAAE,KAAK,IAAI,CAAC,GACvF,CAEJ,EAWac,EAAmBC,GAAqC,CACnE,IAAMC,EAAWZ,EAAeW,EAAO,KAAK,CAAC,EAE7C,GAAI,CAACC,EAAS,WAAWC,CAAqB,EAAG,OAAO,KAExD,GAAID,EAAS,WAAWE,CAAqB,EAAG,CAC9C,IAAMC,EAAaH,EAAS,MAAME,EAAsB,MAAM,EACxDE,EAAQC,GAAiB,KAAKF,CAAU,EAE9C,GAAIC,EACF,OAAOb,EAAY,OAAOa,EAAM,CAAC,CAAC,EAAG,OAAOA,EAAM,CAAC,CAAC,EAAG,OAAOA,EAAM,CAAC,CAAC,CAAC,CAE3E,CAEA,IAAME,EAAWN,EAAS,MAAMC,EAAsB,MAAM,EAE5D,GAAI,CACFN,EAAaW,CAAQ,CACvB,MAAQ,CACN,OAAO,IACT,CAEA,MAAO,CAAE,KAAM,OAAQ,KAAMA,EAAU,IAAKA,CAAS,CACvD,EAWaC,GAAmBlB,GAA6B,CAC3D,IAAMmB,EAAUnB,EAAM,KAAK,EAG3B,GAFwBD,EAAeoB,CAAO,EAE1B,WAAWP,CAAqB,EAAG,CACrD,IAAMQ,EAASX,EAAgBU,CAAO,EAEtC,GAAI,CAACC,EACH,MAAM,IAAItB,EACR,IAAIE,CAAK,2FACX,EAGF,OAAOoB,CACT,CAEA,IAAMC,EAAeC,GAAW,KAAKH,CAAO,EAE5C,GAAIE,EACF,OAAOnB,EAAY,OAAOmB,EAAa,CAAC,CAAC,EAAG,OAAOA,EAAa,CAAC,CAAC,EAAG,OAAOA,EAAa,CAAC,CAAC,CAAC,EAG9F,GAAIF,EAAQ,YAAY,IAAMI,GAC5B,MAAM,IAAIzB,EACR,gHACF,EAGF,GAAI,CACFQ,EAAaa,CAAO,CACtB,OAASK,EAAK,CACZ,IAAMC,EAASD,aAAe,MAAQA,EAAI,QAAU,OAAOA,CAAG,EAE9D,MAAM,IAAI1B,EAAuB,iBAAiBE,CAAK,uBAAuByB,CAAM,EAAE,CACxF,CAEA,MAAO,CAAE,KAAM,OAAQ,KAAMN,EAAS,IAAKA,CAAQ,CACrD,EAGaO,GAAoBC,GAC3BA,EAAG,OAAS,UAAkB,GAAGd,CAAqB,GAAGc,EAAG,GAAG,GAE5D,GAAGf,CAAqB,GAAGe,EAAG,IAAI,GAO9BC,GAAgB,CAACD,EAAeE,IAAuC,CAClF,IAAMC,EAASD,IAAS,SAAW,SAAW,UAE9C,OAAIF,EAAG,OAAS,UAAkB,GAAGG,CAAM,KAAKH,EAAG,GAAG,GAE/C,GAAGG,CAAM,IAAIH,EAAG,IAAI,EAC7B,EAGaI,GAAiBJ,GACxBA,EAAG,OAAS,UAAkB,YAAYA,EAAG,GAAG,QAE7C,WAAWA,EAAG,IAAI,QAIdK,GAAkBL,GACzBA,EAAG,OAAS,UAAkB,IAAIA,EAAG,GAAG,GAErCA,EAAG,KAICM,GAAgBN,GACpBA,EAAG,IAICO,EAAmBxB,GAC1BA,GAAW,KAAqC,GAE7CD,EAAgBC,CAAM,IAAM,KAG/ByB,EAAUC,GAAoD,CAClE,GAAIA,IAAU,OAAW,OAAO,KAEhC,IAAMC,EAAOD,aAAiB,KAAOA,EAAM,QAAQ,EAAI,IAAI,KAAKA,CAAK,EAAE,QAAQ,EAE/E,OAAO,OAAO,MAAMC,CAAI,EAAI,KAAOA,CACrC,EASaC,GAAoB,CAC/BC,EACAC,EACAC,IACW,CACX,GAAIF,EAAE,OAAS,WAAaC,EAAE,OAAS,UACrC,OAAID,EAAE,OAAO,QAAUC,EAAE,OAAO,MAAcD,EAAE,OAAO,MAAQC,EAAE,OAAO,MACpED,EAAE,OAAO,QAAUC,EAAE,OAAO,MAAcD,EAAE,OAAO,MAAQC,EAAE,OAAO,MAEjED,EAAE,OAAO,MAAQC,EAAE,OAAO,MAGnC,GAAID,EAAE,OAAS,UAAW,MAAO,GACjC,GAAIC,EAAE,OAAS,UAAW,MAAO,GAEjC,IAAME,EAAQP,EAAOM,GAAO,CAAC,EACvBE,EAAQR,EAAOM,GAAO,CAAC,EAE7B,OAAIC,IAAU,MAAQC,IAAU,MAAQD,IAAUC,EACzCD,EAAQC,EAGbJ,EAAE,KAAOC,EAAE,KAAa,GACxBD,EAAE,KAAOC,EAAE,KAAa,EAErB,CACT,EHzNO,IAAMI,EAAgB,MAAOC,GAA0C,CAC5E,IAAMC,EAAS,MAAMC,EAAE,CAAE,IAAAF,CAAI,CAAC,iCAExBG,EAA2B,CAAC,EAC9BC,EAAgC,KAEpC,QAAWC,KAAQJ,EAAO,OAAO,MAAM;AAAA,CAAI,EAAG,CAC5C,GAAII,EAAK,WAAW,WAAW,EAAG,CAE5BD,GAASD,EAAQ,KAAKC,CAAO,EAEjCA,EAAU,CACR,KAAMC,EAAK,MAAM,CAAkB,EACnC,OAAQ,KACR,SAAU,GACV,KAAM,GACN,SAAU,GACV,OAAQ,EACV,EAEA,QACF,CAEKD,IAEDC,EAAK,WAAW,SAAS,EAC3BD,EAAQ,OAASC,EAAK,MAAM,CAAgB,EAAE,QAAQ,iBAAkB,EAAE,EACjEA,IAAS,WAClBD,EAAQ,SAAW,GACVC,IAAS,OAClBD,EAAQ,KAAO,GACNC,IAAS,UAAYA,EAAK,WAAW,SAAS,EACvDD,EAAQ,OAAS,IACRC,IAAS,YAAcA,EAAK,WAAW,WAAW,KAC3DD,EAAQ,SAAW,IAEvB,CAEA,OAAIA,GAASD,EAAQ,KAAKC,CAAO,EAE1BD,CACT,EAWaG,GAAsB,MAAOC,GAAmD,CAC3F,IAAMJ,EAAU,MAAMJ,EAAcS,EAAQ,IAAI,CAAC,EAE3CC,EAAWC,GACRH,IAAS,UAAYI,EAAgBD,CAAM,EAAIA,EAAO,WAAW,UAAU,EAGpF,OAAOP,EACJ,IAAKS,GACGA,EAAM,MACd,EACA,OAAQF,GACAA,IAAW,MAAQD,EAAQC,CAAM,CACzC,CACL,EAOMG,GAA0BC,GAAuC,CACrE,IAAMC,EAAMC,EAAcF,CAAK,EAE/B,OAAOC,GAAO,wBAAwB,KAAKA,CAAG,EAAI,uBAAyB,MAC7E,EAYME,GAAyB,CAAC,CAAE,UAAAC,CAAU,IAAsC,CAChF,GAAIC,EAAU,EACZ,MAAO,iMAGT,IAAMC,EAAO,oFAEb,OAAOF,EAAY,GAAGE,CAAI,4EAA8EA,CAC1G,EAKaC,EAAiB,SAA6B,CACzD,GAAI,CAGF,OAFe,MAAMnB,EAAE,CAAE,MAAO,EAAK,CAAC,kCAExB,OAAO,KAAK,CAC5B,OAASY,EAAO,CACd,IAAMQ,EAAgBT,GAAuBC,CAAK,GAAKE,EAAcF,CAAK,EAE1E,MAAM,IAAIS,EAAeT,EAAO,CAC9B,UAAW,iCAAiCN,EAAQ,IAAI,CAAC,GACzD,cAAAc,EACA,YAAaL,GAAuB,CAAE,UAAWK,IAAkB,MAAU,CAAC,CAChF,CAAC,CACH,CACF,EAsBaE,EAAkB,MAAOxB,GAAkC,CACtE,IAAMyB,EAAOzB,GAAQ,MAAMqB,EAAe,EACpCK,GAAa,MAAMxB,EAAE,CAAE,IAAKuB,EAAM,MAAO,EAAK,CAAC,mCAAmC,OAAO,KAAK,EAC9FE,EAAWC,EAAK,QAAQH,EAAMC,CAAS,EAI7C,OAAIC,EAAS,SAAS,GAAGC,EAAK,GAAG,OAAOA,EAAK,GAAG,UAAUA,EAAK,GAAG,EAAE,EAAUH,EAEvEG,EAAK,QAAQD,CAAQ,CAC9B,EAKaE,GAAmB,UACf,MAAM3B,oCAEP,OAAO,KAAK,EAMf4B,GAAqB,UACjB,MAAM5B,2BAEP,OAAO,KAAK,EAAE,SAAW,EAY5B6B,GAAyB,SAA8B,CAClE,IAAM/B,EAAM,MAAMqB,EAAe,EAE3B,CAACW,EAAcC,CAAe,EAAI,MAAM,QAAQ,IAAI,CACxD/B,EAAE,CAAE,IAAAF,CAAI,CAAC,oCACTE,EAAE,CAAE,IAAAF,CAAI,CAAC,iCACX,CAAC,EAEKkC,EAASF,EAAa,OAAO,KAAK,EAClCN,EAAYE,EAAK,QAAQ5B,EAAKiC,EAAgB,OAAO,KAAK,CAAC,EAEjE,OAAOC,IAAWR,CACpB,EAKaS,GAAc,SAA6B,CACtD,IAAMC,EAAc,MAAMf,EAAe,EAEzC,OAAOO,EAAK,SAASQ,CAAW,CAClC,EAWaC,GAAoB,MAAO3B,GAAkC,EACzD,MAAMR,sBAAsBQ,CAAM,IAEtC,OAAO,KAAK,EAAE,SAAW,GAE/B,MAAMmB,GAAiB,IAAOnB,GAEnC,MAAMR,kBAAkBQ,CAAM,EAChC,EAUa4B,GAAqB,MAAO5B,GAAkC,EAC5D,MAAMR,iCAAiCQ,CAAM,IAEjD,OAAO,KAAK,EAAE,SAAW,GAElC,MAAMR,6BAA6BQ,CAAM,EAC3C,EDxQA,IAAM6B,GAAwB,iBASjBC,GAAuB,aAC9BC,GAA0B,iBAC1BC,GAAoB,WAGpBC,GAA6BC,EAAE,OAAO,CAC1C,SAAUA,EAAE,QAAQ,SAAS,EAC7B,OAAQA,EAAE,OAAO,CACf,KAAMA,EAAE,OAAO,EAAE,IAAI,CAAC,CACxB,CAAC,CACH,CAAC,EAEKC,GAAsBD,EAAE,mBAAmB,WAAY,CAACD,EAA0B,CAAC,EAMnFG,GAAwBF,EAAE,OAAO,CACrC,oBAAqBA,EAAE,OAAO,EAAE,IAAI,CAAC,CACvC,CAAC,EAEKG,GAAkBH,EAAE,OAAO,CAC/B,SAAUA,EAAE,QAAQ,QAAQ,EAC5B,OAAQE,EACV,CAAC,EAKKE,GAAqBJ,EAAE,OAAO,CAAC,CAAC,EAEhCK,GAAeL,EAAE,OAAO,CAC5B,SAAUA,EAAE,QAAQ,KAAK,EACzB,OAAQI,EACV,CAAC,EAEKE,GAAYN,EAAE,mBAAmB,WAAY,CAACG,GAAiBE,EAAY,CAAC,EAO5EE,GAAaP,EAAE,MAAM,CAACM,GAAWN,EAAE,MAAMM,EAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAG3DE,GAAwBR,EAAE,OAAO,CACrC,SAAUA,EAAE,QAAQ,MAAM,EAC1B,OAAQA,EAAE,OAAO,CACf,QAASA,EAAE,OAAO,EAAE,IAAI,EACxB,UAAWA,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CACvC,CAAC,CACH,CAAC,EAEKS,GAAoBT,EAAE,mBAAmB,WAAY,CAACQ,EAAqB,CAAC,EAO5EE,GAAc,CAAC,cAAe,YAAY,EAE1CC,GAAmBX,EAAE,OAAO,CAChC,OAAQA,EAAE,KAAKU,EAAW,EAAE,SAAS,CACvC,CAAC,EAGKE,GAAwBZ,EAAE,OAAO,CACrC,oBAAqBA,EAAE,QAAQ,EAAE,SAAS,EAC1C,WAAYA,EAAE,QAAQ,EAAE,SAAS,EACjC,KAAMW,GAAiB,SAAS,CAClC,CAAC,EAQKE,GAAqBb,EACxB,OAAO,CACN,KAAMA,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAC3C,UAAWA,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,CACxC,CAAC,EACA,OAAO,EAEJc,GAAkBd,EAAE,OAAOA,EAAE,OAAO,EAAE,IAAI,CAAC,EAAGa,EAAkB,EAYhEE,GAAoBf,EAAE,KAAK,CAAC,QAAS,OAAO,CAAC,EAE7CgB,GAAqBhB,EACxB,OAAO,CAEN,UAAWA,EAAE,QAAQ,EAAE,SAAS,EAEhC,MAAOA,EAAE,OAAOA,EAAE,OAAO,EAAE,IAAI,CAAC,EAAGe,EAAiB,EAAE,SAAS,CACjE,CAAC,EACA,OAAO,EAEJE,GAAkBjB,EACrB,OAAO,CAEN,KAAMA,EAAE,OAAOA,EAAE,OAAO,EAAE,IAAI,CAAC,EAAGgB,EAAkB,EAAE,SAAS,EAE/D,KAAMhB,EAAE,QAAQ,EAAE,SAAS,CAC7B,CAAC,EACA,OAAO,EAEJkB,GAAmBlB,EAAE,OAAOA,EAAE,OAAO,EAAE,IAAI,CAAC,EAAGiB,EAAe,EAY9DE,GAAuBnB,EAC1B,OAAO,CACN,KAAMA,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAC7C,CAAC,EACA,OAAO,EAWJoB,GAAoBpB,EACvB,OAAO,CACN,QAASA,EAAE,KAAK,CAAC,gBAAiB,gBAAgB,CAAC,EACnD,OAAQA,EAAE,OAAO,EAAE,IAAI,CAAC,CAC1B,CAAC,EACA,OAAO,EA2CJqB,GAAsBrB,EAAE,KAAK,CAAC,WAAY,QAAS,UAAU,CAAC,EAEvDsB,EAAuBtB,EACjC,OAAO,CACN,cAAeC,GACf,IAAKM,GAAW,SAAS,EACzB,YAAaE,GAAkB,SAAS,EACxC,UAAWG,GAAsB,SAAS,EAC1C,YAAaQ,GAAkB,SAAS,EACxC,IAAKN,GAAgB,SAAS,EAC9B,kBAAmBI,GAAiB,SAAS,EAC7C,SAAUC,GAAqB,SAAS,EACxC,cAAeE,GAAoB,SAAS,CAC9C,CAAC,EACA,OAAO,EAeGE,GAAyB,IAOzBC,GAAuBF,EAAqB,YAAY,CAACG,EAAKC,IAAQ,CACjF,GAAI,CAAC,MAAM,QAAQD,EAAI,GAAG,EAAG,OAE7B,IAAME,EAAO,IAAI,IAEjB,QAAWC,KAASH,EAAI,IAAK,CAC3B,GAAIE,EAAK,IAAIC,EAAM,QAAQ,EAAG,CAC5BF,EAAI,SAAS,CACX,KAAM,SACN,QAAS,4CACT,KAAM,CAAC,KAAK,CACd,CAAC,EAED,MACF,CAEAC,EAAK,IAAIC,EAAM,QAAQ,CACzB,CACF,CAAC,EAEYC,GAA+BP,EAAqB,QAAQ,EAsC5DQ,GAAyBC,GAA4C,CAChF,IAAMC,EAAMD,EAAO,IAEnB,OAAKC,EAEE,MAAM,QAAQA,CAAG,EAAIA,EAAM,CAACA,CAAG,EAFrB,CAAC,CAGpB,EAMaC,GAAkC,cAWlCC,GAAqBH,GACzBA,EAAO,WAAW,MAAM,QAAUE,GAuBvCE,EAA4B,KAc5BC,EAAsC,KAUpCC,GAAgB,IACb,GAAGC,GAAQ,IAAI,CAAC,IAAIC,GAAG,QAAQ,CAAC,GA0B5BC,GAAyB,SAA0C,CAC9E,IAAMC,EAAMJ,GAAc,EAE1B,GAAID,GAAeA,EAAY,MAAQK,EACrC,OAAOL,EAAY,MAGrB,IAAMM,EAAc,MAAMC,EAAe,EAOnCC,EAAe,MAAMC,EAAgBH,CAAW,EAChDI,EAAcC,EAAK,SAASH,CAAY,EACxCI,EAAgBD,EAAK,KAAKR,GAAG,QAAQ,EAAG3C,EAAoB,EAE5DqD,EAA6B,CACjC,KAAMF,EAAK,KAAKL,EAAa/C,EAAqB,EAClD,WAAYoD,EAAK,KAAKC,EAAenD,EAAuB,EAC5D,YAAakD,EAAK,KAAKC,EAAelD,GAAmBgD,EAAanD,EAAqB,EAC3F,YAAAmD,CACF,EAGA,OAAAV,EAAc,CAAE,IAAAK,EAAK,MAAAQ,CAAM,EAEpBA,CACT,EAmBaC,GAAoB,SAAqC,CACpE,IAAMT,EAAMJ,GAAc,EACpBc,EAAQ,MAAMX,GAAuB,EAEvCY,EAEJ,GAAI,CACFA,EAAW,MAAMC,EAAG,KAAKF,EAAM,IAAI,CACrC,MAAQ,CACNhB,EAAS,KAIT,IAAMmB,EAAgBH,EAAM,KAAK,QAAQ,UAAW,MAAM,EAE1D,MAAI,MAAMI,EAAaD,CAAa,EAC5B,IAAI,MACR,+BAA+BH,EAAM,IAAI,8EAC3C,EAGI,IAAI,MACRK,EAAU,EACN,+BAA+BL,EAAM,IAAI,iMACzC,+BAA+BA,EAAM,IAAI,gLAC/C,CACF,CAEA,GAAM,CAACM,EAAgBC,CAAe,EAAI,MAAM,QAAQ,IAAI,CAC1DH,EAAaJ,EAAM,UAAU,EAC7BI,EAAaJ,EAAM,WAAW,CAChC,CAAC,EAEKQ,EAAS,CACb,KAAM,OAAOP,EAAS,OAAO,EAC7B,WAAYK,EAAiB,OAAOA,EAAe,OAAO,EAAI,KAC9D,YAAaC,EAAkB,OAAOA,EAAgB,OAAO,EAAI,IACnE,EAEA,GAAIvB,GAAUA,EAAO,MAAQM,GAAOmB,GAAazB,EAAO,OAAQwB,CAAM,EACpE,OAAOxB,EAAO,MAGhB,IAAM0B,EAAwB,CAC5B,CAAE,MAAO,iBAAkB,KAAMV,EAAM,KAAM,SAAU,EAAK,EAC5D,CAAE,MAAO,8BAA+B,KAAMA,EAAM,WAAY,SAAU,EAAM,EAChF,CACE,MAAO,yBAAyBA,EAAM,WAAW,kBACjD,KAAMA,EAAM,YACZ,SAAU,EACZ,CACF,EAEIW,EAAkC,CAAC,EAEvC,QAAWC,KAASF,EAAQ,CAC1B,IAAMG,EAAO,MAAMC,GAAUF,CAAK,EAE9BC,IAAS,OAEbF,EAAS,CAAE,GAAGA,EAAQ,GAAGE,CAAK,EAChC,CAEA,IAAME,EAAc1C,GAAqB,UAAUsC,CAAM,EAEzD,GAAI,CAACI,EAAY,QACf,MAAM,IAAI,MAAM,oCAAoClE,EAAE,cAAckE,EAAY,KAAK,CAAC,EAAE,EAG1F,OAAA/B,EAAS,CAAE,IAAAM,EAAK,OAAAkB,EAAQ,MAAOO,EAAY,IAAK,EAEzCA,EAAY,IACrB,EAmBaC,GAAyB,IAAY,CAChDhC,EAAS,IACX,EAWaiC,GAA2B,IAAY,CAClDjC,EAAS,KACTC,EAAc,IAChB,EASMmB,EAAe,MAAOc,GAA0E,CACpG,GAAI,CACF,OAAO,MAAMhB,EAAG,KAAKgB,CAAQ,CAC/B,MAAQ,CACN,OAAO,IACT,CACF,EASMC,GAAe,MAAOD,GAA6C,CACvE,GAAI,CACF,OAAO,MAAMhB,EAAG,SAASgB,EAAU,OAAO,CAC5C,MAAQ,CACN,OAAO,IACT,CACF,EAWMT,GAAe,CAAoCW,EAAMC,IAAkB,CAC/E,IAAMC,EAAO,OAAO,KAAKF,CAAC,EAE1B,OAAIE,EAAK,SAAW,OAAO,KAAKD,CAAC,EAAE,OAAe,GAE3CC,EAAK,MAAOC,GACVH,EAAEG,CAAC,IAAMF,EAAEE,CAAC,CACpB,CACH,EAsBMT,GAAY,MAAOF,GAAgE,CACvF,IAAMY,EAAM,MAAML,GAAaP,EAAM,IAAI,EAEzC,GAAIY,IAAQ,KAAM,CAChB,GAAIZ,EAAM,SACR,MAAM,IAAI,MAAM,GAAGA,EAAM,KAAK,iBAAiBA,EAAM,IAAI,EAAE,EAG7D,OAAO,IACT,CAEA,IAAIa,EAEJ,GAAI,CACFA,EAAYD,EAAI,KAAK,IAAM,GAAK,CAAC,EAAI,KAAK,MAAMA,CAAG,CACrD,OAASE,EAAK,CACZ,MAAM,IAAI,MAAM,mBAAmBd,EAAM,KAAK,OAAOA,EAAM,IAAI,KAAMc,EAAc,OAAO,EAAE,CAC9F,CAOA,GAAIC,GAASF,CAAS,GAAK,cAAeA,EACxC,MAAM,IAAI,MAAMG,GAA+BhB,CAAK,CAAC,EAGvD,IAAMiB,EAASnD,GAA6B,UAAU+C,CAAS,EAE/D,GAAI,CAACI,EAAO,QACV,MAAM,IAAI,MAAM,WAAWjB,EAAM,KAAK,OAAOA,EAAM,IAAI,KAAK/D,EAAE,cAAcgF,EAAO,KAAK,CAAC,EAAE,EAG7F,OAAOA,EAAO,IAChB,EAWMF,GAAY7B,GACT,OAAOA,GAAU,UAAYA,IAAU,MAAQ,CAAC,MAAM,QAAQA,CAAK,EAYtE8B,GAAkChB,GAC/B,CACL,oBAAoBA,EAAM,KAAK,6CAC/B,0FACA,uEACA,0CAA0CA,EAAM,IAAI,IACpD,4DACA,iGACF,EAAE,KAAK;AAAA,CAAI",
