@demiurgejs/core 0.2.0-beta.4 → 0.2.0-beta.5

package/dist/cli.js

@@ -1,11 +1,128 @@
-import { readdir as g, readFile as b } from "node:fs/promises";
-import { resolve as p, join as D, relative as m, sep as v, isAbsolute as y } from "node:path";
-import { pathToFileURL as R } from "node:url";
-import { c as E } from "./chunks/vite-DO70kZA6.js";
-import { p as S } from "./chunks/manifest-vO6c0G0W.js";
-import { generateStaticOutput as N, generateVercelStaticOutput as T } from "./static/index.js";
-const I = /* @__PURE__ */ new Set(["--host", "--origin", "--out-dir", "--port"]), V = "virtual:demiurge/client-entry", _ = "virtual:demiurge/server-entry", O = "dist", j = "dist/server", U = ".demiurge/server";
-function J(t, e = {}) {
+import { readdir as D, readFile as N } from "node:fs/promises";
+import { relative as l, sep as f, resolve as d, join as I, isAbsolute as E } from "node:path";
+import { pathToFileURL as b } from "node:url";
+import { t as _, c as O } from "./chunks/vite-QoqrGl6f.js";
+import { p as P } from "./chunks/manifest-vO6c0G0W.js";
+import { generateStaticOutput as C, generateVercelStaticOutput as $ } from "./static/index.js";
+import { t as V, a as j } from "./chunks/testing-CUwGj2ie.js";
+import { v as F, B as S } from "./chunks/plugin-BZauDxRY.js";
+import "./chunks/index-0MNiR_wo.js";
+import "node:fs";
+import "magic-string";
+import "vite";
+import "react-dom/server";
+import "react";
+import "react/jsx-runtime";
+import "node:stream";
+import "node:stream/promises";
+import "node:net";
+import "node:crypto";
+const x = 1, A = 1, U = [
+  "authorization-result",
+  "cookie-values",
+  "csrf-token",
+  "environment-values",
+  "rate-limit-state",
+  "request-headers",
+  "response-headers",
+  "session-record"
+];
+async function L(t) {
+  const e = t.options ?? {}, r = await F(t.root, e), o = r.inspections.map((i) => M(r.routesDir, i)).sort((i, s) => i.file.localeCompare(s.file));
+  return {
+    findings: r.findings,
+    redactions: [],
+    request: U,
+    resolutions: {
+      findings: "static",
+      redactions: "static",
+      request: "request",
+      routes: "static"
+    },
+    routes: o,
+    routesDir: h(l(t.root, r.routesDir)),
+    version: x
+  };
+}
+function q(t) {
+  return Object.entries(t ?? {}).filter(([, e]) => e.sensitive).map(([e]) => e).sort();
+}
+function R(t) {
+  return t.findings.filter((e) => e.severity === "error").length;
+}
+function k(t) {
+  const e = R(t), r = t.findings.length - e;
+  return [
+    `Demiurge inspected ${t.routes.length} route files in ${t.routesDir}.`,
+    `Findings: ${e} error, ${r} warning.`,
+    `The report states ${t.request.length} facts that only a request supplies.`,
+    ...t.findings.map(
+      (o) => `  ${o.severity}: ${h(o.file)} [${o.code}] ${o.message}`
+    )
+  ].join(`
+`);
+}
+function M(t, e) {
+  const r = h(l(t, e.file)), o = r.replace(/\.tsx?$/, "").split("/"), i = o.at(-1)?.startsWith("@") ?? !1;
+  return {
+    declaredAccess: e.accessState,
+    declaredDocumentCsp: e.documentCspState,
+    declaresDocumentPolicy: e.declaresDocumentPolicy,
+    file: r,
+    kind: i ? "attached" : e.declaresPageRoute ? "page" : "resource",
+    methods: e.methods,
+    ...i ? {} : { pattern: V(j(o)) }
+  };
+}
+function h(t) {
+  return t.split(f).join("/");
+}
+const W = 0, B = 1, J = 2;
+async function Ot(t) {
+  if (t.arguments.length > 0)
+    return v(
+      "invalid-argument",
+      "The inspect command accepts no argument.",
+      `The command received ${t.arguments.join(" ")}.`
+    );
+  let e;
+  try {
+    e = await t.loadConfig();
+  } catch (o) {
+    return v(
+      "configuration-unreadable",
+      "Demiurge could not read the configuration.",
+      o instanceof Error ? o.message : String(o)
+    );
+  }
+  const r = await L({
+    options: _(e),
+    root: e.root
+  });
+  return {
+    exitCode: R(r) > 0 ? B : W,
+    stderr: k(r),
+    stdout: S(r, {
+      secretEnvKeys: q(e.env)
+    })
+  };
+}
+function v(t, e, r) {
+  const o = {
+    code: t,
+    detail: r,
+    title: e,
+    version: A
+  };
+  return {
+    exitCode: J,
+    stderr: `${e}
+${r}`,
+    stdout: S(o)
+  };
+}
+const K = /* @__PURE__ */ new Set(["--host", "--origin", "--out-dir", "--port"]), G = "virtual:demiurge/client-entry", X = "virtual:demiurge/server-entry", T = "dist", Y = "dist/server", z = ".demiurge/server";
+function St(t, e = {}) {
   const r = t[0];
   if (!r || r === "--help" || r === "-h" || r === "help")
     return {
@@ -13,7 +130,7 @@ function J(t, e = {}) {
       host: "localhost",
       port: 4173
     };
-  if (r !== "build" && r !== "dev" && r !== "preview")
+  if (r !== "build" && r !== "dev" && r !== "inspect" && r !== "preview")
     throw new Error(`Unknown command: ${r}`);
   const o = {
     command: r,
@@ -21,30 +138,31 @@ function J(t, e = {}) {
     origin: e.SITE_ORIGIN,
     port: r === "dev" ? 5173 : 4173
   };
-  for (let n = 1; n < t.length; n += 1) {
-    const i = t[n];
-    if (i === "--help" || i === "-h")
+  for (let i = 1; i < t.length; i += 1) {
+    const s = t[i];
+    if (s === "--help" || s === "-h")
       return { command: "help", host: "localhost", port: 4173 };
-    const [s, c] = i.split("=", 2);
-    if (!I.has(s))
-      throw new Error(`Unknown option: ${i}`);
-    const a = c ?? t[++n];
+    const [n, u] = s.split("=", 2);
+    if (!K.has(n))
+      throw new Error(`Unknown option: ${s}`);
+    const a = u ?? t[++i];
     if (!a || a.startsWith("--"))
-      throw new Error(`Option ${s} requires a value.`);
-    if (s === "--host" && (o.host = a), s === "--origin" && (o.origin = a), s === "--out-dir" && (o.outDir = a), s === "--port") {
-      const u = Number(a);
-      if (!Number.isSafeInteger(u) || u < 0 || u > 65535)
+      throw new Error(`Option ${n} requires a value.`);
+    if (n === "--host" && (o.host = a), n === "--origin" && (o.origin = a), n === "--out-dir" && (o.outDir = a), n === "--port") {
+      const c = Number(a);
+      if (!Number.isSafeInteger(c) || c < 0 || c > 65535)
         throw new Error("The server port must be an integer from 0 through 65535.");
-      o.port = u;
+      o.port = c;
     }
   }
   return o;
 }
-const G = `Usage: demiurge <command> [options]
+const Rt = `Usage: demiurge <command> [options]
 
 Commands:
   dev                   Start the development server
   build                 Build production output
+  inspect               Write the static inspection report as JSON
   preview               Serve static output with its declared headers
 
 Options:
@@ -54,10 +172,14 @@ Options:
   --port <port>         Set the server port (dev: 5173, preview: 4173)
   -h, --help            Show this help
 
+The inspect command writes JSON to standard output and a summary to standard
+error. It exits with 0 for no error finding, 1 for at least one error finding,
+and 2 for an invalid argument or an unreadable configuration.
