@databricks/appkit 0.72.0 → 0.74.0

package/dist/plugins/database/lifecycle.js

@@ -1,10 +1,13 @@
 import { createLogger } from "../../logging/logger.js";
+import { DatabaseValidationError } from "../../errors/database-validation.js";
+import "../../errors/index.js";
 import { createLakebasePool } from "../../connectors/lakebase/index.js";
 import { assertFinalizedSchema } from "../../database/schema-builder/define-schema.js";
 import { DatabasePluginError, classifyDatabaseError } from "../../database/errors.js";
-import { STATEMENT_TIMEOUT_MS } from "./defaults.js";
+import { IDLE_IN_TRANSACTION_TIMEOUT_MS, STATEMENT_TIMEOUT_MS, TRANSACTION_TIMEOUT_MS } from "./defaults.js";
 import { createDrizzleDataPath, createDrizzleDb } from "../../database/runtime/engine/drizzle-data-path.js";
 import { EntityClient } from "./entity-client.js";
+import { createMutationScope } from "./scope.js";
 
 //#region src/plugins/database/lifecycle.ts
 const logger = createLogger("database");
@@ -13,6 +16,7 @@ function buildSql(context) {
 	return async (strings, ...values) => {
 		try {
 			context.assertActive();
+			if (context.transactionBound) context.scope.consumeTransactionOperation();
 			return await context.getDataPath().raw(strings, ...values);
 		} catch (error) {
 			throw classifyDatabaseError(error, "read");
@@ -26,47 +30,76 @@ function buildTransactionClient(context) {
 		table,
 		getDataPath: context.getDataPath,
 		execute: context.execute,
-		assertActive: context.assertActive
+		assertActive: context.assertActive,
+		scope: context.scope,
+		hooks: context.hooks?.[name],
+		transactionBound: context.transactionBound,
+		runInTransaction: (run) => runTransaction(context, (tx) => run(entityOf(tx, name)))
 	});
 	result.sql = buildSql(context);
 	return result;
 }
+/** Typegen owns the entity keys, so reaching one by table name stays dynamic. */
+function entityOf(tx, name) {
+	return tx[name];
+}
+/** Reject from inside the driver callback so the driver rolls back on expiry. */
+function runWithTransactionDeadline(run) {
+	let timer;
+	const deadline = new Promise((_, reject) => {
+		timer = setTimeout(() => reject(new DatabasePluginError("TRANSIENT", "transaction")), TRANSACTION_TIMEOUT_MS);
+		timer.unref?.();
+	});
+	return Promise.race([Promise.resolve().then(run), deadline]).finally(() => clearTimeout(timer));
+}
+/**
+* Run inside one transaction, joining the active one rather than nesting:
+* PostgreSQL has no nested transaction, and a savepoint would let part of a
+* hooked mutation survive a rollback.
+*/
+function runTransaction(context, callback) {
+	context.assertActive();
+	const active = context.scope.activeTransaction();
+	if (active) return callback(active);
+	return context.getDataPath().transaction(async (txDataPath) => {
+		let open = true;
+		const assertTransactionActive = () => {
+			context.assertActive();
+			if (!open) throw new DatabasePluginError("INTERNAL", "transaction");
+		};
+		const directExecute = async (operation) => ({
+			ok: true,
+			data: await operation()
+		});
+		const tx = buildTransactionClient({
+			...context,
+			getDataPath: () => txDataPath,
+			execute: directExecute,
+			assertActive: assertTransactionActive,
+			transactionBound: true
+		});
+		try {
+			return await runWithTransactionDeadline(() => context.scope.runWithTransaction(tx, () => callback(tx)));
+		} finally {
+			open = false;
+		}
+	});
+}
 /** Add the transaction entry point to the root database surface. */
 function buildDatabaseExports(context) {
 	const result = buildTransactionClient(context);
 	result.transaction = async (callback) => {
 		try {
-			context.assertActive();
-			return await context.getDataPath().transaction(async (txDataPath) => {
-				let active = true;
-				const assertTransactionActive = () => {
-					context.assertActive();
-					if (!active) throw new DatabasePluginError("INTERNAL", "transaction");
-				};
-				const directExecute = async (operation) => ({
-					ok: true,
-					data: await operation()
-				});
-				const tx = buildTransactionClient({
-					...context,
-					getDataPath: () => txDataPath,
-					execute: directExecute,
-					assertActive: assertTransactionActive
-				});
-				try {
-					return await callback(tx);
-				} finally {
-					active = false;
-				}
-			});
+			return await runTransaction(context, callback);
 		} catch (error) {
+			if (error instanceof DatabaseValidationError) throw error;
 			throw classifyDatabaseError(error, "transaction");
 		}
 	};
 	return result;
 }
 /** Validate the schema, create one pool-backed API, and verify connectivity. */
-async function createDatabaseState(schema, execute) {
+async function createDatabaseState(schema, execute, hooks) {
 	try {
 		assertFinalizedSchema(schema);
 	} catch (error) {
@@ -79,13 +112,19 @@ async function createDatabaseState(schema, execute) {
 		if (!active) throw new DatabasePluginError("INTERNAL", "runtime");
 	};
 	try {
-		pool = createLakebasePool({ statement_timeout: STATEMENT_TIMEOUT_MS });
+		pool = createLakebasePool({
+			statement_timeout: STATEMENT_TIMEOUT_MS,
+			idle_in_transaction_session_timeout: IDLE_IN_TRANSACTION_TIMEOUT_MS
+		});
 		const dataPath = createDrizzleDataPath(createDrizzleDb(pool, schema), schema, { columnAccess: "trusted" });
 		const exports = buildDatabaseExports({
 			schema,
 			getDataPath: () => dataPath,
 			execute,
-			assertActive
+			assertActive,
+			scope: createMutationScope(),
+			hooks,
+			transactionBound: false
 		});
 		await dataPath.raw`select 1`;
 		return {

