@fireweaveai/web-sdk-cjs 0.0.0-reserve.0 → 0.0.0-stage

package/README.md

@@ -1,52 +1,3 @@
-> **This is the CommonJS build of [`@fireweaveai/web-sdk`](https://www.npmjs.com/package/@fireweaveai/web-sdk).**
-> Use it only when your project cannot load ES modules (see
-> [Module formats](https://github.com/FireWeave-HQ/fireweave-sdk/blob/main/docs/module-formats.md)).
-> Same code, same version, same import paths. ES modules are the long-term format;
-> this package will be retired in a future major release.
+# Temporary Holding Version
 
-<a href="https://app.fireweave.ai">
-  <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/FireWeave-HQ/fireweave-sdk/main/.github/assets/banner-dark.png">
-    <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/FireWeave-HQ/fireweave-sdk/main/.github/assets/banner-light.png">
-    <img alt="Fireweave — agents write the code. We watch every rollout, under control." src="https://raw.githubusercontent.com/FireWeave-HQ/fireweave-sdk/main/.github/assets/banner-light.png" width="100%">
-  </picture>
-</a>
-
-<p align="center">
-  <a href="https://www.npmjs.com/package/@fireweaveai/web-sdk"><img alt="web" src="https://img.shields.io/npm/v/@fireweaveai/web-sdk?label=web&logo=javascript&style=flat&labelColor=0E0E10&color=ED5502&logoColor=white"></a>
-</p>
-
-**Fireweave is the AI release engineer for teams shipping with coding agents.** Every change rolls out behind a control point, one step at a time, with guardrails watching real users — and if something breaks, Fireweave pauses or rolls it back before most users ever see it. It's the only way to ship as fast as your agents write code, without the fear of breaking production.
-
-## Quick start · Web (browser)
-
-```bash
-npm install @fireweaveai/web-sdk
-```
-
-```ts
-import { initFireweave } from '@fireweaveai/web-sdk';
-
-const fireweave = await initFireweave({
-  mode: 'remote',
-  apiUrl: 'https://app-server.fireweave.ai',
-  apiKey: 'YOUR_PROJECT_API_KEY',
-});
-
-// Register the user, then fetch their decisions.
-await fireweave.identify('user_42', { kind: 'user', properties: { plan: 'pro' } });
-
-// Reads are synchronous: safe inside a render path.
-const enabled = fireweave.controlPoints.getBooleanValue('new-checkout', false);
-console.log('new-checkout:', enabled);
-
-await fireweave.shutdown();
-```
-
-## Learn more
-
-[Concepts](https://github.com/FireWeave-HQ/fireweave-sdk/blob/main/docs/concepts.md) · [Identity](https://github.com/FireWeave-HQ/fireweave-sdk/blob/main/docs/identity.md) · [Testing](https://github.com/FireWeave-HQ/fireweave-sdk/blob/main/docs/testing.md) · [Troubleshooting](https://github.com/FireWeave-HQ/fireweave-sdk/blob/main/docs/troubleshooting.md) · [Module formats (CommonJS)](https://github.com/FireWeave-HQ/fireweave-sdk/blob/main/docs/module-formats.md) · [All SDKs](https://github.com/FireWeave-HQ/fireweave-sdk#quick-start)
-
-## License
-
-[MIT](https://github.com/FireWeave-HQ/fireweave-sdk/blob/main/LICENSE)
+This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.

