@ait-co/devtools 0.1.142 → 0.1.144

package/dist/optional-peers-CDEFhlhJ.cjs

@@ -0,0 +1,131 @@
+//#region src/unplugin/optional-peers.ts
+/**
+* Optional-peer resolution gates for the debug surface (issue #817).
+*
+* The debug surface now ships as two SEPARATE packages, declared here as
+* OPTIONAL peerDependencies of `@ait-co/devtools`:
+*
+*   - `@ait-co/debugger`      — MCP daemon / test runner / dev-bridge. devDependency
+*                               or `npx` only; never part of an app bundle.
+*   - `@ait-co/debug-console` — on-device attach + eruda console. The ONLY debug
+*                               package that can legitimately enter an app bundle.
+*
+* Neither may become a hard dependency. The overwhelming majority of consumers
+* use environment 1 only (browser + mock SDK + panel) and must install NOTHING
+* extra — that is the whole point of splitting the packages apart. So every
+* call site reaches them through the resolution gates below and degrades
+* gracefully when they are absent:
+*
+*   - env-2 CDP wiring (`tunnel.cdp`) → falls back to the plain screen-preview
+*     tunnel (no relay, no dashboard) and prints {@link INSTALL_HINT}.
+*   - in-app attach injection → the snippet is simply not injected, so the
+*     attach code is STRUCTURALLY ABSENT from the bundle rather than merely
+*     gated at runtime. This gate is the technical enforcement point of the
+*     debug surface's security scope: no `@ait-co/debug-console` installed
+*     means no attach code can reach a bundle at all.
+*
+* The `import.meta.resolve` probe follows the `MOCK_PATH` precedent in
+* `./index.ts`: resolution is attempted once at plugin-load time and a failure
+* is a plain "not installed" signal, never an error.
+*
+* SECRET-HANDLING: nothing here touches a relay URL, tunnel host, TOTP secret
+* or code. The only strings emitted are fixed specifiers and the install hint.
+*/
+/** Subpath of `@ait-co/debugger` that the unplugin's dev loop delegates to. */
+const DEBUGGER_DEV_BRIDGE_ID = "@ait-co/debugger/dev-bridge";
+/** The on-device attach package injected into a consumer entry point. */
+const DEBUG_CONSOLE_ID = "@ait-co/debug-console";
+/** One-line install hint printed whenever a gate closes on a missing package. */
+const INSTALL_HINT = "pnpm add -D @ait-co/debugger @ait-co/debug-console";
+/**
+* Returns whether `specifier` resolves from this package's location.
+*
+* `import.meta.resolve` throws (rather than returning a falsy value) for an
+* unresolvable specifier, and is itself absent on a few older runtimes — both
+* are treated as "not installed", which is the safe direction: the caller then
+* takes the degraded path instead of importing something that is not there.
+*/
+function canResolveOptionalPeer(specifier) {
+	try {
+		return typeof {}.resolve(specifier) === "string";
+	} catch {
+		return false;
+	}
+}
+/** Whether `@ait-co/debugger`'s dev-bridge is installed (env-2 CDP path). */
+function hasDebugger() {
+	return canResolveOptionalPeer(DEBUGGER_DEV_BRIDGE_ID);
+}
+/** Whether `@ait-co/debug-console` is installed (in-app attach injection). */
+function hasDebugConsole() {
+	return canResolveOptionalPeer(DEBUG_CONSOLE_ID);
+}
+/**
+* Whether `code` already wires the in-app debug attach itself.
+*
+* Both the current (`@ait-co/debug-console`) and the pre-split
+* (`@ait-co/devtools/in-app`) specifier count, so a consumer who wired either
+* one by hand never gets a duplicate auto-injection.
+*/
+function hasInAppWiring(code) {
+	return code.includes("@ait-co/debug-console") || code.includes("@ait-co/devtools/in-app");
+}
+/**
+* The gated dynamic-import snippet prepended to a consumer entry point.
+*
+* The runtime gate (`?debug=1` + a `relay` param) keeps the chunk unloaded on a
+* normal page load, and a production build dead-code-eliminates it. The
+* build-time gate is {@link hasDebugConsole} at the call site: when the package
+* is absent this snippet is never produced, so the attach code cannot be in the
+* bundle at all.
