supbuddy 3.2.3 → 3.2.5

package/dist/bin.js

@@ -19807,7 +19807,7 @@ function cliBuildKind(env3 = process.env) {
   return raw === "host" || raw === "npm" ? raw : "dev";
 }
 function cliVersion(env3 = process.env) {
-  return "3.2.3".trim() || "0.0.0-dev";
+  return "3.2.5".trim() || "0.0.0-dev";
 }
 function isDevBuild(env3) {
   return cliBuildKind(env3) === "dev";
@@ -25149,7 +25149,8 @@ var init_schemas = __esm({
 });
 
 // ../../packages/shared/worker-port.ts
-function resolveWorkerPort(env3 = typeof process !== "undefined" ? process.env : {}) {
+import nodeProcess from "process";
+function resolveWorkerPort(env3 = typeof nodeProcess !== "undefined" ? nodeProcess.env : {}) {
   const raw = env3[WORKER_PORT_ENV];
   if (raw !== void 0 && raw !== "") {
     const n = Number(raw);
@@ -27808,6 +27809,7 @@ __export(store_exports, {
   persistState: () => persistState,
   useStore: () => useStore2
 });
+import nodeProcess2 from "process";
 import crypto from "crypto";
 import fs7 from "fs/promises";
 import path10 from "path";
@@ -27826,12 +27828,12 @@ function schedulePersist() {
   }, 1e3);
 }
 async function getAppSupportDir() {
-  const override = process.env.SUPBUDDY_STATE_DIR;
+  const override = nodeProcess2.env.SUPBUDDY_STATE_DIR;
   if (override) {
     await fs7.mkdir(override, { recursive: true });
     return override;
   }
-  if (process.env.VITEST || process.env.NODE_ENV === "test") {
+  if (nodeProcess2.env.VITEST || nodeProcess2.env.NODE_ENV === "test") {
     const testDir = path10.join(os5.tmpdir(), `supbuddy-vitest-${process.pid}`);
     await fs7.mkdir(testDir, { recursive: true });
     return testDir;
@@ -27841,9 +27843,9 @@ async function getAppSupportDir() {
   if (platform === "darwin") {
     userDataPath = path10.join(os5.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
-    userDataPath = path10.join(process.env.APPDATA || path10.join(os5.homedir(), "AppData", "Roaming"), "Supbuddy");
+    userDataPath = path10.join(nodeProcess2.env.APPDATA || path10.join(os5.homedir(), "AppData", "Roaming"), "Supbuddy");
   } else {
-    userDataPath = path10.join(process.env.XDG_CONFIG_HOME || path10.join(os5.homedir(), ".config"), "Supbuddy");
+    userDataPath = path10.join(nodeProcess2.env.XDG_CONFIG_HOME || path10.join(os5.homedir(), ".config"), "Supbuddy");
   }
   await fs7.mkdir(userDataPath, { recursive: true });
   return userDataPath;
@@ -28764,13 +28766,14 @@ var init_dind_manager = __esm({
 });
 
 // ../../packages/core/image-cache.ts
+import nodeProcess3 from "process";
 import fs8 from "fs/promises";
 import path11 from "path";
 import os6 from "os";
 function getCacheDir() {
-  const override = process.env.SUPBUDDY_STATE_DIR;
+  const override = nodeProcess3.env.SUPBUDDY_STATE_DIR;
   if (override) return path11.join(override, "image-cache");
-  if (process.env.VITEST || process.env.NODE_ENV === "test") {
+  if (nodeProcess3.env.VITEST || nodeProcess3.env.NODE_ENV === "test") {
     return path11.join(os6.tmpdir(), `supbuddy-vitest-${process.pid}`, "image-cache");
   }
   const platform = process.platform;
@@ -28778,9 +28781,9 @@ function getCacheDir() {
   if (platform === "darwin") {
     base = path11.join(os6.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
-    base = path11.join(process.env.APPDATA || path11.join(os6.homedir(), "AppData", "Roaming"), "Supbuddy");
+    base = path11.join(nodeProcess3.env.APPDATA || path11.join(os6.homedir(), "AppData", "Roaming"), "Supbuddy");
   } else {
-    base = path11.join(process.env.XDG_CONFIG_HOME || path11.join(os6.homedir(), ".config"), "Supbuddy");
+    base = path11.join(nodeProcess3.env.XDG_CONFIG_HOME || path11.join(os6.homedir(), ".config"), "Supbuddy");
   }
   return path11.join(base, "image-cache");
 }
@@ -31891,6 +31894,7 @@ var init_compose_scanner = __esm({
 });
 
 // ../../packages/core/caddy-ca-manager.ts
+import nodeProcess4 from "process";
 import fs9 from "fs/promises";
 import path12 from "path";
 import os7 from "os";
@@ -31901,12 +31905,12 @@ async function getCaddyDataDir() {
     userDataPath = path12.join(os7.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
     userDataPath = path12.join(
-      process.env.APPDATA || path12.join(os7.homedir(), "AppData", "Roaming"),