package/package.json

@@ -1,68 +1,6 @@
 {
   "name": "@fireweaveai/web-sdk-cjs",
-  "version": "0.0.0-reserve.0",
-  "description": "CommonJS build of @fireweaveai/web-sdk, for require() and toolchains without ESM support. Fireweave SDK for browsers: control points and target registration, in remote (fw-server) or local (in-process, no network) mode. Holds no secrets.",
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/FireWeave-HQ/fireweave-sdk.git",
-    "directory": "sdks/web"
-  },
-  "homepage": "https://github.com/FireWeave-HQ/fireweave-sdk/tree/master/sdks/web#readme",
-  "bugs": "https://github.com/FireWeave-HQ/fireweave-sdk/issues",
-  "sideEffects": false,
-  "type": "commonjs",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "typesVersions": {
-    "*": {
-      "start": [
-        "./dist/start/index.d.ts"
-      ],
-      "vite": [
-        "./dist/build/node/vite.d.ts"
-      ],
-      "define": [
-        "./dist/build/node/define.d.ts"
-      ]
-    }
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "default": "./dist/index.js"
-    },
-    "./start": {
-      "types": "./dist/start/index.d.ts",
-      "default": "./dist/start/index.js"
-    },
-    "./vite": {
-      "types": "./dist/build/node/vite.d.ts",
-      "default": "./dist/build/node/vite.js"
-    },
-    "./define": {
-      "types": "./dist/build/node/define.d.ts",
-      "default": "./dist/build/node/define.js"
-    }
-  },
-  "files": [
-    "dist"
-  ],
-  "peerDependencies": {
-    "vite": ">=5.0.0"
-  },
-  "peerDependenciesMeta": {
-    "vite": {
-      "optional": true
-    }
-  },
-  "keywords": [
-    "fireweave",
-    "release-engineering",
-    "progressive-delivery",
-    "control-points",
-    "feature-flags",
-    "browser",
-    "web"
-  ]
-}
+  "version": "0.0.0-stage",
+  "stub": true,
+  "description": "Temporary package placeholder for staged publishing"
+}

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 Fireweave AI, Inc.
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/dist/application/client.d.ts

