infra-kit 0.5.0 → 0.5.1

package/dist/{chunk-7POMR4QK.js → chunk-XJOY7J3G.js}

@@ -1,2 +1,2 @@
 var r=t=>Object.fromEntries(Object.entries(t).filter(([e])=>!e.startsWith("npm_")&&e!=="PNPM_SCRIPT_SRC_DIR")),o=/^npm_config_(?:prefix|registry)$/i,a=t=>{let e=r(t);for(let[n,s]of Object.entries(t))o.test(n)&&(e[n]=s);return e};export{r as a,a as b};
-//# sourceMappingURL=chunk-7POMR4QK.js.map
+//# sourceMappingURL=chunk-XJOY7J3G.js.map

package/dist/chunk-XJOY7J3G.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/lib/pm-env/pm-env.ts"],
+  "sourcesContent": ["/**\n * `env` minus every package-manager marker a spawned child could mistake for a throwaway install:\n * the whole `npm_*` block plus `PNPM_SCRIPT_SRC_DIR`. The result makes the child look exactly like\n * a direct `node <pkg>/dist/cli.js` run \u2014 which it is.\n */\n// Any child we launch through `node <bin>` (the portless driver, the update worker, the mcp launcher)\n// inherits our env, and a tool that sniffs those markers will conclude it was run via `npx`/`pnpm\n// dlx` and refuse to work. portless is the motivating case; its guard (cli.js `main()`) is:\n//\n//     isNpx     = npm_command === 'exec' && !npm_lifecycle_event\n//     isPnpmDlx = !!PNPM_SCRIPT_SRC_DIR  && !npm_lifecycle_event\n//     if ((isNpx || isPnpmDlx) && !isLocallyInstalled()) -> abort\n//\n// `isLocallyInstalled()` walks up from the CHILD's cwd, so in a consumer repo (where portless is a\n// transitive dep of infra-kit, absent from the root `node_modules`) it is false and the guard is\n// live. `pnpm exec infra-kit dev` exports `npm_command=exec` with no lifecycle event, so `isNpx`\n// holds, every portless call exits 1, `isAvailable()` is false, and `ensureProxy` aborts the whole\n// dev boot with \"portless is not installed\", on a machine where it plainly is.\n//\n// `PNPM_SCRIPT_SRC_DIR` must be dropped ALONGSIDE the `npm_*` block, not left behind: it is set by\n// `pnpm run <script>`, where `npm_lifecycle_event` is what suppresses `isPnpmDlx`. Stripping only\n// `npm_*` removes that suppressor and creates an abort for the script-style invocation that\n// previously worked. Both markers go, or neither is safe.\nexport const withoutPackageManagerEnv = (env: NodeJS.ProcessEnv): NodeJS.ProcessEnv => {\n  return Object.fromEntries(\n    Object.entries(env).filter(([key]) => {\n      return !key.startsWith('npm_') && key !== 'PNPM_SCRIPT_SRC_DIR'\n    }),\n  )\n}\n\n/**\n * npm's own configuration \u2014 as opposed to the npx/dlx *markers* above. Case-insensitive because npm reads\n * `npm_config_*` case-insensitively (its parser matches `/^npm_config_/i`) and real environments export\n * both forms: shells write the lowercase name, Dockerfiles and CI images overwhelmingly write the\n * uppercase one.\n */\nconst NPM_CONFIG_TO_PRESERVE = /^npm_config_(?:prefix|registry)$/i\n\n/**\n * The env for spawning a package-manager INSTALL: npx/dlx markers stripped, but npm's own config\n * kept \u2014 specifically `npm_config_prefix` and `npm_config_registry`.\n *\n * @example\n * packageManagerInstallEnv({ npm_command: 'exec', npm_config_prefix: '/p', PATH: '/bin' })\n * // => { npm_config_prefix: '/p', PATH: '/bin' }\n */\n// `withoutPackageManagerEnv` is deliberately a blunt `npm_*` prefix filter, and it is the\n// right tool for the portless driver \u2014 but it is the WRONG tool for spawning an install, because it\n// also drops the two variables that tell the package manager where, and from where, to install:\n//\n//   - `npm_config_prefix` is the npm matcher's ONLY signal (see `install-manager.ts`). Strip it and\n//     we detect a global install rooted at prefix P, then run the install with P erased \u2014 so it\n//     lands in the DEFAULT prefix instead. That is either a permanent EACCES, or a second global\n//     copy that is not the one on PATH. Nothing notices: the install exits 0, we report\n//     `installed`, the version on PATH never moves, and the whole cycle repeats every window\n//     forever. `export npm_config_prefix=~/.npm-global` is npm's own documented EACCES workaround,\n//     so this is a mainstream layout, not an exotic one.\n//   - `npm_config_registry` is what the update CHECK already used to pick a registry. Dropping it\n//     here means we decide against a corporate mirror and then install from somewhere else.\n//\n// Preserving these cannot re-arm the dlx guard: that guard reads `npm_command`,\n// `npm_lifecycle_event` and `PNPM_SCRIPT_SRC_DIR` \u2014 none of which are npm config, and all of which\n// remain stripped.\nexport const packageManagerInstallEnv = (env: NodeJS.ProcessEnv): NodeJS.ProcessEnv => {\n  const sanitised = withoutPackageManagerEnv(env)\n\n  for (const [key, value] of Object.entries(env)) {\n    if (NPM_CONFIG_TO_PRESERVE.test(key)) sanitised[key] = value\n  }\n\n  return sanitised\n}\n"],
+  "mappings": "AAuBO,IAAMA,EAA4BC,GAChC,OAAO,YACZ,OAAO,QAAQA,CAAG,EAAE,OAAO,CAAC,CAACC,CAAG,IACvB,CAACA,EAAI,WAAW,MAAM,GAAKA,IAAQ,qBAC3C,CACH,EASIC,EAAyB,oCA2BlBC,EAA4BH,GAA8C,CACrF,IAAMI,EAAYL,EAAyBC,CAAG,EAE9C,OAAW,CAACC,EAAKI,CAAK,IAAK,OAAO,QAAQL,CAAG,EACvCE,EAAuB,KAAKD,CAAG,IAAGG,EAAUH,CAAG,EAAII,GAGzD,OAAOD,CACT",
+  "names": ["withoutPackageManagerEnv", "env", "key", "NPM_CONFIG_TO_PRESERVE", "packageManagerInstallEnv", "sanitised", "value"]
+}

package/dist/{chunk-4ZE5XSVW.js → chunk-Y3FV2BRI.js}

@@ -1,2 +1,2 @@
-import{b as k,g as w,i as P,j as b}from"./chunk-5OHTHRS7.js";import{b as y}from"./chunk-7POMR4QK.js";import{m as p,q as C}from"./chunk-D4UYDBN5.js";import{spawnSync as Z}from"node:child_process";import{homedir as ee}from"node:os";import h from"node:process";import l from"node:fs";import S from"node:path";import O from"node:process";var V="update-check.lock",j=1800*1e3,D=()=>S.join(p(),V),q=(t,e)=>{try{e-l.statSync(t).mtimeMs>j&&l.rmSync(t,{force:!0})}catch{}},E=(t={})=>{let e=t.nowMs??Date.now(),n=t.lockPath??D();try{l.mkdirSync(S.dirname(n),{recursive:!0})}catch{return null}let r=()=>{try{return l.openSync(n,"wx",384)}catch{return null}},o=r();if(o===null&&(q(n,e),o=r()),o===null)return null;try{l.writeFileSync(o,String(O.pid))}catch{}return()=>{try{l.closeSync(o)}catch{}try{l.rmSync(n,{force:!0})}catch{}}};var J="https://registry.npmjs.org",$=5e3,z=t=>Object.entries(t).find(([n,r])=>/^npm_config_registry$/i.test(n)&&r!=null&&r!=="")?.[1],G=t=>{let e=z(t),n=e!=null&&e!==""?e:J;for(;n.endsWith("/");)n=n.slice(0,-1);return n},U=async(t,e=fetch)=>{let n=new AbortController,r=setTimeout(()=>{n.abort()},$);try{let o=await e(`${G(t)}/${k}/latest`,{signal:n.signal,headers:{accept:"application/json"}});if(!o.ok)return null;let s=(await o.json())?.version;return typeof s=="string"&&s!==""?s:null}catch{return null}finally{clearTimeout(r)}};var H=/^(\d+)\.(\d+)\.(\d+)$/,v=t=>{let[e=""]=t.trim().split("+"),[n="",...r]=e.split("-"),o=H.exec(n);if(!o)return null;let[i,s,u]=[o[1],o[2],o[3]].map(Number);return{release:[i,s,u],prerelease:r.length>0?r.join("-").split("."):[]}},x=/^\d+$/,K=(t,e)=>{let n=x.test(t),r=x.test(e);return n&&r?Number(t)-Number(e):n!==r?n?-1:1:t<e?-1:1},W=(t,e)=>{for(let n=0;n<Math.max(t.length,e.length);n+=1){let r=t[n],o=e[n];if(r===void 0)return-1;if(o===void 0)return 1;if(r!==o)return K(r,o)}return 0},N=(t,e)=>{let n=v(t),r=v(e);if(!n||!r)return!1;for(let s=0;s<3;s+=1){let u=n.release[s],m=r.release[s];if(u!==m)return u>m}let o=n.prerelease.length===0,i=r.prerelease.length===0;return o!==i?o:W(n.prerelease,r.prerelease)>0};import L from"node:fs";import M from"node:path";var A="update-check.json",B=1200*1e3,Y=()=>M.join(p(),A),Q=t=>Array.isArray(t)&&t.every(e=>typeof e=="string"),X=t=>{if(typeof t!="object"||t===null)return!1;let{lastCheckMs:e,latestVersion:n,updateCommand:r,outcome:o}=t;return typeof e=="number"&&Number.isFinite(e)&&(n===null||typeof n=="string")&&(r===null||Q(r))&&(o==null||typeof o=="string")},ke=(t=e=>L.readFileSync(e,"utf8"))=>{try{let e=JSON.parse(t(Y()));return X(e)?e:null}catch{return null}},R=t=>{let e=p();L.mkdirSync(e,{recursive:!0}),C(M.join(e,A),JSON.stringify(t),384)},we=(t,e)=>{if(!t)return!0;let n=e-t.lastCheckMs;return n<0?!0:n>=B};var te=200,ne=300*1e3,re=t=>{try{return h.kill(t,0),!0}catch{return!1}},oe=t=>new Promise(e=>{setTimeout(e,t)}),se=async(t,e)=>{let n=e.clock()+ne;for(;e.clock()<n;){if(!e.isProcessAlive(t))return!0;await e.sleep(te)}return!e.isProcessAlive(t)},Ae=async(t,e)=>{let r=(e.acquireLock??E)();if(!r)return"already-running";try{return await ae(t,e)}finally{r()}},ae=async(t,e)=>{let n=e.env??h.env,r=e.nowMs??Date.now(),o=e.fetchLatest??U,i=e.writeCache??R,s=e.isProcessAlive??re,u=e.sleep??oe,m=e.clock??Date.now,_=e.lazyNpmRoot??P,I=e.spawnSync??Z,a=await o(n),c=(g,F)=>(i({lastCheckMs:r,...F,outcome:g}),g);if(a===null)return c("fetch-failed",{latestVersion:null,updateCommand:null});if(!N(a,t))return c("up-to-date",{latestVersion:a,updateCommand:null});let{canSelfSpawn:T,updateCommand:f}=w({selfRealPath:e.selfRealPath,env:n,realpath:b,lazyNpmRoot:_});if(!T)return c("cannot-self-spawn",{latestVersion:a,updateCommand:f});if(e.parentPid==null)return c("parent-unknown",{latestVersion:a,updateCommand:null});if(i({lastCheckMs:r,latestVersion:a,updateCommand:null,outcome:"installing"}),!await se(e.parentPid,{isProcessAlive:s,sleep:u,clock:m}))return c("parent-still-running",{latestVersion:a,updateCommand:null});let d=I(f[0],f.slice(1),{stdio:"ignore",shell:h.platform==="win32",cwd:ee(),env:y(n),windowsHide:!0});return d.error||d.signal||d.status!==0?c("install-failed",{latestVersion:a,updateCommand:f}):c("installed",{latestVersion:null,updateCommand:null})};export{N as a,ke as b,we as c,Ae as d};
-//# sourceMappingURL=chunk-4ZE5XSVW.js.map
+import{b as k,g as w,i as P,j as b}from"./chunk-6GWRKIZ7.js";import{b as y}from"./chunk-XJOY7J3G.js";import{m as p,q as C}from"./chunk-D4UYDBN5.js";import{spawnSync as Z}from"node:child_process";import{homedir as ee}from"node:os";import h from"node:process";import l from"node:fs";import S from"node:path";import O from"node:process";var V="update-check.lock",j=1800*1e3,D=()=>S.join(p(),V),q=(t,e)=>{try{e-l.statSync(t).mtimeMs>j&&l.rmSync(t,{force:!0})}catch{}},E=(t={})=>{let e=t.nowMs??Date.now(),n=t.lockPath??D();try{l.mkdirSync(S.dirname(n),{recursive:!0})}catch{return null}let r=()=>{try{return l.openSync(n,"wx",384)}catch{return null}},o=r();if(o===null&&(q(n,e),o=r()),o===null)return null;try{l.writeFileSync(o,String(O.pid))}catch{}return()=>{try{l.closeSync(o)}catch{}try{l.rmSync(n,{force:!0})}catch{}}};var J="https://registry.npmjs.org",$=5e3,z=t=>Object.entries(t).find(([n,r])=>/^npm_config_registry$/i.test(n)&&r!=null&&r!=="")?.[1],G=t=>{let e=z(t),n=e!=null&&e!==""?e:J;for(;n.endsWith("/");)n=n.slice(0,-1);return n},U=async(t,e=fetch)=>{let n=new AbortController,r=setTimeout(()=>{n.abort()},$);try{let o=await e(`${G(t)}/${k}/latest`,{signal:n.signal,headers:{accept:"application/json"}});if(!o.ok)return null;let s=(await o.json())?.version;return typeof s=="string"&&s!==""?s:null}catch{return null}finally{clearTimeout(r)}};var H=/^(\d+)\.(\d+)\.(\d+)$/,v=t=>{let[e=""]=t.trim().split("+"),[n="",...r]=e.split("-"),o=H.exec(n);if(!o)return null;let[i,s,u]=[o[1],o[2],o[3]].map(Number);return{release:[i,s,u],prerelease:r.length>0?r.join("-").split("."):[]}},x=/^\d+$/,K=(t,e)=>{let n=x.test(t),r=x.test(e);return n&&r?Number(t)-Number(e):n!==r?n?-1:1:t<e?-1:1},W=(t,e)=>{for(let n=0;n<Math.max(t.length,e.length);n+=1){let r=t[n],o=e[n];if(r===void 0)return-1;if(o===void 0)return 1;if(r!==o)return K(r,o)}return 0},N=(t,e)=>{let n=v(t),r=v(e);if(!n||!r)return!1;for(let s=0;s<3;s+=1){let u=n.release[s],m=r.release[s];if(u!