-  "names": ["process", "pino", "pretty", "LOG_FILE_PATH", "REDACT_PATHS", "initLoggerMcp", "logLevel", "logger", "initLoggerCLI", "ignoreFields", "fs", "path", "findMonorepoRoot", "startDir", "currentDir", "i", "workspaceFile", "getPackageName", "apiPath", "appName", "pkgPath", "pkg", "discoverApiApps", "root", "appsDir", "apps", "appDirs", "dirent", "serverlessPath", "VITE_CONFIG_FILES", "INFRA_KIT_VITE_SPECIFIERS", "usesInfraKitVite", "dir", "file", "configPath", "source", "specifier", "usesInfraKitVitePlugin", "hasDevScript", "discoverUiApps", "uiPath", "normalizeAppInclude", "include", "filtered", "resolveSelfAppName", "relative", "firstSegment", "APP_PART_DIRS", "existingDistDir", "distDir", "subdirNames", "d", "getPackageDistDirs", "dirs", "name", "app", "part", "partDir", "getAppDistDirs", "classifyDistChange", "changedPath", "appDistDirs", "packageDistDirs", "normalized", "matchedPackageDir", "ALL_TARGETS_KEYS", "explainTargetKey", "key", "segments", "appGlob", "part", "parseTargetKey", "error", "validatePresetKeys", "presets", "issues", "preset", "def", "appsWithPart", "discovered", "allApps", "targetId", "app", "keyRank", "isGlob", "resolveWatch", "prior", "next", "addTarget", "state", "spec", "watchDeps", "id", "merged", "resolvePreset", "entries", "cfg", "apps", "targets", "localApps", "t", "deriveTargetLabel", "input", "running", "ownerApp", "apiPkgByApp", "pkg", "checkLocalRoute", "route", "launchedPkgs", "ctx", "owner", "hint", "validatePresetProxy", "resolved", "routes", "source", "issue", "fs", "os", "path", "process", "z", "path", "process", "$", "extractStderr", "cause", "stderr", "buildMessage", "ctx", "parts", "OperationError", "mcpMode", "isMcpMode", "VERSION_RE", "BRANCH_SEMVER_RE", "KEBAB_RE", "RELEASE_BRANCH_PREFIX", "VERSION_BRANCH_PREFIX", "REFS_HEADS_PREFIX", "NEXT_TOKEN", "RESERVED_NAMES", "InvalidReleaseNameError", "message", "InvalidReleaseRefError", "stripRefsHeads", "input", "REFS_HEADS_PREFIX", "makeVersion", "major", "minor", "patch", "validateName", "name", "KEBAB_RE", "parseBranchName", "branch", "stripped", "RELEASE_BRANCH_PREFIX", "VERSION_BRANCH_PREFIX", "semverPart", "match", "BRANCH_SEMVER_RE", "namePart", "parseReleaseRef", "trimmed", "parsed", "versionMatch", "VERSION_RE", "NEXT_TOKEN", "err", "reason", "formatBranchName", "id", "formatPrTitle", "type", "prefix", "formatRcTitle", "formatJiraName", "displayLabel", "isReleaseBranch", "toTime", "value", "time", "compareReleaseIds", "a", "b", "dates", "timeA", "timeB", "listWorktrees", "cwd", "output", "$", "entries", "current", "line", "getCurrentWorktrees", "type", "process", "matches", "branch", "isReleaseBranch", "entry", "normalizeGitRootStderr", "error", "raw", "extractStderr", "projectRootRemediation", "hasStderr", "isMcpMode", "base", "getProjectRoot", "stderrExcerpt", "OperationError", "getMainRepoRoot", "root", "commonDir", "resolved", "path", "getCurrentBranch", "isWorkingTreeClean", "isInsideLinkedWorktree", "gitDirResult", "commonDirResult", "gitDir", "getRepoName", "projectRoot", "deleteLocalBranch", "deleteRemoteBranch", "INFRA_KIT_CONFIG_FILE", "USER_CONFIG_DIR_NAME", "USER_GLOBAL_CONFIG_FILE", "USER_PROJECTS_DIR", "dopplerEnvManagementSchema", "z", "envManagementSchema", "cursorIdeConfigSchema", "cursorIdeSchema", "zedIdeConfigSchema", "zedIdeSchema", "ideSchema", "idesSchema", "jiraTaskManagerSchema", "taskManagerSchema", "cmuxLayouts", "cmuxConfigSchema", "worktreesConfigSchema", "devAppConfigSchema", "devConfigSchema", "proxySourceSchema", "devPresetAppSchema", "devPresetSchema", "devPresetsSchema", "devProxyConfigSchema", "envAutoLoadSchema", "protectedEnvsSchema", "infraKitConfigObject", "DEFAULT_DEV_PROXY_PORT", "infraKitConfigSchema", "cfg", "ctx", "seen", "entry", "infraKitOverrideConfigSchema", "resolveConfiguredIdes", "config", "ide", "DEFAULT_CMUX_LAYOUT", "resolveCmuxLayout", "cached", "cachedPaths", "pathsCacheKey", "process", "os", "getInfraKitConfigPaths", "key", "projectRoot", "getProjectRoot", "mainRepoRoot", "getMainRepoRoot", "projectName", "path", "userConfigDir", "value", "getInfraKitConfig", "paths", "mainStat", "fs", "legacyYmlPath", "statIfExists", "isMcpMode", "userGlobalStat", "userProjectStat", "mtimes", "shallowEqual", "layers", "merged", "layer", "data", "loadLayer", "finalResult", "resetMergedConfigCache", "resetInfraKitConfigCache", "filePath", "readIfExists", "a", "b", "keys", "k", "raw", "parsedRaw", "err", "isRecord", "buildEnvTokensRejectionMessage", "result"]
-}

package/dist/chunk-TPVXMJ7N.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/tui/safe-stderr.ts"],
-  "sourcesContent": ["import process from 'node:process'\n\n/**\n * The stream Ink renders into \u2014 stderr, with the one escape that can destroy the user's terminal\n * history filtered out.\n *\n * Ink erases the whole terminal whenever a frame overflows the viewport: `renderInteractiveFrame`\n * writes `ansiEscapes.clearTerminal`, which on POSIX is `ESC[2J ESC[3J ESC[H`. The middle one is\n * DECSED 3 \u2014 \"erase saved lines\" \u2014 and it wipes the SCROLLBACK BUFFER, not just the visible region.\n * The session shell puts every command's real output in that scrollback, so a palette frame taller\n * than the window (25 commands vs an 80x24 terminal or a tmux split) would erase the very transcript\n * the shell exists to produce, plus whatever the user had on screen before launching `infra-kit`.\n *\n * Bounding the frame height is NOT a sufficient guard: Ink re-renders on SIGWINCH using the PREVIOUS\n * frame's height against the NEW viewport, so shrinking the window trips the overflow check\n * retroactively, and no window fits a terminal of a handful of rows. So the guard is applied to the\n * bytes instead of the geometry \u2014 `ESC[3J` never reaches the terminal, whatever Ink decides to draw.\n * What survives (`ESC[2J ESC[H`: erase viewport, home cursor) is exactly Ink's intent.\n */\n\n/** DECSED 3 \u2014 \"erase saved lines\". The only escape that can destroy scrollback. */\nconst ERASE_SCROLLBACK = '\\u001B[3J'\n\n/** Drop every scrollback-erasing escape from a frame (split/join: a regex here holds a control char). */\nconst scrub = (chunk: unknown): unknown => {\n  return typeof chunk === 'string' ? chunk.split(ERASE_SCROLLBACK).join('') : chunk\n}\n\n/**\n * Wrap a stream so it can never erase scrollback. Everything except `write` is forwarded to the real\n * stream \u2014 Ink reads `columns`/`rows`/`isTTY` afresh on every frame and subscribes to `'resize'`, so\n * this must be a live view of the stream, not a snapshot of it.\n *\n * @example\n * const written: string[] = []\n * const safe = createSafeStream({ write: (s) => written.push(s) } as unknown as NodeJS.WriteStream)\n * safe.write('\\u001B[2J\\u001B[3J\\u001B[H')\n * written[0] // => '\\u001B[2J\\u001B[H'  (the scrollback-erasing escape is gone)\n */\nexport const createSafeStream = (stream: NodeJS.WriteStream): NodeJS.WriteStream => {\n  return new Proxy(stream, {\n    get(target, property, receiver) {\n      if (property === 'write') {\n        return (chunk: unknown, ...rest: unknown[]): boolean => {\n          return (target.write as (...args: unknown[]) => boolean)(scrub(chunk), ...rest)\n        }\n      }\n\n      const value = Reflect.get(target, property, receiver) as unknown\n\n      // Methods must keep their original `this` (an EventEmitter bound to the proxy would register\n      // listeners on the wrong object), so bind them back to the real stream.\n      return typeof value === 'function' ? value.bind(target) : value\n    },\n  })\n}\n\n/** Ink's render target for the whole CLI: stderr, minus the scrollback-erasing escape. */\nexport const safeStderr = (): NodeJS.WriteStream => {\n  return createSafeStream(process.stderr as unknown as NodeJS.WriteStream)\n}\n"],
-  "mappings": "AAAA,OAAOA,MAAa,eAqBpB,IAAMC,EAAmB,UAGnBC,EAASC,GACN,OAAOA,GAAU,SAAWA,EAAM,MAAMF,CAAgB,EAAE,KAAK,EAAE,EAAIE,EAcjEC,EAAoBC,GACxB,IAAI,MAAMA,EAAQ,CACvB,IAAIC,EAAQC,EAAUC,EAAU,CAC9B,GAAID,IAAa,QACf,MAAO,CAACJ,KAAmBM,IACjBH,EAAO,MAA0CJ,EAAMC,CAAK,EAAG,GAAGM,CAAI,EAIlF,IAAMC,EAAQ,QAAQ,IAAIJ,EAAQC,EAAUC,CAAQ,EAIpD,OAAO,OAAOE,GAAU,WAAaA,EAAM,KAAKJ,CAAM,EAAII,CAC5D,CACF,CAAC,EAIUC,EAAa,IACjBP,EAAiBJ,EAAQ,MAAuC",
-  "names": ["process", "ERASE_SCROLLBACK", "scrub", "chunk", "createSafeStream", "stream", "target", "property", "receiver", "rest", "value", "safeStderr"]
-}

package/dist/chunk-X46DP23W.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/prompts/stdin-ref.ts"],
-  "sourcesContent": ["import process from 'node:process'\n\n/**\n * Who is holding `process.stdin` open, and therefore whether node may exit.\n *\n * THE PROBLEM THIS SOLVES \u2014 Ink `unref()`s stdin when it drops raw mode on teardown\n * (ink/build/components/App.js:137), and `ref()`s it again when it arms raw mode\n * (App.js:225). That is correct and self-balancing FOR INK. But an `@inquirer/*` prompt\n * refs nothing: opened after an Ink screen has torn down, it reads a stdin that is still\n * unref'd, so once the command's other work settles the event loop drains MID-PROMPT and\n * node exits 13 with the question still on screen. (Verified: an Ink teardown followed by\n * a bare `confirm()` exits 13; the same flow with a `ref()` before the prompt completes\n * normally.) The old fix re-ref'd stdin after EVERY Ink render (tui/boot.tsx), which\n * bought the prompt its handle and cost the session shell its exit \u2014 a ref'd tty\n * ReadStream holds the loop open whether or not anything is listening to it.\n *\n * THE RULE \u2014 stdin is ref'd exactly while an in-process reader intends to read it. Ink\n * asserts that for itself; `withEscape` asserts it for every inquirer prompt by acquiring\n * here. Nobody else may touch `process.stdin.ref` / `.unref`.\n *\n * WHY A COUNTER AND NOT A BOOLEAN \u2014 `ref()`/`unref()` on a tty `ReadStream` is a sticky\n * flag, not a counter: last writer wins, process-wide. So nested readers (the dev wizard\n * runs ~5 prompts back to back, and `release-create` nests) need us to remember how many\n * are live, or the FIRST one to finish would unref a handle the outer one is still\n * reading from.\n *\n * BOUNDARY \u2014 no Ink render may happen inside a `withEscape` callback. Ink's teardown\n * `unref()`s unconditionally, clobbering an outer reader's ref while this counter still\n * says someone is reading; the counter cannot stop it, because `unref` is not a hook\n * point. Nothing STRUCTURALLY enforces this today (the sweep in\n * `__tests__/every-inquirer-site-is-escapable.test.ts` proves prompts sit inside\n * `withEscape` \u2014 a different claim, and it would not catch an Ink screen rendered there).\n * It holds by construction: every `withEscape` callback in the tree contains an\n * `@inquirer/*` call and nothing else. `tui/boot.tsx` re-asserts the ref whenever this\n * counter reports a live reader, which makes a future violation survivable rather than a\n * silent exit 13 \u2014 but it is a net, not a fence.\n *\n * Process-wide state is correct here and is NOT shared across the session shell's spawn\n * boundary: the parent and each spawned child are separate processes with separate\n * counters (lib/session/run-session.ts:152).\n */\nlet readers = 0\n\n/**\n * Register a reader and ref stdin if it is the first. Pair with {@link releaseStdin} in a\n * `finally`, or node will never exit.\n *\n * @example\n * acquireStdin() // => stdin ref'd on 0 -> 1\n */\nexport const acquireStdin = (): void => {\n  readers += 1\n\n  if (readers === 1) process.stdin.ref()\n}\n\n/**\n * Drop a reader and unref stdin once the last one leaves, letting node exit naturally.\n *\n * Clamped at zero rather than trusting callers: a release without a matching acquire\n * would otherwise drive the count negative and silently disarm the next `acquireStdin`\n * (`readers === 1` would never hold again), turning this guard into the bug it prevents.\n *\n * @example\n * releaseStdin() // => stdin unref'd on 1 -> 0\n */\nexport const releaseStdin = (): void => {\n  if (readers === 0) return\n\n  readers -= 1\n\n  if (readers === 0) process.stdin.unref()\n}\n\n/**\n * How many in-process readers currently intend to read stdin. Consulted by `tui/boot.tsx`\n * to decide whether Ink's teardown `unref()` just clobbered somebody.\n *\n * @example\n * stdinReaderCount() // => 0 when no prompt is open\n */\nexport const stdinReaderCount = (): number => {\n  return readers\n}\n"],
-  "mappings": "AAAA,OAAOA,MAAa,eAyCpB,IAAIC,EAAU,EASDC,EAAe,IAAY,CACtCD,GAAW,EAEPA,IAAY,GAAGD,EAAQ,MAAM,IAAI,CACvC,EAYaG,EAAe,IAAY,CAClCF,IAAY,IAEhBA,GAAW,EAEPA,IAAY,GAAGD,EAAQ,MAAM,MAAM,EACzC,EASaI,EAAmB,IACvBH",
-  "names": ["process", "readers", "acquireStdin", "releaseStdin", "stdinReaderCount"]
-}

package/dist/chunk-YDW6324A.js.map

@@ -1,7 +0,0 @@
-{
-  "version": 3,
-  "sources": ["../src/lib/install-manager/install-manager.ts", "../src/lib/install-manager/safe-realpath.ts", "../src/lib/install-manager/npm-root.ts", "../src/lib/update-check/run-update-check.ts", "../src/lib/update-check/lock.ts", "../src/lib/update-check/registry.ts", "../src/lib/update-check/semver.ts", "../src/lib/update-check/update-cache.ts"],