package/dist/plugins/database/lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.js","names":[],"sources":["../../../src/plugins/database/lifecycle.ts"],"sourcesContent":["import { createLakebasePool } from \"../../connectors/lakebase\";\nimport {\n  classifyDatabaseError,\n  DatabasePluginError,\n} from \"../../database/errors\";\nimport type { DataPath } from \"../../database/runtime\";\nimport {\n  createDrizzleDataPath,\n  createDrizzleDb,\n} from \"../../database/runtime/engine/drizzle-data-path\";\nimport type { Schema } from \"../../database/schema-builder\";\nimport { assertFinalizedSchema } from \"../../database/schema-builder/define-schema\";\nimport { createLogger } from \"../../logging/logger\";\nimport { STATEMENT_TIMEOUT_MS } from \"./defaults\";\nimport { EntityClient, type EntityExecute } from \"./entity-client\";\nimport type {\n  DatabaseExports,\n  SqlTag,\n  TransactionClient,\n} from \"./entity-types\";\n\nconst logger = createLogger(\"database\");\n\n/** Resources owned by one successfully initialized plugin instance. */\nexport interface DatabaseState {\n  readonly pool: ReturnType<typeof createLakebasePool>;\n  readonly exports: DatabaseExports;\n  readonly deactivate: () => void;\n}\n\ninterface ExportContext {\n  readonly schema: Schema;\n  readonly getDataPath: () => DataPath;\n  readonly execute: EntityExecute;\n  readonly assertActive: () => void;\n}\n\n/** Execute value-only SQL on the bound DataPath without per-statement retries. */\nfunction buildSql(context: ExportContext): SqlTag {\n  return async <T = Record<string, unknown>>(\n    strings: TemplateStringsArray,\n    ...values: unknown[]\n  ) => {\n    try {\n      context.assertActive();\n      // DataPath accepts value interpolation only and keeps Drizzle private.\n      return await context.getDataPath().raw<T>(strings, ...values);\n    } catch (error) {\n      throw classifyDatabaseError(error, \"read\");\n    }\n  };\n}\n\n/** Build entities and SQL bound to either the root pool or one transaction. */\nfunction buildTransactionClient(context: ExportContext): TransactionClient {\n  const result: Record<string, unknown> = Object.create(null);\n  for (const [name, table] of Object.entries(context.schema.$tables)) {\n    result[name] = new EntityClient({\n      table,\n      getDataPath: context.getDataPath,\n      execute: context.execute,\n      assertActive: context.assertActive,\n    });\n  }\n  result.sql = buildSql(context);\n  return result as TransactionClient;\n}\n\n/** Add the transaction entry point to the root database surface. */\nfunction buildDatabaseExports(context: ExportContext): DatabaseExports {\n  const result = buildTransactionClient(context) as DatabaseExports;\n  result.transaction = async <T>(\n    callback: (tx: TransactionClient) => Promise<T>,\n  ) => {\n    try {\n      context.assertActive();\n      return await context.getDataPath().transaction(async (txDataPath) => {\n        let active = true;\n        const assertTransactionActive = () => {\n          context.assertActive();\n          if (!active) throw new DatabasePluginError(\"INTERNAL\", \"transaction\");\n        };\n        // The outer transaction owns execution; inner clients use its connection.\n        const directExecute: EntityExecute = async (operation) => ({\n          ok: true,\n          data: await operation(),\n        });\n        const tx = buildTransactionClient({\n          ...context,\n          getDataPath: () => txDataPath,\n          execute: directExecute,\n          assertActive: assertTransactionActive,\n        });\n        try {\n          return await callback(tx);\n        } finally {\n          // Captured clients must not outlive the transaction callback.\n          active = false;\n        }\n      });\n    } catch (error) {\n      throw classifyDatabaseError(error, \"transaction\");\n    }\n  };\n  return result;\n}\n\n/** Validate the schema, create one pool-backed API, and verify connectivity. */\nexport async function createDatabaseState<TSchema extends Schema>(\n  schema: TSchema,\n  execute: EntityExecute,\n): Promise<DatabaseState> {\n  try {\n    assertFinalizedSchema(schema);\n  } catch (error) {\n    logger.error(\"Database schema failed validation: %O\", error);\n    throw new DatabasePluginError(\"SETUP_FAILED\", \"setup\");\n  }\n\n  let active = true;\n  let pool: ReturnType<typeof createLakebasePool> | undefined;\n  const assertActive = () => {\n    if (!active) throw new DatabasePluginError(\"INTERNAL\", \"runtime\");\n  };\n  try {\n    pool = createLakebasePool({ statement_timeout: STATEMENT_TIMEOUT_MS });\n    const db = createDrizzleDb(pool, schema);\n    const dataPath = createDrizzleDataPath(db, schema, {\n      columnAccess: \"trusted\",\n    });\n    const exports = buildDatabaseExports({\n      schema,\n      getDataPath: () => dataPath,\n      execute,\n      assertActive,\n    });\n    // Do not publish exports until an authenticated statement succeeds.\n    await dataPath.raw`select 1`;\n    return {\n      pool,\n      exports,\n      deactivate: () => {\n        active = false;\n      },\n    };\n  } catch (error) {\n    logger.error(\"Database setup failed: %O\", error);\n    active = false;\n    await pool?.end().catch(() => undefined);\n    throw new DatabasePluginError(\"SETUP_FAILED\", \"setup\");\n  }\n}\n"],"mappings":";;;;;;;;;AAqBA,MAAM,SAAS,aAAa,WAAW;;AAiBvC,SAAS,SAAS,SAAgC;AAChD,QAAO,OACL,SACA,GAAG,WACA;AACH,MAAI;AACF,WAAQ,cAAc;AAEtB,UAAO,MAAM,QAAQ,aAAa,CAAC,IAAO,SAAS,GAAG,OAAO;WACtD,OAAO;AACd,SAAM,sBAAsB,OAAO,OAAO;;;;;AAMhD,SAAS,uBAAuB,SAA2C;CACzE,MAAM,SAAkC,OAAO,OAAO,KAAK;AAC3D,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,CAChE,QAAO,QAAQ,IAAI,aAAa;EAC9B;EACA,aAAa,QAAQ;EACrB,SAAS,QAAQ;EACjB,cAAc,QAAQ;EACvB,CAAC;AAEJ,QAAO,MAAM,SAAS,QAAQ;AAC9B,QAAO;;;AAIT,SAAS,qBAAqB,SAAyC;CACrE,MAAM,SAAS,uBAAuB,QAAQ;AAC9C,QAAO,cAAc,OACnB,aACG;AACH,MAAI;AACF,WAAQ,cAAc;AACtB,UAAO,MAAM,QAAQ,aAAa,CAAC,YAAY,OAAO,eAAe;IACnE,IAAI,SAAS;IACb,MAAM,gCAAgC;AACpC,aAAQ,cAAc;AACtB,SAAI,CAAC,OAAQ,OAAM,IAAI,oBAAoB,YAAY,cAAc;;IAGvE,MAAM,gBAA+B,OAAO,eAAe;KACzD,IAAI;KACJ,MAAM,MAAM,WAAW;KACxB;IACD,MAAM,KAAK,uBAAuB;KAChC,GAAG;KACH,mBAAmB;KACnB,SAAS;KACT,cAAc;KACf,CAAC;AACF,QAAI;AACF,YAAO,MAAM,SAAS,GAAG;cACjB;AAER,cAAS;;KAEX;WACK,OAAO;AACd,SAAM,sBAAsB,OAAO,cAAc;;;AAGrD,QAAO;;;AAIT,eAAsB,oBACpB,QACA,SACwB;AACxB,KAAI;AACF,wBAAsB,OAAO;UACtB,OAAO;AACd,SAAO,MAAM,yCAAyC,MAAM;AAC5D,QAAM,IAAI,oBAAoB,gBAAgB,QAAQ;;CAGxD,IAAI,SAAS;CACb,IAAI;CACJ,MAAM,qBAAqB;AACzB,MAAI,CAAC,OAAQ,OAAM,IAAI,oBAAoB,YAAY,UAAU;;AAEnE,KAAI;AACF,SAAO,mBAAmB,EAAE,mBAAmB,sBAAsB,CAAC;EAEtE,MAAM,WAAW,sBADN,gBAAgB,MAAM,OAAO,EACG,QAAQ,EACjD,cAAc,WACf,CAAC;EACF,MAAM,UAAU,qBAAqB;GACnC;GACA,mBAAmB;GACnB;GACA;GACD,CAAC;AAEF,QAAM,SAAS,GAAG;AAClB,SAAO;GACL;GACA;GACA,kBAAkB;AAChB,aAAS;;GAEZ;UACM,OAAO;AACd,SAAO,MAAM,6BAA6B,MAAM;AAChD,WAAS;AACT,QAAM,MAAM,KAAK,CAAC,YAAY,OAAU;AACxC,QAAM,IAAI,oBAAoB,gBAAgB,QAAQ"}
+{"version":3,"file":"lifecycle.js","names":[],"sources":["../../../src/plugins/database/lifecycle.ts"],"sourcesContent":["import { createLakebasePool } from \"../../connectors/lakebase\";\nimport {\n  classifyDatabaseError,\n  DatabasePluginError,\n} from \"../../database/errors\";\nimport type { DataPath } from \"../../database/runtime\";\nimport {\n  createDrizzleDataPath,\n  createDrizzleDb,\n} from \"../../database/runtime/engine/drizzle-data-path\";\nimport type { Schema } from \"../../database/schema-builder\";\nimport { assertFinalizedSchema } from \"../../database/schema-builder/define-schema\";\nimport { DatabaseValidationError } from \"../../errors\";\nimport { createLogger } from \"../../logging/logger\";\nimport {\n  IDLE_IN_TRANSACTION_TIMEOUT_MS,\n  STATEMENT_TIMEOUT_MS,\n  TRANSACTION_TIMEOUT_MS,\n} from \"./defaults\";\nimport { EntityClient, type EntityExecute } from \"./entity-client\";\nimport type {\n  DatabaseExports,\n  SqlTag,\n  TransactionClient,\n} from \"./entity-types\";\nimport { createMutationScope, type MutationScope } from \"./scope\";\nimport type { DatabaseHooks } from \"./types\";\n\nconst logger = createLogger(\"database\");\n\n/** Resources owned by one successfully initialized plugin instance. */\nexport interface DatabaseState {\n  readonly pool: ReturnType<typeof createLakebasePool>;\n  readonly exports: DatabaseExports;\n  readonly deactivate: () => void;\n}\n\ninterface ExportContext {\n  readonly schema: Schema;\n  readonly getDataPath: () => DataPath;\n  readonly execute: EntityExecute;\n  readonly assertActive: () => void;\n  readonly scope: MutationScope;\n  readonly hooks?: DatabaseHooks;\n  readonly transactionBound: boolean;\n}\n\n/** Execute value-only SQL on the bound DataPath without per-statement retries. */\nfunction buildSql(context: ExportContext): SqlTag {\n  return async <T = Record<string, unknown>>(\n    strings: TemplateStringsArray,\n    ...values: unknown[]\n  ) => {\n    try {\n      context.assertActive();\n      if (context.transactionBound) {\n        context.scope.consumeTransactionOperation();\n      }\n      // DataPath accepts value interpolation only and keeps Drizzle private.\n      return await context.getDataPath().raw<T>(strings, ...values);\n    } catch (error) {\n      throw classifyDatabaseError(error, \"read\");\n    }\n  };\n}\n\n/** Build entities and SQL bound to either the root pool or one transaction. */\nfunction buildTransactionClient(context: ExportContext): TransactionClient {\n  const result: Record<string, unknown> = Object.create(null);\n  for (const [name, table] of Object.entries(context.schema.$tables)) {\n    result[name] = new EntityClient({\n      table,\n      getDataPath: context.getDataPath,\n      execute: context.execute,\n      assertActive: context.assertActive,\n      scope: context.scope,\n      hooks: context.hooks?.[name],\n      transactionBound: context.transactionBound,\n      runInTransaction: (run) =>\n        runTransaction(context, (tx) => run(entityOf(tx, name))),\n    });\n  }\n  result.sql = buildSql(context);\n  return result as TransactionClient;\n}\n\n/** Typegen owns the entity keys, so reaching one by table name stays dynamic. */\nfunction entityOf(tx: TransactionClient, name: string): EntityClient {\n  return (tx as unknown as Record<string, EntityClient>)[name];\n}\n\n/** Reject from inside the driver callback so the driver rolls back on expiry. */\nfunction runWithTransactionDeadline<T>(run: () => Promise<T>): Promise<T> {\n  let timer: ReturnType<typeof setTimeout>;\n  const deadline = new Promise<never>((_, reject) => {\n    timer = setTimeout(\n      () => reject(new DatabasePluginError(\"TRANSIENT\", \"transaction\")),\n      TRANSACTION_TIMEOUT_MS,\n    );\n    timer.unref?.();\n  });\n  return Promise.race([Promise.resolve().then(run), deadline]).finally(() =>\n    clearTimeout(timer),\n  );\n}\n\n/**\n * Run inside one transaction, joining the active one rather than nesting:\n * PostgreSQL has no nested transaction, and a savepoint would let part of a\n * hooked mutation survive a rollback.\n */\nfunction runTransaction<T>(\n  context: ExportContext,\n  callback: (tx: TransactionClient) => Promise<T>,\n): Promise<T> {\n  context.assertActive();\n  const active = context.scope.activeTransaction();\n  if (active) return callback(active);\n  return context.getDataPath().transaction(async (txDataPath) => {\n    let open = true;\n    const assertTransactionActive = () => {\n      context.assertActive();\n      if (!open) throw new DatabasePluginError(\"INTERNAL\", \"transaction\");\n    };\n    // The outer transaction owns execution; inner clients use its connection.\n    const directExecute: EntityExecute = async (operation) => ({\n      ok: true,\n      data: await operation(),\n    });\n    const tx = buildTransactionClient({\n      ...context,\n      getDataPath: () => txDataPath,\n      execute: directExecute,\n      assertActive: assertTransactionActive,\n      transactionBound: true,\n    });\n    try {\n      return await runWithTransactionDeadline(() =>\n        context.scope.runWithTransaction(tx, () => callback(tx)),\n      );\n    } finally {\n      // Captured clients must not outlive the transaction callback.\n      open = false;\n    }\n  });\n}\n\n/** Add the transaction entry point to the root database surface. */\nfunction buildDatabaseExports(context: ExportContext): DatabaseExports {\n  const result = buildTransactionClient(context) as DatabaseExports;\n  result.transaction = async <T>(\n    callback: (tx: TransactionClient) => Promise<T>,\n  ) => {\n    try {\n      return await runTransaction(context, callback);\n    } catch (error) {\n      if (error instanceof DatabaseValidationError) throw error;\n      throw classifyDatabaseError(error, \"transaction\");\n    }\n  };\n  return result;\n}\n\n/** Validate the schema, create one pool-backed API, and verify connectivity. */\nexport async function createDatabaseState<TSchema extends Schema>(\n  schema: TSchema,\n  execute: EntityExecute,\n  hooks?: DatabaseHooks,\n): Promise<DatabaseState> {\n  try {\n    assertFinalizedSchema(schema);\n  } catch (error) {\n    logger.error(\"Database schema failed validation: %O\", error);\n    throw new DatabasePluginError(\"SETUP_FAILED\", \"setup\");\n  }\n\n  let active = true;\n  let pool: ReturnType<typeof createLakebasePool> | undefined;\n  const assertActive = () => {\n    if (!active) throw new DatabasePluginError(\"INTERNAL\", \"runtime\");\n  };\n  try {\n    pool = createLakebasePool({\n      statement_timeout: STATEMENT_TIMEOUT_MS,\n      idle_in_transaction_session_timeout: IDLE_IN_TRANSACTION_TIMEOUT_MS,\n    });\n    const db = createDrizzleDb(pool, schema);\n    const dataPath = createDrizzleDataPath(db, schema, {\n      columnAccess: \"trusted\",\n    });\n    const exports = buildDatabaseExports({\n      schema,\n      getDataPath: () => dataPath,\n      execute,\n      assertActive,\n      // One scope per state keeps concurrent instances from sharing a transaction.\n      scope: createMutationScope(),\n      hooks,\n      transactionBound: false,\n    });\n    // Do not publish exports until an authenticated statement succeeds.\n    await dataPath.raw`select 1`;\n    return {\n      pool,\n      exports,\n      deactivate: () => {\n        active = false;\n      },\n    };\n  } catch (error) {\n    logger.error(\"Database setup failed: %O\", error);\n    active = false;\n    await pool?.end().catch(() => undefined);\n    throw new DatabasePluginError(\"SETUP_FAILED\", \"setup\");\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA4BA,MAAM,SAAS,aAAa,WAAW;;AAoBvC,SAAS,SAAS,SAAgC;AAChD,QAAO,OACL,SACA,GAAG,WACA;AACH,MAAI;AACF,WAAQ,cAAc;AACtB,OAAI,QAAQ,iBACV,SAAQ,MAAM,6BAA6B;AAG7C,UAAO,MAAM,QAAQ,aAAa,CAAC,IAAO,SAAS,GAAG,OAAO;WACtD,OAAO;AACd,SAAM,sBAAsB,OAAO,OAAO;;;;;AAMhD,SAAS,uBAAuB,SAA2C;CACzE,MAAM,SAAkC,OAAO,OAAO,KAAK;AAC3D,MAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAQ,QAAQ,OAAO,QAAQ,CAChE,QAAO,QAAQ,IAAI,aAAa;EAC9B;EACA,aAAa,QAAQ;EACrB,SAAS,QAAQ;EACjB,cAAc,QAAQ;EACtB,OAAO,QAAQ;EACf,OAAO,QAAQ,QAAQ;EACvB,kBAAkB,QAAQ;EAC1B,mBAAmB,QACjB,eAAe,UAAU,OAAO,IAAI,SAAS,IAAI,KAAK,CAAC,CAAC;EAC3D,CAAC;AAEJ,QAAO,MAAM,SAAS,QAAQ;AAC9B,QAAO;;;AAIT,SAAS,SAAS,IAAuB,MAA4B;AACnE,QAAQ,GAA+C;;;AAIzD,SAAS,2BAA8B,KAAmC;CACxE,IAAI;CACJ,MAAM,WAAW,IAAI,SAAgB,GAAG,WAAW;AACjD,UAAQ,iBACA,OAAO,IAAI,oBAAoB,aAAa,cAAc,CAAC,EACjE,uBACD;AACD,QAAM,SAAS;GACf;AACF,QAAO,QAAQ,KAAK,CAAC,QAAQ,SAAS,CAAC,KAAK,IAAI,EAAE,SAAS,CAAC,CAAC,cAC3D,aAAa,MAAM,CACpB;;;;;;;AAQH,SAAS,eACP,SACA,UACY;AACZ,SAAQ,cAAc;CACtB,MAAM,SAAS,QAAQ,MAAM,mBAAmB;AAChD,KAAI,OAAQ,QAAO,SAAS,OAAO;AACnC,QAAO,QAAQ,aAAa,CAAC,YAAY,OAAO,eAAe;EAC7D,IAAI,OAAO;EACX,MAAM,gCAAgC;AACpC,WAAQ,cAAc;AACtB,OAAI,CAAC,KAAM,OAAM,IAAI,oBAAoB,YAAY,cAAc;;EAGrE,MAAM,gBAA+B,OAAO,eAAe;GACzD,IAAI;GACJ,MAAM,MAAM,WAAW;GACxB;EACD,MAAM,KAAK,uBAAuB;GAChC,GAAG;GACH,mBAAmB;GACnB,SAAS;GACT,cAAc;GACd,kBAAkB;GACnB,CAAC;AACF,MAAI;AACF,UAAO,MAAM,iCACX,QAAQ,MAAM,mBAAmB,UAAU,SAAS,GAAG,CAAC,CACzD;YACO;AAER,UAAO;;GAET;;;AAIJ,SAAS,qBAAqB,SAAyC;CACrE,MAAM,SAAS,uBAAuB,QAAQ;AAC9C,QAAO,cAAc,OACnB,aACG;AACH,MAAI;AACF,UAAO,MAAM,eAAe,SAAS,SAAS;WACvC,OAAO;AACd,OAAI,iBAAiB,wBAAyB,OAAM;AACpD,SAAM,sBAAsB,OAAO,cAAc;;;AAGrD,QAAO;;;AAIT,eAAsB,oBACpB,QACA,SACA,OACwB;AACxB,KAAI;AACF,wBAAsB,OAAO;UACtB,OAAO;AACd,SAAO,MAAM,yCAAyC,MAAM;AAC5D,QAAM,IAAI,oBAAoB,gBAAgB,QAAQ;;CAGxD,IAAI,SAAS;CACb,IAAI;CACJ,MAAM,qBAAqB;AACzB,MAAI,CAAC,OAAQ,OAAM,IAAI,oBAAoB,YAAY,UAAU;;AAEnE,KAAI;AACF,SAAO,mBAAmB;GACxB,mBAAmB;GACnB,qCAAqC;GACtC,CAAC;EAEF,MAAM,WAAW,sBADN,gBAAgB,MAAM,OAAO,EACG,QAAQ,EACjD,cAAc,WACf,CAAC;EACF,MAAM,UAAU,qBAAqB;GACnC;GACA,mBAAmB;GACnB;GACA;GAEA,OAAO,qBAAqB;GAC5B;GACA,kBAAkB;GACnB,CAAC;AAEF,QAAM,SAAS,GAAG;AAClB,SAAO;GACL;GACA;GACA,kBAAkB;AAChB,aAAS;;GAEZ;UACM,OAAO;AACd,SAAO,MAAM,6BAA6B,MAAM;AAChD,WAAS;AACT,QAAM,MAAM,KAAK,CAAC,YAAY,OAAU;AACxC,QAAM,IAAI,oBAAoB,gBAAgB,QAAQ"}

package/dist/plugins/database/scope.js

@@ -0,0 +1,58 @@
+import { DatabasePluginError } from "../../database/errors.js";
+import { AsyncLocalStorage } from "node:async_hooks";
+
+//#region src/plugins/database/scope.ts
+/** How deep hook-issued mutations may nest before the guard rejects. */
+const MAX_MUTATION_DEPTH = 8;
+/** Max database operations admitted by one transaction. */
+const MAX_TRANSACTION_OPERATIONS = 100;
+/** Charge one operation to a transaction-owned shared budget. */
+function consumeBudget(state, phase) {
+	const budget = state?.budget ?? { used: 0 };
+	if (budget.used >= MAX_TRANSACTION_OPERATIONS) throw new DatabasePluginError("INTERNAL", phase);
+	budget.used += 1;
+	return budget;
+}
+/**
+* Async context owned by one plugin instance. It carries the transaction,
+* mutation budget, and frames that bound recursion, so neither two instances
+* nor two concurrent calls can observe each other.
+*/
+function createMutationScope() {
+	const storage = new AsyncLocalStorage();
+	return {
+		activeTransaction() {
+			return storage.getStore()?.transaction;
+		},
+		runWithTransaction(transaction, run) {
+			const current = storage.getStore();
+			return storage.run({
+				transaction,
+				frames: current?.frames ?? [],
+				budget: current?.budget ?? { used: 0 }
+			}, run);
+		},
+		consumeTransactionOperation() {
+			const state = storage.getStore();
+			if (state?.transaction) consumeBudget(state, "transaction");
+		},
+		async runMutation(entity, operation, run) {
+			const state = storage.getStore();
+			const frames = state?.frames ?? [];
+			if (frames.some((frame) => frame.entity === entity && frame.operation === operation) || frames.length >= MAX_MUTATION_DEPTH) throw new DatabasePluginError("INTERNAL", "write");
+			const budget = consumeBudget(state, "write");
+			return storage.run({
+				transaction: state?.transaction,
+				frames: [...frames, {
+					entity,
+					operation
+				}],
+				budget
+			}, run);
+		}
+	};
+}
+
+//#endregion
+export { createMutationScope };
+//# sourceMappingURL=scope.js.map