==m)return u>m}let o=n.prerelease.length===0,i=r.prerelease.length===0;return o!==i?o:W(n.prerelease,r.prerelease)>0};import L from"node:fs";import M from"node:path";var A="update-check.json",B=1200*1e3,Y=()=>M.join(p(),A),Q=t=>Array.isArray(t)&&t.every(e=>typeof e=="string"),X=t=>{if(typeof t!="object"||t===null)return!1;let{lastCheckMs:e,latestVersion:n,updateCommand:r,outcome:o}=t;return typeof e=="number"&&Number.isFinite(e)&&(n===null||typeof n=="string")&&(r===null||Q(r))&&(o==null||typeof o=="string")},ke=(t=e=>L.readFileSync(e,"utf8"))=>{try{let e=JSON.parse(t(Y()));return X(e)?e:null}catch{return null}},R=t=>{let e=p();L.mkdirSync(e,{recursive:!0}),C(M.join(e,A),JSON.stringify(t),384)},we=(t,e)=>{if(!t)return!0;let n=e-t.lastCheckMs;return n<0?!0:n>=B};var te=200,ne=300*1e3,re=t=>{try{return h.kill(t,0),!0}catch{return!1}},oe=t=>new Promise(e=>{setTimeout(e,t)}),se=async(t,e)=>{let n=e.clock()+ne;for(;e.clock()<n;){if(!e.isProcessAlive(t))return!0;await e.sleep(te)}return!e.isProcessAlive(t)},Ae=async(t,e)=>{let r=(e.acquireLock??E)();if(!r)return"already-running";try{return await ae(t,e)}finally{r()}},ae=async(t,e)=>{let n=e.env??h.env,r=e.nowMs??Date.now(),o=e.fetchLatest??U,i=e.writeCache??R,s=e.isProcessAlive??re,u=e.sleep??oe,m=e.clock??Date.now,_=e.lazyNpmRoot??P,I=e.spawnSync??Z,a=await o(n),c=(g,F)=>(i({lastCheckMs:r,...F,outcome:g}),g);if(a===null)return c("fetch-failed",{latestVersion:null,updateCommand:null});if(!N(a,t))return c("up-to-date",{latestVersion:a,updateCommand:null});let{canSelfSpawn:T,updateCommand:f}=w({selfRealPath:e.selfRealPath,env:n,realpath:b,lazyNpmRoot:_});if(!T)return c("cannot-self-spawn",{latestVersion:a,updateCommand:f});if(e.parentPid==null)return c("parent-unknown",{latestVersion:a,updateCommand:null});if(i({lastCheckMs:r,latestVersion:a,updateCommand:null,outcome:"installing"}),!await se(e.parentPid,{isProcessAlive:s,sleep:u,clock:m}))return c("parent-still-running",{latestVersion:a,updateCommand:null});let d=I(f[0],f.slice(1),{stdio:"ignore",shell:h.platform==="win32",cwd:ee(),env:y(n),windowsHide:!0});return d.error||d.signal||d.status!==0?c("install-failed",{latestVersion:a,updateCommand:f}):c("installed",{latestVersion:null,updateCommand:null})};export{N as a,ke as b,we as c,Ae as d};
+//# sourceMappingURL=chunk-Y3FV2BRI.js.map

package/dist/cli.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
-import{$ as zt,A as bt,B as Et,C as Tt,D as oe,E as At,F as I,G as m,H as Dt,I as Lt,J as Nt,K as _t,L as Ot,M as $t,N as Mt,O as Ft,P as jt,Q as Ut,R as qt,S as Gt,T as Wt,U as Vt,V as re,W as Ht,X as Kt,Y as Jt,Z as Bt,_ as Yt,a as O,aa as Xt,b as We,ba as Qt,c as Ve,ca as Zt,da as eo,e as Je,ea as to,f as Be,g as ze,ga as oo,h as Xe,ha as ro,i as $,ia as no,j as at,k as U,l as dt,m as ut,n as mt,o as pt,p as ft,q as gt,r as ht,s as vt,t as te,u as yt,v as wt,w as St,x as kt,y as xt,z as Ct}from"./chunk-LXBIHXUR.js";import{y as ne}from"./chunk-DHYZ6MBU.js";import{a as ie,b as se,c as ae}from"./chunk-4ZE5XSVW.js";import{a as Ue,f as q,g as Rt,h as G,i as Pt,j as T}from"./chunk-5OHTHRS7.js";import{a as He,b as Ke}from"./chunk-7POMR4QK.js";import{a as It}from"./chunk-TVG47UHG.js";import{b as Ye,c as b,d as v,e as F,f as nt,g as it,h as st,i as P,k as j}from"./chunk-HXBIE4JP.js";import{L as l,a as Fe,ea as Z,fa as qe,ha as Ge,r as je}from"./chunk-Q4HKBLQG.js";import{a as M,b as Qe,d as Ze,f as et,g as tt,j as ee,k as ot,n as S,q as rt}from"./chunk-D4UYDBN5.js";import{a as ct,b as lt}from"./chunk-QWVLAZ6N.js";import Gn,{Separator as Jo}from"@inquirer/select";import{realpathSync as Wn}from"node:fs";import h from"node:process";import{fileURLToPath as Yo}from"node:url";var Xo=(e,t)=>{let o=e,r;for(let n of t){if(r=o.find(s=>s.name()===n),!r)return;o=r.commands}return r},io=e=>eo.flatMap(({key:t,label:o})=>oo(t).flatMap(r=>{let n=Xo(e,r.groupPath);return n?[{name:r.groupPath.join(" "),description:n.description(),group:o}]:[]}));import{Command as Nr}from"commander";import E from"node:process";import so from"node:process";import{$ as Qo}from"zx";var ce=async()=>{let e=await Z(),t=await Promise.all([{label:"project (committed)",path:e.main},{label:"user global",path:e.userGlobal},{label:"user project",path:e.userProject}].map(async a=>({...a,exists:await b(a.path)}))),o=t.at(-1)?.exists===!0,r=await St(e.userProject,o),n=o?kt(r):"";l.info(`Project name: ${e.projectName}
+import{$ as Kt,A as kt,B as Rt,C as Pt,D as te,E as xt,F as D,G as m,H as Ct,I as bt,J as At,K as Tt,L as Dt,M as It,N as Lt,O as _t,P as Nt,Q as Ot,R as Mt,S as Ft,T as $t,U as jt,V as oe,W as Ut,X as qt,Y as Gt,Z as Wt,_ as Vt,a as N,aa as Ht,b as Ue,ba as Jt,c as qe,ca as Bt,da as Yt,e as We,ea as zt,f as Ve,g as He,ga as Xt,h as Je,ha as Qt,i as O,ia as Zt,j as rt,k as j,l as st,m as at,n as ct,o as lt,p as dt,q as ut,r as mt,s as pt,t as ee,u as ft,v as gt,w as ht,x as vt,y as wt,z as St}from"./chunk-X2POR5VH.js";import{y as re}from"./chunk-Q23IJP6D.js";import{a as ne,b as ie,c as se}from"./chunk-Y3FV2BRI.js";import{a as Fe,f as yt,h as U,j as q}from"./chunk-6GWRKIZ7.js";import{a as Ge}from"./chunk-XJOY7J3G.js";import{a as Et}from"./chunk-TVG47UHG.js";import{b as Ke,c as E,d as h,e as F,f as et,g as tt,h as ot,i as P,k as $}from"./chunk-HXBIE4JP.js";import{L as l,a as Oe,ea as Q,fa as $e,ha as je,r as Me}from"./chunk-Q4HKBLQG.js";import{a as M,b as Be,d as Ye,f as ze,g as Xe,j as Z,k as Qe,n as w,q as Ze}from"./chunk-D4UYDBN5.js";import{a as nt,b as it}from"./chunk-QWVLAZ6N.js";import In,{Separator as Go}from"@inquirer/select";import{realpathSync as Ln}from"node:fs";import g from"node:process";import{fileURLToPath as Vo}from"node:url";var Ho=(e,t)=>{let o=e,r;for(let n of t){if(r=o.find(s=>s.name()===n),!r)return;o=r.commands}return r},eo=e=>Yt.flatMap(({key:t,label:o})=>Xt(t).flatMap(r=>{let n=Ho(e,r.groupPath);return n?[{name:r.groupPath.join(" "),description:n.description(),group:o}]:[]}));import{Command as Rr}from"commander";import b from"node:process";import to from"node:process";import{$ as Jo}from"zx";var ae=async()=>{let e=await Q(),t=await Promise.all([{label:"project (committed)",path:e.main},{label:"user global",path:e.userGlobal},{label:"user project",path:e.userProject}].map(async a=>({...a,exists:await E(a.path)}))),o=t.at(-1)?.exists===!0,r=await ht(e.userProject,o),n=o?vt(r):"";l.info(`Project name: ${e.projectName}
 `),l.info(`Config merge chain (later overrides earlier):
-`);for(let a of t){let i=a.exists?"  [\u2713]":"  [ ]",c=a.path===e.userProject&&n!==""?` ${n}`:"";l.info(`${i} ${a.label.padEnd(22)} ${v(a.path)}${c}`)}let s={projectName:e.projectName,layers:t.map(a=>({label:a.label,path:a.path,exists:a.exists})),hasOverrides:r.hasOverrides,overrideKeys:r.overrideKeys};return{content:[{type:"text",text:JSON.stringify(s,null,2)}],structuredContent:s}},le=async()=>{let e=await Z(),t=so.env.EDITOR||so.env.VISUAL||"vi",o=await gt(e);o.createdConfig&&l.info(ht(o)),l.info(`Opening ${v(e.userProject)} in ${t}`),await Qo({stdio:"inherit"})`${t} ${e.userProject}`,Ge();let r={path:e.userProject,editor:t};return{content:[{type:"text",text:JSON.stringify(r,null,2)}],structuredContent:r}};var de=e=>{if(typeof e!="object"||e===null)return null;let{config:t,reason:o,at:r}=e;return typeof t!="string"||t.length===0||typeof o!="string"||typeof r!="number"||!Number.isFinite(r)?null:{config:t,reason:o,at:r}},L=e=>`infra-kit: Doppler token for env "${e}" is missing, invalid, or unreadable \u2014 env auto-load is not running. Fix: run \`infra-kit env-token-set ${e}\` (mint one at https://dashboard.doppler.com under this config's Access tab).`;import f from"node:fs";import k from"node:path";import N from"node:process";var Zo="autoload-warn-fail.flag",ue="autoload-warn-auth-fail.flag",me="autoload-fail.flag",pe="autoload-auth-fail.json",er=3e4,co=async(e=!0)=>{let t;try{t=await qe()}catch{return null}let o=t.envAutoLoad;if(!o)return null;let r={trigger:o.trigger,config:o.config,project:t.envManagement.config.name};try{if(await at(o.config))return r}catch{return r}return uo({config:o.config,reason:`No Doppler service token for env "${o.config}"`,at:Date.now()}),e&&W(L(o.config),ue),null},lo=e=>{let{trigger:t,expectedTrigger:o,targetConfig:r,targetProject:n,env:s,force:a}=e;return t!==o||!s.session||s.cleared||s.currentConfig&&!s.autoLoadedMarker||!a&&s.autoLoadedMarker&&s.currentConfig===r&&s.currentProject===n?"skip":"load"},_=async({expectedTrigger:e,projectDir:t,force:o,isAuthFailure:r=Ye})=>{let n=e==="cli-invocation";n&&V();let s=null;try{if(s=await co(n),!s||lo({trigger:s.trigger,expectedTrigger:e,targetConfig:s.config,targetProject:s.project,env:rr(),force:o})==="skip"||ao()||sr())return null;let i=nr(),c=await dt({config:s.config,autoLoaded:!0,projectDir:t,beforeWrite:()=>!ao()&&!ir(i)});return c?(cr(),or(),c.filePath):null}catch(a){let i=a.message,c=r(a);return ar(),c&&s&&uo({config:s.config,reason:i,at:Date.now()}),n&&c&&s?(W(L(s.config),ue),l.debug(`env auto-load auth failure: ${i}`)):n?W(`infra-kit: env auto-load failed \u2014 ${i} (will retry later)`,Zo):l.debug(`env auto-load skipped: ${i}`),null}},V=()=>{let e=tr();e&&(W(L(e.config),ue),l.debug(`env auto-load auth failure (recorded ${new Date(e.at).toISOString()}): ${e.reason}`))},tr=()=>{try{let e=f.readFileSync(k.join(S(),pe),"utf-8");return de(JSON.parse(e))}catch{return null}},uo=e=>{try{let t=S();f.mkdirSync(t,{recursive:!0,mode:448}),rt(k.join(t,pe),JSON.stringify(e),384)}catch{}},or=()=>{try{f.rmSync(k.join(S(),pe),{force:!0})}catch{}},rr=()=>({session:N.env[Ze],cleared:N.env[ot],currentConfig:N.env[et],currentProject:N.env[tt],autoLoadedMarker:N.env[ee]}),nr=()=>{try{return f.statSync(k.join(S(),M)).mtimeMs}catch{return null}},ir=e=>{try{let t=k.join(S(),M);if(!f.existsSync(t))return!1;let o=f.statSync(t).mtimeMs;return e!==null&&o<=e?!1:new RegExp(`^unset ${ee}$`,"m").test(f.readFileSync(t,"utf-8"))}catch{return!1}},ao=()=>{try{let e=S(),t=k.join(e,Qe);if(!f.existsSync(t))return!1;let o=k.join(e,M);return f.existsSync(o)?f.statSync(t).mtimeMs>=f.statSync(o).mtimeMs:!0}catch{return!1}},sr=()=>{try{let e=k.join(S(),me);return f.existsSync(e)?Date.now()-f.statSync(e).mtimeMs<er:!1}catch{return!1}},ar=()=>{try{let e=S();f.mkdirSync(e,{recursive:!0,mode:448}),f.writeFileSync(k.join(e,me),"",{mode:384})}catch{}},cr=()=>{try{f.rmSync(k.join(S(),me),{force:!0})}catch{}},W=(e,t)=>{try{let o=S(),r=k.join(o,t);if(f.existsSync(r))return;f.mkdirSync(o,{recursive:!0,mode:448}),f.writeFileSync(r,"",{mode:384})}catch{}l.warn(e)};var fe=async({projectDir:e}={})=>{await _({expectedTrigger:"shell-startup",projectDir:e,force:!0})};var mo="https://dashboard.doppler.com/workplace/projects",lr=(e,t)=>["Removing it locally does NOT revoke it \u2014 the token still works anywhere else it is stored.",`Revoke it in Doppler (project "${e}", config "${t}"): ${mo}/${e}`],ge=async({env:e})=>{let o=!!(await nt())?.envs[e];await st(e);let r=await U(),n=await $(),s=await F();o?l.info(`Removed the "${e}" service token from ${v(s)}.`):l.info(`No "${e}" service token was stored in ${v(s)} \u2014 nothing to remove.`),r.length>0&&l.info(`Purged ${r.length} warm cache(s) across this repo's worktrees.`);for(let i of lr(n,e))l.warn(i);let a={env:e,removed:o,storePath:s,warmCachesPurged:r.length,revokeUrl:`${mo}/${n}`};return{content:O(JSON.stringify(a,null,2)),structuredContent:a}};import dr from"@inquirer/password";import K from"node:process";import{$ as H}from"zx";var ur=async({stdin:e,fromEnv:t})=>{if(e)return{token:await mr(),source:"stdin"};if(t){let r=K.env[t];if(!r)throw new Error(`${t} is not set (or is empty) \u2014 nothing to store.`);return{token:r,source:"env"}}return P.setInteractive(),{token:(await j(r=>dr({message:"Paste the Doppler service token (input is hidden)",mask:!0},r),{output:K.stderr})).trim(),source:"prompt"}},mr=async()=>{let e=[];K.stdin.setEncoding("utf8");for await(let t of K.stdin)e.push(t);return e.join("").trim()},he="DOPPLER_CONFIG",pr=3e4,fr=async(e,t,o)=>{let r=H.quiet;H.quiet=!0;let n;try{n=(await H({env:mt(e)})`doppler secrets download --no-file --format json --project ${t} --config ${o}`.timeout(pr)).stdout}catch(s){throw gr(s,o)}finally{H.quiet=r}return ft(n)},gr=(e,t)=>{let o=Fe(e)??(e instanceof Error?e.message:String(e));if(ze(o)!=="auth")return e instanceof Error?e:new Error(String(e));let r=Xe(o)==="mis-scoped"?"it is scoped to a DIFFERENT config (pasting another environment's token here is the mistake this check exists to catch).":"it is invalid or has been revoked.";return new Error([`Doppler refused this token for config "${t}" \u2014 ${r}`,"Nothing was written. Issue a service token scoped to that config and try again."].join(`
