infra-kit 0.34.0 → 0.35.0

package/dist/{chunk-AWFGP6GY.js.map → chunk-REDCBY4O.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/lib/install-manager/install-manager.ts", "../src/lib/install-manager/safe-realpath.ts", "../src/lib/install-manager/npm-root.ts", "../src/lib/pm-env/pm-env.ts"],
-  "sourcesContent": ["/**\n * Pure detection of *how* this CLI was installed, so the background updater knows whether it may act at\n * all, and the advisory it prints can name the one command that will actually work. No fs, no spawn, no `process.env` read \u2014 every input is injected, which is\n * what lets the whole matrix be table-tested.\n *\n * Detection is env-first and LAZY: the only signal that costs a subprocess (`npm root -g`) is passed in\n * as `lazyNpmRoot` and consulted solely when every cheaper matcher has missed.\n */\nimport path from 'node:path'\n\n/** The published package this CLI updates itself to. Single source for every suggested argv. */\nexport const PACKAGE_NAME = 'infra-kit'\n\nconst LATEST = `${PACKAGE_NAME}@latest`\n\nexport type InstallManager = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'volta' | 'homebrew' | 'unknown'\n\nexport interface InstallManagerInfo {\n  manager: InstallManager\n  /** The command to run. Only safe to spawn ourselves when `canSelfSpawn`; otherwise print it. */\n  updateCommand: string[]\n  /** False when we must not run the command for the user \u2014 either it needs sudo/a tap, or we guessed. */\n  canSelfSpawn: boolean\n}\n\n/**\n * Canonicalises a candidate *root* directory. Required, not optional: `selfRealPath` has already had its\n * symlinks followed, so comparing it against a raw `PNPM_HOME`/`npm root -g`/`cwd` compares a resolved\n * path to an unresolved one and silently never matches. macOS is the everyday proof \u2014 `/var` is a symlink\n * to `/private/var`, so a global install under `/var/...` reports `unknown` unless both sides are resolved.\n * Callers inject the real thing; tests inject a stub.\n */\nexport type RealpathFn = (dir: string) => string\n\nexport interface DetectInstallManagerInput {\n  /** Fully-resolved (symlinks followed) path to this CLI's entry file. */\n  selfRealPath: string\n  env: NodeJS.ProcessEnv\n  /** Canonicalises each candidate root before comparison. See {@link RealpathFn}. */\n  realpath: RealpathFn\n  /** `npm root -g`, deferred: invoked at most once, and only when no cheaper matcher hit. */\n  lazyNpmRoot?: () => string | undefined\n  /**\n   * The exact version to install, when the caller has already resolved it. Omitted, the command targets\n   * the `latest` dist-tag \u2014 fine to PRINT, unsafe to RUN: see {@link pinSpec}.\n   */\n  version?: string\n}\n\n/**\n * Swap the `@latest` token for `@<version>`.\n *\n * `pnpm add -g infra-kit@latest` resolves the tag from pnpm's on-disk metadata cache and does not\n * revalidate it when a cached version already satisfies the tag (pnpm 12.3.4, measured: two runs 90+\n * minutes after a publish both reinstalled the stale `latest` while `pnpm view` already reported the new\n * one). The updater had fetched the real latest itself moments earlier, ran the tag command, got exit 0\n * \u2014 nothing was reinstalled \u2014 and recorded `installed`, so the stale binary looked up to date until the\n * next cycle repeated the same no-op. A concrete version the cache has never seen forces the fetch.\n */\nconst pinSpec = (command: string[], version: string | undefined): string[] => {\n  if (version === undefined) return command\n\n  return command.map((token) => {\n    return token === LATEST ? `${PACKAGE_NAME}@${version}` : token\n  })\n}\n\n/**\n * Is `child` inside the `parent` subtree? Boundary-aware: a naive `startsWith` would call\n * `/Users/x/pnpm-ish` a child of `/Users/x/pnpm`. `parent` is canonicalised first because it arrives raw\n * from the environment while `child` is already a realpath.\n */\nexport const isWithin = (parent: string, child: string, realpath: RealpathFn): boolean => {\n  const rel = path.relative(realpath(path.resolve(parent)), path.resolve(child))\n\n  return rel !== '' && !rel.startsWith('..') && !path.isAbsolute(rel)\n}\n\n/** Does `p` contain `name` as a whole path SEGMENT? `/a/node_modules_backup/b` must not match `node_modules`. */\nexport const hasSegment = (p: string, name: string): boolean => {\n  return path.resolve(p).split(path.sep).includes(name)\n}\n\n/**\n * Is `p` inside a Homebrew keg belonging to the `name` FORMULA \u2014 i.e. `.../Cellar/<name>/<version>/...`?\n *\n * The formula name is what makes this sound. A bare `Cellar` segment says only \"somewhere under a keg\",\n * and the keg it lands in is routinely someone else's: when npm's global prefix is a node keg\n * (`npm config set prefix \"$(brew --prefix node)\"`, or any keg-only `node@X`), an `npm i -g` package\n * installs to `Cellar/node/<v>/lib/node_modules/<pkg>/...` \u2014 brew has never heard of it, yet the segment\n * is right there. Requiring `<name>` to sit directly after `Cellar` is what separates \"brew installed\n * THIS\" from \"brew installed the runtime that installed this\".\n *\n * Works for both keg layouts, since each is rooted at the formula: a plain formula\n * (`Cellar/infra-kit/1.2.3/bin/infra-kit`) and brew's node-CLI layout\n * (`Cellar/infra-kit/1.2.3/libexec/lib/node_modules/infra-kit/dist/cli.js`). Do NOT try to tell them\n * apart by excluding `node_modules` \u2014 the second one contains it.\n */\nexport const isBrewKegOf = (p: string, name: string): boolean => {\n  const segments = path.resolve(p).split(path.sep)\n  const cellar = segments.indexOf('Cellar')\n\n  return cellar !== -1 && segments[cellar + 1] === name\n}\n\n/**\n * The npm global prefix that owns `binRealPath`, derived from the path ITSELF, or null when the\n * layout is not an npm global one.\n *\n * Matches `<prefix>/lib/node_modules/<packageName>` \u2014 npm's global layout and no other manager's\n * \u2014 requiring BOTH the `lib` parent and our package as the immediate child. Windows global npm has\n * no `lib` segment (`%APPDATA%\\npm\\node_modules`), so this returns null there and detection falls\n * through to `npm root -g`, which is correct on Windows, where there is normally one npm.\n */\n// This is the one signal that cannot point at the wrong tree. Everything else in this module\n// answers \"is this file somewhere inside tool X's directory?\", and containment is not ownership:\n//   - `npm root -g` answers for whichever `npm` is first on PATH, which is routinely a DIFFERENT\n//     node than the one that installed us (a pnpm/nvm/fnm-managed node, or a node that has since\n//     been removed). It then reports a root that does not contain us, every matcher misses, and\n//     detection degrades to `unknown` \u2014 a notice printed forever, on the single most common install\n//     method. That is the bug this exists to close.\n//   - `PNPM_HOME` containment is satisfied by `<PNPM_HOME>/nodejs/<v>/lib/node_modules/<pkg>` (a\n//     plain `npm i -g` under a pnpm-managed node), yet `pnpm add -g` installs to\n//     `<PNPM_HOME>/global/<v>/...` \u2014 a different directory. That one is worse than a missed update:\n//     the install \"succeeds\" while the binary on PATH stays old, silently, with no notice to show\n//     for it.\n//\n// Requiring both segments is what makes the match proof rather than a hint. The `lib` requirement\n// is also what keeps a project-local `<repo>/node_modules/<pkg>` out (it has no `lib`), and nesting\n// cannot spoof it: `.../node_modules/foo/node_modules/<pkg>` fails the `lib` test.\nexport const npmPrefixOfPackage = (binRealPath: string, packageName: string): string | null => {\n  const segments = path.resolve(binRealPath).split(path.sep)\n  const nodeModules = segments.lastIndexOf('node_modules')\n\n  if (nodeModules < 2) return null\n  if (segments[nodeModules - 1] !== 'lib') return null\n  if (segments[nodeModules + 1] !== packageName) return null\n\n  // Drop `lib/node_modules/...`; the empty result of a root-level prefix (`/lib/node_modules/...`) is `/`.\n  return segments.slice(0, nodeModules - 1).join(path.sep) || path.sep\n}\n\n// The self-scoped reading, kept as the name every call site below already uses. `dependency-registry`\n// asks the same question about OTHER packages (`portless`), which is why the body moved up one level\n// rather than gaining a defaulted parameter \u2014 a default is how the wrong package silently gets probed.\nconst npmPrefixFromSelfPath = (selfRealPath: string): string | null => {\n  return npmPrefixOfPackage(selfRealPath, PACKAGE_NAME)\n}\n\n/**\n * `--prefix` is passed EXPLICITLY rather than trusting the ambient one: the whole point of deriving it is\n * that the `npm` we are about to run may default to a different prefix than the one we are installed in.\n * A command-line flag outranks both `npm_config_prefix` and any `.npmrc`, so this targets the tree we\n * actually run from. With `-g`, npm writes `<prefix>/lib/node_modules` and links bins into `<prefix>/bin`.\n */\nconst npmPrefixInstallCommand = (prefix: string): string[] => {\n  return ['npm', 'install', '-g', '--prefix', prefix, LATEST]\n}\n\n/**\n * Render argv as a line the user can paste into a shell.\n *\n * A plain `join(' ')` was fine while every token came from a static table; `--prefix <path>` puts a\n * filesystem path in argv, and `/Users/Ada Lovelace/.nvm/...` pasted unquoted is two arguments and a\n * failed install. Single quotes are sound here without escaping because the callers' validation rejects a\n * token containing a quote \u2014 see `SAFE_COMMAND_TOKEN` in src/lib/update-check/auto-update.ts.\n *\n * @example\n * formatUpdateCommand(['npm', 'install', '-g', '--prefix', '/opt/x y', 'infra-kit@latest'])\n * // => \"npm install -g --prefix '/opt/x y' infra-kit@latest\"\n */\nexport const formatUpdateCommand = (command: string[]): string => {\n  return command\n    .map((token) => {\n      return token.includes(' ') ? `'${token}'` : token\n    })\n    .join(' ')\n}\n\n/** `env[key]` names a directory that contains `selfRealPath`. Absent/empty env var \u2192 no match. */\nconst underEnvDir = (env: NodeJS.ProcessEnv, key: string, selfRealPath: string, realpath: RealpathFn): boolean => {\n  const dir = env[key]\n\n  return dir != null && dir !== '' && isWithin(dir, selfRealPath, realpath)\n}\n\ninterface Matcher extends Omit<InstallManagerInfo, 'manager'> {\n  manager: InstallManager\n  test: (input: Required<Pick<DetectInstallManagerInput, 'selfRealPath' | 'env' | 'realpath'>>) => boolean\n}\n\n/**\n * Consulted FIRST, before {@link npmPrefixFromSelfPath}. Both of these legitimately wrap an npm-shaped\n * `lib/node_modules` tree \u2014 volta at `~/.volta/tools/image/node/<v>/lib/node_modules`, brew at\n * `Cellar/<pkg>/<v>/libexec/lib/node_modules` \u2014 so deriving an npm prefix from the path would hijack\n * installs that a wrapper owns and must keep owning.\n */\nconst WRAPPER_MATCHERS: Matcher[] = [\n  {\n    manager: 'volta',\n    // volta owns the shim; `volta install` is the correct tool, not a workaround \u2014 so we may run it.\n    test: ({ selfRealPath, env, realpath }) => {\n      return (\n        underEnvDir(env, 'VOLTA_HOME', selfRealPath, realpath) ||\n        hasSegment(selfRealPath, '.volta') ||\n        hasSegment(selfRealPath, 'volta')\n      )\n    },\n    updateCommand: ['volta', 'install', PACKAGE_NAME],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'homebrew',\n    // `brew upgrade` can touch the prefix, relink, and prompt \u2014 never ours to run unattended.\n    //\n    // Our own keg is the ONLY sound signal \u2014 see `isBrewKegOf`. Two broader tests look plausible\n    // and are both wrong, because each answers \"did brew put something here?\" when the question is \"does\n    // brew own THIS package?\":\n    //   - `HOMEBREW_PREFIX` containment: when node comes from brew, npm's global prefix IS\n    //     $HOMEBREW_PREFIX, so EVERY `npm i -g` package lands under it, unknown to brew.\n    //   - a bare `Cellar` segment: an npm prefix pointed at a node keg puts packages inside that keg.\n    // Either misfire tells macOS users to run `brew upgrade infra-kit` \u2014 a formula that does not exist \u2014\n    // and, far worse, makes the background auto-updater bail with `cannot-self-spawn` forever, so the\n    // very fix for it can never reach them. Detection runs on the realpath, and a linked brew bin always\n    // resolves into its own keg, so the narrow test has no false negatives to trade for this.\n    test: ({ selfRealPath }) => {\n      return isBrewKegOf(selfRealPath, PACKAGE_NAME)\n    },\n    updateCommand: ['brew', 'upgrade', PACKAGE_NAME],\n    canSelfSpawn: false,\n  },\n]\n\n/**\n * Consulted LAST, after {@link npmPrefixFromSelfPath} has had its say. Each of these proves only that we\n * live somewhere inside a tool's directory tree, which is weaker than knowing the layout npm itself\n * created \u2014 see the `PNPM_HOME`/`nodejs` case in that helper's doc for a containment hit whose install\n * command targets the wrong directory.\n */\nconst TREE_MATCHERS: Matcher[] = [\n  {\n    manager: 'pnpm',\n    test: ({ selfRealPath, env, realpath }) => {\n      return (\n        underEnvDir(env, 'PNPM_HOME', selfRealPath, realpath) ||\n        (hasSegment(selfRealPath, 'pnpm') && hasSegment(selfRealPath, 'global'))\n      )\n    },\n    updateCommand: ['pnpm', 'add', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'bun',\n    test: ({ selfRealPath, env, realpath }) => {\n      return underEnvDir(env, 'BUN_INSTALL', selfRealPath, realpath) || hasSegment(selfRealPath, '.bun')\n    },\n    updateCommand: ['bun', 'add', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'yarn',\n    test: ({ selfRealPath }) => {\n      return (\n        hasSegment(selfRealPath, '.yarn') || (hasSegment(selfRealPath, 'yarn') && hasSegment(selfRealPath, 'global'))\n      )\n    },\n    updateCommand: ['yarn', 'global', 'add', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'npm',\n    test: ({ selfRealPath, env, realpath }) => {\n      return underEnvDir(env, 'npm_config_prefix', selfRealPath, realpath)\n    },\n    updateCommand: ['npm', 'install', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n]\n\nconst NPM_UPDATE_COMMAND = ['npm', 'install', '-g', LATEST]\n\n/**\n * The command to print when nobody has identified this CLI's package manager \u2014 the same guess\n * `detectInstallManager` records for an unrecognised location, pinned to `version`. For a caller that\n * must name a command but has no worker verdict to read (no update cache on an opt-out machine).\n *\n * @example\n * fallbackUpdateCommand('0.8.0') // => ['npm', 'install', '-g', 'infra-kit@0.8.0']\n */\nexport const fallbackUpdateCommand = (version: string): string[] => {\n  return pinSpec(NPM_UPDATE_COMMAND, version)\n}\n\n/**\n * Identify the package manager that owns `selfRealPath`.\n *\n * Order, and why it is this one: wrappers that own an npm-shaped tree (volta, brew) first, then the npm\n * prefix DERIVED from our own path, then the env/path containment matchers, then the `npm root -g` probe.\n * The derived prefix sits above containment because it is the only signal that cannot name a directory we\n * do not live in \u2014 see {@link npmPrefixFromSelfPath}.\n *\n * `lazyNpmRoot` is the last resort and is invoked at most once, only after every matcher has missed \u2014 a\n * pnpm or volta install never pays for the subprocess, and neither does any npm global install in the\n * standard layout, which the derived prefix now settles for free. When nothing matches we report `unknown`\n * with an npm command that is a *suggestion only* (`canSelfSpawn: false`): running a guessed global\n * install is worse than printing one.\n *\n * @example\n * detectInstallManager({ selfRealPath: '/Users/x/Library/pnpm/global/5/node_modules/infra-kit/dist/cli.js', env: {} })\n * // => { manager: 'pnpm', updateCommand: ['pnpm', 'add', '-g', 'infra-kit@latest'], canSelfSpawn: true }\n * detectInstallManager({ selfRealPath: '/Users/x/Library/pnpm/global/5/node_modules/infra-kit/dist/cli.js', env: {}, version: '0.5.5' })\n * // => { manager: 'pnpm', updateCommand: ['pnpm', 'add', '-g', 'infra-kit@0.5.5'], canSelfSpawn: true }\n */\nexport const detectInstallManager = (input: DetectInstallManagerInput): InstallManagerInfo => {\n  const { selfRealPath, env, realpath, lazyNpmRoot, version } = input\n  const detected = detectUnpinned({ selfRealPath, env, realpath, lazyNpmRoot })\n\n  return { ...detected, updateCommand: pinSpec(detected.updateCommand, version) }\n}\n\nconst detectUnpinned = (input: DetectInstallManagerInput): InstallManagerInfo => {\n  const { selfRealPath, env, realpath, lazyNpmRoot } = input\n  const toInfo = (hit: Matcher): InstallManagerInfo => {\n    return { manager: hit.manager, updateCommand: hit.updateCommand, canSelfSpawn: hit.canSelfSpawn }\n  }\n  const matches = ({ test }: Matcher): boolean => {\n    return test({ selfRealPath, env, realpath })\n  }\n\n  const wrapper = WRAPPER_MATCHERS.find(matches)\n\n  if (wrapper) return toInfo(wrapper)\n\n  const derivedPrefix = npmPrefixFromSelfPath(selfRealPath)\n\n  if (derivedPrefix !== null) {\n    return { manager: 'npm', updateCommand: npmPrefixInstallCommand(derivedPrefix), canSelfSpawn: true }\n  }\n\n  const tree = TREE_MATCHERS.find(matches)\n\n  if (tree) return toInfo(tree)\n\n  const npmRoot = lazyNpmRoot?.()\n\n  if (npmRoot != null && npmRoot !== '' && isWithin(npmRoot, selfRealPath, realpath)) {\n    return { manager: 'npm', updateCommand: NPM_UPDATE_COMMAND, canSelfSpawn: true }\n  }\n\n  return { manager: 'unknown', updateCommand: NPM_UPDATE_COMMAND, canSelfSpawn: false }\n}\n\n/**\n * Is this CLI running from a *project-local* `node_modules` (as opposed to a global root)?\n *\n * The cwd clause is what does the distinguishing \u2014 BOTH a project install and a global root contain a\n * `/node_modules/` segment (`pnpm root -g` is `~/Library/pnpm/global/5/node_modules`). Without it we\n * would nag every global pnpm user to stop using a local install they do not have.\n *\n * Accepted false-negative: invoked from a subdirectory (cwd `project/apps/x`, deps at\n * `project/node_modules`) this returns false and the advisory stays silent. Under-warning is the safe\n * direction for a best-effort, never-throwing advisory \u2014 do not \"fix\" it by dropping the cwd clause.\n *\n * `cwd` is canonicalised before comparison for the same reason `detectInstallManager` canonicalises its\n * roots: `selfRealPath` is a realpath, and comparing it to an unresolved cwd never matches.\n *\n * @example\n * isLocalNodeModulesInstall('/repo/node_modules/infra-kit/dist/cli.js', '/repo', (p) => p) // => true\n */\nexport const isLocalNodeModulesInstall = (selfRealPath: string, cwd: string, realpath: RealpathFn): boolean => {\n  return hasSegment(selfRealPath, 'node_modules') && isWithin(cwd, selfRealPath, realpath)\n}\n\n/** Does this path exist at all \u2014 directory, file, or symlink? Injected so the walk never touches the real disk in tests. */\nexport type ExistsFn = (p: string) => boolean\n\nexport interface IsGlobalInstallInput {\n  /** Fully-resolved (symlinks followed) path to this CLI's entry file. */\n  selfRealPath: string\n  env: NodeJS.ProcessEnv\n  /** Canonicalises `home` and every root {@link detectInstallManager} compares against. */\n  realpath: RealpathFn\n  /** The user's home directory (`os.homedir()`), raw \u2014 canonicalised here before the walk compares it. */\n  home: string\n  exists: ExistsFn\n}\n\n/** Upper bound on the `.git` walk: deeper than any real install layout, so it only ever guards against a pathological path. */\nconst GIT_WALK_MAX_HOPS = 32\n\n/**\n * Where the `.git` walk starts: the parent of the OUTERMOST `node_modules` segment (`indexOf`, not\n * `lastIndexOf` \u2014 pnpm's `.pnpm/<pkg>@<v>/node_modules/<pkg>` nests two, and the checkout that owns the\n * tree sits above the first). A self path with no `node_modules` at all (a plain brew keg's `bin/`) starts\n * at its own directory, so the walk still inspects every ancestor.\n */\nconst gitWalkStart = (selfRealPath: string): string => {\n  const segments = path.resolve(selfRealPath).split(path.sep)\n  const outermost = segments.indexOf('node_modules')\n\n  if (outermost === -1) return path.dirname(selfRealPath)\n\n  return segments.slice(0, outermost).join(path.sep) || path.sep\n}\n\n/** `start` and its ancestors up to but EXCLUDING `homeReal`, bounded \u2014 the directories the `.git` walk may inspect. */\nconst ancestorsBelowHome = (start: string, homeReal: string): string[] => {\n  const dirs: string[] = []\n  let dir = start\n\n  while (dir !== homeReal && dirs.length < GIT_WALK_MAX_HOPS) {\n    dirs.push(dir)\n\n    const parent = path.dirname(dir)\n\n    if (parent === dir) break\n\n    dir = parent\n  }\n\n  return dirs\n}\n\nconst hasGitAncestor = (start: string, homeReal: string, exists: ExistsFn): boolean => {\n  return ancestorsBelowHome(start, homeReal).some((dir) => {\n    return exists(path.join(dir, '.git'))\n  })\n}\n\n/**\n * Is this CLI the machine's *global* install \u2014 the one a root-owned daemon or a system-wide link may be\n * aimed at \u2014 as opposed to a checkout or a project-local dependency? Probe-free: fs + env only, never a\n * subprocess, because it runs on every boot.\n *\n * True iff {@link detectInstallManager} names a manager AND no `.git` entry (directory or file \u2014 a\n * worktree's is a file) exists above the outermost `node_modules`, walking up to but EXCLUDING\n * `realpath(home)`. Never throws: any seam failure reports false, the safe direction for every caller.\n *\n * @example\n * isGlobalInstall({\n *   selfRealPath: '/Users/x/Library/pnpm/global/v11/8a83-1/node_modules/.pnpm/infra-kit@0.5.6/node_modules/infra-kit/dist/cli.js',\n *   env: { PNPM_HOME: '/Users/x/Library/pnpm' },\n *   realpath: (p) => p,\n *   home: '/Users/x',\n *   exists: (p) => p === '/Users/x/.git',\n * }) // => true \u2014 the only `.git` is $HOME's own, which the walk never inspects\n */\n// Why these two predicates and not the obvious candidates:\n//   - Not `canSelfSpawn`: that flag encodes \"may I run an unattended `npm i -g`\", and homebrew is\n//     `canSelfSpawn: false` while being unmistakably global \u2014 gating on it would leave a brew install\n//     unconverged forever. A global install whose manager cannot be identified in a stripped env (no\n//     `PNPM_HOME`, no derivable prefix) reports false: fail-safe, since a skipped write is never wrong and\n//     the next shell-run command converges it.\n//   - Not `isLocalNodeModulesInstall`: its cwd clause calls every global layout under `$HOME` \"local\" the\n//     moment cwd is `$HOME` \u2014 which is exactly the cwd the background updater spawns with, and a plain\n//     `cd ~ && infra-kit version` reproduces it. This predicate reads the tree, not the cwd.\n//   - Why the `.git` walk at all: the cheap matchers are segment heuristics that also fire on\n//     project-local shapes \u2014 a repo with a `volta` path segment, Yarn Berry's `.yarn/unplugged/\u2026`, a\n//     checkout cloned under `$PNPM_HOME`, a workspace package literally named `lib` \u2014 and every one of\n//     those is a checkout; every checkout has a `.git`, no global root does.\n//   - Why `$HOME` is excluded: dotfiles users `git init ~`, and a `~/.git` would refuse the pnpm-global\n//     install permanently. Every checkout under `$HOME` (`~/repo/.git`) is still strictly below it.