reset-framework-cli 1.2.0 → 1.2.2

package/src/lib/project.js

@@ -1,8 +1,8 @@
-import { existsSync, readFileSync } from "node:fs"
-import { createRequire } from "node:module"
-import path from "node:path"
-import { fileURLToPath } from "node:url"
-
+import { existsSync, readFileSync } from "node:fs"
+import { createRequire } from "node:module"
+import path from "node:path"
+import { fileURLToPath } from "node:url"
+
 const require = createRequire(import.meta.url)
 
 const runtimePackageDescriptors = [
@@ -31,166 +31,166 @@ const runtimePackageDescriptors = [
     binarySegments: ["dist", "win32-x64", "reset-framework.exe"]
   }
 ]
-
-function requireString(object, key, scope) {
-  if (typeof object?.[key] !== "string" || object[key].trim() === "") {
-    throw new Error(`Missing or invalid string field '${scope}.${key}'`)
-  }
-
-  return object[key]
-}
-
-function optionalString(object, key, fallback) {
-  if (object == null || !(key in object)) {
-    return fallback
-  }
-
-  if (typeof object[key] !== "string" || object[key].trim() === "") {
-    throw new Error(`Missing or invalid string field '${key}'`)
-  }
-
-  return object[key]
-}
-
-function optionalObject(object, key) {
-  if (object == null || !(key in object)) {
-    return {}
-  }
-
-  if (typeof object[key] !== "object" || object[key] === null || Array.isArray(object[key])) {
-    throw new Error(`Missing or invalid object field '${key}'`)
-  }
-
-  return object[key]
-}
-
-function sanitizeName(value) {
-  return value
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, "-")
-    .replace(/^-+|-+$/g, "") || "reset-app"
-}
-
-function normalizeFrontendDir(value) {
-  const trimmed = value.trim()
-
-  if (trimmed === "." || trimmed === "./") {
-    return "."
-  }
-
-  if (path.isAbsolute(trimmed)) {
-    throw new Error("project.frontendDir must be a relative path")
-  }
-
-  const normalized = path.normalize(trimmed).replace(/\\/g, "/").replace(/\/+$/g, "")
-
-  if (normalized === "" || normalized === ".") {
-    return "."
-  }
-
-  if (normalized.startsWith("../")) {
-    throw new Error("project.frontendDir cannot point outside the app root")
-  }
-
-  return normalized
-}
-
-function normalizeStyling(value) {
-  if (value === "css" || value === "tailwindcss") {
-    return value
-  }
-
-  throw new Error("project.styling must be either 'css' or 'tailwindcss'")
-}
-
-function normalizeProtocolScheme(value) {
-  if (typeof value !== "string" || value.trim() === "") {
-    throw new Error("protocols.schemes[].scheme must be a non-empty string")
-  }
-
-  const normalized = value.trim().toLowerCase()
-  if (!/^[a-z][a-z0-9+.-]*$/.test(normalized)) {
-    throw new Error(
-      "protocols.schemes[].scheme must start with a letter and only contain letters, numbers, '+', '-', and '.'"
-    )
-  }
-
-  return normalized
-}
-
-function normalizeProtocolRole(value) {
-  if (value === "Editor" || value === "Viewer" || value === "Shell" || value === "None") {
-    return value
-  }
-
-  throw new Error("protocols.schemes[].role must be one of Editor, Viewer, Shell, None")
-}
-
-function toTitleCase(value) {
-  return value
-    .split(/[^a-zA-Z0-9]+/)
-    .filter(Boolean)
-    .map((segment) => segment.charAt(0).toUpperCase() + segment.slice(1))
-    .join(" ") || "Reset App"
-}
-
-function readJsonFile(filePath) {
-  return JSON.parse(readFileSync(filePath, "utf8"))
-}
-
-function fileExists(filePath) {
-  return existsSync(filePath)
-}
-
-function getFrameworkBuildType(mode) {
-  return mode === "release" ? "Release" : "Debug"
-}
-
-function resolveExistingCandidate(candidates) {
-  return candidates.find((candidate) => existsSync(candidate)) ?? null
-}
-
-function isPathInside(parentDir, candidatePath) {
-  const relative = path.relative(parentDir, candidatePath)
-  return relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative)
-}
-
+
+function requireString(object, key, scope) {
+  if (typeof object?.[key] !== "string" || object[key].trim() === "") {
+    throw new Error(`Missing or invalid string field '${scope}.${key}'`)
+  }
+
+  return object[key]
+}
+
+function optionalString(object, key, fallback) {
+  if (object == null || !(key in object)) {
+    return fallback
+  }
+
+  if (typeof object[key] !== "string" || object[key].trim() === "") {
+    throw new Error(`Missing or invalid string field '${key}'`)
+  }
+
+  return object[key]
+}
+
+function optionalObject(object, key) {
+  if (object == null || !(key in object)) {
+    return {}
+  }
+
+  if (typeof object[key] !== "object" || object[key] === null || Array.isArray(object[key])) {
+    throw new Error(`Missing or invalid object field '${key}'`)
+  }
+
+  return object[key]
+}
+
+function sanitizeName(value) {
+  return value
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, "-")
+    .replace(/^-+|-+$/g, "") || "reset-app"
+}
+
+function normalizeFrontendDir(value) {
+  const trimmed = value.trim()
+
+  if (trimmed === "." || trimmed === "./") {
+    return "."
