supbuddy 3.2.0 → 3.2.2

package/dist/bin.js

@@ -19807,7 +19807,7 @@ function cliBuildKind(env3 = process.env) {
   return raw === "host" || raw === "npm" ? raw : "dev";
 }
 function cliVersion(env3 = process.env) {
-  return "3.2.0".trim() || "0.0.0-dev";
+  return "3.2.2".trim() || "0.0.0-dev";
 }
 function isDevBuild(env3) {
   return cliBuildKind(env3) === "dev";
@@ -19855,7 +19855,7 @@ var init_build_identity = __esm({
   }
 });
 
-// src/caddy-resolve.js
+// src/caddy-resolve.ts
 import { createRequire } from "module";
 import path6 from "path";
 function caddyPackageName(platform = process.platform, arch = process.arch) {
@@ -19869,8 +19869,7 @@ function caddyPackageName(platform = process.platform, arch = process.arch) {
 }
 function resolvePackagedCaddyDir(deps = {}) {
   const pkgName = deps.pkgName !== void 0 ? deps.pkgName : caddyPackageName();
-  if (!pkgName)
-    return null;
+  if (!pkgName) return null;
   const resolve = deps.resolve ?? ((id) => requireFromHere.resolve(id));
   try {
     return path6.dirname(resolve(`${pkgName}/package.json`));
@@ -19880,7 +19879,7 @@ function resolvePackagedCaddyDir(deps = {}) {
 }
 var requireFromHere;
 var init_caddy_resolve = __esm({
-  "src/caddy-resolve.js"() {
+  "src/caddy-resolve.ts"() {
     "use strict";
     requireFromHere = createRequire(import.meta.url);
   }
@@ -28765,8 +28764,6 @@ var init_dind_manager = __esm({
 });
 
 // ../../packages/core/image-cache.ts
-import { promisify as promisify3 } from "util";
-import { execFile as execFile2, spawn as spawn4 } from "child_process";
 import fs8 from "fs/promises";
 import path11 from "path";
 import os6 from "os";
@@ -28817,12 +28814,10 @@ async function clearImageCache() {
   } catch {
   }
 }
-var execFileAsync2;
 var init_image_cache = __esm({
   "../../packages/core/image-cache.ts"() {
     "use strict";
     init_dind_manager();
-    execFileAsync2 = promisify3(execFile2);
   }
 });
 
@@ -31883,15 +31878,15 @@ var init_js_yaml = __esm({
 });
 
 // ../../packages/core/compose-scanner.ts
-import { promisify as promisify4 } from "util";
-import { exec as exec2, execFile as execFile3 } from "child_process";
-var execAsync2, execFileAsync3;
+import { promisify as promisify3 } from "util";
+import { exec as exec2, execFile as execFile2 } from "child_process";
+var execAsync2, execFileAsync2;
 var init_compose_scanner = __esm({
   "../../packages/core/compose-scanner.ts"() {
     "use strict";
     init_js_yaml();
-    execAsync2 = promisify4(exec2);
-    execFileAsync3 = promisify4(execFile3);
+    execAsync2 = promisify3(exec2);
+    execFileAsync2 = promisify3(execFile2);
   }
 });
 
@@ -32045,8 +32040,8 @@ import fsSync from "fs";
 import path13 from "path";
 import os8 from "os";
 import crypto2 from "crypto";
-import { execFile as execFile4, execFileSync as execFileSync2 } from "child_process";
-import { promisify as promisify5 } from "util";
+import { execFile as execFile3, execFileSync as execFileSync2 } from "child_process";
+import { promisify as promisify4 } from "util";
 function getSupbuddyDataDir() {
   const platform = process.platform;
   if (platform === "darwin") {
@@ -32514,7 +32509,7 @@ var init_bundled_runtime_trust2 = __esm({
   "../../packages/core/bundled-runtime-trust.ts"() {
     "use strict";
     init_caddy_ca_manager();
-    execFileP = promisify5(execFile4);
+    execFileP = promisify4(execFile3);
     PLIST_LABEL = "com.cueplusplus.supbuddy.bundled-runtime-ca-trust";
     MANAGED_ENV_VARS = ["NODE_EXTRA_CA_CERTS"];
     LEGACY_REPLACE_VARS = ["SSL_CERT_FILE", "REQUESTS_CA_BUNDLE"];
@@ -32565,7 +32560,7 @@ var init_docker_watcher = __esm({
 
