localdeck 1.5.0 → 1.6.2

package/dist/{index-tv699dzb.js → index-xsyz4cc9.js}

@@ -2977,6 +2977,7 @@ function writePrivateJson(file, value) {
 }
 
 // ../daemon/src/project-config.ts
+import { createHash } from "node:crypto";
 import fs2 from "node:fs";
 import path2 from "node:path";
 var DEFAULT_READY_TIMEOUT_MS = 60000;
@@ -3003,7 +3004,7 @@ function loadProject(from = process.cwd()) {
 function loadProjectFile(file) {
   const raw = readProjectJson(file);
   const commands = normalize(raw, file);
-  const profiles = parseProfiles(raw, commands, file);
+  const { profiles, legacyProfiles } = parseProfiles(raw, commands, file);
   let nickname;
   if (raw && typeof raw === "object" && !Array.isArray(raw) && (Array.isArray(raw.commands) || Array.isArray(raw.services))) {
     const value = raw.nickname;
@@ -3013,7 +3014,7 @@ function loadProjectFile(file) {
       nickname = value.toLowerCase();
     }
   }
-  return { file, dir: path2.dirname(file), commands, ...profiles ? { profiles } : {}, ...nickname ? { nickname } : {} };
+  return { file, dir: path2.dirname(file), commands, ...profiles ? { profiles } : {}, ...legacyProfiles ? { legacyProfiles } : {}, ...nickname ? { nickname } : {} };
 }
 function updateProjectNickname(file, nickname) {
   const raw = readProjectJson(file);
@@ -3174,35 +3175,8 @@ function normalize(raw, file) {
     if (serviceType && serviceType !== "http" && (entry.upstream == null || entry.port != null)) {
       throw new Error(`${path2.basename(file)}: database services need an explicit upstream (published port) and must not set an HTTP proxy port`);
     }
-    let env;
-    if (entry.env !== undefined) {
-      if (!entry.env || typeof entry.env !== "object" || Array.isArray(entry.env))
-        throw new Error(`${path2.basename(file)}: env must be an object of strings`);
-      env = {};
-      for (const [key, value2] of Object.entries(entry.env)) {
-        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key) || typeof value2 !== "string" || value2.includes("\x00"))
-          throw new Error(`${path2.basename(file)}: env must contain valid variable names and string values`);
-        if (key === "PORT" || key.startsWith("LOCALDECK_"))
-          throw new Error(`${path2.basename(file)}: ${key} is reserved by LocalDeck`);
-        Object.defineProperty(env, key, { value: value2, enumerable: true, writable: true, configurable: true });
-      }
-    }
-    let secrets;
-    if (entry.secrets !== undefined) {
-      if (!Array.isArray(entry.secrets) || !entry.secrets.every((value2) => typeof value2 === "string" && /^[A-Za-z_][A-Za-z0-9_]*$/.test(value2))) {
-        throw new Error(`${path2.basename(file)}: secrets must contain valid environment names`);
-      }
-      secrets = [];
-      for (const secret of entry.secrets) {
-        if (secret === "PORT" || secret.startsWith("LOCALDECK_"))
-          throw new Error(`${path2.basename(file)}: ${secret} is reserved by LocalDeck`);
-        if (env && Object.prototype.hasOwnProperty.call(env, secret))
-          throw new Error(`${path2.basename(file)}: ${secret} cannot be both a secret and env setting`);
-        if (secrets.includes(secret))
-          throw new Error(`${path2.basename(file)}: duplicate secret ${secret}`);
-        secrets.push(secret);
-      }
-    }
+    const env = entry.env === undefined ? undefined : parseEnv(entry.env, file);
+    const secrets = entry.secrets === undefined ? undefined : parseSecrets(entry.secrets, env, file);
     out.push({
       name,
       run,
@@ -3220,6 +3194,35 @@ function normalize(raw, file) {
   validateDependencies(out, file);
   return out;
 }
+function parseEnv(value, file) {
+  if (!value || typeof value !== "object" || Array.isArray(value))
+    throw new Error(`${path2.basename(file)}: env must be an object of strings`);
+  const env = {};
