npm - @forinda/kickjs-devtools - Versions diffs - 5.2.1 → 5.2.3 - Mend

@forinda/kickjs-devtools 5.2.1 → 5.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/dist/index.d.mts.map +1 -1
package/dist/index.mjs +9 -982
package/dist/index.mjs.map +1 -1
package/package.json +4 -4
package/public/spa/assets/index.js +1 -1

package/dist/index.mjs.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.mjs","names":["serveStatic"],"sources":["../src/topology.ts","../src/devtools-tabs.ts","../src/bus/server.ts","../src/adapter.ts"],"sourcesContent":["/*\n Topology aggregator — walks the running KickJS application + DI\n * container and produces a JSON-serialisable {@link TopologySnapshot}.\n \n Calls `introspect()` on every plugin and adapter that implements it\n * (architecture.md §23.3); falls back to a minimal `{ protocolVersion,\n * name, kind }` stub for primitives that don't. Per-primitive\n * introspection failures are caught + collected into the snapshot's\n * `errors` field rather than failing the entire endpoint.\n \n @module @forinda/kickjs-devtools/topology\n /\n\nimport type { AppAdapter, Container, KickPlugin } from '@forinda/kickjs'\nimport {\n PROTOCOL_VERSION,\n type IntrospectionSnapshot,\n type TopologyContributorEntry,\n type TopologyError,\n type TopologySnapshot,\n type TopologyTokenEntry,\n} from '@forinda/kickjs-devtools-kit'\n\n/* Minimal Application surface the aggregator needs — keeps coupling thin. /\nexport interface TopologyApplicationLike {\n getAdapters(): AppAdapter[]\n getPlugins(): readonly KickPlugin[]\n /\n Optional in older Application implementations — when present, returns\n * the union of contributors across adapters/plugins/global with proper\n * source labels. The topology aggregator prefers this over walking\n * `adapter.contributors()` + `plugin.contributors()` directly because\n * the application-level walk preserves source provenance.\n /\n getContributors?(): ReadonlyArray<{\n key: string\n source: 'adapter' \| 'plugin' \| 'module' \| 'global'\n label: string\n dependsOn: readonly string[]\n }>\n}\n\n/* Inputs to {@link collectTopologySnapshot}. /\nexport interface CollectTopologyOptions {\n /* The running KickJS application (or anything that exposes its surface). /\n app: TopologyApplicationLike\n /* The DI container — used to enumerate registered tokens. /\n container: Container\n /\n Optional per-call introspect timeout in milliseconds. An adapter\n * whose `introspect()` doesn't settle within the budget gets a stub\n * snapshot + an entry in `errors`. Default: 100ms — keeps the\n * topology endpoint snappy even if one adapter misbehaves.\n /\n introspectTimeoutMs?: number\n}\n\nconst DEFAULT_INTROSPECT_TIMEOUT_MS = 100\n\n/\n Collect a {@link TopologySnapshot} for the given application.\n \n Async because plugin/adapter `introspect()` may be async; the work\n * is parallelised across all primitives so wall-clock time scales\n * with the slowest introspector, not their sum.\n /\nexport async function collectTopologySnapshot(\n opts: CollectTopologyOptions,\n): Promise<TopologySnapshot> {\n const { app, container, introspectTimeoutMs = DEFAULT_INTROSPECT_TIMEOUT_MS } = opts\n const errors: TopologyError[] = []\n\n const plugins = await Promise.all(\n app.getPlugins().map((p) => snapshotFor(p, 'plugin', introspectTimeoutMs, errors)),\n )\n const adapters = await Promise.all(\n app.getAdapters().map((a) => snapshotFor(a, 'adapter', introspectTimeoutMs, errors)),\n )\n\n return {\n protocolVersion: PROTOCOL_VERSION,\n timestamp: Date.now(),\n plugins,\n adapters,\n contributors: collectContributors(app),\n diTokens: collectTokens(container),\n errors,\n }\n}\n\n/\n Coerce one primitive into an {@link IntrospectionSnapshot}. Tries\n * the primitive's own `introspect()` first; falls back to a stub on\n * any of: missing implementation, throw, timeout, or non-object return.\n /\nasync function snapshotFor(\n primitive: AppAdapter \| KickPlugin,\n kind: 'plugin' \| 'adapter',\n timeoutMs: number,\n errors: TopologyError[],\n): Promise<IntrospectionSnapshot> {\n const name = primitive.name ?? '(unnamed)'\n const stub: IntrospectionSnapshot = {\n protocolVersion: PROTOCOL_VERSION,\n name,\n kind,\n }\n if (typeof primitive.introspect !== 'function') return stub\n\n try {\n const result = await Promise.race([\n Promise.resolve(primitive.introspect()),\n new Promise<never>((_, reject) =>\n setTimeout(\n () => reject(new Error(`introspect() timed out after ${timeoutMs}ms`)),\n timeoutMs,\n ),\n ),\n ])\n if (result && typeof result === 'object') {\n // Accept whatever the primitive returned; the kit's\n // IntrospectionSnapshot is opt-in typed via the kit, not enforced\n // at this layer (see plugin.ts / adapter.ts comment about avoiding\n // a runtime dep on the kit).\n const snap = result as Partial<IntrospectionSnapshot>\n return {\n protocolVersion: PROTOCOL_VERSION,\n name: snap.name ?? name,\n kind: snap.kind ?? kind,\n version: snap.version,\n state: snap.state,\n tokens: snap.tokens,\n metrics: snap.metrics,\n memoryBytes: snap.memoryBytes,\n }\n }\n return stub\n } catch (err) {\n errors.push({\n name,\n kind,\n message: err instanceof Error ? err.message : String(err),\n })\n return stub\n }\n}\n\n/* Read DI registrations into the topology shape — drops noisy HMR tokens. /\nfunction collectTokens(container: Container): TopologyTokenEntry[] {\n return container\n .getRegistrations()\n .filter((r) => !r.token.startsWith('__hmr__'))\n .map((r) => ({\n token: r.token,\n scope: r.scope,\n kind: r.kind,\n instantiated: r.instantiated,\n }))\n}\n\n/\n Contributor enumeration. Prefers `app.getContributors()` (the\n * Application-level walk that preserves adapter / plugin / global\n * source labels) when present; falls back to walking\n * `adapter.contributors()` + `plugin.contributors()` directly for\n * older Application implementations that don't expose the helper.\n \n Module-level contributors are still not surfaced here — module\n * instances aren't retained post-bootstrap. Per-route enumeration\n * lands in a later iteration alongside the route detail panel.\n /\nfunction collectContributors(app: TopologyApplicationLike): TopologyContributorEntry[] {\n const seen = new Map<string, TopologyContributorEntry>()\n\n if (typeof app.getContributors === 'function') {\n for (const c of app.getContributors()) {\n if (seen.has(c.key)) continue\n // The kit's source enum currently only allows 'adapter' \| 'module';\n // 'plugin' + 'global' both map to 'adapter' provenance for now —\n // the Topology UI labels them by `label` so the source field is\n // mainly a coarse category. Future kit version can widen.\n const mapped: TopologyContributorEntry['source'] =\n c.source === 'module' ? 'module' : 'adapter'\n seen.set(c.key, {\n key: c.key,\n source: mapped,\n dependsOn: c.dependsOn as string[],\n })\n }\n return [...seen.values()]\n }\n\n // Legacy path — direct walk.\n const ingest = (\n list: ReadonlyArray<unknown> \| null \| undefined,\n source: TopologyContributorEntry['source'],\n ): void => {\n if (!list) return\n for (const reg of list) {\n const r = reg as { key?: string; dependsOn?: readonly string[] }\n const key = typeof r.key === 'string' ? r.key : null\n if (!key \|\| seen.has(key)) continue\n seen.set(key, {\n key,\n source,\n dependsOn: Array.isArray(r.dependsOn) ? r.dependsOn : [],\n })\n }\n }\n\n for (const plugin of app.getPlugins()) {\n ingest(plugin.contributors?.(), 'adapter')\n }\n for (const adapter of app.getAdapters()) {\n ingest(adapter.contributors?.(), 'adapter')\n }\n\n return [...seen.values()]\n}\n","/\n Custom-tab aggregator — collects every plugin/adapter's\n * `devtoolsTabs()` contribution into a single deduped list for the\n * panel's `/_debug/tabs` endpoint.\n \n Validation is permissive: anything that doesn't look like a\n * {@link DevtoolsTabDescriptor} is dropped with a console warning\n * rather than throwing — a misconfigured adapter shouldn't break the\n * whole DevTools panel.\n \n @module @forinda/kickjs-devtools/devtools-tabs\n /\n\nimport type { DevtoolsTabDescriptor } from '@forinda/kickjs-devtools-kit'\nimport type { TopologyApplicationLike } from './topology'\n\n/* Result of {@link collectDevtoolsTabs}. /\nexport interface DevtoolsTabsResult {\n /* Deduped, validated tabs in registration order. /\n tabs: DevtoolsTabDescriptor[]\n /* Per-source collection errors (drop reason, source name). /\n errors: ReadonlyArray<{ source: string; reason: string }>\n}\n\nconst VALID_VIEW_TYPES = new Set(['iframe', 'launch', 'html'])\n\n/\n Walk every plugin + adapter, call `devtoolsTabs?()`, validate each\n * entry, and dedupe by `id`. Last-source-wins on collision is too\n * surprising — first-source-wins + a warning entry instead.\n /\nexport function collectDevtoolsTabs(app: TopologyApplicationLike): DevtoolsTabsResult {\n const tabs: DevtoolsTabDescriptor[] = []\n const seen = new Map<string, string>() // id → source name (for collision warnings)\n const errors: Array<{ source: string; reason: string }> = []\n\n const ingest = (sourceName: string, raw: unknown): void => {\n if (!Array.isArray(raw)) {\n errors.push({ source: sourceName, reason: 'devtoolsTabs() did not return an array' })\n return\n }\n for (const entry of raw) {\n const validation = validateTab(entry)\n if (!validation.ok) {\n errors.push({ source: sourceName, reason: validation.reason })\n continue\n }\n const tab = validation.tab\n const owner = seen.get(tab.id)\n if (owner) {\n errors.push({\n source: sourceName,\n reason: `tab id '${tab.id}' already registered by ${owner} — first-source wins`,\n })\n continue\n }\n seen.set(tab.id, sourceName)\n tabs.push(tab)\n }\n }\n\n for (const plugin of app.getPlugins()) {\n if (typeof plugin.devtoolsTabs !== 'function') continue\n try {\n ingest(plugin.name ?? '(unnamed plugin)', plugin.devtoolsTabs())\n } catch (err) {\n errors.push({\n source: plugin.name ?? '(unnamed plugin)',\n reason: err instanceof Error ? err.message : String(err),\n })\n }\n }\n for (const adapter of app.getAdapters()) {\n if (typeof adapter.devtoolsTabs !== 'function') continue\n try {\n ingest(adapter.name ?? '(unnamed adapter)', adapter.devtoolsTabs())\n } catch (err) {\n errors.push({\n source: adapter.name ?? '(unnamed adapter)',\n reason: err instanceof Error ? err.message : String(err),\n })\n }\n }\n\n return { tabs, errors }\n}\n\ninterface ValidationOk {\n ok: true\n tab: DevtoolsTabDescriptor\n}\n\ninterface ValidationFail {\n ok: false\n reason: string\n}\n\n/\n Coerce + validate a tab descriptor. Returns the typed object on\n * success; a structured reason on failure. Uses a permissive checker\n * so a partially-correct entry from a third-party adapter doesn't\n * break the whole panel.\n /\nfunction validateTab(raw: unknown): ValidationOk \| ValidationFail {\n if (!raw \|\| typeof raw !== 'object') {\n return { ok: false, reason: 'tab entry is not an object' }\n }\n const obj = raw as Record<string, unknown>\n if (typeof obj.id !== 'string' \|\| obj.id.length === 0) {\n return { ok: false, reason: 'tab.id must be a non-empty string' }\n }\n if (typeof obj.title !== 'string' \|\| obj.title.length === 0) {\n return { ok: false, reason: `tab '${obj.id}': title must be a non-empty string` }\n }\n const view = obj.view as Record<string, unknown> \| undefined\n if (!view \|\| typeof view !== 'object') {\n return { ok: false, reason: `tab '${obj.id}': view object is required` }\n }\n if (typeof view.type !== 'string' \|\| !VALID_VIEW_TYPES.has(view.type)) {\n return {\n ok: false,\n reason: `tab '${obj.id}': view.type must be one of iframe / launch / html`,\n }\n }\n switch (view.type) {\n case 'iframe':\n if (typeof view.src !== 'string' \|\| view.src.length === 0) {\n return { ok: false, reason: `tab '${obj.id}': iframe view requires a non-empty src` }\n }\n break\n case 'html':\n if (typeof view.html !== 'string') {\n return { ok: false, reason: `tab '${obj.id}': html view requires html string` }\n }\n break\n case 'launch':\n if (!Array.isArray(view.actions)) {\n return { ok: false, reason: `tab '${obj.id}': launch view requires actions array` }\n }\n break\n }\n return { ok: true, tab: obj as unknown as DevtoolsTabDescriptor }\n}\n","// Server-side KickEventBus implementation.\n//\n// Wraps the bus core from `@forinda/kickjs-devtools-kit/bus` with a\n// `ws` server bound to a path on the framework's existing\n// `http.Server`. Architecture:\n//\n// server.on('upgrade') ─┐\n// ├──► WebSocketServer.handleUpgrade()\n// │ └─► ws clients: receive emits as JSON\n// bus.emit(type, payload) ─┴──► serialize → fan out to clients +\n// dispatch locally to in-process subs\n//\n// Why piggyback on the framework's http.Server instead of starting a\n// dedicated WS server: the framework already owns the listener, the\n// upgrade event is the canonical hook, and reusing it means devtools\n// inherits whatever TLS / proxy / port config the application provides.\n//\n// Lifecycle:\n// - createServerBus() builds the WebSocketServer in `noServer: true`\n// mode (no listener of its own) and returns the bus + attach/close\n// handles.\n// - attachUpgrade(httpServer) wires server.on('upgrade') so upgrades\n// matching `wsPath` route into the WebSocketServer. Other upgrade\n// paths (kickjs-ws, etc.) ignore us by virtue of path matching.\n// - close() drops every client and detaches from the http server so\n// repeated dev-mode restarts don't leak listener handles.\n//\n// Authentication:\n// - The optional `secret` matches the devtools panel's existing\n// `x-devtools-token` / `?token=` access guard. When set, upgrades\n// without the right token get rejected at HTTP-handshake time —\n// never reaching the bus.\n//\n// Loop avoidance:\n// - Server emits fan out to every connected client. Client-side\n// emits sent UP the socket dispatch into the local core (so\n// server tabs can react) but are NOT re-broadcast to other\n// clients. This keeps the same \"no echo\" contract the browser\n// bus enforces; without it a tab's emit would round-trip through\n// the server and back to itself.\n\nimport type { IncomingMessage } from 'node:http'\nimport type http from 'node:http'\nimport type { Socket } from 'node:net'\n\nimport { createBusCore } from '@forinda/kickjs-devtools-kit/bus'\nimport type { KickDevtoolsEvent, KickEventBus, Unsubscribe } from '@forinda/kickjs-devtools-kit/bus'\nimport { WebSocketServer, type WebSocket } from 'ws'\n\nexport interface ServerBusOptions {\n /* Path the WebSocket upgrade listens on. Default `/_debug/_bus`. /\n wsPath?: string\n /\n Optional shared secret. When set, clients must include either\n * `?token=<secret>` on the upgrade URL or an\n * `x-devtools-token: <secret>` header. Unauthorized upgrades return\n * 401 and never reach the bus. Pass `false` (or omit) to disable.\n /\n secret?: string \| false\n}\n\ninterface TaggedEnvelope extends KickDevtoolsEvent {\n __kick_origin?: 'local' \| 'broadcast' \| 'ws'\n}\n\nexport interface ServerBus extends KickEventBus {\n /* Hook into an existing http.Server's `upgrade` event. /\n attachUpgrade(httpServer: http.Server): void\n /* Drop all clients + detach. Idempotent. /\n close(): void\n /* Currently connected client count. Useful for the devtools health card. /\n clientCount(): number\n}\n\nexport function createServerBus(opts: ServerBusOptions = {}): ServerBus {\n const wsPath = opts.wsPath ?? '/_debug/_bus'\n const secret = opts.secret ?? false\n const core = createBusCore()\n const wss = new WebSocketServer({ noServer: true })\n const clients = new Set<WebSocket>()\n let attachedServer: http.Server \| null = null\n let upgradeHandler: ((req: IncomingMessage, socket: Socket, head: Buffer) => void) \| null = null\n\n wss.on('connection', (ws: WebSocket) => {\n clients.add(ws)\n ws.on('message', (data: Buffer \| string) => {\n try {\n const text = typeof data === 'string' ? data : data.toString('utf-8')\n const parsed = JSON.parse(text) as TaggedEnvelope\n if (!parsed \|\| typeof parsed.type !== 'string' \|\| typeof parsed.ts !== 'number') return\n // Dispatch locally only — never echo back to other clients.\n // (Tabs that need cross-tab fan-out use BroadcastChannel; the\n // server is point-to-point per client.)\n core.dispatch({ ...parsed, __kick_origin: 'ws' } as KickDevtoolsEvent)\n } catch {\n // Malformed — drop silently. A misbehaving tab shouldn't\n // crash the server bus.\n }\n })\n ws.on('close', () => {\n clients.delete(ws)\n })\n ws.on('error', () => {\n clients.delete(ws)\n })\n })\n\n const fanOut = (envelope: TaggedEnvelope): void => {\n if (clients.size === 0) return\n const text = JSON.stringify(envelope)\n for (const client of clients) {\n // OPEN === 1 in the ws spec; reusing the import for the type\n // guard keeps this readable without pulling in WebSocket consts.\n if (client.readyState === client.OPEN) {\n try {\n client.send(text)\n } catch {\n // Network error mid-fan-out — clean removal happens via the\n // 'close' / 'error' handlers; nothing to do here.\n }\n }\n }\n }\n\n const checkAuth = (req: IncomingMessage): boolean => {\n if (secret === false) return true\n const header = req.headers['x-devtools-token']\n if (typeof header === 'string' && header === secret) return true\n // Parse query — `req.url` is path + ?query for upgrade requests.\n const url = req.url ?? ''\n const queryIdx = url.indexOf('?')