@luckystack/devkit 0.6.6 → 0.7.0

package/dist/cli/validateDeploy.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/cli/validateDeploy.ts"],"sourcesContent":["#!/usr/bin/env node\r\n//? `luckystack-validate-deploy` CLI. Loads the consumer's compiled\r\n//? services.config.js and deploy.config.js as side-effects (they call\r\n//? `registerServicesConfig` / `registerDeployConfig` on import), then runs\r\n//? `validateDeploy()` and prints findings.\r\n//?\r\n//? Designed to be a pre-deploy gate: exit 1 on any error finding, 0\r\n//? otherwise. Warnings print to stderr but never fail the run.\r\n\r\nimport { pathToFileURL } from 'node:url';\r\nimport path from 'node:path';\r\nimport {\r\n  getDeployConfig,\r\n  getServicesConfig,\r\n  isDeployConfigRegistered,\r\n  isServicesConfigRegistered,\r\n} from '@luckystack/core';\r\n\r\nimport { validateDeploy, type ValidationFinding } from '../validateDeploy';\r\n\r\ninterface CliArgs {\r\n  deploy: string | null;\r\n  services: string | null;\r\n  failOnWarning: boolean;\r\n}\r\n\r\nconst parseArgs = (argv: readonly string[]): CliArgs => {\r\n  const args: CliArgs = {\r\n    deploy: null,\r\n    services: null,\r\n    failOnWarning: false,\r\n  };\r\n\r\n  for (let i = 0; i < argv.length; i++) {\r\n    const flag = argv[i];\r\n    const next: string | undefined = i + 1 < argv.length ? argv[i + 1] : undefined;\r\n    switch (flag) {\r\n      case '--deploy':\r\n      case '-d': {\r\n        args.deploy = next ?? null;\r\n        i++;\r\n        break;\r\n      }\r\n      case '--services':\r\n      case '-s': {\r\n        args.services = next ?? null;\r\n        i++;\r\n        break;\r\n      }\r\n      case '--strict': {\r\n        args.failOnWarning = true;\r\n        break;\r\n      }\r\n      case '--help':\r\n      case '-h': {\r\n        printHelp();\r\n        process.exit(0);\r\n        break;\r\n      }\r\n      default: {\r\n        break;\r\n      }\r\n    }\r\n  }\r\n\r\n  return args;\r\n};\r\n\r\nconst printHelp = (): void => {\r\n  process.stdout.write(`\r\nluckystack-validate-deploy — pre-deploy validator for services + deploy configs\r\n\r\nUSAGE\r\n  luckystack-validate-deploy --deploy <file> --services <file> [options]\r\n\r\nREQUIRED\r\n  --deploy, -d <file>      Path to compiled deploy.config.js (registers DeployConfig).\r\n  --services, -s <file>    Path to compiled services.config.js (registers ServicesConfig).\r\n\r\nOPTIONS\r\n  --strict                 Exit 1 on warnings as well as errors.\r\n  --help, -h               Show this help.\r\n\r\nWHAT IT CHECKS\r\n  - Every service is assigned to exactly one preset.\r\n  - Every preset references services that exist.\r\n  - Every environment binding's service matches an actual service.\r\n  - Every environment's redis/mongo resource keys exist.\r\n  - Fallback envs must share the same redis/mongo resource keys.\r\n  - synchronizedEnvKeys and urlEnvKey values resolve at config time (warning only).\r\n  - Services bound in no environment (warning only — valid mid-rollout).