+  }
+
+  if (path.isAbsolute(trimmed)) {
+    throw new Error("project.frontendDir must be a relative path")
+  }
+
+  const normalized = path.normalize(trimmed).replace(/\\/g, "/").replace(/\/+$/g, "")
+
+  if (normalized === "" || normalized === ".") {
+    return "."
+  }
+
+  if (normalized.startsWith("../")) {
+    throw new Error("project.frontendDir cannot point outside the app root")
+  }
+
+  return normalized
+}
+
+function normalizeStyling(value) {
+  if (value === "css" || value === "tailwindcss") {
+    return value
+  }
+
+  throw new Error("project.styling must be either 'css' or 'tailwindcss'")
+}
+
+function normalizeProtocolScheme(value) {
+  if (typeof value !== "string" || value.trim() === "") {
+    throw new Error("protocols.schemes[].scheme must be a non-empty string")
+  }
+
+  const normalized = value.trim().toLowerCase()
+  if (!/^[a-z][a-z0-9+.-]*$/.test(normalized)) {
+    throw new Error(
+      "protocols.schemes[].scheme must start with a letter and only contain letters, numbers, '+', '-', and '.'"
+    )
+  }
+
+  return normalized
+}
+
+function normalizeProtocolRole(value) {
+  if (value === "Editor" || value === "Viewer" || value === "Shell" || value === "None") {
+    return value
+  }
+
+  throw new Error("protocols.schemes[].role must be one of Editor, Viewer, Shell, None")
+}
+
+function toTitleCase(value) {
+  return value
+    .split(/[^a-zA-Z0-9]+/)
+    .filter(Boolean)
+    .map((segment) => segment.charAt(0).toUpperCase() + segment.slice(1))
+    .join(" ") || "Reset App"
+}
+
+function readJsonFile(filePath) {
+  return JSON.parse(readFileSync(filePath, "utf8"))
+}
+
+function fileExists(filePath) {
+  return existsSync(filePath)
+}
+
+function getFrameworkBuildType(mode) {
+  return mode === "release" ? "Release" : "Debug"
+}
+
+function resolveExistingCandidate(candidates) {
+  return candidates.find((candidate) => existsSync(candidate)) ?? null
+}
+
+function isPathInside(parentDir, candidatePath) {
+  const relative = path.relative(parentDir, candidatePath)
+  return relative !== "" && !relative.startsWith("..") && !path.isAbsolute(relative)
+}
+
 function resolvePackageInfo(packageName, fallbackRoot) {
   try {
-    const packageJsonPath = require.resolve(`${packageName}/package.json`)
-    const packageRoot = path.dirname(packageJsonPath)
-    const manifest = readJsonFile(packageJsonPath)
-
-    return {
-      packageName: manifest.name ?? packageName,
-      packageRoot,
-      packageJsonPath,
-      version: manifest.version ?? "0.0.0",
-      localFallback: false
-    }
-  } catch {
-    const packageJsonPath = path.join(fallbackRoot, "package.json")
-    const manifest = readJsonFile(packageJsonPath)
-
-    return {
-      packageName: manifest.name ?? packageName,
-      packageRoot: fallbackRoot,
-      packageJsonPath,
-      version: manifest.version ?? "0.0.0",
-      localFallback: true
-    }
+    const packageJsonPath = require.resolve(`${packageName}/package.json`)
+    const packageRoot = path.dirname(packageJsonPath)
+    const manifest = readJsonFile(packageJsonPath)
+
+    return {
+      packageName: manifest.name ?? packageName,
+      packageRoot,
+      packageJsonPath,
+      version: manifest.version ?? "0.0.0",
+      localFallback: false
+    }
+  } catch {
+    const packageJsonPath = path.join(fallbackRoot, "package.json")
+    const manifest = readJsonFile(packageJsonPath)
+
+    return {
+      packageName: manifest.name ?? packageName,
+      packageRoot: fallbackRoot,
+      packageJsonPath,
+      version: manifest.version ?? "0.0.0",
+      localFallback: true
+    }
   }
 }
 
 function resolveWorkspacePackageInfo(packageName, workspaceRoot, fallbackInfo) {
-  const packageJsonPath = path.join(workspaceRoot, "package.json")
-
-  if (!existsSync(packageJsonPath)) {
-    return fallbackInfo
-  }
-
-  const manifest = readJsonFile(packageJsonPath)
-
+  const packageJsonPath = path.join(workspaceRoot, "package.json")
+
+  if (!existsSync(packageJsonPath)) {
+    return fallbackInfo
+  }
+
+  const manifest = readJsonFile(packageJsonPath)
+
   return {
     packageName: manifest.name ?? packageName,
     packageRoot: workspaceRoot,
@@ -325,7 +325,12 @@ export function resolveFrameworkPaths() {