\n if (queryIdx === -1) return false\n const params = new URLSearchParams(url.slice(queryIdx + 1))\n return params.get('token') === secret\n }\n\n const attachUpgrade = (httpServer: http.Server): void => {\n if (attachedServer) return // idempotent\n attachedServer = httpServer\n upgradeHandler = (req, socket, head) => {\n // Path match — ignore upgrades destined for other adapters\n // (kickjs-ws, custom adapters, etc.). They register their own\n // upgrade handlers; ours just no-ops on non-matching URLs.\n const url = req.url ?? ''\n const pathOnly = url.split('?')[0]\n if (pathOnly !== wsPath) return\n\n if (!checkAuth(req)) {\n socket.write('HTTP/1.1 401 Unauthorized\\r\\n\\r\\n')\n socket.destroy()\n return\n }\n\n wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n wss.emit('connection', ws, req)\n })\n }\n httpServer.on('upgrade', upgradeHandler)\n }\n\n const close = (): void => {\n if (attachedServer && upgradeHandler) {\n attachedServer.off('upgrade', upgradeHandler)\n }\n attachedServer = null\n upgradeHandler = null\n for (const client of clients) {\n try {\n client.close()\n } catch {\n // ignore\n }\n }\n clients.clear()\n wss.close()\n }\n\n return {\n on(type: string, handler: (payload: unknown) => void): Unsubscribe {\n return core.on(type, handler)\n },\n onAny(handler: (event: KickDevtoolsEvent) => void): Unsubscribe {\n return core.onAny(handler)\n },\n emit(type: string, payload: unknown): void {\n const envelope: TaggedEnvelope = {\n type,\n payload,\n ts: Date.now(),\n __kick_origin: 'local',\n }\n core.dispatch(envelope)\n fanOut(envelope)\n },\n attachUpgrade,\n close,\n clientCount: () => clients.size,\n } as ServerBus\n}\n","import type { Request, Response, NextFunction } from 'express'\nimport { Router, static as serveStatic } from 'express'\nimport { dirname, join } from 'node:path'\nimport { tmpdir } from 'node:os'\nimport { fileURLToPath } from 'node:url'\nimport { createReadStream, existsSync, readFileSync, statSync, unlink } from 'node:fs'\nimport { randomBytes } from 'node:crypto'\nimport { writeHeapSnapshot } from 'node:v8'\nimport {\n type AdapterMiddleware,\n type Container,\n METADATA,\n defineAdapter,\n ref,\n computed,\n reactive,\n watch,\n createLogger,\n type Ref,\n type ComputedRef,\n getClassMeta,\n getMethodMeta,\n} from '@forinda/kickjs'\nimport {\n MemoryAnalyzer,\n PROTOCOL_VERSION,\n RuntimeSampler,\n type IntrospectionSnapshot,\n} from '@forinda/kickjs-devtools-kit'\nimport { DEVTOOLS_BUS } from '@forinda/kickjs-devtools-kit/bus/token'\nimport { collectTopologySnapshot, type TopologyApplicationLike } from './topology'\nimport { collectDevtoolsTabs } from './devtools-tabs'\nimport { createServerBus, type ServerBus } from './bus/server'\n\nconst log = createLogger('DevTools')\n\n/* Route metadata collected during mount /\ninterface RouteInfo {\n method: string\n path: string\n controller: string\n handler: string\n middleware: string[]\n}\n\n/* Per-route latency stats with percentile tracking /\ninterface RouteStats {\n count: number\n totalMs: number\n minMs: number\n maxMs: number\n /* Ring buffer of last N samples for percentile computation /\n samples: number[]\n}\n\nconst MAX_SAMPLES = 1000\n\n/* Compute a percentile from a sorted array of numbers /\nfunction percentile(sorted: number[], p: number): number {\n if (sorted.length === 0) return 0\n const idx = Math.ceil(p sorted.length) - 1\n return sorted[Math.max(0, idx)]\n}\n\n/** Compute p50, p95, p99 from a RouteStats samples buffer /\nfunction computePercentiles(stats: RouteStats): { p50: number; p95: number; p99: number } {\n const sorted = [...stats.samples].toSorted((a, b) => a - b)\n return {\n p50: percentile(sorted, 0.5),\n p95: percentile(sorted, 0.95),\n p99: percentile(sorted, 0.99),\n }\n}\n\n/\n Open an SSE response — sets the headers, flushes them, and disables\n * any compression middleware that may have been registered upstream\n * (compression buffers SSE chunks indefinitely; we need flush-on-write).\n /\nfunction openSseStream(req: Request, res: Response): void {\n res.writeHead(200, {\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache, no-transform',\n Connection: 'keep-alive',\n 'X-Accel-Buffering': 'no',\n })\n res.flushHeaders?.()\n // Defensive: the compression middleware checks this header. Some\n // setups also wrap res.write — calling res.flush after each write\n // is safe even when no compression is in play.\n void req\n}\n\n/* Write a single SSE `data:` event with a JSON payload + double newline. /\nfunction writeSseEvent(res: Response, payload: unknown): void {\n res.write(`data: ${JSON.stringify(payload)}\\n\\n`)\n}\n\n/\n Module-scoped guard for `POST /_debug/memory/snapshot`. `writeHeapSnapshot()`\n * blocks the event loop for the duration of the capture (multi-second\n * for large heaps); two concurrent captures would compound the pause.\n * The endpoint returns 503 + a hint message when this flag is set so\n * the SPA can surface a \"snapshot already running\" warning rather than\n * silently queueing.\n \n Module-scoped (not per-adapter-instance) because writeHeapSnapshot\n * acts on the V8 process — multiple DevToolsAdapter instances would\n * still race at the v8 layer.\n /\nlet snapshotInProgress = false\n\nexport interface DevToolsOptions {\n /* Base path for debug endpoints (default: '/_debug') /\n basePath?: string\n /* Only enable when this is true (default: process.env.NODE_ENV !== 'production') /\n enabled?: boolean\n /* Include environment variables (sanitized) at /_debug/config (default: false) /\n exposeConfig?: boolean\n /* Env var prefixes to expose (default: ['APP_', 'NODE_ENV']). Others are redacted. /\n configPrefixes?: string[]\n /* Callback when error rate exceeds threshold /\n onErrorRateExceeded?: (rate: number) => void\n /* Error rate threshold (default: 0.5 = 50%) /\n errorRateThreshold?: number\n /* Other adapters to discover stats from (e.g., WsAdapter) /\n adapters?: any[]\n\n /\n Secret token to guard DevTools access. When set, all requests must\n * include this token as `x-devtools-token` header or `?token=` query param.\n \n Auto-generated on startup if not provided. The token is logged to the console.\n * Set to `false` to disable the guard entirely (not recommended).\n \n @example\n * ```ts\n * DevToolsAdapter({ secret: getEnv('DEVTOOLS_SECRET') })\n * ```\n /\n secret?: string \| false\n\n /\n Tuning for the runtime sampler that powers `/_debug/runtime` and\n * the upcoming Memory tab (architecture.md §23). Defaults to\n * 1-second polling with a 60-sample (~1 minute) ring buffer.\n \n Set `runtime.enabled = false` to skip starting the sampler — the\n * `/_debug/runtime` endpoint then returns 404 instead of an empty\n * snapshot, signalling deliberate opt-out rather than a startup race.\n /\n runtime?: {\n /* Whether to start the runtime sampler at all. Default: true. /\n enabled?: boolean\n /* Polling interval in milliseconds. Default: 1000. /\n intervalMs?: number\n /* Ring-buffer size — number of past samples retained. Default: 60. /\n bufferSize?: number\n }\n}\n\n/\n Public reactive surface exposed by a DevToolsAdapter instance —\n * counters, computed metrics, and the route latency map. Tests and\n * peer adapters consume these directly to drive their own behavior.\n /\nexport interface DevToolsAdapterExtensions {\n /* Total requests received. /\n readonly requestCount: Ref<number>\n /* Total responses with status >= 500. /\n readonly errorCount: Ref<number>\n /* Total responses with status >= 400 and < 500. /\n readonly clientErrorCount: Ref<number>\n /* Server start time. /\n readonly startedAt: Ref<number>\n /* Computed error rate (server errors / total requests). /\n readonly errorRate: ComputedRef<number>\n /* Computed uptime in seconds. /\n readonly uptimeSeconds: ComputedRef<number>\n /* Per-route latency tracking. /\n readonly routeLatency: Record<string, RouteStats>\n /\n Tier-1 runtime sampler from `@forinda/kickjs-devtools-kit`. `null`\n * when `runtime.enabled` is `false`. Tests can `latest()` and\n * `history()` directly without going through the HTTP endpoint.\n /\n readonly runtimeSampler: RuntimeSampler \| null\n /\n Memory analyzer fed by the runtime sampler. `null` when the\n * sampler is disabled. Use `analyzer.health(sampler.history())` to\n * compose a composite memory-health snapshot.\n /\n readonly memoryAnalyzer: MemoryAnalyzer \| null\n}\n\n/\n DevToolsAdapter — Vue-style reactive introspection for KickJS applications.\n \n Exposes debug endpoints powered by reactive state (ref, computed, watch):\n * - `GET /_debug/routes` — all registered routes with middleware\n * - `GET /_debug/container` — DI registry with scopes and instantiation status\n * - `GET /_debug/metrics` — live request/error counts, error rate, uptime\n * - `GET /_debug/health` — deep health check with adapter status\n * - `GET /_debug/config` — sanitized environment variables (opt-in)\n * - `GET /_debug/state` — full reactive state snapshot\n \n @example\n * ```ts\n * import { DevToolsAdapter } from '@forinda/kickjs-devtools'\n \n bootstrap({\n * modules: [UserModule],\n * adapters: [\n * DevToolsAdapter({\n * enabled: process.env.NODE_ENV !== 'production',\n * exposeConfig: true,\n * configPrefixes: ['APP_', 'DATABASE_'],\n * }),\n * ],\n * })\n * ```\n /\nexport const DevToolsAdapter = defineAdapter<DevToolsOptions, DevToolsAdapterExtensions>({\n name: 'DevToolsAdapter',\n defaults: {\n basePath: '/_debug',\n errorRateThreshold: 0.5,\n exposeConfig: false,\n configPrefixes: ['APP_', 'NODE_ENV'],\n },\n build: (options) => {\n const basePath = options.basePath!\n const enabled = options.enabled ?? process.env.NODE_ENV !== 'production'\n const exposeConfig = options.exposeConfig!\n const configPrefixes = options.configPrefixes!\n const errorRateThreshold = options.errorRateThreshold!\n const peerAdapters = options.adapters ?? []\n\n // Secret token guard\n let secret: string \| false\n if (options.secret === false) {\n secret = false\n } else if (options.secret) {\n secret = options.secret\n } else {\n secret = randomBytes(16).toString('hex')\n }\n\n // ── Runtime sampler + memory analyzer (kit) ────────────────────\n // Lazily instantiated so an adopter that disables runtime monitoring\n // doesn't pay the perf_hooks histogram cost. Lifecycle: start in\n // `beforeMount`, stop in `shutdown`.\n const runtimeEnabled = options.runtime?.enabled ?? true\n const runtimeSampler = runtimeEnabled\n ? new RuntimeSampler({\n intervalMs: options.runtime?.intervalMs ?? 1000,\n bufferSize: options.runtime?.bufferSize ?? 60,\n })\n : null\n const memoryAnalyzer = runtimeEnabled ? new MemoryAnalyzer() : null\n\n // ── Server-side event bus ──────────────────────────────────────\n // Lazily resolved in `beforeMount` — when the devtools adapter is\n // rebuilt during HMR, the same `Container` may already hold a bus\n // from a previous mount with live WebSocket clients + in-flight\n // subscriptions. Creating a fresh bus on every rebuild would\n // silently swap the registered instance, leaving plugins that\n // already captured the old reference publishing into a dead bus.\n // Using `container.has(DEVTOOLS_BUS)` to reuse instead keeps event\n // delivery stable across rebuilds.\n //\n // When the devtools adapter is disabled (`enabled === false`) we\n // register a no-op stub instead so adopters who Inject(DEVTOOLS_BUS)\n // under @Optional() get a callable instance rather than undefined.\n let bus: ServerBus \| null = null\n\n const ensureBus = (container: Container): ServerBus => {\n if (container.has(DEVTOOLS_BUS)) {\n // The token is typed `KickEventBus` but the registered instance\n // is the wider `ServerBus` (KickEventBus + attachUpgrade /\n // close / clientCount). Explicit generic on resolve avoids the\n // structural-cast — Container.resolve's last overload accepts\n // an explicit T and returns it.\n bus = container.resolve<ServerBus>(DEVTOOLS_BUS)\n return bus\n }\n bus = enabled\n ? createServerBus({\n wsPath: `${basePath}/_bus`,\n secret: secret === false ? false : secret,\n })\n : ({\n on: () => () => {},\n onAny: () => () => {},\n emit: () => {},\n attachUpgrade: () => {},\n close: () => {},\n clientCount: () => 0,\n } as ServerBus)\n container.registerInstance(DEVTOOLS_BUS, bus)\n return bus\n }\n\n // ── Reactive state ─────────────────────────────────────────────\n const requestCount = ref(0)\n const errorCount = ref(0)\n const clientErrorCount = ref(0)\n const startedAt = ref(Date.now())\n const routeLatency = reactive<Record<string, RouteStats>>({})\n\n const errorRate = computed(() =>\n requestCount.value > 0 ? errorCount.value / requestCount.value : 0,\n )\n\n const uptimeSeconds = computed(() => Math.floor((Date.now() - startedAt.value) / 1000))\n\n // ── Internal mutable state ─────────────────────────────────────\n let routes: RouteInfo[] = []\n let container: Container \| null = null\n let appRef: any = null\n const adapterStatuses: Record<string, string> = {}\n let stopErrorWatch: (() => void) \| null = null\n\n // Watch error rate — log warnings when elevated\n if (options.onErrorRateExceeded) {\n const callback = options.onErrorRateExceeded\n stopErrorWatch = watch(errorRate, (rate) => {\n if (rate > errorRateThreshold) {\n callback(rate)\n }\n })\n } else {\n stopErrorWatch = watch(errorRate, (rate) => {\n if (rate > errorRateThreshold) {\n log.warn(`Error rate elevated: ${(rate 100).toFixed(1)}%`)\n }\n })\n }\n\n /*\n Find the dashboard's public directory. Prefers the new Solid SPA\n * (public/spa/, shipped from PR 4 of §23); falls back to the legacy\n * Vue+Tailwind dashboard (public/devtools/) for environments that\n * haven't run `pnpm --filter @forinda/kickjs-devtools build:spa`.\n /\n const resolvePublicDir = (): string \| null => {\n const thisDir = dirname(fileURLToPath(import.meta.url))\n const candidates = [\n join(thisDir, '..', 'public', 'spa'), // dist/ -> public/spa\n join(thisDir, '..', '..', 'public', 'spa'), // src/ -> public/spa\n join(thisDir, '..', 'public', 'devtools'), // legacy Vue dashboard\n join(thisDir, '..', '..', 'public', 'devtools'), // legacy from src/\n ]\n for (const dir of candidates) {\n if (existsSync(join(dir, 'index.html'))) return dir\n }\n return null\n }\n\n /\n Resolve peer adapters at request time. Prefers live adapters from the\n * Application registry (survives HMR rebuild) and falls back to the\n * constructor-provided refs.\n /\n const getPeerAdapters = (): any[] => {\n const kickApp = appRef?.__kickApp\n if (kickApp && typeof kickApp.getAdapters === 'function') {\n return kickApp.getAdapters()\n }\n return peerAdapters\n }\n\n return {\n // ── Extensions (TExtra) ───────────────────────────────────────\n requestCount,\n errorCount,\n clientErrorCount,\n startedAt,\n errorRate,\n uptimeSeconds,\n routeLatency,\n runtimeSampler,\n memoryAnalyzer,\n\n // ── DevTools introspection (architecture.md §23) ─────────────\n // Cheap snapshot — counters + flags only. Anything that requires\n // a container walk or DB hit belongs in the per-endpoint RPCs\n // (`/_debug/container`, `/_debug/graph`), not here.\n introspect(): IntrospectionSnapshot {\n return {\n protocolVersion: PROTOCOL_VERSION,\n name: 'DevToolsAdapter',\n kind: 'adapter',\n state: {\n basePath,\n enabled,\n runtimeEnabled,\n secret: secret === false ? false : 'present',\n },\n metrics: {\n requestCount: requestCount.value,\n serverErrors: errorCount.value,\n clientErrors: clientErrorCount.value,\n uptimeSeconds: uptimeSeconds.value,\n routesTracked: routes.length,\n },\n }\n },\n\n // ── Lifecycle ─────────────────────────────────────────────────\n\n beforeMount({ app, container: containerArg }) {\n if (!enabled) return\n\n appRef = app\n container = containerArg\n // Lazy resolve — reuses the existing bus when the same\n // container is reused across HMR rebuilds, otherwise creates\n // and registers a fresh instance. See `ensureBus` for why.\n ensureBus(containerArg)\n startedAt.value = Date.now()\n // Clear routes on rebuild/restart to prevent HMR duplication\n routes = []\n adapterStatuses['DevToolsAdapter'] = 'running'\n\n // Start the runtime sampler + memory analyzer here (rather than\n // at construction) so test harnesses that build the adapter but\n // never mount it don't leak interval timers.\n runtimeSampler?.start()\n memoryAnalyzer?.start()\n\n const router = Router()\n\n // ── Access guard — require secret token ──────────────────\n if (secret !== false) {\n const token = secret\n router.use((req: Request, res: Response, next: NextFunction) => {\n const provided = req.headers['x-devtools-token'] ?? req.query?.token\n if (provided === token) return next()\n // Allow the dashboard HTML itself (it will include the token in API calls)\n if (req.path === '/' && req.method === 'GET' && !req.query?.token) {\n return next() // serve dashboard, it handles auth via token\n }\n // Serve static assets for the dashboard (js files)\n if (req.path.endsWith('.js') \|\| req.path.endsWith('.css')) {\n return next()\n }\n res.status(403).json({ error: 'Forbidden — invalid or missing devtools token' })\n })\n }\n\n router.get('/routes', (_req: Request, res: Response) => {\n res.json({ routes })\n })\n\n router.get('/container', (_req: Request, res: Response) => {\n const registrations = container?.getRegistrations() ?? []\n res.json({ registrations, count: registrations.length })\n })\n\n router.get('/metrics', (_req: Request, res: Response) => {\n // Build latency with percentiles, omitting raw samples from response\n const latency: Record<string, any> = {}\n for (const [key, stats] of Object.entries(routeLatency)) {\n const { samples: _, ...rest } = stats\n latency[key] = { ...rest, ...computePercentiles(stats) }\n }\n res.json({\n requests: requestCount.value,\n serverErrors: errorCount.value,\n clientErrors: clientErrorCount.value,\n errorRate: errorRate.value,\n uptimeSeconds: uptimeSeconds.value,\n startedAt: new Date(startedAt.value).toISOString(),\n routeLatency: latency,\n })\n })\n\n router.get('/health', (_req: Request, res: Response) => {\n const healthy = errorRate.value < errorRateThreshold\n const status = healthy ? 