-`))},hr=e=>[`Could not verify this token's scope: the Doppler payload for "${e}" carries no ${he}.`,"Refusing to store a credential whose scope is unknown (a token for the wrong environment would load","the wrong secrets into every shell).","Re-run with --force if you are certain the token is scoped to this config."].join(`
-`),ve=async({env:e,stdin:t,fromEnv:o,force:r})=>{let n=await $(),{token:s,source:a}=await ur({stdin:t,fromEnv:o});if(!s)throw new Error("No token provided \u2014 nothing was written.");let i=await fr(s,n,e);pt(i,e);let c=i.some(([g])=>g===he);if(!c&&!r)throw new Error(hr(e));await it(e,s);let u=await U(),d=await F();l.info(`Stored the "${e}" service token (${oe(s)}) in ${v(d)} (mode 0600).`),c||l.warn(`Scope was NOT verified (no ${he} in the payload) \u2014 written because --force was given.`),u.length>0&&l.info(`Purged ${u.length} warm cache(s) so the next shell cannot serve secrets fetched with an old token.`);let p={env:e,source:a,redactedToken:oe(s),storePath:d,scopeVerified:c,warmCachesPurged:u.length};return P.print(),{content:O(JSON.stringify(p,null,2)),structuredContent:p}};import{spawn as vr}from"node:child_process";import J from"node:process";import{fileURLToPath as yr}from"node:url";var wr=["SIGINT","SIGTERM"],po=()=>yr(new URL("./mcp.js",import.meta.url)),ye=(e={})=>{let t=e.spawn??vr,o=e.exit??(a=>J.exit(a)),r=e.env??J.env,n=e.onError??(a=>l.error(a)),s=t(J.execPath,[po()],{stdio:"inherit",env:He(r)});s.on("error",a=>{n(`failed to launch the MCP server: ${a.message}`),o(1)}),wr.forEach(a=>{J.on(a,()=>{s.kill(a)})}),s.on("exit",(a,i)=>{o(i?1:a??1)})};var we=async(e,t,o=!0)=>{let{from:r,version:n,env:s,services:a,skipTerraform:i,yes:c,dryRun:u,printEnv:d}=e,p=await Mt(r);return o&&P.addOption("--from",p),$t(p,{"--version":n,"--skip-terraform":i,"--dry-run":u,"--print-env":d}),p==="local"?t==="all"?qt({env:s,confirmedCommand:c,dryRun:u,printEnv:d}):Gt({env:s,service:a,confirmedCommand:c,dryRun:u,printEnv:d}):t==="all"?Ft({version:n,env:s,skipTerraform:i,confirmedCommand:c}):jt({version:n,env:s,services:a,skipTerraform:i,confirmedCommand:c})},Se=async e=>we(e,"all"),ke=async e=>we(e,"selected"),B=async(e,t)=>{let o=`release deploy-${t} --from local`;return l.warn(`\`local deploy-${t}\` is deprecated and will be removed \u2014 use \`${o}\` instead.`),we({...e,from:"local"},t,!1)};import{spawnSync as Sr}from"node:child_process";import{realpathSync as kr}from"node:fs";import{homedir as Rr}from"node:os";import Re from"node:process";import{fileURLToPath as Pr}from"node:url";var xr=()=>kr(Pr(import.meta.url)),Cr=(e,t,o,r)=>e.error?(o(`${t} not found on PATH: ${e.error.message}`),r(1)):e.signal?(o(`update terminated by signal ${e.signal}`),r(1)):r(e.status??1),Pe=({dryRun:e},t={})=>{let o=t.spawnSync??Sr,r=t.print??(w=>l.info(w)),n=t.exit??(w=>Re.exit(w)),s=t.env??Re.env,a=t.selfRealPath??xr(),i=t.lazyNpmRoot??Pt,{manager:c,updateCommand:u,canSelfSpawn:d}=Rt({selfRealPath:a,env:s,realpath:T,lazyNpmRoot:i}),p=q(u);if(e){r(`Detected install manager: ${c}`),r(`Would run: ${p}`);return}if(!d){r(`Detected install manager: ${c}`),r(`Run this yourself: ${p}`),r(c==="homebrew"?"Not run for you: Homebrew manages this install; running a package manager would create a split-brain install.":"Not run for you: the install location is unrecognized, so the command above is a guess \u2014 a guessed global install is worse than a printed one.");return}let g=o(u[0],u.slice(1),{stdio:"inherit",shell:Re.platform==="win32",cwd:Rr(),env:Ke(s)});Cr(g,c,r,n)};import{VENDOR_CONFIG_FILE as go}from"@slip-stream-kit/config/internal";import xe from"node:fs/promises";import Ce from"node:path";import fo from"node:process";import{pathToFileURL as br}from"node:url";var ho="~/projects",be=async(e={})=>{if(e.init){await Tr(e.cwd);return}await Er()},Er=async()=>{let e=te(),t=await b(e);if(l.info(`Factory config: ${v(e)}   ${t?"[\u2713]":"[ ]"}`),!t){l.info("\nNot found \u2014 run `infra-kit vendor config --init` to scaffold it."),fo.exitCode=1;return}let{workspaceDir:o,targets:r}=await wt(),n=yt(o),s=await b(n);l.info(`workspaceDir:   ${o}   (resolved: ${n})   ${s?"[\u2713 exists]":"[ ] not found"}`),l.info("Targets:");let a=s;for(let i of r){let c=Ce.join(n,i),u=await b(c);u||(a=!1);let d=u?"[\u2713]":"[ ]",p=u?"":"   (not found \u2014 clone or remove)";l.info(`  ${d} ${i}   ${v(c)}${p}`)}a||(fo.exitCode=1)},Tr=async e=>{let t=te();if(await b(t)){l.info(`Factory config already exists at ${v(t)} \u2014 leaving it untouched.`);return}let o=e??await je(),r=await Ar(o);await xe.mkdir(Ce.dirname(t),{recursive:!0}),await xe.writeFile(t,Dr(r),"utf-8"),l.info(`\u2713 Created ${v(t)}`),r.length>0&&l.info(`  Seeded ${r.length} target(s) from the source ${go}.`),l.info(`  Edit \`workspaceDir\` (placeholder: ${ho}) to point at where your repos live.`),r.length===0&&l.info("  Add at least one repo name to `targets` before running vendor sync/manifest/diff.")},Ar=async e=>{try{let t=Ce.join(e,go),o=await xe.stat(t),s=(await import(`${br(t).href}?mtime=${Number(o.mtimeMs)}`)).default,a=typeof s=="function"?await s():s;if(a&&typeof a=="object"&&"targets"in a){let i=a.targets;if(Array.isArray(i)&&i.every(c=>typeof c=="string"))return i}}catch{}return[]},Dr=e=>`${JSON.stringify({workspaceDir:ho,targets:e},null,2)}
-`;var Y=(e,t=!0)=>({line:e,reproducible:t});import z from"node:fs";import Ir from"node:os";import Lr from"node:path";import So from"node:process";var X="INFRA_KIT_SESSION_REPORT",Ee=null,vo=!1,yo=[],ko=(e=So.env)=>{vo||(Ee=e[X]??null,vo=!0,delete e[X])};var Ro=(e,t)=>{if(!Ee)return;let o=e.summary??(yo.length>0?[...yo]:void 0),r={...e,...o?{summary:o}:{}},n=t?.write??((s,a)=>{z.writeFileSync(s,a)});try{n(Ee,JSON.stringify(r))}catch{}},wo=0,Po=e=>{let t=e?.tmpdir?.()??Ir.tmpdir(),o=e?.pid??So.pid;return wo+=1,Lr.join(t,`infra-kit-session-${o}-${wo}.json`)},xo=(e,t)=>{if(!(t?.exists??(a=>z.existsSync(a)))(e))return null;let r=t?.read??(a=>z.readFileSync(a,"utf-8")),n=t?.unlink??(a=>z.unlinkSync(a)),s;try{s=r(e)}catch{return null}finally{try{n(e)}catch{}}try{return JSON.parse(s)}catch{return null}};var Te=e=>{e.options.some(o=>o.long==="--debug")||e.option("--debug","Raise the log level to debug (logs stay on stderr)"),e.commands.forEach(Te)};var _r=(e,t)=>[...t,e],Co=(e,t)=>{if(!(typeof e>"u")){if(e===!0)return"workspace";if(e===!1)return"none";if(typeof e=="string"&&re.includes(e))return e;throw new Error(`Invalid ${t} value "${String(e)}". Expected one of: ${re.join(", ")}.`)}},Or=e=>e.description("Merge dev branch into every release branch").option("-a, --all","Select all active release branches").option("-v, --versions <versions>","Specify versions by comma, e.g. 1.2.5, 1.2.6").option("-y, --yes","Skip confirmation prompt").option("--dry-run","Compute and print the merge plan without pushing anything").option("--verify [command]","Check each merge before pushing it. Bare runs `pnpm install --frozen-lockfile`; pass a command to run that instead. A branch that fails is dropped from the push, never rolled back").action(async t=>{let o=await Lt(()=>Nt({all:t.all,versions:t.versions,dryRun:t.dryRun,verify:t.verify,confirmedCommand:t.yes}));m(o),o.structuredContent.failedMerges>0&&(E.exitCode=1)}),$r=e=>e.description("List all release branches").action(async()=>{m(await Ut())}),Mr=e=>e.description("Create one or more release branches (each entry can mix regular/hotfix and its own description)").option("-r, --release <spec>",'Release spec "<version|next|name>[:type[:description]]" (repeatable). The token is a semver ("1.2.5"), the literal "next", or a kebab-case name ("checkout-redesign"). Type is regular|hotfix (default regular). Examples: "1.2.5", "1.2.5:hotfix", "next:regular:Holiday backend", "checkout-redesign:regular:Q3 redesign".',_r,[]).option("-y, --yes","Skip confirmation prompt").action(async t=>{let r=t.release.map(xt),n=r.length>0?r:void 0;m(await Wt({releases:n,confirmedCommand:t.yes}))}),Fr=e=>e.description("Edit a release's description in Jira and in the matching GitHub PR body").option("-v, --version <version>","Release version (e.g. 1.2.5) or release name (e.g. checkout-redesign)").option("-d, --description <description>",'New description (use "" to clear)').option("-y, --yes","Skip confirmation prompt").action(async t=>{m(await Vt({version:t.version,description:t.description,confirmedCommand:t.yes}))}),bo=e=>e.option("-f, --from <where>",`Where the deploy runs: ${Ot.join(" | ")} (required)`).option("-v, --version <version>",'With --from ci: version (e.g. 1.2.5) or release name to deploy; "dev" deploys from the dev branch. Prompts when omitted').option("-e, --env <env>","Specify the environment to deploy to, e.g. dev").option("-y, --yes","Skip confirmation prompt").option("--skip-terraform","With --from ci: skip the terraform deployment step").option("--dry-run","With --from local: resolve target, contract and commands without deploying").option("--print-env","With --from local: print the resolved build contract"),jr=e=>bo(e).description("Deploy every service to any environment, in CI or from this machine").action(async t=>{m(await Se({from:t.from,version:t.version,env:t.env,skipTerraform:t.skipTerraform,yes:t.yes,dryRun:t.dryRun,printEnv:t.printEnv}))}),Ur=e=>bo(e).description("Deploy selected services to any environment, in CI or from this machine").option("-s, --services <services...