Jason/extract local dev package

.gitignore

@@ -1,4 +1,5 @@
 node_modules
+.pnpm-store
 .DS_Store
 **/coverage
 # .gitignore template - https://github.com/github/gitignore/blob/main/Node.gitignore

.snyk

@@ -107,16 +107,58 @@ ignore:
         expires: '2026-12-31T00:00:00.000Z'
         created: '2026-06-25T00:00:00.000Z'
   'SNYK-JS-IMAGESIZE-17295814':
+    - '* > image-size':
+        reason: 'Transitive dependency in @docusaurus/mdx-loader and dev build tooling; no upgrade or patch available from upstream. Not exploitable in current usage (build-time image dimension parsing only).'
+        expires: '2026-09-11T00:00:00.000Z'
+        created: '2026-06-11T00:00:00.000Z'
     - '* > image-size@<=2.0.2':
         reason: 'Transitive dependency in vitest@4.1.6; not exploitable in current usage.'
         expires: '2026-07-11T00:00:00.000Z'
         created: '2026-06-11T10:00:00.000Z'
   'SNYK-JS-IMAGESIZE-17295816':
+    - '* > image-size':
+        reason: 'Transitive dependency in @docusaurus/mdx-loader and dev build tooling; no upgrade or patch available from upstream. Not exploitable in current usage (build-time image dimension parsing only).'
+        expires: '2026-09-11T00:00:00.000Z'
+        created: '2026-06-11T00:00:00.000Z'
     - '* > image-size@<=2.0.2':
         reason: 'Transitive dependency in vitest@4.1.6; not exploitable in current usage.'
         expires: '2026-07-11T00:00:00.000Z'
         created: '2026-06-11T10:00:00.000Z'
+  'SNYK-JS-AZUREIDENTITY-7964589':
+    - '* > @azure/identity@3.4.2':
+        reason: 'Transitive dependency via azurite>tedious; upgrade to 4.x is a breaking major-version change incompatible with azurite. Not exploitable in dev-only local storage emulation context.'
+        expires: '2026-09-16T00:00:00.000Z'
+        created: '2026-06-16T00:00:00.000Z'
+  'SNYK-JS-XML2JS-5414874':
+    - '* > xml2js@0.4.23':
+        reason: 'Transitive dependency via azurite>@azure/ms-rest-js; 0.4→0.5 is a breaking major change incompatible with @azure/ms-rest-js. Not exploitable in dev-only local storage emulation context.'
+        expires: '2026-09-16T00:00:00.000Z'
+        created: '2026-06-16T00:00:00.000Z'
+  'SNYK-JS-TOUGHCOOKIE-5672873':
+    - '* > tough-cookie@2.5.5':
+        reason: 'Transitive dependency via azurite>@azure/ms-rest-js; 2.x→4.x is a breaking major change. Not exploitable in dev-only local storage emulation context.'
+        expires: '2026-09-16T00:00:00.000Z'
+        created: '2026-06-16T00:00:00.000Z'
+  'SNYK-JS-OPENTELEMETRYCORE-17000000':
+    - '* > @opentelemetry/core':
+        reason: 'OTEL core 2.8.0+ requires sdk-node upgrade which has TypeScript compilation errors. Tracked alongside SNYK-JS-OPENTELEMETRYEXPORTERPROMETHEUS-16758050 for resolution in the planned OTEL 2.x migration.'
+        expires: '2026-09-16T00:00:00.000Z'
+        created: '2026-06-16T00:00:00.000Z'
+  'SNYK-JS-BABELCORE-17342497':
+    - '* > @babel/core@7.29.0':
+        reason: 'No 7.29.x fix release exists; next release is major v8.0.0 which is a breaking change for all transitive consumers. Low severity, dev tooling only.'
+        expires: '2026-09-16T00:00:00.000Z'
+        created: '2026-06-16T00:00:00.000Z'
+  'SNYK-JS-JOI-17317897':
+    - '* > joi':
+        reason: 'No upgrade or patch available per Snyk; overridden to 17.13.4 which fixes the pnpm advisory. Accepting residual Snyk finding until a patched release is published.'
+        expires: '2026-09-16T00:00:00.000Z'
+        created: '2026-06-16T00:00:00.000Z'
   'SNYK-JS-JSYAML-17342520':
+    - '* > js-yaml@3.14.2':
+        reason: 'js-yaml 3.x→4.x is a breaking major change for all transitive consumers (gray-matter/Docusaurus chain). js-yaml@4.1.1 patched to 4.2.0 via pnpm override; 3.x path has no safe upgrade.'
+        expires: '2026-09-16T00:00:00.000Z'
+        created: '2026-06-16T00:00:00.000Z'
     - '* > js-yaml':
         reason: 'Transitive in Docusaurus build tooling (gray-matter pins js-yaml@3.x; fix is in 4.2.0, a major bump blocked by gray-matter). Build-time parsing of repository-controlled input only.'
         expires: '2026-09-18T00:00:00.000Z'
@@ -126,3 +168,8 @@ ignore:
         reason: 'The fix requires migrating the Azure Functions telemetry stack from OpenTelemetry 1.x to 2.8.0 or newer. The current Azure exporter and 0.57.x SDK packages require the 1.x API family; a forced major override is type-compatible at build time but leaves mixed SDK internals. Accepted temporarily while the existing OTEL 2.x migration is completed.'
         expires: '2026-07-18T00:00:00.000Z'
         created: '2026-06-18T00:00:00.000Z'
+  'SNYK-JS-BRACEEXPANSION-17706650':
+    - '* > brace-expansion@1.1.13':
+        reason: 'Transitive in Docusaurus serve-handler for local static docs serving. The fixed brace-expansion 5.x line requires minimatch 10, whose named-export API is incompatible with serve-handler 6.1.7.'
+        expires: '2026-09-30T00:00:00.000Z'
+        created: '2026-06-30T00:00:00.000Z'