'healthy' : 'degraded'\n\n res.status(healthy ? 200 : 503).json({\n status,\n errorRate: errorRate.value,\n uptime: uptimeSeconds.value,\n adapters: adapterStatuses,\n })\n })\n\n router.get('/state', (_req: Request, res: Response) => {\n const wsAdapter = getPeerAdapters().find(\n (a) => a.name === 'WsAdapter' && typeof a.getStats === 'function',\n )\n res.json({\n reactive: {\n requestCount: requestCount.value,\n errorCount: errorCount.value,\n clientErrorCount: clientErrorCount.value,\n errorRate: errorRate.value,\n uptimeSeconds: uptimeSeconds.value,\n startedAt: new Date(startedAt.value).toISOString(),\n },\n routes: routes.length,\n container: container?.getRegistrations().length ?? 0,\n routeLatency,\n ...(wsAdapter ? { ws: wsAdapter.getStats() } : {}),\n })\n })\n\n // ── Tier-1 runtime monitoring (architecture.md §23) ─────────\n // Returns the latest RuntimeSnapshot + a composite MemoryHealth\n // computed from the sampler's ring buffer. Returns 404 when the\n // sampler is disabled so adopters can distinguish \"off\" from\n // \"starting up\".\n router.get('/runtime', (_req: Request, res: Response) => {\n if (!runtimeSampler \|\| !memoryAnalyzer) {\n res.status(404).json({ error: 'runtime sampler disabled — set runtime.enabled = true' })\n return\n }\n const latest = runtimeSampler.latest()\n const history = runtimeSampler.history()\n const health = memoryAnalyzer.health(history)\n res.json({\n protocolVersion: PROTOCOL_VERSION,\n latest,\n history,\n health,\n })\n })\n\n // ── SSE: live runtime snapshots (architecture.md §23) ───────\n // Pushes the latest RuntimeSnapshot every `intervalMs`. SSE\n // (not WebSocket) avoids the http.Server `upgrade`-event\n // coordination cost — see devtools-flows.md §3 for rationale.\n router.get('/runtime/stream', (req: Request, res: Response) => {\n if (!runtimeSampler) {\n res.status(404).json({ error: 'runtime sampler disabled' })\n return\n }\n openSseStream(req, res)\n const intervalMs = options.runtime?.intervalMs ?? 1000\n const tick = (): void => {\n const snap = runtimeSampler.latest()\n if (snap) writeSseEvent(res, snap)\n }\n tick()\n const interval = setInterval(tick, intervalMs)\n const heartbeat = setInterval(() => res.write(': heartbeat\\n\\n'), 30_000)\n req.on('close', () => {\n clearInterval(interval)\n clearInterval(heartbeat)\n })\n })\n\n // ── SSE: memory health composite (architecture.md §23) ──────\n router.get('/memory/stream', (req: Request, res: Response) => {\n if (!runtimeSampler \|\| !memoryAnalyzer) {\n res.status(404).json({ error: 'runtime sampler disabled' })\n return\n }\n openSseStream(req, res)\n const intervalMs = options.runtime?.intervalMs ?? 1000\n const tick = (): void => {\n const snap = runtimeSampler.latest()\n if (!snap) return\n const health = memoryAnalyzer.health(runtimeSampler.history())\n writeSseEvent(res, { snapshot: snap, health })\n }\n tick()\n const interval = setInterval(tick, intervalMs)\n const heartbeat = setInterval(() => res.write(': heartbeat\\n\\n'), 30_000)\n req.on('close', () => {\n clearInterval(interval)\n clearInterval(heartbeat)\n })\n })\n\n // ── Heap snapshot — Tier 3 monitoring (architecture.md §23) ─\n // POST /_debug/memory/snapshot — captures a V8 heap snapshot\n // and streams the resulting .heapsnapshot file back as\n // application/json with Content-Disposition. Snapshot capture\n // blocks the event loop while writing (multi-second pause for\n // large heaps), so the endpoint enforces single-flight via a\n // module-scoped flag — concurrent calls return 503.\n //\n // The temp file is deleted as soon as the response stream\n // completes (success or error). Worst case if the process\n // dies mid-snapshot is a stranded file in `os.tmpdir()`,\n // which the OS cleans up on next boot.\n router.post('/memory/snapshot', (_req: Request, res: Response) => {\n if (snapshotInProgress) {\n res\n .status(503)\n .json({ error: 'heap snapshot already in progress — wait for it to complete' })\n return\n }\n snapshotInProgress = true\n const startedAt = Date.now()\n const filename = `kickjs-heap-${new Date().toISOString().replace(/[:.]/g, '-')}.heapsnapshot`\n const targetPath = join(tmpdir(), filename)\n\n let written: string\n try {\n // writeHeapSnapshot is synchronous — the event loop is\n // blocked for the duration. There's no async variant in\n // the v8 module today; if one ships, swap here.\n written = writeHeapSnapshot(targetPath)\n } catch (err) {\n snapshotInProgress = false\n log.error({ err }, 'heap snapshot capture failed')\n res\n .status(500)\n .json({ error: 'snapshot capture failed', message: (err as Error).message })\n return\n }\n\n let size = 0\n try {\n size = statSync(written).size\n } catch {\n / size header is best-effort */\n }\n const elapsedMs = Date.now() - startedAt\n log.info(\n `Heap snapshot captured: ${written} (${(size / 1024 / 1024).toFixed(1)} MiB in ${elapsedMs}ms)`,\n )\n\n res.setHeader('Content-Type', 'application/json')\n res.setHeader('Content-Disposition', `attachment; filename=\"${filename}\"`)\n if (size > 0) res.setHeader('Content-Length', String(size))\n res.setHeader('X-Snapshot-Capture-Ms', String(elapsedMs))\n\n const cleanup = (): void => {\n unlink(written, (err) => {\n if (err) log.warn(`Failed to delete heap snapshot ${written}: ${err.message}`)\n snapshotInProgress = false\n })\n }\n const stream = createReadStream(written)\n stream.on('end', cleanup)\n stream.on('error', (err) => {\n log.error({ err }, 'heap snapshot stream failed')\n if (!res.headersSent) res.status(500).end()\n cleanup()\n })\n // Defensive: if the client disconnects mid-download, abort\n // the stream + run cleanup so the temp file doesn't linger.\n res.on('close', () => {\n stream.destroy()\n // If the stream already fired 'end', cleanup already ran\n // — the unlink is idempotent enough that running twice\n // just yields ENOENT which we ignore in cleanup.\n })\n stream.pipe(res)\n })\n\n // ── Force GC — Tier 3 monitoring (architecture.md §23) ──────\n // POST /_debug/memory/gc — calls `global.gc()` if Node was\n // started with --expose-gc, returning before/after heap size\n // so the panel can show how much was reclaimed. Useful for\n // confirming \"is this growth real or just delayed GC?\".\n //\n // Returns 412 Precondition Failed (with hint) when the flag\n // wasn't set, so the SPA can show \"Run with --expose-gc to\n // enable this button\" instead of a generic 5xx.\n router.post('/memory/gc', (_req: Request, res: Response) => {\n const gc = (globalThis as { gc?: () => void }).gc\n if (typeof gc !== 'function') {\n res.status(412).json({\n error: 'global.gc unavailable — start Node with --expose-gc to enable this endpoint',\n })\n return\n }\n const before = process.memoryUsage().heapUsed\n const startedAt = Date.now()\n try {\n gc()\n } catch (err) {\n res.status(500).json({\n error: 'forced GC failed',\n message: err instanceof Error ? err.message : String(err),\n })\n return\n }\n const after = process.memoryUsage().heapUsed\n const reclaimedBytes = Math.max(0, before - after)\n const elapsedMs = Date.now() - startedAt\n log.info(\n `Forced GC reclaimed ${(reclaimedBytes / 1024 / 1024).toFixed(2)} MiB in ${elapsedMs}ms`,\n )\n res.json({ before, after, reclaimedBytes, elapsedMs })\n })\n\n // ── Custom-tab discovery (architecture.md §23) ──────────────\n // Walks every plugin/adapter `devtoolsTabs?()` contribution\n // and serves the deduped + validated list. The SPA fetches\n // this once at boot to render dynamic tabs after the four\n // built-ins.\n router.get('/tabs', (_req: Request, res: Response) => {\n const kickApp = appRef?.__kickApp as TopologyApplicationLike \| undefined\n if (!kickApp) {\n res.status(503).json({ error: 'tabs unavailable — application surface not exposed' })\n return\n }\n res.json(collectDevtoolsTabs(kickApp))\n })\n\n // ── Topology RPC (architecture.md §23) ──────────────────────\n // Aggregates plugins + adapters + contributors + DI tokens\n // into one snapshot; calls each primitive's introspect() in\n // parallel with a per-call timeout so a misbehaving adapter\n // can't block the endpoint. Errors are collected, not thrown.\n router.get('/topology', async (_req: Request, res: Response) => {\n if (!container) {\n res.status(503).json({ error: 'topology unavailable — container not bound yet' })\n return\n }\n const kickApp = appRef?.__kickApp as TopologyApplicationLike \| undefined\n if (!kickApp) {\n res\n .status(503)\n .json({ error: 'topology unavailable — application surface not exposed' })\n return\n }\n try {\n const snapshot = await collectTopologySnapshot({ app: kickApp, container })\n res.json(snapshot)\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err)\n res.status(500).json({ error: 'topology collection failed', message })\n }\n })\n\n router.get('/ws', (_req: Request, res: Response) => {\n const wsAdapter = getPeerAdapters().find(\n (a) => a.name === 'WsAdapter' && typeof a.getStats === 'function',\n )\n if (!wsAdapter) {\n res.json({ enabled: false, message: 'WsAdapter not found' })\n return\n }\n res.json({ enabled: true, ...wsAdapter.getStats() })\n })\n\n router.get('/queues', async (_req: Request, res: Response) => {\n const queueAdapter = getPeerAdapters().find(\n (a) => a.name === 'QueueAdapter' && typeof a.getQueueNames === 'function',\n )\n if (!queueAdapter) {\n res.json({ enabled: false, message: 'QueueAdapter not found' })\n return\n }\n try {\n const names: string[] = queueAdapter.getQueueNames?.() ?? []\n const queues: any[] = []\n for (const name of names) {\n const stats = await queueAdapter.getQueueStats?.(name)\n queues.push({ name, ...stats })\n }\n res.json({ enabled: true, queues })\n } catch {\n res.json({ enabled: true, queues: [], error: 'Failed to fetch queue stats' })\n }\n })\n\n // ── Dependency graph ────────────────────────────────────────\n router.get('/graph', (_req: Request, res: Response) => {\n const registrations = container?.getRegistrations() ?? []\n const nodes = registrations\n .filter((r) => !r.token.startsWith('__hmr__'))\n .map((r) => ({\n id: r.token,\n kind: r.kind,\n scope: r.scope,\n resolveCount: r.resolveCount,\n }))\n const nodeIds = new Set(nodes.map((n) => n.id))\n const edges: Array<{ from: string; to: string }> = []\n for (const r of registrations) {\n if (r.token.startsWith('__hmr__')) continue\n for (const dep of r.dependencies) {\n if (nodeIds.has(dep)) {\n edges.push({ from: r.token, to: dep })\n }\n }\n }\n res.json({ nodes, edges })\n })\n\n // ── SSE stream for real-time updates ────────────────────────\n router.get('/stream', (req: Request, res: Response) => {\n res.writeHead(200, {\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache',\n Connection: 'keep-alive',\n })\n\n const sendMetrics = () => {\n const data = {\n type: 'metrics',\n requestCount: requestCount.value,\n errorCount: errorCount.value,\n clientErrorCount: clientErrorCount.value,\n errorRate: errorRate.value,\n uptimeSeconds: uptimeSeconds.value,\n }\n res.write(`data: ${JSON.stringify(data)}\\n\\n`)\n }\n sendMetrics()\n\n const unsubContainer = container?.onChange?.((changes) => {\n res.write(\n `data: ${JSON.stringify({ type: 'container', changes, timestamp: Date.now() })}\\n\\n`,\n )\n sendMetrics()\n })\n\n const stopRequestWatch = watch(requestCount, () => sendMetrics())\n const stopErrWatch = watch(errorCount, () => sendMetrics())\n\n const heartbeat = setInterval(() => {\n res.write(`: heartbeat\\n\\n`)\n }, 30000)\n\n req.on('close', () => {\n unsubContainer?.()\n stopRequestWatch()\n stopErrWatch()\n clearInterval(heartbeat)\n })\n })\n\n if (exposeConfig) {\n router.get('/config', (_req: Request, res: Response) => {\n const config: Record<string, string> = {}\n for (const [key, value] of Object.entries(process.env)) {\n if (value === undefined) continue\n const allowed = configPrefixes.some((prefix) => key.startsWith(prefix))\n config[key] = allowed ? value : '[REDACTED]'\n }\n res.json({ config })\n })\n }\n\n // Dashboard UI — Vue + Tailwind from public/devtools directory\n const publicDir = resolvePublicDir()\n if (publicDir) {\n router.use(serveStatic(publicDir))\n\n const indexHtml = readFileSync(join(publicDir, 'index.html'), 'utf-8')\n router.get('/', (_req: Request, res: Response) => {\n const html = indexHtml.replace('<body', `<body data-base=\"${basePath}\"`)\n res.type('html').send(html)\n })\n } else {\n router.get('/', (_req: Request, res: Response) => {\n res.type('html').send('<h1>DevTools: public directory not found</h1>')\n })\n }\n\n app.use(basePath, router)\n\n if (secret) {\n log.info(`DevTools mounted at ${basePath} [token: ${secret}]`)\n log.info(`Access: ${basePath}?token=${secret}`)\n } else {\n log.info(`DevTools mounted at ${basePath} [no guard]`)\n }\n },\n\n middleware(): AdapterMiddleware[] {\n if (!enabled) return []\n\n return [\n {\n handler: (req: Request, res: Response, next: NextFunction) => {\n const start = Date.now()\n requestCount.value++\n\n res.on('finish', () => {\n if (res.statusCode >= 500) errorCount.value++\n else if (res.statusCode >= 400) clientErrorCount.value++\n\n const routeKey = `${req.method} ${req.route?.path ?? req.path}`\n const elapsed = Date.now() - start\n\n if (!routeLatency[routeKey]) {\n routeLatency[routeKey] = {\n count: 0,\n totalMs: 0,\n minMs: Infinity,\n maxMs: 0,\n samples: [],\n }\n }\n const stats = routeLatency[routeKey]\n stats.count++\n stats.totalMs += elapsed\n stats.minMs = Math.min(stats.minMs, elapsed)\n stats.maxMs = Math.max(stats.maxMs, elapsed)\n stats.samples.push(elapsed)\n if (stats.samples.length > MAX_SAMPLES) stats.samples.shift()\n })\n\n next()\n },\n phase: 'beforeGlobal',\n },\n ]\n },\n\n onRouteMount(controllerClass, mountPath) {\n if (!enabled) return\n\n const collectedRoutes = getClassMeta<\n Array<{ method: string; path: string; handlerName: string }>\n >(METADATA.ROUTES, controllerClass, [])\n\n const classMiddleware = getClassMeta<any[]>(METADATA.CLASS_MIDDLEWARES, controllerClass, [])\n\n for (const route of collectedRoutes) {\n const methodMiddleware = getMethodMeta<any[]>(\n METADATA.METHOD_MIDDLEWARES,\n controllerClass.prototype,\n route.handlerName,\n [],\n )\n\n routes.push({\n method: route.method.toUpperCase(),\n path: `${mountPath}${route.path === '/' ? '' : route.path}`,\n controller: controllerClass.name,\n handler: route.handlerName,\n middleware: [\n ...classMiddleware.map((m: any) => m.name \|\| 'anonymous'),\n ...methodMiddleware.map((m: any) => m.name \|\| 'anonymous'),\n ],\n })\n }\n },\n\n afterStart({ server }) {\n if (!enabled) return\n // Wire the bus's WS upgrade to the framework's http.Server.\n // Path-based routing inside attachUpgrade means kickjs-ws or\n // any other adapter sharing the same listener stays\n // unaffected — only `${basePath}/_bus` is claimed.\n if (server) bus?.attachUpgrade(server)\n log.info(\n `DevTools ready — ${routes.length} routes tracked, ` +\n `${container?.getRegistrations().length ?? 0} DI bindings, ` +\n `event bus on ${basePath}/_bus`,\n )\n },\n\n shutdown() {\n stopErrorWatch?.