+  for (const [key, setting] of Object.entries(value)) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key) || typeof setting !== "string" || setting.includes("\x00"))
+      throw new Error(`${path2.basename(file)}: env must contain valid variable names and string values`);
+    if (key === "PORT" || key.startsWith("LOCALDECK_"))
+      throw new Error(`${path2.basename(file)}: ${key} is reserved by LocalDeck`);
+    Object.defineProperty(env, key, { value: setting, enumerable: true, writable: true, configurable: true });
+  }
+  return env;
+}
+function parseSecrets(value, env, file) {
+  if (!Array.isArray(value) || !value.every((name) => typeof name === "string" && /^[A-Za-z_][A-Za-z0-9_]*$/.test(name))) {
+    throw new Error(`${path2.basename(file)}: secrets must contain valid environment names`);
+  }
+  const secrets = [];
+  for (const secret of value) {
+    if (secret === "PORT" || secret.startsWith("LOCALDECK_"))
+      throw new Error(`${path2.basename(file)}: ${secret} is reserved by LocalDeck`);
+    if (env && Object.prototype.hasOwnProperty.call(env, secret))
+      throw new Error(`${path2.basename(file)}: ${secret} cannot be both a secret and env setting`);
+    if (secrets.includes(secret))
+      throw new Error(`${path2.basename(file)}: duplicate secret ${secret}`);
+    secrets.push(secret);
+  }
+  return secrets;
+}
 function parseReadiness(value, file, index) {
   if (value === "postgres" || value === "redis") {
     return { type: "command", run: value === "postgres" ? "pg_isready -h 127.0.0.1 -p {upstream}" : "redis-cli -h 127.0.0.1 -p {upstream} ping", ...value === "redis" ? { expectedOutput: "PONG" } : {}, timeoutMs: DEFAULT_READY_TIMEOUT_MS, intervalMs: DEFAULT_READY_INTERVAL_MS };
@@ -3264,22 +3267,159 @@ function parseReadiness(value, file, index) {
     throw new Error(`${path2.basename(file)}: expectedOutput must be a string of at most 4000 characters`);
   return { type, run: ready.run, ...ready.expectedOutput === undefined ? {} : { expectedOutput: ready.expectedOutput }, timeoutMs, intervalMs };
 }
+var OVERRIDE_FIELDS = ["run", "cwd", "env", "secrets"];
 function parseProfiles(raw, commands, file) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw) || !Array.isArray(raw.services) && !Array.isArray(raw.commands))
-    return;
+    return {};
   const value = raw.profiles;
   if (value === undefined)
-    return;
+    return {};
+  const base = path2.basename(file);
   if (!value || typeof value !== "object" || Array.isArray(value))
-    throw new Error(`${path2.basename(file)}: profiles must map names to arrays of service names`);
-  const profiles = Object.create(null);
-  for (const [name, services] of Object.entries(value)) {
-    if (!/^[a-z0-9][a-z0-9_-]{0,40}$/.test(name) || !Array.isArray(services) || !services.length || !services.every((service) => typeof service === "string" && commands.some((command) => command.name === service.toLowerCase()))) {
-      throw new Error(`${path2.basename(file)}: profile ${name} must contain existing service names`);
+    throw new Error(`${base}: profiles must map names to profile objects`);
+  const entries = Object.entries(value);
+  if (!entries.length)
+    return {};
+  for (const [name] of entries)
+    if (!/^[a-z0-9][a-z0-9_-]{0,40}$/.test(name))
+      throw new Error(`${base}: invalid profile name "${name}"`);
+  const lists = entries.filter(([, profile]) => Array.isArray(profile));
+  if (lists.length && lists.length !== entries.length)
+    throw new Error(`${base}: profiles cannot mix service lists and profile objects; move service lists to tags`);
+  const byName = new Map(commands.map((command) => [command.name, command]));
+  if (lists.length) {
+    const legacyProfiles = Object.create(null);
+    for (const [name, services] of lists) {
+      if (!services.length || !services.every((service) => typeof service === "string" && byName.has(service.toLowerCase()))) {