+
 Demiurge reads demiurge.config.ts from the project root.`;
-async function H(t, e) {
+async function Tt(t, e) {
   const { createServer: r } = await import("vite"), o = await r(
-    await E({
+    await O({
       config: e,
       overrides: {
         mode: "development",
@@ -67,60 +189,60 @@ async function H(t, e) {
   );
   return await o.listen(), o;
 }
-async function Y(t, e, r) {
-  const o = e.root, n = r?.build ?? (await import("vite")).build, i = r?.createViteConfig ?? ((d) => E({ config: e, overrides: d })), s = p(
+async function Dt(t, e, r) {
+  const o = e.root, i = r?.build ?? (await import("vite")).build, s = r?.createViteConfig ?? ((p) => O({ config: e, overrides: p })), n = d(
     o,
-    t.outDir ?? e.deployment?.outDir ?? O
-  ), c = p(o, U);
-  await F(
+    t.outDir ?? e.deployment?.outDir ?? T
+  ), u = d(o, z);
+  await Q(
     o,
-    s,
-    D(o, "public"),
-    c
-  ), await n(
-    await i({
+    n,
+    I(o, "public"),
+    u
+  ), await i(
+    await s({
       define: { "process.env.NODE_ENV": JSON.stringify("production") },
       mode: "production",
       build: {
         emptyOutDir: !0,
-        outDir: s,
-        rollupOptions: { input: V }
+        outDir: n,
+        rollupOptions: { input: G }
       }
     })
   );
-  const a = e.deployment?.server, u = a ? p(o, a.outDir ?? j) : void 0;
-  return a && u && await n(
-    await i({
+  const a = e.deployment?.server, c = a ? d(o, a.outDir ?? Y) : void 0;
+  return a && c && await i(
+    await s({
       define: { "process.env.NODE_ENV": JSON.stringify("production") },
       mode: "production",
       build: {
         copyPublicDir: !1,
         emptyOutDir: !0,
-        outDir: u,
-        rollupOptions: { input: p(o, a.entry) },
+        outDir: c,
+        rollupOptions: { input: d(o, a.entry) },
         ssr: !0
       }
     })
-  ), e.deployment?.static ? { ...await C({
-    build: n,
+  ), e.deployment?.static ? { ...await H({
+    build: i,
     config: e,
-    createViteConfig: i,
-    frameworkServerOutDir: c,
+    createViteConfig: s,
+    frameworkServerOutDir: u,
     options: t,
-    outDir: s,
+    outDir: n,
     root: o,
     runtime: r
-  }), outDir: s, serverOutDir: u } : { outDir: s, serverOutDir: u };
+  }), outDir: n, serverOutDir: c } : { outDir: n, serverOutDir: c };
 }
-async function C({
+async function H({
   build: t,
   config: e,
   createViteConfig: r,
   frameworkServerOutDir: o,
-  options: n,
-  outDir: i,
-  root: s,
-  runtime: c
+  options: i,
+  outDir: s,
+  root: n,
+  runtime: u
 }) {
   await t(
     await r({
@@ -131,78 +253,82 @@ async function C({
         emptyOutDir: !0,
         outDir: o,
         rollupOptions: {
-          input: _,
+          input: X,
           output: { entryFileNames: "server-entry.js" }
         },
         ssr: !0
       }
     })
   );
-  const a = S(
-    c ? await c.readText(p(i, "demiurge-manifest.json")) : await b(p(i, "demiurge-manifest.json"), "utf8")
-  ), u = `${R(p(o, "server-entry.js")).href}?build=${c?.now() ?? Date.now()}`, l = c ? await c.importModule(u) : await import(u);
-  if (!A(l.routes))
+  const a = P(
+    u ? await u.readText(d(s, "demiurge-manifest.json")) : await N(d(s, "demiurge-manifest.json"), "utf8")
+  ), c = `${b(d(o, "server-entry.js")).href}?build=${u?.now() ?? Date.now()}`, m = u ? await u.importModule(c) : await import(c);
+  if (!Z(m.routes))
     throw new Error("The framework server bundle does not export routes.");
-  const d = await (c?.generate ?? N)({
+  const p = await (u?.generate ?? C)({
     fonts: e.assets?.fonts,
     images: e.assets?.images,
-    origin: n.origin ?? e.deployment?.static?.origin,
-    outDir: i,
-    root: s,
-    routes: l.routes,
+    origin: i.origin ?? e.deployment?.static?.origin,
+    outDir: s,
+    root: n,
+    routes: m.routes,
     ssr: a,
     staticFileHeaders: e.security?.staticFileHeaders ?? []
-  }), h = e.deployment?.static?.provider;
-  return { deploymentOutDir: h ? await T({
-    deployment: h,
-    manifest: d,
-    outDir: i,
-    projectRoot: s
-  }) : void 0, manifest: d };
-}
-function q(t, e, r) {
-  return p(t, e ?? r ?? O);
-}
-async function F(t, e, r, o) {
-  const n = m(t, e);
-  if (!n || n === ".." || n.startsWith(`..${v}`) || y(n))
+  }), g = e.deployment?.static?.provider;
+  return { deploymentOutDir: g ? await $({
+    deployment: g,
+    manifest: p,
+    outDir: s,
+    projectRoot: n
+  }) : void 0, manifest: p };
+}
+function Nt(t, e, r) {
+  return d(t, e ?? r ?? T);
+}
+async function Q(t, e, r, o) {
+  const i = l(t, e);
+  if (!i || i === ".." || i.startsWith(`..${f}`) || E(i))
     throw new Error("The static output directory must be inside the Vite root.");
-  if (r && f(e, r))
+  if (r && w(e, r))
     throw new Error("The static output directory must not overlap the Vite public directory.");
-  if (f(e, o))
+  if (w(e, o))
     throw new Error("The static output directory must not overlap the framework server directory.");
-  let i;
+  let s;
   try {
-    i = await g(e);
-  } catch (s) {
-    if ($(s)) return;
-    throw s;
+    s = await D(e);
+  } catch (n) {
+    if (tt(n)) return;
+    throw n;
   }
-  if (i.length && !i.includes("demiurge-manifest.json") && !i.includes("demiurge-static-manifest.json"))
+  if (s.length && !s.includes("demiurge-manifest.json") && !s.includes("demiurge-static-manifest.json"))
     throw new Error(
       "The static output directory contains files that a Demiurge build did not create."
     );
 }
-function A(t) {
+function Z(t) {
   return !t || typeof t != "object" || Array.isArray(t) ? !1 : Object.values(t).every((e) => typeof e == "function");
 }
-function f(t, e) {
-  const r = m(t, e), o = m(e, t);
-  return w(r) || w(o);
+function w(t, e) {
+  const r = l(t, e), o = l(e, t);
+  return y(r) || y(o);
 }
-function w(t) {
-  return !t || t !== ".." && !t.startsWith(`..${v}`) && !y(t);
+function y(t) {
+  return !t || t !== ".." && !t.startsWith(`..${f}`) && !E(t);
 }
-function $(t) {
+function tt(t) {
   return t instanceof Error && "code" in t && t.code === "ENOENT";
 }
 export {
-  G as helpText,
-  J as parseCliArguments,
-  S as parseClientManifest,
-  q as resolvePreviewOutputDirectory,
-  Y as runBuild,
-  H as runDev,
-  F as validateBuildOutputDirectory
+  B as INSPECT_EXIT_FINDINGS,
+  J as INSPECT_EXIT_INVALID,
+  W as INSPECT_EXIT_OK,
+  Rt as helpText,
+  St as parseCliArguments,
+  P as parseClientManifest,
+  Nt as resolvePreviewOutputDirectory,
+  Dt as runBuild,
+  Tt as runDev,
+  Ot as runInspectCommand,
+  Q as validateBuildOutputDirectory
 };
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sources":["../src/cli.ts"],"sourcesContent":["import { readFile, readdir } from \"node:fs/promises\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport type { InlineConfig } from \"vite\";\nimport { createDemiurgeViteConfig } from \"./config/vite\";\nimport type { ResolvedDemiurgeConfig } from \"./config/types\";\nimport { parseClientManifest } from \"./manifest\";\nimport type { RouteImporter } from \"./route\";\nimport {\n  generateVercelStaticOutput,\n  generateStaticOutput,\n  type GenerateStaticOutputOptions,\n  type StaticOutputManifest,\n} from \"./static\";\n\nexport { parseClientManifest } from \"./manifest\";\nexport type { ClientBuildManifest } from \"./manifest\";\n\ntype CliEnvironment = Record<string, string | undefined>;\n\nconst cliOptionNames = new Set([\"--host\", \"--origin\", \"--out-dir\", \"--port\"]);\n\nconst CLIENT_ENTRY = \"virtual:demiurge/client-entry\";\nconst SERVER_ENTRY = \"virtual:demiurge/server-entry\";\nconst DEFAULT_CLIENT_OUT_DIR = \"dist\";\nconst DEFAULT_SERVER_OUT_DIR = \"dist/server\";\nconst FRAMEWORK_SERVER_OUT_DIR = \".demiurge/server\";\n\nexport type CliOptions = {\n  command: \"build\" | \"dev\" | \"help\" | \"preview\";\n  host: string;\n  origin?: string;\n  outDir?: string;\n  port: number;\n};\n\nexport type BuildRuntime = {\n  build: (config: InlineConfig) => Promise<unknown>;\n  createViteConfig: (overrides: InlineConfig) => Promise<InlineConfig>;\n  generate: (\n    options: GenerateStaticOutputOptions,\n  ) => Promise<StaticOutputManifest>;\n  importModule: (specifier: string) => Promise<Record<string, unknown>>;\n  now: () => number;\n  readText: (file: string) => Promise<string>;\n};\n\nexport type BuildResult = {\n  deploymentOutDir?: string;\n  manifest?: StaticOutputManifest;\n  outDir: string;\n  serverOutDir?: string;\n};\n\nexport function parseCliArguments(\n  arguments_: string[],\n  environment: CliEnvironment = {},\n): CliOptions {\n  const command = arguments_[0];\n  if (!command || command === \"--help\" || command === \"-h\" || command === \"help\") {\n    return {\n      command: \"help\",\n      host: \"localhost\",\n      port: 4173,\n    };\n  }\n  if (command !