@demiurgejs/core 0.2.0-beta.4 → 0.2.0-beta.6

package/dist/cli.js

@@ -1,11 +1,129 @@
-import { readdir as g, readFile as b } from "node:fs/promises";
-import { resolve as p, join as D, relative as m, sep as v, isAbsolute as y } from "node:path";
-import { pathToFileURL as R } from "node:url";
-import { c as E } from "./chunks/vite-DO70kZA6.js";
-import { p as S } from "./chunks/manifest-vO6c0G0W.js";
-import { generateStaticOutput as N, generateVercelStaticOutput as T } from "./static/index.js";
-const I = /* @__PURE__ */ new Set(["--host", "--origin", "--out-dir", "--port"]), V = "virtual:demiurge/client-entry", _ = "virtual:demiurge/server-entry", O = "dist", j = "dist/server", U = ".demiurge/server";
-function J(t, e = {}) {
+import { readdir as _, readFile as P } from "node:fs/promises";
+import { relative as m, sep as v, resolve as d, join as O, isAbsolute as D } from "node:path";
+import { pathToFileURL as h } from "node:url";
+import { t as C, c as T } from "./chunks/vite-BADZA8Fl.js";
+import { p as $ } from "./chunks/manifest-vO6c0G0W.js";
+import { generateStaticOutput as j, generateVercelStaticOutput as V } from "./static/index.js";
+import { g as F } from "./chunks/runtime-BH519j2t.js";
+import { t as x, a as L } from "./chunks/testing-BEW1nchS.js";
+import { v as A, B as R } from "./chunks/plugin-bkP6WwrS.js";
+import "./chunks/index-LYve1rQp.js";
+import "node:fs";
+import "magic-string";
+import "vite";
+import "react-dom/server";
+import "react";
+import "react/jsx-runtime";
+import "node:stream";
+import "node:stream/promises";
+import "node:net";
+import "node:crypto";
+const H = 1, U = 1, q = [
+  "authorization-result",
+  "cookie-values",
+  "csrf-token",
+  "environment-values",
+  "rate-limit-state",
+  "request-headers",
+  "response-headers",
+  "session-record"
+];
+async function k(t) {
+  const e = t.options ?? {}, r = await A(t.root, e), o = r.inspections.map((i) => W(r.routesDir, i)).sort((i, n) => i.file.localeCompare(n.file));
+  return {
+    findings: r.findings,
+    redactions: [],
+    request: q,
+    resolutions: {
+      findings: "static",
+      redactions: "static",
+      request: "request",
+      routes: "static"
+    },
+    routes: o,
+    routesDir: y(m(t.root, r.routesDir)),
+    version: H
+  };
+}
+function B(t) {
+  return Object.entries(t ?? {}).filter(([, e]) => e.sensitive).map(([e]) => e).sort();
+}
+function N(t) {
+  return t.findings.filter((e) => e.severity === "error").length;
+}
+function M(t) {
+  const e = N(t), r = t.findings.length - e;
+  return [
+    `Demiurge inspected ${t.routes.length} route files in ${t.routesDir}.`,
+    `Findings: ${e} error, ${r} warning.`,
+    `The report states ${t.request.length} facts that only a request supplies.`,
+    ...t.findings.map(
+      (o) => `  ${o.severity}: ${y(o.file)} [${o.code}] ${o.message}`
+    )
+  ].join(`
+`);
+}
+function W(t, e) {
+  const r = y(m(t, e.file)), o = r.replace(/\.tsx?$/, "").split("/"), i = o.at(-1)?.startsWith("@") ?? !1;
+  return {
+    declaredAccess: e.accessState,
+    declaredDocumentCsp: e.documentCspState,
+    declaresDocumentPolicy: e.declaresDocumentPolicy,
+    file: r,
+    kind: i ? "attached" : e.declaresPageRoute ? "page" : "resource",
+    methods: e.methods,
+    ...i ? {} : { pattern: x(L(o)) }
+  };
+}
+function y(t) {
+  return t.split(v).join("/");
+}
+const G = 0, J = 1, K = 2;
+async function Tt(t) {
+  if (t.arguments.length > 0)
+    return g(
+      "invalid-argument",
+      "The inspect command accepts no argument.",
+      `The command received ${t.arguments.join(" ")}.`
+    );
+  let e;
+  try {
+    e = await t.loadConfig();
+  } catch (o) {
+    return g(
+      "configuration-unreadable",
+      "Demiurge could not read the configuration.",
+      o instanceof Error ? o.message : String(o)
+    );
+  }
+  const r = await k({
+    options: C(e),
+    root: e.root
+  });
+  return {
+    exitCode: N(r) > 0 ? J : G,
+    stderr: M(r),
+    stdout: R(r, {
+      secretEnvKeys: B(e.env)
+    })
+  };
+}
+function g(t, e, r) {
+  const o = {
+    code: t,
+    detail: r,
+    title: e,
+    version: U
+  };
+  return {
+    exitCode: K,
+    stderr: `${e}
+${r}`,
+    stdout: R(o)
+  };
+}
+const X = /* @__PURE__ */ new Set(["--host", "--origin", "--out-dir", "--port"]), Y = "virtual:demiurge/client-entry", I = "virtual:demiurge/server-entry", w = "dist", b = "dist/server", z = ".demiurge/server";
+function Rt(t, e = {}) {
   const r = t[0];
   if (!r || r === "--help" || r === "-h" || r === "help")
     return {
@@ -13,51 +131,57 @@ function J(t, e = {}) {
       host: "localhost",
       port: 4173
     };
-  if (r !== "build" && r !== "dev" && r !== "preview")
+  if (r !== "build" && r !== "dev" && r !== "inspect" && r !== "preview" && r !== "start")
     throw new Error(`Unknown command: ${r}`);
   const o = {
     command: r,
-    host: "localhost",
+    host: r === "start" ? e.HOST ?? "127.0.0.1" : "localhost",
     origin: e.SITE_ORIGIN,
     port: r === "dev" ? 5173 : 4173
   };
-  for (let n = 1; n < t.length; n += 1) {
-    const i = t[n];
-    if (i === "--help" || i === "-h")
+  for (let i = 1; i < t.length; i += 1) {
+    const n = t[i];
+    if (n === "--help" || n === "-h")
       return { command: "help", host: "localhost", port: 4173 };
-    const [s, c] = i.split("=", 2);
-    if (!I.has(s))
-      throw new Error(`Unknown option: ${i}`);
-    const a = c ?? t[++n];
+    const [s, u] = n.split("=", 2);
+    if (!X.has(s))
+      throw new Error(`Unknown option: ${n}`);
+    const a = u ?? t[++i];
     if (!a || a.startsWith("--"))
       throw new Error(`Option ${s} requires a value.`);
     if (s === "--host" && (o.host = a), s === "--origin" && (o.origin = a), s === "--out-dir" && (o.outDir = a), s === "--port") {
-      const u = Number(a);
-      if (!Number.isSafeInteger(u) || u < 0 || u > 65535)
+      const c = Number(a);
+      if (!Number.isSafeInteger(c) || c < 0 || c > 65535)
         throw new Error("The server port must be an integer from 0 through 65535.");
-      o.port = u;
+      o.port = c;
     }
   }
   return o;
 }
-const G = `Usage: demiurge <command> [options]
+const Nt = `Usage: demiurge <command> [options]
 
 Commands:
   dev                   Start the development server
   build                 Build production output
+  start                 Run built Node production output
+  inspect               Write the static inspection report as JSON
   preview               Serve static output with its declared headers
 
 Options:
-  --host <host>         Set the server host (default: localhost)
+  --host <host>         Set the server host (start: HOST or 127.0.0.1; otherwise: localhost)
   --origin <origin>     Set the build origin (default: SITE_ORIGIN)
   --out-dir <directory> Set the client output directory (default: dist)
   --port <port>         Set the server port (dev: 5173, preview: 4173)
   -h, --help            Show this help
 
+The inspect command writes JSON to standard output and a summary to standard
+error. It exits with 0 for no error finding, 1 for at least one error finding,
+and 2 for an invalid argument or an unreadable configuration.
+
 Demiurge reads demiurge.config.ts from the project root.`;
-async function H(t, e) {
+async function It(t, e) {
   const { createServer: r } = await import("vite"), o = await r(
-    await E({
+    await T({
       config: e,
       overrides: {
         mode: "development",
@@ -67,60 +191,121 @@ async function H(t, e) {
   );
   return await o.listen(), o;
 }
-async function Y(t, e, r) {
-  const o = e.root, n = r?.build ?? (await import("vite")).build, i = r?.createViteConfig ?? ((d) => E({ config: e, overrides: d })), s = p(
+async function bt(t, e, r) {
+  const o = e.root, i = r?.build ?? (await import("vite")).build, n = r?.createViteConfig ?? ((p) => T({ config: e, overrides: p })), s = d(
     o,
-    t.outDir ?? e.deployment?.outDir ?? O
-  ), c = p(o, U);
-  await F(
+    t.outDir ?? e.deployment?.outDir ?? w
+  ), u = d(o, z);
+  await tt(
     o,
     s,
-    D(o, "public"),
-    c
-  ), await n(
-    await i({
+    O(o, "public"),
+    u
+  ), await i(
+    await n({
       define: { "process.env.NODE_ENV": JSON.stringify("production") },
       mode: "production",
       build: {
         emptyOutDir: !0,
         outDir: s,
-        rollupOptions: { input: V }
+        rollupOptions: { input: Y }
       }
     })
   );
-  const a = e.deployment?.server, u = a ? p(o, a.outDir ?? j) : void 0;
-  return a && u && await n(
-    await i({
+  const a = e.deployment?.server, c = a ? d(o, a.outDir ?? b) : void 0;
+  a && c && await i(
+    await n({
       define: { "process.env.NODE_ENV": JSON.stringify("production") },
       mode: "production",
       build: {
         copyPublicDir: !1,
         emptyOutDir: !0,
-        outDir: u,
-        rollupOptions: { input: p(o, a.entry) },
+        outDir: c,
+        rollupOptions: {
+          input: a.entry ? d(o, a.entry) : I,
+          output: { entryFileNames: "server-entry.js" }
+        },
         ssr: !0
-      }
+      },
+      ...a.provider ? {
+        ssr: {
+          external: ["@demiurgejs/core", "react", "react-dom"],
+          noExternal: !0
+        }
+      } : {}
     })
-  ), e.deployment?.static ? { ...await C({
-    build: n,
+  );
+  const l = a?.provider;
+  if (l && a && c) {
+    if (e.security?.staticFileHeaders?.length)
+      throw new Error(
+        "Vercel Node deployment does not support security.staticFileHeaders. Remove the rules or use a deployment that serves the browser output directly."
+      );
+    return { deploymentOutDir: await F({
+      clientDir: s,
+      deployment: l,
+      projectRoot: o,
+      serverDir: c
+    }), outDir: s, serverOutDir: c };
+  }
+  return e.deployment?.static ? { ...await Z({
+    build: i,
     config: e,
-    createViteConfig: i,
-    frameworkServerOutDir: c,
+    createViteConfig: n,
+    frameworkServerOutDir: u,
     options: t,
     outDir: s,
     root: o,
     runtime: r
-  }), outDir: s, serverOutDir: u } : { outDir: s, serverOutDir: u };
+  }), outDir: s, serverOutDir: c } : { outDir: s, serverOutDir: c };
+}
+async function _t(t, e, r = process.env, o) {
+  const i = e.deployment?.server;
+  if (!i)
+    throw new Error(
+      "The start command requires deployment.server in demiurge.config.ts."