+        throw new Error(`${base}: profile ${name} must contain existing service names`);
+      }
+      legacyProfiles[name] = [...new Set(services.map((service) => service.toLowerCase()))];
+      for (const service of legacyProfiles[name]) {
+        const command = byName.get(service);
+        if (!command.tags.includes(name))
+          command.tags.push(name);
+      }
+    }
+    return { legacyProfiles };
+  }
+  const profiles = [];
+  for (const [name, entry] of entries) {
+    if (!entry || typeof entry !== "object")
+      throw new Error(`${base}: profile ${name} must be an object`);
+    const record = entry;
+    const unknownKey = Object.keys(record).find((key) => key !== "description" && key !== "services");
+    if (unknownKey)
+      throw new Error(`${base}: profile ${name} has unknown field "${unknownKey}"; use "description" and "services"`);
+    if (record.description !== undefined && (typeof record.description !== "string" || record.description.length > 200))
+      throw new Error(`${base}: profile ${name} description must be a string of at most 200 characters`);
+    const services = record.services ?? {};
+    if (!services || typeof services !== "object" || Array.isArray(services))
+      throw new Error(`${base}: profile ${name} services must map service names to overrides`);
+    const overrides = Object.create(null);
+    for (const [rawService, rawOverride] of Object.entries(services)) {
+      const service = rawService.toLowerCase();
+      const command = byName.get(service);
+      if (!command)
+        throw new Error(`${base}: profile ${name} changes unknown service "${rawService}"`);
+      if (!rawOverride || typeof rawOverride !== "object" || Array.isArray(rawOverride))
+        throw new Error(`${base}: profile ${name} override for ${service} must be an object`);
+      const override = rawOverride;
+      const field = Object.keys(override).find((key) => !OVERRIDE_FIELDS.includes(key));
+      if (field)
+        throw new Error(`${base}: profile ${name} cannot change ${service}.${field}; profiles can change run, cwd, env and secrets`);
+      if (override.run !== undefined && (typeof override.run !== "string" || !override.run.trim()))
+        throw new Error(`${base}: profile ${name} ${service}.run must be a non-empty string`);
+      if (override.cwd !== undefined && typeof override.cwd !== "string")
+        throw new Error(`${base}: profile ${name} ${service}.cwd must be a string`);
+      const env = override.env === undefined ? undefined : parseEnv(override.env, file);
+      const secrets = override.secrets === undefined ? undefined : parseSecrets(override.secrets, env, file);
+      const parsed = {
+        ...override.run === undefined ? {} : { run: override.run },
+        ...override.cwd === undefined ? {} : { cwd: override.cwd },
+        ...env ? { env } : {},
+        ...secrets ? { secrets } : {}
+      };
+      checkEnvSecretOverlap(mergeOverride(command, parsed).command, `profile ${name}`, file);
+      overrides[service] = parsed;
     }
-    profiles[name] = [...new Set(services.map((service) => service.toLowerCase()))];
+    profiles.push({ name, ...record.description ? { description: record.description } : {}, services: overrides });
   }
-  return profiles;
+  return { profiles };
+}
+function mergeOverride(command, override) {
+  const env = override.env ? { ...command.env, ...override.env } : command.env;
+  const secrets = override.secrets ? [...new Set([...command.secrets ?? [], ...override.secrets])] : command.secrets;
+  return {
+    command: {
+      ...command,
+      ...override.run === undefined ? {} : { run: override.run },
+      ...override.cwd === undefined ? {} : { cwd: override.cwd },
+      ...env ? { env } : {},
+      ...secrets ? { secrets } : {}
+    }
+  };
+}
+function checkEnvSecretOverlap(command, source, file) {