+      nodeProcess4.env.APPDATA || path12.join(os7.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   } else {
     userDataPath = path12.join(
-      process.env.XDG_CONFIG_HOME || path12.join(os7.homedir(), ".config"),
+      nodeProcess4.env.XDG_CONFIG_HOME || path12.join(os7.homedir(), ".config"),
       "Supbuddy"
     );
   }
@@ -32039,6 +32043,7 @@ import fs10 from "fs/promises";
 import fsSync from "fs";
 import path13 from "path";
 import os8 from "os";
+import nodeProcess5 from "process";
 import crypto2 from "crypto";
 import { execFile as execFile3, execFileSync as execFileSync2 } from "child_process";
 import { promisify as promisify4 } from "util";
@@ -32049,12 +32054,12 @@ function getSupbuddyDataDir() {
   }
   if (platform === "win32") {
     return path13.join(
-      process.env.APPDATA || path13.join(os8.homedir(), "AppData", "Roaming"),
+      nodeProcess5.env.APPDATA || path13.join(os8.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   }
   return path13.join(
-    process.env.XDG_CONFIG_HOME || path13.join(os8.homedir(), ".config"),
+    nodeProcess5.env.XDG_CONFIG_HOME || path13.join(os8.homedir(), ".config"),
     "Supbuddy"
   );
 }
@@ -32195,7 +32200,7 @@ async function scanProcessesForNodeExtra() {
 }
 async function probeLoginShellNodeExtra() {
   if (process.platform === "win32") return null;
-  const shell = process.env.SHELL || "/bin/sh";
+  const shell = nodeProcess5.env.SHELL || "/bin/sh";
   if (!PROBEABLE_SHELLS.has(path13.basename(shell))) return null;
   try {
     const { stdout } = await execFileP(
@@ -32205,8 +32210,8 @@ async function probeLoginShellNodeExtra() {
         // A clean slate — HOME/USER only, so the profile chain is the ONLY source.
         env: {
           HOME: os8.homedir(),
-          USER: process.env.USER ?? "",
-          LOGNAME: process.env.LOGNAME ?? process.env.USER ?? "",
+          USER: nodeProcess5.env.USER ?? "",
+          LOGNAME: nodeProcess5.env.LOGNAME ?? nodeProcess5.env.USER ?? "",
           PATH: "/usr/bin:/bin:/usr/sbin:/sbin",
           TERM: "dumb"
         },
@@ -32241,7 +32246,7 @@ function getPlistPath() {
 }
 function getEnvironmentDPath() {
   return path13.join(
-    process.env.XDG_CONFIG_HOME || path13.join(os8.homedir(), ".config"),
+    nodeProcess5.env.XDG_CONFIG_HOME || path13.join(os8.homedir(), ".config"),
     "environment.d",
     "supbuddy-ca.conf"
   );
@@ -32446,7 +32451,7 @@ async function getStatus(lastRefreshedAt, opts = {}) {
     observations.push({ origin: "managed", value: env3.NODE_EXTRA_CA_CERTS, detail: getMethod() });
   }
   if (effective.loginShell) {
-    observations.push({ origin: "login-shell", value: effective.loginShell, detail: process.env.SHELL ?? "login shell" });
+    observations.push({ origin: "login-shell", value: effective.loginShell, detail: nodeProcess5.env.SHELL ?? "login shell" });
   }
   observations.push(...effective.processes);
   const classified = classifyNodeExtraCaCerts(observations, bundlePath);
@@ -32522,6 +32527,7 @@ var init_bundled_runtime_trust2 = __esm({
 });
 
 // ../../packages/core/script-manager.ts
+import nodeProcess6 from "process";
 var init_script_manager = __esm({
   "../../packages/core/script-manager.ts"() {
     "use strict";
@@ -37353,6 +37359,7 @@ var init_dns_server = __esm({
 });
 
 // ../../packages/core/caddyfile-generator.ts
+import nodeProcess7 from "process";
 import fs13 from "fs/promises";
 import path16 from "path";
 import os9 from "os";
@@ -37363,12 +37370,12 @@ async function getCaddyfileDir() {
     userDataPath = path16.join(os9.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
     userDataPath = path16.join(
-      process.env.APPDATA || path16.join(os9.homedir(), "AppData", "Roaming"),
+      nodeProcess7.env.APPDATA || path16.join(os9.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   } else {
     userDataPath = path16.join(
-      process.env.XDG_CONFIG_HOME || path16.join(os9.homedir(), ".config"),
+      nodeProcess7.env.XDG_CONFIG_HOME || path16.join(os9.homedir(), ".config"),
       "Supbuddy"
     );
   }
@@ -37800,7 +37807,7 @@ __export(supabase_manager_exports, {
 import { spawn as spawn4 } from "child_process";
