sitevision-cli 1.0.0-beta.3 → 1.0.0-beta.5

package/dist/app.d.ts

@@ -2,5 +2,5 @@ import { type ProjectInfo } from './utils/project-detection.js';
 type Props = {
     project: ProjectInfo;
 };
-export default function App({ project }: Props): import("react").JSX.Element | null;
+export default function App({ project: initialProject }: Props): import("react").JSX.Element | null;
 export {};

package/dist/app.js

@@ -1,5 +1,6 @@
 import { jsx as _jsx } from "react/jsx-runtime";
-import { useMemo, useState } from 'react';
+import { useCallback, useMemo, useState } from 'react';
+import { detectProject } from './utils/project-detection.js';
 import { MainMenu } from './components/MainMenu.js';
 import { InfoScreen } from './components/InfoScreen.js';
 import { SetupFlow } from './components/SetupFlow.js';
@@ -12,7 +13,22 @@ import { DeployScreen } from './commands/deploy.js';
 import { SignScreen } from './commands/sign.js';
 import { SigningPropertiesForm } from './components/SigningPropertiesForm.js';
 import { getSigningPassword, setDeployPassword as saveDeployPassword, setSigningPassword as saveSigningPassword, } from './utils/keychain.js';
-export default function App({ project }) {
+export default function App({ project: initialProject }) {
+    // The project is loaded once at startup, but setup flows write new values to
+    // disk and the OS keychain. Hold it in state so we can re-detect after setup
+    // and pick up those changes (e.g. saved passwords) without restarting the CLI.
+    const [project, setProject] = useState(initialProject);
+    const reloadProject = useCallback(() => {
+        try {
+            const refreshed = detectProject(initialProject.root);
+            if (refreshed)
+                setProject(refreshed);
+        }
+        catch {
+            // Re-detection failed (e.g. manifest became unparseable mid-session) —
+            // keep the existing in-memory project rather than crashing.
+        }
+    }, [initialProject.root]);
     const [state, setState] = useState('setup');
     const [currentCommand, setCurrentCommand] = useState('');
     const [signingPassword, setSigningPassword] = useState('');
@@ -185,7 +201,7 @@ export default function App({ project }) {
         }
     };
     if (state === 'setup') {
-        return _jsx(SetupFlow, { project: project, onComplete: () => setState('menu') });
+        return (_jsx(SetupFlow, { project: project, onReload: reloadProject, onComplete: () => setState('menu') }));
     }
     if (state === 'menu') {
         return _jsx(MainMenu, { project: project, onSelect: handleCommandSelect });
@@ -260,9 +276,9 @@ export default function App({ project }) {
     }
     if (state === 'setup-signing') {
         return (_jsx(SigningPropertiesForm, { projectRoot: project.root, onComplete: () => {
-                // We can't easily update project info here without full reload,
-                // but since we are just returning to menu, it's fine.
-                // The user might need to restart CLI or we implement a reload mechanism.
+                // Re-detect so the newly written signing credentials are reflected
+                // in memory (hasSigningProperties, keychain password) without a restart.
+                reloadProject();
                 setState('menu');
             }, onCancel: () => setState('menu') }));
     }