 // ../../packages/core/tailscale.ts
 import { exec as exec3 } from "child_process";
-import { promisify as promisify6 } from "util";
+import { promisify as promisify5 } from "util";
 import fs11 from "fs/promises";
 import path14 from "path";
 async function tailscaleKeyPath() {
@@ -32631,7 +32626,7 @@ var init_tailscale = __esm({
   "../../packages/core/tailscale.ts"() {
     "use strict";
     init_store();
-    execAsync3 = promisify6(exec3);
+    execAsync3 = promisify5(exec3);
     detectionInterval = null;
     apiKey = null;
   }
@@ -37802,8 +37797,8 @@ __export(supabase_manager_exports, {
   stopSupabase: () => stopSupabase,
   takenSupabaseProjectIds: () => takenSupabaseProjectIds
 });
-import { spawn as spawn5 } from "child_process";
-import { promisify as promisify7 } from "util";
+import { spawn as spawn4 } from "child_process";
+import { promisify as promisify6 } from "util";
 import { exec as exec4 } from "child_process";
 import nodeProcess from "process";
 function runSerial(fn) {
@@ -37851,9 +37846,6 @@ async function isDockerRunning() {
 }
 async function isSupabaseInitialized(projectPath) {
   try {
-    const { exec: exec9 } = await import("child_process");
-    const { promisify: promisify15 } = await import("util");
-    const execAsync9 = promisify15(exec9);
     const fs33 = await import("fs/promises");
     const path39 = await import("path");
     const supabasePath = path39.join(projectPath, "supabase");
@@ -37919,8 +37911,8 @@ async function readSupabasePorts(projectPath) {
 async function isPortInUse(port) {
   try {
     const { exec: exec9 } = await import("child_process");
-    const { promisify: promisify15 } = await import("util");
-    const execAsync9 = promisify15(exec9);
+    const { promisify: promisify14 } = await import("util");
+    const execAsync9 = promisify14(exec9);
     const { stdout } = await execAsync9(`lsof -nP -iTCP:${port} -sTCP:LISTEN -F pcn`, { timeout: 3e3 });
     if (!stdout.trim()) return { inUse: false };
     const match = stdout.match(/c([^\n]+)/);
@@ -37977,7 +37969,7 @@ Edit Supabase config.toml to use different ports, or stop the other project firs
   }
   const projectEnv = await resolveProjectEnv(projectPath);
   return new Promise((resolve, reject) => {
-    const child = spawn5("supabase", ["start"], {
+    const child = spawn4("supabase", ["start"], {
       cwd: projectPath,
       env: { ...nodeProcess.env, ...projectEnv },
       stdio: ["ignore", "pipe", "pipe"]
@@ -37991,7 +37983,6 @@ Edit Supabase config.toml to use different ports, or stop the other project firs
     };
     activeOperations.set(projectId, operation);
     let output = "";
-    let hasError = false;
     io2.emit("supabase:operation", {
       projectId,
       operation: "start",
@@ -38034,7 +38025,6 @@ Edit Supabase config.toml to use different ports, or stop the other project firs
         switch (ev.kind) {
           case "error":
             console.error(`[SupabaseManager] ${ev.text}`);
-            hasError = true;
             break;
           case "warning":
             console.log(`[SupabaseManager] ${ev.text}`);
@@ -38108,7 +38098,7 @@ async function stopSupabase(projectId, projectPath, io2) {
     throw new Error("Operation already in progress for this project");
   }
   return new Promise((resolve, reject) => {
-    const child = spawn5("supabase", ["stop"], {
+    const child = spawn4("supabase", ["stop"], {
       cwd: projectPath,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -38121,7 +38111,6 @@ async function stopSupabase(projectId, projectPath, io2) {
     };
     activeOperations.set(projectId, operation);
     let output = "";
-    let hasError = false;
     io2.emit("supabase:operation", {
       projectId,
       operation: "stop",
@@ -38138,7 +38127,6 @@ async function stopSupabase(projectId, projectPath, io2) {
       output += stderrOutput;
       if (!isWarning(stderrOutput)) {
         console.error(`[SupabaseManager] Error: ${stderrOutput}`);
-        hasError = true;
       } else {
         console.log(`[SupabaseManager] Warning: ${stderrOutput.trim()}`);
       }
@@ -38379,7 +38367,7 @@ var init_supabase_manager = __esm({
     init_supabase_progress();
     serialChain = Promise.resolve();
     THIN_SUPABASE_SOFT_CAP = 6;
-    execAsync4 = promisify7(exec4);
+    execAsync4 = promisify6(exec4);
     activeOperations = /* @__PURE__ */ new Map();
     renameLocks = /* @__PURE__ */ new Map();
   }
@@ -38619,8 +38607,8 @@ var init_caddy_supervisor = __esm({
 });
 
 // ../../packages/core/caddy-manager.ts
-import { spawn as spawn6, execFile as execFile5 } from "child_process";
-import { promisify as promisify8 } from "util";
+import { spawn as spawn5, execFile as execFile4 } from "child_process";
+import { promisify as promisify7 } from "util";
 import { randomUUID } from "crypto";
 import path18 from "path";
 import fs15 from "fs/promises";
@@ -38643,9 +38631,14 @@ function getCaddyBinaryPath() {
   const isDev = process.env.NODE_ENV !== "production";
   if (isDev) {
     return path18.join(process.cwd(), "resources", "bin", binaryName);
-  } else {
-    return path18.join(process.resourcesPath, "bin", binaryName);
   }
+  const resourcesPath = process.resourcesPath;
+  if (!resourcesPath) {
+    throw new Error(
+      `cannot locate ${binaryName}: SUPBUDDY_BIN_DIR is not set and this runtime has no process.resourcesPath (that is Electron-only). The host must set SUPBUDDY_BIN_DIR to the directory holding the bundled binaries.`
+    );
+  }
+  return path18.join(resourcesPath, "bin", binaryName);
 }
 async function reapStaleCaddyProcesses() {
   if (process.platform === "win32") return;
@@ -38700,7 +38693,7 @@ function parseCaddyPidsFromPsOutput(stdout, matchToken, selfPid) {
 async function listCaddyPids(matchToken) {
   if (process.platform === "win32") return [];
   return await new Promise((resolve) => {
-    execFile5("/bin/ps", ["-axo", "pid=,stat=,command="], (err, stdout) => {
+    execFile4("/bin/ps", ["-axo", "pid=,stat=,command="], (err, stdout) => {
       if (err) {
         console.warn("[Caddy] /bin/ps failed during reap scan:", err);
         return resolve([]);
@@ -38744,7 +38737,7 @@ async function doStartCaddyServer() {
       XDG_DATA_HOME: dataDir,
       XDG_CONFIG_HOME: path18.dirname(caddyfilePath)
     };
-    caddyProcess = spawn6(binaryPath, ["run", "--config", caddyfilePath, "--adapter", "caddyfile"], {
+    caddyProcess = spawn5(binaryPath, ["run", "--config", caddyfilePath, "--adapter", "caddyfile"], {
       env: caddyEnv,
       stdio: [isDev ? "inherit" : "ignore", "pipe", "pipe"]
     });
@@ -38920,10 +38913,10 @@ async function validateCaddyfileContent(content) {
   const binaryPath = getCaddyBinaryPath();
   const dir = await getCaddyfileDir();
   const tmpPath = path18.join(dir, `Caddyfile.validate.${process.pid}.${caddyValidateCounter++}.tmp`);
-  const execFileAsync6 = promisify8(execFile5);
+  const execFileAsync5 = promisify7(execFile4);
   try {
     await fs15.writeFile(tmpPath, content, "utf-8");
-    await execFileAsync6(binaryPath, ["validate", "--config", tmpPath, "--adapter", "caddyfile"]);
+    await execFileAsync5(binaryPath, ["validate", "--config", tmpPath, "--adapter", "caddyfile"]);
     return { ok: true };
   } catch (err) {
     const e = err;
@@ -39083,23 +39076,23 @@ var init_stop_services = __esm({
 });
 