@@ -1,104 +0,0 @@
-/**
- * FireweaveWebClient — the Fireweave-native surface, mirroring the server
- * SDK's `FireweaveClient` namespace for namespace (ADR-0003: extensions live
- * beside the OpenFeature client, never inside it).
- *
- * Scope of v1 (spec/control-points.md "Scope of v1"): exactly two
- * capabilities — control points and target registration. Releases,
- * exposures, signals, capabilities discovery and guardrails are out of v1;
- * this client MUST NOT expose them (conformance/surface/control-points.surface.json
- * "mustNotExpose"). The dynamic `invokeCapability` dispatcher survives
- * unchanged.
- *
- * One divergence from the server SDK, and it is intentional: `controlPoints.*`
- * is SYNCHRONOUS here and promise-returning on the server. That follows from
- * the OpenFeature web contract — browser reads happen in render paths.
- */
-import { FireweaveError } from '../domain/errors.js';
-import type { ContextInput } from '../domain/context.js';
-import type { FireweaveWebRuntime, ExpectedFlagType } from './runtime.js';
-import type { Decision, JsonValue } from '../domain/types.js';
-import type { RegisterTargetOptions, RegisterTargetResult } from './ports.js';
-export interface ExtensionResult {
-    readonly ok: boolean;
-    readonly error?: FireweaveError;
-    readonly degraded?: boolean;
-}
-/**
- * Reserved for cross-language surface parity
- * (conformance/surface/control-points.surface.json pins `evaluate(key, type,
- * default, context?, options?)` across every language). Currently INERT on
- * web — accepted and typed, nothing reads it.
- *
- * Node's `EvaluateOptions` carries `signal` (abort an in-flight network
- * call), `includePayload` (attach raw flag payload metadata), and
- * `sendExposure` (opt into exposure emission for this one call). None of
- * those map cleanly onto web's contract: `evaluate` here is a SYNCHRONOUS
- * read of an already-prefetched cache (ADR-0009), so there is no in-flight
- * I/O to abort at read time, and exposure emission is a constructor-level
- * opt-in (`FireweaveWebRuntimeConfig.sendExposure`) rather than a per-call
- * one. The parameter exists so this method's ARITY matches the descriptor
- * every language is pinned to, not because it does anything yet.
- */
-export interface EvaluateOptions {
-}
-/**
- * Control-point evaluation on the public client surface — decision-returning,
- * without reaching into the runtime. Never throws; errors surface as ERROR
- * decisions, exactly like the OpenFeature path.
- */
-export declare class WebControlPointsApi {
-    private readonly runtime;
-    constructor(runtime: FireweaveWebRuntime);
-    evaluate(controlPointKey: string, expectedType: ExpectedFlagType, defaultValue: JsonValue, context?: ContextInput, _options?: EvaluateOptions): Decision;
-    getBooleanValue(controlPointKey: string, defaultValue: boolean, context?: ContextInput): boolean;
-    getStringValue(controlPointKey: string, defaultValue: string, context?: ContextInput): string;
-    getNumberValue(controlPointKey: string, defaultValue: number, context?: ContextInput): number;
-    getObjectValue(controlPointKey: string, defaultValue: JsonValue, context?: ContextInput): JsonValue;
-    /**
-     * Detailed reads — the whole {@link Decision} rather than just its value.
-     *
-     * Same arguments as the `*Value` pair above, so a caller upgrades from one
-     * to the other without restructuring the call (spec/control-points.md "The
-     * nine methods"). SYNCHRONOUS like every other read here (ADR-0009).
-     */
-    getBooleanDetails(controlPointKey: string, defaultValue: boolean, context?: ContextInput): Decision;
-    getStringDetails(controlPointKey: string, defaultValue: string, context?: ContextInput): Decision;
-    getNumberDetails(controlPointKey: string, defaultValue: number, context?: ContextInput): Decision;
-    getObjectDetails(controlPointKey: string, defaultValue: JsonValue, context?: ContextInput): Decision;
-}
-export interface FireweaveWebClientOptions {
-}
-export declare class FireweaveWebClient {
-    readonly runtime: FireweaveWebRuntime;
-    readonly controlPoints: WebControlPointsApi;
-    constructor(runtime: FireweaveWebRuntime, _options?: FireweaveWebClientOptions);
-    /**
-     * Dynamic capability dispatch. Unknown capabilities — currently all of
-     * them, v1's SUPPORTED_CAPABILITIES is empty — degrade with
-     * UnsupportedCapability, never throw. Any future capability listed in
-     * SUPPORTED_CAPABILITIES is lifecycle-gated the same way (ruling 17).
-     */
-    invokeCapability(capability: string, _args?: Record<string, JsonValue>): ExtensionResult;
-    initialize(context?: ContextInput): Promise<void>;
-    /**
-     * Register durable targeting facts for a target (spec/modes.md).
-     *
-     * Resolves rather than throwing: this runs in sign-in paths, where a
-     * targeting concern must not break authentication. In local mode this
-     * records in-process and traces the call; nothing reaches fw-server (see
-     * `FireweaveLocalWebAdapter.registerTarget`).
-     */
-    registerTarget(targetingKey: string, options?: RegisterTargetOptions): Promise<RegisterTargetResult>;
-    /**
-     * Sign-in hook: register the user's durable targeting properties, then
-     * re-prefetch under that id so percentage ramps bucket on a stable key.
-     *
-     * Two kinds of property feed a rule and both are needed — DURABLE ones
-     * registered here, and PER-REQUEST ones carried in the evaluation context. A
-     * rule targeting a property that is never registered AND never sent matches
-     * nobody, silently.
-     */
-    identify(targetingKey: string, options?: RegisterTargetOptions): Promise<RegisterTargetResult>;
-    shutdown(): Promise<void>;
-}