package/dist/commands/dev.js

@@ -11,9 +11,10 @@ import { signApp, deployApp } from '../utils/sitevision-api.js';
 import { setDeployPassword } from '../utils/keychain.js';
 import { resolveSigningPassword } from '../utils/signing-password.js';
 import { copyStaticToBuild, createBuildZip, cleanBuild } from '../utils/zip.js';
-import { isBundledApp, getAppType, getFullAppId, getZipPath, getSignedZipPath, localizedText, } from '../utils/project-detection.js';
+import { isBundledApp, getAppType, getFullAppId, getZipPath, getSignedZipPath, localizedText, readManifest, } from '../utils/project-detection.js';
 export function DevScreen({ projectRoot, manifest, devProperties, signed, deploy = true, signingCredentials, onBack, onRetryCredentials, }) {
     const { exit } = useApp();
+    const [version, setVersion] = React.useState(manifest.version);
     const [state, setState] = React.useState({
         status: 'initializing',
         message: 'Starting webpack watch...',
@@ -34,6 +35,16 @@ export function DevScreen({ projectRoot, manifest, devProperties, signed, deploy
     const isBuildingRef = React.useRef(false);
     const pendingRebuildRef = React.useRef(false);
     // Sign (if needed) and deploy an already-built zip, updating UI state.
+    const refreshVersion = React.useCallback(() => {
+        try {
+            const fresh = readManifest(projectRoot)?.manifest.version;
+            if (fresh)
+                setVersion(fresh);
+        }
+        catch {
+            // keep last known version
+        }
+    }, [projectRoot]);
     const signAndDeploy = React.useCallback(async (zipPath, buildTime) => {
         try {
             let deployZipPath = zipPath;
@@ -57,6 +68,7 @@ export function DevScreen({ projectRoot, manifest, devProperties, signed, deploy
                 }
                 deployZipPath = signedZipPath;
             }
+            refreshVersion();
             // Watch/build-only mode: stop after building (and signing).
             if (!deploy || !devProperties) {
                 setState(prev => ({
@@ -113,7 +125,15 @@ export function DevScreen({ projectRoot, manifest, devProperties, signed, deploy
                 error: error instanceof Error ? error.message : String(error),
             }));
         }
-    }, [projectRoot, manifest, devProperties, signed, deploy, signingCredentials]);
+    }, [
+        projectRoot,
+        manifest,
+        devProperties,
+        signed,
+        deploy,
+        signingCredentials,
+        refreshVersion,
+    ]);
     // In-house webpack path: copy static, zip, then sign + deploy.
     const handleBuildComplete = React.useCallback(async (result) => {
         if (!result.success) {
@@ -353,7 +373,7 @@ export function DevScreen({ projectRoot, manifest, devProperties, signed, deploy
     };
     return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsx(Box, { marginBottom: 1, children: _jsx(StatusIndicator, { status: getStatusType(), label: getStatusLabel(), message: state.message }) }), state.warning && (_jsx(Box, { marginBottom: 1, children: _jsxs(Text, { color: "yellow", children: ["\u26A0 ", state.warning] }) })), state.buildCount > 0 && (_jsx(Box, { marginLeft: 2, marginBottom: 1, children: _jsxs(Text, { dimColor: true, children: ["Builds: ", state.buildCount, state.lastBuildTime
                             ? ` | Last build: ${state.lastBuildTime}ms`
-                            : '', signed ? ' | Signed mode' : ''] }) })), _jsx(Box, { marginLeft: 2, marginBottom: 1, children: _jsxs(Text, { dimColor: true, children: [localizedText(manifest.name), " v", manifest.version] }) }), deploy && devProperties && (_jsx(Box, { marginLeft: 2, marginBottom: 1, children: _jsxs(Text, { dimColor: true, children: ["Target: ", devProperties.domain, "/", devProperties.siteName, "/", devProperties.addonName] }) })), state.status === 'error' && state.error && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(Text, { color: "red", children: state.error }) })), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [state.status === 'error' && onRetryCredentials && (_jsx(Text, { dimColor: true, children: "Press r to retry with new credentials" })), onBack ? (_jsx(Text, { dimColor: true, children: "Press q or Esc to return to menu (Ctrl+C to stop process)" })) : (_jsx(Text, { dimColor: true, children: "Press Ctrl+C to stop" }))] })] }));
+                            : '', signed ? ' | Signed mode' : ''] }) })), _jsx(Box, { marginLeft: 2, marginBottom: 1, children: _jsxs(Text, { dimColor: true, children: [localizedText(manifest.name), " v", version] }) }), deploy && devProperties && (_jsx(Box, { marginLeft: 2, marginBottom: 1, children: _jsxs(Text, { dimColor: true, children: ["Target: ", devProperties.domain, "/", devProperties.siteName, "/", devProperties.addonName] }) })), state.status === 'error' && state.error && (_jsx(Box, { flexDirection: "column", marginTop: 1, children: _jsx(Text, { color: "red", children: state.error }) })), _jsxs(Box, { marginTop: 1, flexDirection: "column", children: [state.status === 'error' && onRetryCredentials && (_jsx(Text, { dimColor: true, children: "Press r to retry with new credentials" })), onBack ? (_jsx(Text, { dimColor: true, children: "Press q or Esc to return to menu (Ctrl+C to stop process)" })) : (_jsx(Text, { dimColor: true, children: "Press Ctrl+C to stop" }))] })] }));
 }
 export const devCommand = {
     name: 'dev',

