@arcote.tech/arc-cli 0.8.1 → 0.8.3

package/dist/index.js

@@ -31692,6 +31692,52 @@ function workspaceSourcePlugin(srcByName) {
     }
   };
 }
+var SERVER_ONLY_NODE_BUILTINS = new Set([
+  "crypto",
+  "stream",
+  "zlib",
+  "fs",
+  "fs/promises",
+  "net",
+  "tls",
+  "http",
+  "https",
+  "http2",
+  "dns",
+  "dgram",
+  "child_process",
+  "worker_threads",
+  "cluster",
+  "os",
+  "v8",
+  "vm",
+  "readline",
+  "repl",
+  "tty",
+  "perf_hooks",
+  "inspector",
+  "async_hooks",
+  "diagnostics_channel",
+  "module",
+  "constants"
+]);
+function nodeServerBuiltinStubPlugin() {
+  return {
+    name: "node-server-builtin-stub",
+    setup(build2) {
+      build2.onResolve({ filter: /^(node:)?[a-z_/]+$/ }, (args) => {
+        const bare = args.path.replace(/^node:/, "");
+        if (!SERVER_ONLY_NODE_BUILTINS.has(bare))
+          return;
+        return { path: args.path, namespace: "node-server-stub" };
+      });
+      build2.onLoad({ filter: /.*/, namespace: "node-server-stub" }, (args) => ({
+        contents: `const e=()=>{throw new Error("Node builtin '${args.path}' jest server-only \u2014 niedost\u0119pny w przegl\u0105darce");};` + `module.exports=new Proxy({},{get:(_,p)=>p==="__esModule"?false:e});`,
+        loader: "js"
+      }));
+    }
+  };
+}
 function jsxDevShimPlugin() {
   return {
     name: "jsx-dev-runtime-shim",
@@ -31813,7 +31859,10 @@ async function buildContextClient(pkg, rootDir, client, cache, noCache) {
     format: "esm",
     naming: "index.[ext]",
     external: externals,
-    plugins: [jsxDevShimPlugin()],
+    plugins: [
+      jsxDevShimPlugin(),
+      ...client.target === "browser" ? [nodeServerBuiltinStubPlugin()] : []
+    ],
     define: client.defines
   });
   if (!result.success) {
@@ -31926,7 +31975,6 @@ async function buildServerApp(rootDir, serverDir, packages, cache, noCache) {
   try {
     result = await Bun.build({
       entrypoints: [entrySrc],
-      outdir: serverDir,
       target: "bun",
       format: "esm",
       splitting: true,
@@ -31955,6 +32003,9 @@ async function buildServerApp(rootDir, serverDir, packages, cache, noCache) {
   if (basename3(entryOut.path) !== SERVER_ENTRY_FILE) {
     throw new Error(`Server app build: unexpected entry name ${basename3(entryOut.path)} (wanted ${SERVER_ENTRY_FILE})`);
   }
+  for (const out of result.outputs) {
+    writeFileSync7(join9(serverDir, basename3(out.path)), new Uint8Array(await out.arrayBuffer()));
+  }
   const externals = [...recorded].filter(([name]) => !FRAMEWORK_PEER_SET.has(name)).map(([name, version]) => ({ name, version })).sort((a, b) => a.name.localeCompare(b.name));
   writeFileSync7(externalsFileAbs, JSON.stringify(externals, null, 2) + `
 `);
@@ -31972,9 +32023,141 @@ function readServerExternals(path4) {
     return [];
   }
 }
+function buildStatsEnabled() {
+  return process.env.ARC_BUILD_STATS === "1";
+}
+function classifySource(src) {
+  const nm = src.lastIndexOf("node_modules/");
+  if (nm >= 0) {
+    const rest = src.slice(nm + "node_modules/".length);
+    const parts = rest.split("/");
+    const pkg = parts[0].startsWith("@") ? `${parts[0]}/${parts[1]}` : parts[0];
+    const external = !pkg.startsWith("@ndt/") && !pkg.startsWith("@arcote.tech/");
+    return { pkg, external };
+  }
+  const m = src.match(/(?:^|\/)packages\/([^/]+)\//);
+  if (m)
+    return { pkg: `packages/${m[1]}`, external: false };
+  return { pkg: src.split("/").slice(0, 2).join("/") || src, external: false };
+}
+function chunkPkgWeights(map) {
+  const acc = new Map;
+  const sources = map.sources ?? [];
+  const contents = map.sourcesContent ?? [];