\n//   - Why `.git` ONLY, not `pnpm-workspace.yaml`: pnpm 12 writes one INSIDE the global install dir, so\n//     that marker would refuse the very install this is for.\nexport const isGlobalInstall = (input: IsGlobalInstallInput): boolean => {\n  try {\n    const { selfRealPath, env, realpath, home, exists } = input\n\n    if (detectInstallManager({ selfRealPath, env, realpath }).manager === 'unknown') return false\n\n    return !hasGitAncestor(gitWalkStart(selfRealPath), realpath(path.resolve(home)), exists)\n  } catch {\n    return false\n  }\n}\n\n/**\n * The advisory gate for `warnIfLocalInstall`, pulled out so it is testable without spawning the CLI.\n * Warn only when the install is provably NOT global AND looks project-local: the second clause alone\n * fires on a global pnpm root whenever cwd is `$HOME` (see {@link isGlobalInstall}).\n */\nexport const shouldWarnLocalInstall = (input: IsGlobalInstallInput & { cwd: string }): boolean => {\n  const { selfRealPath, cwd, realpath } = input\n\n  return !isGlobalInstall(input) && isLocalNodeModulesInstall(selfRealPath, cwd, realpath)\n}\n", "import { realpathSync } from 'node:fs'\nimport path from 'node:path'\n\n/**\n * The impure companion to the pure detection module: canonicalise a directory that may not exist.\n *\n * `realpathSync` throws on a missing path, and candidate roots routinely miss \u2014 `PNPM_HOME` can point at a\n * directory the user never created, `npm root -g` can name a prefix that was removed. A throw there would\n * turn \"we could not identify your install\" into a crash, so an unresolvable path falls back to\n * `path.resolve`, which still normalises `.`/`..` and yields a usable, non-matching absolute path.\n */\nexport const safeRealpath = (dir: string): string => {\n  try {\n    return realpathSync(dir)\n  } catch {\n    return path.resolve(dir)\n  }\n}\n", "/* eslint-disable sonarjs/no-os-command-from-path */\n/**\n * `npm root -g`, the LAZY fallback for {@link detectInstallManager}.\n *\n * Why it is indispensable: the `npm` matcher keys off `npm_config_prefix`, which npm sets only while npm\n * itself is running. A user who ran `npm i -g infra-kit` months ago and now types `ik` has no such var,\n * so every cheap matcher misses and detection reports `unknown` / `canSelfSpawn: false`. Without this\n * probe the single most common install method can never update itself.\n *\n * Read by the background update worker, and by the `doctor` advisory that names the command a human\n * would run by hand \u2014 one probe so the two can never disagree about who owns the install.\n */\nimport { execFileSync } from 'node:child_process'\nimport process from 'node:process'\n\nconst NPM_ROOT_TIMEOUT_MS = 3_000\n\n/**\n * The global npm root, or undefined when npm is absent, slow, or errors. Costs a subprocess, so\n * `detectInstallManager` invokes it at most once and only after every env/path matcher has missed \u2014 a\n * pnpm or volta install never pays for it.\n *\n * Resolving the user's `npm` from PATH is inherent here: we must ask the very package manager that owns\n * this install where its global root is. Pinning an absolute path would defeat the detection.\n *\n * @example\n * defaultLazyNpmRoot() // => '/usr/local/lib/node_modules' | undefined\n */\nexport const defaultLazyNpmRoot = (): string | undefined => {\n  try {\n    const out = execFileSync('npm', ['root', '-g'], {\n      encoding: 'utf-8',\n      timeout: NPM_ROOT_TIMEOUT_MS,\n      stdio: ['ignore', 'pipe', 'ignore'],\n      shell: process.platform === 'win32',\n    })\n    const trimmed = out.trim()\n\n    return trimmed === '' ? undefined : trimmed\n  } catch {\n    return undefined\n  }\n}\n", "/**\n * `env` minus every package-manager marker a spawned child could mistake for a throwaway install:\n * the whole `npm_*` block plus `PNPM_SCRIPT_SRC_DIR`. The result makes the child look exactly like\n * a direct `node <pkg>/dist/cli.js` run \u2014 which it is.\n */\n// Any child we launch through `node <bin>` (the portless driver, the update worker, the dependency installer)\n// inherits our env, and a tool that sniffs those markers will conclude it was run via `npx`/`pnpm\n// dlx` and refuse to work. portless is the motivating case; its guard (cli.js `main()`) is:\n//\n//     isNpx     = npm_command === 'exec' && !npm_lifecycle_event\n//     isPnpmDlx = !!PNPM_SCRIPT_SRC_DIR  && !npm_lifecycle_event\n//     if ((isNpx || isPnpmDlx) && !isLocallyInstalled()) -> abort\n//\n// `isLocallyInstalled()` walks up from the CHILD's cwd, so in a consumer repo (where portless is a\n// transitive dep of infra-kit, absent from the root `node_modules`) it is false and the guard is\n// live. `pnpm exec infra-kit dev` exports `npm_command=exec` with no lifecycle event, so `isNpx`\n// holds, every portless call exits 1, `isAvailable()` is false, and `ensureProxy` aborts the whole\n// dev boot with \"portless is not installed\", on a machine where it plainly is.\n//\n// `PNPM_SCRIPT_SRC_DIR` must be dropped ALONGSIDE the `npm_*` block, not left behind: it is set by\n// `pnpm run <script>`, where `npm_lifecycle_event` is what suppresses `isPnpmDlx`. Stripping only\n// `npm_*` removes that suppressor and creates an abort for the script-style invocation that\n// previously worked. Both markers go, or neither is safe.\nexport const withoutPackageManagerEnv = (env: NodeJS.ProcessEnv): NodeJS.ProcessEnv => {\n  return Object.fromEntries(\n    Object.entries(env).filter(([key]) => {\n      return !key.startsWith('npm_') && key !== 'PNPM_SCRIPT_SRC_DIR'\n    }),\n  )\n}\n\n/**\n * npm's own configuration \u2014 as opposed to the npx/dlx *markers* above. Case-insensitive because npm reads\n * `npm_config_*` case-insensitively (its parser matches `/^npm_config_/i`) and real environments export\n * both forms: shells write the lowercase name, Dockerfiles and CI images overwhelmingly write the\n * uppercase one.\n */\nconst NPM_CONFIG_TO_PRESERVE = /^npm_config_(?:prefix|registry)$/i\n\n/**\n * The env for spawning a package-manager INSTALL: npx/dlx markers stripped, but npm's own config\n * kept \u2014 specifically `npm_config_prefix` and `npm_config_registry`.\n *\n * @example\n * packageManagerInstallEnv({ npm_command: 'exec', npm_config_prefix: '/p', PATH: '/bin' })\n * // => { npm_config_prefix: '/p', PATH: '/bin' }\n */\n// `withoutPackageManagerEnv` is deliberately a blunt `npm_*` prefix filter, and it is the\n// right tool for the portless driver \u2014 but it is the WRONG tool for spawning an install, because it\n// also drops the two variables that tell the package manager where, and from where, to install:\n//\n//   - `npm_config_prefix` is the npm matcher's ONLY signal (see `install-manager.ts`). Strip it and\n//     we detect a global install rooted at prefix P, then run the install with P erased \u2014 so it\n//     lands in the DEFAULT prefix instead. That is either a permanent EACCES, or a second global\n//     copy that is not the one on PATH. Nothing notices: the install exits 0, we report\n//     `installed`, the version on PATH never moves, and the whole cycle repeats every window\n//     forever. `export npm_config_prefix=~/.npm-global` is npm's own documented EACCES workaround,\n//     so this is a mainstream layout, not an exotic one.\n//   - `npm_config_registry` is what the update CHECK already used to pick a registry. Dropping it\n//     here means we decide against a corporate mirror and then install from somewhere else.\n//\n// Preserving these cannot re-arm the dlx guard: that guard reads `npm_command`,\n// `npm_lifecycle_event` and `PNPM_SCRIPT_SRC_DIR` \u2014 none of which are npm config, and all of which\n// remain stripped.\nexport const packageManagerInstallEnv = (env: NodeJS.ProcessEnv): NodeJS.ProcessEnv => {\n  const sanitised = withoutPackageManagerEnv(env)\n\n  for (const [key, value] of Object.entries(env)) {\n    if (NPM_CONFIG_TO_PRESERVE.test(key)) sanitised[key] = value\n  }\n\n  return sanitised\n}\n"],
-  "mappings": "AAQA,OAAOA,MAAU,YAGV,IAAMC,EAAe,YAEtBC,EAAS,GAAGD,CAAY,UA8CxBE,EAAU,CAACC,EAAmBC,IAC9BA,IAAY,OAAkBD,EAE3BA,EAAQ,IAAKE,GACXA,IAAUJ,EAAS,GAAGD,CAAY,IAAII,CAAO,GAAKC,CAC1D,EAQUC,EAAW,CAACC,EAAgBC,EAAeC,IAAkC,CACxF,IAAMC,EAAMX,EAAK,SAASU,EAASV,EAAK,QAAQQ,CAAM,CAAC,EAAGR,EAAK,QAAQS,CAAK,CAAC,EAE7E,OAAOE,IAAQ,IAAM,CAACA,EAAI,WAAW,IAAI,GAAK,CAACX,EAAK,WAAWW,CAAG,CACpE,EAGaC,EAAa,CAACC,EAAWC,IAC7Bd,EAAK,QAAQa,CAAC,EAAE,MAAMb,EAAK,GAAG,EAAE,SAASc,CAAI,EAkBzCC,EAAc,CAACF,EAAWC,IAA0B,CAC/D,IAAME,EAAWhB,EAAK,QAAQa,CAAC,EAAE,MAAMb,EAAK,GAAG,EACzCiB,EAASD,EAAS,QAAQ,QAAQ,EAExC,OAAOC,IAAW,IAAMD,EAASC,EAAS,CAAC,IAAMH,CACnD,EA2BaI,EAAqB,CAACC,EAAqBC,IAAuC,CAC7F,IAAMJ,EAAWhB,EAAK,QAAQmB,CAAW,EAAE,MAAMnB,EAAK,GAAG,EACnDqB,EAAcL,EAAS,YAAY,cAAc,EAIvD,OAFIK,EAAc,GACdL,EAASK,EAAc,CAAC,IAAM,OAC9BL,EAASK,EAAc,CAAC,IAAMD,EAAoB,KAG/CJ,EAAS,MAAM,EAAGK,EAAc,CAAC,EAAE,KAAKrB,EAAK,GAAG,GAAKA,EAAK,GACnE,EAKMsB,EAAyBC,GACtBL,EAAmBK,EAActB,CAAY,EAShDuB,EAA2BC,GACxB,CAAC,MAAO,UAAW,KAAM,WAAYA,EAAQvB,CAAM,EAe/CwB,EAAuBtB,GAC3BA,EACJ,IAAKE,GACGA,EAAM,SAAS,GAAG,EAAI,IAAIA,CAAK,IAAMA,CAC7C,EACA,KAAK,GAAG,EAIPqB,EAAc,CAACC,EAAwBC,EAAaN,EAAsBb,IAAkC,CAChH,IAAMoB,EAAMF,EAAIC,CAAG,EAEnB,OAAOC,GAAO,MAAQA,IAAQ,IAAMvB,EAASuB,EAAKP,EAAcb,CAAQ,CAC1E,EAaMqB,EAA8B,CAClC,CACE,QAAS,QAET,KAAM,CAAC,CAAE,aAAAR,EAAc,IAAAK,EAAK,SAAAlB,CAAS,IAEjCiB,EAAYC,EAAK,aAAcL,EAAcb,CAAQ,GACrDE,EAAWW,EAAc,QAAQ,GACjCX,EAAWW,EAAc,OAAO,EAGpC,cAAe,CAAC,QAAS,UAAWtB,CAAY,EAChD,aAAc,EAChB,EACA,CACE,QAAS,WAaT,KAAM,CAAC,CAAE,aAAAsB,CAAa,IACbR,EAAYQ,EAActB,CAAY,EAE/C,cAAe,CAAC,OAAQ,UAAWA,CAAY,EAC/C,aAAc,EAChB,CACF,EAQM+B,EAA2B,CAC/B,CACE,QAAS,OACT,KAAM,CAAC,CAAE,aAAAT,EAAc,IAAAK,EAAK,SAAAlB,CAAS,IAEjCiB,EAAYC,EAAK,YAAaL,EAAcb,CAAQ,GACnDE,EAAWW,EAAc,MAAM,GAAKX,EAAWW,EAAc,QAAQ,EAG1E,cAAe,CAAC,OAAQ,MAAO,KAAMrB,CAAM,EAC3C,aAAc,EAChB,EACA,CACE,QAAS,MACT,KAAM,CAAC,CAAE,aAAAqB,EAAc,IAAAK,EAAK,SAAAlB,CAAS,IAC5BiB,EAAYC,EAAK,cAAeL,EAAcb,CAAQ,GAAKE,EAAWW,EAAc,MAAM,EAEnG,cAAe,CAAC,MAAO,MAAO,KAAMrB,CAAM,EAC1C,aAAc,EAChB,EACA,CACE,QAAS,OACT,KAAM,CAAC,CAAE,aAAAqB,CAAa,IAElBX,EAAWW,EAAc,OAAO,GAAMX,EAAWW,EAAc,MAAM,GAAKX,EAAWW,EAAc,QAAQ,EAG/G,cAAe,CAAC,OAAQ,SAAU,MAAOrB,CAAM,EAC/C,aAAc,EAChB,EACA,CACE,QAAS,MACT,KAAM,CAAC,CAAE,aAAAqB,EAAc,IAAAK,EAAK,SAAAlB,CAAS,IAC5BiB,EAAYC,EAAK,oBAAqBL,EAAcb,CAAQ,EAErE,cAAe,CAAC,MAAO,UAAW,KAAMR,CAAM,EAC9C,aAAc,EAChB,CACF,EAEM+B,EAAqB,CAAC,MAAO,UAAW,KAAM/B,CAAM,EAU7CgC,EAAyB7B,GAC7BF,EAAQ8B,EAAoB5B,CAAO,EAuB/B8B,EAAwBC,GAAyD,CAC5F,GAAM,CAAE,aAAAb,EAAc,IAAAK,EAAK,SAAAlB,EAAU,YAAA2B,EAAa,QAAAhC,CAAQ,EAAI+B,EACxDE,EAAWC,EAAe,CAAE,aAAAhB,EAAc,IAAAK,EAAK,SAAAlB,EAAU,YAAA2B,CAAY,CAAC,EAE5E,MAAO,CAAE,GAAGC,EAAU,cAAenC,EAAQmC,EAAS,cAAejC,CAAO,CAAE,CAChF,EAEMkC,EAAkBH,GAAyD,CAC/E,GAAM,CAAE,aAAAb,EAAc,IAAAK,EAAK,SAAAlB,EAAU,YAAA2B,CAAY,EAAID,EAC/CI,EAAUC,IACP,CAAE,QAASA,EAAI,QAAS,cAAeA,EAAI,cAAe,aAAcA,EAAI,YAAa,GAE5FC,EAAU,CAAC,CAAE,KAAAC,CAAK,IACfA,EAAK,CAAE,aAAApB,EAAc,IAAAK,EAAK,SAAAlB,CAAS,CAAC,EAGvCkC,EAAUb,EAAiB,KAAKW,CAAO,EAE7C,GAAIE,EAAS,OAAOJ,EAAOI,CAAO,EAElC,IAAMC,EAAgBvB,EAAsBC,CAAY,EAExD,GAAIsB,IAAkB,KACpB,MAAO,CAAE,QAAS,MAAO,cAAerB,EAAwBqB,CAAa,EAAG,aAAc,EAAK,EAGrG,IAAMC,EAAOd,EAAc,KAAKU,CAAO,EAEvC,GAAII,EAAM,OAAON,EAAOM,CAAI,EAE5B,IAAMC,EAAUV,IAAc,EAE9B,OAAIU,GAAW,MAAQA,IAAY,IAAMxC,EAASwC,EAASxB,EAAcb,CAAQ,EACxE,CAAE,QAAS,MAAO,cAAeuB,EAAoB,aAAc,EAAK,EAG1E,CAAE,QAAS,UAAW,cAAeA,EAAoB,aAAc,EAAM,CACtF,EAmBae,EAA4B,CAACzB,EAAsB0B,EAAavC,IACpEE,EAAWW,EAAc,cAAc,GAAKhB,EAAS0C,EAAK1B,EAAcb,CAAQ,EAkBnFwC,EAAoB,GAQpBC,EAAgB5B,GAAiC,CACrD,IAAMP,EAAWhB,EAAK,QAAQuB,CAAY,EAAE,MAAMvB,EAAK,GAAG,EACpDoD,EAAYpC,EAAS,QAAQ,cAAc,EAEjD,OAAIoC,IAAc,GAAWpD,EAAK,QAAQuB,CAAY,EAE/CP,EAAS,MAAM,EAAGoC,CAAS,EAAE,KAAKpD,EAAK,GAAG,GAAKA,EAAK,GAC7D,EAGMqD,EAAqB,CAACC,EAAeC,IAA+B,CACxE,IAAMC,EAAiB,CAAC,EACpB1B,EAAMwB,EAEV,KAAOxB,IAAQyB,GAAYC,EAAK,OAASN,GAAmB,CAC1DM,EAAK,KAAK1B,CAAG,EAEb,IAAMtB,EAASR,EAAK,QAAQ8B,CAAG,EAE/B,GAAItB,IAAWsB,EAAK,MAEpBA,EAAMtB,CACR,CAEA,OAAOgD,CACT,EAEMC,EAAiB,CAACH,EAAeC,EAAkBG,IAChDL,EAAmBC,EAAOC,CAAQ,EAAE,KAAMzB,GACxC4B,EAAO1D,EAAK,KAAK8B,EAAK,MAAM,CAAC,CACrC,EAsCU6B,EAAmBvB,GAAyC,CACvE,GAAI,CACF,GAAM,CAAE,aAAAb,EAAc,IAAAK,EAAK,SAAAlB,EAAU,KAAAkD,EAAM,OAAAF,CAAO,EAAItB,EAEtD,OAAID,EAAqB,CAAE,aAAAZ,EAAc,IAAAK,EAAK,SAAAlB,CAAS,CAAC,EAAE,UAAY,UAAkB,GAEjF,CAAC+C,EAAeN,EAAa5B,CAAY,EAAGb,EAASV,EAAK,QAAQ4D,CAAI,CAAC,EAAGF,CAAM,CACzF,MAAQ,CACN,MAAO,EACT,CACF,EAOaG,EAA0BzB,GAA2D,CAChG,GAAM,CAAE,aAAAb,EAAc,IAAA0B,EAAK,SAAAvC,CAAS,EAAI0B,EAExC,MAAO,CAACuB,EAAgBvB,CAAK,GAAKY,EAA0BzB,EAAc0B,EAAKvC,CAAQ,CACzF,ECreA,OAAS,gBAAAoD,MAAoB,UAC7B,OAAOC,MAAU,YAUV,IAAMC,EAAgBC,GAAwB,CACnD,GAAI,CACF,OAAOH,EAAaG,CAAG,CACzB,MAAQ,CACN,OAAOF,EAAK,QAAQE,CAAG,CACzB,CACF,ECLA,OAAS,gBAAAC,MAAoB,qBAC7B,OAAOC,MAAa,eAEpB,IAAMC,EAAsB,IAafC,EAAqB,IAA0B,CAC1D,GAAI,CAOF,IAAMC,EANMJ,EAAa,MAAO,CAAC,OAAQ,IAAI,EAAG,CAC9C,SAAU,QACV,QAASE,EACT,MAAO,CAAC,SAAU,OAAQ,QAAQ,EAClC,MAAOD,EAAQ,WAAa,OAC9B,CAAC,EACmB,KAAK,EAEzB,OAAOG,IAAY,GAAK,OAAYA,CACtC,MAAQ,CACN,MACF,CACF,ECnBO,IAAMC,EAA4BC,GAChC,OAAO,YACZ,OAAO,QAAQA,CAAG,EAAE,OAAO,CAAC,CAACC,CAAG,IACvB,CAACA,EAAI,WAAW,MAAM,GAAKA,IAAQ,qBAC3C,CACH,EASIC,EAAyB,oCA2BlBC,EAA4BH,GAA8C,CACrF,IAAMI,EAAYL,EAAyBC,CAAG,EAE9C,OAAW,CAACC,EAAKI,CAAK,IAAK,OAAO,QAAQL,CAAG,EACvCE,EAAuB,KAAKD,CAAG,IAAGG,EAAUH,CAAG,EAAII,GAGzD,OAAOD,CACT",
+  "sourcesContent": ["/**\n * Pure detection of *how* this CLI was installed, so the background updater knows whether it may act at\n * all, and the advisory it prints can name the one command that will actually work. No fs, no spawn, no `process.env` read \u2014 every input is injected, which is\n * what lets the whole matrix be table-tested.\n *\n * Detection is env-first and LAZY: the only signal that costs a subprocess (`npm root -g`) is passed in\n * as `lazyNpmRoot` and consulted solely when every cheaper matcher has missed.\n */\nimport path from 'node:path'\n\n/** The published package this CLI updates itself to. Single source for every suggested argv. */\nexport const PACKAGE_NAME = 'infra-kit'\n\nconst LATEST = `${PACKAGE_NAME}@latest`\n\nexport type InstallManager = 'npm' | 'pnpm' | 'yarn' | 'bun' | 'volta' | 'homebrew' | 'unknown'\n\nexport interface InstallManagerInfo {\n  manager: InstallManager\n  /** The command to run. Only safe to spawn ourselves when `canSelfSpawn`; otherwise print it. */\n  updateCommand: string[]\n  /** False when we must not run the command for the user \u2014 either it needs sudo/a tap, or we guessed. */\n  canSelfSpawn: boolean\n}\n\n/**\n * Canonicalises a candidate *root* directory. Required, not optional: `selfRealPath` has already had its\n * symlinks followed, so comparing it against a raw `PNPM_HOME`/`npm root -g`/`cwd` compares a resolved\n * path to an unresolved one and silently never matches. macOS is the everyday proof \u2014 `/var` is a symlink\n * to `/private/var`, so a global install under `/var/...` reports `unknown` unless both sides are resolved.\n * Callers inject the real thing; tests inject a stub.\n */\nexport type RealpathFn = (dir: string) => string\n\nexport interface DetectInstallManagerInput {\n  /** Fully-resolved (symlinks followed) path to this CLI's entry file. */\n  selfRealPath: string\n  env: NodeJS.ProcessEnv\n  /** Canonicalises each candidate root before comparison. See {@link RealpathFn}. */\n  realpath: RealpathFn\n  /** `npm root -g`, deferred: invoked at most once, and only when no cheaper matcher hit. */\n  lazyNpmRoot?: () => string | undefined\n  /**\n   * The exact version to install, when the caller has already resolved it. Omitted, the command targets\n   * the `latest` dist-tag \u2014 fine to PRINT, unsafe to RUN: see {@link pinSpec}.\n   */\n  version?: string\n}\n\n/**\n * Swap the `@latest` token for `@<version>`.\n *\n * `pnpm add -g infra-kit@latest` resolves the tag from pnpm's on-disk metadata cache and does not\n * revalidate it when a cached version already satisfies the tag (pnpm 12.3.4, measured: two runs 90+\n * minutes after a publish both reinstalled the stale `latest` while `pnpm view` already reported the new\n * one). The updater had fetched the real latest itself moments earlier, ran the tag command, got exit 0\n * \u2014 nothing was reinstalled \u2014 and recorded `installed`, so the stale binary looked up to date until the\n * next cycle repeated the same no-op. A concrete version the cache has never seen forces the fetch.\n */\nconst pinSpec = (command: string[], version: string | undefined): string[] => {\n  if (version === undefined) return command\n\n  return command.map((token) => {\n    return token === LATEST ? `${PACKAGE_NAME}@${version}` : token\n  })\n}\n\n/**\n * Is `child` inside the `parent` subtree? Boundary-aware: a naive `startsWith` would call\n * `/Users/x/pnpm-ish` a child of `/Users/x/pnpm`. `parent` is canonicalised first because it arrives raw\n * from the environment while `child` is already a realpath.\n */\nexport const isWithin = (parent: string, child: string, realpath: RealpathFn): boolean => {\n  const rel = path.relative(realpath(path.resolve(parent)), path.resolve(child))\n\n  return rel !== '' && !rel.startsWith('..') && !path.isAbsolute(rel)\n}\n\n/** Does `p` contain `name` as a whole path SEGMENT? `/a/node_modules_backup/b` must not match `node_modules`. */\nexport const hasSegment = (p: string, name: string): boolean => {\n  return path.resolve(p).split(path.sep).includes(name)\n}\n\n/**\n * Is `p` inside a Homebrew keg belonging to the `name` FORMULA \u2014 i.e. `.../Cellar/<name>/<version>/...`?\n *\n * The formula name is what makes this sound. A bare `Cellar` segment says only \"somewhere under a keg\",\n * and the keg it lands in is routinely someone else's: when npm's global prefix is a node keg\n * (`npm config set prefix \"$(brew --prefix node)\"`, or any keg-only `node@X`), an `npm i -g` package\n * installs to `Cellar/node/<v>/lib/node_modules/<pkg>/...` \u2014 brew has never heard of it, yet the segment\n * is right there. Requiring `<name>` to sit directly after `Cellar` is what separates \"brew installed\n * THIS\" from \"brew installed the runtime that installed this\".\n *\n * Works for both keg layouts, since each is rooted at the formula: a plain formula\n * (`Cellar/infra-kit/1.2.3/bin/infra-kit`) and brew's node-CLI layout\n * (`Cellar/infra-kit/1.2.3/libexec/lib/node_modules/infra-kit/dist/cli.js`). Do NOT try to tell them\n * apart by excluding `node_modules` \u2014 the second one contains it.\n */\nexport const isBrewKegOf = (p: string, name: string): boolean => {\n  const segments = path.resolve(p).split(path.sep)\n  const cellar = segments.indexOf('Cellar')\n\n  return cellar !== -1 && segments[cellar + 1] === name\n}\n\n/**\n * The npm global prefix that owns `binRealPath`, derived from the path ITSELF, or null when the\n * layout is not an npm global one.\n *\n * Matches `<prefix>/lib/node_modules/<packageName>` \u2014 npm's global layout and no other manager's\n * \u2014 requiring BOTH the `lib` parent and our package as the immediate child. Windows global npm has\n * no `lib` segment (`%APPDATA%\\npm\\node_modules`), so this returns null there and detection falls\n * through to `npm root -g`, which is correct on Windows, where there is normally one npm.\n */\n// This is the one signal that cannot point at the wrong tree. Everything else in this module\n// answers \"is this file somewhere inside tool X's directory?\", and containment is not ownership:\n//   - `npm root -g` answers for whichever `npm` is first on PATH, which is routinely a DIFFERENT\n//     node than the one that installed us (a pnpm/nvm/fnm-managed node, or a node that has since\n//     been removed). It then reports a root that does not contain us, every matcher misses, and\n//     detection degrades to `unknown` \u2014 a notice printed forever, on the single most common install\n//     method. That is the bug this exists to close.\n//   - `PNPM_HOME` containment is satisfied by `<PNPM_HOME>/nodejs/<v>/lib/node_modules/<pkg>` (a\n//     plain `npm i -g` under a pnpm-managed node), yet `pnpm add -g` installs to\n//     `<PNPM_HOME>/global/<v>/...` \u2014 a different directory. That one is worse than a missed update:\n//     the install \"succeeds\" while the binary on PATH stays old, silently, with no notice to show\n//     for it.\n//\n// Requiring both segments is what makes the match proof rather than a hint. The `lib` requirement\n// is also what keeps a project-local `<repo>/node_modules/<pkg>` out (it has no `lib`), and nesting\n// cannot spoof it: `.../node_modules/foo/node_modules/<pkg>` fails the `lib` test.\nexport const npmPrefixOfPackage = (binRealPath: string, packageName: string): string | null => {\n  const segments = path.resolve(binRealPath).split(path.sep)\n  const nodeModules = segments.lastIndexOf('node_modules')\n\n  if (nodeModules < 2) return null\n  if (segments[nodeModules - 1] !== 'lib') return null\n  if (segments[nodeModules + 1] !== packageName) return null\n\n  // Drop `lib/node_modules/...`; the empty result of a root-level prefix (`/lib/node_modules/...`) is `/`.\n  return segments.slice(0, nodeModules - 1).join(path.sep) || path.sep\n}\n\n// The self-scoped reading, kept as the name every call site below already uses. `dependency-registry`\n// asks the same question about OTHER packages (`portless`), which is why the body moved up one level\n// rather than gaining a defaulted parameter \u2014 a default is how the wrong package silently gets probed.\nconst npmPrefixFromSelfPath = (selfRealPath: string): string | null => {\n  return npmPrefixOfPackage(selfRealPath, PACKAGE_NAME)\n}\n\n/**\n * `--prefix` is passed EXPLICITLY rather than trusting the ambient one: the whole point of deriving it is\n * that the `npm` we are about to run may default to a different prefix than the one we are installed in.\n * A command-line flag outranks both `npm_config_prefix` and any `.npmrc`, so this targets the tree we\n * actually run from. With `-g`, npm writes `<prefix>/lib/node_modules` and links bins into `<prefix>/bin`.\n */\nconst npmPrefixInstallCommand = (prefix: string): string[] => {\n  return ['npm', 'install', '-g', '--prefix', prefix, LATEST]\n}\n\n/**\n * Render argv as a line the user can paste into a shell.\n *\n * A plain `join(' ')` was fine while every token came from a static table; `--prefix <path>` puts a\n * filesystem path in argv, and `/Users/Ada Lovelace/.nvm/...` pasted unquoted is two arguments and a\n * failed install. Single quotes are sound here without escaping because the callers' validation rejects a\n * token containing a quote \u2014 see `SAFE_COMMAND_TOKEN` in src/lib/update-check/auto-update.ts.\n *\n * @example\n * formatUpdateCommand(['npm', 'install', '-g', '--prefix', '/opt/x y', 'infra-kit@latest'])\n * // => \"npm install -g --prefix '/opt/x y' infra-kit@latest\"\n */\nexport const formatUpdateCommand = (command: string[]): string => {\n  return command\n    .map((token) => {\n      return token.includes(' ') ? `'${token}'` : token\n    })\n    .join(' ')\n}\n\n/** `env[key]` names a directory that contains `selfRealPath`. Absent/empty env var \u2192 no match. */\nconst underEnvDir = (env: NodeJS.ProcessEnv, key: string, selfRealPath: string, realpath: RealpathFn): boolean => {\n  const dir = env[key]\n\n  return dir != null && dir !== '' && isWithin(dir, selfRealPath, realpath)\n}\n\ninterface Matcher extends Omit<InstallManagerInfo, 'manager'> {\n  manager: InstallManager\n  test: (input: Required<Pick<DetectInstallManagerInput, 'selfRealPath' | 'env' | 'realpath'>>) => boolean\n}\n\n/**\n * Consulted FIRST, before {@link npmPrefixFromSelfPath}. Both of these legitimately wrap an npm-shaped\n * `lib/node_modules` tree \u2014 volta at `~/.volta/tools/image/node/<v>/lib/node_modules`, brew at\n * `Cellar/<pkg>/<v>/libexec/lib/node_modules` \u2014 so deriving an npm prefix from the path would hijack\n * installs that a wrapper owns and must keep owning.