+  const overlap = command.secrets?.find((secret) => command.env && Object.prototype.hasOwnProperty.call(command.env, secret));
+  if (overlap)
+    throw new Error(`${path2.basename(file)}: ${source} makes ${overlap} both a secret and env setting for ${command.name}`);
+}
+function applyProfiles(project, active = []) {
+  const wanted = new Set(active);
+  const applied = (project.profiles ?? []).filter((profile) => wanted.has(profile.name));
+  const provenance = Object.create(null);
+  const setters = new Map;
+  const commands = project.commands.map((base) => {
+    const origin = {
+      run: "base",
+      cwd: "base",
+      env: Object.fromEntries(Object.keys(base.env ?? {}).map((key) => [key, "base"])),
+      secrets: Object.fromEntries((base.secrets ?? []).map((secret) => [secret, "base"]))
+    };
+    let command = base;
+    for (const profile of applied) {
+      const override = profile.services[base.name];
+      if (!override)
+        continue;
+      const note = (field) => {
+        const key = `${base.name}\x00${field}`;
+        setters.set(key, [...setters.get(key) ?? [], profile.name]);
+      };
+      if (override.run !== undefined) {
+        origin.run = profile.name;
+        note("run");
+      }
+      if (override.cwd !== undefined) {
+        origin.cwd = profile.name;
+        note("cwd");
+      }
+      for (const key of Object.keys(override.env ?? {})) {
+        origin.env[key] = profile.name;
+        note(`env.${key}`);
+      }
+      for (const secret of override.secrets ?? [])
+        if (!(secret in origin.secrets))
+          origin.secrets[secret] = profile.name;
+      command = mergeOverride(command, override).command;
+    }
+    if (command !== base)
+      checkEnvSecretOverlap(command, `active profiles ${applied.map((profile) => profile.name).join(" + ")}`, project.file);
+    provenance[base.name] = origin;
+    return command;
+  });
+  const clashes = [];
+  for (const [key, profiles] of setters) {
+    if (profiles.length < 2)
+      continue;
+    const [service, field] = key.split("\x00");
+    clashes.push({ service, field, profiles, winner: profiles[profiles.length - 1] });
+  }
+  return { commands, active: applied.map((profile) => profile.name), provenance, clashes };
+}
+function commandFingerprint(command) {
+  const env = Object.entries(command.env ?? {}).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+  const secrets = [...command.secrets ?? []].sort();
+  return createHash("sha256").update(JSON.stringify([command.run, command.cwd ?? "", env, secrets])).digest("hex").slice(0, 16);
 }
 function parseBoundedInteger(value, fallback, min, max, label, file, index) {
   if (value === undefined)
@@ -3424,10 +3564,10 @@ import path8 from "node:path";
 // ../daemon/src/worktrees.ts
 import fs4 from "node:fs";
 import path4 from "node:path";
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 
 // ../daemon/src/projects.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 import fs3 from "node:fs";
 import { execFileSync } from "node:child_process";
 import path3 from "node:path";
@@ -3559,19 +3699,40 @@ class ProjectRegistry {
   list() {
     return this.sorted().map((project) => this.toSummary(project));
   }
-  details(projectId) {
+  details(projectId, profiles) {
     const project = this.require(projectId);
+    let loaded;
     try {
-      const loaded = this.load(project);
-      return { ...project, nickname: this.nickname(projectId), available: true, commands: loaded.commands, ...loaded.profiles ? { profiles: loaded.profiles } : {} };
+      loaded = this.load(project);
     } catch (error) {
       return { ...project, available: false, error: errorMessage(error), commands: [] };
     }
+    const wanted = profiles ?? project.activeProfiles ?? [];
+    const { activeProfiles: _stored, ...remembered } = project;