+*/
+function buildInAppSnippet() {
+	return [
+		"// @ait-co/devtools: in-app attach auto-injected by unplugin — 수동 배선 불필요",
+		"if (typeof window !== 'undefined') {",
+		"  const __ait_p = new URLSearchParams(window.location.search);",
+		"  if (__ait_p.get('debug') === '1' && __ait_p.get('relay')) {",
+		`    void import('${DEBUG_CONSOLE_ID}').then((m) => m.maybeAttach());`,
+		"  }",
+		"}"
+	].join("\n");
+}
+//#endregion
+Object.defineProperty(exports, "DEBUGGER_DEV_BRIDGE_ID", {
+	enumerable: true,
+	get: function() {
+		return DEBUGGER_DEV_BRIDGE_ID;
+	}
+});
+Object.defineProperty(exports, "INSTALL_HINT", {
+	enumerable: true,
+	get: function() {
+		return INSTALL_HINT;
+	}
+});
+Object.defineProperty(exports, "buildInAppSnippet", {
+	enumerable: true,
+	get: function() {
+		return buildInAppSnippet;
+	}
+});
+Object.defineProperty(exports, "hasDebugConsole", {
+	enumerable: true,
+	get: function() {
+		return hasDebugConsole;
+	}
+});
+Object.defineProperty(exports, "hasDebugger", {
+	enumerable: true,
+	get: function() {
+		return hasDebugger;
+	}
+});
+Object.defineProperty(exports, "hasInAppWiring", {
+	enumerable: true,
+	get: function() {
+		return hasInAppWiring;
+	}
+});
+
+//# sourceMappingURL=optional-peers-CDEFhlhJ.cjs.map

package/dist/optional-peers-CDEFhlhJ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"optional-peers-CDEFhlhJ.cjs","names":[],"sources":["../src/unplugin/optional-peers.ts"],"sourcesContent":["/**\n * Optional-peer resolution gates for the debug surface (issue #817).\n *\n * The debug surface now ships as two SEPARATE packages, declared here as\n * OPTIONAL peerDependencies of `@ait-co/devtools`:\n *\n *   - `@ait-co/debugger`      — MCP daemon / test runner / dev-bridge. devDependency\n *                               or `npx` only; never part of an app bundle.\n *   - `@ait-co/debug-console` — on-device attach + eruda console. The ONLY debug\n *                               package that can legitimately enter an app bundle.\n *\n * Neither may become a hard dependency. The overwhelming majority of consumers\n * use environment 1 only (browser + mock SDK + panel) and must install NOTHING\n * extra — that is the whole point of splitting the packages apart. So every\n * call site reaches them through the resolution gates below and degrades\n * gracefully when they are absent:\n *\n *   - env-2 CDP wiring (`tunnel.cdp`) → falls back to the plain screen-preview\n *     tunnel (no relay, no dashboard) and prints {@link INSTALL_HINT}.\n *   - in-app attach injection → the snippet is simply not injected, so the\n *     attach code is STRUCTURALLY ABSENT from the bundle rather than merely\n *     gated at runtime. This gate is the technical enforcement point of the\n *     debug surface's security scope: no `@ait-co/debug-console` installed\n *     means no attach code can reach a bundle at all.\n *\n * The `import.meta.resolve` probe follows the `MOCK_PATH` precedent in\n * `./index.ts`: resolution is attempted once at plugin-load time and a failure\n * is a plain \"not installed\" signal, never an error.\n *\n * SECRET-HANDLING: nothing here touches a relay URL, tunnel host, TOTP secret\n * or code. The only strings emitted are fixed specifiers and the install hint.