>","Specify services to deploy, e.g. client-be client-fe").action(async t=>{m(await ke({from:t.from,version:t.version,env:t.env,services:t.services,skipTerraform:t.skipTerraform,yes:t.yes,dryRun:t.dryRun,printEnv:t.printEnv}))}),qr=e=>e.description("Release a new version to production").option("-v, --version <version>","Version (e.g. 1.2.5) or release name (e.g. checkout-redesign) to deliver").option("-y, --yes","Skip confirmation prompt").action(async t=>{m(await _t({version:t.version,confirmedCommand:t.yes}))}),Gr=e=>e.description("Tear down a release: worktree, PR, branches, and the Jira fix version").option("-v, --version <version>","Version (e.g. 1.2.5) or release name (e.g. checkout-redesign) to remove").option("--move-issues-to <version>","Reassign issues carrying the fix version to this version before removing it").option("--skip-jira","Remove everything except the Jira fix version").option("-y, --yes","Skip confirmation prompt").action(async t=>{m(await Ht({version:t.version,moveIssuesTo:t.moveIssuesTo,skipJira:t.skipJira,confirmedCommand:t.yes}))}),Wr=e=>e.description("Remove release worktrees whose PRs are no longer open").option("-y, --yes","Skip confirmation prompt").action(async t=>{m(await Zt({confirmedCommand:t.yes}))}),Vr=e=>e.description("Add git worktrees for release branches").option("-y, --yes","Skip confirmation prompt").option("-a, --all","Select all active release branches").option("-v, --versions <versions>","Specify versions by comma, e.g. 1.2.5, 1.2.6").option("-i, --ide [mode]","Editor mode for created worktrees: workspace (default) | none").option("--no-ide","Skip the editor (alias for --ide none)").option("-c, --cursor [mode]","Deprecated alias for --ide").option("--no-cursor","Deprecated alias for --no-ide").option("-g, --github-desktop","Open created worktrees in GitHub Desktop").option("--no-github-desktop","Skip GitHub Desktop prompt").option("-m, --cmux","Open created worktrees in cmux (3-pane layout)").option("--no-cmux","Skip cmux prompt").action(async t=>{let o=Co(t.ide,"--ide")??Co(t.cursor,"--cursor");m(await zt({confirmedCommand:t.yes,all:t.all,versions:t.versions,ide:o,githubDesktop:t.githubDesktop,cmux:t.cmux}))}),Hr=e=>e.description("List all git worktrees with detailed information").action(async()=>{m(await Xt())}),Kr=e=>e.description("Remove git worktrees for release branches").option("-y, --yes","Skip confirmation prompt").option("-a, --all","Select all active release branches").option("-v, --versions <versions>","Specify versions by comma, e.g. 1.2.5, 1.2.6").action(async t=>{m(await Qt({confirmedCommand:t.yes,all:t.all,versions:t.versions}))}),Jr=e=>e.description("Reopen editor + cmux windows for every active worktree in the current project (additive, idempotent)").option("--all","Reopen across every discovered infra-kit project (Stage 3 \u2014 not yet implemented)").option("--project <names...>","Restrict --all to these project names").option("--root <paths...>","Discovery roots for --all (repeatable)").option("--release-only","Restrict to release worktrees (reproduces the legacy worktrees-reload scope)").option("--force","Close each cmux workspace first, then reopen (the legacy worktrees-reload behaviour)").option("--dry-run","Print the plan (paths + cmux titles) and spawn nothing").action(async t=>{m(await Kt({all:t.all,project:t.project,root:t.root,releaseOnly:t.releaseOnly,force:t.force,dryRun:t.dryRun}))}),Br=e=>e.description("Show the machine-local factory config (~/.infra-kit/vendor.json) or scaffold it with --init").option("--init","Scaffold ~/.infra-kit/vendor.json (skips if it already exists)").action(async t=>{m(await be({init:t.init}))}),Yr=e=>e.description("Verify vendor/ matches vendor/.sync-manifest.json (self-contained; for any consumer repo)").action(async()=>{let t=await Bt();m(t),t.structuredContent.ok||(E.exitCode=1)}),zr=e=>e.description("Show the resolved config merge chain and file paths").action(async()=>{m(await ce())}),Xr=e=>e.description("Open the user-scope per-project override file in $EDITOR").action(async()=>{m(await le())}),Qr=new Set(["setup","doctor","version","dev","self-update","mcp"]),Zr=e=>e.startsWith("env-")||Qr.has(e),en=new Set(["env-autoload","mcp","version","self-update"]),Q=e=>{let t=[];for(let o=e;o&&o.parent;o=o.parent)t.unshift(o.name());return t.join(" ")},Ae=()=>{let e=new Nr,t=e.command("release").description("Release management commands");Or(t.command("merge-dev")),$r(t.command("list")),Mr(t.command("create")),Fr(t.command("desc-edit")),jr(t.command("deploy-all")),Ur(t.command("deploy-selected")),qr(t.command("deliver")),Gr(t.command("remove"));let o=e.command("worktrees").description("Git worktree management commands");Vr(o.command("add")),Hr(o.command("list")),Kr(o.command("remove")),Wr(o.command("sync")),Jr(e.command("reopen"));let r=e.command("config").description("Manage infra-kit configuration files");zr(r.command("path")),Xr(r.command("edit")),e.command("config-get").description("Print the fully merged infra-kit config (project + user-global + per-project override layers)").action(async()=>{m(await Ve())});let n=e.command("local").description("Deprecated \u2014 use `release deploy-all|deploy-selected --from local`"),s=i=>i.option("-e, --env <name>","Target environment (prompts when omitted)").option("-y, --yes","Skip the confirmation prompt").option("--dry-run","Resolve target, contract and commands without deploying").option("--print-env","Print the resolved build contract");s(n.command("deploy-all")).description("Deprecated \u2014 use `release deploy-all --from local`").action(async i=>{m(await B({env:i.env,yes:i.yes,dryRun:i.dryRun,printEnv:i.printEnv},"all"))}),s(n.command("deploy-selected")).description("Deprecated \u2014 use `release deploy-selected --from local`").option("-s, --service <name...>","Service name(s), as in deploy-<name>.sh (prompts when omitted)").action(async i=>{m(await B({env:i.env,services:i.service,yes:i.yes,dryRun:i.dryRun,printEnv:i.printEnv},"selected"))}),e.command("audit").description("Audit against infra-kit.config.ts rules (--all for every package, --root for the monorepo root)").option("-a, --all","Audit every non-vendor workspace package").option("-r, --root","Audit the monorepo root (turbo pipeline + root commands)").option("--fix","Write the infra-kit guidance block into CLAUDE.md for the audited scope before checking (CLI-only)").option("--design","With --fix: scaffold DESIGN.md for frontend/mobile packages that lack one").action(async i=>{if(i.design&&!i.fix){l.error("--design requires --fix (it scaffolds DESIGN.md; there is nothing to scaffold without a fix run)"),E.exitCode=1;return}let c=await We({all:i.all,root:i.root,fix:i.fix,design:i.design});m(c);let{allPassed:u,fixed:d}=c.structuredContent,p=(d??[]).some(g=>g.action==="failed");(!u||p)&&(E.exitCode=1)});let a=e.command("vendor").description("Verify the mirrored vendor/ tree");return Yr(a.command("check")),Br(a.command("config")),e.command("doctor").description("Check installation and authentication status of gh and doppler CLIs").option("--fix","Remove portless routes left behind by a dev-server that was killed (kill -9, OOM, force-quit). Refuses while a dev session is running, when a booting UI is indistinguishable from a dead route.").option("--ascii","Render the report with ASCII markers instead of unicode glyphs (check messages are unchanged)").action(async i=>{let c=await Ct({fix:!!i.fix});I.enabled||Be(c.structuredContent.checks,{ascii:!!i.ascii}),c.structuredContent.checks.some(d=>d.name==="plugin installed"&&d.status==="fail")&&(E.exitCode=1),m(c)}),e.command("self-update").description("Update this CLI using the package manager that installed it").option("--dry-run","Print the detected manager and the command that would run; install nothing").action(i=>{Pe({dryRun:!!i.dryRun})}),e.command("mcp").description("Run the infra-kit MCP server (stdio transport)").action(()=>{ye()}),e.command("dev").description("Run local dev servers for a named devServersPresets preset (or all apps); api + ui").argument("[preset]","Named preset from devServersPresets (omit to run every app)").option("-w, --watch","Rebuild and restart on file save").option("--app <names>","Further narrow to these app folder names (comma-separated)").option("--target <keys>","Run exactly these <app>/api|<app>/ui packages (comma-separated); part-level, unlike --app").option("--cmux","Run each app in its own cmux pane (one workspace, N panes; falls back to single terminal if cmux is unavailable)").option("--self","Run only the app of the current directory (infer from cwd; use inside apps/<app>/\u2026)").option("-V, --verbose","Print full boot narration (default: quiet; full detail always in the session log)").option("--routes","Print each app\u2019s registered METHOD /path routes at startup (default: off)").option("--no-ui-health","Do not probe the frontends\u2019 liveness (vite\u2019s HMR ping); their rows carry no health dot (also: INFRA_KIT_NO_UI_HEALTH=1)").action(async(i,c)=>{let{runDevServerCli:u}=await import("./dev-server.js"),d=!!(E.stdout.isTTY&&E.stdin.isTTY);await u({...c,preset:i},d,I.enabled)}),e.command("dev-status").description("Show what `infra-kit dev` currently has running (reads dev-context fragments; starts nothing)").action(async()=>{m(await Je())}),e.command("setup").description("Set this machine up: shell integration, agent files, MCP server, then the external tools").option("--tools <ids...>","Limit to these tools (brew, aws, gh, doppler, portless)").option("--update [ids...]","Update what is already installed; never install a missing tool").option("--skip-tools","Do the local setup only, then REPORT what each tool needs \u2014 installs nothing").action(async i=>{m(await Jt({tools:i.tools,update:i.update,skipTools:i.skipTools}))}),e.command("version").description("Print the installed infra-kit CLI version").action(async()=>{m(await Yt())}),e.command("env-status").description("Show which env is loaded in this session (local introspection; no Doppler call)").action(async()=>{m(await Tt())}),e.command("env-list").description("List available Doppler configs for the detected project, and whether a service token resolves for each").action(async()=>{m(await Et())}),e.command("env-load").description("Load Doppler env vars for a config. Source the returned file path to apply.").option("-c, --config <config>","Environment config name to load (e.g. dev, arthur)").action(async i=>{m(await ut({config:i.config}))}),e.command("env-clear").description("Clear loaded env vars. Source the returned file path to apply.").option("--purge","Also delete this project's warm cache outright (durable disable)").action(async i=>{m(await bt({purge:!!i.purge}))}),e.command("env-token-set").description("Store the Doppler service token for an env (masked prompt; validated against Doppler before writing)").argument("<env>","Environment / Doppler config the token is scoped to (e.g. dev)").option("--stdin","Read the token from stdin instead of prompting (e.g. from a password manager)").option("--from-env <var>","Read the token from the named environment variable (the NAME, never the value)").option("--force","Store even when the token\u2019s scope could not be verified. Never overrides a real mismatch.").action(async(i,c)=>{m(await ve({env:i,stdin:c.stdin,fromEnv:c.fromEnv,force:c.force}))}),e.command("env-token-list").description("Show which envs have a Doppler service token (redacted), and where it came from").option("--check","Also ask Doppler whether each token is valid and correctly scoped").action(async i=>{m(await At({check:!!i.check}))}),e.command("env-token-remove").description("Delete an env\u2019s Doppler service token from the local store (does NOT revoke it in Doppler)").argument("<env>","Environment / Doppler config whose token to remove").action(async i=>{m(await ge({env:i}))}),e.command("env-autoload",{hidden:!0}).description("Internal: prime env for the shell-startup auto-load trigger").option("--project-dir <dir>","Canonical project dir for the warm-cache key (shell-startup only)").action(async i=>{await fe({projectDir:i.projectDir})}),e.commands.forEach(Dt),Te(e),e.hook("preAction",async(i,c)=>{P.start(Q(c)),I.enabled=!!c.optsWithGlobals().json,I.enabled&&(l.level="warn"),en.has(Q(c))||await vt(),V(),Zr(c.name())||await _({expectedTrigger:"cli-invocation"})}),e.hook("postAction",(i,c)=>{let u=Q(c);if(ro(u))return;let p=P.snapshot()?.formattedOptions??"",g=p?