+  for (let i = 0;i < sources.length; i++) {
+    const bytes = contents[i]?.length ?? 0;
+    const { pkg, external } = classifySource(sources[i]);
+    const cur = acc.get(pkg) ?? { pkg, bytes: 0, external };
+    cur.bytes += bytes;
+    acc.set(pkg, cur);
+  }
+  return [...acc.values()].sort((a, b) => b.bytes - a.bytes);
+}
+var kb = (n) => `${Math.round(n / 1024)} KB`;
+function stripTrailingSourcemapComment(bytes) {
+  let text = Buffer.from(bytes).toString("utf8");
+  text = text.replace(/\n*\/\/# (?:debugId|sourceMappingURL)=[^\n]*\s*$/, "");
+  if (!text.endsWith(`
+`))
+    text += `
+`;
+  return new Uint8Array(Buffer.from(text, "utf8"));
+}
+function reportBrowserBuildStats(opts) {
+  const { label, entries, jsByName, mapsByJs } = opts;
+  const staticEdge = /(?:^|[;}\s])import\s*["'](\.\/[^"']+\.js)["']|from\s*["'](\.\/[^"']+\.js)["']/g;
+  const staticImports = (name) => {
+    const bytes = jsByName.get(name);
+    if (!bytes)
+      return [];
+    const s = Buffer.from(bytes).toString("utf8");
+    const out = [];
+    let m;
+    staticEdge.lastIndex = 0;
+    while (m = staticEdge.exec(s))
+      out.push(basename3(m[1] ?? m[2]));
+    return out;
+  };
+  const closure = (start) => {
+    const seen = new Set;
+    const stack = [start];
+    while (stack.length) {
+      const f = stack.pop();
+      if (seen.has(f) || !jsByName.has(f))
+        continue;
+      seen.add(f);
+      stack.push(...staticImports(f));
+    }
+    return seen;
+  };
+  const gz = (bytes) => Bun.gzipSync(bytes, { level: 6 }).length;
+  console.log(`
+\u2501\u2501\u2501\u2501\u2501 Build stats: ${label} \u2501\u2501\u2501\u2501\u2501`);
+  const globalExt = new Map;
+  for (const entry of entries) {
+    const files = closure(entry.file);
+    let raw = 0;
+    let gzip = 0;
+    const pkgAcc = new Map;
+    for (const f of files) {
+      const bytes = jsByName.get(f);
+      raw += bytes.length;
+      gzip += gz(bytes);
+      const map = mapsByJs.get(f);
+      if (!map)
+        continue;
+      for (const w of chunkPkgWeights(map)) {
+        const cur = pkgAcc.get(w.pkg) ?? { pkg: w.pkg, bytes: 0, external: w.external };
+        cur.bytes += w.bytes;
+        pkgAcc.set(w.pkg, cur);
+        if (w.external) {
+          const g = globalExt.get(w.pkg) ?? { bytes: 0, chunks: new Set, entries: new Set };
+          g.bytes = Math.max(g.bytes, w.bytes);
+          g.chunks.add(f);
+          g.entries.add(entry.name);
+          globalExt.set(w.pkg, g);
+        }
+      }
+    }
+    const top = [...pkgAcc.values()].sort((a, b) => b.bytes - a.bytes).slice(0, 10);
+    console.log(`
+\u25B8 ${entry.name}: pierwsze wczytanie ${kb(raw)} raw / ${kb(gzip)} gzip (${files.size} plik\xF3w)`);
+    for (const w of top) {
+      const tag = w.external ? "ext" : "wewn";
+      console.log(`    ${kb(w.bytes).padStart(8)}  [${tag}] ${w.pkg}`);
+    }
+  }
+  const heaviest = [...globalExt.entries()].sort((a, b) => b[1].bytes - a[1].bytes).slice(0, 15);
+  if (heaviest.length) {
+    console.log(`
+\u25B8 Najci\u0119\u017Csze biblioteki ZEWN\u0118TRZNE (\u017Ar\xF3d\u0142a) i gdzie l\u0105duj\u0105:`);
+    for (const [pkg, g] of heaviest) {
+      console.log(`    ${kb(g.bytes).padStart(8)}  ${pkg}  \u2192 ${[...g.entries].join(", ")}`);
+    }
+  }
+  console.log(`
+\u2501\u2501\u2501\u2501\u2501 koniec stats: ${label} \u2501\u2501\u2501\u2501\u2501
+`);
+}
+function looksMinified(files) {
+  for (const f of files) {
+    if (!f.name.endsWith(".js") || f.bytes.length < 16 * 1024)
+      continue;
+    const sample = f.bytes.subarray(0, 64 * 1024);
