@fireweaveai/server-sdk-cjs 0.0.0-reserve.0 → 0.0.0-stage

package/dist/infrastructure/hosts.js

@@ -1,72 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_ALLOWED_HOSTS = void 0;
-exports.isLoopbackHostname = isLoopbackHostname;
-exports.assertHostAllowed = assertHostAllowed;
-/**
- * Backend host allowlist (SSRF guard).
- *
- * The allowlist is ON by default: when no explicit `allowedHosts` is
- * configured, only the canonical Fireweave hosts plus loopback are permitted,
- * so a typo'd or tampered `host` cannot be aimed at cloud metadata endpoints.
- * Custom / self-hosted deployments require an explicit `allowedHosts` entry;
- * `['*']` opts out entirely.
- *
- * Scheme policy: https is required for non-loopback hosts; plain http is
- * permitted on loopback only (the repo's test-server stub).
- */
-const errors_js_1 = require("../domain/errors.js");
-/**
- * Canonical default host allowlist.
- *
- * v3 replaced the third-party analytics hostnames this list used to carry
- * (ADR-0006) with Fireweave's own fw-server hostnames. The security property is
- * unchanged — an unconfigured allowlist still denies everything it does not name
- * — but the *contents* changed: code doing
- * `allowedHosts: [...DEFAULT_ALLOWED_HOSTS, …]` no longer reaches the former
- * vendor endpoints, which is the intent.
- */
-exports.DEFAULT_ALLOWED_HOSTS = Object.freeze([
-    'app-server.fireweave.ai',
-    'staging-app-server.fireweave.ai',
-    'localhost',
-    '127.0.0.1',
-    '::1',
-]);
-/** True for loopback hostnames (http and test stubs are permitted here). */
-function isLoopbackHostname(hostname) {
-    return (hostname === 'localhost' ||
-        hostname === '127.0.0.1' ||
-        hostname === '::1' ||
-        hostname === '[::1]');
-}
-/**
- * Validate a backend host URL against the allowlist.
- * Throws FireweaveError('Configuration') — fixed message, no host echo.
- */
-function assertHostAllowed(host, allowedHosts) {
-    let url;
-    try {
-        url = new URL(host);
-    }
-    catch {
-        throw new errors_js_1.FireweaveError('Configuration');
-    }
-    if (url.protocol !== 'http:' && url.protocol !== 'https:') {
-        throw new errors_js_1.FireweaveError('Configuration');
-    }
-    const loopback = isLoopbackHostname(url.hostname);
-    if (url.protocol === 'http:' && !loopback) {
-        // https required for anything that leaves the machine.
-        throw new errors_js_1.FireweaveError('Configuration');
-    }
-    const list = allowedHosts !== undefined && allowedHosts.length > 0 ? allowedHosts : exports.DEFAULT_ALLOWED_HOSTS;
-    if (list.includes('*'))
-        return; // explicit opt-out
-    const allowed = list.some((h) => url.hostname === h ||
-        (h === 'localhost' && loopback) ||
-        (h === '::1' && url.hostname === '[::1]'));
-    if (!allowed) {
-        throw new errors_js_1.FireweaveError('Configuration');
-    }
-}

package/dist/register-browser.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/register-browser.js

@@ -1,7 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-/** Browser build of @fireweaveai/server-sdk/register: fails loudly, never starts. */
-const index_js_1 = require("./index.js");
-throw new index_js_1.FireweaveError('Configuration', {
-    message: '[fireweave] @fireweaveai/server-sdk/register is for server runtimes. Browser apps use @fireweaveai/web-sdk.',
-});

package/dist/register.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/register.js

@@ -1,13 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-/**
- * @fireweaveai/server-sdk/register: start FireWeave from the environment alone.
- *
- *   import '@fireweaveai/server-sdk/register';      // first import of the entrypoint
- *   node --import @fireweaveai/server-sdk/register app.js
- *   bun --preload @fireweaveai/server-sdk/register app.ts
- *
- * Use src/fireweave/start.ts instead when you pass control points or other options.
- */
-const index_js_1 = require("./start/index.js");
-(0, index_js_1.start)();

package/dist/start/browser.d.ts

@@ -1,12 +0,0 @@
-export declare function start(): void;
-export declare function defineControlPoints<T>(controlPoints: T): T;
-export declare function resetForTests(): Promise<void>;
-export declare const fw: Readonly<{
-    controlPoints: {};
-    identify: () => never;
-    instanceKey: () => never;
-    status: () => never;
-    client: () => never;
-    shutdown: () => never;
-}>;
-export { SDK_VERSION, SDK_CHANNEL } from './build-info.js';