\n */\nconst WRAPPER_MATCHERS: Matcher[] = [\n  {\n    manager: 'volta',\n    // volta owns the shim; `volta install` is the correct tool, not a workaround \u2014 so we may run it.\n    test: ({ selfRealPath, env, realpath }) => {\n      return (\n        underEnvDir(env, 'VOLTA_HOME', selfRealPath, realpath) ||\n        hasSegment(selfRealPath, '.volta') ||\n        hasSegment(selfRealPath, 'volta')\n      )\n    },\n    updateCommand: ['volta', 'install', PACKAGE_NAME],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'homebrew',\n    // `brew upgrade` can touch the prefix, relink, and prompt \u2014 never ours to run unattended.\n    //\n    // Our own keg is the ONLY sound signal \u2014 see `isBrewKegOf`. Two broader tests look plausible\n    // and are both wrong, because each answers \"did brew put something here?\" when the question is \"does\n    // brew own THIS package?\":\n    //   - `HOMEBREW_PREFIX` containment: when node comes from brew, npm's global prefix IS\n    //     $HOMEBREW_PREFIX, so EVERY `npm i -g` package lands under it, unknown to brew.\n    //   - a bare `Cellar` segment: an npm prefix pointed at a node keg puts packages inside that keg.\n    // Either misfire tells macOS users to run `brew upgrade infra-kit` \u2014 a formula that does not exist \u2014\n    // and, far worse, makes the background auto-updater bail with `cannot-self-spawn` forever, so the\n    // very fix for it can never reach them. Detection runs on the realpath, and a linked brew bin always\n    // resolves into its own keg, so the narrow test has no false negatives to trade for this.\n    test: ({ selfRealPath }) => {\n      return isBrewKegOf(selfRealPath, PACKAGE_NAME)\n    },\n    updateCommand: ['brew', 'upgrade', PACKAGE_NAME],\n    canSelfSpawn: false,\n  },\n]\n\n/**\n * Consulted LAST, after {@link npmPrefixFromSelfPath} has had its say. Each of these proves only that we\n * live somewhere inside a tool's directory tree, which is weaker than knowing the layout npm itself\n * created \u2014 see the `PNPM_HOME`/`nodejs` case in that helper's doc for a containment hit whose install\n * command targets the wrong directory.\n */\nconst TREE_MATCHERS: Matcher[] = [\n  {\n    manager: 'pnpm',\n    test: ({ selfRealPath, env, realpath }) => {\n      return (\n        underEnvDir(env, 'PNPM_HOME', selfRealPath, realpath) ||\n        (hasSegment(selfRealPath, 'pnpm') && hasSegment(selfRealPath, 'global'))\n      )\n    },\n    updateCommand: ['pnpm', 'add', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'bun',\n    test: ({ selfRealPath, env, realpath }) => {\n      return underEnvDir(env, 'BUN_INSTALL', selfRealPath, realpath) || hasSegment(selfRealPath, '.bun')\n    },\n    updateCommand: ['bun', 'add', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'yarn',\n    test: ({ selfRealPath }) => {\n      return (\n        hasSegment(selfRealPath, '.yarn') || (hasSegment(selfRealPath, 'yarn') && hasSegment(selfRealPath, 'global'))\n      )\n    },\n    updateCommand: ['yarn', 'global', 'add', LATEST],\n    canSelfSpawn: true,\n  },\n  {\n    manager: 'npm',\n    test: ({ selfRealPath, env, realpath }) => {\n      return underEnvDir(env, 'npm_config_prefix', selfRealPath, realpath)\n    },\n    updateCommand: ['npm', 'install', '-g', LATEST],\n    canSelfSpawn: true,\n  },\n]\n\nconst NPM_UPDATE_COMMAND = ['npm', 'install', '-g', LATEST]\n\n/**\n * The command to print when nobody has identified this CLI's package manager \u2014 the same guess\n * `detectInstallManager` records for an unrecognised location, pinned to `version`. For a caller that\n * must name a command but has no worker verdict to read (no update cache on an opt-out machine).\n *\n * @example\n * fallbackUpdateCommand('0.8.0') // => ['npm', 'install', '-g', 'infra-kit@0.8.0']\n */\nexport const fallbackUpdateCommand = (version: string): string[] => {\n  return pinSpec(NPM_UPDATE_COMMAND, version)\n}\n\n/**\n * Identify the package manager that owns `selfRealPath`.\n *\n * Order, and why it is this one: wrappers that own an npm-shaped tree (volta, brew) first, then the npm\n * prefix DERIVED from our own path, then the env/path containment matchers, then the `npm root -g` probe.\n * The derived prefix sits above containment because it is the only signal that cannot name a directory we\n * do not live in \u2014 see {@link npmPrefixFromSelfPath}.\n *\n * `lazyNpmRoot` is the last resort and is invoked at most once, only after every matcher has missed \u2014 a\n * pnpm or volta install never pays for the subprocess, and neither does any npm global install in the\n * standard layout, which the derived prefix now settles for free. When nothing matches we report `unknown`\n * with an npm command that is a *suggestion only* (`canSelfSpawn: false`): running a guessed global\n * install is worse than printing one.\n *\n * @example\n * detectInstallManager({ selfRealPath: '/Users/x/Library/pnpm/global/5/node_modules/infra-kit/dist/cli.js', env: {} })\n * // => { manager: 'pnpm', updateCommand: ['pnpm', 'add', '-g', 'infra-kit@latest'], canSelfSpawn: true }\n * detectInstallManager({ selfRealPath: '/Users/x/Library/pnpm/global/5/node_modules/infra-kit/dist/cli.js', env: {}, version: '0.5.5' })\n * // => { manager: 'pnpm', updateCommand: ['pnpm', 'add', '-g', 'infra-kit@0.5.5'], canSelfSpawn: true }\n */\nexport const detectInstallManager = (input: DetectInstallManagerInput): InstallManagerInfo => {\n  const { selfRealPath, env, realpath, lazyNpmRoot, version } = input\n  const detected = detectUnpinned({ selfRealPath, env, realpath, lazyNpmRoot })\n\n  return { ...detected, updateCommand: pinSpec(detected.updateCommand, version) }\n}\n\nconst detectUnpinned = (input: DetectInstallManagerInput): InstallManagerInfo => {\n  const { selfRealPath, env, realpath, lazyNpmRoot } = input\n\n  const toInfo = (hit: Matcher): InstallManagerInfo => {\n    return { manager: hit.manager, updateCommand: hit.updateCommand, canSelfSpawn: hit.canSelfSpawn }\n  }\n\n  const matches = ({ test }: Matcher): boolean => {\n    return test({ selfRealPath, env, realpath })\n  }\n\n  const wrapper = WRAPPER_MATCHERS.find(matches)\n\n  if (wrapper) return toInfo(wrapper)\n\n  const derivedPrefix = npmPrefixFromSelfPath(selfRealPath)\n\n  if (derivedPrefix !== null) {\n    return { manager: 'npm', updateCommand: npmPrefixInstallCommand(derivedPrefix), canSelfSpawn: true }\n  }\n\n  const tree = TREE_MATCHERS.find(matches)\n\n  if (tree) return toInfo(tree)\n\n  const npmRoot = lazyNpmRoot?.()\n\n  if (npmRoot != null && npmRoot !== '' && isWithin(npmRoot, selfRealPath, realpath)) {\n    return { manager: 'npm', updateCommand: NPM_UPDATE_COMMAND, canSelfSpawn: true }\n  }\n\n  return { manager: 'unknown', updateCommand: NPM_UPDATE_COMMAND, canSelfSpawn: false }\n}\n\n/**\n * Is this CLI running from a *project-local* `node_modules` (as opposed to a global root)?\n *\n * The cwd clause is what does the distinguishing \u2014 BOTH a project install and a global root contain a\n * `/node_modules/` segment (`pnpm root -g` is `~/Library/pnpm/global/5/node_modules`). Without it we\n * would nag every global pnpm user to stop using a local install they do not have.\n *\n * Accepted false-negative: invoked from a subdirectory (cwd `project/apps/x`, deps at\n * `project/node_modules`) this returns false and the advisory stays silent. Under-warning is the safe\n * direction for a best-effort, never-throwing advisory \u2014 do not \"fix\" it by dropping the cwd clause.\n *\n * `cwd` is canonicalised before comparison for the same reason `detectInstallManager` canonicalises its\n * roots: `selfRealPath` is a realpath, and comparing it to an unresolved cwd never matches.\n *\n * @example\n * isLocalNodeModulesInstall('/repo/node_modules/infra-kit/dist/cli.js', '/repo', (p) => p) // => true\n */\nexport const isLocalNodeModulesInstall = (selfRealPath: string, cwd: string, realpath: RealpathFn): boolean => {\n  return hasSegment(selfRealPath, 'node_modules') && isWithin(cwd, selfRealPath, realpath)\n}\n\n/** Does this path exist at all \u2014 directory, file, or symlink? Injected so the walk never touches the real disk in tests. */\nexport type ExistsFn = (p: string) => boolean\n\nexport interface IsGlobalInstallInput {\n  /** Fully-resolved (symlinks followed) path to this CLI's entry file. */\n  selfRealPath: string\n  env: NodeJS.ProcessEnv\n  /** Canonicalises `home` and every root {@link detectInstallManager} compares against. */\n  realpath: RealpathFn\n  /** The user's home directory (`os.homedir()`), raw \u2014 canonicalised here before the walk compares it. */\n  home: string\n  exists: ExistsFn\n}\n\n/** Upper bound on the `.git` walk: deeper than any real install layout, so it only ever guards against a pathological path. */\nconst GIT_WALK_MAX_HOPS = 32\n\n/**\n * Where the `.git` walk starts: the parent of the OUTERMOST `node_modules` segment (`indexOf`, not\n * `lastIndexOf` \u2014 pnpm's `.pnpm/<pkg>@<v>/node_modules/<pkg>` nests two, and the checkout that owns the\n * tree sits above the first). A self path with no `node_modules` at all (a plain brew keg's `bin/`) starts\n * at its own directory, so the walk still inspects every ancestor.\n */\nconst gitWalkStart = (selfRealPath: string): string => {\n  const segments = path.resolve(selfRealPath).split(path.sep)\n  const outermost = segments.indexOf('node_modules')\n\n  if (outermost === -1) return path.dirname(selfRealPath)\n\n  return segments.slice(0, outermost).join(path.sep) || path.sep\n}\n\n/** `start` and its ancestors up to but EXCLUDING `homeReal`, bounded \u2014 the directories the `.git` walk may inspect. */\nconst ancestorsBelowHome = (start: string, homeReal: string): string[] => {\n  const dirs: string[] = []\n  let dir = start\n\n  while (dir !== homeReal && dirs.length < GIT_WALK_MAX_HOPS) {\n    dirs.push(dir)\n\n    const parent = path.dirname(dir)\n\n    if (parent === dir) break\n\n    dir = parent\n  }\n\n  return dirs\n}\n\nconst hasGitAncestor = (start: string, homeReal: string, exists: ExistsFn): boolean => {\n  return ancestorsBelowHome(start, homeReal).some((dir) => {\n    return exists(path.join(dir, '.git'))\n  })\n}\n\n/**\n * Is this CLI the machine's *global* install \u2014 the one a root-owned daemon or a system-wide link may be\n * aimed at \u2014 as opposed to a checkout or a project-local dependency? Probe-free: fs + env only, never a\n * subprocess, because it runs on every boot.\n *\n * True iff {@link detectInstallManager} names a manager AND no `.git` entry (directory or file \u2014 a\n * worktree's is a file) exists above the outermost `node_modules`, walking up to but EXCLUDING\n * `realpath(home)`. Never throws: any seam failure reports false, the safe direction for every caller.\n *\n * @example\n * isGlobalInstall({\n *   selfRealPath: '/Users/x/Library/pnpm/global/v11/8a83-1/node_modules/.pnpm/infra-kit@0.5.6/node_modules/infra-kit/dist/cli.js',\n *   env: { PNPM_HOME: '/Users/x/Library/pnpm' },\n *   realpath: (p) => p,\n *   home: '/Users/x',\n *   exists: (p) => p === '/Users/x/.git',\n * }) // => true \u2014 the only `.git` is $HOME's own, which the walk never inspects\n */\n// Why these two predicates and not the obvious candidates:\n//   - Not `canSelfSpawn`: that flag encodes \"may I run an unattended `npm i -g`\", and homebrew is\n//     `canSelfSpawn: false` while being unmistakably global \u2014 gating on it would leave a brew install\n//     unconverged forever. A global install whose manager cannot be identified in a stripped env (no\n//     `PNPM_HOME`, no derivable prefix) reports false: fail-safe, since a skipped write is never wrong and\n//     the next shell-run command converges it.\n//   - Not `isLocalNodeModulesInstall`: its cwd clause calls every global layout under `$HOME` \"local\" the\n//     moment cwd is `$HOME` \u2014 which is exactly the cwd the background updater spawns with, and a plain\n//     `cd ~ && infra-kit version` reproduces it. This predicate reads the tree, not the cwd.\n//   - Why the `.git` walk at all: the cheap matchers are segment heuristics that also fire on\n//     project-local shapes \u2014 a repo with a `volta` path segment, Yarn Berry's `.yarn/unplugged/\u2026`, a\n//     checkout cloned under `$PNPM_HOME`, a workspace package literally named `lib` \u2014 and every one of\n//     those is a checkout; every checkout has a `.git`, no global root does.\n//   - Why `$HOME` is excluded: dotfiles users `git init ~`, and a `~/.git` would refuse the pnpm-global\n//     install permanently. Every checkout under `$HOME` (`~/repo/.git`) is still strictly below it.\n//   - Why `.git` ONLY, not `pnpm-workspace.yaml`: pnpm 12 writes one INSIDE the global install dir, so\n//     that marker would refuse the very install this is for.\nexport const isGlobalInstall = (input: IsGlobalInstallInput): boolean => {\n  try {\n    const { selfRealPath, env, realpath, home, exists } = input\n\n    if (detectInstallManager({ selfRealPath, env, realpath }).manager === 'unknown') return false\n\n    return !hasGitAncestor(gitWalkStart(selfRealPath), realpath(path.resolve(home)), exists)\n  } catch {\n    return false\n  }\n}\n\n/**\n * The advisory gate for `warnIfLocalInstall`, pulled out so it is testable without spawning the CLI.\n * Warn only when the install is provably NOT global AND looks project-local: the second clause alone\n * fires on a global pnpm root whenever cwd is `$HOME` (see {@link isGlobalInstall}).\n */\nexport const shouldWarnLocalInstall = (input: IsGlobalInstallInput & { cwd: string }): boolean => {\n  const { selfRealPath, cwd, realpath } = input\n\n  return !isGlobalInstall(input) && isLocalNodeModulesInstall(selfRealPath, cwd, realpath)\n}\n", "import { realpathSync } from 'node:fs'\nimport path from 'node:path'\n\n/**\n * The impure companion to the pure detection module: canonicalise a directory that may not exist.\n *\n * `realpathSync` throws on a missing path, and candidate roots routinely miss \u2014 `PNPM_HOME` can point at a\n * directory the user never created, `npm root -g` can name a prefix that was removed. A throw there would\n * turn \"we could not identify your install\" into a crash, so an unresolvable path falls back to\n * `path.resolve`, which still normalises `.`/`..` and yields a usable, non-matching absolute path.\n */\nexport const safeRealpath = (dir: string): string => {\n  try {\n    return realpathSync(dir)\n  } catch {\n    return path.resolve(dir)\n  }\n}\n", "/* eslint-disable sonarjs/no-os-command-from-path */\n/**\n * `npm root -g`, the LAZY fallback for {@link detectInstallManager}.\n *\n * Why it is indispensable: the `npm` matcher keys off `npm_config_prefix`, which npm sets only while npm\n * itself is running. A user who ran `npm i -g infra-kit` months ago and now types `ik` has no such var,\n * so every cheap matcher misses and detection reports `unknown` / `canSelfSpawn: false`. Without this\n * probe the single most common install method can never update itself.\n *\n * Read by the background update worker, and by the `doctor` advisory that names the command a human\n * would run by hand \u2014 one probe so the two can never disagree about who owns the install.\n */\nimport { execFileSync } from 'node:child_process'\nimport process from 'node:process'\n\nconst NPM_ROOT_TIMEOUT_MS = 3_000\n\n/**\n * The global npm root, or undefined when npm is absent, slow, or errors. Costs a subprocess, so\n * `detectInstallManager` invokes it at most once and only after every env/path matcher has missed \u2014 a\n * pnpm or volta install never pays for it.\n *\n * Resolving the user's `npm` from PATH is inherent here: we must ask the very package manager that owns\n * this install where its global root is. Pinning an absolute path would defeat the detection.\n *\n * @example\n * defaultLazyNpmRoot() // => '/usr/local/lib/node_modules' | undefined\n */\nexport const defaultLazyNpmRoot = (): string | undefined => {\n  try {\n    const out = execFileSync('npm', ['root', '-g'], {\n      encoding: 'utf-8',\n      timeout: NPM_ROOT_TIMEOUT_MS,\n      stdio: ['ignore', 'pipe', 'ignore'],\n      shell: process.platform === 'win32',\n    })\n\n    const trimmed = out.trim()\n\n    return trimmed === '' ? undefined : trimmed\n  } catch {\n    return undefined\n  }\n}\n", "/**\n * `env` minus every package-manager marker a spawned child could mistake for a throwaway install:\n * the whole `npm_*` block plus `PNPM_SCRIPT_SRC_DIR`. The result makes the child look exactly like\n * a direct `node <pkg>/dist/cli.js` run \u2014 which it is.\n */\n// Any child we launch through `node <bin>` (the portless driver, the update worker, the dependency installer)\n// inherits our env, and a tool that sniffs those markers will conclude it was run via `npx`/`pnpm\n// dlx` and refuse to work. portless is the motivating case; its guard (cli.js `main()`) is:\n//\n//     isNpx     = npm_command === 'exec' && !npm_lifecycle_event\n//     isPnpmDlx = !!PNPM_SCRIPT_SRC_DIR  && !npm_lifecycle_event\n//     if ((isNpx || isPnpmDlx) && !isLocallyInstalled()) -> abort\n//\n// `isLocallyInstalled()` walks up from the CHILD's cwd, so in a consumer repo (where portless is a\n// transitive dep of infra-kit, absent from the root `node_modules`) it is false and the guard is\n// live. `pnpm exec infra-kit dev` exports `npm_command=exec` with no lifecycle event, so `isNpx`\n// holds, every portless call exits 1, `isAvailable()` is false, and `ensureProxy` aborts the whole\n// dev boot with \"portless is not installed\", on a machine where it plainly is.\n//\n// `PNPM_SCRIPT_SRC_DIR` must be dropped ALONGSIDE the `npm_*` block, not left behind: it is set by\n// `pnpm run <script>`, where `npm_lifecycle_event` is what suppresses `isPnpmDlx`. Stripping only\n// `npm_*` removes that suppressor and creates an abort for the script-style invocation that\n// previously worked. Both markers go, or neither is safe.\nexport const withoutPackageManagerEnv = (env: NodeJS.ProcessEnv): NodeJS.ProcessEnv => {\n  return Object.fromEntries(\n    Object.entries(env).filter(([key]) => {\n      return !key.startsWith('npm_') && key !== 'PNPM_SCRIPT_SRC_DIR'\n    }),\n  )\n}\n\n/**\n * npm's own configuration \u2014 as opposed to the npx/dlx *markers* above. Case-insensitive because npm reads\n * `npm_config_*` case-insensitively (its parser matches `/^npm_config_/i`) and real environments export\n * both forms: shells write the lowercase name, Dockerfiles and CI images overwhelmingly write the\n * uppercase one.\n */\nconst NPM_CONFIG_TO_PRESERVE = /^npm_config_(?:prefix|registry)$/i\n\n/**\n * The env for spawning a package-manager INSTALL: npx/dlx markers stripped, but npm's own config\n * kept \u2014 specifically `npm_config_prefix` and `npm_config_registry`.\n *\n * @example\n * packageManagerInstallEnv({ npm_command: 'exec', npm_config_prefix: '/p', PATH: '/bin' })\n * // => { npm_config_prefix: '/p', PATH: '/bin' }\n */\n// `withoutPackageManagerEnv` is deliberately a blunt `npm_*` prefix filter, and it is the\n// right tool for the portless driver \u2014 but it is the WRONG tool for spawning an install, because it\n// also drops the two variables that tell the package manager where, and from where, to install:\n//\n//   - `npm_config_prefix` is the npm matcher's ONLY signal (see `install-manager.ts`). Strip it and\n//     we detect a global install rooted at prefix P, then run the install with P erased \u2014 so it\n//     lands in the DEFAULT prefix instead. That is either a permanent EACCES, or a second global\n//     copy that is not the one on PATH. Nothing notices: the install exits 0, we report\n//     `installed`, the version on PATH never moves, and the whole cycle repeats every window\n//     forever. `export npm_config_prefix=~/.npm-global` is npm's own documented EACCES workaround,\n//     so this is a mainstream layout, not an exotic one.\n//   - `npm_config_registry` is what the update CHECK already used to pick a registry. Dropping it\n//     here means we decide against a corporate mirror and then install from somewhere else.\n//\n// Preserving these cannot re-arm the dlx guard: that guard reads `npm_command`,\n// `npm_lifecycle_event` and `PNPM_SCRIPT_SRC_DIR` \u2014 none of which are npm config, and all of which\n// remain stripped.\nexport const packageManagerInstallEnv = (env: NodeJS.ProcessEnv): NodeJS.ProcessEnv => {\n  const sanitised = withoutPackageManagerEnv(env)\n\n  for (const [key, value] of Object.entries(env)) {\n    if (NPM_CONFIG_TO_PRESERVE.test(key)) sanitised[key] = value\n  }\n\n  return sanitised\n}\n"],
+  "mappings": "AAQA,OAAOA,MAAU,YAGV,IAAMC,EAAe,YAEtBC,EAAS,GAAGD,CAAY,UA8CxBE,EAAU,CAACC,EAAmBC,IAC9BA,IAAY,OAAkBD,EAE3BA,EAAQ,IAAKE,GACXA,IAAUJ,EAAS,GAAGD,CAAY,IAAII,CAAO,GAAKC,CAC1D,EAQUC,EAAW,CAACC,EAAgBC,EAAeC,IAAkC,CACxF,IAAMC,EAAMX,EAAK,SAASU,EAASV,EAAK,QAAQQ,CAAM,CAAC,EAAGR,EAAK,QAAQS,CAAK,CAAC,EAE7E,OAAOE,IAAQ,IAAM,CAACA,EAAI,WAAW,IAAI,GAAK,CAACX,EAAK,WAAWW,CAAG,CACpE,EAGaC,EAAa,CAACC,EAAWC,IAC7Bd,EAAK,QAAQa,CAAC,EAAE,MAAMb,EAAK,GAAG,EAAE,SAASc,CAAI,EAkBzCC,EAAc,CAACF,EAAWC,IAA0B,CAC/D,IAAME,EAAWhB,EAAK,QAAQa,CAAC,EAAE,MAAMb,EAAK,GAAG,EACzCiB,EAASD,EAAS,QAAQ,QAAQ,EAExC,OAAOC,IAAW,IAAMD,EAASC,EAAS,CAAC,IAAMH,CACnD,EA2BaI,EAAqB,CAACC,EAAqBC,IAAuC,CAC7F,IAAMJ,EAAWhB,EAAK,QAAQmB,CAAW,EAAE,MAAMnB,EAAK,GAAG,EACnDqB,EAAcL,EAAS,YAAY,cAAc,EAIvD,OAFIK,EAAc,GACdL,EAASK,EAAc,CAAC,IAAM,OAC9BL,EAASK,EAAc,CAAC,IAAMD,EAAoB,KAG/CJ,EAAS,MAAM,EAAGK,EAAc,CAAC,EAAE,KAAKrB,EAAK,GAAG,GAAKA,EAAK,GACnE,EAKMsB,EAAyBC,GACtBL,EAAmBK,EAActB,CAAY,EAShDuB,EAA2BC,GACxB,CAAC,MAAO,UAAW,KAAM,WAAYA,EAAQvB,CAAM,EAe/CwB,EAAuBtB,GAC3BA,EACJ,IAAKE,GACGA,EAAM,SAAS,GAAG,EAAI,IAAIA,CAAK,IAAMA,CAC7C,EACA,KAAK,GAAG,EAIPqB,EAAc,CAACC,EAAwBC,EAAaN,EAAsBb,IAAkC,CAChH,IAAMoB,EAAMF,EAAIC,CAAG,EAEnB,OAAOC,GAAO,MAAQA,IAAQ,IAAMvB,EAASuB,EAAKP,EAAcb,CAAQ,CAC1E,EAaMqB,EAA8B,CAClC,CACE,QAAS,QAET,KAAM,CAAC,CAAE,aAAAR,EAAc,IAAAK,EAAK,SAAAlB,CAAS,IAEjCiB,EAAYC,EAAK,aAAcL,EAAcb,CAAQ,GACrDE,EAAWW,EAAc,QAAQ,GACjCX,EAAWW,EAAc,OAAO,EAGpC,cAAe,CAAC,QAAS,UAAWtB,CAAY,EAChD,aAAc,EAChB,EACA,CACE,QAAS,WAaT,KAAM,CAAC,CAAE,aAAAsB,CAAa,IACbR,EAAYQ,EAActB,CAAY,EAE/C,cAAe,CAAC,OAAQ,UAAWA,CAAY,EAC/C,aAAc,EAChB,CACF,EAQM+B,EAA2B,CAC/B,CACE,QAAS,OACT,KAAM,CAAC,CAAE,aAAAT,EAAc,IAAAK,EAAK,SAAAlB,CAAS,IAEjCiB,EAAYC,EAAK,YAAaL,EAAcb,CAAQ,GACnDE,EAAWW,EAAc,MAAM,GAAKX,EAAWW,EAAc,QAAQ,EAG1E,cAAe,CAAC,OAAQ,MAAO,KAAMrB,CAAM,EAC3C,aAAc,EAChB,EACA,CACE,QAAS,MACT,KAAM,CAAC,CAAE,aAAAqB,EAAc,IAAAK,EAAK,SAAAlB,CAAS,IAC5BiB,EAAYC,EAAK,cAAeL,EAAcb,CAAQ,GAAKE,EAAWW,EAAc,MAAM,EAEnG,cAAe,CAAC,MAAO,MAAO,KAAMrB,CAAM,EAC1C,aAAc,EAChB,EACA,CACE,QAAS,OACT,KAAM,CAAC,CAAE,aAAAqB,CAAa,IAElBX,EAAWW,EAAc,OAAO,GAAMX,EAAWW,EAAc,MAAM,GAAKX,EAAWW,EAAc,QAAQ,EAG/G,cAAe,CAAC,OAAQ,SAAU,MAAOrB,CAAM,EAC/C,aAAc,EAChB,EACA,CACE,QAAS,MACT,KAAM,CAAC,CAAE,aAAAqB,EAAc,IAAAK,EAAK,SAAAlB,CAAS,IAC5BiB,EAAYC,EAAK,oBAAqBL,EAAcb,CAAQ,EAErE,cAAe,CAAC,MAAO,UAAW,KAAMR,CAAM,EAC9C,aAAc,EAChB,CACF,EAEM+B,EAAqB,CAAC,MAAO,UAAW,KAAM/B,CAAM,EAU7CgC,EAAyB7B,GAC7BF,EAAQ8B,EAAoB5B,CAAO,EAuB/B8B,EAAwBC,GAAyD,CAC5F,GAAM,CAAE,aAAAb,EAAc,IAAAK,EAAK,SAAAlB,EAAU,YAAA2B,EAAa,QAAAhC,CAAQ,EAAI+B,EACxDE,EAAWC,EAAe,CAAE,aAAAhB,EAAc,IAAAK,EAAK,SAAAlB,EAAU,YAAA2B,CAAY,CAAC,EAE5E,MAAO,CAAE,GAAGC,EAAU,cAAenC,EAAQmC,EAAS,cAAejC,CAAO,CAAE,CAChF,EAEMkC,EAAkBH,GAAyD,CAC/E,GAAM,CAAE,aAAAb,EAAc,IAAAK,EAAK,SAAAlB,EAAU,YAAA2B,CAAY,EAAID,EAE/CI,EAAUC,IACP,CAAE,QAASA,EAAI,QAAS,cAAeA,EAAI,cAAe,aAAcA,EAAI,YAAa,GAG5FC,EAAU,CAAC,CAAE,KAAAC,CAAK,IACfA,EAAK,CAAE,aAAApB,EAAc,IAAAK,EAAK,SAAAlB,CAAS,CAAC,EAGvCkC,EAAUb,EAAiB,KAAKW,CAAO,EAE7C,GAAIE,EAAS,OAAOJ,EAAOI,CAAO,EAElC,IAAMC,EAAgBvB,EAAsBC,CAAY,EAExD,GAAIsB,IAAkB,KACpB,MAAO,CAAE,QAAS,MAAO,cAAerB,EAAwBqB,CAAa,EAAG,aAAc,EAAK,EAGrG,IAAMC,EAAOd,EAAc,KAAKU,CAAO,EAEvC,GAAII,EAAM,OAAON,EAAOM,CAAI,EAE5B,IAAMC,EAAUV,IAAc,EAE9B,OAAIU,GAAW,MAAQA,IAAY,IAAMxC,EAASwC,EAASxB,EAAcb,CAAQ,EACxE,CAAE,QAAS,MAAO,cAAeuB,EAAoB,aAAc,EAAK,EAG1E,CAAE,QAAS,UAAW,cAAeA,EAAoB,aAAc,EAAM,CACtF,EAmBae,EAA4B,CAACzB,EAAsB0B,EAAavC,IACpEE,EAAWW,EAAc,cAAc,GAAKhB,EAAS0C,EAAK1B,EAAcb,CAAQ,EAkBnFwC,EAAoB,GAQpBC,EAAgB5B,GAAiC,CACrD,IAAMP,EAAWhB,EAAK,QAAQuB,CAAY,EAAE,MAAMvB,EAAK,GAAG,EACpDoD,EAAYpC,EAAS,QAAQ,cAAc,EAEjD,OAAIoC,IAAc,GAAWpD,EAAK,QAAQuB,CAAY,EAE/CP,EAAS,MAAM,EAAGoC,CAAS,EAAE,KAAKpD,EAAK,GAAG,GAAKA,EAAK,GAC7D,EAGMqD,EAAqB,CAACC,EAAeC,IAA+B,CACxE,IAAMC,EAAiB,CAAC,EACpB1B,EAAMwB,EAEV,KAAOxB,IAAQyB,GAAYC,EAAK,OAASN,GAAmB,CAC1DM,EAAK,KAAK1B,CAAG,EAEb,IAAMtB,EAASR,EAAK,QAAQ8B,CAAG,EAE/B,GAAItB,IAAWsB,EAAK,MAEpBA,EAAMtB,CACR,CAEA,OAAOgD,CACT,EAEMC,EAAiB,CAACH,EAAeC,EAAkBG,IAChDL,EAAmBC,EAAOC,CAAQ,EAAE,KAAMzB,GACxC4B,EAAO1D,EAAK,KAAK8B,EAAK,MAAM,CAAC,CACrC,EAsCU6B,EAAmBvB,GAAyC,CACvE,GAAI,CACF,GAAM,CAAE,aAAAb,EAAc,IAAAK,EAAK,SAAAlB,EAAU,KAAAkD,EAAM,OAAAF,CAAO,EAAItB,EAEtD,OAAID,EAAqB,CAAE,aAAAZ,EAAc,IAAAK,EAAK,SAAAlB,CAAS,CAAC,EAAE,UAAY,UAAkB,GAEjF,CAAC+C,EAAeN,EAAa5B,CAAY,EAAGb,EAASV,EAAK,QAAQ4D,CAAI,CAAC,EAAGF,CAAM,CACzF,MAAQ,CACN,MAAO,EACT,CACF,EAOaG,EAA0BzB,GAA2D,CAChG,GAAM,CAAE,aAAAb,EAAc,IAAA0B,EAAK,SAAAvC,CAAS,EAAI0B,EAExC,MAAO,CAACuB,EAAgBvB,CAAK,GAAKY,EAA0BzB,EAAc0B,EAAKvC,CAAQ,CACzF,ECveA,OAAS,gBAAAoD,MAAoB,UAC7B,OAAOC,MAAU,YAUV,IAAMC,EAAgBC,GAAwB,CACnD,GAAI,CACF,OAAOH,EAAaG,CAAG,CACzB,MAAQ,CACN,OAAOF,EAAK,QAAQE,CAAG,CACzB,CACF,ECLA,OAAS,gBAAAC,MAAoB,qBAC7B,OAAOC,MAAa,eAEpB,IAAMC,EAAsB,IAafC,EAAqB,IAA0B,CAC1D,GAAI,CAQF,IAAMC,EAPMJ,EAAa,MAAO,CAAC,OAAQ,IAAI,EAAG,CAC9C,SAAU,QACV,QAASE,EACT,MAAO,CAAC,SAAU,OAAQ,QAAQ,EAClC,MAAOD,EAAQ,WAAa,OAC9B,CAAC,EAEmB,KAAK,EAEzB,OAAOG,IAAY,GAAK,OAAYA,CACtC,MAAQ,CACN,MACF,CACF,ECpBO,IAAMC,EAA4BC,GAChC,OAAO,YACZ,OAAO,QAAQA,CAAG,EAAE,OAAO,CAAC,CAACC,CAAG,IACvB,CAACA,EAAI,WAAW,MAAM,GAAKA,IAAQ,qBAC3C,CACH,EASIC,EAAyB,oCA2BlBC,EAA4BH,GAA8C,CACrF,IAAMI,EAAYL,EAAyBC,CAAG,EAE9C,OAAW,CAACC,EAAKI,CAAK,IAAK,OAAO,QAAQL,CAAG,EACvCE,EAAuB,KAAKD,CAAG,IAAGG,EAAUH,CAAG,EAAII,GAGzD,OAAOD,CACT",