-  "sourcesContent": ["/**\n * Pure detection of *how* this CLI was installed, so a self-update advisory can name the one command\n * that will actually work. No fs, no spawn, no `process.env` read \u2014 every input is injected, which is\n * what lets the whole matrix be table-tested.\n *\n * Detection is env-first and LAZY: the only signal that costs a subprocess (`npm root -g`) is passed in\n * as `lazyNpmRoot` and consulted solely when every cheaper matcher has missed.\n */\nimport path from 'node:path'\n\n/** The published package this CLI updates itself to. Single source for every suggested argv. */\nexport const PACKAGE_NAME = 'infra-kit'\n\nconst LATEST = `${PACKAGE_NAME}@latest`\n\nexport type InstallManager = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'volta' | 'homebrew' | 'unknown'\n\nexport interface InstallManagerInfo {\n  manager: InstallManager\n  /** The command to run. Only safe to spawn ourselves when `canSelfSpawn`; otherwise print it. */\n  updateCommand: string[]\n  /** False when we must not run the command for the user \u2014 either it needs sudo/a tap, or we guessed. */\n  canSelfSpawn: boolean\n}\n\n/**\n * Canonicalises a candidate *root* directory. Required, not optional: `selfRealPath` has already had its\n * symlinks followed, so comparing it against a raw `PNPM_HOME`/`npm root -g`/`cwd` compares a resolved\n * path to an unresolved one and silently never matches. macOS is the everyday proof \u2014 `/var` is a symlink\n * to `/private/var`, so a global install under `/var/...` reports `unknown` unless both sides are resolved.\n * Callers inject the real thing; tests inject a stub.\n */\nexport type RealpathFn = (dir: string) => string\n\nexport interface DetectInstallManagerInput {\n  /** Fully-resolved (symlinks followed) path to this CLI's entry file. */\n  selfRealPath: string\n  env: NodeJS.ProcessEnv\n  /** Canonicalises each candidate root before comparison. See {@link RealpathFn}. */\n  realpath: RealpathFn\n  /** `npm root -g`, deferred: invoked at most once, and only when no cheaper matcher hit. */\n  lazyNpmRoot?: () => string | undefined\n}\n\n/**\n * Is `child` inside the `parent` subtree? Boundary-aware: a naive `startsWith` would call\n * `/Users/x/pnpm-ish` a child of `/Users/x/pnpm`. `parent` is canonicalised first because it arrives raw\n * from the environment while `child` is already a realpath.\n */\nconst isWithin = (parent: string, child: string, realpath: RealpathFn): boolean => {\n  const rel = path.relative(realpath(path.resolve(parent)), path.resolve(child))\n\n  return rel !== '' && !rel.startsWith('..') && !path.isAbsolute(rel)\n}\n\n/** Does `p` contain `name` as a whole path SEGMENT? `/a/node_modules_backup/b` must not match `node_modules`. */\nconst hasSegment = (p: string, name: string): boolean => {\n  return path.resolve(p).split(path.sep).includes(name)\n}\n\n/**\n * Is `p` inside a Homebrew keg belonging to the `name` FORMULA \u2014 i.e. `.../Cellar/<name>/<version>/...`?\n *\n * The formula name is what makes this sound. A bare `Cellar` segment says only \"somewhere under a keg\",\n * and the keg it lands in is routinely someone else's: when npm's global prefix is a node keg\n * (`npm config set prefix \"$(brew --prefix node)\"`, or any keg-only `node@X`), an `npm i -g` package\n * installs to `Cellar/node/<v>/lib/node_modules/<pkg>/...` \u2014 brew has never heard of it, yet the segment\n * is right there. Requiring `<name>` to sit directly after `Cellar` is what separates \"brew installed\n * THIS\" from \"brew installed the runtime that installed this\".\n *\n * Works for both keg layouts, since each is rooted at the formula: a plain formula\n * (`Cellar/infra-kit/1.2.3/bin/infra-kit`) and brew's node-CLI layout\n * (`Cellar/infra-kit/1.2.3/libexec/lib/node_modules/infra-kit/dist/cli.js`). Do NOT try to tell them\n * apart by excluding `node_modules` \u2014 the second one contains it.\n */\nconst isBrewKegOf = (p: string, name: string): boolean => {\n  const segments = path.resolve(p).split(path.sep)\n  const cellar = segments.indexOf('Cellar')\n\n  return cellar !== -1 && segments[cellar + 1] === name\n}\n\n/**\n * The npm global prefix that owns `selfRealPath`, derived from the path ITSELF, or null when the layout is\n * not an npm global one.\n *\n * This is the one signal that cannot point at the wrong tree. Everything else in this module answers\n * \"is this file somewhere inside tool X's directory?\", and containment is not ownership:\n *   - `npm root -g` answers for whichever `npm` is first on PATH, which is routinely a DIFFERENT node than\n *     the one that installed us (a pnpm/nvm/fnm-managed node, or a node that has since been removed). It\n *     then reports a root that does not contain us, every matcher misses, and detection degrades to\n *     `unknown` \u2014 a notice printed forever, on the single most common install method. That is the bug this\n *     exists to close.\n *   - `PNPM_HOME` containment is satisfied by `<PNPM_HOME>/nodejs/<v>/lib/node_modules/<pkg>` (a plain\n *     `npm i -g` under a pnpm-managed node), yet `pnpm add -g` installs to `<PNPM_HOME>/global/<v>/...` \u2014\n *     a different directory. That one is worse than a missed update: the install \"succeeds\" while the\n *     binary on PATH stays old, silently, with no notice to show for it.\n *\n * `<prefix>/lib/node_modules/<PACKAGE_NAME>` is npm's global layout and no other manager's, so requiring\n * BOTH the `lib` parent and our package as the immediate child is what makes it proof rather than a hint.\n * The `lib` requirement is also what keeps a project-local `<repo>/node_modules/<pkg>` out (it has no\n * `lib`), and nesting cannot spoof it: `.../node_modules/foo/node_modules/<pkg>` fails the `lib` test.\n *\n * Windows global npm has no `lib` segment (`%APPDATA%\\npm\\node_modules`), so this returns null there and\n * detection falls through to `npm root -g` \u2014 which is correct on Windows, where there is normally one npm.\n */\nconst npmPrefixFromSelfPath = (selfRealPath: string): string | null => {\n  const segments = path.resolve(selfRealPath).split(path.sep)\n  const nodeModules = segments.lastIndexOf('node_modules')\n\n  if (nodeModules < 2) return null\n  if (segments[nodeModules - 1] !== 'lib') return null\n  if (segments[nodeModules + 1] !== PACKAGE_NAME) return null\n\n  // Drop `lib/node_modules/...`; the empty result of a root-level prefix (`/lib/node_modules/...`) is `/`.\n  return segments.slice(0, nodeModules - 1).join(path.sep) || path.sep\n}\n\n/**\n * `--prefix` is passed EXPLICITLY rather than trusting the ambient one: the whole point of deriving it is\n * that the `npm` we are about to run may default to a different prefix than the one we are installed in.\n * A command-line flag outranks both `npm_config_prefix` and any `.npmrc`, so this targets the tree we\n * actually run from. With `-g`, npm writes `<prefix>/lib/node_modules` and links bins into `<prefix>/bin`.\n */\nconst npmPrefixInstallCommand = (prefix: string): string[] => {\n  return ['npm', 'install', '-g', '--prefix', prefix, LATEST]\n}\n\n/**\n * Render argv as a line the user can paste into a shell.\n *\n * A plain `join(' ')` was fine while every token came from a static table; `--prefix <path>` puts a\n * filesystem path in argv, and `/Users/Ada Lovelace/.nvm/...` pasted unquoted is two arguments and a\n * failed install. Single quotes are sound here without escaping because the callers' validation rejects a\n * token containing a quote \u2014 see `SAFE_COMMAND_TOKEN` in src/lib/update-check/auto-update.ts.\n *\n * @example\n * formatUpdateCommand(['npm', 'install', '-g', '--prefix', '/opt/x y', 'infra-kit@latest'])\n * // => \"npm install -g --prefix '/opt/x y' infra-kit@latest\"\n */\nexport const formatUpdateCommand = (command: string[]): string => {\n  return command\n    .map((token) => {\n      return token.includes(' ') ? `'${token}'` : token\n    })\n    .join(' ')\n}\n\n/** `env[key]` names a directory that contains `selfRealPath`. Absent/empty env var \u2192 no match. */\nconst underEnvDir = (env: NodeJS.ProcessEnv, key: string, selfRealPath: string, realpath: RealpathFn): boolean => {\n  const dir = env[key]\n\n  return dir != null && dir !== '' && isWithin(dir, selfRealPath, realpath)\n}\n\ninterface Matcher extends Omit<InstallManagerInfo, 'manager'> {\n  manager: InstallManager\n  test: (input: Required<Pick<DetectInstallManagerInput, 'selfRealPath' | 'env' | 'realpath'>>) => boolean\n}\n\n/**\n * Consulted FIRST, before {@link npmPrefixFromSelfPath}. Both of these legitimately wrap an npm-shaped\n * `lib/node_modules` tree \u2014 volta at `~/.volta/tools/image/node/<v>/lib/node_modules`, brew at\n * `Cellar/<pkg>/<v>/libexec/lib/node_modules` \u2014 so deriving an npm prefix from the path would hijack\n * installs that a wrapper owns and must keep owning.\n */\nconst WRAPPER_MATCHERS: Matcher[] = [\n  {\n    manager: 'volta',\n    // volta owns the shim; `volta install` is the correct tool, not a workaround \u2014 so we may run it.\n    test: ({ selfRealPath, env, realpath }) => {\n      return (\n        underEnvDir(env, 'VOLTA_HOME', selfRealPath, realpath) ||\n        hasSegment(selfRealPath, '.volta') ||\n        hasSegment(selfRealPath, 'volta')\n      )\n    },\n    updateCommand: ['volta', 'install', PACKAGE_NAME],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'homebrew',\n    // `brew upgrade` can touch the prefix, relink, and prompt \u2014 never ours to run unattended.\n    //\n    // Our own keg is the ONLY sound signal \u2014 see {@link isBrewKegOf}. Two broader tests look plausible\n    // and are both wrong, because each answers \"did brew put something here?\" when the question is \"does\n    // brew own THIS package?\":\n    //   - `HOMEBREW_PREFIX` containment: when node comes from brew, npm's global prefix IS\n    //     $HOMEBREW_PREFIX, so EVERY `npm i -g` package lands under it, unknown to brew.\n    //   - a bare `Cellar` segment: an npm prefix pointed at a node keg puts packages inside that keg.\n    // Either misfire tells macOS users to run `brew upgrade infra-kit` \u2014 a formula that does not exist \u2014\n    // and, far worse, makes the background auto-updater bail with `cannot-self-spawn` forever, so the\n    // very fix for it can never reach them. Detection runs on the realpath, and a linked brew bin always\n    // resolves into its own keg, so the narrow test has no false negatives to trade for this.\n    test: ({ selfRealPath }) => {\n      return isBrewKegOf(selfRealPath, PACKAGE_NAME)\n    },\n    updateCommand: ['brew', 'upgrade', PACKAGE_NAME],\n    canSelfSpawn: false,\n  },\n]\n\n/**\n * Consulted LAST, after {@link npmPrefixFromSelfPath} has had its say. Each of these proves only that we\n * live somewhere inside a tool's directory tree, which is weaker than knowing the layout npm itself\n * created \u2014 see the `PNPM_HOME`/`nodejs` case in that helper's doc for a containment hit whose install\n * command targets the wrong directory.\n */\nconst TREE_MATCHERS: Matcher[] = [\n  {\n    manager: 'pnpm',\n    test: ({ selfRealPath, env, realpath }) => {\n      return (\n        underEnvDir(env, 'PNPM_HOME', selfRealPath, realpath) ||\n        (hasSegment(selfRealPath, 'pnpm') && hasSegment(selfRealPath, 'global'))\n      )\n    },\n    updateCommand: ['pnpm', 'add', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'bun',\n    test: ({ selfRealPath, env, realpath }) => {\n      return underEnvDir(env, 'BUN_INSTALL', selfRealPath, realpath) || hasSegment(selfRealPath, '.bun')\n    },\n    updateCommand: ['bun', 'add', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'yarn',\n    test: ({ selfRealPath }) => {\n      return (\n        hasSegment(selfRealPath, '.yarn') || (hasSegment(selfRealPath, 'yarn') && hasSegment(selfRealPath, 'global'))\n      )\n    },\n    updateCommand: ['yarn', 'global', 'add', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'npm',\n    test: ({ selfRealPath, env, realpath }) => {\n      return underEnvDir(env, 'npm_config_prefix', selfRealPath, realpath)\n    },\n    updateCommand: ['npm', 'install', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n]\n\nconst NPM_UPDATE_COMMAND = ['npm', 'install', '-g', LATEST]\n\n/**\n * Identify the package manager that owns `selfRealPath`.