\n */\n\n/** Subpath of `@ait-co/debugger` that the unplugin's dev loop delegates to. */\nexport const DEBUGGER_DEV_BRIDGE_ID = '@ait-co/debugger/dev-bridge';\n\n/** The on-device attach package injected into a consumer entry point. */\nexport const DEBUG_CONSOLE_ID = '@ait-co/debug-console';\n\n/**\n * The pre-split in-app specifier. Still recognised for DEDUPE only — a consumer\n * who wired `@ait-co/devtools/in-app` by hand must not also receive the new\n * auto-injected snippet. It is never injected any more.\n */\nexport const LEGACY_IN_APP_ID = '@ait-co/devtools/in-app';\n\n/** One-line install hint printed whenever a gate closes on a missing package. */\nexport const INSTALL_HINT = 'pnpm add -D @ait-co/debugger @ait-co/debug-console';\n\n/**\n * Returns whether `specifier` resolves from this package's location.\n *\n * `import.meta.resolve` throws (rather than returning a falsy value) for an\n * unresolvable specifier, and is itself absent on a few older runtimes — both\n * are treated as \"not installed\", which is the safe direction: the caller then\n * takes the degraded path instead of importing something that is not there.\n */\nexport function canResolveOptionalPeer(specifier: string): boolean {\n  try {\n    return typeof import.meta.resolve(specifier) === 'string';\n  } catch {\n    return false;\n  }\n}\n\n/** Whether `@ait-co/debugger`'s dev-bridge is installed (env-2 CDP path). */\nexport function hasDebugger(): boolean {\n  return canResolveOptionalPeer(DEBUGGER_DEV_BRIDGE_ID);\n}\n\n/** Whether `@ait-co/debug-console` is installed (in-app attach injection). */\nexport function hasDebugConsole(): boolean {\n  return canResolveOptionalPeer(DEBUG_CONSOLE_ID);\n}\n\n/**\n * Whether `code` already wires the in-app debug attach itself.\n *\n * Both the current (`@ait-co/debug-console`) and the pre-split\n * (`@ait-co/devtools/in-app`) specifier count, so a consumer who wired either\n * one by hand never gets a duplicate auto-injection.\n */\nexport function hasInAppWiring(code: string): boolean {\n  return code.includes(DEBUG_CONSOLE_ID) || code.includes(LEGACY_IN_APP_ID);\n}\n\n/**\n * The gated dynamic-import snippet prepended to a consumer entry point.\n *\n * The runtime gate (`?debug=1` + a `relay` param) keeps the chunk unloaded on a\n * normal page load, and a production build dead-code-eliminates it. The\n * build-time gate is {@link hasDebugConsole} at the call site: when the package\n * is absent this snippet is never produced, so the attach code cannot be in the\n * bundle at all.\n */\nexport function buildInAppSnippet(): string {\n  return [\n    '// @ait-co/devtools: in-app attach auto-injected by unplugin — 수동 배선 불필요',\n    \"if (typeof window !== 'undefined') {\",\n    '  const __ait_p = new URLSearchParams(window.location.search);',\n    \"  if (__ait_p.get('debug') === '1' && __ait_p.get('relay')) {\",\n    `    void import('${DEBUG_CONSOLE_ID}').then((m) => m.maybeAttach());`,\n    '  }',\n    '}',\n  ].join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,MAAa,yBAAyB;;AAGtC,MAAa,mBAAmB;;AAUhC,MAAa,eAAe;;;;;;;;;AAU5B,SAAgB,uBAAuB,WAA4B;AACjE,KAAI;AACF,SAAO,OAAA,EAAA,CAAmB,QAAQ,UAAU,KAAK;SAC3C;AACN,SAAO;;;;AAKX,SAAgB,cAAuB;AACrC,QAAO,uBAAuB,uBAAuB;;;AAIvD,SAAgB,kBAA2B;AACzC,QAAO,uBAAuB,iBAAiB;;;;;;;;;AAUjD,SAAgB,eAAe,MAAuB;AACpD,QAAO,KAAK,SAAA,wBAA0B,IAAI,KAAK,SAAA,0BAA0B;;;;;;;;;;;AAY3E,SAAgB,oBAA4B;AAC1C,QAAO;EACL;EACA;EACA;EACA;EACA,oBAAoB,iBAAiB;EACrC;EACA;EACD,CAAC,KAAK,KAAK"}

package/dist/optional-peers-FdVbUJst.js

@@ -0,0 +1,96 @@
+//#region src/unplugin/optional-peers.ts
+/**
+* Optional-peer resolution gates for the debug surface (issue #817).