== \"build\" && command !== \"dev\" && command !== \"preview\") {\n    throw new Error(`Unknown command: ${command}`);\n  }\n\n  const options: CliOptions = {\n    command,\n    host: \"localhost\",\n    origin: environment.SITE_ORIGIN,\n    port: command === \"dev\" ? 5173 : 4173,\n  };\n\n  for (let index = 1; index < arguments_.length; index += 1) {\n    const argument = arguments_[index]!;\n    if (argument === \"--help\" || argument === \"-h\") {\n      return { command: \"help\", host: \"localhost\", port: 4173 };\n    }\n    const [name, inlineValue] = argument.split(\"=\", 2);\n    if (!cliOptionNames.has(name!)) {\n      throw new Error(`Unknown option: ${argument}`);\n    }\n    const value = inlineValue ?? arguments_[++index];\n    if (!value || value.startsWith(\"--\")) {\n      throw new Error(`Option ${name} requires a value.`);\n    }\n\n    if (name === \"--host\") options.host = value;\n    if (name === \"--origin\") options.origin = value;\n    if (name === \"--out-dir\") options.outDir = value;\n    if (name === \"--port\") {\n      const port = Number(value);\n      if (!Number.isSafeInteger(port) || port < 0 || port > 65_535) {\n        throw new Error(\"The server port must be an integer from 0 through 65535.\");\n      }\n      options.port = port;\n    }\n  }\n\n  return options;\n}\n\nexport const helpText = `Usage: demiurge <command> [options]\n\nCommands:\n  dev                   Start the development server\n  build                 Build production output\n  preview               Serve static output with its declared headers\n\nOptions:\n  --host <host>         Set the server host (default: localhost)\n  --origin <origin>     Set the build origin (default: SITE_ORIGIN)\n  --out-dir <directory> Set the client output directory (default: dist)\n  --port <port>         Set the server port (dev: 5173, preview: 4173)\n  -h, --help            Show this help\n\nDemiurge reads demiurge.config.ts from the project root.`;\n\nexport async function runDev(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n) {\n  const { createServer } = await import(\"vite\");\n  const server = await createServer(\n    await createDemiurgeViteConfig({\n      config,\n      overrides: {\n        mode: \"development\",\n        server: { host: options.host, port: options.port },\n      },\n    }),\n  );\n  await server.listen();\n  return server;\n}\n\nexport async function runBuild(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n  runtime?: BuildRuntime,\n): Promise<BuildResult> {\n  const root = config.root;\n  const build = runtime?.build ?? (await import(\"vite\")).build;\n  const createViteConfig = runtime?.createViteConfig ??\n    ((overrides: InlineConfig) => createDemiurgeViteConfig({ config, overrides }));\n\n  const outDir = resolve(\n    root,\n    options.outDir ?? config.deployment?.outDir ?? DEFAULT_CLIENT_OUT_DIR,\n  );\n  const frameworkServerOutDir = resolve(root, FRAMEWORK_SERVER_OUT_DIR);\n\n  await validateBuildOutputDirectory(\n    root,\n    outDir,\n    join(root, \"public\"),\n    frameworkServerOutDir,\n  );\n\n  await build(\n    await createViteConfig({\n      define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n      mode: \"production\",\n      build: {\n        emptyOutDir: true,\n        outDir,\n        rollupOptions: { input: CLIENT_ENTRY },\n      },\n    }),\n  );\n\n  const applicationServer = config.deployment?.server;\n  const serverOutDir = applicationServer\n    ? resolve(root, applicationServer.outDir ?? DEFAULT_SERVER_OUT_DIR)\n    : undefined;\n\n  if (applicationServer && serverOutDir) {\n    await build(\n      await createViteConfig({\n        define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n        mode: \"production\",\n        build: {\n          copyPublicDir: false,\n          emptyOutDir: true,\n          outDir: serverOutDir,\n          rollupOptions: { input: resolve(root, applicationServer.entry) },\n          ssr: true,\n        },\n      }),\n    );\n  }\n\n  if (!config.deployment?.static) return { outDir, serverOutDir };\n\n  const staticResult = await buildStaticOutput({\n    build,\n    config,\n    createViteConfig,\n    frameworkServerOutDir,\n    options,\n    outDir,\n    root,\n    runtime,\n  });\n\n  return { ...staticResult, outDir, serverOutDir };\n}\n\nasync function buildStaticOutput({\n  build,\n  config,\n  createViteConfig,\n  frameworkServerOutDir,\n  options,\n  outDir,\n  root,\n  runtime,\n}: {\n  build: (config: InlineConfig) => Promise<unknown>;\n  config: ResolvedDemiurgeConfig;\n  createViteConfig: (overrides: InlineConfig) => Promise<InlineConfig>;\n  frameworkServerOutDir: string;\n  options: CliOptions;\n  outDir: string;\n  root: string;\n  runtime?: BuildRuntime;\n}) {\n  await build(\n    await createViteConfig({\n      define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n      mode: \"production\",\n      build: {\n        copyPublicDir: false,\n        emptyOutDir: true,\n        outDir: frameworkServerOutDir,\n        rollupOptions: {\n          input: SERVER_ENTRY,\n          output: { entryFileNames: \"server-entry.js\" },\n        },\n        ssr: true,\n      },\n    }),\n  );\n\n  const clientManifest = parseClientManifest(\n    runtime\n      ? await runtime.readText(resolve(outDir, \"demiurge-manifest.json\"))\n      : await readFile(resolve(outDir, \"demiurge-manifest.json\"), \"utf8\"),\n  );\n  const serverEntryUrl = `${\n    pathToFileURL(resolve(frameworkServerOutDir, \"server-entry.js\")).href\n  }?build=${runtime?.now() ?? Date.now()}`;\n  const serverEntry = runtime\n    ? await runtime.importModule(serverEntryUrl)\n    : await import(serverEntryUrl);\n  if (!isRouteImporterRecord(serverEntry.routes)) {\n    throw new Error(\"The framework server bundle does not export routes.\");\n  }\n\n  const manifest = await (runtime?.generate ?? generateStaticOutput)({\n    fonts: config.assets?.fonts,\n    images: config.assets?.images,\n    origin: options.origin ?? config.deployment?.static?.origin,\n    outDir,\n    root,\n    routes: serverEntry.routes,\n    ssr: clientManifest,\n    staticFileHeaders: config.security?.staticFileHeaders ?? [],\n  });\n\n  const provider = config.deployment?.static?.provider;\n  const deploymentOutDir = provider\n    ? await generateVercelStaticOutput({\n      deployment: provider,\n      manifest,\n      outDir,\n      projectRoot: root,\n    })\n    : undefined;\n\n  return { deploymentOutDir, manifest };\n}\n\nexport function resolvePreviewOutputDirectory(\n  root: string,\n  outDir: string | undefined,\n  configuredOutDir?: string,\n) {\n  return resolve(root, outDir ?? configuredOutDir ?? DEFAULT_CLIENT_OUT_DIR);\n}\n\nexport async function validateBuildOutputDirectory(\n  root: string,\n  outDir: string,\n  publicDir: false | string,\n  serverOutDir: string,\n) {\n  const pathFromRoot = relative(root, outDir);\n  if (\n    !pathFromRoot ||\n    pathFromRoot === \"..\" ||\n    pathFromRoot.startsWith(`..${sep}`) ||\n    isAbsolute(pathFromRoot)\n  ) {\n    throw new Error(\"The static output directory must be inside the Vite root.\");\n  }\n\n  if (publicDir && pathsOverlap(outDir, publicDir)) {\n    throw new Error(\"The static output directory must not overlap the Vite public directory.\");\n  }\n\n  if (pathsOverlap(outDir, serverOutDir)) {\n    throw new Error(\"The static output directory must not overlap the framework server directory.\");\n  }\n\n  let entries: string[];\n  try {\n    entries = await readdir(outDir);\n  } catch (error) {\n    if (isMissingPath(error)) return;\n    throw error;\n  }\n\n  if (\n    entries.length &&\n    !entries.includes(\"demiurge-manifest.json\") &&\n    !entries.includes(\"demiurge-static-manifest.json\")\n  ) {\n    throw new Error(\n      \"The static output directory contains files that a Demiurge build did not create.\",\n    );\n  }\n}\n\nfunction isRouteImporterRecord(\n  value: unknown,\n): value is Record<string, RouteImporter> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return false;\n  }\n\n  return Object.values(value).every((load) => typeof load === \"function\");\n}\n\nfunction pathsOverlap(left: string, right: string) {\n  const fromLeft = relative(left, right);\n  const fromRight = relative(right, left);\n  return isSameOrChildPath(fromLeft) || isSameOrChildPath(fromRight);\n}\n\nfunction isSameOrChildPath(pathname: string) {\n  return !pathname ||\n    (pathname !== \"..