 import { promisify as promisify6 } from "util";
 import { exec as exec4 } from "child_process";
-import nodeProcess from "process";
+import nodeProcess8 from "process";
 function runSerial(fn) {
   const run = serialChain.then(fn, fn);
   serialChain = run.then(() => void 0, () => void 0);
@@ -37971,7 +37978,7 @@ Edit Supabase config.toml to use different ports, or stop the other project firs
   return new Promise((resolve, reject) => {
     const child = spawn4("supabase", ["start"], {
       cwd: projectPath,
-      env: { ...nodeProcess.env, ...projectEnv },
+      env: { ...nodeProcess8.env, ...projectEnv },
       stdio: ["ignore", "pipe", "pipe"]
     });
     const operation = {
@@ -38612,7 +38619,7 @@ import { promisify as promisify7 } from "util";
 import { randomUUID } from "crypto";
 import path18 from "path";
 import fs15 from "fs/promises";
-import nodeProcess2 from "process";
+import nodeProcess9 from "process";
 function getCaddyBinaryPath() {
   const platform = process.platform;
   const arch = process.arch;
@@ -38624,11 +38631,11 @@ function getCaddyBinaryPath() {
   } else {
     binaryName = arch === "arm64" ? "caddy-linux-arm64" : "caddy-linux-amd64";
   }
-  const bundledBinDir = nodeProcess2.env.SUPBUDDY_BIN_DIR;
+  const bundledBinDir = nodeProcess9.env.SUPBUDDY_BIN_DIR;
   if (bundledBinDir) {
     return path18.join(bundledBinDir, binaryName);
   }
-  const isDev = process.env.NODE_ENV !== "production";
+  const isDev = nodeProcess9.env.NODE_ENV !== "production";
   if (isDev) {
     return path18.join(process.cwd(), "resources", "bin", binaryName);
   }
@@ -38729,10 +38736,10 @@ async function doStartCaddyServer() {
     console.log(`[Caddy] Binary: ${binaryPath}`);
     console.log(`[Caddy] Config: ${caddyfilePath}`);
     console.log(`[Caddy] Data directory: ${dataDir}`);
-    const isDev = process.env.NODE_ENV !== "production";
-    const homeDir = process.env.HOME || __require("os").homedir();
+    const isDev = nodeProcess9.env.NODE_ENV !== "production";
+    const homeDir = nodeProcess9.env.HOME || __require("os").homedir();
     const caddyEnv = {
-      ...process.env,
+      ...nodeProcess9.env,
       HOME: homeDir,
       XDG_DATA_HOME: dataDir,
       XDG_CONFIG_HOME: path18.dirname(caddyfilePath)
@@ -39521,6 +39528,7 @@ var init_ca_and_trust = __esm({
 });
 
 // ../../packages/core/system-doctor/checks/orphan-mcp-secrets.ts
+import nodeProcess10 from "process";
 import path19 from "path";
 function secretKey(clientId) {
   return clientId.replace(/[^a-zA-Z0-9._-]/g, "_");
@@ -40496,10 +40504,11 @@ var init_gitignore = __esm({
 });
 
 // ../../packages/core/project-context/capabilities.ts
+import nodeProcess11 from "process";
 import path26 from "path";
 import os10 from "os";
 function globalHomeDir() {
-  return process.env.SUPBUDDY_HOME_DIR || os10.homedir();
+  return nodeProcess11.env.SUPBUDDY_HOME_DIR || os10.homedir();
 }
 function resolveTargetScope(scope, cap) {
   const s = scope ?? "auto";
@@ -41396,7 +41405,7 @@ var init_bundle_exporter = __esm({
 
 // ../../packages/core/cloud.ts
 import fs27 from "fs/promises";
-import nodeProcess3 from "process";
+import nodeProcess12 from "process";
 import path30 from "path";
 import { execFile as execFile7 } from "child_process";
 import { promisify as promisify12 } from "util";

package/dist/daemon/worker.cjs

@@ -21,6 +21,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
   mod
 ));
+const nodeProcess = require("node:process");
 const crypto$1 = require("crypto");
 const os$1 = require("os");
 const path = require("path");
@@ -38,7 +39,6 @@ const util$1 = require("util");
 const url = require("url");
 const net$1 = require("net");
 const https$3 = require("https");
-const nodeProcess = require("node:process");
 const node_child_process = require("node:child_process");
 const promises = require("node:fs/promises");
 const os$2 = require("node:os");
@@ -12656,7 +12656,7 @@ function setup(env) {
 }
 var common$1 = setup;
 (function(module2, exports2) {
-  var define_process_env_default2 = {};
+  var define_process_env_default = {};
   exports2.formatArgs = formatArgs;
   exports2.save = save;
   exports2.load = load2;
@@ -12802,7 +12802,7 @@ var common$1 = setup;
     } catch (error) {