package/dist/application/client.js

@@ -1,147 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FireweaveWebClient = exports.WebControlPointsApi = void 0;
-/**
- * FireweaveWebClient — the Fireweave-native surface, mirroring the server
- * SDK's `FireweaveClient` namespace for namespace (ADR-0003: extensions live
- * beside the OpenFeature client, never inside it).
- *
- * Scope of v1 (spec/control-points.md "Scope of v1"): exactly two
- * capabilities — control points and target registration. Releases,
- * exposures, signals, capabilities discovery and guardrails are out of v1;
- * this client MUST NOT expose them (conformance/surface/control-points.surface.json
- * "mustNotExpose"). The dynamic `invokeCapability` dispatcher survives
- * unchanged.
- *
- * One divergence from the server SDK, and it is intentional: `controlPoints.*`
- * is SYNCHRONOUS here and promise-returning on the server. That follows from
- * the OpenFeature web contract — browser reads happen in render paths.
- */
-const errors_js_1 = require("../domain/errors.js");
-function failure(error, degraded = false) {
-    return degraded ? { ok: false, error, degraded: true } : { ok: false, error };
-}
-/**
- * Lifecycle gate for extension calls. Kept for forward compatibility with
- * `invokeCapability` (ruling 17, Go/Java model) even though v1's
- * SUPPORTED_CAPABILITIES is empty and therefore never reaches it today — a
- * future capability re-added to the allowlist is gated the same way without
- * this function needing to be reinvented.
- */
-function lifecycleGate(runtime) {
-    const state = runtime.getState();
-    if (state === 'SHUTDOWN')
-        return new errors_js_1.FireweaveError('AlreadyClosed');
-    if (state === 'UNINITIALIZED' || state === 'INITIALIZING')
-        return new errors_js_1.FireweaveError('NotReady');
-    return undefined;
-}
-/**
- * Control-point evaluation on the public client surface — decision-returning,
- * without reaching into the runtime. Never throws; errors surface as ERROR
- * decisions, exactly like the OpenFeature path.
- */
-class WebControlPointsApi {
-    runtime;
-    constructor(runtime) {
-        this.runtime = runtime;
-    }
-    evaluate(controlPointKey, expectedType, defaultValue, context, _options) {
-        return this.runtime.evaluateSync(controlPointKey, expectedType, defaultValue, context);
-    }
-    getBooleanValue(controlPointKey, defaultValue, context) {
-        return this.evaluate(controlPointKey, 'boolean', defaultValue, context).value;
-    }
-    getStringValue(controlPointKey, defaultValue, context) {
-        return this.evaluate(controlPointKey, 'string', defaultValue, context).value;
-    }
-    getNumberValue(controlPointKey, defaultValue, context) {
-        return this.evaluate(controlPointKey, 'number', defaultValue, context).value;
-    }
-    getObjectValue(controlPointKey, defaultValue, context) {
-        return this.evaluate(controlPointKey, 'object', defaultValue, context).value;
-    }
-    /**
-     * Detailed reads — the whole {@link Decision} rather than just its value.
-     *
-     * Same arguments as the `*Value` pair above, so a caller upgrades from one
-     * to the other without restructuring the call (spec/control-points.md "The
-     * nine methods"). SYNCHRONOUS like every other read here (ADR-0009).
-     */