+*
+* The debug surface now ships as two SEPARATE packages, declared here as
+* OPTIONAL peerDependencies of `@ait-co/devtools`:
+*
+*   - `@ait-co/debugger`      — MCP daemon / test runner / dev-bridge. devDependency
+*                               or `npx` only; never part of an app bundle.
+*   - `@ait-co/debug-console` — on-device attach + eruda console. The ONLY debug
+*                               package that can legitimately enter an app bundle.
+*
+* Neither may become a hard dependency. The overwhelming majority of consumers
+* use environment 1 only (browser + mock SDK + panel) and must install NOTHING
+* extra — that is the whole point of splitting the packages apart. So every
+* call site reaches them through the resolution gates below and degrades
+* gracefully when they are absent:
+*
+*   - env-2 CDP wiring (`tunnel.cdp`) → falls back to the plain screen-preview
+*     tunnel (no relay, no dashboard) and prints {@link INSTALL_HINT}.
+*   - in-app attach injection → the snippet is simply not injected, so the
+*     attach code is STRUCTURALLY ABSENT from the bundle rather than merely
+*     gated at runtime. This gate is the technical enforcement point of the
+*     debug surface's security scope: no `@ait-co/debug-console` installed
+*     means no attach code can reach a bundle at all.
+*
+* The `import.meta.resolve` probe follows the `MOCK_PATH` precedent in
+* `./index.ts`: resolution is attempted once at plugin-load time and a failure
+* is a plain "not installed" signal, never an error.
+*
+* SECRET-HANDLING: nothing here touches a relay URL, tunnel host, TOTP secret
+* or code. The only strings emitted are fixed specifiers and the install hint.
+*/
+/** Subpath of `@ait-co/debugger` that the unplugin's dev loop delegates to. */
+const DEBUGGER_DEV_BRIDGE_ID = "@ait-co/debugger/dev-bridge";
+/** The on-device attach package injected into a consumer entry point. */
+const DEBUG_CONSOLE_ID = "@ait-co/debug-console";
+/** One-line install hint printed whenever a gate closes on a missing package. */
+const INSTALL_HINT = "pnpm add -D @ait-co/debugger @ait-co/debug-console";
+/**
+* Returns whether `specifier` resolves from this package's location.
+*
+* `import.meta.resolve` throws (rather than returning a falsy value) for an
+* unresolvable specifier, and is itself absent on a few older runtimes — both
+* are treated as "not installed", which is the safe direction: the caller then
+* takes the degraded path instead of importing something that is not there.
+*/
+function canResolveOptionalPeer(specifier) {
+	try {
+		return typeof import.meta.resolve(specifier) === "string";
+	} catch {
+		return false;
+	}
+}
+/** Whether `@ait-co/debugger`'s dev-bridge is installed (env-2 CDP path). */
+function hasDebugger() {
+	return canResolveOptionalPeer(DEBUGGER_DEV_BRIDGE_ID);
+}
+/** Whether `@ait-co/debug-console` is installed (in-app attach injection). */
+function hasDebugConsole() {
+	return canResolveOptionalPeer(DEBUG_CONSOLE_ID);
+}
+/**
+* Whether `code` already wires the in-app debug attach itself.
+*
+* Both the current (`@ait-co/debug-console`) and the pre-split
+* (`@ait-co/devtools/in-app`) specifier count, so a consumer who wired either
+* one by hand never gets a duplicate auto-injection.
+*/
+function hasInAppWiring(code) {
+	return code.includes("@ait-co/debug-console") || code.includes("@ait-co/devtools/in-app");
+}
+/**
+* The gated dynamic-import snippet prepended to a consumer entry point.
+*
+* The runtime gate (`?debug=1` + a `relay` param) keeps the chunk unloaded on a
+* normal page load, and a production build dead-code-eliminates it. The
+* build-time gate is {@link hasDebugConsole} at the call site: when the package
+* is absent this snippet is never produced, so the attach code cannot be in the
+* bundle at all.