\r\n\r\nEXAMPLES\r\n  luckystack-validate-deploy --deploy dist/deploy.config.js --services dist/services.config.js\r\n  npx tsx packages/devkit/dist/cli/validateDeploy.js --deploy ./deploy.config.ts --services ./services.config.ts\r\n`);\r\n};\r\n\r\nconst ALLOWED_CONFIG_EXTENSIONS = new Set(['.js', '.mjs', '.cjs', '.ts', '.mts', '.cts']);\r\n\r\nconst importConfig = async (file: string, label: string): Promise<void> => {\r\n  const abs = path.isAbsolute(file) ? file : path.join(process.cwd(), file);\r\n\r\n  //? Guard: resolved path must stay inside cwd (or the resolved project root)\r\n  //? to prevent `--deploy ../../../../etc/shadow` style path injection.\r\n  const root = path.resolve(process.cwd());\r\n  const resolved = path.resolve(abs);\r\n  if (!resolved.startsWith(root + path.sep) && resolved !== root) {\r\n    throw new Error(\r\n      `[luckystack-validate-deploy] ${label} path \"${file}\" resolves outside the project root — aborting`,\r\n    );\r\n  }\r\n\r\n  //? Guard: only load known JS/TS module extensions.\r\n  const ext = path.extname(resolved).toLowerCase();\r\n  if (!ALLOWED_CONFIG_EXTENSIONS.has(ext)) {\r\n    throw new Error(\r\n      `[luckystack-validate-deploy] ${label} path \"${file}\" has disallowed extension \"${ext}\" — expected one of ${[...ALLOWED_CONFIG_EXTENSIONS].join(', ')}`,\r\n    );\r\n  }\r\n\r\n  try {\r\n    await import(pathToFileURL(resolved).href);\r\n  } catch (error) {\r\n    const message = error instanceof Error ? error.message : String(error);\r\n    throw new Error(`[luckystack-validate-deploy] failed to import ${label} at ${abs}: ${message}`);\r\n  }\r\n};\r\n\r\nconst COLORS = process.stdout.isTTY\r\n  ? {\r\n      reset: '\u001b[0m',\r\n      bold: '\u001b[1m',\r\n      dim: '\u001b[2m',\r\n      red: '\u001b[31m',\r\n      green: '\u001b[32m',\r\n      yellow: '\u001b[33m',\r\n      cyan: '\u001b[36m',\r\n    }\r\n  : { reset: '', bold: '', dim: '', red: '', green: '', yellow: '', cyan: '' };\r\n\r\nconst printFinding = (finding: ValidationFinding): void => {\r\n  const tag = finding.severity === 'error'\r\n    ? `${COLORS.red}${COLORS.bold}ERROR${COLORS.reset}`\r\n    : `${COLORS.yellow}${COLORS.bold}WARN ${COLORS.reset}`;\r\n  const code = `${COLORS.dim}[${finding.code}]${COLORS.reset}`;\r\n  const location = finding.location ? `\\n  ${COLORS.dim}at ${finding.location}${COLORS.reset}` : '';\r\n  const sink = finding.severity === 'error' ? process.stderr : process.stdout;\r\n  sink.write(`${tag} ${code} ${finding.message}${location}\\n`);\r\n};\r\n\r\nconst main = async (): Promise<void> => {\r\n  const args = parseArgs(process.argv.slice(2));\r\n\r\n  if (!args.deploy || !args.services) {\r\n    process.stderr.write('[luckystack-validate-deploy] --deploy and --services are required. Run with --help for usage.\\n');\r\n    process.exit(2);\r\n  }\r\n\r\n  await importConfig(args.deploy, 'deploy config');\r\n  await importConfig(args.services, 'services config');\r\n\r\n  if (!isDeployConfigRegistered()) {\r\n    process.stderr.write('[luckystack-validate-deploy] deploy config file did not call registerDeployConfig — nothing to validate.\\n');\r\n    process.exit(2);\r\n  }\r\n  if (!isServicesConfigRegistered()) {\r\n    process.stderr.write('[luckystack-validate-deploy] services config file did not call registerServicesConfig — nothing to validate.