+    );
+  const n = r.ALLOWED_HOSTS?.split(",").map((p) => p.trim()).filter(Boolean);
+  if (!n?.length)
+    throw new Error(
+      "The start command requires ALLOWED_HOSTS as a comma-separated host allowlist."
+    );
+  const s = e.root, u = d(
+    s,
+    t.outDir ?? e.deployment?.outDir ?? w
+  ), a = d(
+    s,
+    i.outDir ?? b
+  ), c = h(O(a, "server-entry.js")).href, l = o ? await o.importModule(c) : await import(c);
+  if (!Q(l))
+    throw new Error(
+      "The application server bundle does not export a Node build runtime."
+    );
+  return (o?.serve ?? (await import("./node/index.js")).serveNodeBuild)({
+    allowedHosts: n,
+    base: h(`${s}/`).href,
+    clientDir: m(s, u),
+    createHandler: l.createHandler,
+    env: r,
+    host: t.host,
+    port: t.port,
+    readyPath: "/.well-known/ready",
+    shutdown: { signals: ["SIGINT", "SIGTERM"] },
+    static: l.createStatic
+  });
+}
+function Q(t) {
+  return typeof t.createHandler == "function" && (t.createStatic === void 0 || typeof t.createStatic == "function");
 }
-async function C({
+async function Z({
   build: t,
   config: e,
   createViteConfig: r,
   frameworkServerOutDir: o,
-  options: n,
-  outDir: i,
+  options: i,
+  outDir: n,
   root: s,
-  runtime: c
+  runtime: u
 }) {
   await t(
     await r({
@@ -131,78 +316,83 @@ async function C({
         emptyOutDir: !0,
         outDir: o,
         rollupOptions: {
-          input: _,
+          input: I,
           output: { entryFileNames: "server-entry.js" }
         },
         ssr: !0
       }
     })
   );
-  const a = S(
-    c ? await c.readText(p(i, "demiurge-manifest.json")) : await b(p(i, "demiurge-manifest.json"), "utf8")
-  ), u = `${R(p(o, "server-entry.js")).href}?build=${c?.now() ?? Date.now()}`, l = c ? await c.importModule(u) : await import(u);
-  if (!A(l.routes))
+  const a = $(
+    u ? await u.readText(d(n, "demiurge-manifest.json")) : await P(d(n, "demiurge-manifest.json"), "utf8")
+  ), c = `${h(d(o, "server-entry.js")).href}?build=${u?.now() ?? Date.now()}`, l = u ? await u.importModule(c) : await import(c);
+  if (!et(l.routes))
     throw new Error("The framework server bundle does not export routes.");
-  const d = await (c?.generate ?? N)({
+  const f = await (u?.generate ?? j)({
     fonts: e.assets?.fonts,
     images: e.assets?.images,
-    origin: n.origin ?? e.deployment?.static?.origin,
-    outDir: i,
+    origin: i.origin ?? e.deployment?.static?.origin,
+    outDir: n,
     root: s,
     routes: l.routes,
     ssr: a,
     staticFileHeaders: e.security?.staticFileHeaders ?? []
-  }), h = e.deployment?.static?.provider;
-  return { deploymentOutDir: h ? await T({
-    deployment: h,
-    manifest: d,
-    outDir: i,
+  }), p = e.deployment?.static?.provider;
+  return { deploymentOutDir: p ? await V({
+    deployment: p,
+    manifest: f,
+    outDir: n,
     projectRoot: s
-  }) : void 0, manifest: d };
+  }) : void 0, manifest: f };
 }
-function q(t, e, r) {
-  return p(t, e ?? r ?? O);
+function Pt(t, e, r) {
+  return d(t, e ?? r ?? w);
 }
-async function F(t, e, r, o) {
-  const n = m(t, e);
-  if (!n || n === ".." || n.startsWith(`..${v}`) || y(n))
+async function tt(t, e, r, o) {
+  const i = m(t, e);
+  if (!i || i === ".." || i.startsWith(`..${v}`) || D(i))
     throw new Error("The static output directory must be inside the Vite root.");
-  if (r && f(e, r))
+  if (r && E(e, r))
     throw new Error("The static output directory must not overlap the Vite public directory.");
-  if (f(e, o))
+  if (E(e, o))
     throw new Error("The static output directory must not overlap the framework server directory.");
-  let i;
+  let n;
   try {
-    i = await g(e);
+    n = await _(e);
   } catch (s) {
-    if ($(s)) return;
+    if (rt(s)) return;
     throw s;
   }
-  if (i.length && !i.includes("demiurge-manifest.json") && !i.includes("demiurge-static-manifest.json"))
+  if (n.length && !n.includes("demiurge-manifest.json") && !n.includes("demiurge-static-manifest.json"))
     throw new Error(
       "The static output directory contains files that a Demiurge build did not create."
     );
 }
-function A(t) {
+function et(t) {
   return !t || typeof t != "object" || Array.isArray(t) ? !1 : Object.values(t).every((e) => typeof e == "function");
 }
-function f(t, e) {
+function E(t, e) {
   const r = m(t, e), o = m(e, t);
-  return w(r) || w(o);
+  return S(r) || S(o);
 }
-function w(t) {
-  return !t || t !== ".." && !t.startsWith(`..${v}`) && !y(t);
+function S(t) {
+  return !t || t !== ".." && !t.startsWith(`..${v}`) && !D(t);
 }
-function $(t) {
+function rt(t) {
   return t instanceof Error && "code" in t && t.code === "ENOENT";
 }
 export {
-  G as helpText,
-  J as parseCliArguments,
-  S as parseClientManifest,
-  q as resolvePreviewOutputDirectory,
-  Y as runBuild,
-  H as runDev,
-  F as validateBuildOutputDirectory
+  J as INSPECT_EXIT_FINDINGS,
+  K as INSPECT_EXIT_INVALID,
+  G as INSPECT_EXIT_OK,
+  Nt as helpText,
+  Rt as parseCliArguments,
+  $ as parseClientManifest,
+  Pt as resolvePreviewOutputDirectory,
+  bt as runBuild,
+  It as runDev,
+  Tt as runInspectCommand,
+  _t as runStart,
+  tt as validateBuildOutputDirectory
 };
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sources":["../src/cli.ts"],"sourcesContent":["import { readFile, readdir } from \"node:fs/promises\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport type { InlineConfig } from \"vite\";\nimport { createDemiurgeViteConfig } from \"./config/vite\";\nimport type { ResolvedDemiurgeConfig } from \"./config/types\";\nimport { parseClientManifest } from \"./manifest\";\nimport type { RouteImporter } from \"./route\";\nimport {\n  generateVercelStaticOutput,\n  generateStaticOutput,\n  type GenerateStaticOutputOptions,\n  type StaticOutputManifest,\n} from \"./static\";\n\nexport { parseClientManifest } from \"./manifest\";\nexport type { ClientBuildManifest } from \"./manifest\";\n\ntype CliEnvironment = Record<string, string | undefined>;\n\nconst cliOptionNames = new Set([\"--host\", \"--origin\", \"--out-dir\", \"--port\"]);\n\nconst CLIENT_ENTRY = \"virtual:demiurge/client-entry\";\nconst SERVER_ENTRY = \"virtual:demiurge/server-entry\";\nconst DEFAULT_CLIENT_OUT_DIR = \"dist\";\nconst DEFAULT_SERVER_OUT_DIR = \"dist/server\";\nconst FRAMEWORK_SERVER_OUT_DIR = \".demiurge/server\";\n\nexport type CliOptions = {\n  command: \"build\" | \"dev\" | \"help\" | \"preview\";\n  host: string;\n  origin?: string;\n  outDir?: string;\n  port: number;\n};\n\nexport type BuildRuntime = {\n  build: (config: InlineConfig) => Promise<unknown>;\n  createViteConfig: (overrides: InlineConfig) => Promise<InlineConfig>;\n  generate: (\n    options: GenerateStaticOutputOptions,\n  ) => Promise<StaticOutputManifest>;\n  importModule: (specifier: string) => Promise<Record<string, unknown>>;\n  now: () => number;\n  readText: (file: string) => Promise<string>;\n};\n\nexport type BuildResult = {\n  deploymentOutDir?: string;\n  manifest?: StaticOutputManifest;\n  outDir: string;\n  serverOutDir?: string;\n};\n\nexport function parseCliArguments(\n  arguments_: string[],\n  environment: CliEnvironment = {},\n): CliOptions {\n  const command = arguments_[0];\n  if (!command || command === \"--help\" || command === \"-h\" || command === \"help\") {\n    return {\n      command: \"help\",\n      host: \"localhost\",\n      port: 4173,\n    };\n  }\n  if (command !== \"build\" && command !== \"dev\" && command !== \"preview\") {\n    throw new Error(`Unknown command: ${command}`);\n  }\n\n  const options: CliOptions = {\n    command,\n    host: \"localhost\",\n    origin: environment.SITE_ORIGIN,\n    port: command === \"dev\" ? 5173 : 4173,\n  };\n\n  for (let index = 1; index < arguments_.length; index += 1) {\n    const argument = arguments_[index]!;\n    if (argument === \"--help\" || argument === \"-h\") {\n      return { command: \"help\", host: \"localhost\", port: 4173 };\n    }\n    const [name, inlineValue] = argument.split(\"=\", 2);\n    if (!cliOptionNames.has(name!)) {\n      throw new Error(`Unknown option: ${argument}`);\n    }\n    const value = inlineValue ?? arguments_[++index];\n    if (!value || value.startsWith(\"--\")) {\n      throw new Error(`Option ${name} requires a value.`);\n    }\n\n    if (name === \"--host\") options.host = value;\n    if (name === \"--origin\") options.origin = value;\n    if (name === \"--out-dir\") options.outDir = value;\n    if (name === \"--port\") {\n      const port = Number(value);\n      if (!Number.isSafeInteger(port) || port < 0 || port > 65_535) {\n        throw new Error(\"The server port must be an integer from 0 through 65535.