+    let newlines = 0;
+    for (const b of sample)
+      if (b === 10)
+        newlines++;
+    const avgLineLen = sample.length / Math.max(1, newlines);
+    if (avgLineLen < 200)
+      return false;
+  }
+  return true;
+}
 async function buildBrowserApp(rootDir, outDir, plan, cache, noCache, i18nCollector, opts) {
   const federated = opts?.federated ?? false;
   const exposeRuntime = opts?.exposeRuntime ?? false;
+  const minify = opts?.minify ?? true;
   mkdirSync7(outDir, { recursive: true });
   const publicMembers = plan.groups.get("public") ?? [];
   const protectedGroups = plan.chunks.filter((c) => c !== "public").map((c) => ({ name: c, members: plan.groups.get(c) ?? [] })).filter((g) => g.members.length > 0);
@@ -31997,10 +32180,11 @@ async function buildBrowserApp(rootDir, outDir, plan, cache, noCache, i18nCollec
     define: { ONLY_SERVER: "false", ONLY_BROWSER: "true", ONLY_CLIENT: "true" },
     federated,
     exposeRuntime,
+    minify,
     externals: federated ? [...SHELL_EXTERNALS] : [],
     builderRev: 3
   });
-  if (!noCache && isCacheHit(cache, unitId, inputHash)) {
+  if (!noCache && !buildStatsEnabled() && isCacheHit(cache, unitId, inputHash)) {
     const cached = cache.units[unitId]?.outputHashes;
     if (cached?._manifest) {
       try {
@@ -32024,24 +32208,27 @@ async function buildBrowserApp(rootDir, outDir, plan, cache, noCache, i18nCollec
         rmSync3(join9(outDir, f), { force: true });
     }
   }
-  const tmpDir = join9(outDir, "_entries");
-  mkdirSync7(tmpDir, { recursive: true });
+  const tmpDir = join9(rootDir, ".arc", "tmp", `entries-${unitId}`);
   const importLines = (pkgs) => pkgs.map((m) => `import "${m.pkg.name}";`).join(`
 `);
   const initialEntry = join9(tmpDir, "initial.ts");
-  writeFileSync7(initialEntry, (exposeRuntime ? runtimeExposePrelude() + `
-` : "") + `${importLines(publicMembers)}
-export { startApp } from "@arcote.tech/platform";
-`);
   const entryPaths = [initialEntry];
   const groupModuleMap = new Map;
   for (const g of protectedGroups) {
-    const entry = join9(tmpDir, `${g.name}.ts`);
-    writeFileSync7(entry, `${importLines(g.members)}
-`);
-    entryPaths.push(entry);
+    entryPaths.push(join9(tmpDir, `${g.name}.ts`));
     groupModuleMap.set(g.name, g.members.map((m) => m.moduleName));
   }
+  const writeEntryFiles = () => {
+    mkdirSync7(tmpDir, { recursive: true });
+    writeFileSync7(initialEntry, (exposeRuntime ? runtimeExposePrelude() + `
+` : "") + `${importLines(publicMembers)}
+export { startApp } from "@arcote.tech/platform";
+`);
+    for (const g of protectedGroups) {
+      writeFileSync7(join9(tmpDir, `${g.name}.ts`), `${importLines(g.members)}
+`);
+    }
+  };
   const allMemberPkgs = new Map;
   for (const m of publicMembers)
     allMemberPkgs.set(m.pkg.name, m.pkg);
@@ -32062,11 +32249,13 @@ export { startApp } from "@arcote.tech/platform";
 `);
     patchedPkgJsons.push({ path: pkgJsonPath, original });
   }
+  const statsMode = buildStatsEnabled();
+  const mapsByJs = new Map;
   let result;
-  try {
-    result = await Bun.build({
+  const runBuild = () => {
+    writeEntryFiles();
+    return Bun.build({
       entrypoints: entryPaths,
-      outdir: outDir,
       splitting: true,
       format: "esm",
       target: "browser",
@@ -32074,9 +32263,12 @@ export { startApp } from "@arcote.tech/platform";
       plugins: [
         ...federated ? [] : [singleReactPlugin(rootDir)],
         jsxDevShimPlugin(),
+        nodeServerBuiltinStubPlugin(),
         i18nExtractPlugin(i18nCollector, rootDir)
       ],
       naming: "[name].[ext]",
+      minify,