package/dist/components/SetupFlow.d.ts

@@ -1,7 +1,8 @@
 import { type ProjectInfo } from '../utils/project-detection.js';
 interface Props {
     project: ProjectInfo;
+    onReload: () => void;
     onComplete: () => void;
 }
-export declare function SetupFlow({ project, onComplete }: Props): import("react").JSX.Element | null;
+export declare function SetupFlow({ project, onReload, onComplete }: Props): import("react").JSX.Element | null;
 export {};

package/dist/components/SetupFlow.js

@@ -1,16 +1,18 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { useState, useEffect } from 'react';
 import { Box, Text, useInput } from 'ink';
-import { getAppType, localizedText, migrateLegacyPassword, } from '../utils/project-detection.js';
+import { getAppType, localizedText, migrateLegacyPassword, getPackageJsonSyncChanges, syncDevPropertiesToPackageJson, readSvcConfig, writeSvcConfig, } from '../utils/project-detection.js';
 import { ProcessRunner } from '../utils/process-runner.js';
 import { ProcessOutputComponent } from './ProcessOutput.js';
 import { StatusIndicator } from './StatusIndicator.js';
 import { DevPropertiesForm } from './DevPropertiesForm.js';
 import { SigningPropertiesForm } from './SigningPropertiesForm.js';
-export function SetupFlow({ project, onComplete }) {
+export function SetupFlow({ project, onReload, onComplete }) {
     const [step, setStep] = useState('check-node-modules');
     const [runner, setRunner] = useState(null);
     const [commandStatus, setCommandStatus] = useState('running');
+    const [syncChanges, setSyncChanges] = useState([]);
+    const [syncDecision, setSyncDecision] = useState(false);
     const appType = getAppType(project.manifest);
     // Auto-advance through checks
     useEffect(() => {
@@ -28,13 +30,32 @@ export function SetupFlow({ project, onComplete }) {
                     setStep('confirm-password-migration');
                 }
                 else {
-                    setStep('check-signing-properties');
+                    setStep('check-package-sync');
                 }
             }
             else {
                 setStep('confirm-dev-setup');
             }
         }
+        else if (step === 'check-package-sync') {
+            const preference = readSvcConfig(project.root).syncPackageJson;
+            const properties = project.devProperties;
+            const changes = preference !== false && properties
+                ? getPackageJsonSyncChanges(project.root, properties)
+                : [];
+            if (changes.length === 0 || !properties) {
+                setStep('check-signing-properties');
+            }
+            else if (preference === true) {
+                syncDevPropertiesToPackageJson(project.root, properties);
+                onReload();
+                setStep('check-signing-properties');
+            }
+            else {
+                setSyncChanges(changes);
+                setStep('confirm-package-sync');
+            }
+        }
         else if (step === 'check-signing-properties') {
             if (project.hasSigningProperties) {
                 setStep('show-info');
@@ -84,6 +105,29 @@ export function SetupFlow({ project, onComplete }) {
         else if (step === 'confirm-password-migration') {
             if (input === 'y' || input === 'Y') {
                 migrateLegacyPassword(project);
+                // The file was rewritten (plaintext stripped, password moved to
+                // keychain) — re-detect so hasLegacyPassword/password reflect that.
+                onReload();
+                setStep('check-package-sync');
+            }
+            else if (input === 'n' || input === 'N') {
+                setStep('check-package-sync');
+            }
+        }
+        else if (step === 'confirm-package-sync') {
+            if (['y', 'Y', 'n', 'N'].includes(input)) {
+                const accepted = input.toLowerCase() === 'y';
+                if (accepted && project.devProperties) {
+                    syncDevPropertiesToPackageJson(project.root, project.devProperties);
+                    onReload();
+                }
+                setSyncDecision(accepted);
+                setStep('confirm-save-sync-choice');
+            }
+        }
+        else if (step === 'confirm-save-sync-choice') {
+            if (input === 'y' || input === 'Y') {
+                writeSvcConfig(project.root, { syncPackageJson: syncDecision });
                 setStep('check-signing-properties');
             }
             else if (input === 'n' || input === 'N') {