\n *\n * Order, and why it is this one: wrappers that own an npm-shaped tree (volta, brew) first, then the npm\n * prefix DERIVED from our own path, then the env/path containment matchers, then the `npm root -g` probe.\n * The derived prefix sits above containment because it is the only signal that cannot name a directory we\n * do not live in \u2014 see {@link npmPrefixFromSelfPath}.\n *\n * `lazyNpmRoot` is the last resort and is invoked at most once, only after every matcher has missed \u2014 a\n * pnpm or volta install never pays for the subprocess, and neither does any npm global install in the\n * standard layout, which the derived prefix now settles for free. When nothing matches we report `unknown`\n * with an npm command that is a *suggestion only* (`canSelfSpawn: false`): running a guessed global\n * install is worse than printing one.\n *\n * @example\n * detectInstallManager({ selfRealPath: '/Users/x/Library/pnpm/global/5/node_modules/infra-kit/dist/cli.js', env: {} })\n * // => { manager: 'pnpm', updateCommand: ['pnpm', 'add', '-g', 'infra-kit@latest'], canSelfSpawn: true }\n */\nexport const detectInstallManager = (input: DetectInstallManagerInput): InstallManagerInfo => {\n  const { selfRealPath, env, realpath, lazyNpmRoot } = input\n  const toInfo = (hit: Matcher): InstallManagerInfo => {\n    return { manager: hit.manager, updateCommand: hit.updateCommand, canSelfSpawn: hit.canSelfSpawn }\n  }\n  const matches = ({ test }: Matcher): boolean => {\n    return test({ selfRealPath, env, realpath })\n  }\n\n  const wrapper = WRAPPER_MATCHERS.find(matches)\n\n  if (wrapper) return toInfo(wrapper)\n\n  const derivedPrefix = npmPrefixFromSelfPath(selfRealPath)\n\n  if (derivedPrefix !== null) {\n    return { manager: 'npm', updateCommand: npmPrefixInstallCommand(derivedPrefix), canSelfSpawn: true }\n  }\n\n  const tree = TREE_MATCHERS.find(matches)\n\n  if (tree) return toInfo(tree)\n\n  const npmRoot = lazyNpmRoot?.()\n\n  if (npmRoot != null && npmRoot !== '' && isWithin(npmRoot, selfRealPath, realpath)) {\n    return { manager: 'npm', updateCommand: NPM_UPDATE_COMMAND, canSelfSpawn: true }\n  }\n\n  return { manager: 'unknown', updateCommand: NPM_UPDATE_COMMAND, canSelfSpawn: false }\n}\n\n/**\n * Is this CLI running from a *project-local* `node_modules` (as opposed to a global root)?\n *\n * The cwd clause is what does the distinguishing \u2014 BOTH a project install and a global root contain a\n * `/node_modules/` segment (`pnpm root -g` is `~/Library/pnpm/global/5/node_modules`). Without it we\n * would nag every global pnpm user to stop using a local install they do not have.\n *\n * Accepted false-negative: invoked from a subdirectory (cwd `project/apps/x`, deps at\n * `project/node_modules`) this returns false and the advisory stays silent. Under-warning is the safe\n * direction for a best-effort, never-throwing advisory \u2014 do not \"fix\" it by dropping the cwd clause.\n *\n * `cwd` is canonicalised before comparison for the same reason `detectInstallManager` canonicalises its\n * roots: `selfRealPath` is a realpath, and comparing it to an unresolved cwd never matches.\n *\n * @example\n * isLocalNodeModulesInstall('/repo/node_modules/infra-kit/dist/cli.js', '/repo', (p) => p) // => true\n */\nexport const isLocalNodeModulesInstall = (selfRealPath: string, cwd: string, realpath: RealpathFn): boolean => {\n  return hasSegment(selfRealPath, 'node_modules') && isWithin(cwd, selfRealPath, realpath)\n}\n", "import { realpathSync } from 'node:fs'\nimport path from 'node:path'\n\n/**\n * The impure companion to the pure detection module: canonicalise a directory that may not exist.\n *\n * `realpathSync` throws on a missing path, and candidate roots routinely miss \u2014 `PNPM_HOME` can point at a\n * directory the user never created, `npm root -g` can name a prefix that was removed. A throw there would\n * turn \"we could not identify your install\" into a crash, so an unresolvable path falls back to\n * `path.resolve`, which still normalises `.`/`..` and yields a usable, non-matching absolute path.\n */\nexport const safeRealpath = (dir: string): string => {\n  try {\n    return realpathSync(dir)\n  } catch {\n    return path.resolve(dir)\n  }\n}\n", "/* eslint-disable sonarjs/no-os-command-from-path */\n/**\n * `npm root -g`, the LAZY fallback for {@link detectInstallManager}.\n *\n * Why it is indispensable: the `npm` matcher keys off `npm_config_prefix`, which npm sets only while npm\n * itself is running. A user who ran `npm i -g infra-kit` months ago and now types `ik` has no such var,\n * so every cheap matcher misses and detection reports `unknown` / `canSelfSpawn: false`. Without this\n * probe the single most common install method can never update itself.\n *\n * Shared by `self-update` (interactive) and the background update worker so the two can never disagree\n * about who owns the install.\n */\nimport { execFileSync } from 'node:child_process'\nimport process from 'node:process'\n\nconst NPM_ROOT_TIMEOUT_MS = 3_000\n\n/**\n * The global npm root, or undefined when npm is absent, slow, or errors. Costs a subprocess, so\n * `detectInstallManager` invokes it at most once and only after every env/path matcher has missed \u2014 a\n * pnpm or volta install never pays for it.\n *\n * Resolving the user's `npm` from PATH is inherent here: we must ask the very package manager that owns\n * this install where its global root is. Pinning an absolute path would defeat the detection.\n *\n * @example\n * defaultLazyNpmRoot() // => '/usr/local/lib/node_modules' | undefined\n */\nexport const defaultLazyNpmRoot = (): string | undefined => {\n  try {\n    const out = execFileSync('npm', ['root', '-g'], {\n      encoding: 'utf-8',\n      timeout: NPM_ROOT_TIMEOUT_MS,\n      stdio: ['ignore', 'pipe', 'ignore'],\n      shell: process.platform === 'win32',\n    })\n    const trimmed = out.trim()\n\n    return trimmed === '' ? undefined : trimmed\n  } catch {\n    return undefined\n  }\n}\n", "/**\n * The CHILD half of the auto-update, spawned detached by `maybeAutoUpdate`. It outlives the CLI\n * invocation that started it, so it may take its time and it may replace the binary.\n *\n * WHY IT WAITS FOR THE PARENT TO EXIT \u2014 the load-bearing invariant of this whole feature:\n * `scripts/build.js` sets esbuild `splitting: true`, so `dist/cli.js` lazily imports sibling\n * `chunk-*.js` files at runtime (that is how the Ink TUI stays off the fast path). A package manager\n * installing over `dist/` mid-command deletes chunks the parent has not imported yet, and the parent\n * dies on a dynamic import of a file that no longer exists. Waiting for the parent to exit is what\n * makes a silent background install safe rather than a random crash under `infra-kit dev`.\n */\nimport { spawnSync } from 'node:child_process'\nimport { homedir } from 'node:os'\nimport process from 'node:process'\n\nimport { defaultLazyNpmRoot, detectInstallManager, safeRealpath } from 'src/lib/install-manager'\nimport { packageManagerInstallEnv } from 'src/lib/pm-env'\n\nimport { acquireUpdateLock } from './lock'\nimport { fetchLatestVersion } from './registry'\nimport { isNewerVersion } from './semver'\nimport { writeUpdateCache } from './update-cache'\nimport type { UpdateCache } from './update-cache'\n\n/** How often to re-check whether the parent is gone. */\nexport const PARENT_POLL_INTERVAL_MS = 200\n\n/**\n * Give up waiting after this long. A long-lived parent (`infra-kit dev` runs for hours) must not leave\n * an immortal child pinned to a stale version: we simply skip this cycle. `lastCheckMs` is already\n * persisted by then, so the next short-lived command re-checks after the normal throttle window.\n */\nexport const PARENT_WAIT_TIMEOUT_MS = 5 * 60 * 1000\n\nexport interface RunUpdateCheckDeps {\n  env?: NodeJS.ProcessEnv\n  nowMs?: number\n  fetchLatest?: (env: NodeJS.ProcessEnv) => Promise<string | null>\n  writeCache?: typeof writeUpdateCache\n  isProcessAlive?: (pid: number) => boolean\n  sleep?: (ms: number) => Promise<void>\n  /** Monotonic-ish source for the parent-wait deadline. Injected so the timeout is testable without real time. */\n  clock?: () => number\n  /** `npm root -g` probe. Defaults to the real subprocess; this child is detached, so it can afford one. */\n  lazyNpmRoot?: () => string | undefined\n  /** Single-flight guard. Returns a release fn, or null when another worker already holds the lock. */\n  acquireLock?: () => (() => void) | null\n  spawnSync?: typeof spawnSync\n  /** Realpath of the installed `dist/cli.js`, used to identify the owning package manager. */\n  selfRealPath: string\n  parentPid?: number\n}\n\n/** Signal 0 performs the permission/existence check without delivering anything. */\nconst defaultIsProcessAlive = (pid: number): boolean => {\n  try {\n    process.kill(pid, 0)\n\n    return true\n  } catch {\n    return false\n  }\n}\n\nconst defaultSleep = (ms: number): Promise<void> => {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms)\n  })\n}\n\n/**\n * Block until `parentPid` exits or {@link PARENT_WAIT_TIMEOUT_MS} elapses. Returns whether the parent\n * is actually gone \u2014 the caller must not install on a timeout.\n */\nconst waitForParentExit = async (\n  parentPid: number,\n  deps: Required<Pick<RunUpdateCheckDeps, 'isProcessAlive' | 'sleep' | 'clock'>>,\n): Promise<boolean> => {\n  const deadline = deps.clock() + PARENT_WAIT_TIMEOUT_MS\n\n  while (deps.clock() < deadline) {\n    if (!deps.isProcessAlive(parentPid)) return true\n\n    await deps.sleep(PARENT_POLL_INTERVAL_MS)\n  }\n\n  return !deps.isProcessAlive(parentPid)\n}\n\nexport type UpdateCheckOutcome =\n  | 'installed'\n  | 'install-failed'\n  | 'up-to-date'\n  | 'fetch-failed'\n  | 'cannot-self-spawn'\n  | 'parent-still-running'\n  | 'parent-unknown'\n  | 'already-running'\n\n/**\n * Fetch, decide, and (when safe) install \u2014 returning WHY it did what it did so tests can distinguish\n * \"no update\" from \"could not install\". Never throws.\n *\n * `lastCheckMs` is written from the ATTEMPT, before any early return. If it were written only on\n * success, an offline user would re-spawn a doomed child on every single command.\n *\n * @example\n * await runUpdateCheck('0.1.130', { selfRealPath: '/usr/local/lib/node_modules/infra-kit/dist/cli.js' })\n * // => 'installed'\n */\nexport const runUpdateCheck = async (currentVersion: string, deps: RunUpdateCheckDeps): Promise<UpdateCheckOutcome> => {\n  const acquireLock = deps.acquireLock ?? acquireUpdateLock\n\n  // Single-flight. N shells launched at once all read the same stale cache and each spawns a worker;\n  // the cache throttle cannot stop them because it is only written after the fetch returns. Without\n  // this, a pending update means N concurrent `npm install -g` over one global directory.\n  const release = acquireLock()\n\n  if (!release) return 'already-running'\n\n  try {\n    return await runUpdateCheckLocked(currentVersion, deps)\n  } finally {\n    release()\n  }\n}\n\nconst runUpdateCheckLocked = async (currentVersion: string, deps: RunUpdateCheckDeps): Promise<UpdateCheckOutcome> => {\n  const env = deps.env ?? process.env\n  const nowMs = deps.nowMs ?? Date.now()\n  const fetchLatest = deps.fetchLatest ?? fetchLatestVersion\n  const writeCache = deps.writeCache ?? writeUpdateCache\n  const isProcessAlive = deps.isProcessAlive ?? defaultIsProcessAlive\n  const sleep = deps.sleep ?? defaultSleep\n  const clock = deps.clock ?? Date.now\n  const lazyNpmRoot = deps.lazyNpmRoot ?? defaultLazyNpmRoot\n  const spawn = deps.spawnSync ?? spawnSync\n\n  const latestVersion = await fetchLatest(env)\n\n  // Every path below writes the cache EXACTLY once, and always with `lastCheckMs: nowMs` \u2014 the throttle\n  // burns on the ATTEMPT, never on success. If it burned only on success, an offline user would respawn\n  // a doomed child on every command.