     "@reset-framework/sdk",
     path.join(packagesDir, "sdk"),
     resolvePackageInfo("@reset-framework/sdk", path.join(packagesDir, "sdk"))
-  )
+  )
+  const backendPackage = resolveWorkspacePackageInfo(
+    "@reset-framework/backend",
+    path.join(packagesDir, "backend"),
+    resolvePackageInfo("@reset-framework/backend", path.join(packagesDir, "backend"))
+  )
   const schemaPackage = resolveWorkspacePackageInfo(
     "@reset-framework/schema",
     path.join(packagesDir, "schema"),
@@ -334,7 +339,7 @@ export function resolveFrameworkPaths() {
   const runtimePackage = resolveRuntimePackage(packagesDir)
   const isWorkspaceLayout =
     isWorkspacePackagesDir &&
-    [cliDir, sdkPackage.packageRoot, schemaPackage.packageRoot].every((packageRoot) =>
+    [cliDir, backendPackage.packageRoot, sdkPackage.packageRoot, schemaPackage.packageRoot].every((packageRoot) =>
       isPathInside(packagesDir, packageRoot)
     )
 
@@ -351,6 +356,7 @@ export function resolveFrameworkPaths() {
     frameworkRoot: nativePackage?.packageRoot ?? null,
     frameworkPackage: nativePackage,
     isWorkspaceLayout,
+    backendPackage,
     sdkPackage,
     schemaPackage,
     runtimePackage,
@@ -361,58 +367,58 @@ export function resolveFrameworkPaths() {
     templatesDir: path.join(cliDir, "templates")
   }
 }
-
+
 export function resolveFrameworkBuildPaths(appPaths) {
-  const frameworkCacheRoot = path.join(appPaths.appRoot, ".reset", "framework")
-  const isWindows = process.platform === "win32"
-  const devRuntimeRoot = path.join(frameworkCacheRoot, "build", "dev", "runtime")
-  const releaseRuntimeRoot = path.join(frameworkCacheRoot, "build", "release", "runtime")
-  const devAppBinaryCandidates = isWindows
-    ? [
-        path.join(devRuntimeRoot, getFrameworkBuildType("dev"), "reset-framework.exe"),
-        path.join(devRuntimeRoot, "reset-framework.exe")
-      ]
-    : [
-        path.join(
-          frameworkCacheRoot,
-          "build",
-          "dev",
-          "runtime",
-          "reset-framework.app",
-          "Contents",
-          "MacOS",
-          "reset-framework"
-        )
-      ]
-  const releaseAppBinaryCandidates = isWindows
-    ? [
-        path.join(releaseRuntimeRoot, getFrameworkBuildType("release"), "reset-framework.exe"),
-        path.join(releaseRuntimeRoot, "reset-framework.exe")
-      ]
-    : [
-        path.join(
-          frameworkCacheRoot,
-          "build",
-          "release",
-          "runtime",
-          "reset-framework.app"
-        )
-      ]
-
-  return {
-    frameworkCacheRoot,
-    devBuildDir: path.join(frameworkCacheRoot, "build", "dev"),
-    releaseBuildDir: path.join(frameworkCacheRoot, "build", "release"),
-    devRuntimeOutputCandidates: isWindows
-      ? [path.join(devRuntimeRoot, getFrameworkBuildType("dev")), devRuntimeRoot]
-      : [path.join(frameworkCacheRoot, "build", "dev", "runtime", "reset-framework.app")],
-    releaseRuntimeOutputCandidates: isWindows
-      ? [path.join(releaseRuntimeRoot, getFrameworkBuildType("release")), releaseRuntimeRoot]
-      : [path.join(frameworkCacheRoot, "build", "release", "runtime", "reset-framework.app")],
-    devAppBinaryCandidates,
-    releaseAppBinaryCandidates,
-    devAppBinary: devAppBinaryCandidates[0],
-    releaseAppTemplate: releaseAppBinaryCandidates[0]
+  const frameworkCacheRoot = path.join(appPaths.appRoot, ".reset", "framework")
+  const isWindows = process.platform === "win32"
+  const devRuntimeRoot = path.join(frameworkCacheRoot, "build", "dev", "runtime")
+  const releaseRuntimeRoot = path.join(frameworkCacheRoot, "build", "release", "runtime")
+  const devAppBinaryCandidates = isWindows
+    ? [
+        path.join(devRuntimeRoot, getFrameworkBuildType("dev"), "reset-framework.exe"),
+        path.join(devRuntimeRoot, "reset-framework.exe")
+      ]
+    : [
+        path.join(
+          frameworkCacheRoot,
+          "build",
+          "dev",
+          "runtime",
+          "reset-framework.app",
+          "Contents",
+          "MacOS",
+          "reset-framework"
+        )
+      ]
+  const releaseAppBinaryCandidates = isWindows
+    ? [