     }
     if (!r && typeof process !== "undefined" && "env" in process) {
-      r = define_process_env_default2.DEBUG;
+      r = define_process_env_default.DEBUG;
     }
     return r;
   }
@@ -25933,10 +25933,9 @@ function parseAddonsExtension(composeData) {
   if (block == null) return null;
   return SupbuddyAddonsExtensionSchema.parse(block);
 }
-var define_process_env_default$f = {};
 const WORKER_PORT_ENV = "WORKER_PORT";
 const DEFAULT_WORKER_PORT = 48760;
-function resolveWorkerPort(env = typeof process !== "undefined" ? define_process_env_default$f : {}) {
+function resolveWorkerPort(env = typeof nodeProcess !== "undefined" ? nodeProcess.env : {}) {
   const raw = env[WORKER_PORT_ENV];
   if (raw !== void 0 && raw !== "") {
     const n = Number(raw);
@@ -26115,7 +26114,6 @@ function planGlobalTldCascade(projects, mappings, newTld) {
   });
   return { projectUpdates, mappingUpdates };
 }
-var define_process_env_default$e = {};
 function coerceProjectName(name2, fallback = "Untitled project") {
   if (typeof name2 === "string") return name2;
   if (name2 && typeof name2.name === "string") return name2.name;
@@ -26612,12 +26610,12 @@ function schedulePersist() {
   }, 1e3);
 }
 async function getAppSupportDir() {
-  const override = define_process_env_default$e.SUPBUDDY_STATE_DIR;
+  const override = nodeProcess.env.SUPBUDDY_STATE_DIR;
   if (override) {
     await fs.mkdir(override, { recursive: true });
     return override;
   }
-  if (define_process_env_default$e.VITEST || false) {
+  if (nodeProcess.env.VITEST || nodeProcess.env.NODE_ENV === "test") {
     const testDir = path.join(os$1.tmpdir(), `supbuddy-vitest-${process.pid}`);
     await fs.mkdir(testDir, { recursive: true });
     return testDir;
@@ -26627,9 +26625,9 @@ async function getAppSupportDir() {
   if (platform === "darwin") {
     userDataPath = path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
-    userDataPath = path.join(define_process_env_default$e.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"), "Supbuddy");
+    userDataPath = path.join(nodeProcess.env.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"), "Supbuddy");
   } else {
-    userDataPath = path.join(define_process_env_default$e.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"), "Supbuddy");
+    userDataPath = path.join(nodeProcess.env.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"), "Supbuddy");
   }
   await fs.mkdir(userDataPath, { recursive: true });
   return userDataPath;
@@ -26846,7 +26844,6 @@ function planProjectActivation(input) {
     releaseGlobalRefs: input.enabledChanged && !input.enabled
   };
 }
-var define_process_env_default$d = {};
 async function getCaddyfileDir() {
   const platform = process.platform;
   let userDataPath;
@@ -26854,12 +26851,12 @@ async function getCaddyfileDir() {
     userDataPath = path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
     userDataPath = path.join(
-      define_process_env_default$d.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
+      nodeProcess.env.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   } else {
     userDataPath = path.join(
-      define_process_env_default$d.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
+      nodeProcess.env.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
       "Supbuddy"
     );
   }
@@ -28281,7 +28278,6 @@ function isMappingServeable(mapping, getProject) {
   const project = getProject(mapping.projectId);
   return !!project && project.enabled === true;
 }
-var define_process_env_default$c = {};
 let caddyProcess = null;
 let stdoutBuffer = "";
 let stderrBuffer = "";
@@ -28320,6 +28316,10 @@ function getCaddyBinaryPath() {
   if (bundledBinDir) {
     return path.join(bundledBinDir, binaryName);
   }
+  const isDev = nodeProcess.env.NODE_ENV !== "production";
+  if (isDev) {
+    return path.join(process.cwd(), "resources", "bin", binaryName);
+  }
   const resourcesPath = process.resourcesPath;
   if (!resourcesPath) {
     throw new Error(
@@ -28421,10 +28421,10 @@ async function doStartCaddyServer() {
     console.log(`[Caddy] Binary: ${binaryPath}`);
     console.log(`[Caddy] Config: ${caddyfilePath}`);
     console.log(`[Caddy] Data directory: ${dataDir}`);