\" && !pathname.startsWith(`..${sep}`) &&\n      !isAbsolute(pathname));\n}\n\nfunction isMissingPath(error: unknown) {\n  return error instanceof Error && \"code\" in error && error.code === \"ENOENT\";\n}\n"],"names":["cliOptionNames","CLIENT_ENTRY","SERVER_ENTRY","DEFAULT_CLIENT_OUT_DIR","DEFAULT_SERVER_OUT_DIR","FRAMEWORK_SERVER_OUT_DIR","parseCliArguments","arguments_","environment","command","options","index","argument","name","inlineValue","value","port","helpText","runDev","config","createServer","server","createDemiurgeViteConfig","runBuild","runtime","root","build","createViteConfig","overrides","outDir","resolve","frameworkServerOutDir","validateBuildOutputDirectory","join","applicationServer","serverOutDir","buildStaticOutput","clientManifest","parseClientManifest","readFile","serverEntryUrl","pathToFileURL","serverEntry","isRouteImporterRecord","manifest","generateStaticOutput","provider","generateVercelStaticOutput","resolvePreviewOutputDirectory","configuredOutDir","publicDir","pathFromRoot","relative","sep","isAbsolute","pathsOverlap","entries","readdir","error","isMissingPath","load","left","right","fromLeft","fromRight","isSameOrChildPath","pathname"],"mappings":";;;;;;AAoBA,MAAMA,wBAAqB,IAAI,CAAC,UAAU,YAAY,aAAa,QAAQ,CAAC,GAEtEC,IAAe,iCACfC,IAAe,iCACfC,IAAyB,QACzBC,IAAyB,eACzBC,IAA2B;AA4B1B,SAASC,EACdC,GACAC,IAA8B,IAClB;AACZ,QAAMC,IAAUF,EAAW,CAAC;AAC5B,MAAI,CAACE,KAAWA,MAAY,YAAYA,MAAY,QAAQA,MAAY;AACtE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,IAAA;AAGV,MAAIA,MAAY,WAAWA,MAAY,SAASA,MAAY;AAC1D,UAAM,IAAI,MAAM,oBAAoBA,CAAO,EAAE;AAG/C,QAAMC,IAAsB;AAAA,IAC1B,SAAAD;AAAA,IACA,MAAM;AAAA,IACN,QAAQD,EAAY;AAAA,IACpB,MAAMC,MAAY,QAAQ,OAAO;AAAA,EAAA;AAGnC,WAASE,IAAQ,GAAGA,IAAQJ,EAAW,QAAQI,KAAS,GAAG;AACzD,UAAMC,IAAWL,EAAWI,CAAK;AACjC,QAAIC,MAAa,YAAYA,MAAa;AACxC,aAAO,EAAE,SAAS,QAAQ,MAAM,aAAa,MAAM,KAAA;AAErD,UAAM,CAACC,GAAMC,CAAW,IAAIF,EAAS,MAAM,KAAK,CAAC;AACjD,QAAI,CAACZ,EAAe,IAAIa,CAAK;AAC3B,YAAM,IAAI,MAAM,mBAAmBD,CAAQ,EAAE;AAE/C,UAAMG,IAAQD,KAAeP,EAAW,EAAEI,CAAK;AAC/C,QAAI,CAACI,KAASA,EAAM,WAAW,IAAI;AACjC,YAAM,IAAI,MAAM,UAAUF,CAAI,oBAAoB;AAMpD,QAHIA,MAAS,aAAUH,EAAQ,OAAOK,IAClCF,MAAS,eAAYH,EAAQ,SAASK,IACtCF,MAAS,gBAAaH,EAAQ,SAASK,IACvCF,MAAS,UAAU;AACrB,YAAMG,IAAO,OAAOD,CAAK;AACzB,UAAI,CAAC,OAAO,cAAcC,CAAI,KAAKA,IAAO,KAAKA,IAAO;AACpD,cAAM,IAAI,MAAM,0DAA0D;AAE5E,MAAAN,EAAQ,OAAOM;AAAA,IACjB;AAAA,EACF;AAEA,SAAON;AACT;AAEO,MAAMO,IAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBxB,eAAsBC,EACpBR,GACAS,GACA;AACA,QAAM,EAAE,cAAAC,EAAA,IAAiB,MAAM,OAAO,MAAM,GACtCC,IAAS,MAAMD;AAAA,IACnB,MAAME,EAAyB;AAAA,MAC7B,QAAAH;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ,EAAE,MAAMT,EAAQ,MAAM,MAAMA,EAAQ,KAAA;AAAA,MAAK;AAAA,IACnD,CACD;AAAA,EAAA;AAEH,eAAMW,EAAO,OAAA,GACNA;AACT;AAEA,eAAsBE,EACpBb,GACAS,GACAK,GACsB;AACtB,QAAMC,IAAON,EAAO,MACdO,IAAQF,GAAS,UAAU,MAAM,OAAO,MAAM,GAAG,OACjDG,IAAmBH,GAAS,qBAC/B,CAACI,MAA4BN,EAAyB,EAAE,QAAAH,GAAQ,WAAAS,EAAA,CAAW,IAExEC,IAASC;AAAA,IACbL;AAAA,IACAf,EAAQ,UAAUS,EAAO,YAAY,UAAUhB;AAAA,EAAA,GAE3C4B,IAAwBD,EAAQL,GAAMpB,CAAwB;AAEpE,QAAM2B;AAAA,IACJP;AAAA,IACAI;AAAA,IACAI,EAAKR,GAAM,QAAQ;AAAA,IACnBM;AAAA,EAAA,GAGF,MAAML;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,aAAa;AAAA,QACb,QAAAE;AAAA,QACA,eAAe,EAAE,OAAO5B,EAAA;AAAA,MAAa;AAAA,IACvC,CACD;AAAA,EAAA;AAGH,QAAMiC,IAAoBf,EAAO,YAAY,QACvCgB,IAAeD,IACjBJ,EAAQL,GAAMS,EAAkB,UAAU9B,CAAsB,IAChE;AAkBJ,SAhBI8B,KAAqBC,KACvB,MAAMT;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,eAAe;AAAA,QACf,aAAa;AAAA,QACb,QAAQQ;AAAA,QACR,eAAe,EAAE,OAAOL,EAAQL,GAAMS,EAAkB,KAAK,EAAA;AAAA,QAC7D,KAAK;AAAA,MAAA;AAAA,IACP,CACD;AAAA,EAAA,GAIAf,EAAO,YAAY,SAajB,EAAE,GAXY,MAAMiB,EAAkB;AAAA,IAC3C,OAAAV;AAAA,IACA,QAAAP;AAAA,IACA,kBAAAQ;AAAA,IACA,uBAAAI;AAAA,IACA,SAAArB;AAAA,IACA,QAAAmB;AAAA,IACA,MAAAJ;AAAA,IACA,SAAAD;AAAA,EAAA,CACD,GAEyB,QAAAK,GAAQ,cAAAM,EAAA,IAbK,EAAE,QAAAN,GAAQ,cAAAM,EAAA;AAcnD;AAEA,eAAeC,EAAkB;AAAA,EAC/B,OAAAV;AAAA,EACA,QAAAP;AAAA,EACA,kBAAAQ;AAAA,EACA,uBAAAI;AAAA,EACA,SAAArB;AAAA,EACA,QAAAmB;AAAA,EACA,MAAAJ;AAAA,EACA,SAAAD;AACF,GASG;AACD,QAAME;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,eAAe;AAAA,QACf,aAAa;AAAA,QACb,QAAQI;AAAA,QACR,eAAe;AAAA,UACb,OAAO7B;AAAA,UACP,QAAQ,EAAE,gBAAgB,kBAAA;AAAA,QAAkB;AAAA,QAE9C,KAAK;AAAA,MAAA;AAAA,IACP,CACD;AAAA,EAAA;AAGH,QAAMmC,IAAiBC;AAAA,IACrBd,IACI,MAAMA,EAAQ,SAASM,EAAQD,GAAQ,wBAAwB,CAAC,IAChE,MAAMU,EAAST,EAAQD,GAAQ,wBAAwB,GAAG,MAAM;AAAA,EAAA,GAEhEW,IAAiB,GACrBC,EAAcX,EAAQC,GAAuB,iBAAiB,CAAC,EAAE,IACnE,UAAUP,GAAS,IAAA,KAAS,KAAK,KAAK,IAChCkB,IAAclB,IAChB,MAAMA,EAAQ,aAAagB,CAAc,IACzC,MAAM,OAAOA;AACjB,MAAI,CAACG,EAAsBD,EAAY,MAAM;AAC3C,UAAM,IAAI,MAAM,qDAAqD;AAGvE,QAAME,IAAW,OAAOpB,GAAS,YAAYqB,GAAsB;AAAA,IACjE,OAAO1B,EAAO,QAAQ;AAAA,IACtB,QAAQA,EAAO,QAAQ;AAAA,IACvB,QAAQT,EAAQ,UAAUS,EAAO,YAAY,QAAQ;AAAA,IACrD,QAAAU;AAAA,IACA,MAAAJ;AAAA,IACA,QAAQiB,EAAY;AAAA,IACpB,KAAKL;AAAA,IACL,mBAAmBlB,EAAO,UAAU,qBAAqB,CAAA;AAAA,EAAC,CAC3D,GAEK2B,IAAW3B,EAAO,YAAY,QAAQ;AAU5C,SAAO,EAAE,kBATgB2B,IACrB,MAAMC,EAA2B;AAAA,IACjC,YAAYD;AAAA,IACZ,UAAAF;AAAA,IACA,QAAAf;AAAA,IACA,aAAaJ;AAAA,EAAA,CACd,IACC,QAEuB,UAAAmB,EAAA;AAC7B;AAEO,SAASI,EACdvB,GACAI,GACAoB,GACA;AACA,SAAOnB,EAAQL,GAAMI,KAAUoB,KAAoB9C,CAAsB;AAC3E;AAEA,eAAsB6B,EACpBP,GACAI,GACAqB,GACAf,GACA;AACA,QAAMgB,IAAeC,EAAS3B,GAAMI,CAAM;AAC1C,MACE,CAACsB,KACDA,MAAiB,QACjBA,EAAa,WAAW,KAAKE,CAAG,EAAE,KAClCC,EAAWH,CAAY;AAEvB,UAAM,IAAI,MAAM,2DAA2D;AAG7E,MAAID,KAAaK,EAAa1B,GAAQqB,CAAS;AAC7C,UAAM,IAAI,MAAM,yEAAyE;AAG3F,MAAIK,EAAa1B,GAAQM,CAAY;AACnC,UAAM,IAAI,MAAM,8EAA8E;AAGhG,MAAIqB;AACJ,MAAI;AACF,IAAAA,IAAU,MAAMC,EAAQ5B,CAAM;AAAA,EAChC,SAAS6B,GAAO;AACd,QAAIC,EAAcD,CAAK,EAAG;AAC1B,UAAMA;AAAA,EACR;AAEA,MACEF,EAAQ,UACR,CAACA,EAAQ,SAAS,wBAAwB,KAC1C,CAACA,EAAQ,SAAS,+BAA+B;AAEjD,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAGN;AAEA,SAASb,EACP5B,GACwC;AACxC,SAAI,CAACA,KAAS,OAAOA,KAAU,YAAY,MAAM,QAAQA,CAAK,IACrD,KAGF,OAAO,OAAOA,CAAK,EAAE,MAAM,CAAC6C,MAAS,OAAOA,KAAS,UAAU;AACxE;AAEA,SAASL,EAAaM,GAAcC,GAAe;AACjD,QAAMC,IAAWX,EAASS,GAAMC,CAAK,GAC/BE,IAAYZ,EAASU,GAAOD,CAAI;AACtC,SAAOI,EAAkBF,CAAQ,KAAKE,EAAkBD,CAAS;AACnE;AAEA,SAASC,EAAkBC,GAAkB;AAC3C,SAAO,CAACA,KACLA,MAAa,QAAQ,CAACA,EAAS,WAAW,KAAKb,CAAG,EAAE,KACnD,CAACC,EAAWY,CAAQ;AAC1B;AAEA,SAASP,EAAcD,GAAgB;AACrC,SAAOA,aAAiB,SAAS,UAAUA,KAASA,EAAM,SAAS;AACrE;"}
+{"version":3,"file":"cli.js","sources":["../src/inspect/types.ts","../src/inspect/report.ts","../src/inspect/command.ts","../src/cli.ts"],"sourcesContent":["import type { HttpMethod } from \"../route\";\nimport type {\n  DocumentCspState,\n  RouteAccessState,\n  StaticPolicyFinding,\n} from \"../vite/policy-verification\";\n\n/**\n * The version of the static policy report. ADR 0019 raises this integer when\n * the framework removes a field or changes the meaning of a field.\n */\nexport const STATIC_POLICY_REPORT_VERSION = 1;\n\n/**\n * The version of the problem document that the inspect command writes when it\n * cannot produce a report.\n */\nexport const INSPECTION_PROBLEM_VERSION = 1;\n\n/**\n * The origin of one fact in a report. The value `static` states that the build\n * knows the fact. The value `request` states that only a request supplies it.\n */\nexport type InspectionResolution = \"request\" | \"static\";\n\n/** The rule that removed one value from a report. */\nexport type InspectionRedactionReason =\n  /** A cookie holds the value. */\n  | \"cookie-value\"\n  /** An `env.secret(...)` declaration produced the value. */\n  | \"environment-secret\"\n  /** A session record holds the value. */\n  | \"session-record\";\n\n/** One value that the serializer removed from a report. */\nexport type InspectionRedaction = {\n  /** The name of the field that held the value. */\n  name: string;\n  /** The dotted path of the field inside the report. */\n  path: string;\n  /** The rule that removed the value. */\n  reason: InspectionRedactionReason;\n};\n\n/** The named sections of the static policy report. */\nexport type StaticPolicyReportSection =\n  | \"findings\"\n  | \"redactions\"\n  | \"request\"\n  | \"routes\";\n\n/** The kind of route file that the static pass read. */\nexport type StaticRouteKind = \"attached\" | \"page\" | \"resource\";\n\n/**\n * The statically readable description of one route file.\n *\n * Each declared field states what the file itself declares. The framework\n * resolves the cascade of the route tree and reports the result of the\n * cascade in the `findings` section.