apps/api/package.json

@@ -8,10 +8,10 @@
 	"scripts": {
 		"prebuild": "pnpm run lint",
 		"build": "tsgo --build && tsgo --noEmit --project tsconfig.rolldown.json && rolldown -c rolldown.config.ts",
-		"predev": "pnpm run prepare:deploy && pnpm run sync-local-settings",
-		"dev": "pnpm exec portless data-access.ownercommunity.localhost --force node start-dev.mjs",
-		"predev:worktree": "pnpm run prepare:deploy && pnpm run sync-local-settings",
-		"dev:worktree": "pnpm exec portless data-access.ownercommunity.${WORKTREE_NAME}.localhost --force node start-dev.mjs",
+		"predev": "pnpm run prepare:deploy",
+		"dev": "pnpm exec portless data-access.ownercommunity.localhost --force node start-dev.ts",
+		"predev:worktree": "pnpm run prepare:deploy",
+		"dev:worktree": "pnpm exec portless data-access.ownercommunity.${WORKTREE_NAME}.localhost --force node start-dev.ts",
 		"prepare:deploy": "cellix-prepare-func-deploy",
 		"watch": "tsgo --watch",
 		"test": "vitest run --silent --reporter=dot",
@@ -24,8 +24,8 @@
 		"clean": "rimraf dist deploy",
 		"prestart": "pnpm run prepare:deploy && pnpm run sync-local-settings",
 		"start": "func start --typescript --script-root deploy/",
-		"sync-local-settings": "node scripts/sync-local-settings.mjs",
-		"azurite": "node start-azurite.mjs"
+		"sync-local-settings": "node sync-local-settings.ts",
+		"azurite": "node start-azurite.ts"
 	},
 	"dependencies": {
 		"@azure/functions": "catalog:",
@@ -50,6 +50,8 @@
 		"@cellix/config-rolldown": "workspace:*",
 		"@cellix/config-typescript": "workspace:*",
 		"@cellix/config-vitest": "workspace:*",
+		"@cellix/local-dev": "workspace:*",
+		"@ocom/local-dev-config": "workspace:*",
 		"@vitest/coverage-istanbul": "catalog:",
 		"archunit": "catalog:",
 		"azurite": "^3.35.0",

apps/api/rolldown.config.ts

@@ -17,7 +17,6 @@
  * By adding this reference directive, we can ensure that the NodeJS types are available for use in this file without causing phantom errors in the rest of the project.
  */
 /// <reference types="node" />
-
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { createCellixAzureFunctionsRolldownConfig } from '@cellix/config-rolldown';

apps/api/src/index.ts

@@ -1,11 +1,9 @@
 import './service-config/otel-starter.ts';
 
-import type { ApplicationServices } from '@ocom/application-services';
-import { buildApplicationServicesFactory } from '@ocom/application-services';
+import { type ApplicationServices, buildApplicationServicesFactory } from '@ocom/application-services';
 import type { ApiContextSpec } from '@ocom/context-spec';
 import { RegisterEventHandlers } from '@ocom/event-handler';
-import type { GraphContext } from '@ocom/graphql-handler';
-import { graphHandlerCreator } from '@ocom/graphql-handler';
+import { type GraphContext, graphHandlerCreator } from '@ocom/graphql-handler';
 import { restHandlerCreator } from '@ocom/rest';
 import { ServiceApolloServer } from '@ocom/service-apollo-server';
 import { ServiceBlobStorage, ServiceClientBlobStorage } from '@ocom/service-blob-storage';

apps/api/src/service-config/apollo-server/index.ts

@@ -1,5 +1,5 @@
-import type { ServiceApolloServerOptions } from '@ocom/service-apollo-server';
 import { combinedSchema, permissions } from '@ocom/graphql';
+import type { ServiceApolloServerOptions } from '@ocom/service-apollo-server';
 