+    const base = { ...remembered, nickname: this.nickname(projectId), available: true, ...loaded.legacyProfiles ? { legacyProfiles: loaded.legacyProfiles } : {} };
+    const summaries = (active) => loaded.profiles?.length ? { profiles: loaded.profiles.map((profile) => ({ name: profile.name, ...profile.description ? { description: profile.description } : {}, services: Object.keys(profile.services), active: active.includes(profile.name) })) } : {};
+    try {
+      const resolved = applyProfiles(loaded, wanted);
+      return {
+        ...base,
+        ...resolved.active.length ? { activeProfiles: resolved.active } : {},
+        commands: resolved.commands,
+        ...summaries(resolved.active),
+        ...resolved.clashes.length ? { profileClashes: resolved.clashes } : {},
+        provenance: resolved.provenance,
+        fingerprints: Object.fromEntries(resolved.commands.map((command) => [command.name, commandFingerprint(command)]))
+      };
+    } catch (error) {
+      const active = (loaded.profiles ?? []).map((profile) => profile.name).filter((name) => wanted.includes(name));
+      return { ...base, ...active.length ? { activeProfiles: active } : {}, commands: loaded.commands, ...summaries(active), profileError: errorMessage(error) };
+    }
   }
-  resolve(projectId, serviceName2) {
-    const details = this.details(projectId);
+  resolve(projectId, serviceName2, profiles) {
+    const details = this.details(projectId, profiles);
     if (!details.available)
       throw new ProjectError("invalid", details.error);
+    if (details.profileError)
+      throw new ProjectError("invalid", details.profileError);
     const command = details.commands.find((candidate) => candidate.name === serviceName2.toLowerCase());
     if (!command)
       throw new ProjectError("not_found", `Project ${projectId} has no service named ${serviceName2}`);
@@ -3632,6 +3793,37 @@ class ProjectRegistry {
     project.configNickname = nickname || undefined;
     return this.updateNickname(projectId, "");
   }
+  setActiveProfiles(projectId, names) {
+    const project = this.require(projectId);
+    if (!Array.isArray(names) || !names.every((name) => typeof name === "string"))
+      throw new ProjectError("invalid", "profiles must be an array of profile names");
+    let defined;
+    try {
+      defined = (this.load(project).profiles ?? []).map((profile) => profile.name);
+    } catch (error) {
+      throw new ProjectError("invalid", errorMessage(error));
+    }
+    const requested = names.map((name) => name.toLowerCase());
+    const unknown = requested.filter((name) => !defined.includes(name));
+    if (unknown.length)
+      throw new ProjectError("invalid", `Unknown profile${unknown.length > 1 ? "s" : ""} ${unknown.join(", ")}. Available profiles: ${defined.join(", ") || "(none)"}`);
+    const previous = project.activeProfiles;
+    const active = defined.filter((name) => requested.includes(name));
+    if (active.length)
+      project.activeProfiles = active;
+    else
+      delete project.activeProfiles;
+    try {
+      this.persist();
+    } catch (error) {
+      if (previous === undefined)
+        delete project.activeProfiles;
+      else
+        project.activeProfiles = previous;
+      throw error;
+    }
+    return this.details(projectId);
+  }
   updateDependencies(projectId, serviceName2, after) {
     const project = this.require(projectId);
     try {
@@ -3750,7 +3942,7 @@ class ProjectRegistry {
   }
 }
 function projectId(realFile) {
-  return createHash("sha256").update(realFile).digest("hex").slice(0, 16);
+  return createHash2("sha256").update(realFile).digest("hex").slice(0, 16);
 }
 function slugify(value) {
   return value.toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -3768,7 +3960,7 @@ function isRememberedProject(value) {
   if (!["id", "name", "slug", "file", "directory"].every((key) => typeof project[key] === "string"))
     return false;