` ${p}`:"",w=`infra-kit ${u}${g}`;Ro({equivalent:Y(w,!0)})}),e};var De=(e,t="  ")=>{let o=e.reduce((r,[n])=>Math.max(r,n.length),0);return e.map(([r,n])=>`${r.padEnd(o)}${t}${n}`)};import{chalkStderr as Rn}from"chalk";import{spawn as Pn}from"node:child_process";import y from"node:process";import{Chalk as tn}from"chalk";var A=new tn({level:1}),R={ok:"ok",findingsPlain:"completed with findings",failed:"failed",cancelled:"cancelled",findingsSuffix:"findings",sep:" \xB7 ",reproPrefix:"$ ",nonReproPrefix:"\u2248 ",envNotice:"Applies to your shell after you exit this session."},on={suspend:{unicode:"any key commands \xB7 Esc / Ctrl-C quit \xB7 Ctrl-Z suspend",ascii:"any key commands - Esc / Ctrl-C quit - Ctrl-Z suspend"},plain:{unicode:"any key commands \xB7 Esc / Ctrl-C quit",ascii:"any key commands - Esc / Ctrl-C quit"}},Eo={ok:{unicode:"\u2713",ascii:"[ok]"},findings:{unicode:"\u26A0",ascii:"[!]"},failed:{unicode:"\u2717",ascii:"[x]"},cancelled:{unicode:"\u2298",ascii:"[-]"}},To={unicode:"\u2500",ascii:"-"},rn=3,Ie=e=>e,nn={ok:e=>A.green(e),findings:e=>A.yellow(e),failed:e=>A.red(e),cancelled:e=>A.gray(e)},Ne=e=>e?{dim:t=>A.dim(t),bold:t=>A.bold(t)}:{dim:Ie,bold:Ie},sn=(e,t)=>e?nn[t]:Ie,Le=e=>[...e].length,an=(e,t)=>{if(t==null)return e;let o=Math.max(0,t-1);return Le(e)<=o?e:[...e].slice(0,o).join("")},Ao=e=>{let t=Ne(e.color===!0).dim,o=on[e.canSuspend?"suspend":"plain"],r=e.ascii===!0?o.ascii:o.unicode;return t(an(r,e.width))},Do=(e,t={})=>{let o=Ne(t.color===!0);return`${o.dim(R.reproPrefix.trim())} ${o.bold(e)}`},cn=e=>e<1e3?`${Math.round(e)}ms`:`${(e/1e3).toFixed(1)}s`,ln=(e,t)=>e==="findings"?t!=null?`${t} ${R.findingsSuffix}`:R.findingsPlain:{ok:R.ok,failed:R.failed,cancelled:R.cancelled}[e],dn=(e,t,o,r)=>{if(t==null)return"";let n=t-2-e;return n<rn?"":` ${r(o.repeat(n))}`},Io=e=>{let t=e.color===!0,o=Ne(t),r=sn(t,e.outcome),n=e.ascii===!0,s=e.equivalent.reproducible?R.reproPrefix:R.nonReproPrefix,a=n?Eo[e.outcome].ascii:Eo[e.outcome].unicode,i=ln(e.outcome,e.findingsCount),c=[cn(e.durationMs)],u=e.summary?.[0]?.split(`
-`)[0];u!=null&&u.length>0&&c.push(u);let d=`${a} ${i}`,p=`${R.sep}${c.join(R.sep)}`,g=Le(d)+Le(p),w=dn(g,e.width,n?To.ascii:To.unicode,o.dim),C=[`${r(d)}${o.dim(p)}${w}`];return e.showEquivalent!==!1&&C.unshift(`${o.dim(s.trim())} ${o.bold(e.equivalent.line)}`),e.envNotice===!0&&C.push(o.dim(R.envNotice)),C.join(`
-`)};var un=new Set([130,143]),Lo=(e,t,o,r=!1)=>o?t!=null||e===0?"ok":"findings":r&&e!=null&&un.has(e)||t==="SIGINT"||e===0?"cancelled":"failed";import mn from"node:process";var pn={3:"quit",4:"quit",26:"suspend",27:"quit"},fn=e=>{if(e.length!==1)return"continue";let t=typeof e=="string"?e.charCodeAt(0):e[0];return t===void 0||Number.isNaN(t)?"continue":pn[t]??"continue"},gn=150,hn="\r\x1B[2K",vn=`\r
-`,No=(e,t)=>{_o(e),e.stdin.on("data",t),e.listener=t},_o=e=>{e.listener!==null&&(e.stdin.off("data",e.listener),e.listener=null)},Oo=(e,t)=>{ct(),e.stdin.setRawMode(!0),e.stdin.isPaused()&&e.stdin.resume(),No(e,t)},$o=e=>{e.hintOnScreen&&(e.hintOnScreen=!1,e.deps.write(hn)),_o(e),e.stdin.isTTY===!0&&e.stdin.isRaw===!0&&e.stdin.setRawMode(!1),lt()},yn=e=>{e.settled||(e.settled=!0,$o(e))},Mo=(e,t)=>{let o=Ao({canSuspend:e.deps.suspend!==void 0,ascii:e.deps.ascii,color:e.deps.color,width:e.deps.columns()});e.deps.write(t+o),e.hintOnScreen=!0},wn=async e=>{await new Promise(t=>{setTimeout(t,e)})},Sn=(e,t,o)=>{$o(e),t(),Oo(e,o),Mo(e,vn)},kn=async e=>new Promise(t=>{let o=r=>{let n=fn(r),s=e.deps.suspend;if(n==="quit"){t("quit");return}if(n==="suspend"&&s!==void 0){Sn(e,s,o);return}t("palette")};No(e,o),Mo(e,"")}),Fo=async(e,t)=>{if(e.quitRequested())return"quit";let o=t.stdin??mn.stdin;if(o.isTTY!==!0)return"palette";let r={deps:t,stdin:o,listener:null,hintOnScreen:!1,settled:!1};try{return Oo(r,()=>{}),e.armed(),await wn(t.drainMs??gn),await kn(r)}finally{yn(r)}};import jo from"node:process";var x={column:"\r",sgr:"\x1B[0m",cursor:"\x1B[?25h",wrap:"\x1B[?7h",saveCursor:"\x1B7",restoreCursor:"\x1B8",scrollRegion:"\x1B[r",primaryBuffer:"\x1B[?1049l"},Uo=(e,t)=>{let o=t?.write??(s=>{jo.stderr.write(s)}),r=t?.stdin??jo.stdin,n=[x.saveCursor,x.scrollRegion,x.restoreCursor,x.column,x.sgr,x.cursor,x.wrap];e.entersAltScreen===!0&&n.push(x.primaryBuffer),o(n.join("")),r.isTTY===!0&&r.isRaw===!0&&r.setRawMode?.(!1)};var qo=e=>`infra-kit ${e.groupPath.join(" ")}`,xn=()=>{Cn();let e=y.stderr.columns;return e!=null&&e>0?e:void 0},Cn=()=>{let e=y.stderr;typeof e._refreshSize=="function"&&e._refreshSize()},bn=e=>new Promise(t=>{e.on("exit",(o,r)=>{t({code:o,signal:r})}),e.on("error",()=>{t({code:1,signal:null})})}),En=async(e,t,o)=>{let r=Po(),n={...t.env,[X]:r,INFRA_KIT_NO_AUTO_UPDATE:"1"},s=t.now(),a={code:1,signal:null};o();try{let p=t.spawn(y.execPath,[t.cliPath,...e.groupPath],{stdio:"inherit",env:n});a=await bn(p)}catch{a={code:1,signal:null}}finally{t.resetTerminal({entersAltScreen:e.entersAltScreen})}let i=xo(r),c=Lo(a.code,a.signal,i!=null,e.longRunning),u=qo(e),d=i?.equivalent??Y(u,!0);return Io({equivalent:d,outcome:c,durationMs:t.now()-s,summary:i?.summary,envNotice:e.sessionEnvNotice,ascii:t.ascii,color:t.color,width:t.columns(),showEquivalent:!(d.reproducible&&d.line===u)})},Tn=1e3,An=(e,t)=>e!=null&&t-e<=Tn,_e=e=>{e.resetTerminal(),e.exit(0)},Dn=(e,t)=>{let o=null,r=!1,n=()=>{let c=e();if(c==="child"){o=t.now();return}c!=="pause"&&_e(t)},s=()=>{let c=e();if(c==="palette"){_e(t);return}if(!An(o,t.now())){if(c==="pause"){_e(t);return}r=!0}},a=()=>{t.exit(129)},i=()=>{e()==="child"&&t.raise("SIGSTOP")};return t.register("SIGINT",n),t.register("SIGTERM",s),t.register("SIGHUP",a),t.register("SIGTSTP",i),{dispose:()=>{t.unregister("SIGINT",n),t.unregister("SIGTERM",s),t.unregister("SIGHUP",a),t.unregister("SIGTSTP",i)},childStarted:()=>{o=null},quitRequested:()=>r}},Go=(e,t)=>!!(t.stdoutIsTTY&&t.stdinIsTTY&&t.stderrIsTTY&&e.TERM!=="dumb"&&!e.INFRA_KIT_NO_SESSION&&!e.INFRA_KIT_SESSION_REPORT),In=y.platform==="win32"?void 0:()=>{It()},Ln=(e,t)=>o=>Fo(o,{write:e,columns:t.columns,ascii:t.ascii,color:t.color,suspend:In}),Wo=async(e,t)=>{let o={spawn:t.spawn??Pn,now:t.now??(()=>Date.now()),env:t.env??y.env,cliPath:t.cliPath,ascii:t.ascii??!(y.stdout.isTTY&&y.env.TERM!=="dumb"),color:t.color??Rn.level>0,columns:t.columns??xn,resetTerminal:t.resetTerminal??(d=>{Uo(d)})},r=t.write??(d=>y.stderr.write(d)),n="palette",s=t.signals??{register:(d,p)=>{y.on(d,p)},unregister:(d,p)=>{y.off(d,p)},exit:d=>{y.exit(d)},raise:d=>{y.kill(y.pid,d)},now:()=>Date.now(),resetTerminal:()=>{n==="pause"&&r("\r\x1B[2K"),o.resetTerminal({entersAltScreen:!1})}},a={dispose:()=>{},childStarted:()=>{},quitRequested:()=>!1},i=t.installSignals===!1?a:Dn(()=>n,s),c={armed:()=>{n="pause"},quitRequested:()=>i.quitRequested()},u=t.afterRun??Ln(r,o);try{for(;;){if(i.quitRequested())return;n="palette";let d=await t.renderPalette(e);if(d==null)return;let p=t.resolveCommand(d);if(!p)continue;let g=Do(qo(p),{color:o.color});r(`
-${g}
-`),i.childStarted();let w=await En(p,o,()=>{n="child"});if(r(`
-${w}
-`),await u(c)==="quit")return}}finally{i.dispose()}};import{spawn as On}from"node:child_process";import Ho from"node:fs";import D from"node:process";import{fileURLToPath as Ko}from"node:url";var Vo=["INFRA_KIT_NO_AUTO_UPDATE","NO_UPDATE_NOTIFIER","CI"],Nn=new Set(["mcp","self-update"]),_n=e=>e[2]!=null&&Nn.has(e[2]),Oe=e=>{let{argv:t,env:o,isTty:r,selfRealPath:n,cwd:s,realpath:a}=e;return Vo.some(c=>{let u=o[c];return u!=null&&u!==""})?"opt-out":t.includes("--json")?"json":_n(t)?"own-command":r?G(n,s,a)?"local-install":null:"not-a-tty"};var $n=e=>{On(D.execPath,[e,"--parent-pid",String(D.pid)],{detached:!0,stdio:"ignore",windowsHide:!0}).unref()},Mn=()=>Ko(new URL("./update-check.js",import.meta.url)),Fn=()=>Ho.realpathSync(Ko(new URL("./cli.js",import.meta.url))),jn=/^[\w@./+ -]+$/i,Un=e=>jn.test(e),qn=(e,t,o)=>{!e?.latestVersion||!e.updateCommand||ie(e.latestVersion,t)&&e.updateCommand.every(Un)&&o(`infra-kit ${e.latestVersion} is available (you have ${t}). Run: ${q(e.updateCommand)}`)},$e=(e,t={})=>{try{let o=t.argv??D.argv,r=t.env??D.env,n=t.isTty??!!D.stdout.isTTY,s=t.cwd??D.cwd(),a=t.nowMs??Date.now(),i=t.selfRealPath??Fn(),c=t.readCache??se,u=t.spawnChild??$n,d=t.fileExists??(C=>Ho.existsSync(C)),p=t.notify??(C=>{l.info(C)});if(Oe({argv:o,env:r,isTty:n,selfRealPath:i,cwd:s,realpath:T})!==null)return;let g=c();if(qn(g,e,p),!ae(g,a))return;let w=t.childPath??Mn();if(!d(w))return;u(w)}catch{}};no();ko();var Me=Ae(),Bo=async e=>{try{e?await Me.parseAsync(e):await Me.parseAsync()}catch(t){ne(t)&&(l.info("Operation cancelled."),h.exit(0));let o=t instanceof Error?t.message:String(t);l.error(o),h.exit(1)}},Vn=()=>{try{if(h.env.INFRA_KIT_NO_LOCATION_WARN||h.argv.includes("--json")||h.argv[2]==="mcp")return;G(Wn(Yo(import.meta.url)),h.cwd(),T)&&l.info("Running from a project-local node_modules. Install globally for faster startup: npm i -g infra-kit")}catch{}};Vn();$e(Ue.version);var zo=()=>io(Me.commands),Hn=async()=>{let e=zo(),t=null;try{if(h.stdout.isTTY&&h.stdin.isTTY){let{runCommandPalette:o}=await import("./boot-AJLBGRED.js");t=await o(e)}else{let o=De(e.map(n=>[n.name,n.description])),r=e.flatMap((n,s)=>[...e[s-1]?.group===n.group?[]:[new Jo(" "),new Jo(`\u2014 ${n.group} \u2014`)],{name:o[s]??n.name,value:n.name}]);t=await j(n=>Gn({message:"Select a command to run",choices:r},n),{output:h.stderr})}}catch(o){if(!ne(o))throw o}return t},Kn=async()=>{let{runCommandPalette:e}=await import("./boot-AJLBGRED.js"),t=Yo(import.meta.url),o=new Map(to.map(r=>[r.groupPath.join(" "),r]));await Wo(zo(),{renderPalette:e,resolveCommand:r=>{let n=o.get(r);return n?{groupPath:n.groupPath,entersAltScreen:n.entersAltScreen,sessionEnvNotice:n.sessionEnvNotice,longRunning:n.longRunning}:void 0},cliPath:t})};if(h.argv.length<=2){let e={stdoutIsTTY:!!h.stdout.isTTY,stdinIsTTY:!!h.stdin.isTTY,stderrIsTTY:!!h.stderr.isTTY};if(Go(h.env,e))await Kn();else{let t=await Hn();t&&await Bo(["node","infra-kit",...t.split(" ")])}}else await Bo();
+`);for(let a of t){let i=a.exists?"  [\u2713]":"  [ ]",c=a.path===e.userProject&&n!==""?` ${n}`:"";l.info(`${i} ${a.label.padEnd(22)} ${h(a.path)}${c}`)}let s={projectName:e.projectName,layers:t.map(a=>({label:a.label,path:a.path,exists:a.exists})),hasOverrides:r.hasOverrides,overrideKeys:r.overrideKeys};return{content:[{type:"text",text:JSON.stringify(s,null,2)}],structuredContent:s}},ce=async()=>{let e=await Q(),t=to.env.EDITOR||to.env.VISUAL||"vi",o=await ut(e);o.createdConfig&&l.info(mt(o)),l.info(`Opening ${h(e.userProject)} in ${t}`),await Jo({stdio:"inherit"})`${t} ${e.userProject}`,je();let r={path:e.userProject,editor:t};return{content:[{type:"text",text:JSON.stringify(r,null,2)}],structuredContent:r}};var le=e=>{if(typeof e!="object"||e===null)return null;let{config:t,reason:o,at:r}=e;return typeof t!="string"||t.length===0||typeof o!="string"||typeof r!="number"||!Number.isFinite(r)?null:{config:t,reason:o,at:r}},I=e=>`infra-kit: Doppler token for env "${e}" is missing, invalid, or unreadable \u2014 env auto-load is not running. Fix: run \`infra-kit env-token-set ${e}\` (mint one at https://dashboard.doppler.com under this config's Access tab).`;import f from"node:fs";import S from"node:path";import L from"node:process";var Bo="autoload-warn-fail.flag",de="autoload-warn-auth-fail.flag",ue="autoload-fail.flag",me="autoload-auth-fail.json",Yo=3e4,ro=async(e=!0)=>{let t;try{t=await $e()}catch{return null}let o=t.envAutoLoad;if(!o)return null;let r={trigger:o.trigger,config:o.config,project:t.envManagement.config.name};try{if(await rt(o.config))return r}catch{return r}return io({config:o.config,reason:`No Doppler service token for env "${o.config}"`,at:Date.now()}),e&&G(I(o.config),de),null},no=e=>{let{trigger:t,expectedTrigger:o,targetConfig:r,targetProject:n,env:s,force:a}=e;return t!