()\n runtimeSampler?.stop()\n memoryAnalyzer?.stop()\n bus?.close()\n adapterStatuses['DevToolsAdapter'] = 'stopped'\n },\n }\n },\n})\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAyDA,MAAM,gCAAgC;;;;;;;;AAStC,eAAsB,wBACpB,MAC2B;CAC3B,MAAM,EAAE,KAAK,WAAW,sBAAsB,kCAAkC;CAChF,MAAM,SAA0B,EAAE;CAElC,MAAM,UAAU,MAAM,QAAQ,IAC5B,IAAI,YAAY,CAAC,KAAK,MAAM,YAAY,GAAG,UAAU,qBAAqB,OAAO,CAAC,CACnF;CACD,MAAM,WAAW,MAAM,QAAQ,IAC7B,IAAI,aAAa,CAAC,KAAK,MAAM,YAAY,GAAG,WAAW,qBAAqB,OAAO,CAAC,CACrF;AAED,QAAO;EACL,iBAAiB;EACjB,WAAW,KAAK,KAAK;EACrB;EACA;EACA,cAAc,oBAAoB,IAAI;EACtC,UAAU,cAAc,UAAU;EAClC;EACD;;;;;;;AAQH,eAAe,YACb,WACA,MACA,WACA,QACgC;CAChC,MAAM,OAAO,UAAU,QAAQ;CAC/B,MAAM,OAA8B;EAClC,iBAAiB;EACjB;EACA;EACD;AACD,KAAI,OAAO,UAAU,eAAe,WAAY,QAAO;AAEvD,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,CAChC,QAAQ,QAAQ,UAAU,YAAY,CAAC,EACvC,IAAI,SAAgB,GAAG,WACrB,iBACQ,uBAAO,IAAI,MAAM,gCAAgC,UAAU,IAAI,CAAC,EACtE,UACD,CACF,CACF,CAAC;AACF,MAAI,UAAU,OAAO,WAAW,UAAU;GAKxC,MAAM,OAAO;AACb,UAAO;IACL,iBAAiB;IACjB,MAAM,KAAK,QAAQ;IACnB,MAAM,KAAK,QAAQ;IACnB,SAAS,KAAK;IACd,OAAO,KAAK;IACZ,QAAQ,KAAK;IACb,SAAS,KAAK;IACd,aAAa,KAAK;IACnB;;AAEH,SAAO;UACA,KAAK;AACZ,SAAO,KAAK;GACV;GACA;GACA,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GAC1D,CAAC;AACF,SAAO;;;;AAKX,SAAS,cAAc,WAA4C;AACjE,QAAO,UACJ,kBAAkB,CAClB,QAAQ,MAAM,CAAC,EAAE,MAAM,WAAW,UAAU,CAAC,CAC7C,KAAK,OAAO;EACX,OAAO,EAAE;EACT,OAAO,EAAE;EACT,MAAM,EAAE;EACR,cAAc,EAAE;EACjB,EAAE;;;;;;;;;;;;;AAcP,SAAS,oBAAoB,KAA0D;CACrF,MAAM,uBAAO,IAAI,KAAuC;AAExD,KAAI,OAAO,IAAI,oBAAoB,YAAY;AAC7C,OAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE;AACrC,OAAI,KAAK,IAAI,EAAE,IAAI,CAAE;GAKrB,MAAM,SACJ,EAAE,WAAW,WAAW,WAAW;AACrC,QAAK,IAAI,EAAE,KAAK;IACd,KAAK,EAAE;IACP,QAAQ;IACR,WAAW,EAAE;IACd,CAAC;;AAEJ,SAAO,CAAC,GAAG,KAAK,QAAQ,CAAC;;CAI3B,MAAM,UACJ,MACA,WACS;AACT,MAAI,CAAC,KAAM;AACX,OAAK,MAAM,OAAO,MAAM;GACtB,MAAM,IAAI;GACV,MAAM,MAAM,OAAO,EAAE,QAAQ,WAAW,EAAE,MAAM;AAChD,OAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAE;AAC3B,QAAK,IAAI,KAAK;IACZ;IACA;IACA,WAAW,MAAM,QAAQ,EAAE,UAAU,GAAG,EAAE,YAAY,EAAE;IACzD,CAAC;;;AAIN,MAAK,MAAM,UAAU,IAAI,YAAY,CACnC,QAAO,OAAO,gBAAgB,EAAE,UAAU;AAE5C,MAAK,MAAM,WAAW,IAAI,aAAa,CACrC,QAAO,QAAQ,gBAAgB,EAAE,UAAU;AAG7C,QAAO,CAAC,GAAG,KAAK,QAAQ,CAAC;;;;ACjM3B,MAAM,mBAAmB,IAAI,IAAI;CAAC;CAAU;CAAU;CAAO,CAAC;;;;;;AAO9D,SAAgB,oBAAoB,KAAkD;CACpF,MAAM,OAAgC,EAAE;CACxC,MAAM,uBAAO,IAAI,KAAqB;CACtC,MAAM,SAAoD,EAAE;CAE5D,MAAM,UAAU,YAAoB,QAAuB;AACzD,MAAI,CAAC,MAAM,QAAQ,IAAI,EAAE;AACvB,UAAO,KAAK;IAAE,QAAQ;IAAY,QAAQ;IAA0C,CAAC;AACrF;;AAEF,OAAK,MAAM,SAAS,KAAK;GACvB,MAAM,aAAa,YAAY,MAAM;AACrC,OAAI,CAAC,WAAW,IAAI;AAClB,WAAO,KAAK;KAAE,QAAQ;KAAY,QAAQ,WAAW;KAAQ,CAAC;AAC9D;;GAEF,MAAM,MAAM,WAAW;GACvB,MAAM,QAAQ,KAAK,IAAI,IAAI,GAAG;AAC9B,OAAI,OAAO;AACT,WAAO,KAAK;KACV,QAAQ;KACR,QAAQ,WAAW,IAAI,GAAG,0BAA0B,MAAM;KAC3D,CAAC;AACF;;AAEF,QAAK,IAAI,IAAI,IAAI,WAAW;AAC5B,QAAK,KAAK,IAAI;;;AAIlB,MAAK,MAAM,UAAU,IAAI,YAAY,EAAE;AACrC,MAAI,OAAO,OAAO,iBAAiB,WAAY;AAC/C,MAAI;AACF,UAAO,OAAO,QAAQ,oBAAoB,OAAO,cAAc,CAAC;WACzD,KAAK;AACZ,UAAO,KAAK;IACV,QAAQ,OAAO,QAAQ;IACvB,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IACzD,CAAC;;;AAGN,MAAK,MAAM,WAAW,IAAI,aAAa,EAAE;AACvC,MAAI,OAAO,QAAQ,iBAAiB,WAAY;AAChD,MAAI;AACF,UAAO,QAAQ,QAAQ,qBAAqB,QAAQ,cAAc,CAAC;WAC5D,KAAK;AACZ,UAAO,KAAK;IACV,QAAQ,QAAQ,QAAQ;IACxB,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IACzD,CAAC;;;AAIN,QAAO;EAAE;EAAM;EAAQ;;;;;;;;AAmBzB,SAAS,YAAY,KAA6C;AAChE,KAAI,CAAC,OAAO,OAAO,QAAQ,SACzB,QAAO;EAAE,IAAI;EAAO,QAAQ;EAA8B;CAE5D,MAAM,MAAM;AACZ,KAAI,OAAO,IAAI,OAAO,YAAY,IAAI,GAAG,WAAW,EAClD,QAAO;EAAE,IAAI;EAAO,QAAQ;EAAqC;AAEnE,KAAI,OAAO,IAAI,UAAU,YAAY,IAAI,MAAM,WAAW,EACxD,QAAO;EAAE,IAAI;EAAO,QAAQ,QAAQ,IAAI,GAAG;EAAsC;CAEnF,MAAM,OAAO,IAAI;AACjB,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;EAAE,IAAI;EAAO,QAAQ,QAAQ,IAAI,GAAG;EAA6B;AAE1E,KAAI,OAAO,KAAK,SAAS,YAAY,CAAC,iBAAiB,IAAI,KAAK,KAAK,CACnE,QAAO;EACL,IAAI;EACJ,QAAQ,QAAQ,IAAI,GAAG;EACxB;AAEH,SAAQ,KAAK,MAAb;EACE,KAAK;AACH,OAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,IAAI,WAAW,EACtD,QAAO;IAAE,IAAI;IAAO,QAAQ,QAAQ,IAAI,GAAG;IAA0C;AAEvF;EACF,KAAK;AACH,OAAI,OAAO,KAAK,SAAS,SACvB,QAAO;IAAE,IAAI;IAAO,QAAQ,QAAQ,IAAI,GAAG;IAAoC;AAEjF;EACF,KAAK;AACH,OAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,CAC9B,QAAO;IAAE,IAAI;IAAO,QAAQ,QAAQ,IAAI,GAAG;IAAwC;AAErF;;AAEJ,QAAO;EAAE,IAAI;EAAM,KAAK;EAAyC;;;;ACnEnE,SAAgB,gBAAgB,OAAyB,EAAE,EAAa;CACtE,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,SAAS,KAAK,UAAU;CAC9B,MAAM,OAAO,eAAe;CAC5B,MAAM,MAAM,IAAI,gBAAgB,EAAE,UAAU,MAAM,CAAC;CACnD,MAAM,0BAAU,IAAI,KAAgB;CACpC,IAAI,iBAAqC;CACzC,IAAI,iBAAwF;AAE5F,KAAI,GAAG,eAAe,OAAkB;AACtC,UAAQ,IAAI,GAAG;AACf,KAAG,GAAG,YAAY,SAA0B;AAC1C,OAAI;IACF,MAAM,OAAO,OAAO,SAAS,WAAW,OAAO,KAAK,SAAS,QAAQ;IACrE,MAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,QAAI,CAAC,UAAU,OAAO,OAAO,SAAS,YAAY,OAAO,OAAO,OAAO,SAAU;AAIjF,SAAK,SAAS;KAAE,GAAG;KAAQ,eAAe;KAAM,CAAsB;WAChE;IAIR;AACF,KAAG,GAAG,eAAe;AACnB,WAAQ,OAAO,GAAG;IAClB;AACF,KAAG,GAAG,eAAe;AACnB,WAAQ,OAAO,GAAG;IAClB;GACF;CAEF,MAAM,UAAU,aAAmC;AACjD,MAAI,QAAQ,SAAS,EAAG;EACxB,MAAM,OAAO,KAAK,UAAU,SAAS;AACrC,OAAK,MAAM,UAAU,QAGnB,KAAI,OAAO,eAAe,OAAO,KAC/B,KAAI;AACF,UAAO,KAAK,KAAK;UACX;;CAQd,MAAM,aAAa,QAAkC;AACnD,MAAI,WAAW,MAAO,QAAO;EAC7B,MAAM,SAAS,IAAI,QAAQ;AAC3B,MAAI,OAAO,WAAW,YAAY,WAAW,OAAQ,QAAO;EAE5D,MAAM,MAAM,IAAI,OAAO;EACvB,MAAM,WAAW,IAAI,QAAQ,IAAI;AACjC,MAAI,aAAa,GAAI,QAAO;AAE5B,SADe,IAAI,gBAAgB,IAAI,MAAM,WAAW,EAAE,CAAC,CAC7C,IAAI,QAAQ,KAAK;;CAGjC,MAAM,iBAAiB,eAAkC;AACvD,MAAI,eAAgB;AACpB,mBAAiB;AACjB,oBAAkB,KAAK,QAAQ,SAAS;AAMtC,QAFY,IAAI,OAAO,IACF,MAAM,IAAI,CAAC,OACf,OAAQ;AAEzB,OAAI,CAAC,UAAU,IAAI,EAAE;AACnB,WAAO,MAAM,oCAAoC;AACjD,WAAO,SAAS;AAChB;;AAGF,OAAI,cAAc,KAAK,QAAQ,OAAO,OAAkB;AACtD,QAAI,KAAK,cAAc,IAAI,IAAI;KAC/B;;AAEJ,aAAW,GAAG,WAAW,eAAe;;CAG1C,MAAM,cAAoB;AACxB,MAAI,kBAAkB,eACpB,gBAAe,IAAI,WAAW,eAAe;AAE/C,mBAAiB;AACjB,mBAAiB;AACjB,OAAK,MAAM,UAAU,QACnB,KAAI;AACF,UAAO,OAAO;UACR;AAIV,UAAQ,OAAO;AACf,MAAI,OAAO;;AAGb,QAAO;EACL,GAAG,MAAc,SAAkD;AACjE,UAAO,KAAK,GAAG,MAAM,QAAQ;;EAE/B,MAAM,SAA0D;AAC9D,UAAO,KAAK,MAAM,QAAQ;;EAE5B,KAAK,MAAc,SAAwB;GACzC,MAAM,WAA2B;IAC/B;IACA;IACA,IAAI,KAAK,KAAK;IACd,eAAe;IAChB;AACD,QAAK,SAAS,SAAS;AACvB,UAAO,SAAS;;EAElB;EACA;EACA,mBAAmB,QAAQ;EAC5B;;;;ACnKH,MAAM,MAAM,aAAa,WAAW;AAqBpC,MAAM,cAAc;;AAGpB,SAAS,WAAW,QAAkB,GAAmB;AACvD,KAAI,OAAO,WAAW,EAAG,QAAO;CAChC,MAAM,MAAM,KAAK,KAAK,IAAI,OAAO,OAAO,GAAG;AAC3C,QAAO,OAAO,KAAK,IAAI,GAAG,IAAI;;;AAIhC,SAAS,mBAAmB,OAA8D;CACxF,MAAM,SAAS,CAAC,GAAG,MAAM,QAAQ,CAAC,UAAU,GAAG,MAAM,IAAI,EAAE;AAC3D,QAAO;EACL,KAAK,WAAW,QAAQ,GAAI;EAC5B,KAAK,WAAW,QAAQ,IAAK;EAC7B,KAAK,WAAW,QAAQ,IAAK;EAC9B;;;;;;;AAQH,SAAS,cAAc,KAAc,KAAqB;AACxD,KAAI,UAAU,KAAK;EACjB,gBAAgB;EAChB,iBAAiB;EACjB,YAAY;EACZ,qBAAqB;EACtB,CAAC;AACF,KAAI,gBAAgB;;;AAQtB,SAAS,cAAc,KAAe,SAAwB;AAC5D,KAAI,MAAM,SAAS,KAAK,UAAU,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;AAenD,IAAI,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgHzB,MAAa,kBAAkB,cAA0D;CACvF,MAAM;CACN,UAAU;EACR,UAAU;EACV,oBAAoB;EACpB,cAAc;EACd,gBAAgB,CAAC,QAAQ,WAAW;EACrC;CACD,QAAQ,YAAY;EAClB,MAAM,WAAW,QAAQ;EACzB,MAAM,UAAU,QAAQ,WAAW,QAAQ,IAAI,aAAa;EAC5D,MAAM,eAAe,QAAQ;EAC7B,MAAM,iBAAiB,QAAQ;EAC/B,MAAM,qBAAqB,QAAQ;EACnC,MAAM,eAAe,QAAQ,YAAY,EAAE;EAG3C,IAAI;AACJ,MAAI,QAAQ,WAAW,MACrB,UAAS;WACA,QAAQ,OACjB,UAAS,QAAQ;MAEjB,UAAS,YAAY,GAAG,CAAC,SAAS,MAAM;EAO1C,MAAM,iBAAiB,QAAQ,SAAS,WAAW;EACnD,MAAM,iBAAiB,iBACnB,IAAI,eAAe;GACjB,YAAY,QAAQ,SAAS,cAAc;GAC3C,YAAY,QAAQ,SAAS,cAAc;GAC5C,CAAC,GACF;EACJ,MAAM,iBAAiB,iBAAiB,IAAI,gBAAgB,GAAG;EAe/D,IAAI,MAAwB;EAE5B,MAAM,aAAa,cAAoC;AACrD,OAAI,UAAU,IAAI,aAAa,EAAE;AAM/B,UAAM,UAAU,QAAmB,aAAa;AAChD,WAAO;;AAET,SAAM,UACF,gBAAgB;IACd,QAAQ,GAAG,SAAS;IACpB,QAAQ,WAAW,QAAQ,QAAQ;IACpC,CAAC,GACD;IACC,gBAAgB;IAChB,mBAAmB;IACnB,YAAY;IACZ,qBAAqB;IACrB,aAAa;IACb,mBAAmB;IACpB;AACL,aAAU,iBAAiB,cAAc,IAAI;AAC7C,UAAO;;EAIT,MAAM,eAAe,IAAI,EAAE;EAC3B,MAAM,aAAa,IAAI,EAAE;EACzB,MAAM,mBAAmB,IAAI,EAAE;EAC/B,MAAM,YAAY,IAAI,KAAK,KAAK,CAAC;EACjC,MAAM,eAAe,SAAqC,EAAE,CAAC;EAE7D,MAAM,YAAY,eAChB,aAAa,QAAQ,IAAI,WAAW,QAAQ,aAAa,QAAQ,EAClE;EAED,MAAM,gBAAgB,eAAe,KAAK,OAAO,KAAK,KAAK,GAAG,UAAU,SAAS,IAAK,CAAC;EAGvF,IAAI,SAAsB,EAAE;EAC5B,IAAI,YAA8B;EAClC,IAAI,SAAc;EAClB,MAAM,kBAA0C,EAAE;EAClD,IAAI,iBAAsC;AAG1C,MAAI,QAAQ,qBAAqB;GAC/B,MAAM,WAAW,QAAQ;AACzB,oBAAiB,MAAM,YAAY,SAAS;AAC1C,QAAI,OAAO,mBACT,UAAS,KAAK;KAEhB;QAEF,kBAAiB,MAAM,YAAY,SAAS;AAC1C,OAAI,OAAO,mBACT,KAAI,KAAK,yBAAyB,OAAO,KAAK,QAAQ,EAAE,CAAC,GAAG;IAE9D;;;;;;;EASJ,MAAM,yBAAwC;GAC5C,MAAM,UAAU,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC;GACvD,MAAM,aAAa;IACjB,KAAK,SAAS,MAAM,UAAU,MAAM;IACpC,KAAK,SAAS,MAAM,MAAM,UAAU,MAAM;IAC1C,KAAK,SAAS,MAAM,UAAU,WAAW;IACzC,KAAK,SAAS,MAAM,MAAM,UAAU,WAAW;IAChD;AACD,QAAK,MAAM,OAAO,WAChB,KAAI,WAAW,KAAK,KAAK,aAAa,CAAC,CAAE,QAAO;AAElD,UAAO;;;;;;;EAQT,MAAM,wBAA+B;GACnC,MAAM,UAAU,QAAQ;AACxB,OAAI,WAAW,OAAO,QAAQ,gBAAgB,WAC5C,QAAO,QAAQ,aAAa;AAE9B,UAAO;;AAGT,SAAO;GAEL;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GAMA,aAAoC;AAClC,WAAO;KACL,iBAAiB;KACjB,MAAM;KACN,MAAM;KACN,OAAO;MACL;MACA;MACA;MACA,QAAQ,WAAW,QAAQ,QAAQ;MACpC;KACD,SAAS;MACP,cAAc,aAAa;MAC3B,cAAc,WAAW;MACzB,cAAc,iBAAiB;MAC/B,eAAe,cAAc;MAC7B,eAAe,OAAO;MACvB;KACF;;GAKH,YAAY,EAAE,KAAK,WAAW,gBAAgB;AAC5C,QAAI,CAAC,QAAS;AAEd,aAAS;AACT,gBAAY;AAIZ,cAAU,aAAa;AACvB,cAAU,QAAQ,KAAK,KAAK;AAE5B,aAAS,EAAE;AACX,oBAAgB,qBAAqB;AAKrC,oBAAgB,OAAO;AACvB,oBAAgB,OAAO;IAEvB,MAAM,SAAS,QAAQ;AAGvB,QAAI,WAAW,OAAO;KACpB,MAAM,QAAQ;AACd,YAAO,KAAK,KAAc,KAAe,SAAuB;AAE9D,WADiB,IAAI,QAAQ,uBAAuB,IAAI,OAAO,WAC9C,MAAO,QAAO,MAAM;AAErC,UAAI,IAAI,SAAS,OAAO,IAAI,WAAW,SAAS,CAAC,IAAI,OAAO,MAC1D,QAAO,MAAM;AAGf,UAAI,IAAI,KAAK,SAAS,MAAM,IAAI,IAAI,KAAK,SAAS,OAAO,CACvD,QAAO,MAAM;AAEf,UAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,iDAAiD,CAAC;OAChF;;AAGJ,WAAO,IAAI,YAAY,MAAe,QAAkB;AACtD,SAAI,KAAK,EAAE,QAAQ,CAAC;MACpB;AAEF,WAAO,IAAI,eAAe,MAAe,QAAkB;KACzD,MAAM,gBAAgB,WAAW,kBAAkB,IAAI,EAAE;AACzD,SAAI,KAAK;MAAE;MAAe,OAAO,cAAc;MAAQ,CAAC;MACxD;AAEF,WAAO,IAAI,aAAa,MAAe,QAAkB;KAEvD,MAAM,UAA+B,EAAE;AACvC,UAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,aAAa,EAAE;MACvD,MAAM,EAAE,SAAS,GAAG,GAAG,SAAS;AAChC,cAAQ,OAAO;OAAE,GAAG;OAAM,GAAG,mBAAmB,MAAM;OAAE;;AAE1D,SAAI,KAAK;MACP,UAAU,aAAa;MACvB,cAAc,WAAW;MACzB,cAAc,iBAAiB;MAC/B,WAAW,UAAU;MACrB,eAAe,cAAc;MAC7B,WAAW,IAAI,KAAK,UAAU,MAAM,CAAC,aAAa;MAClD,cAAc;MACf,CAAC;MACF;AAEF,WAAO,IAAI,YAAY,MAAe,QAAkB;KACtD,MAAM,UAAU,UAAU,QAAQ;KAClC,MAAM,SAAS,UAAU,YAAY;AAErC,SAAI,OAAO,UAAU,MAAM,IAAI,CAAC,KAAK;MACnC;MACA,WAAW,UAAU;MACrB,QAAQ,cAAc;MACtB,UAAU;MACX,CAAC;MACF;AAEF,WAAO,IAAI,WAAW,MAAe,QAAkB;KACrD,MAAM,YAAY,iBAAiB,CAAC,MACjC,MAAM,EAAE,SAAS,eAAe,OAAO,EAAE,aAAa,WACxD;AACD,SAAI,KAAK;MACP,UAAU;OACR,cAAc,aAAa;OAC3B,YAAY,WAAW;OACvB,kBAAkB,iBAAiB;OACnC,WAAW,UAAU;OACrB,eAAe,cAAc;OAC7B,WAAW,IAAI,KAAK,UAAU,MAAM,CAAC,aAAa;OACnD;MACD,QAAQ,OAAO;MACf,WAAW,WAAW,kBAAkB,CAAC,UAAU;MACnD;MACA,GAAI,YAAY,EAAE,IAAI,UAAU,UAAU,EAAE,GAAG,EAAE;MAClD,CAAC;MACF;AAOF,WAAO,IAAI,aAAa,MAAe,QAAkB;AACvD,SAAI,CAAC,kBAAkB,CAAC,gBAAgB;AACtC,UAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,yDAAyD,CAAC;AACxF;;KAEF,MAAM,SAAS,eAAe,QAAQ;KACtC,MAAM,UAAU,eAAe,SAAS;KACxC,MAAM,SAAS,eAAe,OAAO,QAAQ;AAC7C,SAAI,KAAK;MACP,iBAAiB;MACjB;MACA;MACA;MACD,CAAC;MACF;AAMF,WAAO,IAAI,oBAAoB,KAAc,QAAkB;AAC7D,SAAI,CAAC,gBAAgB;AACnB,UAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,4BAA4B,CAAC;AAC3D;;AAEF,mBAAc,KAAK,IAAI;KACvB,MAAM,aAAa,QAAQ,SAAS,cAAc;KAClD,MAAM,aAAmB;MACvB,MAAM,OAAO,eAAe,QAAQ;AACpC,UAAI,KAAM,eAAc,KAAK,KAAK;;AAEpC,WAAM;KACN,MAAM,WAAW,YAAY,MAAM,WAAW;KAC9C,MAAM,YAAY,kBAAkB,IAAI,MAAM,kBAAkB,EAAE,IAAO;AACzE,SAAI,GAAG,eAAe;AACpB,oBAAc,SAAS;AACvB,oBAAc,UAAU;OACxB;MACF;AAGF,WAAO,IAAI,mBAAmB,KAAc,QAAkB;AAC5D,SAAI,CAAC,kBAAkB,CAAC,gBAAgB;AACtC,UAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,4BAA4B,CAAC;AAC3D;;AAEF,mBAAc,KAAK,IAAI;KACvB,MAAM,aAAa,QAAQ,SAAS,cAAc;KAClD,MAAM,aAAmB;MACvB,MAAM,OAAO,eAAe,QAAQ;AACpC,UAAI,CAAC,KAAM;AAEX,oBAAc,KAAK;OAAE,UAAU;OAAM,QADtB,eAAe,OAAO,eAAe,SAAS,CAAC;OACjB,CAAC;;AAEhD,WAAM;KACN,MAAM,WAAW,YAAY,MAAM,WAAW;KAC9C,MAAM,YAAY,kBAAkB,IAAI,MAAM,kBAAkB,EAAE,IAAO;AACzE,SAAI,GAAG,eAAe;AACpB,oBAAc,SAAS;AACvB,oBAAc,UAAU;OACxB;MACF;AAcF,WAAO,KAAK,qBAAqB,MAAe,QAAkB;AAChE,SAAI,oBAAoB;AACtB,UACG,OAAO,IAAI,CACX,KAAK,EAAE,OAAO,+DAA+D,CAAC;AACjF;;AAEF,0BAAqB;KACrB,MAAM,YAAY,KAAK,KAAK;KAC5B,MAAM,WAAW,gCAAe,IAAI,MAAM,EAAC,aAAa,CAAC,QAAQ,SAAS,IAAI,CAAC;KAC/E,MAAM,aAAa,KAAK,QAAQ,EAAE,SAAS;KAE3C,IAAI;AACJ,SAAI;AAIF,gBAAU,kBAAkB,WAAW;cAChC,KAAK;AACZ,2BAAqB;AACrB,UAAI,MAAM,EAAE,KAAK,EAAE,+BAA+B;AAClD,UACG,OAAO,IAAI,CACX,KAAK;OAAE,OAAO;OAA2B,SAAU,IAAc;OAAS,CAAC;AAC9E;;KAGF,IAAI,OAAO;AACX,SAAI;AACF,aAAO,SAAS,QAAQ,CAAC;aACnB;KAGR,MAAM,YAAY,KAAK,KAAK,GAAG;AAC/B,SAAI,KACF,2BAA2B,QAAQ,KAAK,OAAO,OAAO,MAAM,QAAQ,EAAE,CAAC,UAAU,UAAU,KAC5F;AAED,SAAI,UAAU,gBAAgB,mBAAmB;AACjD,SAAI,UAAU,uBAAuB,yBAAyB,SAAS,GAAG;AAC1E,SAAI,OAAO,EAAG,KAAI,UAAU,kBAAkB,OAAO,KAAK,CAAC;AAC3D,SAAI,UAAU,yBAAyB,OAAO,UAAU,CAAC;KAEzD,MAAM,gBAAsB;AAC1B,aAAO,UAAU,QAAQ;AACvB,WAAI,IAAK,KAAI,KAAK,kCAAkC,QAAQ,IAAI,IAAI,UAAU;AAC9E,4BAAqB;QACrB;;KAEJ,MAAM,SAAS,iBAAiB,QAAQ;AACxC,YAAO,GAAG,OAAO,QAAQ;AACzB,YAAO,GAAG,UAAU,QAAQ;AAC1B,UAAI,MAAM,EAAE,KAAK,EAAE,8BAA8B;AACjD,UAAI,CAAC,IAAI,YAAa,KAAI,OAAO,IAAI,CAAC,KAAK;AAC3C,eAAS;OACT;AAGF,SAAI,GAAG,eAAe;AACpB,aAAO,SAAS;OAIhB;AACF,YAAO,KAAK,IAAI;MAChB;AAWF,WAAO,KAAK,eAAe,MAAe,QAAkB;KAC1D,MAAM,KAAM,WAAmC;AAC/C,SAAI,OAAO,OAAO,YAAY;AAC5B,UAAI,OAAO,IAAI,CAAC,KAAK,EACnB,OAAO,+EACR,CAAC;AACF;;KAEF,MAAM,SAAS,QAAQ,aAAa,CAAC;KACrC,MAAM,YAAY,KAAK,KAAK;AAC5B,SAAI;AACF,UAAI;cACG,KAAK;AACZ,UAAI,OAAO,IAAI,CAAC,KAAK;OACnB,OAAO;OACP,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;OAC1D,CAAC;AACF;;KAEF,MAAM,QAAQ,QAAQ,aAAa,CAAC;KACpC,MAAM,iBAAiB,KAAK,IAAI,GAAG,SAAS,MAAM;KAClD,MAAM,YAAY,KAAK,KAAK,GAAG;AAC/B,SAAI,KACF,wBAAwB,iBAAiB,OAAO,MAAM,QAAQ,EAAE,CAAC,UAAU,UAAU,IACtF;AACD,SAAI,KAAK;MAAE;MAAQ;MAAO;MAAgB;MAAW,CAAC;MACtD;AAOF,WAAO,IAAI,UAAU,MAAe,QAAkB;KACpD,MAAM,UAAU,QAAQ;AACxB,SAAI,CAAC,SAAS;AACZ,UAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,sDAAsD,CAAC;AACrF;;AAEF,SAAI,KAAK,oBAAoB,QAAQ,CAAC;MACtC;AAOF,WAAO,IAAI,aAAa,OAAO,MAAe,QAAkB;AAC9D,SAAI,CAAC,WAAW;AACd,UAAI,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,kDAAkD,CAAC;AACjF;;KAEF,MAAM,UAAU,QAAQ;AACxB,SAAI,CAAC,SAAS;AACZ,UACG,OAAO,IAAI,CACX,KAAK,EAAE,OAAO,0DAA0D,CAAC;AAC5E;;AAEF,SAAI;MACF,MAAM,WAAW,MAAM,wBAAwB;OAAE,KAAK;OAAS;OAAW,CAAC;AAC3E,UAAI,KAAK,SAAS;cACX,KAAK;MACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAI,OAAO,IAAI,CAAC,KAAK;OAAE,OAAO;OAA8B;OAAS,CAAC;;MAExE;AAEF,WAAO,IAAI,QAAQ,MAAe,QAAkB;KAClD,MAAM,YAAY,iBAAiB,CAAC,MACjC,MAAM,EAAE,SAAS,eAAe,OAAO,EAAE,aAAa,WACxD;AACD,SAAI,CAAC,WAAW;AACd,UAAI,KAAK;OAAE,SAAS;OAAO,SAAS;OAAuB,CAAC;AAC5D;;AAEF,SAAI,KAAK;MAAE,SAAS;MAAM,GAAG,UAAU,UAAU;MAAE,CAAC;MACpD;AAEF,WAAO,IAAI,WAAW,OAAO,MAAe,QAAkB;KAC5D,MAAM,eAAe,iBAAiB,CAAC,MACpC,MAAM,EAAE,SAAS,kBAAkB,OAAO,EAAE,kBAAkB,WAChE;AACD,SAAI,CAAC,cAAc;AACjB,UAAI,KAAK;OAAE,SAAS;OAAO,SAAS;OAA0B,CAAC;AAC/D;;AAEF,SAAI;MACF,MAAM,QAAkB,aAAa,iBAAiB,IAAI,EAAE;MAC5D,MAAM,SAAgB,EAAE;AACxB,WAAK,MAAM,QAAQ,OAAO;OACxB,MAAM,QAAQ,MAAM,aAAa,gBAAgB,KAAK;AACtD,cAAO,KAAK;QAAE;QAAM,GAAG;QAAO,CAAC;;AAEjC,UAAI,KAAK;OAAE,SAAS;OAAM;OAAQ,CAAC;aAC7B;AACN,UAAI,KAAK;OAAE,SAAS;OAAM,QAAQ,EAAE;OAAE,OAAO;OAA+B,CAAC;;MAE/E;AAGF,WAAO,IAAI,WAAW,MAAe,QAAkB;KACrD,MAAM,gBAAgB,WAAW,kBAAkB,IAAI,EAAE;KACzD,MAAM,QAAQ,cACX,QAAQ,MAAM,CAAC,EAAE,MAAM,WAAW,UAAU,CAAC,CAC7C,KAAK,OAAO;MACX,IAAI,EAAE;MACN,MAAM,EAAE;MACR,OAAO,EAAE;MACT,cAAc,EAAE;MACjB,EAAE;KACL,MAAM,UAAU,IAAI,IAAI,MAAM,KAAK,MAAM,EAAE,GAAG,CAAC;KAC/C,MAAM,QAA6C,EAAE;AACrD,UAAK,MAAM,KAAK,eAAe;AAC7B,UAAI,EAAE,MAAM,WAAW,UAAU,CAAE;AACnC,WAAK,MAAM,OAAO,EAAE,aAClB,KAAI,QAAQ,IAAI,IAAI,CAClB,OAAM,KAAK;OAAE,MAAM,EAAE;OAAO,IAAI;OAAK,CAAC;;AAI5C,SAAI,KAAK;MAAE;MAAO;MAAO,CAAC;MAC1B;AAGF,WAAO,IAAI,YAAY,KAAc,QAAkB;AACrD,SAAI,UAAU,KAAK;MACjB,gBAAgB;MAChB,iBAAiB;MACjB,YAAY;MACb,CAAC;KAEF,MAAM,oBAAoB;MACxB,MAAM,OAAO;OACX,MAAM;OACN,cAAc,aAAa;OAC3B,YAAY,WAAW;OACvB,kBAAkB,iBAAiB;OACnC,WAAW,UAAU;OACrB,eAAe,cAAc;OAC9B;AACD,UAAI,MAAM,SAAS,KAAK,UAAU,KAAK,CAAC,MAAM;;AAEhD,kBAAa;KAEb,MAAM,iBAAiB,WAAW,YAAY,YAAY;AACxD,UAAI,MACF,SAAS,KAAK,UAAU;OAAE,MAAM;OAAa;OAAS,WAAW,KAAK,KAAK;OAAE,CAAC,CAAC,MAChF;AACD,mBAAa;OACb;KAEF,MAAM,mBAAmB,MAAM,oBAAoB,aAAa,CAAC;KACjE,MAAM,eAAe,MAAM,kBAAkB,aAAa,CAAC;KAE3D,MAAM,YAAY,kBAAkB;AAClC,UAAI,MAAM,kBAAkB;QAC3B,IAAM;AAET,SAAI,GAAG,eAAe;AACpB,wBAAkB;AAClB,wBAAkB;AAClB,oBAAc;AACd,oBAAc,UAAU;OACxB;MACF;AAEF,QAAI,aACF,QAAO,IAAI,YAAY,MAAe,QAAkB;KACtD,MAAM,SAAiC,EAAE;AACzC,UAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,IAAI,EAAE;AACtD,UAAI,UAAU,KAAA,EAAW;AAEzB,aAAO,OADS,eAAe,MAAM,WAAW,IAAI,WAAW,OAAO,CAAC,GAC/C,QAAQ;;AAElC,SAAI,KAAK,EAAE,QAAQ,CAAC;MACpB;IAIJ,MAAM,YAAY,kBAAkB;AACpC,QAAI,WAAW;AACb,YAAO,IAAIA,SAAY,UAAU,CAAC;KAElC,MAAM,YAAY,aAAa,KAAK,WAAW,aAAa,EAAE,QAAQ;AACtE,YAAO,IAAI,MAAM,MAAe,QAAkB;MAChD,MAAM,OAAO,UAAU,QAAQ,SAAS,oBAAoB,SAAS,GAAG;AACxE,UAAI,KAAK,OAAO,CAAC,KAAK,KAAK;OAC3B;UAEF,QAAO,IAAI,MAAM,MAAe,QAAkB;AAChD,SAAI,KAAK,OAAO,CAAC,KAAK,gDAAgD;MACtE;AAGJ,QAAI,IAAI,UAAU,OAAO;AAEzB,QAAI,QAAQ;AACV,SAAI,KAAK,uBAAuB,SAAS,WAAW,OAAO,GAAG;AAC9D,SAAI,KAAK,WAAW,SAAS,SAAS,SAAS;UAE/C,KAAI,KAAK,uBAAuB,SAAS,aAAa;;GAI1D,aAAkC;AAChC,QAAI,CAAC,QAAS,QAAO,EAAE;AAEvB,WAAO,CACL;KACE,UAAU,KAAc,KAAe,SAAuB;MAC5D,MAAM,QAAQ,KAAK,KAAK;AACxB,mBAAa;AAEb,UAAI,GAAG,gBAAgB;AACrB,WAAI,IAAI,cAAc,IAAK,YAAW;gBAC7B,IAAI,cAAc,IAAK,kBAAiB;OAEjD,MAAM,WAAW,GAAG,IAAI,OAAO,GAAG,IAAI,OAAO,QAAQ,IAAI;OACzD,MAAM,UAAU,KAAK,KAAK,GAAG;AAE7B,WAAI,CAAC,aAAa,UAChB,cAAa,YAAY;QACvB,OAAO;QACP,SAAS;QACT,OAAO;QACP,OAAO;QACP,SAAS,EAAE;QACZ;OAEH,MAAM,QAAQ,aAAa;AAC3B,aAAM;AACN,aAAM,WAAW;AACjB,aAAM,QAAQ,KAAK,IAAI,MAAM,OAAO,QAAQ;AAC5C,aAAM,QAAQ,KAAK,IAAI,MAAM,OAAO,QAAQ;AAC5C,aAAM,QAAQ,KAAK,QAAQ;AAC3B,WAAI,MAAM,QAAQ,SAAS,YAAa,OAAM,QAAQ,OAAO;QAC7D;AAEF,YAAM;;KAER,OAAO;KACR,CACF;;GAGH,aAAa,iBAAiB,WAAW;AACvC,QAAI,CAAC,QAAS;IAEd,MAAM,kBAAkB,aAEtB,SAAS,QAAQ,iBAAiB,EAAE,CAAC;IAEvC,MAAM,kBAAkB,aAAoB,SAAS,mBAAmB,iBAAiB,EAAE,CAAC;AAE5F,SAAK,MAAM,SAAS,iBAAiB;KACnC,MAAM,mBAAmB,cACvB,SAAS,oBACT,gBAAgB,WAChB,MAAM,aACN,EAAE,CACH;AAED,YAAO,KAAK;MACV,QAAQ,MAAM,OAAO,aAAa;MAClC,MAAM,GAAG,YAAY,MAAM,SAAS,MAAM,KAAK,MAAM;MACrD,YAAY,gBAAgB;MAC5B,SAAS,MAAM;MACf,YAAY,CACV,GAAG,gBAAgB,KAAK,MAAW,EAAE,QAAQ,YAAY,EACzD,GAAG,iBAAiB,KAAK,MAAW,EAAE,QAAQ,YAAY,CAC3D;MACF,CAAC;;;GAIN,WAAW,EAAE,UAAU;AACrB,QAAI,CAAC,QAAS;AAKd,QAAI,OAAQ,MAAK,cAAc,OAAO;AACtC,QAAI,KACF,oBAAoB,OAAO,OAAO,mBAC7B,WAAW,kBAAkB,CAAC,UAAU,EAAE,6BAC7B,SAAS,OAC5B;;GAGH,WAAW;AACT,sBAAkB;AAClB,oBAAgB,MAAM;AACtB,oBAAgB,MAAM;AACtB,SAAK,OAAO;AACZ,oBAAgB,qBAAqB;;GAExC;;CAEJ,CAAC"}
