infra-kit 0.42.0 → 0.43.2

package/dist/{chunk-ZY6BBGHH.js → chunk-CJAWCG52.js}

@@ -1,4 +1,4 @@
-import{P as f,l as $,r as F}from"./chunk-HMXEV7ZN.js";import{execFile as te,execFileSync as oe}from"node:child_process";import b from"node:process";var ne=5e3,ae=100,W=2e3,U="/bin/ps",se=1e3,J=["-eo","pid=,ppid=,pgid=,lstart="],V=8<<20,B=e=>e.split(`
+import{E as F,i as f,y as $}from"./chunk-WJLO37NG.js";import{execFile as te,execFileSync as oe}from"node:child_process";import b from"node:process";var ne=5e3,ae=100,W=2e3,U="/bin/ps",se=1e3,J=["-eo","pid=,ppid=,pgid=,lstart="],V=8<<20,B=e=>e.split(`
 `).flatMap(r=>{let[t,o,n,...i]=r.trim().split(/\s+/);if(t==null||o==null||n==null)return[];let l=Number(t),s=Number(o),c=Number(n);return!Number.isInteger(l)||!Number.isInteger(s)||!Number.isInteger(c)?[]:[{pid:l,ppid:s,pgid:c,lstart:i.join(" ")}]}),H=e=>{let r=new Map;for(let t of e)t.pid===t.pgid&&r.set(t.pgid,t.lstart);return r},ie=(e,r,t)=>{let o=H(r);return j(e,r,t).flatMap(n=>{let i=o.get(n);return i==null||i===""?[]:[{pgid:n,leaderStart:i}]})},K=(e,r)=>{let t=H(r);return e.flatMap(({pgid:o,leaderStart:n})=>t.get(o)===n?[o]:[])},D=(e,r)=>K(e,r).flatMap(t=>{try{b.kill(-t,"SIGKILL")}catch{return[]}return[t]}),j=(e,r,t)=>{let o=new Map;for(let s of r){let c=o.get(s.ppid);c?c.push(s):o.set(s.ppid,[s])}let n=new Set([e]),i=new Set([e]),l=[e];for(let s=0;s<l.length;s+=1)for(let c of o.get(l[s]??-1)??[])i.has(c.pid)||(i.add(c.pid),n.add(c.pgid),l.push(c.pid));return[...n].filter(s=>s>1&&s!==t)},A=()=>{try{return B(oe(U,[...J],{encoding:"utf8",maxBuffer:V}))}catch{return[]}},ce=async()=>new Promise(e=>{te(U,[...J],{encoding:"utf8",maxBuffer:V},(r,t)=>{e(r?[]:B(t))})}),le=(e,r,t)=>t.some(o=>o.pid===e&&o.ppid===r),L=(e,r)=>{let t=r.find(o=>o.pid===b.pid)?.pgid;return j(e,r,t)},q=e=>{try{return b.kill(-e,0),!0}catch{return!1}},C=(e,r)=>{for(let t of e)try{b.kill(-t,r)}catch{}},S=new Set,ue=(e,r,t)=>{let o=L(e,r),n=t.flatMap(i=>K(i,r));return[...new Set([...o,...n])]},z=()=>{let e=A(),r=[...S].map(t=>t());C(ue(b.pid,e,r),"SIGKILL")},pe=async e=>new Promise(r=>{setTimeout(r,e)}),v=async(e,r)=>{let t=Date.now()+r,o=e;for(;o.length>0&&Date.now()<t&&(o=o.filter(q),o.length!==0);)await pe(ae);return o};function or(e,r=ne,t,o=A){e.unref();let n=!1,i=!1,l=[],s=null,c=()=>l;S.add(c);let m=()=>{s&&clearInterval(s),s=null},w=async()=>{await v(l.map(a=>a.pgid),W),S.delete(c)},h=a=>{let u=e.pid;if(u==null||i||n||a.length===0)return;let R=a.find(_=>_.pid===b.pid)?.pgid,x=ie(u,a,R);x.length>0&&(l=x)},y=async()=>{e.pid==null||i||n||h(await ce())};h(A()),s=setInterval(()=>{y()},se),s.unref();let T=a=>{n||t?.(a)};return e.on("exit",(a,u)=>{i=!0,m(),n||(D(l,o()),w()),T(`exited unexpectedly (code=${a??"null"}, signal=${u??"null"})`)}),e.on("error",a=>{T(`failed to spawn: ${a.message}`)}),{kill:async()=>{n=!0,m();let a=e.pid;if(a==null){S.delete(c);return}if(e.exitCode!==null||e.signalCode!==null){D(l,o()),await w();return}let u=o();if(u.length>0&&!le(a,b.pid,u))return;let R=L(a,u);C(R,"SIGTERM");let x=await v(R,r);if(x.length===0){S.delete(c);return}let _=L(a,o()),G=[...new Set([...x,..._])].filter(q);C(G,"SIGKILL"),await v(G,W),S.delete(c)}}}import{constants as de}from"node:os";import k from"node:process";var me=["SIGINT","SIGTERM","SIGHUP"],fe=de.signals,ge=2,N=e=>128+(fe[e]??ge),Oe=2e4,be=e=>{k.exit(e)},we=(e,r)=>{k.on(e,r)},he=(e,r)=>{k.off(e,r)},ye=(e,r)=>{let t=setTimeout(e,r);return t.unref(),()=>{clearTimeout(t)}},I=e=>{try{k.stderr.write(e)}catch{}},Se=(e,r)=>{let t=r instanceof Error?`${r.message}
 ${r.stack??"(no stack)"}`:String(r);I(`
 \u2717 Teardown failed while handling ${e}: ${t}
@@ -7,4 +7,4 @@ ${r.stack??"(no stack)"}`:String(r);I(`
 `),w?.(),n(),y(),r(N(a));return}m=a,w=l(()=>{let u=`
 \u26A0  Teardown deadline exceeded at stage=${s()} after ${i}ms \u2014 force-quitting.
 `;I(u),c(u),n(),y(),r(N(a))},i),(async()=>{try{await e(a)}catch(u){Se(a,u)}finally{w?.(),y(),r(N(a))}})()};for(let a of me){let u=()=>T(a);h.set(a,u),t(a,u)}return y};var Pe=new Set(["ExitPromptError","AbortPromptError","PromptCancelledError"]),X=e=>e instanceof Error&&Pe.has(e.name),ur=e=>{if(X(e))return!0;let r=e?.cause;return X(r)};import{$ as xe}from"zx";var d=class extends Error{code;data;constructor(r){super(r.message),this.name="OrcaError",this.code=r.code,this.data=r.data}},P=class extends Error{exitCode;stderrTail;constructor(r,t){super(`orca: stdout is not a JSON envelope (exit ${r??"signal"})`),this.name="OrcaMalformedError",this.exitCode=r,this.stderrTail=t}},g=class extends Error{constructor(){super("orca: command not found \u2014 the CLI is registered from Orca \u2192 Settings \u2192 Experimental \u2192 CLI"),this.name="OrcaAbsentError"}},Te=400,Re=127,ke=e=>typeof e=="object"&&e!==null&&e.code==="ENOENT",Ee=async e=>{try{return await xe({nothrow:!0,quiet:!0})`orca ${e} --json`}catch(r){throw ke(r)?new g:r}},_e=e=>{try{let r=JSON.parse(e);return typeof r=="object"&&r!==null&&typeof r.ok=="boolean"?r:null}catch{return null}},p=async e=>{let r=await Ee(e),t=_e(r.stdout);if(f.debug({argv:e,ok:t?.ok,code:t?.error?.code,exitCode:r.exitCode},"orca"),!t)throw r.exitCode===Re?new g:new P(r.exitCode,r.stderr.slice(-Te));if(!t.ok)throw new d(t.error??{code:"unknown",message:"orca: ok:false without an error payload"});return t.result};var ve=async()=>{try{let e=await p(["status"]);return f.debug({appVersion:e.runtime?.appVersion},"orca: status"),e.app?.running===!0&&e.runtime?.reachable===!0?"ready":"unreachable"}catch(e){return e instanceof g?"absent":(f.debug({error:e},"orca: status probe failed"),"unreachable")}};import{realpath as Ae}from"node:fs/promises";var O=async e=>{try{return await Ae(e)}catch{return e}};var Le=async e=>{let[{repos:r=[]},t]=await Promise.all([p(["repo","list"]),O(e)]);for(let o of r)if(await O(o.path)===t)return{registered:!0,visibility:o.externalWorktreeVisibility};return{registered:!1}},Ce=async e=>{let{repo:r}=await p(["repo","add","--path",e]);return{visibility:r?.externalWorktreeVisibility}};var Ne="500",Ie=async(e,r)=>{let[{worktrees:t=[]},o]=await Promise.all([p(["worktree","list","--repo",`path:${e}`,"--limit",Ne]),O(r)]);for(let n of t)if(await O(n.path)===o)return!0;return!1};import Me from"node:process";var Y="::",Ge=e=>{let r=e.ORCA_WORKTREE_ID;if(!r)return null;let t=r.indexOf(Y);if(t<0)return null;let o=r.slice(t+Y.length);return o.length>0?o:null},$e=async(e,r=Me.env)=>{let t=Ge(r);if(t===null)return null;let o=await O(t);for(let n of e)if(await O(n)===o)return n;return null};var Q="200",M=async e=>{try{let r=await p(["terminal","list","--worktree",`path:${e}`,"--limit",Q]),t=r.truncated===!0;return t&&f.debug({cwd:e,limit:Q},"orca: terminal list truncated"),{terminals:r.terminals??[],truncated:t}}catch(r){if(r instanceof d&&r.code==="selector_not_found")return{terminals:[],truncated:!1};throw r}};var Fe=async e=>{try{return await p(["terminal","close","--worktree",`path:${e}`,"--all"]),"retired"}catch(r){if(r instanceof d&&r.code==="selector_not_found")return"not_found";if(r instanceof d&&r.code==="terminal_close_incomplete")return f.debug({cwd:e,error:r},"orca: surfaces not retired"),"retired";throw r}},We=async e=>{let{terminals:r}=await M(e);for(let o of r)await p(["terminal","close","--terminal",o.handle]);let t=await Fe(e);return r.length===0&&t==="not_found"?{closed:!1,skipped:"not_found"}:{closed:!0,count:r.length}},De=(e,r)=>r instanceof g?