==o||!s.session||s.cleared||s.currentConfig&&!s.autoLoadedMarker||!a&&s.autoLoadedMarker&&s.currentConfig===r&&s.currentProject===n?"skip":"load"},_=async({expectedTrigger:e,projectDir:t,force:o,isAuthFailure:r=Ke})=>{let n=e==="cli-invocation";n&&W();let s=null;try{if(s=await ro(n),!s||no({trigger:s.trigger,expectedTrigger:e,targetConfig:s.config,targetProject:s.project,env:Qo(),force:o})==="skip"||oo()||tr())return null;let i=Zo(),c=await st({config:s.config,autoLoaded:!0,projectDir:t,beforeWrite:()=>!oo()&&!er(i)});return c?(rr(),Xo(),c.filePath):null}catch(a){let i=a.message,c=r(a);return or(),c&&s&&io({config:s.config,reason:i,at:Date.now()}),n&&c&&s?(G(I(s.config),de),l.debug(`env auto-load auth failure: ${i}`)):n?G(`infra-kit: env auto-load failed \u2014 ${i} (will retry later)`,Bo):l.debug(`env auto-load skipped: ${i}`),null}},W=()=>{let e=zo();e&&(G(I(e.config),de),l.debug(`env auto-load auth failure (recorded ${new Date(e.at).toISOString()}): ${e.reason}`))},zo=()=>{try{let e=f.readFileSync(S.join(w(),me),"utf-8");return le(JSON.parse(e))}catch{return null}},io=e=>{try{let t=w();f.mkdirSync(t,{recursive:!0,mode:448}),Ze(S.join(t,me),JSON.stringify(e),384)}catch{}},Xo=()=>{try{f.rmSync(S.join(w(),me),{force:!0})}catch{}},Qo=()=>({session:L.env[Ye],cleared:L.env[Qe],currentConfig:L.env[ze],currentProject:L.env[Xe],autoLoadedMarker:L.env[Z]}),Zo=()=>{try{return f.statSync(S.join(w(),M)).mtimeMs}catch{return null}},er=e=>{try{let t=S.join(w(),M);if(!f.existsSync(t))return!1;let o=f.statSync(t).mtimeMs;return e!==null&&o<=e?!1:new RegExp(`^unset ${Z}$`,"m").test(f.readFileSync(t,"utf-8"))}catch{return!1}},oo=()=>{try{let e=w(),t=S.join(e,Be);if(!f.existsSync(t))return!1;let o=S.join(e,M);return f.existsSync(o)?f.statSync(t).mtimeMs>=f.statSync(o).mtimeMs:!0}catch{return!1}},tr=()=>{try{let e=S.join(w(),ue);return f.existsSync(e)?Date.now()-f.statSync(e).mtimeMs<Yo:!1}catch{return!1}},or=()=>{try{let e=w();f.mkdirSync(e,{recursive:!0,mode:448}),f.writeFileSync(S.join(e,ue),"",{mode:384})}catch{}},rr=()=>{try{f.rmSync(S.join(w(),ue),{force:!0})}catch{}},G=(e,t)=>{try{let o=w(),r=S.join(o,t);if(f.existsSync(r))return;f.mkdirSync(o,{recursive:!0,mode:448}),f.writeFileSync(r,"",{mode:384})}catch{}l.warn(e)};var pe=async({projectDir:e}={})=>{await _({expectedTrigger:"shell-startup",projectDir:e,force:!0})};var so="https://dashboard.doppler.com/workplace/projects",nr=(e,t)=>["Removing it locally does NOT revoke it \u2014 the token still works anywhere else it is stored.",`Revoke it in Doppler (project "${e}", config "${t}"): ${so}/${e}`],fe=async({env:e})=>{let o=!!(await et())?.envs[e];await ot(e);let r=await j(),n=await O(),s=await F();o?l.info(`Removed the "${e}" service token from ${h(s)}.`):l.info(`No "${e}" service token was stored in ${h(s)} \u2014 nothing to remove.`),r.length>0&&l.info(`Purged ${r.length} warm cache(s) across this repo's worktrees.`);for(let i of nr(n,e))l.warn(i);let a={env:e,removed:o,storePath:s,warmCachesPurged:r.length,revokeUrl:`${so}/${n}`};return{content:N(JSON.stringify(a,null,2)),structuredContent:a}};import ir from"@inquirer/password";import K from"node:process";import{$ as V}from"zx";var sr=async({stdin:e,fromEnv:t})=>{if(e)return{token:await ar(),source:"stdin"};if(t){let r=K.env[t];if(!r)throw new Error(`${t} is not set (or is empty) \u2014 nothing to store.`);return{token:r,source:"env"}}return P.setInteractive(),{token:(await $(r=>ir({message:"Paste the Doppler service token (input is hidden)",mask:!0},r),{output:K.stderr})).trim(),source:"prompt"}},ar=async()=>{let e=[];K.stdin.setEncoding("utf8");for await(let t of K.stdin)e.push(t);return e.join("").trim()},ge="DOPPLER_CONFIG",cr=3e4,lr=async(e,t,o)=>{let r=V.quiet;V.quiet=!0;let n;try{n=(await V({env:ct(e)})`doppler secrets download --no-file --format json --project ${t} --config ${o}`.timeout(cr)).stdout}catch(s){throw dr(s,o)}finally{V.quiet=r}return dt(n)},dr=(e,t)=>{let o=Oe(e)??(e instanceof Error?e.message:String(e));if(He(o)!=="auth")return e instanceof Error?e:new Error(String(e));let r=Je(o)==="mis-scoped"?"it is scoped to a DIFFERENT config (pasting another environment's token here is the mistake this check exists to catch).":"it is invalid or has been revoked.";return new Error([`Doppler refused this token for config "${t}" \u2014 ${r}`,"Nothing was written. Issue a service token scoped to that config and try again."].join(`
+`))},ur=e=>[`Could not verify this token's scope: the Doppler payload for "${e}" carries no ${ge}.`,"Refusing to store a credential whose scope is unknown (a token for the wrong environment would load","the wrong secrets into every shell).","Re-run with --force if you are certain the token is scoped to this config."].join(`
+`),he=async({env:e,stdin:t,fromEnv:o,force:r})=>{let n=await O(),{token:s,source:a}=await sr({stdin:t,fromEnv:o});if(!s)throw new Error("No token provided \u2014 nothing was written.");let i=await lr(s,n,e);lt(i,e);let c=i.some(([y])=>y===ge);if(!c&&!r)throw new Error(ur(e));await tt(e,s);let u=await j(),d=await F();l.info(`Stored the "${e}" service token (${te(s)}) in ${h(d)} (mode 0600).`),c||l.warn(`Scope was NOT verified (no ${ge} in the payload) \u2014 written because --force was given.`),u.length>0&&l.info(`Purged ${u.length} warm cache(s) so the next shell cannot serve secrets fetched with an old token.`);let p={env:e,source:a,redactedToken:te(s),storePath:d,scopeVerified:c,warmCachesPurged:u.length};return P.print(),{content:N(JSON.stringify(p,null,2)),structuredContent:p}};import{spawn as mr}from"node:child_process";import H from"node:process";import{fileURLToPath as pr}from"node:url";var fr=["SIGINT","SIGTERM"],ao=()=>pr(new URL("./mcp.js",import.meta.url)),ve=(e={})=>{let t=e.spawn??mr,o=e.exit??(a=>H.exit(a)),r=e.env??H.env,n=e.onError??(a=>l.error(a)),s=t(H.execPath,[ao()],{stdio:"inherit",env:Ge(r)});s.on("error",a=>{n(`failed to launch the MCP server: ${a.message}`),o(1)}),fr.forEach(a=>{H.on(a,()=>{s.kill(a)})}),s.on("exit",(a,i)=>{o(i?1:a??1)})};var ye=async(e,t,o=!0)=>{let{from:r,version:n,env:s,services:a,skipTerraform:i,yes:c,dryRun:u,printEnv:d}=e,p=await Lt(r);return o&&P.addOption("--from",p),It(p,{"--version":n,"--skip-terraform":i,"--dry-run":u,"--print-env":d}),p==="local"?t==="all"?Mt({env:s,confirmedCommand:c,dryRun:u,printEnv:d}):Ft({env:s,service:a,confirmedCommand:c,dryRun:u,printEnv:d}):t==="all"?_t({version:n,env:s,skipTerraform:i,confirmedCommand:c}):Nt({version:n,env:s,services:a,skipTerraform:i,confirmedCommand:c})},we=async e=>ye(e,"all"),Se=async e=>ye(e,"selected"),J=async(e,t)=>{let o=`release deploy-${t} --from local`;return l.warn(`\`local deploy-${t}\` is deprecated and will be removed \u2014 use \`${o}\` instead.`),ye({...e,from:"local"},t,!1)};import{VENDOR_CONFIG_FILE as lo}from"@slip-stream-kit/config/internal";import ke from"node:fs/promises";import Re from"node:path";import co from"node:process";import{pathToFileURL as gr}from"node:url";var uo="~/projects",Pe=async(e={})=>{if(e.init){await vr(e.cwd);return}await hr()},hr=async()=>{let e=ee(),t=await E(e);if(l.info(`Factory config: ${h(e)}   ${t?"[\u2713]":"[ ]"}`),!t){l.info("\nNot found \u2014 run `infra-kit vendor config --init` to scaffold it."),co.exitCode=1;return}let{workspaceDir:o,targets:r}=await gt(),n=ft(o),s=await E(n);l.info(`workspaceDir:   ${o}   (resolved: ${n})   ${s?"[\u2713 exists]":"[ ] not found"}`),l.info("Targets:");let a=s;for(let i of r){let c=Re.join(n,i),u=await E(c);u||(a=!1);let d=u?"[\u2713]":"[ ]",p=u?"":"   (not found \u2014 clone or remove)";l.info(`  ${d} ${i}   ${h(c)}${p}`)}a||(co.exitCode=1)},vr=async e=>{let t=ee();if(await E(t)){l.info(`Factory config already exists at ${h(t)} \u2014 leaving it untouched.`);return}let o=e??await Me(),r=await yr(o);await ke.mkdir(Re.dirname(t),{recursive:!0}),await ke.writeFile(t,wr(r),"utf-8"),l.info(`\u2713 Created ${h(t)}`),r.length>0&&l.info(`  Seeded ${r.length} target(s) from the source ${lo}.`),l.info(`  Edit \`workspaceDir\` (placeholder: ${uo}) to point at where your repos live.`),r.length===0&&l.info("  Add at least one repo name to `targets` before running vendor sync/manifest/diff.")},yr=async e=>{try{let t=Re.join(e,lo),o=await ke.stat(t),s=(await import(`${gr(t).href}?mtime=${Number(o.mtimeMs)}`)).default,a=typeof s=="function"?await s():s;if(a&&typeof a=="object"&&"targets"in a){let i=a.targets;if(Array.isArray(i)&&i.every(c=>typeof c=="string"))return i}}catch{}return[]},wr=e=>`${JSON.stringify({workspaceDir:uo,targets:e},null,2)}
+`;var B=(e,t=!0)=>({line:e,reproducible:t});import Y from"node:fs";import Sr from"node:os";import kr from"node:path";import go from"node:process";var z="INFRA_KIT_SESSION_REPORT",xe=null,mo=!1,po=[],ho=(e=go.env)=>{mo||(xe=e[z]??null,mo=!0,delete e[z])};var vo=(e,t)=>{if(!xe)return;let o=e.summary??(po.length>0?[...po]:void 0),r={...e,...o?{summary:o}:{}},n=t?.write??((s,a)=>{Y.writeFileSync(s,a)});try{n(xe,JSON.stringify(r))}catch{}},fo=0,yo=e=>{let t=e?.tmpdir?.()??Sr.tmpdir(),o=e?.pid??go.pid;return fo+=1,kr.join(t,`infra-kit-session-${o}-${fo}.json`)},wo=(e,t)=>{if(!(t?.exists??(a=>Y.existsSync(a)))(e))return null;let r=t?.read??(a=>Y.readFileSync(a,"utf-8")),n=t?.unlink??(a=>Y.unlinkSync(a)),s;try{s=r(e)}catch{return null}finally{try{n(e)}catch{}}try{return JSON.parse(s)}catch{return null}};var Ce=e=>{e.options.some(o=>o.long==="--debug")||e.option("--debug","Raise the log level to debug (logs stay on stderr)"),e.commands.forEach(Ce)};var Pr=(e,t)=>[...t,e],So=(e,t)=>{if(!(typeof e>"u")){if(e===!0)return"workspace";if(e===!1)return"none";if(typeof e=="string"&&oe.includes(e))return e;throw new Error(`Invalid ${t} value "${String(e)}". Expected one of: ${oe.join(", ")}.`)}},xr=e=>e.description("Merge dev branch into every release branch").option("-a, --all","Select all active release branches").option("-v, --versions <versions>","Specify versions by comma, e.g. 1.2.5, 1.2.6").option("-y, --yes","Skip confirmation prompt").option("--dry-run","Compute and print the merge plan without pushing anything").option("--verify [command]","Check each merge before pushing it. Bare runs `pnpm install --frozen-lockfile`; pass a command to run that instead. A branch that fails is dropped from the push, never rolled back").action(async t=>{let o=await bt(()=>At({all:t.all,versions:t.versions,dryRun:t.dryRun,verify:t.verify,confirmedCommand:t.yes}));m(o),o.structuredContent.failedMerges>0&&(b.exitCode=1)}),Cr=e=>e.description("List all release branches").action(async()=>{m(await Ot())}),Er=e=>e.description("Create one or more release branches (each entry can mix regular/hotfix and its own description)").option("-r, --release <spec>",'Release spec "<version|next|name>[:type[:description]]" (repeatable). The token is a semver ("1.2.5"), the literal "next", or a kebab-case name ("checkout-redesign"). Type is regular|hotfix (default regular). Examples: "1.2.5", "1.2.5:hotfix", "next:regular:Holiday backend", "checkout-redesign:regular:Q3 redesign".',Pr,[]).option("-y, --yes","Skip confirmation prompt").action(async t=>{let r=t.release.map(wt),n=r.length>0?r:void 0;m(await $t({releases:n,confirmedCommand:t.yes}))}),br=e=>e.description("Edit a release's description in Jira and in the matching GitHub PR body").option("-v, --version <version>","Release version (e.g. 1.2.5) or release name (e.g. checkout-redesign)").option("-d, --description <description>",'New description (use "" to clear)').option("-y, --yes","Skip confirmation prompt").action(async t=>{m(await jt({version:t.version,description:t.description,confirmedCommand:t.yes}))}),ko=e=>e.option("-f, --from <where>",`Where the deploy runs: ${Dt.join(" | ")} (required)`).option("-v, --version <version>",'With --from ci: version (e.g. 1.2.5) or release name to deploy; "dev" deploys from the dev branch. Prompts when omitted').option("-e, --env <env>","Specify the environment to deploy to, e.g. dev").option("-y, --yes","Skip confirmation prompt").option("--skip-terraform","With --from ci: skip the terraform deployment step").option("--dry-run","With --from local: resolve target, contract and commands without deploying").option("--print-env","With --from local: print the resolved build contract"),Ar=e=>ko(e).description("Deploy every service to any environment, in CI or from this machine").action(async t=>{m(await we({from:t.from,version:t.version,env:t.env,skipTerraform:t.skipTerraform,yes:t.yes,dryRun:t.dryRun,printEnv:t.printEnv}))}),Tr=e=>ko(e).description("Deploy selected services to any environment, in CI or from this machine").option("-s, --services <services...