1	+ {"version":3,"file":"index.mjs","names":["serveStatic"],"sources":["../src/topology.ts","../src/devtools-tabs.ts","../src/bus/server.ts","../src/adapter.ts"],"sourcesContent":["/*\n Topology aggregator — walks the running KickJS application + DI\n * container and produces a JSON-serialisable {@link TopologySnapshot}.\n \n Calls `introspect()` on every plugin and adapter that implements it\n * (architecture.md §23.3); falls back to a minimal `{ protocolVersion,\n * name, kind }` stub for primitives that don't. Per-primitive\n * introspection failures are caught + collected into the snapshot's\n * `errors` field rather than failing the entire endpoint.\n \n @module @forinda/kickjs-devtools/topology\n /\n\nimport type { AppAdapter, Container, KickPlugin } from '@forinda/kickjs'\nimport {\n PROTOCOL_VERSION,\n type IntrospectionSnapshot,\n type TopologyContributorEntry,\n type TopologyError,\n type TopologySnapshot,\n type TopologyTokenEntry,\n} from '@forinda/kickjs-devtools-kit'\n\n/* Minimal Application surface the aggregator needs — keeps coupling thin. /\nexport interface TopologyApplicationLike {\n getAdapters(): AppAdapter[]\n getPlugins(): readonly KickPlugin[]\n /\n Optional in older Application implementations — when present, returns\n * the union of contributors across adapters/plugins/global with proper\n * source labels. The topology aggregator prefers this over walking\n * `adapter.contributors()` + `plugin.contributors()` directly because\n * the application-level walk preserves source provenance.\n /\n getContributors?(): ReadonlyArray<{\n key: string\n source: 'adapter' \| 'plugin' \| 'module' \| 'global'\n label: string\n dependsOn: readonly string[]\n }>\n}\n\n/* Inputs to {@link collectTopologySnapshot}. /\nexport interface CollectTopologyOptions {\n /* The running KickJS application (or anything that exposes its surface). /\n app: TopologyApplicationLike\n /* The DI container — used to enumerate registered tokens. /\n container: Container\n /\n Optional per-call introspect timeout in milliseconds. An adapter\n * whose `introspect()` doesn't settle within the budget gets a stub\n * snapshot + an entry in `errors`. Default: 100ms — keeps the\n * topology endpoint snappy even if one adapter misbehaves.\n /\n introspectTimeoutMs?: number\n}\n\nconst DEFAULT_INTROSPECT_TIMEOUT_MS = 100\n\n/\n Collect a {@link TopologySnapshot} for the given application.\n \n Async because plugin/adapter `introspect()` may be async; the work\n * is parallelised across all primitives so wall-clock time scales\n * with the slowest introspector, not their sum.\n /\nexport async function collectTopologySnapshot(\n opts: CollectTopologyOptions,\n): Promise<TopologySnapshot> {\n const { app, container, introspectTimeoutMs = DEFAULT_INTROSPECT_TIMEOUT_MS } = opts\n const errors: TopologyError[] = []\n\n const plugins = await Promise.all(\n app.getPlugins().map((p) => snapshotFor(p, 'plugin', introspectTimeoutMs, errors)),\n )\n const adapters = await Promise.all(\n app.getAdapters().map((a) => snapshotFor(a, 'adapter', introspectTimeoutMs, errors)),\n )\n\n return {\n protocolVersion: PROTOCOL_VERSION,\n timestamp: Date.now(),\n plugins,\n adapters,\n contributors: collectContributors(app),\n diTokens: collectTokens(container),\n errors,\n }\n}\n\n/\n Coerce one primitive into an {@link IntrospectionSnapshot}. Tries\n * the primitive's own `introspect()` first; falls back to a stub on\n * any of: missing implementation, throw, timeout, or non-object return.\n /\nasync function snapshotFor(\n primitive: AppAdapter \| KickPlugin,\n kind: 'plugin' \| 'adapter',\n timeoutMs: number,\n errors: TopologyError[],\n): Promise<IntrospectionSnapshot> {\n const name = primitive.name ?? '(unnamed)'\n const stub: IntrospectionSnapshot = {\n protocolVersion: PROTOCOL_VERSION,\n name,\n kind,\n }\n if (typeof primitive.introspect !== 'function') return stub\n\n try {\n const result = await Promise.race([\n Promise.resolve(primitive.introspect()),\n new Promise<never>((_, reject) =>\n setTimeout(\n () => reject(new Error(`introspect() timed out after ${timeoutMs}ms`)),\n timeoutMs,\n ),\n ),\n ])\n if (result && typeof result === 'object') {\n // Accept whatever the primitive returned; the kit's\n // IntrospectionSnapshot is opt-in typed via the kit, not enforced\n // at this layer (see plugin.ts / adapter.ts comment about avoiding\n // a runtime dep on the kit).\n const snap = result as Partial<IntrospectionSnapshot>\n return {\n protocolVersion: PROTOCOL_VERSION,\n name: snap.name ?? name,\n kind: snap.kind ?? kind,\n version: snap.version,\n state: snap.state,\n tokens: snap.tokens,\n metrics: snap.metrics,\n memoryBytes: snap.memoryBytes,\n }\n }\n return stub\n } catch (err) {\n errors.push({\n name,\n kind,\n message: err instanceof Error ? err.message : String(err),\n })\n return stub\n }\n}\n\n/* Read DI registrations into the topology shape — drops noisy HMR tokens. /\nfunction collectTokens(container: Container): TopologyTokenEntry[] {\n return container\n .getRegistrations()\n .filter((r) => !r.token.startsWith('__hmr__'))\n .map((r) => ({\n token: r.token,\n scope: r.scope,\n kind: r.kind,\n instantiated: r.instantiated,\n }))\n}\n\n/\n Contributor enumeration. Prefers `app.getContributors()` (the\n * Application-level walk that preserves adapter / plugin / global\n * source labels) when present; falls back to walking\n * `adapter.contributors()` + `plugin.contributors()` directly for\n * older Application implementations that don't expose the helper.\n \n Module-level contributors are still not surfaced here — module\n * instances aren't retained post-bootstrap. Per-route enumeration\n * lands in a later iteration alongside the route detail panel.\n /\nfunction collectContributors(app: TopologyApplicationLike): TopologyContributorEntry[] {\n const seen = new Map<string, TopologyContributorEntry>()\n\n if (typeof app.getContributors === 'function') {\n for (const c of app.getContributors()) {\n if (seen.has(c.key)) continue\n // The kit's source enum currently only allows 'adapter' \| 'module';\n // 'plugin' + 'global' both map to 'adapter' provenance for now —\n // the Topology UI labels them by `label` so the source field is\n // mainly a coarse category. Future kit version can widen.\n const mapped: TopologyContributorEntry['source'] =\n c.source === 'module' ? 'module' : 'adapter'\n seen.set(c.key, {\n key: c.key,\n source: mapped,\n dependsOn: c.dependsOn as string[],\n })\n }\n return [...seen.values()]\n }\n\n // Legacy path — direct walk.\n const ingest = (\n list: ReadonlyArray<unknown> \| null \| undefined,\n source: TopologyContributorEntry['source'],\n ): void => {\n if (!list) return\n for (const reg of list) {\n const r = reg as { key?: string; dependsOn?: readonly string[] }\n const key = typeof r.key === 'string' ? r.key : null\n if (!key \|\| seen.has(key)) continue\n seen.set(key, {\n key,\n source,\n dependsOn: Array.isArray(r.dependsOn) ? r.dependsOn : [],\n })\n }\n }\n\n for (const plugin of app.getPlugins()) {\n ingest(plugin.contributors?.(), 'adapter')\n }\n for (const adapter of app.getAdapters()) {\n ingest(adapter.contributors?.(), 'adapter')\n }\n\n return [...seen.values()]\n}\n","/\n Custom-tab aggregator — collects every plugin/adapter's\n * `devtoolsTabs()` contribution into a single deduped list for the\n * panel's `/_debug/tabs` endpoint.\n \n Validation is permissive: anything that doesn't look like a\n * {@link DevtoolsTabDescriptor} is dropped with a console warning\n * rather than throwing — a misconfigured adapter shouldn't break the\n * whole DevTools panel.\n \n @module @forinda/kickjs-devtools/devtools-tabs\n /\n\nimport type { DevtoolsTabDescriptor } from '@forinda/kickjs-devtools-kit'\nimport type { TopologyApplicationLike } from './topology'\n\n/* Result of {@link collectDevtoolsTabs}. /\nexport interface DevtoolsTabsResult {\n /* Deduped, validated tabs in registration order. /\n tabs: DevtoolsTabDescriptor[]\n /* Per-source collection errors (drop reason, source name). /\n errors: ReadonlyArray<{ source: string; reason: string }>\n}\n\nconst VALID_VIEW_TYPES = new Set(['iframe', 'launch', 'html'])\n\n/\n Walk every plugin + adapter, call `devtoolsTabs?()`, validate each\n * entry, and dedupe by `id`. Last-source-wins on collision is too\n * surprising — first-source-wins + a warning entry instead.\n /\nexport function collectDevtoolsTabs(app: TopologyApplicationLike): DevtoolsTabsResult {\n const tabs: DevtoolsTabDescriptor[] = []\n const seen = new Map<string, string>() // id → source name (for collision warnings)\n const errors: Array<{ source: string; reason: string }> = []\n\n const ingest = (sourceName: string, raw: unknown): void => {\n if (!Array.isArray(raw)) {\n errors.push({ source: sourceName, reason: 'devtoolsTabs() did not return an array' })\n return\n }\n for (const entry of raw) {\n const validation = validateTab(entry)\n if (!validation.ok) {\n errors.push({ source: sourceName, reason: validation.reason })\n continue\n }\n const tab = validation.tab\n const owner = seen.get(tab.id)\n if (owner) {\n errors.push({\n source: sourceName,\n reason: `tab id '${tab.id}' already registered by ${owner} — first-source wins`,\n })\n continue\n }\n seen.set(tab.id, sourceName)\n tabs.push(tab)\n }\n }\n\n for (const plugin of app.getPlugins()) {\n if (typeof plugin.devtoolsTabs !== 'function') continue\n try {\n ingest(plugin.name ?? '(unnamed plugin)', plugin.devtoolsTabs())\n } catch (err) {\n errors.push({\n source: plugin.name ?? '(unnamed plugin)',\n reason: err instanceof Error ? err.message : String(err),\n })\n }\n }\n for (const adapter of app.getAdapters()) {\n if (typeof adapter.devtoolsTabs !== 'function') continue\n try {\n ingest(adapter.name ?? '(unnamed adapter)', adapter.devtoolsTabs())\n } catch (err) {\n errors.push({\n source: adapter.name ?? '(unnamed adapter)',\n reason: err instanceof Error ? err.message : String(err),\n })\n }\n }\n\n return { tabs, errors }\n}\n\ninterface ValidationOk {\n ok: true\n tab: DevtoolsTabDescriptor\n}\n\ninterface ValidationFail {\n ok: false\n reason: string\n}\n\n/\n Coerce + validate a tab descriptor. Returns the typed object on\n * success; a structured reason on failure. Uses a permissive checker\n * so a partially-correct entry from a third-party adapter doesn't\n * break the whole panel.\n /\nfunction validateTab(raw: unknown): ValidationOk \| ValidationFail {\n if (!raw \|\| typeof raw !== 'object') {\n return { ok: false, reason: 'tab entry is not an object' }\n }\n const obj = raw as Record<string, unknown>\n if (typeof obj.id !== 'string' \|\| obj.id.length === 0) {\n return { ok: false, reason: 'tab.id must be a non-empty string' }\n }\n if (typeof obj.title !== 'string' \|\| obj.title.length === 0) {\n return { ok: false, reason: `tab '${obj.id}': title must be a non-empty string` }\n }\n const view = obj.view as Record<string, unknown> \| undefined\n if (!view \|\| typeof view !== 'object') {\n return { ok: false, reason: `tab '${obj.id}': view object is required` }\n }\n if (typeof view.type !== 'string' \|\| !VALID_VIEW_TYPES.has(view.type)) {\n return {\n ok: false,\n reason: `tab '${obj.id}': view.type must be one of iframe / launch / html`,\n }\n }\n switch (view.type) {\n case 'iframe':\n if (typeof view.src !== 'string' \|\| view.src.length === 0) {\n return { ok: false, reason: `tab '${obj.id}': iframe view requires a non-empty src` }\n }\n break\n case 'html':\n if (typeof view.html !== 'string') {\n return { ok: false, reason: `tab '${obj.id}': html view requires html string` }\n }\n break\n case 'launch':\n if (!Array.isArray(view.actions)) {\n return { ok: false, reason: `tab '${obj.id}': launch view requires actions array` }\n }\n break\n }\n return { ok: true, tab: obj as unknown as DevtoolsTabDescriptor }\n}\n","// Server-side KickEventBus implementation.\n//\n// Wraps the bus core from `@forinda/kickjs-devtools-kit/bus` with a\n// `ws` server bound to a path on the framework's existing\n// `http.Server`. Architecture:\n//\n// server.on('upgrade') ─┐\n// ├──► WebSocketServer.handleUpgrade()\n// │ └─► ws clients: receive emits as JSON\n// bus.emit(type, payload) ─┴──► serialize → fan out to clients +\n// dispatch locally to in-process subs\n//\n// Why piggyback on the framework's http.Server instead of starting a\n// dedicated WS server: the framework already owns the listener, the\n// upgrade event is the canonical hook, and reusing it means devtools\n// inherits whatever TLS / proxy / port config the application provides.\n//\n// Lifecycle:\n// - createServerBus() builds the WebSocketServer in `noServer: true`\n// mode (no listener of its own) and returns the bus + attach/close\n// handles.\n// - attachUpgrade(httpServer) wires server.on('upgrade') so upgrades\n// matching `wsPath` route into the WebSocketServer. Other upgrade\n// paths (kickjs-ws, etc.) ignore us by virtue of path matching.\n// - close() drops every client and detaches from the http server so\n// repeated dev-mode restarts don't leak listener handles.\n//\n// Authentication:\n// - The optional `secret` matches the devtools panel's existing\n// `x-devtools-token` / `?token=` access guard. When set, upgrades\n// without the right token get rejected at HTTP-handshake time —\n// never reaching the bus.\n//\n// Loop avoidance:\n// - Server emits fan out to every connected client. Client-side\n// emits sent UP the socket dispatch into the local core (so\n// server tabs can react) but are NOT re-broadcast to other\n// clients. This keeps the same \"no echo\" contract the browser\n// bus enforces; without it a tab's emit would round-trip through\n// the server and back to itself.\n\nimport type { IncomingMessage } from 'node:http'\nimport type http from 'node:http'\nimport type { Socket } from 'node:net'\n\nimport { createBusCore } from '@forinda/kickjs-devtools-kit/bus'\nimport type { KickDevtoolsEvent, KickEventBus, Unsubscribe } from '@forinda/kickjs-devtools-kit/bus'\nimport { WebSocketServer, type WebSocket } from 'ws'\n\nexport interface ServerBusOptions {\n /* Path the WebSocket upgrade listens on. Default `/_debug/_bus`. /\n wsPath?: string\n /\n Optional shared secret. When set, clients must include either\n * `?token=<secret>` on the upgrade URL or an\n * `x-devtools-token: <secret>` header. Unauthorized upgrades return\n * 401 and never reach the bus. Pass `false` (or omit) to disable.\n /\n secret?: string \| false\n}\n\ninterface TaggedEnvelope extends KickDevtoolsEvent {\n __kick_origin?: 'local' \| 'broadcast' \| 'ws'\n}\n\nexport interface ServerBus extends KickEventBus {\n /* Hook into an existing http.Server's `upgrade` event. /\n attachUpgrade(httpServer: http.Server): void\n /* Drop all clients + detach. Idempotent. /\n close(): void\n /* Currently connected client count. Useful for the devtools health card. /\n clientCount(): number\n}\n\nexport function createServerBus(opts: ServerBusOptions = {}): ServerBus {\n const wsPath = opts.wsPath ?? '/_debug/_bus'\n const secret = opts.secret ?? false\n const core = createBusCore()\n const wss = new WebSocketServer({ noServer: true })\n const clients = new Set<WebSocket>()\n let attachedServer: http.Server \| null = null\n let upgradeHandler: ((req: IncomingMessage, socket: Socket, head: Buffer) => void) \| null = null\n\n wss.on('connection', (ws: WebSocket) => {\n clients.add(ws)\n ws.on('message', (data: Buffer \| string) => {\n try {\n const text = typeof data === 'string' ? data : data.toString('utf-8')\n const parsed = JSON.parse(text) as TaggedEnvelope\n if (!parsed \|\| typeof parsed.type !== 'string' \|\| typeof parsed.ts !== 'number') return\n // Dispatch locally only — never echo back to other clients.\n // (Tabs that need cross-tab fan-out use BroadcastChannel; the\n // server is point-to-point per client.)\n core.dispatch({ ...parsed, __kick_origin: 'ws' } as KickDevtoolsEvent)\n } catch {\n // Malformed — drop silently. A misbehaving tab shouldn't\n // crash the server bus.\n }\n })\n ws.on('close', () => {\n clients.delete(ws)\n })\n ws.on('error', () => {\n clients.delete(ws)\n })\n })\n\n const fanOut = (envelope: TaggedEnvelope): void => {\n if (clients.size === 0) return\n const text = JSON.stringify(envelope)\n for (const client of clients) {\n // OPEN === 1 in the ws spec; reusing the import for the type\n // guard keeps this readable without pulling in WebSocket consts.\n if (client.readyState === client.OPEN) {\n try {\n client.send(text)\n } catch {\n // Network error mid-fan-out — clean removal happens via the\n // 'close' / 'error' handlers; nothing to do here.\n }\n }\n }\n }\n\n const checkAuth = (req: IncomingMessage): boolean => {\n if (secret === false) return true\n const header = req.headers['x-devtools-token']\n if (typeof header === 'string' && header === secret) return true\n // Parse query — `req.url` is path + ?query for upgrade requests.\n const url = req.url ?? ''\n const queryIdx = url.indexOf('?')\n if (queryIdx === -1) return false\n const params = new URLSearchParams(url.slice(queryIdx + 1))\n return params.get('token') === secret\n }\n\n const attachUpgrade = (httpServer: http.Server): void => {\n if (attachedServer) return // idempotent\n attachedServer = httpServer\n upgradeHandler = (req, socket, head) => {\n // Path match — ignore upgrades destined for other adapters\n // (kickjs-ws, custom adapters, etc.). They register their own\n // upgrade handlers; ours just no-ops on non-matching URLs.\n const url = req.url ?? ''\n const pathOnly = url.split('?')[0]\n if (pathOnly !