-    const isDev = false;
-    const homeDir = define_process_env_default$c.HOME || require("os").homedir();
+    const isDev = nodeProcess.env.NODE_ENV !== "production";
+    const homeDir = nodeProcess.env.HOME || require("os").homedir();
     const caddyEnv = {
-      ...define_process_env_default$c,
+      ...nodeProcess.env,
       HOME: homeDir,
       XDG_DATA_HOME: dataDir,
       XDG_CONFIG_HOME: path.dirname(caddyfilePath)
@@ -28855,7 +28855,6 @@ function deriveReportedStatus(tracked, live, opts = {}) {
   if (tracked === "running" && !live.caddyAlive) return "crashed";
   return tracked;
 }
-var define_process_env_default$b = {};
 const defaultElevate$1 = async ({ command, prompt, tmpFiles = [] }) => {
   if (!process.send) {
     return { success: false, error: "No host bridge available for elevation" };
@@ -28883,12 +28882,12 @@ async function getCaddyDataDir() {
     userDataPath = path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
     userDataPath = path.join(
-      define_process_env_default$b.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
+      nodeProcess.env.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   } else {
     userDataPath = path.join(
-      define_process_env_default$b.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
+      nodeProcess.env.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
       "Supbuddy"
     );
   }
@@ -29265,7 +29264,6 @@ const caddyCaManager = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defi
   parseKeychainSha1Fingerprints,
   uninstallCaddyCA
 }, Symbol.toStringTag, { value: "Module" }));
-var define_process_env_default$a = {};
 const execFileP$1 = util$1.promisify(child_process.execFile);
 const PLIST_LABEL = "com.cueplusplus.supbuddy.bundled-runtime-ca-trust";
 const MANAGED_ENV_VARS = ["NODE_EXTRA_CA_CERTS"];
@@ -29278,12 +29276,12 @@ function getSupbuddyDataDir() {
   }
   if (platform === "win32") {
     return path.join(
-      define_process_env_default$a.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
+      nodeProcess.env.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"),
       "Supbuddy"
     );
   }
   return path.join(
-    define_process_env_default$a.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
+    nodeProcess.env.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
     "Supbuddy"
   );
 }
@@ -29322,7 +29320,7 @@ function planCaEnvSanitization(env) {
   const setNodeExtra = ne == null || ne === "" || isSupbuddyOwnedCaPath(ne) ? getBundlePath() : null;
   return { unset, setNodeExtra };
 }
-function getSanitizedSpawnEnv(base = define_process_env_default$a) {
+function getSanitizedSpawnEnv(base = nodeProcess.env) {
   const out = { ...base };
   const plan2 = planCaEnvSanitization(out);
   for (const v of plan2.unset) delete out[v];
@@ -29332,10 +29330,10 @@ function getSanitizedSpawnEnv(base = define_process_env_default$a) {
   return out;
 }
 function sanitizeOwnProcessEnv() {
-  const plan2 = planCaEnvSanitization(define_process_env_default$a);
-  for (const v of plan2.unset) delete define_process_env_default$a[v];
+  const plan2 = planCaEnvSanitization(nodeProcess.env);
+  for (const v of plan2.unset) delete nodeProcess.env[v];
   if (plan2.setNodeExtra && fsSync.existsSync(plan2.setNodeExtra)) {
-    define_process_env_default$a.NODE_EXTRA_CA_CERTS = plan2.setNodeExtra;
+    nodeProcess.env.NODE_EXTRA_CA_CERTS = plan2.setNodeExtra;
   }
   if (plan2.unset.length) {
     console.log("[brt] sanitized stale CA replace-vars from daemon env:", plan2.unset.join(", "));
@@ -29466,7 +29464,7 @@ async function scanProcessesForNodeExtra() {
 const PROBEABLE_SHELLS = /* @__PURE__ */ new Set(["sh", "bash", "zsh", "ksh", "dash", "fish"]);
 async function probeLoginShellNodeExtra() {
   if (process.platform === "win32") return null;
-  const shell = define_process_env_default$a.SHELL || "/bin/sh";
+  const shell = nodeProcess.env.SHELL || "/bin/sh";
   if (!PROBEABLE_SHELLS.has(path.basename(shell))) return null;
   try {
     const { stdout } = await execFileP$1(
@@ -29476,8 +29474,8 @@ async function probeLoginShellNodeExtra() {
         // A clean slate — HOME/USER only, so the profile chain is the ONLY source.