   const { id, slug, file, directory } = project;
-  return path3.isAbsolute(file) && path3.normalize(file) === file && directory === path3.dirname(file) && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(slug) && /^[a-f0-9]{16}$/.test(id) && (project.nickname === undefined || typeof project.nickname === "string" && validNickname(project.nickname)) && (project.configNickname === undefined || typeof project.configNickname === "string" && validNickname(project.configNickname)) && (project.sharedConfigNickname === undefined || typeof project.sharedConfigNickname === "boolean") && id === projectId(file) && typeof project.lastUsedAt === "number" && Number.isFinite(project.lastUsedAt);
+  return path3.isAbsolute(file) && path3.normalize(file) === file && directory === path3.dirname(file) && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(slug) && /^[a-f0-9]{16}$/.test(id) && (project.nickname === undefined || typeof project.nickname === "string" && validNickname(project.nickname)) && (project.configNickname === undefined || typeof project.configNickname === "string" && validNickname(project.configNickname)) && (project.sharedConfigNickname === undefined || typeof project.sharedConfigNickname === "boolean") && (project.activeProfiles === undefined || Array.isArray(project.activeProfiles) && project.activeProfiles.every((name) => typeof name === "string" && /^[a-z0-9][a-z0-9_-]{0,40}$/.test(name))) && id === projectId(file) && typeof project.lastUsedAt === "number" && Number.isFinite(project.lastUsedAt);
 }
 function validNickname(value) {
   return value.length <= 63 && /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(value);
@@ -3834,7 +4026,7 @@ function discoverWorktrees(projects, projectId2) {
     const known = registered.get(configFile);
     const branch = fields.find((field) => field.startsWith("branch "))?.slice(7).replace(/^refs\/heads\//, "");
     environments.push({
-      id: createHash2("sha256").update(configFile).digest("hex").slice(0, 16),
+      id: createHash3("sha256").update(configFile).digest("hex").slice(0, 16),
       ...known ? { projectId: known.id } : {},
       directory,
       configFile,
@@ -6134,16 +6326,20 @@ async function handleApi(req, res, url, parts, deps) {
         const secretValues = Object.values((deps.resolveProjectSecrets ?? resolveProjectSecrets)(projectId2, names));
         return json(res, 200, { report: diagnosticReport(project, services, logs, deps.version, [deps.controlToken, ...secretValues]) });
       }
-      if (parts.length === 4 && parts[2] === "profiles" && method === "POST") {
+      if (parts.length === 3 && parts[2] === "profiles" && method === "GET") {
+        const details = requireRememberedProject(projects, projectId2);
+        if (!details.available)
+          throw new ProjectError("invalid", details.error ?? "project configuration is invalid");
+        return json(res, 200, profilesResponse(details));
+      }
+      if (parts.length === 4 && parts[2] === "profiles" && parts[3] === "active" && method === "PUT") {
         requireMutationAllowed(deps);
-        await readBody(req);
+        const body2 = await readBody(req);
         requireMutationAllowed(deps);
-        const project = projects.details(projectId2);
-        const names = project.profiles?.[parts[3]];
-        if (!project.available || !names)
-          throw new HttpError(422, "Unknown or unavailable startup profile");
-        const results = await Promise.all(names.map((name) => supervisor.start(projectId2, name)));
-        return json(res, 200, { ok: results.every((result) => result.ok), results });
+        if (!body2 || typeof body2 !== "object" || Array.isArray(body2) || Object.keys(body2).some((key) => key !== "profiles"))
+          throw new HttpError(400, 'request body must be { "profiles": [...] }');
+        const details = projects.setActiveProfiles(projectId2, body2.profiles);