== wsPath) return\n\n if (!checkAuth(req)) {\n socket.write('HTTP/1.1 401 Unauthorized\\r\\n\\r\\n')\n socket.destroy()\n return\n }\n\n wss.handleUpgrade(req, socket, head, (ws: WebSocket) => {\n wss.emit('connection', ws, req)\n })\n }\n httpServer.on('upgrade', upgradeHandler)\n }\n\n const close = (): void => {\n if (attachedServer && upgradeHandler) {\n attachedServer.off('upgrade', upgradeHandler)\n }\n attachedServer = null\n upgradeHandler = null\n for (const client of clients) {\n try {\n client.close()\n } catch {\n // ignore\n }\n }\n clients.clear()\n wss.close()\n }\n\n return {\n on(type: string, handler: (payload: unknown) => void): Unsubscribe {\n return core.on(type, handler)\n },\n onAny(handler: (event: KickDevtoolsEvent) => void): Unsubscribe {\n return core.onAny(handler)\n },\n emit(type: string, payload: unknown): void {\n const envelope: TaggedEnvelope = {\n type,\n payload,\n ts: Date.now(),\n __kick_origin: 'local',\n }\n core.dispatch(envelope)\n fanOut(envelope)\n },\n attachUpgrade,\n close,\n clientCount: () => clients.size,\n } as ServerBus\n}\n","import type { Request, Response, NextFunction } from 'express'\nimport { Router, static as serveStatic } from 'express'\nimport { dirname, join } from 'node:path'\nimport { tmpdir } from 'node:os'\nimport { fileURLToPath } from 'node:url'\nimport { createReadStream, existsSync, readFileSync, statSync, unlink } from 'node:fs'\nimport { randomBytes } from 'node:crypto'\nimport { writeHeapSnapshot } from 'node:v8'\nimport {\n type AdapterMiddleware,\n type Container,\n METADATA,\n defineAdapter,\n ref,\n computed,\n reactive,\n watch,\n createLogger,\n type Ref,\n type ComputedRef,\n getClassMeta,\n getMethodMeta,\n} from '@forinda/kickjs'\nimport {\n MemoryAnalyzer,\n PROTOCOL_VERSION,\n RuntimeSampler,\n type IntrospectionSnapshot,\n} from '@forinda/kickjs-devtools-kit'\nimport { DEVTOOLS_BUS } from '@forinda/kickjs-devtools-kit/bus/token'\nimport { collectTopologySnapshot, type TopologyApplicationLike } from './topology'\nimport { collectDevtoolsTabs } from './devtools-tabs'\nimport { createServerBus, type ServerBus } from './bus/server'\n\nconst log = createLogger('DevTools')\n\n/* Route metadata collected during mount /\ninterface RouteInfo {\n method: string\n path: string\n controller: string\n handler: string\n middleware: string[]\n}\n\n/* Per-route latency stats with percentile tracking /\ninterface RouteStats {\n count: number\n totalMs: number\n minMs: number\n maxMs: number\n /* Ring buffer of last N samples for percentile computation /\n samples: number[]\n}\n\nconst MAX_SAMPLES = 1000\n\n/* Compute a percentile from a sorted array of numbers /\nfunction percentile(sorted: number[], p: number): number {\n if (sorted.length === 0) return 0\n const idx = Math.ceil(p sorted.length) - 1\n return sorted[Math.max(0, idx)]\n}\n\n/** Compute p50, p95, p99 from a RouteStats samples buffer /\nfunction computePercentiles(stats: RouteStats): { p50: number; p95: number; p99: number } {\n const sorted = [...stats.samples].toSorted((a, b) => a - b)\n return {\n p50: percentile(sorted, 0.5),\n p95: percentile(sorted, 0.95),\n p99: percentile(sorted, 0.99),\n }\n}\n\n/\n Open an SSE response — sets the headers, flushes them, and disables\n * any compression middleware that may have been registered upstream\n * (compression buffers SSE chunks indefinitely; we need flush-on-write).\n /\nfunction openSseStream(req: Request, res: Response): void {\n res.writeHead(200, {\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache, no-transform',\n Connection: 'keep-alive',\n 'X-Accel-Buffering': 'no',\n })\n res.flushHeaders?.()\n // Defensive: the compression middleware checks this header. Some\n // setups also wrap res.write — calling res.flush after each write\n // is safe even when no compression is in play.\n void req\n}\n\n/* Write a single SSE `data:` event with a JSON payload + double newline. /\nfunction writeSseEvent(res: Response, payload: unknown): void {\n res.write(`data: ${JSON.stringify(payload)}\\n\\n`)\n}\n\n/\n Race a promise against a timeout. Clears the timer when the inner\n * promise wins so we don't leak handles every time a peer responds\n * quickly. Used to bound peer `onHealthCheck()` calls inside the\n * `/_debug/health` handler — one slow peer must not be able to stall\n * the dashboard request.\n /\nfunction raceWithTimeout<T>(promise: Promise<T>, ms: number, label: string): Promise<T> {\n let timer: ReturnType<typeof setTimeout> \| undefined\n const timeout = new Promise<never>((_, reject) => {\n timer = setTimeout(() => reject(new Error(`${label} timed out after ${ms}ms`)), ms)\n })\n return Promise.race([promise, timeout]).finally(() => {\n if (timer) clearTimeout(timer)\n })\n}\n\n/\n Per-peer budget for `onHealthCheck()` inside `/_debug/health`.\n * Long enough for a typical DB ping or remote check, short enough that\n * one misbehaving adapter can't stall the dashboard endpoint.\n /\nconst PEER_HEALTHCHECK_TIMEOUT_MS = 1500\n\n/\n Module-scoped guard for `POST /_debug/memory/snapshot`. `writeHeapSnapshot()`\n * blocks the event loop for the duration of the capture (multi-second\n * for large heaps); two concurrent captures would compound the pause.\n * The endpoint returns 503 + a hint message when this flag is set so\n * the SPA can surface a \"snapshot already running\" warning rather than\n * silently queueing.\n \n Module-scoped (not per-adapter-instance) because writeHeapSnapshot\n * acts on the V8 process — multiple DevToolsAdapter instances would\n * still race at the v8 layer.\n /\nlet snapshotInProgress = false\n\nexport interface DevToolsOptions {\n /* Base path for debug endpoints (default: '/_debug') /\n basePath?: string\n /* Only enable when this is true (default: process.env.NODE_ENV !== 'production') /\n enabled?: boolean\n /* Include environment variables (sanitized) at /_debug/config (default: false) /\n exposeConfig?: boolean\n /* Env var prefixes to expose (default: ['APP_', 'NODE_ENV']). Others are redacted. /\n configPrefixes?: string[]\n /* Callback when error rate exceeds threshold /\n onErrorRateExceeded?: (rate: number) => void\n /* Error rate threshold (default: 0.5 = 50%) /\n errorRateThreshold?: number\n /* Other adapters to discover stats from (e.g., WsAdapter) /\n adapters?: any[]\n\n /\n Secret token to guard DevTools access. When set, all requests must\n * include this token as `x-devtools-token` header or `?token=` query param.\n \n Auto-generated on startup if not provided. The token is logged to the console.\n * Set to `false` to disable the guard entirely (not recommended).\n \n @example\n * ```ts\n * DevToolsAdapter({ secret: getEnv('DEVTOOLS_SECRET') })\n * ```\n /\n secret?: string \| false\n\n /\n Tuning for the runtime sampler that powers `/_debug/runtime` and\n * the upcoming Memory tab (architecture.md §23). Defaults to\n * 1-second polling with a 60-sample (~1 minute) ring buffer.\n \n Set `runtime.enabled = false` to skip starting the sampler — the\n * `/_debug/runtime` endpoint then returns 404 instead of an empty\n * snapshot, signalling deliberate opt-out rather than a startup race.\n /\n runtime?: {\n /* Whether to start the runtime sampler at all. Default: true. /\n enabled?: boolean\n /* Polling interval in milliseconds. Default: 1000. /\n intervalMs?: number\n /* Ring-buffer size — number of past samples retained. Default: 60. /\n bufferSize?: number\n }\n}\n\n/\n Public reactive surface exposed by a DevToolsAdapter instance —\n * counters, computed metrics, and the route latency map. Tests and\n * peer adapters consume these directly to drive their own behavior.\n /\nexport interface DevToolsAdapterExtensions {\n /* Total requests received. /\n readonly requestCount: Ref<number>\n /* Total responses with status >= 500. /\n readonly errorCount: Ref<number>\n /* Total responses with status >= 400 and < 500. /\n readonly clientErrorCount: Ref<number>\n /* Server start time. /\n readonly startedAt: Ref<number>\n /* Computed error rate (server errors / total requests). /\n readonly errorRate: ComputedRef<number>\n /* Computed uptime in seconds. /\n readonly uptimeSeconds: ComputedRef<number>\n /* Per-route latency tracking. /\n readonly routeLatency: Record<string, RouteStats>\n /\n Tier-1 runtime sampler from `@forinda/kickjs-devtools-kit`. `null`\n * when `runtime.enabled` is `false`. Tests can `latest()` and\n * `history()` directly without going through the HTTP endpoint.\n /\n readonly runtimeSampler: RuntimeSampler \| null\n /\n Memory analyzer fed by the runtime sampler. `null` when the\n * sampler is disabled. Use `analyzer.health(sampler.history())` to\n * compose a composite memory-health snapshot.\n /\n readonly memoryAnalyzer: MemoryAnalyzer \| null\n}\n\n/\n DevToolsAdapter — Vue-style reactive introspection for KickJS applications.\n \n Exposes debug endpoints powered by reactive state (ref, computed, watch):\n * - `GET /_debug/routes` — all registered routes with middleware\n * - `GET /_debug/container` — DI registry with scopes and instantiation status\n * - `GET /_debug/metrics` — live request/error counts, error rate, uptime\n * - `GET /_debug/health` — deep health check with adapter status\n * - `GET /_debug/config` — sanitized environment variables (opt-in)\n * - `GET /_debug/state` — full reactive state snapshot\n \n @example\n * ```ts\n * import { DevToolsAdapter } from '@forinda/kickjs-devtools'\n \n bootstrap({\n * modules: [UserModule],\n * adapters: [\n * DevToolsAdapter({\n * enabled: process.env.NODE_ENV !== 'production',\n * exposeConfig: true,\n * configPrefixes: ['APP_', 'DATABASE_'],\n * }),\n * ],\n * })\n * ```\n /\nexport const DevToolsAdapter = defineAdapter<DevToolsOptions, DevToolsAdapterExtensions>({\n name: 'DevToolsAdapter',\n defaults: {\n basePath: '/_debug',\n errorRateThreshold: 0.5,\n exposeConfig: false,\n configPrefixes: ['APP_', 'NODE_ENV'],\n },\n build: (options) => {\n const basePath = options.basePath!\n const enabled = options.enabled ?? process.env.NODE_ENV !== 'production'\n const exposeConfig = options.exposeConfig!\n const configPrefixes = options.configPrefixes!\n const errorRateThreshold = options.errorRateThreshold!\n const peerAdapters = options.adapters ?? []\n\n // Secret token guard\n let secret: string \| false\n if (options.secret === false) {\n secret = false\n } else if (options.secret) {\n secret = options.secret\n } else {\n secret = randomBytes(16).toString('hex')\n }\n\n // ── Runtime sampler + memory analyzer (kit) ────────────────────\n // Lazily instantiated so an adopter that disables runtime monitoring\n // doesn't pay the perf_hooks histogram cost. Lifecycle: start in\n // `beforeMount`, stop in `shutdown`.\n const runtimeEnabled = options.runtime?.enabled ?? true\n const runtimeSampler = runtimeEnabled\n ? new RuntimeSampler({\n intervalMs: options.runtime?.intervalMs ?? 1000,\n bufferSize: options.runtime?.bufferSize ?? 60,\n })\n : null\n const memoryAnalyzer = runtimeEnabled ? new MemoryAnalyzer() : null\n\n // ── Server-side event bus ──────────────────────────────────────\n // Lazily resolved in `beforeMount` — when the devtools adapter is\n // rebuilt during HMR, the same `Container` may already hold a bus\n // from a previous mount with live WebSocket clients + in-flight\n // subscriptions. Creating a fresh bus on every rebuild would\n // silently swap the registered instance, leaving plugins that\n // already captured the old reference publishing into a dead bus.\n // Using `container.has(DEVTOOLS_BUS)` to reuse instead keeps event\n // delivery stable across rebuilds.\n //\n // When the devtools adapter is disabled (`enabled === false`) we\n // register a no-op stub instead so adopters who Inject(DEVTOOLS_BUS)\n // under @Optional() get a callable instance rather than undefined.\n let bus: ServerBus \| null = null\n\n const ensureBus = (container: Container): ServerBus => {\n if (container.has(DEVTOOLS_BUS)) {\n // The token is typed `KickEventBus` but the registered instance\n // is the wider `ServerBus` (KickEventBus + attachUpgrade /\n // close / clientCount). Explicit generic on resolve avoids the\n // structural-cast — Container.resolve's last overload accepts\n // an explicit T and returns it.\n bus = container.resolve<ServerBus>(DEVTOOLS_BUS)\n return bus\n }\n bus = enabled\n ? createServerBus({\n wsPath: `${basePath}/_bus`,\n secret: secret === false ? false : secret,\n })\n : ({\n on: () => () => {},\n onAny: () => () => {},\n emit: () => {},\n attachUpgrade: () => {},\n close: () => {},\n clientCount: () => 0,\n } as ServerBus)\n container.registerInstance(DEVTOOLS_BUS, bus)\n return bus\n }\n\n // ── Reactive state ─────────────────────────────────────────────\n const requestCount = ref(0)\n const errorCount = ref(0)\n const clientErrorCount = ref(0)\n const startedAt = ref(Date.now())\n const routeLatency = reactive<Record<string, RouteStats>>({})\n\n const errorRate = computed(() =>\n requestCount.value > 0 ? errorCount.value / requestCount.value : 0,\n )\n\n const uptimeSeconds = computed(() => Math.floor((Date.now() - startedAt.value) / 1000))\n\n // ── Internal mutable state ─────────────────────────────────────\n let routes: RouteInfo[] = []\n let container: Container \| null = null\n let appRef: any = null\n const adapterStatuses: Record<string, string> = {}\n let stopErrorWatch: (() => void) \| null = null\n\n // Watch error rate — log warnings when elevated\n if (options.onErrorRateExceeded) {\n const callback = options.onErrorRateExceeded\n stopErrorWatch = watch(errorRate, (rate) => {\n if (rate > errorRateThreshold) {\n callback(rate)\n }\n })\n } else {\n stopErrorWatch = watch(errorRate, (rate) => {\n if (rate > errorRateThreshold) {\n log.warn(`Error rate elevated: ${(rate 100).toFixed(1)}%`)\n }\n })\n }\n\n /*\n Find the dashboard's public directory. Prefers the new Solid SPA\n * (public/spa/, shipped from PR 4 of §23); falls back to the legacy\n * Vue+Tailwind dashboard (public/devtools/) for environments that\n * haven't run `pnpm --filter @forinda/kickjs-devtools build:spa`.\n /\n const resolvePublicDir = (): string \| null => {\n const thisDir = dirname(fileURLToPath(import.meta.url))\n const candidates = [\n join(thisDir, '..', 'public', 'spa'), // dist/ -> public/spa\n join(thisDir, '..', '..', 'public', 'spa'), // src/ -> public/spa\n join(thisDir, '..', 'public', 'devtools'), // legacy Vue dashboard\n join(thisDir, '..', '..', 'public', 'devtools'), // legacy from src/\n ]\n for (const dir of candidates) {\n if (existsSync(join(dir, 'index.html'))) return dir\n }\n return null\n }\n\n /\n Resolve peer adapters at request time. Prefers live adapters from the\n * Application registry (survives HMR rebuild) and falls back to the\n * constructor-provided refs.\n /\n const getPeerAdapters = (): any[] => {\n const kickApp = appRef?.__kickApp\n if (kickApp && typeof kickApp.getAdapters === 'function') {\n return kickApp.getAdapters()\n }\n return peerAdapters\n }\n\n return {\n // ── Extensions (TExtra) ───────────────────────────────────────\n requestCount,\n errorCount,\n clientErrorCount,\n startedAt,\n errorRate,\n uptimeSeconds,\n routeLatency,\n runtimeSampler,\n memoryAnalyzer,\n\n // ── DevTools introspection (architecture.md §23) ─────────────\n // Cheap snapshot — counters + flags only. Anything that requires\n // a container walk or DB hit belongs in the per-endpoint RPCs\n // (`/_debug/container`, `/_debug/graph`), not here.\n introspect(): IntrospectionSnapshot {\n return {\n protocolVersion: PROTOCOL_VERSION,\n name: 'DevToolsAdapter',\n kind: 'adapter',\n state: {\n basePath,\n enabled,\n runtimeEnabled,\n secret: secret === false ? false : 'present',\n },\n metrics: {\n requestCount: requestCount.value,\n serverErrors: errorCount.value,\n clientErrors: clientErrorCount.value,\n uptimeSeconds: uptimeSeconds.value,\n routesTracked: routes.length,\n },\n }\n },\n\n // ── Lifecycle ─────────────────────────────────────────────────\n\n beforeMount({ app, container: containerArg }) {\n if (!enabled) return\n\n appRef = app\n container = containerArg\n // Lazy resolve — reuses the existing bus when the same\n // container is reused across HMR rebuilds, otherwise creates\n // and registers a fresh instance. See `ensureBus` for why.\n ensureBus(containerArg)\n startedAt.value = Date.now()\n // Clear routes on rebuild/restart to prevent HMR duplication\n routes = []\n adapterStatuses['DevToolsAdapter'] = 'running'\n\n // Start the runtime sampler + memory analyzer here (rather than\n // at construction) so test harnesses that build the adapter but\n // never mount it don't leak interval timers.\n runtimeSampler?.start()\n memoryAnalyzer?.start()\n\n const router = Router()\n\n // ── Access guard — require secret token ──────────────────\n if (secret !== false) {\n const token = secret\n router.use((req: Request, res: Response, next: NextFunction) => {\n const provided = req.headers['x-devtools-token'] ?? req.query?.token\n if (provided === token) return next()\n // Allow the dashboard HTML itself (it will include the token in API calls)\n if (req.path === '/' && req.method === 'GET' && !req.query?.token) {\n return next() // serve dashboard, it handles auth via token\n }\n // Serve static assets for the dashboard (js files)\n if (req.path.endsWith('.js') \|\| req.path.endsWith('.css')) {\n return next()\n }\n res.status(403).json({ error: 'Forbidden — invalid or missing devtools token' })\n })\n }\n\n router.get('/routes', (_req: Request, res: Response) => {\n res.json({ routes })\n })\n\n router.get('/container', (_req: Request, res: Response) => {\n const registrations = container?.getRegistrations() ?? []\n res.json({ registrations, count: registrations.length })\n })\n\n router.get('/metrics', (_req: Request, res: Response) => {\n // Build latency with percentiles, omitting raw samples from response\n const latency: Record<string, any> = {}\n for (const [key, stats] of Object.entries(routeLatency)) {\n const { samples: _, ...rest } = stats\n latency[key] = { ...rest, ...computePercentiles(stats) }\n }\n res.json({\n requests: requestCount.value,\n serverErrors: errorCount.value,\n clientErrors: clientErrorCount.value,\n errorRate: errorRate.value,\n uptimeSeconds: uptimeSeconds.value,\n startedAt: new Date(startedAt.value).toISOString(),\n routeLatency: latency,\n })\n })\n\n router.get('/health', async (_req: Request, res: Response) => {\n const healthy = errorRate.value < errorRateThreshold\n const status = healthy ? 'healthy' : 'degraded'\n\n // Refresh peer statuses from `onHealthCheck()` when present.\n // The static `adapterStatuses` dict (seeded in `afterStart`)\n // proves a peer was mounted; calling `onHealthCheck()` here\n // upgrades that to a live `up`/`down`/`degraded` reading so\n // the Overview > Health card reflects actual adapter state,\n // not just \"registered at boot\".