\n */\nexport type StaticRouteReport = {\n  /** The access state that the route file declares. */\n  declaredAccess: RouteAccessState;\n  /** The Content-Security-Policy state that the route file declares. */\n  declaredDocumentCsp: DocumentCspState;\n  /** `true` when the route file declares a document policy. */\n  declaresDocumentPolicy: boolean;\n  /** The path of the route file, relative to the route directory. */\n  file: string;\n  /** The kind of the route file. */\n  kind: StaticRouteKind;\n  /** The HTTP methods that the route file exports. */\n  methods: HttpMethod[];\n  /** The route pattern. An attached file has no pattern. */\n  pattern?: string;\n};\n\n/**\n * The report that `demiurge inspect` writes to standard output. Each section\n * states the resolution of its facts in the `resolutions` record.\n */\nexport type StaticPolicyReport = {\n  /** The static policy findings, sorted by file, export name, and code. */\n  findings: StaticPolicyFinding[];\n  /** The values that the serializer removed. */\n  redactions: InspectionRedaction[];\n  /** The names of the facts that only a request supplies. */\n  request: string[];\n  /** The resolution of each section of the report. */\n  resolutions: Record<StaticPolicyReportSection, InspectionResolution>;\n  /** Every route file under the route directory. */\n  routes: StaticRouteReport[];\n  /** The route directory, relative to the project root. */\n  routesDir: string;\n  /** The version of this report shape. */\n  version: number;\n};\n\n/** The reason that the inspect command could not produce a report. */\nexport type InspectionProblemCode =\n  /** The framework could not read the configuration. */\n  | \"configuration-unreadable\"\n  /** The command received an invalid argument. */\n  | \"invalid-argument\";\n\n/**\n * The document that the inspect command writes when it cannot produce a\n * report. The command then exits with code 2.\n */\nexport type InspectionProblem = {\n  /** The stable code of the condition. */\n  code: InspectionProblemCode;\n  /** The description of the condition. */\n  detail: string;\n  /** The short name of the condition. */\n  title: string;\n  /** The version of this problem shape. */\n  version: number;\n};\n","import { relative, sep } from \"node:path\";\nimport { toRoutePattern, toRouteSegments } from \"../router\";\nimport type { EnvSchema } from \"../security\";\nimport {\n  inspectRoutePolicies,\n  type DemiurgeVitePluginOptions,\n} from \"../vite/plugin\";\nimport type { RouteFileInspection } from \"../vite/policy-verification\";\nimport {\n  STATIC_POLICY_REPORT_VERSION,\n  type StaticPolicyReport,\n  type StaticRouteReport,\n} from \"./types\";\n\nexport type StaticPolicyReportOptions = {\n  /** The plugin options of the application. */\n  options?: DemiurgeVitePluginOptions;\n  /** The absolute path of the project root. */\n  root: string;\n};\n\n// A build knows the route tree and the policy cascade. It does not know a\n// header, a cookie, a session, or an authorization result, because a request\n// supplies each one. The report names these facts, so a reader learns which\n// answer needs a running application.\nconst requestFacts = [\n  \"authorization-result\",\n  \"cookie-values\",\n  \"csrf-token\",\n  \"environment-values\",\n  \"rate-limit-state\",\n  \"request-headers\",\n  \"response-headers\",\n  \"session-record\",\n];\n\n/**\n * Builds the static inspection report of an application.\n *\n * The function reads the route tree and resolves the policy cascade through\n * `inspectRoutePolicies`. It loads no route module, so it runs no data loader\n * and no mutation handler.\n */\nexport async function createStaticPolicyReport(\n  input: StaticPolicyReportOptions,\n): Promise<StaticPolicyReport> {\n  const options = input.options ?? {};\n  const pass = await inspectRoutePolicies(input.root, options);\n  const routes = pass.inspections\n    .map((inspection) => toStaticRouteReport(pass.routesDir, inspection))\n    .sort((left, right) => left.file.localeCompare(right.file));\n\n  return {\n    findings: pass.findings,\n    redactions: [],\n    request: requestFacts,\n    resolutions: {\n      findings: \"static\",\n      redactions: \"static\",\n      request: \"request\",\n      routes: \"static\",\n    },\n    routes,\n    routesDir: toPosixPath(relative(input.root, pass.routesDir)),\n    version: STATIC_POLICY_REPORT_VERSION,\n  };\n}\n\n/** Reads the names of the variables that `env.secret(...)` declared. */\nexport function findSecretEnvKeys(schema: EnvSchema | undefined) {\n  return Object.entries(schema ?? {})\n    .filter(([, variable]) => variable.sensitive)\n    .map(([key]) => key)\n    .sort();\n}\n\n/** Counts the findings that carry error severity. */\nexport function countErrorFindings(report: StaticPolicyReport) {\n  return report.findings.filter((finding) => finding.severity === \"error\")\n    .length;\n}\n\n/** Writes the human summary that the command sends to standard error. */\nexport function formatStaticPolicyReportSummary(report: StaticPolicyReport) {\n  const errors = countErrorFindings(report);\n  const warnings = report.findings.length - errors;\n\n  return [\n    `Demiurge inspected ${report.routes.length} route files in ${report.routesDir}.`,\n    `Findings: ${errors} error, ${warnings} warning.`,\n    `The report states ${report.request.length} facts that only a request supplies.`,\n    ...report.findings.map((finding) =>\n      `  ${finding.severity}: ${toPosixPath(finding.file)} [${finding.code}] ${finding.message}`\n    ),\n  ].join(\"\\n\");\n}\n\nfunction toStaticRouteReport(\n  routesDir: string,\n  inspection: RouteFileInspection,\n): StaticRouteReport {\n  const file = toPosixPath(relative(routesDir, inspection.file));\n  const fileSegments = file.replace(/\\.tsx?$/, \"\").split(\"/\");\n  const attached = fileSegments.at(-1)?.startsWith(\"@\") ?? false;\n\n  return {\n    declaredAccess: inspection.accessState,\n    declaredDocumentCsp: inspection.documentCspState,\n    declaresDocumentPolicy: inspection.declaresDocumentPolicy,\n    file,\n    kind: attached\n      ? \"attached\"\n      : inspection.declaresPageRoute\n      ? \"page\"\n      : \"resource\",\n    methods: inspection.methods,\n    ...(attached\n      ? {}\n      : { pattern: toRoutePattern(toRouteSegments(fileSegments)) }),\n  };\n}\n\nfunction toPosixPath(pathname: string) {\n  return pathname.split(sep).join(\"/\");\n}\n","import type { ResolvedDemiurgeConfig } from \"../config/types\";\nimport { toPluginOptions } from \"../config/vite\";\nimport {\n  countErrorFindings,\n  createStaticPolicyReport,\n  findSecretEnvKeys,\n  formatStaticPolicyReportSummary,\n} from \"./report\";\nimport { serializeInspectionReport } from \"./redact\";\nimport {\n  INSPECTION_PROBLEM_VERSION,\n  type InspectionProblem,\n  type InspectionProblemCode,\n} from \"./types\";\n\n/** The exit codes of the `demiurge inspect` command. */\nexport const INSPECT_EXIT_OK = 0;\nexport const INSPECT_EXIT_FINDINGS = 1;\nexport const INSPECT_EXIT_INVALID = 2;\n\nexport type InspectCommandInput = {\n  /** The arguments that follow the command name. */\n  arguments: readonly string[];\n  /** Reads the configuration of the application. */\n  loadConfig: () => Promise<ResolvedDemiurgeConfig>;\n};\n\nexport type InspectCommandResult = {\n  /** The exit code of the command. */\n  exitCode: number;\n  /** The human summary that the command writes to standard error. */\n  stderr: string;\n  /** The JSON document that the command writes to standard output. */\n  stdout: string;\n};\n\n/**\n * Runs the `demiurge inspect` command.\n *\n * The command reads the route tree, resolves the policy cascade, and returns\n * one JSON document. The command loads no route module, so it runs no data\n * loader and no mutation handler.\n */\nexport async function runInspectCommand(\n  input: InspectCommandInput,\n): Promise<InspectCommandResult> {\n  if (input.arguments.length > 0) {\n    return toProblemResult(\n      \"invalid-argument\",\n      \"The inspect command accepts no argument.\",\n      `The command received ${input.arguments.join(\" \")}.`,\n    );\n  }\n\n  let config: ResolvedDemiurgeConfig;\n\n  try {\n    config = await input.loadConfig();\n  } catch (error) {\n    return toProblemResult(\n      \"configuration-unreadable\",\n      \"Demiurge could not read the configuration.