package/dist/start/browser.js

@@ -1,36 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SDK_CHANNEL = exports.SDK_VERSION = exports.fw = void 0;
-exports.start = start;
-exports.defineControlPoints = defineControlPoints;
-exports.resetForTests = resetForTests;
-/**
- * Browser build of @fireweaveai/server-sdk/start (the "browser" export
- * condition). Server keys must never reach a bundle, so every entry point
- * fails loudly and names the right package.
- */
-const index_js_1 = require("../index.js");
-const serverOnly = () => new index_js_1.FireweaveError('Configuration', {
-    message: '[fireweave] @fireweaveai/server-sdk/start is for server runtimes. Browser apps use @fireweaveai/web-sdk.',
-});
-function start() {
-    throw serverOnly();
-}
-function defineControlPoints(controlPoints) {
-    return controlPoints;
-}
-async function resetForTests() { }
-const fail = () => {
-    throw serverOnly();
-};
-exports.fw = Object.freeze({
-    controlPoints: new Proxy({}, { get: () => fail }),
-    identify: fail,
-    instanceKey: fail,
-    status: fail,
-    client: fail,
-    shutdown: fail,
-});
-var build_info_js_1 = require("./build-info.js");
-Object.defineProperty(exports, "SDK_VERSION", { enumerable: true, get: function () { return build_info_js_1.SDK_VERSION; } });
-Object.defineProperty(exports, "SDK_CHANNEL", { enumerable: true, get: function () { return build_info_js_1.SDK_CHANNEL; } });

package/dist/start/build-info.d.ts

@@ -1,2 +0,0 @@
-export declare const SDK_VERSION = "3.0.0";
-export declare const SDK_CHANNEL: 'staging' | 'production';

package/dist/start/build-info.js

@@ -1,9 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SDK_CHANNEL = exports.SDK_VERSION = void 0;
-// GENERATED by tools/release/version.sh apply server — do not edit by hand.
-// The start profile reads SDK_CHANNEL to choose its default fw-server host
-// (docs/adr/0012-start-profile.md). test/unit/start-build-info.test.ts pins
-// SDK_VERSION to package.json, so a release that forgets to stamp fails CI.
-exports.SDK_VERSION = '3.0.0';
-exports.SDK_CHANNEL = 'production';

package/dist/start/control-points.d.ts

@@ -1,20 +0,0 @@
-export interface ControlPointDefinition {
-    /** Value served in local mode. Ignored in remote mode. */
-    readonly local: boolean;
-    /** Optional note for humans and agents. Never sent anywhere. */
-    readonly description?: string;
-}
-export type ControlPointMap = Readonly<Record<string, ControlPointDefinition>>;
-/** Validate a control-points object and return a frozen copy. Throws Configuration on a bad entry. */
-export declare function normalizeControlPoints(controlPoints: unknown): ControlPointMap;
-/**
- * Declare the app's control points. Returns its argument unchanged, typed, and
- * checks it at import time so a typo fails where it was made.
- *
- *   export const controlPoints = defineControlPoints({
- *     'new-checkout': { local: true },
- *   });
- */
-export declare function defineControlPoints<const T extends Record<string, ControlPointDefinition>>(controlPoints: T): T;
-/** The core local adapter's seed map. */
-export declare function toLocalControlPoints(controlPoints: ControlPointMap): Record<string, boolean>;