package/dist/plugins/database/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","names":[],"sources":["../../../src/plugins/database/scope.ts"],"sourcesContent":["import { AsyncLocalStorage } from \"node:async_hooks\";\n\nimport { DatabasePluginError } from \"../../database/errors\";\nimport type { TransactionClient } from \"./entity-types\";\nimport type { MutationOperation } from \"./hooks\";\n\n/** How deep hook-issued mutations may nest before the guard rejects. */\nconst MAX_MUTATION_DEPTH = 8;\n/** Max database operations admitted by one transaction. */\nexport const MAX_TRANSACTION_OPERATIONS = 100;\n\ninterface MutationFrame {\n  readonly entity: string;\n  readonly operation: MutationOperation;\n}\n\ninterface MutationBudget {\n  used: number;\n}\n\ninterface ScopeState {\n  readonly transaction?: TransactionClient;\n  readonly frames: readonly MutationFrame[];\n  readonly budget: MutationBudget;\n}\n\n/** Charge one operation to a transaction-owned shared budget. */\nfunction consumeBudget(\n  state: ScopeState | undefined,\n  phase: \"transaction\" | \"write\",\n): MutationBudget {\n  const budget = state?.budget ?? { used: 0 };\n  if (budget.used >= MAX_TRANSACTION_OPERATIONS) {\n    throw new DatabasePluginError(\"INTERNAL\", phase);\n  }\n  budget.used += 1;\n  return budget;\n}\n\n/** Instance-owned async context created by `createMutationScope()`. */\nexport type MutationScope = ReturnType<typeof createMutationScope>;\n\n/**\n * Async context owned by one plugin instance. It carries the transaction,\n * mutation budget, and frames that bound recursion, so neither two instances\n * nor two concurrent calls can observe each other.\n */\nexport function createMutationScope() {\n  const storage = new AsyncLocalStorage<ScopeState>();\n\n  return {\n    /** The transaction a hook must join, or `undefined` outside one. */\n    activeTransaction(): TransactionClient | undefined {\n      return storage.getStore()?.transaction;\n    },\n\n    /** Publish one transaction to everything the callback awaits. */\n    runWithTransaction<T>(\n      transaction: TransactionClient,\n      run: () => Promise<T>,\n    ): Promise<T> {\n      const current = storage.getStore();\n      return storage.run(\n        {\n          transaction,\n          frames: current?.frames ?? [],\n          budget: current?.budget ?? { used: 0 },\n        },\n        run,\n      );\n    },\n\n    /** Charge SQL and other direct work bound to the active transaction. */\n    consumeTransactionOperation(): void {\n      const state = storage.getStore();\n      if (state?.transaction) consumeBudget(state, \"transaction\");\n    },\n\n    /** Open one frame, refusing a repeated entity/operation pair or deep nesting. */\n    async runMutation<T>(\n      entity: string,\n      operation: MutationOperation,\n      run: () => Promise<T>,\n    ): Promise<T> {\n      const state = storage.getStore();\n      const frames = state?.frames ?? [];\n      const repeated = frames.some(\n        (frame) => frame.entity === entity && frame.operation === operation,\n      );\n      if (repeated || frames.length >= MAX_MUTATION_DEPTH) {\n        throw new DatabasePluginError(\"INTERNAL\", \"write\");\n      }\n      const budget = consumeBudget(state, \"write\");\n      return storage.run(\n        {\n          transaction: state?.transaction,\n          frames: [...frames, { entity, operation }],\n          budget,\n        },\n        run,\n      );\n    },\n  };\n}\n"],"mappings":";;;;;AAOA,MAAM,qBAAqB;;AAE3B,MAAa,6BAA6B;;AAkB1C,SAAS,cACP,OACA,OACgB;CAChB,MAAM,SAAS,OAAO,UAAU,EAAE,MAAM,GAAG;AAC3C,KAAI,OAAO,QAAQ,2BACjB,OAAM,IAAI,oBAAoB,YAAY,MAAM;AAElD,QAAO,QAAQ;AACf,QAAO;;;;;;;AAWT,SAAgB,sBAAsB;CACpC,MAAM,UAAU,IAAI,mBAA+B;AAEnD,QAAO;EAEL,oBAAmD;AACjD,UAAO,QAAQ,UAAU,EAAE;;EAI7B,mBACE,aACA,KACY;GACZ,MAAM,UAAU,QAAQ,UAAU;AAClC,UAAO,QAAQ,IACb;IACE;IACA,QAAQ,SAAS,UAAU,EAAE;IAC7B,QAAQ,SAAS,UAAU,EAAE,MAAM,GAAG;IACvC,EACD,IACD;;EAIH,8BAAoC;GAClC,MAAM,QAAQ,QAAQ,UAAU;AAChC,OAAI,OAAO,YAAa,eAAc,OAAO,cAAc;;EAI7D,MAAM,YACJ,QACA,WACA,KACY;GACZ,MAAM,QAAQ,QAAQ,UAAU;GAChC,MAAM,SAAS,OAAO,UAAU,EAAE;AAIlC,OAHiB,OAAO,MACrB,UAAU,MAAM,WAAW,UAAU,MAAM,cAAc,UAC3D,IACe,OAAO,UAAU,mBAC/B,OAAM,IAAI,oBAAoB,YAAY,QAAQ;GAEpD,MAAM,SAAS,cAAc,OAAO,QAAQ;AAC5C,UAAO,QAAQ,IACb;IACE,aAAa,OAAO;IACpB,QAAQ,CAAC,GAAG,QAAQ;KAAE;KAAQ;KAAW,CAAC;IAC1C;IACD,EACD,IACD;;EAEJ"}

package/dist/plugins/database/types.d.ts

@@ -1,22 +1,36 @@
 import { Schema } from "../../database/schema-builder/types.js";
+import { EntityMutationHooks } from "./hooks.js";
 
 //#region src/plugins/database/types.d.ts
 /** Table names declared by one finalized schema. */
 type SchemaTableName<TSchema extends Schema> = Extract<keyof TSchema["$tables"], string>;
+/** Generated HTTP write operations. */
+type DatabaseApiWriteOperation = "create" | "update" | "delete";
+/** All writes by default; false keeps reads only, and an object narrows writes. */
+type DatabaseApiWritesConfig<TSchema extends Schema> = boolean | {
+  /** Tables that remain writable. Defaults to every exposed table. */readonly tables?: readonly SchemaTableName<TSchema>[]; /** Operations that remain enabled. Defaults to create, update, and delete. */
+  readonly operations?: readonly DatabaseApiWriteOperation[];
+};
 /**
- * Generated read exposure: off by default, every table, or an explicit list.
+ * Full generated CRUD for every declared table by default. Set false to disable
+ * all generated routes, or use an object to restrict tables and writes.
+ * Keyed routes require a public primary key; upsert stays programmatic.
+ * Route names must start with a letter, contain only letters, digits, `_`, or
+ * `-`, be at most 64 characters, and be unique ignoring case. Invalid names
+ * fail setup; exclude internal tables with `api.tables` or use `api: false`.
  *
- * Reads run as the app's service principal and apply no per-user filter, so an
- * enabled table is readable by anyone the app admits. Enabling a table also
- * makes it includable from its neighbours; a relation whose target stays off
- * cannot be included, which keeps one table's data behind one decision.
+ * Routes run as the app's service principal and apply no per-user filter, so
+ * anyone the app admits receives every enabled operation. An exposed table
+ * also becomes includable from its neighbours; a relation whose target
+ * stays off cannot be included.
  *
  * Text filters accept caller-supplied `like`/`ilike` patterns; a server-side
  * `statement_timeout` cancels a pattern that would otherwise hold its pooled
  * connection to completion.
  */
-type CrudRoutesConfig<TSchema extends Schema> = boolean | {
-  readonly tables: readonly SchemaTableName<TSchema>[];
+type DatabaseApiConfig<TSchema extends Schema> = boolean | {
+  /** Tables that remain exposed. Defaults to every declared table. */readonly tables?: readonly SchemaTableName<TSchema>[]; /** All writes by default. Set false for read-only routes. */
+  readonly writes?: DatabaseApiWritesConfig<TSchema>;
 };
 /** Which entity and generated operation produced the row being shaped. */
 interface ReadSerializerContext {
@@ -29,14 +43,28 @@ interface ReadSerializerContext {
  * serializers run inside the response path and must not add latency there.
  */
 type ReadSerializer = (row: Record<string, unknown>, context: ReadSerializerContext) => Record<string, unknown>;
+/** Response shaping and mutation lifecycle declared for one table. */
+type EntityHooks<TTable extends string = string> = EntityMutationHooks<TTable> & {
+  readonly serialize?: ReadSerializer;
+};
 /** Configuration for one schema-bound DatabasePlugin instance. */
 type IDatabaseConfig<TSchema extends Schema> = {
   readonly schema: TSchema;
-  readonly crudRoutes?: CrudRoutesConfig<TSchema>;
-  readonly hooks?: { readonly [TTable in SchemaTableName<TSchema>]?: {
-    readonly serialize?: ReadSerializer;
-  } };
+  /**
+   * Generated HTTP CRUD is enabled for all tables by default, using the app's
+   * service principal. Every admitted caller receives the enabled operations;
+   * no per-user or per-row authorization is applied. This plugin does not
+   * support OBO. Use custom routes for application-specific authorization.
+   *
+   * Set `false` to disable routes, `{ writes: false }` for reads only, or
+   * `{ tables: ["notes"] }` to expose only selected tables. To disable delete,
+   * use `{ writes: { operations: ["create", "update"] } }`.
+   *
+   * @defaultValue true
+   */
+  readonly api?: DatabaseApiConfig<TSchema>;
+  readonly hooks?: { readonly [TTable in SchemaTableName<TSchema>]?: EntityHooks<TTable> };
 };
 //#endregion
-export { IDatabaseConfig };
+export { DatabaseApiConfig, DatabaseApiWriteOperation, DatabaseApiWritesConfig, EntityHooks, IDatabaseConfig, ReadSerializer, ReadSerializerContext };
 //# sourceMappingURL=types.d.ts.map

package/dist/plugins/database/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","names":[],"sources":["../../../src/plugins/database/types.ts"],"mappings":";;;;KAGY,eAAA,iBAAgC,MAAA,IAAU,OAAA,OAC9C,OAAA;AADR;;;;;;;;;;;;AAAA,KAiBY,gBAAA,iBAAiC,MAAA;EAAA,SAE9B,MAAA,WAAiB,eAAA,CAAgB,OAAA;AAAA;;UAG/B,qBAAA;EAAA,SACN,MAAA;EAAA,SACA,SAAA;AAAA;;;;;;KAQC,cAAA,IACV,GAAA,EAAK,MAAA,mBACL,OAAA,EAAS,qBAAA,KACN,MAAA;;KAGO,eAAA,iBAAgC,MAAA;EAAA,SACjC,MAAA,EAAQ,OAAA;EAAA,SACR,UAAA,GAAa,gBAAA,CAAiB,OAAA;EAAA,SAC9B,KAAA,yBACa,eAAA,CAAgB,OAAA;IAAA,SACzB,SAAA,GAAY,cAAA;EAAA;AAAA"}
+{"version":3,"file":"types.d.ts","names":[],"sources":["../../../src/plugins/database/types.ts"],"mappings":";;;;;KAIY,eAAA,iBAAgC,MAAA,IAAU,OAAA,OAC9C,OAAA;AADR;AAAA,KAMY,yBAAA;;KAGA,uBAAA,iBAAwC,MAAA;EAR5C,6EAYO,MAAA,YAAkB,eAAA,CAAgB,OAAA,KAbY;EAAA,SAe9C,UAAA,YAAsB,yBAAA;AAAA;;;;;;AATrC;;;;;AAGA;;;;;;;KA0BY,iBAAA,iBAAkC,MAAA;EApBgB,6EAwB/C,MAAA,YAAkB,eAAA,CAAgB,OAAA,KA9BG;EAAA,SAgCrC,MAAA,GAAS,uBAAA,CAAwB,OAAA;AAAA;;UAI/B,qBAAA;EAAA,SACN,MAAA;EAAA,SACA,SAAA;AAAA;AAZX;;;;;AAAA,KAoBY,cAAA,IACV,GAAA,EAAK,MAAA,mBACL,OAAA,EAAS,qBAAA,KACN,MAAA;;KAGO,WAAA,mCACV,mBAAA,CAAoB,MAAA;EAAA,SACT,SAAA,GAAY,cAAA;AAAA;;KAOb,eAAA,iBAAgC,MAAA;EAAA,SACjC,MAAA,EAAQ,OAAA;EA9BJ;;;;;AAIf;;;;;AAUA;;EAde,SA2CJ,GAAA,GAAM,iBAAA,CAAkB,OAAA;EAAA,SACxB,KAAA,yBACa,eAAA,CAAgB,OAAA,KAAY,WAAA,CAAY,MAAA;AAAA"}

package/dist/plugins/server/index.js

@@ -19,7 +19,7 @@ import { getRoutes, printRoutes } from "./utils.js";
 import { StaticServer } from "./static-server.js";
 import { ViteDevServer } from "./vite-dev-server.js";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import dotenv from "dotenv";
 import express from "express";
 import getPort, { portNumbers } from "get-port";
@@ -246,7 +246,7 @@ var ServerPlugin = class ServerPlugin extends Plugin {
 		const cwd = process.cwd();
 		for (const p of staticPaths) {
 			const fullPath = path.resolve(cwd, p);
-			if (fs.existsSync(path.resolve(fullPath, "index.html"))) {
+			if (fsSync.existsSync(path.resolve(fullPath, "index.html"))) {
 				logger.debug("Static files: serving from %s", fullPath);
 				return fullPath;
 			}