\n  const finish = (\n    outcome: UpdateCheckOutcome,\n    cache: Omit<UpdateCache, 'lastCheckMs' | 'outcome'>,\n  ): UpdateCheckOutcome => {\n    // `outcome` is recorded on EVERY write: it is what lets a reader (human or `isStale`) tell a settled\n    // `installed`/`up-to-date` from a transient `fetch-failed`, all of which otherwise write an identical\n    // `{latestVersion:null}`. See `UpdateCache.outcome`.\n    writeCache({ lastCheckMs: nowMs, ...cache, outcome })\n\n    return outcome\n  }\n\n  if (latestVersion === null) return finish('fetch-failed', { latestVersion: null, updateCommand: null })\n  if (!isNewerVersion(latestVersion, currentVersion))\n    return finish('up-to-date', { latestVersion, updateCommand: null })\n\n  // `lazyNpmRoot` is what makes the COMMON case work: a plain `npm i -g infra-kit` leaves no\n  // `npm_config_prefix` in the user's shell, so every cheap matcher misses and detection would report\n  // `unknown` / `canSelfSpawn: false`. Without this probe the auto-update would silently degrade to a\n  // notice for the majority of installs. The subprocess is affordable here and nowhere else.\n  const { canSelfSpawn, updateCommand } = detectInstallManager({\n    selfRealPath: deps.selfRealPath,\n    env,\n    realpath: safeRealpath,\n    lazyNpmRoot,\n  })\n\n  // Homebrew relinks its prefix and may prompt; an unknown location means the command is a guess.\n  // Both stay the user's call, so record the command for `maybeAutoUpdate` to print next invocation.\n  if (!canSelfSpawn) return finish('cannot-self-spawn', { latestVersion, updateCommand })\n\n  // Fail SAFE. Without a parent to outlive we cannot know whether a live CLI is still lazily importing\n  // `chunk-*.js` out of the `dist/` we are about to replace, so we skip the cycle rather than install\n  // blind. The real spawn always passes `--parent-pid`; only a hand-run worker lands here.\n  if (deps.parentPid == null) return finish('parent-unknown', { latestVersion, updateCommand: null })\n\n  // Burn the throttle NOW, before the two unbounded-ish operations below (a 5-minute parent wait, then an\n  // install of no fixed duration). Everything after this point can take many minutes, and until the cache\n  // is written it still reads as STALE \u2014 so every new shell in that window spawns its own worker, and the\n  // single-flight lock becomes the only thing standing between them and concurrent `npm install -g` runs\n  // over one global directory. The lock is reaped by mtime (LOCK_STALE_MS), so a slow enough install has\n  // its live lock stolen and we get exactly the pile-up the lock exists to prevent.\n  //\n  // Writing the stamp here makes the throttle \u2014 not the lock \u2014 the primary guard, which is what the cache\n  // was always for. `finish()` overwrites this with the real outcome; this is the only path that writes\n  // the cache twice, and deliberately so.\n  //\n  // `outcome: 'installing'` marks a mid-install checkpoint: if the worker is killed here (machine sleeps,\n  // SIGKILL) and never reaches `finish()`, this stamp is what the next run reads, and the cache says so\n  // rather than looking like a settled result. It does not shorten the next window \u2014 see CHECK_INTERVAL_MS.\n  writeCache({ lastCheckMs: nowMs, latestVersion, updateCommand: null, outcome: 'installing' })\n\n  const parentGone = await waitForParentExit(deps.parentPid, { isProcessAlive, sleep, clock })\n\n  // A long-lived parent (`infra-kit dev`) outlasted the wait. Stay silent and retry next window.\n  if (!parentGone) return finish('parent-still-running', { latestVersion, updateCommand: null })\n\n  // `shell` on win32 so the `.cmd` shims npm/pnpm/yarn ship as global bins resolve.\n  //\n  // `packageManagerInstallEnv` strips the inherited npx/dlx markers \u2014 which otherwise make\n  // pnpm/portless-style tools believe they were invoked via `npx`/`dlx` and refuse to run \u2014 while KEEPING\n  // `npm_config_prefix` and `npm_config_registry`. Using the blunt `withoutPackageManagerEnv` here was a\n  // bug: it also erased the prefix that `detectInstallManager` had just matched on, so we would detect a\n  // global install at prefix P and then install into the default prefix instead \u2014 silently, forever. See\n  // the module doc on `packageManagerInstallEnv`.\n  //\n  // `cwd` is pinned to the home directory, and this is a SECURITY control, not tidiness: npm resolves\n  // `registry=` from an `.npmrc` on disk relative to the cwd. Inheriting the caller's cwd would let any\n  // repo containing a hostile `.npmrc` silently redirect this unattended `install -g` to an attacker's\n  // registry, executing its lifecycle scripts. Stripping `npm_config_registry` from the env does NOT\n  // close that hole, because the redirect lives in a file, not the environment.\n  const result = spawn(updateCommand[0] as string, updateCommand.slice(1), {\n    stdio: 'ignore',\n    shell: process.platform === 'win32',\n    cwd: homedir(),\n    env: packageManagerInstallEnv(env),\n    windowsHide: true,\n  })\n\n  // Record the manual command so a persistently failing silent install (EACCES on a root-owned global\n  // dir, say) still surfaces ONE actionable line, instead of failing invisibly forever.\n  if (result.error || result.signal || result.status !== 0) {\n    return finish('install-failed', { latestVersion, updateCommand })\n  }\n\n  // The installed version is now `latestVersion`; clear it so the next run does not re-notify.\n  return finish('installed', { latestVersion: null, updateCommand: null })\n}\n", "/**\n * Single-flight lock for the background update worker.\n *\n * Without it, N shells starting at once all read the same stale cache and each spawns a worker \u2014 and\n * once a newer version exists, each of those runs `npm install -g` concurrently, over the same global\n * directory. (Measured: five concurrent `ik` invocations spawn five workers.) The throttle in the cache\n * cannot prevent this: it is only written AFTER the fetch returns, long after the other workers launched.\n *\n * `openSync(path, 'wx')` is the primitive \u2014 an atomic create-if-absent, so exactly one worker wins even\n * if all of them call it in the same millisecond.\n */\nimport fs from 'node:fs'\nimport path from 'node:path'\nimport process from 'node:process'\n\nimport { getCacheRoot } from 'src/lib/constants'\n\nexport const LOCK_FILE_NAME = 'update-check.lock'\n\n/**\n * A lock older than this is assumed to belong to a worker that was killed before it could clean up.\n *\n * Must exceed the worker's ENTIRE critical section, and the install is part of it: the lock is held across\n * `fetch` (\u22642.5s) + the parent wait (\u22645min) + `npm install -g`, which has no bound at all \u2014 a cold cache on\n * a slow link can run for many minutes. The previous 10 minutes was budgeted from the wait and the fetch\n * alone, silently omitting the very operation the lock exists to serialise. A slow enough install therefore\n * had its own LIVE lock reaped as stale by the next worker, which then ran a second concurrent\n * `npm install -g` over the same global directory \u2014 precisely the pile-up described above.\n *\n * The throttle, not this timeout, is now the primary guard: `runUpdateCheck` stamps `lastCheckMs` BEFORE\n * the wait and the install, so concurrent shells stop spawning workers at all. This value only has to\n * outlive a plausible install, and is deliberately generous \u2014 the cost of being too large is that a worker\n * killed mid-install delays the next attempt, which the throttle would delay anyway.\n */\nexport const LOCK_STALE_MS = 30 * 60 * 1000\n\nexport const lockFilePath = (): string => {\n  return path.join(getCacheRoot(), LOCK_FILE_NAME)\n}\n\nexport interface LockDeps {\n  nowMs?: number\n  lockPath?: string\n}\n\n/** Delete a lock whose mtime predates the staleness window. Best-effort: losing the race is harmless. */\nconst reapIfStale = (lockPath: string, nowMs: number): void => {\n  try {\n    if (nowMs - fs.statSync(lockPath).mtimeMs > LOCK_STALE_MS) fs.rmSync(lockPath, { force: true })\n  } catch {\n    // Vanished under us \u2014 another worker reaped it. Nothing to do.\n  }\n}\n\n/**\n * Take the lock, or return null when another worker already holds it.\n *\n * Returns a release function rather than a boolean so the caller cannot forget which path releases:\n * there is exactly one handle, and it is the only thing that can unlink the file.\n *\n * @example\n * const release = acquireUpdateLock()\n * if (!release) return 'already-running'\n * try { ... } finally { release() }\n */\nexport const acquireUpdateLock = (deps: LockDeps = {}): (() => void) | null => {\n  const nowMs = deps.nowMs ?? Date.now()\n  const lockPath = deps.lockPath ?? lockFilePath()\n\n  try {\n    fs.mkdirSync(path.dirname(lockPath), { recursive: true })\n  } catch {\n    return null\n  }\n\n  const open = (): number | null => {\n    try {\n      // 'wx' fails with EEXIST if the file is already there: an atomic test-and-set.\n      return fs.openSync(lockPath, 'wx', 0o600)\n    } catch {\n      return null\n    }\n  }\n\n  let fd = open()\n\n  if (fd === null) {\n    reapIfStale(lockPath, nowMs)\n    // One retry only. If a live worker holds the lock, we are the loser and must simply stand down.\n    fd = open()\n  }\n\n  if (fd === null) return null\n\n  try {\n    fs.writeFileSync(fd, String(process.pid))\n  } catch {\n    // The pid is a debugging aid, not part of the protocol; the lock is held either way.\n  }\n\n  return () => {\n    try {\n      fs.closeSync(fd)\n    } catch {\n      // Already closed.\n    }\n\n    try {\n      fs.rmSync(lockPath, { force: true })\n    } catch {\n      // Already gone; a later worker will reap it via LOCK_STALE_MS regardless.\n    }\n  }\n}\n", "/**\n * Ask the npm registry for the `latest` dist-tag. Node >= 24 (see `engines`), so global `fetch` is\n * available and this needs no dependency.\n */\nimport { PACKAGE_NAME } from 'src/lib/install-manager'\n\nexport const DEFAULT_REGISTRY = 'https://registry.npmjs.org'\n\n/**\n * Bounded so a hanging registry can never keep a detached child alive indefinitely. 5s, not a tighter\n * bound: the abbreviated `/pkg/latest` endpoint is usually ~20-900ms, but a cold TLS/DNS handshake in a\n * freshly-spawned worker can spike past a 2.5s cap \u2014 and a single trip used to cost a `fetch-failed` that\n * pushed the next check a full window out. A detached child that lingers a few extra seconds harms nothing.\n */\nexport const FETCH_TIMEOUT_MS = 5_000\n\n/**\n * The registry this install actually talks to. A user behind a corporate mirror has `npm_config_registry`\n * set; hitting registry.npmjs.org directly would either fail closed (firewall) or, worse, report a public\n * version they cannot install.\n *\n * @example\n * registryUrl({ npm_config_registry: 'https://nexus.corp/repo/npm/' }) // => 'https://nexus.corp/repo/npm'\n */\n/**\n * `npm_config_registry` in WHICHEVER case the environment spells it.\n *\n * A bare `env.npm_config_registry` reads only the lowercase form, but npm itself matches `/^npm_config_/i`,\n * and POSIX `process.env` is case-SENSITIVE \u2014 so a `NPM_CONFIG_REGISTRY` (the form Dockerfiles and CI\n * images export) was invisible here while npm honoured it. The check then queried the public registry that\n * the install would never touch: the two halves of this feature were exactly inverted.