fix(cli): transpile Nuxt style deps and stop pinning the Vite dev host

Add @zitadel/shared-component-styles and @zitadel/design-tokens to the Nuxt
build.transpile list, matching the repo's demo-nuxt config, so SSR builds don't
fail on their untranspiled ESM. Stop setting server.host in the Vite config
edit: it duplicated Vite's default and got in the way of opting into network
binding; the issuer/origin requirement is about the port, which is still set.

Author: mridang

apps/cli/src/lib/orca/patchers/rule/nuxt/nuxt-config.ts

@@ -52,10 +52,14 @@ export function nuxtConfigEdit(opts: {
       );
     }
 
-    // The Lit components must be transpiled for SSR.
+    // The Lit components and their style/token deps must be transpiled for SSR
+    // (matching the repo's own demo-nuxt config) or the build fails on the
+    // untranspiled ESM those transitive packages ship.
     const build = ensureEditableObject(config, "build");
     ensureArrayItem(build, "transpile", "@zitadel/api");
     ensureArrayItem(build, "transpile", "@zitadel/components");
+    ensureArrayItem(build, "transpile", "@zitadel/shared-component-styles");
+    ensureArrayItem(build, "transpile", "@zitadel/design-tokens");
 
     // Tell Vue's template compiler the `zitadel-*` Lit elements are custom
     // elements, not Vue components, so it renders them as native elements

apps/cli/src/lib/orca/patchers/rule/vite-support.ts

@@ -44,8 +44,10 @@ const PROXY_IMPORTS = [
 /**
  * Builds the pure `edit` transform the file-writer applies to the project's Vite
  * config (`vite.config.*`): a non-destructive magicast merge that adds the
- * `/__nextgen` proxy and sets `server.host`/`server.port`/`strictPort` when they
- * are unset, preserving the user's plugins, options, and formatting. Idempotent
+ * `/__nextgen` proxy and sets `server.port`/`strictPort` when they are unset,
+ * preserving the user's plugins, options, and formatting. Leaves `server.host`
+ * alone so the user can still opt into network binding (`--host`/`host: true`);
+ * the issuer/origin requirement is about the port, not the bind host. Idempotent
  * — entries already present are left as-is. Throws `E_VALIDATION` when the file
  * is absent or the config object cannot be reached (function-built/exotic
  * configs), with a hint to add the block manually.
@@ -59,9 +61,6 @@ export function viteProxyEdit(
     const mod = parseConfigModule(source, label);
     const config = resolveDefaultExportObject(mod, label);
     const serverConfig = ensureEditableObject(config, "server");
-    if (serverConfig.host === undefined) {
-      serverConfig.host = "localhost";
-    }
     if (serverConfig.port === undefined) {
       serverConfig.port = devPort;
     }

apps/cli/tests/unit/lib/orca/patchers/rule/nuxt/nuxt-config.test.ts

@@ -13,6 +13,8 @@ describe("nuxtConfigEdit", () => {
     expect(out).toContain("process.env.ZITADEL_URL");
     expect(out).toContain("process.env.NUXT_PUBLIC_ZITADEL_PROJECT_ID");
     expect(out).toContain("@zitadel/components");
+    expect(out).toContain("@zitadel/shared-component-styles");
+    expect(out).toContain("@zitadel/design-tokens");
     expect(out).toContain("isCustomElement");
     expect(out).toContain('tag.startsWith("zitadel-")');
   });

apps/cli/tests/unit/lib/orca/patchers/rule/vite-support.test.ts

@@ -33,6 +33,11 @@ describe("viteProxyEdit", () => {
     expect(out).not.toContain("5173");
   });
 
+  it("leaves server.host unset so the user can opt into network binding", () => {
+    const out = edit("export default defineConfig({});");
+    expect(out).not.toContain("host:");
+  });
+
   it("is idempotent — re-running over its own output changes nothing", () => {
     const once = edit("export default defineConfig({});");
     expect(edit(once)).toBe(once);