-    getBooleanDetails(controlPointKey, defaultValue, context) {
-        return this.evaluate(controlPointKey, 'boolean', defaultValue, context);
-    }
-    getStringDetails(controlPointKey, defaultValue, context) {
-        return this.evaluate(controlPointKey, 'string', defaultValue, context);
-    }
-    getNumberDetails(controlPointKey, defaultValue, context) {
-        return this.evaluate(controlPointKey, 'number', defaultValue, context);
-    }
-    getObjectDetails(controlPointKey, defaultValue, context) {
-        return this.evaluate(controlPointKey, 'object', defaultValue, context);
-    }
-}
-exports.WebControlPointsApi = WebControlPointsApi;
-/**
- * Names invokeCapability will dispatch instead of degrading with
- * UnsupportedCapability. Empty in v1: releases, exposures, signals,
- * capabilities discovery, and guardrails are all out of scope
- * (spec/control-points.md) and MUST NOT be exposed, so a cut namespace's
- * capability string resolves exactly like any other unknown string.
- */
-const SUPPORTED_CAPABILITIES = Object.freeze([]);
-class FireweaveWebClient {
-    runtime;
-    controlPoints;
-    constructor(runtime, _options = {}) {
-        this.runtime = runtime;
-        this.controlPoints = new WebControlPointsApi(runtime);
-    }
-    /**
-     * Dynamic capability dispatch. Unknown capabilities — currently all of
-     * them, v1's SUPPORTED_CAPABILITIES is empty — degrade with
-     * UnsupportedCapability, never throw. Any future capability listed in
-     * SUPPORTED_CAPABILITIES is lifecycle-gated the same way (ruling 17).
-     */
-    invokeCapability(capability, _args) {
-        if (!SUPPORTED_CAPABILITIES.includes(capability)) {
-            return failure(new errors_js_1.FireweaveError('UnsupportedCapability'), true);
-        }
-        const gate = lifecycleGate(this.runtime);
-        if (gate !== undefined)
-            return failure(gate, true);
-        return { ok: true };
-    }
-    initialize(context) {
-        return this.runtime.initialize(context);
-    }
-    /**
-     * Register durable targeting facts for a target (spec/modes.md).
-     *
-     * Resolves rather than throwing: this runs in sign-in paths, where a
-     * targeting concern must not break authentication. In local mode this
-     * records in-process and traces the call; nothing reaches fw-server (see
-     * `FireweaveLocalWebAdapter.registerTarget`).
-     */
-    registerTarget(targetingKey, options = {}) {
-        return this.runtime.registerTarget(targetingKey, options);
-    }
-    /**
-     * Sign-in hook: register the user's durable targeting properties, then
-     * re-prefetch under that id so percentage ramps bucket on a stable key.
-     *
-     * Two kinds of property feed a rule and both are needed — DURABLE ones
-     * registered here, and PER-REQUEST ones carried in the evaluation context. A
-     * rule targeting a property that is never registered AND never sent matches
-     * nobody, silently.
-     */
-    async identify(targetingKey, options = {}) {
-        const result = await this.runtime.registerTarget(targetingKey, options);
-        await this.runtime.setContext({ targetingKey });
-        return result;
-    }
-    async shutdown() {
-        await this.runtime.shutdown();
-    }
-}
-exports.FireweaveWebClient = FireweaveWebClient;