 // ../../packages/core/caddy-docker.ts
-import { promisify as promisify9 } from "util";
-import { execFile as execFile6 } from "child_process";
+import { promisify as promisify8 } from "util";
+import { execFile as execFile5 } from "child_process";
 async function stopCaddyContainer() {
   console.log("[CaddyDocker] Stopping container...");
-  await execFileAsync4("docker", ["stop", CADDY_CONTAINER], { timeout: 3e4 }).catch(() => {
+  await execFileAsync3("docker", ["stop", CADDY_CONTAINER], { timeout: 3e4 }).catch(() => {
   });
 }
 async function removeCaddyContainer() {
-  await execFileAsync4("docker", ["rm", "-f", CADDY_CONTAINER], { timeout: 1e4 }).catch(() => {
+  await execFileAsync3("docker", ["rm", "-f", CADDY_CONTAINER], { timeout: 1e4 }).catch(() => {
   });
 }
-var execFileAsync4, CADDY_CONTAINER;
+var execFileAsync3, CADDY_CONTAINER;
 var init_caddy_docker = __esm({
   "../../packages/core/caddy-docker.ts"() {
     "use strict";
     init_caddyfile_generator();
-    execFileAsync4 = promisify9(execFile6);
+    execFileAsync3 = promisify8(execFile5);
     CADDY_CONTAINER = "supbuddy-caddy";
   }
 });
@@ -39184,7 +39177,7 @@ var init_caddy_docker_leftovers = __esm({
 
 // ../../packages/core/port-forwarding.ts
 import { exec as exec5 } from "child_process";
-import { promisify as promisify10 } from "util";
+import { promisify as promisify9 } from "util";
 import fs16 from "fs/promises";
 async function probe443(timeoutMs = 1e3) {
   return probePort(443, timeoutMs);
@@ -39251,7 +39244,7 @@ var execAsync5;
 var init_port_forwarding = __esm({
   "../../packages/core/port-forwarding.ts"() {
     "use strict";
-    execAsync5 = promisify10(exec5);
+    execAsync5 = promisify9(exec5);
   }
 });
 
@@ -39610,7 +39603,7 @@ var init_revoked_mcp_secrets = __esm({
 });
 
 // ../../packages/core/supabase-dump.ts
-import { spawn as spawn7 } from "child_process";
+import { spawn as spawn6 } from "child_process";
 import { createHash } from "crypto";
 import { createWriteStream } from "fs";
 import { mkdtemp, stat, rm } from "fs/promises";
@@ -39633,7 +39626,7 @@ async function dumpInto(dir, container) {
   const file = join(dir, "supabase.pgc");
   const hash = createHash("sha256");
   await new Promise((resolve, reject) => {
-    const child = spawn7("docker", [
+    const child = spawn6("docker", [
       "exec",
       container,
       "pg_dump",
@@ -40054,9 +40047,14 @@ ${scriptsSection}
 }
 function renderMappingsMd(ctx) {
   const rows = ctx.mappings.length === 0 ? "_No mappings._" : [
-    "| Domain | Port | HTTPS | Enabled |",
-    "|--------|------|-------|---------|",
-    ...ctx.mappings.map((m) => `| ${m.domain} | ${m.port} | ${m.https ? "yes" : "no"} | ${m.enabled ? "yes" : "no"} |`)
+    // There was an HTTPS column here reading `m.https`, a field DomainMapping does not have — so it
+    // was undefined for every row and rendered "no" for every mapping, while Caddy serves them all
+    // over HTTPS and this same bundle hands agents https:// URLs elsewhere. The URL is what a reader
+    // actually needs, and it cannot drift from the scheme because the rest of the context builds it
+    // with the same function.
+    "| Domain | Port | URL | Enabled |",
+    "|--------|------|-----|---------|",
+    ...ctx.mappings.map((m) => `| ${m.domain} | ${m.port} | ${buildProxiedUrl(m.domain, ctx.proxyState)} | ${m.enabled ? "yes" : "no"} |`)
   ].join("\n");
   return HEADER(".supbuddy/mappings.md") + `# Domain mappings
 
@@ -41033,7 +41031,7 @@ var init_sync_manager = __esm({
 
 // ../../packages/core/project-cleanup.ts
 import { exec as exec6 } from "child_process";
-import { promisify as promisify11 } from "util";
+import { promisify as promisify10 } from "util";
 async function cleanupProjectRuntime(project) {
   const projectName = project.name ?? project.id;
   try {
@@ -41092,7 +41090,7 @@ var execAsync6;
 var init_project_cleanup = __esm({
   "../../packages/core/project-cleanup.ts"() {
     "use strict";
-    execAsync6 = promisify11(exec6);
+    execAsync6 = promisify10(exec6);
   }
 });
 