@@ -102,17 +146,19 @@ export function SetupFlow({ project, onComplete }) {
     // Setup Dev Properties Form
     if (step === 'setup-dev-properties') {
         return (_jsx(DevPropertiesForm, { projectRoot: project.root, initialProperties: project.devProperties, packageJson: project.packageJson, onComplete: () => {
-                // Manually update project state locally if possible, or just proceed
-                // Since we can't easily update 'project' prop from here without reloading,
-                // we just move to next step. The file is written.
-                project.hasDevProperties = true; // Optimization/Hack to pass check
-                setStep('check-signing-properties');
+                // Re-detect from disk/keychain so devProperties (incl. the keychain
+                // password) populate in memory — otherwise the rest of this flow and
+                // the menu would see stale state until the CLI is restarted.
+                onReload();
+                setStep('check-package-sync');
             }, onCancel: () => setStep('check-signing-properties') }));
     }
     // Setup Signing Properties Form
     if (step === 'setup-signing-properties') {
         return (_jsx(SigningPropertiesForm, { projectRoot: project.root, onComplete: () => {
-                project.hasSigningProperties = true; // Optimization/Hack
+                // Re-detect so signing credentials are reflected in memory before
+                // the info screen / menu render.
+                onReload();
                 setStep('show-info');
             }, onCancel: () => setStep('show-info') }));
     }
@@ -132,6 +178,16 @@ export function SetupFlow({ project, onComplete }) {
     if (step === 'confirm-password-migration') {
         return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: "cyan", children: "Sitevision CLI" }) }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: "yellow", children: "\u26A0 Plaintext password found in .dev_properties.json" }) }), _jsxs(Box, { marginBottom: 1, flexDirection: "column", children: [_jsx(Text, { children: "Move it to the OS keychain and remove it from the file? (y/n)" }), _jsx(Text, { dimColor: true, children: "Recommended \u2014 storing passwords in project files is insecure." })] })] }));
     }
+    // Confirm package.json sync
+    if (step === 'confirm-package-sync') {
+        return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: "cyan", children: "Sitevision CLI" }) }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: "yellow", children: "\u26A0 package.json is out of sync with .dev_properties.json" }) }), _jsx(Box, { marginBottom: 1, flexDirection: "column", marginLeft: 2, children: syncChanges.map(change => (_jsxs(Box, { children: [_jsx(Text, { color: change.from === undefined ? 'green' : 'yellow', children: change.from === undefined ? '+ ' : '~ ' }), _jsxs(Text, { bold: true, children: [change.key, ": "] }), change.from !== undefined && (_jsxs(Text, { dimColor: true, children: [change.from, " \u2192 "] })), _jsx(Text, { children: change.to })] }, change.key))) }), _jsxs(Box, { marginBottom: 1, flexDirection: "column", children: [_jsx(Text, { children: "Update package.json from .dev_properties.json? (y/n)" }), _jsx(Text, { dimColor: true, children: "sitevision-scripts reads these fields from package.json." })] })] }));
+    }
+    // Offer to persist the sync decision in .svcconfig
+    if (step === 'confirm-save-sync-choice') {
+        return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: "cyan", children: "Sitevision CLI" }) }), _jsxs(Box, { marginBottom: 1, flexDirection: "column", children: [_jsx(Text, { children: "Remember this choice in .svcconfig? (y/n)" }), _jsx(Text, { dimColor: true, children: syncDecision
+                                ? 'svc will update package.json automatically from now on.'
+                                : 'svc will stop asking about package.json sync.' })] })] }));
+    }
     // Confirm signing setup
     if (step === 'confirm-signing-setup') {
         return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsx(Box, { marginBottom: 1, children: _jsx(Text, { bold: true, color: "cyan", children: "Sitevision CLI" }) }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { color: "yellow", children: "\u26A0 signing credentials not configured" }) }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { children: "Signing credentials are required for signing apps on developer.sitevision.se" }) }), _jsx(Box, { marginBottom: 1, children: _jsx(Text, { children: "Would you like to set up signing credentials? (y/n)" }) })] }));