\\n');\r\n    process.exit(2);\r\n  }\r\n\r\n  const result = validateDeploy({\r\n    services: getServicesConfig(),\r\n    deploy: getDeployConfig(),\r\n  });\r\n\r\n  for (const finding of result.findings) {\r\n    printFinding(finding);\r\n  }\r\n\r\n  const summary = result.ok\r\n    ? `${COLORS.green}${COLORS.bold}OK${COLORS.reset}`\r\n    : `${COLORS.red}${COLORS.bold}FAILED${COLORS.reset}`;\r\n  process.stdout.write(\r\n    `\\n${summary} — ${String(result.errorCount)} error(s), ${String(result.warningCount)} warning(s)\\n`,\r\n  );\r\n\r\n  if (result.errorCount > 0) {\r\n    process.exit(1);\r\n  }\r\n  if (args.failOnWarning && result.warningCount > 0) {\r\n    process.exit(1);\r\n  }\r\n  process.exit(0);\r\n};\r\n\r\nmain().catch((error: unknown) => {\r\n  const message = error instanceof Error ? error.stack ?? error.message : String(error);\r\n  process.stderr.write(`[luckystack-validate-deploy] fatal: ${message}\\n`);\r\n  process.exit(1);\r\n});\r\n"],"mappings":";;;;;;AASA,SAAS,qBAAqB;AAC9B,OAAO,UAAU;AACjB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAUP,IAAM,YAAY,CAAC,SAAqC;AACtD,QAAM,OAAgB;AAAA,IACpB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAEA,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,OAAO,KAAK,CAAC;AACnB,UAAM,OAA2B,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,IAAI;AACrE,YAAQ,MAAM;AAAA,MACZ,KAAK;AAAA,MACL,KAAK,MAAM;AACT,aAAK,SAAS,QAAQ;AACtB;AACA;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK,MAAM;AACT,aAAK,WAAW,QAAQ;AACxB;AACA;AAAA,MACF;AAAA,MACA,KAAK,YAAY;AACf,aAAK,gBAAgB;AACrB;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK,MAAM;AACT,kBAAU;AACV,gBAAQ,KAAK,CAAC;AACd;AAAA,MACF;AAAA,MACA,SAAS;AACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,IAAM,YAAY,MAAY;AAC5B,UAAQ,OAAO,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CA0BtB;AACD;AAEA,IAAM,4BAA4B,oBAAI,IAAI,CAAC,OAAO,QAAQ,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAExF,IAAM,eAAe,OAAO,MAAc,UAAiC;AACzE,QAAM,MAAM,KAAK,WAAW,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,IAAI;AAIxE,QAAM,OAAO,KAAK,QAAQ,QAAQ,IAAI,CAAC;AACvC,QAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,MAAI,CAAC,SAAS,WAAW,OAAO,KAAK,GAAG,KAAK,aAAa,MAAM;AAC9D,UAAM,IAAI;AAAA,MACR,gCAAgC,KAAK,UAAU,IAAI;AAAA,IACrD;AAAA,EACF;AAGA,QAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,YAAY;AAC/C,MAAI,CAAC,0BAA0B,IAAI,GAAG,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,gCAAgC,KAAK,UAAU,IAAI,+BAA+B,GAAG,4BAAuB,CAAC,GAAG,yBAAyB,EAAE,KAAK,IAAI,CAAC;AAAA,IACvJ;AAAA,EACF;AAEA,MAAI;AACF,UAAM,OAAO,cAAc,QAAQ,EAAE;AAAA,EACvC,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,UAAM,IAAI,MAAM,iDAAiD,KAAK,OAAO,GAAG,KAAK,OAAO,EAAE;AAAA,EAChG;AACF;AAEA,IAAM,SAAS,QAAQ,OAAO,QAC1B;AAAA,EACE,OAAO;AAAA,EACP,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM;AACR,IACA,EAAE,OAAO,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI,MAAM,GAAG;AAE7E,IAAM,eAAe,CAAC,YAAqC;AACzD,QAAM,MAAM,QAAQ,aAAa,UAC7B,GAAG,OAAO,GAAG,GAAG,OAAO,IAAI,QAAQ,OAAO,KAAK,KAC/C,GAAG,OAAO,MAAM,GAAG,OAAO,IAAI,QAAQ,OAAO,KAAK;AACtD,QAAM,OAAO,GAAG,OAAO,GAAG,IAAI,QAAQ,IAAI,IAAI,OAAO,KAAK;AAC1D,QAAM,WAAW,QAAQ,WAAW;AAAA,IAAO,OAAO,GAAG,MAAM,QAAQ,QAAQ,GAAG,OAAO,KAAK,KAAK;AAC/F,QAAM,OAAO,QAAQ,aAAa,UAAU,QAAQ,SAAS,QAAQ;AACrE,OAAK,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,QAAQ,OAAO,GAAG,QAAQ;AAAA,CAAI;AAC7D;AAEA,IAAM,OAAO,YAA2B;AACtC,QAAM,OAAO,UAAU,QAAQ,KAAK,MAAM,CAAC,CAAC;AAE5C,MAAI,CAAC,KAAK,UAAU,CAAC,KAAK,UAAU;AAClC,YAAQ,OAAO,MAAM,iGAAiG;AACtH,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,aAAa,KAAK,QAAQ,eAAe;AAC/C,QAAM,aAAa,KAAK,UAAU,iBAAiB;AAEnD,MAAI,CAAC,yBAAyB,GAAG;AAC/B,YAAQ,OAAO,MAAM,iHAA4G;AACjI,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,CAAC,2BAA2B,GAAG;AACjC,YAAQ,OAAO,MAAM,qHAAgH;AACrI,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAS,eAAe;AAAA,IAC5B,UAAU,kBAAkB;AAAA,IAC5B,QAAQ,gBAAgB;AAAA,EAC1B,CAAC;AAED,aAAW,WAAW,OAAO,UAAU;AACrC,iBAAa,OAAO;AAAA,EACtB;AAEA,QAAM,UAAU,OAAO,KACnB,GAAG,OAAO,KAAK,GAAG,OAAO,IAAI,KAAK,OAAO,KAAK,KAC9C,GAAG,OAAO,GAAG,GAAG,OAAO,IAAI,SAAS,OAAO,KAAK;AACpD,UAAQ,OAAO;AAAA,IACb;AAAA,EAAK,OAAO,WAAM,OAAO,OAAO,UAAU,CAAC,cAAc,OAAO,OAAO,YAAY,CAAC;AAAA;AAAA,EACtF;AAEA,MAAI,OAAO,aAAa,GAAG;AACzB,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,KAAK,iBAAiB,OAAO,eAAe,GAAG;AACjD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,KAAK,CAAC;AAChB;AAEA,KAAK,EAAE,MAAM,CAAC,UAAmB;AAC/B,QAAM,UAAU,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK;AACpF,UAAQ,OAAO,MAAM,uCAAuC,OAAO;AAAA,CAAI;AACvE,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}
+{"version":3,"sources":["../../src/cli/validateDeploy.ts"],"sourcesContent":["#!/usr/bin/env node\n//? `luckystack-validate-deploy` CLI. Loads the consumer's compiled\n//? services.config.js and deploy.config.js as side-effects (they call\n//? `registerServicesConfig` / `registerDeployConfig` on import), then runs\n//? `validateDeploy()` and prints findings.\n//?\n//? Designed to be a pre-deploy gate: exit 1 on any error finding, 0\n//? otherwise. Warnings print to stderr but never fail the run.\n\nimport { pathToFileURL } from 'node:url';\nimport path from 'node:path';\nimport {\n  getDeployConfig,\n  getServicesConfig,\n  isDeployConfigRegistered,\n  isServicesConfigRegistered,\n} from '@luckystack/core';\n\nimport { validateDeploy, type ValidationFinding } from '../validateDeploy';\n\ninterface CliArgs {\n  deploy: string | null;\n  services: string | null;\n  failOnWarning: boolean;\n}\n\nconst parseArgs = (argv: readonly string[]): CliArgs => {\n  const args: CliArgs = {\n    deploy: null,\n    services: null,\n    failOnWarning: false,\n  };\n\n  for (let i = 0; i < argv.length; i++) {\n    const flag = argv[i];\n    const next: string | undefined = i + 1 < argv.length ? argv[i + 1] : undefined;\n    switch (flag) {\n      case '--deploy':\n      case '-d': {\n        args.deploy = next ?? null;\n        i++;\n        break;\n      }\n      case '--services':\n      case '-s': {\n        args.services = next ?? null;\n        i++;\n        break;\n      }\n      case '--strict': {\n        args.failOnWarning = true;\n        break;\n      }\n      case '--help':\n      case '-h': {\n        printHelp();\n        process.exit(0);\n        break;\n      }\n      default: {\n        break;\n      }\n    }\n  }\n\n  return args;\n};\n\nconst printHelp = (): void => {\n  process.stdout.write(`\nluckystack-validate-deploy — pre-deploy validator for services + deploy configs\n\nUSAGE\n  luckystack-validate-deploy --deploy <file> --services <file> [options]\n\nREQUIRED\n  --deploy, -d <file>      Path to compiled deploy.config.js (registers DeployConfig).\n  --services, -s <file>    Path to compiled services.config.js (registers ServicesConfig).\n\nOPTIONS\n  --strict                 Exit 1 on warnings as well as errors.