@01.works/visual-review 0.2.0 → 0.4.0

package/dist/next-config.js

@@ -1,23 +1,17 @@
-import { t as resolveVisualReviewBuildIdentity } from "./build-identity-CgoY3-jy.js";
-import { a as visualReviewSourceIndexFilename, c as writeNextVisualReviewSourceIndex, d as uploadNextSourceMaps, i as nextSourceIndexUrl, u as cleanupNextSourceMapOutput } from "./source-index-BdWeiNHZ.js";
+import { t as resolveVisualReviewBuildIdentity } from "./build-identity-DebYe8Qe.js";
 import { randomBytes } from "node:crypto";
-import { dirname, join, resolve } from "node:path";
-import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
+import { resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 //#region src/next-config.ts
 const BUILD_ID_LITERAL = "VISUAL_REVIEW_PUBLIC_BUILD_ID";
 const GIT_COMMIT_LITERAL = "VISUAL_REVIEW_PUBLIC_GIT_COMMIT";
 const BUILD_MODE_LITERAL = "VISUAL_REVIEW_PUBLIC_BUILD_MODE";
 const NEXT_BUILD_IDENTITY_RECORD = "VISUAL_REVIEW_INTERNAL_NEXT_BUILD_IDENTITY";
-const NEXT_MARKER_SALT_PATH = "VISUAL_REVIEW_INTERNAL_NEXT_MARKER_SALT_PATH";
 const FULL_GIT_COMMIT = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/u;
 const PUBLIC_BUILD_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
 const DEPLOYMENT_VARIANT = /^[0-9a-f]{32}$/u;
 const GIT_FALLBACK_BUILD_ID = /^(git:([0-9a-f]{40}|[0-9a-f]{64}):deploy:([0-9a-f]{32}))$/u;
 const MAX_NEXT_BUILD_IDENTITY_RECORD_BYTES = 512;
-const trackedMarkerSaltPaths = /* @__PURE__ */ new Set();
-const VISUAL_REVIEW_HOOK = Symbol.for("01works.visual-review.next-source-map-hook");
 const VISUAL_REVIEW_CONFIG = Symbol.for("01works.visual-review.next-config");
 /**
 * Next evaluates next.config again in compiler workers. A Git fallback contains
@@ -90,24 +84,21 @@ function parseNextBuildIdentityRecord(value) {
 }
 function withVisualReview(nextConfig = {}, options = {}) {
 	const identity = resolveNextVisualReviewBuildIdentity(options, process.env);
-	const sourceMapUpload = resolveSourceMapUpload(options.sourceMaps, process.env);
 	const sourceMetadataEnabled = options.sourceMetadata ?? true;
-	const sourceMarkerSalt = sourceMetadataEnabled ? resolveBuildLocalMarkerSalt(process.env) : void 0;
 	const injected = {
 		[BUILD_ID_LITERAL]: identity.buildId,
 		[GIT_COMMIT_LITERAL]: identity.gitCommit ?? "",
-		[BUILD_MODE_LITERAL]: sourceMapUpload?.mode ?? configuredReleaseMode(options.sourceMaps) ?? inferReleaseMode(process.env)
+		[BUILD_MODE_LITERAL]: inferReleaseMode(process.env)
 	};
 	if (typeof nextConfig === "function") return function visualReviewNextConfig(...arguments_) {
 		const resolved = nextConfig.apply(this, arguments_);
-		return isPromiseLike(resolved) ? resolved.then((config) => configureNext(config, injected, identity, sourceMapUpload, sourceMetadataEnabled, sourceMarkerSalt)) : configureNext(resolved, injected, identity, sourceMapUpload, sourceMetadataEnabled, sourceMarkerSalt);
+		return isPromiseLike(resolved) ? resolved.then((config) => configureNext(config, injected, sourceMetadataEnabled)) : configureNext(resolved, injected, sourceMetadataEnabled);
 	};
-	return configureNext(nextConfig, injected, identity, sourceMapUpload, sourceMetadataEnabled, sourceMarkerSalt);
+	return configureNext(nextConfig, injected, sourceMetadataEnabled);
 }
-function configureNext(nextConfig, injected, identity, sourceMapUpload, sourceMetadataEnabled, sourceMarkerSalt) {
-	const previousHookMetadata = getVisualReviewHookMetadata(nextConfig.compiler?.runAfterProductionCompile);
-	const previouslyWrapped = isVisualReviewConfig(nextConfig) || previousHookMetadata !== void 0;
-	assertReservedLiterals(nextConfig.env, injected, previouslyWrapped);
+function configureNext(nextConfig, injected, sourceMetadataEnabled) {
+	const previousBundlerState = getVisualReviewBundlerState(nextConfig);
+	assertReservedLiterals(nextConfig.env, injected, previousBundlerState !== void 0);
 	let configured = {
 		...nextConfig,
 		env: {
@@ -115,84 +106,19 @@ function configureNext(nextConfig, injected, identity, sourceMapUpload, sourceMe
 			...injected
 		}
 	};
-	if (previousHookMetadata) configured = restoreSourceMapConfiguration(configured, previousHookMetadata);
-	if (!sourceMapUpload && !sourceMetadataEnabled) return markVisualReviewConfig(configured);
-	const hookMetadata = previousHookMetadata ?? captureHookMetadata(nextConfig);
-	if (sourceMapUpload && (nextConfig.productionBrowserSourceMaps === false || hookMetadata.productionBrowserSourceMaps.present && hookMetadata.productionBrowserSourceMaps.value === false)) throw new Error("Next productionBrowserSourceMaps=false conflicts with Visual Review source-map upload");
-	if (sourceMapUpload && (nextConfig.experimental?.serverSourceMaps === false || hookMetadata.serverSourceMaps.present && hookMetadata.serverSourceMaps.value === false)) throw new Error("Next experimental.serverSourceMaps=false conflicts with Visual Review source-map upload");
-	const sourceMetadata = sourceMetadataEnabled ? resolveNextSourceMetadata(identity, nextConfig.basePath, sourceMarkerSalt) : void 0;
-	const sourceConfigured = sourceMetadata ? configureNextSourceMetadata(configured, hookMetadata, sourceMetadata) : configured;