\n */\nconst configuredRegistry = (env: NodeJS.ProcessEnv): string | undefined => {\n  const hit = Object.entries(env).find(([key, value]) => {\n    return /^npm_config_registry$/i.test(key) && value != null && value !== ''\n  })\n\n  return hit?.[1]\n}\n\nexport const registryUrl = (env: NodeJS.ProcessEnv): string => {\n  const configured = configuredRegistry(env)\n\n  let base = configured != null && configured !== '' ? configured : DEFAULT_REGISTRY\n\n  // A `/\\/+$/` regex would do this in one line, but its backtracking is super-linear on a hostile input.\n  while (base.endsWith('/')) {\n    base = base.slice(0, -1)\n  }\n\n  return base\n}\n\n/**\n * The published `latest` version, or null on ANY failure (offline, timeout, non-200, malformed body).\n * Never throws: a failed check must be indistinguishable from \"no update available\" to every caller.\n *\n * @example\n * await fetchLatestVersion(process.env) // => '0.1.131' | null\n */\nexport const fetchLatestVersion = async (\n  env: NodeJS.ProcessEnv,\n  fetchFn: typeof fetch = fetch,\n): Promise<string | null> => {\n  const controller = new AbortController()\n  const timer = setTimeout(() => {\n    controller.abort()\n  }, FETCH_TIMEOUT_MS)\n\n  try {\n    const response = await fetchFn(`${registryUrl(env)}/${PACKAGE_NAME}/latest`, {\n      signal: controller.signal,\n      headers: { accept: 'application/json' },\n    })\n\n    if (!response.ok) return null\n\n    const body: unknown = await response.json()\n    const version = (body as { version?: unknown } | null)?.version\n\n    return typeof version === 'string' && version !== '' ? version : null\n  } catch {\n    return null\n  } finally {\n    clearTimeout(timer)\n  }\n}\n", "/**\n * Registry-safe version comparison for the auto-update check.\n *\n * Deliberately NOT `src/lib/version-utils`: `parseVersion` there does `versionStr.slice(1)` because it\n * only ever sees `v`-prefixed release tags, so it turns a bare registry version (`0.1.130`) into\n * `[NaN, 1, 130]`. Feeding npm's `dist-tags.latest` through it silently compares NaNs and never fires.\n * These inputs are bare semver from `registry.npmjs.org` and from our own `package.json`.\n */\n\n/** `1.2.3-beta.4+build` \u2192 the `[1, 2, 3]` release triple and the `beta.4` prerelease, or null if unparsable. */\ninterface ParsedVersion {\n  release: [number, number, number]\n  /** Dot-separated prerelease identifiers, empty when this is a final release. */\n  prerelease: string[]\n}\n\nconst RELEASE_PATTERN = /^(\\d+)\\.(\\d+)\\.(\\d+)$/\n\n/**\n * Parse bare semver. Returns null (never throws, never NaNs) for anything that is not\n * `major.minor.patch` with optional `-prerelease` and `+build` \u2014 a garbled registry body must read as\n * \"no update\", not as \"update to NaN\".\n *\n * @example\n * parseSemver('0.1.130') // => { release: [0, 1, 130], prerelease: [] }\n * parseSemver('1.0.0-rc.1+abc') // => { release: [1, 0, 0], prerelease: ['rc', '1'] }\n * parseSemver('v1.0.0') // => null\n */\nexport const parseSemver = (version: string): ParsedVersion | null => {\n  // Build metadata is ignored entirely by semver precedence rules.\n  const [withoutBuild = ''] = version.trim().split('+')\n  const [core = '', ...prereleaseParts] = withoutBuild.split('-')\n  const match = RELEASE_PATTERN.exec(core)\n\n  if (!match) return null\n\n  const [major, minor, patch] = [match[1], match[2], match[3]].map(Number) as [number, number, number]\n\n  return {\n    release: [major, minor, patch],\n    // Re-join on '-' so `1.0.0-rc-1` keeps its hyphen inside a single identifier.\n    prerelease: prereleaseParts.length > 0 ? prereleaseParts.join('-').split('.') : [],\n  }\n}\n\nconst NUMERIC_IDENTIFIER = /^\\d+$/\n\n/** Compare two unequal prerelease identifiers per semver \u00A711. Numeric ones rank below alphanumeric ones. */\nconst compareIdentifier = (left: string, right: string): number => {\n  const leftNumeric = NUMERIC_IDENTIFIER.test(left)\n  const rightNumeric = NUMERIC_IDENTIFIER.test(right)\n\n  if (leftNumeric && rightNumeric) return Number(left) - Number(right)\n  if (leftNumeric !== rightNumeric) return leftNumeric ? -1 : 1\n\n  return left < right ? -1 : 1\n}\n\n/** Compare prerelease identifier lists. A shorter list has lower precedence: `1.0.0-rc` < `1.0.0-rc.1`. */\nconst comparePrerelease = (a: string[], b: string[]): number => {\n  for (let index = 0; index < Math.max(a.length, b.length); index += 1) {\n    const left = a[index]\n    const right = b[index]\n\n    if (left === undefined) return -1\n    if (right === undefined) return 1\n    if (left !== right) return compareIdentifier(left, right)\n  }\n\n  return 0\n}\n\n/**\n * Is `latest` strictly newer than `current`? False when either is unparsable, so a bad registry\n * response can never trigger an install.\n *\n * The load-bearing case is NUMERIC, not lexical, comparison: `0.1.9` must be older than `0.1.130`.\n * A string compare would order them the other way and pin every user to the older build forever.\n *\n * A final release outranks its own prereleases (`1.0.0` > `1.0.0-rc.1`), so a user on `rc` is offered\n * the release, and a user on the release is never \"downgraded\" to an rc.\n *\n * @example\n * isNewerVersion('0.1.130', '0.1.9') // => true  (numeric, not lexical)\n * isNewerVersion('1.0.0', '1.0.0-rc.1') // => true\n * isNewerVersion('0.1.130', '0.1.130') // => false\n * isNewerVersion('garbage', '0.1.0') // => false\n */\nexport const isNewerVersion = (latest: string, current: string): boolean => {\n  const parsedLatest = parseSemver(latest)\n  const parsedCurrent = parseSemver(current)\n\n  if (!parsedLatest || !parsedCurrent) return false\n\n  for (let index = 0; index < 3; index += 1) {\n    const left = parsedLatest.release[index] as number\n    const right = parsedCurrent.release[index] as number\n\n    if (left !== right) return left > right\n  }\n\n  const latestIsFinal = parsedLatest.prerelease.length === 0\n  const currentIsFinal = parsedCurrent.prerelease.length === 0\n\n  if (latestIsFinal !== currentIsFinal) return latestIsFinal\n\n  return comparePrerelease(parsedLatest.prerelease, parsedCurrent.prerelease) > 0\n}\n", "/**\n * The throttle + notice state for the auto-update check, at `$cacheRoot/update-check.json`.\n *\n * `getCacheRoot()` \u2014 NOT `getSessionCacheDir()`, which throws unless `INFRA_KIT_SESSION` is set. A user\n * who installed this CLI globally and never ran `infra-kit init` has no session, and the update check\n * must still work for exactly that person.\n */\nimport fs from 'node:fs'\nimport path from 'node:path'\n\nimport { atomicWriteFileSync, getCacheRoot } from 'src/lib/constants'\n\nexport const CACHE_FILE_NAME = 'update-check.json'\n\n/**\n * The ONE re-check window, whatever the last outcome was. A background check is cheap \u2014 one detached\n * child and a single registry fetch bounded by `FETCH_TIMEOUT_MS` \u2014 but not once per shell command,\n * which is the storm this throttle exists to stop.\n *\n * There is deliberately no shorter \"retry after a transient failure\" window. One used to exist because\n * this interval was 24h, and burning a whole day on a single network blip locked out exactly the\n * publisher pushing a release mid-window. At 20 minutes that gap is gone: a blip costs one window, so\n * a second window buys nothing and cannot pay for what it costs (below).\n *\n * MUST stay above a full worker cycle: `runUpdateCheck` stamps `lastCheckMs` BEFORE waiting up to\n * `PARENT_WAIT_TIMEOUT_MS` (5min) for the parent to exit and THEN installing. Go below that and the\n * cache reads stale while the first worker is still legitimately working, so the next shell spawns a\n * worker that dies on the live single-flight lock and returns WITHOUT writing \u2014 leaving the cache stale\n * for every command until `LOCK_STALE_MS` (30min) reaps the lock. That is the per-command spawn storm\n * this throttle exists to prevent, and it is why a 5-minute retry window is not an option.\n */\nexport const CHECK_INTERVAL_MS = 20 * 60 * 1000\n\nexport interface UpdateCache {\n  /**\n   * When the last check was ATTEMPTED \u2014 never \"when it last succeeded\". An offline user whose fetch\n   * throws must still burn their window, or every single command spawns another doomed child.\n   */\n  lastCheckMs: number\n  /** Latest version seen on the registry, or null when the last attempt failed. */\n  latestVersion: string | null\n  /**\n   * The command the USER must run, set only when the worker was not allowed to install for them\n   * (Homebrew, or an install location it could not identify). Null means \"handled, say nothing\".\n   *\n   * The worker decides this, not the reader: identifying the owning package manager can cost an\n   * `npm root -g` subprocess, and the CLI startup path must never pay for one. The background child\n   * already pays it, so it writes the verdict down.\n   */\n  updateCommand: string[] | null\n  /**\n   * The last check's terminal outcome (`installed`, `fetch-failed`, `up-to-date`, \u2026), or absent on a\n   * cache written before this field existed.\n   *\n   * Diagnostic ONLY \u2014 nothing branches on it, {@link isStale} included. It earns its keep by being the\n   * one thing that makes this file legible: a successful `installed` and a failed `fetch-failed` both\n   * write a byte-identical `{latestVersion:null, updateCommand:null}`, so without this the cache cannot\n   * say which happened, and a silent auto-update leaves no other trace of what it did.\n   */\n  outcome?: string | null\n}\n\nexport const cacheFilePath = (): string => {\n  return path.join(getCacheRoot(), CACHE_FILE_NAME)\n}\n\nconst isStringArray = (value: unknown): value is string[] => {\n  return (\n    Array.isArray(value) &&\n    value.every((entry) => {\n      return typeof entry === 'string'\n    })\n  )\n}\n\nconst isUpdateCache = (value: unknown): value is UpdateCache => {\n  if (typeof value !== 'object' || value === null) return false\n\n  const { lastCheckMs, latestVersion, updateCommand, outcome } = value as Partial<UpdateCache>\n\n  return (\n    typeof lastCheckMs === 'number' &&\n    Number.isFinite(lastCheckMs) &&\n    (latestVersion === null || typeof latestVersion === 'string') &&\n    (updateCommand === null || isStringArray(updateCommand)) &&\n    (outcome === undefined || outcome === null || typeof outcome === 'string')\n  )\n}\n\n/**\n * Read the cache, or null when it is missing/unreadable/corrupt. A null read means \"stale\" to every\n * caller, so a first run and a hand-mangled file behave identically: check again.\n *\n * @example\n * readUpdateCache() // => { lastCheckMs: 1770000000000, latestVersion: '0.1.131' } | null\n */\nexport const readUpdateCache = (\n  readFile: (p: string) => string = (p) => {\n    return fs.readFileSync(p, 'utf8')\n  },\n): UpdateCache | null => {\n  try {\n    const parsed: unknown = JSON.parse(readFile(cacheFilePath()))\n\n    return isUpdateCache(parsed) ? parsed : null\n  } catch {\n    return null\n  }\n}\n\n/**\n * Persist the check result. Creates `$cacheRoot` first: `atomicWriteFileSync` writes a temp file\n * beside the target and renames, so it throws ENOENT on a machine that has never had a `~/.cache/infra-kit`.\n * Without this mkdir the write fails, `lastCheckMs` never lands, and the throttle degrades into a\n * detached-child spawn on every invocation.\n *\n * @example\n * writeUpdateCache({ lastCheckMs: Date.now(), latestVersion: '0.1.131' })\n */\nexport const writeUpdateCache = (cache: UpdateCache): void => {\n  const root = getCacheRoot()\n\n  fs.mkdirSync(root, { recursive: true })\n  atomicWriteFileSync(path.join(root, CACHE_FILE_NAME), JSON.stringify(cache), 0o600)\n}\n\n/**\n * Has the throttle window elapsed? A missing cache is stale by definition (first run).\n *\n * A `lastCheckMs` in the future (clock skew, or a restored backup) also reads as stale rather than\n * locking the user out of updates until their clock catches up.\n *\n * The window does NOT depend on `outcome`: every last outcome, transient or settled, is re-checked\n * after {@link CHECK_INTERVAL_MS}. See that constant for why a shorter transient-failure window is not\n * worth its cost here.\n *\n * @example\n * isStale(null, 1_000) // => true\n * isStale({ lastCheckMs: 0, latestVersion: null, updateCommand: null }, CHECK_INTERVAL_MS + 1) // => true\n */\nexport const isStale = (cache: UpdateCache | null, nowMs: number): boolean => {\n  if (!cache) return true\n\n  const elapsed = nowMs - cache.lastCheckMs\n\n  if (elapsed < 0) return true\n\n  return elapsed >= CHECK_INTERVAL_MS\n}\n"],