package/dist/start/control-points.js

@@ -1,59 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizeControlPoints = normalizeControlPoints;
-exports.defineControlPoints = defineControlPoints;
-exports.toLocalControlPoints = toLocalControlPoints;
-/**
- * The control-points object: every control point the app reads, with the value
- * served in local mode. It lives in its own file
- * (src/fireweave/control-points.ts by default) and is passed as
- * start({ controlPoints }).
- *
- * It holds local values only. In remote mode fw-server and the rollout decide,
- * and call sites keep `false` as their default (RAMP-1), so this file can
- * never switch a feature on in production.
- */
-const index_js_1 = require("../index.js");
-const configError = (message) => new index_js_1.FireweaveError('Configuration', { message });
-/** Validate a control-points object and return a frozen copy. Throws Configuration on a bad entry. */
-function normalizeControlPoints(controlPoints) {
-    if (controlPoints === undefined || controlPoints === null)
-        return Object.freeze({});
-    if (typeof controlPoints !== 'object' || Array.isArray(controlPoints)) {
-        throw configError('[fireweave] start({ controlPoints }) must be an object of { key: { local: boolean } }.');
-    }
-    const out = {};
-    for (const [key, entry] of Object.entries(controlPoints)) {
-        const keyResult = (0, index_js_1.validateControlPointKey)(key);
-        if (!keyResult.ok)
-            throw configError(`[fireweave] controlPoints: '${key}' is not a valid control point key.`);
-        if (typeof entry !== 'object' || entry === null || typeof entry.local !== 'boolean') {
-            throw configError(`[fireweave] controlPoints['${key}'] must be { local: true } or { local: false }.`);
-        }
-        const { local, description } = entry;
-        if (description !== undefined && typeof description !== 'string') {
-            throw configError(`[fireweave] controlPoints['${key}'].description must be a string.`);
-        }
-        out[key] = Object.freeze(description === undefined ? { local } : { local, description });
-    }
-    return Object.freeze(out);
-}
-/**
- * Declare the app's control points. Returns its argument unchanged, typed, and
- * checks it at import time so a typo fails where it was made.
- *
- *   export const controlPoints = defineControlPoints({
- *     'new-checkout': { local: true },
- *   });
- */
-function defineControlPoints(controlPoints) {
-    normalizeControlPoints(controlPoints);
-    return controlPoints;
-}
-/** The core local adapter's seed map. */
-function toLocalControlPoints(controlPoints) {
-    const out = {};
-    for (const [key, entry] of Object.entries(controlPoints))
-        out[key] = entry.local;
-    return out;
-}

package/dist/start/env.d.ts

@@ -1,11 +0,0 @@
-/** Reads one variable. Returns undefined when unset, empty, or only whitespace. */
-export type EnvReader = (name: string) => string | undefined;
-/** Reader over an explicit bag (start({ env }) and tests). Only string values count. */
-export declare function envFromBag(bag: Readonly<Record<string, unknown>>): EnvReader;
-/** Reader over the running process: Deno.env first, then process.env. */
-export declare function processEnv(): EnvReader;
-/**
- * A reader that never throws, for values only needed to word a warning or an
- * error (for example the key a local start ignores).
- */
-export declare function quiet(read: EnvReader): EnvReader;

package/dist/start/env.js

@@ -1,64 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.envFromBag = envFromBag;
-exports.processEnv = processEnv;
-exports.quiet = quiet;
-/**
- * The ONLY place the SDK reads the process environment.
- *
- * The core SDK reads no environment variables (spec/modes.md). The start
- * profile is the documented exception (docs/adr/0012-start-profile.md), and
- * test/unit/runtime-portability.test.ts pins every env read to this file.
- *
- * Works on Node, Bun and Deno without importing a runtime module: Node and Bun
- * expose `process.env`; Deno exposes `Deno.env.get`, which throws when the
- * process lacks --allow-env. That refusal is reported, not swallowed, so a
- * Deno app never boots with a key it was not allowed to read.
- */
-const index_js_1 = require("../index.js");
-const clean = (value) => {
-    if (typeof value !== 'string')
-        return undefined;
-    const trimmed = value.trim();
-    return trimmed === '' ? undefined : trimmed;
-};
-/** Reader over an explicit bag (start({ env }) and tests). Only string values count. */
-function envFromBag(bag) {
-    return (name) => clean(bag[name]);
-}
-/** Reader over the running process: Deno.env first, then process.env. */
-function processEnv() {
-    const deno = globalThis.Deno;
-    if (deno?.env !== undefined) {
-        return (name) => {
-            try {
-                return clean(deno.env?.get(name));
-            }
-            catch (cause) {
-                throw new index_js_1.FireweaveError('Configuration', {
-                    message: `[fireweave] Deno refused to read ${name}. Run with --allow-env=${name}, or pass the value to start() explicitly.`,
-                    cause,
-                });
-            }
-        };
-    }
-    const proc = globalThis.process;
-    const env = proc?.env;
-    if (env === undefined)
-        return () => undefined;
-    return (name) => clean(env[name]);
-}
-/**
- * A reader that never throws, for values only needed to word a warning or an
- * error (for example the key a local start ignores).
- */
-function quiet(read) {
-    return (name) => {
-        try {
-            return read(name);
-        }
-        catch {
-            return undefined;
-        }
-    };
-}