-	const compiler = sourceConfigured.compiler ?? {};
-	return markVisualReviewConfig({
-		...sourceConfigured,
-		...sourceMapUpload ? { productionBrowserSourceMaps: true } : {},
-		...sourceMapUpload ? { experimental: {
-			...sourceConfigured.experimental,
-			serverSourceMaps: true
-		} } : {},
-		compiler: {
-			...compiler,
-			runAfterProductionCompile: composeProductionCompileHook(hookMetadata.originalHook, identity, sourceMapUpload, sourceMetadata, nextConfig.basePath, nextConfig.assetPrefix, hookMetadata)
-		}
-	});
-}
-function composeProductionCompileHook(existingHook, identity, sourceMapUpload, sourceMetadata, basePath, assetPrefix, metadata) {
-	const hook = async function visualReviewAfterProductionCompile(metadata) {
-		if (sourceMetadata) removeBuildLocalMarkerSalt(sourceMetadata.saltPath);
-		if (existingHook) try {
-			await existingHook.call(this, metadata);
-		} catch (existingError) {
-			if (!sourceMapUpload) throw existingError;
-			try {
-				await cleanupNextSourceMapOutput(metadata.projectDir, metadata.distDir);
-			} catch (cleanupError) {
-				throw new AggregateError([existingError, cleanupError], "Next.js production compile hook failed and Visual Review could not clean source maps");
-			}
-			throw existingError;
-		}
-		if (sourceMetadata) try {
-			await writeNextVisualReviewSourceIndex({
-				projectDir: metadata.projectDir,
-				distDir: metadata.distDir,
-				filename: sourceMetadata.filename,
-				...basePath ? { basePath } : {},
-				...assetPrefix ? { assetPrefix } : {}
-			});
-		} catch (sourceIndexError) {
-			if (!sourceMapUpload) throw sourceIndexError;
-			try {
-				await cleanupNextSourceMapOutput(metadata.projectDir, metadata.distDir);
-			} catch (cleanupError) {
-				throw new AggregateError([sourceIndexError, cleanupError], "Visual Review source index failed and Next.js source maps could not be cleaned");
-			}
-			throw sourceIndexError;
-		}
-		if (!sourceMapUpload) return;
-		await uploadNextSourceMaps({
-			projectRoot: metadata.projectDir,
-			distDir: metadata.distDir,
-			token: sourceMapUpload.token,
-			...sourceMapUpload.serviceUrl ? { serviceUrl: sourceMapUpload.serviceUrl } : {},
-			buildId: identity.buildId,
-			gitCommit: identity.gitCommit,
-			mode: sourceMapUpload.mode,
-			...basePath ? { basePath } : {},
-			...assetPrefix ? { assetPrefix } : {}
-		});
-	};
-	Object.defineProperty(hook, VISUAL_REVIEW_HOOK, { value: metadata });
-	return hook;
+	if (previousBundlerState) {
+		restoreProperty(configured, "turbopack", previousBundlerState.turbopack);
+		restoreProperty(configured, "webpack", previousBundlerState.webpack);
+	}
+	const bundlerState = previousBundlerState ?? captureBundlerState(nextConfig);
+	if (!sourceMetadataEnabled) return markVisualReviewConfig(configured, bundlerState);
+	return markVisualReviewConfig(configureNextSourceMetadata(configured, resolveNextSourceMetadata()), bundlerState);
 }
-function getVisualReviewHookMetadata(hook) {
-	return hook?.[VISUAL_REVIEW_HOOK];
+function getVisualReviewBundlerState(config) {
+	return config[VISUAL_REVIEW_CONFIG];
 }
-function captureHookMetadata(nextConfig) {
+function captureBundlerState(nextConfig) {
 	return {
-		originalHook: nextConfig.compiler?.runAfterProductionCompile,
-		compilerPresent: Object.prototype.hasOwnProperty.call(nextConfig, "compiler"),
-		experimentalPresent: Object.prototype.hasOwnProperty.call(nextConfig, "experimental"),
-		productionBrowserSourceMaps: propertyState(nextConfig, "productionBrowserSourceMaps"),
-		serverSourceMaps: propertyState(nextConfig.experimental, "serverSourceMaps"),
 		turbopack: propertyState(nextConfig, "turbopack"),
 		webpack: propertyState(nextConfig, "webpack")
 	};
@@ -203,97 +129,17 @@ function propertyState(value, key) {
 		value: value?.[key]
 	};
 }
-function restoreSourceMapConfiguration(configured, metadata) {
-	if (!metadata) return configured;
-	const restored = { ...configured };
-	if (metadata.productionBrowserSourceMaps.present) restored.productionBrowserSourceMaps = metadata.productionBrowserSourceMaps.value;
-	else delete restored.productionBrowserSourceMaps;
-	const experimental = { ...restored.experimental ?? {} };
-	if (metadata.serverSourceMaps.present) experimental.serverSourceMaps = metadata.serverSourceMaps.value;
-	else delete experimental.serverSourceMaps;
-	if (!metadata.experimentalPresent && Object.keys(experimental).length === 0) delete restored.experimental;
-	else restored.experimental = experimental;
-	const compiler = { ...restored.compiler ?? {} };
-	if (metadata.originalHook) compiler.runAfterProductionCompile = metadata.originalHook;
-	else delete compiler.runAfterProductionCompile;
-	if (!metadata.compilerPresent && Object.keys(compiler).length === 0) delete restored.compiler;
-	else restored.compiler = compiler;
-	restoreProperty(restored, "turbopack", metadata.turbopack);
-	restoreProperty(restored, "webpack", metadata.webpack);
-	return restored;
-}
 function restoreProperty(target, key, state) {
 	if (state.present) target[key] = state.value;
 	else delete target[key];
 }
-function resolveNextSourceMetadata(identity, basePath, markerSalt) {
-	if (!markerSalt) throw new Error("Visual Review source marker salt is unavailable");