package/dist/application/mode.d.ts

@@ -1,99 +0,0 @@
-/**
- * initFireweave — the single SDK entry point (spec/modes.md).
- *
- * `mode` is required and never inferred: a missing or mistyped credential
- * must fail loudly at boot, not silently fall back to local evaluation —
- * that failure mode looks like a green boot and a feature that never ramps.
- * This function's only job is to validate the initialisation-time contract
- * and select the matching adapter; nothing downstream branches on mode again
- * (spec/modes.md "Behaviour per mode" — both adapters implement the same
- * WebBackendAdapter port, so FireweaveWebClient / FireweaveWebRuntime stay
- * mode-blind).
- *
- * Initialisation fails loudly (throws); reads on the returned client never do
- * (spec/control-points.md "initialise is the exception").
- *
- * ## A web-specific wrinkle: `FireweaveWebRuntime.initialize()` never throws
- *
- * Node's `FireweaveRuntime.initialize()` rejects on adapter failure, so
- * node's initFireweave can just `await runtime.initialize()` and let a bad
- * host/credential propagate. Web's runtime is deliberately fail-OPEN at
- * `initialize()` — a hung or failing prefetch must not block app boot
- * (ADR-0009 "Fail-open, not fail-silent"), so it swallows adapter failures
- * into ERROR/STALE state instead of rejecting.
- *
- * That non-throwing contract is correct for TRANSIENT failures (the network
- * happened to be down) but wrong for the four Configuration rows below,
- * which spec/modes.md requires to fail loudly at boot. This module closes
- * that gap itself in two parts: `validateInitOptions` (domain/validation.ts)
- * covers rows 1/2/4 (mode absent/unrecognised, remote apiKey/apiUrl blank,
- * local combined with credentials) exactly like node's `initFireweave` does;
- * `initRemote` covers row 3 (the host allowlist) with a direct, SYNCHRONOUS
- * `assertHostAllowed` call, before ever calling into the runtime — that call
- * is what makes a bad host fail LOUDLY here, because the runtime itself
- * deliberately never throws. A genuinely transient prefetch failure (host is
- * fine, network hiccups) still resolves into ERROR/STALE rather than
- * throwing — that fail-open behaviour is unchanged and is not one of the
- * four rows.
- */
-import { FireweaveWebClient } from './client.js';
-import type { FireweaveFetchLike } from '../infrastructure/adapters/remote.js';
-import type { ContextInput } from '../domain/context.js';
-export interface InitFireweaveRemoteOptions {
-    /** Evaluate against fw-server over the network (spec/remote-protocol.md). */
-    readonly mode: 'remote';
-    /** Fireweave project key. Public by construction (ADR-0009) — required, never read from the environment. */
-    readonly apiKey: string;
-    /** fw-server base URL. Required — never read from the environment. */
-    readonly apiUrl: string;
-    /**
-     * SSRF/misconfiguration allowlist override (spec/modes.md "apiUrl fails
-     * the host allowlist"). Default: the canonical Fireweave hosts + loopback
-     * (`DEFAULT_ALLOWED_HOSTS`). A self-hosted fw-server must list its own
-     * host explicitly; `['*']` opts out.
-     */
-    readonly allowedHosts?: readonly string[];
-    /** Injected fetch (tests). Production uses the runtime's global `fetch`. */
-    readonly fetch?: FireweaveFetchLike;
-    /** Initial evaluation context (e.g. an anonymous targetingKey) to prefetch under. */
-    readonly context?: ContextInput;
-}
-export interface InitFireweaveLocalOptions {
-    /** Evaluate against an in-process seeded map; no network (spec/modes.md). */
-    readonly mode: 'local';
-    readonly local?: {
-        /**
-         * Per-key boolean overrides — the seeded local map. A present key
-         * resolves with reason `STATIC`; an absent key misses so the caller's
-         * own default is used. May be empty or omitted entirely.
-         */
-        readonly controlPoints?: Record<string, boolean>;
-        /**
-         * Sink for the `[fireweave:local]` registerTarget trace line
-         * (spec/modes.md "registerTarget in local mode"). Defaults to
-         * `console.info`.
-         */
-        readonly log?: (message: string) => void;
-    };
-    /** Initial evaluation context (e.g. an anonymous targetingKey) to prefetch under. */
-    readonly context?: ContextInput;
-}
-export type InitFireweaveOptions = InitFireweaveRemoteOptions | InitFireweaveLocalOptions;
-/**
- * Build the adapter matching `options.mode` and bring a
- * {@link FireweaveWebClient} up.
- *
- * Throws {@link FireweaveError} (kind `Configuration`) for every row of the
- * initialisation-validation table (spec/modes.md):
- *  - `mode` absent or unrecognised
- *  - `mode: 'remote'` with `apiKey` or `apiUrl` missing/blank
- *  - `apiUrl` fails the host allowlist
- *  - `mode: 'local'` with credentials supplied
- *
- * The first, second and fourth rows are `validateInitOptions`'s job
- * (domain/validation.ts, shared discipline with node's `initFireweave`); the
- * third is validated downstream, inside `initRemote`, for the reason the
- * module doc comment explains — `FireweaveWebRuntime.initialize()` itself
- * never throws.
- */
-export declare function initFireweave(options: InitFireweaveOptions): Promise<FireweaveWebClient>;