\");\n      }\n      options.port = port;\n    }\n  }\n\n  return options;\n}\n\nexport const helpText = `Usage: demiurge <command> [options]\n\nCommands:\n  dev                   Start the development server\n  build                 Build production output\n  preview               Serve static output with its declared headers\n\nOptions:\n  --host <host>         Set the server host (default: localhost)\n  --origin <origin>     Set the build origin (default: SITE_ORIGIN)\n  --out-dir <directory> Set the client output directory (default: dist)\n  --port <port>         Set the server port (dev: 5173, preview: 4173)\n  -h, --help            Show this help\n\nDemiurge reads demiurge.config.ts from the project root.`;\n\nexport async function runDev(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n) {\n  const { createServer } = await import(\"vite\");\n  const server = await createServer(\n    await createDemiurgeViteConfig({\n      config,\n      overrides: {\n        mode: \"development\",\n        server: { host: options.host, port: options.port },\n      },\n    }),\n  );\n  await server.listen();\n  return server;\n}\n\nexport async function runBuild(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n  runtime?: BuildRuntime,\n): Promise<BuildResult> {\n  const root = config.root;\n  const build = runtime?.build ?? (await import(\"vite\")).build;\n  const createViteConfig = runtime?.createViteConfig ??\n    ((overrides: InlineConfig) => createDemiurgeViteConfig({ config, overrides }));\n\n  const outDir = resolve(\n    root,\n    options.outDir ?? config.deployment?.outDir ?? DEFAULT_CLIENT_OUT_DIR,\n  );\n  const frameworkServerOutDir = resolve(root, FRAMEWORK_SERVER_OUT_DIR);\n\n  await validateBuildOutputDirectory(\n    root,\n    outDir,\n    join(root, \"public\"),\n    frameworkServerOutDir,\n  );\n\n  await build(\n    await createViteConfig({\n      define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n      mode: \"production\",\n      build: {\n        emptyOutDir: true,\n        outDir,\n        rollupOptions: { input: CLIENT_ENTRY },\n      },\n    }),\n  );\n\n  const applicationServer = config.deployment?.server;\n  const serverOutDir = applicationServer\n    ? resolve(root, applicationServer.outDir ?? DEFAULT_SERVER_OUT_DIR)\n    : undefined;\n\n  if (applicationServer && serverOutDir) {\n    await build(\n      await createViteConfig({\n        define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n        mode: \"production\",\n        build: {\n          copyPublicDir: false,\n          emptyOutDir: true,\n          outDir: serverOutDir,\n          rollupOptions: { input: resolve(root, applicationServer.entry) },\n          ssr: true,\n        },\n      }),\n    );\n  }\n\n  if (!config.deployment?.static) return { outDir, serverOutDir };\n\n  const staticResult = await buildStaticOutput({\n    build,\n    config,\n    createViteConfig,\n    frameworkServerOutDir,\n    options,\n    outDir,\n    root,\n    runtime,\n  });\n\n  return { ...staticResult, outDir, serverOutDir };\n}\n\nasync function buildStaticOutput({\n  build,\n  config,\n  createViteConfig,\n  frameworkServerOutDir,\n  options,\n  outDir,\n  root,\n  runtime,\n}: {\n  build: (config: InlineConfig) => Promise<unknown>;\n  config: ResolvedDemiurgeConfig;\n  createViteConfig: (overrides: InlineConfig) => Promise<InlineConfig>;\n  frameworkServerOutDir: string;\n  options: CliOptions;\n  outDir: string;\n  root: string;\n  runtime?: BuildRuntime;\n}) {\n  await build(\n    await createViteConfig({\n      define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n      mode: \"production\",\n      build: {\n        copyPublicDir: false,\n        emptyOutDir: true,\n        outDir: frameworkServerOutDir,\n        rollupOptions: {\n          input: SERVER_ENTRY,\n          output: { entryFileNames: \"server-entry.js\" },\n        },\n        ssr: true,\n      },\n    }),\n  );\n\n  const clientManifest = parseClientManifest(\n    runtime\n      ? await runtime.readText(resolve(outDir, \"demiurge-manifest.json\"))\n      : await readFile(resolve(outDir, \"demiurge-manifest.json\"), \"utf8\"),\n  );\n  const serverEntryUrl = `${\n    pathToFileURL(resolve(frameworkServerOutDir, \"server-entry.js\")).href\n  }?build=${runtime?.now() ?? Date.now()}`;\n  const serverEntry = runtime\n    ? await runtime.importModule(serverEntryUrl)\n    : await import(serverEntryUrl);\n  if (!isRouteImporterRecord(serverEntry.routes)) {\n    throw new Error(\"The framework server bundle does not export routes.\");\n  }\n\n  const manifest = await (runtime?.generate ?? generateStaticOutput)({\n    fonts: config.assets?.fonts,\n    images: config.assets?.images,\n    origin: options.origin ?? config.deployment?.static?.origin,\n    outDir,\n    root,\n    routes: serverEntry.routes,\n    ssr: clientManifest,\n    staticFileHeaders: config.security?.staticFileHeaders ?? [],\n  });\n\n  const provider = config.deployment?.static?.provider;\n  const deploymentOutDir = provider\n    ? await generateVercelStaticOutput({\n      deployment: provider,\n      manifest,\n      outDir,\n      projectRoot: root,\n    })\n    : undefined;\n\n  return { deploymentOutDir, manifest };\n}\n\nexport function resolvePreviewOutputDirectory(\n  root: string,\n  outDir: string | undefined,\n  configuredOutDir?: string,\n) {\n  return resolve(root, outDir ?? configuredOutDir ?? DEFAULT_CLIENT_OUT_DIR);\n}\n\nexport async function validateBuildOutputDirectory(\n  root: string,\n  outDir: string,\n  publicDir: false | string,\n  serverOutDir: string,\n) {\n  const pathFromRoot = relative(root, outDir);\n  if (\n    !pathFromRoot ||\n    pathFromRoot === \"..\" ||\n    pathFromRoot.startsWith(`..${sep}`) ||\n    isAbsolute(pathFromRoot)\n  ) {\n    throw new Error(\"The static output directory must be inside the Vite root.\");\n  }\n\n  if (publicDir && pathsOverlap(outDir, publicDir)) {\n    throw new Error(\"The static output directory must not overlap the Vite public directory.\");\n  }\n\n  if (pathsOverlap(outDir, serverOutDir)) {\n    throw new Error(\"The static output directory must not overlap the framework server directory.\");\n  }\n\n  let entries: string[];\n  try {\n    entries = await readdir(outDir);\n  } catch (error) {\n    if (isMissingPath(error)) return;\n    throw error;\n  }\n\n  if (\n    entries.length &&\n    !entries.includes(\"demiurge-manifest.json\") &&\n    !entries.includes(\"demiurge-static-manifest.json\")\n  ) {\n    throw new Error(\n      \"The static output directory contains files that a Demiurge build did not create.\",\n    );\n  }\n}\n\nfunction isRouteImporterRecord(\n  value: unknown,\n): value is Record<string, RouteImporter> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return false;\n  }\n\n  return Object.values(value).every((load) => typeof load === \"function\");\n}\n\nfunction pathsOverlap(left: string, right: string) {\n  const fromLeft = relative(left, right);\n  const fromRight = relative(right, left);\n  return isSameOrChildPath(fromLeft) || isSameOrChildPath(fromRight);\n}\n\nfunction isSameOrChildPath(pathname: string) {\n  return !pathname ||\n    (pathname !== \"..\" && !pathname.startsWith(`..