@@ -41382,25 +41380,26 @@ var init_repo_artifacts = __esm({
 });
 
 // ../../packages/core/bundle-exporter.ts
-import { promisify as promisify12 } from "util";
-import { exec as exec7, execFile as execFile7 } from "child_process";
-var execAsync7, execFileAsync5;
+import { promisify as promisify11 } from "util";
+import { exec as exec7, execFile as execFile6 } from "child_process";
+var execAsync7, execFileAsync4;
 var init_bundle_exporter = __esm({
   "../../packages/core/bundle-exporter.ts"() {
     "use strict";
     init_shared();
     init_compose_scanner();
     init_dind_manager();
-    execAsync7 = promisify12(exec7);
-    execFileAsync5 = promisify12(execFile7);
+    execAsync7 = promisify11(exec7);
+    execFileAsync4 = promisify11(execFile6);
   }
 });
 
 // ../../packages/core/cloud.ts
 import fs27 from "fs/promises";
+import nodeProcess3 from "process";
 import path30 from "path";
-import { execFile as execFile8 } from "child_process";
-import { promisify as promisify13 } from "util";
+import { execFile as execFile7 } from "child_process";
+import { promisify as promisify12 } from "util";
 async function sessionPath(dir) {
   const d = dir ?? path30.join(await getAppSupportDir(), "secrets");
   await fs27.mkdir(d, { recursive: true, mode: 448 });
@@ -41417,7 +41416,7 @@ var init_cloud = __esm({
     init_store();
     init_bundle_exporter();
     init_supabase_dump();
-    execFileP2 = promisify13(execFile8);
+    execFileP2 = promisify12(execFile7);
     REFRESH_BUFFER_MS = 60 * 1e3;
   }
 });
@@ -41685,13 +41684,13 @@ var init_engine = __esm({
 
 // ../../packages/core/isolation-drift.ts
 import { exec as exec8 } from "child_process";
-import { promisify as promisify14 } from "util";
+import { promisify as promisify13 } from "util";
 var execAsync8, defaultRunner;
 var init_isolation_drift = __esm({
   "../../packages/core/isolation-drift.ts"() {
     "use strict";
     init_project_scanner();
-    execAsync8 = promisify14(exec8);
+    execAsync8 = promisify13(exec8);
     defaultRunner = async (cmd) => {
       try {
         const { stdout } = await execAsync8(cmd, { timeout: 5e3 });
@@ -43310,7 +43309,7 @@ import os13 from "os";
 import path36 from "path";
 import crypto6 from "crypto";
 import readline3 from "readline";
-import { execFile as execFile9, execFileSync as execFileSync3, spawn as spawn8 } from "child_process";
+import { execFile as execFile8, execFileSync as execFileSync3, spawn as spawn7 } from "child_process";
 function semver(tag) {
   const core2 = tag.replace(/^v/, "").split(/[-+]/)[0];
   const parts = core2.split(".").map((n) => parseInt(n, 10));
@@ -43453,7 +43452,7 @@ async function swapApp(newApp) {
   const shell = `rm -rf ${sq(INSTALLED_APP)} && mv ${sq(newApp)} ${sq(INSTALLED_APP)}`;
   const osa = `do shell script "${shell.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}" with administrator privileges`;
   await new Promise((resolve, reject) => {
-    execFile9("osascript", ["-e", osa], (err) => err ? reject(err) : resolve());
+    execFile8("osascript", ["-e", osa], (err) => err ? reject(err) : resolve());
   });
 }
 function relaunchApp() {
@@ -43461,7 +43460,7 @@ function relaunchApp() {
     execFileSync3("pkill", ["-x", "Supbuddy"]);
   } catch {
   }
-  spawn8("open", [INSTALLED_APP], { detached: true, stdio: "ignore" }).unref();
+  spawn7("open", [INSTALLED_APP], { detached: true, stdio: "ignore" }).unref();
 }
 async function runUpdate(opts = {}) {
   if (process.platform !== "darwin") {
@@ -43626,7 +43625,7 @@ __export(run_exports, {
   runDev: () => runDev,
   selectDevUrls: () => selectDevUrls
 });
-import { spawn as spawn9, execSync as execSync2 } from "child_process";
+import { spawn as spawn8, execSync as execSync2 } from "child_process";
 import fs32 from "fs";
 import path37 from "path";
 function readMeta(startDir) {
@@ -43741,10 +43740,10 @@ async function runDev(rawArgv, opts = {}) {
   }
   return await new Promise((resolve) => {
     const filterBanner = framework === "next" || framework === "vite";
-    const child = filterBanner ? spawn9(argv[0], argv.slice(1), {
+    const child = filterBanner ? spawn8(argv[0], argv.slice(1), {
       stdio: ["inherit", "pipe", "pipe"],
       env: { ...process.env, FORCE_COLOR: process.env.FORCE_COLOR ?? "1" }
-    }) : spawn9(argv[0], argv.slice(1), { stdio: "inherit", env: process.env });
+    }) : spawn8(argv[0], argv.slice(1), { stdio: "inherit", env: process.env });
     if (filterBanner) {
       const drop = (line) => isBoundBannerLine(line, ip);
       if (child.stdout) pipeFiltered(child.stdout, process.stdout, drop);