{closed:!1,skipped:"absent"}:r instanceof d?{closed:!1,error:r}:r instanceof P?{closed:!1,error:new d({code:"orca_malformed_output",message:r.message,data:{exitCode:r.exitCode,stderrTail:r.stderrTail}})}:(f.debug({cwd:e,error:r},"orca: close failed outside the Orca contract"),{closed:!1,error:new d({code:"orca_close_failed",message:r instanceof Error?r.message:String(r)})}),Ue=async(e,r)=>{if(r!=="ready")return{closed:!1,skipped:r};try{return await We(e)}catch(t){return De(e,t)}};import{setTimeout as Je}from"node:timers/promises";var Ve=3,Be=300,ee=(e={})=>({attempts:e.attempts??Ve,delayMs:e.delayMs??Be,exhausted:!1}),He=async e=>{try{return{created:await p(e)}}catch(r){if(r instanceof d&&r.code==="selector_not_found")return{notSelectable:r};throw r}},Ke=async(e,r,t)=>{let o=t.exhausted?1:t.attempts,n=Array.from({length:o},(l,s)=>s+1),i;for(let l of n){let s=await He(e);if("created"in s)return s.created.terminal.handle;i=s.notSelectable,l<o&&await Je(t.delayMs)}throw t.exhausted=!0,new d({code:"orca_worktree_not_selectable",message:`orca: worktree ${r} is not selectable after ${o} attempt(s): ${i?.message??""}`,data:{cwd:r,attempts:o,cause:i?.data}})},Z=async(e,r)=>(await p(["terminal","split","--terminal",e,"--direction",r])).split.handle,je=async e=>{let{cwd:r,title:t,focus:o,layout:n,panes:i,poll:l=ee()}=e,s=["terminal","create","--worktree",`path:${r}`,"--title",t,...o?["--focus"]:[]],c=await Ke(s,r,l),m=[c];return n==="full"&&(m.push(await Z(c,"horizontal")),i==="three-pane"&&m.push(await Z(c,"vertical"))),{handles:m,layout:n}};var qe=e=>{let{branch:r}=e,t=$(r);return t?F(t):r};var Yr=e=>typeof e=="object",E=async e=>(await e.body?.cancel(),{kind:"foreign",status:e.status,contentType:e.headers.get("content-type")}),Qr=(e,r)=>{let t=r.contentType?.split(";")[0]?.trim(),o=t==null||t===""?`${r.status}`:`${r.status} ${t}`;return`port ${e} answered ${o}, not vite's ping \u2014 liveness cannot be verified`};var re={accept:"text/x-vite-ping"},ze=e=>e.kind==="api"?`http://127.0.0.1:${e.port}/__health`:`http://127.0.0.1:${e.port}/`,Xe=(e,r)=>{try{return new URL(e,r)}catch{return null}},Ye=async(e,r)=>{let t=await fetch(e,{signal:r});return t.ok?(await t.body?.cancel(),"ok"):E(t)},Qe=async(e,r)=>{let t=await fetch(e,{headers:re,redirect:"manual",signal:r});if(t.status===204)return"ok";if(t.status<300||t.status>=400)return E(t);let o=t.headers.get("location"),n=o==null?null:Xe(o,e);if(n==null||n.origin!==new URL(e).origin)return E(t);await t.body?.cancel();let i=await fetch(n,{headers:re,redirect:"manual",signal:r});return i.status!==204?E(i):(await i.body?.cancel(),"ok")},Zr=async e=>{let r=ze(e),t=AbortSignal.timeout(1500);try{return e.kind==="api"?await Ye(r,t):await Qe(r,t)}catch{return"refused"}};import{readRelease as Ze}from"@slip-stream-kit/config/internal";var er=e=>Ze(e);export{d as a,p as b,ve as c,$e as d,M as e,Ue as f,Le as g,Ce as h,Ie as i,ee as j,je as k,qe as l,Yr as m,Qr as n,Zr as o,er as p,z as q,or as r,N as s,cr as t,ur as u};
-//# sourceMappingURL=chunk-ZY6BBGHH.js.map
+//# sourceMappingURL=chunk-CJAWCG52.js.map

package/dist/{chunk-K5KNXRTF.js → chunk-FMWS4LG2.js}

@@ -1,6 +1,6 @@
-import{a as c,c as v,d as m}from"./chunk-S23ECFH4.js";import{S as g,fa as E,h as p}from"./chunk-HMXEV7ZN.js";import{Buffer as b}from"node:buffer";import K from"node:process";import{$ as d}from"zx";var y="Could not find requested project",N="Could not find requested config",h="Invalid Auth token",D="does not have access to requested config",a=e=>e.includes(h)||e.includes(D)?"auth":e.includes(y)?"project":e.includes(N)?"config":"unknown",u=e=>e.includes(D)?"mis-scoped":e.includes(h)?"revoked":null;var A=e=>[`Doppler rejected the service token for env "${e}" \u2014 it is invalid, revoked, or scoped to a different config.`,`Fix: run \`infra-kit env-token-set ${e}\` with a token scoped to that config.`,"CI / agents: set INFRA_KIT_ENV_TOKEN to a token scoped to that config."].join(`
+import{a as c,c as v,d as m}from"./chunk-VGYDYVXG.js";import{k as g,la as E,t as p}from"./chunk-WJLO37NG.js";import{Buffer as b}from"node:buffer";import K from"node:process";import{$ as d}from"zx";var y="Could not find requested project",N="Could not find requested config",h="Invalid Auth token",D="does not have access to requested config",a=e=>e.includes(h)||e.includes(D)?"auth":e.includes(y)?"project":e.includes(N)?"config":"unknown",u=e=>e.includes(D)?"mis-scoped":e.includes(h)?"revoked":null;var A=e=>[`Doppler rejected the service token for env "${e}" \u2014 it is invalid, revoked, or scoped to a different config.`,`Fix: run \`infra-kit env-token-set ${e}\` with a token scoped to that config.`,"CI / agents: set INFRA_KIT_ENV_TOKEN to a token scoped to that config."].join(`
 `),i=class extends c{authKind;constructor(r,t=null,o){super(o??A(r),r),this.name="DopplerAuthError",this.authKind=t}};var k=({kind:e,project:r,config:t,available:o})=>{let n=e==="project"?[`Doppler project "${r}" not found (set in infra-kit.json \u2192 envManagement.config.name).`]:[`Doppler config "${t}" not found in project "${r}".`];if(o&&o.length>0){let s=e==="project"?"Available projects":`Available configs in "${r}"`;n.push(`${s}: ${o.join(", ")}.`)}return n.push(e==="project"?"Fix: update envManagement.config.name to an existing project, or create it in Doppler.":"Fix: pass an existing config, or create it in Doppler."),n.join(`
 `)};import{$ as l}from"zx";var x=5e3,F="DOPPLER_CONFIG",w=async()=>{let{envManagement:e}=await E();return e.config.name},X=async({childEnv:e,project:r,config:t})=>{let o=l.quiet;l.quiet=!0;try{let s=(await l({env:e})`doppler secrets get ${F} --plain --project ${r} --config ${t}`.timeout(x)).stdout.trim();return s!==t?{outcome:"mis-scoped",scopedTo:s}:{outcome:"valid",scopedTo:s}}catch(n){return{outcome:R(n)}}finally{l.quiet=o}},R=e=>{let r=p(e)??(e instanceof Error?e.message:String(e));return a(r)!=="auth"?"unreachable":u(r)??"unreachable"};import $ from"node:process";var P="INFRA_KIT_ENV_TOKEN",O=async e=>{let r=$.env[P];if(r)return{token:r,source:"env"};let o=(await m())?.envs[e];if(o)return{token:o,source:"store"};throw new c(S(e,await v()),e)},S=(e,r)=>[`No Doppler service token for env "${e}".`,`Mint one at https://dashboard.doppler.com \u2014 this project \u2192 config "${e}" \u2192 Access tab \u2192 "Generate Service Token".`,`Fix: run \`infra-kit env-token-set ${e}\` and paste it.`,`It is stored in ${g(r)} (mode 0600, never in the repo).`,`CI / agents: set ${P} instead \u2014 it takes precedence and needs no home config.`].join(`
 `);var j="DOPPLER_CONFIG",T=1024*1024,M=3e4,I=["DOPPLER_TOKEN","DOPPLER_PROJECT","DOPPLER_CONFIG"],C=(e,r=K.env)=>{let t={...r};for(let o of I)delete t[o];return t.DOPPLER_TOKEN=e,t},de=async e=>new Map(await L(await w(),e)),L=async(e,r)=>{let{token:t}=await O(r),o=C(t),n=d.quiet;d.quiet=!0;try{let s;try{s=await d({env:o})`doppler secrets download --no-file --format json --project ${e} --config ${r}`.timeout(M)}catch(_){throw q(_,e,r)}V(s.stdout);let f=U(s.stdout);return J(f,r),f}finally{d.quiet=n}},J=(e,r)=>{let t=e.find(([o])=>o===j)?.[1];if(!(t===void 0||t===r))throw new i(r,null,`Doppler returned secrets for config "${t}" but "${r}" was requested \u2014 the service token for env "${r}" is scoped to the wrong config. Refusing to load another environment's secrets.