   "names": ["path", "PACKAGE_NAME", "LATEST", "pinSpec", "command", "version", "token", "isWithin", "parent", "child", "realpath", "rel", "hasSegment", "p", "name", "isBrewKegOf", "segments", "cellar", "npmPrefixOfPackage", "binRealPath", "packageName", "nodeModules", "npmPrefixFromSelfPath", "selfRealPath", "npmPrefixInstallCommand", "prefix", "formatUpdateCommand", "underEnvDir", "env", "key", "dir", "WRAPPER_MATCHERS", "TREE_MATCHERS", "NPM_UPDATE_COMMAND", "fallbackUpdateCommand", "detectInstallManager", "input", "lazyNpmRoot", "detected", "detectUnpinned", "toInfo", "hit", "matches", "test", "wrapper", "derivedPrefix", "tree", "npmRoot", "isLocalNodeModulesInstall", "cwd", "GIT_WALK_MAX_HOPS", "gitWalkStart", "outermost", "ancestorsBelowHome", "start", "homeReal", "dirs", "hasGitAncestor", "exists", "isGlobalInstall", "home", "shouldWarnLocalInstall", "realpathSync", "path", "safeRealpath", "dir", "execFileSync", "process", "NPM_ROOT_TIMEOUT_MS", "defaultLazyNpmRoot", "trimmed", "withoutPackageManagerEnv", "env", "key", "NPM_CONFIG_TO_PRESERVE", "packageManagerInstallEnv", "sanitised", "value"]
 }

package/dist/{chunk-U7VGROH3.js → chunk-TFOXJRVH.js}

@@ -1,2 +1,2 @@
-var i={name:"infra-kit",type:"module",version:"0.34.0",repository:{type:"git",url:"git+https://github.com/ArthurSaenz/infra-kit.git",directory:"apps/infra-kit/cli"},files:["dist"],description:"infra-kit",bin:{"infra-kit":"dist/cli.js",ik:"dist/cli.js","ik-mcp":"dist/mcp-proxy.js"},engines:{node:">=24.x"},scripts:{build:"pnpm run clean-artifacts && node ./scripts/build.js",prepack:"pnpm run build","infra-kit-check":"pnpm exec infra-kit audit","clean-artifacts":"rm -rf dist","clean-cache":"rm -rf node_modules/.cache .eslintcache tsconfig.tsbuildinfo .turbo .swc","prettier-fix":"pnpm exec prettier **/* --write --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore","prettier-check":"pnpm exec prettier **/* --check --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore","eslint-check":"pnpm exec eslint --cache --report-unused-disable-directives ./src","eslint-fix":"pnpm exec eslint --cache --quiet --report-unused-disable-directives ./src --fix","ts-check":"tsc --noEmit",test:"pnpm exec vitest run --reporter=minimal","test-watch":"pnpm exec vitest --watch --silent passed-only","test-ui":"pnpm exec vitest --ui --silent passed-only","test-report":"pnpm exec vitest run --coverage --silent passed-only","qa:pty":"INFRA_KIT_REQUIRE_PTY=1 pnpm exec vitest run --reporter=minimal src/tui/__tests__/stdin-pause-pty.test.ts src/entry/__tests__/quit-keys-pty.test.ts src/entry/__tests__/post-run-pause-pty.test.ts",qa:"pnpm run prettier-check && pnpm run eslint-check && pnpm run ts-check && pnpm run test && echo \u2705 Success",fix:"pnpm run prettier-fix && pnpm run eslint-fix && pnpm run qa"},dependencies:{"@aws-lambda-powertools/logger":"^2.35.0","@inquirer/checkbox":"^5.2.6","@inquirer/confirm":"^6.3.3","@inquirer/input":"^5.1.7","@inquirer/password":"^5.2.3","@inquirer/select":"^5.2.6","@slip-stream-kit/config":"workspace:^",chalk:"^6.0.1",chokidar:"^5.0.0",commander:"^15.0.0",fastify:"^5.12.5",ink:"^8.0.0",pino:"^10.4.0","pino-pretty":"^13.2.0",portless:"^0.15.7",react:"19.3.0",yaml:"^2.9.1",zod:"^4.6.5",zx:"^8.8.5"},devDependencies:{"@slip-stream-kit/eslint-plugin":"workspace:*","@types/aws-lambda":"catalog:","@types/react":"catalog:","@wl/eslint-config":"workspace:*","@wl/vitest-config":"workspace:*",esbuild:"^0.28.2","ink-testing-library":"^4.0.0",typescript:"^6.0.3"}};export{i as a};
-//# sourceMappingURL=chunk-U7VGROH3.js.map
+var i={name:"infra-kit",type:"module",version:"0.35.0",repository:{type:"git",url:"git+https://github.com/ArthurSaenz/infra-kit.git",directory:"apps/infra-kit/cli"},files:["dist"],description:"infra-kit",bin:{"infra-kit":"dist/cli.js",ik:"dist/cli.js","ik-mcp":"dist/mcp-proxy.js"},engines:{node:">=24.x"},scripts:{build:"pnpm run clean-artifacts && node ./scripts/build.js",prepack:"pnpm run build","infra-kit-check":"pnpm exec infra-kit audit","clean-artifacts":"rm -rf dist","clean-cache":"rm -rf node_modules/.cache .eslintcache tsconfig.tsbuildinfo .turbo .swc","prettier-fix":"pnpm exec prettier **/* --write --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore","prettier-check":"pnpm exec prettier **/* --check --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore","eslint-check":"pnpm exec eslint --cache --report-unused-disable-directives ./src","eslint-fix":"pnpm exec eslint --cache --quiet --report-unused-disable-directives ./src --fix","ts-check":"tsc --noEmit",test:"pnpm exec vitest run --reporter=minimal","test-watch":"pnpm exec vitest --watch --silent passed-only","test-ui":"pnpm exec vitest --ui --silent passed-only","test-report":"pnpm exec vitest run --coverage --silent passed-only","qa:pty":"INFRA_KIT_REQUIRE_PTY=1 pnpm exec vitest run --reporter=minimal src/tui/__tests__/stdin-pause-pty.test.ts src/entry/__tests__/quit-keys-pty.test.ts src/entry/__tests__/post-run-pause-pty.test.ts",qa:"pnpm run prettier-check && pnpm run eslint-check && pnpm run ts-check && pnpm run test && echo \u2705 Success",fix:"pnpm run prettier-fix && pnpm run eslint-fix && pnpm run qa"},dependencies:{"@aws-lambda-powertools/logger":"^2.35.0","@inquirer/checkbox":"^5.2.6","@inquirer/confirm":"^6.3.3","@inquirer/input":"^5.1.7","@inquirer/password":"^5.2.3","@inquirer/select":"^5.2.6","@slip-stream-kit/config":"workspace:^",chalk:"^6.0.1",chokidar:"^5.0.0",commander:"^15.0.0",fastify:"^5.12.5",ink:"^8.0.0",pino:"^10.4.0","pino-pretty":"^13.2.0",portless:"^0.15.7",react:"19.3.0",yaml:"^2.9.1",zod:"^4.6.5",zx:"^8.8.5"},devDependencies:{"@slip-stream-kit/eslint-plugin":"workspace:*","@types/aws-lambda":"catalog:","@types/react":"catalog:","@wl/eslint-config":"workspace:*","@wl/vitest-config":"workspace:*",esbuild:"^0.28.2","ink-testing-library":"^4.0.0",typescript:"^6.0.3"}};export{i as a};
+//# sourceMappingURL=chunk-TFOXJRVH.js.map

package/dist/{chunk-U7VGROH3.js.map → chunk-TFOXJRVH.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../package.json"],
-  "sourcesContent": ["{\n  \"name\": \"infra-kit\",\n  \"type\": \"module\",\n  \"version\": \"0.34.0\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/ArthurSaenz/infra-kit.git\",\n    \"directory\": \"apps/infra-kit/cli\"\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"description\": \"infra-kit\",\n  \"bin\": {\n    \"infra-kit\": \"dist/cli.js\",\n    \"ik\": \"dist/cli.js\",\n    \"ik-mcp\": \"dist/mcp-proxy.js\"\n  },\n  \"engines\": {\n    \"node\": \">=24.x\"\n  },\n  \"scripts\": {\n    \"build\": \"pnpm run clean-artifacts && node ./scripts/build.js\",\n    \"prepack\": \"pnpm run build\",\n    \"infra-kit-check\": \"pnpm exec infra-kit audit\",\n    \"clean-artifacts\": \"rm -rf dist\",\n    \"clean-cache\": \"rm -rf node_modules/.cache .eslintcache tsconfig.tsbuildinfo .turbo .swc\",\n    \"prettier-fix\": \"pnpm exec prettier **/* --write --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore\",\n    \"prettier-check\": \"pnpm exec prettier **/* --check --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore\",\n    \"eslint-check\": \"pnpm exec eslint --cache --report-unused-disable-directives ./src\",\n    \"eslint-fix\": \"pnpm exec eslint --cache --quiet --report-unused-disable-directives ./src --fix\",\n    \"ts-check\": \"tsc --noEmit\",\n    \"test\": \"pnpm exec vitest run --reporter=minimal\",\n    \"test-watch\": \"pnpm exec vitest --watch --silent passed-only\",\n    \"test-ui\": \"pnpm exec vitest --ui --silent passed-only\",\n    \"test-report\": \"pnpm exec vitest run --coverage --silent passed-only\",\n    \"qa:pty\": \"INFRA_KIT_REQUIRE_PTY=1 pnpm exec vitest run --reporter=minimal src/tui/__tests__/stdin-pause-pty.test.ts src/entry/__tests__/quit-keys-pty.test.ts src/entry/__tests__/post-run-pause-pty.test.ts\",\n    \"qa\": \"pnpm run prettier-check && pnpm run eslint-check && pnpm run ts-check && pnpm run test && echo \u2705 Success\",\n    \"fix\": \"pnpm run prettier-fix && pnpm run eslint-fix && pnpm run qa\"\n  },\n  \"dependencies\": {\n    \"@aws-lambda-powertools/logger\": \"^2.35.0\",\n    \"@inquirer/checkbox\": \"^5.2.6\",\n    \"@inquirer/confirm\": \"^6.3.3\",\n    \"@inquirer/input\": \"^5.1.7\",\n    \"@inquirer/password\": \"^5.2.3\",\n    \"@inquirer/select\": \"^5.2.6\",\n    \"@slip-stream-kit/config\": \"workspace:^\",\n    \"chalk\": \"^6.0.1\",\n    \"chokidar\": \"^5.0.0\",\n    \"commander\": \"^15.0.0\",\n    \"fastify\": \"^5.12.5\",\n    \"ink\": \"^8.0.0\",\n    \"pino\": \"^10.4.0\",\n    \"pino-pretty\": \"^13.2.0\",\n    \"portless\": \"^0.15.7\",\n    \"react\": \"19.3.0\",\n    \"yaml\": \"^2.9.1\",\n    \"zod\": \"^4.6.5\",\n    \"zx\": \"^8.8.5\"\n  },\n  \"devDependencies\": {\n    \"@slip-stream-kit/eslint-plugin\": \"workspace:*\",\n    \"@types/aws-lambda\": \"catalog:\",\n    \"@types/react\": \"catalog:\",\n    \"@wl/eslint-config\": \"workspace:*\",\n    \"@wl/vitest-config\": \"workspace:*\",\n    \"esbuild\": \"^0.28.2\",\n    \"ink-testing-library\": \"^4.0.0\",\n    \"typescript\": \"^6.0.3\"\n  }\n}\n"],
+  "sourcesContent": ["{\n  \"name\": \"infra-kit\",\n  \"type\": \"module\",\n  \"version\": \"0.35.0\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/ArthurSaenz/infra-kit.git\",\n    \"directory\": \"apps/infra-kit/cli\"\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"description\": \"infra-kit\",\n  \"bin\": {\n    \"infra-kit\": \"dist/cli.js\",\n    \"ik\": \"dist/cli.js\",\n    \"ik-mcp\": \"dist/mcp-proxy.js\"\n  },\n  \"engines\": {\n    \"node\": \">=24.x\"\n  },\n  \"scripts\": {\n    \"build\": \"pnpm run clean-artifacts && node ./scripts/build.js\",\n    \"prepack\": \"pnpm run build\",\n    \"infra-kit-check\": \"pnpm exec infra-kit audit\",\n    \"clean-artifacts\": \"rm -rf dist\",\n    \"clean-cache\": \"rm -rf node_modules/.cache .eslintcache tsconfig.tsbuildinfo .turbo .swc\",\n    \"prettier-fix\": \"pnpm exec prettier **/* --write --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore\",\n    \"prettier-check\": \"pnpm exec prettier **/* --check --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore\",\n    \"eslint-check\": \"pnpm exec eslint --cache --report-unused-disable-directives ./src\",\n    \"eslint-fix\": \"pnpm exec eslint --cache --quiet --report-unused-disable-directives ./src --fix\",\n    \"ts-check\": \"tsc --noEmit\",\n    \"test\": \"pnpm exec vitest run --reporter=minimal\",\n    \"test-watch\": \"pnpm exec vitest --watch --silent passed-only\",\n    \"test-ui\": \"pnpm exec vitest --ui --silent passed-only\",\n    \"test-report\": \"pnpm exec vitest run --coverage --silent passed-only\",\n    \"qa:pty\": \"INFRA_KIT_REQUIRE_PTY=1 pnpm exec vitest run --reporter=minimal src/tui/__tests__/stdin-pause-pty.test.ts src/entry/__tests__/quit-keys-pty.test.ts src/entry/__tests__/post-run-pause-pty.test.ts\",\n    \"qa\": \"pnpm run prettier-check && pnpm run eslint-check && pnpm run ts-check && pnpm run test && echo \u2705 Success\",\n    \"fix\": \"pnpm run prettier-fix && pnpm run eslint-fix && pnpm run qa\"\n  },\n  \"dependencies\": {\n    \"@aws-lambda-powertools/logger\": \"^2.35.0\",\n    \"@inquirer/checkbox\": \"^5.2.6\",\n    \"@inquirer/confirm\": \"^6.3.3\",\n    \"@inquirer/input\": \"^5.1.7\",\n    \"@inquirer/password\": \"^5.2.3\",\n    \"@inquirer/select\": \"^5.2.6\",\n    \"@slip-stream-kit/config\": \"workspace:^\",\n    \"chalk\": \"^6.0.1\",\n    \"chokidar\": \"^5.0.0\",\n    \"commander\": \"^15.0.0\",\n    \"fastify\": \"^5.12.5\",\n    \"ink\": \"^8.0.0\",\n    \"pino\": \"^10.4.0\",\n    \"pino-pretty\": \"^13.2.0\",\n    \"portless\": \"^0.15.7\",\n    \"react\": \"19.3.0\",\n    \"yaml\": \"^2.9.1\",\n    \"zod\": \"^4.6.5\",\n    \"zx\": \"^8.8.5\"\n  },\n  \"devDependencies\": {\n    \"@slip-stream-kit/eslint-plugin\": \"workspace:*\",\n    \"@types/aws-lambda\": \"catalog:\",\n    \"@types/react\": \"catalog:\",\n    \"@wl/eslint-config\": \"workspace:*\",\n    \"@wl/vitest-config\": \"workspace:*\",\n    \"esbuild\": \"^0.28.2\",\n    \"ink-testing-library\": \"^4.0.0\",\n    \"typescript\": \"^6.0.3\"\n  }\n}\n"],
   "mappings": "AAAA,IAAAA,EAAA,CACE,KAAQ,YACR,KAAQ,SACR,QAAW,SACX,WAAc,CACZ,KAAQ,MACR,IAAO,mDACP,UAAa,oBACf,EACA,MAAS,CACP,MACF,EACA,YAAe,YACf,IAAO,CACL,YAAa,cACb,GAAM,cACN,SAAU,mBACZ,EACA,QAAW,CACT,KAAQ,QACV,EACA,QAAW,CACT,MAAS,sDACT,QAAW,iBACX,kBAAmB,4BACnB,kBAAmB,cACnB,cAAe,2EACf,eAAgB,4HAChB,iBAAkB,4HAClB,eAAgB,oEAChB,aAAc,kFACd,WAAY,eACZ,KAAQ,0CACR,aAAc,gDACd,UAAW,6CACX,cAAe,uDACf,SAAU,qMACV,GAAM,gHACN,IAAO,6DACT,EACA,aAAgB,CACd,gCAAiC,UACjC,qBAAsB,SACtB,oBAAqB,SACrB,kBAAmB,SACnB,qBAAsB,SACtB,mBAAoB,SACpB,0BAA2B,cAC3B,MAAS,SACT,SAAY,SACZ,UAAa,UACb,QAAW,UACX,IAAO,SACP,KAAQ,UACR,cAAe,UACf,SAAY,UACZ,MAAS,SACT,KAAQ,SACR,IAAO,SACP,GAAM,QACR,EACA,gBAAmB,CACjB,iCAAkC,cAClC,oBAAqB,WACrB,eAAgB,WAChB,oBAAqB,cACrB,oBAAqB,cACrB,QAAW,UACX,sBAAuB,SACvB,WAAc,QAChB,CACF",
   "names": ["package_default"]
 }

package/dist/{chunk-DVXTZPQ5.js → chunk-UTQ4KTO6.js}

@@ -3,4 +3,4 @@ import h from"node:process";var p=["\u280B","\u2819","\u2839","\u2838","\u283C",
 `),this.paintSpinner();return}this.deps.write(`${t}
 `)}log(t,e="info",r={}){(e!=="debug"||this.deps.verbose)&&this.emit(t),r.tee!==!1&&this.tee(t,e)}narrate(t){this.deps.verbose&&this.emit(t),this.tee(t,"info")}logFn=(t,e="info")=>{this.log(t,e)};paintSpinner(){let t=p[this.spinnerFrame%p.length];this.deps.write(`${d}${this.color(s.teal,t)} ${this.color(s.dim,this.spinnerPhase)}`)}bootStep(t){if(this.tee(t,"info"),this.spinnerPhase=t,!this.deps.isTTY){this.deps.write(`${t}
 `);return}this.spinnerTimer==null&&(this.spinnerTimer=setInterval(()=>{this.spinnerFrame+=1,this.paintSpinner()},f),this.spinnerTimer.unref?.()),this.paintSpinner()}stopSpinner(){this.spinnerTimer!=null&&(clearInterval(this.spinnerTimer),this.spinnerTimer=null),this.deps.isTTY&&this.deps.write(d)}errorCount(t){let e=`\u26A0 ${t}`;return t>0?this.color(`${s.bold}${s.red}`,e):this.color(s.dim,e)}tagCell(t,e,r){return this.color((r??0)>0?s.red:s.teal,t.padEnd(e))}healthDot(t){switch(t){case"ok":return this.color(s.green,"\u25CF ok");case"down":return this.color(s.red,"\u25CF down");case"starting":return this.color(s.dim,"\u25CC starting");case"unverified":return this.color(s.dim,"\u25CD ?");default:return""}}ready(t){this.stopSpinner();let e=this.formatReadyLines(t);for(let r of e)this.emit(r),this.tee(r,"info")}tagWidth(t){return[...t.endpoints.map(r=>r.tag),...t.uiRefs.map(r=>r.tag),...(t.failed??[]).map(r=>r.tag),...(t.degraded??[]).map(r=>`${r.tag} ${r.route}`)].reduce((r,i)=>Math.max(r,i.length),0)}titleLine(t){let e=[t.target,t.watch?"watch":null,t.release].filter(a=>!!a).join(" \xB7 "),r=t.failed?.length??0,i=v(t.elapsedMs),n=r>0?this.color(s.red,`${r} failed \xB7 started in ${i}`):this.color(s.green,`ready in ${i}`);return`  ${this.color(s.bold,"infra-kit dev")}  ${this.color(s.dim,e)}   ${n}`}legendLines(t){let e=t.watch&&t.watchSummary?`watching ${t.watchSummary}`:"watch off",r=this.hyperlink(t.logHref,t.logPath),i=`${e}          logs \u2192 ${r}`,n="\u2500".repeat(60);return[`  ${this.color(s.dim,i)}`,`  ${this.color(s.dim,n)}`]}uiRefLine(t,e,r){let i=r==null?"":`  ${this.errorCount(r)}`;return`  ${this.color(s.teal,t.tag.padEnd(e))}  ${this.color(s.dim,"no managed port (vite prints its own URL)")}${i}`}statusFields(t){let e=[];return t.uptimeMs!=null&&e.push(this.color(s.dim,`up ${c(t.uptimeMs)}`)),t.rpm!=null&&t.rpm>0&&e.push(this.color(s.dim,`${t.rpm}/min`)),t.restarts!=null&&t.restarts>0&&e.push(this.color(s.dim,`\u21BA${t.restarts}`)),t.errors!=null&&e.push(this.errorCount(t.errors)),e.join("   ")}endpointLine(t,e,r){let i=r?this.healthDot(t.health):"",n=this.statusFields(t),a=[i,n].filter(Boolean).join("  ");return`  ${this.color(s.teal,t.tag.padEnd(e))}  ${this.color(s.blue,t.url)}${a?`  ${a}`:""}`}failedLine(t,e){return`  ${this.color(s.teal,t.tag.padEnd(e))}  ${this.color(s.red,"\u25CF failed")}  ${this.color(s.dim,t.reason)}`}degradedLine(t,e){let r=`${t.tag} ${t.route}`,i=t.fallback==="cloud"?"\u25CF cloud (local backend down)":"\u25CF dead alias (local backend down)",n=t.target?`  ${this.color(s.dim,t.target)}`:"";return`  ${this.color(s.red,"\u26A0")} ${this.color(s.teal,r.padEnd(e))}  ${this.color(s.red,i)}${n}`}proxyLines(t){if(t.length===0)return[];let e=Math.max(...t.map(r=>r.route.length));return t.map((r,i)=>{let n=i===t.length-1?"\u2514":"\u251C",a=r.source==="local"?this.color(s.green,"\u25CF"):this.color(s.dim,"\u25CB"),l=r.target?`  ${this.color(s.blue,r.target)}`:"";return`    ${this.color(s.dim,n)} ${this.color(s.teal,r.route.padEnd(e))}  ${a} ${this.color(s.dim,r.source)}${l}`})}formatLines(t,{withHealthDot:e}){let r=this.tagWidth(t),i=["",this.titleLine(t),""];for(let n of t.endpoints)i.push(this.endpointLine(n,r,e)),n.proxies&&i.push(...this.proxyLines(n.proxies));for(let n of t.failed??[])i.push(this.failedLine(n,r));for(let n of t.uiRefs)i.push(this.uiRefLine(n,r,n.errors)),n.proxies&&i.push(...this.proxyLines(n.proxies));for(let n of t.degraded??[])i.push(this.degradedLine(n,r));return i.push("",...this.legendLines(t)),i}formatHeaderLines(t){return this.formatLines(t,{withHealthDot:!1})}formatFooterLines(t){let e=this.tagWidth(t),r=t.endpoints.map(i=>{let n=this.healthDot(i.health),a=this.statusFields(i),l=[n,a].filter(Boolean).join("  ");return`  ${this.tagCell(i.tag,e,i.errors)}  ${l}`});for(let i of t.uiRefs)i.errors!=null&&r.push(`  ${this.tagCell(i.tag,e,i.errors)}  ${this.errorCount(i.errors)}`);for(let i of t.degraded??[])r.push(this.degradedLine(i,e));if(t.sessionUptimeMs!=null){let i=`up ${c(t.sessionUptimeMs)}`;r.push(`  ${this.color(s.dim,i)}`)}return r}formatReadyLines(t){return this.formatLines(t,{withHealthDot:!0})}};export{R as a,g as b};
-//# sourceMappingURL=chunk-DVXTZPQ5.js.map
+//# sourceMappingURL=chunk-UTQ4KTO6.js.map

package/dist/{chunk-DVXTZPQ5.js.map → chunk-UTQ4KTO6.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/dev/render.ts"],