package/dist/application/mode.js

@@ -1,101 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.initFireweave = initFireweave;
-/**
- * initFireweave — the single SDK entry point (spec/modes.md).
- *
- * `mode` is required and never inferred: a missing or mistyped credential
- * must fail loudly at boot, not silently fall back to local evaluation —
- * that failure mode looks like a green boot and a feature that never ramps.
- * This function's only job is to validate the initialisation-time contract
- * and select the matching adapter; nothing downstream branches on mode again
- * (spec/modes.md "Behaviour per mode" — both adapters implement the same
- * WebBackendAdapter port, so FireweaveWebClient / FireweaveWebRuntime stay
- * mode-blind).
- *
- * Initialisation fails loudly (throws); reads on the returned client never do
- * (spec/control-points.md "initialise is the exception").
- *
- * ## A web-specific wrinkle: `FireweaveWebRuntime.initialize()` never throws
- *
- * Node's `FireweaveRuntime.initialize()` rejects on adapter failure, so
- * node's initFireweave can just `await runtime.initialize()` and let a bad
- * host/credential propagate. Web's runtime is deliberately fail-OPEN at
- * `initialize()` — a hung or failing prefetch must not block app boot
- * (ADR-0009 "Fail-open, not fail-silent"), so it swallows adapter failures
- * into ERROR/STALE state instead of rejecting.
- *
- * That non-throwing contract is correct for TRANSIENT failures (the network
- * happened to be down) but wrong for the four Configuration rows below,
- * which spec/modes.md requires to fail loudly at boot. This module closes
- * that gap itself in two parts: `validateInitOptions` (domain/validation.ts)
- * covers rows 1/2/4 (mode absent/unrecognised, remote apiKey/apiUrl blank,
- * local combined with credentials) exactly like node's `initFireweave` does;
- * `initRemote` covers row 3 (the host allowlist) with a direct, SYNCHRONOUS
- * `assertHostAllowed` call, before ever calling into the runtime — that call
- * is what makes a bad host fail LOUDLY here, because the runtime itself
- * deliberately never throws. A genuinely transient prefetch failure (host is
- * fine, network hiccups) still resolves into ERROR/STALE rather than
- * throwing — that fail-open behaviour is unchanged and is not one of the
- * four rows.
- */
-const client_js_1 = require("./client.js");
-const runtime_js_1 = require("./runtime.js");
-const local_js_1 = require("../infrastructure/adapters/local.js");
-const remote_js_1 = require("../infrastructure/adapters/remote.js");
-const hosts_js_1 = require("../infrastructure/hosts.js");
-const validation_js_1 = require("../domain/validation.js");
-async function initLocal(options) {
-    const local = options.local ?? {};
-    const adapter = new local_js_1.FireweaveLocalWebAdapter({
-        devFlags: local.controlPoints ?? {},
-        ...(local.log !== undefined ? { log: local.log } : {}),
-    });
-    const runtime = new runtime_js_1.FireweaveWebRuntime(adapter);
-    const client = new client_js_1.FireweaveWebClient(runtime);
-    await client.initialize(options.context);
-    return client;
-}
-async function initRemote(options) {
-    const { apiKey, apiUrl, allowedHosts, fetch } = options;
-    // `validateInitOptions` (called by `initFireweave`, below) has already
-    // ruled out blank apiKey/apiUrl by the time this runs — only the host
-    // allowlist row remains to check here. See the module doc comment: this
-    // call — not runtime.initialize() — is what makes a bad host fail LOUDLY
-    // here, because the runtime itself deliberately never throws.
-    (0, hosts_js_1.assertHostAllowed)(apiUrl, allowedHosts);
-    const adapter = new remote_js_1.FireweaveRemoteWebAdapter({
-        apiUrl,
-        apiKey,
-        ...(allowedHosts !== undefined ? { allowedHosts } : {}),
-        ...(fetch !== undefined ? { fetch } : {}),
-    });
-    const runtime = new runtime_js_1.FireweaveWebRuntime(adapter);
-    const client = new client_js_1.FireweaveWebClient(runtime);
-    await client.initialize(options.context);
-    return client;
-}
-/**
- * Build the adapter matching `options.mode` and bring a
- * {@link FireweaveWebClient} up.
- *
- * Throws {@link FireweaveError} (kind `Configuration`) for every row of the
- * initialisation-validation table (spec/modes.md):
- *  - `mode` absent or unrecognised
- *  - `mode: 'remote'` with `apiKey` or `apiUrl` missing/blank
- *  - `apiUrl` fails the host allowlist
- *  - `mode: 'local'` with credentials supplied
- *
- * The first, second and fourth rows are `validateInitOptions`'s job
- * (domain/validation.ts, shared discipline with node's `initFireweave`); the
- * third is validated downstream, inside `initRemote`, for the reason the
- * module doc comment explains — `FireweaveWebRuntime.initialize()` itself
- * never throws.
- */
-async function initFireweave(options) {
-    const validated = (0, validation_js_1.validateInitOptions)(options);
-    if (!validated.ok)
-        throw validated.error;
-    const validOptions = validated.value;
-    return validOptions.mode === 'local' ? initLocal(validOptions) : initRemote(validOptions);
-}