\",\n      error instanceof Error ? error.message : String(error),\n    );\n  }\n\n  const report = await createStaticPolicyReport({\n    options: toPluginOptions(config),\n    root: config.root,\n  });\n\n  return {\n    exitCode: countErrorFindings(report) > 0\n      ? INSPECT_EXIT_FINDINGS\n      : INSPECT_EXIT_OK,\n    stderr: formatStaticPolicyReportSummary(report),\n    stdout: serializeInspectionReport(report, {\n      secretEnvKeys: findSecretEnvKeys(config.env),\n    }),\n  };\n}\n\nfunction toProblemResult(\n  code: InspectionProblemCode,\n  title: string,\n  detail: string,\n): InspectCommandResult {\n  const problem: InspectionProblem = {\n    code,\n    detail,\n    title,\n    version: INSPECTION_PROBLEM_VERSION,\n  };\n\n  return {\n    exitCode: INSPECT_EXIT_INVALID,\n    stderr: `${title}\\n${detail}`,\n    stdout: serializeInspectionReport(problem),\n  };\n}\n","import { readFile, readdir } from \"node:fs/promises\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport type { InlineConfig } from \"vite\";\nimport { createDemiurgeViteConfig } from \"./config/vite\";\nimport type { ResolvedDemiurgeConfig } from \"./config/types\";\nimport { parseClientManifest } from \"./manifest\";\nimport type { RouteImporter } from \"./route\";\nimport {\n  generateVercelStaticOutput,\n  generateStaticOutput,\n  type GenerateStaticOutputOptions,\n  type StaticOutputManifest,\n} from \"./static\";\n\nexport { parseClientManifest } from \"./manifest\";\nexport type { ClientBuildManifest } from \"./manifest\";\nexport {\n  INSPECT_EXIT_FINDINGS,\n  INSPECT_EXIT_INVALID,\n  INSPECT_EXIT_OK,\n  runInspectCommand,\n} from \"./inspect\";\nexport type { InspectCommandResult } from \"./inspect\";\n\ntype CliEnvironment = Record<string, string | undefined>;\n\nconst cliOptionNames = new Set([\"--host\", \"--origin\", \"--out-dir\", \"--port\"]);\n\nconst CLIENT_ENTRY = \"virtual:demiurge/client-entry\";\nconst SERVER_ENTRY = \"virtual:demiurge/server-entry\";\nconst DEFAULT_CLIENT_OUT_DIR = \"dist\";\nconst DEFAULT_SERVER_OUT_DIR = \"dist/server\";\nconst FRAMEWORK_SERVER_OUT_DIR = \".demiurge/server\";\n\nexport type CliOptions = {\n  command: \"build\" | \"dev\" | \"help\" | \"inspect\" | \"preview\";\n  host: string;\n  origin?: string;\n  outDir?: string;\n  port: number;\n};\n\nexport type BuildRuntime = {\n  build: (config: InlineConfig) => Promise<unknown>;\n  createViteConfig: (overrides: InlineConfig) => Promise<InlineConfig>;\n  generate: (\n    options: GenerateStaticOutputOptions,\n  ) => Promise<StaticOutputManifest>;\n  importModule: (specifier: string) => Promise<Record<string, unknown>>;\n  now: () => number;\n  readText: (file: string) => Promise<string>;\n};\n\nexport type BuildResult = {\n  deploymentOutDir?: string;\n  manifest?: StaticOutputManifest;\n  outDir: string;\n  serverOutDir?: string;\n};\n\nexport function parseCliArguments(\n  arguments_: string[],\n  environment: CliEnvironment = {},\n): CliOptions {\n  const command = arguments_[0];\n  if (!command || command === \"--help\" || command === \"-h\" || command === \"help\") {\n    return {\n      command: \"help\",\n      host: \"localhost\",\n      port: 4173,\n    };\n  }\n  if (\n    command !== \"build\" && command !== \"dev\" && command !== \"inspect\" &&\n    command !== \"preview\"\n  ) {\n    throw new Error(`Unknown command: ${command}`);\n  }\n\n  const options: CliOptions = {\n    command,\n    host: \"localhost\",\n    origin: environment.SITE_ORIGIN,\n    port: command === \"dev\" ? 5173 : 4173,\n  };\n\n  for (let index = 1; index < arguments_.length; index += 1) {\n    const argument = arguments_[index]!;\n    if (argument === \"--help\" || argument === \"-h\") {\n      return { command: \"help\", host: \"localhost\", port: 4173 };\n    }\n    const [name, inlineValue] = argument.split(\"=\", 2);\n    if (!cliOptionNames.has(name!)) {\n      throw new Error(`Unknown option: ${argument}`);\n    }\n    const value = inlineValue ?? arguments_[++index];\n    if (!value || value.startsWith(\"--\")) {\n      throw new Error(`Option ${name} requires a value.`);\n    }\n\n    if (name === \"--host\") options.host = value;\n    if (name === \"--origin\") options.origin = value;\n    if (name === \"--out-dir\") options.outDir = value;\n    if (name === \"--port\") {\n      const port = Number(value);\n      if (!Number.isSafeInteger(port) || port < 0 || port > 65_535) {\n        throw new Error(\"The server port must be an integer from 0 through 65535.\");\n      }\n      options.port = port;\n    }\n  }\n\n  return options;\n}\n\nexport const helpText = `Usage: demiurge <command> [options]\n\nCommands:\n  dev                   Start the development server\n  build                 Build production output\n  inspect               Write the static inspection report as JSON\n  preview               Serve static output with its declared headers\n\nOptions:\n  --host <host>         Set the server host (default: localhost)\n  --origin <origin>     Set the build origin (default: SITE_ORIGIN)\n  --out-dir <directory> Set the client output directory (default: dist)\n  --port <port>         Set the server port (dev: 5173, preview: 4173)\n  -h, --help            Show this help\n\nThe inspect command writes JSON to standard output and a summary to standard\nerror. It exits with 0 for no error finding, 1 for at least one error finding,\nand 2 for an invalid argument or an unreadable configuration.\n\nDemiurge reads demiurge.config.ts from the project root.`;\n\nexport async function runDev(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n) {\n  const { createServer } = await import(\"vite\");\n  const server = await createServer(\n    await createDemiurgeViteConfig({\n      config,\n      overrides: {\n        mode: \"development\",\n        server: { host: options.host, port: options.port },\n      },\n    }),\n  );\n  await server.listen();\n  return server;\n}\n\nexport async function runBuild(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n  runtime?: BuildRuntime,\n): Promise<BuildResult> {\n  const root = config.root;\n  const build = runtime?.build ?? (await import(\"vite\")).build;\n  const createViteConfig = runtime?.createViteConfig ??\n    ((overrides: InlineConfig) => createDemiurgeViteConfig({ config, overrides }));\n\n  const outDir = resolve(\n    root,\n    options.outDir ?? config.deployment?.outDir ?? DEFAULT_CLIENT_OUT_DIR,\n  );\n  const frameworkServerOutDir = resolve(root, FRAMEWORK_SERVER_OUT_DIR);\n\n  await validateBuildOutputDirectory(\n    root,\n    outDir,\n    join(root, \"public\"),\n    frameworkServerOutDir,\n  );\n\n  await build(\n    await createViteConfig({\n      define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n      mode: \"production\",\n      build: {\n        emptyOutDir: true,\n        outDir,\n        rollupOptions: { input: CLIENT_ENTRY },\n      },\n    }),\n  );\n\n  const applicationServer = config.deployment?.server;\n  const serverOutDir = applicationServer\n    ? resolve(root, applicationServer.outDir ?? DEFAULT_SERVER_OUT_DIR)\n    : undefined;\n\n  if (applicationServer && serverOutDir) {\n    await build(\n      await createViteConfig({\n        define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n        mode: \"production\",\n        build: {\n          copyPublicDir: false,\n          emptyOutDir: true,\n          outDir: serverOutDir,\n          rollupOptions: { input: resolve(root, applicationServer.entry) },\n          ssr: true,\n        },\n      }),\n    );\n  }\n\n  if (!config.deployment?.static) return { outDir, serverOutDir };\n\n  const staticResult = await buildStaticOutput({\n    build,\n    config,\n    createViteConfig,\n    frameworkServerOutDir,\n    options,\n    outDir,\n    root,\n    runtime,\n  });\n\n  return { ...staticResult, outDir, serverOutDir };\n}\n\nasync function buildStaticOutput({\n  build,\n  config,\n  createViteConfig,\n  frameworkServerOutDir,\n  options,\n  outDir,\n  root,\n  runtime,\n}: {\n  build: (config: InlineConfig) => Promise<unknown>;\n  config: ResolvedDemiurgeConfig;\n  createViteConfig: (overrides: InlineConfig) => Promise<InlineConfig>;\n  frameworkServerOutDir: string;\n  options: CliOptions;\n  outDir: string;\n  root: string;\n  runtime?: BuildRuntime;\n}) {\n  await build(\n    await createViteConfig({\n      define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n      mode: \"production\",\n      build: {\n        copyPublicDir: false,\n        emptyOutDir: true,\n        outDir: frameworkServerOutDir,\n        rollupOptions: {\n          input: SERVER_ENTRY,\n          output: { entryFileNames: \"server-entry.js\" },\n        },\n        ssr: true,\n      },\n    }),\n  );\n\n  const clientManifest = parseClientManifest(\n    runtime\n      ? await runtime.readText(resolve(outDir, \"demiurge-manifest.json\"))\n      : await readFile(resolve(outDir, \"demiurge-manifest.json\"), \"utf8\"),\n  );\n  const serverEntryUrl = `${\n    pathToFileURL(resolve(frameworkServerOutDir, \"server-entry.js\")).href\n  }?build=${runtime?.now() ?? Date.now()}`;\n  const serverEntry = runtime\n    ? await runtime.importModule(serverEntryUrl)\n    : await import(serverEntryUrl);\n  if (!isRouteImporterRecord(serverEntry.routes)) {\n    throw new Error(\"The framework server bundle does not export routes.