package/dist/utils/jsonc.d.ts

@@ -0,0 +1,19 @@
+/**
+ * JSONC helpers.
+ *
+ * Sitevision's own manifest documentation shows manifest.json with line and
+ * block comments (e.g. `"name": { // Multilingual-manifest requires SV 10.1`),
+ * so real-world manifests copied from the docs contain them. Strict JSON.parse
+ * rejects those, so we strip comments before parsing.
+ */
+/**
+ * Remove line comments (//...) and block comments from a JSON string, leaving
+ * everything inside string literals untouched (so values like
+ * `"https://example.com"` survive).
+ */
+export declare function stripJsonComments(input: string): string;
+/**
+ * Parse a JSON string that may contain comments (JSONC). Throws the underlying
+ * SyntaxError if the content is invalid even after comments are removed.
+ */
+export declare function parseJsonc<T>(input: string): T;

package/dist/utils/jsonc.js

@@ -0,0 +1,74 @@
+/**
+ * JSONC helpers.
+ *
+ * Sitevision's own manifest documentation shows manifest.json with line and
+ * block comments (e.g. `"name": { // Multilingual-manifest requires SV 10.1`),
+ * so real-world manifests copied from the docs contain them. Strict JSON.parse
+ * rejects those, so we strip comments before parsing.
+ */
+/**
+ * Remove line comments (//...) and block comments from a JSON string, leaving
+ * everything inside string literals untouched (so values like
+ * `"https://example.com"` survive).
+ */
+export function stripJsonComments(input) {
+    let result = '';
+    let inString = false;
+    let inLineComment = false;
+    let inBlockComment = false;
+    for (let i = 0; i < input.length; i++) {
+        const char = input[i];
+        const next = input[i + 1];
+        if (inLineComment) {
+            if (char === '\n') {
+                inLineComment = false;
+                result += char;
+            }
+            continue;
+        }
+        if (inBlockComment) {
+            if (char === '*' && next === '/') {
+                inBlockComment = false;
+                i++;
+            }
+            continue;
+        }
+        if (inString) {
+            result += char;
+            // Copy escaped characters verbatim so an escaped quote (\") does not
+            // end the string early.
+            if (char === '\\') {
+                result += next ?? '';
+                i++;
+            }
+            else if (char === '"') {
+                inString = false;
+            }
+            continue;
+        }
+        if (char === '"') {
+            inString = true;
+            result += char;
+            continue;
+        }
+        if (char === '/' && next === '/') {
+            inLineComment = true;
+            i++;
+            continue;
+        }
+        if (char === '/' && next === '*') {
+            inBlockComment = true;
+            i++;
+            continue;
+        }
+        result += char;
+    }
+    return result;
+}
+/**
+ * Parse a JSON string that may contain comments (JSONC). Throws the underlying
+ * SyntaxError if the content is invalid even after comments are removed.
+ */
+export function parseJsonc(input) {
+    return JSON.parse(stripJsonComments(input));
+}

package/dist/utils/project-detection.d.ts

@@ -69,6 +69,14 @@ export declare function buildImportEndpointUrl(domain: string, siteName: string,
 export declare class ManifestParseError extends Error {
     constructor(manifestPath: string, cause: unknown);
 }
+/**
+ * Read manifest.json from its supported locations (root, static/, src/).
+ * Throws ManifestParseError on malformed JSON.
+ */
+export declare function readManifest(cwd: string): {
+    manifestPath: string;
+    manifest: SitevisionManifest;
+} | null;
 /**
  * Detect if the current directory is a Sitevision project
  */
@@ -94,6 +102,32 @@ export declare function readDevProperties(projectRoot: string): DevProperties |
  * it is held in the OS keychain instead.
  */
 export declare function writeDevProperties(projectRoot: string, properties: DevProperties): void;
+/**
+ * CLI preferences stored in .svcconfig at the project root. Unknown keys are
+ * preserved on write so hand-edited entries survive.
+ */
+export interface SvcConfig {
+    syncPackageJson?: boolean;
+    [key: string]: unknown;
+}
+export declare function readSvcConfig(projectRoot: string): SvcConfig;
+export declare function writeSvcConfig(projectRoot: string, updates: SvcConfig): void;
+export interface PackageJsonSyncChange {
+    key: string;
+    from?: string;
+    to: string;
+}
+/**
+ * Which of the shared fields package.json is missing or disagrees on, relative
+ * to the given dev properties. Reads package.json from disk — an earlier
+ * `npm install` in the same session may have rewritten it.
+ */
+export declare function getPackageJsonSyncChanges(projectRoot: string, properties: DevProperties): PackageJsonSyncChange[];
+/**
+ * Copy the shared fields from dev properties into package.json, preserving the
+ * file's existing indentation and trailing newline.
+ */
+export declare function syncDevPropertiesToPackageJson(projectRoot: string, properties: DevProperties): boolean;
 /**
  * Move a plaintext password from .dev_properties.json into the OS keychain and
  * strip it from the file. Returns true if the password was migrated.

