build(web-shared): stop resolving @/ from packages/web-shared

Every import of web-shared code now uses @kilocode/web-shared/…, so '@/'
maps to the importing app's own src only. Drop the second '@/' target from
the web, ai-gateway, scripts and trpc tsconfigs, the web Jest config, the
@kilocode/trpc rollup resolver and the Storybook webpack alias, and drop
'@/' from the web-shared tsconfig so a stray '@/' import there fails its
typecheck.

A file under apps/web/src can no longer shadow a web-shared file with the
same path, so the rule that a path exists in only one tree goes away.

Author: chrarnoldus

apps/ai-gateway/AGENTS.md

@@ -11,8 +11,8 @@ Next.js app that serves the AI gateway API on its own. It is not deployed yet;
   move under `/api/v1` too; the latter becomes `/api/v1/systemone`.
 - Route files are thin facades over handlers in `packages/web-shared`. Keep the
   `apps/web` `maxDuration` and `withRestTiming` usage, with route patterns that
-  match this app's paths. See `packages/web-shared/AGENTS.md` for how `@/`
-  imports resolve.
+  match this app's paths. Import them as `@kilocode/web-shared/…`; see
+  `packages/web-shared/AGENTS.md`.
 - Handlers that depend on the path accept both apps' paths, such as the LLM
   proxy's path validation.
 - `pnpm dev` runs with the web app's environment files. Start it with

apps/ai-gateway/tsconfig.json

@@ -9,7 +9,7 @@
     "skipLibCheck": true,
     "forceConsistentCasingInFileNames": true,
     "paths": {
-      "@/*": ["./src/*", "../../packages/web-shared/src/*"],
+      "@/*": ["./src/*"],
       "@kilocode/web-shared/*": ["../../packages/web-shared/src/*"],
       "@kilocode/db": ["../../packages/db/src/index.ts"],
       "@kilocode/db/*": ["../../packages/db/src/*"],

apps/storybook/.storybook/main.ts

@@ -42,7 +42,7 @@ const config: StorybookConfig = {
     if (config.resolve) {
       config.resolve.alias = {
         ...config.resolve.alias,
-        '@': [srcDir, webSharedSrcDir],
+        '@': srcDir,
         '@kilocode/web-shared': webSharedSrcDir,
         '@/lib/utils': resolve(mocksDir, 'utils.ts'),
       };

apps/web/jest.config.ts

@@ -33,7 +33,7 @@ const config: Config = {
     '^@kilocode/app-shared/(.*)$': '<rootDir>/../../packages/app-shared/src/$1',
     '^@kilocode/web-shared/(.*)$': '<rootDir>/../../packages/web-shared/src/$1',
     '^(\\.{1,2}/.+)\\.js$': '$1',
-    '^@/(.*)$': ['<rootDir>/src/$1', '<rootDir>/../../packages/web-shared/src/$1'],
+    '^@/(.*)$': '<rootDir>/src/$1',
     '^server-only$': '<rootDir>/src/tests/setup/__mocks__/server-only.js',
   },
   roots: ['<rootDir>', '<rootDir>/../../packages/web-shared'],

apps/web/tsconfig.json

@@ -9,7 +9,7 @@
     "skipLibCheck": true,
     "forceConsistentCasingInFileNames": true,
     "paths": {
-      "@/*": ["./src/*", "../../packages/web-shared/src/*"],
+      "@/*": ["./src/*"],
       "@kilocode/web-shared/*": ["../../packages/web-shared/src/*"],
       "@kilocode/db": ["../../packages/db/src/index.ts"],
       "@kilocode/db/*": ["../../packages/db/src/*"],

apps/web/tsconfig.scripts.json

@@ -3,7 +3,7 @@
   "compilerOptions": {
     "baseUrl": ".",
     "paths": {
-      "@/*": ["./src/*", "../../packages/web-shared/src/*"],
+      "@/*": ["./src/*"],
       "@kilocode/web-shared/*": ["../../packages/web-shared/src/*"],
       "@kilocode/db": ["../../packages/db/src/index.ts"],
       "@kilocode/db/*": ["../../packages/db/src/*"],