 const { NODE_ENV } = process.env;
 const isDev = NODE_ENV !== 'production';

apps/api/start-azurite.ts

@@ -0,0 +1,3 @@
+import { AzuriteDevRunner } from '@cellix/local-dev';
+
+new AzuriteDevRunner().start();

apps/api/start-dev.ts

@@ -0,0 +1,6 @@
+import { AzureFunctionsDevRunner } from '@cellix/local-dev';
+import { buildOcomApiLocalSettings } from '@ocom/local-dev-config';
+
+new AzureFunctionsDevRunner({
+	localSettings: buildOcomApiLocalSettings(),
+}).start();

apps/api/sync-local-settings.ts

@@ -0,0 +1,4 @@
+import { AzureFunctionsLocalSettings } from '@cellix/local-dev';
+import { buildOcomApiLocalSettings } from '@ocom/local-dev-config';
+
+new AzureFunctionsLocalSettings(buildOcomApiLocalSettings()).sync();

apps/api/turbo.json

@@ -4,7 +4,7 @@
 		"build": {
 			"cache": true,
 			"dependsOn": ["^build", "//#gen"],
-			"inputs": ["$TURBO_EXTENDS$", "rolldown.config.ts", "host.json", "$TURBO_ROOT$/scripts/local-dev/**"],
+			"inputs": ["$TURBO_EXTENDS$", "rolldown.config.ts", "host.json"],
 			"outputs": ["$TURBO_EXTENDS$", "deploy/**"]
 		},
 		"dev": {

apps/docs/package.json

@@ -4,8 +4,8 @@
 	"private": true,
 	"scripts": {
 		"docusaurus": "docusaurus",
-		"dev": "pnpm exec portless docs.ownercommunity.localhost --force node start-dev.mjs",
-		"dev:worktree": "pnpm exec portless docs.ownercommunity.${WORKTREE_NAME}.localhost --force node start-dev.mjs",
+		"dev": "pnpm exec portless docs.ownercommunity.localhost --force node start-dev.ts",
+		"dev:worktree": "pnpm exec portless docs.ownercommunity.${WORKTREE_NAME}.localhost --force node start-dev.ts",
 		"start": "docusaurus start --port 3001",
 		"build": "docusaurus build",
 		"swizzle": "docusaurus swizzle",
@@ -32,6 +32,7 @@
 	"devDependencies": {
 		"@cellix/config-typescript": "workspace:*",
 		"@cellix/config-vitest": "workspace:*",
+		"@cellix/local-dev": "workspace:*",
 		"@docusaurus/module-type-aliases": "^3.10.1",
 		"@docusaurus/tsconfig": "^3.10.1",
 		"@docusaurus/types": "^3.10.1",

apps/docs/start-dev.ts

@@ -0,0 +1,3 @@
+import { DocusaurusDevRunner } from '@cellix/local-dev';
+
+new DocusaurusDevRunner().start();

apps/docs/turbo.json

@@ -5,13 +5,13 @@
 			"dependsOn": [],
 			"persistent": true,
 			"interruptible": false,
-			"inputs": [".env", "package.json", "start-dev.mjs", "docusaurus.config.ts", "sidebars.ts", "tsconfig.json"]
+			"inputs": [".env", "package.json", "docusaurus.config.ts", "sidebars.ts", "tsconfig.json"]
 		},
 		"dev:worktree": {
 			"dependsOn": [],
 			"persistent": true,
 			"interruptible": false,
-			"inputs": [".env", "package.json", "start-dev.mjs", "docusaurus.config.ts", "sidebars.ts", "tsconfig.json"]
+			"inputs": [".env", "package.json", "start-dev.ts", "docusaurus.config.ts", "sidebars.ts", "tsconfig.json"]
 		},
 		"test": {
 			"inputs": ["$TURBO_EXTENDS$", "!docs/**", "!blog/**", "!static/**"]

apps/server-mongodb-memory-mock/package.json

@@ -11,8 +11,8 @@
 		"format": "biome format --write",
 		"format:check": "biome format .",
 		"start": "node dist/index.js",
-		"dev": "tsx src/index.ts",
-		"dev:worktree": "node start-mongo.mjs"
+		"dev": "node src/index.ts",
+		"dev:worktree": "node start-dev.ts"
 	},
 	"dependencies": {
 		"@cellix/server-mongodb-memory-mock-seedwork": "workspace:*",
@@ -22,9 +22,9 @@
 		"mongoose": "catalog:"
 	},
 	"devDependencies": {
+		"@cellix/local-dev": "workspace:*",
 		"@cellix/config-typescript": "workspace:*",
 		"rimraf": "catalog:",
-		"tsx": "catalog:",
 		"typescript": "catalog:"
 	}
 }