-  "sourcesContent": ["/**\n * Terminal renderer for `infra-kit dev` \u2014 a calm-print layer (never a full-screen TUI).\n *\n * The boot collapses into a single transient spinner; the final screen is a STATUS PANEL, one row per\n * server, carrying health, uptime, requests/min, restarts and an error count. There is no log tail:\n * every line \u2014 framework output, request logs, a handler's own `console.log` \u2014 is written to that\n * service's file under `<cacheRoot>/<session>/dev/<pid>/` and never printed. What still appears above\n * the panel is only what the RUNNER says: a restart, an unhealthy app, a dead engine.\n *\n * The panel's live fields are the reason it is a status surface and not a screenshot. With nothing\n * scrolling beside it, a panel whose numbers never move cannot be told apart from a hung process.\n *\n * All I/O is injected (`write` / `appendLog` / `isTTY` / `now`) so every frame is snapshot-testable and\n * the spinner is deterministically disabled in tests (`isTTY: false`).\n */\nimport process from 'node:process'\n\nimport type { DevUi } from './dev-ui.js'\n\nexport type LogLevel = 'info' | 'warn' | 'error' | 'debug'\n\n/**\n * Per-call options for {@link DevRenderer.log}.\n *\n * `tee: false` exists for exactly one caller: `DevServerRunner.reportFault`, which files the fault into the\n * sink ITSELF (at `error` level \u2014 that is what turns the panel row red) and then prints it. Without this\n * opt-out the print tees a SECOND copy into the same `runner.log`, so every fault is filed twice \u2014 a\n * literal 2\u00D7 amplifier sitting at the centre of the loop that wrote 455 GB.\n */\nexport interface LogOptions {\n  /** Also append the line to the log file. Default `true`; `false` prints without filing. */\n  tee?: boolean\n}\n\n/**\n * A row's liveness, as the runner's probe state machine resolved it.\n *\n * Five arms, not a boolean, because a probe has three outcomes and a row has a history. The two that\n * are neither `ok` nor `down` are the honest ones: a UI that has never answered yet is `starting`\n * (vite is spawned after the ready frame, so red would be a lie for the first seconds), and a port that\n * answers something OTHER than vite's ping is `unverified` \u2014 a squatter, a shadowing proxy, or a future\n * vite that dropped the endpoint are all consistent with that, and only one of them is broken. Red must\n * stay a PROOF of failure, so `unverified` renders a question mark and never a red dot.\n */\nexport type HealthState = 'ok' | 'down' | 'starting' | 'unverified' | 'unknown'\n\n/** Injected I/O seams. Defaults wire to the real stdout + a caller-provided file appender. */\nexport interface DevRendererDeps {\n  /** Terminal sink (default: `process.stdout.write`). */\n  write: (text: string) => void\n  /** File tee \u2014 always receives full detail (default: no-op; the runner passes its log appender). */\n  appendLog: (text: string) => void\n  /** Whether the terminal is a TTY. Gates the spinner + ANSI color; false in CI / when piped. */\n  isTTY: boolean\n  /** Clock seam (default: `() => new Date()`), so timestamps + `ready in Xs` are testable. */\n  now: () => Date\n  /** When true, boot narration reaches the terminal; otherwise it is file-only. */\n  verbose: boolean\n}\n\n/**\n * One resolved proxy route on a frontend, painted as an indented line under that app's row: which route,\n * where it lands, and whether it is the local backend or the shared cloud one. This is the \"all proxies \u2014\n * which one and where\" surface: unlike a {@link DegradedRow} it reports the happy path too, so a frontend\n * that proxies `/api` local and `/media` cloud shows both, and nobody has to guess where a route points.\n */\nexport interface ProxyRouteRow {\n  /** Route path (e.g. `/api`). */\n  route: string\n  /** Where the route resolves this run \u2014 the local backend or the shared cloud origin. */\n  source: 'local' | 'cloud'\n  /**\n   * The origin the route lands on. Omitted when it is not knowable (a `local` route whose backend is not\n   * up \u2014 a dead alias the degraded row already owns \u2014 or a `cloud` route with no `<env>` sourced).\n   */\n  target?: string\n}\n\n/**\n * One server's row on the status panel.\n *\n * The live fields below are what make the panel a STATUS surface rather than a screenshot. The terminal\n * no longer carries a log tail, so a static row would leave \"quiet\" indistinguishable from \"hung\" \u2014 the\n * moving numbers are the liveness tell, and they are not decoration.\n */\nexport interface EndpointRow {\n  /** Stream tag, e.g. `client/api`. */\n  tag: string\n  /** The app's `.localhost` alias URL \u2014 the only form, since an app that cannot be aliased never starts. */\n  url: string\n  /** Liveness, as {@link HealthState} defines it; `unknown` renders no dot at all (nothing to probe). */\n  health: HealthState\n  /** Milliseconds since this server last (re)started. Omitted on the boot frame. */\n  uptimeMs?: number\n  /** Watch-triggered restarts so far this session. */\n  restarts?: number\n  /** Requests served in the last 60s. */\n  rpm?: number\n  /**\n   * Errors this service has declared since boot \u2014 a 5xx, a `console.error`, a framework failure line.\n   * This is the ONLY error signal the user gets now that nothing prints, so a row that cannot count is\n   * a row that lies. A COUNT, never a classification: it is incremented from the level the emitter\n   * declared, never from anything read out of the line's text.\n   */\n  errors?: number\n  /**\n   * Resolved proxy routes for a frontend row (a `<app>/ui` endpoint), painted as an indented list under\n   * it. Absent on backend rows \u2014 a `<app>/api` endpoint proxies nothing \u2014 and on a frontend with no\n   * `dev.proxy` block.\n   */\n  proxies?: ProxyRouteRow[]\n}\n\n/**\n * A UI app whose URL the runner does not own, so it streams its own below \u2014 referenced, never given a\n * (fabricated) endpoint row. The fallback case only: a UI whose port the runner pre-assigned is an\n * {@link EndpointRow}, proxy or no proxy.\n */\nexport interface UiRef {\n  /** Stream tag, e.g. `client/ui`. */\n  tag: string\n  /**\n   * Errors this UI has declared since boot. Present for the same reason an {@link EndpointRow} has one:\n   * with nothing printing, a row that cannot count is a row that lies \u2014 and this row belongs to the app\n   * whose vite config never wired `infraKitDev()`, i.e. the one most likely to be misconfigured.\n   */\n  errors?: number\n  /** Resolved proxy routes for this frontend, painted as an indented list under its reference line. */\n  proxies?: ProxyRouteRow[]\n}\n\n/**\n * An app that was asked for but never came up. It has no URL and no health \u2014 but it MUST still get a\n * row: the header is a report of what the user asked for, and an app that silently vanishes from it\n * reads as \"not requested\" rather than \"broken\".\n */\nexport interface FailedRow {\n  /** Stream tag, e.g. `client/api`. */\n  tag: string\n  /** One-line reason, e.g. `config is missing field: 'connectionURL'`. */\n  reason: string\n}\n\n/**\n * A route that wanted a local backend and is falling back to cloud because that backend failed to start.\n *\n * It gets a row of its own \u2014 not a footnote on the failed backend's row \u2014 because the two facts land on\n * different people. `client/api \u25CF failed` says a server is down, which reads as \"that half is broken\".\n * It does NOT say the frontend beside it came up healthy and is now sending every `/api` request to the\n * shared cloud backend. That second fact is the one that gets you writing to the cloud dev database\n * while you believe you are on localhost, and it is invisible everywhere else on the screen: the vite\n * proxy resolved cleanly, so nothing else has anything to complain about.\n *\n * Only rendered under `--watch` \u2014 without it the run is refused outright (see `local-pairing.ts`).\n */\nexport interface DegradedRow {\n  /** Route path (e.g. `/api`). */\n  route: string\n  /** Stream tag of the frontend serving it, e.g. `client/ui`. */\n  tag: string\n  /**\n   * Where the route ACTUALLY resolves now. Not always `cloud`: the helper falls back to\n   * `route.default ?? route.from[0]`, so a single-source `from: ['local']` route with no `default` falls\n   * back to `local` \u2014 at an alias nothing registered, i.e. a 502 on every request. The row must name the\n   * real destination, or it is doing the same lying-by-omission it exists to prevent.\n   */\n  fallback: 'local' | 'cloud'\n  /** The cloud origin it now resolves to. Only ever set when `fallback` is `cloud` and it is knowable. */\n  target?: string\n}\n\n/** Everything {@link DevRenderer.ready} needs to paint the final header in one shot. */\nexport interface ReadySummary {\n  /** Resolved preset / target label (e.g. `client`, `*`). */\n  target: string\n  watch: boolean\n  /** Slugified release for the header meta; omitted outside a git repo. */\n  release?: string\n  /** Backend readiness time in ms (UI is fire-and-forget, so this is BE-only \u2014 labeled honestly). */\n  elapsedMs: number\n  /** Real backend endpoint rows (owned ports + pre-probed health). */\n  endpoints: EndpointRow[]\n  /** UI apps that print their own URL below. */\n  uiRefs: UiRef[]\n  /**\n   * Apps that failed to start. Optional only so the (many) existing summaries need not restate an\n   * empty list; a non-empty one downgrades the title from a green `ready` to an honest `N failed`.\n   */\n  failed?: FailedRow[]\n  /**\n   * Routes silently demoted from local to cloud by a backend that failed to start. Recomputed on every\n   * repaint, so a route CLEARS from the panel the moment `--watch` gets its backend up (see\n   * {@link DegradedRow}).\n   */\n  degraded?: DegradedRow[]\n  /** Human watch summary, e.g. `1 app \u00B7 5 packages`; omitted when not watching. */\n  watchSummary?: string\n  /**\n   * Compact, human-readable log path shown as the `logs \u2192 \u2026` label. A DIRECTORY, not a file\n   * (e.g. `~/.cache/infra-kit/<session>/dev/<pid>`): there is one log per service, so a single path\n   * would have to pick a favourite.\n   */\n  logPath: string\n  /** Absolute log path backing the clickable OSC-8 hyperlink (wrapped as `file://<logHref>`). */\n  logHref: string\n  /**\n   * Milliseconds since the session became ready \u2014 the panel's HEARTBEAT.\n   *\n   * Every other live field belongs to a backend: uptime, req/min, restarts. A UI-only session has no\n   * backend, so its rows have nothing that moves \u2014 and Ink does not repaint an identical frame, so the\n   * screen would sit perfectly still while the session ran. With no log tail left to prove otherwise,\n   * a motionless panel is indistinguishable from a hung process. This is the one field that ticks for\n   * EVERY session shape. Omitted on the boot frame, where nothing has elapsed yet.\n   */\n  sessionUptimeMs?: number\n}\n\nconst SPINNER_FRAMES = ['\u280B', '\u2819', '\u2839', '\u2838', '\u283C', '\u2834', '\u2826', '\u2827', '\u2807', '\u280F']\nconst SPINNER_INTERVAL_MS = 80\n\nconst ANSI = {\n  reset: '\\x1B[0m',\n  dim: '\\x1B[2m',\n  bold: '\\x1B[1m',\n  teal: '\\x1B[36m',\n  green: '\\x1B[32m',\n  blue: '\\x1B[34m',\n  red: '\\x1B[31m',\n} as const\n\n/** Erase the current line and return the cursor to column 0 (used to clear the spinner). */\nconst CLEAR_LINE = '\\r\\x1B[2K'\n\n/**\n * SGR color codes (`ESC [ \u2026 m`) and OSC-8 hyperlink wrappers (`ESC ] 8 ; ; \u2026 ESC \\`), non-greedy.\n * Matching the ESC control character is the whole point here \u2014 this pattern exists to remove it.\n */\n// eslint-disable-next-line sonarjs/no-control-regex, no-control-regex\nconst ANSI_PATTERN = /\\x1B\\[[0-9;]*m|\\x1B\\]8;;.*?\\x1B\\\\/g\n\n/**\n * Strip SGR colors + OSC-8 hyperlink escapes, keeping the hyperlink's visible label. Applied at the\n * file-tee seam so `logs.txt` stays greppable plain text even though the terminal frames it renders\n * from are colored + hyperlinked (both renderers format once, for a TTY, and tee the same string).\n */\nexport const stripAnsi = (s: string): string => {\n  return s.replace(ANSI_PATTERN, '')\n}\n\n/** Zero-pad to 2 digits for `HH:MM:SS`. */\nconst pad2 = (n: number): string => {\n  return String(n).padStart(2, '0')\n}\n\n/** `2.4s` for the `ready in \u2026` header. */\nexport const formatElapsed = (ms: number): string => {\n  return `${(ms / 1000).toFixed(1)}s`\n}\n\n/**\n * `47s` / `4m12s` / `2h03m` \u2014 the panel's liveness tell.\n *\n * With no log tail on screen, a panel whose numbers never move is indistinguishable from a hung\n * process. This is the field that proves the session is alive even when nothing is happening, so it is\n * always rendered and always advancing.\n */\nexport const formatUptime = (ms: number): string => {\n  const total = Math.max(0, Math.floor(ms / 1000))\n  const hours = Math.floor(total / 3600)\n  const minutes = Math.floor((total % 3600) / 60)\n  const seconds = total % 60\n\n  if (hours > 0) return `${hours}h${pad2(minutes)}m`\n  if (minutes > 0) return `${minutes}m${pad2(seconds)}s`\n\n  return `${seconds}s`\n}\n\n/**\n * Resolve the endpoint URL for an app: `https://<alias><prefix>`, where `alias` is the portless hostname\n * the runner registered (e.g. `feat-x.backend-api.hulyo-monorepo.localhost`). The runner refuses to start an app it could\n * not alias, so there is no port-form to fall back to.\n *\n * There is no port and no scheme choice, by construction. The proxy serves TLS on 443 \u2014 the implicit HTTPS\n * port \u2014 so the URL is byte-identical to the `dev.proxy` local template that `infra-kit/vite` proxies to,\n * and what the table prints cannot drift from what the frontend calls. Any port suffix here would mean the\n * proxy is not on 443, which `ensureProxy` has already refused to start.\n */\nexport const resolveEndpointUrl = (input: { prefixUrl: string; alias: string }): string => {\n  return `https://${input.alias}${input.prefixUrl}`\n}\n\nexport class DevRenderer implements DevUi {\n  private readonly deps: DevRendererDeps\n  private spinnerTimer: ReturnType<typeof setInterval> | null = null\n  private spinnerPhase = ''\n  private spinnerFrame = 0\n\n  constructor(deps: Partial<DevRendererDeps> = {}) {\n    this.deps = {\n      write:\n        deps.write ??\n        ((text: string): void => {\n          process.stdout.write(text)\n        }),\n      appendLog: deps.appendLog ?? ((): void => {}),\n      isTTY: deps.isTTY ?? Boolean(process.stdout.isTTY),\n      now:\n        deps.now ??\n        ((): Date => {\n          return new Date()\n        }),\n      verbose: deps.verbose ?? false,\n    }\n  }\n\n  /** Wrap `s` in an ANSI color on a TTY; return it untouched when piped (deterministic snapshots). */\n  private color(code: string, s: string): string {\n    return this.deps.isTTY ? `${code}${s}${ANSI.reset}` : s\n  }\n\n  /**\n   * Wrap `label` in an OSC-8 terminal hyperlink to `href` (a filesystem path \u2192 `file://` URI) so the\n   * log path is cmd/ctrl-clickable. Returns the bare `label` when piped (deterministic snapshots) or\n   * when `href` is empty \u2014 terminals without OSC-8 support silently ignore the escapes anyway.\n   */\n  private hyperlink(href: string, label: string): string {\n    if (!this.deps.isTTY || href === '') return label\n\n    // `encodeURI` escapes spaces / non-ASCII but leaves `#` and `?`, which a file URI reads as a\n    // fragment / query \u2014 encode those too so a path containing them still resolves to the real file.\n    const uri = encodeURI(href).replace(/[#?]/g, (c) => {\n      return `%${c.charCodeAt(0).toString(16).toUpperCase()}`\n    })\n\n    return `\\x1B]8;;file://${uri}\\x1B\\\\${label}\\x1B]8;;\\x1B\\\\`\n  }\n\n  /**\n   * Append one line to the log file ONLY \u2014 the canonical `[iso] [LEVEL] msg` shape, no terminal write.\n   * The single source of the file-tee format: the private {@link tee} and the Ink boot UI both route\n   * here, so the log file stays identical whichever renderer is live.\n   */\n  teeOnly(message: string, level: LogLevel): void {\n    this.deps.appendLog(`[${this.deps.now().toISOString()}] [${level.toUpperCase()}] ${stripAnsi(message)}\\n`)\n  }\n\n  /** File tee for a line that is ALSO written to the terminal; delegates the format to {@link teeOnly}. */\n  private tee(message: string, level: LogLevel): void {\n    this.teeOnly(message, level)\n  }\n\n  /**\n   * No-op for the plain renderer: it owns no Ink / raw-mode terminal state to release. Present to\n   * satisfy {@link DevUi} so the runner can call `dispose()` uniformly. Idempotent by construction.\n   */\n  dispose(): void {\n    // Nothing to release \u2014 the plain renderer never seizes the terminal.\n  }\n\n  /**\n   * Write one terminal line spinner-safely: if the spinner is live on a TTY, erase it, print the\n   * line, then repaint the spinner, so a mid-boot message never shreds the `\\r`-based spinner.\n   */\n  private emit(line: string): void {\n    if (this.spinnerTimer != null && this.deps.isTTY) {\n      this.deps.write(`${CLEAR_LINE}${line}\\n`)\n      this.paintSpinner()\n\n      return\n    }\n\n    this.deps.write(`${line}\\n`)\n  }\n\n  /** A general message routed by level (terminal + file tee). Debug is terminal-only in verbose. */\n  log(message: string, level: LogLevel = 'info', options: LogOptions = {}): void {\n    if (level !== 'debug' || this.deps.verbose) {\n      this.emit(message)\n    }\n    if (options.tee !== false) {\n      this.tee(message, level)\n    }\n  }\n\n  /** A boot-narration step: terminal only when `--verbose`, but always tee'd to the log. */\n  narrate(message: string): void {\n    if (this.deps.verbose) {\n      this.emit(message)\n    }\n    this.tee(message, 'info')\n  }\n\n  /** `LogFn`-shaped adapter for the build runner seam (which passes `(msg, level)`). */\n  readonly logFn = (message: string, level: LogLevel = 'info'): void => {\n    this.log(message, level)\n  }\n\n  // ---- boot spinner -------------------------------------------------------\n\n  /** Paint the current spinner frame in place (TTY only). */\n  private paintSpinner(): void {\n    const frame = SPINNER_FRAMES[this.spinnerFrame % SPINNER_FRAMES.length]!\n\n    this.deps.write(`${CLEAR_LINE}${this.color(ANSI.teal, frame)} ${this.color(ANSI.dim, this.spinnerPhase)}`)\n  }\n\n  /**\n   * Update the boot phase. On a TTY this drives a single transient spinner line; when piped it\n   * prints one plain phase line (no ANSI, deterministic). Always tee'd to the log.\n   */\n  bootStep(phase: string): void {\n    this.tee(phase, 'info')\n    this.spinnerPhase = phase\n\n    if (!this.deps.isTTY) {\n      this.deps.write(`${phase}\\n`)\n\n      return\n    }\n\n    if (this.spinnerTimer == null) {\n      this.spinnerTimer = setInterval(() => {\n        this.spinnerFrame += 1\n        this.paintSpinner()\n      }, SPINNER_INTERVAL_MS)\n      // Never keep the event loop alive for the spinner alone.\n      this.spinnerTimer.unref?.()\n    }\n    this.paintSpinner()\n  }\n\n  /** Stop + erase the spinner line (idempotent). Called before the ready header prints. */\n  stopSpinner(): void {\n    if (this.spinnerTimer != null) {\n      clearInterval(this.spinnerTimer)\n      this.spinnerTimer = null\n    }\n    if (this.deps.isTTY) {\n      this.deps.write(CLEAR_LINE)\n    }\n  }\n\n  // ---- the ready header ---------------------------------------------------\n\n  /**\n   * The error counter, shared by endpoint rows and UI reference rows.\n   *\n   * Zero is rendered, not omitted: with nothing else printing, this is the only failure signal on the\n   * screen, so a dim `\u26A0 0` is a claim worth making.\n   *\n   * Non-zero is BOLD red, and that is not decoration. A frontend that fails to compile still serves and\n   * still answers vite's ping, so its dot stays green \u2014 the dot is liveness, and the app IS alive. This\n   * counter is the only thing on the screen that says the app is nevertheless broken, so it has to win a\n   * glance against a green dot sitting two columns away.\n   */\n  private errorCount(errors: number): string {\n    const text = `\u26A0 ${errors}`\n\n    return errors > 0 ? this.color(`${ANSI.bold}${ANSI.red}`, text) : this.color(ANSI.dim, text)\n  }\n\n  /**\n   * The padded tag gutter for a PANEL row \u2014 red once the row has declared an error, teal otherwise.\n   *\n   * Footer only, never {@link formatHeaderLines}. The header is committed once through Ink's `<Static>`,\n   * so a tag reddened there would be a photograph of the boot: it could never turn red later, and \u2014 far\n   * worse \u2014 could never turn back. The panel repaints, so the color tracks the fact.\n   */\n  private tagCell(tag: string, tagWidth: number, errors: number | undefined): string {\n    return this.color((errors ?? 0) > 0 ? ANSI.red : ANSI.teal, tag.padEnd(tagWidth))\n  }\n\n  /** Format the health dot for an endpoint row \u2014 one arm per {@link HealthState}; `unknown` prints nothing. */\n  private healthDot(health: HealthState): string {\n    switch (health) {\n      case 'ok':\n        return this.color(ANSI.green, '\u25CF ok')\n      case 'down':\n        return this.color(ANSI.red, '\u25CF down')\n      case 'starting':\n        return this.color(ANSI.dim, '\u25CC starting')\n      // Answering, but not with vite's ping. Dim, never red: a non-204 is equally consistent with a\n      // broken squatter and a perfectly healthy vite behind something that shadows the ping, and a red\n      // dot on a coin-flip is how a dot stops being read at all.\n      case 'unverified':\n        return this.color(ANSI.dim, '\u25CD ?')\n      default:\n        return ''\n    }\n  }\n\n  /**\n   * Collapse the boot and print the final header in one shot: title line, one endpoint row per\n   * backend server (with health dot), a reference line per UI app, the watch line, the clickable\n   * log path, and a separator rule. Synchronous \u2014 health is pre-probed by the caller.\n   */\n  ready(summary: ReadySummary): void {\n    this.stopSpinner()\n\n    const lines = this.formatReadyLines(summary)\n\n    for (const line of lines) {\n      this.emit(line)\n      this.tee(line, 'info')\n    }\n  }\n\n  /** Column width for the aligned `tag` gutter \u2014 the widest endpoint/UI/failed tag. */\n  private tagWidth(summary: ReadySummary): number {\n    const tags = [\n      ...summary.endpoints.map((e) => {\n        return e.tag\n      }),\n      ...summary.uiRefs.map((u) => {\n        return u.tag\n      }),\n      ...(summary.failed ?? []).map((f) => {\n        return f.tag\n      }),\n      // A degraded row's gutter is `<tag> <route>`, which is wider than any bare tag \u2014 measure the label\n      // it actually prints or its `\u25CF cloud \u2026` cell would sit out of column with every row above it.\n      ...(summary.degraded ?? []).map((d) => {\n        return `${d.tag} ${d.route}`\n      }),\n    ]\n\n    return tags.reduce((w, t) => {\n      return Math.max(w, t.length)\n    }, 0)\n  }\n\n  /**\n   * The `infra-kit dev \u00B7 <meta>   ready in Xs` title line.\n   *\n   * A green `ready` is a claim about the whole session, so it is spent only when the whole session\n   * is up. With anything in `failed` the status turns red and counts the casualties instead \u2014 the\n   * boot time alone, next to a green word, is exactly how a half-dead session used to pass for a\n   * healthy one.\n   */\n  private titleLine(summary: ReadySummary): string {\n    const meta = [summary.target, summary.watch ? 'watch' : null, summary.release]\n      .filter((s): s is string => {\n        return Boolean(s)\n      })\n      .join(' \u00B7 ')\n\n    const failedCount = summary.failed?.length ?? 0\n    const elapsed = formatElapsed(summary.elapsedMs)\n    const status =\n      failedCount > 0\n        ? this.color(ANSI.red, `${failedCount} failed \u00B7 started in ${elapsed}`)\n        : this.color(ANSI.green, `ready in ${elapsed}`)\n\n    return `  ${this.color(ANSI.bold, 'infra-kit dev')}  ${this.color(ANSI.dim, meta)}   ${status}`\n  }\n\n  /** The static legend tail: watch line + clickable log path, then a separator rule. */\n  private legendLines(summary: ReadySummary): string[] {\n    const watchText = summary.watch && summary.watchSummary ? `watching ${summary.watchSummary}` : 'watch off'\n    const logLink = this.hyperlink(summary.logHref, summary.logPath)\n    const watchLine = `${watchText}          logs \u2192 ${logLink}`\n    const rule = '\u2500'.repeat(60)\n\n    return [`  ${this.color(ANSI.dim, watchLine)}`, `  ${this.color(ANSI.dim, rule)}`]\n  }\n\n  /**\n   * A UI reference row \u2014 used when infra-kit could not claim the UI's port, so it has no URL to print.\n   *\n   * It STILL carries an error count. That is the whole point: this row is exactly the misconfigured app\n   * (its vite config never wired `infraKitDev()`), which is the app most likely to be broken \u2014 and with\n   * no log tail on screen, a row with no error field is a row that cannot report the breakage. It used\n   * to be a bare reference line, so its errors were counted into a file nobody had a reason to open.\n   */\n  private uiRefLine(ref: UiRef, tagWidth: number, errors: number | undefined): string {\n    const errText = errors == null ? '' : `  ${this.errorCount(errors)}`\n\n    return `  ${this.color(ANSI.teal, ref.tag.padEnd(tagWidth))}  ${this.color(\n      ANSI.dim,\n      'no managed port (vite prints its own URL)',\n    )}${errText}`\n  }\n\n  /**\n   * The live half of an endpoint row: `up 4m12s   18/min   \u21BA2   \u26A0 3`.\n   *\n   * Empty on the boot frame (no field is set yet). Each field is omitted individually when absent \u2014 a\n   * server with no restarts should not have to say so.\n   */\n  private statusFields(endpoint: ReadySummary['endpoints'][number]): string {\n    const parts: string[] = []\n\n    if (endpoint.uptimeMs != null) parts.push(this.color(ANSI.dim, `up ${formatUptime(endpoint.uptimeMs)}`))\n    if (endpoint.rpm != null && endpoint.rpm > 0) parts.push(this.color(ANSI.dim, `${endpoint.rpm}/min`))\n    if (endpoint.restarts != null && endpoint.restarts > 0) parts.push(this.color(ANSI.dim, `\u21BA${endpoint.restarts}`))\n    // Errors are the exception to \"omit when zero\" \u2014 see {@link errorCount}.