         env: {
           HOME: os$1.homedir(),
-          USER: define_process_env_default$a.USER ?? "",
-          LOGNAME: define_process_env_default$a.LOGNAME ?? define_process_env_default$a.USER ?? "",
+          USER: nodeProcess.env.USER ?? "",
+          LOGNAME: nodeProcess.env.LOGNAME ?? nodeProcess.env.USER ?? "",
           PATH: "/usr/bin:/bin:/usr/sbin:/sbin",
           TERM: "dumb"
         },
@@ -29517,7 +29515,7 @@ function getPlistPath() {
 }
 function getEnvironmentDPath() {
   return path.join(
-    define_process_env_default$a.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
+    nodeProcess.env.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"),
     "environment.d",
     "supbuddy-ca.conf"
   );
@@ -29974,7 +29972,7 @@ async function getStatus(lastRefreshedAt, opts = {}) {
     observations.push({ origin: "managed", value: env.NODE_EXTRA_CA_CERTS, detail: getMethod() });
   }
   if (effective.loginShell) {
-    observations.push({ origin: "login-shell", value: effective.loginShell, detail: define_process_env_default$a.SHELL ?? "login shell" });
+    observations.push({ origin: "login-shell", value: effective.loginShell, detail: nodeProcess.env.SHELL ?? "login shell" });
   }
   observations.push(...effective.processes);
   const classified = classifyNodeExtraCaCerts(observations, bundlePath);
@@ -30192,7 +30190,7 @@ async function testTrust(opts) {
   try {
     const { stdout, stderr } = await execFileP$1(process.execPath, ["-e", script], {
       env: {
-        ...define_process_env_default$a,
+        ...nodeProcess.env,
         NODE_EXTRA_CA_CERTS: bundlePath
       },
       encoding: "utf-8",
@@ -33790,7 +33788,6 @@ const composeScanner = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defi
   resolveComposeProject,
   scanDockerCompose
 }, Symbol.toStringTag, { value: "Module" }));
-var define_process_env_default$9 = {};
 const runningScripts = /* @__PURE__ */ new Map();
 const MAX_LOG_LINES = 1e3;
 function compareNodeVersions(a, b) {
@@ -33803,8 +33800,8 @@ function compareNodeVersions(a, b) {
   return 0;
 }
 function getAugmentedPath() {
-  const currentPath = define_process_env_default$9.PATH || "";
-  const homeDir = define_process_env_default$9.HOME || require("os").homedir() || "";
+  const currentPath = nodeProcess.env.PATH || "";
+  const homeDir = nodeProcess.env.HOME || require("os").homedir() || "";
   const extraPaths = [
     "/opt/homebrew/bin",
     "/opt/homebrew/sbin",
@@ -33873,7 +33870,7 @@ async function startScript(projectId, projectPath, scriptName, command, packageM
   console.log(`[ScriptManager] Starting script: ${scriptName} (${packageManager} run ${scriptName}) in ${projectPath}`);
   console.log(`[ScriptManager] PATH: ${augmentedPath}`);
   try {
-    child_process.execSync(`command -v ${packageManager}`, { env: getSanitizedSpawnEnv({ ...define_process_env_default$9, PATH: augmentedPath }), stdio: "pipe" });
+    child_process.execSync(`command -v ${packageManager}`, { env: getSanitizedSpawnEnv({ ...nodeProcess.env, PATH: augmentedPath }), stdio: "pipe" });
   } catch {
     const installHint = packageManager === "yarn" ? "Install it with: npm install -g yarn" : packageManager === "pnpm" ? "Install it with: npm install -g pnpm" : "Ensure Node.js is installed and npm is available in your PATH";
     const errorMsg = `"${packageManager}" is not installed or not found in PATH. ${installHint}`;
@@ -33902,7 +33899,7 @@ async function startScript(projectId, projectPath, scriptName, command, packageM
         shell: true,
         // Sanitize so a stale inherited Supbuddy-owned SSL_CERT_FILE (replace-
         // semantics, honored by Node 26) never reaches the user's dev server.
-        env: getSanitizedSpawnEnv({ ...define_process_env_default$9, PATH: augmentedPath, FORCE_COLOR: "1" })
+        env: getSanitizedSpawnEnv({ ...nodeProcess.env, PATH: augmentedPath, FORCE_COLOR: "1" })
       });
     } catch (err) {
       console.error(`[ScriptManager] Failed to spawn: ${err.message}`);
@@ -43705,9 +43702,8 @@ class McpAuditLog extends require$$0$1.EventEmitter {
     }
   }
 }
-var define_process_env_default$8 = {};
 function getAuditPath() {
-  const dir = define_process_env_default$8.SUPBUDDY_STATE_DIR ?? path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
+  const dir = nodeProcess.env.SUPBUDDY_STATE_DIR ?? path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   return path.join(dir, "mcp-audit.jsonl");
 }
 const cap = () => useStore.getState().settings.mcp?.audit_cap ?? 5e3;
@@ -46365,9 +46361,8 @@ async function installClaudeCode(target, projectRoot, token) {
   await writeAtomic(filePath, asJsonString(existing));
   return { written: true, path: filePath, backup };