${sep}`) &&\n      !isAbsolute(pathname));\n}\n\nfunction isMissingPath(error: unknown) {\n  return error instanceof Error && \"code\" in error && error.code === \"ENOENT\";\n}\n"],"names":["cliOptionNames","CLIENT_ENTRY","SERVER_ENTRY","DEFAULT_CLIENT_OUT_DIR","DEFAULT_SERVER_OUT_DIR","FRAMEWORK_SERVER_OUT_DIR","parseCliArguments","arguments_","environment","command","options","index","argument","name","inlineValue","value","port","helpText","runDev","config","createServer","server","createDemiurgeViteConfig","runBuild","runtime","root","build","createViteConfig","overrides","outDir","resolve","frameworkServerOutDir","validateBuildOutputDirectory","join","applicationServer","serverOutDir","buildStaticOutput","clientManifest","parseClientManifest","readFile","serverEntryUrl","pathToFileURL","serverEntry","isRouteImporterRecord","manifest","generateStaticOutput","provider","generateVercelStaticOutput","resolvePreviewOutputDirectory","configuredOutDir","publicDir","pathFromRoot","relative","sep","isAbsolute","pathsOverlap","entries","readdir","error","isMissingPath","load","left","right","fromLeft","fromRight","isSameOrChildPath","pathname"],"mappings":";;;;;;AAoBA,MAAMA,wBAAqB,IAAI,CAAC,UAAU,YAAY,aAAa,QAAQ,CAAC,GAEtEC,IAAe,iCACfC,IAAe,iCACfC,IAAyB,QACzBC,IAAyB,eACzBC,IAA2B;AA4B1B,SAASC,EACdC,GACAC,IAA8B,IAClB;AACZ,QAAMC,IAAUF,EAAW,CAAC;AAC5B,MAAI,CAACE,KAAWA,MAAY,YAAYA,MAAY,QAAQA,MAAY;AACtE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,IAAA;AAGV,MAAIA,MAAY,WAAWA,MAAY,SAASA,MAAY;AAC1D,UAAM,IAAI,MAAM,oBAAoBA,CAAO,EAAE;AAG/C,QAAMC,IAAsB;AAAA,IAC1B,SAAAD;AAAA,IACA,MAAM;AAAA,IACN,QAAQD,EAAY;AAAA,IACpB,MAAMC,MAAY,QAAQ,OAAO;AAAA,EAAA;AAGnC,WAASE,IAAQ,GAAGA,IAAQJ,EAAW,QAAQI,KAAS,GAAG;AACzD,UAAMC,IAAWL,EAAWI,CAAK;AACjC,QAAIC,MAAa,YAAYA,MAAa;AACxC,aAAO,EAAE,SAAS,QAAQ,MAAM,aAAa,MAAM,KAAA;AAErD,UAAM,CAACC,GAAMC,CAAW,IAAIF,EAAS,MAAM,KAAK,CAAC;AACjD,QAAI,CAACZ,EAAe,IAAIa,CAAK;AAC3B,YAAM,IAAI,MAAM,mBAAmBD,CAAQ,EAAE;AAE/C,UAAMG,IAAQD,KAAeP,EAAW,EAAEI,CAAK;AAC/C,QAAI,CAACI,KAASA,EAAM,WAAW,IAAI;AACjC,YAAM,IAAI,MAAM,UAAUF,CAAI,oBAAoB;AAMpD,QAHIA,MAAS,aAAUH,EAAQ,OAAOK,IAClCF,MAAS,eAAYH,EAAQ,SAASK,IACtCF,MAAS,gBAAaH,EAAQ,SAASK,IACvCF,MAAS,UAAU;AACrB,YAAMG,IAAO,OAAOD,CAAK;AACzB,UAAI,CAAC,OAAO,cAAcC,CAAI,KAAKA,IAAO,KAAKA,IAAO;AACpD,cAAM,IAAI,MAAM,0DAA0D;AAE5E,MAAAN,EAAQ,OAAOM;AAAA,IACjB;AAAA,EACF;AAEA,SAAON;AACT;AAEO,MAAMO,IAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgBxB,eAAsBC,EACpBR,GACAS,GACA;AACA,QAAM,EAAE,cAAAC,EAAA,IAAiB,MAAM,OAAO,MAAM,GACtCC,IAAS,MAAMD;AAAA,IACnB,MAAME,EAAyB;AAAA,MAC7B,QAAAH;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ,EAAE,MAAMT,EAAQ,MAAM,MAAMA,EAAQ,KAAA;AAAA,MAAK;AAAA,IACnD,CACD;AAAA,EAAA;AAEH,eAAMW,EAAO,OAAA,GACNA;AACT;AAEA,eAAsBE,EACpBb,GACAS,GACAK,GACsB;AACtB,QAAMC,IAAON,EAAO,MACdO,IAAQF,GAAS,UAAU,MAAM,OAAO,MAAM,GAAG,OACjDG,IAAmBH,GAAS,qBAC/B,CAACI,MAA4BN,EAAyB,EAAE,QAAAH,GAAQ,WAAAS,EAAA,CAAW,IAExEC,IAASC;AAAA,IACbL;AAAA,IACAf,EAAQ,UAAUS,EAAO,YAAY,UAAUhB;AAAA,EAAA,GAE3C4B,IAAwBD,EAAQL,GAAMpB,CAAwB;AAEpE,QAAM2B;AAAA,IACJP;AAAA,IACAI;AAAA,IACAI,EAAKR,GAAM,QAAQ;AAAA,IACnBM;AAAA,EAAA,GAGF,MAAML;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,aAAa;AAAA,QACb,QAAAE;AAAA,QACA,eAAe,EAAE,OAAO5B,EAAA;AAAA,MAAa;AAAA,IACvC,CACD;AAAA,EAAA;AAGH,QAAMiC,IAAoBf,EAAO,YAAY,QACvCgB,IAAeD,IACjBJ,EAAQL,GAAMS,EAAkB,UAAU9B,CAAsB,IAChE;AAkBJ,SAhBI8B,KAAqBC,KACvB,MAAMT;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,eAAe;AAAA,QACf,aAAa;AAAA,QACb,QAAQQ;AAAA,QACR,eAAe,EAAE,OAAOL,EAAQL,GAAMS,EAAkB,KAAK,EAAA;AAAA,QAC7D,KAAK;AAAA,MAAA;AAAA,IACP,CACD;AAAA,EAAA,GAIAf,EAAO,YAAY,SAajB,EAAE,GAXY,MAAMiB,EAAkB;AAAA,IAC3C,OAAAV;AAAA,IACA,QAAAP;AAAA,IACA,kBAAAQ;AAAA,IACA,uBAAAI;AAAA,IACA,SAAArB;AAAA,IACA,QAAAmB;AAAA,IACA,MAAAJ;AAAA,IACA,SAAAD;AAAA,EAAA,CACD,GAEyB,QAAAK,GAAQ,cAAAM,EAAA,IAbK,EAAE,QAAAN,GAAQ,cAAAM,EAAA;AAcnD;AAEA,eAAeC,EAAkB;AAAA,EAC/B,OAAAV;AAAA,EACA,QAAAP;AAAA,EACA,kBAAAQ;AAAA,EACA,uBAAAI;AAAA,EACA,SAAArB;AAAA,EACA,QAAAmB;AAAA,EACA,MAAAJ;AAAA,EACA,SAAAD;AACF,GASG;AACD,QAAME;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,eAAe;AAAA,QACf,aAAa;AAAA,QACb,QAAQI;AAAA,QACR,eAAe;AAAA,UACb,OAAO7B;AAAA,UACP,QAAQ,EAAE,gBAAgB,kBAAA;AAAA,QAAkB;AAAA,QAE9C,KAAK;AAAA,MAAA;AAAA,IACP,CACD;AAAA,EAAA;AAGH,QAAMmC,IAAiBC;AAAA,IACrBd,IACI,MAAMA,EAAQ,SAASM,EAAQD,GAAQ,wBAAwB,CAAC,IAChE,MAAMU,EAAST,EAAQD,GAAQ,wBAAwB,GAAG,MAAM;AAAA,EAAA,GAEhEW,IAAiB,GACrBC,EAAcX,EAAQC,GAAuB,iBAAiB,CAAC,EAAE,IACnE,UAAUP,GAAS,IAAA,KAAS,KAAK,KAAK,IAChCkB,IAAclB,IAChB,MAAMA,EAAQ,aAAagB,CAAc,IACzC,MAAM,OAAOA;AACjB,MAAI,CAACG,EAAsBD,EAAY,MAAM;AAC3C,UAAM,IAAI,MAAM,qDAAqD;AAGvE,QAAME,IAAW,OAAOpB,GAAS,YAAYqB,GAAsB;AAAA,IACjE,OAAO1B,EAAO,QAAQ;AAAA,IACtB,QAAQA,EAAO,QAAQ;AAAA,IACvB,QAAQT,EAAQ,UAAUS,EAAO,YAAY,QAAQ;AAAA,IACrD,QAAAU;AAAA,IACA,MAAAJ;AAAA,IACA,QAAQiB,EAAY;AAAA,IACpB,KAAKL;AAAA,IACL,mBAAmBlB,EAAO,UAAU,qBAAqB,CAAA;AAAA,EAAC,CAC3D,GAEK2B,IAAW3B,EAAO,YAAY,QAAQ;AAU5C,SAAO,EAAE,kBATgB2B,IACrB,MAAMC,EAA2B;AAAA,IACjC,YAAYD;AAAA,IACZ,UAAAF;AAAA,IACA,QAAAf;AAAA,IACA,aAAaJ;AAAA,EAAA,CACd,IACC,QAEuB,UAAAmB,EAAA;AAC7B;AAEO,SAASI,EACdvB,GACAI,GACAoB,GACA;AACA,SAAOnB,EAAQL,GAAMI,KAAUoB,KAAoB9C,CAAsB;AAC3E;AAEA,eAAsB6B,EACpBP,GACAI,GACAqB,GACAf,GACA;AACA,QAAMgB,IAAeC,EAAS3B,GAAMI,CAAM;AAC1C,MACE,CAACsB,KACDA,MAAiB,QACjBA,EAAa,WAAW,KAAKE,CAAG,EAAE,KAClCC,EAAWH,CAAY;AAEvB,UAAM,IAAI,MAAM,2DAA2D;AAG7E,MAAID,KAAaK,EAAa1B,GAAQqB,CAAS;AAC7C,UAAM,IAAI,MAAM,yEAAyE;AAG3F,MAAIK,EAAa1B,GAAQM,CAAY;AACnC,UAAM,IAAI,MAAM,8EAA8E;AAGhG,MAAIqB;AACJ,MAAI;AACF,IAAAA,IAAU,MAAMC,EAAQ5B,CAAM;AAAA,EAChC,SAAS6B,GAAO;AACd,QAAIC,EAAcD,CAAK,EAAG;AAC1B,UAAMA;AAAA,EACR;AAEA,MACEF,EAAQ,UACR,CAACA,EAAQ,SAAS,wBAAwB,KAC1C,CAACA,EAAQ,SAAS,+BAA+B;AAEjD,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAGN;AAEA,SAASb,EACP5B,GACwC;AACxC,SAAI,CAACA,KAAS,OAAOA,KAAU,YAAY,MAAM,QAAQA,CAAK,IACrD,KAGF,OAAO,OAAOA,CAAK,EAAE,MAAM,CAAC6C,MAAS,OAAOA,KAAS,UAAU;AACxE;AAEA,SAASL,EAAaM,GAAcC,GAAe;AACjD,QAAMC,IAAWX,EAASS,GAAMC,CAAK,GAC/BE,IAAYZ,EAASU,GAAOD,CAAI;AACtC,SAAOI,EAAkBF,CAAQ,KAAKE,EAAkBD,CAAS;AACnE;AAEA,SAASC,EAAkBC,GAAkB;AAC3C,SAAO,CAACA,KACLA,MAAa,QAAQ,CAACA,EAAS,WAAW,KAAKb,CAAG,EAAE,KACnD,CAACC,EAAWY,CAAQ;AAC1B;AAEA,SAASP,EAAcD,GAAgB;AACrC,SAAOA,aAAiB,SAAS,UAAUA,KAASA,EAAM,SAAS;AACrE;"}
+{"version":3,"file":"cli.js","sources":["../src/inspect/types.ts","../src/inspect/report.ts","../src/inspect/command.ts","../src/cli.ts"],"sourcesContent":["import type { HttpMethod } from \"../route\";\nimport type {\n  DocumentCspState,\n  RouteAccessState,\n  StaticPolicyFinding,\n} from \"../vite/policy-verification\";\n\n/**\n * The version of the static policy report. ADR 0019 raises this integer when\n * the framework removes a field or changes the meaning of a field.\n */\nexport const STATIC_POLICY_REPORT_VERSION = 1;\n\n/**\n * The version of the problem document that the inspect command writes when it\n * cannot produce a report.\n */\nexport const INSPECTION_PROBLEM_VERSION = 1;\n\n/**\n * The origin of one fact in a report. The value `static` states that the build\n * knows the fact. The value `request` states that only a request supplies it.\n */\nexport type InspectionResolution = \"request\" | \"static\";\n\n/** The rule that removed one value from a report. */\nexport type InspectionRedactionReason =\n  /** A cookie holds the value. */\n  | \"cookie-value\"\n  /** An `env.secret(...)` declaration produced the value. */\n  | \"environment-secret\"\n  /** A session record holds the value. */\n  | \"session-record\";\n\n/** One value that the serializer removed from a report. */\nexport type InspectionRedaction = {\n  /** The name of the field that held the value. */\n  name: string;\n  /** The dotted path of the field inside the report. */\n  path: string;\n  /** The rule that removed the value. */\n  reason: InspectionRedactionReason;\n};\n\n/** The named sections of the static policy report. */\nexport type StaticPolicyReportSection =\n  | \"findings\"\n  | \"redactions\"\n  | \"request\"\n  | \"routes\";\n\n/** The kind of route file that the static pass read. */\nexport type StaticRouteKind = \"attached\" | \"page\" | \"resource\";\n\n/**\n * The statically readable description of one route file.\n *\n * Each declared field states what the file itself declares. The framework\n * resolves the cascade of the route tree and reports the result of the\n * cascade in the `findings` section.\n */\nexport type StaticRouteReport = {\n  /** The access state that the route file declares. */\n  declaredAccess: RouteAccessState;\n  /** The Content-Security-Policy state that the route file declares. */\n  declaredDocumentCsp: DocumentCspState;\n  /** `true` when the route file declares a document policy. */\n  declaresDocumentPolicy: boolean;\n  /** The path of the route file, relative to the route directory. */\n  file: string;\n  /** The kind of the route file. */\n  kind: StaticRouteKind;\n  /** The HTTP methods that the route file exports. */\n  methods: HttpMethod[];\n  /** The route pattern. An attached file has no pattern. */\n  pattern?: string;\n};\n\n/**\n * The report that `demiurge inspect` writes to standard output. Each section\n * states the resolution of its facts in the `resolutions` record.\n */\nexport type StaticPolicyReport = {\n  /** The static policy findings, sorted by file, export name, and code. */\n  findings: StaticPolicyFinding[];\n  /** The values that the serializer removed. */\n  redactions: InspectionRedaction[];\n  /** The names of the facts that only a request supplies. */\n  request: string[];\n  /** The resolution of each section of the report. */\n  resolutions: Record<StaticPolicyReportSection, InspectionResolution>;\n  /** Every route file under the route directory. */\n  routes: StaticRouteReport[];\n  /** The route directory, relative to the project root. */\n  routesDir: string;\n  /** The version of this report shape. */\n  version: number;\n};\n\n/** The reason that the inspect command could not produce a report. */\nexport type InspectionProblemCode =\n  /** The framework could not read the configuration. */\n  | \"configuration-unreadable\"\n  /** The command received an invalid argument. */\n  | \"invalid-argument\";\n\n/**\n * The document that the inspect command writes when it cannot produce a\n * report. The command then exits with code 2.