\n    if (endpoint.errors != null) {\n      parts.push(this.errorCount(endpoint.errors))\n    }\n\n    return parts.join('   ')\n  }\n\n  /** One endpoint row (`client/api  https://\u2026  \u25CF ok  up 4m12s  18/min  \u26A0 0`). */\n  private endpointLine(endpoint: ReadySummary['endpoints'][number], tagWidth: number, withHealthDot: boolean): string {\n    const dot = withHealthDot ? this.healthDot(endpoint.health) : ''\n    const status = this.statusFields(endpoint)\n    const suffix = [dot, status].filter(Boolean).join('  ')\n\n    return `  ${this.color(ANSI.teal, endpoint.tag.padEnd(tagWidth))}  ${this.color(ANSI.blue, endpoint.url)}${\n      suffix ? `  ${suffix}` : ''\n    }`\n  }\n\n  /** One failed row (`client/api  \u25CF failed  <reason>`) \u2014 no URL, because there is nothing listening. */\n  private failedLine(failed: FailedRow, tagWidth: number): string {\n    return `  ${this.color(ANSI.teal, failed.tag.padEnd(tagWidth))}  ${this.color(\n      ANSI.red,\n      '\u25CF failed',\n    )}  ${this.color(ANSI.dim, failed.reason)}`\n  }\n\n  /**\n   * One degraded-route row (`\u26A0 /api  \u25CF cloud (local backend failed)  https://dev.hulyo.co.il`).\n   *\n   * Tagged by ROUTE, not by app, and deliberately so: the app rows above already say what is up and what\n   * is down, and neither of them can say \"the frontend that came up healthy is talking to cloud\". The\n   * route is the thing that got redirected, so the route is what the row is about.\n   */\n  private degradedLine(row: DegradedRow, tagWidth: number): string {\n    const label = `${row.tag} ${row.route}`\n    // A `local` fallback is not a cloud proxy \u2014 it is a dead alias that 502s. Saying \"cloud\" there would\n    // name a destination the traffic never reaches.\n    const state = row.fallback === 'cloud' ? '\u25CF cloud (local backend down)' : '\u25CF dead alias (local backend down)'\n    const target = row.target ? `  ${this.color(ANSI.dim, row.target)}` : ''\n\n    return `  ${this.color(ANSI.red, '\u26A0')} ${this.color(ANSI.teal, label.padEnd(tagWidth))}  ${this.color(\n      ANSI.red,\n      state,\n    )}${target}`\n  }\n\n  /**\n   * The indented proxy lines painted under a frontend's row: `  \u251C /api    \u25CF local  https://\u2026`. One per\n   * resolved route, so \"which one and where\" is answered inline instead of left to guess. A filled dot is\n   * the local backend, a hollow one the shared cloud origin \u2014 the same local=\u25CF/cloud=\u25CB language the rest\n   * of the panel uses. The last route gets a `\u2514` elbow so the group reads as one block belonging to the\n   * app above it. Empty when the frontend declares no routes.\n   */\n  private proxyLines(proxies: ProxyRouteRow[]): string[] {\n    if (proxies.length === 0) return []\n\n    const routeWidth = Math.max(\n      ...proxies.map((p) => {\n        return p.route.length\n      }),\n    )\n\n    return proxies.map((p, i) => {\n      const elbow = i === proxies.length - 1 ? '\u2514' : '\u251C'\n      const dot = p.source === 'local' ? this.color(ANSI.green, '\u25CF') : this.color(ANSI.dim, '\u25CB')\n      const where = p.target ? `  ${this.color(ANSI.blue, p.target)}` : ''\n\n      return `    ${this.color(ANSI.dim, elbow)} ${this.color(ANSI.teal, p.route.padEnd(routeWidth))}  ${dot} ${this.color(\n        ANSI.dim,\n        p.source,\n      )}${where}`\n    })\n  }\n\n  /**\n   * Shared header layout: blank, title line, blank, one endpoint row per backend, a reference row per\n   * UI app, then the watch/log legend. `withHealthDot` is the ONLY difference between the static Ink\n   * header (false \u2014 health is live, the footer owns it) and the ready/boot frame (true).\n   */\n  private formatLines(summary: ReadySummary, { withHealthDot }: { withHealthDot: boolean }): string[] {\n    const tagWidth = this.tagWidth(summary)\n    const lines: string[] = ['', this.titleLine(summary), '']\n\n    for (const e of summary.endpoints) {\n      lines.push(this.endpointLine(e, tagWidth, withHealthDot))\n      // A frontend's proxy routes hang directly off its own row, so \"where does /api go\" reads as a\n      // property of the app rather than a footnote somewhere below it.\n      if (e.proxies) lines.push(...this.proxyLines(e.proxies))\n    }\n    // Failures sit with the live rows, not in the scrollback above: the log line announcing the crash\n    // is metres up the terminal by now, and the header is the only thing the user actually reads.\n    for (const f of summary.failed ?? []) {\n      lines.push(this.failedLine(f, tagWidth))\n    }\n    for (const u of summary.uiRefs) {\n      lines.push(this.uiRefLine(u, tagWidth, u.errors))\n      if (u.proxies) lines.push(...this.proxyLines(u.proxies))\n    }\n    // Below the app rows, because it is a consequence of one of them \u2014 a `\u25CF failed` backend is WHY a\n    // route went to cloud, and the two read as cause and effect only in that order.\n    for (const d of summary.degraded ?? []) {\n      lines.push(this.degradedLine(d, tagWidth))\n    }\n\n    lines.push('', ...this.legendLines(summary))\n\n    return lines\n  }\n\n  /**\n   * Static reference lines for the persistent Ink header, committed ONCE via `<Static>`: title,\n   * endpoint URLs WITHOUT the health dot (health is live \u2192 the footer owns it), UI reference rows,\n   * watch line, clickable log path, separator. Pure; colors follow `isTTY`.\n   */\n  formatHeaderLines(summary: ReadySummary): string[] {\n    return this.formatLines(summary, { withHealthDot: false })\n  }\n\n  /**\n   * The live status rows \u2014 THE PANEL. Re-rendered in place on every tick; never committed to `<Static>`.\n   *\n   * This is the only part of the screen that can change after `ready`, and that makes it the only place\n   * live fields can live. The header is committed once through `<Static>`, so anything painted there is\n   * a photograph: an uptime or an error count rendered into the header would be frozen at its boot value\n   * for the whole session, looking live and being a lie. (It was: the live fields went into the shared\n   * endpoint line first, the header picked them up, the footer kept printing a bare health dot, and a\n   * real run showed a panel with no uptime, no req/min and no error count at all. No unit test saw it \u2014\n   * only the rendered terminal did.)\n   *\n   * Every row is rendered, including an endpoint that was never probed and a UI with no backend at all:\n   * with no log tail on screen this panel is the entire signal, and a row that is absent cannot report\n   * that its service is broken.\n   */\n  formatFooterLines(summary: ReadySummary): string[] {\n    const tagWidth = this.tagWidth(summary)\n    const rows = summary.endpoints.map((e) => {\n      const dot = this.healthDot(e.health)\n      const status = this.statusFields(e)\n      const cells = [dot, status].filter(Boolean).join('  ')\n\n      return `  ${this.tagCell(e.tag, tagWidth, e.errors)}  ${cells}`\n    })\n\n    // A UI whose port infra-kit could not claim has no endpoint row \u2014 but its errors still have to land\n    // somewhere the user can see, and it is precisely the app most likely to be misconfigured.\n    for (const ref of summary.uiRefs) {\n      if (ref.errors == null) continue\n      rows.push(`  ${this.tagCell(ref.tag, tagWidth, ref.errors)}  ${this.errorCount(ref.errors)}`)\n    }\n\n    // Degraded routes live in the PANEL, not only in the header. The header is committed once through\n    // `<Static>` \u2014 a photograph \u2014 so a degraded row painted only there would still be on screen after\n    // `--watch` brought the backend back and the route went local again: a permanent warning about a\n    // condition that has been fixed, which trains the user to ignore it. The caller re-derives this list\n    // from the running set on every tick, so the row survives exactly as long as the problem does.\n    for (const d of summary.degraded ?? []) {\n      rows.push(this.degradedLine(d, tagWidth))\n    }\n\n    // The heartbeat. Without it a UI-only session \u2014 whose rows carry no backend uptime and no req/min \u2014\n    // would render an identical frame every tick, and Ink does not repaint an identical frame. The panel\n    // would be genuinely, verifiably alive and look exactly like a hung process.\n    if (summary.sessionUptimeMs != null) {\n      const beat = `up ${formatUptime(summary.sessionUptimeMs)}`\n\n      rows.push(`  ${this.color(ANSI.dim, beat)}`)\n    }\n\n    return rows\n  }\n\n  /**\n   * Build the ready-header lines with NO side effects (no terminal write, no tee), so both\n   * {@link ready} (which writes + tees them) and the Ink boot UI (which commits them via `<Static>`\n   * and tee-only's them) share one layout. Colors follow `isTTY` exactly like every other line.\n   */\n  formatReadyLines(summary: ReadySummary): string[] {\n    return this.formatLines(summary, { withHealthDot: true })\n  }\n}\n"],
-  "mappings": "AAeA,OAAOA,MAAa,eA0MpB,IAAMC,EAAiB,CAAC,SAAK,SAAK,SAAK,SAAK,SAAK,SAAK,SAAK,SAAK,SAAK,QAAG,EAClEC,EAAsB,GAEtBC,EAAO,CACX,MAAO,UACP,IAAK,UACL,KAAM,UACN,KAAM,WACN,MAAO,WACP,KAAM,WACN,IAAK,UACP,EAGMC,EAAa,YAObC,EAAe,qCAORC,EAAaC,GACjBA,EAAE,QAAQF,EAAc,EAAE,EAI7BG,EAAQC,GACL,OAAOA,CAAC,EAAE,SAAS,EAAG,GAAG,EAIrBC,EAAiBC,GACrB,IAAIA,EAAK,KAAM,QAAQ,CAAC,CAAC,IAUrBC,EAAgBD,GAAuB,CAClD,IAAME,EAAQ,KAAK,IAAI,EAAG,KAAK,MAAMF,EAAK,GAAI,CAAC,EACzCG,EAAQ,KAAK,MAAMD,EAAQ,IAAI,EAC/BE,EAAU,KAAK,MAAOF,EAAQ,KAAQ,EAAE,EACxCG,EAAUH,EAAQ,GAExB,OAAIC,EAAQ,EAAU,GAAGA,CAAK,IAAIN,EAAKO,CAAO,CAAC,IAC3CA,EAAU,EAAU,GAAGA,CAAO,IAAIP,EAAKQ,CAAO,CAAC,IAE5C,GAAGA,CAAO,GACnB,EAYaC,EAAsBC,GAC1B,WAAWA,EAAM,KAAK,GAAGA,EAAM,SAAS,GAGpCC,EAAN,KAAmC,CACvB,KACT,aAAsD,KACtD,aAAe,GACf,aAAe,EAEvB,YAAYC,EAAiC,CAAC,EAAG,CAC/C,KAAK,KAAO,CACV,MACEA,EAAK,QACHC,GAAuB,CACvBrB,EAAQ,OAAO,MAAMqB,CAAI,CAC3B,GACF,UAAWD,EAAK,YAAc,IAAY,CAAC,GAC3C,MAAOA,EAAK,OAAS,EAAQpB,EAAQ,OAAO,MAC5C,IACEoB,EAAK,MACJ,IACQ,IAAI,MAEf,QAASA,EAAK,SAAW,EAC3B,CACF,CAGQ,MAAME,EAAcf,EAAmB,CAC7C,OAAO,KAAK,KAAK,MAAQ,GAAGe,CAAI,GAAGf,CAAC,GAAGJ,EAAK,KAAK,GAAKI,CACxD,CAOQ,UAAUgB,EAAcC,EAAuB,CACrD,MAAI,CAAC,KAAK,KAAK,OAASD,IAAS,GAAWC,EAQrC,kBAJK,UAAUD,CAAI,EAAE,QAAQ,QAAUE,GACrC,IAAIA,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,EACtD,CAE2B,SAASD,CAAK,gBAC5C,CAOA,QAAQE,EAAiBC,EAAuB,CAC9C,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,IAAI,EAAE,YAAY,CAAC,MAAMA,EAAM,YAAY,CAAC,KAAKrB,EAAUoB,CAAO,CAAC;AAAA,CAAI,CAC3G,CAGQ,IAAIA,EAAiBC,EAAuB,CAClD,KAAK,QAAQD,EAASC,CAAK,CAC7B,CAMA,SAAgB,CAEhB,CAMQ,KAAKC,EAAoB,CAC/B,GAAI,KAAK,cAAgB,MAAQ,KAAK,KAAK,MAAO,CAChD,KAAK,KAAK,MAAM,GAAGxB,CAAU,GAAGwB,CAAI;AAAA,CAAI,EACxC,KAAK,aAAa,EAElB,MACF,CAEA,KAAK,KAAK,MAAM,GAAGA,CAAI;AAAA,CAAI,CAC7B,CAGA,IAAIF,EAAiBC,EAAkB,OAAQE,EAAsB,CAAC,EAAS,EACzEF,IAAU,SAAW,KAAK,KAAK,UACjC,KAAK,KAAKD,CAAO,EAEfG,EAAQ,MAAQ,IAClB,KAAK,IAAIH,EAASC,CAAK,CAE3B,CAGA,QAAQD,EAAuB,CACzB,KAAK,KAAK,SACZ,KAAK,KAAKA,CAAO,EAEnB,KAAK,IAAIA,EAAS,MAAM,CAC1B,CAGS,MAAQ,CAACA,EAAiBC,EAAkB,SAAiB,CACpE,KAAK,IAAID,EAASC,CAAK,CACzB,EAKQ,cAAqB,CAC3B,IAAMG,EAAQ7B,EAAe,KAAK,aAAeA,EAAe,MAAM,EAEtE,KAAK,KAAK,MAAM,GAAGG,CAAU,GAAG,KAAK,MAAMD,EAAK,KAAM2B,CAAK,CAAC,IAAI,KAAK,MAAM3B,EAAK,IAAK,KAAK,YAAY,CAAC,EAAE,CAC3G,CAMA,SAAS4B,EAAqB,CAI5B,GAHA,KAAK,IAAIA,EAAO,MAAM,EACtB,KAAK,aAAeA,EAEhB,CAAC,KAAK,KAAK,MAAO,CACpB,KAAK,KAAK,MAAM,GAAGA,CAAK;AAAA,CAAI,EAE5B,MACF,CAEI,KAAK,cAAgB,OACvB,KAAK,aAAe,YAAY,IAAM,CACpC,KAAK,cAAgB,EACrB,KAAK,aAAa,CACpB,EAAG7B,CAAmB,EAEtB,KAAK,aAAa,QAAQ,GAE5B,KAAK,aAAa,CACpB,CAGA,aAAoB,CACd,KAAK,cAAgB,OACvB,cAAc,KAAK,YAAY,EAC/B,KAAK,aAAe,MAElB,KAAK,KAAK,OACZ,KAAK,KAAK,MAAME,CAAU,CAE9B,CAeQ,WAAW4B,EAAwB,CACzC,IAAMX,EAAO,UAAKW,CAAM,GAExB,OAAOA,EAAS,EAAI,KAAK,MAAM,GAAG7B,EAAK,IAAI,GAAGA,EAAK,GAAG,GAAIkB,CAAI,EAAI,KAAK,MAAMlB,EAAK,IAAKkB,CAAI,CAC7F,CASQ,QAAQY,EAAaC,EAAkBF,EAAoC,CACjF,OAAO,KAAK,OAAOA,GAAU,GAAK,EAAI7B,EAAK,IAAMA,EAAK,KAAM8B,EAAI,OAAOC,CAAQ,CAAC,CAClF,CAGQ,UAAUC,EAA6B,CAC7C,OAAQA,EAAQ,CACd,IAAK,KACH,OAAO,KAAK,MAAMhC,EAAK,MAAO,WAAM,EACtC,IAAK,OACH,OAAO,KAAK,MAAMA,EAAK,IAAK,aAAQ,EACtC,IAAK,WACH,OAAO,KAAK,MAAMA,EAAK,IAAK,iBAAY,EAI1C,IAAK,aACH,OAAO,KAAK,MAAMA,EAAK,IAAK,UAAK,EACnC,QACE,MAAO,EACX,CACF,CAOA,MAAMiC,EAA6B,CACjC,KAAK,YAAY,EAEjB,IAAMC,EAAQ,KAAK,iBAAiBD,CAAO,EAE3C,QAAWR,KAAQS,EACjB,KAAK,KAAKT,CAAI,EACd,KAAK,IAAIA,EAAM,MAAM,CAEzB,CAGQ,SAASQ,EAA+B,CAkB9C,MAjBa,CACX,GAAGA,EAAQ,UAAU,IAAKE,GACjBA,EAAE,GACV,EACD,GAAGF,EAAQ,OAAO,IAAKG,GACdA,EAAE,GACV,EACD,IAAIH,EAAQ,QAAU,CAAC,GAAG,IAAKI,GACtBA,EAAE,GACV,EAGD,IAAIJ,EAAQ,UAAY,CAAC,GAAG,IAAKK,GACxB,GAAGA,EAAE,GAAG,IAAIA,EAAE,KAAK,EAC3B,CACH,EAEY,OAAO,CAACC,EAAGC,IACd,KAAK,IAAID,EAAGC,EAAE,MAAM,EAC1B,CAAC,CACN,CAUQ,UAAUP,EAA+B,CAC/C,IAAMQ,EAAO,CAACR,EAAQ,OAAQA,EAAQ,MAAQ,QAAU,KAAMA,EAAQ,OAAO,EAC1E,OAAQ7B,GACA,EAAQA,CAChB,EACA,KAAK,QAAK,EAEPsC,EAAcT,EAAQ,QAAQ,QAAU,EACxCU,EAAUpC,EAAc0B,EAAQ,SAAS,EACzCW,EACJF,EAAc,EACV,KAAK,MAAM1C,EAAK,IAAK,GAAG0C,CAAW,2BAAwBC,CAAO,EAAE,EACpE,KAAK,MAAM3C,EAAK,MAAO,YAAY2C,CAAO,EAAE,EAElD,MAAO,KAAK,KAAK,MAAM3C,EAAK,KAAM,eAAe,CAAC,KAAK,KAAK,MAAMA,EAAK,IAAKyC,CAAI,CAAC,MAAMG,CAAM,EAC/F,CAGQ,YAAYX,EAAiC,CACnD,IAAMY,EAAYZ,EAAQ,OAASA,EAAQ,aAAe,YAAYA,EAAQ,YAAY,GAAK,YACzFa,EAAU,KAAK,UAAUb,EAAQ,QAASA,EAAQ,OAAO,EACzDc,EAAY,GAAGF,CAAS,yBAAoBC,CAAO,GACnDE,EAAO,SAAI,OAAO,EAAE,EAE1B,MAAO,CAAC,KAAK,KAAK,MAAMhD,EAAK,IAAK+C,CAAS,CAAC,GAAI,KAAK,KAAK,MAAM/C,EAAK,IAAKgD,CAAI,CAAC,EAAE,CACnF,CAUQ,UAAUC,EAAYlB,EAAkBF,EAAoC,CAClF,IAAMqB,EAAUrB,GAAU,KAAO,GAAK,KAAK,KAAK,WAAWA,CAAM,CAAC,GAElE,MAAO,KAAK,KAAK,MAAM7B,EAAK,KAAMiD,EAAI,IAAI,OAAOlB,CAAQ,CAAC,CAAC,KAAK,KAAK,MACnE/B,EAAK,IACL,2CACF,CAAC,GAAGkD,CAAO,EACb,CAQQ,aAAaC,EAAqD,CACxE,IAAMC,EAAkB,CAAC,EAEzB,OAAID,EAAS,UAAY,MAAMC,EAAM,KAAK,KAAK,MAAMpD,EAAK,IAAK,MAAMS,EAAa0C,EAAS,QAAQ,CAAC,EAAE,CAAC,EACnGA,EAAS,KAAO,MAAQA,EAAS,IAAM,GAAGC,EAAM,KAAK,KAAK,MAAMpD,EAAK,IAAK,GAAGmD,EAAS,GAAG,MAAM,CAAC,EAChGA,EAAS,UAAY,MAAQA,EAAS,SAAW,GAAGC,EAAM,KAAK,KAAK,MAAMpD,EAAK,IAAK,SAAImD,EAAS,QAAQ,EAAE,CAAC,EAE5GA,EAAS,QAAU,MACrBC,EAAM,KAAK,KAAK,WAAWD,EAAS,MAAM,CAAC,EAGtCC,EAAM,KAAK,KAAK,CACzB,CAGQ,aAAaD,EAA6CpB,EAAkBsB,EAAgC,CAClH,IAAMC,EAAMD,EAAgB,KAAK,UAAUF,EAAS,MAAM,EAAI,GACxDP,EAAS,KAAK,aAAaO,CAAQ,EACnCI,EAAS,CAACD,EAAKV,CAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,EAEtD,MAAO,KAAK,KAAK,MAAM5C,EAAK,KAAMmD,EAAS,IAAI,OAAOpB,CAAQ,CAAC,CAAC,KAAK,KAAK,MAAM/B,EAAK,KAAMmD,EAAS,GAAG,CAAC,GACtGI,EAAS,KAAKA,CAAM,GAAK,EAC3B,EACF,CAGQ,WAAWC,EAAmBzB,EAA0B,CAC9D,MAAO,KAAK,KAAK,MAAM/B,EAAK,KAAMwD,EAAO,IAAI,OAAOzB,CAAQ,CAAC,CAAC,KAAK,KAAK,MACtE/B,EAAK,IACL,eACF,CAAC,KAAK,KAAK,MAAMA,EAAK,IAAKwD,EAAO,MAAM,CAAC,EAC3C,CASQ,aAAaC,EAAkB1B,EAA0B,CAC/D,IAAMV,EAAQ,GAAGoC,EAAI,GAAG,IAAIA,EAAI,KAAK,GAG/BC,EAAQD,EAAI,WAAa,QAAU,oCAAiC,yCACpEE,EAASF,EAAI,OAAS,KAAK,KAAK,MAAMzD,EAAK,IAAKyD,EAAI,MAAM,CAAC,GAAK,GAEtE,MAAO,KAAK,KAAK,MAAMzD,EAAK,IAAK,QAAG,CAAC,IAAI,KAAK,MAAMA,EAAK,KAAMqB,EAAM,OAAOU,CAAQ,CAAC,CAAC,KAAK,KAAK,MAC9F/B,EAAK,IACL0D,CACF,CAAC,GAAGC,CAAM,EACZ,CASQ,WAAWC,EAAoC,CACrD,GAAIA,EAAQ,SAAW,EAAG,MAAO,CAAC,EAElC,IAAMC,EAAa,KAAK,IACtB,GAAGD,EAAQ,IAAKE,GACPA,EAAE,MAAM,MAChB,CACH,EAEA,OAAOF,EAAQ,IAAI,CAACE,EAAG,IAAM,CAC3B,IAAMC,EAAQ,IAAMH,EAAQ,OAAS,EAAI,SAAM,SACzCN,EAAMQ,EAAE,SAAW,QAAU,KAAK,MAAM9D,EAAK,MAAO,QAAG,EAAI,KAAK,MAAMA,EAAK,IAAK,QAAG,EACnFgE,EAAQF,EAAE,OAAS,KAAK,KAAK,MAAM9D,EAAK,KAAM8D,EAAE,MAAM,CAAC,GAAK,GAElE,MAAO,OAAO,KAAK,MAAM9D,EAAK,IAAK+D,CAAK,CAAC,IAAI,KAAK,MAAM/D,EAAK,KAAM8D,EAAE,MAAM,OAAOD,CAAU,CAAC,CAAC,KAAKP,CAAG,IAAI,KAAK,MAC7GtD,EAAK,IACL8D,EAAE,MACJ,CAAC,GAAGE,CAAK,EACX,CAAC,CACH,CAOQ,YAAY/B,EAAuB,CAAE,cAAAoB,CAAc,EAAyC,CAClG,IAAMtB,EAAW,KAAK,SAASE,CAAO,EAChCC,EAAkB,CAAC,GAAI,KAAK,UAAUD,CAAO,EAAG,EAAE,EAExD,QAAWE,KAAKF,EAAQ,UACtBC,EAAM,KAAK,KAAK,aAAaC,EAAGJ,EAAUsB,CAAa,CAAC,EAGpDlB,EAAE,SAASD,EAAM,KAAK,GAAG,KAAK,WAAWC,EAAE,OAAO,CAAC,EAIzD,QAAWE,KAAKJ,EAAQ,QAAU,CAAC,EACjCC,EAAM,KAAK,KAAK,WAAWG,EAAGN,CAAQ,CAAC,EAEzC,QAAWK,KAAKH,EAAQ,OACtBC,EAAM,KAAK,KAAK,UAAUE,EAAGL,EAAUK,EAAE,MAAM,CAAC,EAC5CA,EAAE,SAASF,EAAM,KAAK,GAAG,KAAK,WAAWE,EAAE,OAAO,CAAC,EAIzD,QAAWE,KAAKL,EAAQ,UAAY,CAAC,EACnCC,EAAM,KAAK,KAAK,aAAaI,EAAGP,CAAQ,CAAC,EAG3C,OAAAG,EAAM,KAAK,GAAI,GAAG,KAAK,YAAYD,CAAO,CAAC,EAEpCC,CACT,CAOA,kBAAkBD,EAAiC,CACjD,OAAO,KAAK,YAAYA,EAAS,CAAE,cAAe,EAAM,CAAC,CAC3D,CAiBA,kBAAkBA,EAAiC,CACjD,IAAMF,EAAW,KAAK,SAASE,CAAO,EAChCgC,EAAOhC,EAAQ,UAAU,IAAKE,GAAM,CACxC,IAAMmB,EAAM,KAAK,UAAUnB,EAAE,MAAM,EAC7BS,EAAS,KAAK,aAAaT,CAAC,EAC5B+B,EAAQ,CAACZ,EAAKV,CAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,EAErD,MAAO,KAAK,KAAK,QAAQT,EAAE,IAAKJ,EAAUI,EAAE,MAAM,CAAC,KAAK+B,CAAK,EAC/D,CAAC,EAID,QAAWjB,KAAOhB,EAAQ,OACpBgB,EAAI,QAAU,MAClBgB,EAAK,KAAK,KAAK,KAAK,QAAQhB,EAAI,IAAKlB,EAAUkB,EAAI,MAAM,CAAC,KAAK,KAAK,WAAWA,EAAI,MAAM,CAAC,EAAE,EAQ9F,QAAWX,KAAKL,EAAQ,UAAY,CAAC,EACnCgC,EAAK,KAAK,KAAK,aAAa3B,EAAGP,CAAQ,CAAC,EAM1C,GAAIE,EAAQ,iBAAmB,KAAM,CACnC,IAAMkC,EAAO,MAAM1D,EAAawB,EAAQ,eAAe,CAAC,GAExDgC,EAAK,KAAK,KAAK,KAAK,MAAMjE,EAAK,IAAKmE,CAAI,CAAC,EAAE,CAC7C,CAEA,OAAOF,CACT,CAOA,iBAAiBhC,EAAiC,CAChD,OAAO,KAAK,YAAYA,EAAS,CAAE,cAAe,EAAK,CAAC,CAC1D,CACF",
+  "sourcesContent": ["/**\n * Terminal renderer for `infra-kit dev` \u2014 a calm-print layer (never a full-screen TUI).\n *\n * The boot collapses into a single transient spinner; the final screen is a STATUS PANEL, one row per\n * server, carrying health, uptime, requests/min, restarts and an error count. There is no log tail:\n * every line \u2014 framework output, request logs, a handler's own `console.log` \u2014 is written to that\n * service's file under `<cacheRoot>/<session>/dev/<pid>/` and never printed. What still appears above\n * the panel is only what the RUNNER says: a restart, an unhealthy app, a dead engine.\n *\n * The panel's live fields are the reason it is a status surface and not a screenshot. With nothing\n * scrolling beside it, a panel whose numbers never move cannot be told apart from a hung process.\n *\n * All I/O is injected (`write` / `appendLog` / `isTTY` / `now`) so every frame is snapshot-testable and\n * the spinner is deterministically disabled in tests (`isTTY: false`).\n */\nimport process from 'node:process'\n\nimport type { DevUi } from './dev-ui.js'\n\nexport type LogLevel = 'info' | 'warn' | 'error' | 'debug'\n\n/**\n * Per-call options for {@link DevRenderer.log}.\n *\n * `tee: false` exists for exactly one caller: `DevServerRunner.reportFault`, which files the fault into the\n * sink ITSELF (at `error` level \u2014 that is what turns the panel row red) and then prints it. Without this\n * opt-out the print tees a SECOND copy into the same `runner.log`, so every fault is filed twice \u2014 a\n * literal 2\u00D7 amplifier sitting at the centre of the loop that wrote 455 GB.\n */\nexport interface LogOptions {\n  /** Also append the line to the log file. Default `true`; `false` prints without filing. */\n  tee?: boolean\n}\n\n/**\n * A row's liveness, as the runner's probe state machine resolved it.\n *\n * Five arms, not a boolean, because a probe has three outcomes and a row has a history. The two that\n * are neither `ok` nor `down` are the honest ones: a UI that has never answered yet is `starting`\n * (vite is spawned after the ready frame, so red would be a lie for the first seconds), and a port that\n * answers something OTHER than vite's ping is `unverified` \u2014 a squatter, a shadowing proxy, or a future\n * vite that dropped the endpoint are all consistent with that, and only one of them is broken. Red must\n * stay a PROOF of failure, so `unverified` renders a question mark and never a red dot.\n */\nexport type HealthState = 'ok' | 'down' | 'starting' | 'unverified' | 'unknown'\n\n/** Injected I/O seams. Defaults wire to the real stdout + a caller-provided file appender. */\nexport interface DevRendererDeps {\n  /** Terminal sink (default: `process.stdout.write`). */\n  write: (text: string) => void\n  /** File tee \u2014 always receives full detail (default: no-op; the runner passes its log appender). */\n  appendLog: (text: string) => void\n  /** Whether the terminal is a TTY. Gates the spinner + ANSI color; false in CI / when piped. */\n  isTTY: boolean\n  /** Clock seam (default: `() => new Date()`), so timestamps + `ready in Xs` are testable. */\n  now: () => Date\n  /** When true, boot narration reaches the terminal; otherwise it is file-only. */\n  verbose: boolean\n}\n\n/**\n * One resolved proxy route on a frontend, painted as an indented line under that app's row: which route,\n * where it lands, and whether it is the local backend or the shared cloud one. This is the \"all proxies \u2014\n * which one and where\" surface: unlike a {@link DegradedRow} it reports the happy path too, so a frontend\n * that proxies `/api` local and `/media` cloud shows both, and nobody has to guess where a route points.\n */\nexport interface ProxyRouteRow {\n  /** Route path (e.g. `/api`). */\n  route: string\n  /** Where the route resolves this run \u2014 the local backend or the shared cloud origin. */\n  source: 'local' | 'cloud'\n  /**\n   * The origin the route lands on. Omitted when it is not knowable (a `local` route whose backend is not\n   * up \u2014 a dead alias the degraded row already owns \u2014 or a `cloud` route with no `<env>` sourced).\n   */\n  target?: string\n}\n\n/**\n * One server's row on the status panel.\n *\n * The live fields below are what make the panel a STATUS surface rather than a screenshot. The terminal\n * no longer carries a log tail, so a static row would leave \"quiet\" indistinguishable from \"hung\" \u2014 the\n * moving numbers are the liveness tell, and they are not decoration.\n */\nexport interface EndpointRow {\n  /** Stream tag, e.g. `client/api`. */\n  tag: string\n  /** The app's `.localhost` alias URL \u2014 the only form, since an app that cannot be aliased never starts. */\n  url: string\n  /** Liveness, as {@link HealthState} defines it; `unknown` renders no dot at all (nothing to probe). */\n  health: HealthState\n  /** Milliseconds since this server last (re)started. Omitted on the boot frame. */\n  uptimeMs?: number\n  /** Watch-triggered restarts so far this session. */\n  restarts?: number\n  /** Requests served in the last 60s. */\n  rpm?: number\n  /**\n   * Errors this service has declared since boot \u2014 a 5xx, a `console.error`, a framework failure line.\n   * This is the ONLY error signal the user gets now that nothing prints, so a row that cannot count is\n   * a row that lies. A COUNT, never a classification: it is incremented from the level the emitter\n   * declared, never from anything read out of the line's text.\n   */\n  errors?: number\n  /**\n   * Resolved proxy routes for a frontend row (a `<app>/ui` endpoint), painted as an indented list under\n   * it. Absent on backend rows \u2014 a `<app>/api` endpoint proxies nothing \u2014 and on a frontend with no\n   * `dev.proxy` block.\n   */\n  proxies?: ProxyRouteRow[]\n}\n\n/**\n * A UI app whose URL the runner does not own, so it streams its own below \u2014 referenced, never given a\n * (fabricated) endpoint row. The fallback case only: a UI whose port the runner pre-assigned is an\n * {@link EndpointRow}, proxy or no proxy.\n */\nexport interface UiRef {\n  /** Stream tag, e.g. `client/ui`. */\n  tag: string\n  /**\n   * Errors this UI has declared since boot. Present for the same reason an {@link EndpointRow} has one:\n   * with nothing printing, a row that cannot count is a row that lies \u2014 and this row belongs to the app\n   * whose vite config never wired `infraKitDev()`, i.e. the one most likely to be misconfigured.\n   */\n  errors?: number\n  /** Resolved proxy routes for this frontend, painted as an indented list under its reference line. */\n  proxies?: ProxyRouteRow[]\n}\n\n/**\n * An app that was asked for but never came up. It has no URL and no health \u2014 but it MUST still get a\n * row: the header is a report of what the user asked for, and an app that silently vanishes from it\n * reads as \"not requested\" rather than \"broken\".\n */\nexport interface FailedRow {\n  /** Stream tag, e.g. `client/api`. */\n  tag: string\n  /** One-line reason, e.g. `config is missing field: 'connectionURL'`. */\n  reason: string\n}\n\n/**\n * A route that wanted a local backend and is falling back to cloud because that backend failed to start.