-	const filename = visualReviewSourceIndexFilename(identity.buildId, markerSalt.salt);
+function resolveNextSourceMetadata() {
 	const loaderUrl = new URL("./source-loader.js", import.meta.url);
-	return {
-		filename,
-		indexUrl: nextSourceIndexUrl(basePath, filename),
-		loader: loaderUrl.protocol === "file:" ? fileURLToPath(loaderUrl) : resolve(process.cwd(), "packages/review-client/dist/source-loader.js"),
-		saltPath: markerSalt.path
-	};
+	return { loader: loaderUrl.protocol === "file:" ? fileURLToPath(loaderUrl) : resolve(process.cwd(), "packages/review-client/dist/source-loader.js") };
 }
-/**
-* Generates the marker salt and persists it outside the project so compiler
-* workers can read it without the secret entering any build output. The file is
-* owner-only and is removed once the production compile hook has run.
-*/
-function resolveBuildLocalMarkerSalt(env) {
-	const inherited = env[NEXT_MARKER_SALT_PATH];
-	if (env.NEXT_PRIVATE_BUILD_WORKER === "1" && env.IS_NEXT_WORKER === "true" && typeof inherited === "string" && inherited.length > 0) return {
-		salt: readMarkerSaltFile(inherited),
-		path: inherited
-	};
-	const salt = randomBytes(32).toString("hex");
-	const path = join(mkdtempSync(join(tmpdir(), "visual-review-marker-salt-")), "salt");
-	writeFileSync(path, salt, {
-		encoding: "utf8",
-		mode: 384
-	});
-	env[NEXT_MARKER_SALT_PATH] = path;
-	trackBuildLocalMarkerSalt(path);
-	return {
-		salt,
-		path
-	};
-}
-function readMarkerSaltFile(saltPath) {
-	const salt = readFileSync(saltPath, "utf8").trim();
-	if (!/^[0-9a-f]{64}$/u.test(salt)) throw new Error("Visual Review inherited marker salt is invalid");
-	return salt;
-}
-/**
-* `next dev` never reaches the production compile hook, and every compiler
-* worker evaluates the config in its own process, so exit is the only point
-* that reliably removes each salt file it created.
-*/
-function trackBuildLocalMarkerSalt(saltPath) {
-	if (trackedMarkerSaltPaths.size === 0) process.once("exit", () => {
-		for (const tracked of trackedMarkerSaltPaths) removeMarkerSaltDirectory(tracked);
-	});
-	trackedMarkerSaltPaths.add(saltPath);
-}
-function removeBuildLocalMarkerSalt(saltPath) {
-	trackedMarkerSaltPaths.delete(saltPath);
-	removeMarkerSaltDirectory(saltPath);
-}
-function removeMarkerSaltDirectory(saltPath) {
-	try {
-		rmSync(dirname(saltPath), {
-			recursive: true,
-			force: true
-		});
-	} catch {}
-}
-function configureNextSourceMetadata(configured, metadata, sourceMetadata) {
+function configureNextSourceMetadata(configured, sourceMetadata) {
 	const bundler = resolveNextBundler();
 	const next = { ...configured };
-	restoreProperty(next, "turbopack", metadata.turbopack);
-	restoreProperty(next, "webpack", metadata.webpack);
 	if (bundler === "turbopack") next.turbopack = appendTurbopackRules(next.turbopack, sourceMetadata);
 	else next.webpack = appendWebpackRule(next.webpack, sourceMetadata);
 	return next;
@@ -318,10 +164,7 @@ function appendWebpackRule(existing, sourceMetadata) {
 					test: /\.[cm]?[jt]sx?$/u,
 					use: [{
 						loader: sourceMetadata.loader,
-						options: {
-							indexUrl: sourceMetadata.indexUrl,
-							saltPath: sourceMetadata.saltPath
-						}
+						options: {}
 					}]
 				}]
 			}
@@ -341,11 +184,7 @@ function appendTurbopackRules(existing, sourceMetadata) {
 			condition: { all: [{ not: "foreign" }, "production"] },
 			loaders: [{
 				loader: sourceMetadata.loader,
-				options: {
-					compile: true,
-					indexUrl: sourceMetadata.indexUrl,
-					saltPath: sourceMetadata.saltPath
-				}
+				options: { compile: true }
 			}]
 		};
 		const current = rules[pattern];
@@ -362,28 +201,10 @@ function isPromiseLikeUnknown(value) {
 function isRecord(value) {
 	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
-function isVisualReviewConfig(config) {
-	return Boolean(config[VISUAL_REVIEW_CONFIG]);
-}
-function markVisualReviewConfig(config) {
-	Object.defineProperty(config, VISUAL_REVIEW_CONFIG, { value: true });
+function markVisualReviewConfig(config, bundlerState) {
+	Object.defineProperty(config, VISUAL_REVIEW_CONFIG, { value: bundlerState });
 	return config;
 }
-function resolveSourceMapUpload(option, env) {
-	if (option === false || typeof option === "object" && option.enabled === false) return;
-	const configured = typeof option === "object" ? option : void 0;
-	const token = configured?.token ?? env.VISUAL_REVIEW_SOURCE_MAP_TOKEN;
-	if (!(option === true || configured !== void 0 || token !== void 0)) return void 0;
-	if (typeof token !== "string" || token.length === 0 || token.length > 4096 || /\s/u.test(token)) throw new Error("Visual Review source-map upload requires VISUAL_REVIEW_SOURCE_MAP_TOKEN in the Node build environment");
-	return {
-		token,
-		mode: configured?.mode ?? inferReleaseMode(env),
-		...configured?.serviceUrl ? { serviceUrl: configured.serviceUrl } : {}
-	};
-}
-function configuredReleaseMode(option) {
-	return typeof option === "object" ? option.mode : void 0;
-}
 function inferReleaseMode(env) {
 	if (env.VERCEL_ENV === "preview") return "preview";
 	if (env.VERCEL_ENV === "development") return "development";