package/dist/start/fw.d.ts

@@ -1,29 +0,0 @@
-/**
- * `fw`: the singleton accessor beside start(). Safe to import anywhere, in any
- * order. Every read awaits start and never throws: if start failed, reads
- * serve the caller's default (or an ERROR decision for the *Details forms).
- */
-import { type ControlPointsApi, type FireweaveClient, type JsonValue, type RegisterTargetResult, type TargetKind } from '../index.js';
-import { type FireweaveStatus } from './state.js';
-/** The same nine read methods as the core client's controlPoints. */
-export type ControlPoints = Pick<ControlPointsApi, 'evaluate' | 'getBooleanValue' | 'getStringValue' | 'getNumberValue' | 'getObjectValue' | 'getBooleanDetails' | 'getStringDetails' | 'getNumberDetails' | 'getObjectDetails'>;
-export interface IdentifyOptions {
-    /** Defaults to 'user'. */
-    readonly kind?: TargetKind;
-    readonly signal?: AbortSignal;
-}
-export interface FireweaveStart {
-    /** Read control points: `await fw.controlPoints.getBooleanValue('key', false, { targetingKey })`. */
-    readonly controlPoints: ControlPoints;
-    /** Register durable targeting facts at sign-in. Resolves { ok }, never throws. */
-    identify(targetingKey: string, properties?: Record<string, JsonValue>, options?: IdentifyOptions): Promise<RegisterTargetResult>;
-    /** Stable key for reads where the server is the subject (cron, boot). No disk writes. */
-    instanceKey(): string;
-    /** What start() decided: mode, channel, host, key source. Never includes the key. */
-    status(): FireweaveStatus;
-    /** The core client, for anything the facade does not cover. Rejects if start failed. */
-    client(): Promise<FireweaveClient>;
-    /** Flush and close. A later start() begins fresh. */
-    shutdown(): Promise<void>;
-}
-export declare const fw: FireweaveStart;