 }
-var define_process_env_default$7 = {};
 async function installClaudeDesktop(token) {
-  const filePath = process.platform === "darwin" ? path.join(os$1.homedir(), "Library", "Application Support", "Claude", "claude_desktop_config.json") : process.platform === "win32" ? path.join(define_process_env_default$7.APPDATA ?? "", "Claude", "claude_desktop_config.json") : path.join(os$1.homedir(), ".config", "Claude", "claude_desktop_config.json");
+  const filePath = process.platform === "darwin" ? path.join(os$1.homedir(), "Library", "Application Support", "Claude", "claude_desktop_config.json") : process.platform === "win32" ? path.join(nodeProcess.env.APPDATA ?? "", "Claude", "claude_desktop_config.json") : path.join(os$1.homedir(), ".config", "Claude", "claude_desktop_config.json");
   const existing = await readJsoncOrEmpty(filePath);
   existing.mcpServers = existing.mcpServers ?? {};
   existing.mcpServers.supbuddy = {
@@ -49130,9 +49125,8 @@ async function removeGitignoreEntries(projectPath) {
   const stripped = (existing.slice(0, block.startIdx) + existing.slice(block.endIdx)).replace(/\n{3,}/g, "\n\n");
   await fs.writeFile(p, stripped, "utf-8");
 }
-var define_process_env_default$6 = {};
 function globalHomeDir() {
-  return define_process_env_default$6.SUPBUDDY_HOME_DIR || os$1.homedir();
+  return nodeProcess.env.SUPBUDDY_HOME_DIR || os$1.homedir();
 }
 const USER_SKILL_REF = "__user__";
 const TARGET_CAPABILITIES = {
@@ -50676,11 +50670,10 @@ const isolationBridge = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.def
   registerIsolationSwitch,
   runIsolationSwitch
 }, Symbol.toStringTag, { value: "Module" }));
-var define_process_env_default$5 = {};
 function getCacheDir() {
-  const override = define_process_env_default$5.SUPBUDDY_STATE_DIR;
+  const override = nodeProcess.env.SUPBUDDY_STATE_DIR;
   if (override) return path.join(override, "image-cache");
-  if (define_process_env_default$5.VITEST || false) {
+  if (nodeProcess.env.VITEST || nodeProcess.env.NODE_ENV === "test") {
     return path.join(os$1.tmpdir(), `supbuddy-vitest-${process.pid}`, "image-cache");
   }
   const platform = process.platform;
@@ -50688,9 +50681,9 @@ function getCacheDir() {
   if (platform === "darwin") {
     base = path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   } else if (platform === "win32") {
-    base = path.join(define_process_env_default$5.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"), "Supbuddy");
+    base = path.join(nodeProcess.env.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"), "Supbuddy");
   } else {
-    base = path.join(define_process_env_default$5.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"), "Supbuddy");
+    base = path.join(nodeProcess.env.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"), "Supbuddy");
   }
   return path.join(base, "image-cache");
 }
@@ -51438,7 +51431,6 @@ function finishVmMigration(projectId, io2) {
     io2?.emit?.("projects-updated", useStore.getState().projects);
   });
 }
-var define_process_env_default$4 = {};
 if (typeof globalThis.crypto === "undefined") {
   globalThis.crypto = crypto$1;
 }
@@ -52038,7 +52030,7 @@ async function handleStartProxy() {
       const fsd = await __vitePreload(() => import("node:fs"), false ? __VITE_PRELOAD__ : void 0);
       const osd = await __vitePreload(() => import("node:os"), false ? __VITE_PRELOAD__ : void 0);
       const pd = await __vitePreload(() => import("node:path"), false ? __VITE_PRELOAD__ : void 0);
-      const dir = define_process_env_default$4.SUPBUDDY_STATE_DIR || pd.join(osd.homedir(), "Library", "Application Support", "Supbuddy");
+      const dir = nodeProcess.env.SUPBUDDY_STATE_DIR || pd.join(osd.homedir(), "Library", "Application Support", "Supbuddy");
       fsd.appendFileSync(pd.join(dir, "proxy-error.log"), `[${(/* @__PURE__ */ new Date()).toISOString()}] ${error.stack}
 `);
     } catch {
@@ -54729,7 +54721,7 @@ function killProcessOnPort(port) {
   try {
     const fsSync2 = require("node:fs");
     const pathSync = require("node:path");
-    const dir = define_process_env_default$4.SUPBUDDY_STATE_DIR || pathSync.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
+    const dir = nodeProcess.env.SUPBUDDY_STATE_DIR || pathSync.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
     const parsed = JSON.parse(fsSync2.readFileSync(pathSync.join(dir, "daemon.json"), "utf-8"));
     recordedPid = Number.isInteger(parsed?.pid) ? parsed.pid : null;
   } catch {
@@ -54921,7 +54913,7 @@ async function init() {
     setTimeout(() => process.exit(0), 50);
   };
 }
-if (!define_process_env_default$4.VITEST) {
+if (!nodeProcess.env.VITEST) {
   init().catch(console.error);