+        path.join(releaseRuntimeRoot, getFrameworkBuildType("release"), "reset-framework.exe"),
+        path.join(releaseRuntimeRoot, "reset-framework.exe")
+      ]
+    : [
+        path.join(
+          frameworkCacheRoot,
+          "build",
+          "release",
+          "runtime",
+          "reset-framework.app"
+        )
+      ]
+
+  return {
+    frameworkCacheRoot,
+    devBuildDir: path.join(frameworkCacheRoot, "build", "dev"),
+    releaseBuildDir: path.join(frameworkCacheRoot, "build", "release"),
+    devRuntimeOutputCandidates: isWindows
+      ? [path.join(devRuntimeRoot, getFrameworkBuildType("dev")), devRuntimeRoot]
+      : [path.join(frameworkCacheRoot, "build", "dev", "runtime", "reset-framework.app")],
+    releaseRuntimeOutputCandidates: isWindows
+      ? [path.join(releaseRuntimeRoot, getFrameworkBuildType("release")), releaseRuntimeRoot]
+      : [path.join(frameworkCacheRoot, "build", "release", "runtime", "reset-framework.app")],
+    devAppBinaryCandidates,
+    releaseAppBinaryCandidates,
+    devAppBinary: devAppBinaryCandidates[0],
+    releaseAppTemplate: releaseAppBinaryCandidates[0]
   }
 }
 
@@ -497,15 +503,15 @@ export function resolveFrameworkRuntimeBinary(frameworkPaths, frameworkBuildPath
     mode === "release"
       ? (frameworkBuildPaths.releaseAppBinaryCandidates ?? [frameworkBuildPaths.releaseAppTemplate])
       : (frameworkBuildPaths.devAppBinaryCandidates ?? [frameworkBuildPaths.devAppBinary])
-  const existing = resolveExistingCandidate(candidates)
-
-  if (existing) {
-    return existing
-  }
-
-  if (mustExist) {
-    throw new Error(`Missing built runtime executable. Looked in: ${candidates.join(", ")}`)
-  }
+  const existing = resolveExistingCandidate(candidates)
+
+  if (existing) {
+    return existing
+  }
+
+  if (mustExist) {
+    throw new Error(`Missing built runtime executable. Looked in: ${candidates.join(", ")}`)
+  }
 
   return candidates[0]
 }
@@ -530,47 +536,60 @@ export function resolveFrameworkRuntimeOutputDir(frameworkPaths, frameworkBuildP
     mode === "release"
       ? (frameworkBuildPaths.releaseRuntimeOutputCandidates ?? [])
       : (frameworkBuildPaths.devRuntimeOutputCandidates ?? [])
-  const existing = resolveExistingCandidate(candidates)
-
-  if (existing) {
-    return existing
-  }
-
-  if (candidates.length > 0) {
-    if (mustExist) {
-      throw new Error(`Missing built runtime output directory. Looked in: ${candidates.join(", ")}`)
-    }
-
-    return candidates[0]
-  }
-
+  const existing = resolveExistingCandidate(candidates)
+
+  if (existing) {
+    return existing
+  }
+
+  if (candidates.length > 0) {
+    if (mustExist) {
+      throw new Error(`Missing built runtime output directory. Looked in: ${candidates.join(", ")}`)
+    }
+
+    return candidates[0]
+  }
+
   return path.dirname(resolveFrameworkRuntimeBinary(frameworkPaths, frameworkBuildPaths, mode, options))
 }
-
-export function resolveAppPaths(appRoot) {
-  return {
-    appRoot,
-    appPackageJsonPath: path.join(appRoot, "package.json"),
-    frontendDir: path.join(appRoot, "frontend"),
-    resetConfigPath: path.join(appRoot, "reset.config.json"),
-    legacyResetConfigPath: path.join(appRoot, "frontend", "reset.config.json")
-  }
-}
-
-export function resolveConfigPath(appPaths) {
-  if (existsSync(appPaths.resetConfigPath)) {
-    return appPaths.resetConfigPath
-  }
-
-  if (existsSync(appPaths.legacyResetConfigPath)) {
-    return appPaths.legacyResetConfigPath
-  }
-
-  return appPaths.resetConfigPath
-}
-
+
+export function resolveAppPaths(appRoot) {
+  return {
+    appRoot,
+    appPackageJsonPath: path.join(appRoot, "package.json"),
+    backendDir: path.join(appRoot, "backend"),
+    frontendDir: path.join(appRoot, "frontend"),
+    resetConfigPath: path.join(appRoot, "reset.config.json"),
+    legacyResetConfigPath: path.join(appRoot, "frontend", "reset.config.json")
+  }
+}
+
+export function resolveOptionalBackendEntry(appPaths) {
+  const candidates = [
+    path.join(appPaths.backendDir, "src", "index.ts"),
+    path.join(appPaths.backendDir, "src", "index.js"),
+    path.join(appPaths.backendDir, "index.ts"),
+    path.join(appPaths.backendDir, "index.js")
+  ]
+
+  return resolveExistingCandidate(candidates)