 Fix: run \`infra-kit env-token-set ${r}\` with a token scoped to "${r}".`)},q=(e,r,t)=>{let o=p(e)??(e instanceof Error?e.message:String(e)),n=a(o);return n==="auth"?new i(t,u(o)):n==="unknown"?e instanceof Error?e:new Error(String(e)):new Error(k({kind:n,project:r,config:t,available:null}))},V=e=>{let r=b.byteLength(e,"utf-8");if(r>T)throw new Error(`doppler returned unexpectedly large output (${r} bytes > ${T}) \u2014 refusing to write to disk`)},G=/^[A-Z_]\w*$/i,U=e=>{let r;try{r=JSON.parse(e)}catch{throw new Error(`doppler returned non-JSON output for env-load (got: ${JSON.stringify(e.slice(0,80))})`)}if(r===null||typeof r!="object"||Array.isArray(r))throw new Error("doppler returned unexpected JSON shape for env-load (expected an object of KEY: value pairs)");let t=[];for(let[o,n]of Object.entries(r)){if(!G.test(o))throw new Error(`doppler returned an invalid env var name for env-load (got: ${JSON.stringify(o.slice(0,80))})`);if(typeof n!="string")throw new TypeError(`doppler returned a non-string value for "${o}" (got ${typeof n})`);t.push([o,n])}if(t.length===0)throw new Error("doppler returned empty output for env-load");return t};export{a,u as b,w as c,X as d,P as e,O as f,T as g,C as h,de as i,L as j,J as k,q as l,V as m,U as n};
-//# sourceMappingURL=chunk-K5KNXRTF.js.map
+//# sourceMappingURL=chunk-FMWS4LG2.js.map

package/dist/chunk-JUFLBTUH.js

@@ -0,0 +1,2 @@
+var i={name:"infra-kit",type:"module",version:"0.43.2",repository:{type:"git",url:"git+https://github.com/ArthurSaenz/infra-kit.git",directory:"apps/infra-kit/cli"},files:["dist"],description:"infra-kit",bin:{"infra-kit":"dist/cli.js",ik:"dist/cli.js","ik-mcp":"dist/mcp-proxy.js"},engines:{node:">=24.x"},scripts:{build:"pnpm run clean-artifacts && node ./scripts/build.js",prepack:"pnpm run build","infra-kit-check":"pnpm exec infra-kit audit","clean-artifacts":"rm -rf dist","clean-cache":"rm -rf node_modules/.cache .eslintcache tsconfig.tsbuildinfo .turbo .swc","prettier-fix":"pnpm exec prettier **/* --write --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore","prettier-check":"pnpm exec prettier **/* --check --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore","eslint-check":"pnpm exec eslint --cache --report-unused-disable-directives ./src","eslint-fix":"pnpm exec eslint --cache --quiet --report-unused-disable-directives ./src --fix","ts-check":"tsc --noEmit",test:"pnpm exec vitest run --reporter=minimal","test-watch":"pnpm exec vitest --watch --silent passed-only","test-ui":"pnpm exec vitest --ui --silent passed-only","test-report":"pnpm exec vitest run --coverage --silent passed-only","generate-config-schema":"pnpm exec vitest run src/lib/infra-kit-config/__tests__/json-schema.test.ts --update=all","qa:pty":"INFRA_KIT_REQUIRE_PTY=1 pnpm exec vitest run --reporter=minimal src/tui/__tests__/stdin-pause-pty.test.ts src/entry/__tests__/quit-keys-pty.test.ts src/entry/__tests__/post-run-pause-pty.test.ts",qa:"pnpm run prettier-check && pnpm run eslint-check && pnpm run ts-check && pnpm run test && echo \u2705 Success",fix:"pnpm run prettier-fix && pnpm run eslint-fix && pnpm run qa"},dependencies:{"@inquirer/checkbox":"^5.2.8","@inquirer/confirm":"^6.3.5","@inquirer/input":"^5.1.9","@inquirer/password":"^5.2.5","@inquirer/select":"^5.2.8","@slip-stream-kit/config":"workspace:^",chalk:"^6.0.1",chokidar:"^6.0.0",commander:"^15.0.0",fastify:"^5.12.7",ink:"^8.0.0",pino:"^10.4.0","pino-pretty":"^13.2.0",portless:"^0.15.12",react:"19.3.1",yaml:"^2.9.1",zod:"^4.6.7",zx:"^8.8.5"},devDependencies:{"@slip-stream-kit/eslint-plugin":"workspace:*","@types/aws-lambda":"catalog:","@types/react":"catalog:","@wl/eslint-config":"workspace:*","@wl/vitest-config":"workspace:*",esbuild:"^0.28.2","ink-testing-library":"^4.0.0",typescript:"^6.0.3"}};export{i as a};
+//# sourceMappingURL=chunk-JUFLBTUH.js.map

package/dist/{chunk-YSR7UND3.js.map → chunk-JUFLBTUH.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../package.json"],
-  "sourcesContent": ["{\n  \"name\": \"infra-kit\",\n  \"type\": \"module\",\n  \"version\": \"0.42.0\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/ArthurSaenz/infra-kit.git\",\n    \"directory\": \"apps/infra-kit/cli\"\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"description\": \"infra-kit\",\n  \"bin\": {\n    \"infra-kit\": \"dist/cli.js\",\n    \"ik\": \"dist/cli.js\",\n    \"ik-mcp\": \"dist/mcp-proxy.js\"\n  },\n  \"engines\": {\n    \"node\": \">=24.x\"\n  },\n  \"scripts\": {\n    \"build\": \"pnpm run clean-artifacts && node ./scripts/build.js\",\n    \"prepack\": \"pnpm run build\",\n    \"infra-kit-check\": \"pnpm exec infra-kit audit\",\n    \"clean-artifacts\": \"rm -rf dist\",\n    \"clean-cache\": \"rm -rf node_modules/.cache .eslintcache tsconfig.tsbuildinfo .turbo .swc\",\n    \"prettier-fix\": \"pnpm exec prettier **/* --write --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore\",\n    \"prettier-check\": \"pnpm exec prettier **/* --check --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore\",\n    \"eslint-check\": \"pnpm exec eslint --cache --report-unused-disable-directives ./src\",\n    \"eslint-fix\": \"pnpm exec eslint --cache --quiet --report-unused-disable-directives ./src --fix\",\n    \"ts-check\": \"tsc --noEmit\",\n    \"test\": \"pnpm exec vitest run --reporter=minimal\",\n    \"test-watch\": \"pnpm exec vitest --watch --silent passed-only\",\n    \"test-ui\": \"pnpm exec vitest --ui --silent passed-only\",\n    \"test-report\": \"pnpm exec vitest run --coverage --silent passed-only\",\n    \"qa:pty\": \"INFRA_KIT_REQUIRE_PTY=1 pnpm exec vitest run --reporter=minimal src/tui/__tests__/stdin-pause-pty.test.ts src/entry/__tests__/quit-keys-pty.test.ts src/entry/__tests__/post-run-pause-pty.test.ts\",\n    \"qa\": \"pnpm run prettier-check && pnpm run eslint-check && pnpm run ts-check && pnpm run test && echo \u2705 Success\",\n    \"fix\": \"pnpm run prettier-fix && pnpm run eslint-fix && pnpm run qa\"\n  },\n  \"dependencies\": {\n    \"@inquirer/checkbox\": \"^5.2.8\",\n    \"@inquirer/confirm\": \"^6.3.5\",\n    \"@inquirer/input\": \"^5.1.9\",\n    \"@inquirer/password\": \"^5.2.5\",\n    \"@inquirer/select\": \"^5.2.8\",\n    \"@slip-stream-kit/config\": \"workspace:^\",\n    \"chalk\": \"^6.0.1\",\n    \"chokidar\": \"^6.0.0\",\n    \"commander\": \"^15.0.0\",\n    \"fastify\": \"^5.12.7\",\n    \"ink\": \"^8.0.0\",\n    \"pino\": \"^10.4.0\",\n    \"pino-pretty\": \"^13.2.0\",\n    \"portless\": \"^0.15.12\",\n    \"react\": \"19.3.1\",\n    \"yaml\": \"^2.9.1\",\n    \"zod\": \"^4.6.7\",\n    \"zx\": \"^8.8.5\"\n  },\n  \"devDependencies\": {\n    \"@slip-stream-kit/eslint-plugin\": \"workspace:*\",\n    \"@types/aws-lambda\": \"catalog:\",\n    \"@types/react\": \"catalog:\",\n    \"@wl/eslint-config\": \"workspace:*\",\n    \"@wl/vitest-config\": \"workspace:*\",\n    \"esbuild\": \"^0.28.2\",\n    \"ink-testing-library\": \"^4.0.0\",\n    \"typescript\": \"^6.0.3\"\n  }\n}\n"],
-  "mappings": "AAAA,IAAAA,EAAA,CACE,KAAQ,YACR,KAAQ,SACR,QAAW,SACX,WAAc,CACZ,KAAQ,MACR,IAAO,mDACP,UAAa,oBACf,EACA,MAAS,CACP,MACF,EACA,YAAe,YACf,IAAO,CACL,YAAa,cACb,GAAM,cACN,SAAU,mBACZ,EACA,QAAW,CACT,KAAQ,QACV,EACA,QAAW,CACT,MAAS,sDACT,QAAW,iBACX,kBAAmB,4BACnB,kBAAmB,cACnB,cAAe,2EACf,eAAgB,4HAChB,iBAAkB,4HAClB,eAAgB,oEAChB,aAAc,kFACd,WAAY,eACZ,KAAQ,0CACR,aAAc,gDACd,UAAW,6CACX,cAAe,uDACf,SAAU,qMACV,GAAM,gHACN,IAAO,6DACT,EACA,aAAgB,CACd,qBAAsB,SACtB,oBAAqB,SACrB,kBAAmB,SACnB,qBAAsB,SACtB,mBAAoB,SACpB,0BAA2B,cAC3B,MAAS,SACT,SAAY,SACZ,UAAa,UACb,QAAW,UACX,IAAO,SACP,KAAQ,UACR,cAAe,UACf,SAAY,WACZ,MAAS,SACT,KAAQ,SACR,IAAO,SACP,GAAM,QACR,EACA,gBAAmB,CACjB,iCAAkC,cAClC,oBAAqB,WACrB,eAAgB,WAChB,oBAAqB,cACrB,oBAAqB,cACrB,QAAW,UACX,sBAAuB,SACvB,WAAc,QAChB,CACF",