+      sourcemap: statsMode ? "external" : "none",
       define: {
         ONLY_SERVER: "false",
         ONLY_BROWSER: "true",
@@ -32084,12 +32276,46 @@ export { startApp } from "@arcote.tech/platform";
         "process.env.NODE_ENV": '"production"'
       }
     });
+  };
+  let outFiles = null;
+  try {
+    for (let attempt = 1;; attempt++) {
+      result = await runBuild();
+      if (result.success) {
+        const files = [];
+        mapsByJs.clear();
+        for (const out of result.outputs) {
+          const name = basename3(out.path);
+          if (name.endsWith(".map")) {
+            try {
+              mapsByJs.set(name.replace(/\.map$/, ""), JSON.parse(await out.text()));
+            } catch {}
+            continue;
+          }
+          let bytes = new Uint8Array(await out.arrayBuffer());
+          if (statsMode && name.endsWith(".js")) {
+            bytes = stripTrailingSourcemapComment(bytes);
+          }
+          files.push({ kind: out.kind, name, bytes });
+        }
+        if (!minify || looksMinified(files)) {
+          outFiles = files;
+          break;
+        }
+      }
+      if (attempt >= 3) {
+        if (!result.success)
+          break;
+        throw new Error("Browser app build: output NIEZMINIFIKOWANY mimo minify:true (3 pr\xF3by). Przerwane, \u017Ceby nie wypu\u015Bci\u0107 ci\u0119\u017Ckich bundli.");
+      }
+      console.warn(`  ! browser build pass ${attempt} ${result.success ? "niezminifikowany mimo minify:true (wy\u015Bcig minify Bun.build)" : "nieudany (wy\u015Bcig Bun.build \u2014 np. znikni\u0119te pliki entry)"} \u2014 powtarzam`);
+    }
   } finally {
     for (const p of patchedPkgJsons)
       writeFileSync7(p.path, p.original);
   }
   rmSync3(tmpDir, { recursive: true, force: true });
-  if (!result.success) {
+  if (!result.success || !outFiles) {
     for (const log2 of result.logs)
       console.error(log2);
     throw new Error("Browser app build failed");
@@ -32098,17 +32324,12 @@ export { startApp } from "@arcote.tech/platform";
   let initialHash = "";
   const groups = {};
   const sharedChunks = [];
-  for (const out of result.outputs) {
-    const name = basename3(out.path);
+  for (const out of outFiles) {
     if (out.kind === "entry-point") {
-      const bytes = readFileSync8(out.path);
-      const hash = sha256Hex(bytes).slice(0, 16);
-      const stem = name.replace(/\.js$/, "");
+      const hash = sha256Hex(out.bytes).slice(0, 16);
+      const stem = out.name.replace(/\.js$/, "");
       const finalName = `${stem}.${hash}.js`;
-      const finalPath = join9(outDir, finalName);
-      rmSync3(finalPath, { force: true });
-      writeFileSync7(finalPath, bytes);
-      rmSync3(out.path, { force: true });
+      writeFileSync7(join9(outDir, finalName), out.bytes);
       if (stem === "initial") {
         initialFile = finalName;
         initialHash = hash;
@@ -32120,18 +32341,56 @@ export { startApp } from "@arcote.tech/platform";
         };
       }
     } else if (out.kind === "chunk") {
-      sharedChunks.push(name);
+      writeFileSync7(join9(outDir, out.name), out.bytes);
+      sharedChunks.push(out.name);
     }
   }
   if (!initialFile) {
     throw new Error("Browser app build: initial entry not found in outputs");
   }
+  const written = new Map;
+  for (const out of outFiles) {
+    const name = out.kind === "entry-point" ? `${out.name.replace(/\.js$/, "")}.${sha256Hex(out.bytes).slice(0, 16)}.js` : out.name;
+    if (out.kind === "entry-point" || out.kind === "chunk") {
+      written.set(name, sha256Hex(out.bytes));
+    }
+  }