\n *\n * It gets a row of its own \u2014 not a footnote on the failed backend's row \u2014 because the two facts land on\n * different people. `client/api \u25CF failed` says a server is down, which reads as \"that half is broken\".\n * It does NOT say the frontend beside it came up healthy and is now sending every `/api` request to the\n * shared cloud backend. That second fact is the one that gets you writing to the cloud dev database\n * while you believe you are on localhost, and it is invisible everywhere else on the screen: the vite\n * proxy resolved cleanly, so nothing else has anything to complain about.\n *\n * Only rendered under `--watch` \u2014 without it the run is refused outright (see `local-pairing.ts`).\n */\nexport interface DegradedRow {\n  /** Route path (e.g. `/api`). */\n  route: string\n  /** Stream tag of the frontend serving it, e.g. `client/ui`. */\n  tag: string\n  /**\n   * Where the route ACTUALLY resolves now. Not always `cloud`: the helper falls back to\n   * `route.default ?? route.from[0]`, so a single-source `from: ['local']` route with no `default` falls\n   * back to `local` \u2014 at an alias nothing registered, i.e. a 502 on every request. The row must name the\n   * real destination, or it is doing the same lying-by-omission it exists to prevent.\n   */\n  fallback: 'local' | 'cloud'\n  /** The cloud origin it now resolves to. Only ever set when `fallback` is `cloud` and it is knowable. */\n  target?: string\n}\n\n/** Everything {@link DevRenderer.ready} needs to paint the final header in one shot. */\nexport interface ReadySummary {\n  /** Resolved preset / target label (e.g. `client`, `*`). */\n  target: string\n  watch: boolean\n  /** Slugified release for the header meta; omitted outside a git repo. */\n  release?: string\n  /** Backend readiness time in ms (UI is fire-and-forget, so this is BE-only \u2014 labeled honestly). */\n  elapsedMs: number\n  /** Real backend endpoint rows (owned ports + pre-probed health). */\n  endpoints: EndpointRow[]\n  /** UI apps that print their own URL below. */\n  uiRefs: UiRef[]\n  /**\n   * Apps that failed to start. Optional only so the (many) existing summaries need not restate an\n   * empty list; a non-empty one downgrades the title from a green `ready` to an honest `N failed`.\n   */\n  failed?: FailedRow[]\n  /**\n   * Routes silently demoted from local to cloud by a backend that failed to start. Recomputed on every\n   * repaint, so a route CLEARS from the panel the moment `--watch` gets its backend up (see\n   * {@link DegradedRow}).\n   */\n  degraded?: DegradedRow[]\n  /** Human watch summary, e.g. `1 app \u00B7 5 packages`; omitted when not watching. */\n  watchSummary?: string\n  /**\n   * Compact, human-readable log path shown as the `logs \u2192 \u2026` label. A DIRECTORY, not a file\n   * (e.g. `~/.cache/infra-kit/<session>/dev/<pid>`): there is one log per service, so a single path\n   * would have to pick a favourite.\n   */\n  logPath: string\n  /** Absolute log path backing the clickable OSC-8 hyperlink (wrapped as `file://<logHref>`). */\n  logHref: string\n  /**\n   * Milliseconds since the session became ready \u2014 the panel's HEARTBEAT.\n   *\n   * Every other live field belongs to a backend: uptime, req/min, restarts. A UI-only session has no\n   * backend, so its rows have nothing that moves \u2014 and Ink does not repaint an identical frame, so the\n   * screen would sit perfectly still while the session ran. With no log tail left to prove otherwise,\n   * a motionless panel is indistinguishable from a hung process. This is the one field that ticks for\n   * EVERY session shape. Omitted on the boot frame, where nothing has elapsed yet.\n   */\n  sessionUptimeMs?: number\n}\n\nconst SPINNER_FRAMES = ['\u280B', '\u2819', '\u2839', '\u2838', '\u283C', '\u2834', '\u2826', '\u2827', '\u2807', '\u280F']\nconst SPINNER_INTERVAL_MS = 80\n\nconst ANSI = {\n  reset: '\\x1B[0m',\n  dim: '\\x1B[2m',\n  bold: '\\x1B[1m',\n  teal: '\\x1B[36m',\n  green: '\\x1B[32m',\n  blue: '\\x1B[34m',\n  red: '\\x1B[31m',\n} as const\n\n/** Erase the current line and return the cursor to column 0 (used to clear the spinner). */\nconst CLEAR_LINE = '\\r\\x1B[2K'\n\n/**\n * SGR color codes (`ESC [ \u2026 m`) and OSC-8 hyperlink wrappers (`ESC ] 8 ; ; \u2026 ESC \\`), non-greedy.\n * Matching the ESC control character is the whole point here \u2014 this pattern exists to remove it.\n */\n// eslint-disable-next-line sonarjs/no-control-regex, no-control-regex\nconst ANSI_PATTERN = /\\x1B\\[[0-9;]*m|\\x1B\\]8;;.*?\\x1B\\\\/g\n\n/**\n * Strip SGR colors + OSC-8 hyperlink escapes, keeping the hyperlink's visible label. Applied at the\n * file-tee seam so `logs.txt` stays greppable plain text even though the terminal frames it renders\n * from are colored + hyperlinked (both renderers format once, for a TTY, and tee the same string).\n */\nexport const stripAnsi = (s: string): string => {\n  return s.replace(ANSI_PATTERN, '')\n}\n\n/** Zero-pad to 2 digits for `HH:MM:SS`. */\nconst pad2 = (n: number): string => {\n  return String(n).padStart(2, '0')\n}\n\n/** `2.4s` for the `ready in \u2026` header. */\nexport const formatElapsed = (ms: number): string => {\n  return `${(ms / 1000).toFixed(1)}s`\n}\n\n/**\n * `47s` / `4m12s` / `2h03m` \u2014 the panel's liveness tell.\n *\n * With no log tail on screen, a panel whose numbers never move is indistinguishable from a hung\n * process. This is the field that proves the session is alive even when nothing is happening, so it is\n * always rendered and always advancing.\n */\nexport const formatUptime = (ms: number): string => {\n  const total = Math.max(0, Math.floor(ms / 1000))\n  const hours = Math.floor(total / 3600)\n  const minutes = Math.floor((total % 3600) / 60)\n  const seconds = total % 60\n\n  if (hours > 0) return `${hours}h${pad2(minutes)}m`\n  if (minutes > 0) return `${minutes}m${pad2(seconds)}s`\n\n  return `${seconds}s`\n}\n\n/**\n * Resolve the endpoint URL for an app: `https://<alias><prefix>`, where `alias` is the portless hostname\n * the runner registered (e.g. `feat-x.backend-api.hulyo-monorepo.localhost`). The runner refuses to start an app it could\n * not alias, so there is no port-form to fall back to.\n *\n * There is no port and no scheme choice, by construction. The proxy serves TLS on 443 \u2014 the implicit HTTPS\n * port \u2014 so the URL is byte-identical to the `dev.proxy` local template that `infra-kit/vite` proxies to,\n * and what the table prints cannot drift from what the frontend calls. Any port suffix here would mean the\n * proxy is not on 443, which `ensureProxy` has already refused to start.\n */\nexport const resolveEndpointUrl = (input: { prefixUrl: string; alias: string }): string => {\n  return `https://${input.alias}${input.prefixUrl}`\n}\n\nexport class DevRenderer implements DevUi {\n  private readonly deps: DevRendererDeps\n  private spinnerTimer: ReturnType<typeof setInterval> | null = null\n  private spinnerPhase = ''\n  private spinnerFrame = 0\n\n  constructor(deps: Partial<DevRendererDeps> = {}) {\n    this.deps = {\n      write:\n        deps.write ??\n        ((text: string): void => {\n          process.stdout.write(text)\n        }),\n      appendLog: deps.appendLog ?? ((): void => {}),\n      isTTY: deps.isTTY ?? Boolean(process.stdout.isTTY),\n      now:\n        deps.now ??\n        ((): Date => {\n          return new Date()\n        }),\n      verbose: deps.verbose ?? false,\n    }\n  }\n\n  /** Wrap `s` in an ANSI color on a TTY; return it untouched when piped (deterministic snapshots). */\n  private color(code: string, s: string): string {\n    return this.deps.isTTY ? `${code}${s}${ANSI.reset}` : s\n  }\n\n  /**\n   * Wrap `label` in an OSC-8 terminal hyperlink to `href` (a filesystem path \u2192 `file://` URI) so the\n   * log path is cmd/ctrl-clickable. Returns the bare `label` when piped (deterministic snapshots) or\n   * when `href` is empty \u2014 terminals without OSC-8 support silently ignore the escapes anyway.\n   */\n  private hyperlink(href: string, label: string): string {\n    if (!this.deps.isTTY || href === '') return label\n\n    // `encodeURI` escapes spaces / non-ASCII but leaves `#` and `?`, which a file URI reads as a\n    // fragment / query \u2014 encode those too so a path containing them still resolves to the real file.\n    const uri = encodeURI(href).replace(/[#?]/g, (c) => {\n      return `%${c.charCodeAt(0).toString(16).toUpperCase()}`\n    })\n\n    return `\\x1B]8;;file://${uri}\\x1B\\\\${label}\\x1B]8;;\\x1B\\\\`\n  }\n\n  /**\n   * Append one line to the log file ONLY \u2014 the canonical `[iso] [LEVEL] msg` shape, no terminal write.\n   * The single source of the file-tee format: the private {@link tee} and the Ink boot UI both route\n   * here, so the log file stays identical whichever renderer is live.\n   */\n  teeOnly(message: string, level: LogLevel): void {\n    this.deps.appendLog(`[${this.deps.now().toISOString()}] [${level.toUpperCase()}] ${stripAnsi(message)}\\n`)\n  }\n\n  /** File tee for a line that is ALSO written to the terminal; delegates the format to {@link teeOnly}. */\n  private tee(message: string, level: LogLevel): void {\n    this.teeOnly(message, level)\n  }\n\n  /**\n   * No-op for the plain renderer: it owns no Ink / raw-mode terminal state to release. Present to\n   * satisfy {@link DevUi} so the runner can call `dispose()` uniformly. Idempotent by construction.\n   */\n  dispose(): void {\n    // Nothing to release \u2014 the plain renderer never seizes the terminal.\n  }\n\n  /**\n   * Write one terminal line spinner-safely: if the spinner is live on a TTY, erase it, print the\n   * line, then repaint the spinner, so a mid-boot message never shreds the `\\r`-based spinner.\n   */\n  private emit(line: string): void {\n    if (this.spinnerTimer != null && this.deps.isTTY) {\n      this.deps.write(`${CLEAR_LINE}${line}\\n`)\n      this.paintSpinner()\n\n      return\n    }\n\n    this.deps.write(`${line}\\n`)\n  }\n\n  /** A general message routed by level (terminal + file tee). Debug is terminal-only in verbose. */\n  log(message: string, level: LogLevel = 'info', options: LogOptions = {}): void {\n    if (level !== 'debug' || this.deps.verbose) {\n      this.emit(message)\n    }\n    if (options.tee !== false) {\n      this.tee(message, level)\n    }\n  }\n\n  /** A boot-narration step: terminal only when `--verbose`, but always tee'd to the log. */\n  narrate(message: string): void {\n    if (this.deps.verbose) {\n      this.emit(message)\n    }\n    this.tee(message, 'info')\n  }\n\n  /** `LogFn`-shaped adapter for the build runner seam (which passes `(msg, level)`). */\n  readonly logFn = (message: string, level: LogLevel = 'info'): void => {\n    this.log(message, level)\n  }\n\n  // ---- boot spinner -------------------------------------------------------\n\n  /** Paint the current spinner frame in place (TTY only). */\n  private paintSpinner(): void {\n    const frame = SPINNER_FRAMES[this.spinnerFrame % SPINNER_FRAMES.length]!\n\n    this.deps.write(`${CLEAR_LINE}${this.color(ANSI.teal, frame)} ${this.color(ANSI.dim, this.spinnerPhase)}`)\n  }\n\n  /**\n   * Update the boot phase. On a TTY this drives a single transient spinner line; when piped it\n   * prints one plain phase line (no ANSI, deterministic). Always tee'd to the log.\n   */\n  bootStep(phase: string): void {\n    this.tee(phase, 'info')\n    this.spinnerPhase = phase\n\n    if (!this.deps.isTTY) {\n      this.deps.write(`${phase}\\n`)\n\n      return\n    }\n\n    if (this.spinnerTimer == null) {\n      this.spinnerTimer = setInterval(() => {\n        this.spinnerFrame += 1\n        this.paintSpinner()\n      }, SPINNER_INTERVAL_MS)\n      // Never keep the event loop alive for the spinner alone.\n      this.spinnerTimer.unref?.()\n    }\n    this.paintSpinner()\n  }\n\n  /** Stop + erase the spinner line (idempotent). Called before the ready header prints. */\n  stopSpinner(): void {\n    if (this.spinnerTimer != null) {\n      clearInterval(this.spinnerTimer)\n      this.spinnerTimer = null\n    }\n    if (this.deps.isTTY) {\n      this.deps.write(CLEAR_LINE)\n    }\n  }\n\n  // ---- the ready header ---------------------------------------------------\n\n  /**\n   * The error counter, shared by endpoint rows and UI reference rows.\n   *\n   * Zero is rendered, not omitted: with nothing else printing, this is the only failure signal on the\n   * screen, so a dim `\u26A0 0` is a claim worth making.\n   *\n   * Non-zero is BOLD red, and that is not decoration. A frontend that fails to compile still serves and\n   * still answers vite's ping, so its dot stays green \u2014 the dot is liveness, and the app IS alive. This\n   * counter is the only thing on the screen that says the app is nevertheless broken, so it has to win a\n   * glance against a green dot sitting two columns away.\n   */\n  private errorCount(errors: number): string {\n    const text = `\u26A0 ${errors}`\n\n    return errors > 0 ? this.color(`${ANSI.bold}${ANSI.red}`, text) : this.color(ANSI.dim, text)\n  }\n\n  /**\n   * The padded tag gutter for a PANEL row \u2014 red once the row has declared an error, teal otherwise.\n   *\n   * Footer only, never {@link formatHeaderLines}. The header is committed once through Ink's `<Static>`,\n   * so a tag reddened there would be a photograph of the boot: it could never turn red later, and \u2014 far\n   * worse \u2014 could never turn back. The panel repaints, so the color tracks the fact.\n   */\n  private tagCell(tag: string, tagWidth: number, errors: number | undefined): string {\n    return this.color((errors ?? 0) > 0 ? ANSI.red : ANSI.teal, tag.padEnd(tagWidth))\n  }\n\n  /** Format the health dot for an endpoint row \u2014 one arm per {@link HealthState}; `unknown` prints nothing. */\n  private healthDot(health: HealthState): string {\n    switch (health) {\n      case 'ok':\n        return this.color(ANSI.green, '\u25CF ok')\n      case 'down':\n        return this.color(ANSI.red, '\u25CF down')\n      case 'starting':\n        return this.color(ANSI.dim, '\u25CC starting')\n      // Answering, but not with vite's ping. Dim, never red: a non-204 is equally consistent with a\n      // broken squatter and a perfectly healthy vite behind something that shadows the ping, and a red\n      // dot on a coin-flip is how a dot stops being read at all.\n      case 'unverified':\n        return this.color(ANSI.dim, '\u25CD ?')\n      default:\n        return ''\n    }\n  }\n\n  /**\n   * Collapse the boot and print the final header in one shot: title line, one endpoint row per\n   * backend server (with health dot), a reference line per UI app, the watch line, the clickable\n   * log path, and a separator rule. Synchronous \u2014 health is pre-probed by the caller.\n   */\n  ready(summary: ReadySummary): void {\n    this.stopSpinner()\n\n    const lines = this.formatReadyLines(summary)\n\n    for (const line of lines) {\n      this.emit(line)\n      this.tee(line, 'info')\n    }\n  }\n\n  /** Column width for the aligned `tag` gutter \u2014 the widest endpoint/UI/failed tag. */\n  private tagWidth(summary: ReadySummary): number {\n    const tags = [\n      ...summary.endpoints.map((e) => {\n        return e.tag\n      }),\n      ...summary.uiRefs.map((u) => {\n        return u.tag\n      }),\n      ...(summary.failed ?? []).map((f) => {\n        return f.tag\n      }),\n      // A degraded row's gutter is `<tag> <route>`, which is wider than any bare tag \u2014 measure the label\n      // it actually prints or its `\u25CF cloud \u2026` cell would sit out of column with every row above it.\n      ...(summary.degraded ?? []).map((d) => {\n        return `${d.tag} ${d.route}`\n      }),\n    ]\n\n    return tags.reduce((w, t) => {\n      return Math.max(w, t.length)\n    }, 0)\n  }\n\n  /**\n   * The `infra-kit dev \u00B7 <meta>   ready in Xs` title line.\n   *\n   * A green `ready` is a claim about the whole session, so it is spent only when the whole session\n   * is up. With anything in `failed` the status turns red and counts the casualties instead \u2014 the\n   * boot time alone, next to a green word, is exactly how a half-dead session used to pass for a\n   * healthy one.\n   */\n  private titleLine(summary: ReadySummary): string {\n    const meta = [summary.target, summary.watch ? 'watch' : null, summary.release]\n      .filter((s): s is string => {\n        return Boolean(s)\n      })\n      .join(' \u00B7 ')\n\n    const failedCount = summary.failed?.length ?? 0\n    const elapsed = formatElapsed(summary.elapsedMs)\n\n    const status =\n      failedCount > 0\n        ? this.color(ANSI.red, `${failedCount} failed \u00B7 started in ${elapsed}`)\n        : this.color(ANSI.green, `ready in ${elapsed}`)\n\n    return `  ${this.color(ANSI.bold, 'infra-kit dev')}  ${this.color(ANSI.dim, meta)}   ${status}`\n  }\n\n  /** The static legend tail: watch line + clickable log path, then a separator rule. */\n  private legendLines(summary: ReadySummary): string[] {\n    const watchText = summary.watch && summary.watchSummary ? `watching ${summary.watchSummary}` : 'watch off'\n    const logLink = this.hyperlink(summary.logHref, summary.logPath)\n    const watchLine = `${watchText}          logs \u2192 ${logLink}`\n    const rule = '\u2500'.repeat(60)\n\n    return [`  ${this.color(ANSI.dim, watchLine)}`, `  ${this.color(ANSI.dim, rule)}`]\n  }\n\n  /**\n   * A UI reference row \u2014 used when infra-kit could not claim the UI's port, so it has no URL to print.\n   *\n   * It STILL carries an error count. That is the whole point: this row is exactly the misconfigured app\n   * (its vite config never wired `infraKitDev()`), which is the app most likely to be broken \u2014 and with\n   * no log tail on screen, a row with no error field is a row that cannot report the breakage. It used\n   * to be a bare reference line, so its errors were counted into a file nobody had a reason to open.\n   */\n  private uiRefLine(ref: UiRef, tagWidth: number, errors: number | undefined): string {\n    const errText = errors == null ? '' : `  ${this.errorCount(errors)}`\n\n    return `  ${this.color(ANSI.teal, ref.tag.padEnd(tagWidth))}  ${this.color(\n      ANSI.dim,\n      'no managed port (vite prints its own URL)',\n    )}${errText}`\n  }\n\n  /**\n   * The live half of an endpoint row: `up 4m12s   18/min   \u21BA2   \u26A0 3`.\n   *\n   * Empty on the boot frame (no field is set yet). Each field is omitted individually when absent \u2014 a\n   * server with no restarts should not have to say so.\n   */\n  private statusFields(endpoint: ReadySummary['endpoints'][number]): string {\n    const parts: string[] = []\n\n    if (endpoint.uptimeMs != null) parts.push(this.color(ANSI.dim, `up ${formatUptime(endpoint.uptimeMs)}`))\n    if (endpoint.rpm != null && endpoint.rpm > 0) parts.push(this.color(ANSI.dim, `${endpoint.rpm}/min`))\n    if (endpoint.restarts != null && endpoint.restarts > 0) parts.push(this.color(ANSI.dim, `\u21BA${endpoint.restarts}`))\n    // Errors are the exception to \"omit when zero\" \u2014 see {@link errorCount}.\n    if (endpoint.errors != null) {\n      parts.push(this.errorCount(endpoint.errors))\n    }\n\n    return parts.join('   ')\n  }\n\n  /** One endpoint row (`client/api  https://\u2026  \u25CF ok  up 4m12s  18/min  \u26A0 0`). */\n  private endpointLine(endpoint: ReadySummary['endpoints'][number], tagWidth: number, withHealthDot: boolean): string {\n    const dot = withHealthDot ? this.healthDot(endpoint.health) : ''\n    const status = this.statusFields(endpoint)\n    const suffix = [dot, status].filter(Boolean).join('  ')\n\n    return `  ${this.color(ANSI.teal, endpoint.tag.padEnd(tagWidth))}  ${this.color(ANSI.blue, endpoint.url)}${\n      suffix ? `  ${suffix}` : ''\n    }`\n  }\n\n  /** One failed row (`client/api  \u25CF failed  <reason>`) \u2014 no URL, because there is nothing listening. */\n  private failedLine(failed: FailedRow, tagWidth: number): string {\n    return `  ${this.color(ANSI.teal, failed.tag.padEnd(tagWidth))}  ${this.color(\n      ANSI.red,\n      '\u25CF failed',\n    )}  ${this.color(ANSI.dim, failed.reason)}`\n  }\n\n  /**\n   * One degraded-route row (`\u26A0 /api  \u25CF cloud (local backend failed)  https://dev.hulyo.co.il`).\n   *\n   * Tagged by ROUTE, not by app, and deliberately so: the app rows above already say what is up and what\n   * is down, and neither of them can say \"the frontend that came up healthy is talking to cloud\". The\n   * route is the thing that got redirected, so the route is what the row is about.\n   */\n  private degradedLine(row: DegradedRow, tagWidth: number): string {\n    const label = `${row.tag} ${row.route}`\n    // A `local` fallback is not a cloud proxy \u2014 it is a dead alias that 502s. Saying \"cloud\" there would\n    // name a destination the traffic never reaches.\n    const state = row.fallback === 'cloud' ? '\u25CF cloud (local backend down)' : '\u25CF dead alias (local backend down)'\n    const target = row.target ? `  ${this.color(ANSI.dim, row.target)}` : ''\n\n    return `  ${this.color(ANSI.red, '\u26A0')} ${this.color(ANSI.teal, label.padEnd(tagWidth))}  ${this.color(\n      ANSI.red,\n      state,\n    )}${target}`\n  }\n\n  /**\n   * The indented proxy lines painted under a frontend's row: `  \u251C /api    \u25CF local  https://\u2026`. One per\n   * resolved route, so \"which one and where\" is answered inline instead of left to guess. A filled dot is\n   * the local backend, a hollow one the shared cloud origin \u2014 the same local=\u25CF/cloud=\u25CB language the rest\n   * of the panel uses. The last route gets a `\u2514` elbow so the group reads as one block belonging to the\n   * app above it. Empty when the frontend declares no routes.\n   */\n  private proxyLines(proxies: ProxyRouteRow[]): string[] {\n    if (proxies.length === 0) return []\n\n    const routeWidth = Math.max(\n      ...proxies.map((p) => {\n        return p.route.length\n      }),\n    )\n\n    return proxies.map((p, i) => {\n      const elbow = i === proxies.length - 1 ? '\u2514' : '\u251C'\n      const dot = p.source === 'local' ? this.color(ANSI.green, '\u25CF') : this.color(ANSI.dim, '\u25CB')\n      const where = p.target ? `  ${this.color(ANSI.blue, p.target)}` : ''\n\n      return `    ${this.color(ANSI.dim, elbow)} ${this.color(ANSI.teal, p.route.padEnd(routeWidth))}  ${dot} ${this.color(\n        ANSI.dim,\n        p.source,\n      )}${where}`\n    })\n  }\n\n  /**\n   * Shared header layout: blank, title line, blank, one endpoint row per backend, a reference row per\n   * UI app, then the watch/log legend. `withHealthDot` is the ONLY difference between the static Ink\n   * header (false \u2014 health is live, the footer owns it) and the ready/boot frame (true).\n   */\n  private formatLines(summary: ReadySummary, { withHealthDot }: { withHealthDot: boolean }): string[] {\n    const tagWidth = this.tagWidth(summary)\n    const lines: string[] = ['', this.titleLine(summary), '']\n\n    for (const e of summary.endpoints) {\n      lines.push(this.endpointLine(e, tagWidth, withHealthDot))\n      // A frontend's proxy routes hang directly off its own row, so \"where does /api go\" reads as a\n      // property of the app rather than a footnote somewhere below it.\n      if (e.proxies) lines.push(...this.proxyLines(e.proxies))\n    }\n    // Failures sit with the live rows, not in the scrollback above: the log line announcing the crash\n    // is metres up the terminal by now, and the header is the only thing the user actually reads.