\n //\n // Each peer call is bounded by `PEER_HEALTHCHECK_TIMEOUT_MS` —\n // an adapter whose check hangs (network DB ping, remote\n // service, etc.) must not be able to stall the entire\n // dashboard request. Timed-out peers fall through to the\n // catch arm and are reported as `down`.\n const live: Record<string, string> = { ...adapterStatuses }\n await Promise.all(\n getPeerAdapters().map(async (peer) => {\n if (typeof peer?.onHealthCheck !== 'function') return\n const name: unknown = peer?.name\n if (typeof name !== 'string' \|\| name === 'DevToolsAdapter') return\n try {\n const result = await raceWithTimeout(\n Promise.resolve(peer.onHealthCheck()),\n PEER_HEALTHCHECK_TIMEOUT_MS,\n `onHealthCheck(${name})`,\n )\n if (result && typeof result.status === 'string') {\n live[name] = result.status\n }\n } catch {\n live[name] = 'down'\n }\n }),\n )\n\n res.status(healthy ? 200 : 503).json({\n status,\n errorRate: errorRate.value,\n uptime: uptimeSeconds.value,\n adapters: live,\n })\n })\n\n router.get('/state', (_req: Request, res: Response) => {\n const wsAdapter = getPeerAdapters().find(\n (a) => a.name === 'WsAdapter' && typeof a.getStats === 'function',\n )\n res.json({\n reactive: {\n requestCount: requestCount.value,\n errorCount: errorCount.value,\n clientErrorCount: clientErrorCount.value,\n errorRate: errorRate.value,\n uptimeSeconds: uptimeSeconds.value,\n startedAt: new Date(startedAt.value).toISOString(),\n },\n routes: routes.length,\n container: container?.getRegistrations().length ?? 0,\n routeLatency,\n ...(wsAdapter ? { ws: wsAdapter.getStats() } : {}),\n })\n })\n\n // ── Tier-1 runtime monitoring (architecture.md §23) ─────────\n // Returns the latest RuntimeSnapshot + a composite MemoryHealth\n // computed from the sampler's ring buffer. Returns 404 when the\n // sampler is disabled so adopters can distinguish \"off\" from\n // \"starting up\".\n router.get('/runtime', (_req: Request, res: Response) => {\n if (!runtimeSampler \|\| !memoryAnalyzer) {\n res.status(404).json({ error: 'runtime sampler disabled — set runtime.enabled = true' })\n return\n }\n const latest = runtimeSampler.latest()\n const history = runtimeSampler.history()\n const health = memoryAnalyzer.health(history)\n res.json({\n protocolVersion: PROTOCOL_VERSION,\n latest,\n history,\n health,\n })\n })\n\n // ── SSE: live runtime snapshots (architecture.md §23) ───────\n // Pushes the latest RuntimeSnapshot every `intervalMs`. SSE\n // (not WebSocket) avoids the http.Server `upgrade`-event\n // coordination cost — see devtools-flows.md §3 for rationale.\n router.get('/runtime/stream', (req: Request, res: Response) => {\n if (!runtimeSampler) {\n res.status(404).json({ error: 'runtime sampler disabled' })\n return\n }\n openSseStream(req, res)\n const intervalMs = options.runtime?.intervalMs ?? 1000\n const tick = (): void => {\n const snap = runtimeSampler.latest()\n if (snap) writeSseEvent(res, snap)\n }\n tick()\n const interval = setInterval(tick, intervalMs)\n const heartbeat = setInterval(() => res.write(': heartbeat\\n\\n'), 30_000)\n req.on('close', () => {\n clearInterval(interval)\n clearInterval(heartbeat)\n })\n })\n\n // ── SSE: memory health composite (architecture.md §23) ──────\n router.get('/memory/stream', (req: Request, res: Response) => {\n if (!runtimeSampler \|\| !memoryAnalyzer) {\n res.status(404).json({ error: 'runtime sampler disabled' })\n return\n }\n openSseStream(req, res)\n const intervalMs = options.runtime?.intervalMs ?? 1000\n const tick = (): void => {\n const snap = runtimeSampler.latest()\n if (!snap) return\n const health = memoryAnalyzer.health(runtimeSampler.history())\n writeSseEvent(res, { snapshot: snap, health })\n }\n tick()\n const interval = setInterval(tick, intervalMs)\n const heartbeat = setInterval(() => res.write(': heartbeat\\n\\n'), 30_000)\n req.on('close', () => {\n clearInterval(interval)\n clearInterval(heartbeat)\n })\n })\n\n // ── Heap snapshot — Tier 3 monitoring (architecture.md §23) ─\n // POST /_debug/memory/snapshot — captures a V8 heap snapshot\n // and streams the resulting .heapsnapshot file back as\n // application/json with Content-Disposition. Snapshot capture\n // blocks the event loop while writing (multi-second pause for\n // large heaps), so the endpoint enforces single-flight via a\n // module-scoped flag — concurrent calls return 503.\n //\n // The temp file is deleted as soon as the response stream\n // completes (success or error). Worst case if the process\n // dies mid-snapshot is a stranded file in `os.tmpdir()`,\n // which the OS cleans up on next boot.\n router.post('/memory/snapshot', (_req: Request, res: Response) => {\n if (snapshotInProgress) {\n res\n .status(503)\n .json({ error: 'heap snapshot already in progress — wait for it to complete' })\n return\n }\n snapshotInProgress = true\n const startedAt = Date.now()\n const filename = `kickjs-heap-${new Date().toISOString().replace(/[:.]/g, '-')}.heapsnapshot`\n const targetPath = join(tmpdir(), filename)\n\n let written: string\n try {\n // writeHeapSnapshot is synchronous — the event loop is\n // blocked for the duration. There's no async variant in\n // the v8 module today; if one ships, swap here.\n written = writeHeapSnapshot(targetPath)\n } catch (err) {\n snapshotInProgress = false\n log.error({ err }, 'heap snapshot capture failed')\n res\n .status(500)\n .json({ error: 'snapshot capture failed', message: (err as Error).message })\n return\n }\n\n let size = 0\n try {\n size = statSync(written).size\n } catch {\n / size header is best-effort */\n }\n const elapsedMs = Date.now() - startedAt\n log.info(\n `Heap snapshot captured: ${written} (${(size / 1024 / 1024).toFixed(1)} MiB in ${elapsedMs}ms)`,\n )\n\n res.setHeader('Content-Type', 'application/json')\n res.setHeader('Content-Disposition', `attachment; filename=\"${filename}\"`)\n if (size > 0) res.setHeader('Content-Length', String(size))\n res.setHeader('X-Snapshot-Capture-Ms', String(elapsedMs))\n\n const cleanup = (): void => {\n unlink(written, (err) => {\n if (err) log.warn(`Failed to delete heap snapshot ${written}: ${err.message}`)\n snapshotInProgress = false\n })\n }\n const stream = createReadStream(written)\n stream.on('end', cleanup)\n stream.on('error', (err) => {\n log.error({ err }, 'heap snapshot stream failed')\n if (!res.headersSent) res.status(500).end()\n cleanup()\n })\n // Defensive: if the client disconnects mid-download, abort\n // the stream + run cleanup so the temp file doesn't linger.\n res.on('close', () => {\n stream.destroy()\n // If the stream already fired 'end', cleanup already ran\n // — the unlink is idempotent enough that running twice\n // just yields ENOENT which we ignore in cleanup.\n })\n stream.pipe(res)\n })\n\n // ── Force GC — Tier 3 monitoring (architecture.md §23) ──────\n // POST /_debug/memory/gc — calls `global.gc()` if Node was\n // started with --expose-gc, returning before/after heap size\n // so the panel can show how much was reclaimed. Useful for\n // confirming \"is this growth real or just delayed GC?\".\n //\n // Returns 412 Precondition Failed (with hint) when the flag\n // wasn't set, so the SPA can show \"Run with --expose-gc to\n // enable this button\" instead of a generic 5xx.\n router.post('/memory/gc', (_req: Request, res: Response) => {\n const gc = (globalThis as { gc?: () => void }).gc\n if (typeof gc !== 'function') {\n res.status(412).json({\n error: 'global.gc unavailable — start Node with --expose-gc to enable this endpoint',\n })\n return\n }\n const before = process.memoryUsage().heapUsed\n const startedAt = Date.now()\n try {\n gc()\n } catch (err) {\n res.status(500).json({\n error: 'forced GC failed',\n message: err instanceof Error ? err.message : String(err),\n })\n return\n }\n const after = process.memoryUsage().heapUsed\n const reclaimedBytes = Math.max(0, before - after)\n const elapsedMs = Date.now() - startedAt\n log.info(\n `Forced GC reclaimed ${(reclaimedBytes / 1024 / 1024).toFixed(2)} MiB in ${elapsedMs}ms`,\n )\n res.json({ before, after, reclaimedBytes, elapsedMs })\n })\n\n // ── Custom-tab discovery (architecture.md §23) ──────────────\n // Walks every plugin/adapter `devtoolsTabs?()` contribution\n // and serves the deduped + validated list. The SPA fetches\n // this once at boot to render dynamic tabs after the four\n // built-ins.\n router.get('/tabs', (_req: Request, res: Response) => {\n const kickApp = appRef?.__kickApp as TopologyApplicationLike \| undefined\n if (!kickApp) {\n res.status(503).json({ error: 'tabs unavailable — application surface not exposed' })\n return\n }\n res.json(collectDevtoolsTabs(kickApp))\n })\n\n // ── Topology RPC (architecture.md §23) ──────────────────────\n // Aggregates plugins + adapters + contributors + DI tokens\n // into one snapshot; calls each primitive's introspect() in\n // parallel with a per-call timeout so a misbehaving adapter\n // can't block the endpoint. Errors are collected, not thrown.\n router.get('/topology', async (_req: Request, res: Response) => {\n if (!container) {\n res.status(503).json({ error: 'topology unavailable — container not bound yet' })\n return\n }\n const kickApp = appRef?.__kickApp as TopologyApplicationLike \| undefined\n if (!kickApp) {\n res\n .status(503)\n .json({ error: 'topology unavailable — application surface not exposed' })\n return\n }\n try {\n const snapshot = await collectTopologySnapshot({ app: kickApp, container })\n res.json(snapshot)\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err)\n res.status(500).json({ error: 'topology collection failed', message })\n }\n })\n\n router.get('/ws', (_req: Request, res: Response) => {\n const wsAdapter = getPeerAdapters().find(\n (a) => a.name === 'WsAdapter' && typeof a.getStats === 'function',\n )\n if (!wsAdapter) {\n res.json({ enabled: false, message: 'WsAdapter not found' })\n return\n }\n res.json({ enabled: true, ...wsAdapter.getStats() })\n })\n\n router.get('/queues', async (_req: Request, res: Response) => {\n const queueAdapter = getPeerAdapters().find(\n (a) => a.name === 'QueueAdapter' && typeof a.getQueueNames === 'function',\n )\n if (!queueAdapter) {\n res.json({ enabled: false, message: 'QueueAdapter not found' })\n return\n }\n try {\n const names: string[] = queueAdapter.getQueueNames?.() ?? []\n const queues: any[] = []\n for (const name of names) {\n const stats = await queueAdapter.getQueueStats?.(name)\n queues.push({ name, ...stats })\n }\n res.json({ enabled: true, queues })\n } catch {\n res.json({ enabled: true, queues: [], error: 'Failed to fetch queue stats' })\n }\n })\n\n // ── Dependency graph ────────────────────────────────────────\n router.get('/graph', (_req: Request, res: Response) => {\n const registrations = container?.getRegistrations() ?? []\n const nodes = registrations\n .filter((r) => !r.token.startsWith('__hmr__'))\n .map((r) => ({\n id: r.token,\n kind: r.kind,\n scope: r.scope,\n resolveCount: r.resolveCount,\n }))\n const nodeIds = new Set(nodes.map((n) => n.id))\n const edges: Array<{ from: string; to: string }> = []\n for (const r of registrations) {\n if (r.token.startsWith('__hmr__')) continue\n for (const dep of r.dependencies) {\n if (nodeIds.has(dep)) {\n edges.push({ from: r.token, to: dep })\n }\n }\n }\n res.json({ nodes, edges })\n })\n\n // ── SSE stream for real-time updates ────────────────────────\n router.get('/stream', (req: Request, res: Response) => {\n res.writeHead(200, {\n 'Content-Type': 'text/event-stream',\n 'Cache-Control': 'no-cache',\n Connection: 'keep-alive',\n })\n\n const sendMetrics = () => {\n const data = {\n type: 'metrics',\n requestCount: requestCount.value,\n errorCount: errorCount.value,\n clientErrorCount: clientErrorCount.value,\n errorRate: errorRate.value,\n uptimeSeconds: uptimeSeconds.value,\n }\n res.write(`data: ${JSON.stringify(data)}\\n\\n`)\n }\n sendMetrics()\n\n const unsubContainer = container?.onChange?.((changes) => {\n res.write(\n `data: ${JSON.stringify({ type: 'container', changes, timestamp: Date.now() })}\\n\\n`,\n )\n sendMetrics()\n })\n\n const stopRequestWatch = watch(requestCount, () => sendMetrics())\n const stopErrWatch = watch(errorCount, () => sendMetrics())\n\n const heartbeat = setInterval(() => {\n res.write(`: heartbeat\\n\\n`)\n }, 30000)\n\n req.on('close', () => {\n unsubContainer?.()\n stopRequestWatch()\n stopErrWatch()\n clearInterval(heartbeat)\n })\n })\n\n if (exposeConfig) {\n router.get('/config', (_req: Request, res: Response) => {\n const config: Record<string, string> = {}\n for (const [key, value] of Object.entries(process.env)) {\n if (value === undefined) continue\n const allowed = configPrefixes.some((prefix) => key.startsWith(prefix))\n config[key] = allowed ? value : '[REDACTED]'\n }\n res.json({ config })\n })\n }\n\n // Dashboard UI — Vue + Tailwind from public/devtools directory\n const publicDir = resolvePublicDir()\n if (publicDir) {\n router.use(serveStatic(publicDir))\n\n const indexHtml = readFileSync(join(publicDir, 'index.html'), 'utf-8')\n router.get('/', (_req: Request, res: Response) => {\n const html = indexHtml.replace('<body', `<body data-base=\"${basePath}\"`)\n res.type('html').send(html)\n })\n } else {\n router.get('/', (_req: Request, res: Response) => {\n res.type('html').send('<h1>DevTools: public directory not found</h1>')\n })\n }\n\n app.use(basePath, router)\n\n if (secret) {\n log.info(`DevTools mounted at ${basePath} [token: ${secret}]`)\n log.info(`Access: ${basePath}?token=${secret}`)\n } else {\n log.info(`DevTools mounted at ${basePath} [no guard]`)\n }\n },\n\n middleware(): AdapterMiddleware[] {\n if (!enabled) return []\n\n return [\n {\n handler: (req: Request, res: Response, next: NextFunction) => {\n const start = Date.now()\n requestCount.value++\n\n res.on('finish', () => {\n if (res.statusCode >= 500) errorCount.value++\n else if (res.statusCode >= 400) clientErrorCount.value++\n\n // Bucket unmatched paths (404s) under a single key. The\n // previous `?? req.path` fallback used the raw URL, which\n // grows the reactive map unboundedly under 404 probing —\n // each random path became its own entry, bloating\n // `/_debug/metrics` and leaking memory.\n const routeKey = req.route?.path\n ? `${req.method} ${req.route.path}`\n : `${req.method} <unmatched>`\n const elapsed = Date.now() - start\n\n if (!routeLatency[routeKey]) {\n routeLatency[routeKey] = {\n count: 0,\n totalMs: 0,\n minMs: Infinity,\n maxMs: 0,\n samples: [],\n }\n }\n const stats = routeLatency[routeKey]\n stats.count++\n stats.totalMs += elapsed\n stats.minMs = Math.min(stats.minMs, elapsed)\n stats.maxMs = Math.max(stats.maxMs, elapsed)\n stats.samples.push(elapsed)\n if (stats.samples.length > MAX_SAMPLES) stats.samples.shift()\n })\n\n next()\n },\n phase: 'beforeGlobal',\n },\n ]\n },\n\n onRouteMount(controllerClass, mountPath) {\n if (!enabled) return\n\n const collectedRoutes = getClassMeta<\n Array<{ method: string; path: string; handlerName: string }>\n >(METADATA.ROUTES, controllerClass, [])\n\n const classMiddleware = getClassMeta<any[]>(METADATA.CLASS_MIDDLEWARES, controllerClass, [])\n\n for (const route of collectedRoutes) {\n const methodMiddleware = getMethodMeta<any[]>(\n METADATA.METHOD_MIDDLEWARES,\n controllerClass.prototype,\n route.handlerName,\n [],\n )\n\n routes.push({\n method: route.method.toUpperCase(),\n path: `${mountPath}${route.path === '/' ? '' : route.path}`,\n controller: controllerClass.name,\n handler: route.handlerName,\n middleware: [\n ...classMiddleware.map((m: any) => m.name \|\| 'anonymous'),\n ...methodMiddleware.map((m: any) => m.name \|\| 'anonymous'),\n ],\n })\n }\n },\n\n afterStart({ server }) {\n if (!enabled) return\n // Wire the bus's WS upgrade to the framework's http.Server.\n // Path-based routing inside attachUpgrade means kickjs-ws or\n // any other adapter sharing the same listener stays\n // unaffected — only `${basePath}/_bus` is claimed.\n if (server) bus?.attachUpgrade(server)\n\n // Seed `/_debug/health.adapters` with every peer the framework\n // mounted alongside us. Before this, only `DevToolsAdapter`\n // appeared in the Overview > Health card because the dict was\n // only ever written in `beforeMount` (self) and `shutdown`\n // (self). Peers with `onHealthCheck` get their live status;\n // anything else is reported as `running` since reaching\n // `afterStart` means the framework already mounted them.\n for (const peer of getPeerAdapters()) {\n const name = peer?.name\n if (typeof name !== 'string' \|\| name === 'DevToolsAdapter') continue\n adapterStatuses[name] = 'running'\n }\n\n log.info(\n `DevTools ready — ${routes.length} routes tracked, ` +\n `${container?.getRegistrations().length ?? 0} DI bindings, ` +\n `event bus on ${basePath}/_bus`,\n )\n },\n\n shutdown() {\n stopErrorWatch?.