>","Specify services to deploy, e.g. client-be client-fe").action(async t=>{m(await Se({from:t.from,version:t.version,env:t.env,services:t.services,skipTerraform:t.skipTerraform,yes:t.yes,dryRun:t.dryRun,printEnv:t.printEnv}))}),Dr=e=>e.description("Release a new version to production").option("-v, --version <version>","Version (e.g. 1.2.5) or release name (e.g. checkout-redesign) to deliver").option("-y, --yes","Skip confirmation prompt").action(async t=>{m(await Tt({version:t.version,confirmedCommand:t.yes}))}),Ir=e=>e.description("Tear down a release: worktree, PR, branches, and the Jira fix version").option("-v, --version <version>","Version (e.g. 1.2.5) or release name (e.g. checkout-redesign) to remove").option("--move-issues-to <version>","Reassign issues carrying the fix version to this version before removing it").option("--skip-jira","Remove everything except the Jira fix version").option("-y, --yes","Skip confirmation prompt").action(async t=>{m(await Ut({version:t.version,moveIssuesTo:t.moveIssuesTo,skipJira:t.skipJira,confirmedCommand:t.yes}))}),Lr=e=>e.description("Remove release worktrees whose PRs are no longer open").option("-y, --yes","Skip confirmation prompt").action(async t=>{m(await Bt({confirmedCommand:t.yes}))}),_r=e=>e.description("Add git worktrees for release branches").option("-y, --yes","Skip confirmation prompt").option("-a, --all","Select all active release branches").option("-v, --versions <versions>","Specify versions by comma, e.g. 1.2.5, 1.2.6").option("-i, --ide [mode]","Editor mode for created worktrees: workspace (default) | none").option("--no-ide","Skip the editor (alias for --ide none)").option("-c, --cursor [mode]","Deprecated alias for --ide").option("--no-cursor","Deprecated alias for --no-ide").option("-g, --github-desktop","Open created worktrees in GitHub Desktop").option("--no-github-desktop","Skip GitHub Desktop prompt").option("-m, --cmux","Open created worktrees in cmux (3-pane layout)").option("--no-cmux","Skip cmux prompt").action(async t=>{let o=So(t.ide,"--ide")??So(t.cursor,"--cursor");m(await Kt({confirmedCommand:t.yes,all:t.all,versions:t.versions,ide:o,githubDesktop:t.githubDesktop,cmux:t.cmux}))}),Nr=e=>e.description("List all git worktrees with detailed information").action(async()=>{m(await Ht())}),Or=e=>e.description("Remove git worktrees for release branches").option("-y, --yes","Skip confirmation prompt").option("-a, --all","Select all active release branches").option("-v, --versions <versions>","Specify versions by comma, e.g. 1.2.5, 1.2.6").action(async t=>{m(await Jt({confirmedCommand:t.yes,all:t.all,versions:t.versions}))}),Mr=e=>e.description("Reopen editor + cmux windows for every active worktree in the current project (additive, idempotent)").option("--all","Reopen across every discovered infra-kit project (Stage 3 \u2014 not yet implemented)").option("--project <names...>","Restrict --all to these project names").option("--root <paths...>","Discovery roots for --all (repeatable)").option("--release-only","Restrict to release worktrees (reproduces the legacy worktrees-reload scope)").option("--force","Close each cmux workspace first, then reopen (the legacy worktrees-reload behaviour)").option("--dry-run","Print the plan (paths + cmux titles) and spawn nothing").action(async t=>{m(await qt({all:t.all,project:t.project,root:t.root,releaseOnly:t.releaseOnly,force:t.force,dryRun:t.dryRun}))}),Fr=e=>e.description("Show the machine-local factory config (~/.infra-kit/vendor.json) or scaffold it with --init").option("--init","Scaffold ~/.infra-kit/vendor.json (skips if it already exists)").action(async t=>{m(await Pe({init:t.init}))}),$r=e=>e.description("Verify vendor/ matches vendor/.sync-manifest.json (self-contained; for any consumer repo)").action(async()=>{let t=await Wt();m(t),t.structuredContent.ok||(b.exitCode=1)}),jr=e=>e.description("Show the resolved config merge chain and file paths").action(async()=>{m(await ae())}),Ur=e=>e.description("Open the user-scope per-project override file in $EDITOR").action(async()=>{m(await ce())}),qr=new Set(["setup","doctor","version","dev","mcp"]),Gr=e=>e.startsWith("env-")||qr.has(e),Wr=new Set(["env-autoload","mcp","version"]),X=e=>{let t=[];for(let o=e;o&&o.parent;o=o.parent)t.unshift(o.name());return t.join(" ")},Ee=()=>{let e=new Rr,t=e.command("release").description("Release management commands");xr(t.command("merge-dev")),Cr(t.command("list")),Er(t.command("create")),br(t.command("desc-edit")),Ar(t.command("deploy-all")),Tr(t.command("deploy-selected")),Dr(t.command("deliver")),Ir(t.command("remove"));let o=e.command("worktrees").description("Git worktree management commands");_r(o.command("add")),Nr(o.command("list")),Or(o.command("remove")),Lr(o.command("sync")),Mr(e.command("reopen"));let r=e.command("config").description("Manage infra-kit configuration files");jr(r.command("path")),Ur(r.command("edit")),e.command("config-get").description("Print the fully merged infra-kit config (project + user-global + per-project override layers)").action(async()=>{m(await qe())});let n=e.command("local").description("Deprecated \u2014 use `release deploy-all|deploy-selected --from local`"),s=i=>i.option("-e, --env <name>","Target environment (prompts when omitted)").option("-y, --yes","Skip the confirmation prompt").option("--dry-run","Resolve target, contract and commands without deploying").option("--print-env","Print the resolved build contract");s(n.command("deploy-all")).description("Deprecated \u2014 use `release deploy-all --from local`").action(async i=>{m(await J({env:i.env,yes:i.yes,dryRun:i.dryRun,printEnv:i.printEnv},"all"))}),s(n.command("deploy-selected")).description("Deprecated \u2014 use `release deploy-selected --from local`").option("-s, --service <name...>","Service name(s), as in deploy-<name>.sh (prompts when omitted)").action(async i=>{m(await J({env:i.env,services:i.service,yes:i.yes,dryRun:i.dryRun,printEnv:i.printEnv},"selected"))}),e.command("audit").description("Audit against infra-kit.config.ts rules (--all for every package, --root for the monorepo root)").option("-a, --all","Audit every non-vendor workspace package").option("-r, --root","Audit the monorepo root (turbo pipeline + root commands)").option("--fix","Write the infra-kit guidance block into CLAUDE.md for the audited scope before checking (CLI-only)").option("--design","With --fix: scaffold DESIGN.md for frontend/mobile packages that lack one").action(async i=>{if(i.design&&!i.fix){l.error("--design requires --fix (it scaffolds DESIGN.md; there is nothing to scaffold without a fix run)"),b.exitCode=1;return}let c=await Ue({all:i.all,root:i.root,fix:i.fix,design:i.design});m(c);let{allPassed:u,fixed:d}=c.structuredContent,p=(d??[]).some(y=>y.action==="failed");(!u||p)&&(b.exitCode=1)});let a=e.command("vendor").description("Verify the mirrored vendor/ tree");return $r(a.command("check")),Fr(a.command("config")),e.command("doctor").description("Check installation and authentication status of gh and doppler CLIs").option("--fix","Remove portless routes left behind by a dev-server that was killed (kill -9, OOM, force-quit). Refuses while a dev session is running, when a booting UI is indistinguishable from a dead route.").option("--ascii","Render the report with ASCII markers instead of unicode glyphs (check messages are unchanged)").action(async i=>{let c=await St({fix:!!i.fix});D.enabled||Ve(c.structuredContent.checks,{ascii:!!i.ascii}),c.structuredContent.checks.some(d=>d.name==="plugin installed"&&d.status==="fail")&&(b.exitCode=1),m(c)}),e.command("mcp").description("Run the infra-kit MCP server (stdio transport)").action(()=>{ve()}),e.command("dev").description("Run local dev servers for a named devServersPresets preset (or all apps); api + ui").argument("[preset]","Named preset from devServersPresets (omit to run every app)").option("-w, --watch","Rebuild and restart on file save").option("--app <names>","Further narrow to these app folder names (comma-separated)").option("--target <keys>","Run exactly these <app>/api|<app>/ui packages (comma-separated); part-level, unlike --app").option("--cmux","Run each app in its own cmux pane (one workspace, N panes; falls back to single terminal if cmux is unavailable)").option("--self","Run only the app of the current directory (infer from cwd; use inside apps/<app>/\u2026)").option("-V, --verbose","Print full boot narration (default: quiet; full detail always in the session log)").option("--routes","Print each app\u2019s registered METHOD /path routes at startup (default: off)").option("--no-ui-health","Do not probe the frontends\u2019 liveness (vite\u2019s HMR ping); their rows carry no health dot (also: INFRA_KIT_NO_UI_HEALTH=1)").action(async(i,c)=>{let{runDevServerCli:u}=await import("./dev-server.js"),d=!!(b.stdout.isTTY&&b.stdin.isTTY);await u({...c,preset:i},d,D.enabled)}),e.command("dev-status").description("Show what `infra-kit dev` currently has running (reads dev-context fragments; starts nothing)").action(async()=>{m(await We())}),e.command("setup").description("Set this machine up: shell integration, agent files, MCP server, then the external tools").option("--tools <ids...