\n  --help, -h               Show this help.\n\nWHAT IT CHECKS\n  - Every service is assigned to exactly one preset.\n  - Every preset references services that exist.\n  - Every environment binding's service matches an actual service.\n  - Every environment's redis/mongo resource keys exist.\n  - Fallback envs must share the same redis/mongo resource keys.\n  - synchronizedEnvKeys and urlEnvKey values resolve at config time (warning only).\n  - Services bound in no environment (warning only — valid mid-rollout).\n\nEXAMPLES\n  luckystack-validate-deploy --deploy dist/deploy.config.js --services dist/services.config.js\n  npx tsx packages/devkit/dist/cli/validateDeploy.js --deploy ./deploy.config.ts --services ./services.config.ts\n`);\n};\n\nconst ALLOWED_CONFIG_EXTENSIONS = new Set(['.js', '.mjs', '.cjs', '.ts', '.mts', '.cts']);\n\nconst importConfig = async (file: string, label: string): Promise<void> => {\n  const abs = path.isAbsolute(file) ? file : path.join(process.cwd(), file);\n\n  //? Guard: resolved path must stay inside cwd (or the resolved project root)\n  //? to prevent `--deploy ../../../../etc/shadow` style path injection.\n  const root = path.resolve(process.cwd());\n  const resolved = path.resolve(abs);\n  if (!resolved.startsWith(root + path.sep) && resolved !== root) {\n    throw new Error(\n      `[luckystack-validate-deploy] ${label} path \"${file}\" resolves outside the project root — aborting`,\n    );\n  }\n\n  //? Guard: only load known JS/TS module extensions.\n  const ext = path.extname(resolved).toLowerCase();\n  if (!ALLOWED_CONFIG_EXTENSIONS.has(ext)) {\n    throw new Error(\n      `[luckystack-validate-deploy] ${label} path \"${file}\" has disallowed extension \"${ext}\" — expected one of ${[...ALLOWED_CONFIG_EXTENSIONS].join(', ')}`,\n    );\n  }\n\n  try {\n    await import(pathToFileURL(resolved).href);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    throw new Error(`[luckystack-validate-deploy] failed to import ${label} at ${abs}: ${message}`);\n  }\n};\n\nconst COLORS = process.stdout.isTTY\n  ? {\n      reset: '\u001b[0m',\n      bold: '\u001b[1m',\n      dim: '\u001b[2m',\n      red: '\u001b[31m',\n      green: '\u001b[32m',\n      yellow: '\u001b[33m',\n      cyan: '\u001b[36m',\n    }\n  : { reset: '', bold: '', dim: '', red: '', green: '', yellow: '', cyan: '' };\n\nconst printFinding = (finding: ValidationFinding): void => {\n  const tag = finding.severity === 'error'\n    ? `${COLORS.red}${COLORS.bold}ERROR${COLORS.reset}`\n    : `${COLORS.yellow}${COLORS.bold}WARN ${COLORS.reset}`;\n  const code = `${COLORS.dim}[${finding.code}]${COLORS.reset}`;\n  const location = finding.location ? `\\n  ${COLORS.dim}at ${finding.location}${COLORS.reset}` : '';\n  const sink = finding.severity === 'error' ? process.stderr : process.stdout;\n  sink.write(`${tag} ${code} ${finding.message}${location}\\n`);\n};\n\nconst main = async (): Promise<void> => {\n  const args = parseArgs(process.argv.slice(2));\n\n  if (!args.deploy || !args.services) {\n    process.stderr.write('[luckystack-validate-deploy] --deploy and --services are required. Run with --help for usage.