package/dist/start/fw.js

@@ -1,76 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fw = void 0;
-/**
- * `fw`: the singleton accessor beside start(). Safe to import anywhere, in any
- * order. Every read awaits start and never throws: if start failed, reads
- * serve the caller's default (or an ERROR decision for the *Details forms).
- */
-const index_js_1 = require("../index.js");
-const state_js_1 = require("./state.js");
-const startFailure = () => (0, state_js_1.slot)().error ?? new index_js_1.FireweaveError('Configuration', { message: '[fireweave] FireWeave was not started.' });
-const errorDecision = (controlPointKey, defaultValue) => {
-    const err = startFailure();
-    return {
-        controlPointKey,
-        value: defaultValue,
-        reason: 'ERROR',
-        errorKind: err.kind,
-        errorCode: err.openFeatureErrorCode,
-        errorMessage: err.message,
-        metadata: {},
-    };
-};
-/** Local mode: a key missing from the control-points object gets its default, with one warning. */
-function noteLocalKey(controlPointKey) {
-    const s = (0, state_js_1.slot)();
-    const r = s.resolved;
-    if (r?.mode !== 'local' || Object.prototype.hasOwnProperty.call(r.controlPoints, controlPointKey))
-        return;
-    (0, state_js_1.warnOnce)(s, `[fireweave:local] '${controlPointKey}' is not in your control points (src/fireweave/control-points.ts), so it gets its default. Add it there to try it locally.`);
-}
-async function read(controlPointKey, fallback, run) {
-    const client = await (0, state_js_1.ensureClient)();
-    if (client === undefined)
-        return fallback();
-    noteLocalKey(controlPointKey);
-    return run(client);
-}
-const controlPoints = {
-    evaluate: (controlPointKey, expectedType, defaultValue, context, options) => read(controlPointKey, () => errorDecision(controlPointKey, defaultValue), (c) => c.controlPoints.evaluate(controlPointKey, expectedType, defaultValue, context, options)),
-    getBooleanValue: (controlPointKey, defaultValue, context) => read(controlPointKey, () => defaultValue, (c) => c.controlPoints.getBooleanValue(controlPointKey, defaultValue, context)),
-    getStringValue: (controlPointKey, defaultValue, context) => read(controlPointKey, () => defaultValue, (c) => c.controlPoints.getStringValue(controlPointKey, defaultValue, context)),
-    getNumberValue: (controlPointKey, defaultValue, context) => read(controlPointKey, () => defaultValue, (c) => c.controlPoints.getNumberValue(controlPointKey, defaultValue, context)),
-    getObjectValue: (controlPointKey, defaultValue, context) => read(controlPointKey, () => defaultValue, (c) => c.controlPoints.getObjectValue(controlPointKey, defaultValue, context)),
-    getBooleanDetails: (controlPointKey, defaultValue, context) => read(controlPointKey, () => errorDecision(controlPointKey, defaultValue), (c) => c.controlPoints.getBooleanDetails(controlPointKey, defaultValue, context)),
-    getStringDetails: (controlPointKey, defaultValue, context) => read(controlPointKey, () => errorDecision(controlPointKey, defaultValue), (c) => c.controlPoints.getStringDetails(controlPointKey, defaultValue, context)),
-    getNumberDetails: (controlPointKey, defaultValue, context) => read(controlPointKey, () => errorDecision(controlPointKey, defaultValue), (c) => c.controlPoints.getNumberDetails(controlPointKey, defaultValue, context)),
-    getObjectDetails: (controlPointKey, defaultValue, context) => read(controlPointKey, () => errorDecision(controlPointKey, defaultValue), (c) => c.controlPoints.getObjectDetails(controlPointKey, defaultValue, context)),
-};
-exports.fw = Object.freeze({
-    controlPoints: Object.freeze(controlPoints),
-    async identify(targetingKey, properties, options = {}) {
-        const client = await (0, state_js_1.ensureClient)();
-        if (client === undefined)
-            return { ok: false };
-        try {
-            return await client.registerTarget(targetingKey, {
-                kind: options.kind ?? 'user',
-                ...(properties !== undefined ? { properties } : {}),
-                ...(options.signal !== undefined ? { signal: options.signal } : {}),
-            });
-        }
-        catch {
-            return { ok: false };
-        }
-    },
-    instanceKey: () => (0, state_js_1.instanceKeyFor)(),
-    status: () => (0, state_js_1.currentStatus)(),
-    async client() {
-        const client = await (0, state_js_1.ensureClient)();
-        if (client === undefined)
-            throw startFailure();
-        return client;
-    },
-    shutdown: () => (0, state_js_1.shutdownSlot)(),
-});

package/dist/start/index.d.ts

@@ -1,23 +0,0 @@
-/**
- * @fireweaveai/server-sdk/start: FireWeave in one import (docs/adr/0012-start-profile.md).
- *
- *   // src/fireweave/start.ts  (imported first by your entrypoint)
- *   import { start } from '@fireweaveai/server-sdk/start';
- *   import { controlPoints } from './control-points';
- *   start({ controlPoints });
- *
- *   // anywhere
- *   import { fw } from '@fireweaveai/server-sdk/start';
- *   if (await fw.controlPoints.getBooleanValue('new-checkout', false, { targetingKey: user.id })) { … }
- *
- * This layer is built only on the package's public exports; the core
- * (initFireweave and everything in '.') is unchanged and still reads no env.
- */
-export { start, resetForTests } from './state.js';
-export type { StartOptions, StartState, FireweaveStatus } from './state.js';
-export { fw } from './fw.js';
-export type { FireweaveStart, ControlPoints, IdentifyOptions } from './fw.js';
-export { defineControlPoints } from './control-points.js';
-export type { ControlPointDefinition, ControlPointMap } from './control-points.js';
-export type { StartMode, SdkChannel } from './resolve.js';
-export { SDK_VERSION, SDK_CHANNEL } from './build-info.js';