\n    for (const f of summary.failed ?? []) {\n      lines.push(this.failedLine(f, tagWidth))\n    }\n    for (const u of summary.uiRefs) {\n      lines.push(this.uiRefLine(u, tagWidth, u.errors))\n      if (u.proxies) lines.push(...this.proxyLines(u.proxies))\n    }\n    // Below the app rows, because it is a consequence of one of them \u2014 a `\u25CF failed` backend is WHY a\n    // route went to cloud, and the two read as cause and effect only in that order.\n    for (const d of summary.degraded ?? []) {\n      lines.push(this.degradedLine(d, tagWidth))\n    }\n\n    lines.push('', ...this.legendLines(summary))\n\n    return lines\n  }\n\n  /**\n   * Static reference lines for the persistent Ink header, committed ONCE via `<Static>`: title,\n   * endpoint URLs WITHOUT the health dot (health is live \u2192 the footer owns it), UI reference rows,\n   * watch line, clickable log path, separator. Pure; colors follow `isTTY`.\n   */\n  formatHeaderLines(summary: ReadySummary): string[] {\n    return this.formatLines(summary, { withHealthDot: false })\n  }\n\n  /**\n   * The live status rows \u2014 THE PANEL. Re-rendered in place on every tick; never committed to `<Static>`.\n   *\n   * This is the only part of the screen that can change after `ready`, and that makes it the only place\n   * live fields can live. The header is committed once through `<Static>`, so anything painted there is\n   * a photograph: an uptime or an error count rendered into the header would be frozen at its boot value\n   * for the whole session, looking live and being a lie. (It was: the live fields went into the shared\n   * endpoint line first, the header picked them up, the footer kept printing a bare health dot, and a\n   * real run showed a panel with no uptime, no req/min and no error count at all. No unit test saw it \u2014\n   * only the rendered terminal did.)\n   *\n   * Every row is rendered, including an endpoint that was never probed and a UI with no backend at all:\n   * with no log tail on screen this panel is the entire signal, and a row that is absent cannot report\n   * that its service is broken.\n   */\n  formatFooterLines(summary: ReadySummary): string[] {\n    const tagWidth = this.tagWidth(summary)\n\n    const rows = summary.endpoints.map((e) => {\n      const dot = this.healthDot(e.health)\n      const status = this.statusFields(e)\n      const cells = [dot, status].filter(Boolean).join('  ')\n\n      return `  ${this.tagCell(e.tag, tagWidth, e.errors)}  ${cells}`\n    })\n\n    // A UI whose port infra-kit could not claim has no endpoint row \u2014 but its errors still have to land\n    // somewhere the user can see, and it is precisely the app most likely to be misconfigured.\n    for (const ref of summary.uiRefs) {\n      if (ref.errors == null) continue\n      rows.push(`  ${this.tagCell(ref.tag, tagWidth, ref.errors)}  ${this.errorCount(ref.errors)}`)\n    }\n\n    // Degraded routes live in the PANEL, not only in the header. The header is committed once through\n    // `<Static>` \u2014 a photograph \u2014 so a degraded row painted only there would still be on screen after\n    // `--watch` brought the backend back and the route went local again: a permanent warning about a\n    // condition that has been fixed, which trains the user to ignore it. The caller re-derives this list\n    // from the running set on every tick, so the row survives exactly as long as the problem does.\n    for (const d of summary.degraded ?? []) {\n      rows.push(this.degradedLine(d, tagWidth))\n    }\n\n    // The heartbeat. Without it a UI-only session \u2014 whose rows carry no backend uptime and no req/min \u2014\n    // would render an identical frame every tick, and Ink does not repaint an identical frame. The panel\n    // would be genuinely, verifiably alive and look exactly like a hung process.\n    if (summary.sessionUptimeMs != null) {\n      const beat = `up ${formatUptime(summary.sessionUptimeMs)}`\n\n      rows.push(`  ${this.color(ANSI.dim, beat)}`)\n    }\n\n    return rows\n  }\n\n  /**\n   * Build the ready-header lines with NO side effects (no terminal write, no tee), so both\n   * {@link ready} (which writes + tees them) and the Ink boot UI (which commits them via `<Static>`\n   * and tee-only's them) share one layout. Colors follow `isTTY` exactly like every other line.\n   */\n  formatReadyLines(summary: ReadySummary): string[] {\n    return this.formatLines(summary, { withHealthDot: true })\n  }\n}\n"],
+  "mappings": "AAeA,OAAOA,MAAa,eA0MpB,IAAMC,EAAiB,CAAC,SAAK,SAAK,SAAK,SAAK,SAAK,SAAK,SAAK,SAAK,SAAK,QAAG,EAClEC,EAAsB,GAEtBC,EAAO,CACX,MAAO,UACP,IAAK,UACL,KAAM,UACN,KAAM,WACN,MAAO,WACP,KAAM,WACN,IAAK,UACP,EAGMC,EAAa,YAObC,EAAe,qCAORC,EAAaC,GACjBA,EAAE,QAAQF,EAAc,EAAE,EAI7BG,EAAQC,GACL,OAAOA,CAAC,EAAE,SAAS,EAAG,GAAG,EAIrBC,EAAiBC,GACrB,IAAIA,EAAK,KAAM,QAAQ,CAAC,CAAC,IAUrBC,EAAgBD,GAAuB,CAClD,IAAME,EAAQ,KAAK,IAAI,EAAG,KAAK,MAAMF,EAAK,GAAI,CAAC,EACzCG,EAAQ,KAAK,MAAMD,EAAQ,IAAI,EAC/BE,EAAU,KAAK,MAAOF,EAAQ,KAAQ,EAAE,EACxCG,EAAUH,EAAQ,GAExB,OAAIC,EAAQ,EAAU,GAAGA,CAAK,IAAIN,EAAKO,CAAO,CAAC,IAC3CA,EAAU,EAAU,GAAGA,CAAO,IAAIP,EAAKQ,CAAO,CAAC,IAE5C,GAAGA,CAAO,GACnB,EAYaC,EAAsBC,GAC1B,WAAWA,EAAM,KAAK,GAAGA,EAAM,SAAS,GAGpCC,EAAN,KAAmC,CACvB,KACT,aAAsD,KACtD,aAAe,GACf,aAAe,EAEvB,YAAYC,EAAiC,CAAC,EAAG,CAC/C,KAAK,KAAO,CACV,MACEA,EAAK,QACHC,GAAuB,CACvBrB,EAAQ,OAAO,MAAMqB,CAAI,CAC3B,GACF,UAAWD,EAAK,YAAc,IAAY,CAAC,GAC3C,MAAOA,EAAK,OAAS,EAAQpB,EAAQ,OAAO,MAC5C,IACEoB,EAAK,MACJ,IACQ,IAAI,MAEf,QAASA,EAAK,SAAW,EAC3B,CACF,CAGQ,MAAME,EAAcf,EAAmB,CAC7C,OAAO,KAAK,KAAK,MAAQ,GAAGe,CAAI,GAAGf,CAAC,GAAGJ,EAAK,KAAK,GAAKI,CACxD,CAOQ,UAAUgB,EAAcC,EAAuB,CACrD,MAAI,CAAC,KAAK,KAAK,OAASD,IAAS,GAAWC,EAQrC,kBAJK,UAAUD,CAAI,EAAE,QAAQ,QAAUE,GACrC,IAAIA,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,EAAE,YAAY,CAAC,EACtD,CAE2B,SAASD,CAAK,gBAC5C,CAOA,QAAQE,EAAiBC,EAAuB,CAC9C,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,IAAI,EAAE,YAAY,CAAC,MAAMA,EAAM,YAAY,CAAC,KAAKrB,EAAUoB,CAAO,CAAC;AAAA,CAAI,CAC3G,CAGQ,IAAIA,EAAiBC,EAAuB,CAClD,KAAK,QAAQD,EAASC,CAAK,CAC7B,CAMA,SAAgB,CAEhB,CAMQ,KAAKC,EAAoB,CAC/B,GAAI,KAAK,cAAgB,MAAQ,KAAK,KAAK,MAAO,CAChD,KAAK,KAAK,MAAM,GAAGxB,CAAU,GAAGwB,CAAI;AAAA,CAAI,EACxC,KAAK,aAAa,EAElB,MACF,CAEA,KAAK,KAAK,MAAM,GAAGA,CAAI;AAAA,CAAI,CAC7B,CAGA,IAAIF,EAAiBC,EAAkB,OAAQE,EAAsB,CAAC,EAAS,EACzEF,IAAU,SAAW,KAAK,KAAK,UACjC,KAAK,KAAKD,CAAO,EAEfG,EAAQ,MAAQ,IAClB,KAAK,IAAIH,EAASC,CAAK,CAE3B,CAGA,QAAQD,EAAuB,CACzB,KAAK,KAAK,SACZ,KAAK,KAAKA,CAAO,EAEnB,KAAK,IAAIA,EAAS,MAAM,CAC1B,CAGS,MAAQ,CAACA,EAAiBC,EAAkB,SAAiB,CACpE,KAAK,IAAID,EAASC,CAAK,CACzB,EAKQ,cAAqB,CAC3B,IAAMG,EAAQ7B,EAAe,KAAK,aAAeA,EAAe,MAAM,EAEtE,KAAK,KAAK,MAAM,GAAGG,CAAU,GAAG,KAAK,MAAMD,EAAK,KAAM2B,CAAK,CAAC,IAAI,KAAK,MAAM3B,EAAK,IAAK,KAAK,YAAY,CAAC,EAAE,CAC3G,CAMA,SAAS4B,EAAqB,CAI5B,GAHA,KAAK,IAAIA,EAAO,MAAM,EACtB,KAAK,aAAeA,EAEhB,CAAC,KAAK,KAAK,MAAO,CACpB,KAAK,KAAK,MAAM,GAAGA,CAAK;AAAA,CAAI,EAE5B,MACF,CAEI,KAAK,cAAgB,OACvB,KAAK,aAAe,YAAY,IAAM,CACpC,KAAK,cAAgB,EACrB,KAAK,aAAa,CACpB,EAAG7B,CAAmB,EAEtB,KAAK,aAAa,QAAQ,GAE5B,KAAK,aAAa,CACpB,CAGA,aAAoB,CACd,KAAK,cAAgB,OACvB,cAAc,KAAK,YAAY,EAC/B,KAAK,aAAe,MAElB,KAAK,KAAK,OACZ,KAAK,KAAK,MAAME,CAAU,CAE9B,CAeQ,WAAW4B,EAAwB,CACzC,IAAMX,EAAO,UAAKW,CAAM,GAExB,OAAOA,EAAS,EAAI,KAAK,MAAM,GAAG7B,EAAK,IAAI,GAAGA,EAAK,GAAG,GAAIkB,CAAI,EAAI,KAAK,MAAMlB,EAAK,IAAKkB,CAAI,CAC7F,CASQ,QAAQY,EAAaC,EAAkBF,EAAoC,CACjF,OAAO,KAAK,OAAOA,GAAU,GAAK,EAAI7B,EAAK,IAAMA,EAAK,KAAM8B,EAAI,OAAOC,CAAQ,CAAC,CAClF,CAGQ,UAAUC,EAA6B,CAC7C,OAAQA,EAAQ,CACd,IAAK,KACH,OAAO,KAAK,MAAMhC,EAAK,MAAO,WAAM,EACtC,IAAK,OACH,OAAO,KAAK,MAAMA,EAAK,IAAK,aAAQ,EACtC,IAAK,WACH,OAAO,KAAK,MAAMA,EAAK,IAAK,iBAAY,EAI1C,IAAK,aACH,OAAO,KAAK,MAAMA,EAAK,IAAK,UAAK,EACnC,QACE,MAAO,EACX,CACF,CAOA,MAAMiC,EAA6B,CACjC,KAAK,YAAY,EAEjB,IAAMC,EAAQ,KAAK,iBAAiBD,CAAO,EAE3C,QAAWR,KAAQS,EACjB,KAAK,KAAKT,CAAI,EACd,KAAK,IAAIA,EAAM,MAAM,CAEzB,CAGQ,SAASQ,EAA+B,CAkB9C,MAjBa,CACX,GAAGA,EAAQ,UAAU,IAAKE,GACjBA,EAAE,GACV,EACD,GAAGF,EAAQ,OAAO,IAAKG,GACdA,EAAE,GACV,EACD,IAAIH,EAAQ,QAAU,CAAC,GAAG,IAAKI,GACtBA,EAAE,GACV,EAGD,IAAIJ,EAAQ,UAAY,CAAC,GAAG,IAAKK,GACxB,GAAGA,EAAE,GAAG,IAAIA,EAAE,KAAK,EAC3B,CACH,EAEY,OAAO,CAACC,EAAGC,IACd,KAAK,IAAID,EAAGC,EAAE,MAAM,EAC1B,CAAC,CACN,CAUQ,UAAUP,EAA+B,CAC/C,IAAMQ,EAAO,CAACR,EAAQ,OAAQA,EAAQ,MAAQ,QAAU,KAAMA,EAAQ,OAAO,EAC1E,OAAQ7B,GACA,EAAQA,CAChB,EACA,KAAK,QAAK,EAEPsC,EAAcT,EAAQ,QAAQ,QAAU,EACxCU,EAAUpC,EAAc0B,EAAQ,SAAS,EAEzCW,EACJF,EAAc,EACV,KAAK,MAAM1C,EAAK,IAAK,GAAG0C,CAAW,2BAAwBC,CAAO,EAAE,EACpE,KAAK,MAAM3C,EAAK,MAAO,YAAY2C,CAAO,EAAE,EAElD,MAAO,KAAK,KAAK,MAAM3C,EAAK,KAAM,eAAe,CAAC,KAAK,KAAK,MAAMA,EAAK,IAAKyC,CAAI,CAAC,MAAMG,CAAM,EAC/F,CAGQ,YAAYX,EAAiC,CACnD,IAAMY,EAAYZ,EAAQ,OAASA,EAAQ,aAAe,YAAYA,EAAQ,YAAY,GAAK,YACzFa,EAAU,KAAK,UAAUb,EAAQ,QAASA,EAAQ,OAAO,EACzDc,EAAY,GAAGF,CAAS,yBAAoBC,CAAO,GACnDE,EAAO,SAAI,OAAO,EAAE,EAE1B,MAAO,CAAC,KAAK,KAAK,MAAMhD,EAAK,IAAK+C,CAAS,CAAC,GAAI,KAAK,KAAK,MAAM/C,EAAK,IAAKgD,CAAI,CAAC,EAAE,CACnF,CAUQ,UAAUC,EAAYlB,EAAkBF,EAAoC,CAClF,IAAMqB,EAAUrB,GAAU,KAAO,GAAK,KAAK,KAAK,WAAWA,CAAM,CAAC,GAElE,MAAO,KAAK,KAAK,MAAM7B,EAAK,KAAMiD,EAAI,IAAI,OAAOlB,CAAQ,CAAC,CAAC,KAAK,KAAK,MACnE/B,EAAK,IACL,2CACF,CAAC,GAAGkD,CAAO,EACb,CAQQ,aAAaC,EAAqD,CACxE,IAAMC,EAAkB,CAAC,EAEzB,OAAID,EAAS,UAAY,MAAMC,EAAM,KAAK,KAAK,MAAMpD,EAAK,IAAK,MAAMS,EAAa0C,EAAS,QAAQ,CAAC,EAAE,CAAC,EACnGA,EAAS,KAAO,MAAQA,EAAS,IAAM,GAAGC,EAAM,KAAK,KAAK,MAAMpD,EAAK,IAAK,GAAGmD,EAAS,GAAG,MAAM,CAAC,EAChGA,EAAS,UAAY,MAAQA,EAAS,SAAW,GAAGC,EAAM,KAAK,KAAK,MAAMpD,EAAK,IAAK,SAAImD,EAAS,QAAQ,EAAE,CAAC,EAE5GA,EAAS,QAAU,MACrBC,EAAM,KAAK,KAAK,WAAWD,EAAS,MAAM,CAAC,EAGtCC,EAAM,KAAK,KAAK,CACzB,CAGQ,aAAaD,EAA6CpB,EAAkBsB,EAAgC,CAClH,IAAMC,EAAMD,EAAgB,KAAK,UAAUF,EAAS,MAAM,EAAI,GACxDP,EAAS,KAAK,aAAaO,CAAQ,EACnCI,EAAS,CAACD,EAAKV,CAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,EAEtD,MAAO,KAAK,KAAK,MAAM5C,EAAK,KAAMmD,EAAS,IAAI,OAAOpB,CAAQ,CAAC,CAAC,KAAK,KAAK,MAAM/B,EAAK,KAAMmD,EAAS,GAAG,CAAC,GACtGI,EAAS,KAAKA,CAAM,GAAK,EAC3B,EACF,CAGQ,WAAWC,EAAmBzB,EAA0B,CAC9D,MAAO,KAAK,KAAK,MAAM/B,EAAK,KAAMwD,EAAO,IAAI,OAAOzB,CAAQ,CAAC,CAAC,KAAK,KAAK,MACtE/B,EAAK,IACL,eACF,CAAC,KAAK,KAAK,MAAMA,EAAK,IAAKwD,EAAO,MAAM,CAAC,EAC3C,CASQ,aAAaC,EAAkB1B,EAA0B,CAC/D,IAAMV,EAAQ,GAAGoC,EAAI,GAAG,IAAIA,EAAI,KAAK,GAG/BC,EAAQD,EAAI,WAAa,QAAU,oCAAiC,yCACpEE,EAASF,EAAI,OAAS,KAAK,KAAK,MAAMzD,EAAK,IAAKyD,EAAI,MAAM,CAAC,GAAK,GAEtE,MAAO,KAAK,KAAK,MAAMzD,EAAK,IAAK,QAAG,CAAC,IAAI,KAAK,MAAMA,EAAK,KAAMqB,EAAM,OAAOU,CAAQ,CAAC,CAAC,KAAK,KAAK,MAC9F/B,EAAK,IACL0D,CACF,CAAC,GAAGC,CAAM,EACZ,CASQ,WAAWC,EAAoC,CACrD,GAAIA,EAAQ,SAAW,EAAG,MAAO,CAAC,EAElC,IAAMC,EAAa,KAAK,IACtB,GAAGD,EAAQ,IAAKE,GACPA,EAAE,MAAM,MAChB,CACH,EAEA,OAAOF,EAAQ,IAAI,CAACE,EAAG,IAAM,CAC3B,IAAMC,EAAQ,IAAMH,EAAQ,OAAS,EAAI,SAAM,SACzCN,EAAMQ,EAAE,SAAW,QAAU,KAAK,MAAM9D,EAAK,MAAO,QAAG,EAAI,KAAK,MAAMA,EAAK,IAAK,QAAG,EACnFgE,EAAQF,EAAE,OAAS,KAAK,KAAK,MAAM9D,EAAK,KAAM8D,EAAE,MAAM,CAAC,GAAK,GAElE,MAAO,OAAO,KAAK,MAAM9D,EAAK,IAAK+D,CAAK,CAAC,IAAI,KAAK,MAAM/D,EAAK,KAAM8D,EAAE,MAAM,OAAOD,CAAU,CAAC,CAAC,KAAKP,CAAG,IAAI,KAAK,MAC7GtD,EAAK,IACL8D,EAAE,MACJ,CAAC,GAAGE,CAAK,EACX,CAAC,CACH,CAOQ,YAAY/B,EAAuB,CAAE,cAAAoB,CAAc,EAAyC,CAClG,IAAMtB,EAAW,KAAK,SAASE,CAAO,EAChCC,EAAkB,CAAC,GAAI,KAAK,UAAUD,CAAO,EAAG,EAAE,EAExD,QAAWE,KAAKF,EAAQ,UACtBC,EAAM,KAAK,KAAK,aAAaC,EAAGJ,EAAUsB,CAAa,CAAC,EAGpDlB,EAAE,SAASD,EAAM,KAAK,GAAG,KAAK,WAAWC,EAAE,OAAO,CAAC,EAIzD,QAAWE,KAAKJ,EAAQ,QAAU,CAAC,EACjCC,EAAM,KAAK,KAAK,WAAWG,EAAGN,CAAQ,CAAC,EAEzC,QAAWK,KAAKH,EAAQ,OACtBC,EAAM,KAAK,KAAK,UAAUE,EAAGL,EAAUK,EAAE,MAAM,CAAC,EAC5CA,EAAE,SAASF,EAAM,KAAK,GAAG,KAAK,WAAWE,EAAE,OAAO,CAAC,EAIzD,QAAWE,KAAKL,EAAQ,UAAY,CAAC,EACnCC,EAAM,KAAK,KAAK,aAAaI,EAAGP,CAAQ,CAAC,EAG3C,OAAAG,EAAM,KAAK,GAAI,GAAG,KAAK,YAAYD,CAAO,CAAC,EAEpCC,CACT,CAOA,kBAAkBD,EAAiC,CACjD,OAAO,KAAK,YAAYA,EAAS,CAAE,cAAe,EAAM,CAAC,CAC3D,CAiBA,kBAAkBA,EAAiC,CACjD,IAAMF,EAAW,KAAK,SAASE,CAAO,EAEhCgC,EAAOhC,EAAQ,UAAU,IAAKE,GAAM,CACxC,IAAMmB,EAAM,KAAK,UAAUnB,EAAE,MAAM,EAC7BS,EAAS,KAAK,aAAaT,CAAC,EAC5B+B,EAAQ,CAACZ,EAAKV,CAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI,EAErD,MAAO,KAAK,KAAK,QAAQT,EAAE,IAAKJ,EAAUI,EAAE,MAAM,CAAC,KAAK+B,CAAK,EAC/D,CAAC,EAID,QAAWjB,KAAOhB,EAAQ,OACpBgB,EAAI,QAAU,MAClBgB,EAAK,KAAK,KAAK,KAAK,QAAQhB,EAAI,IAAKlB,EAAUkB,EAAI,MAAM,CAAC,KAAK,KAAK,WAAWA,EAAI,MAAM,CAAC,EAAE,EAQ9F,QAAWX,KAAKL,EAAQ,UAAY,CAAC,EACnCgC,EAAK,KAAK,KAAK,aAAa3B,EAAGP,CAAQ,CAAC,EAM1C,GAAIE,EAAQ,iBAAmB,KAAM,CACnC,IAAMkC,EAAO,MAAM1D,EAAawB,EAAQ,eAAe,CAAC,GAExDgC,EAAK,KAAK,KAAK,KAAK,MAAMjE,EAAK,IAAKmE,CAAI,CAAC,EAAE,CAC7C,CAEA,OAAOF,CACT,CAOA,iBAAiBhC,EAAiC,CAChD,OAAO,KAAK,YAAYA,EAAS,CAAE,cAAe,EAAK,CAAC,CAC1D,CACF",
   "names": ["process", "SPINNER_FRAMES", "SPINNER_INTERVAL_MS", "ANSI", "CLEAR_LINE", "ANSI_PATTERN", "stripAnsi", "s", "pad2", "n", "formatElapsed", "ms", "formatUptime", "total", "hours", "minutes", "seconds", "resolveEndpointUrl", "input", "DevRenderer", "deps", "text", "code", "href", "label", "c", "message", "level", "line", "options", "frame", "phase", "errors", "tag", "tagWidth", "health", "summary", "lines", "e", "u", "f", "d", "w", "t", "meta", "failedCount", "elapsed", "status", "watchText", "logLink", "watchLine", "rule", "ref", "errText", "endpoint", "parts", "withHealthDot", "dot", "suffix", "failed", "row", "state", "target", "proxies", "routeWidth", "p", "elbow", "where", "rows", "cells", "beat"]
 }

package/dist/{chunk-TVG47UHG.js → chunk-V2ZLQPLI.js}

@@ -1,2 +1,2 @@
 import r from"node:process";var p=(o={})=>{let e=o.platform??r.platform,l=o.kill??((n,t)=>{r.kill(n,t)});if(e!=="win32")try{l(0,"SIGSTOP")}catch{}};export{p as a};
-//# sourceMappingURL=chunk-TVG47UHG.js.map
+//# sourceMappingURL=chunk-V2ZLQPLI.js.map

package/dist/{chunk-TVG47UHG.js.map → chunk-V2ZLQPLI.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/lib/session/suspend-foreground.ts"],
-  "sourcesContent": ["import process from 'node:process'\n\n/**\n * Ctrl-Z, from the process side, for both the palette and the post-run pause. React-free on purpose:\n * neither caller should have to reach for `node:process`, and this half is worth unit-testing with\n * plain vitest (inject `kill`, assert the signal) rather than through an Ink frame or a raw-stdin\n * harness.\n *\n * It lives under `src/lib/session/` rather than `src/tui/` because of layering, not lint: this module\n * now has two callers \u2014 `boot.tsx`'s palette and the session shell's post-run pause \u2014 and the pause\n * lives in the eagerly-imported `src/lib/session` chunk. That chunk must never statically depend on\n * `src/tui`, the lazily-imported Ink tree, even for a React-free leaf like this one; putting it here\n * keeps the dependency edge pointing the right way for both callers instead of making the eager\n * session code reach backward into the lazy TUI chunk for it.\n */\n\n/** Seams for the stop. Production passes nothing; tests inject fakes and assert the signal. */\nexport interface SuspendDeps {\n  platform?: NodeJS.Platform\n  kill?: (pid: number, signal: NodeJS.Signals) => void\n}\n\n/**\n * Stop the foreground PROCESS GROUP (pid 0) so the user's shell reclaims the tty and prints a\n * prompt. Returns when the job is resumed (`fg` \u2192 SIGCONT): the kill halts JS synchronously and\n * execution continues at the next statement, so there is no SIGCONT handler and nothing to re-arm.\n *\n * Pure signal policy \u2014 it does no terminal work of its own, so every caller (the palette's Ctrl-Z\n * binding, the post-run pause's suspend path) owes it the same terminal state on entry: raw mode\n * already dropped, cursor visible, cursor at column 0, and resume via `fg` only.\n *\n * @example\n * const stopped: number[] = []\n * suspendForeground({ platform: 'darwin', kill: (pid) => stopped.push(pid) })\n * stopped // => [0]  (the process group, not process.pid)\n */\n// pid 0 is the whole process group, and that is load-bearing. Under `pnpm exec infra-kit`, pnpm's\n// node wrapper shares our pgid and the interactive shell only ever waits on PNPM \u2014 we are a\n// grandchild it never reaps. Stopping only ourselves would leave pnpm blocked in `waitpid`, so the\n// job never reads as stopped, the shell never reclaims the tty, and the terminal wedges with no\n// prompt and no way back. Stopping the group suspends the job as a unit, exactly as the tty's own\n// Ctrl-Z would; on direct-bin invocation it degenerates to a self-stop, so this is one code path.\n//\n// Why each caller precondition exists:\n//  - A `tcsetattr` left armed across a `SIGSTOP` resumes into a terminal the shell (not us) is now\n//    driving cooked-mode assumptions against.\n//  - Nothing in this function shows or hides the cursor.\n//  - It does no newline work of its own either: it relies on the caller having already erased its\n//    frame and landed the cursor at the start of a clean row, so the \"suspended\" line the shell\n//    prints lands there without a gratuitous blank gap above it (verified on a real pty).\n//  - `bg` or a bare `kill -CONT` is NOT supported: whichever caller re-arms raw mode on resume\n//    does a `tcsetattr` from what is then a background process group, which raises SIGTTOU and\n//    stops the job again, silently. Same as vim.\nexport const suspendForeground = (deps: SuspendDeps = {}): void => {\n  const platform = deps.platform ?? process.platform\n  const kill =\n    deps.kill ??\n    ((pid: number, signal: NodeJS.Signals) => {\n      process.kill(pid, signal)\n    })\n\n  // SIGSTOP does not exist on Windows: `process.kill` there goes to uv_kill, which fails with ENOSYS\n  // and THROWS. That throw would surface inside an Ink input handler \u2192 the ErrorBoundary \u2192\n  // `handleExit(error)` \u2192 the session shell would silently QUIT. And Windows really does reach this\n  // code: `sessionGateEnabled` (lib/session/run-session.ts) gates on TTYs only, with no platform\n  // check, so Windows Terminal enters the palette like any other. Belt to boot.tsx's braces.\n  if (platform === 'win32') {\n    return\n  }\n\n  // No cursor/newline work here, deliberately \u2014 that is the caller's job (see the preconditions\n  // above): by the time we get here the cursor is already at column 0 on a clean row, so the shell's\n  // \"suspended\" line lands there without a gratuitous blank gap above it.\n  try {\n    kill(0, 'SIGSTOP')\n  } catch {\n    // A stop we could not perform must degrade to a no-op, never to a crash: we are called mid\n    // terminal-restore, and throwing here would take the session down with the tty half-handed-back.\n  }\n}\n"],
-  "mappings": "AAAA,OAAOA,MAAa,eAqDb,IAAMC,EAAoB,CAACC,EAAoB,CAAC,IAAY,CACjE,IAAMC,EAAWD,EAAK,UAAYF,EAAQ,SACpCI,EACJF,EAAK,OACJ,CAACG,EAAaC,IAA2B,CACxCN,EAAQ,KAAKK,EAAKC,CAAM,CAC1B,GAOF,GAAIH,IAAa,QAOjB,GAAI,CACFC,EAAK,EAAG,SAAS,CACnB,MAAQ,CAGR,CACF",
+  "sourcesContent": ["import process from 'node:process'\n\n/**\n * Ctrl-Z, from the process side, for both the palette and the post-run pause. React-free on purpose:\n * neither caller should have to reach for `node:process`, and this half is worth unit-testing with\n * plain vitest (inject `kill`, assert the signal) rather than through an Ink frame or a raw-stdin\n * harness.\n *\n * It lives under `src/lib/session/` rather than `src/tui/` because of layering, not lint: this module\n * now has two callers \u2014 `boot.tsx`'s palette and the session shell's post-run pause \u2014 and the pause\n * lives in the eagerly-imported `src/lib/session` chunk. That chunk must never statically depend on\n * `src/tui`, the lazily-imported Ink tree, even for a React-free leaf like this one; putting it here\n * keeps the dependency edge pointing the right way for both callers instead of making the eager\n * session code reach backward into the lazy TUI chunk for it.\n */\n\n/** Seams for the stop. Production passes nothing; tests inject fakes and assert the signal. */\nexport interface SuspendDeps {\n  platform?: NodeJS.Platform\n  kill?: (pid: number, signal: NodeJS.Signals) => void\n}\n\n/**\n * Stop the foreground PROCESS GROUP (pid 0) so the user's shell reclaims the tty and prints a\n * prompt. Returns when the job is resumed (`fg` \u2192 SIGCONT): the kill halts JS synchronously and\n * execution continues at the next statement, so there is no SIGCONT handler and nothing to re-arm.\n *\n * Pure signal policy \u2014 it does no terminal work of its own, so every caller (the palette's Ctrl-Z\n * binding, the post-run pause's suspend path) owes it the same terminal state on entry: raw mode\n * already dropped, cursor visible, cursor at column 0, and resume via `fg` only.\n *\n * @example\n * const stopped: number[] = []\n * suspendForeground({ platform: 'darwin', kill: (pid) => stopped.push(pid) })\n * stopped // => [0]  (the process group, not process.pid)\n */\n// pid 0 is the whole process group, and that is load-bearing. Under `pnpm exec infra-kit`, pnpm's\n// node wrapper shares our pgid and the interactive shell only ever waits on PNPM \u2014 we are a\n// grandchild it never reaps. Stopping only ourselves would leave pnpm blocked in `waitpid`, so the\n// job never reads as stopped, the shell never reclaims the tty, and the terminal wedges with no\n// prompt and no way back. Stopping the group suspends the job as a unit, exactly as the tty's own\n// Ctrl-Z would; on direct-bin invocation it degenerates to a self-stop, so this is one code path.\n//\n// Why each caller precondition exists:\n//  - A `tcsetattr` left armed across a `SIGSTOP` resumes into a terminal the shell (not us) is now\n//    driving cooked-mode assumptions against.\n//  - Nothing in this function shows or hides the cursor.\n//  - It does no newline work of its own either: it relies on the caller having already erased its\n//    frame and landed the cursor at the start of a clean row, so the \"suspended\" line the shell\n//    prints lands there without a gratuitous blank gap above it (verified on a real pty).\n//  - `bg` or a bare `kill -CONT` is NOT supported: whichever caller re-arms raw mode on resume\n//    does a `tcsetattr` from what is then a background process group, which raises SIGTTOU and\n//    stops the job again, silently. Same as vim.\nexport const suspendForeground = (deps: SuspendDeps = {}): void => {\n  const platform = deps.platform ?? process.platform\n\n  const kill =\n    deps.kill ??\n    ((pid: number, signal: NodeJS.Signals) => {\n      process.kill(pid, signal)\n    })\n\n  // SIGSTOP does not exist on Windows: `process.kill` there goes to uv_kill, which fails with ENOSYS\n  // and THROWS. That throw would surface inside an Ink input handler \u2192 the ErrorBoundary \u2192\n  // `handleExit(error)` \u2192 the session shell would silently QUIT. And Windows really does reach this\n  // code: `sessionGateEnabled` (lib/session/run-session.ts) gates on TTYs only, with no platform\n  // check, so Windows Terminal enters the palette like any other. Belt to boot.tsx's braces.\n  if (platform === 'win32') {\n    return\n  }\n\n  // No cursor/newline work here, deliberately \u2014 that is the caller's job (see the preconditions\n  // above): by the time we get here the cursor is already at column 0 on a clean row, so the shell's\n  // \"suspended\" line lands there without a gratuitous blank gap above it.\n  try {\n    kill(0, 'SIGSTOP')\n  } catch {\n    // A stop we could not perform must degrade to a no-op, never to a crash: we are called mid\n    // terminal-restore, and throwing here would take the session down with the tty half-handed-back.\n  }\n}\n"],
+  "mappings": "AAAA,OAAOA,MAAa,eAqDb,IAAMC,EAAoB,CAACC,EAAoB,CAAC,IAAY,CACjE,IAAMC,EAAWD,EAAK,UAAYF,EAAQ,SAEpCI,EACJF,EAAK,OACJ,CAACG,EAAaC,IAA2B,CACxCN,EAAQ,KAAKK,EAAKC,CAAM,CAC1B,GAOF,GAAIH,IAAa,QAOjB,GAAI,CACFC,EAAK,EAAG,SAAS,CACnB,MAAQ,CAGR,CACF",
   "names": ["process", "suspendForeground", "deps", "platform", "kill", "pid", "signal"]
 }