+  for (const f of readdirSync4(outDir)) {
+    if (!f.endsWith(".js"))
+      continue;
+    const expected = written.get(f);
+    const actual = sha256Hex(readFileSync8(join9(outDir, f)));
+    if (!expected || expected !== actual) {
+      throw new Error(`Browser app build: plik "${f}" w ${outDir} nie zgadza si\u0119 z artefaktami builda ` + `(${expected ? "tre\u015B\u0107 rozjechana z zapisem" : "obcy plik \u2014 co\u015B innego pisze do outDir"}). ` + `Przerwane, \u017Ceby nie wypu\u015Bci\u0107 niesp\xF3jnego builda.`);
+    }
+  }
   const manifest = {
     initial: { file: initialFile, hash: initialHash },
     groups,
     sharedChunks,
     cached: false
   };
+  if (statsMode) {
+    const jsByName = new Map;
+    const mapsByFinal = new Map;
+    const finalNameOf = (out) => out.kind === "entry-point" ? `${out.name.replace(/\.js$/, "")}.${sha256Hex(out.bytes).slice(0, 16)}.js` : out.name;
+    for (const out of outFiles) {
+      const fn = finalNameOf(out);
+      jsByName.set(fn, out.bytes);
+      const map = mapsByJs.get(out.name);
+      if (map)
+        mapsByFinal.set(fn, map);
+    }
+    reportBrowserBuildStats({
+      label: federated ? "browser-fed" : "browser",
+      entries: [
+        { name: "initial", file: initialFile },
+        ...Object.entries(groups).map(([stem, g]) => ({ name: stem, file: g.file }))
+      ],
+      jsByName,
+      mapsByJs: mapsByFinal
+    });
+  }
   updateCache(cache, unitId, inputHash, {
     outputHashes: { _manifest: JSON.stringify(manifest) }
   });
@@ -32433,6 +32692,11 @@ function collectModuleNames(dir, acc) {
     }
   }
 }
+function packageDeclaresModule(pkg) {
+  const names = new Set;
+  collectModuleNames(join11(pkg.path, "src"), names);
+  return names.size > 0;
+}
 function assertOneModulePerPackage(packages) {
   const offenders = [];
   for (const pkg of packages) {
@@ -32623,6 +32887,7 @@ function resolveWorkspace() {
 async function buildAll(ws, opts = {}) {
   const cache = loadBuildCache(ws.arcDir);
   const noCache = opts.noCache ?? false;
+  const minify = opts.minify ?? true;
   const themePath = ws.rootPkg.arc?.theme;
   const federation = getFederationConfig(ws);
   log2(`Building (concurrency parallel${noCache ? ", no-cache" : ""})...`);
@@ -32637,8 +32902,9 @@ async function buildAll(ws, opts = {}) {
   const isHost = Boolean(federation?.host);
   const moduleNameOf2 = (name) => name.split("/").pop() ?? name;
   const exposureOf = (pkgName) => accessMap.exposure[moduleNameOf2(pkgName)]?.exposure ?? "local";
-  const localPackages = isHost ? ws.packages : ws.packages.filter((p) => exposureOf(p.name) !== "external");
-  const fedPackages = ws.packages.filter((p) => ["external", "both"].includes(exposureOf(p.name)));
+  const modulePackages = ws.packages.filter(packageDeclaresModule);
+  const localPackages = isHost ? modulePackages : modulePackages.filter((p) => exposureOf(p.name) !== "external");
+  const fedPackages = modulePackages.filter((p) => ["external", "both"].includes(exposureOf(p.name)));
   const hasFederatedModules = fedPackages.length > 0;
   const needsPeerShell = isHost || hasFederatedModules;
   log2();
@@ -32649,16 +32915,17 @@ async function buildAll(ws, opts = {}) {
     ok(`Federated modules: ${fedPackages.map((p) => moduleNameOf2(p.name)).join(", ")}`);
   }
   const i18nCollector = new Map;
-  const [browserResult, , , , shellResult, fedResult] = await Promise.all([
-    buildBrowserApp(ws.rootDir, ws.browserDir, plan, cache, noCache, i18nCollector, {
-      federated: false,
-      exposeRuntime: isHost
-    }),
+  const browserSequence = (async () => {