+}
+
+export function resolveConfigPath(appPaths) {
+  if (existsSync(appPaths.resetConfigPath)) {
+    return appPaths.resetConfigPath
+  }
+
+  if (existsSync(appPaths.legacyResetConfigPath)) {
+    return appPaths.legacyResetConfigPath
+  }
+
+  return appPaths.resetConfigPath
+}
+
 export function getFrameworkChecks(frameworkPaths) {
   return [
+    ["backend", frameworkPaths.backendPackage.packageJsonPath],
     ["sdk", frameworkPaths.sdkPackage.packageJsonPath],
     ["schema", frameworkPaths.schemaPackage.packageJsonPath],
     ["templates", frameworkPaths.templatesDir]
@@ -638,6 +657,7 @@ export function assertFrameworkInstall(frameworkPaths) {
 export function assertFrameworkSourceInstall(frameworkPaths) {
   const missing = [
     ["native source", frameworkPaths.frameworkPackage?.packageJsonPath],
+    ["backend", frameworkPaths.backendPackage.packageJsonPath],
     ["sdk", frameworkPaths.sdkPackage.packageJsonPath],
     ["cmake", frameworkPaths.rootCMakePath],
     ["runtime", frameworkPaths.runtimeDir],
@@ -657,239 +677,256 @@ export function assertFrameworkSourceInstall(frameworkPaths) {
 export function getAppChecks(appPaths) {
   return [["config", resolveConfigPath(appPaths)]]
 }
-
-export function assertAppProject(appPaths, config) {
-  const checks = [...getAppChecks(appPaths)]
-
-  if (config) {
-    checks.unshift(["frontend", resolveFrontendDir(appPaths, config)])
-  }
-
-  const missing = checks
-    .filter(([, filePath]) => !existsSync(filePath))
-    .map(([label]) => label)
-
-  if (missing.length > 0) {
-    throw new Error(
-      `Current directory does not look like a Reset app. Missing: ${missing.join(", ")}`
-    )
-  }
-}
-
-export function validateResetConfig(rawConfig) {
-  const frontend = optionalObject(rawConfig, "frontend")
-  const build = optionalObject(rawConfig, "build")
-  const project = optionalObject(rawConfig, "project")
-  const security = optionalObject(rawConfig, "security")
-  const protocols = optionalObject(rawConfig, "protocols")
-  const windowConfig = optionalObject(rawConfig, "window")
-  const rawProtocolSchemes = Array.isArray(protocols.schemes) ? protocols.schemes : []
-  const seenProtocolSchemes = new Set()
-
-  return {
-    ...rawConfig,
-    name: sanitizeName(requireString(rawConfig, "name", "config")),
-    productName: requireString(rawConfig, "productName", "config"),
-    appId: requireString(rawConfig, "appId", "config"),
-    version: requireString(rawConfig, "version", "config"),
-    window: {
-      title: optionalString(windowConfig, "title", "Reset App")
-    },
-    frontend: {
-      devUrl: requireString(frontend, "devUrl", "frontend"),
-      distDir: optionalString(frontend, "distDir", "dist"),
-      entryHtml: optionalString(frontend, "entryHtml", "index.html")
-    },
-    project: {
-      frontendDir: normalizeFrontendDir(optionalString(project, "frontendDir", "frontend")),
-      styling: normalizeStyling(optionalString(project, "styling", "css"))
-    },
-    build: {
-      outputDir: optionalString(build, "outputDir", ".reset/build")
-    },
-    security: {
-      permissions: Array.isArray(security.permissions)
-        ? security.permissions.map((value) => {
-            if (typeof value !== "string" || value.trim() === "") {
-              throw new Error("Missing or invalid string field 'security.permissions'")
-            }
-
-            return value
-          })
-        : []
-    },
-    protocols: {
-      schemes: rawProtocolSchemes.map((entry) => {
-        if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
-          throw new Error("protocols.schemes entries must be objects")
-        }
-
-        const scheme = normalizeProtocolScheme(entry.scheme)
-        if (seenProtocolSchemes.has(scheme)) {
-          throw new Error(`Duplicate protocol scheme '${scheme}'`)
-        }
-
-        seenProtocolSchemes.add(scheme)
-
-        return {
-          scheme,
-          name:
-            typeof entry.name === "string" && entry.name.trim() !== ""
-              ? entry.name
-              : scheme,
-          role:
-            entry.role === undefined
-              ? "Viewer"
-              : normalizeProtocolRole(entry.role)