package/dist/plugins/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["manifest"],"sources":["../../../src/plugins/server/index.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport type { Server as HTTPServer } from \"node:http\";\nimport path from \"node:path\";\n\nimport dotenv from \"dotenv\";\nimport express from \"express\";\nimport getPort, { portNumbers } from \"get-port\";\nimport type { PluginClientConfigs, PluginPhase } from \"shared\";\nimport { camelToKebab } from \"shared\";\n\nimport { AppKitError, ServerError } from \"../../errors\";\nimport { TelemetryReporter } from \"../../internal-telemetry\";\nimport { createLogger } from \"../../logging/logger\";\nimport { Plugin, toPlugin } from \"../../plugin\";\nimport { defineManifest } from \"../../registry\";\nimport { instrumentations } from \"../../telemetry\";\nimport { sanitizeClientConfig } from \"./client-config-sanitizer\";\nimport manifest from \"./manifest.json\";\nimport { RemoteTunnelController } from \"./remote-tunnel/remote-tunnel-controller\";\nimport { StaticServer } from \"./static-server\";\nimport type { ServerConfig } from \"./types\";\nimport { getRoutes, type PluginEndpoints, printRoutes } from \"./utils\";\nimport { ViteDevServer } from \"./vite-dev-server\";\n\ndotenv.config({ path: path.resolve(process.cwd(), \"./.env\") });\n\nconst logger = createLogger(\"server\");\n\n/** Dev-only: try `requested` then consecutive ports (see `get-port` `portNumbers`). */\nconst devListenPortSpan = 100;\n\n/**\n * Server plugin for the AppKit.\n *\n * This plugin is responsible for starting the server and serving the static files.\n * It also handles the remote tunneling for development purposes.\n *\n * The server is started automatically by `createApp` after all plugins are set up\n * and the optional `onPluginsReady` callback has run.\n *\n * @example\n * ```ts\n * createApp({\n *   plugins: [server(), analytics({})],\n *   onPluginsReady(appkit) {\n *     appkit.server.extend((app) => {\n *       app.get(\"/custom\", (_req, res) => res.json({ ok: true }));\n *     });\n *   },\n * });\n * ```\n *\n */\nexport class ServerPlugin extends Plugin {\n  public static DEFAULT_CONFIG = {\n    host: process.env.FLASK_RUN_HOST || \"0.0.0.0\",\n    port: Number(process.env.DATABRICKS_APP_PORT) || 8000,\n  };\n\n  /**\n   * Budget for awaiting `server.close()` during shutdown. Bounded because\n   * `closeAllConnections()` runs immediately before the await, so the close\n   * is expected to resolve promptly; the core lifecycle manager's overall\n   * force-exit timer is the ultimate backstop if it does not.\n   */\n  private static readonly SERVER_CLOSE_TIMEOUT_MS = 2_000;\n\n  /** Plugin manifest declaring metadata and resource requirements */\n  static manifest = defineManifest<\"server\">(manifest);\n  private serverApplication: express.Application;\n  private server: HTTPServer | null;\n  private viteDevServer?: ViteDevServer;\n  private remoteTunnelController?: RemoteTunnelController;\n  /** Bound listen port after optional dev-time resolution. */\n  private resolvedListenPort?: number;\n  declare protected config: ServerConfig;\n  private serverExtensions: ((app: express.Application) => void)[] = [];\n  private rawBodyPaths: Set<string> = new Set();\n  /**\n   * Resolves when `server.close()` completes. Created in\n   * {@link abortActiveOperations} (which initiates the close) and awaited in\n   * {@link closeRemainingConnections} after other plugins have drained.\n   */\n  private serverClosed?: Promise<void>;\n  static phase: PluginPhase = \"deferred\";\n\n  constructor(config: ServerConfig) {\n    super(config);\n    if (\"autoStart\" in config) {\n      throw new ServerError(\n        \"server({ autoStart }) has been removed. \" +\n          \"The server is now started automatically by createApp.\\n\\n\" +\n          \"Run `npx appkit codemod on-plugins-ready --write` to auto-migrate.\",\n      );\n    }\n    this.config = config;\n    this.serverApplication = express();\n    this.server = null;\n    this.serverExtensions = [];\n  }\n\n  attachContext(deps: Parameters<Plugin[\"attachContext\"]>[0] = {}): void {\n    super.attachContext(deps);\n    this.telemetry.registerInstrumentations([\n      instrumentations.http,\n      instrumentations.express,\n    ]);\n    this.context?.registerAsRouteTarget(this);\n  }\n\n  /** Setup the server plugin. */\n  async setup() {}\n\n  /** Get the server configuration. */\n  getConfig() {\n    const { plugins: _plugins, ...config } = this.config;\n\n    return config;\n  }\n\n  /**\n   * Start the server.\n   *\n   * This method starts the server and sets up the frontend.\n   * It also sets up the remote tunneling if enabled.\n   *\n   * @returns The express application.\n   */\n  async start(): Promise<express.Application> {\n    this.serverApplication.use(requestMetricsMiddleware);\n    this.serverApplication.use(\n      express.json({\n        // Express's stock 100kb default is too tight for modern apps —\n        // agent chat payloads and any base64-encoded upload (e.g. the\n        // dev playground's smart-dashboard \"save view\" screenshot at\n        // ~105KB) blow past it instantly. Raise to 1mb by default and\n        // let consumers tune via `server({ bodyLimit })` if they need\n        // more headroom.\n        limit: this.config.bodyLimit ?? \"1mb\",\n        type: (req) => {\n          // Skip JSON parsing for routes that declared skipBodyParsing\n          // (e.g. file uploads where the raw body must flow through).\n          // rawBodyPaths is populated by extendRoutes() below; the type\n          // callback runs per-request so the set is already filled.\n          const urlPath = req.url?.split(\"?\")[0];\n          if (urlPath && this.rawBodyPaths.has(urlPath)) return false;\n          const ct = req.headers[\"content-type\"] ?? \"\";\n          return ct.includes(\"json\");\n        },\n      }),\n    );\n\n    const { endpoints, pluginConfigs } = await this.extendRoutes();\n\n    for (const extension of this.serverExtensions) {\n      extension(this.serverApplication);\n    }\n\n    // register remote tunnel controller (before static/vite)\n    this.remoteTunnelController = new RemoteTunnelController(\n      this.devFileReader,\n    );\n    this.serverApplication.use(this.remoteTunnelController.middleware);\n\n    await this.setupFrontend(endpoints, pluginConfigs);\n\n    // Terminal error handler — registered after all routes, extensions, and\n    // frontend middleware so that errors forwarded via next(err) from any of\n    // them (e.g. async handler rejections forwarded by Plugin.route()) are\n    // turned into JSON error responses instead of hanging the request.\n    this.serverApplication.use(errorHandlerMiddleware);\n\n    const listenPort = await this.resolveListenPort();\n\n    const server = this.serverApplication.listen(\n      listenPort,\n      this.config.host ?? ServerPlugin.DEFAULT_CONFIG.host,\n      () => this.logStartupInfo(),\n    );\n\n    this.server = server;\n\n    // attach server to remote tunnel controller\n    this.remoteTunnelController.setServer(server);\n\n    // Graceful shutdown is orchestrated by the core LifecycleManager, which\n    // owns the process signal handlers. This plugin only contributes its\n    // HTTP concerns: it aborts/initiates the socket close in\n    // abortActiveOperations(), drains dev servers in shutdown(), and force-\n    // closes remaining sockets in the \"shutdown\" lifecycle hook below (which\n    // fires after every plugin's shutdown() has run).\n    this.context?.onLifecycle(\"shutdown\", () =>\n      this.closeRemainingConnections(),\n    );\n\n    if (process.env.NODE_ENV === \"development\") {\n      const allRoutes = getRoutes(this.serverApplication._router.stack);\n      printRoutes(allRoutes);\n    }\n    return this.serverApplication;\n  }\n\n  /**\n   * Get the low level node.js http server instance.\n   *\n   * Only use this method if you need to access the server instance for advanced usage like a custom websocket server, etc.\n   *\n   * @throws {Error} If the server has not started yet.\n   * @returns {HTTPServer} The server instance.\n   */\n  getServer(): HTTPServer {\n    if (!this.server) {\n      throw ServerError.notStarted();\n    }\n\n    return this.server;\n  }\n\n  /**\n   * Extend the server with custom routes or middleware.\n   *\n   * Call this inside the `onPluginsReady` callback of `createApp` to register\n   * custom Express routes or middleware before the server starts listening.\n   *\n   * Note: async handlers registered directly on the app must handle their own\n   * rejections — Express 4 does not forward rejected promises to the error\n   * middleware. Errors passed explicitly to `next(err)` are formatted by the\n   * terminal error middleware.\n   *\n   * @param fn - A function that receives the express application.\n   * @returns The server plugin instance for chaining.\n   */\n  extend(fn: (app: express.Application) => void) {\n    this.serverExtensions.push(fn);\n    return this;\n  }\n\n  /**\n   * Register a server extension from another plugin during setup.\n   * Unlike extend(), this is designed for internal plugin-to-plugin\n   * coordination where extensions are registered before the server starts\n   * listening — typically called by PluginContext when flushing buffered routes.\n   */\n  addExtension(fn: (app: express.Application) => void) {\n    this.serverExtensions.push(fn);\n  }\n\n  /**\n   * Setup the routes with the plugins.\n   *\n   * This method goes through all the plugins and injects the routes into the server application.\n   * Returns a map of plugin names to their registered named endpoints,\n   * and a map of plugin names to their client-exposed configs.\n   */\n  private async extendRoutes(): Promise<{\n    endpoints: PluginEndpoints;\n    pluginConfigs: PluginClientConfigs;\n  }> {\n    const endpoints: PluginEndpoints = {};\n    const pluginConfigs: PluginClientConfigs = {};\n\n    const plugins = this.context?.getPlugins();\n    if (!plugins || plugins.size === 0) return { endpoints, pluginConfigs };\n\n    this.serverApplication.get(\"/health\", (_, res) => {\n      res.status(200).json({ status: \"ok\" });\n    });\n    this.registerEndpoint(\"health\", \"/health\");\n\n    for (const plugin of plugins.values()) {\n      if (EXCLUDED_PLUGINS.includes(plugin.name)) continue;\n\n      if (plugin?.injectRoutes && typeof plugin.injectRoutes === \"function\") {\n        const router = express.Router();\n\n        plugin.injectRoutes(router);\n\n        const basePath = `/api/${camelToKebab(plugin.name)}`;\n        this.serverApplication.use(basePath, router);\n\n        endpoints[plugin.name] = plugin.getEndpoints();\n\n        // Collect paths that should skip body parsing\n        if (\n          plugin.getSkipBodyParsingPaths &&\n          typeof plugin.getSkipBodyParsingPaths === \"function\"\n        ) {\n          for (const p of plugin.getSkipBodyParsingPaths()) {\n            this.rawBodyPaths.add(p);\n          }\n        }\n      }\n\n      if (typeof plugin.clientConfig === \"function\") {\n        try {\n          const raw = plugin.clientConfig();\n          if (raw != null) {\n            const sanitized = sanitizeClientConfig(plugin.name, raw);\n            if (Object.keys(sanitized).length > 0) {\n              pluginConfigs[plugin.name] = sanitized;\n            }\n          }\n        } catch (error) {\n          logger.error(\n            \"Plugin '%s' clientConfig() failed, skipping its config: %O\",\n            plugin.name,\n            error,\n          );\n        }\n      }\n    }\n\n    return { endpoints, pluginConfigs };\n  }\n\n  /**\n   * Setup frontend serving based on environment:\n   * - If staticPath is explicitly provided: use static server\n   * - Dev mode (no staticPath): Vite for HMR\n   * - Production (no staticPath): Static files auto-detected\n   */\n  private async setupFrontend(\n    endpoints: PluginEndpoints,\n    pluginConfigs: PluginClientConfigs,\n  ) {\n    const isDev = process.env.NODE_ENV === \"development\";\n    const hasExplicitStaticPath = this.config.staticPath !== undefined;\n\n    // explict static path provided\n    if (hasExplicitStaticPath) {\n      const staticServer = new StaticServer(\n        this.serverApplication,\n        this.config.staticPath as string,\n        endpoints,\n        pluginConfigs,\n      );\n      staticServer.setup();\n      return;\n    }\n\n    // auto-detection based on environment\n    if (isDev) {\n      this.viteDevServer = new ViteDevServer(\n        this.serverApplication,\n        endpoints,\n        pluginConfigs,\n      );\n      await this.viteDevServer.setup();\n      return;\n    }\n\n    // auto-detection based on static path\n    const staticPath = ServerPlugin.findStaticPath();\n    if (staticPath) {\n      const staticServer = new StaticServer(\n        this.serverApplication,\n        staticPath,\n        endpoints,\n        pluginConfigs,\n      );\n\n      staticServer.setup();\n    }\n  }\n\n  private static findStaticPath() {\n    const staticPaths = [\"dist\", \"client/dist\", \"build\", \"public\", \"out\"];\n    const cwd = process.cwd();\n    for (const p of staticPaths) {\n      const fullPath = path.resolve(cwd, p);\n      if (fs.existsSync(path.resolve(fullPath, \"index.html\"))) {\n        logger.debug(\"Static files: serving from %s\", fullPath);\n        return fullPath;\n      }\n    }\n    return undefined;\n  }\n\n  /**\n   * In development, prefers {@link ServerConfig.port} / env / default (8000), then\n   * scans upward using `get-port`'s `portNumbers()` on the listen host until one binds.\n   * In non-development, uses config / env / default only (no fallback).\n   */\n  private async resolveListenPort(): Promise<number> {\n    const requested = this.config.port ?? ServerPlugin.DEFAULT_CONFIG.port;\n\n    if (process.env.NODE_ENV !== \"development\") {\n      this.resolvedListenPort = requested;\n      return requested;\n    }\n\n    const host = this.config.host ?? ServerPlugin.DEFAULT_CONFIG.host;\n    const upper = Math.min(requested + devListenPortSpan - 1, 65_535);\n    const port = await getPort({\n      host,\n      port: portNumbers(requested, upper),\n    });\n    this.resolvedListenPort = port;\n    if (port !