package/dist/daemon/worker.cjs

@@ -25933,10 +25933,10 @@ function parseAddonsExtension(composeData) {
   if (block == null) return null;
   return SupbuddyAddonsExtensionSchema.parse(block);
 }
-var define_process_env_default$g = {};
+var define_process_env_default$f = {};
 const WORKER_PORT_ENV = "WORKER_PORT";
 const DEFAULT_WORKER_PORT = 48760;
-function resolveWorkerPort(env = typeof process !== "undefined" ? define_process_env_default$g : {}) {
+function resolveWorkerPort(env = typeof process !== "undefined" ? define_process_env_default$f : {}) {
   const raw = env[WORKER_PORT_ENV];
   if (raw !== void 0 && raw !== "") {
     const n = Number(raw);
@@ -26115,7 +26115,7 @@ function planGlobalTldCascade(projects, mappings, newTld) {
   });
   return { projectUpdates, mappingUpdates };
 }
-var define_process_env_default$f = {};
+var define_process_env_default$e = {};
 function coerceProjectName(name2, fallback = "Untitled project") {
   if (typeof name2 === "string") return name2;
   if (name2 && typeof name2.name === "string") return name2.name;
@@ -26612,12 +26612,12 @@ function schedulePersist() {
   }, 1e3);
 }
 async function getAppSupportDir() {
-  const override = define_process_env_default$f.SUPBUDDY_STATE_DIR;
+  const override = define_process_env_default$e.SUPBUDDY_STATE_DIR;
   if (override) {
     await fs.mkdir(override, { recursive: true });
     return override;
   }
-  if (define_process_env_default$f.VITEST || false) {
+  if (define_process_env_default$e.VITEST || false) {
     const testDir = path.join(os$1.tmpdir(), `supbuddy-vitest-${process.pid}`);
     await fs.mkdir(testDir, { recursive: true });
     return testDir;
@@ -26627,9 +26627,9 @@ async function getAppSupportDir() {
   if (platform === "darwin") {
     userDataPath = path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
-    userDataPath = path.join(define_process_env_default$f.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"), "Supbuddy");
+    userDataPath = path.join(define_process_env_default$e.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"), "Supbuddy");
   } else {
-    userDataPath = path.join(define_process_env_default$f.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"), "Supbuddy");
+    userDataPath = path.join(define_process_env_default$e.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"), "Supbuddy");
   }
   await fs.mkdir(userDataPath, { recursive: true });
   return userDataPath;
@@ -26846,7 +26846,7 @@ function planProjectActivation(input) {
     releaseGlobalRefs: input.enabledChanged && !input.enabled
   };
 }
-var define_process_env_default$e = {};
+var define_process_env_default$d = {};
 async function getCaddyfileDir() {
   const platform = process.platform;
   let userDataPath;
@@ -26854,12 +26854,12 @@ async function getCaddyfileDir() {
     userDataPath = path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
     userDataPath = path.join(
-      define_process_env_default$e.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
+      define_process_env_default$d.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   } else {
     userDataPath = path.join(
-      define_process_env_default$e.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
+      define_process_env_default$d.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
       "Supbuddy"
     );
   }
@@ -27540,15 +27540,6 @@ async function isDockerRunning() {
 }
 async function isSupabaseInitialized(projectPath) {
   try {
-    const { exec: exec2 } = await __vitePreload(async () => {
-      const { exec: exec22 } = await import("child_process");
-      return { exec: exec22 };
-    }, false ? __VITE_PRELOAD__ : void 0);
-    const { promisify: promisify2 } = await __vitePreload(async () => {
-      const { promisify: promisify22 } = await import("util");
-      return { promisify: promisify22 };
-    }, false ? __VITE_PRELOAD__ : void 0);
-    const execAsync2 = promisify2(exec2);
     const fs2 = await __vitePreload(() => import("fs/promises"), false ? __VITE_PRELOAD__ : void 0);
     const path2 = await __vitePreload(() => import("path"), false ? __VITE_PRELOAD__ : void 0);
     const supabasePath = path2.join(projectPath, "supabase");
@@ -28290,7 +28281,7 @@ function isMappingServeable(mapping, getProject) {
   const project = getProject(mapping.projectId);
   return !!project && project.enabled === true;
 }
-var define_process_env_default$d = {};
+var define_process_env_default$c = {};
 let caddyProcess = null;
 let stdoutBuffer = "";
 let stderrBuffer = "";
@@ -28329,9 +28320,13 @@ function getCaddyBinaryPath() {
   if (bundledBinDir) {
     return path.join(bundledBinDir, binaryName);
   }
-  {
-    return path.join(process.resourcesPath, "bin", binaryName);
+  const resourcesPath = process.resourcesPath;
+  if (!resourcesPath) {
+    throw new Error(
+      `cannot locate ${binaryName}: SUPBUDDY_BIN_DIR is not set and this runtime has no process.resourcesPath (that is Electron-only). The host must set SUPBUDDY_BIN_DIR to the directory holding the bundled binaries.`
+    );
   }
+  return path.join(resourcesPath, "bin", binaryName);
 }
 async function reapStaleCaddyProcesses() {
   if (process.platform === "win32") return;
@@ -28427,9 +28422,9 @@ async function doStartCaddyServer() {
     console.log(`[Caddy] Config: ${caddyfilePath}`);
     console.log(`[Caddy] Data directory: ${dataDir}`);
     const isDev = false;
-    const homeDir = define_process_env_default$d.HOME || require("os").homedir();
+    const homeDir = define_process_env_default$c.HOME || require("os").homedir();
     const caddyEnv = {
-      ...define_process_env_default$d,
+      ...define_process_env_default$c,
       HOME: homeDir,
       XDG_DATA_HOME: dataDir,
       XDG_CONFIG_HOME: path.dirname(caddyfilePath)
@@ -28860,7 +28855,7 @@ function deriveReportedStatus(tracked, live, opts = {}) {
   if (tracked === "running" && !live.caddyAlive) return "crashed";
   return tracked;
 }
-var define_process_env_default$c = {};
+var define_process_env_default$b = {};
 const defaultElevate$1 = async ({ command, prompt, tmpFiles = [] }) => {
   if (!process.send) {
     return { success: false, error: "No host bridge available for elevation" };
@@ -28888,12 +28883,12 @@ async function getCaddyDataDir() {
     userDataPath = path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
     userDataPath = path.join(
-      define_process_env_default$c.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
+      define_process_env_default$b.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   } else {
     userDataPath = path.join(
-      define_process_env_default$c.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
+      define_process_env_default$b.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
       "Supbuddy"
     );
   }