package/dist/react.js

@@ -1 +1 @@
-import{t as e}from"./install-CyJ52cJi.js";import{useEffect as t,useRef as n}from"react";function r({activationParam:r,build:i,collaboration:a,developerTools:o,enabled:s,onError:c,onReady:l,runtime:u,serviceUrl:d,sourceContextResolver:f,styleNonce:p}){let m=n(c),h=n(l),g=i?.buildId,_=i?.gitCommit,v=i?.generatedAt,y=i?.mode,b=o?.reactGrab===!0,x=a?.cursors===!0,S=a?.chat===!0;return m.current=c,h.current=l,t(()=>{if(s!==!0)return;let t=e({activationParam:r,build:g===void 0&&_===void 0&&v===void 0&&y===void 0?void 0:{buildId:g,gitCommit:_,generatedAt:v,mode:y},collaboration:x||S?{cursors:x,chat:S}:void 0,developerTools:b?{reactGrab:!0}:void 0,enabled:s,onError:e=>m.current?.(e),onReady:e=>h.current?.(e),runtime:u,serviceUrl:d,sourceContextResolver:f,styleNonce:p});return()=>t.dispose()},[r,g,y,S,x,b,s,v,_,u,d,f,p]),null}r.displayName=`VisualReview`;export{r as VisualReview};
+import{t as e}from"./install-x8QQBGO-.js";import{useEffect as t,useRef as n}from"react";function r({activationParam:r,build:i,collaboration:a,developerTools:o,enabled:s,onError:c,onReady:l,runtime:u,serviceUrl:d,sourceContextResolver:f,styleNonce:p}){let m=n(c),h=n(l),g=i?.buildId,_=i?.gitCommit,v=i?.generatedAt,y=i?.mode,b=o?.reactGrab===!0,x=a?.cursors===!0,S=a?.chat===!0;return m.current=c,h.current=l,t(()=>{if(s!==!0)return;let t=e({activationParam:r,build:g===void 0&&_===void 0&&v===void 0&&y===void 0?void 0:{buildId:g,gitCommit:_,generatedAt:v,mode:y},collaboration:x||S?{cursors:x,chat:S}:void 0,developerTools:b?{reactGrab:!0}:void 0,enabled:s,onError:e=>m.current?.(e),onReady:e=>h.current?.(e),runtime:u,serviceUrl:d,sourceContextResolver:f,styleNonce:p});return()=>t.dispose()},[r,g,y,S,x,b,s,v,_,u,d,f,p]),null}r.displayName=`VisualReview`;export{r as VisualReview};

package/dist/{source-instrumentation-transform-BwKYKlp0.js → source-instrumentation-transform-qmiVeKpI.js}