== requested) {\n      logger.info(\"Port %d was busy, picking %d\", requested, port);\n    }\n    return port;\n  }\n\n  private logStartupInfo() {\n    const isDev = process.env.NODE_ENV === \"development\";\n    const hasExplicitStaticPath = this.config.staticPath !== undefined;\n    const port =\n      this.resolvedListenPort ??\n      this.config.port ??\n      ServerPlugin.DEFAULT_CONFIG.port;\n    const host = this.config.host ?? ServerPlugin.DEFAULT_CONFIG.host;\n\n    logger.info(\"Server running on http://%s:%d\", host, port);\n\n    if (hasExplicitStaticPath) {\n      logger.info(\"Mode: static (%s)\", this.config.staticPath);\n    } else if (isDev) {\n      logger.info(\"Mode: development (Vite HMR)\");\n    } else {\n      logger.info(\"Mode: production (static)\");\n    }\n\n    const remoteServerController = this.remoteTunnelController;\n    if (!remoteServerController) {\n      logger.debug(\"Remote tunnel: disabled (controller not initialized)\");\n    } else {\n      logger.debug(\n        \"Remote tunnel: %s; %s\",\n        remoteServerController.isAllowedByEnv() ? \"allowed\" : \"blocked\",\n        remoteServerController.isActive() ? \"active\" : \"inactive\",\n      );\n    }\n  }\n\n  /**\n   * Cancel in-flight work and begin closing the HTTP server.\n   *\n   * Runs in the first phase of the core LifecycleManager's graceful shutdown,\n   * before any plugin `shutdown()` hook. In addition to the base behavior\n   * (aborting SSE streams), it stops the server accepting new connections and\n   * drops idle keep-alive sockets — without `closeIdleConnections()`, a\n   * connected browser would pin `server.close()` open until the force-exit\n   * timer fires. The close is only *initiated* here; the returned promise is\n   * awaited later in {@link closeRemainingConnections} so peer plugins can\n   * still drain in-flight requests through the server first.\n   */\n  abortActiveOperations(): void {\n    super.abortActiveOperations();\n\n    if (this.server) {\n      const server = this.server;\n      this.serverClosed = new Promise((resolve) => {\n        server.close(() => resolve());\n      });\n      server.closeIdleConnections();\n    }\n  }\n\n  /**\n   * Drain the dev-only servers as this plugin's `shutdown()` hook.\n   *\n   * Runs concurrently with the other plugins' hooks during graceful shutdown.\n   * These are no-ops in production (neither is created), so this hook is\n   * effectively dev-only.\n   */\n  async shutdown(): Promise<void> {\n    if (this.viteDevServer) {\n      await this.viteDevServer.close();\n    }\n    if (this.remoteTunnelController) {\n      this.remoteTunnelController.cleanup();\n    }\n  }\n\n  /**\n   * Force-close whatever sockets remain and await the server close.\n   *\n   * Registered on the `\"shutdown\"` lifecycle event in {@link start}, so it\n   * fires after every plugin's `shutdown()` hook has run — meaning any\n   * in-flight request a peer plugin was draining has already completed.\n   * `closeAllConnections()` destroys the leftover sockets (aborted SSE\n   * responses, keep-alive connections) synchronously so the pending\n   * `server.close()` can complete; the await is bounded because the close is\n   * expected to resolve promptly once the sockets are gone.\n   */\n  private async closeRemainingConnections(): Promise<void> {\n    if (this.server) {\n      this.server.closeAllConnections();\n    }\n    if (!this.serverClosed) return;\n\n    await Promise.race([\n      this.serverClosed,\n      new Promise<void>((resolve) => {\n        const timer = setTimeout(resolve, ServerPlugin.SERVER_CLOSE_TIMEOUT_MS);\n        timer.unref();\n      }),\n    ]);\n    logger.debug(\"Server closed gracefully\");\n  }\n\n  /**\n   * Returns the public exports for the server plugin.\n   * Exposes server management methods.\n   */\n  exports() {\n    const self = this;\n    return {\n      /** Extend the server with custom routes or middleware */\n      extend(fn: (app: express.Application) => void) {\n        self.extend(fn);\n        return this;\n      },\n      /** Get the underlying HTTP server instance */\n      getServer: this.getServer,\n      /** Get the server configuration */\n      getConfig: this.getConfig,\n      /** @deprecated Server is now started automatically by createApp. */\n      start() {\n        throw new ServerError(\n          \"server.start() has been removed. Use the onPluginsReady callback instead:\\n\\n\" +\n            \"  createApp({\\n\" +\n            \"    plugins: [server(), ...],\\n\" +\n            \"    onPluginsReady(appkit) {\\n\" +\n            \"      appkit.server.extend(...);\\n\" +\n            \"    },\\n\" +\n            \"  });\\n\\n\" +\n            \"Run `npx appkit codemod on-plugins-ready --write` to auto-migrate.\",\n        );\n      },\n    };\n  }\n}\n\nconst EXCLUDED_PLUGINS: string[] = [ServerPlugin.manifest.name];\n\n/** @internal Exported for unit tests. */\nexport function requestMetricsMiddleware(\n  req: express.Request,\n  res: express.Response,\n  next: express.NextFunction,\n) {\n  const startMs = Date.now();\n  res.on(\"finish\", () => {\n    const reporter = TelemetryReporter.getInstance();\n    if (!reporter) return;\n    const routePath = (req.route as { path?: string } | undefined)?.path;\n    if (!routePath) return;\n    const baseUrl = req.baseUrl ?? \"\";\n    const template = `${baseUrl}${routePath}`;\n    reporter.recordRequest(\n      req.method,\n      template,\n      res.statusCode,\n      Date.now() - startMs,\n    );\n  });\n  next();\n}\n\n/**\n * Narrow an unknown thrown value to an Error that carries a numeric\n * `statusCode` property in the HTTP error range (e.g. `ApiError` from\n * `@databricks/sdk-experimental`).\n */\nfunction hasHttpStatusCode(\n  error: unknown,\n): error is Error & { statusCode: number } {\n  if (!(error instanceof Error) || !(\"statusCode\" in error)) return false;\n  const statusCode = error.statusCode;\n  return (\n    typeof statusCode === \"number\" &&\n    Number.isInteger(statusCode) &&\n    statusCode >= 400 &&\n    statusCode <= 599\n  );\n}\n\n/**\n * Terminal Express error-handling middleware.\n *\n * Converts errors forwarded via `next(err)` (including async handler\n * rejections forwarded by `Plugin.route()`) into JSON error responses,\n * following the same status/message conventions as `Plugin.execute()`:\n * - errors carrying an HTTP `statusCode` (including `AppKitError`) → that\n *   status; 5xx messages are masked in production to avoid leaking internals\n * - anything else → 500 with a generic message in production\n *\n * 4xx errors are expected client errors (e.g. missing auth headers) and are\n * logged at `warn` with just the message; 5xx/unknown errors are logged at\n * `error` with the full error.\n *\n * @internal Exported for unit tests.\n */\nexport function errorHandlerMiddleware(\n  err: unknown,\n  req: express.Request,\n  res: express.Response,\n  next: express.NextFunction,\n) {\n  const httpError =\n    err instanceof AppKitError || hasHttpStatusCode(err) ? err : null;\n  const statusCode = httpError ? httpError.statusCode : 500;\n  const isClientError = statusCode < 500;\n\n  if (isClientError) {\n    logger.warn(\n      \"Request failed for %s %s with status %d: %s\",\n      req.method,\n      req.originalUrl,\n      statusCode,\n      err instanceof Error ? err.message : String(err),\n    );\n  } else {\n    logger.error(\n      \"Unhandled error for %s %s: %O\",\n      req.method,\n      req.originalUrl,\n      // toJSON() redacts sensitive context fields; %O on a raw AppKitError\n      // would enumerate them unredacted.\n      err instanceof AppKitError ? err.toJSON() : err,\n    );\n  }\n\n  if (res.headersSent) {\n    next(err);\n    return;\n  }\n\n  const isDev = process.env.NODE_ENV !== \"production\";\n  const message = err instanceof Error ? err.message : \"Server error\";\n\n  res.status(statusCode).json({\n    error: isDev || isClientError ? message : \"Server error\",\n  });\n}\n\n/**\n * @internal\n */\nexport const server = toPlugin(ServerPlugin);\n// Export manifest and types\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ,QAAQ,KAAK,EAAE,SAAS,EAAE,CAAC;AAE9D,MAAM,SAAS,aAAa,SAAS;;AAGrC,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;AAwB1B,IAAa,eAAb,MAAa,qBAAqB,OAAO;CACvC,OAAc,iBAAiB;EAC7B,MAAM,QAAQ,IAAI,kBAAkB;EACpC,MAAM,OAAO,QAAQ,IAAI,oBAAoB,IAAI;EAClD;;;;;;;CAQD,OAAwB,0BAA0B;;CAGlD,OAAO,WAAW,eAAyBA,iBAAS;CACpD,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;;CAER,AAAQ;CAER,AAAQ,mBAA2D,EAAE;CACrE,AAAQ,+BAA4B,IAAI,KAAK;;;;;;CAM7C,AAAQ;CACR,OAAO,QAAqB;CAE5B,YAAY,QAAsB;AAChC,QAAM,OAAO;AACb,MAAI,eAAe,OACjB,OAAM,IAAI,YACR,sKAGD;AAEH,OAAK,SAAS;AACd,OAAK,oBAAoB,SAAS;AAClC,OAAK,SAAS;AACd,OAAK,mBAAmB,EAAE;;CAG5B,cAAc,OAA+C,EAAE,EAAQ;AACrE,QAAM,cAAc,KAAK;AACzB,OAAK,UAAU,yBAAyB,CACtC,iBAAiB,MACjB,iBAAiB,QAClB,CAAC;AACF,OAAK,SAAS,sBAAsB,KAAK;;;CAI3C,MAAM,QAAQ;;CAGd,YAAY;EACV,MAAM,EAAE,SAAS,UAAU,GAAG,WAAW,KAAK;AAE9C,SAAO;;;;;;;;;;CAWT,MAAM,QAAsC;AAC1C,OAAK,kBAAkB,IAAI,yBAAyB;AACpD,OAAK,kBAAkB,IACrB,QAAQ,KAAK;GAOX,OAAO,KAAK,OAAO,aAAa;GAChC,OAAO,QAAQ;IAKb,MAAM,UAAU,IAAI,KAAK,MAAM,IAAI,CAAC;AACpC,QAAI,WAAW,KAAK,aAAa,IAAI,QAAQ,CAAE,QAAO;AAEtD,YADW,IAAI,QAAQ,mBAAmB,IAChC,SAAS,OAAO;;GAE7B,CAAC,CACH;EAED,MAAM,EAAE,WAAW,kBAAkB,MAAM,KAAK,cAAc;AAE9D,OAAK,MAAM,aAAa,KAAK,iBAC3B,WAAU,KAAK,kBAAkB;AAInC,OAAK,yBAAyB,IAAI,uBAChC,KAAK,cACN;AACD,OAAK,kBAAkB,IAAI,KAAK,uBAAuB,WAAW;AAElE,QAAM,KAAK,cAAc,WAAW,cAAc;AAMlD,OAAK,kBAAkB,IAAI,uBAAuB;EAElD,MAAM,aAAa,MAAM,KAAK,mBAAmB;EAEjD,MAAM,SAAS,KAAK,kBAAkB,OACpC,YACA,KAAK,OAAO,QAAQ,aAAa,eAAe,YAC1C,KAAK,gBAAgB,CAC5B;AAED,OAAK,SAAS;AAGd,OAAK,uBAAuB,UAAU,OAAO;AAQ7C,OAAK,SAAS,YAAY,kBACxB,KAAK,2BAA2B,CACjC;AAED,MAAI,QAAQ,IAAI,aAAa,cAE3B,aADkB,UAAU,KAAK,kBAAkB,QAAQ,MAAM,CAC3C;AAExB,SAAO,KAAK;;;;;;;;;;CAWd,YAAwB;AACtB,MAAI,CAAC,KAAK,OACR,OAAM,YAAY,YAAY;AAGhC,SAAO,KAAK;;;;;;;;;;;;;;;;CAiBd,OAAO,IAAwC;AAC7C,OAAK,iBAAiB,KAAK,GAAG;AAC9B,SAAO;;;;;;;;CAST,aAAa,IAAwC;AACnD,OAAK,iBAAiB,KAAK,GAAG;;;;;;;;;CAUhC,MAAc,eAGX;EACD,MAAM,YAA6B,EAAE;EACrC,MAAM,gBAAqC,EAAE;EAE7C,MAAM,UAAU,KAAK,SAAS,YAAY;AAC1C,MAAI,CAAC,WAAW,QAAQ,SAAS,EAAG,QAAO;GAAE;GAAW;GAAe;AAEvE,OAAK,kBAAkB,IAAI,YAAY,GAAG,QAAQ;AAChD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,QAAQ,MAAM,CAAC;IACtC;AACF,OAAK,iBAAiB,UAAU,UAAU;AAE1C,OAAK,MAAM,UAAU,QAAQ,QAAQ,EAAE;AACrC,OAAI,iBAAiB,SAAS,OAAO,KAAK,CAAE;AAE5C,OAAI,QAAQ,gBAAgB,OAAO,OAAO,iBAAiB,YAAY;IACrE,MAAM,SAAS,QAAQ,QAAQ;AAE/B,WAAO,aAAa,OAAO;IAE3B,MAAM,WAAW,QAAQ,aAAa,OAAO,KAAK;AAClD,SAAK,kBAAkB,IAAI,UAAU,OAAO;AAE5C,cAAU,OAAO,QAAQ,OAAO,cAAc;AAG9C,QACE,OAAO,2BACP,OAAO,OAAO,4BAA4B,WAE1C,MAAK,MAAM,KAAK,OAAO,yBAAyB,CAC9C,MAAK,aAAa,IAAI,EAAE;;AAK9B,OAAI,OAAO,OAAO,iBAAiB,WACjC,KAAI;IACF,MAAM,MAAM,OAAO,cAAc;AACjC,QAAI,OAAO,MAAM;KACf,MAAM,YAAY,qBAAqB,OAAO,MAAM,IAAI;AACxD,SAAI,OAAO,KAAK,UAAU,CAAC,SAAS,EAClC,eAAc,OAAO,QAAQ;;YAG1B,OAAO;AACd,WAAO,MACL,8DACA,OAAO,MACP,MACD;;;AAKP,SAAO;GAAE;GAAW;GAAe;;;;;;;;CASrC,MAAc,cACZ,WACA,eACA;EACA,MAAM,QAAQ,QAAQ,IAAI,aAAa;AAIvC,MAH8B,KAAK,OAAO,eAAe,QAG9B;AAOzB,GANqB,IAAI,aACvB,KAAK,mBACL,KAAK,OAAO,YACZ,WACA,cACD,CACY,OAAO;AACpB;;AAIF,MAAI,OAAO;AACT,QAAK,gBAAgB,IAAI,cACvB,KAAK,mBACL,WACA,cACD;AACD,SAAM,KAAK,cAAc,OAAO;AAChC;;EAIF,MAAM,aAAa,aAAa,gBAAgB;AAChD,MAAI,WAQF,CAPqB,IAAI,aACvB,KAAK,mBACL,YACA,WACA,cACD,CAEY,OAAO;;CAIxB,OAAe,iBAAiB;EAC9B,MAAM,cAAc;GAAC;GAAQ;GAAe;GAAS;GAAU;GAAM;EACrE,MAAM,MAAM,QAAQ,KAAK;AACzB,OAAK,MAAM,KAAK,aAAa;GAC3B,MAAM,WAAW,KAAK,QAAQ,KAAK,EAAE;AACrC,OAAI,GAAG,WAAW,KAAK,QAAQ,UAAU,aAAa,CAAC,EAAE;AACvD,WAAO,MAAM,iCAAiC,SAAS;AACvD,WAAO;;;;;;;;;CAWb,MAAc,oBAAqC;EACjD,MAAM,YAAY,KAAK,OAAO,QAAQ,aAAa,eAAe;AAElE,MAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,QAAK,qBAAqB;AAC1B,UAAO;;EAKT,MAAM,OAAO,MAAM,QAAQ;GACzB,MAHW,KAAK,OAAO,QAAQ,aAAa,eAAe;GAI3D,MAAM,YAAY,WAHN,KAAK,IAAI,YAAY,oBAAoB,GAAG,MAAO,CAG5B;GACpC,CAAC;AACF,OAAK,qBAAqB;AAC1B,MAAI,SAAS,UACX,QAAO,KAAK,gCAAgC,WAAW,KAAK;AAE9D,SAAO;;CAGT,AAAQ,iBAAiB;EACvB,MAAM,QAAQ,QAAQ,IAAI,aAAa;EACvC,MAAM,wBAAwB,KAAK,OAAO,eAAe;EACzD,MAAM,OACJ,KAAK,sBACL,KAAK,OAAO,QACZ,aAAa,eAAe;EAC9B,MAAM,OAAO,KAAK,OAAO,QAAQ,aAAa,eAAe;AAE7D,SAAO,KAAK,kCAAkC,MAAM,KAAK;AAEzD,MAAI,sBACF,QAAO,KAAK,qBAAqB,KAAK,OAAO,WAAW;WAC/C,MACT,QAAO,KAAK,+BAA+B;MAE3C,QAAO,KAAK,4BAA4B;EAG1C,MAAM,yBAAyB,KAAK;AACpC,MAAI,CAAC,uBACH,QAAO,MAAM,uDAAuD;MAEpE,QAAO,MACL,yBACA,uBAAuB,gBAAgB,GAAG,YAAY,WACtD,uBAAuB,UAAU,GAAG,WAAW,WAChD;;;;;;;;;;;;;;CAgBL,wBAA8B;AAC5B,QAAM,uBAAuB;AAE7B,MAAI,KAAK,QAAQ;GACf,MAAM,SAAS,KAAK;AACpB,QAAK,eAAe,IAAI,SAAS,YAAY;AAC3C,WAAO,YAAY,SAAS,CAAC;KAC7B;AACF,UAAO,sBAAsB;;;;;;;;;;CAWjC,MAAM,WAA0B;AAC9B,MAAI,KAAK,cACP,OAAM,KAAK,cAAc,OAAO;AAElC,MAAI,KAAK,uBACP,MAAK,uBAAuB,SAAS;;;;;;;;;;;;;CAezC,MAAc,4BAA2C;AACvD,MAAI,KAAK,OACP,MAAK,OAAO,qBAAqB;AAEnC,MAAI,CAAC,KAAK,aAAc;AAExB,QAAM,QAAQ,KAAK,CACjB,KAAK,cACL,IAAI,SAAe,YAAY;AAE7B,GADc,WAAW,SAAS,aAAa,wBAAwB,CACjE,OAAO;IACb,CACH,CAAC;AACF,SAAO,MAAM,2BAA2B;;;;;;CAO1C,UAAU;EACR,MAAM,OAAO;AACb,SAAO;GAEL,OAAO,IAAwC;AAC7C,SAAK,OAAO,GAAG;AACf,WAAO;;GAGT,WAAW,KAAK;GAEhB,WAAW,KAAK;GAEhB,QAAQ;AACN,UAAM,IAAI,YACR,iRAQD;;GAEJ;;;AAIL,MAAM,mBAA6B,CAAC,aAAa,SAAS,KAAK;;AAG/D,SAAgB,yBACd,KACA,KACA,MACA;CACA,MAAM,UAAU,KAAK,KAAK;AAC1B,KAAI,GAAG,gBAAgB;EACrB,MAAM,WAAW,kBAAkB,aAAa;AAChD,MAAI,CAAC,SAAU;EACf,MAAM,YAAa,IAAI,OAAyC;AAChE,MAAI,CAAC,UAAW;EAEhB,MAAM,WAAW,GADD,IAAI,WAAW,KACD;AAC9B,WAAS,cACP,IAAI,QACJ,UACA,IAAI,YACJ,KAAK,KAAK,GAAG,QACd;GACD;AACF,OAAM;;;;;;;AAQR,SAAS,kBACP,OACyC;AACzC,KAAI,EAAE,iBAAiB,UAAU,EAAE,gBAAgB,OAAQ,QAAO;CAClE,MAAM,aAAa,MAAM;AACzB,QACE,OAAO,eAAe,YACtB,OAAO,UAAU,WAAW,IAC5B,cAAc,OACd,cAAc;;;;;;;;;;;;;;;;;;AAoBlB,SAAgB,uBACd,KACA,KACA,KACA,MACA;CACA,MAAM,YACJ,eAAe,eAAe,kBAAkB,IAAI,GAAG,MAAM;CAC/D,MAAM,aAAa,YAAY,UAAU,aAAa;CACtD,MAAM,gBAAgB,aAAa;AAEnC,KAAI,cACF,QAAO,KACL,+CACA,IAAI,QACJ,IAAI,aACJ,YACA,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CACjD;KAED,QAAO,MACL,iCACA,IAAI,QACJ,IAAI,aAGJ,eAAe,cAAc,IAAI,QAAQ,GAAG,IAC7C;AAGH,KAAI,IAAI,aAAa;AACnB,OAAK,IAAI;AACT;;CAGF,MAAM,QAAQ,QAAQ,IAAI,aAAa;CACvC,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AAErD,KAAI,OAAO,WAAW,CAAC,KAAK,EAC1B,OAAO,SAAS,gBAAgB,UAAU,gBAC3C,CAAC;;;;;AAMJ,MAAa,SAAS,SAAS,aAAa"}