-  "mappings": "uFAQA,OAAOA,MAAU,YAGV,IAAMC,EAAe,YAEtBC,EAAS,GAAGD,CAAY,UAoCxBE,EAAW,CAACC,EAAgBC,EAAeC,IAAkC,CACjF,IAAMC,EAAMP,EAAK,SAASM,EAASN,EAAK,QAAQI,CAAM,CAAC,EAAGJ,EAAK,QAAQK,CAAK,CAAC,EAE7E,OAAOE,IAAQ,IAAM,CAACA,EAAI,WAAW,IAAI,GAAK,CAACP,EAAK,WAAWO,CAAG,CACpE,EAGMC,EAAa,CAACC,EAAWC,IACtBV,EAAK,QAAQS,CAAC,EAAE,MAAMT,EAAK,GAAG,EAAE,SAASU,CAAI,EAkBhDC,EAAc,CAACF,EAAWC,IAA0B,CACxD,IAAME,EAAWZ,EAAK,QAAQS,CAAC,EAAE,MAAMT,EAAK,GAAG,EACzCa,EAASD,EAAS,QAAQ,QAAQ,EAExC,OAAOC,IAAW,IAAMD,EAASC,EAAS,CAAC,IAAMH,CACnD,EA0BMI,EAAyBC,GAAwC,CACrE,IAAMH,EAAWZ,EAAK,QAAQe,CAAY,EAAE,MAAMf,EAAK,GAAG,EACpDgB,EAAcJ,EAAS,YAAY,cAAc,EAIvD,OAFII,EAAc,GACdJ,EAASI,EAAc,CAAC,IAAM,OAC9BJ,EAASI,EAAc,CAAC,IAAMf,EAAqB,KAGhDW,EAAS,MAAM,EAAGI,EAAc,CAAC,EAAE,KAAKhB,EAAK,GAAG,GAAKA,EAAK,GACnE,EAQMiB,EAA2BC,GACxB,CAAC,MAAO,UAAW,KAAM,WAAYA,EAAQhB,CAAM,EAe/CiB,EAAuBC,GAC3BA,EACJ,IAAKC,GACGA,EAAM,SAAS,GAAG,EAAI,IAAIA,CAAK,IAAMA,CAC7C,EACA,KAAK,GAAG,EAIPC,EAAc,CAACC,EAAwBC,EAAaT,EAAsBT,IAAkC,CAChH,IAAMmB,EAAMF,EAAIC,CAAG,EAEnB,OAAOC,GAAO,MAAQA,IAAQ,IAAMtB,EAASsB,EAAKV,EAAcT,CAAQ,CAC1E,EAaMoB,EAA8B,CAClC,CACE,QAAS,QAET,KAAM,CAAC,CAAE,aAAAX,EAAc,IAAAQ,EAAK,SAAAjB,CAAS,IAEjCgB,EAAYC,EAAK,aAAcR,EAAcT,CAAQ,GACrDE,EAAWO,EAAc,QAAQ,GACjCP,EAAWO,EAAc,OAAO,EAGpC,cAAe,CAAC,QAAS,UAAWd,CAAY,EAChD,aAAc,EAChB,EACA,CACE,QAAS,WAaT,KAAM,CAAC,CAAE,aAAAc,CAAa,IACbJ,EAAYI,EAAcd,CAAY,EAE/C,cAAe,CAAC,OAAQ,UAAWA,CAAY,EAC/C,aAAc,EAChB,CACF,EAQM0B,EAA2B,CAC/B,CACE,QAAS,OACT,KAAM,CAAC,CAAE,aAAAZ,EAAc,IAAAQ,EAAK,SAAAjB,CAAS,IAEjCgB,EAAYC,EAAK,YAAaR,EAAcT,CAAQ,GACnDE,EAAWO,EAAc,MAAM,GAAKP,EAAWO,EAAc,QAAQ,EAG1E,cAAe,CAAC,OAAQ,MAAO,KAAMb,CAAM,EAC3C,aAAc,EAChB,EACA,CACE,QAAS,MACT,KAAM,CAAC,CAAE,aAAAa,EAAc,IAAAQ,EAAK,SAAAjB,CAAS,IAC5BgB,EAAYC,EAAK,cAAeR,EAAcT,CAAQ,GAAKE,EAAWO,EAAc,MAAM,EAEnG,cAAe,CAAC,MAAO,MAAO,KAAMb,CAAM,EAC1C,aAAc,EAChB,EACA,CACE,QAAS,OACT,KAAM,CAAC,CAAE,aAAAa,CAAa,IAElBP,EAAWO,EAAc,OAAO,GAAMP,EAAWO,EAAc,MAAM,GAAKP,EAAWO,EAAc,QAAQ,EAG/G,cAAe,CAAC,OAAQ,SAAU,MAAOb,CAAM,EAC/C,aAAc,EAChB,EACA,CACE,QAAS,MACT,KAAM,CAAC,CAAE,aAAAa,EAAc,IAAAQ,EAAK,SAAAjB,CAAS,IAC5BgB,EAAYC,EAAK,oBAAqBR,EAAcT,CAAQ,EAErE,cAAe,CAAC,MAAO,UAAW,KAAMJ,CAAM,EAC9C,aAAc,EAChB,CACF,EAEM0B,EAAqB,CAAC,MAAO,UAAW,KAAM1B,CAAM,EAoB7C2B,EAAwBC,GAAyD,CAC5F,GAAM,CAAE,aAAAf,EAAc,IAAAQ,EAAK,SAAAjB,EAAU,YAAAyB,CAAY,EAAID,EAC/CE,EAAUC,IACP,CAAE,QAASA,EAAI,QAAS,cAAeA,EAAI,cAAe,aAAcA,EAAI,YAAa,GAE5FC,EAAU,CAAC,CAAE,KAAAC,CAAK,IACfA,EAAK,CAAE,aAAApB,EAAc,IAAAQ,EAAK,SAAAjB,CAAS,CAAC,EAGvC8B,EAAUV,EAAiB,KAAKQ,CAAO,EAE7C,GAAIE,EAAS,OAAOJ,EAAOI,CAAO,EAElC,IAAMC,EAAgBvB,EAAsBC,CAAY,EAExD,GAAIsB,IAAkB,KACpB,MAAO,CAAE,QAAS,MAAO,cAAepB,EAAwBoB,CAAa,EAAG,aAAc,EAAK,EAGrG,IAAMC,EAAOX,EAAc,KAAKO,CAAO,EAEvC,GAAII,EAAM,OAAON,EAAOM,CAAI,EAE5B,IAAMC,EAAUR,IAAc,EAE9B,OAAIQ,GAAW,MAAQA,IAAY,IAAMpC,EAASoC,EAASxB,EAAcT,CAAQ,EACxE,CAAE,QAAS,MAAO,cAAesB,EAAoB,aAAc,EAAK,EAG1E,CAAE,QAAS,UAAW,cAAeA,EAAoB,aAAc,EAAM,CACtF,EAmBaY,EAA4B,CAACzB,EAAsB0B,EAAanC,IACpEE,EAAWO,EAAc,cAAc,GAAKZ,EAASsC,EAAK1B,EAAcT,CAAQ,EC9TzF,OAAS,gBAAAoC,MAAoB,UAC7B,OAAOC,MAAU,YAUV,IAAMC,EAAgBC,GAAwB,CACnD,GAAI,CACF,OAAOH,EAAaG,CAAG,CACzB,MAAQ,CACN,OAAOF,EAAK,QAAQE,CAAG,CACzB,CACF,ECLA,OAAS,gBAAAC,MAAoB,qBAC7B,OAAOC,MAAa,eAEpB,IAAMC,GAAsB,IAafC,EAAqB,IAA0B,CAC1D,GAAI,CAOF,IAAMC,EANMJ,EAAa,MAAO,CAAC,OAAQ,IAAI,EAAG,CAC9C,SAAU,QACV,QAASE,GACT,MAAO,CAAC,SAAU,OAAQ,QAAQ,EAClC,MAAOD,EAAQ,WAAa,OAC9B,CAAC,EACmB,KAAK,EAEzB,OAAOG,IAAY,GAAK,OAAYA,CACtC,MAAQ,CACN,MACF,CACF,EC/BA,OAAS,aAAAC,OAAiB,qBAC1B,OAAS,WAAAC,OAAe,UACxB,OAAOC,MAAa,eCFpB,OAAOC,MAAQ,UACf,OAAOC,MAAU,YACjB,OAAOC,OAAa,eAIb,IAAMC,GAAiB,oBAiBjBC,GAAgB,KAAU,IAE1BC,GAAe,IACnBC,EAAK,KAAKC,EAAa,EAAGJ,EAAc,EAS3CK,GAAc,CAACC,EAAkBC,IAAwB,CAC7D,GAAI,CACEA,EAAQC,EAAG,SAASF,CAAQ,EAAE,QAAUL,IAAeO,EAAG,OAAOF,EAAU,CAAE,MAAO,EAAK,CAAC,CAChG,MAAQ,CAER,CACF,EAaaG,EAAoB,CAACC,EAAiB,CAAC,IAA2B,CAC7E,IAAMH,EAAQG,EAAK,OAAS,KAAK,IAAI,EAC/BJ,EAAWI,EAAK,UAAYR,GAAa,EAE/C,GAAI,CACFM,EAAG,UAAUL,EAAK,QAAQG,CAAQ,EAAG,CAAE,UAAW,EAAK,CAAC,CAC1D,MAAQ,CACN,OAAO,IACT,CAEA,IAAMK,EAAO,IAAqB,CAChC,GAAI,CAEF,OAAOH,EAAG,SAASF,EAAU,KAAM,GAAK,CAC1C,MAAQ,CACN,OAAO,IACT,CACF,EAEIM,EAAKD,EAAK,EAQd,GANIC,IAAO,OACTP,GAAYC,EAAUC,CAAK,EAE3BK,EAAKD,EAAK,GAGRC,IAAO,KAAM,OAAO,KAExB,GAAI,CACFJ,EAAG,cAAcI,EAAI,OAAOC,GAAQ,GAAG,CAAC,CAC1C,MAAQ,CAER,CAEA,MAAO,IAAM,CACX,GAAI,CACFL,EAAG,UAAUI,CAAE,CACjB,MAAQ,CAER,CAEA,GAAI,CACFJ,EAAG,OAAOF,EAAU,CAAE,MAAO,EAAK,CAAC,CACrC,MAAQ,CAER,CACF,CACF,EC3GO,IAAMQ,GAAmB,6BAQnBC,GAAmB,IAkB1BC,GAAsBC,GACd,OAAO,QAAQA,CAAG,EAAE,KAAK,CAAC,CAACC,EAAKC,CAAK,IACxC,yBAAyB,KAAKD,CAAG,GAAKC,GAAS,MAAQA,IAAU,EACzE,IAEY,CAAC,EAGHC,GAAeH,GAAmC,CAC7D,IAAMI,EAAaL,GAAmBC,CAAG,EAErCK,EAAOD,GAAc,MAAQA,IAAe,GAAKA,EAAaP,GAGlE,KAAOQ,EAAK,SAAS,GAAG,GACtBA,EAAOA,EAAK,MAAM,EAAG,EAAE,EAGzB,OAAOA,CACT,EASaC,EAAqB,MAChCN,EACAO,EAAwB,QACG,CAC3B,IAAMC,EAAa,IAAI,gBACjBC,EAAQ,WAAW,IAAM,CAC7BD,EAAW,MAAM,CACnB,EAAGV,EAAgB,EAEnB,GAAI,CACF,IAAMY,EAAW,MAAMH,EAAQ,GAAGJ,GAAYH,CAAG,CAAC,IAAIW,CAAY,UAAW,CAC3E,OAAQH,EAAW,OACnB,QAAS,CAAE,OAAQ,kBAAmB,CACxC,CAAC,EAED,GAAI,CAACE,EAAS,GAAI,OAAO,KAGzB,IAAME,GADgB,MAAMF,EAAS,KAAK,IACc,QAExD,OAAO,OAAOE,GAAY,UAAYA,IAAY,GAAKA,EAAU,IACnE,MAAQ,CACN,OAAO,IACT,QAAE,CACA,aAAaH,CAAK,CACpB,CACF,ECtEA,IAAMI,GAAkB,wBAYXC,EAAeC,GAA0C,CAEpE,GAAM,CAACC,EAAe,EAAE,EAAID,EAAQ,KAAK,EAAE,MAAM,GAAG,EAC9C,CAACE,EAAO,GAAI,GAAGC,CAAe,EAAIF,EAAa,MAAM,GAAG,EACxDG,EAAQN,GAAgB,KAAKI,CAAI,EAEvC,GAAI,CAACE,EAAO,OAAO,KAEnB,GAAM,CAACC,EAAOC,EAAOC,CAAK,EAAI,CAACH,EAAM,CAAC,EAAGA,EAAM,CAAC,EAAGA,EAAM,CAAC,CAAC,EAAE,IAAI,MAAM,EAEvE,MAAO,CACL,QAAS,CAACC,EAAOC,EAAOC,CAAK,EAE7B,WAAYJ,EAAgB,OAAS,EAAIA,EAAgB,KAAK,GAAG,EAAE,MAAM,GAAG,EAAI,CAAC,CACnF,CACF,EAEMK,EAAqB,QAGrBC,GAAoB,CAACC,EAAcC,IAA0B,CACjE,IAAMC,EAAcJ,EAAmB,KAAKE,CAAI,EAC1CG,EAAeL,EAAmB,KAAKG,CAAK,EAElD,OAAIC,GAAeC,EAAqB,OAAOH,CAAI,EAAI,OAAOC,CAAK,EAC/DC,IAAgBC,EAAqBD,EAAc,GAAK,EAErDF,EAAOC,EAAQ,GAAK,CAC7B,EAGMG,GAAoB,CAACC,EAAaC,IAAwB,CAC9D,QAASC,EAAQ,EAAGA,EAAQ,KAAK,IAAIF,EAAE,OAAQC,EAAE,MAAM,EAAGC,GAAS,EAAG,CACpE,IAAMP,EAAOK,EAAEE,CAAK,EACdN,EAAQK,EAAEC,CAAK,EAErB,GAAIP,IAAS,OAAW,MAAO,GAC/B,GAAIC,IAAU,OAAW,MAAO,GAChC,GAAID,IAASC,EAAO,OAAOF,GAAkBC,EAAMC,CAAK,CAC1D,CAEA,MAAO,EACT,EAkBaO,EAAiB,CAACC,EAAgBC,IAA6B,CAC1E,IAAMC,EAAetB,EAAYoB,CAAM,EACjCG,EAAgBvB,EAAYqB,CAAO,EAEzC,GAAI,CAACC,GAAgB,CAACC,EAAe,MAAO,GAE5C,QAASL,EAAQ,EAAGA,EAAQ,EAAGA,GAAS,EAAG,CACzC,IAAMP,EAAOW,EAAa,QAAQJ,CAAK,EACjCN,EAAQW,EAAc,QAAQL,CAAK,EAEzC,GAAIP,IAASC,EAAO,OAAOD,EAAOC,CACpC,CAEA,IAAMY,EAAgBF,EAAa,WAAW,SAAW,EACnDG,EAAiBF,EAAc,WAAW,SAAW,EAE3D,OAAIC,IAAkBC,EAAuBD,EAEtCT,GAAkBO,EAAa,WAAYC,EAAc,UAAU,EAAI,CAChF,ECpGA,OAAOG,MAAQ,UACf,OAAOC,MAAU,YAIV,IAAMC,EAAkB,oBAmBlBC,GAAoB,KAAU,IA+B9BC,GAAgB,IACpBC,EAAK,KAAKC,EAAa,EAAGJ,CAAe,EAG5CK,GAAiBC,GAEnB,MAAM,QAAQA,CAAK,GACnBA,EAAM,MAAOC,GACJ,OAAOA,GAAU,QACzB,EAICC,GAAiBF,GAAyC,CAC9D,GAAI,OAAOA,GAAU,UAAYA,IAAU,KAAM,MAAO,GAExD,GAAM,CAAE,YAAAG,EAAa,cAAAC,EAAe,cAAAC,EAAe,QAAAC,CAAQ,EAAIN,EAE/D,OACE,OAAOG,GAAgB,UACvB,OAAO,SAASA,CAAW,IAC1BC,IAAkB,MAAQ,OAAOA,GAAkB,YACnDC,IAAkB,MAAQN,GAAcM,CAAa,KAC5BC,GAAY,MAAQ,OAAOA,GAAY,SAErE,EASaC,GAAkB,CAC7BC,EAAmCC,GAC1BC,EAAG,aAAaD,EAAG,MAAM,IAEX,CACvB,GAAI,CACF,IAAME,EAAkB,KAAK,MAAMH,EAASZ,GAAc,CAAC,CAAC,EAE5D,OAAOM,GAAcS,CAAM,EAAIA,EAAS,IAC1C,MAAQ,CACN,OAAO,IACT,CACF,EAWaC,EAAoBC,GAA6B,CAC5D,IAAMC,EAAOhB,EAAa,EAE1BY,EAAG,UAAUI,EAAM,CAAE,UAAW,EAAK,CAAC,EACtCC,EAAoBlB,EAAK,KAAKiB,EAAMpB,CAAe,EAAG,KAAK,UAAUmB,CAAK,EAAG,GAAK,CACpF,EAgBaG,GAAU,CAACH,EAA2BI,IAA2B,CAC5E,GAAI,CAACJ,EAAO,MAAO,GAEnB,IAAMK,EAAUD,EAAQJ,EAAM,YAE9B,OAAIK,EAAU,EAAU,GAEjBA,GAAWvB,EACpB,EJ3HO,IAAMwB,GAA0B,IAO1BC,GAAyB,IAAS,IAsBzCC,GAAyBC,GAAyB,CACtD,GAAI,CACF,OAAAC,EAAQ,KAAKD,EAAK,CAAC,EAEZ,EACT,MAAQ,CACN,MAAO,EACT,CACF,EAEME,GAAgBC,GACb,IAAI,QAASC,GAAY,CAC9B,WAAWA,EAASD,CAAE,CACxB,CAAC,EAOGE,GAAoB,MACxBC,EACAC,IACqB,CACrB,IAAMC,EAAWD,EAAK,MAAM,EAAIT,GAEhC,KAAOS,EAAK,MAAM,EAAIC,GAAU,CAC9B,GAAI,CAACD,EAAK,eAAeD,CAAS,EAAG,MAAO,GAE5C,MAAMC,EAAK,MAAMV,EAAuB,CAC1C,CAEA,MAAO,CAACU,EAAK,eAAeD,CAAS,CACvC,EAuBaG,GAAiB,MAAOC,EAAwBH,IAA0D,CAMrH,IAAMI,GALcJ,EAAK,aAAeK,GAKZ,EAE5B,GAAI,CAACD,EAAS,MAAO,kBAErB,GAAI,CACF,OAAO,MAAME,GAAqBH,EAAgBH,CAAI,CACxD,QAAE,CACAI,EAAQ,CACV,CACF,EAEME,GAAuB,MAAOH,EAAwBH,IAA0D,CACpH,IAAMO,EAAMP,EAAK,KAAON,EAAQ,IAC1Bc,EAAQR,EAAK,OAAS,KAAK,IAAI,EAC/BS,EAAcT,EAAK,aAAeU,EAClCC,EAAaX,EAAK,YAAcY,EAChCC,EAAiBb,EAAK,gBAAkBR,GACxCsB,EAAQd,EAAK,OAASL,GACtBoB,EAAQf,EAAK,OAAS,KAAK,IAC3BgB,EAAchB,EAAK,aAAeiB,EAClCC,EAAQlB,EAAK,WAAamB,GAE1BC,EAAgB,MAAMX,EAAYF,CAAG,EAKrCc,EAAS,CACbC,EACAC,KAKAZ,EAAW,CAAE,YAAaH,EAAO,GAAGe,EAAO,QAAAD,CAAQ,CAAC,EAE7CA,GAGT,GAAIF,IAAkB,KAAM,OAAOC,EAAO,eAAgB,CAAE,cAAe,KAAM,cAAe,IAAK,CAAC,EACtG,GAAI,CAACG,EAAeJ,EAAejB,CAAc,EAC/C,OAAOkB,EAAO,aAAc,CAAE,cAAAD,EAAe,cAAe,IAAK,CAAC,EAMpE,GAAM,CAAE,aAAAK,EAAc,cAAAC,CAAc,EAAIC,EAAqB,CAC3D,aAAc3B,EAAK,aACnB,IAAAO,EACA,SAAUqB,EACV,YAAAZ,CACF,CAAC,EAID,GAAI,CAACS,EAAc,OAAOJ,EAAO,oBAAqB,CAAE,cAAAD,EAAe,cAAAM,CAAc,CAAC,EAKtF,GAAI1B,EAAK,WAAa,KAAM,OAAOqB,EAAO,iBAAkB,CAAE,cAAAD,EAAe,cAAe,IAAK,CAAC,EAqBlG,GALAT,EAAW,CAAE,YAAaH,EAAO,cAAAY,EAAe,cAAe,KAAM,QAAS,YAAa,CAAC,EAKxF,CAHe,MAAMtB,GAAkBE,EAAK,UAAW,CAAE,eAAAa,EAAgB,MAAAC,EAAO,MAAAC,CAAM,CAAC,EAG1E,OAAOM,EAAO,uBAAwB,CAAE,cAAAD,EAAe,cAAe,IAAK,CAAC,EAgB7F,IAAMS,EAASX,EAAMQ,EAAc,CAAC,EAAaA,EAAc,MAAM,CAAC,EAAG,CACvE,MAAO,SACP,MAAOhC,EAAQ,WAAa,QAC5B,IAAKoC,GAAQ,EACb,IAAKC,EAAyBxB,CAAG,EACjC,YAAa,EACf,CAAC,EAID,OAAIsB,EAAO,OAASA,EAAO,QAAUA,EAAO,SAAW,EAC9CR,EAAO,iBAAkB,CAAE,cAAAD,EAAe,cAAAM,CAAc,CAAC,EAI3DL,EAAO,YAAa,CAAE,cAAe,KAAM,cAAe,IAAK,CAAC,CACzE",
-  "names": ["path", "PACKAGE_NAME", "LATEST", "isWithin", "parent", "child", "realpath", "rel", "hasSegment", "p", "name", "isBrewKegOf", "segments", "cellar", "npmPrefixFromSelfPath", "selfRealPath", "nodeModules", "npmPrefixInstallCommand", "prefix", "formatUpdateCommand", "command", "token", "underEnvDir", "env", "key", "dir", "WRAPPER_MATCHERS", "TREE_MATCHERS", "NPM_UPDATE_COMMAND", "detectInstallManager", "input", "lazyNpmRoot", "toInfo", "hit", "matches", "test", "wrapper", "derivedPrefix", "tree", "npmRoot", "isLocalNodeModulesInstall", "cwd", "realpathSync", "path", "safeRealpath", "dir", "execFileSync", "process", "NPM_ROOT_TIMEOUT_MS", "defaultLazyNpmRoot", "trimmed", "spawnSync", "homedir", "process", "fs", "path", "process", "LOCK_FILE_NAME", "LOCK_STALE_MS", "lockFilePath", "path", "getCacheRoot", "reapIfStale", "lockPath", "nowMs", "fs", "acquireUpdateLock", "deps", "open", "fd", "process", "DEFAULT_REGISTRY", "FETCH_TIMEOUT_MS", "configuredRegistry", "env", "key", "value", "registryUrl", "configured", "base", "fetchLatestVersion", "fetchFn", "controller", "timer", "response", "PACKAGE_NAME", "version", "RELEASE_PATTERN", "parseSemver", "version", "withoutBuild", "core", "prereleaseParts", "match", "major", "minor", "patch", "NUMERIC_IDENTIFIER", "compareIdentifier", "left", "right", "leftNumeric", "rightNumeric", "comparePrerelease", "a", "b", "index", "isNewerVersion", "latest", "current", "parsedLatest", "parsedCurrent", "latestIsFinal", "currentIsFinal", "fs", "path", "CACHE_FILE_NAME", "CHECK_INTERVAL_MS", "cacheFilePath", "path", "getCacheRoot", "isStringArray", "value", "entry", "isUpdateCache", "lastCheckMs", "latestVersion", "updateCommand", "outcome", "readUpdateCache", "readFile", "p", "fs", "parsed", "writeUpdateCache", "cache", "root", "atomicWriteFileSync", "isStale", "nowMs", "elapsed", "PARENT_POLL_INTERVAL_MS", "PARENT_WAIT_TIMEOUT_MS", "defaultIsProcessAlive", "pid", "process", "defaultSleep", "ms", "resolve", "waitForParentExit", "parentPid", "deps", "deadline", "runUpdateCheck", "currentVersion", "release", "acquireUpdateLock", "runUpdateCheckLocked", "env", "nowMs", "fetchLatest", "fetchLatestVersion", "writeCache", "writeUpdateCache", "isProcessAlive", "sleep", "clock", "lazyNpmRoot", "defaultLazyNpmRoot", "spawn", "spawnSync", "latestVersion", "finish", "outcome", "cache", "isNewerVersion", "canSelfSpawn", "updateCommand", "detectInstallManager", "safeRealpath", "result", "homedir", "packageManagerInstallEnv"]