@@ -1,12 +1,10 @@
-import { n as VISUAL_REVIEW_SOURCE_INDEX_ATTRIBUTE, o as visualReviewSourceMarker, r as VISUAL_REVIEW_SOURCE_MARKER_ATTRIBUTE, t as VISUAL_REVIEW_SOURCE_COORDINATE_ATTRIBUTE } from "./source-index-BdWeiNHZ.js";
-import { createHmac } from "node:crypto";
 import path, { win32 } from "node:path";
 import { parse } from "@babel/parser";
 import MagicString from "magic-string";
 //#region src/source-instrumentation-transform.ts
+const VISUAL_REVIEW_EMBEDDED_SOURCE_ATTRIBUTE = "data-review-source";
 const SOURCE_MODULE = /\.(?:[cm]?[jt]sx?)$/iu;
 const SKIPPED_PATH_SEGMENT = /(?:^|\/)(?:node_modules|\.next|dist|build)(?:\/|$)/u;
-const MARKER_SALT = /^[0-9a-f]{64}$/u;
 /**
 * Adds opaque, build-local markers to intrinsic JSX nodes. Repository paths
 * are used only to derive a digest and never enter the transformed browser
@@ -14,7 +12,6 @@ const MARKER_SALT = /^[0-9a-f]{64}$/u;
 * framework adapter after bundling.
 */
 function instrumentVisualReviewSource(source, options) {
-	assertMarkerSalt(options.markerSalt);
 	const sourcePath = normalizedProjectSourcePath(options.projectRoot, options.id);
 	if (!sourcePath) return null;
 	const ast = parse(source, {
@@ -42,14 +39,8 @@ function instrumentVisualReviewSource(source, options) {
 	for (const candidate of candidates) {
 		const line1 = candidate.line1;
 		const column1 = candidate.column0 + 1;
-		const digest = createHmac("sha256", Buffer.from(options.markerSalt, "hex")).update(`${sourcePath}\0${line1}\0${column1}`).digest("hex").slice(0, 32);
-		const marker = visualReviewSourceMarker(digest);
-		const coordinate = `vrc1_${digest}`;
 		const closingWidth = candidate.selfClosing ? 2 : 1;
-		const insertionPoint = candidate.end - closingWidth;
-		const metadata = ` ${VISUAL_REVIEW_SOURCE_MARKER_ATTRIBUTE}="${marker}" ${VISUAL_REVIEW_SOURCE_INDEX_ATTRIBUTE}="${options.indexUrl}"`;
-		edits.overwrite(candidate.start, candidate.nameEnd, `${source.slice(candidate.start, candidate.nameEnd)} ${VISUAL_REVIEW_SOURCE_COORDINATE_ATTRIBUTE}="${coordinate}"`);
-		edits.appendLeft(insertionPoint, metadata);
+		edits.appendLeft(candidate.end - closingWidth, ` ${VISUAL_REVIEW_EMBEDDED_SOURCE_ATTRIBUTE}="${escapeAttribute(`${sourcePath}:${line1}:${column1}`)}"`);
 		markerCount += 1;
 	}
 	if (markerCount === 0) return null;
@@ -63,8 +54,12 @@ function instrumentVisualReviewSource(source, options) {
 		markerCount
 	};
 }
-function assertMarkerSalt(value) {
-	if (!MARKER_SALT.test(value)) throw new Error("Visual Review source marker salt must be a lowercase 32-byte hex secret");
+/**
+* Source paths are project-relative and already validated, but an attribute
+* value still has to survive being written into HTML.
+*/
+function escapeAttribute(value) {
+	return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;");
 }
 /**
 * Reports whether a module is first-party project source. Bundler rules already
@@ -101,7 +96,7 @@ function intrinsicJsxNameEnd(name) {
 	return typeof candidate.end === "number" ? candidate.end : null;
 }
 function hasVisualReviewMarker(attributes) {
-	return attributes?.some((attribute) => attribute.type === "JSXAttribute" && typeof attribute.name !== "string" && attribute.name?.type === "JSXIdentifier" && (attribute.name.name === "data-visual-review-source" || attribute.name.name === "data-visual-review-source-coordinate" || attribute.name.name === "data-visual-review-source-index" || attribute.name.name === "data-review-source")) ?? false;
+	return attributes?.some((attribute) => attribute.type === "JSXAttribute" && typeof attribute.name !== "string" && attribute.name?.type === "JSXIdentifier" && attribute.name.name === "data-review-source") ?? false;
 }
 function visitAst(node, visitor) {
 	visitor(node);