+{"version":3,"file":"index.js","names":["manifest","fs"],"sources":["../../../src/plugins/server/index.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport type { Server as HTTPServer } from \"node:http\";\nimport path from \"node:path\";\n\nimport dotenv from \"dotenv\";\nimport express from \"express\";\nimport getPort, { portNumbers } from \"get-port\";\nimport type { PluginClientConfigs, PluginPhase } from \"shared\";\nimport { camelToKebab } from \"shared\";\n\nimport { AppKitError, ServerError } from \"../../errors\";\nimport { TelemetryReporter } from \"../../internal-telemetry\";\nimport { createLogger } from \"../../logging/logger\";\nimport { Plugin, toPlugin } from \"../../plugin\";\nimport { defineManifest } from \"../../registry\";\nimport { instrumentations } from \"../../telemetry\";\nimport { sanitizeClientConfig } from \"./client-config-sanitizer\";\nimport manifest from \"./manifest.json\";\nimport { RemoteTunnelController } from \"./remote-tunnel/remote-tunnel-controller\";\nimport { StaticServer } from \"./static-server\";\nimport type { ServerConfig } from \"./types\";\nimport { getRoutes, type PluginEndpoints, printRoutes } from \"./utils\";\nimport { ViteDevServer } from \"./vite-dev-server\";\n\ndotenv.config({ path: path.resolve(process.cwd(), \"./.env\") });\n\nconst logger = createLogger(\"server\");\n\n/** Dev-only: try `requested` then consecutive ports (see `get-port` `portNumbers`). */\nconst devListenPortSpan = 100;\n\n/**\n * Server plugin for the AppKit.\n *\n * This plugin is responsible for starting the server and serving the static files.\n * It also handles the remote tunneling for development purposes.\n *\n * The server is started automatically by `createApp` after all plugins are set up\n * and the optional `onPluginsReady` callback has run.\n *\n * @example\n * ```ts\n * createApp({\n *   plugins: [server(), analytics({})],\n *   onPluginsReady(appkit) {\n *     appkit.server.extend((app) => {\n *       app.get(\"/custom\", (_req, res) => res.json({ ok: true }));\n *     });\n *   },\n * });\n * ```\n *\n */\nexport class ServerPlugin extends Plugin {\n  public static DEFAULT_CONFIG = {\n    host: process.env.FLASK_RUN_HOST || \"0.0.0.0\",\n    port: Number(process.env.DATABRICKS_APP_PORT) || 8000,\n  };\n\n  /**\n   * Budget for awaiting `server.close()` during shutdown. Bounded because\n   * `closeAllConnections()` runs immediately before the await, so the close\n   * is expected to resolve promptly; the core lifecycle manager's overall\n   * force-exit timer is the ultimate backstop if it does not.\n   */\n  private static readonly SERVER_CLOSE_TIMEOUT_MS = 2_000;\n\n  /** Plugin manifest declaring metadata and resource requirements */\n  static manifest = defineManifest<\"server\">(manifest);\n  private serverApplication: express.Application;\n  private server: HTTPServer | null;\n  private viteDevServer?: ViteDevServer;\n  private remoteTunnelController?: RemoteTunnelController;\n  /** Bound listen port after optional dev-time resolution. */\n  private resolvedListenPort?: number;\n  declare protected config: ServerConfig;\n  private serverExtensions: ((app: express.Application) => void)[] = [];\n  private rawBodyPaths: Set<string> = new Set();\n  /**\n   * Resolves when `server.close()` completes. Created in\n   * {@link abortActiveOperations} (which initiates the close) and awaited in\n   * {@link closeRemainingConnections} after other plugins have drained.\n   */\n  private serverClosed?: Promise<void>;\n  static phase: PluginPhase = \"deferred\";\n\n  constructor(config: ServerConfig) {\n    super(config);\n    if (\"autoStart\" in config) {\n      throw new ServerError(\n        \"server({ autoStart }) has been removed. \" +\n          \"The server is now started automatically by createApp.\\n\\n\" +\n          \"Run `npx appkit codemod on-plugins-ready --write` to auto-migrate.\",\n      );\n    }\n    this.config = config;\n    this.serverApplication = express();\n    this.server = null;\n    this.serverExtensions = [];\n  }\n\n  attachContext(deps: Parameters<Plugin[\"attachContext\"]>[0] = {}): void {\n    super.attachContext(deps);\n    this.telemetry.registerInstrumentations([\n      instrumentations.http,\n      instrumentations.express,\n    ]);\n    this.context?.registerAsRouteTarget(this);\n  }\n\n  /** Setup the server plugin. */\n  async setup() {}\n\n  /** Get the server configuration. */\n  getConfig() {\n    const { plugins: _plugins, ...config } = this.config;\n\n    return config;\n  }\n\n  /**\n   * Start the server.\n   *\n   * This method starts the server and sets up the frontend.\n   * It also sets up the remote tunneling if enabled.\n   *\n   * @returns The express application.\n   */\n  async start(): Promise<express.Application> {\n    this.serverApplication.use(requestMetricsMiddleware);\n    this.serverApplication.use(\n      express.json({\n        // Express's stock 100kb default is too tight for modern apps —\n        // agent chat payloads and any base64-encoded upload (e.g. the\n        // dev playground's smart-dashboard \"save view\" screenshot at\n        // ~105KB) blow past it instantly. Raise to 1mb by default and\n        // let consumers tune via `server({ bodyLimit })` if they need\n        // more headroom.\n        limit: this.config.bodyLimit ?? \"1mb\",\n        type: (req) => {\n          // Skip JSON parsing for routes that declared skipBodyParsing\n          // (e.g. file uploads where the raw body must flow through).\n          // rawBodyPaths is populated by extendRoutes() below; the type\n          // callback runs per-request so the set is already filled.\n          const urlPath = req.url?.split(\"?\")[0];\n          if (urlPath && this.rawBodyPaths.has(urlPath)) return false;\n          const ct = req.headers[\"content-type\"] ?? \"\";\n          return ct.includes(\"json\");\n        },\n      }),\n    );\n\n    const { endpoints, pluginConfigs } = await this.extendRoutes();\n\n    for (const extension of this.serverExtensions) {\n      extension(this.serverApplication);\n    }\n\n    // register remote tunnel controller (before static/vite)\n    this.remoteTunnelController = new RemoteTunnelController(\n      this.devFileReader,\n    );\n    this.serverApplication.use(this.remoteTunnelController.middleware);\n\n    await this.setupFrontend(endpoints, pluginConfigs);\n\n    // Terminal error handler — registered after all routes, extensions, and\n    // frontend middleware so that errors forwarded via next(err) from any of\n    // them (e.g. async handler rejections forwarded by Plugin.route()) are\n    // turned into JSON error responses instead of hanging the request.\n    this.serverApplication.use(errorHandlerMiddleware);\n\n    const listenPort = await this.resolveListenPort();\n\n    const server = this.serverApplication.listen(\n      listenPort,\n      this.config.host ?? ServerPlugin.DEFAULT_CONFIG.host,\n      () => this.logStartupInfo(),\n    );\n\n    this.server = server;\n\n    // attach server to remote tunnel controller\n    this.remoteTunnelController.setServer(server);\n\n    // Graceful shutdown is orchestrated by the core LifecycleManager, which\n    // owns the process signal handlers. This plugin only contributes its\n    // HTTP concerns: it aborts/initiates the socket close in\n    // abortActiveOperations(), drains dev servers in shutdown(), and force-\n    // closes remaining sockets in the \"shutdown\" lifecycle hook below (which\n    // fires after every plugin's shutdown() has run).\n    this.context?.onLifecycle(\"shutdown\", () =>\n      this.closeRemainingConnections(),\n    );\n\n    if (process.env.NODE_ENV === \"development\") {\n      const allRoutes = getRoutes(this.serverApplication._router.stack);\n      printRoutes(allRoutes);\n    }\n    return this.serverApplication;\n  }\n\n  /**\n   * Get the low level node.js http server instance.\n   *\n   * Only use this method if you need to access the server instance for advanced usage like a custom websocket server, etc.\n   *\n   * @throws {Error} If the server has not started yet.\n   * @returns {HTTPServer} The server instance.\n   */\n  getServer(): HTTPServer {\n    if (!this.server) {\n      throw ServerError.notStarted();\n    }\n\n    return this.server;\n  }\n\n  /**\n   * Extend the server with custom routes or middleware.\n   *\n   * Call this inside the `onPluginsReady` callback of `createApp` to register\n   * custom Express routes or middleware before the server starts listening.\n   *\n   * Note: async handlers registered directly on the app must handle their own\n   * rejections — Express 4 does not forward rejected promises to the error\n   * middleware. Errors passed explicitly to `next(err)` are formatted by the\n   * terminal error middleware.\n   *\n   * @param fn - A function that receives the express application.\n   * @returns The server plugin instance for chaining.\n   */\n  extend(fn: (app: express.Application) => void) {\n    this.serverExtensions.push(fn);\n    return this;\n  }\n\n  /**\n   * Register a server extension from another plugin during setup.\n   * Unlike extend(), this is designed for internal plugin-to-plugin\n   * coordination where extensions are registered before the server starts\n   * listening — typically called by PluginContext when flushing buffered routes.\n   */\n  addExtension(fn: (app: express.Application) => void) {\n    this.serverExtensions.push(fn);\n  }\n\n  /**\n   * Setup the routes with the plugins.\n   *\n   * This method goes through all the plugins and injects the routes into the server application.\n   * Returns a map of plugin names to their registered named endpoints,\n   * and a map of plugin names to their client-exposed configs.\n   */\n  private async extendRoutes(): Promise<{\n    endpoints: PluginEndpoints;\n    pluginConfigs: PluginClientConfigs;\n  }> {\n    const endpoints: PluginEndpoints = {};\n    const pluginConfigs: PluginClientConfigs = {};\n\n    const plugins = this.context?.getPlugins();\n    if (!plugins || plugins.size === 0) return { endpoints, pluginConfigs };\n\n    this.serverApplication.get(\"/health\", (_, res) => {\n      res.status(200).json({ status: \"ok\" });\n    });\n    this.registerEndpoint(\"health\", \"/health\");\n\n    for (const plugin of plugins.values()) {\n      if (EXCLUDED_PLUGINS.includes(plugin.name)) continue;\n\n      if (plugin?.injectRoutes && typeof plugin.injectRoutes === \"function\") {\n        const router = express.Router();\n\n        plugin.injectRoutes(router);\n\n        const basePath = `/api/${camelToKebab(plugin.name)}`;\n        this.serverApplication.use(basePath, router);\n\n        endpoints[plugin.name] = plugin.getEndpoints();\n\n        // Collect paths that should skip body parsing\n        if (\n          plugin.getSkipBodyParsingPaths &&\n          typeof plugin.getSkipBodyParsingPaths === \"function\"\n        ) {\n          for (const p of plugin.getSkipBodyParsingPaths()) {\n            this.rawBodyPaths.add(p);\n          }\n        }\n      }\n\n      if (typeof plugin.clientConfig === \"function\") {\n        try {\n          const raw = plugin.clientConfig();\n          if (raw != null) {\n            const sanitized = sanitizeClientConfig(plugin.name, raw);\n            if (Object.keys(sanitized).length > 0) {\n              pluginConfigs[plugin.name] = sanitized;\n            }\n          }\n        } catch (error) {\n          logger.error(\n            \"Plugin '%s' clientConfig() failed, skipping its config: %O\",\n            plugin.name,\n            error,\n          );\n        }\n      }\n    }\n\n    return { endpoints, pluginConfigs };\n  }\n\n  /**\n   * Setup frontend serving based on environment:\n   * - If staticPath is explicitly provided: use static server\n   * - Dev mode (no staticPath): Vite for HMR\n   * - Production (no staticPath): Static files auto-detected\n   */\n  private async setupFrontend(\n    endpoints: PluginEndpoints,\n    pluginConfigs: PluginClientConfigs,\n  ) {\n    const isDev = process.env.NODE_ENV === \"development\";\n    const hasExplicitStaticPath = this.config.staticPath !== undefined;\n\n    // explict static path provided\n    if (hasExplicitStaticPath) {\n      const staticServer = new StaticServer(\n        this.serverApplication,\n        this.config.staticPath as string,\n        endpoints,\n        pluginConfigs,\n      );\n      staticServer.setup();\n      return;\n    }\n\n    // auto-detection based on environment\n    if (isDev) {\n      this.viteDevServer = new ViteDevServer(\n        this.serverApplication,\n        endpoints,\n        pluginConfigs,\n      );\n      await this.viteDevServer.setup();\n      return;\n    }\n\n    // auto-detection based on static path\n    const staticPath = ServerPlugin.findStaticPath();\n    if (staticPath) {\n      const staticServer = new StaticServer(\n        this.serverApplication,\n        staticPath,\n        endpoints,\n        pluginConfigs,\n      );\n\n      staticServer.setup();\n    }\n  }\n\n  private static findStaticPath() {\n    const staticPaths = [\"dist\", \"client/dist\", \"build\", \"public\", \"out\"];\n    const cwd = process.cwd();\n    for (const p of staticPaths) {\n      const fullPath = path.resolve(cwd, p);\n      if (fs.existsSync(path.resolve(fullPath, \"index.html\"))) {\n        logger.debug(\"Static files: serving from %s\", fullPath);\n        return fullPath;\n      }\n    }\n    return undefined;\n  }\n\n  /**\n   * In development, prefers {@link ServerConfig.port} / env / default (8000), then\n   * scans upward using `get-port`'s `portNumbers()` on the listen host until one binds.\n   * In non-development, uses config / env / default only (no fallback).\n   */\n  private async resolveListenPort(): Promise<number> {\n    const requested = this.config.port ?? ServerPlugin.DEFAULT_CONFIG.port;\n\n    if (process.env.NODE_ENV !== \"development\") {\n      this.resolvedListenPort = requested;\n      return requested;\n    }\n\n    const host = this.config.host ?? ServerPlugin.DEFAULT_CONFIG.host;\n    const upper = Math.min(requested + devListenPortSpan - 1, 65_535);\n    const port = await getPort({\n      host,\n      port: portNumbers(requested, upper),\n    });\n    this.resolvedListenPort = port;\n    if (port !