@@ -29270,7 +29265,7 @@ const caddyCaManager = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defi
   parseKeychainSha1Fingerprints,
   uninstallCaddyCA
 }, Symbol.toStringTag, { value: "Module" }));
-var define_process_env_default$b = {};
+var define_process_env_default$a = {};
 const execFileP$1 = util$1.promisify(child_process.execFile);
 const PLIST_LABEL = "com.cueplusplus.supbuddy.bundled-runtime-ca-trust";
 const MANAGED_ENV_VARS = ["NODE_EXTRA_CA_CERTS"];
@@ -29283,12 +29278,12 @@ function getSupbuddyDataDir() {
   }
   if (platform === "win32") {
     return path.join(
-      define_process_env_default$b.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
+      define_process_env_default$a.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   }
   return path.join(
-    define_process_env_default$b.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
+    define_process_env_default$a.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
     "Supbuddy"
   );
 }
@@ -29327,7 +29322,7 @@ function planCaEnvSanitization(env) {
   const setNodeExtra = ne == null || ne === "" || isSupbuddyOwnedCaPath(ne) ? getBundlePath() : null;
   return { unset, setNodeExtra };
 }
-function getSanitizedSpawnEnv(base = define_process_env_default$b) {
+function getSanitizedSpawnEnv(base = define_process_env_default$a) {
   const out = { ...base };
   const plan2 = planCaEnvSanitization(out);
   for (const v of plan2.unset) delete out[v];
@@ -29337,10 +29332,10 @@ function getSanitizedSpawnEnv(base = define_process_env_default$b) {
   return out;
 }
 function sanitizeOwnProcessEnv() {
-  const plan2 = planCaEnvSanitization(define_process_env_default$b);
-  for (const v of plan2.unset) delete define_process_env_default$b[v];
+  const plan2 = planCaEnvSanitization(define_process_env_default$a);
+  for (const v of plan2.unset) delete define_process_env_default$a[v];
   if (plan2.setNodeExtra && fsSync.existsSync(plan2.setNodeExtra)) {
-    define_process_env_default$b.NODE_EXTRA_CA_CERTS = plan2.setNodeExtra;
+    define_process_env_default$a.NODE_EXTRA_CA_CERTS = plan2.setNodeExtra;
   }
   if (plan2.unset.length) {
     console.log("[brt] sanitized stale CA replace-vars from daemon env:", plan2.unset.join(", "));
@@ -29471,7 +29466,7 @@ async function scanProcessesForNodeExtra() {
 const PROBEABLE_SHELLS = /* @__PURE__ */ new Set(["sh", "bash", "zsh", "ksh", "dash", "fish"]);
 async function probeLoginShellNodeExtra() {
   if (process.platform === "win32") return null;
-  const shell = define_process_env_default$b.SHELL || "/bin/sh";
+  const shell = define_process_env_default$a.SHELL || "/bin/sh";
   if (!PROBEABLE_SHELLS.has(path.basename(shell))) return null;
   try {
     const { stdout } = await execFileP$1(
@@ -29481,8 +29476,8 @@ async function probeLoginShellNodeExtra() {
         // A clean slate — HOME/USER only, so the profile chain is the ONLY source.
         env: {
           HOME: os$1.homedir(),
-          USER: define_process_env_default$b.USER ?? "",
-          LOGNAME: define_process_env_default$b.LOGNAME ?? define_process_env_default$b.USER ?? "",
+          USER: define_process_env_default$a.USER ?? "",
+          LOGNAME: define_process_env_default$a.LOGNAME ?? define_process_env_default$a.USER ?? "",
           PATH: "/usr/bin:/bin:/usr/sbin:/sbin",
           TERM: "dumb"
         },
@@ -29522,7 +29517,7 @@ function getPlistPath() {
 }
 function getEnvironmentDPath() {
   return path.join(
-    define_process_env_default$b.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
+    define_process_env_default$a.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
     "environment.d",
     "supbuddy-ca.conf"
   );
@@ -29979,7 +29974,7 @@ async function getStatus(lastRefreshedAt, opts = {}) {
     observations.push({ origin: "managed", value: env.NODE_EXTRA_CA_CERTS, detail: getMethod() });
   }
   if (effective.loginShell) {
-    observations.push({ origin: "login-shell", value: effective.loginShell, detail: define_process_env_default$b.SHELL ?? "login shell" });
+    observations.push({ origin: "login-shell", value: effective.loginShell, detail: define_process_env_default$a.SHELL ?? "login shell" });
   }
   observations.push(...effective.processes);
   const classified = classifyNodeExtraCaCerts(observations, bundlePath);
@@ -30197,7 +30192,7 @@ async function testTrust(opts) {
   try {
     const { stdout, stderr } = await execFileP$1(process.execPath, ["-e", script], {
       env: {
-        ...define_process_env_default$b,
+        ...define_process_env_default$a,
         NODE_EXTRA_CA_CERTS: bundlePath
       },
       encoding: "utf-8",
@@ -30412,7 +30407,7 @@ fi
 }
 async function canUseSudo() {
   try {
-    const { stdout } = await execAsync$c("sudo -n true 2>&1");
+    await execAsync$c("sudo -n true 2>&1");
     return true;
   } catch (error) {
     return false;
@@ -33795,12 +33790,21 @@ const composeScanner = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defi
   resolveComposeProject,
   scanDockerCompose
 }, Symbol.toStringTag, { value: "Module" }));
-var define_process_env_default$a = {};
+var define_process_env_default$9 = {};
 const runningScripts = /* @__PURE__ */ new Map();
 const MAX_LOG_LINES = 1e3;
+function compareNodeVersions(a, b) {
+  const parts = (v) => v.replace(/^v/, "").split(".").map((n) => Number.parseInt(n, 10) || 0);
+  const [x, y] = [parts(a), parts(b)];
+  for (let i2 = 0; i2 < Math.max(x.length, y.length); i2++) {
+    const d = (x[i2] ?? 0) - (y[i2] ?? 0);
+    if (d !== 0) return d;
+  }
+  return 0;
+}
 function getAugmentedPath() {
-  const currentPath = define_process_env_default$a.PATH || "";
-  const homeDir = define_process_env_default$a.HOME || require("os").homedir() || "";
+  const currentPath = define_process_env_default$9.PATH || "";
+  const homeDir = define_process_env_default$9.HOME || require("os").homedir() || "";
   const extraPaths = [
     "/opt/homebrew/bin",
     "/opt/homebrew/sbin",
@@ -33812,7 +33816,7 @@ function getAugmentedPath() {
   if (homeDir) {
     const nvmDir = path__namespace.join(homeDir, ".nvm", "versions", "node");
     try {
-      const versions = fsSync.promises.readdirSync(nvmDir).filter((v) => v.startsWith("v")).sort().reverse();
+      const versions = fsSync.readdirSync(nvmDir).filter((v) => v.startsWith("v")).sort(compareNodeVersions).reverse();
       for (const v of versions) {
         extraPaths.push(path__namespace.join(nvmDir, v, "bin"));
       }
@@ -33869,7 +33873,7 @@ async function startScript(projectId, projectPath, scriptName, command, packageM
   console.log(`[ScriptManager] Starting script: ${scriptName} (${packageManager} run ${scriptName}) in ${projectPath}`);
   console.log(`[ScriptManager] PATH: ${augmentedPath}`);
   try {
-    child_process.execSync(`command -v ${packageManager}`, { env: getSanitizedSpawnEnv({ ...define_process_env_default$a, PATH: augmentedPath }), stdio: "pipe" });