package/dist/source-loader.js

@@ -1,29 +1,8 @@
-import { n as isVisualReviewProjectSource, t as instrumentVisualReviewSource } from "./source-instrumentation-transform-BwKYKlp0.js";
-import { readFileSync } from "node:fs";
+import { n as isVisualReviewProjectSource, t as instrumentVisualReviewSource } from "./source-instrumentation-transform-qmiVeKpI.js";
 import { transformSync } from "@babel/core";
 import transformReactJsx from "@babel/plugin-transform-react-jsx";
 import transformTypeScript from "@babel/plugin-transform-typescript";
 //#region src/source-loader.ts
-const MARKER_SALT = /^[0-9a-f]{64}$/u;
-const saltCache = /* @__PURE__ */ new Map();
-/**
-* Reads a build-local marker salt. Next serializes loader options into
-* `required-server-files.json` and into Turbopack edge chunks, so the adapter
-* publishes only this path and keeps the secret in an owner-only file.
-*/
-function readMarkerSaltFile(saltPath) {
-	const cached = saltCache.get(saltPath);
-	if (cached !== void 0) return cached;
-	let contents;
-	try {
-		contents = readFileSync(saltPath, "utf8").trim();
-	} catch {
-		throw new Error("Visual Review source loader could not read the marker salt");
-	}
-	if (!MARKER_SALT.test(contents)) throw new Error("Visual Review source loader marker salt is invalid");
-	saltCache.set(saltPath, contents);
-	return contents;
-}
 function visualReviewSourceLoader(source, inputMap) {
 	const done = this.async();
 	try {
@@ -35,8 +14,6 @@ function visualReviewSourceLoader(source, inputMap) {
 		}
 		const transformed = instrumentVisualReviewSource(source, {
 			id: this.resourcePath,
-			indexUrl: options.indexUrl,
-			markerSalt: options.markerSalt,
 			projectRoot
 		});
 		const code = transformed?.code ?? source;
@@ -112,14 +89,9 @@ function isRecord(value) {
 function parseOptions(value) {
 	if (!value || typeof value !== "object") throw new Error("Visual Review source loader options are missing");
 	const options = value;
-	if (typeof options.indexUrl !== "string" || !options.indexUrl.startsWith("/") || options.indexUrl.startsWith("//") || options.indexUrl.includes("\\")) throw new Error("Visual Review source loader index URL is invalid");
 	if (options.projectRoot !== void 0 && typeof options.projectRoot !== "string") throw new Error("Visual Review source loader project root is invalid");
-	const markerSalt = typeof options.saltPath === "string" ? readMarkerSaltFile(options.saltPath) : options.markerSalt;
-	if (typeof markerSalt !== "string" || !MARKER_SALT.test(markerSalt)) throw new Error("Visual Review source loader marker salt is invalid");
 	return {
 		...options.compile === true ? { compile: true } : {},
-		indexUrl: options.indexUrl,
-		markerSalt,
 		...typeof options.projectRoot === "string" ? { projectRoot: options.projectRoot } : {}
 	};
 }

package/dist/vite.d.ts

@@ -7,23 +7,15 @@ export interface VisualReviewBuildIdentityOptions {
   gitCommit?: string | null;
 }
 
-export interface VisualReviewViteSourceMapOptions {
-  /** Enables upload explicitly. A source-map upload token is still required. */
-  enabled?: boolean;
-  /** Node-only build secret. Prefer VISUAL_REVIEW_SOURCE_MAP_TOKEN in CI. */
-  token?: string;
-  /** Hosted service origin. Primarily useful for local/self-hosted build services. */
-  serviceUrl?: string;
-}
-
 export interface VisualReviewViteOptions extends VisualReviewBuildIdentityOptions {
-  /** Uploads private hidden source maps and removes them from the deployment output. */
-  sourceMaps?: boolean | VisualReviewViteSourceMapOptions;
-  /** Adds opaque production JSX markers by default. Set `false` for identity-only output. */
+  /**
+   * Writes `data-review-source="src/App.tsx:42:7"` onto JSX elements by
+   * default. Set `false` for identity-only output.
+   */
   sourceMetadata?: boolean;
 }
 
-/** Injects public build provenance and optionally uploads private hidden source maps. */
+/** Injects public build provenance and the source path of every JSX element. */
 export declare function visualReview(
   options?: VisualReviewViteOptions,
 ): Plugin;