-        }
-      })
-    }
-  }
-}
-
-export function loadResetConfig(appPaths) {
-  const configPath = resolveConfigPath(appPaths)
-  const raw = readFileSync(configPath, "utf8")
-
-  try {
-    return validateResetConfig(JSON.parse(raw))
-  } catch (error) {
-    if (error instanceof SyntaxError) {
-      throw new Error(`Invalid JSON in ${configPath}: ${error.message}`)
-    }
-
-    throw error
-  }
-}
-
-export function resolveAppOutputPaths(appPaths, config) {
-  const outputRoot = path.resolve(appPaths.appRoot, config.build.outputDir)
-  const frontendDir = resolveFrontendDir(appPaths, config)
-  const isWindows = process.platform === "win32"
-  const appBundleName = isWindows ? config.productName : `${config.productName}.app`
-  const platformDir = path.join(outputRoot, isWindows ? "windows" : "macos")
-  const appBundlePath = path.join(platformDir, appBundleName)
-  const resourcesDir = isWindows
-    ? path.join(appBundlePath, "resources")
-    : path.join(appBundlePath, "Contents", "Resources")
-  const packagesDir = path.join(outputRoot, "packages")
-
-  return {
-    outputRoot,
-    macosDir: isWindows ? undefined : platformDir,
-    windowsDir: isWindows ? platformDir : undefined,
-    appBundlePath,
-    appExecutablePath: isWindows
-      ? path.join(appBundlePath, `${config.productName}.exe`)
-      : undefined,
-    resourcesDir,
-    bundledConfigPath: path.join(resourcesDir, "reset.config.json"),
-    bundledFrontendDir: path.join(resourcesDir, config.frontend.distDir),
-    frontendDistDir: path.resolve(frontendDir, config.frontend.distDir),
-    frontendEntryFile: path.resolve(
-      frontendDir,
-      config.frontend.distDir,
-      config.frontend.entryHtml
-    ),
-    packagesDir,
-    zipPath: path.join(packagesDir, `${config.name}-${isWindows ? "windows" : "macos"}.zip`)
-  }
-}
-
-export function resolveFrontendDir(appPaths, config) {
-  return path.resolve(appPaths.appRoot, config.project.frontendDir)
-}
-
-export function resolveDevServerOptions(config) {
-  const url = new URL(config.frontend.devUrl)
-
-  return {
-    host: url.hostname,
-    port: url.port || "5173",
-    url: url.toString()
-  }
-}
-
-export function makeAppMetadata(appName) {
-  const name = sanitizeName(appName)
-  const productName = toTitleCase(appName)
-
-  return {
-    name,
-    productName,
-    appId: `com.example.${name}`,
-    title: productName
-  }
-}
-
-export function resolveSdkDependencySpec(frameworkPaths) {
-  if (frameworkPaths.isWorkspaceLayout || frameworkPaths.sdkPackage.localFallback) {
-    return `file:${frameworkPaths.sdkPackage.packageRoot}`
-  }
-
-  return `^${frameworkPaths.sdkPackage.version}`
-}
-
-export function resolveCliDependencySpec(frameworkPaths) {
-  if (frameworkPaths.isWorkspaceLayout || frameworkPaths.cliPackage.localFallback) {
-    return `file:${frameworkPaths.cliPackage.packageRoot}`
-  }
-
-  return `^${frameworkPaths.cliPackage.version}`
-}
-
-function detectPackageManagerFromManifest(packageJsonPath) {
-  if (!fileExists(packageJsonPath)) {
-    return null
-  }
-
-  const manifest = readJsonFile(packageJsonPath)
-  const raw = typeof manifest.packageManager === "string" ? manifest.packageManager.trim() : ""
-  if (raw === "") {
-    return null
-  }
-
-  const [name] = raw.split("@")
-  if (name === "npm" || name === "pnpm" || name === "yarn" || name === "bun") {
-    return name
-  }
-
-  return null
-}
-
-function detectPackageManagerFromLocks(directory) {
-  if (!fileExists(directory)) {
-    return null
-  }
-
-  if (fileExists(path.join(directory, "bun.lock")) || fileExists(path.join(directory, "bun.lockb"))) {
-    return "bun"
-  }
-
-  if (fileExists(path.join(directory, "pnpm-lock.yaml"))) {
-    return "pnpm"
-  }
-
-  if (fileExists(path.join(directory, "yarn.lock"))) {
-    return "yarn"
-  }
-
-  if (fileExists(path.join(directory, "package-lock.json"))) {
-    return "npm"
-  }
-
-  return null
-}
-
-export function resolveAppPackageManager(appPaths, config) {
-  const frontendDir = resolveFrontendDir(appPaths, config)
-  const frontendPackageJsonPath = path.join(frontendDir, "package.json")
-
-  return (
-    detectPackageManagerFromManifest(appPaths.appPackageJsonPath) ??