+    child_process.execSync(`command -v ${packageManager}`, { env: getSanitizedSpawnEnv({ ...define_process_env_default$9, PATH: augmentedPath }), stdio: "pipe" });
   } catch {
     const installHint = packageManager === "yarn" ? "Install it with: npm install -g yarn" : packageManager === "pnpm" ? "Install it with: npm install -g pnpm" : "Ensure Node.js is installed and npm is available in your PATH";
     const errorMsg = `"${packageManager}" is not installed or not found in PATH. ${installHint}`;
@@ -33898,7 +33902,7 @@ async function startScript(projectId, projectPath, scriptName, command, packageM
         shell: true,
         // Sanitize so a stale inherited Supbuddy-owned SSL_CERT_FILE (replace-
         // semantics, honored by Node 26) never reaches the user's dev server.
-        env: getSanitizedSpawnEnv({ ...define_process_env_default$a, PATH: augmentedPath, FORCE_COLOR: "1" })
+        env: getSanitizedSpawnEnv({ ...define_process_env_default$9, PATH: augmentedPath, FORCE_COLOR: "1" })
       });
     } catch (err) {
       console.error(`[ScriptManager] Failed to spawn: ${err.message}`);
@@ -34084,6 +34088,7 @@ const scriptManager = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defin
   __proto__: null,
   detectPackageManager,
   getAllRunningScripts,
+  getAugmentedPath,
   getScriptLogs,
   getScriptStatus,
   restartScript,
@@ -34856,15 +34861,6 @@ async function detectSupabaseSDK(projectPath) {
 async function scanDockerServices(projectPath) {
   const services = [];
   try {
-    const { exec } = await __vitePreload(async () => {
-      const { exec: exec2 } = await import("child_process");
-      return { exec: exec2 };
-    }, false ? __VITE_PRELOAD__ : void 0);
-    const { promisify } = await __vitePreload(async () => {
-      const { promisify: promisify2 } = await import("util");
-      return { promisify: promisify2 };
-    }, false ? __VITE_PRELOAD__ : void 0);
-    const execAsync2 = promisify(exec);
     const composeFiles = ["docker-compose.yml", "docker-compose.yaml", "compose.yml", "compose.yaml"];
     let composeFile = null;
     for (const file of composeFiles) {
@@ -43559,7 +43555,6 @@ function checkScope(tool, scopes) {
 }
 class RateLimiter {
   buckets = /* @__PURE__ */ new Map();
-  now = () => Date.now();
   // Test seam: lets tests fast-forward without actually waiting.
   testOffset = 0;
   advanceTime(ms2) {
@@ -43710,9 +43705,9 @@ class McpAuditLog extends require$$0$1.EventEmitter {
     }
   }
 }
-var define_process_env_default$9 = {};
+var define_process_env_default$8 = {};
 function getAuditPath() {
-  const dir = define_process_env_default$9.SUPBUDDY_STATE_DIR ?? path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
+  const dir = define_process_env_default$8.SUPBUDDY_STATE_DIR ?? path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   return path.join(dir, "mcp-audit.jsonl");
 }
 const cap = () => useStore.getState().settings.mcp?.audit_cap ?? 5e3;
@@ -44593,13 +44588,21 @@ async function checksumFile(filePath) {
   const content = await fs.readFile(filePath);
   return `sha256:${crypto$1.createHash("sha256").update(content).digest("hex")}`;
 }
+function normalizeComposePorts(ports) {
+  if (!ports) return void 0;
+  return ports.map((p) => {
+    if (typeof p === "string") return p;
+    const base = p.published === void 0 || p.published === "" ? String(p.target ?? "") : `${p.published}:${p.target ?? ""}`;
+    return p.protocol ? `${base}/${p.protocol}` : base;
+  });
+}
 async function exportStackOnlyBundle(project) {
   if (!project.path) throw new Error("Project has no path");
   const resolved = await resolveComposeProject(project.path);
   const services = resolved ? Object.entries(resolved.services).map(([name2, m]) => ({
     name: name2,
     image: m.config.image,
-    ports: m.config.ports
+    ports: normalizeComposePorts(m.config.ports)
   })) : [];
   let envSanitized = null;
   try {
@@ -44857,7 +44860,6 @@ async function dumpInto(dir, container) {
   const { size } = await fs.stat(file);
   return { dir, file, bytes: size, sha256: hash.digest("hex") };
 }
-var define_process_env_default$8 = {};
 const execFileP = util$1.promisify(child_process.execFile);
 const REFRESH_BUFFER_MS = 60 * 1e3;
 function toSession(t, emailFallback) {
@@ -45132,11 +45134,21 @@ async function cloudTeardownStack(cfg, session, stackId) {
 }
 let currentSession = null;
 function cloudConfigFromEnv() {
-  const supabaseUrl = define_process_env_default$8.SUPBUDDY_CLOUD_SUPABASE_URL;
-  const anonKey = define_process_env_default$8.SUPBUDDY_CLOUD_ANON_KEY;
-  const apiBase = define_process_env_default$8.SUPBUDDY_CLOUD_API_BASE;
+  const env = nodeProcess.env;
+  const supabaseUrl = env.SUPBUDDY_CLOUD_SUPABASE_URL || bakedCloudSupabaseUrl();
+  const anonKey = env.SUPBUDDY_CLOUD_ANON_KEY || bakedCloudAnonKey();
+  const apiBase = env.SUPBUDDY_CLOUD_API_BASE || bakedCloudApiBase();
   return supabaseUrl && anonKey && apiBase ? { supabaseUrl, anonKey, apiBase } : null;
 }
+function bakedCloudSupabaseUrl() {
+  return "https://ascxsovqvxyvpgvhjszo.supabase.co";
+}
+function bakedCloudAnonKey() {
+  return "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImFzY3hzb3Zxdnh5dnBndmhqc3pvIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NzU5MTMxNzEsImV4cCI6MjA5MTQ4OTE3MX0.2Gb0z5FYglsQlm5QdfYS5y5TZO-NoCwIiTXWCk9C_Ds";
+}
+function bakedCloudApiBase() {
+  return "https://supbuddy.cloud";
+}
 function getCloudState() {
   return {
     configured: cloudConfigFromEnv() !== null,
@@ -47173,8 +47185,6 @@ function envPrefixForApp(app) {
       return "NEXT_PUBLIC_";
     case "vite":
       return "VITE_";
-    case "expo":
-      return "EXPO_PUBLIC_";
     default:
       return "";
   }
@@ -48670,9 +48680,14 @@ ${scriptsSection}
 }
 function renderMappingsMd(ctx) {
   const rows = ctx.mappings.length === 0 ? "_No mappings._" : [
-    "| Domain | Port | HTTPS | Enabled |",
-    "|--------|------|-------|---------|",
-    ...ctx.mappings.map((m) => `| ${m.domain} | ${m.port} | ${m.https ? "yes" : "no"} | ${m.enabled ? "yes" : "no"} |`)
+    // There was an HTTPS column here reading `m.https`, a field DomainMapping does not have — so it
+    // was undefined for every row and rendered "no" for every mapping, while Caddy serves them all
+    // over HTTPS and this same bundle hands agents https:// URLs elsewhere. The URL is what a reader
+    // actually needs, and it cannot drift from the scheme because the rest of the context builds it
+    // with the same function.
+    "| Domain | Port | URL | Enabled |",
+    "|--------|------|-----|---------|",
+    ...ctx.mappings.map((m) => `| ${m.domain} | ${m.port} | ${buildProxiedUrl(m.domain, ctx.proxyState)} | ${m.enabled ? "yes" : "no"} |`)
   ].join("\n");
   return HEADER(".supbuddy/mappings.md") + `# Domain mappings
 