+  "sourcesContent": ["{\n  \"name\": \"infra-kit\",\n  \"type\": \"module\",\n  \"version\": \"0.43.2\",\n  \"repository\": {\n    \"type\": \"git\",\n    \"url\": \"git+https://github.com/ArthurSaenz/infra-kit.git\",\n    \"directory\": \"apps/infra-kit/cli\"\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"description\": \"infra-kit\",\n  \"bin\": {\n    \"infra-kit\": \"dist/cli.js\",\n    \"ik\": \"dist/cli.js\",\n    \"ik-mcp\": \"dist/mcp-proxy.js\"\n  },\n  \"engines\": {\n    \"node\": \">=24.x\"\n  },\n  \"scripts\": {\n    \"build\": \"pnpm run clean-artifacts && node ./scripts/build.js\",\n    \"prepack\": \"pnpm run build\",\n    \"infra-kit-check\": \"pnpm exec infra-kit audit\",\n    \"clean-artifacts\": \"rm -rf dist\",\n    \"clean-cache\": \"rm -rf node_modules/.cache .eslintcache tsconfig.tsbuildinfo .turbo .swc\",\n    \"prettier-fix\": \"pnpm exec prettier **/* --write --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore\",\n    \"prettier-check\": \"pnpm exec prettier **/* --check --no-error-on-unmatched-pattern --log-level silent --ignore-path ../../../.prettierignore\",\n    \"eslint-check\": \"pnpm exec eslint --cache --report-unused-disable-directives ./src\",\n    \"eslint-fix\": \"pnpm exec eslint --cache --quiet --report-unused-disable-directives ./src --fix\",\n    \"ts-check\": \"tsc --noEmit\",\n    \"test\": \"pnpm exec vitest run --reporter=minimal\",\n    \"test-watch\": \"pnpm exec vitest --watch --silent passed-only\",\n    \"test-ui\": \"pnpm exec vitest --ui --silent passed-only\",\n    \"test-report\": \"pnpm exec vitest run --coverage --silent passed-only\",\n    \"generate-config-schema\": \"pnpm exec vitest run src/lib/infra-kit-config/__tests__/json-schema.test.ts --update=all\",\n    \"qa:pty\": \"INFRA_KIT_REQUIRE_PTY=1 pnpm exec vitest run --reporter=minimal src/tui/__tests__/stdin-pause-pty.test.ts src/entry/__tests__/quit-keys-pty.test.ts src/entry/__tests__/post-run-pause-pty.test.ts\",\n    \"qa\": \"pnpm run prettier-check && pnpm run eslint-check && pnpm run ts-check && pnpm run test && echo \u2705 Success\",\n    \"fix\": \"pnpm run prettier-fix && pnpm run eslint-fix && pnpm run qa\"\n  },\n  \"dependencies\": {\n    \"@inquirer/checkbox\": \"^5.2.8\",\n    \"@inquirer/confirm\": \"^6.3.5\",\n    \"@inquirer/input\": \"^5.1.9\",\n    \"@inquirer/password\": \"^5.2.5\",\n    \"@inquirer/select\": \"^5.2.8\",\n    \"@slip-stream-kit/config\": \"workspace:^\",\n    \"chalk\": \"^6.0.1\",\n    \"chokidar\": \"^6.0.0\",\n    \"commander\": \"^15.0.0\",\n    \"fastify\": \"^5.12.7\",\n    \"ink\": \"^8.0.0\",\n    \"pino\": \"^10.4.0\",\n    \"pino-pretty\": \"^13.2.0\",\n    \"portless\": \"^0.15.12\",\n    \"react\": \"19.3.1\",\n    \"yaml\": \"^2.9.1\",\n    \"zod\": \"^4.6.7\",\n    \"zx\": \"^8.8.5\"\n  },\n  \"devDependencies\": {\n    \"@slip-stream-kit/eslint-plugin\": \"workspace:*\",\n    \"@types/aws-lambda\": \"catalog:\",\n    \"@types/react\": \"catalog:\",\n    \"@wl/eslint-config\": \"workspace:*\",\n    \"@wl/vitest-config\": \"workspace:*\",\n    \"esbuild\": \"^0.28.2\",\n    \"ink-testing-library\": \"^4.0.0\",\n    \"typescript\": \"^6.0.3\"\n  }\n}\n"],
+  "mappings": "AAAA,IAAAA,EAAA,CACE,KAAQ,YACR,KAAQ,SACR,QAAW,SACX,WAAc,CACZ,KAAQ,MACR,IAAO,mDACP,UAAa,oBACf,EACA,MAAS,CACP,MACF,EACA,YAAe,YACf,IAAO,CACL,YAAa,cACb,GAAM,cACN,SAAU,mBACZ,EACA,QAAW,CACT,KAAQ,QACV,EACA,QAAW,CACT,MAAS,sDACT,QAAW,iBACX,kBAAmB,4BACnB,kBAAmB,cACnB,cAAe,2EACf,eAAgB,4HAChB,iBAAkB,4HAClB,eAAgB,oEAChB,aAAc,kFACd,WAAY,eACZ,KAAQ,0CACR,aAAc,gDACd,UAAW,6CACX,cAAe,uDACf,yBAA0B,2FAC1B,SAAU,qMACV,GAAM,gHACN,IAAO,6DACT,EACA,aAAgB,CACd,qBAAsB,SACtB,oBAAqB,SACrB,kBAAmB,SACnB,qBAAsB,SACtB,mBAAoB,SACpB,0BAA2B,cAC3B,MAAS,SACT,SAAY,SACZ,UAAa,UACb,QAAW,UACX,IAAO,SACP,KAAQ,UACR,cAAe,UACf,SAAY,WACZ,MAAS,SACT,KAAQ,SACR,IAAO,SACP,GAAM,QACR,EACA,gBAAmB,CACjB,iCAAkC,cAClC,oBAAqB,WACrB,eAAgB,WAChB,oBAAqB,cACrB,oBAAqB,cACrB,QAAW,UACX,sBAAuB,SACvB,WAAc,QAChB,CACF",
   "names": ["package_default"]
 }

package/dist/{chunk-K5YNW3DE.js → chunk-N6357YXE.js}

@@ -1,4 +1,4 @@
-import{a as x,b as E}from"./chunk-QWVLAZ6N.js";import{P as v,X as c,d as l,f as u}from"./chunk-HMXEV7ZN.js";var A=()=>{let e="",n=[],t=!1;return{start(r){e=r,n=[],t=!1},setInteractive(){t=!0},addOption(r,o){n.push({flag:r,value:o})},formatOptions(){return n.map(r=>typeof r.value=="boolean"?r.value?r.flag:"":Array.isArray(r.value)?`${r.flag} "${r.value.join(", ")}"`:`${r.flag} "${r.value}"`).filter(Boolean).join(" ")},snapshot(){return n.length===0?null:{formattedOptions:this.formatOptions()}},print(){!t||n.length===0||!e||v.info(`\u{1F4DF} Equivalent command: 
+import{a as x,b as E}from"./chunk-QWVLAZ6N.js";import{d as l,f as u,i as v,v as c}from"./chunk-WJLO37NG.js";var A=()=>{let e="",n=[],t=!1;return{start(r){e=r,n=[],t=!1},setInteractive(){t=!0},addOption(r,o){n.push({flag:r,value:o})},formatOptions(){return n.map(r=>typeof r.value=="boolean"?r.value?r.flag:"":Array.isArray(r.value)?`${r.flag} "${r.value.join(", ")}"`:`${r.flag} "${r.value}"`).filter(Boolean).join(" ")},snapshot(){return n.length===0?null:{formattedOptions:this.formatOptions()}},print(){!t||n.length===0||!e||v.info(`\u{1F4DF} Equivalent command: 
 pnpm exec infra-kit ${e} ${this.formatOptions()}
 `)},reset(){e="",n=[],t=!1}}},f=A();import{isAbsolute as w,resolve as y}from"node:path";import T from"node:process";var m=null,p=null,P=e=>{m=[...e],p=T.cwd()},S=new Set(["--yes","-y"]),$=(e,n)=>{let t=[...e];for(let[r,o]of t.entries())o==="-C"&&t[r+1]!==void 0&&!w(t[r+1])?t[r+1]=y(n,t[r+1]):o.startsWith("-C")&&o.length>2&&!o.startsWith("--")&&!w(o.slice(2))&&(t[r]=`-C${y(n,o.slice(2))}`);return t},g=()=>{if(m===null||p===null)return["--yes"];let e=m.slice(2),n=e.indexOf("--"),t=n===-1?e.length:n,r=$(e.slice(0,t),p),o=e.slice(t);return r.some(s=>S.has(s))?[...r,...o]:[...r,"--yes",...o]};import b from"node:process";var H=27,D=e=>e===null?"an interactive prompt was reached under --json, which never prompts":`an interactive prompt was reached in agent mode (${e==="flag"?"--agent":"INFRA_KIT_AGENT / CLAUDECODE"}), where there is no human to answer it`,j=e=>`${e===void 0?"pass the value explicitly instead of relying on the prompt":`pass --${e}`} on the re-run`,I=e=>{if(typeof e=="object"&&"value"in e)return e.value;let n=typeof e=="object"?e.refuse:void 0,{source:t}=l;throw new c(n===void 0?{status:"refused",agentMode:t}:{status:"argument_required",argument:n,agentMode:t},2,{operation:"interactive prompt",remediation:j(n),stderrExcerpt:D(t)})},C=async(e,n)=>{let t=new AbortController,{whenHeadless:r="refuse",...o}=n??{},d={...o,signal:t.signal};if(u())return I(r);if(!b.stdin.isTTY)return e(d);let s=b.stdin,h=a=>{a.length===1&&a[0]===H&&t.abort()};x();try{let a=e(d);return s.isPaused()&&s.resume(),s.on("data",h),await a}finally{s.removeListener("data",h),E()}};import M from"@inquirer/confirm";var i=class extends Error{constructor(n="Operation cancelled by the operator"){super(n),this.name="CommandDeclinedError"}},z=e=>e instanceof i;var O=(e,n,t=g())=>{let{source:r}=l;throw new c({status:"confirmation_required",message:e,plan:n,rerun:t,agentMode:r},2,{operation:"confirm before running",remediation:r===null?"pass `--yes` to confirm, or drop `--json` to be prompted":`show the plan to the human, then re-run \`infra-kit ${t.join(" ")}\` to confirm`,stderrExcerpt:"confirmation required and nobody to ask"})},k=async(e,n,t={})=>{!e&&u()&&O(n,t.plan,t.rerun);let r=e?!0:await C(o=>M({message:n},o),{whenHeadless:"refuse"});if(e||f.setInteractive(),!r)throw new i};export{f as a,z as b,P as c,g as d,C as e,O as f,k as g};