-    detectPackageManagerFromManifest(frontendPackageJsonPath) ??
-    detectPackageManagerFromLocks(appPaths.appRoot) ??
-    detectPackageManagerFromLocks(frontendDir) ??
-    "npm"
-  )
-}
+
+export function assertAppProject(appPaths, config) {
+  const checks = [...getAppChecks(appPaths)]
+
+  if (config) {
+    checks.unshift(["frontend", resolveFrontendDir(appPaths, config)])
+  }
+
+  const missing = checks
+    .filter(([, filePath]) => !existsSync(filePath))
+    .map(([label]) => label)
+
+  if (missing.length > 0) {
+    throw new Error(
+      `Current directory does not look like a Reset app. Missing: ${missing.join(", ")}`
+    )
+  }
+}
+
+export function validateResetConfig(rawConfig) {
+  const frontend = optionalObject(rawConfig, "frontend")
+  const build = optionalObject(rawConfig, "build")
+  const project = optionalObject(rawConfig, "project")
+  const security = optionalObject(rawConfig, "security")
+  const protocols = optionalObject(rawConfig, "protocols")
+  const windowConfig = optionalObject(rawConfig, "window")
+  const rawProtocolSchemes = Array.isArray(protocols.schemes) ? protocols.schemes : []
+  const seenProtocolSchemes = new Set()
+
+  return {
+    ...rawConfig,
+    name: sanitizeName(requireString(rawConfig, "name", "config")),
+    productName: requireString(rawConfig, "productName", "config"),
+    appId: requireString(rawConfig, "appId", "config"),
+    version: requireString(rawConfig, "version", "config"),
+    window: {
+      title: optionalString(windowConfig, "title", "Reset App")
+    },
+    frontend: {
+      devUrl: requireString(frontend, "devUrl", "frontend"),
+      distDir: optionalString(frontend, "distDir", "dist"),
+      entryHtml: optionalString(frontend, "entryHtml", "index.html")
+    },
+    project: {
+      frontendDir: normalizeFrontendDir(optionalString(project, "frontendDir", "frontend")),
+      styling: normalizeStyling(optionalString(project, "styling", "css"))
+    },
+    build: {
+      outputDir: optionalString(build, "outputDir", ".reset/build")
+    },
+    security: {
+      permissions: Array.isArray(security.permissions)
+        ? security.permissions.map((value) => {
+            if (typeof value !== "string" || value.trim() === "") {
+              throw new Error("Missing or invalid string field 'security.permissions'")
+            }
+
+            return value
+          })
+        : []
+    },
+    protocols: {
+      schemes: rawProtocolSchemes.map((entry) => {
+        if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
+          throw new Error("protocols.schemes entries must be objects")
+        }
+
+        const scheme = normalizeProtocolScheme(entry.scheme)
+        if (seenProtocolSchemes.has(scheme)) {
+          throw new Error(`Duplicate protocol scheme '${scheme}'`)
+        }
+
+        seenProtocolSchemes.add(scheme)
+
+        return {
+          scheme,
+          name:
+            typeof entry.name === "string" && entry.name.trim() !== ""
+              ? entry.name
+              : scheme,
+          role:
+            entry.role === undefined
+              ? "Viewer"
+              : normalizeProtocolRole(entry.role)
+        }
+      })
+    }
+  }
+}
+
+export function loadResetConfig(appPaths) {
+  const configPath = resolveConfigPath(appPaths)
+  const raw = readFileSync(configPath, "utf8")
+
+  try {
+    return validateResetConfig(JSON.parse(raw))
+  } catch (error) {
+    if (error instanceof SyntaxError) {
+      throw new Error(`Invalid JSON in ${configPath}: ${error.message}`)
+    }
+
+    throw error
+  }
+}
+
+export function resolveAppOutputPaths(appPaths, config) {
+  const outputRoot = path.resolve(appPaths.appRoot, config.build.outputDir)
+  const frontendDir = resolveFrontendDir(appPaths, config)
+  const isWindows = process.platform === "win32"
+  const appBundleName = isWindows ? config.productName : `${config.productName}.app`
+  const platformDir = path.join(outputRoot, isWindows ? "windows" : "macos")
+  const appBundlePath = path.join(platformDir, appBundleName)
+  const resourcesDir = isWindows
+    ? path.join(appBundlePath, "resources")