package/dist/vite.js

@@ -1,122 +1,47 @@
-import { t as resolveVisualReviewBuildIdentity } from "./build-identity-CgoY3-jy.js";
-import { a as visualReviewSourceIndexFilename, f as cleanupViteSourceMapOutput, l as writeViteVisualReviewSourceIndex, p as uploadViteSourceMaps, s as viteSourceIndexUrl } from "./source-index-BdWeiNHZ.js";
-import { t as instrumentVisualReviewSource } from "./source-instrumentation-transform-BwKYKlp0.js";
-import { randomBytes } from "node:crypto";
-import { resolve } from "node:path";
+import { t as resolveVisualReviewBuildIdentity } from "./build-identity-DebYe8Qe.js";
+import { t as instrumentVisualReviewSource } from "./source-instrumentation-transform-qmiVeKpI.js";
 //#region src/vite.ts
 const BUILD_ID_LITERAL = "process.env.VISUAL_REVIEW_PUBLIC_BUILD_ID";
 const GIT_COMMIT_LITERAL = "process.env.VISUAL_REVIEW_PUBLIC_GIT_COMMIT";
 const BUILD_MODE_LITERAL = "process.env.VISUAL_REVIEW_PUBLIC_BUILD_MODE";
-/** Injects public build provenance and optionally uploads private hidden source maps. */
+/** Injects public build provenance and the source path of every JSX element. */
 function visualReview(options = {}) {
 	let identity;
 	let resolvedConfig;
-	let sourceMapUpload;
 	let sourceMetadataEnabled = false;
-	let sourceIndexFilename;
-	let sourceIndexUrl;
-	let sourceMarkerSalt;
 	let releaseMode;
 	return {
 		name: "01works:visual-review-build-identity",
 		enforce: "pre",
 		config(config, environment) {
 			identity = resolveVisualReviewBuildIdentity(options, {
-				cwd: resolve(process.cwd(), config.root ?? "."),
+				cwd: config.root ?? ".",
 				env: process.env
 			});
 			releaseMode = typeof environment?.mode === "string" && environment.mode.length > 0 ? normalizeReleaseMode(environment.mode) : void 0;
 			const define = publicLiteralDefinitions(identity, releaseMode);
 			assertReservedLiterals(config.define, define, "Vite define");
-			if (environment?.command === "serve") {
-				sourceMapUpload = void 0;
-				sourceMetadataEnabled = false;
-				sourceMarkerSalt = void 0;
-				return { define };
-			}
-			sourceMapUpload = resolveSourceMapUpload(options.sourceMaps, process.env);
 			sourceMetadataEnabled = options.sourceMetadata ?? true;
-			sourceMarkerSalt = sourceMetadataEnabled ? randomBytes(32).toString("hex") : void 0;
-			if (!sourceMapUpload) return { define };
-			if (config.build?.sourcemap === "inline") throw new Error("Visual Review source-map upload refuses inline Vite source maps");
-			return {
-				define,
-				build: { sourcemap: "hidden" }
-			};
+			return { define };
 		},
 		configResolved(config) {
 			resolvedConfig = config;
 			if (releaseMode !== void 0 && normalizeReleaseMode(config.mode) !== releaseMode) throw new Error("Visual Review build mode changed after the public literals were injected");
-			if (sourceMetadataEnabled) {
-				if (!identity || !sourceMarkerSalt) throw new Error("Visual Review source metadata identity is unavailable");
-				sourceIndexFilename = visualReviewSourceIndexFilename(identity.buildId, sourceMarkerSalt);
-				sourceIndexUrl = viteSourceIndexUrl(config.base, sourceIndexFilename);
-			}
-			if (!sourceMapUpload) return;
-			if (config.build.sourcemap !== "hidden") throw new Error("Visual Review source-map upload requires build.sourcemap=\"hidden\"");
-			if (config.build.ssr) throw new Error("Visual Review Vite source-map upload currently supports browser builds only");
 		},
 		transform(source, id) {
 			if (!sourceMetadataEnabled) return null;
-			if (!resolvedConfig || !sourceIndexUrl || !sourceMarkerSalt) throw new Error("Visual Review source metadata was not initialized by Vite");
+			if (!resolvedConfig) throw new Error("Visual Review source metadata was not initialized by Vite");
 			const transformed = instrumentVisualReviewSource(source, {
 				id,
-				indexUrl: sourceIndexUrl,
-				markerSalt: sourceMarkerSalt,
 				projectRoot: resolvedConfig.root
 			});
 			return transformed ? {
 				code: transformed.code,
 				map: transformed.map
 			} : null;
-		},
-		async closeBundle() {
-			if (!identity || !resolvedConfig) throw new Error("Visual Review build adapter was not initialized by Vite");
-			const outDir = resolve(resolvedConfig.root, resolvedConfig.build.outDir);
-			if (sourceMetadataEnabled) {
-				if (!sourceIndexFilename) throw new Error("Visual Review source metadata was not initialized by Vite");
-				try {
-					await writeViteVisualReviewSourceIndex({
-						projectRoot: resolvedConfig.root,
-						outDir,
-						base: resolvedConfig.base,
-						filename: sourceIndexFilename
-					});
-				} catch (sourceIndexError) {
-					if (!sourceMapUpload) throw sourceIndexError;
-					try {
-						await cleanupViteSourceMapOutput(resolvedConfig.root, outDir);
-					} catch (cleanupError) {
-						throw new AggregateError([sourceIndexError, cleanupError], "Visual Review source index failed and Vite source maps could not be cleaned");
-					}
-					throw sourceIndexError;
-				}
-			}
-			if (!sourceMapUpload) return;
-			await uploadViteSourceMaps({
-				projectRoot: resolvedConfig.root,
-				outDir,
-				base: resolvedConfig.base,
-				token: sourceMapUpload.token,
-				...sourceMapUpload.serviceUrl ? { serviceUrl: sourceMapUpload.serviceUrl } : {},
-				buildId: identity.buildId,
-				gitCommit: identity.gitCommit,
-				mode: normalizeReleaseMode(resolvedConfig.mode)
-			});
 		}
 	};
 }
-function resolveSourceMapUpload(option, env) {
-	if (option === false || typeof option === "object" && option.enabled === false) return;
-	const configured = typeof option === "object" ? option : void 0;
-	const token = configured?.token ?? env.VISUAL_REVIEW_SOURCE_MAP_TOKEN;
-	if (!(option === true || configured !== void 0 || token !== void 0)) return void 0;
-	if (typeof token !== "string" || token.length === 0 || /\s/.test(token)) throw new Error("Visual Review source-map upload requires VISUAL_REVIEW_SOURCE_MAP_TOKEN in the Node build environment");
-	return {
-		token,
-		...configured?.serviceUrl ? { serviceUrl: configured.serviceUrl } : {}
-	};
-}
 function normalizeReleaseMode(mode) {
 	if (mode === "production") return "production";
 	if (mode === "development") return "development";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@01.works/visual-review",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Invitation-only visual feedback for staging websites, hosted by 01.works.",
   "repository": {
     "type": "git",