 }
 const execAsync$2 = util$1.promisify(child_process.exec);
@@ -56963,15 +56955,19 @@ function sshProxyCommand(socksPort = TAILNET_SOCKS_PORT) {
   return `nc -X 5 -x localhost:${socksPort} %h %p`;
 }
 function sshOptionsFor(args) {
+  const q = (p) => {
+    if (p.includes('"')) throw new Error(`refusing to build an ssh option for a path containing a double quote: ${p}`);
+    return `"${p}"`;
+  };
   return [
     "-o",
     `ProxyCommand=${sshProxyCommand(args.socksPort)}`,
     "-o",
-    `UserKnownHostsFile=${args.knownHostsFile}`,
+    `UserKnownHostsFile=${q(args.knownHostsFile)}`,
     "-o",
     "StrictHostKeyChecking=yes",
     "-o",
-    `IdentityFile=${args.identityFile}`,
+    `IdentityFile=${q(args.identityFile)}`,
     "-o",
     "IdentitiesOnly=yes",
     "-o",
@@ -57190,11 +57186,10 @@ exec /usr/bin/${name2} ${opts} "$@"
   });
   return { ok: true, session };
 }
-var define_process_env_default$3 = {};
 const execFileAsync$1 = require$$0$3.promisify(node_child_process.execFile);
 const sessions = /* @__PURE__ */ new Map();
 const shimDirFor = (dataDir) => path$1.join(tailnetPaths(dataDir).dir, "shim");
-const mutagenEnv = (dataDir) => ({ ...define_process_env_default$3, PATH: `${shimDirFor(dataDir)}:${define_process_env_default$3.PATH}` });
+const mutagenEnv = (dataDir) => ({ ...nodeProcess.env, PATH: `${shimDirFor(dataDir)}:${nodeProcess.env.PATH}` });
 function runtimeDeps(deps) {
   const bins = resolveTailscaledBinaries();
   const mutagen = resolveMutagenBinary();
@@ -57278,11 +57273,10 @@ async function stopProjectSync(deps, projectId) {
   sessions.delete(projectId);
   return { stopped: true };
 }
-var define_process_env_default$2 = {};
 function syncDataDir() {
-  const override = define_process_env_default$2.SUPBUDDY_STATE_DIR;
+  const override = nodeProcess.env.SUPBUDDY_STATE_DIR;
   if (override) return override;
-  if (define_process_env_default$2.VITEST || false) {
+  if (nodeProcess.env.VITEST || nodeProcess.env.NODE_ENV === "test") {
     return path$1.join(os$2.tmpdir(), `supbuddy-vitest-${process.pid}`);
   }
   if (process.platform === "darwin") {
@@ -57789,24 +57783,23 @@ const caAndTrust = {
     return actions;
   }
 };
-var define_process_env_default$1 = {};
 const SECRET_RE = /^mcp-(.+)\.secret$/;
 function secretKey(clientId) {
   return clientId.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
 function appSupportDirSync() {
-  const override = define_process_env_default$1.SUPBUDDY_STATE_DIR;
+  const override = nodeProcess.env.SUPBUDDY_STATE_DIR;
   if (override) return override;
-  if (define_process_env_default$1.VITEST || false) {
+  if (nodeProcess.env.VITEST || nodeProcess.env.NODE_ENV === "test") {
     return path.join(os$1.tmpdir(), `supbuddy-vitest-${process.pid}`);
   }
   if (process.platform === "darwin") {
     return path.join(os$1.homedir(), "Library", "Application Support", "Supbuddy");
   }
   if (process.platform === "win32") {
-    return path.join(define_process_env_default$1.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"), "Supbuddy");
+    return path.join(nodeProcess.env.APPDATA || path.join(os$1.homedir(), "AppData", "Roaming"), "Supbuddy");
   }
-  return path.join(define_process_env_default$1.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"), "Supbuddy");
+  return path.join(nodeProcess.env.XDG_CONFIG_HOME || path.join(os$1.homedir(), ".config"), "Supbuddy");
 }
 function secretsDirSync() {
   return path.join(appSupportDirSync(), "secrets");
@@ -59640,10 +59633,9 @@ const orphanElectronTokenFiles = {
     ];
   }
 };
-var define_process_env_default = {};
 function userSources(platform) {
   const home = os$1.homedir();
-  const claudeDesktop = platform === "darwin" ? path.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : platform === "win32" ? path.join(define_process_env_default.APPDATA ?? "", "Claude", "claude_desktop_config.json") : path.join(home, ".config", "Claude", "claude_desktop_config.json");
+  const claudeDesktop = platform === "darwin" ? path.join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json") : platform === "win32" ? path.join(nodeProcess.env.APPDATA ?? "", "Claude", "claude_desktop_config.json") : path.join(home, ".config", "Claude", "claude_desktop_config.json");
   return [
     { path: path.join(home, ".claude.json"), format: "json" },
     { path: claudeDesktop, format: "json" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "supbuddy",
-  "version": "3.2.3",
+  "version": "3.2.5",
   "description": "Run multiple Supabase projects at once on custom local domains with HTTPS. A headless CLI and daemon (proxy, DNS, Supabase/Compose lifecycle, MCP) for macOS and Linux.",
   "keywords": [
     "supabase",