+*/
+function buildInAppSnippet() {
+	return [
+		"// @ait-co/devtools: in-app attach auto-injected by unplugin — 수동 배선 불필요",
+		"if (typeof window !== 'undefined') {",
+		"  const __ait_p = new URLSearchParams(window.location.search);",
+		"  if (__ait_p.get('debug') === '1' && __ait_p.get('relay')) {",
+		`    void import('${DEBUG_CONSOLE_ID}').then((m) => m.maybeAttach());`,
+		"  }",
+		"}"
+	].join("\n");
+}
+//#endregion
+export { hasDebugger as a, hasDebugConsole as i, INSTALL_HINT as n, hasInAppWiring as o, buildInAppSnippet as r, DEBUGGER_DEV_BRIDGE_ID as t };
+
+//# sourceMappingURL=optional-peers-FdVbUJst.js.map

package/dist/optional-peers-FdVbUJst.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"optional-peers-FdVbUJst.js","names":[],"sources":["../src/unplugin/optional-peers.ts"],"sourcesContent":["/**\n * Optional-peer resolution gates for the debug surface (issue #817).\n *\n * The debug surface now ships as two SEPARATE packages, declared here as\n * OPTIONAL peerDependencies of `@ait-co/devtools`:\n *\n *   - `@ait-co/debugger`      — MCP daemon / test runner / dev-bridge. devDependency\n *                               or `npx` only; never part of an app bundle.\n *   - `@ait-co/debug-console` — on-device attach + eruda console. The ONLY debug\n *                               package that can legitimately enter an app bundle.\n *\n * Neither may become a hard dependency. The overwhelming majority of consumers\n * use environment 1 only (browser + mock SDK + panel) and must install NOTHING\n * extra — that is the whole point of splitting the packages apart. So every\n * call site reaches them through the resolution gates below and degrades\n * gracefully when they are absent:\n *\n *   - env-2 CDP wiring (`tunnel.cdp`) → falls back to the plain screen-preview\n *     tunnel (no relay, no dashboard) and prints {@link INSTALL_HINT}.\n *   - in-app attach injection → the snippet is simply not injected, so the\n *     attach code is STRUCTURALLY ABSENT from the bundle rather than merely\n *     gated at runtime. This gate is the technical enforcement point of the\n *     debug surface's security scope: no `@ait-co/debug-console` installed\n *     means no attach code can reach a bundle at all.\n *\n * The `import.meta.resolve` probe follows the `MOCK_PATH` precedent in\n * `./index.ts`: resolution is attempted once at plugin-load time and a failure\n * is a plain \"not installed\" signal, never an error.\n *\n * SECRET-HANDLING: nothing here touches a relay URL, tunnel host, TOTP secret\n * or code. The only strings emitted are fixed specifiers and the install hint.\n */\n\n/** Subpath of `@ait-co/debugger` that the unplugin's dev loop delegates to. */\nexport const DEBUGGER_DEV_BRIDGE_ID = '@ait-co/debugger/dev-bridge';\n\n/** The on-device attach package injected into a consumer entry point. */\nexport const DEBUG_CONSOLE_ID = '@ait-co/debug-console';\n\n/**\n * The pre-split in-app specifier. Still recognised for DEDUPE only — a consumer\n * who wired `@ait-co/devtools/in-app` by hand must not also receive the new\n * auto-injected snippet. It is never injected any more.\n */\nexport const LEGACY_IN_APP_ID = '@ait-co/devtools/in-app';\n\n/** One-line install hint printed whenever a gate closes on a missing package. */\nexport const INSTALL_HINT = 'pnpm add -D @ait-co/debugger @ait-co/debug-console';\n\n/**\n * Returns whether `specifier` resolves from this package's location.