package/dist/start/index.js

@@ -1,28 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SDK_CHANNEL = exports.SDK_VERSION = exports.defineControlPoints = exports.fw = exports.resetForTests = exports.start = void 0;
-/**
- * @fireweaveai/server-sdk/start: FireWeave in one import (docs/adr/0012-start-profile.md).
- *
- *   // src/fireweave/start.ts  (imported first by your entrypoint)
- *   import { start } from '@fireweaveai/server-sdk/start';
- *   import { controlPoints } from './control-points';
- *   start({ controlPoints });
- *
- *   // anywhere
- *   import { fw } from '@fireweaveai/server-sdk/start';
- *   if (await fw.controlPoints.getBooleanValue('new-checkout', false, { targetingKey: user.id })) { … }
- *
- * This layer is built only on the package's public exports; the core
- * (initFireweave and everything in '.') is unchanged and still reads no env.
- */
-var state_js_1 = require("./state.js");
-Object.defineProperty(exports, "start", { enumerable: true, get: function () { return state_js_1.start; } });
-Object.defineProperty(exports, "resetForTests", { enumerable: true, get: function () { return state_js_1.resetForTests; } });
-var fw_js_1 = require("./fw.js");
-Object.defineProperty(exports, "fw", { enumerable: true, get: function () { return fw_js_1.fw; } });
-var control_points_js_1 = require("./control-points.js");
-Object.defineProperty(exports, "defineControlPoints", { enumerable: true, get: function () { return control_points_js_1.defineControlPoints; } });
-var build_info_js_1 = require("./build-info.js");
-Object.defineProperty(exports, "SDK_VERSION", { enumerable: true, get: function () { return build_info_js_1.SDK_VERSION; } });
-Object.defineProperty(exports, "SDK_CHANNEL", { enumerable: true, get: function () { return build_info_js_1.SDK_CHANNEL; } });

package/dist/start/instance.d.ts

@@ -1,17 +0,0 @@
-/**
- * fw.instanceKey(): a stable targeting key for reads where the server itself is
- * the subject (cron, migrations, boot-time decisions). Request reads still pass
- * the user's id.
- *
- * Sources, in order: start({ instanceId }), FIREWEAVE_INSTANCE_ID, then a hash
- * of the host name, then a random id for the life of the process. Nothing is
- * written to disk: in a container the file would not outlive the process anyway.
- */
-import type { EnvReader } from './env.js';
-export interface InstanceKey {
-    readonly value: string;
-    readonly source: 'option' | 'FIREWEAVE_INSTANCE_ID' | 'host' | 'random';
-}
-/** FNV-1a 64-bit, hex. Stable across runtimes; not a security hash. */
-export declare function fnv1a64(text: string): string;
-export declare function deriveInstanceKey(option: string | undefined, read: EnvReader): InstanceKey;

package/dist/start/instance.js

@@ -1,56 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fnv1a64 = fnv1a64;
-exports.deriveInstanceKey = deriveInstanceKey;
-const env_js_1 = require("./env.js");
-const names_js_1 = require("./names.js");
-/** FNV-1a 64-bit, hex. Stable across runtimes; not a security hash. */
-function fnv1a64(text) {
-    let hash = 0xcbf29ce484222325n;
-    const prime = 0x100000001b3n;
-    for (const byte of new TextEncoder().encode(text)) {
-        hash ^= BigInt(byte);
-        hash = (hash * prime) & 0xffffffffffffffffn;
-    }
-    return hash.toString(16).padStart(16, '0');
-}
-/** Host name without importing a runtime module; undefined when the runtime will not say. */
-function hostName(read) {
-    const fromEnv = (0, env_js_1.quiet)(read)('HOSTNAME');
-    if (fromEnv !== undefined)
-        return fromEnv;
-    try {
-        const deno = globalThis.Deno;
-        if (typeof deno?.hostname === 'function')
-            return deno.hostname();
-    }
-    catch {
-        // Deno without --allow-sys=hostname: fall through.
-    }
-    try {
-        const proc = globalThis.process;
-        const os = proc?.getBuiltinModule?.('node:os');
-        const name = os?.hostname?.();
-        if (typeof name === 'string' && name !== '')
-            return name;
-    }
-    catch {
-        // Runtime without getBuiltinModule: fall through.
-    }
-    return undefined;
-}
-const randomId = () => {
-    const c = globalThis.crypto;
-    return c?.randomUUID?.() ?? `${Date.now().toString(36)}${Math.random().toString(36).slice(2)}`;
-};
-function deriveInstanceKey(option, read) {
-    if (option !== undefined)
-        return { value: option, source: 'option' };
-    const fromEnv = (0, env_js_1.quiet)(read)(names_js_1.ENV.instanceId);
-    if (fromEnv !== undefined)
-        return { value: fromEnv, source: 'FIREWEAVE_INSTANCE_ID' };
-    const host = hostName(read);
-    if (host !== undefined)
-        return { value: `inst_${fnv1a64(host)}`, source: 'host' };
-    return { value: `inst_${randomId()}`, source: 'random' };
-}