package/dist/utils/project-detection.js

@@ -1,6 +1,7 @@
 import fs from 'fs';
 import path from 'path';
 import { getDeployPassword, setDeployPassword } from './keychain.js';
+import { parseJsonc } from './jsonc.js';
 // =============================================================================
 // LOCALIZED TEXT
 // =============================================================================
@@ -166,38 +167,44 @@ export class ManifestParseError extends Error {
         this.name = 'ManifestParseError';
     }
 }
+/**
+ * Read manifest.json from its supported locations (root, static/, src/).
+ * Throws ManifestParseError on malformed JSON.
+ */
+export function readManifest(cwd) {
+    const manifestPaths = [
+        path.join(cwd, 'manifest.json'),
+        path.join(cwd, 'static', 'manifest.json'),
+        path.join(cwd, 'src', 'manifest.json'),
+    ];
+    for (const manifestPath of manifestPaths) {
+        if (!fs.existsSync(manifestPath)) {
+            continue;
+        }
+        // Manifests may contain comments (Sitevision's own docs show them), so
+        // parse as JSONC.
+        try {
+            return {
+                manifestPath,
+                manifest: parseJsonc(fs.readFileSync(manifestPath, 'utf-8')),
+            };
+        }
+        catch (error) {
+            throw new ManifestParseError(manifestPath, error);
+        }
+    }
+    return null;
+}
 /**
  * Detect if the current directory is a Sitevision project
  */
 export function detectProject(cwd = process.cwd()) {
     try {
-        // Look for manifest.json in multiple locations (current, static/, src/)
-        const manifestPaths = [
-            path.join(cwd, 'manifest.json'),
-            path.join(cwd, 'static', 'manifest.json'),
-            path.join(cwd, 'src', 'manifest.json'),
-        ];
-        let manifestPath = null;
-        let manifest = null;
-        for (const p of manifestPaths) {
-            if (fs.existsSync(p)) {
-                manifestPath = p;
-                // A present-but-unparseable manifest is a real, fixable error (a stray
-                // comment, a trailing comma, …). Surface it rather than silently
-                // reporting "Not a Sitevision project". JSON has no comments — strip
-                // any `//` annotations from manifest.json.
-                try {
-                    manifest = JSON.parse(fs.readFileSync(p, 'utf-8'));
-                }
-                catch (error) {
-                    throw new ManifestParseError(p, error);
-                }
-                break;
-            }
-        }
-        if (!manifest || !manifestPath) {
+        const found = readManifest(cwd);
+        if (!found) {
             return null;
         }
+        const { manifestPath, manifest } = found;
         // Check for package.json
         const packageJsonPath = path.join(cwd, 'package.json');
         if (!fs.existsSync(packageJsonPath)) {
@@ -325,6 +332,92 @@ export function writeDevProperties(projectRoot, properties) {
     const { password: _password, ...persisted } = properties;
     fs.writeFileSync(devPropertiesPath, JSON.stringify(persisted, null, 2));
 }
+export function readSvcConfig(projectRoot) {
+    try {
+        return parseJsonc(fs.readFileSync(path.join(projectRoot, '.svcconfig'), 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+export function writeSvcConfig(projectRoot, updates) {
+    const merged = { ...readSvcConfig(projectRoot), ...updates };
+    fs.writeFileSync(path.join(projectRoot, '.svcconfig'), JSON.stringify(merged, null, 2) + '\n');
+}
+// =============================================================================
+// PACKAGE.JSON SYNC
+// =============================================================================
+/**
+ * Fields duplicated between .dev_properties.json and package.json, where