\n */\nexport type InspectionProblem = {\n  /** The stable code of the condition. */\n  code: InspectionProblemCode;\n  /** The description of the condition. */\n  detail: string;\n  /** The short name of the condition. */\n  title: string;\n  /** The version of this problem shape. */\n  version: number;\n};\n","import { relative, sep } from \"node:path\";\nimport { toRoutePattern, toRouteSegments } from \"../router\";\nimport type { EnvSchema } from \"../security\";\nimport {\n  inspectRoutePolicies,\n  type DemiurgeVitePluginOptions,\n} from \"../vite/plugin\";\nimport type { RouteFileInspection } from \"../vite/policy-verification\";\nimport {\n  STATIC_POLICY_REPORT_VERSION,\n  type StaticPolicyReport,\n  type StaticRouteReport,\n} from \"./types\";\n\nexport type StaticPolicyReportOptions = {\n  /** The plugin options of the application. */\n  options?: DemiurgeVitePluginOptions;\n  /** The absolute path of the project root. */\n  root: string;\n};\n\n// A build knows the route tree and the policy cascade. It does not know a\n// header, a cookie, a session, or an authorization result, because a request\n// supplies each one. The report names these facts, so a reader learns which\n// answer needs a running application.\nconst requestFacts = [\n  \"authorization-result\",\n  \"cookie-values\",\n  \"csrf-token\",\n  \"environment-values\",\n  \"rate-limit-state\",\n  \"request-headers\",\n  \"response-headers\",\n  \"session-record\",\n];\n\n/**\n * Builds the static inspection report of an application.\n *\n * The function reads the route tree and resolves the policy cascade through\n * `inspectRoutePolicies`. It loads no route module, so it runs no data loader\n * and no mutation handler.\n */\nexport async function createStaticPolicyReport(\n  input: StaticPolicyReportOptions,\n): Promise<StaticPolicyReport> {\n  const options = input.options ?? {};\n  const pass = await inspectRoutePolicies(input.root, options);\n  const routes = pass.inspections\n    .map((inspection) => toStaticRouteReport(pass.routesDir, inspection))\n    .sort((left, right) => left.file.localeCompare(right.file));\n\n  return {\n    findings: pass.findings,\n    redactions: [],\n    request: requestFacts,\n    resolutions: {\n      findings: \"static\",\n      redactions: \"static\",\n      request: \"request\",\n      routes: \"static\",\n    },\n    routes,\n    routesDir: toPosixPath(relative(input.root, pass.routesDir)),\n    version: STATIC_POLICY_REPORT_VERSION,\n  };\n}\n\n/** Reads the names of the variables that `env.secret(...)` declared. */\nexport function findSecretEnvKeys(schema: EnvSchema | undefined) {\n  return Object.entries(schema ?? {})\n    .filter(([, variable]) => variable.sensitive)\n    .map(([key]) => key)\n    .sort();\n}\n\n/** Counts the findings that carry error severity. */\nexport function countErrorFindings(report: StaticPolicyReport) {\n  return report.findings.filter((finding) => finding.severity === \"error\")\n    .length;\n}\n\n/** Writes the human summary that the command sends to standard error. */\nexport function formatStaticPolicyReportSummary(report: StaticPolicyReport) {\n  const errors = countErrorFindings(report);\n  const warnings = report.findings.length - errors;\n\n  return [\n    `Demiurge inspected ${report.routes.length} route files in ${report.routesDir}.`,\n    `Findings: ${errors} error, ${warnings} warning.`,\n    `The report states ${report.request.length} facts that only a request supplies.`,\n    ...report.findings.map((finding) =>\n      `  ${finding.severity}: ${toPosixPath(finding.file)} [${finding.code}] ${finding.message}`\n    ),\n  ].join(\"\\n\");\n}\n\nfunction toStaticRouteReport(\n  routesDir: string,\n  inspection: RouteFileInspection,\n): StaticRouteReport {\n  const file = toPosixPath(relative(routesDir, inspection.file));\n  const fileSegments = file.replace(/\\.tsx?$/, \"\").split(\"/\");\n  const attached = fileSegments.at(-1)?.startsWith(\"@\") ?? false;\n\n  return {\n    declaredAccess: inspection.accessState,\n    declaredDocumentCsp: inspection.documentCspState,\n    declaresDocumentPolicy: inspection.declaresDocumentPolicy,\n    file,\n    kind: attached\n      ? \"attached\"\n      : inspection.declaresPageRoute\n      ? \"page\"\n      : \"resource\",\n    methods: inspection.methods,\n    ...(attached\n      ? {}\n      : { pattern: toRoutePattern(toRouteSegments(fileSegments)) }),\n  };\n}\n\nfunction toPosixPath(pathname: string) {\n  return pathname.split(sep).join(\"/\");\n}\n","import type { ResolvedDemiurgeConfig } from \"../config/types\";\nimport { toPluginOptions } from \"../config/vite\";\nimport {\n  countErrorFindings,\n  createStaticPolicyReport,\n  findSecretEnvKeys,\n  formatStaticPolicyReportSummary,\n} from \"./report\";\nimport { serializeInspectionReport } from \"./redact\";\nimport {\n  INSPECTION_PROBLEM_VERSION,\n  type InspectionProblem,\n  type InspectionProblemCode,\n} from \"./types\";\n\n/** The exit codes of the `demiurge inspect` command. */\nexport const INSPECT_EXIT_OK = 0;\nexport const INSPECT_EXIT_FINDINGS = 1;\nexport const INSPECT_EXIT_INVALID = 2;\n\nexport type InspectCommandInput = {\n  /** The arguments that follow the command name. */\n  arguments: readonly string[];\n  /** Reads the configuration of the application. */\n  loadConfig: () => Promise<ResolvedDemiurgeConfig>;\n};\n\nexport type InspectCommandResult = {\n  /** The exit code of the command. */\n  exitCode: number;\n  /** The human summary that the command writes to standard error. */\n  stderr: string;\n  /** The JSON document that the command writes to standard output. */\n  stdout: string;\n};\n\n/**\n * Runs the `demiurge inspect` command.\n *\n * The command reads the route tree, resolves the policy cascade, and returns\n * one JSON document. The command loads no route module, so it runs no data\n * loader and no mutation handler.\n */\nexport async function runInspectCommand(\n  input: InspectCommandInput,\n): Promise<InspectCommandResult> {\n  if (input.arguments.length > 0) {\n    return toProblemResult(\n      \"invalid-argument\",\n      \"The inspect command accepts no argument.\",\n      `The command received ${input.arguments.join(\" \")}.`,\n    );\n  }\n\n  let config: ResolvedDemiurgeConfig;\n\n  try {\n    config = await input.loadConfig();\n  } catch (error) {\n    return toProblemResult(\n      \"configuration-unreadable\",\n      \"Demiurge could not read the configuration.\",\n      error instanceof Error ? error.message : String(error),\n    );\n  }\n\n  const report = await createStaticPolicyReport({\n    options: toPluginOptions(config),\n    root: config.root,\n  });\n\n  return {\n    exitCode: countErrorFindings(report) > 0\n      ? INSPECT_EXIT_FINDINGS\n      : INSPECT_EXIT_OK,\n    stderr: formatStaticPolicyReportSummary(report),\n    stdout: serializeInspectionReport(report, {\n      secretEnvKeys: findSecretEnvKeys(config.env),\n    }),\n  };\n}\n\nfunction toProblemResult(\n  code: InspectionProblemCode,\n  title: string,\n  detail: string,\n): InspectCommandResult {\n  const problem: InspectionProblem = {\n    code,\n    detail,\n    title,\n    version: INSPECTION_PROBLEM_VERSION,\n  };\n\n  return {\n    exitCode: INSPECT_EXIT_INVALID,\n    stderr: `${title}\\n${detail}`,\n    stdout: serializeInspectionReport(problem),\n  };\n}\n","import { readFile, readdir } from \"node:fs/promises\";\nimport { isAbsolute, join, relative, resolve, sep } from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport type { InlineConfig } from \"vite\";\nimport { createDemiurgeViteConfig } from \"./config/vite\";\nimport type { ResolvedDemiurgeConfig } from \"./config/types\";\nimport { parseClientManifest } from \"./manifest\";\nimport type { NodeBuildRuntime, ServeNodeBuildOptions } from \"./node\";\nimport type { RouteImporter } from \"./route\";\nimport {\n  generateVercelStaticOutput,\n  generateStaticOutput,\n  type GenerateStaticOutputOptions,\n  type StaticOutputManifest,\n} from \"./static\";\nimport { generateVercelNodeOutput } from \"./vercel\";\n\nexport { parseClientManifest } from \"./manifest\";\nexport type { ClientBuildManifest } from \"./manifest\";\nexport {\n  INSPECT_EXIT_FINDINGS,\n  INSPECT_EXIT_INVALID,\n  INSPECT_EXIT_OK,\n  runInspectCommand,\n} from \"./inspect\";\nexport type { InspectCommandResult } from \"./inspect\";\n\ntype CliEnvironment = Record<string, string | undefined>;\n\nconst cliOptionNames = new Set([\"--host\", \"--origin\", \"--out-dir\", \"--port\"]);\n\nconst CLIENT_ENTRY = \"virtual:demiurge/client-entry\";\nconst SERVER_ENTRY = \"virtual:demiurge/server-entry\";\nconst DEFAULT_CLIENT_OUT_DIR = \"dist\";\nconst DEFAULT_SERVER_OUT_DIR = \"dist/server\";\nconst FRAMEWORK_SERVER_OUT_DIR = \".demiurge/server\";\n\nexport type CliOptions = {\n  command: \"build\" | \"dev\" | \"help\" | \"inspect\" | \"preview\" | \"start\";\n  host: string;\n  origin?: string;\n  outDir?: string;\n  port: number;\n};\n\nexport type BuildRuntime = {\n  build: (config: InlineConfig) => Promise<unknown>;\n  createViteConfig: (overrides: InlineConfig) => Promise<InlineConfig>;\n  generate: (\n    options: GenerateStaticOutputOptions,\n  ) => Promise<StaticOutputManifest>;\n  importModule: (specifier: string) => Promise<Record<string, unknown>>;\n  now: () => number;\n  readText: (file: string) => Promise<string>;\n};\n\nexport type BuildResult = {\n  deploymentOutDir?: string;\n  manifest?: StaticOutputManifest;\n  outDir: string;\n  serverOutDir?: string;\n};\n\nexport type StartRuntime = {\n  importModule: (specifier: string) => Promise<Record<string, unknown>>;\n  serve: (options: ServeNodeBuildOptions) => Promise<unknown>;\n};\n\nexport function parseCliArguments(\n  arguments_: string[],\n  environment: CliEnvironment = {},\n): CliOptions {\n  const command = arguments_[0];\n  if (!command || command === \"--help\" || command === \"-h\" || command === \"help\") {\n    return {\n      command: \"help\",\n      host: \"localhost\",\n      port: 4173,\n    };\n  }\n  if (\n    command !== \"build\" && command !== \"dev\" && command !== \"inspect\" &&\n    command !== \"preview\" && command !== \"start\"\n  ) {\n    throw new Error(`Unknown command: ${command}`);\n  }\n\n  const options: CliOptions = {\n    command,\n    host: command === \"start\" ? environment.HOST ?? \"127.0.0.1\" : \"localhost\",\n    origin: environment.SITE_ORIGIN,\n    port: command === \"dev\" ? 5173 : 4173,\n  };\n\n  for (let index = 1; index < arguments_.length; index += 1) {\n    const argument = arguments_[index]!;\n    if (argument === \"--help\" || argument === \"-h\") {\n      return { command: \"help\", host: \"localhost\", port: 4173 };\n    }\n    const [name, inlineValue] = argument.split(\"=\", 2);\n    if (!cliOptionNames.has(name!)) {\n      throw new Error(`Unknown option: ${argument}`);\n    }\n    const value = inlineValue ?? arguments_[++index];\n    if (!value || value.startsWith(\"--\")) {\n      throw new Error(`Option ${name} requires a value.`);\n    }\n\n    if (name === \"--host\") options.host = value;\n    if (name === \"--origin\") options.origin = value;\n    if (name === \"--out-dir\") options.outDir = value;\n    if (name === \"--port\") {\n      const port = Number(value);\n      if (!Number.isSafeInteger(port) || port < 0 || port > 65_535) {\n        throw new Error(\"The server port must be an integer from 0 through 65535.\");\n      }\n      options.port = port;\n    }\n  }\n\n  return options;\n}\n\nexport const helpText = `Usage: demiurge <command> [options]\n\nCommands:\n  dev                   Start the development server\n  build                 Build production output\n  start                 Run built Node production output\n  inspect               Write the static inspection report as JSON\n  preview               Serve static output with its declared headers\n\nOptions:\n  --host <host>         Set the server host (start: HOST or 127.0.0.1; otherwise: localhost)\n  --origin <origin>     Set the build origin (default: SITE_ORIGIN)\n  --out-dir <directory> Set the client output directory (default: dist)\n  --port <port>         Set the server port (dev: 5173, preview: 4173)\n  -h, --help            Show this help\n\nThe inspect command writes JSON to standard output and a summary to standard\nerror. It exits with 0 for no error finding, 1 for at least one error finding,\nand 2 for an invalid argument or an unreadable configuration.\n\nDemiurge reads demiurge.config.ts from the project root.`;\n\nexport async function runDev(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n) {\n  const { createServer } = await import(\"vite\");\n  const server = await createServer(\n    await createDemiurgeViteConfig({\n      config,\n      overrides: {\n        mode: \"development\",\n        server: { host: options.host, port: options.port },\n      },\n    }),\n  );\n  await server.listen();\n  return server;\n}\n\nexport async function runBuild(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n  runtime?: BuildRuntime,\n): Promise<BuildResult> {\n  const root = config.root;\n  const build = runtime?.build ?? (await import(\"vite\")).build;\n  const createViteConfig = runtime?.createViteConfig ??\n    ((overrides: InlineConfig) => createDemiurgeViteConfig({ config, overrides }));\n\n  const outDir = resolve(\n    root,\n    options.outDir ?? config.deployment?.outDir ?? DEFAULT_CLIENT_OUT_DIR,\n  );\n  const frameworkServerOutDir = resolve(root, FRAMEWORK_SERVER_OUT_DIR);\n\n  await validateBuildOutputDirectory(\n    root,\n    outDir,\n    join(root, \"public\"),\n    frameworkServerOutDir,\n  );\n\n  await build(\n    await createViteConfig({\n      define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n      mode: \"production\",\n      build: {\n        emptyOutDir: true,\n        outDir,\n        rollupOptions: { input: CLIENT_ENTRY },\n      },\n    }),\n  );\n\n  const applicationServer = config.deployment?.server;\n  const serverOutDir = applicationServer\n    ? resolve(root, applicationServer.outDir ?? DEFAULT_SERVER_OUT_DIR)\n    : undefined;\n\n  if (applicationServer && serverOutDir) {\n    await build(\n      await createViteConfig({\n        define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n        mode: \"production\",\n        build: {\n          copyPublicDir: false,\n          emptyOutDir: true,\n          outDir: serverOutDir,\n          rollupOptions: {\n            input: applicationServer.entry\n              ? resolve(root, applicationServer.entry)\n              : SERVER_ENTRY,\n            output: { entryFileNames: \"server-entry.js\" },\n          },\n          ssr: true,\n        },\n        ...(applicationServer.provider\n          ? {\n              ssr: {\n                external: [\"@demiurgejs/core\", \"react\", \"react-dom\"],\n                noExternal: true,\n              },\n          }\n          : {}),\n      }),\n    );\n  }\n\n  const provider = applicationServer?.provider;\n  if (provider && applicationServer && serverOutDir) {\n    if (config.security?.staticFileHeaders?.length) {\n      throw new Error(\n        \"Vercel Node deployment does not support security.staticFileHeaders. Remove the rules or use a deployment that serves the browser output directly.\",\n      );\n    }\n    const deploymentOutDir = await generateVercelNodeOutput({\n      clientDir: outDir,\n      deployment: provider,\n      projectRoot: root,\n      serverDir: serverOutDir,\n    });\n    return { deploymentOutDir, outDir, serverOutDir };\n  }\n\n  if (!config.deployment?.static) return { outDir, serverOutDir };\n\n  const staticResult = await buildStaticOutput({\n    build,\n    config,\n    createViteConfig,\n    frameworkServerOutDir,\n    options,\n    outDir,\n    root,\n    runtime,\n  });\n\n  return { ...staticResult, outDir, serverOutDir };\n}\n\nexport async function runStart(\n  options: CliOptions,\n  config: ResolvedDemiurgeConfig,\n  environment: CliEnvironment = process.env,\n  runtime?: StartRuntime,\n) {\n  const applicationServer = config.deployment?.server;\n  if (!applicationServer) {\n    throw new Error(\n      \"The start command requires deployment.server in demiurge.config.ts.\",\n    );\n  }\n\n  const allowedHosts = environment.ALLOWED_HOSTS\n    ?.split(\",\")\n    .map((value) => value.trim())\n    .filter(Boolean);\n  if (!allowedHosts?.length) {\n    throw new Error(\n      \"The start command requires ALLOWED_HOSTS as a comma-separated host allowlist.