package/dist/start/names.d.ts

@@ -1,22 +0,0 @@
-/**
- * Every name the start profile reads, in one place, so the README, the
- * initialise skill and the error messages cannot drift apart.
- */
-/** Env vars the start profile reads. Explicit start() options always win. */
-export declare const ENV: Readonly<{
-    key: "FIREWEAVE_KEY";
-    url: "FIREWEAVE_URL";
-    environment: "FIREWEAVE_ENV";
-    instanceId: "FIREWEAVE_INSTANCE_ID";
-}>;
-/** Fallback env-name sources for mode inference, after the environment option and FIREWEAVE_ENV. */
-export declare const ENVIRONMENT_FALLBACKS: readonly ["APP_ENV", "NODE_ENV"];
-/** Environment names that mean "local development" when no key is set. Case-insensitive. */
-export declare const DEV_ENVIRONMENTS: ReadonlySet<string>;
-/** fw-server host for each release channel of this package. */
-export declare const CHANNEL_URLS: Readonly<{
-    production: "https://app-server.fireweave.ai";
-    staging: "https://staging-app-server.fireweave.ai";
-}>;
-/** Hosts always allowed beside a custom endpoint, so local stacks keep working. */
-export declare const LOOPBACK_HOSTS: readonly string[];

package/dist/start/names.js

@@ -1,25 +0,0 @@
-"use strict";
-/**
- * Every name the start profile reads, in one place, so the README, the
- * initialise skill and the error messages cannot drift apart.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LOOPBACK_HOSTS = exports.CHANNEL_URLS = exports.DEV_ENVIRONMENTS = exports.ENVIRONMENT_FALLBACKS = exports.ENV = void 0;
-/** Env vars the start profile reads. Explicit start() options always win. */
-exports.ENV = Object.freeze({
-    key: 'FIREWEAVE_KEY',
-    url: 'FIREWEAVE_URL',
-    environment: 'FIREWEAVE_ENV',
-    instanceId: 'FIREWEAVE_INSTANCE_ID',
-});
-/** Fallback env-name sources for mode inference, after the environment option and FIREWEAVE_ENV. */
-exports.ENVIRONMENT_FALLBACKS = Object.freeze(['APP_ENV', 'NODE_ENV']);
-/** Environment names that mean "local development" when no key is set. Case-insensitive. */
-exports.DEV_ENVIRONMENTS = new Set(['development', 'dev', 'local', 'test']);
-/** fw-server host for each release channel of this package. */
-exports.CHANNEL_URLS = Object.freeze({
-    production: 'https://app-server.fireweave.ai',
-    staging: 'https://staging-app-server.fireweave.ai',
-});
-/** Hosts always allowed beside a custom endpoint, so local stacks keep working. */
-exports.LOOPBACK_HOSTS = Object.freeze(['localhost', '127.0.0.1', '::1']);

package/dist/start/resolve.d.ts

@@ -1,40 +0,0 @@
-import type { EnvReader } from './env.js';
-import { type ControlPointMap } from './control-points.js';
-export type StartMode = 'remote' | 'local';
-export type SdkChannel = 'staging' | 'production';
-export interface ResolveInput {
-    readonly mode?: unknown;
-    readonly environment?: unknown;
-    readonly url?: unknown;
-    readonly key?: unknown;
-    readonly controlPoints?: unknown;
-}
-export interface BuildInfo {
-    readonly version: string;
-    readonly channel: SdkChannel;
-}
-export interface ResolvedStart {
-    readonly mode: StartMode;
-    /** Why this mode: the mode option, a present key, or the environment name. */
-    readonly modeSource: 'option' | 'key' | 'environment';
-    /** Remote only. */
-    readonly url?: string;
-    readonly urlSource?: string;
-    readonly allowedHosts?: readonly string[];
-    /** Remote only. Never logged or printed. */
-    readonly key?: string;
-    readonly keySource: string;
-    /** Set when the environment name was consulted (no key, no mode option). */
-    readonly environment?: string;
-    readonly environmentSource?: string;
-    readonly controlPoints: ControlPointMap;
-    readonly channel: SdkChannel;
-    readonly sdkVersion: string;
-    /** Lines to log once each: ignored keys. */
-    readonly warnings: readonly string[];
-}
-/**
- * Resolve start() options against the environment.
- * Throws FireweaveError('Configuration') naming the variable at fault.
- */
-export declare function resolveStart(input: ResolveInput, read: EnvReader, build: BuildInfo): ResolvedStart;