+        return json(res, 200, profilesResponse(details));
       }
       if (parts.length === 2 && method === "GET") {
         const details = projects.details(projectId2);
@@ -6459,6 +6655,8 @@ function parseAttachMessage(raw) {
     if (input.upstreamSource !== undefined && input.upstreamSource !== "assigned" && input.upstreamSource !== "manual")
       throw new Error("upstreamSource must be assigned or manual");
     optionalPid(input.pid);
+    if (input.profiles !== undefined && (!Array.isArray(input.profiles) || input.profiles.length > 64 || !input.profiles.every((name) => typeof name === "string" && /^[a-z0-9][a-z0-9_-]{0,40}$/.test(name))))
+      throw new Error("profiles must be an array of profile names");
     return input;
   }
   if (input.type === "log") {
@@ -6541,10 +6739,10 @@ function buildRegistration(message, deps) {
       pid: message.pid
     };
   }
-  const project = deps.projects.details(requestedProject);
+  const project = deps.projects.details(requestedProject, message.profiles);
   if (!project.available)
     throw new ProjectError("invalid", project.error ?? "project configuration is invalid");
-  const command = deps.projects.resolve(requestedProject, canonicalName);
+  const command = deps.projects.resolve(requestedProject, canonicalName, message.profiles);
   if (command.serviceType && command.serviceType !== "http" && (message.upstreamPort !== command.upstream || message.stablePort !== undefined)) {
     throw new Error("database registration must use its configured published upstream port");
   }
@@ -6563,7 +6761,18 @@ function buildRegistration(message, deps) {
     upstreamSource: message.upstreamSource ?? (command.upstream === undefined ? "assigned" : "manual"),
     cwd,
     command: command.run,
-    pid: message.pid
+    pid: message.pid,
+    ...project.activeProfiles?.length ? { profiles: project.activeProfiles } : {},
+    configFingerprint: commandFingerprint(command)
+  };
+}
+function profilesResponse(details) {
+  return {
+    profiles: details.profiles ?? [],
+    active: details.activeProfiles ?? [],
+    clashes: details.profileClashes ?? [],
+    ...details.profileError ? { error: details.profileError } : {},
+    ...details.legacyProfiles ? { legacyProfiles: details.legacyProfiles } : {}
   };
 }
 function requireDirectory(cwd) {
@@ -6803,6 +7012,8 @@ class Registry {
       pid: opts.pid,
       cwd: opts.cwd,
       command: opts.command,
+      ...opts.profiles?.length ? { profiles: [...opts.profiles] } : {},
+      ...opts.configFingerprint ? { configFingerprint: opts.configFingerprint } : {},
       startedAt: Date.now(),
       upstreamReady: false,
       urls: [
@@ -7042,7 +7253,7 @@ import fs11 from "node:fs";
 // ../daemon/src/activity.ts
 import fs10 from "node:fs";
 import path11 from "node:path";
-import { randomUUID as randomUUID3, createHash as createHash3 } from "node:crypto";
+import { randomUUID as randomUUID3, createHash as createHash4 } from "node:crypto";
 
 // ../daemon/src/history.ts
 function isAfterHistoryBoundary(id, boundary) {
@@ -7077,7 +7288,7 @@ function sanitizeSignature(value, secrets2) {
   return redactDiagnostic(querySafe, secrets2.flatMap((secret) => [secret, encodeURIComponent(secret)]));
 }
 function boundedSignature(value) {
-  return value.length <= 300 ? value : `${value.slice(0, 230)}… [${createHash3("sha256").update(value).digest("hex")}]`;
+  return value.length <= 300 ? value : `${value.slice(0, 230)}… [${createHash4("sha256").update(value).digest("hex")}]`;
 }
 function validEvent(value) {
   if (!value || typeof value !== "object")
@@ -7227,7 +7438,7 @@ class Activity {
       throw new Error("Search must be at most 200 characters");
     const all = this.records(projectId2, services), coverage = this.coverage(services, all);
     let cursor;
-    const scope = createHash3("sha256").update([...new Set(services)].sort().join(",")).digest("hex");