+    const bundled = await buildBrowserApp(ws.rootDir, ws.browserDir, plan, cache, noCache, i18nCollector, { federated: false, exposeRuntime: isHost, minify });
+    const fed = fedPlan ? await buildBrowserApp(ws.rootDir, join13(ws.arcDir, "browser-fed"), fedPlan, cache, noCache, i18nCollector, { federated: true, unitId: "browser-app-fed", minify }) : undefined;
+    return { bundled, fed };
+  })();
+  const [{ bundled: browserResult, fed: fedResult }, , , , shellResult] = await Promise.all([
+    browserSequence,
     buildStyles(ws.rootDir, ws.arcDir, ws.packages, themePath, cache, noCache),
     copyBrowserAssets(ws, cache, noCache),
     buildTranslations(ws.rootDir, ws.arcDir, cache, noCache),
-    needsPeerShell ? buildPeerShell(ws.rootDir, join13(ws.arcDir, "shell"), cache, noCache) : Promise.resolve(undefined),
-    fedPlan ? buildBrowserApp(ws.rootDir, join13(ws.arcDir, "browser-fed"), fedPlan, cache, noCache, i18nCollector, { federated: true, unitId: "browser-app-fed" }) : Promise.resolve(undefined)
+    needsPeerShell ? buildPeerShell(ws.rootDir, join13(ws.arcDir, "shell"), cache, noCache) : Promise.resolve(undefined)
   ]);
   const { finalizeTranslations: finalizeTranslations3 } = await Promise.resolve().then(() => (init_i18n(), exports_i18n));
   await finalizeTranslations3(ws.rootDir, ws.arcDir, i18nCollector);
@@ -32806,20 +33073,25 @@ async function loadServerContext(ws) {
   if (!existsSync11(serverEntry)) {
     return { context: null, moduleAccess: new Map };
   }
+  let serverError;
   try {
     await import(serverEntry);
   } catch (e) {
     err(`Failed to load server bundle ${SERVER_ENTRY_FILE}: ${e}`);
+    serverError = e;
   }
   const { getContext, getAllModuleAccess } = await import(platformEntry);
   return {
     context: getContext() ?? null,
-    moduleAccess: getAllModuleAccess()
+    moduleAccess: getAllModuleAccess(),
+    serverError
   };
 }
 
 // src/commands/platform-build.ts
 async function platformBuild(opts = {}) {
+  if (opts.stats)
+    process.env.ARC_BUILD_STATS = "1";
   const ws = resolveWorkspace();
   const manifest = await buildAll(ws, { noCache: opts.noCache });
   const groupCount = Object.keys(manifest.groups).length;
@@ -33247,6 +33519,7 @@ function generateCaddyfile(cfg) {
   for (const [name, env2] of Object.entries(cfg.envs)) {
     lines.push(`${env2.domain} {${tlsDirective}`);
     lines.push(...logDirective);
+    lines.push("    encode zstd gzip");
     if (observability) {
       lines.push("    handle_path /otel/* {");
       lines.push("        reverse_proxy otel-collector:4318");
@@ -38266,6 +38539,14 @@ async function createArcServer(config) {
         if (contentLength > maxRequestBodySize) {
           return Response.json({ error: "Payload too large" }, { status: 413, headers: corsHeaders2 });
         }
+        if (url.pathname === "/ws" && req.headers.get("Upgrade") === "websocket") {
+          if (server2.upgrade(req, { data: { clientId: "" } }))
+            return;
+          return new Response("WebSocket upgrade failed", {
+            status: 500,
+            headers: corsHeaders2
+          });
+        }
         const authHeader = req.headers.get("Authorization");
         let rawToken = authHeader?.replace("Bearer ", "") || null;
         if (!rawToken && config.allowTokenInQuery) {
@@ -38283,14 +38564,6 @@ async function createArcServer(config) {
         if (rawToken && !tokenPayload) {
           return Response.json({ error: "Unauthorized" }, { status: 401, headers: corsHeaders2 });
         }
-        if (url.pathname === "/ws" && req.headers.get("Upgrade") === "websocket") {