packages/trpc/rollup.config.mjs

@@ -34,12 +34,9 @@ const plugins = [
   {
     name: 'resolve-aliases',
     resolveId(source) {
-      // Resolve @/* path aliases to the tsc output, mirroring the tsconfig
-      // fallback from apps/web/src to packages/web-shared/src.
+      // Resolve the tsconfig path aliases to the tsc output.
       if (source.startsWith('@/')) {
-        const webDts = resolveDts(path.resolve(tscOut, 'apps/web/src', source.slice(2)));
-        if (existsSync(webDts)) return webDts;
-        return resolveDts(path.resolve(tscOut, 'packages/web-shared/src', source.slice(2)));
+        return resolveDts(path.resolve(tscOut, 'apps/web/src', source.slice(2)));
       }
       if (source.startsWith('@kilocode/web-shared/')) {
         const subpath = source.slice('@kilocode/web-shared/'.length);

packages/trpc/tsconfig.json

@@ -16,7 +16,7 @@
     "jsx": "react-jsx",
     "resolveJsonModule": true,
     "paths": {
-      "@/*": ["../../apps/web/src/*", "../web-shared/src/*"],
+      "@/*": ["../../apps/web/src/*"],
       "@kilocode/web-shared/*": ["../web-shared/src/*"],
       "@kilocode/db": ["../db/src/index.ts"],
       "@kilocode/db/*": ["../db/src/*"],

packages/web-shared/AGENTS.md

@@ -1,19 +1,19 @@
 # web-shared
 
-Server code shared by `apps/web` and `apps/ai-gateway`. The code was moved out of
-`apps/web/src` without changing its `@/` import specifiers.
+Server code shared by `apps/web` and `apps/ai-gateway`, moved out of `apps/web/src`.
 
 ## Module resolution
 
-- Consumers map `@/*` to their own `src/*` first and to `packages/web-shared/src/*`
-  second. Keep both entries in sync in every tsconfig, the web Jest config, the
-  `@kilocode/trpc` rollup resolver, and the Storybook webpack alias.
-- A path must exist in only one of `apps/web/src` and `packages/web-shared/src`.
-  A duplicate silently shadows the web-shared file inside `apps/web`.
+- Import this package as `@kilocode/web-shared/<path under src>`, both from
+  consumers and from inside this package. `@/` always means the importing app's
+  own `src` and never resolves here.
+- `@kilocode/web-shared/*` maps to `packages/web-shared/src/*` in every consumer
+  tsconfig, the web Jest config, the `@kilocode/trpc` rollup resolver, and the
+  Storybook webpack alias. Keep those entries in sync.
 - Code here, including tests and `src/tests/helpers`, must only import from this
-  package; `@/*` resolves to this package only. `pnpm --filter
-  @kilocode/web-shared typecheck` enforces that with `tsconfig.lib.json` for
-  runtime code (tests and helpers excluded) and `tsconfig.json` for everything.
+  package. `pnpm --filter @kilocode/web-shared typecheck` enforces that with
+  `tsconfig.lib.json` for runtime code (tests and helpers excluded) and
+  `tsconfig.json` for everything; neither maps `@/`.
 - Tests run under the `apps/web` Jest config. A test that needs `apps/web` code
   belongs in `apps/web/src`, which can import from both.
 - Declare every npm import in `package.json` with the same version as

packages/web-shared/src/lib/config.server.ts

@@ -234,7 +234,7 @@ export const SLACK_ENCRYPTION_KEY = getEnvVariable('SLACK_ENCRYPTION_KEY');
  *
  * Unlike the GitLab/Bitbucket platform-credential keys, web holds the private half
  * because the Slack webhook path decrypts in-process. See
- * `@/lib/integrations/platforms/slack/credential-keyset`.
+ * `apps/web/src/lib/integrations/platforms/slack/credential-keyset.ts`.
  */
 export const SLACK_CREDENTIAL_KEYSET_JSON = getEnvVariable('SLACK_CREDENTIAL_KEYSET_JSON');
 // Posts notifications from server-side Admin UI code to a fixed Slack channel.