@@ -50640,7 +50655,6 @@ const isolationBridge = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.def
   runIsolationSwitch
 }, Symbol.toStringTag, { value: "Module" }));
 var define_process_env_default$5 = {};
-util$1.promisify(child_process.execFile);
 function getCacheDir() {
   const override = define_process_env_default$5.SUPBUDDY_STATE_DIR;
   if (override) return path.join(override, "image-cache");
@@ -51250,7 +51264,11 @@ async function dumpVm(dind2, vmdb, dumpArgs, outFile) {
 function _pgRestoreFile(child, rs) {
   return new Promise((resolve, reject) => {
     let err = "";
-    child.stderr.on("data", (d) => err += d.toString());
+    child.stderr?.on("data", (d) => err += d.toString());
+    if (!child.stdin) {
+      reject(new Error("pg_restore was spawned without a writable stdin, so the dump cannot be fed to it"));
+      return;
+    }
     rs.on("error", (e) => reject(e));
     rs.pipe(child.stdin);
     child.on("error", (e) => reject(e));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "supbuddy",
-  "version": "3.2.0",
+  "version": "3.2.2",
   "description": "Run multiple Supabase projects at once on custom local domains with HTTPS. A headless CLI and daemon (proxy, DNS, Supabase/Compose lifecycle, MCP) for macOS and Linux.",
   "keywords": [
     "supabase",