== requested) {\n      logger.info(\"Port %d was busy, picking %d\", requested, port);\n    }\n    return port;\n  }\n\n  private logStartupInfo() {\n    const isDev = process.env.NODE_ENV === \"development\";\n    const hasExplicitStaticPath = this.config.staticPath !== undefined;\n    const port =\n      this.resolvedListenPort ??\n      this.config.port ??\n      ServerPlugin.DEFAULT_CONFIG.port;\n    const host = this.config.host ?? ServerPlugin.DEFAULT_CONFIG.host;\n\n    logger.info(\"Server running on http://%s:%d\", host, port);\n\n    if (hasExplicitStaticPath) {\n      logger.info(\"Mode: static (%s)\", this.config.staticPath);\n    } else if (isDev) {\n      logger.info(\"Mode: development (Vite HMR)\");\n    } else {\n      logger.info(\"Mode: production (static)\");\n    }\n\n    const remoteServerController = this.remoteTunnelController;\n    if (!remoteServerController) {\n      logger.debug(\"Remote tunnel: disabled (controller not initialized)\");\n    } else {\n      logger.debug(\n        \"Remote tunnel: %s; %s\",\n        remoteServerController.isAllowedByEnv() ? \"allowed\" : \"blocked\",\n        remoteServerController.isActive() ? \"active\" : \"inactive\",\n      );\n    }\n  }\n\n  /**\n   * Cancel in-flight work and begin closing the HTTP server.\n   *\n   * Runs in the first phase of the core LifecycleManager's graceful shutdown,\n   * before any plugin `shutdown()` hook. In addition to the base behavior\n   * (aborting SSE streams), it stops the server accepting new connections and\n   * drops idle keep-alive sockets — without `closeIdleConnections()`, a\n   * connected browser would pin `server.close()` open until the force-exit\n   * timer fires. The close is only *initiated* here; the returned promise is\n   * awaited later in {@link closeRemainingConnections} so peer plugins can\n   * still drain in-flight requests through the server first.\n   */\n  abortActiveOperations(): void {\n    super.abortActiveOperations();\n\n    if (this.server) {\n      const server = this.server;\n      this.serverClosed = new Promise((resolve) => {\n        server.close(() => resolve());\n      });\n      server.closeIdleConnections();\n    }\n  }\n\n  /**\n   * Drain the dev-only servers as this plugin's `shutdown()` hook.\n   *\n   * Runs concurrently with the other plugins' hooks during graceful shutdown.\n   * These are no-ops in production (neither is created), so this hook is\n   * effectively dev-only.\n   */\n  async shutdown(): Promise<void> {\n    if (this.viteDevServer) {\n      await this.viteDevServer.close();\n    }\n    if (this.remoteTunnelController) {\n      this.remoteTunnelController.cleanup();\n    }\n  }\n\n  /**\n   * Force-close whatever sockets remain and await the server close.\n   *\n   * Registered on the `\"shutdown\"` lifecycle event in {@link start}, so it\n   * fires after every plugin's `shutdown()` hook has run — meaning any\n   * in-flight request a peer plugin was draining has already completed.\n   * `closeAllConnections()` destroys the leftover sockets (aborted SSE\n   * responses, keep-alive connections) synchronously so the pending\n   * `server.close()` can complete; the await is bounded because the close is\n   * expected to resolve promptly once the sockets are gone.\n   */\n  private async closeRemainingConnections(): Promise<void> {\n    if (this.server) {\n      this.server.closeAllConnections();\n    }\n    if (!this.serverClosed) return;\n\n    await Promise.race([\n      this.serverClosed,\n      new Promise<void>((resolve) => {\n        const timer = setTimeout(resolve, ServerPlugin.SERVER_CLOSE_TIMEOUT_MS);\n        timer.unref();\n      }),\n    ]);\n    logger.debug(\"Server closed gracefully\");\n  }\n\n  /**\n   * Returns the public exports for the server plugin.\n   * Exposes server management methods.\n   */\n  exports() {\n    const self = this;\n    return {\n      /** Extend the server with custom routes or middleware */\n      extend(fn: (app: express.Application) => void) {\n        self.extend(fn);\n        return this;\n      },\n      /** Get the underlying HTTP server instance */\n      getServer: this.getServer,\n      /** Get the server configuration */\n      getConfig: this.getConfig,\n      /** @deprecated Server is now started automatically by createApp. */\n      start() {\n        throw new ServerError(\n          \"server.start() has been removed. Use the onPluginsReady callback instead:\\n\\n\" +\n            \"  createApp({\\n\" +\n            \"    plugins: [server(), ...],\\n\" +\n            \"    onPluginsReady(appkit) {\\n\" +\n            \"      appkit.server.extend(...);\\n\" +\n            \"    },\\n\" +\n            \"  });\\n\\n\" +\n            \"Run `npx appkit codemod on-plugins-ready --write` to auto-migrate.\",\n        );\n      },\n    };\n  }\n}\n\nconst EXCLUDED_PLUGINS: string[] = [ServerPlugin.manifest.name];\n\n/** @internal Exported for unit tests. */\nexport function requestMetricsMiddleware(\n  req: express.Request,\n  res: express.Response,\n  next: express.NextFunction,\n) {\n  const startMs = Date.now();\n  res.on(\"finish\", () => {\n    const reporter = TelemetryReporter.getInstance();\n    if (!reporter) return;\n    const routePath = (req.route as { path?: string } | undefined)?.path;\n    if (!routePath) return;\n    const baseUrl = req.baseUrl ?? \"\";\n    const template = `${baseUrl}${routePath}`;\n    reporter.recordRequest(\n      req.method,\n      template,\n      res.statusCode,\n      Date.now() - startMs,\n    );\n  });\n  next();\n}\n\n/**\n * Narrow an unknown thrown value to an Error that carries a numeric\n * `statusCode` property in the HTTP error range (e.g. `ApiError` from\n * `@databricks/sdk-experimental`).\n */\nfunction hasHttpStatusCode(\n  error: unknown,\n): error is Error & { statusCode: number } {\n  if (!(error instanceof Error) || !(\"statusCode\" in error)) return false;\n  const statusCode = error.statusCode;\n  return (\n    typeof statusCode === \"number\" &&\n    Number.isInteger(statusCode) &&\n    statusCode >= 400 &&\n    statusCode <= 599\n  );\n}\n\n/**\n * Terminal Express error-handling middleware.\n *\n * Converts errors forwarded via `next(err)` (including async handler\n * rejections forwarded by `Plugin.route()`) into JSON error responses,\n * following the same status/message conventions as `Plugin.execute()`:\n * - errors carrying an HTTP `statusCode` (including `AppKitError`) → that\n *   status; 5xx messages are masked in production to avoid leaking internals\n * - anything else → 500 with a generic message in production\n *\n * 4xx errors are expected client errors (e.g. missing auth headers) and are\n * logged at `warn` with just the message; 5xx/unknown errors are logged at\n * `error` with the full error.\n *\n * @internal Exported for unit tests.\n */\nexport function errorHandlerMiddleware(\n  err: unknown,\n  req: express.Request,\n  res: express.Response,\n  next: express.NextFunction,\n) {\n  const httpError =\n    err instanceof AppKitError || hasHttpStatusCode(err) ? err : null;\n  const statusCode = httpError ? httpError.statusCode : 500;\n  const isClientError = statusCode < 500;\n\n  if (isClientError) {\n    logger.warn(\n      \"Request failed for %s %s with status %d: %s\",\n      req.method,\n      req.originalUrl,\n      statusCode,\n      err instanceof Error ? err.message : String(err),\n    );\n  } else {\n    logger.error(\n      \"Unhandled error for %s %s: %O\",\n      req.method,\n      req.originalUrl,\n      // toJSON() redacts sensitive context fields; %O on a raw AppKitError\n      // would enumerate them unredacted.\n      err instanceof AppKitError ? err.toJSON() : err,\n    );\n  }\n\n  if (res.headersSent) {\n    next(err);\n    return;\n  }\n\n  const isDev = process.env.NODE_ENV !== \"production\";\n  const message = err instanceof Error ? err.message : \"Server error\";\n\n  res.status(statusCode).json({\n    error: isDev || isClientError ? message : \"Server error\",\n  });\n}\n\n/**\n * @internal\n */\nexport const server = toPlugin(ServerPlugin);\n// Export manifest and types\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ,QAAQ,KAAK,EAAE,SAAS,EAAE,CAAC;AAE9D,MAAM,SAAS,aAAa,SAAS;;AAGrC,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;AAwB1B,IAAa,eAAb,MAAa,qBAAqB,OAAO;CACvC,OAAc,iBAAiB;EAC7B,MAAM,QAAQ,IAAI,kBAAkB;EACpC,MAAM,OAAO,QAAQ,IAAI,oBAAoB,IAAI;EAClD;;;;;;;CAQD,OAAwB,0BAA0B;;CAGlD,OAAO,WAAW,eAAyBA,iBAAS;CACpD,AAAQ;CACR,AAAQ;CACR,AAAQ;CACR,AAAQ;;CAER,AAAQ;CAER,AAAQ,mBAA2D,EAAE;CACrE,AAAQ,+BAA4B,IAAI,KAAK;;;;;;CAM7C,AAAQ;CACR,OAAO,QAAqB;CAE5B,YAAY,QAAsB;AAChC,QAAM,OAAO;AACb,MAAI,eAAe,OACjB,OAAM,IAAI,YACR,sKAGD;AAEH,OAAK,SAAS;AACd,OAAK,oBAAoB,SAAS;AAClC,OAAK,SAAS;AACd,OAAK,mBAAmB,EAAE;;CAG5B,cAAc,OAA+C,EAAE,EAAQ;AACrE,QAAM,cAAc,KAAK;AACzB,OAAK,UAAU,yBAAyB,CACtC,iBAAiB,MACjB,iBAAiB,QAClB,CAAC;AACF,OAAK,SAAS,sBAAsB,KAAK;;;CAI3C,MAAM,QAAQ;;CAGd,YAAY;EACV,MAAM,EAAE,SAAS,UAAU,GAAG,WAAW,KAAK;AAE9C,SAAO;;;;;;;;;;CAWT,MAAM,QAAsC;AAC1C,OAAK,kBAAkB,IAAI,yBAAyB;AACpD,OAAK,kBAAkB,IACrB,QAAQ,KAAK;GAOX,OAAO,KAAK,OAAO,aAAa;GAChC,OAAO,QAAQ;IAKb,MAAM,UAAU,IAAI,KAAK,MAAM,IAAI,CAAC;AACpC,QAAI,WAAW,KAAK,aAAa,IAAI,QAAQ,CAAE,QAAO;AAEtD,YADW,IAAI,QAAQ,mBAAmB,IAChC,SAAS,OAAO;;GAE7B,CAAC,CACH;EAED,MAAM,EAAE,WAAW,kBAAkB,MAAM,KAAK,cAAc;AAE9D,OAAK,MAAM,aAAa,KAAK,iBAC3B,WAAU,KAAK,kBAAkB;AAInC,OAAK,yBAAyB,IAAI,uBAChC,KAAK,cACN;AACD,OAAK,kBAAkB,IAAI,KAAK,uBAAuB,WAAW;AAElE,QAAM,KAAK,cAAc,WAAW,cAAc;AAMlD,OAAK,kBAAkB,IAAI,uBAAuB;EAElD,MAAM,aAAa,MAAM,KAAK,mBAAmB;EAEjD,MAAM,SAAS,KAAK,kBAAkB,OACpC,YACA,KAAK,OAAO,QAAQ,aAAa,eAAe,YAC1C,KAAK,gBAAgB,CAC5B;AAED,OAAK,SAAS;AAGd,OAAK,uBAAuB,UAAU,OAAO;AAQ7C,OAAK,SAAS,YAAY,kBACxB,KAAK,2BAA2B,CACjC;AAED,MAAI,QAAQ,IAAI,aAAa,cAE3B,aADkB,UAAU,KAAK,kBAAkB,QAAQ,MAAM,CAC3C;AAExB,SAAO,KAAK;;;;;;;;;;CAWd,YAAwB;AACtB,MAAI,CAAC,KAAK,OACR,OAAM,YAAY,YAAY;AAGhC,SAAO,KAAK;;;;;;;;;;;;;;;;CAiBd,OAAO,IAAwC;AAC7C,OAAK,iBAAiB,KAAK,GAAG;AAC9B,SAAO;;;;;;;;CAST,aAAa,IAAwC;AACnD,OAAK,iBAAiB,KAAK,GAAG;;;;;;;;;CAUhC,MAAc,eAGX;EACD,MAAM,YAA6B,EAAE;EACrC,MAAM,gBAAqC,EAAE;EAE7C,MAAM,UAAU,KAAK,SAAS,YAAY;AAC1C,MAAI,CAAC,WAAW,QAAQ,SAAS,EAAG,QAAO;GAAE;GAAW;GAAe;AAEvE,OAAK,kBAAkB,IAAI,YAAY,GAAG,QAAQ;AAChD,OAAI,OAAO,IAAI,CAAC,KAAK,EAAE,QAAQ,MAAM,CAAC;IACtC;AACF,OAAK,iBAAiB,UAAU,UAAU;AAE1C,OAAK,MAAM,UAAU,QAAQ,QAAQ,EAAE;AACrC,OAAI,iBAAiB,SAAS,OAAO,KAAK,CAAE;AAE5C,OAAI,QAAQ,gBAAgB,OAAO,OAAO,iBAAiB,YAAY;IACrE,MAAM,SAAS,QAAQ,QAAQ;AAE/B,WAAO,aAAa,OAAO;IAE3B,MAAM,WAAW,QAAQ,aAAa,OAAO,KAAK;AAClD,SAAK,kBAAkB,IAAI,UAAU,OAAO;AAE5C,cAAU,OAAO,QAAQ,OAAO,cAAc;AAG9C,QACE,OAAO,2BACP,OAAO,OAAO,4BAA4B,WAE1C,MAAK,MAAM,KAAK,OAAO,yBAAyB,CAC9C,MAAK,aAAa,IAAI,EAAE;;AAK9B,OAAI,OAAO,OAAO,iBAAiB,WACjC,KAAI;IACF,MAAM,MAAM,OAAO,cAAc;AACjC,QAAI,OAAO,MAAM;KACf,MAAM,YAAY,qBAAqB,OAAO,MAAM,IAAI;AACxD,SAAI,OAAO,KAAK,UAAU,CAAC,SAAS,EAClC,eAAc,OAAO,QAAQ;;YAG1B,OAAO;AACd,WAAO,MACL,8DACA,OAAO,MACP,MACD;;;AAKP,SAAO;GAAE;GAAW;GAAe;;;;;;;;CASrC,MAAc,cACZ,WACA,eACA;EACA,MAAM,QAAQ,QAAQ,IAAI,aAAa;AAIvC,MAH8B,KAAK,OAAO,eAAe,QAG9B;AAOzB,GANqB,IAAI,aACvB,KAAK,mBACL,KAAK,OAAO,YACZ,WACA,cACD,CACY,OAAO;AACpB;;AAIF,MAAI,OAAO;AACT,QAAK,gBAAgB,IAAI,cACvB,KAAK,mBACL,WACA,cACD;AACD,SAAM,KAAK,cAAc,OAAO;AAChC;;EAIF,MAAM,aAAa,aAAa,gBAAgB;AAChD,MAAI,WAQF,CAPqB,IAAI,aACvB,KAAK,mBACL,YACA,WACA,cACD,CAEY,OAAO;;CAIxB,OAAe,iBAAiB;EAC9B,MAAM,cAAc;GAAC;GAAQ;GAAe;GAAS;GAAU;GAAM;EACrE,MAAM,MAAM,QAAQ,KAAK;AACzB,OAAK,MAAM,KAAK,aAAa;GAC3B,MAAM,WAAW,KAAK,QAAQ,KAAK,EAAE;AACrC,OAAIC,OAAG,WAAW,KAAK,QAAQ,UAAU,aAAa,CAAC,EAAE;AACvD,WAAO,MAAM,iCAAiC,SAAS;AACvD,WAAO;;;;;;;;;CAWb,MAAc,oBAAqC;EACjD,MAAM,YAAY,KAAK,OAAO,QAAQ,aAAa,eAAe;AAElE,MAAI,QAAQ,IAAI,aAAa,eAAe;AAC1C,QAAK,qBAAqB;AAC1B,UAAO;;EAKT,MAAM,OAAO,MAAM,QAAQ;GACzB,MAHW,KAAK,OAAO,QAAQ,aAAa,eAAe;GAI3D,MAAM,YAAY,WAHN,KAAK,IAAI,YAAY,oBAAoB,GAAG,MAAO,CAG5B;GACpC,CAAC;AACF,OAAK,qBAAqB;AAC1B,MAAI,SAAS,UACX,QAAO,KAAK,gCAAgC,WAAW,KAAK;AAE9D,SAAO;;CAGT,AAAQ,iBAAiB;EACvB,MAAM,QAAQ,QAAQ,IAAI,aAAa;EACvC,MAAM,wBAAwB,KAAK,OAAO,eAAe;EACzD,MAAM,OACJ,KAAK,sBACL,KAAK,OAAO,QACZ,aAAa,eAAe;EAC9B,MAAM,OAAO,KAAK,OAAO,QAAQ,aAAa,eAAe;AAE7D,SAAO,KAAK,kCAAkC,MAAM,KAAK;AAEzD,MAAI,sBACF,QAAO,KAAK,qBAAqB,KAAK,OAAO,WAAW;WAC/C,MACT,QAAO,KAAK,+BAA+B;MAE3C,QAAO,KAAK,4BAA4B;EAG1C,MAAM,yBAAyB,KAAK;AACpC,MAAI,CAAC,uBACH,QAAO,MAAM,uDAAuD;MAEpE,QAAO,MACL,yBACA,uBAAuB,gBAAgB,GAAG,YAAY,WACtD,uBAAuB,UAAU,GAAG,WAAW,WAChD;;;;;;;;;;;;;;CAgBL,wBAA8B;AAC5B,QAAM,uBAAuB;AAE7B,MAAI,KAAK,QAAQ;GACf,MAAM,SAAS,KAAK;AACpB,QAAK,eAAe,IAAI,SAAS,YAAY;AAC3C,WAAO,YAAY,SAAS,CAAC;KAC7B;AACF,UAAO,sBAAsB;;;;;;;;;;CAWjC,MAAM,WAA0B;AAC9B,MAAI,KAAK,cACP,OAAM,KAAK,cAAc,OAAO;AAElC,MAAI,KAAK,uBACP,MAAK,uBAAuB,SAAS;;;;;;;;;;;;;CAezC,MAAc,4BAA2C;AACvD,MAAI,KAAK,OACP,MAAK,OAAO,qBAAqB;AAEnC,MAAI,CAAC,KAAK,aAAc;AAExB,QAAM,QAAQ,KAAK,CACjB,KAAK,cACL,IAAI,SAAe,YAAY;AAE7B,GADc,WAAW,SAAS,aAAa,wBAAwB,CACjE,OAAO;IACb,CACH,CAAC;AACF,SAAO,MAAM,2BAA2B;;;;;;CAO1C,UAAU;EACR,MAAM,OAAO;AACb,SAAO;GAEL,OAAO,IAAwC;AAC7C,SAAK,OAAO,GAAG;AACf,WAAO;;GAGT,WAAW,KAAK;GAEhB,WAAW,KAAK;GAEhB,QAAQ;AACN,UAAM,IAAI,YACR,iRAQD;;GAEJ;;;AAIL,MAAM,mBAA6B,CAAC,aAAa,SAAS,KAAK;;AAG/D,SAAgB,yBACd,KACA,KACA,MACA;CACA,MAAM,UAAU,KAAK,KAAK;AAC1B,KAAI,GAAG,gBAAgB;EACrB,MAAM,WAAW,kBAAkB,aAAa;AAChD,MAAI,CAAC,SAAU;EACf,MAAM,YAAa,IAAI,OAAyC;AAChE,MAAI,CAAC,UAAW;EAEhB,MAAM,WAAW,GADD,IAAI,WAAW,KACD;AAC9B,WAAS,cACP,IAAI,QACJ,UACA,IAAI,YACJ,KAAK,KAAK,GAAG,QACd;GACD;AACF,OAAM;;;;;;;AAQR,SAAS,kBACP,OACyC;AACzC,KAAI,EAAE,iBAAiB,UAAU,EAAE,gBAAgB,OAAQ,QAAO;CAClE,MAAM,aAAa,MAAM;AACzB,QACE,OAAO,eAAe,YACtB,OAAO,UAAU,WAAW,IAC5B,cAAc,OACd,cAAc;;;;;;;;;;;;;;;;;;AAoBlB,SAAgB,uBACd,KACA,KACA,KACA,MACA;CACA,MAAM,YACJ,eAAe,eAAe,kBAAkB,IAAI,GAAG,MAAM;CAC/D,MAAM,aAAa,YAAY,UAAU,aAAa;CACtD,MAAM,gBAAgB,aAAa;AAEnC,KAAI,cACF,QAAO,KACL,+CACA,IAAI,QACJ,IAAI,aACJ,YACA,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CACjD;KAED,QAAO,MACL,iCACA,IAAI,QACJ,IAAI,aAGJ,eAAe,cAAc,IAAI,QAAQ,GAAG,IAC7C;AAGH,KAAI,IAAI,aAAa;AACnB,OAAK,IAAI;AACT;;CAGF,MAAM,QAAQ,QAAQ,IAAI,aAAa;CACvC,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU;AAErD,KAAI,OAAO,WAAW,CAAC,KAAK,EAC1B,OAAO,SAAS,gBAAgB,UAAU,gBAC3C,CAAC;;;;;AAMJ,MAAa,SAAS,SAAS,aAAa"}