-          if (server2.upgrade(req, { data: { clientId: "" } }))
-            return;
-          return new Response("WebSocket upgrade failed", {
-            status: 500,
-            headers: corsHeaders2
-          });
-        }
         const reqCtx = { rawToken, tokenPayload, corsHeaders: corsHeaders2 };
         for (const handler of httpHandlers) {
           const response = await handler(req, url, reqCtx);
@@ -38404,6 +38677,13 @@ init_i18n();
 import { timingSafeEqual } from "crypto";
 import { existsSync as existsSync19, mkdirSync as mkdirSync15 } from "fs";
 import { join as join22 } from "path";
+async function initContextHandler(context2, dbPath) {
+  const factory = await resolveDbAdapterFactory(dbPath);
+  const dbAdapter = factory(context2);
+  const handler = new ContextHandler(context2, dbAdapter);
+  await handler.init();
+  return handler;
+}
 async function resolveDbAdapterFactory(dbPath) {
   const databaseUrl = process.env.DATABASE_URL;
   if (databaseUrl && databaseUrl.length > 0) {
@@ -38684,13 +38964,6 @@ function handleDiscovery(req, ctx, ws, manifest, federation, mapUrl) {
   if (!federation) {
     return new Response("Not Found", { status: 404, headers: ctx.corsHeaders });
   }
-  const presented = req.headers.get("X-Arc-Pairing-Token");
-  if (!presented || !safeEqual(presented, federation.registrationToken)) {
-    return new Response("Unauthorized", {
-      status: 401,
-      headers: ctx.corsHeaders
-    });
-  }
   const fed = manifest.federation;
   const platformUrl = process.env.ARC_PUBLIC_URL || new URL(req.url).origin;
   return Response.json({
@@ -39025,7 +39298,7 @@ async function startPlatform(opts) {
   const dbPath = opts.dbPath ?? join23(ws.rootDir, ".arc", "data", devMode ? "dev.db" : "prod.db");
   let manifest;
   if (devMode) {
-    manifest = await buildAll(ws);
+    manifest = await buildAll(ws, { minify: false });
   } else {
     const manifestPath = join23(ws.arcDir, "manifest.json");
     if (!existsSync20(manifestPath)) {
@@ -39041,7 +39314,11 @@ async function startPlatform(opts) {
     process.env.ARC_APP_SECRET = resolveAppSecret(ws.rootDir);
   }
   log2("Loading server context...");
-  const { context: context2, moduleAccess } = await loadServerContext(ws);
+  const { context: context2, moduleAccess, serverError } = await loadServerContext(ws);
+  if (serverError) {
+    err("Serwer NIE wstanie: modu\u0142 serwerowy nie za\u0142adowa\u0142 si\u0119 (b\u0142\u0105d wy\u017Cej). " + "Cz\u0119\u015Bciowy kontekst = po\u0142owiczna aplikacja (query rzucaj\u0105 " + "'Element not found'). Napraw przyczyn\u0119 (np. brakuj\u0105ce zmienne " + "\u015Brodowiskowe) i wystartuj ponownie.");
+    process.exit(1);
+  }
   if (context2) {
     ok("Context loaded");
   } else {
@@ -39136,18 +39413,12 @@ async function startMapTool(ws, port, authToken, platformServer, platform3) {
 function assertProdFederationSecrets(devMode, hasFederation) {
   if (devMode || !hasFederation)
     return;
-  const missing = [];
-  if (!process.env.ARC_APP_SECRET)
-    missing.push("ARC_APP_SECRET");
-  if (!process.env.ARC_PAIRING_TOKEN && !process.env.ARC_MAP_TOKEN) {
-    missing.push("ARC_PAIRING_TOKEN");
-  }
-  if (missing.length === 0)
+  if (process.env.ARC_PAIRING_TOKEN || process.env.ARC_MAP_TOKEN)
     return;
-  err(`Federacja w produkcji wymaga zmiennych \u015Brodowiskowych: ${missing.join(", ")}.
-` + `  Bez nich sekret i token s\u0105 generowane w kontenerze i GIN\u0104 przy pierwszym
-` + `  recreate \u2014 hosty musia\u0142yby przeinstalowa\u0107 aplikacj\u0119, bez \u017Cadnego b\u0142\u0119du.