-//# sourceMappingURL=chunk-K5YNW3DE.js.map
+//# sourceMappingURL=chunk-N6357YXE.js.map

package/dist/{chunk-S23ECFH4.js → chunk-VGYDYVXG.js}

@@ -1,5 +1,5 @@
-import{S as m,ea as E}from"./chunk-HMXEV7ZN.js";import{p as w}from"./chunk-RVMKL6T4.js";import i from"node:fs/promises";import o from"node:path";import{z as a}from"zod";var c=class extends Error{env;constructor(e,r=null){super(e),this.name="EnvAuthError",this.env=r}};var x="tokens.json",d=1,k=384,u=448,y=a.object({version:a.literal(d).default(d),envs:a.record(a.string().min(1),a.string().min(1))}).strict(),l=async()=>{let t=await E();return o.join(o.dirname(t.userProject),x)},h=async()=>{let t=await l(),e;try{e=await i.readFile(t,"utf-8")}catch{return null}let r;try{r=JSON.parse(e)}catch(s){throw new c(`Invalid JSON in the token store at ${m(t)}: ${s.message}
+import{k as m,ka as E}from"./chunk-WJLO37NG.js";import{p as w}from"./chunk-RVMKL6T4.js";import i from"node:fs/promises";import o from"node:path";import{z as a}from"zod";var c=class extends Error{env;constructor(e,r=null){super(e),this.name="EnvAuthError",this.env=r}};var x="tokens.json",d=1,k=384,u=448,y=a.object({version:a.literal(d).default(d),envs:a.record(a.string().min(1),a.string().min(1))}).strict(),l=async()=>{let t=await E();return o.join(o.dirname(t.userProject),x)},h=async()=>{let t=await l(),e;try{e=await i.readFile(t,"utf-8")}catch{return null}let r;try{r=JSON.parse(e)}catch(s){throw new c(`Invalid JSON in the token store at ${m(t)}: ${s.message}
 Fix or delete the file, then re-add the token with \`infra-kit env-token-set <env>\`.`)}let n=y.safeParse(r);if(!n.success)throw new c(`Invalid token store at ${m(t)}: ${a.prettifyError(n.error)}
 Fix or delete the file, then re-add the token with \`infra-kit env-token-set <env>\`.`);return n.data},v=async t=>{let e=await l(),r=o.dirname(e),n=o.dirname(r),s=o.dirname(n);for(let f of[s,n,r])await i.mkdir(f,{recursive:!0,mode:u}),await i.chmod(f,u);w(e,`${JSON.stringify(t,null,2)}
 `,k),await i.chmod(e,k)},P=async()=>{let t=await l().catch(()=>null);if(t===null)return null;let e=o.dirname(t),r=o.dirname(e),s=[[o.dirname(r),u],[r,u],[e,u],[t,k]];if(!await i.stat(t).then(()=>!0,()=>!1))return null;let g=[];for(let[p,S]of s){let T=(await i.stat(p)).mode&511;T!==S&&(await i.chmod(p,S),g.push(`${m(p)} was 0${T.toString(8)}`))}return g};var j=async t=>{let e=await h();await v({version:d,envs:{...e?.envs,...t}})},O=async t=>{let e=await h();if(!e||!(t in e.envs))return;let r={...e.envs};delete r[t],await v({version:d,envs:r})};var D=(t,e,r)=>t.map(({env:n,source:s})=>({env:n,source:s,hasToken:!!(r||e[n])}));export{c as a,D as b,l as c,h as d,P as e,j as f,O as g};
-//# sourceMappingURL=chunk-S23ECFH4.js.map
+//# sourceMappingURL=chunk-VGYDYVXG.js.map

package/dist/chunk-WJLO37NG.js

@@ -0,0 +1,21 @@
+import{a as ke}from"./chunk-MFAFQVTW.js";import{a as ye}from"./chunk-JUFLBTUH.js";import{e as G,q,s as J}from"./chunk-RVMKL6T4.js";import mt from"node:process";import pt from"pino";import dt from"pino-pretty";var gt=["token","*.token","serviceToken","*.serviceToken","DOPPLER_TOKEN","*.DOPPLER_TOKEN","INFRA_KIT_ENV_TOKEN","*.INFRA_KIT_ENV_TOKEN"],ft=()=>{let e=mt.argv.includes("--debug")?"debug":"info",t=["time","pid","hostname"];return e==="debug"&&t.push("level"),pt({level:e,redact:gt},dt({destination:2,ignore:t.join(","),colorize:!0,sync:!0}))},B=ft();var E=e=>{let t=new Set,r=e;for(;r!==null&&typeof r=="object"&&!t.has(r);){t.add(r);let{stderr:n,stderrExcerpt:o}=r;if(typeof n=="string"&&n.length>0)return n;if(typeof o=="string"&&o.length>0)return o;r=r.cause}},ht=(e,t)=>{let r=t.stderrExcerpt??E(e),n=[`failed to ${t.operation}`];return r&&n.push(`stderr: ${r.slice(0,200).trim()}`),t.remediation&&n.push(`try: ${t.remediation}`),n.join(" \u2014 ")},d=class extends Error{operation;remediation;stderrExcerpt;constructor(t,r){super(ht(t,r),{cause:t}),this.name="OperationError",this.operation=r.operation,this.remediation=r.remediation,this.stderrExcerpt=r.stderrExcerpt??E(t)}};import yt from"node:process";import{z as ve}from"zod";var H=1,kt={schemaVersion:ve.literal(H),command:ve.string().describe("The grouped command path that ran, e.g. `release create`")},M={enabled:!1,command:""},vt=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),we=e=>vt(e)?{schemaVersion:H,command:M.command,...e}:e,wt=(e,t=r=>{yt.stdout.write(r)})=>(M.enabled&&e&&e.structuredContent!=null&&t(`${JSON.stringify(we(e.structuredContent),null,2)}
+`),e),be=e=>{e.options.some(r=>r.long==="--json")||e.option("--json","Output the structured result as JSON on stdout (human logs stay on stderr)");for(let r of e.commands)be(r)};import bt from"node:process";var O={source:null},b=()=>O.source!==null,xt=()=>b()||M.enabled,z=()=>!!bt.env.CI,Rt=({env:e,stdinIsTTY:t,flag:r})=>{if(r)return"flag";let n=e.INFRA_KIT_AGENT;return n==="1"||e.CLAUDECODE!==void 0&&!t&&n!=="0"?"env":null};import Et from"node:fs/promises";import Mt from"node:os";var St=async e=>{try{return await Et.access(e),!0}catch{return!1}},U=e=>{let t=Mt.homedir();return e.startsWith(t)?`~${e.slice(t.length)}`:e};var P=class extends d{structuredContent;exitCode;constructor(t,r,n){super(void 0,n),this.name="StructuredRefusalError",this.structuredContent=t,this.exitCode=r}};import x from"node:path";import Ce from"node:process";import{$ as g}from"zx";var Ct=/^v?(\d+)\.(\d+)\.(\d+)$/,$t=/^(\d+)\.(\d+)\.(\d+)$/,jt=/^[a-z0-9]+(?:-[a-z0-9]+)*$/,T="release/",X="release/v",xe="refs/heads/",It="next";var Re=new Set(["dev","main","next","hotfix","regular","release"]),k=class extends Error{constructor(t){super(t),this.name="InvalidReleaseNameError"}},v=class extends Error{constructor(t){super(t),this.name="InvalidReleaseRefError"}},Me=e=>e.startsWith(xe)?e.slice(xe.length):e,Se=(e,t,r)=>({kind:"version",semver:{major:e,minor:t,patch:r},raw:`${e}.${t}.${r}`}),Y=e=>{if(e.length===0)throw new k('Release name is empty. Provide a kebab-case name like "checkout-redesign".');if(e.length>50)throw new k(`Release name "${e}" is ${e.length} characters; the maximum is 50.`);if(!jt.test(e))throw new k(`Release name "${e}" is not kebab-case. Use lowercase letters, digits, and single hyphens, e.g. "checkout-redesign".`);if(Re.has(e))throw new k(`Release name "${e}" is reserved. Reserved names: ${[...Re].join(", ")}.`)},Z=e=>{let t=Me(e.trim());if(!t.startsWith(T))return null;if(t.startsWith(X)){let n=t.slice(X.length),o=$t.exec(n);if(o)return Se(Number(o[1]),Number(o[2]),Number(o[3]))}let r=t.slice(T.length);try{Y(r)}catch{return null}return{kind:"name",name:r,raw:r}},Ot=e=>{let t=e.trim();if(Me(t).startsWith(T)){let o=Z(t);if(!o)throw new v(`"${e}" looks like a release branch but is not a valid release/v<semver> or release/<name> ref.`);return o}let n=Ct.exec(t);if(n)return Se(Number(n[1]),Number(n[2]),Number(n[3]));if(t.toLowerCase()===It)throw new v('The "next" token must be resolved to a concrete version (via computeNextVersion) before parsing a release ref.');if(t.includes("@"))throw new v(`Cannot parse "${e}" as a release ref: the \`@date\` suffix belongs to \`release create\`; pass the version alone here and use \`--release-date\` on \`release edit\``);try{Y(t)}catch(o){let s=o instanceof Error?o.message:String(o);throw new v(`Cannot parse "${e}" as a release ref: ${s}`)}return{kind:"name",name:t,raw:t}},Pt=e=>e.kind==="version"?`${X}${e.raw}`:`${T}${e.name}`,Tt=(e,t)=>{let r=t==="hotfix"?"Hotfix":"Release";return e.kind==="version"?`${r} v${e.raw}`:`${r} ${e.name}`},At=e=>e.kind==="version"?`Release v${e.raw} (RC)`:`Release ${e.name} (RC)`,Nt=e=>e.kind==="version"?`v${e.raw}`:e.name,Lt=e=>e.raw,Q=e=>e==null?!1:Z(e)!==null,Ee=e=>{if(e===void 0)return null;let t=e instanceof Date?e.getTime():new Date(e).getTime();return Number.isNaN(t)?null:t},_t=(e,t,r)=>{if(e.kind==="version"&&t.kind==="version")return e.semver.major!==t.semver.major?e.semver.major-t.semver.major:e.semver.minor!==t.semver.minor?e.semver.minor-t.semver.minor:e.semver.patch-t.semver.patch;if(e.kind==="version")return-1;if(t.kind==="version")return 1;let n=Ee(r?.a),o=Ee(r?.b);return n!==null&&o!==null&&n!==o?n-o:e.name<t.name?-1:e.name>t.name?1:0};var $e=async e=>{let t=await g({cwd:e})`git worktree list --porcelain`,r=[],n=null;for(let o of t.stdout.split(`