>","Limit to these tools (brew, aws, gh, doppler, portless)").option("--update [ids...]","Update what is already installed; never install a missing tool").option("--skip-tools","Do the local setup only, then REPORT what each tool needs \u2014 installs nothing").action(async i=>{m(await Gt({tools:i.tools,update:i.update,skipTools:i.skipTools}))}),e.command("version").description("Print the installed infra-kit CLI version").action(async()=>{m(await Vt())}),e.command("env-status").description("Show which env is loaded in this session (local introspection; no Doppler call)").action(async()=>{m(await Pt())}),e.command("env-list").description("List available Doppler configs for the detected project, and whether a service token resolves for each").action(async()=>{m(await Rt())}),e.command("env-load").description("Load Doppler env vars for a config. Source the returned file path to apply.").option("-c, --config <config>","Environment config name to load (e.g. dev, arthur)").action(async i=>{m(await at({config:i.config}))}),e.command("env-clear").description("Clear loaded env vars. Source the returned file path to apply.").option("--purge","Also delete this project's warm cache outright (durable disable)").action(async i=>{m(await kt({purge:!!i.purge}))}),e.command("env-token-set").description("Store the Doppler service token for an env (masked prompt; validated against Doppler before writing)").argument("<env>","Environment / Doppler config the token is scoped to (e.g. dev)").option("--stdin","Read the token from stdin instead of prompting (e.g. from a password manager)").option("--from-env <var>","Read the token from the named environment variable (the NAME, never the value)").option("--force","Store even when the token\u2019s scope could not be verified. Never overrides a real mismatch.").action(async(i,c)=>{m(await he({env:i,stdin:c.stdin,fromEnv:c.fromEnv,force:c.force}))}),e.command("env-token-list").description("Show which envs have a Doppler service token (redacted), and where it came from").option("--check","Also ask Doppler whether each token is valid and correctly scoped").action(async i=>{m(await xt({check:!!i.check}))}),e.command("env-token-remove").description("Delete an env\u2019s Doppler service token from the local store (does NOT revoke it in Doppler)").argument("<env>","Environment / Doppler config whose token to remove").action(async i=>{m(await fe({env:i}))}),e.command("env-autoload",{hidden:!0}).description("Internal: prime env for the shell-startup auto-load trigger").option("--project-dir <dir>","Canonical project dir for the warm-cache key (shell-startup only)").action(async i=>{await pe({projectDir:i.projectDir})}),e.commands.forEach(Ct),Ce(e),e.hook("preAction",async(i,c)=>{P.start(X(c)),D.enabled=!!c.optsWithGlobals().json,D.enabled&&(l.level="warn"),Wr.has(X(c))||await pt(),W(),Gr(c.name())||await _({expectedTrigger:"cli-invocation"})}),e.hook("postAction",(i,c)=>{let u=X(c);if(Qt(u))return;let p=P.snapshot()?.formattedOptions??"",y=p?` ${p}`:"",R=`infra-kit ${u}${y}`;vo({equivalent:B(R,!0)})}),e};var be=(e,t="  ")=>{let o=e.reduce((r,[n])=>Math.max(r,n.length),0);return e.map(([r,n])=>`${r.padEnd(o)}${t}${n}`)};import{chalkStderr as un}from"chalk";import{spawn as mn}from"node:child_process";import v from"node:process";import{Chalk as Vr}from"chalk";var A=new Vr({level:1}),k={ok:"ok",findingsPlain:"completed with findings",failed:"failed",cancelled:"cancelled",findingsSuffix:"findings",sep:" \xB7 ",reproPrefix:"$ ",nonReproPrefix:"\u2248 ",envNotice:"Applies to your shell after you exit this session."},Kr={suspend:{unicode:"any key commands \xB7 Esc / Ctrl-C quit \xB7 Ctrl-Z suspend",ascii:"any key commands - Esc / Ctrl-C quit - Ctrl-Z suspend"},plain:{unicode:"any key commands \xB7 Esc / Ctrl-C quit",ascii:"any key commands - Esc / Ctrl-C quit"}},Ro={ok:{unicode:"\u2713",ascii:"[ok]"},findings:{unicode:"\u26A0",ascii:"[!]"},failed:{unicode:"\u2717",ascii:"[x]"},cancelled:{unicode:"\u2298",ascii:"[-]"}},Po={unicode:"\u2500",ascii:"-"},Hr=3,Ae=e=>e,Jr={ok:e=>A.green(e),findings:e=>A.yellow(e),failed:e=>A.red(e),cancelled:e=>A.gray(e)},De=e=>e?{dim:t=>A.dim(t),bold:t=>A.bold(t)}:{dim:Ae,bold:Ae},Br=(e,t)=>e?Jr[t]:Ae,Te=e=>[...e].length,Yr=(e,t)=>{if(t==null)return e;let o=Math.max(0,t-1);return Te(e)<=o?e:[...e].slice(0,o).join("")},xo=e=>{let t=De(e.color===!0).dim,o=Kr[e.canSuspend?"suspend":"plain"],r=e.ascii===!0?o.ascii:o.unicode;return t(Yr(r,e.width))},Co=(e,t={})=>{let o=De(t.color===!0);return`${o.dim(k.reproPrefix.trim())} ${o.bold(e)}`},zr=e=>e<1e3?`${Math.round(e)}ms`:`${(e/1e3).toFixed(1)}s`,Xr=(e,t)=>e==="findings"?t!=null?`${t} ${k.findingsSuffix}`:k.findingsPlain:{ok:k.ok,failed:k.failed,cancelled:k.cancelled}[e],Qr=(e,t,o,r)=>{if(t==null)return"";let n=t-2-e;return n<Hr?"":` ${r(o.repeat(n))}`},Eo=e=>{let t=e.color===!0,o=De(t),r=Br(t,e.outcome),n=e.ascii===!0,s=e.equivalent.reproducible?k.reproPrefix:k.nonReproPrefix,a=n?Ro[e.outcome].ascii:Ro[e.outcome].unicode,i=Xr(e.outcome,e.findingsCount),c=[zr(e.durationMs)],u=e.summary?.[0]?.split(`
+`)[0];u!=null&&u.length>0&&c.push(u);let d=`${a} ${i}`,p=`${k.sep}${c.join(k.sep)}`,y=Te(d)+Te(p),R=Qr(y,e.width,n?Po.ascii:Po.unicode,o.dim),C=[`${r(d)}${o.dim(p)}${R}`];return e.showEquivalent!==!1&&C.unshift(`${o.dim(s.trim())} ${o.bold(e.equivalent.line)}`),e.envNotice===!0&&C.push(o.dim(k.envNotice)),C.join(`
+`)};var Zr=new Set([130,143]),bo=(e,t,o,r=!1)=>o?t!=null||e===0?"ok":"findings":r&&e!=null&&Zr.has(e)||t==="SIGINT"||e===0?"cancelled":"failed";import en from"node:process";var tn={3:"quit",4:"quit",26:"suspend",27:"quit"},on=e=>{if(e.length!==1)return"continue";let t=typeof e=="string"?e.charCodeAt(0):e[0];return t===void 0||Number.isNaN(t)?"continue":tn[t]??"continue"},rn=150,nn="\r\x1B[2K",sn=`\r
+`,Ao=(e,t)=>{To(e),e.stdin.on("data",t),e.listener=t},To=e=>{e.listener!==null&&(e.stdin.off("data",e.listener),e.listener=null)},Do=(e,t)=>{nt(),e.stdin.setRawMode(!0),e.stdin.isPaused()&&e.stdin.resume(),Ao(e,t)},Io=e=>{e.hintOnScreen&&(e.hintOnScreen=!1,e.deps.write(nn)),To(e),e.stdin.isTTY===!0&&e.stdin.isRaw===!0&&e.stdin.setRawMode(!1),it()},an=e=>{e.settled||(e.settled=!0,Io(e))},Lo=(e,t)=>{let o=xo({canSuspend:e.deps.suspend!==void 0,ascii:e.deps.ascii,color:e.deps.color,width:e.deps.columns()});e.deps.write(t+o),e.hintOnScreen=!0},cn=async e=>{await new Promise(t=>{setTimeout(t,e)})},ln=(e,t,o)=>{Io(e),t(),Do(e,o),Lo(e,sn)},dn=async e=>new Promise(t=>{let o=r=>{let n=on(r),s=e.deps.suspend;if(n==="quit"){t("quit");return}if(n==="suspend"&&s!==void 0){ln(e,s,o);return}t("palette")};Ao(e,o),Lo(e,"")}),_o=async(e,t)=>{if(e.quitRequested())return"quit";let o=t.stdin??en.stdin;if(o.isTTY!==!0)return"palette";let r={deps:t,stdin:o,listener:null,hintOnScreen:!1,settled:!1};try{return Do(r,()=>{}),e.armed(),await cn(t.drainMs??rn),await dn(r)}finally{an(r)}};import No from"node:process";var x={column:"\r",sgr:"\x1B[0m",cursor:"\x1B[?25h",wrap:"\x1B[?7h",saveCursor:"\x1B7",restoreCursor:"\x1B8",scrollRegion:"\x1B[r",primaryBuffer:"\x1B[?1049l"},Oo=(e,t)=>{let o=t?.write??(s=>{No.stderr.write(s)}),r=t?.stdin??No.stdin,n=[x.saveCursor,x.scrollRegion,x.restoreCursor,x.column,x.sgr,x.cursor,x.wrap];e.entersAltScreen===!0&&n.push(x.primaryBuffer),o(n.join("")),r.isTTY===!0&&r.isRaw===!0&&r.setRawMode?.(!1)};var Mo=e=>`infra-kit ${e.groupPath.join(" ")}`,pn=()=>{fn();let e=v.stderr.columns;return e!=null&&e>0?e:void 0},fn=()=>{let e=v.stderr;typeof e._refreshSize=="function"&&e._refreshSize()},gn=e=>new Promise(t=>{e.on("exit",(o,r)=>{t({code:o,signal:r})}),e.on("error",()=>{t({code:1,signal:null})})}),hn=async(e,t,o)=>{let r=yo(),n={...t.env,[z]:r,INFRA_KIT_NO_AUTO_UPDATE:"1"},s=t.now(),a={code:1,signal:null};o();try{let p=t.spawn(v.execPath,[t.cliPath,...e.groupPath],{stdio:"inherit",env:n});a=await gn(p)}catch{a={code:1,signal:null}}finally{t.resetTerminal({entersAltScreen:e.entersAltScreen})}let i=wo(r),c=bo(a.code,a.signal,i!=null,e.longRunning),u=Mo(e),d=i?.equivalent??B(u,!0);return Eo({equivalent:d,outcome:c,durationMs:t.now()-s,summary:i?.summary,envNotice:e.sessionEnvNotice,ascii:t.ascii,color:t.color,width:t.columns(),showEquivalent:!(d.reproducible&&d.line===u)})},vn=1e3,yn=(e,t)=>e!=null&&t-e<=vn,Ie=e=>{e.resetTerminal(),e.exit(0)},wn=(e,t)=>{let o=null,r=!1,n=()=>{let c=e();if(c==="child"){o=t.now();return}c!=="pause"&&Ie(t)},s=()=>{let c=e();if(c==="palette"){Ie(t);return}if(!yn(o,t.now())){if(c==="pause"){Ie(t);return}r=!0}},a=()=>{t.exit(129)},i=()=>{e()==="child"&&t.raise("SIGSTOP")};return t.register("SIGINT",n),t.register("SIGTERM",s),t.register("SIGHUP",a),t.register("SIGTSTP",i),{dispose:()=>{t.unregister("SIGINT",n),t.unregister("SIGTERM",s),t.unregister("SIGHUP",a),t.unregister("SIGTSTP",i)},childStarted:()=>{o=null},quitRequested:()=>r}},Fo=(e,t)=>!!(t.stdoutIsTTY&&t.stdinIsTTY&&t.stderrIsTTY&&e.TERM!=="dumb"&&!e.INFRA_KIT_NO_SESSION&&!e.INFRA_KIT_SESSION_REPORT),Sn=v.platform==="win32"?void 0:()=>{Et()},kn=(e,t)=>o=>_o(o,{write:e,columns:t.columns,ascii:t.ascii,color:t.color,suspend:Sn}),$o=async(e,t)=>{let o={spawn:t.spawn??mn,now:t.now??(()=>Date.now()),env:t.env??v.env,cliPath:t.cliPath,ascii:t.ascii??!(v.stdout.isTTY&&v.env.TERM!=="dumb"),color:t.color??un.level>0,columns:t.columns??pn,resetTerminal:t.resetTerminal??(d=>{Oo(d)})},r=t.write??(d=>v.stderr.write(d)),n="palette",s=t.signals??{register:(d,p)=>{v.on(d,p)},unregister:(d,p)=>{v.off(d,p)},exit:d=>{v.exit(d)},raise:d=>{v.kill(v.pid,d)},now:()=>Date.now(),resetTerminal:()=>{n==="pause"&&r("\r\x1B[2K"),o.resetTerminal({entersAltScreen:!1})}},a={dispose:()=>{},childStarted:()=>{},quitRequested:()=>!1},i=t.installSignals===!1?a:wn(()=>n,s),c={armed:()=>{n="pause"},quitRequested:()=>i.quitRequested()},u=t.afterRun??kn(r,o);try{for(;;){if(i.quitRequested())return;n="palette";let d=await t.renderPalette(e);if(d==null)return;let p=t.resolveCommand(d);if(!p)continue;let y=Co(Mo(p),{color:o.color});r(`
+${y}
+`),i.childStarted();let R=await hn(p,o,()=>{n="child"});if(r(`
+${R}
+`),await u(c)==="quit")return}}finally{i.dispose()}};import{spawn as xn}from"node:child_process";import Uo from"node:fs";import T from"node:process";import{fileURLToPath as qo}from"node:url";var jo=["INFRA_KIT_NO_AUTO_UPDATE","NO_UPDATE_NOTIFIER","CI"],Rn=new Set(["mcp"]),Pn=e=>e[2]!=null&&Rn.has(e[2]),Le=e=>{let{argv:t,env:o,isTty:r,selfRealPath:n,cwd:s,realpath:a}=e;return jo.some(c=>{let u=o[c];return u!=null&&u!==""})?"opt-out":t.includes("--json")?"json":Pn(t)?"own-command":r?U(n,s,a)?"local-install":null:"not-a-tty"};var Cn=e=>{xn(T.execPath,[e,"--parent-pid",String(T.pid)],{detached:!0,stdio:"ignore",windowsHide:!0}).unref()},En=()=>qo(new URL("./update-check.js",import.meta.url)),bn=()=>Uo.realpathSync(qo(new URL("./cli.js",import.meta.url))),An=/^[\w@./+ -]+$/i,Tn=e=>An.test(e),Dn=(e,t,o)=>{!e?.latestVersion||!e.updateCommand||ne(e.latestVersion,t)&&e.updateCommand.every(Tn)&&o(`infra-kit ${e.latestVersion} is available (you have ${t}). Run: ${yt(e.updateCommand)}`)},_e=(e,t={})=>{try{let o=t.argv??T.argv,r=t.env??T.env,n=t.isTty??!!T.stdout.isTTY,s=t.cwd??T.cwd(),a=t.nowMs??Date.now(),i=t.selfRealPath??bn(),c=t.readCache??ie,u=t.spawnChild??Cn,d=t.fileExists??(C=>Uo.existsSync(C)),p=t.notify??(C=>{l.info(C)});if(Le({argv:o,env:r,isTty:n,selfRealPath:i,cwd:s,realpath:q})!==null)return;let y=c();if(Dn(y,e,p),!se(y,a))return;let R=t.childPath??En();if(!d(R))return;u(R)}catch{}};Zt();ho();var Ne=Ee(),Wo=async e=>{try{e?await Ne.parseAsync(e):await Ne.parseAsync()}catch(t){re(t)&&(l.info("Operation cancelled."),g.exit(0));let o=t instanceof Error?t.message:String(t);l.error(o),g.exit(1)}},_n=()=>{try{if(g.env.INFRA_KIT_NO_LOCATION_WARN||g.argv.includes("--json")||g.argv[2]==="mcp")return;U(Ln(Vo(import.meta.url)),g.cwd(),q)&&l.info("Running from a project-local node_modules. Install globally for faster startup: npm i -g infra-kit")}catch{}};_n();_e(Fe.version);var Ko=()=>eo(Ne.commands),Nn=async()=>{let e=Ko(),t=null;try{if(g.stdout.isTTY&&g.stdin.isTTY){let{runCommandPalette:o}=await import("./boot-AJLBGRED.js");t=await o(e)}else{let o=be(e.map(n=>[n.name,n.description])),r=e.flatMap((n,s)=>[...e[s-1]?.group===n.group?[]:[new Go(" "),new Go(`\u2014 ${n.group} \u2014`)],{name:o[s]??n.name,value:n.name}]);t=await $(n=>In({message:"Select a command to run",choices:r},n),{output:g.stderr})}}catch(o){if(!re(o))throw o}return t},On=async()=>{let{runCommandPalette:e}=await import("./boot-AJLBGRED.js"),t=Vo(import.meta.url),o=new Map(zt.map(r=>[r.groupPath.join(" "),r]));await $o(Ko(),{renderPalette:e,resolveCommand:r=>{let n=o.get(r);return n?{groupPath:n.groupPath,entersAltScreen:n.entersAltScreen,sessionEnvNotice:n.sessionEnvNotice,longRunning:n.longRunning}:void 0},cliPath:t})};if(g.argv.length<=2){let e={stdoutIsTTY:!!g.stdout.isTTY,stdinIsTTY:!!g.stdin.isTTY,stderrIsTTY:!!g.stderr.isTTY};if(Fo(g.env,e))await On();else{let t=await Nn();t&&await Wo(["node","infra-kit",...t.split(" ")])}}else await Wo();
 //# sourceMappingURL=cli.js.map