-}

package/dist/dev-wizard-run-XM5L23UP.js

@@ -1,2 +0,0 @@
-import{f as C,i as f,j as g}from"./chunk-QLAQ7F4M.js";import{B as u,C as b,D as y,F as k,P as x,X as v}from"./chunk-SSBYKOHY.js";import{e as w}from"./chunk-CHETBZ6M.js";import"./chunk-X46DP23W.js";import O from"@inquirer/checkbox";import _ from"@inquirer/confirm";import j,{Separator as I}from"@inquirer/select";import{loadDev as K}from"@slip-stream-kit/config/internal";import U from"node:path";import m from"node:process";var W=e=>e.split("/")[0],A=e=>new Map(e.apps.map(r=>[r.name,r])),D=e=>e.localCapable&&e.cloudCapable,N=(e,r,t)=>D(r)?t[`${e} ${r.path}`]??(r.cloudCapable?"cloud":"local"):r.localCapable?"local":"cloud",$=(e,r,t)=>{let a=new Set,o=new Map;for(let n of e){let s=r.get(W(n));for(let c of s?.backends??[]){o.set(c.packageName,c.ownerApp);for(let l of c.routes)N(n,l,t)==="local"&&a.add(c.packageName)}}return{localPkgs:a,ownerByPkg:o}},B=(e,r)=>{let t={},a=!1;for(let o of e?.backends??[]){let n=r.has(o.packageName);for(let s of o.routes){let c=s.localCapable&&n?"local":"cloud";t[s.path]=c,c==="cloud"&&(a=!0)}}return{overrides:t,anyCloud:a}},z=(e,r)=>{let t=A(r),a=e.targets.filter(p=>p.endsWith("/ui")),o=e.targets.filter(p=>p.endsWith("/api")),{localPkgs:n,ownerByPkg:s}=$(a,t,e.sources),c={},l=!1;for(let p of a){let{overrides:d,anyCloud:i}=B(t.get(W(p)),n);i&&(l=!0),c[p]=Object.keys(d).length>0?{proxy:d}:{}}for(let p of o)c[p]??={};for(let p of n){let d=s.get(p);d!=null&&(c[`${d}/api`]??={})}return{presetDef:{apps:c,cmux:e.cmux},anyCloudRoute:l,targetKeys:Object.keys(c).sort()}},M=(e,r)=>{let t=[`--target=${e.targetKeys.join(",")}`];return r.watch&&t.push("--watch"),r.cmux&&t.push("--cmux"),{flags:t.join(" ")}};var h={output:m.stderr,clearPromptOnDone:!0},q={select:e=>g(r=>j({message:e.message,choices:e.choices,default:e.default},r),h),checkbox:e=>g(r=>O({message:e.message,choices:e.choices},r),h),confirm:e=>g(r=>_({message:e.message,default:e.default},r),h)},E=(e,r)=>{let t=new Map;for(let[a,o]of Object.entries(e)){let n={path:a,localCapable:o.from.includes("local"),cloudCapable:o.from.includes("cloud"),default:o.default},s=t.get(o.packageName);s?(s.routes.push(n),s.localCapable=s.localCapable||n.localCapable,s.cloudCapable=s.cloudCapable||n.cloudCapable):t.set(o.packageName,{packageName:o.packageName,routes:[n],localCapable:n.localCapable,cloudCapable:n.cloudCapable,ownerApp:r.get(o.packageName)})}return[...t.values()]},T=async(e,r,t)=>{try{let a=(await K(e))?.proxy?.routes;return a?E(a,t):[]}catch(a){return u.warn(`\u26A0\uFE0F  Skipping ${r}: its dev config failed to load \u2014 ${a instanceof Error?a.message:String(a)}`),[]}},V=async e=>{let r=y(e),t=k(e),a=await v(),o=new Map(r.map(i=>[i.packageName,i.name])),n=new Map(r.map(i=>[i.name,i.packageName])),s=new Set(t.map(i=>i.name)),c=new Set(r.map(i=>i.name)),l=[...new Set([...c,...s])].sort(),p=await Promise.all(l.map(async i=>{let P=s.has(i);return{name:i,hasApi:c.has(i),hasUi:P,apiPackage:n.get(i),backends:P?await T(U.join(e,"apps",i,"ui"),i,o):[]}})),d=await C();return{apps:p,presets:Object.keys(a.devServersPresets??{}),environments:Object.keys(d?.envs??{}).sort()}},F=e=>{let r=[];for(let t of e.apps){if(t.hasUi){let a=t.backends.flatMap(n=>n.routes.map(s=>s.path)),o=a.length>0?`frontend \u2014 proxies ${[...a].sort().join(", ")}`:"frontend";r.push({name:`${t.name}/ui`,value:`${t.name}/ui`,description:o})}t.hasApi&&!t.hasUi&&r.push({name:`${t.name}/api`,value:`${t.name}/api`,description:"backend"})}return r},L=e=>{let r={api:e.apps.filter(o=>o.hasApi).map(o=>o.name),ui:e.apps.filter(o=>o.hasUi).map(o=>o.name)},t={},a=new Map;for(let o of e.apps){o.apiPackage!=null&&(t[o.name]=o.apiPackage);for(let n of o.backends)for(let s of n.routes)a.set(`${o.name} ${s.path}`,n.packageName)}return{discovered:r,apiPkgByApp:t,routePkg:(o,n)=>a.get(`${o} ${n}`)}},X=(e,r)=>x({__wizard__:e},L(r)).map(t=>t.message),Z="INFRA_KIT_DEV_WIZARD_CMUX",H=()=>m.env[Z]==="1",G=async(e,r,t)=>{let a=new Map(r.apps.map(n=>[n.name,n])),o={};for(let n of t){let s=a.get(n.split("/")[0]);for(let c of s?.backends??[])for(let l of c.routes){if(!l.localCapable||!l.cloudCapable)continue;let p=await e.select({message:`\u{1F500} ${n} ${l.path} \u2192 local or cloud?`,choices:[{name:"local (this machine)",value:"local"},{name:"cloud",value:"cloud"}],default:l.default??"local"});o[`${n} ${l.path}`]=p}}return o},J=(e,r,t)=>e.apps.find(a=>a.name===r)?.backends.flatMap(a=>a.routes).find(a=>a.path===t),Q=(e,r)=>{let t=[];for(let[a,o]of Object.entries(e.presetDef.apps??{})){if(!a.endsWith("/ui")||!o.proxy)continue;let n=a.split("/")[0];for(let[s,c]of Object.entries(o.proxy)){let l=J(r,n,s),p=l&&l.localCapable&&l.cloudCapable?"":" (only option)";t.push(`  ${a} ${s} \u2192 ${c}${p}`)}}if(t.length!==0){u.info("Resolved routes:");for(let a of[...t].sort())u.info(a)}},R=async(e,r)=>{if(r.apps.length===0)return u.warn("No apps discovered to run."),null;let t=await e.checkbox({message:"\u{1F4E6} Which packages?",choices:F(r)});if(t.length===0)return u.warn("No packages selected."),null;let a=t.filter(i=>i.endsWith("/ui")),o=await G(e,r,a),n=await e.confirm({message:"\u{1F440} Rebuild & restart on save (watch)?",default:!1}),s=H()?await e.confirm({message:"\u{1F9E9} Run each app in its own cmux pane?",default:!1}):!1,c={targets:t,sources:o,watch:n,cmux:s},l=z(c,r);if(l.anyCloudRoute){if(r.environments.length===0)return u.warn("\u2601\uFE0F  This selection routes to a cloud environment, but no environment token is loaded."),u.warn("   Run `infra-kit env-load` to add one, then re-run the wizard."),null;c.env=await e.select({message:"\u2601\uFE0F  Point cloud routes at which environment?",choices:r.environments.map(i=>({name:i,value:i}))}),m.env[w]=c.env}let p=X(l.presetDef,r);if(p.length>0){u.warn("\u26A0\uFE0F  Proxy audit found issues with this selection:");for(let i of p)u.warn(`   \u2022 ${i}`);return null}Q(l,r),Y(l,c);let d=l.targetKeys.filter(i=>i.endsWith("/api")).map(i=>i.split("/")[0]);return s&&d.length>0?{include:d,presetDef:l.presetDef,watch:n,cmux:!0}:(s&&u.info("\u2139\uFE0F  cmux needs at least one local backend (panes are backend-only) \u2014 running in-process instead."),{presetDef:l.presetDef,watch:n,cmux:!1})},Y=(e,r)=>{f.setInteractive();let t=M(e,r);f.addOption(t.flags,!0),f.print(),u.info("\u2139\uFE0F  Prefer a short name? Save this selection as a devPreset and run `infra-kit dev <name>`.")},ee=async(e,r)=>{let t=await e.confirm({message:"\u{1F440} Rebuild & restart on save (watch)?",default:!1});return f.setInteractive(),f.addOption(r,!0),t&&f.addOption("--watch",!0),f.print(),{preset:r,watch:t,cmux:!1}},S=" manual",re=async(e,r)=>{if(r.presets.length===0)return R(e,r);let t=await e.select({message:"\u{1F680} Start from a preset, or configure manually?",choices:[...r.presets.map(a=>({name:a,value:a})),new I(" "),{name:"Manual (custom)\u2026",value:S}]});return t===S?R(e,r):ee(e,t)},be=async(e=q,r=b(m.cwd()))=>re(e,await V(r));export{S as MANUAL_CHOICE,Z as WIZARD_CMUX_VAR,X as auditManualPlan,q as defaultPrompts,V as gatherWizardModel,T as loadBackends,be as runDevWizard,re as runWizardFlow};
-//# sourceMappingURL=dev-wizard-run-XM5L23UP.js.map

package/dist/persistent-ink-dev-ui-PLLSRSGL.js

@@ -1,2 +0,0 @@
-import{a as p,c as u}from"./chunk-RVTI3AL2.js";import{a as l}from"./chunk-TPVXMJ7N.js";import{render as C}from"ink";import O from"node:process";import{Box as c,Static as S,Text as d}from"ink";import{useEffect as F,useState as b}from"react";import{jsx as a,jsxs as v}from"react/jsx-runtime";var g=r=>{let{phase:e,narration:t,readyLines:i}=r,[o,f]=b(0);return F(()=>{if(i)return;let n=setInterval(()=>{f(s=>s+1)},w);return()=>{clearInterval(n)}},[i]),i?a(S,{items:i,children:(n,s)=>a(d,{children:n},s)}):v(c,{flexDirection:"column",children:[v(c,{children:[a(d,{color:"cyan",children:m[o%m.length]}),a(d,{dimColor:!0,children:` ${e}`})]}),t?a(d,{dimColor:!0,children:t}):null]})},m=["\u280B","\u2819","\u2839","\u2838","\u283C","\u2834","\u2826","\u2827","\u2807","\u280F"],w=80;import{Box as P,Static as D,Text as L}from"ink";import{Fragment as T,jsx as h,jsxs as z}from"react/jsx-runtime";var R=r=>{let{headerLines:e,logLines:t,footerLines:i}=r,o=[...e,...t],f=B(i,r.maxFooterLines);return z(T,{children:[h(D,{items:o,children:(n,s)=>h(L,{children:n},s)}),h(P,{flexDirection:"column",children:f.map((n,s)=>h(L,{children:n},s))})]})},B=(r,e)=>{if(e==null||e<1||r.length<=e)return r;let t=r.slice(0,e-1);return[...t,`  \u2026 +${r.length-t.length} more`]};import{jsx as x}from"react/jsx-runtime";var y=class{renderer;renderFn;stdout;verbose;now;instance=null;finalized=!1;persistent=!1;phase="";narration="";headerLines=[];logLines=[];footerLines=[];constructor(e){this.verbose=e.verbose??!1,this.renderFn=e.render??C,this.stdout=e.stdout??l(O.stdout),this.now=e.now??(()=>new Date),this.renderer=new u({appendLog:e.appendLog,verbose:this.verbose,isTTY:!0,write:t=>{this.stdout.write(t)},now:this.now})}logFn=(e,t="info")=>{this.log(e,t)};renderBoot(e){let t=x(g,{phase:this.phase,narration:this.narration,readyLines:e});if(this.instance){this.instance.rerender(t);return}this.instance=this.renderFn(t,{stdout:this.stdout,exitOnCtrlC:!1,patchConsole:!1})}unmount(){this.instance&&(this.instance.unmount(),this.instance=null)}narrate(e){if(this.renderer.teeOnly(e,"info"),this.persistent){this.verbose&&(this.logLines.push(e),this.rerenderPersistent());return}this.finalized||(this.narration=e,this.instance&&this.renderBoot())}log(e,t="info",i={}){let o=t!=="debug"||this.verbose;if(this.persistent){i.tee!==!1&&this.renderer.teeOnly(e,t),o&&(this.logLines.push(e),this.rerenderPersistent());return}o&&this.unmount(),this.renderer.log(e,t,i)}bootStep(e){this.renderer.teeOnly(e,"info"),!this.finalized&&(this.phase=e,this.renderBoot())}stopSpinner(){this.persistent||this.unmount()}ready(e){this.headerLines=this.renderer.formatHeaderLines(e),this.footerLines=this.renderer.formatFooterLines(e),this.logLines=[];for(let t of this.headerLines)this.renderer.teeOnly(t,"info");this.finalized=!0,this.persistent=!0,typeof this.stdout.on=="function"&&this.stdout.on("resize",this.onResize),this.rerenderPersistent()}maxFooterLines(){return Math.max(3,(this.stdout.rows??24)-6)}rerenderPersistent(){let e=x(R,{headerLines:this.headerLines,logLines:this.logLines,footerLines:this.footerLines,maxFooterLines:this.maxFooterLines()});if(this.instance){this.instance.rerender(e);return}this.instance=this.renderFn(e,{stdout:this.stdout,exitOnCtrlC:!1,patchConsole:!1})}onResize=()=>{this.persistent&&this.rerenderPersistent()};event(e){if(this.persistent){let t=`  ${p(this.now())}  ${e.tag}  ${e.text}`;this.renderer.teeOnly(`${e.tag} ${e.text}`,"info"),this.logLines.push(t),this.rerenderPersistent();return}this.unmount(),this.renderer.event(e)}refresh(e){this.persistent&&(this.footerLines=this.renderer.formatFooterLines(e),this.rerenderPersistent())}dispose(){this.persistent&&(this.rerenderPersistent(),typeof this.stdout.off=="function"&&this.stdout.off("resize",this.onResize)),this.finalized=!0,this.persistent=!1,this.unmount()}};export{y as PersistentInkDevUi};
-//# sourceMappingURL=persistent-ink-dev-ui-PLLSRSGL.js.map