+`)){if(o.startsWith("worktree ")){n&&r.push(n),n={path:o.slice(9),branch:null,detached:!1,bare:!1,prunable:!1,locked:!1};continue}n&&(o.startsWith("branch ")?n.branch=o.slice(7).replace(/^refs\/heads\//,""):o==="detached"?n.detached=!0:o==="bare"?n.bare=!0:o==="locked"||o.startsWith("locked ")?n.locked=!0:(o==="prunable"||o.startsWith("prunable "))&&(n.prunable=!0))}return n&&r.push(n),r},Kt=async e=>{let t=await $e(Ce.cwd()),r=n=>e==="release"?Q(n):n.startsWith("feature/");return t.map(n=>n.branch).filter(n=>n!==null&&r(n))},Ft=e=>{let t=E(e);return t&&/not a git repository/i.test(t)?"not a git repository":void 0},Dt=({hasStderr:e})=>{if(b())return"infra-kit resolves its project from the working directory; run it from inside an infra-kit project repo (or one of its git worktrees), or pass `-C <dir>` naming one";let t="run infra-kit from inside an infra-kit project repo (or one of its git worktrees)";return e?`${t}; if you are already in one, the stderr in this message is the real cause`:t},S=async()=>{try{return(await g({quiet:!0})`git rev-parse --show-toplevel`).stdout.trim()}catch(e){let t=Ft(e)??E(e);throw new d(e,{operation:`resolve the project root from ${Ce.cwd()}`,stderrExcerpt:t,remediation:Dt({hasStderr:t!==void 0})})}},ee=async e=>{let t=e??await S(),r=(await g({cwd:t,quiet:!0})`git rev-parse --git-common-dir`).stdout.trim(),n=x.resolve(t,r);return n.includes(`${x.sep}.git${x.sep}modules${x.sep}`)?t:x.dirname(n)},je=async()=>(await g`git rev-parse --abbrev-ref HEAD`).stdout.trim(),Ie=async()=>(await g`git status --porcelain`).stdout.split(`
+`).map(t=>t.trimEnd()).filter(t=>t.trim().length>0),Wt=async()=>(await Ie()).length===0,Vt=async()=>{let e=await S(),[t,r]=await Promise.all([g({cwd:e})`git rev-parse --absolute-git-dir`,g({cwd:e})`git rev-parse --git-common-dir`]),n=t.stdout.trim(),o=x.resolve(e,r.stdout.trim());return n!==o};var Gt=async e=>(await g`git branch --list ${e}`).stdout.trim().length>0,qt=async e=>{(await g`git branch --list ${e}`).stdout.trim().length!==0&&await je()!==e&&await g`git branch -D ${e}`},Jt=async e=>{(await g`git ls-remote --heads origin ${e}`).stdout.trim().length!==0&&await g`git push origin --delete ${e}`};import{$ as A}from"zx";var Bt=async(e,t)=>{let r=`${t}^{commit}`;try{return(await A({cwd:e,quiet:!0})`git rev-parse --verify --quiet ${r}`).stdout.trim()||null}catch{return null}},Ht=async(e,t,r)=>{try{return await A({cwd:e,quiet:!0})`git merge-base --is-ancestor ${t} ${r}`,!0}catch(n){if(n.exitCode===1)return!1;throw new d(n,{operation:`test whether ${t} is contained in ${r}`,remediation:"both refs must exist \u2014 verify them with rev-parse first"})}},zt=async(e,t)=>{let n=(await A({cwd:e,quiet:!0})`git ls-remote --heads origin ${t}`).stdout.trim().split(`
+`)[0];return n?n.split(/\s+/)[0]??null:null},Ut=async(e,t)=>{let r=t.map(n=>`${n.sha}:refs/heads/${n.branch}`);if(r.length===0)return{refspecs:r,pushed:!1};try{return await A({cwd:e,quiet:!0})`git push --atomic origin ${r}`,{refspecs:r,pushed:!0}}catch(n){return{refspecs:r,pushed:!1,stderr:n.stderr}}};import N from"node:path";import te from"node:process";import{$ as f}from"zx";var Oe=async e=>{let t=e??te.cwd(),r=(await f({cwd:t,quiet:!0})`git rev-parse --git-common-dir`).stdout.trim(),n=N.dirname(N.resolve(t,r)),o=te.env.INFRA_KIT_SESSION||String(te.pid);return N.join(`${n}${q}`,J.mergeDev,`.scratch-${o}`)},Pe=e=>e.replace(/[^\w-]+/g,"-"),Xt=(e,t)=>N.join(`${e}${q}`,J.mergeDev,Pe(t)),re=async e=>{try{return await f({cwd:e,quiet:!0})`git rev-parse -q --verify MERGE_HEAD`,!0}catch{return!1}},Yt=async e=>{if(await re(e))throw new d(void 0,{operation:"reuse the scratch worktree",stderrExcerpt:"a merge is still in progress in the scratch worktree",remediation:"this is an infra-kit bug \u2014 the previous branch iteration did not clean up"});let t=(await f({cwd:e,quiet:!0})`git status --porcelain`).stdout.trim();if(t.length>0)throw new d(void 0,{operation:"reuse the scratch worktree",stderrExcerpt:`scratch worktree is dirty: ${t.split(`
+`)[0]}`,remediation:"this is an infra-kit bug \u2014 the previous branch iteration did not clean up"})},Zt=async e=>{let t=async r=>{try{await r()}catch{}};await re(e)&&await t(()=>f({cwd:e,quiet:!0})`git merge --abort`),await t(()=>f({cwd:e,quiet:!0})`git reset --hard`),await t(()=>f({cwd:e,quiet:!0})`git clean -fdx -e node_modules`)},Qt=async(e,t)=>{let{cwd:r,anchor:n}=e,o=await Oe(r),s=async()=>{await f({cwd:r,quiet:!0})`git worktree add --detach ${o} ${n}`};try{await s()}catch(c){try{await f({cwd:r,quiet:!0})`git worktree prune`,await s()}catch{throw new d(c,{operation:"create the scratch worktree for the merge",remediation:`remove any stale checkout at ${o}, then retry`})}}let a={path:o,remove:async()=>{try{await f({cwd:r,quiet:!0})`git worktree remove --force ${o}`}catch{}}};try{return await t(a)}finally{await a.remove()}};import ge from"node:fs/promises";import Qe from"node:os";import j from"node:path";import pr from"node:process";import{z as i}from"zod";var ne=e=>{throw new Error(`Unexpected value: ${JSON.stringify(e)}`)};var Te=(e,t)=>Object.fromEntries(Object.entries(e).filter(([r])=>r!==t));var p=({key:e,id:t,note:r})=>({kind:"drop",id:t,note:r,apply:n=>e in n?{changed:!0,result:Te(n,e)}:{changed:!1,result:n}});var Ae=p({key:"dev",id:"drop-dev-key",note:'the unused "dev" key (a dev server port comes from <APP>_PORT / PORT, else the built-in default)'});var Ne=p({key:"devServersPresets",id:"drop-dev-presets-key",note:'the unused "devServersPresets" key (run `infra-kit dev <app>` instead of a preset name)'});var Le=p({key:"devProxy",id:"drop-dev-proxy-key",note:'the retired "devProxy" key (dev URLs are port-free https://<release>.<package>.localhost)'});var _e=p({key:"envAutoLoad",id:"drop-env-auto-load-key",note:'the retired "envAutoLoad" key (env auto-load is gone \u2014 run `env-load -c <config>` in the terminal)'});var Ke=p({key:"environments",id:"drop-environments-key",note:`the retired "environments" key (deploy targets now come from each workflow's workflow_dispatch options, auth from the token store)`});var Fe=p({key:"ide",id:"drop-ide-key",note:'the unused "ide" key (worktrees add/remove no longer edit a Cursor .code-workspace)'});var De=p({key:"taskManager",id:"drop-task-manager-key",note:'the unused "taskManager" key (Jira is configured by the JIRA_BASE_URL / JIRA_PROJECT_ID env vars in Doppler)'});var L=[Fe,Ke,Le,_e,De,Ne,Ae],er=Math.max(1,...L.flatMap(e=>e.kind==="drop"?[]:[e.toVersion]));var C=e=>L.reduce((t,r)=>{let n=r.apply(t.result);return n.changed?{changed:!0,result:n.result,notes:[...t.notes,r.note]}:t},{changed:!1,result:e,notes:[]});var We={withheld:!1},oe=()=>We.withheld||z();import{randomBytes as sr}from"node:crypto";import h from"node:fs/promises";import le from"node:path";import ar from"node:process";import{isDeepStrictEqual as Ve}from"node:util";var tr=/\s/u,R=(e,t)=>{let r=t;for(;r<e.length&&tr.test(e[r]);)r+=1;return r},ie=(e,t)=>{let r=t+1;for(;r<e.length&&e[r]!=='"';)r+=e[r]==="\\"?2:1;return r+1},rr=(e,t)=>{if(e[t]==='"')return ie(e,t);if(e[t]!=="{"&&e[t]!=="["){let o=t;for(;o<e.length&&!/[\s,}\]]/u.test(e[o]);)o+=1;return o}let r=0,n=t;for(;n<e.length;){let o=e[n];if(o==='"'){n=ie(e,n);continue}if((o==="{"||o==="[")&&(r+=1),(o==="}"||o==="]")&&(r-=1),n+=1,r===0)return n}return n},Ge=(e,t)=>{if(e[t]!=="{")return null;let r=[],n=R(e,t+1);for(;n<e.length&&e[n]!=="}";){if(e[n]!=='"')return null;let o=ie(e,n),s=JSON.parse(e.slice(n,o)),a=R(e,R(e,o)+1),c=rr(e,a);r.push({key:s,keyStart:n,valueStart:a,valueEnd:c}),n=R(e,c),e[n]===","&&(n=R(e,n+1))}return e[n]==="}"?{open:t,close:n,members:r}:null},_=e=>Ge(e,R(e,0)),ce=e=>e.includes(`\r