+    const scope = createHash4("sha256").update([...new Set(services)].sort().join(",")).digest("hex");
     if (options.cursor) {
       try {
         if (options.cursor.length > 4096)
@@ -7345,7 +7556,7 @@ class ResponseBodies {
 
 // ../daemon/src/store.ts
 import path12 from "node:path";
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 import { EventEmitter } from "node:events";
 import { finished } from "node:stream/promises";
 import { Writable } from "node:stream";
@@ -7436,7 +7647,7 @@ class Store extends EventEmitter {
     return `${this.daemonStartedAt.toString(36)}-${(++this.sequence).toString(36)}`;
   }
   compatibilityId(type, service, offset, serialized) {
-    const hash = createHash4("sha256").update(`${type}\x00${service}\x00${offset}\x00${serialized}`).digest("hex");
+    const hash = createHash5("sha256").update(`${type}\x00${service}\x00${offset}\x00${serialized}`).digest("hex");
     return `legacy-${hash}`;
   }
   historyFile(service, type) {
@@ -8551,7 +8762,9 @@ class ProcessSupervisor {
         upstreamSource: command.upstream === undefined ? "assigned" : "manual",
         cwd,
         command: command.run,
-        serviceType: command.serviceType
+        serviceType: command.serviceType,
+        ...project.activeProfiles?.length ? { profiles: project.activeProfiles } : {},
+        configFingerprint: commandFingerprint(command)
       }, () => void this.stop(key, "stop requested"));
     } catch (error) {
       this.releaseAutomaticUpstream(reservedUpstreamPort);
@@ -9028,7 +9241,7 @@ async function waitForProcessGroupExit(groupId, timeoutMs) {
   return true;
 }
 // ../daemon/package.json
-var version = "1.5.0";
+var version = "1.6.2";
 
 // ../daemon/src/index.ts
 var VERSION = version;
@@ -9308,6 +9521,8 @@ class Api {
   shareInfo = (key) => this.call("GET", `/api/services/${encodeURIComponent(key)}/share`);
   replay = (key, requestId) => this.call("POST", `/api/services/${encodeURIComponent(key)}/replay`, { requestId });
   services = () => this.call("GET", "/api/services");
+  profiles = (projectId2) => this.call("GET", `/api/projects/${encodeURIComponent(projectId2)}/profiles`);
+  setActiveProfiles = (projectId2, profiles) => this.call("PUT", `/api/projects/${encodeURIComponent(projectId2)}/profiles/active`, { profiles });
   rememberProject = (file, token) => this.call("POST", "/api/projects/remember", { file }, { authorization: `Bearer ${token}` });
   async servicePath(reference) {
     const separator = reference.lastIndexOf("/");
@@ -9332,4 +9547,4 @@ class Api {
   shutdown = () => this.call("POST", "/api/shutdown");
 }
 
-export { __toESM, __commonJS, __export, __require, wrapper_default, HOME_DIR, STATE_FILE, DEFAULT_API_PORT, assertUserRuntime, isPortFree, getFreePort, findProjectFile, loadProject, loadProjectFile, shellCommand, redactDiagnostic, environmentValues, listProjectSecrets, resolveProjectSecrets, startForwarder, serviceKey, processTree, listeningPorts, chooseUpstream, unreachableListenerMessage, connectHost, streamLines, killProcessTree, stripAnsi, startupGuidance, inferPortEnvironment, startupLayers, waitForReadiness, secretOutput, VERSION, startDaemon, findDaemon, dashboardDir, ensureDaemon, Api };
+export { __toESM, __commonJS, __export, __require, wrapper_default, HOME_DIR, STATE_FILE, DEFAULT_API_PORT, assertUserRuntime, isPortFree, getFreePort, findProjectFile, loadProject, loadProjectFile, applyProfiles, shellCommand, redactDiagnostic, environmentValues, listProjectSecrets, resolveProjectSecrets, startForwarder, serviceKey, processTree, listeningPorts, chooseUpstream, unreachableListenerMessage, connectHost, streamLines, killProcessTree, stripAnsi, startupGuidance, inferPortEnvironment, startupLayers, waitForReadiness, secretOutput, VERSION, startDaemon, findDaemon, dashboardDir, ensureDaemon, Api };