\n *\n * `import.meta.resolve` throws (rather than returning a falsy value) for an\n * unresolvable specifier, and is itself absent on a few older runtimes — both\n * are treated as \"not installed\", which is the safe direction: the caller then\n * takes the degraded path instead of importing something that is not there.\n */\nexport function canResolveOptionalPeer(specifier: string): boolean {\n  try {\n    return typeof import.meta.resolve(specifier) === 'string';\n  } catch {\n    return false;\n  }\n}\n\n/** Whether `@ait-co/debugger`'s dev-bridge is installed (env-2 CDP path). */\nexport function hasDebugger(): boolean {\n  return canResolveOptionalPeer(DEBUGGER_DEV_BRIDGE_ID);\n}\n\n/** Whether `@ait-co/debug-console` is installed (in-app attach injection). */\nexport function hasDebugConsole(): boolean {\n  return canResolveOptionalPeer(DEBUG_CONSOLE_ID);\n}\n\n/**\n * Whether `code` already wires the in-app debug attach itself.\n *\n * Both the current (`@ait-co/debug-console`) and the pre-split\n * (`@ait-co/devtools/in-app`) specifier count, so a consumer who wired either\n * one by hand never gets a duplicate auto-injection.\n */\nexport function hasInAppWiring(code: string): boolean {\n  return code.includes(DEBUG_CONSOLE_ID) || code.includes(LEGACY_IN_APP_ID);\n}\n\n/**\n * The gated dynamic-import snippet prepended to a consumer entry point.\n *\n * The runtime gate (`?debug=1` + a `relay` param) keeps the chunk unloaded on a\n * normal page load, and a production build dead-code-eliminates it. The\n * build-time gate is {@link hasDebugConsole} at the call site: when the package\n * is absent this snippet is never produced, so the attach code cannot be in the\n * bundle at all.\n */\nexport function buildInAppSnippet(): string {\n  return [\n    '// @ait-co/devtools: in-app attach auto-injected by unplugin — 수동 배선 불필요',\n    \"if (typeof window !== 'undefined') {\",\n    '  const __ait_p = new URLSearchParams(window.location.search);',\n    \"  if (__ait_p.get('debug') === '1' && __ait_p.get('relay')) {\",\n    `    void import('${DEBUG_CONSOLE_ID}').then((m) => m.maybeAttach());`,\n    '  }',\n    '}',\n  ].join('\\n');\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,MAAa,yBAAyB;;AAGtC,MAAa,mBAAmB;;AAUhC,MAAa,eAAe;;;;;;;;;AAU5B,SAAgB,uBAAuB,WAA4B;AACjE,KAAI;AACF,SAAO,OAAO,OAAO,KAAK,QAAQ,UAAU,KAAK;SAC3C;AACN,SAAO;;;;AAKX,SAAgB,cAAuB;AACrC,QAAO,uBAAuB,uBAAuB;;;AAIvD,SAAgB,kBAA2B;AACzC,QAAO,uBAAuB,iBAAiB;;;;;;;;;AAUjD,SAAgB,eAAe,MAAuB;AACpD,QAAO,KAAK,SAAA,wBAA0B,IAAI,KAAK,SAAA,0BAA0B;;;;;;;;;;;AAY3E,SAAgB,oBAA4B;AAC1C,QAAO;EACL;EACA;EACA;EACA;EACA,oBAAoB,iBAAiB;EACrC;EACA;EACD,CAAC,KAAK,KAAK"}

package/dist/panel/index.js

@@ -27567,7 +27567,7 @@ const TossAds = createMockProxy("TossAds", {
 		_slotRegistry.clear();
 	}))
 });
-const loadFullScreenAd = withIsSupported(observe("loadFullScreenAd", "faithful", (args) => {
+const loadFullScreenAd = observe("loadFullScreenAd", "faithful", (args) => {
 	setTimeout(() => {
 		const failureCode = aitState.state.failureModes.loadFullScreenAd;
 		if (failureCode) {
@@ -27582,7 +27582,7 @@ const loadFullScreenAd = withIsSupported(observe("loadFullScreenAd", "faithful",
 		args.onEvent({ type: "loaded" });
 	}, 200);
 	return () => {};
-}));
+});
 const showFullScreenAd = withIsSupported(observe("showFullScreenAd", "faithful", (args) => {
 	if (!aitState.state.ads.isLoaded) {
 		args.onError(/* @__PURE__ */ new Error("Ad not loaded"));
@@ -30295,7 +30295,7 @@ function Panel() {
 								color: "#666",
 								fontWeight: 400
 							},
-							children: ["v", "0.1.142"]
+							children: ["v", "0.1.144"]
 						}),
 						/* @__PURE__ */ (0, import_jsx_runtime.jsx)("button", {
 							type: "button",