+`)?`\r
+`:`
+`,se=(e,t,r,n)=>{let o=JSON.stringify(t,null,r).split(`
+`).join(`${n}${r}`);return`${r}${JSON.stringify(e)}: ${o}`},qe=(e,t)=>/[\r\n]/u.test(e.slice(t.open,t.close)),Je=(e,t,r)=>{let n=_(e);if(n===null||t.length===0)return n===null?null:e;let o=ce(e);if(n.members.length===0){let a=t.map(([c,u])=>se(c,u,r,o)).join(`,${o}`);return`${e.slice(0,n.open)}{${o}${a}${o}}${e.slice(n.close+1)}`}let s=qe(e,n)?t.map(([a,c])=>`${o}${se(a,c,r,o)},`).join(""):t.map(([a,c])=>`${JSON.stringify(a)}: ${JSON.stringify(c)}, `).join("");return`${e.slice(0,n.open+1)}${s}${e.slice(n.open+1)}`},Be=(e,t,r)=>{let n=_(e);if(n===null||t.length===0)return n===null?null:e;let o=n.members.at(-1);if(o===void 0)return Je(e,t,r);let s=ce(e),a=qe(e,n)?t.map(([c,u])=>`,${s}${se(c,u,r,s)}`).join(""):t.map(([c,u])=>`, ${JSON.stringify(c)}: ${JSON.stringify(u)}`).join("");return`${e.slice(0,o.valueEnd)}${a}${e.slice(o.valueEnd)}`},nr=(e,t,r)=>{let n=_(e)?.members.find(o=>o.key===t);return n===void 0?null:`${e.slice(0,n.valueStart)}${JSON.stringify(r)}${e.slice(n.valueEnd)}`},ae=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),or=(e,t)=>{let r=e.lastIndexOf(`
+`,t-1)+1;return/^[ \t]*/u.exec(e.slice(r))[0]},ir=(e,t)=>{let{members:r}=e,n=[],o=0;for(;o<r.length;){if(!t.has(o)){o+=1;continue}let s=o;for(;t.has(s+1);)s+=1;let a=r[s+1];a!==void 0?n.push({start:r[o].keyStart,end:a.keyStart,text:""}):o>0?n.push({start:r[o-1].valueEnd,end:r[s].valueEnd,text:""}):n.push({start:e.open+1,end:e.close,text:""}),o=s+1}return n},He=(e,t,r,n,o)=>{let s=new Set,a=[];for(let[c,u]of t.members.entries()){if(!(u.key in n)){s.add(c);continue}let m=r[u.key],l=n[u.key];if(Ve(m,l))continue;let w=ae(m)&&ae(l)?Ge(e,u.valueStart):null;if(w!==null){let he=He(e,w,m,l,o);if(he===null)return null;a.push(...he);continue}let I=JSON.stringify(l,null,o).split(`
+`).join(`${ce(e)}${or(e,u.keyStart)}`);a.push({start:u.valueStart,end:u.valueEnd,text:I})}return a.concat(ir(t,s))},ue=(e,t,r)=>{let n=_(e),o=n===null?null:JSON.parse(e);if(n===null||!ae(o))return null;let s=He(e,n,o,t,r);if(s===null)return null;let a=[...s].sort((m,l)=>l.start-m.start).reduce((m,l)=>`${m.slice(0,l.start)}${l.text}${m.slice(l.end)}`,e),c=Object.entries(t).filter(([m])=>!(m in o)),u=Be(a,c,r);if(u===null)return null;try{return Ve(JSON.parse(u),t)?u:null}catch{return null}};var K=class extends Error{constructor(t){super(`${t} changed on disk since it was read`),this.name="ConfigFileChangedError"}},F=class extends Error{constructor(t){super(`${t} could not be migrated without reformatting it \u2014 remove the retired key by hand`),this.name="ConfigTextEditError"}},cr=2,ze=e=>/^([ \t]+)\S/m.exec(e)?.[1]??" ".repeat(cr),ur=4095,D=async({path:e,raw:t,migrated:r,expectedMtimeMs:n})=>{let o=ue(t,r,ze(t));if(o===null)throw new F(e);await Ue({path:e,content:o,expectedMtimeMs:n})},Ue=async({path:e,content:t,expectedMtimeMs:r})=>{let n=await h.realpath(e),o=le.dirname(n),s=le.basename(n),a=le.join(o,`.${s}.${ar.pid}.${sr(4).toString("hex")}.tmp`);try{await h.writeFile(a,t,"utf8");let c=await h.stat(n);if(c.mtimeMs!==r)throw new K(e);await h.chmod(a,c.mode&ur),await h.rename(a,n)}catch(c){throw await h.rm(a,{force:!0}),c}},lr=e=>e!==null&&typeof e=="object"&&!Array.isArray(e),mr=async e=>{let t=await h.stat(e),r=await h.readFile(e,"utf8");if(r.trim()==="")return{changed:!1,result:{},notes:[],path:e};let n=JSON.parse(r);if(!lr(n))return{changed:!1,result:{},notes:[],path:e};let o=C(n);return o.changed&&await D({path:e,raw:r,migrated:o.result,expectedMtimeMs:t.mtimeMs}),{...o,path:e}};var me=async(e,t,r,{schema:n})=>{if(e.autoMigrate==="off")return{kind:"not-applicable"};let o=C(t);if(!o.changed)return{kind:"not-applicable"};let s=n.safeParse(o.result);if(!s.success)return{kind:"not-applicable"};if(e.required&&oe())return{kind:"ci-gated"};try{await D({path:e.path,raw:r,migrated:o.result,expectedMtimeMs:e.mtimeMs})}catch(a){return B.debug(a,`auto-migration could not rewrite ${e.path}`),{kind:"not-applicable"}}return B.warn(`Migrated ${U(e.path)}: removed ${o.notes.join(" and ")} (retired by infra-kit ${ye.version})`),{kind:"migrated",data:s.data}};var Xe="infra-kit.json";var dr="infra-kit.json",gr="projects",fr=i.object({provider:i.literal("doppler"),config:i.object({name:i.string().min(1)})}),hr=i.discriminatedUnion("provider",[fr]),yr=["two-columns","three-pane"],kr=i.object({layout:i.enum(yr).optional()}).strict(),vr=i.object({openInGithubDesktop:i.boolean().optional(),openInOrca:i.boolean().optional(),orca:kr.optional()}).strict(),wr=i.enum(["disallow","allow","cli-only"]),Ye=i.string().regex(/^[A-Z_]\w*$/i,"must be a POSIX environment-variable name"),br=i.object({command:i.string().min(1),args:i.array(i.string()).default([]),env:i.array(Ye).min(1),unset:i.array(Ye).default([])}).strict().superRefine((e,t)=>{for(let r of e.env)ke.has(r)&&t.addIssue({code:"custom",path:["env"],message:`"${r}" is process plumbing the proxy never strips or injects \u2014 it cannot be a credential name`})}),xr=i.record(i.string().regex(/^[a-z][a-z0-9-]*$/,"must be lowercase letters, digits and hyphens, starting with a letter").refine(e=>!e.includes("infra-kit"),{message:'"infra-kit" is reserved: it is the .mcp.json key of the retired infra-kit MCP server \u2014 pick another name'}),br),Ze=i.string().min(1).superRefine((e,t)=>{if(e.startsWith("/")||e.startsWith("\\")||/^[a-z]:/i.test(e)){t.addIssue({code:"custom",message:`"${e}" must be relative to the repository root`});return}let r=e.split(/[/\\]/).filter(o=>o!==""&&o!==".");r.includes("..")&&t.addIssue({code:"custom",message:`"${e}" must not contain a ".." segment`}),r[0]===".git"&&t.addIssue({code:"custom",message:`"${e}" must not be .git or a path inside it`}),e.includes("\\")&&t.addIssue({code:"custom",message:`"${e}" must use "/" as the separator, not "\\"`});let n=e.split("/");n.includes("")&&t.addIssue({code:"custom",message:`"${e}" must not have a trailing or doubled "/"`}),n.includes(".")