+    : path.join(appBundlePath, "Contents", "Resources")
+  const packagesDir = path.join(outputRoot, "packages")
+
+  return {
+    outputRoot,
+    macosDir: isWindows ? undefined : platformDir,
+    windowsDir: isWindows ? platformDir : undefined,
+    appBundlePath,
+    appExecutablePath: isWindows
+      ? path.join(appBundlePath, `${config.productName}.exe`)
+      : undefined,
+    resourcesDir,
+    bundledConfigPath: path.join(resourcesDir, "reset.config.json"),
+    bundledBackendDir: path.join(resourcesDir, "backend"),
+    bundledBackendEntryPath: path.join(resourcesDir, "backend", "app.mjs"),
+    bundledBackendRunnerPath: path.join(resourcesDir, "backend", "runner.mjs"),
+    bundledBackendSupportModulePath: path.join(resourcesDir, "backend", "index.js"),
+    bundledBackendRuntimePath: path.join(
+      resourcesDir,
+      "backend",
+      process.platform === "win32" ? "backend-runtime.exe" : "backend-runtime"
+    ),
+    bundledFrontendDir: path.join(resourcesDir, config.frontend.distDir),
+    frontendDistDir: path.resolve(frontendDir, config.frontend.distDir),
+    frontendEntryFile: path.resolve(
+      frontendDir,
+      config.frontend.distDir,
+      config.frontend.entryHtml
+    ),
+    packagesDir,
+    zipPath: path.join(packagesDir, `${config.name}-${isWindows ? "windows" : "macos"}.zip`)
+  }
+}
+
+export function resolveFrontendDir(appPaths, config) {
+  return path.resolve(appPaths.appRoot, config.project.frontendDir)
+}
+
+export function resolveDevServerOptions(config) {
+  const url = new URL(config.frontend.devUrl)
+
+  return {
+    host: url.hostname,
+    port: url.port || "5173",
+    url: url.toString()
+  }
+}
+
+export function makeAppMetadata(appName) {
+  const name = sanitizeName(appName)
+  const productName = toTitleCase(appName)
+
+  return {
+    name,
+    productName,
+    appId: `com.example.${name}`,
+    title: productName
+  }
+}
+
+export function resolveSdkDependencySpec(frameworkPaths) {
+  if (frameworkPaths.isWorkspaceLayout || frameworkPaths.sdkPackage.localFallback) {
+    return `file:${frameworkPaths.sdkPackage.packageRoot}`
+  }
+
+  return `^${frameworkPaths.sdkPackage.version}`
+}
+
+export function resolveBackendDependencySpec(frameworkPaths) {
+  if (frameworkPaths.isWorkspaceLayout || frameworkPaths.backendPackage.localFallback) {
+    return `file:${frameworkPaths.backendPackage.packageRoot}`
+  }
+
+  return `^${frameworkPaths.backendPackage.version}`
+}
+
+export function resolveCliDependencySpec(frameworkPaths) {
+  if (frameworkPaths.isWorkspaceLayout || frameworkPaths.cliPackage.localFallback) {
+    return `file:${frameworkPaths.cliPackage.packageRoot}`
+  }
+
+  return `^${frameworkPaths.cliPackage.version}`
+}
+
+function detectPackageManagerFromManifest(packageJsonPath) {
+  if (!fileExists(packageJsonPath)) {
+    return null
+  }
+
+  const manifest = readJsonFile(packageJsonPath)
+  const raw = typeof manifest.packageManager === "string" ? manifest.packageManager.trim() : ""
+  if (raw === "") {
+    return null
+  }
+
+  const [name] = raw.split("@")
+  if (name === "npm" || name === "pnpm" || name === "yarn" || name === "bun") {
+    return name
+  }
+
+  return null
+}
+
+function detectPackageManagerFromLocks(directory) {
+  if (!fileExists(directory)) {
+    return null
+  }
+
+  if (fileExists(path.join(directory, "bun.lock")) || fileExists(path.join(directory, "bun.lockb"))) {
+    return "bun"
+  }
+
+  if (fileExists(path.join(directory, "pnpm-lock.yaml"))) {
+    return "pnpm"
+  }
+
+  if (fileExists(path.join(directory, "yarn.lock"))) {
+    return "yarn"
+  }
+
+  if (fileExists(path.join(directory, "package-lock.json"))) {
+    return "npm"
+  }
+
+  return null
+}
+
+export function resolveAppPackageManager(appPaths, config) {
+  const frontendDir = resolveFrontendDir(appPaths, config)
+  const frontendPackageJsonPath = path.join(frontendDir, "package.json")
+
+  return (
+    detectPackageManagerFromManifest(appPaths.appPackageJsonPath) ??
+    detectPackageManagerFromManifest(frontendPackageJsonPath) ??
+    detectPackageManagerFromLocks(appPaths.appRoot) ??
+    detectPackageManagerFromLocks(frontendDir) ??
+    "npm"
+  )
+}