+ * sitevision-scripts reads them under different names.
+ */
+const PACKAGE_JSON_SYNC_KEYS = [
+    { packageKey: 'developmentDomain', devKey: 'domain' },
+    { packageKey: 'siteName', devKey: 'siteName' },
+    { packageKey: 'addonName', devKey: 'addonName' },
+];
+function readPackageJson(projectRoot) {
+    try {
+        return JSON.parse(fs.readFileSync(path.join(projectRoot, 'package.json'), 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Which of the shared fields package.json is missing or disagrees on, relative
+ * to the given dev properties. Reads package.json from disk — an earlier
+ * `npm install` in the same session may have rewritten it.
+ */
+export function getPackageJsonSyncChanges(projectRoot, properties) {
+    const packageJson = readPackageJson(projectRoot);
+    if (!packageJson)
+        return [];
+    const changes = [];
+    for (const { packageKey, devKey } of PACKAGE_JSON_SYNC_KEYS) {
+        const to = properties[devKey];
+        if (typeof to !== 'string' || to === '')
+            continue;
+        const from = packageJson[packageKey];
+        if (from !== to) {
+            changes.push(from === undefined
+                ? { key: packageKey, to }
+                : { key: packageKey, from, to });
+        }
+    }
+    return changes;
+}
+/**
+ * Copy the shared fields from dev properties into package.json, preserving the
+ * file's existing indentation and trailing newline.
+ */
+export function syncDevPropertiesToPackageJson(projectRoot, properties) {
+    const packageJsonPath = path.join(projectRoot, 'package.json');
+    let raw;
+    try {
+        raw = fs.readFileSync(packageJsonPath, 'utf-8');
+    }
+    catch {
+        return false;
+    }
+    let packageJson;
+    try {
+        packageJson = JSON.parse(raw);
+    }
+    catch {
+        return false;
+    }
+    for (const { packageKey, devKey } of PACKAGE_JSON_SYNC_KEYS) {
+        const value = properties[devKey];
+        if (typeof value === 'string' && value !== '') {
+            packageJson[packageKey] = value;
+        }
+    }
+    const indent = /^(?<indent>[\t ]+)/m.exec(raw)?.groups?.['indent'] ?? '\t';
+    const newline = raw.endsWith('\n') ? '\n' : '';
+    fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, indent) + newline);
+    return true;
+}
 /**
  * Move a plaintext password from .dev_properties.json into the OS keychain and
  * strip it from the file. Returns true if the password was migrated.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "sitevision-cli",
-	"version": "1.0.0-beta.3",
+	"version": "1.0.0-beta.5",
 	"license": "MIT",
 	"bin": {
 		"svc": "dist/cli.js"

package/readme.md

@@ -126,6 +126,29 @@ Create this file in your project root for deployment configuration:
 }
 ```
 
+### Keeping `package.json` in sync
+
+`sitevision-scripts` reads `developmentDomain`, `siteName` and `addonName`
+from `package.json`, which duplicates three fields of
+`.dev_properties.json`. When they disagree — or when a fresh setup has just
+written `.dev_properties.json` — `svc` shows the differences and offers to
+update `package.json` from `.dev_properties.json`. Nothing is written without
+confirmation, and `.dev_properties.json` is always the source of truth for
+the copy. Existing indentation and unrelated fields are left alone.
+
+After answering, `svc` offers to remember the choice in a `.svcconfig` file
+in the project root:
+
+```json
+{
+	"syncPackageJson": true
+}
+```
+
+With `true`, `svc` updates `package.json` automatically without asking; with
+`false`, the check is skipped entirely. Delete the key (or the file) to be
+asked again. The file contains no secrets, so it is safe to commit.
+
 ### Password storage
 
 Passwords are stored in the OS-native secret store (macOS Keychain, Windows