&&t.addIssue({code:"custom",message:`"${e}" must not contain a "." segment; write it from the repository root, e.g. "vendor/configs"`})}),et=i.string().regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/,'must be kebab-case: a-z, 0-9 and inner "-"'),Rr=i.object({path:Ze,target:Ze.optional(),module:et.optional()}).strict(),tt=i.object({copy:i.array(Rr).min(1),exclude:i.array(i.string().regex(/^[^/\\]+$/,'must be a single path segment, without "/"')).optional()}).strict(),rt=i.object({modules:i.array(et)}).strict(),Er=i.object({requiredScripts:i.array(i.string().min(1)).optional(),requiredFiles:i.array(i.string().min(1)).optional(),turbo:i.object({requiredTasks:i.array(i.string().min(1)).optional()}).strict().optional(),exclude:i.array(i.string().min(1)).optional()}).strict(),Mr=i.string().regex(/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/,'must be a DNS label: a-z, 0-9 and inner "-", at most 63 characters'),Sr=i.string().min(1),Cr=i.enum(["dev","main"]),V=1,nt="dist/infra-kit.schema.json",$r=e=>`https://unpkg.com/infra-kit@${e}/${nt}`,fe=i.object({$schema:i.string().optional(),configVersion:i.number().int().positive().optional(),envManagement:hr,defaultEnv:Sr.optional(),worktrees:vr.optional(),protectedEnvs:wr.optional(),gitFlow:Cr.optional(),mcp:xr.optional(),vendorSource:tt.nullable().optional(),vendorTarget:rt.optional(),audit:Er.optional(),aliasRepo:Mr.optional()}).strict(),jr=443,ot=fe,de=fe.partial(),it="two-columns",Ir=e=>e.worktrees?.orca?.layout??it,y=null,$=null,st=()=>`${pr.cwd()} ${Qe.homedir()}`,at=()=>j.join(Qe.homedir(),G),ct=()=>j.join(at(),dr),ut=async()=>{let e=st();if($&&$.key===e)return $.value;let t=await S(),r=await ee(t),n=j.basename(r),o={main:j.join(t,Xe),userGlobal:ct(),userProject:j.join(at(),gr,n,Xe),projectName:n};return $={key:e,value:o},o},Or=async(e={})=>{let t=e.autoMigrate??"write",r=st(),n=await ut(),o;try{o=await ge.stat(n.main)}catch{y=null;let w=n.main.replace(/\.json$/,".yml");throw await pe(w)?new Error(`infra-kit.json not found at ${n.main}. A legacy infra-kit.yml exists \u2014 run \`infra-kit setup --skip-tools\` to convert it.`):new Error(b()?`infra-kit.json not found at ${n.main} \u2014 the working directory is not an infra-kit project. Run infra-kit from inside an infra-kit project repo, or pass \`-C <dir>\` naming one.`:`infra-kit.json not found at ${n.main} \u2014 this git repo is not an infra-kit project. Run \`infra-kit setup --skip-tools\` here to create it, cd into an infra-kit project repo, or check out a branch that has infra-kit.json.`)}let[s,a]=await Promise.all([pe(n.userGlobal),pe(n.userProject)]),c={main:Number(o.mtimeMs),userGlobal:s?Number(s.mtimeMs):null,userProject:a?Number(a.mtimeMs):null};if(y&&y.key===r&&Nr(y.mtimes,c))return y.value;let u=[{label:"infra-kit.json",path:n.main,required:!0,autoMigrate:t,mtimeMs:c.main},{label:"~/.infra-kit/infra-kit.json",path:n.userGlobal,required:!1,autoMigrate:t,mtimeMs:c.userGlobal},{label:`~/.infra-kit/projects/${n.projectName}/infra-kit.json`,path:n.userProject,required:!1,autoMigrate:t,mtimeMs:c.userProject}],m={};for(let w of u){let I=await Lr(w);I!==null&&(m={...m,...I})}let l=ot.safeParse(m);if(!l.success)throw new Error(`Invalid merged infra-kit config: ${i.prettifyError(l.error)}`);return y={key:r,mtimes:c,value:l.data},l.data},Pr=()=>{y=null},Tr=()=>{y=null,$=null},pe=async e=>{try{return await ge.stat(e)}catch{return null}},Ar=async e=>{try{return await ge.readFile(e,"utf-8")}catch{return null}},Nr=(e,t)=>{let r=Object.keys(e);return r.length!==Object.keys(t).length?!1:r.every(n=>e[n]===t[n])},lt=e=>new Error(`${e.message}
+A retired key on this branch \u2014 run \`infra-kit setup --skip-tools\` in this checkout and commit infra-kit.json.`),Lr=async e=>{let t=await Ar(e.path);if(t===null){if(e.required)throw new Error(`${e.label} not found at ${e.path}`);return null}let r;try{r=t.trim()===""?{}:JSON.parse(t)}catch(a){throw new Error(`Invalid JSON in ${e.label} at ${e.path}: ${a.message}`)}if(W(r)&&"envTokens"in r)throw new Error(Hr(e));!e.required&&W(r)&&Br(e,r),e.required&&W(r)&&Jr(r,e.path);let n=de.safeParse(r);if(n.success)return n.data;let o=new Error(`Invalid ${e.label} at ${e.path}: ${i.prettifyError(n.error)}`);if(!W(r)||e.mtimeMs===null)throw o;let s=await me({...e,mtimeMs:e.mtimeMs},r,t,{schema:de});switch(s.kind){case"migrated":return s.data;case"ci-gated":throw lt(o);case"not-applicable":throw o;default:return ne(s)}},_r=e=>[`"mcp" is not allowed in ${e.label} (${e.path}): it feeds the committed .mcp.json, so a per-machine copy would replace the project's servers for everyone.`,"Move the block to the project infra-kit.json and run `infra-kit setup`.","For a machine-only override of one server (e.g. a local fork), use Claude Code directly:","  claude mcp add --scope local <name> -- ik-mcp --name <name> --env <VAR> ... -- <command> <args>","(local scope shadows the project entry by name; `claude mcp list` will show a same-name conflict warning, which is expected)."].join(`
+`),Kr=e=>[`"vendorSource" is not allowed in ${e.label} (${e.path}): only the committed project file may mark a repository as the \`vendor sync\` source. In the machine-wide file it would make every repository on this machine a source; in a per-project override it would make this machine disagree with every other clone.`,"Move the block to the source repository's own infra-kit.json and commit it there."].join(`
+`),Fr=e=>[`"vendorTarget" is not allowed in ${e.label} (${e.path}): \`vendor sync\` reads it from the target repository's committed infra-kit.json only, so a per-machine copy would never be seen and would only make this clone disagree with the others.`,"Move the block to the target repository's own infra-kit.json and commit it there."].join(`
+`),Dr=e=>[`"audit" is not allowed in ${e.label} (${e.path}): the root audit gates CI, so a per-machine copy would make this machine pass or fail a different check list than CI.`,"Move the block to the project infra-kit.json and commit it there."].join(`
+`),Wr=e=>`"configVersion" is not allowed in ${e.label} (${e.path}): it versions the committed project file's shape, so a per-machine copy would describe nothing. Remove it from this file.`,Vr=e=>[`"aliasRepo" is not allowed in ${e.label} (${e.path}): the vite and Playwright helpers read it from the project infra-kit.json only, so a per-machine copy would register a dev host they never aim at.`,"Move it to the project infra-kit.json and commit it there."].join(`
+`),Gr=e=>[`"gitFlow" is not allowed in ${e.label} (${e.path}): it decides which branch every teammate's releases are cut from and delivered through, so a per-machine copy would ship this clone's releases down a different branch than everyone else's.`,"Move it to the project infra-kit.json and commit it there."].join(`
+`),qr={aliasRepo:Vr,configVersion:Wr,gitFlow:Gr,mcp:_r,vendorSource:Kr,vendorTarget:Fr,audit:Dr},Jr=(e,t)=>{let{configVersion:r}=e;if(!(typeof r!="number"||r<=V))throw new P({status:"refused",reason:"config-version-unsupported",configVersion:r,supportedConfigVersion:V,agentMode:O.source},2,{operation:"load infra-kit.json",remediation:"update the infra-kit CLI: `pnpm add -g infra-kit@<version>` with the version `pnpm view infra-kit version` prints, then re-run",stderrExcerpt:`${t} declares configVersion ${r}; this CLI reads up to ${V}`})},Br=(e,t)=>{for(let[r,n]of Object.entries(qr))if(r in t)throw new Error(n(e))},W=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),Hr=e=>[`Refusing to load ${e.label} \u2014 \`envTokens\` is not a config key.`,"A service token in a config file can be committed, backed up by your editor, or shared.","  1. REVOKE the token in Doppler now \u2014 treat it as compromised.",`  2. Remove the \`envTokens\` key from ${e.path}.`,"  3. Re-add it privately: `infra-kit env-token-set <env>`","     (it is written to ~/.infra-kit/projects/<repo>/tokens.json, mode 0600, never to the repo)."].join(`
+`);export{M as a,wt as b,be as c,O as d,b as e,xt as f,Rt as g,ne as h,B as i,St as j,U as k,We as l,Je as m,Be as n,nr as o,K as p,ze as q,Ue as r,mr as s,E as t,d as u,P as v,k as w,Y as x,Z as y,Ot as z,Pt as A,Tt as B,At as C,Nt as D,Lt as E,Q as F,_t as G,$e as H,Kt as I,S as J,ee as K,je as L,Ie as M,Wt as N,Vt as O,Gt as P,qt as Q,Jt as R,Bt as S,Ht as T,zt as U,Ut as V,Pe as W,Xt as X,re as Y,Yt as Z,Zt as _,Qt as $,tt as aa,rt as ba,V as ca,$r as da,fe as ea,jr as fa,ot as ga,de as ha,Ir as ia,ct as ja,ut as ka,Or as la,Pr as ma,Tr as na};
+//# sourceMappingURL=chunk-WJLO37NG.js.map