package/dist/generated-source-context-9dbnOHdW.js

@@ -1 +0,0 @@
-import{t as e}from"./generated-frame-CkUKpj5U.js";function t(e){let t=new Map,r=e.sourceIndexBaseUrl;return{unavailableProvenance:()=>f(e,`unavailable`),async resolve(i,a){let o=a?.signal;p(o);let s=i.closest(`[data-visual-review-source]`),c=s?await n(s,t,o,r):null;return p(o),{source:c,componentStack:c?[c]:[],provenance:f(e,c?`fallback`:`unavailable`)}}}}async function n(e,t,n,i){let o=e.getAttribute(`data-visual-review-source`),c=e.getAttribute(`data-visual-review-source-index`);if(!o||!/^vr1_[0-9a-f]{32}$/u.test(o)||!c)return null;let l=r(c,e.ownerDocument,i);if(!l||typeof globalThis.fetch!=`function`)return null;let d=t.get(l);if(!d){if(t.size>=v)return null;d=a(l),t.set(l,d)}let f;try{f=await m(d,n)}catch{return null}let p=s(f,o);return p?u(p):null}function r(e,t,n){if(e.length>2048||e.trim()!==e||e.includes(`\\`)||/[\u0000-\u001f\u007f\u202a-\u202e\u2066-\u2069]/u.test(e))return null;try{let r=new URL(e,n??t.baseURI);return r.origin!==t.location.origin||r.username||r.password||r.search||r.hash||!i(r.pathname)?null:r.href}catch{return null}}function i(e){return x.test(e)||S.test(e)}async function a(e){let t=await globalThis.fetch(e,{cache:`force-cache`,credentials:`same-origin`});if(!t.ok)throw Error(`Visual Review source index returned HTTP ${t.status}`);let n=t.headers.get(`content-length`),r=n===null?null:Number(n);if(r!==null&&(!Number.isSafeInteger(r)||r<0||r>_))throw Error(`Visual Review source index exceeds 8 MiB`);let i=await o(t);return JSON.parse(i)}async function o(e){let t=e.body?.getReader();if(!t)return``;let n=new TextDecoder(`utf-8`,{fatal:!0}),r=[],i=0;try{for(;;){let{done:e,value:a}=await t.read();if(e)break;if(i+=a.byteLength,i>_)throw await t.cancel(`Visual Review source index exceeds 8 MiB`),Error(`Visual Review source index exceeds 8 MiB`);r.push(n.decode(a,{stream:!0}))}return r.push(n.decode()),r.join(``)}finally{t.releaseLock()}}function s(t,n){if(!l(t)||t.schemaVersion!==1||!l(t.entries))return;let r=t.entries[n];if(!(!Array.isArray(r)||r.length===0||r.length>y))for(let t of r){if(!l(t)||!c(t.runtime))continue;let n=e(t.assetPath),r=d(t.line1,1,h),i=d(t.column0,0,g);if(!(!n||r===null||i===null))return{assetPath:n,line1:r,column0:i,runtime:t.runtime}}}function c(e){return e===`browser`||e===`server-node`||e===`server-edge`}function l(e){return!!e&&typeof e==`object`&&!Array.isArray(e)}function u(e){return{filePath:e.assetPath,lineNumber:e.line1,columnNumber:e.column0+1,componentName:null,origin:`generated`,generated:e}}function d(e,t,n){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=t&&e<=n?e:null}function f(e,t){return{provider:`embedded`,build:e.build,resolvedAt:e.now?.()??Date.now(),sourceMapStatus:t}}function p(e){if(e?.aborted)throw e.reason??Error(`Source context resolution aborted`)}function m(e,t){return t?t.aborted?Promise.reject(t.reason??Error(`Source context resolution aborted`)):new Promise((n,r)=>{let i=()=>r(t.reason??Error(`Source context resolution aborted`));t.addEventListener(`abort`,i,{once:!0}),e.then(e=>{t.removeEventListener(`abort`,i),n(e)},e=>{t.removeEventListener(`abort`,i),r(e)})}):e}const h=1e7,g=1e7,_=8*1024*1024,v=16,y=64,b=`visual-review-sources-[0-9a-f]{16}\\.json`,x=RegExp(`^/(?:[^/]+/)*\\.visual-review/${b}$`,`u`),S=RegExp(`^/(?:[^/]+/)*_next/static/${b}$`,`u`);export{t as createGeneratedSourceContextResolver};