\");\n  }\n\n  const manifest = await (runtime?.generate ?? generateStaticOutput)({\n    fonts: config.assets?.fonts,\n    images: config.assets?.images,\n    origin: options.origin ?? config.deployment?.static?.origin,\n    outDir,\n    root,\n    routes: serverEntry.routes,\n    ssr: clientManifest,\n    staticFileHeaders: config.security?.staticFileHeaders ?? [],\n  });\n\n  const provider = config.deployment?.static?.provider;\n  const deploymentOutDir = provider\n    ? await generateVercelStaticOutput({\n      deployment: provider,\n      manifest,\n      outDir,\n      projectRoot: root,\n    })\n    : undefined;\n\n  return { deploymentOutDir, manifest };\n}\n\nexport function resolvePreviewOutputDirectory(\n  root: string,\n  outDir: string | undefined,\n  configuredOutDir?: string,\n) {\n  return resolve(root, outDir ?? configuredOutDir ?? DEFAULT_CLIENT_OUT_DIR);\n}\n\nexport async function validateBuildOutputDirectory(\n  root: string,\n  outDir: string,\n  publicDir: false | string,\n  serverOutDir: string,\n) {\n  const pathFromRoot = relative(root, outDir);\n  if (\n    !pathFromRoot ||\n    pathFromRoot === \"..\" ||\n    pathFromRoot.startsWith(`..${sep}`) ||\n    isAbsolute(pathFromRoot)\n  ) {\n    throw new Error(\"The static output directory must be inside the Vite root.\");\n  }\n\n  if (publicDir && pathsOverlap(outDir, publicDir)) {\n    throw new Error(\"The static output directory must not overlap the Vite public directory.\");\n  }\n\n  if (pathsOverlap(outDir, serverOutDir)) {\n    throw new Error(\"The static output directory must not overlap the framework server directory.\");\n  }\n\n  let entries: string[];\n  try {\n    entries = await readdir(outDir);\n  } catch (error) {\n    if (isMissingPath(error)) return;\n    throw error;\n  }\n\n  if (\n    entries.length &&\n    !entries.includes(\"demiurge-manifest.json\") &&\n    !entries.includes(\"demiurge-static-manifest.json\")\n  ) {\n    throw new Error(\n      \"The static output directory contains files that a Demiurge build did not create.\",\n    );\n  }\n}\n\nfunction isRouteImporterRecord(\n  value: unknown,\n): value is Record<string, RouteImporter> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return false;\n  }\n\n  return Object.values(value).every((load) => typeof load === \"function\");\n}\n\nfunction pathsOverlap(left: string, right: string) {\n  const fromLeft = relative(left, right);\n  const fromRight = relative(right, left);\n  return isSameOrChildPath(fromLeft) || isSameOrChildPath(fromRight);\n}\n\nfunction isSameOrChildPath(pathname: string) {\n  return !pathname ||\n    (pathname !== \"..\" && !pathname.startsWith(`..${sep}`) &&\n      !isAbsolute(pathname));\n}\n\nfunction isMissingPath(error: unknown) {\n  return error instanceof Error && \"code\" in error && error.code === \"ENOENT\";\n}\n"],"names":["STATIC_POLICY_REPORT_VERSION","INSPECTION_PROBLEM_VERSION","requestFacts","createStaticPolicyReport","input","options","pass","inspectRoutePolicies","routes","inspection","toStaticRouteReport","left","right","toPosixPath","relative","findSecretEnvKeys","schema","variable","key","countErrorFindings","report","finding","formatStaticPolicyReportSummary","errors","warnings","routesDir","file","fileSegments","attached","toRoutePattern","toRouteSegments","pathname","sep","INSPECT_EXIT_OK","INSPECT_EXIT_FINDINGS","INSPECT_EXIT_INVALID","runInspectCommand","toProblemResult","config","error","toPluginOptions","serializeInspectionReport","code","title","detail","problem","cliOptionNames","CLIENT_ENTRY","SERVER_ENTRY","DEFAULT_CLIENT_OUT_DIR","DEFAULT_SERVER_OUT_DIR","FRAMEWORK_SERVER_OUT_DIR","parseCliArguments","arguments_","environment","command","index","argument","name","inlineValue","value","port","helpText","runDev","createServer","server","createDemiurgeViteConfig","runBuild","runtime","root","build","createViteConfig","overrides","outDir","resolve","frameworkServerOutDir","validateBuildOutputDirectory","join","applicationServer","serverOutDir","buildStaticOutput","clientManifest","parseClientManifest","readFile","serverEntryUrl","pathToFileURL","serverEntry","isRouteImporterRecord","manifest","generateStaticOutput","provider","generateVercelStaticOutput","resolvePreviewOutputDirectory","configuredOutDir","publicDir","pathFromRoot","isAbsolute","pathsOverlap","entries","readdir","isMissingPath","load","fromLeft","fromRight","isSameOrChildPath"],"mappings":";;;;;;;;;;;;;;;;;;;AAWO,MAAMA,IAA+B,GAM/BC,IAA6B,GCQpCC,IAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASA,eAAsBC,EACpBC,GAC6B;AAC7B,QAAMC,IAAUD,EAAM,WAAW,CAAA,GAC3BE,IAAO,MAAMC,EAAqBH,EAAM,MAAMC,CAAO,GACrDG,IAASF,EAAK,YACjB,IAAI,CAACG,MAAeC,EAAoBJ,EAAK,WAAWG,CAAU,CAAC,EACnE,KAAK,CAACE,GAAMC,MAAUD,EAAK,KAAK,cAAcC,EAAM,IAAI,CAAC;AAE5D,SAAO;AAAA,IACL,UAAUN,EAAK;AAAA,IACf,YAAY,CAAA;AAAA,IACZ,SAASJ;AAAA,IACT,aAAa;AAAA,MACX,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,QAAQ;AAAA,IAAA;AAAA,IAEV,QAAAM;AAAA,IACA,WAAWK,EAAYC,EAASV,EAAM,MAAME,EAAK,SAAS,CAAC;AAAA,IAC3D,SAASN;AAAA,EAAA;AAEb;AAGO,SAASe,EAAkBC,GAA+B;AAC/D,SAAO,OAAO,QAAQA,KAAU,CAAA,CAAE,EAC/B,OAAO,CAAC,GAAGC,CAAQ,MAAMA,EAAS,SAAS,EAC3C,IAAI,CAAC,CAACC,CAAG,MAAMA,CAAG,EAClB,KAAA;AACL;AAGO,SAASC,EAAmBC,GAA4B;AAC7D,SAAOA,EAAO,SAAS,OAAO,CAACC,MAAYA,EAAQ,aAAa,OAAO,EACpE;AACL;AAGO,SAASC,EAAgCF,GAA4B;AAC1E,QAAMG,IAASJ,EAAmBC,CAAM,GAClCI,IAAWJ,EAAO,SAAS,SAASG;AAE1C,SAAO;AAAA,IACL,sBAAsBH,EAAO,OAAO,MAAM,mBAAmBA,EAAO,SAAS;AAAA,IAC7E,aAAaG,CAAM,WAAWC,CAAQ;AAAA,IACtC,qBAAqBJ,EAAO,QAAQ,MAAM;AAAA,IAC1C,GAAGA,EAAO,SAAS;AAAA,MAAI,CAACC,MACtB,KAAKA,EAAQ,QAAQ,KAAKR,EAAYQ,EAAQ,IAAI,CAAC,KAAKA,EAAQ,IAAI,KAAKA,EAAQ,OAAO;AAAA,IAAA;AAAA,EAC1F,EACA,KAAK;AAAA,CAAI;AACb;AAEA,SAASX,EACPe,GACAhB,GACmB;AACnB,QAAMiB,IAAOb,EAAYC,EAASW,GAAWhB,EAAW,IAAI,CAAC,GACvDkB,IAAeD,EAAK,QAAQ,WAAW,EAAE,EAAE,MAAM,GAAG,GACpDE,IAAWD,EAAa,GAAG,EAAE,GAAG,WAAW,GAAG,KAAK;AAEzD,SAAO;AAAA,IACL,gBAAgBlB,EAAW;AAAA,IAC3B,qBAAqBA,EAAW;AAAA,IAChC,wBAAwBA,EAAW;AAAA,IACnC,MAAAiB;AAAA,IACA,MAAME,IACF,aACAnB,EAAW,oBACX,SACA;AAAA,IACJ,SAASA,EAAW;AAAA,IACpB,GAAImB,IACA,CAAA,IACA,EAAE,SAASC,EAAeC,EAAgBH,CAAY,CAAC,EAAA;AAAA,EAAE;AAEjE;AAEA,SAASd,EAAYkB,GAAkB;AACrC,SAAOA,EAAS,MAAMC,CAAG,EAAE,KAAK,GAAG;AACrC;AC5GO,MAAMC,IAAkB,GAClBC,IAAwB,GACxBC,IAAuB;AAyBpC,eAAsBC,GACpBhC,GAC+B;AAC/B,MAAIA,EAAM,UAAU,SAAS;AAC3B,WAAOiC;AAAA,MACL;AAAA,MACA;AAAA,MACA,wBAAwBjC,EAAM,UAAU,KAAK,GAAG,CAAC;AAAA,IAAA;AAIrD,MAAIkC;AAEJ,MAAI;AACF,IAAAA,IAAS,MAAMlC,EAAM,WAAA;AAAA,EACvB,SAASmC,GAAO;AACd,WAAOF;AAAA,MACL;AAAA,MACA;AAAA,MACAE,aAAiB,QAAQA,EAAM,UAAU,OAAOA,CAAK;AAAA,IAAA;AAAA,EAEzD;AAEA,QAAMnB,IAAS,MAAMjB,EAAyB;AAAA,IAC5C,SAASqC,EAAgBF,CAAM;AAAA,IAC/B,MAAMA,EAAO;AAAA,EAAA,CACd;AAED,SAAO;AAAA,IACL,UAAUnB,EAAmBC,CAAM,IAAI,IACnCc,IACAD;AAAA,IACJ,QAAQX,EAAgCF,CAAM;AAAA,IAC9C,QAAQqB,EAA0BrB,GAAQ;AAAA,MACxC,eAAeL,EAAkBuB,EAAO,GAAG;AAAA,IAAA,CAC5C;AAAA,EAAA;AAEL;AAEA,SAASD,EACPK,GACAC,GACAC,GACsB;AACtB,QAAMC,IAA6B;AAAA,IACjC,MAAAH;AAAA,IACA,QAAAE;AAAA,IACA,OAAAD;AAAA,IACA,SAAS1C;AAAA,EAAA;AAGX,SAAO;AAAA,IACL,UAAUkC;AAAA,IACV,QAAQ,GAAGQ,CAAK;AAAA,EAAKC,CAAM;AAAA,IAC3B,QAAQH,EAA0BI,CAAO;AAAA,EAAA;AAE7C;ACxEA,MAAMC,wBAAqB,IAAI,CAAC,UAAU,YAAY,aAAa,QAAQ,CAAC,GAEtEC,IAAe,iCACfC,IAAe,iCACfC,IAAyB,QACzBC,IAAyB,eACzBC,IAA2B;AA4B1B,SAASC,GACdC,GACAC,IAA8B,IAClB;AACZ,QAAMC,IAAUF,EAAW,CAAC;AAC5B,MAAI,CAACE,KAAWA,MAAY,YAAYA,MAAY,QAAQA,MAAY;AACtE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,IAAA;AAGV,MACEA,MAAY,WAAWA,MAAY,SAASA,MAAY,aACxDA,MAAY;AAEZ,UAAM,IAAI,MAAM,oBAAoBA,CAAO,EAAE;AAG/C,QAAMlD,IAAsB;AAAA,IAC1B,SAAAkD;AAAA,IACA,MAAM;AAAA,IACN,QAAQD,EAAY;AAAA,IACpB,MAAMC,MAAY,QAAQ,OAAO;AAAA,EAAA;AAGnC,WAASC,IAAQ,GAAGA,IAAQH,EAAW,QAAQG,KAAS,GAAG;AACzD,UAAMC,IAAWJ,EAAWG,CAAK;AACjC,QAAIC,MAAa,YAAYA,MAAa;AACxC,aAAO,EAAE,SAAS,QAAQ,MAAM,aAAa,MAAM,KAAA;AAErD,UAAM,CAACC,GAAMC,CAAW,IAAIF,EAAS,MAAM,KAAK,CAAC;AACjD,QAAI,CAACX,EAAe,IAAIY,CAAK;AAC3B,YAAM,IAAI,MAAM,mBAAmBD,CAAQ,EAAE;AAE/C,UAAMG,IAAQD,KAAeN,EAAW,EAAEG,CAAK;AAC/C,QAAI,CAACI,KAASA,EAAM,WAAW,IAAI;AACjC,YAAM,IAAI,MAAM,UAAUF,CAAI,oBAAoB;AAMpD,QAHIA,MAAS,aAAUrD,EAAQ,OAAOuD,IAClCF,MAAS,eAAYrD,EAAQ,SAASuD,IACtCF,MAAS,gBAAarD,EAAQ,SAASuD,IACvCF,MAAS,UAAU;AACrB,YAAMG,IAAO,OAAOD,CAAK;AACzB,UAAI,CAAC,OAAO,cAAcC,CAAI,KAAKA,IAAO,KAAKA,IAAO;AACpD,cAAM,IAAI,MAAM,0DAA0D;AAE5E,MAAAxD,EAAQ,OAAOwD;AAAA,IACjB;AAAA,EACF;AAEA,SAAOxD;AACT;AAEO,MAAMyD,KAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAqBxB,eAAsBC,GACpB1D,GACAiC,GACA;AACA,QAAM,EAAE,cAAA0B,EAAA,IAAiB,MAAM,OAAO,MAAM,GACtCC,IAAS,MAAMD;AAAA,IACnB,MAAME,EAAyB;AAAA,MAC7B,QAAA5B;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ,EAAE,MAAMjC,EAAQ,MAAM,MAAMA,EAAQ,KAAA;AAAA,MAAK;AAAA,IACnD,CACD;AAAA,EAAA;AAEH,eAAM4D,EAAO,OAAA,GACNA;AACT;AAEA,eAAsBE,GACpB9D,GACAiC,GACA8B,GACsB;AACtB,QAAMC,IAAO/B,EAAO,MACdgC,IAAQF,GAAS,UAAU,MAAM,OAAO,MAAM,GAAG,OACjDG,IAAmBH,GAAS,qBAC/B,CAACI,MAA4BN,EAAyB,EAAE,QAAA5B,GAAQ,WAAAkC,EAAA,CAAW,IAExEC,IAASC;AAAA,IACbL;AAAA,IACAhE,EAAQ,UAAUiC,EAAO,YAAY,UAAUW;AAAA,EAAA,GAE3C0B,IAAwBD,EAAQL,GAAMlB,CAAwB;AAEpE,QAAMyB;AAAA,IACJP;AAAA,IACAI;AAAA,IACAI,EAAKR,GAAM,QAAQ;AAAA,IACnBM;AAAA,EAAA,GAGF,MAAML;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,aAAa;AAAA,QACb,QAAAE;AAAA,QACA,eAAe,EAAE,OAAO1B,EAAA;AAAA,MAAa;AAAA,IACvC,CACD;AAAA,EAAA;AAGH,QAAM+B,IAAoBxC,EAAO,YAAY,QACvCyC,IAAeD,IACjBJ,EAAQL,GAAMS,EAAkB,UAAU5B,CAAsB,IAChE;AAkBJ,SAhBI4B,KAAqBC,KACvB,MAAMT;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,eAAe;AAAA,QACf,aAAa;AAAA,QACb,QAAQQ;AAAA,QACR,eAAe,EAAE,OAAOL,EAAQL,GAAMS,EAAkB,KAAK,EAAA;AAAA,QAC7D,KAAK;AAAA,MAAA;AAAA,IACP,CACD;AAAA,EAAA,GAIAxC,EAAO,YAAY,SAajB,EAAE,GAXY,MAAM0C,EAAkB;AAAA,IAC3C,OAAAV;AAAA,IACA,QAAAhC;AAAA,IACA,kBAAAiC;AAAA,IACA,uBAAAI;AAAA,IACA,SAAAtE;AAAA,IACA,QAAAoE;AAAA,IACA,MAAAJ;AAAA,IACA,SAAAD;AAAA,EAAA,CACD,GAEyB,QAAAK,GAAQ,cAAAM,EAAA,IAbK,EAAE,QAAAN,GAAQ,cAAAM,EAAA;AAcnD;AAEA,eAAeC,EAAkB;AAAA,EAC/B,OAAAV;AAAA,EACA,QAAAhC;AAAA,EACA,kBAAAiC;AAAA,EACA,uBAAAI;AAAA,EACA,SAAAtE;AAAA,EACA,QAAAoE;AAAA,EACA,MAAAJ;AAAA,EACA,SAAAD;AACF,GASG;AACD,QAAME;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,eAAe;AAAA,QACf,aAAa;AAAA,QACb,QAAQI;AAAA,QACR,eAAe;AAAA,UACb,OAAO3B;AAAA,UACP,QAAQ,EAAE,gBAAgB,kBAAA;AAAA,QAAkB;AAAA,QAE9C,KAAK;AAAA,MAAA;AAAA,IACP,CACD;AAAA,EAAA;AAGH,QAAMiC,IAAiBC;AAAA,IACrBd,IACI,MAAMA,EAAQ,SAASM,EAAQD,GAAQ,wBAAwB,CAAC,IAChE,MAAMU,EAAST,EAAQD,GAAQ,wBAAwB,GAAG,MAAM;AAAA,EAAA,GAEhEW,IAAiB,GACrBC,EAAcX,EAAQC,GAAuB,iBAAiB,CAAC,EAAE,IACnE,UAAUP,GAAS,IAAA,KAAS,KAAK,KAAK,IAChCkB,IAAclB,IAChB,MAAMA,EAAQ,aAAagB,CAAc,IACzC,MAAM,OAAOA;AACjB,MAAI,CAACG,EAAsBD,EAAY,MAAM;AAC3C,UAAM,IAAI,MAAM,qDAAqD;AAGvE,QAAME,IAAW,OAAOpB,GAAS,YAAYqB,GAAsB;AAAA,IACjE,OAAOnD,EAAO,QAAQ;AAAA,IACtB,QAAQA,EAAO,QAAQ;AAAA,IACvB,QAAQjC,EAAQ,UAAUiC,EAAO,YAAY,QAAQ;AAAA,IACrD,QAAAmC;AAAA,IACA,MAAAJ;AAAA,IACA,QAAQiB,EAAY;AAAA,IACpB,KAAKL;AAAA,IACL,mBAAmB3C,EAAO,UAAU,qBAAqB,CAAA;AAAA,EAAC,CAC3D,GAEKoD,IAAWpD,EAAO,YAAY,QAAQ;AAU5C,SAAO,EAAE,kBATgBoD,IACrB,MAAMC,EAA2B;AAAA,IACjC,YAAYD;AAAA,IACZ,UAAAF;AAAA,IACA,QAAAf;AAAA,IACA,aAAaJ;AAAA,EAAA,CACd,IACC,QAEuB,UAAAmB,EAAA;AAC7B;AAEO,SAASI,GACdvB,GACAI,GACAoB,GACA;AACA,SAAOnB,EAAQL,GAAMI,KAAUoB,KAAoB5C,CAAsB;AAC3E;AAEA,eAAsB2B,EACpBP,GACAI,GACAqB,GACAf,GACA;AACA,QAAMgB,IAAejF,EAASuD,GAAMI,CAAM;AAC1C,MACE,CAACsB,KACDA,MAAiB,QACjBA,EAAa,WAAW,KAAK/D,CAAG,EAAE,KAClCgE,EAAWD,CAAY;AAEvB,UAAM,IAAI,MAAM,2DAA2D;AAG7E,MAAID,KAAaG,EAAaxB,GAAQqB,CAAS;AAC7C,UAAM,IAAI,MAAM,yEAAyE;AAG3F,MAAIG,EAAaxB,GAAQM,CAAY;AACnC,UAAM,IAAI,MAAM,8EAA8E;AAGhG,MAAImB;AACJ,MAAI;AACF,IAAAA,IAAU,MAAMC,EAAQ1B,CAAM;AAAA,EAChC,SAASlC,GAAO;AACd,QAAI6D,GAAc7D,CAAK,EAAG;AAC1B,UAAMA;AAAA,EACR;AAEA,MACE2D,EAAQ,UACR,CAACA,EAAQ,SAAS,wBAAwB,KAC1C,CAACA,EAAQ,SAAS,+BAA+B;AAEjD,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAGN;AAEA,SAASX,EACP3B,GACwC;AACxC,SAAI,CAACA,KAAS,OAAOA,KAAU,YAAY,MAAM,QAAQA,CAAK,IACrD,KAGF,OAAO,OAAOA,CAAK,EAAE,MAAM,CAACyC,MAAS,OAAOA,KAAS,UAAU;AACxE;AAEA,SAASJ,EAAatF,GAAcC,GAAe;AACjD,QAAM0F,IAAWxF,EAASH,GAAMC,CAAK,GAC/B2F,IAAYzF,EAASF,GAAOD,CAAI;AACtC,SAAO6F,EAAkBF,CAAQ,KAAKE,EAAkBD,CAAS;AACnE;AAEA,SAASC,EAAkBzE,GAAkB;AAC3C,SAAO,CAACA,KACLA,MAAa,QAAQ,CAACA,EAAS,WAAW,KAAKC,CAAG,EAAE,KACnD,CAACgE,EAAWjE,CAAQ;AAC1B;AAEA,SAASqE,GAAc7D,GAAgB;AACrC,SAAOA,aAAiB,SAAS,UAAUA,KAASA,EAAM,SAAS;AACrE;"}

package/dist/config/index.js

@@ -1,7 +1,7 @@
 import { existsSync as f } from "node:fs";
 import { join as u, resolve as a, dirname as s } from "node:path";
-import { D as r, v as d } from "../chunks/vite-DO70kZA6.js";
-import { c as F, t as M } from "../chunks/vite-DO70kZA6.js";
+import { D as r, v as d } from "../chunks/vite-QoqrGl6f.js";
+import { c as F, t as M } from "../chunks/vite-QoqrGl6f.js";
 function x(e) {
   return e;
 }

package/dist/config/types.d.ts

@@ -55,7 +55,17 @@ export type DemiurgeConfig<Locale extends string = string> = {
     routing?: DemiurgeRoutingConfig<Locale>;
     security?: DemiurgeSecurityConfig;
     vite?: DemiurgeViteExtension;
-    unstable_viteConfig?: (config: ViteUserConfig) => ViteUserConfig | Promise<ViteUserConfig>;
+    /**
+     * This callback is unsafe and unstable.
+     *
+     * It has no compatibility guarantee between Demiurge versions. It receives
+     * the resolved Vite configuration of the framework, after the framework
+     * adds its own build-time security plugins. Those plugins enforce the
+     * server-only module boundary and the client environment boundary. An
+     * application that removes or reorders a framework plugin in this callback
+     * loses that boundary. The application then owns the removed boundary.
+     */
+    unsafe_unstable_viteConfig?: (config: ViteUserConfig) => ViteUserConfig | Promise<ViteUserConfig>;
 };
 export type ResolvedDemiurgeConfig = DemiurgeConfig & {
     configFile: string;

package/dist/config/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,MAAM,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EACV,2BAA2B,EAC3B,sBAAsB,EACvB,MAAM,WAAW,CAAC;AAGnB,MAAM,MAAM,qBAAqB,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,IAAI;IAClE,OAAO,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,GAAG;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAGF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACzB,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG;IACnC,iBAAiB,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC5D,CAAC;AAGF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAGF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAGF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,8BAA8B,CAAC;IACxC,MAAM,CAAC,EAAE,8BAA8B,CAAC;CACzC,CAAC;AAGF,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;KACzD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,IAAI;IAC3D,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,UAAU,CAAC,EAAE,wBAAwB,CAAC;IAGtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,SAAS,CAAC,EAAE,uBAAuB,CAAC;IACpC,OAAO,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAI7B,mBAAmB,CAAC,EAAE,CACpB,MAAM,EAAE,cAAc,KACnB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,cAAc,GAAG;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,MAAM,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EACV,2BAA2B,EAC3B,sBAAsB,EACvB,MAAM,WAAW,CAAC;AAGnB,MAAM,MAAM,qBAAqB,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,IAAI;IAClE,OAAO,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,GAAG;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAGF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;CACzB,CAAC;AAGF,MAAM,MAAM,sBAAsB,GAAG;IACnC,iBAAiB,CAAC,EAAE,SAAS,2BAA2B,EAAE,CAAC;CAC5D,CAAC;AAGF,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAGF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAGF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,8BAA8B,CAAC;IACxC,MAAM,CAAC,EAAE,8BAA8B,CAAC;CACzC,CAAC;AAGF,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,cAAc,CAAC,cAAc,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,YAAY,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,WAAW,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;KACzD,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,cAAc,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM,IAAI;IAC3D,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,UAAU,CAAC,EAAE,wBAAwB,CAAC;IAGtC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,SAAS,CAAC,EAAE,uBAAuB,CAAC;IACpC,OAAO,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,IAAI,CAAC,EAAE,qBAAqB,CAAC;IAC7B;;;;;;;;;OASG;IACH,0BAA0B,CAAC,EAAE,CAC3B,MAAM,EAAE,cAAc,KACnB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,cAAc,GAAG;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC"}

package/dist/edge/index.js

@@ -1,10 +1,10 @@
-import { a as E, c as p, b as y, d as w, s as S } from "../chunks/index-BVk9zWbe.js";
-import { c as b } from "../chunks/testing-DueXbMo4.js";
+import { a as E, c as p, b as y, d as w, s as S } from "../chunks/index-0MNiR_wo.js";
+import { c as b } from "../chunks/testing-CUwGj2ie.js";
 import { renderToReadableStream as R } from "react-dom/server";
 import "react";
 import "react/jsx-runtime";
 import { i as L, I as v, R as A, c as T } from "../chunks/static-files-ehaD1kE7.js";
-import { c as P } from "../chunks/document-shell-CpJnFtSC.js";
+import { c as P } from "../chunks/document-shell-9GPwtcTt.js";
 const C = /* @__PURE__ */ new Set([
   "/demiurge-manifest.json",
   "/index.html"