\",\n    );\n  }\n\n  const root = config.root;\n  const clientDir = resolve(\n    root,\n    options.outDir ?? config.deployment?.outDir ?? DEFAULT_CLIENT_OUT_DIR,\n  );\n  const serverOutDir = resolve(\n    root,\n    applicationServer.outDir ?? DEFAULT_SERVER_OUT_DIR,\n  );\n  const serverEntryUrl = pathToFileURL(join(serverOutDir, \"server-entry.js\")).href;\n  const serverEntry = runtime\n    ? await runtime.importModule(serverEntryUrl)\n    : await import(serverEntryUrl);\n  if (!isNodeBuildRuntime(serverEntry)) {\n    throw new Error(\n      \"The application server bundle does not export a Node build runtime.\",\n    );\n  }\n\n  const serve = runtime?.serve ?? (await import(\"./node\")).serveNodeBuild;\n  return serve({\n    allowedHosts,\n    base: pathToFileURL(`${root}/`).href,\n    clientDir: relative(root, clientDir),\n    createHandler: serverEntry.createHandler,\n    env: environment,\n    host: options.host,\n    port: options.port,\n    readyPath: \"/.well-known/ready\",\n    shutdown: { signals: [\"SIGINT\", \"SIGTERM\"] },\n    static: serverEntry.createStatic,\n  });\n}\n\nfunction isNodeBuildRuntime(value: Record<string, unknown>): value is NodeBuildRuntime {\n  return typeof value.createHandler === \"function\" &&\n    (value.createStatic === undefined || typeof value.createStatic === \"function\");\n}\n\nasync function buildStaticOutput({\n  build,\n  config,\n  createViteConfig,\n  frameworkServerOutDir,\n  options,\n  outDir,\n  root,\n  runtime,\n}: {\n  build: (config: InlineConfig) => Promise<unknown>;\n  config: ResolvedDemiurgeConfig;\n  createViteConfig: (overrides: InlineConfig) => Promise<InlineConfig>;\n  frameworkServerOutDir: string;\n  options: CliOptions;\n  outDir: string;\n  root: string;\n  runtime?: BuildRuntime;\n}) {\n  await build(\n    await createViteConfig({\n      define: { \"process.env.NODE_ENV\": JSON.stringify(\"production\") },\n      mode: \"production\",\n      build: {\n        copyPublicDir: false,\n        emptyOutDir: true,\n        outDir: frameworkServerOutDir,\n        rollupOptions: {\n          input: SERVER_ENTRY,\n          output: { entryFileNames: \"server-entry.js\" },\n        },\n        ssr: true,\n      },\n    }),\n  );\n\n  const clientManifest = parseClientManifest(\n    runtime\n      ? await runtime.readText(resolve(outDir, \"demiurge-manifest.json\"))\n      : await readFile(resolve(outDir, \"demiurge-manifest.json\"), \"utf8\"),\n  );\n  const serverEntryUrl = `${\n    pathToFileURL(resolve(frameworkServerOutDir, \"server-entry.js\")).href\n  }?build=${runtime?.now() ?? Date.now()}`;\n  const serverEntry = runtime\n    ? await runtime.importModule(serverEntryUrl)\n    : await import(serverEntryUrl);\n  if (!isRouteImporterRecord(serverEntry.routes)) {\n    throw new Error(\"The framework server bundle does not export routes.\");\n  }\n\n  const manifest = await (runtime?.generate ?? generateStaticOutput)({\n    fonts: config.assets?.fonts,\n    images: config.assets?.images,\n    origin: options.origin ?? config.deployment?.static?.origin,\n    outDir,\n    root,\n    routes: serverEntry.routes,\n    ssr: clientManifest,\n    staticFileHeaders: config.security?.staticFileHeaders ?? [],\n  });\n\n  const provider = config.deployment?.static?.provider;\n  const deploymentOutDir = provider\n    ? await generateVercelStaticOutput({\n      deployment: provider,\n      manifest,\n      outDir,\n      projectRoot: root,\n    })\n    : undefined;\n\n  return { deploymentOutDir, manifest };\n}\n\nexport function resolvePreviewOutputDirectory(\n  root: string,\n  outDir: string | undefined,\n  configuredOutDir?: string,\n) {\n  return resolve(root, outDir ?? configuredOutDir ?? DEFAULT_CLIENT_OUT_DIR);\n}\n\nexport async function validateBuildOutputDirectory(\n  root: string,\n  outDir: string,\n  publicDir: false | string,\n  serverOutDir: string,\n) {\n  const pathFromRoot = relative(root, outDir);\n  if (\n    !pathFromRoot ||\n    pathFromRoot === \"..\" ||\n    pathFromRoot.startsWith(`..${sep}`) ||\n    isAbsolute(pathFromRoot)\n  ) {\n    throw new Error(\"The static output directory must be inside the Vite root.\");\n  }\n\n  if (publicDir && pathsOverlap(outDir, publicDir)) {\n    throw new Error(\"The static output directory must not overlap the Vite public directory.\");\n  }\n\n  if (pathsOverlap(outDir, serverOutDir)) {\n    throw new Error(\"The static output directory must not overlap the framework server directory.\");\n  }\n\n  let entries: string[];\n  try {\n    entries = await readdir(outDir);\n  } catch (error) {\n    if (isMissingPath(error)) return;\n    throw error;\n  }\n\n  if (\n    entries.length &&\n    !entries.includes(\"demiurge-manifest.json\") &&\n    !entries.includes(\"demiurge-static-manifest.json\")\n  ) {\n    throw new Error(\n      \"The static output directory contains files that a Demiurge build did not create.\",\n    );\n  }\n}\n\nfunction isRouteImporterRecord(\n  value: unknown,\n): value is Record<string, RouteImporter> {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return false;\n  }\n\n  return Object.values(value).every((load) => typeof load === \"function\");\n}\n\nfunction pathsOverlap(left: string, right: string) {\n  const fromLeft = relative(left, right);\n  const fromRight = relative(right, left);\n  return isSameOrChildPath(fromLeft) || isSameOrChildPath(fromRight);\n}\n\nfunction isSameOrChildPath(pathname: string) {\n  return !pathname ||\n    (pathname !== \"..\" && !pathname.startsWith(`..${sep}`) &&\n      !isAbsolute(pathname));\n}\n\nfunction isMissingPath(error: unknown) {\n  return error instanceof Error && \"code\" in error && error.code === \"ENOENT\";\n}\n"],"names":["STATIC_POLICY_REPORT_VERSION","INSPECTION_PROBLEM_VERSION","requestFacts","createStaticPolicyReport","input","options","pass","inspectRoutePolicies","routes","inspection","toStaticRouteReport","left","right","toPosixPath","relative","findSecretEnvKeys","schema","variable","key","countErrorFindings","report","finding","formatStaticPolicyReportSummary","errors","warnings","routesDir","file","fileSegments","attached","toRoutePattern","toRouteSegments","pathname","sep","INSPECT_EXIT_OK","INSPECT_EXIT_FINDINGS","INSPECT_EXIT_INVALID","runInspectCommand","toProblemResult","config","error","toPluginOptions","serializeInspectionReport","code","title","detail","problem","cliOptionNames","CLIENT_ENTRY","SERVER_ENTRY","DEFAULT_CLIENT_OUT_DIR","DEFAULT_SERVER_OUT_DIR","FRAMEWORK_SERVER_OUT_DIR","parseCliArguments","arguments_","environment","command","index","argument","name","inlineValue","value","port","helpText","runDev","createServer","server","createDemiurgeViteConfig","runBuild","runtime","root","build","createViteConfig","overrides","outDir","resolve","frameworkServerOutDir","validateBuildOutputDirectory","join","applicationServer","serverOutDir","provider","generateVercelNodeOutput","buildStaticOutput","runStart","allowedHosts","clientDir","serverEntryUrl","pathToFileURL","serverEntry","isNodeBuildRuntime","clientManifest","parseClientManifest","readFile","isRouteImporterRecord","manifest","generateStaticOutput","generateVercelStaticOutput","resolvePreviewOutputDirectory","configuredOutDir","publicDir","pathFromRoot","isAbsolute","pathsOverlap","entries","readdir","isMissingPath","load","fromLeft","fromRight","isSameOrChildPath"],"mappings":";;;;;;;;;;;;;;;;;;;;AAWO,MAAMA,IAA+B,GAM/BC,IAA6B,GCQpCC,IAAe;AAAA,EACnB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASA,eAAsBC,EACpBC,GAC6B;AAC7B,QAAMC,IAAUD,EAAM,WAAW,CAAA,GAC3BE,IAAO,MAAMC,EAAqBH,EAAM,MAAMC,CAAO,GACrDG,IAASF,EAAK,YACjB,IAAI,CAACG,MAAeC,EAAoBJ,EAAK,WAAWG,CAAU,CAAC,EACnE,KAAK,CAACE,GAAMC,MAAUD,EAAK,KAAK,cAAcC,EAAM,IAAI,CAAC;AAE5D,SAAO;AAAA,IACL,UAAUN,EAAK;AAAA,IACf,YAAY,CAAA;AAAA,IACZ,SAASJ;AAAA,IACT,aAAa;AAAA,MACX,UAAU;AAAA,MACV,YAAY;AAAA,MACZ,SAAS;AAAA,MACT,QAAQ;AAAA,IAAA;AAAA,IAEV,QAAAM;AAAA,IACA,WAAWK,EAAYC,EAASV,EAAM,MAAME,EAAK,SAAS,CAAC;AAAA,IAC3D,SAASN;AAAA,EAAA;AAEb;AAGO,SAASe,EAAkBC,GAA+B;AAC/D,SAAO,OAAO,QAAQA,KAAU,CAAA,CAAE,EAC/B,OAAO,CAAC,GAAGC,CAAQ,MAAMA,EAAS,SAAS,EAC3C,IAAI,CAAC,CAACC,CAAG,MAAMA,CAAG,EAClB,KAAA;AACL;AAGO,SAASC,EAAmBC,GAA4B;AAC7D,SAAOA,EAAO,SAAS,OAAO,CAACC,MAAYA,EAAQ,aAAa,OAAO,EACpE;AACL;AAGO,SAASC,EAAgCF,GAA4B;AAC1E,QAAMG,IAASJ,EAAmBC,CAAM,GAClCI,IAAWJ,EAAO,SAAS,SAASG;AAE1C,SAAO;AAAA,IACL,sBAAsBH,EAAO,OAAO,MAAM,mBAAmBA,EAAO,SAAS;AAAA,IAC7E,aAAaG,CAAM,WAAWC,CAAQ;AAAA,IACtC,qBAAqBJ,EAAO,QAAQ,MAAM;AAAA,IAC1C,GAAGA,EAAO,SAAS;AAAA,MAAI,CAACC,MACtB,KAAKA,EAAQ,QAAQ,KAAKR,EAAYQ,EAAQ,IAAI,CAAC,KAAKA,EAAQ,IAAI,KAAKA,EAAQ,OAAO;AAAA,IAAA;AAAA,EAC1F,EACA,KAAK;AAAA,CAAI;AACb;AAEA,SAASX,EACPe,GACAhB,GACmB;AACnB,QAAMiB,IAAOb,EAAYC,EAASW,GAAWhB,EAAW,IAAI,CAAC,GACvDkB,IAAeD,EAAK,QAAQ,WAAW,EAAE,EAAE,MAAM,GAAG,GACpDE,IAAWD,EAAa,GAAG,EAAE,GAAG,WAAW,GAAG,KAAK;AAEzD,SAAO;AAAA,IACL,gBAAgBlB,EAAW;AAAA,IAC3B,qBAAqBA,EAAW;AAAA,IAChC,wBAAwBA,EAAW;AAAA,IACnC,MAAAiB;AAAA,IACA,MAAME,IACF,aACAnB,EAAW,oBACX,SACA;AAAA,IACJ,SAASA,EAAW;AAAA,IACpB,GAAImB,IACA,CAAA,IACA,EAAE,SAASC,EAAeC,EAAgBH,CAAY,CAAC,EAAA;AAAA,EAAE;AAEjE;AAEA,SAASd,EAAYkB,GAAkB;AACrC,SAAOA,EAAS,MAAMC,CAAG,EAAE,KAAK,GAAG;AACrC;AC5GO,MAAMC,IAAkB,GAClBC,IAAwB,GACxBC,IAAuB;AAyBpC,eAAsBC,GACpBhC,GAC+B;AAC/B,MAAIA,EAAM,UAAU,SAAS;AAC3B,WAAOiC;AAAA,MACL;AAAA,MACA;AAAA,MACA,wBAAwBjC,EAAM,UAAU,KAAK,GAAG,CAAC;AAAA,IAAA;AAIrD,MAAIkC;AAEJ,MAAI;AACF,IAAAA,IAAS,MAAMlC,EAAM,WAAA;AAAA,EACvB,SAASmC,GAAO;AACd,WAAOF;AAAA,MACL;AAAA,MACA;AAAA,MACAE,aAAiB,QAAQA,EAAM,UAAU,OAAOA,CAAK;AAAA,IAAA;AAAA,EAEzD;AAEA,QAAMnB,IAAS,MAAMjB,EAAyB;AAAA,IAC5C,SAASqC,EAAgBF,CAAM;AAAA,IAC/B,MAAMA,EAAO;AAAA,EAAA,CACd;AAED,SAAO;AAAA,IACL,UAAUnB,EAAmBC,CAAM,IAAI,IACnCc,IACAD;AAAA,IACJ,QAAQX,EAAgCF,CAAM;AAAA,IAC9C,QAAQqB,EAA0BrB,GAAQ;AAAA,MACxC,eAAeL,EAAkBuB,EAAO,GAAG;AAAA,IAAA,CAC5C;AAAA,EAAA;AAEL;AAEA,SAASD,EACPK,GACAC,GACAC,GACsB;AACtB,QAAMC,IAA6B;AAAA,IACjC,MAAAH;AAAA,IACA,QAAAE;AAAA,IACA,OAAAD;AAAA,IACA,SAAS1C;AAAA,EAAA;AAGX,SAAO;AAAA,IACL,UAAUkC;AAAA,IACV,QAAQ,GAAGQ,CAAK;AAAA,EAAKC,CAAM;AAAA,IAC3B,QAAQH,EAA0BI,CAAO;AAAA,EAAA;AAE7C;ACtEA,MAAMC,wBAAqB,IAAI,CAAC,UAAU,YAAY,aAAa,QAAQ,CAAC,GAEtEC,IAAe,iCACfC,IAAe,iCACfC,IAAyB,QACzBC,IAAyB,eACzBC,IAA2B;AAiC1B,SAASC,GACdC,GACAC,IAA8B,IAClB;AACZ,QAAMC,IAAUF,EAAW,CAAC;AAC5B,MAAI,CAACE,KAAWA,MAAY,YAAYA,MAAY,QAAQA,MAAY;AACtE,WAAO;AAAA,MACL,SAAS;AAAA,MACT,MAAM;AAAA,MACN,MAAM;AAAA,IAAA;AAGV,MACEA,MAAY,WAAWA,MAAY,SAASA,MAAY,aACxDA,MAAY,aAAaA,MAAY;AAErC,UAAM,IAAI,MAAM,oBAAoBA,CAAO,EAAE;AAG/C,QAAMlD,IAAsB;AAAA,IAC1B,SAAAkD;AAAA,IACA,MAAMA,MAAY,UAAUD,EAAY,QAAQ,cAAc;AAAA,IAC9D,QAAQA,EAAY;AAAA,IACpB,MAAMC,MAAY,QAAQ,OAAO;AAAA,EAAA;AAGnC,WAASC,IAAQ,GAAGA,IAAQH,EAAW,QAAQG,KAAS,GAAG;AACzD,UAAMC,IAAWJ,EAAWG,CAAK;AACjC,QAAIC,MAAa,YAAYA,MAAa;AACxC,aAAO,EAAE,SAAS,QAAQ,MAAM,aAAa,MAAM,KAAA;AAErD,UAAM,CAACC,GAAMC,CAAW,IAAIF,EAAS,MAAM,KAAK,CAAC;AACjD,QAAI,CAACX,EAAe,IAAIY,CAAK;AAC3B,YAAM,IAAI,MAAM,mBAAmBD,CAAQ,EAAE;AAE/C,UAAMG,IAAQD,KAAeN,EAAW,EAAEG,CAAK;AAC/C,QAAI,CAACI,KAASA,EAAM,WAAW,IAAI;AACjC,YAAM,IAAI,MAAM,UAAUF,CAAI,oBAAoB;AAMpD,QAHIA,MAAS,aAAUrD,EAAQ,OAAOuD,IAClCF,MAAS,eAAYrD,EAAQ,SAASuD,IACtCF,MAAS,gBAAarD,EAAQ,SAASuD,IACvCF,MAAS,UAAU;AACrB,YAAMG,IAAO,OAAOD,CAAK;AACzB,UAAI,CAAC,OAAO,cAAcC,CAAI,KAAKA,IAAO,KAAKA,IAAO;AACpD,cAAM,IAAI,MAAM,0DAA0D;AAE5E,MAAAxD,EAAQ,OAAOwD;AAAA,IACjB;AAAA,EACF;AAEA,SAAOxD;AACT;AAEO,MAAMyD,KAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBxB,eAAsBC,GACpB1D,GACAiC,GACA;AACA,QAAM,EAAE,cAAA0B,EAAA,IAAiB,MAAM,OAAO,MAAM,GACtCC,IAAS,MAAMD;AAAA,IACnB,MAAME,EAAyB;AAAA,MAC7B,QAAA5B;AAAA,MACA,WAAW;AAAA,QACT,MAAM;AAAA,QACN,QAAQ,EAAE,MAAMjC,EAAQ,MAAM,MAAMA,EAAQ,KAAA;AAAA,MAAK;AAAA,IACnD,CACD;AAAA,EAAA;AAEH,eAAM4D,EAAO,OAAA,GACNA;AACT;AAEA,eAAsBE,GACpB9D,GACAiC,GACA8B,GACsB;AACtB,QAAMC,IAAO/B,EAAO,MACdgC,IAAQF,GAAS,UAAU,MAAM,OAAO,MAAM,GAAG,OACjDG,IAAmBH,GAAS,qBAC/B,CAACI,MAA4BN,EAAyB,EAAE,QAAA5B,GAAQ,WAAAkC,EAAA,CAAW,IAExEC,IAASC;AAAA,IACbL;AAAA,IACAhE,EAAQ,UAAUiC,EAAO,YAAY,UAAUW;AAAA,EAAA,GAE3C0B,IAAwBD,EAAQL,GAAMlB,CAAwB;AAEpE,QAAMyB;AAAA,IACJP;AAAA,IACAI;AAAA,IACAI,EAAKR,GAAM,QAAQ;AAAA,IACnBM;AAAA,EAAA,GAGF,MAAML;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,aAAa;AAAA,QACb,QAAAE;AAAA,QACA,eAAe,EAAE,OAAO1B,EAAA;AAAA,MAAa;AAAA,IACvC,CACD;AAAA,EAAA;AAGH,QAAM+B,IAAoBxC,EAAO,YAAY,QACvCyC,IAAeD,IACjBJ,EAAQL,GAAMS,EAAkB,UAAU5B,CAAsB,IAChE;AAEJ,EAAI4B,KAAqBC,KACvB,MAAMT;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,eAAe;AAAA,QACf,aAAa;AAAA,QACb,QAAQQ;AAAA,QACR,eAAe;AAAA,UACb,OAAOD,EAAkB,QACrBJ,EAAQL,GAAMS,EAAkB,KAAK,IACrC9B;AAAA,UACJ,QAAQ,EAAE,gBAAgB,kBAAA;AAAA,QAAkB;AAAA,QAE9C,KAAK;AAAA,MAAA;AAAA,MAEP,GAAI8B,EAAkB,WAClB;AAAA,QACE,KAAK;AAAA,UACH,UAAU,CAAC,oBAAoB,SAAS,WAAW;AAAA,UACnD,YAAY;AAAA,QAAA;AAAA,MACd,IAEF,CAAA;AAAA,IAAC,CACN;AAAA,EAAA;AAIL,QAAME,IAAWF,GAAmB;AACpC,MAAIE,KAAYF,KAAqBC,GAAc;AACjD,QAAIzC,EAAO,UAAU,mBAAmB;AACtC,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AASJ,WAAO,EAAE,kBANgB,MAAM2C,EAAyB;AAAA,MACtD,WAAWR;AAAA,MACX,YAAYO;AAAA,MACZ,aAAaX;AAAA,MACb,WAAWU;AAAA,IAAA,CACZ,GAC0B,QAAAN,GAAQ,cAAAM,EAAA;AAAA,EACrC;AAEA,SAAKzC,EAAO,YAAY,SAajB,EAAE,GAXY,MAAM4C,EAAkB;AAAA,IAC3C,OAAAZ;AAAA,IACA,QAAAhC;AAAA,IACA,kBAAAiC;AAAA,IACA,uBAAAI;AAAA,IACA,SAAAtE;AAAA,IACA,QAAAoE;AAAA,IACA,MAAAJ;AAAA,IACA,SAAAD;AAAA,EAAA,CACD,GAEyB,QAAAK,GAAQ,cAAAM,EAAA,IAbK,EAAE,QAAAN,GAAQ,cAAAM,EAAA;AAcnD;AAEA,eAAsBI,GACpB9E,GACAiC,GACAgB,IAA8B,QAAQ,KACtCc,GACA;AACA,QAAMU,IAAoBxC,EAAO,YAAY;AAC7C,MAAI,CAACwC;AACH,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAIJ,QAAMM,IAAe9B,EAAY,eAC7B,MAAM,GAAG,EACV,IAAI,CAACM,MAAUA,EAAM,KAAA,CAAM,EAC3B,OAAO,OAAO;AACjB,MAAI,CAACwB,GAAc;AACjB,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAIJ,QAAMf,IAAO/B,EAAO,MACd+C,IAAYX;AAAA,IAChBL;AAAA,IACAhE,EAAQ,UAAUiC,EAAO,YAAY,UAAUW;AAAA,EAAA,GAE3C8B,IAAeL;AAAA,IACnBL;AAAA,IACAS,EAAkB,UAAU5B;AAAA,EAAA,GAExBoC,IAAiBC,EAAcV,EAAKE,GAAc,iBAAiB,CAAC,EAAE,MACtES,IAAcpB,IAChB,MAAMA,EAAQ,aAAakB,CAAc,IACzC,MAAM,OAAOA;AACjB,MAAI,CAACG,EAAmBD,CAAW;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAKJ,UADcpB,GAAS,UAAU,MAAM,OAAO,iBAAQ,GAAG,gBAC5C;AAAA,IACX,cAAAgB;AAAA,IACA,MAAMG,EAAc,GAAGlB,CAAI,GAAG,EAAE;AAAA,IAChC,WAAWvD,EAASuD,GAAMgB,CAAS;AAAA,IACnC,eAAeG,EAAY;AAAA,IAC3B,KAAKlC;AAAA,IACL,MAAMjD,EAAQ;AAAA,IACd,MAAMA,EAAQ;AAAA,IACd,WAAW;AAAA,IACX,UAAU,EAAE,SAAS,CAAC,UAAU,SAAS,EAAA;AAAA,IACzC,QAAQmF,EAAY;AAAA,EAAA,CACrB;AACH;AAEA,SAASC,EAAmB7B,GAA2D;AACrF,SAAO,OAAOA,EAAM,iBAAkB,eACnCA,EAAM,iBAAiB,UAAa,OAAOA,EAAM,gBAAiB;AACvE;AAEA,eAAesB,EAAkB;AAAA,EAC/B,OAAAZ;AAAA,EACA,QAAAhC;AAAA,EACA,kBAAAiC;AAAA,EACA,uBAAAI;AAAA,EACA,SAAAtE;AAAA,EACA,QAAAoE;AAAA,EACA,MAAAJ;AAAA,EACA,SAAAD;AACF,GASG;AACD,QAAME;AAAA,IACJ,MAAMC,EAAiB;AAAA,MACrB,QAAQ,EAAE,wBAAwB,KAAK,UAAU,YAAY,EAAA;AAAA,MAC7D,MAAM;AAAA,MACN,OAAO;AAAA,QACL,eAAe;AAAA,QACf,aAAa;AAAA,QACb,QAAQI;AAAA,QACR,eAAe;AAAA,UACb,OAAO3B;AAAA,UACP,QAAQ,EAAE,gBAAgB,kBAAA;AAAA,QAAkB;AAAA,QAE9C,KAAK;AAAA,MAAA;AAAA,IACP,CACD;AAAA,EAAA;AAGH,QAAM0C,IAAiBC;AAAA,IACrBvB,IACI,MAAMA,EAAQ,SAASM,EAAQD,GAAQ,wBAAwB,CAAC,IAChE,MAAMmB,EAASlB,EAAQD,GAAQ,wBAAwB,GAAG,MAAM;AAAA,EAAA,GAEhEa,IAAiB,GACrBC,EAAcb,EAAQC,GAAuB,iBAAiB,CAAC,EAAE,IACnE,UAAUP,GAAS,IAAA,KAAS,KAAK,KAAK,IAChCoB,IAAcpB,IAChB,MAAMA,EAAQ,aAAakB,CAAc,IACzC,MAAM,OAAOA;AACjB,MAAI,CAACO,GAAsBL,EAAY,MAAM;AAC3C,UAAM,IAAI,MAAM,qDAAqD;AAGvE,QAAMM,IAAW,OAAO1B,GAAS,YAAY2B,GAAsB;AAAA,IACjE,OAAOzD,EAAO,QAAQ;AAAA,IACtB,QAAQA,EAAO,QAAQ;AAAA,IACvB,QAAQjC,EAAQ,UAAUiC,EAAO,YAAY,QAAQ;AAAA,IACrD,QAAAmC;AAAA,IACA,MAAAJ;AAAA,IACA,QAAQmB,EAAY;AAAA,IACpB,KAAKE;AAAA,IACL,mBAAmBpD,EAAO,UAAU,qBAAqB,CAAA;AAAA,EAAC,CAC3D,GAEK0C,IAAW1C,EAAO,YAAY,QAAQ;AAU5C,SAAO,EAAE,kBATgB0C,IACrB,MAAMgB,EAA2B;AAAA,IACjC,YAAYhB;AAAA,IACZ,UAAAc;AAAA,IACA,QAAArB;AAAA,IACA,aAAaJ;AAAA,EAAA,CACd,IACC,QAEuB,UAAAyB,EAAA;AAC7B;AAEO,SAASG,GACd5B,GACAI,GACAyB,GACA;AACA,SAAOxB,EAAQL,GAAMI,KAAUyB,KAAoBjD,CAAsB;AAC3E;AAEA,eAAsB2B,GACpBP,GACAI,GACA0B,GACApB,GACA;AACA,QAAMqB,IAAetF,EAASuD,GAAMI,CAAM;AAC1C,MACE,CAAC2B,KACDA,MAAiB,QACjBA,EAAa,WAAW,KAAKpE,CAAG,EAAE,KAClCqE,EAAWD,CAAY;AAEvB,UAAM,IAAI,MAAM,2DAA2D;AAG7E,MAAID,KAAaG,EAAa7B,GAAQ0B,CAAS;AAC7C,UAAM,IAAI,MAAM,yEAAyE;AAG3F,MAAIG,EAAa7B,GAAQM,CAAY;AACnC,UAAM,IAAI,MAAM,8EAA8E;AAGhG,MAAIwB;AACJ,MAAI;AACF,IAAAA,IAAU,MAAMC,EAAQ/B,CAAM;AAAA,EAChC,SAASlC,GAAO;AACd,QAAIkE,GAAclE,CAAK,EAAG;AAC1B,UAAMA;AAAA,EACR;AAEA,MACEgE,EAAQ,UACR,CAACA,EAAQ,SAAS,wBAAwB,KAC1C,CAACA,EAAQ,SAAS,+BAA+B;AAEjD,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAGN;AAEA,SAASV,GACPjC,GACwC;AACxC,SAAI,CAACA,KAAS,OAAOA,KAAU,YAAY,MAAM,QAAQA,CAAK,IACrD,KAGF,OAAO,OAAOA,CAAK,EAAE,MAAM,CAAC8C,MAAS,OAAOA,KAAS,UAAU;AACxE;AAEA,SAASJ,EAAa3F,GAAcC,GAAe;AACjD,QAAM+F,IAAW7F,EAASH,GAAMC,CAAK,GAC/BgG,IAAY9F,EAASF,GAAOD,CAAI;AACtC,SAAOkG,EAAkBF,CAAQ,KAAKE,EAAkBD,CAAS;AACnE;AAEA,SAASC,EAAkB9E,GAAkB;AAC3C,SAAO,CAACA,KACLA,MAAa,QAAQ,CAACA,EAAS,WAAW,KAAKC,CAAG,EAAE,KACnD,CAACqE,EAAWtE,CAAQ;AAC1B;AAEA,SAAS0E,GAAclE,GAAgB;AACrC,SAAOA,aAAiB,SAAS,UAAUA,KAASA,EAAM,SAAS;AACrE;"}

package/dist/config/index.js

@@ -1,7 +1,7 @@
 import { existsSync as f } from "node:fs";
 import { join as u, resolve as a, dirname as s } from "node:path";
-import { D as r, v as d } from "../chunks/vite-DO70kZA6.js";
-import { c as F, t as M } from "../chunks/vite-DO70kZA6.js";
+import { D as r, v as d } from "../chunks/vite-BADZA8Fl.js";
+import { c as F, t as M } from "../chunks/vite-BADZA8Fl.js";
 function x(e) {
   return e;
 }