-` + `  Ustaw je w deployu (deploy.arc.json \u2192 envVars + deploy.arc.<env>.env).`);
+  err(`Federacja w produkcji wymaga zmiennej \u015Brodowiskowej ARC_PAIRING_TOKEN.
+` + `  Bez niej token parowania jest generowany w kontenerze i GINIE przy
+` + `  pierwszym recreate \u2014 parowania host\xF3w staj\u0105 si\u0119 martwe, bez b\u0142\u0119du.
+` + `  Ustaw j\u0105 w deployu (deploy.arc.json \u2192 envVars + deploy.arc.<env>.env).`);
   process.exit(1);
 }
 function resolveAppSecret(rootDir) {
@@ -39213,7 +39484,7 @@ function attachDevWatcher(ws, platform3, onReload) {
       isRebuilding = true;
       log2("Rebuilding...");
       try {
-        const next = await buildAll(ws);
+        const next = await buildAll(ws, { minify: false });
         platform3.setManifest(next);
         platform3.notifyReload(next);
         onReload?.();
@@ -39258,6 +39529,36 @@ async function platformDev(opts = {}) {
   });
 }
 
+// src/commands/platform-pairing-token.ts
+import { randomBytes as randomBytes3 } from "crypto";
+import { join as join24 } from "path";
+async function platformPairingToken() {
+  const ws = resolveWorkspace();
+  const { context: context2 } = await loadServerContext(ws);
+  if (!context2) {
+    err("Brak zbudowanego kontekstu. Uruchom najpierw `arc platform build`.");
+    process.exit(1);
+  }
+  const isProd = false;
+  const dbPath = join24(ws.rootDir, ".arc", "data", isProd ? "prod.db" : "dev.db");
+  const handler = await initContextHandler(context2, dbPath);
+  const code = randomBytes3(24).toString("base64url");
+  const res = await handler.executeCommand("pairingCode.issue", { code }, null, { internal: true });
+  if (!res?.ok) {
+    err(`Nie uda\u0142o si\u0119 zapisa\u0107 kodu parowania${res?.error ? `: ${res.error}` : ""}. ` + "Czy aplikacja wystawia agregat `pairingCode` (federacja)?");
+    process.exit(1);
+  }
+  process.stdout.write(`
+  Kod parowania (jednorazowy):
+
+    ${code}
+
+` + `  Podaj go w ho\u015Bcie przy instalacji aplikacji. Wygasa po pierwszym u\u017Cyciu.
+
+`);
+  process.exit(0);
+}
+
 // src/commands/platform-start.ts
 async function platformStart() {
   const ws = resolveWorkspace();
@@ -39275,8 +39576,9 @@ platform3.command("dev").description("Start platform in dev mode (Bun server + V
   map: opts.map,
   headless: opts.headless
 }));
-platform3.command("build").description("Build platform for production").option("--no-cache", "Force full rebuild").action((opts) => platformBuild({ noCache: opts.cache === false }));
+platform3.command("build").description("Build platform for production").option("--no-cache", "Force full rebuild").option("--stats", "Wypisz rozbicie chunk\xF3w na biblioteki (per-wej\u015Bcie raw/gzip + najci\u0119\u017Csze liby, ext/wewn). Wymusza pe\u0142ny build.").action((opts) => platformBuild({ noCache: opts.cache === false, stats: opts.stats }));
 platform3.command("start").description("Start platform in production mode (requires prior build)").action(platformStart);
+platform3.command("pairing-token").description("Generate a one-time federation pairing code (writes to DB, prints it)").action(platformPairingToken);
 platform3.command("deploy [env]").description("Deploy platform to a remote server (reads deploy.arc.json, surveys if missing)").option("--skip-build", "Skip local build step").option("--rebuild", "Force rebuild before deploy").option("--build-only", "Build the Docker image locally, then exit (no remote push)").option("--image-tag <hash>", "Roll back / pin to an existing image tag instead of building a new one").option("--force-bootstrap", "Re-run Ansible host bootstrap even if the server is already configured").action((env2, opts) => platformDeploy(env2, opts));
 program2.parse(process.argv);
 if (process.argv.length === 2) {