()\n runtimeSampler?.stop()\n memoryAnalyzer?.stop()\n bus?.close()\n adapterStatuses['DevToolsAdapter'] = 'stopped'\n },\n }\n },\n})\n"],"mappings":";;;;;;;;;;orBAkEA,eAAsB,wBACpB,KAC2B,CAC3B,GAAM,CAAE,IAAK,UAAW,oBAAsB,KAAkC,KAC1E,OAA0B,EAAE,CAE5B,QAAU,MAAM,QAAQ,IAC5B,IAAI,YAAY,CAAC,IAAK,GAAM,YAAY,EAAG,SAAU,oBAAqB,OAAO,CAAC,CACnF,CACK,SAAW,MAAM,QAAQ,IAC7B,IAAI,aAAa,CAAC,IAAK,GAAM,YAAY,EAAG,UAAW,oBAAqB,OAAO,CAAC,CACrF,CAED,MAAO,CACL,gBAAiB,iBACjB,UAAW,KAAK,KAAK,CACrB,QACA,SACA,aAAc,oBAAoB,IAAI,CACtC,SAAU,cAAc,UAAU,CAClC,OACD,CAQH,eAAe,YACb,UACA,KACA,UACA,OACgC,CAChC,IAAM,KAAO,UAAU,MAAQ,YACzB,KAA8B,CAClC,gBAAiB,iBACjB,KACA,KACD,CACD,GAAI,OAAO,UAAU,YAAe,WAAY,OAAO,KAEvD,GAAI,CACF,IAAM,OAAS,MAAM,QAAQ,KAAK,CAChC,QAAQ,QAAQ,UAAU,YAAY,CAAC,CACvC,IAAI,SAAgB,EAAG,SACrB,eACQ,OAAW,MAAM,gCAAgC,UAAU,IAAI,CAAC,CACtE,UACD,CACF,CACF,CAAC,CACF,GAAI,QAAU,OAAO,QAAW,SAAU,CAKxC,IAAM,KAAO,OACb,MAAO,CACL,gBAAiB,iBACjB,KAAM,KAAK,MAAQ,KACnB,KAAM,KAAK,MAAQ,KACnB,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,OAAQ,KAAK,OACb,QAAS,KAAK,QACd,YAAa,KAAK,YACnB,CAEH,OAAO,WACA,IAAK,CAMZ,OALA,OAAO,KAAK,CACV,KACA,KACA,QAAS,eAAe,MAAQ,IAAI,QAAU,OAAO,IAAI,CAC1D,CAAC,CACK,MAKX,SAAS,cAAc,UAA4C,CACjE,OAAO,UACJ,kBAAkB,CAClB,OAAQ,GAAM,CAAC,EAAE,MAAM,WAAW,UAAU,CAAC,CAC7C,IAAK,IAAO,CACX,MAAO,EAAE,MACT,MAAO,EAAE,MACT,KAAM,EAAE,KACR,aAAc,EAAE,aACjB,EAAE,CAcP,SAAS,oBAAoB,IAA0D,CACrF,IAAM,KAAO,IAAI,IAEjB,GAAI,OAAO,IAAI,iBAAoB,WAAY,CAC7C,IAAK,IAAM,KAAK,IAAI,iBAAiB,CAAE,CACrC,GAAI,KAAK,IAAI,EAAE,IAAI,CAAE,SAKrB,IAAM,OACJ,EAAE,SAAW,SAAW,SAAW,UACrC,KAAK,IAAI,EAAE,IAAK,CACd,IAAK,EAAE,IACP,OAAQ,OACR,UAAW,EAAE,UACd,CAAC,CAEJ,MAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAI3B,IAAM,QACJ,KACA,SACS,CACJ,QACL,IAAK,IAAM,OAAO,KAAM,CACtB,IAAM,EAAI,IACJ,IAAM,OAAO,EAAE,KAAQ,SAAW,EAAE,IAAM,KAC5C,CAAC,KAAO,KAAK,IAAI,IAAI,EACzB,KAAK,IAAI,IAAK,CACZ,IACA,OACA,UAAW,MAAM,QAAQ,EAAE,UAAU,CAAG,EAAE,UAAY,EAAE,CACzD,CAAC,GAIN,IAAK,IAAM,UAAU,IAAI,YAAY,CACnC,OAAO,OAAO,gBAAgB,CAAE,UAAU,CAE5C,IAAK,IAAM,WAAW,IAAI,aAAa,CACrC,OAAO,QAAQ,gBAAgB,CAAE,UAAU,CAG7C,MAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CCjM3B,MAAM,iBAAmB,IAAI,IAAI,CAAC,SAAU,SAAU,OAAO,CAAC,CAO9D,SAAgB,oBAAoB,IAAkD,CACpF,IAAM,KAAgC,EAAE,CAClC,KAAO,IAAI,IACX,OAAoD,EAAE,CAEtD,QAAU,WAAoB,MAAuB,CACzD,GAAI,CAAC,MAAM,QAAQ,IAAI,CAAE,CACvB,OAAO,KAAK,CAAE,OAAQ,WAAY,OAAQ,yCAA0C,CAAC,CACrF,OAEF,IAAK,IAAM,SAAS,IAAK,CACvB,IAAM,WAAa,YAAY,MAAM,CACrC,GAAI,CAAC,WAAW,GAAI,CAClB,OAAO,KAAK,CAAE,OAAQ,WAAY,OAAQ,WAAW,OAAQ,CAAC,CAC9D,SAEF,IAAM,IAAM,WAAW,IACjB,MAAQ,KAAK,IAAI,IAAI,GAAG,CAC9B,GAAI,MAAO,CACT,OAAO,KAAK,CACV,OAAQ,WACR,OAAQ,WAAW,IAAI,GAAG,0BAA0B,MAAM,sBAC3D,CAAC,CACF,SAEF,KAAK,IAAI,IAAI,GAAI,WAAW,CAC5B,KAAK,KAAK,IAAI,GAIlB,IAAK,IAAM,UAAU,IAAI,YAAY,CAC/B,UAAO,OAAO,cAAiB,WACnC,GAAI,CACF,OAAO,OAAO,MAAQ,mBAAoB,OAAO,cAAc,CAAC,OACzD,IAAK,CACZ,OAAO,KAAK,CACV,OAAQ,OAAO,MAAQ,mBACvB,OAAQ,eAAe,MAAQ,IAAI,QAAU,OAAO,IAAI,CACzD,CAAC,CAGN,IAAK,IAAM,WAAW,IAAI,aAAa,CACjC,UAAO,QAAQ,cAAiB,WACpC,GAAI,CACF,OAAO,QAAQ,MAAQ,oBAAqB,QAAQ,cAAc,CAAC,OAC5D,IAAK,CACZ,OAAO,KAAK,CACV,OAAQ,QAAQ,MAAQ,oBACxB,OAAQ,eAAe,MAAQ,IAAI,QAAU,OAAO,IAAI,CACzD,CAAC,CAIN,MAAO,CAAE,KAAM,OAAQ,CAmBzB,SAAS,YAAY,IAA6C,CAChE,GAAI,CAAC,KAAO,OAAO,KAAQ,SACzB,MAAO,CAAE,GAAI,GAAO,OAAQ,6BAA8B,CAE5D,IAAM,IAAM,IACZ,GAAI,OAAO,IAAI,IAAO,UAAY,IAAI,GAAG,SAAW,EAClD,MAAO,CAAE,GAAI,GAAO,OAAQ,oCAAqC,CAEnE,GAAI,OAAO,IAAI,OAAU,UAAY,IAAI,MAAM,SAAW,EACxD,MAAO,CAAE,GAAI,GAAO,OAAQ,QAAQ,IAAI,GAAG,qCAAsC,CAEnF,IAAM,KAAO,IAAI,KACjB,GAAI,CAAC,MAAQ,OAAO,MAAS,SAC3B,MAAO,CAAE,GAAI,GAAO,OAAQ,QAAQ,IAAI,GAAG,4BAA6B,CAE1E,GAAI,OAAO,KAAK,MAAS,UAAY,CAAC,iBAAiB,IAAI,KAAK,KAAK,CACnE,MAAO,CACL,GAAI,GACJ,OAAQ,QAAQ,IAAI,GAAG,oDACxB,CAEH,OAAQ,KAAK,KAAb,CACE,IAAK,SACH,GAAI,OAAO,KAAK,KAAQ,UAAY,KAAK,IAAI,SAAW,EACtD,MAAO,CAAE,GAAI,GAAO,OAAQ,QAAQ,IAAI,GAAG,yCAA0C,CAEvF,MACF,IAAK,OACH,GAAI,OAAO,KAAK,MAAS,SACvB,MAAO,CAAE,GAAI,GAAO,OAAQ,QAAQ,IAAI,GAAG,mCAAoC,CAEjF,MACF,IAAK,SACH,GAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,CAC9B,MAAO,CAAE,GAAI,GAAO,OAAQ,QAAQ,IAAI,GAAG,uCAAwC,CAErF,MAEJ,MAAO,CAAE,GAAI,GAAM,IAAK,IAAyC,CCnEnE,SAAgB,gBAAgB,KAAyB,EAAE,CAAa,CACtE,IAAM,OAAS,KAAK,QAAU,eACxB,OAAS,KAAK,QAAU,GACxB,KAAO,eAAe,CACtB,IAAM,IAAI,gBAAgB,CAAE,SAAU,GAAM,CAAC,CAC7C,QAAU,IAAI,IAChB,eAAqC,KACrC,eAAwF,KAE5F,IAAI,GAAG,aAAe,IAAkB,CACtC,QAAQ,IAAI,GAAG,CACf,GAAG,GAAG,UAAY,MAA0B,CAC1C,GAAI,CACF,IAAM,KAAO,OAAO,MAAS,SAAW,KAAO,KAAK,SAAS,QAAQ,CAC/D,OAAS,KAAK,MAAM,KAAK,CAC/B,GAAI,CAAC,QAAU,OAAO,OAAO,MAAS,UAAY,OAAO,OAAO,IAAO,SAAU,OAIjF,KAAK,SAAS,CAAE,GAAG,OAAQ,cAAe,KAAM,CAAsB,MAChE,IAIR,CACF,GAAG,GAAG,YAAe,CACnB,QAAQ,OAAO,GAAG,EAClB,CACF,GAAG,GAAG,YAAe,CACnB,QAAQ,OAAO,GAAG,EAClB,EACF,CAEF,IAAM,OAAU,UAAmC,CACjD,GAAI,QAAQ,OAAS,EAAG,OACxB,IAAM,KAAO,KAAK,UAAU,SAAS,CACrC,IAAK,IAAM,UAAU,QAGnB,GAAI,OAAO,aAAe,OAAO,KAC/B,GAAI,CACF,OAAO,KAAK,KAAK,MACX,IAQR,UAAa,KAAkC,CACnD,GAAI,SAAW,GAAO,MAAO,GAC7B,IAAM,OAAS,IAAI,QAAQ,oBAC3B,GAAI,OAAO,QAAW,UAAY,SAAW,OAAQ,MAAO,GAE5D,IAAM,IAAM,IAAI,KAAO,GACjB,SAAW,IAAI,QAAQ,IAAI,CAGjC,OAFI,WAAa,GAAW,GAErB,IADY,gBAAgB,IAAI,MAAM,SAAW,EAAE,CAC7C,CAAC,IAAI,QAAQ,GAAK,QA4CjC,MAAO,CACL,GAAG,KAAc,QAAkD,CACjE,OAAO,KAAK,GAAG,KAAM,QAAQ,EAE/B,MAAM,QAA0D,CAC9D,OAAO,KAAK,MAAM,QAAQ,EAE5B,KAAK,KAAc,QAAwB,CACzC,IAAM,SAA2B,CAC/B,KACA,QACA,GAAI,KAAK,KAAK,CACd,cAAe,QAChB,CACD,KAAK,SAAS,SAAS,CACvB,OAAO,SAAS,EAElB,cA1DqB,YAAkC,CACnD,iBACJ,eAAiB,WACjB,gBAAkB,IAAK,OAAQ,OAAS,CAMtC,IAFY,IAAI,KAAO,IACF,MAAM,IAAI,CAAC,KACf,OAEjB,IAAI,CAAC,UAAU,IAAI,CAAE,CACnB,OAAO,MAAM;;EAAoC,CACjD,OAAO,SAAS,CAChB,OAGF,IAAI,cAAc,IAAK,OAAQ,KAAO,IAAkB,CACtD,IAAI,KAAK,aAAc,GAAI,IAAI,EAC/B,GAEJ,WAAW,GAAG,UAAW,eAAe,GAsCxC,UAnCwB,CACpB,gBAAkB,gBACpB,eAAe,IAAI,UAAW,eAAe,CAE/C,eAAiB,KACjB,eAAiB,KACjB,IAAK,IAAM,UAAU,QACnB,GAAI,CACF,OAAO,OAAO,MACR,EAIV,QAAQ,OAAO,CACf,IAAI,OAAO,EAsBX,gBAAmB,QAAQ,KAC5B,CCnKH,MAAM,IAAM,aAAa,WAAW,CAwBpC,SAAS,WAAW,OAAkB,EAAmB,CACvD,GAAI,OAAO,SAAW,EAAG,MAAO,GAChC,IAAM,IAAM,KAAK,KAAK,EAAI,OAAO,OAAO,CAAG,EAC3C,OAAO,OAAO,KAAK,IAAI,EAAG,IAAI,EAIhC,SAAS,mBAAmB,MAA8D,CACxF,IAAM,OAAS,CAAC,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAG,IAAM,EAAI,EAAE,CAC3D,MAAO,CACL,IAAK,WAAW,OAAQ,GAAI,CAC5B,IAAK,WAAW,OAAQ,IAAK,CAC7B,IAAK,WAAW,OAAQ,IAAK,CAC9B,CAQH,SAAS,cAAc,IAAc,IAAqB,CACxD,IAAI,UAAU,IAAK,CACjB,eAAgB,oBAChB,gBAAiB,yBACjB,WAAY,aACZ,oBAAqB,KACtB,CAAC,CACF,IAAI,gBAAgB,CAQtB,SAAS,cAAc,IAAe,QAAwB,CAC5D,IAAI,MAAM,SAAS,KAAK,UAAU,QAAQ,CAAC,MAAM,CAUnD,SAAS,gBAAmB,QAAqB,GAAY,MAA2B,CACtF,IAAI,MACE,QAAU,IAAI,SAAgB,EAAG,SAAW,CAChD,MAAQ,eAAiB,OAAW,MAAM,GAAG,MAAM,mBAAmB,GAAG,IAAI,CAAC,CAAE,GAAG,EACnF,CACF,OAAO,QAAQ,KAAK,CAAC,QAAS,QAAQ,CAAC,CAAC,YAAc,CAChD,OAAO,aAAa,MAAM,EAC9B,CAsBJ,IAAI,mBAAqB,GAgHzB,MAAa,gBAAkB,cAA0D,CACvF,KAAM,kBACN,SAAU,CACR,SAAU,UACV,mBAAoB,GACpB,aAAc,GACd,eAAgB,CAAC,OAAQ,WAAW,CACrC,CACD,MAAQ,SAAY,CAClB,IAAM,SAAW,QAAQ,SACnB,QAAU,QAAQ,SAAW,QAAQ,IAAI,WAAa,aACtD,aAAe,QAAQ,aACvB,eAAiB,QAAQ,eACzB,mBAAqB,QAAQ,mBAC7B,aAAe,QAAQ,UAAY,EAAE,CAGvC,OACJ,AAKE,OALE,QAAQ,SAAW,GACZ,GACA,QAAQ,OACR,QAAQ,OAER,YAAY,GAAG,CAAC,SAAS,MAAM,CAO1C,IAAM,eAAiB,QAAQ,SAAS,SAAW,GAC7C,eAAiB,eACnB,IAAI,eAAe,CACjB,WAAY,QAAQ,SAAS,YAAc,IAC3C,WAAY,QAAQ,SAAS,YAAc,GAC5C,CAAC,CACF,KACE,eAAiB,eAAiB,IAAI,eAAmB,KAe3D,IAAwB,KAEtB,UAAa,WACb,UAAU,IAAI,aAAa,EAM7B,IAAM,UAAU,QAAmB,aAAa,CACzC,MAET,IAAM,QACF,gBAAgB,CACd,OAAQ,GAAG,SAAS,OACpB,OAAQ,SAAW,GAAQ,GAAQ,OACpC,CAAC,CACD,CACC,WAAgB,GAChB,cAAmB,GACnB,SAAY,GACZ,kBAAqB,GACrB,UAAa,GACb,gBAAmB,EACpB,CACL,UAAU,iBAAiB,aAAc,IAAI,CACtC,KAIH,aAAe,IAAI,EAAE,CACrB,WAAa,IAAI,EAAE,CACnB,iBAAmB,IAAI,EAAE,CACzB,UAAY,IAAI,KAAK,KAAK,CAAC,CAC3B,aAAe,SAAqC,EAAE,CAAC,CAEvD,UAAY,aAChB,aAAa,MAAQ,EAAI,WAAW,MAAQ,aAAa,MAAQ,EAClE,CAEK,cAAgB,aAAe,KAAK,OAAO,KAAK,KAAK,CAAG,UAAU,OAAS,IAAK,CAAC,CAGnF,OAAsB,EAAE,CACxB,UAA8B,KAC9B,OAAc,KACZ,gBAA0C,EAAE,CAC9C,eAAsC,KAG1C,GAAI,QAAQ,oBAAqB,CAC/B,IAAM,SAAW,QAAQ,oBACzB,eAAiB,MAAM,UAAY,MAAS,CACtC,KAAO,oBACT,SAAS,KAAK,EAEhB,MAEF,eAAiB,MAAM,UAAY,MAAS,CACtC,KAAO,oBACT,IAAI,KAAK,yBAAyB,KAAO,KAAK,QAAQ,EAAE,CAAC,GAAG,EAE9D,CASJ,IAAM,qBAAwC,CAC5C,IAAM,QAAU,QAAQ,cAAc,OAAO,KAAK,IAAI,CAAC,CACjD,WAAa,CACjB,KAAK,QAAS,KAAM,SAAU,MAAM,CACpC,KAAK,QAAS,KAAM,KAAM,SAAU,MAAM,CAC1C,KAAK,QAAS,KAAM,SAAU,WAAW,CACzC,KAAK,QAAS,KAAM,KAAM,SAAU,WAAW,CAChD,CACD,IAAK,IAAM,OAAO,WAChB,GAAI,WAAW,KAAK,IAAK,aAAa,CAAC,CAAE,OAAO,IAElD,OAAO,MAQH,oBAA+B,CACnC,IAAM,QAAU,QAAQ,UAIxB,OAHI,SAAW,OAAO,QAAQ,aAAgB,WACrC,QAAQ,aAAa,CAEvB,cAGT,MAAO,CAEL,aACA,WACA,iBACA,UACA,UACA,cACA,aACA,eACA,eAMA,YAAoC,CAClC,MAAO,CACL,gBAAiB,iBACjB,KAAM,kBACN,KAAM,UACN,MAAO,CACL,SACA,QACA,eACA,OAAQ,SAAW,GAAQ,GAAQ,UACpC,CACD,QAAS,CACP,aAAc,aAAa,MAC3B,aAAc,WAAW,MACzB,aAAc,iBAAiB,MAC/B,cAAe,cAAc,MAC7B,cAAe,OAAO,OACvB,CACF,EAKH,YAAY,CAAE,IAAK,UAAW,cAAgB,CAC5C,GAAI,CAAC,QAAS,OAEd,OAAS,IACT,UAAY,aAIZ,UAAU,aAAa,CACvB,UAAU,MAAQ,KAAK,KAAK,CAE5B,OAAS,EAAE,CACX,gBAAgB,gBAAqB,UAKrC,gBAAgB,OAAO,CACvB,gBAAgB,OAAO,CAEvB,IAAM,OAAS,QAAQ,CAGvB,GAAI,SAAW,GAAO,CACpB,IAAM,MAAQ,OACd,OAAO,KAAK,IAAc,IAAe,OAAuB,CAQ9D,IAPiB,IAAI,QAAQ,qBAAuB,IAAI,OAAO,SAC9C,OAEb,IAAI,OAAS,KAAO,IAAI,SAAW,OAAS,CAAC,IAAI,OAAO,OAIxD,IAAI,KAAK,SAAS,MAAM,EAAI,IAAI,KAAK,SAAS,OAAO,CACvD,OAAO,MAAM,CAEf,IAAI,OAAO,IAAI,CAAC,KAAK,CAAE,MAAO,gDAAiD,CAAC,EAChF,CAGJ,OAAO,IAAI,WAAY,KAAe,MAAkB,CACtD,IAAI,KAAK,CAAE,OAAQ,CAAC,EACpB,CAEF,OAAO,IAAI,cAAe,KAAe,MAAkB,CACzD,IAAM,cAAgB,WAAW,kBAAkB,EAAI,EAAE,CACzD,IAAI,KAAK,CAAE,cAAe,MAAO,cAAc,OAAQ,CAAC,EACxD,CAEF,OAAO,IAAI,YAAa,KAAe,MAAkB,CAEvD,IAAM,QAA+B,EAAE,CACvC,IAAK,GAAM,CAAC,IAAK,SAAU,OAAO,QAAQ,aAAa,CAAE,CACvD,GAAM,CAAE,QAAS,EAAG,GAAG,MAAS,MAChC,QAAQ,KAAO,CAAE,GAAG,KAAM,GAAG,mBAAmB,MAAM,CAAE,CAE1D,IAAI,KAAK,CACP,SAAU,aAAa,MACvB,aAAc,WAAW,MACzB,aAAc,iBAAiB,MAC/B,UAAW,UAAU,MACrB,cAAe,cAAc,MAC7B,UAAW,IAAI,KAAK,UAAU,MAAM,CAAC,aAAa,CAClD,aAAc,QACf,CAAC,EACF,CAEF,OAAO,IAAI,UAAW,MAAO,KAAe,MAAkB,CAC5D,IAAM,QAAU,UAAU,MAAQ,mBAC5B,OAAS,QAAU,UAAY,WAc/B,KAA+B,CAAE,GAAG,gBAAiB,CAC3D,MAAM,QAAQ,IACZ,iBAAiB,CAAC,IAAI,KAAO,OAAS,CACpC,GAAI,OAAO,MAAM,eAAkB,WAAY,OAC/C,IAAM,KAAgB,MAAM,KACxB,YAAO,MAAS,UAAY,OAAS,mBACzC,GAAI,CACF,IAAM,OAAS,MAAM,gBACnB,QAAQ,QAAQ,KAAK,eAAe,CAAC,CACrC,KACA,iBAAiB,KAAK,GACvB,CACG,QAAU,OAAO,OAAO,QAAW,WACrC,KAAK,MAAQ,OAAO,aAEhB,CACN,KAAK,MAAQ,SAEf,CACH,CAED,IAAI,OAAO,QAAU,IAAM,IAAI,CAAC,KAAK,CACnC,OACA,UAAW,UAAU,MACrB,OAAQ,cAAc,MACtB,SAAU,KACX,CAAC,EACF,CAEF,OAAO,IAAI,UAAW,KAAe,MAAkB,CACrD,IAAM,UAAY,iBAAiB,CAAC,KACjC,GAAM,EAAE,OAAS,aAAe,OAAO,EAAE,UAAa,WACxD,CACD,IAAI,KAAK,CACP,SAAU,CACR,aAAc,aAAa,MAC3B,WAAY,WAAW,MACvB,iBAAkB,iBAAiB,MACnC,UAAW,UAAU,MACrB,cAAe,cAAc,MAC7B,UAAW,IAAI,KAAK,UAAU,MAAM,CAAC,aAAa,CACnD,CACD,OAAQ,OAAO,OACf,UAAW,WAAW,kBAAkB,CAAC,QAAU,EACnD,aACA,GAAI,UAAY,CAAE,GAAI,UAAU,UAAU,CAAE,CAAG,EAAE,CAClD,CAAC,EACF,CAOF,OAAO,IAAI,YAAa,KAAe,MAAkB,CACvD,GAAI,CAAC,gBAAkB,CAAC,eAAgB,CACtC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAE,MAAO,wDAAyD,CAAC,CACxF,OAEF,IAAM,OAAS,eAAe,QAAQ,CAChC,QAAU,eAAe,SAAS,CAClC,OAAS,eAAe,OAAO,QAAQ,CAC7C,IAAI,KAAK,CACP,gBAAiB,iBACjB,OACA,QACA,OACD,CAAC,EACF,CAMF,OAAO,IAAI,mBAAoB,IAAc,MAAkB,CAC7D,GAAI,CAAC,eAAgB,CACnB,IAAI,OAAO,IAAI,CAAC,KAAK,CAAE,MAAO,2BAA4B,CAAC,CAC3D,OAEF,cAAc,IAAK,IAAI,CACvB,IAAM,WAAa,QAAQ,SAAS,YAAc,IAC5C,SAAmB,CACvB,IAAM,KAAO,eAAe,QAAQ,CAChC,MAAM,cAAc,IAAK,KAAK,EAEpC,MAAM,CACN,IAAM,SAAW,YAAY,KAAM,WAAW,CACxC,UAAY,gBAAkB,IAAI,MAAM;;EAAkB,CAAE,IAAO,CACzE,IAAI,GAAG,YAAe,CACpB,cAAc,SAAS,CACvB,cAAc,UAAU,EACxB,EACF,CAGF,OAAO,IAAI,kBAAmB,IAAc,MAAkB,CAC5D,GAAI,CAAC,gBAAkB,CAAC,eAAgB,CACtC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAE,MAAO,2BAA4B,CAAC,CAC3D,OAEF,cAAc,IAAK,IAAI,CACvB,IAAM,WAAa,QAAQ,SAAS,YAAc,IAC5C,SAAmB,CACvB,IAAM,KAAO,eAAe,QAAQ,CAC/B,MAEL,cAAc,IAAK,CAAE,SAAU,KAAM,OADtB,eAAe,OAAO,eAAe,SAAS,CAClB,CAAE,CAAC,EAEhD,MAAM,CACN,IAAM,SAAW,YAAY,KAAM,WAAW,CACxC,UAAY,gBAAkB,IAAI,MAAM;;EAAkB,CAAE,IAAO,CACzE,IAAI,GAAG,YAAe,CACpB,cAAc,SAAS,CACvB,cAAc,UAAU,EACxB,EACF,CAcF,OAAO,KAAK,oBAAqB,KAAe,MAAkB,CAChE,GAAI,mBAAoB,CACtB,IACG,OAAO,IAAI,CACX,KAAK,CAAE,MAAO,8DAA+D,CAAC,CACjF,OAEF,mBAAqB,GACrB,IAAM,UAAY,KAAK,KAAK,CACtB,SAAW,eAAe,IAAI,MAAM,CAAC,aAAa,CAAC,QAAQ,QAAS,IAAI,CAAC,eACzE,WAAa,KAAK,QAAQ,CAAE,SAAS,CAEvC,QACJ,GAAI,CAIF,QAAU,kBAAkB,WAAW,OAChC,IAAK,CACZ,mBAAqB,GACrB,IAAI,MAAM,CAAE,IAAK,CAAE,+BAA+B,CAClD,IACG,OAAO,IAAI,CACX,KAAK,CAAE,MAAO,0BAA2B,QAAU,IAAc,QAAS,CAAC,CAC9E,OAGF,IAAI,KAAO,EACX,GAAI,CACF,KAAO,SAAS,QAAQ,CAAC,UACnB,EAGR,IAAM,UAAY,KAAK,KAAK,CAAG,UAC/B,IAAI,KACF,2BAA2B,QAAQ,KAAK,KAAO,KAAO,MAAM,QAAQ,EAAE,CAAC,UAAU,UAAU,KAC5F,CAED,IAAI,UAAU,eAAgB,mBAAmB,CACjD,IAAI,UAAU,sBAAuB,yBAAyB,SAAS,GAAG,CACtE,KAAO,GAAG,IAAI,UAAU,iBAAkB,OAAO,KAAK,CAAC,CAC3D,IAAI,UAAU,wBAAyB,OAAO,UAAU,CAAC,CAEzD,IAAM,YAAsB,CAC1B,OAAO,QAAU,KAAQ,CACnB,KAAK,IAAI,KAAK,kCAAkC,QAAQ,IAAI,IAAI,UAAU,CAC9E,mBAAqB,IACrB,EAEE,OAAS,iBAAiB,QAAQ,CACxC,OAAO,GAAG,MAAO,QAAQ,CACzB,OAAO,GAAG,QAAU,KAAQ,CAC1B,IAAI,MAAM,CAAE,IAAK,CAAE,8BAA8B,CAC5C,IAAI,aAAa,IAAI,OAAO,IAAI,CAAC,KAAK,CAC3C,SAAS,EACT,CAGF,IAAI,GAAG,YAAe,CACpB,OAAO,SAAS,EAIhB,CACF,OAAO,KAAK,IAAI,EAChB,CAWF,OAAO,KAAK,cAAe,KAAe,MAAkB,CAC1D,IAAM,GAAM,WAAmC,GAC/C,GAAI,OAAO,IAAO,WAAY,CAC5B,IAAI,OAAO,IAAI,CAAC,KAAK,CACnB,MAAO,8EACR,CAAC,CACF,OAEF,IAAM,OAAS,QAAQ,aAAa,CAAC,SAC/B,UAAY,KAAK,KAAK,CAC5B,GAAI,CACF,IAAI,OACG,IAAK,CACZ,IAAI,OAAO,IAAI,CAAC,KAAK,CACnB,MAAO,mBACP,QAAS,eAAe,MAAQ,IAAI,QAAU,OAAO,IAAI,CAC1D,CAAC,CACF,OAEF,IAAM,MAAQ,QAAQ,aAAa,CAAC,SAC9B,eAAiB,KAAK,IAAI,EAAG,OAAS,MAAM,CAC5C,UAAY,KAAK,KAAK,CAAG,UAC/B,IAAI,KACF,wBAAwB,eAAiB,KAAO,MAAM,QAAQ,EAAE,CAAC,UAAU,UAAU,IACtF,CACD,IAAI,KAAK,CAAE,OAAQ,MAAO,eAAgB,UAAW,CAAC,EACtD,CAOF,OAAO,IAAI,SAAU,KAAe,MAAkB,CACpD,IAAM,QAAU,QAAQ,UACxB,GAAI,CAAC,QAAS,CACZ,IAAI,OAAO,IAAI,CAAC,KAAK,CAAE,MAAO,qDAAsD,CAAC,CACrF,OAEF,IAAI,KAAK,oBAAoB,QAAQ,CAAC,EACtC,CAOF,OAAO,IAAI,YAAa,MAAO,KAAe,MAAkB,CAC9D,GAAI,CAAC,UAAW,CACd,IAAI,OAAO,IAAI,CAAC,KAAK,CAAE,MAAO,iDAAkD,CAAC,CACjF,OAEF,IAAM,QAAU,QAAQ,UACxB,GAAI,CAAC,QAAS,CACZ,IACG,OAAO,IAAI,CACX,KAAK,CAAE,MAAO,yDAA0D,CAAC,CAC5E,OAEF,GAAI,CACF,IAAM,SAAW,MAAM,wBAAwB,CAAE,IAAK,QAAS,UAAW,CAAC,CAC3E,IAAI,KAAK,SAAS,OACX,IAAK,CACZ,IAAM,QAAU,eAAe,MAAQ,IAAI,QAAU,OAAO,IAAI,CAChE,IAAI,OAAO,IAAI,CAAC,KAAK,CAAE,MAAO,6BAA8B,QAAS,CAAC,GAExE,CAEF,OAAO,IAAI,OAAQ,KAAe,MAAkB,CAClD,IAAM,UAAY,iBAAiB,CAAC,KACjC,GAAM,EAAE,OAAS,aAAe,OAAO,EAAE,UAAa,WACxD,CACD,GAAI,CAAC,UAAW,CACd,IAAI,KAAK,CAAE,QAAS,GAAO,QAAS,sBAAuB,CAAC,CAC5D,OAEF,IAAI,KAAK,CAAE,QAAS,GAAM,GAAG,UAAU,UAAU,CAAE,CAAC,EACpD,CAEF,OAAO,IAAI,UAAW,MAAO,KAAe,MAAkB,CAC5D,IAAM,aAAe,iBAAiB,CAAC,KACpC,GAAM,EAAE,OAAS,gBAAkB,OAAO,EAAE,eAAkB,WAChE,CACD,GAAI,CAAC,aAAc,CACjB,IAAI,KAAK,CAAE,QAAS,GAAO,QAAS,yBAA0B,CAAC,CAC/D,OAEF,GAAI,CACF,IAAM,MAAkB,aAAa,iBAAiB,EAAI,EAAE,CACtD,OAAgB,EAAE,CACxB,IAAK,IAAM,QAAQ,MAAO,CACxB,IAAM,MAAQ,MAAM,aAAa,gBAAgB,KAAK,CACtD,OAAO,KAAK,CAAE,KAAM,GAAG,MAAO,CAAC,CAEjC,IAAI,KAAK,CAAE,QAAS,GAAM,OAAQ,CAAC,MAC7B,CACN,IAAI,KAAK,CAAE,QAAS,GAAM,OAAQ,EAAE,CAAE,MAAO,8BAA+B,CAAC,GAE/E,CAGF,OAAO,IAAI,UAAW,KAAe,MAAkB,CACrD,IAAM,cAAgB,WAAW,kBAAkB,EAAI,EAAE,CACnD,MAAQ,cACX,OAAQ,GAAM,CAAC,EAAE,MAAM,WAAW,UAAU,CAAC,CAC7C,IAAK,IAAO,CACX,GAAI,EAAE,MACN,KAAM,EAAE,KACR,MAAO,EAAE,MACT,aAAc,EAAE,aACjB,EAAE,CACC,QAAU,IAAI,IAAI,MAAM,IAAK,GAAM,EAAE,GAAG,CAAC,CACzC,MAA6C,EAAE,CACrD,IAAK,IAAM,KAAK,cACV,MAAE,MAAM,WAAW,UAAU,CACjC,IAAK,IAAM,OAAO,EAAE,aACd,QAAQ,IAAI,IAAI,EAClB,MAAM,KAAK,CAAE,KAAM,EAAE,MAAO,GAAI,IAAK,CAAC,CAI5C,IAAI,KAAK,CAAE,MAAO,MAAO,CAAC,EAC1B,CAGF,OAAO,IAAI,WAAY,IAAc,MAAkB,CACrD,IAAI,UAAU,IAAK,CACjB,eAAgB,oBAChB,gBAAiB,WACjB,WAAY,aACb,CAAC,CAEF,IAAM,gBAAoB,CACxB,IAAM,KAAO,CACX,KAAM,UACN,aAAc,aAAa,MAC3B,WAAY,WAAW,MACvB,iBAAkB,iBAAiB,MACnC,UAAW,UAAU,MACrB,cAAe,cAAc,MAC9B,CACD,IAAI,MAAM,SAAS,KAAK,UAAU,KAAK,CAAC,MAAM,EAEhD,aAAa,CAEb,IAAM,eAAiB,WAAW,WAAY,SAAY,CACxD,IAAI,MACF,SAAS,KAAK,UAAU,CAAE,KAAM,YAAa,QAAS,UAAW,KAAK,KAAK,CAAE,CAAC,CAAC,MAChF,CACD,aAAa,EACb,CAEI,iBAAmB,MAAM,iBAAoB,aAAa,CAAC,CAC3D,aAAe,MAAM,eAAkB,aAAa,CAAC,CAErD,UAAY,gBAAkB,CAClC,IAAI,MAAM;;EAAkB,EAC3B,IAAM,CAET,IAAI,GAAG,YAAe,CACpB,kBAAkB,CAClB,kBAAkB,CAClB,cAAc,CACd,cAAc,UAAU,EACxB,EACF,CAEE,cACF,OAAO,IAAI,WAAY,KAAe,MAAkB,CACtD,IAAM,OAAiC,EAAE,CACzC,IAAK,GAAM,CAAC,IAAK,SAAU,OAAO,QAAQ,QAAQ,IAAI,CAChD,QAAU,IAAA,KAEd,OAAO,KADS,eAAe,KAAM,QAAW,IAAI,WAAW,OAAO,CACjD,CAAG,MAAQ,cAElC,IAAI,KAAK,CAAE,OAAQ,CAAC,EACpB,CAIJ,IAAM,UAAY,kBAAkB,CACpC,GAAI,UAAW,CACb,OAAO,IAAIA,SAAY,UAAU,CAAC,CAElC,IAAM,UAAY,aAAa,KAAK,UAAW,aAAa,CAAE,QAAQ,CACtE,OAAO,IAAI,KAAM,KAAe,MAAkB,CAChD,IAAM,KAAO,UAAU,QAAQ,QAAS,oBAAoB,SAAS,GAAG,CACxE,IAAI,KAAK,OAAO,CAAC,KAAK,KAAK,EAC3B,MAEF,OAAO,IAAI,KAAM,KAAe,MAAkB,CAChD,IAAI,KAAK,OAAO,CAAC,KAAK,gDAAgD,EACtE,CAGJ,IAAI,IAAI,SAAU,OAAO,CAErB,QACF,IAAI,KAAK,uBAAuB,SAAS,WAAW,OAAO,GAAG,CAC9D,IAAI,KAAK,WAAW,SAAS,SAAS,SAAS,EAE/C,IAAI,KAAK,uBAAuB,SAAS,aAAa,EAI1D,YAAkC,CAGhC,OAFK,QAEE,CACL,CACE,SAAU,IAAc,IAAe,OAAuB,CAC5D,IAAM,MAAQ,KAAK,KAAK,CACxB,aAAa,QAEb,IAAI,GAAG,aAAgB,CACjB,IAAI,YAAc,IAAK,WAAW,QAC7B,IAAI,YAAc,KAAK,iBAAiB,QAOjD,IAAM,SAAW,IAAI,OAAO,KACxB,GAAG,IAAI,OAAO,GAAG,IAAI,MAAM,OAC3B,GAAG,IAAI,OAAO,cACZ,QAAU,KAAK,KAAK,CAAG,MAExB,aAAa,YAChB,aAAa,UAAY,CACvB,MAAO,EACP,QAAS,EACT,MAAO,IACP,MAAO,EACP,QAAS,EAAE,CACZ,EAEH,IAAM,MAAQ,aAAa,UAC3B,MAAM,QACN,MAAM,SAAW,QACjB,MAAM,MAAQ,KAAK,IAAI,MAAM,MAAO,QAAQ,CAC5C,MAAM,MAAQ,KAAK,IAAI,MAAM,MAAO,QAAQ,CAC5C,MAAM,QAAQ,KAAK,QAAQ,CACvB,MAAM,QAAQ,OAAS,KAAa,MAAM,QAAQ,OAAO,EAC7D,CAEF,MAAM,EAER,MAAO,eACR,CACF,CA5CoB,EAAE,EA+CzB,aAAa,gBAAiB,UAAW,CACvC,GAAI,CAAC,QAAS,OAEd,IAAM,gBAAkB,aAEtB,SAAS,OAAQ,gBAAiB,EAAE,CAAC,CAEjC,gBAAkB,aAAoB,SAAS,kBAAmB,gBAAiB,EAAE,CAAC,CAE5F,IAAK,IAAM,SAAS,gBAAiB,CACnC,IAAM,iBAAmB,cACvB,SAAS,mBACT,gBAAgB,UAChB,MAAM,YACN,EAAE,CACH,CAED,OAAO,KAAK,CACV,OAAQ,MAAM,OAAO,aAAa,CAClC,KAAM,GAAG,YAAY,MAAM,OAAS,IAAM,GAAK,MAAM,OACrD,WAAY,gBAAgB,KAC5B,QAAS,MAAM,YACf,WAAY,CACV,GAAG,gBAAgB,IAAK,GAAW,EAAE,MAAQ,YAAY,CACzD,GAAG,iBAAiB,IAAK,GAAW,EAAE,MAAQ,YAAY,CAC3D,CACF,CAAC,GAIN,WAAW,CAAE,QAAU,CAChB,WAKL,CAAI,QAAQ,KAAK,cAAc,OAAO,CAStC,IAAK,IAAM,QAAQ,iBAAiB,CAAE,CACpC,IAAM,KAAO,MAAM,KACf,OAAO,MAAS,UAAY,OAAS,oBACzC,gBAAgB,MAAQ,WAG1B,IAAI,KACF,oBAAoB,OAAO,OAAO,mBAC7B,WAAW,kBAAkB,CAAC,QAAU,EAAE,6BAC7B,SAAS,OAC5B,GAGH,UAAW,CACT,kBAAkB,CAClB,gBAAgB,MAAM,CACtB,gBAAgB,MAAM,CACtB,KAAK,OAAO,CACZ,gBAAgB,gBAAqB,WAExC,EAEJ,CAAC"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@forinda/kickjs-devtools",
-  "version": "5.2.1",
+  "version": "5.2.3",
   "description": "Development introspection dashboard for KickJS — routes, DI container, metrics, health",
   "keywords": [
     "kickjs",
@@ -62,8 +62,8 @@
   },
   "dependencies": {
     "reflect-metadata": "^0.2.2",
-    "ws": "^8.20.0",
-    "@forinda/kickjs-devtools-kit": "5.3.0"
+    "ws": "^8.20.1",
+    "@forinda/kickjs-devtools-kit": "5.3.2"
   },
   "peerDependencies": {
     "express": "^5.1.0",
@@ -79,7 +79,7 @@
     "vite": "^8.0.9",
     "vite-plugin-solid": "^2.11.12",
     "vitest": "^4.1.5",
-    "@forinda/kickjs": "5.3.0"
+    "@forinda/kickjs": "5.7.1"
   },
   "publishConfig": {
     "access": "public"