package/dist/plugins/server/remote-tunnel/remote-tunnel-manager.js

@@ -3,7 +3,7 @@ import { REMOTE_TUNNEL_ASSET_PREFIXES } from "./gate.js";
 import { generateTunnelIdFromEmail, getConfigScript, parseCookies } from "../utils.js";
 import { randomUUID } from "node:crypto";
 import path from "node:path";
-import fs from "node:fs";
+import fsSync from "node:fs";
 import { fileURLToPath } from "node:url";
 import { WebSocketServer } from "ws";
 
@@ -118,7 +118,7 @@ var RemoteTunnelManager = class {
 				sameSite: "lax"
 			});
 			const indexPath = path.join(__dirname, "index.html");
-			let html = fs.readFileSync(indexPath, "utf-8");
+			let html = fsSync.readFileSync(indexPath, "utf-8");
 			html = html.replace("<body>", `<body>${getConfigScript()}`);
 			res.send(html);
 		};
@@ -133,7 +133,7 @@ var RemoteTunnelManager = class {
 	}
 	loadHtmlTemplate(filename, replacements) {
 		const filePath = path.join(__dirname, filename);
-		let content = fs.readFileSync(filePath, "utf-8");
+		let content = fsSync.readFileSync(filePath, "utf-8");
 		for (const [key, value] of Object.entries(replacements)) content = content.replaceAll(`{{${key}}}`, value);
 		return content;
 	}