\\n');\n    process.exit(2);\n  }\n\n  await importConfig(args.deploy, 'deploy config');\n  await importConfig(args.services, 'services config');\n\n  if (!isDeployConfigRegistered()) {\n    process.stderr.write('[luckystack-validate-deploy] deploy config file did not call registerDeployConfig — nothing to validate.\\n');\n    process.exit(2);\n  }\n  if (!isServicesConfigRegistered()) {\n    process.stderr.write('[luckystack-validate-deploy] services config file did not call registerServicesConfig — nothing to validate.\\n');\n    process.exit(2);\n  }\n\n  const result = validateDeploy({\n    services: getServicesConfig(),\n    deploy: getDeployConfig(),\n  });\n\n  for (const finding of result.findings) {\n    printFinding(finding);\n  }\n\n  const summary = result.ok\n    ? `${COLORS.green}${COLORS.bold}OK${COLORS.reset}`\n    : `${COLORS.red}${COLORS.bold}FAILED${COLORS.reset}`;\n  process.stdout.write(\n    `\\n${summary} — ${String(result.errorCount)} error(s), ${String(result.warningCount)} warning(s)\\n`,\n  );\n\n  if (result.errorCount > 0) {\n    process.exit(1);\n  }\n  if (args.failOnWarning && result.warningCount > 0) {\n    process.exit(1);\n  }\n  process.exit(0);\n};\n\nmain().catch((error: unknown) => {\n  const message = error instanceof Error ? error.stack ?? error.message : String(error);\n  process.stderr.write(`[luckystack-validate-deploy] fatal: ${message}\\n`);\n  process.exit(1);\n});\n"],"mappings":";;;;;;AASA,SAAS,qBAAqB;AAC9B,OAAO,UAAU;AACjB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAUP,IAAM,YAAY,CAAC,SAAqC;AACtD,QAAM,OAAgB;AAAA,IACpB,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,eAAe;AAAA,EACjB;AAEA,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,OAAO,KAAK,CAAC;AACnB,UAAM,OAA2B,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,IAAI;AACrE,YAAQ,MAAM;AAAA,MACZ,KAAK;AAAA,MACL,KAAK,MAAM;AACT,aAAK,SAAS,QAAQ;AACtB;AACA;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK,MAAM;AACT,aAAK,WAAW,QAAQ;AACxB;AACA;AAAA,MACF;AAAA,MACA,KAAK,YAAY;AACf,aAAK,gBAAgB;AACrB;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK,MAAM;AACT,kBAAU;AACV,gBAAQ,KAAK,CAAC;AACd;AAAA,MACF;AAAA,MACA,SAAS;AACP;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEA,IAAM,YAAY,MAAY;AAC5B,UAAQ,OAAO,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CA0BtB;AACD;AAEA,IAAM,4BAA4B,oBAAI,IAAI,CAAC,OAAO,QAAQ,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAExF,IAAM,eAAe,OAAO,MAAc,UAAiC;AACzE,QAAM,MAAM,KAAK,WAAW,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,GAAG,IAAI;AAIxE,QAAM,OAAO,KAAK,QAAQ,QAAQ,IAAI,CAAC;AACvC,QAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,MAAI,CAAC,SAAS,WAAW,OAAO,KAAK,GAAG,KAAK,aAAa,MAAM;AAC9D,UAAM,IAAI;AAAA,MACR,gCAAgC,KAAK,UAAU,IAAI;AAAA,IACrD;AAAA,EACF;AAGA,QAAM,MAAM,KAAK,QAAQ,QAAQ,EAAE,YAAY;AAC/C,MAAI,CAAC,0BAA0B,IAAI,GAAG,GAAG;AACvC,UAAM,IAAI;AAAA,MACR,gCAAgC,KAAK,UAAU,IAAI,+BAA+B,GAAG,4BAAuB,CAAC,GAAG,yBAAyB,EAAE,KAAK,IAAI,CAAC;AAAA,IACvJ;AAAA,EACF;AAEA,MAAI;AACF,UAAM,OAAO,cAAc,QAAQ,EAAE;AAAA,EACvC,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,UAAM,IAAI,MAAM,iDAAiD,KAAK,OAAO,GAAG,KAAK,OAAO,EAAE;AAAA,EAChG;AACF;AAEA,IAAM,SAAS,QAAQ,OAAO,QAC1B;AAAA,EACE,OAAO;AAAA,EACP,MAAM;AAAA,EACN,KAAK;AAAA,EACL,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM;AACR,IACA,EAAE,OAAO,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,IAAI,OAAO,IAAI,QAAQ,IAAI,MAAM,GAAG;AAE7E,IAAM,eAAe,CAAC,YAAqC;AACzD,QAAM,MAAM,QAAQ,aAAa,UAC7B,GAAG,OAAO,GAAG,GAAG,OAAO,IAAI,QAAQ,OAAO,KAAK,KAC/C,GAAG,OAAO,MAAM,GAAG,OAAO,IAAI,QAAQ,OAAO,KAAK;AACtD,QAAM,OAAO,GAAG,OAAO,GAAG,IAAI,QAAQ,IAAI,IAAI,OAAO,KAAK;AAC1D,QAAM,WAAW,QAAQ,WAAW;AAAA,IAAO,OAAO,GAAG,MAAM,QAAQ,QAAQ,GAAG,OAAO,KAAK,KAAK;AAC/F,QAAM,OAAO,QAAQ,aAAa,UAAU,QAAQ,SAAS,QAAQ;AACrE,OAAK,MAAM,GAAG,GAAG,IAAI,IAAI,IAAI,QAAQ,OAAO,GAAG,QAAQ;AAAA,CAAI;AAC7D;AAEA,IAAM,OAAO,YAA2B;AACtC,QAAM,OAAO,UAAU,QAAQ,KAAK,MAAM,CAAC,CAAC;AAE5C,MAAI,CAAC,KAAK,UAAU,CAAC,KAAK,UAAU;AAClC,YAAQ,OAAO,MAAM,iGAAiG;AACtH,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,aAAa,KAAK,QAAQ,eAAe;AAC/C,QAAM,aAAa,KAAK,UAAU,iBAAiB;AAEnD,MAAI,CAAC,yBAAyB,GAAG;AAC/B,YAAQ,OAAO,MAAM,iHAA4G;AACjI,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,CAAC,2BAA2B,GAAG;AACjC,YAAQ,OAAO,MAAM,qHAAgH;AACrI,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAS,eAAe;AAAA,IAC5B,UAAU,kBAAkB;AAAA,IAC5B,QAAQ,gBAAgB;AAAA,EAC1B,CAAC;AAED,aAAW,WAAW,OAAO,UAAU;AACrC,iBAAa,OAAO;AAAA,EACtB;AAEA,QAAM,UAAU,OAAO,KACnB,GAAG,OAAO,KAAK,GAAG,OAAO,IAAI,KAAK,OAAO,KAAK,KAC9C,GAAG,OAAO,GAAG,GAAG,OAAO,IAAI,SAAS,OAAO,KAAK;AACpD,UAAQ,OAAO;AAAA,IACb;AAAA,EAAK,OAAO,WAAM,OAAO,OAAO,UAAU,CAAC,cAAc,OAAO,OAAO,YAAY,CAAC;AAAA;AAAA,EACtF;AAEA,MAAI,OAAO,aAAa,GAAG;AACzB,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,KAAK,iBAAiB,OAAO,eAAe,GAAG;AACjD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,UAAQ,KAAK,CAAC;AAChB;AAEA,KAAK,EAAE,MAAM,CAAC,UAAmB;AAC/B,QAAM,UAAU,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK;AACpF,UAAQ,OAAO,MAAM,uCAAuC,OAAO;AAAA,CAAI;AACvE,UAAQ,KAAK,CAAC;AAChB,CAAC;","names":[]}

package/dist/index.js

@@ -1,6 +1,6 @@
 import {
   validateDeploy
-} from "./chunk-EU2RFSLO.js";
+} from "./chunk-BZTCJ7JY.js";
 
 // src/typeMap/discovery.ts
 import fs from "fs";
@@ -468,7 +468,7 @@ var convertTypeNode = (node) => {
         return args.length === 1 && arg0 ? `z.array(${convertTypeNode(arg0)})` : anyFallback("Array without element type");
       }
       case "Date": {
-        return "z.date()";
+        return "z.iso.datetime()";
       }
       default: {
         return anyFallback(`unresolved TypeReference '${name}'`);
@@ -519,6 +519,41 @@ var typeTextToZodSource = (typeText) => {
   return convertTypeNode(statement.type);
 };
 
+// src/typeMap/extractionDiagnostics.ts
+import { tryCatchSync as tryCatchSync2 } from "@luckystack/core";
+var failures = /* @__PURE__ */ new Map();
+var keyOf = (filePath, kind, field) => `${filePath}|${kind}|${field}`;
+var messageOf = (error) => {
+  if (error instanceof Error) return error.message;
+  if (typeof error === "string") return error;
+  const [, encoded] = tryCatchSync2(() => JSON.stringify(error));
+  return encoded ?? Object.prototype.toString.call(error);
+};
+var recordExtractionOutcome = ({
+  filePath,
+  kind,
+  field,
+  error
+}) => {
+  const key = keyOf(filePath, kind, field);
+  if (error === null) {
+    failures.delete(key);
+    return;
+  }
+  failures.set(key, { filePath, kind, field, message: messageOf(error) });
+};
+var routeKeyOf = ({ filePath, kind }) => {
+  const [, route] = tryCatchSync2(() => kind === "api" ? `${extractPagePath(filePath)}/${extractApiName(filePath)}@${extractApiVersion(filePath)}` : `${extractSyncPagePath(filePath)}/${extractSyncName(filePath)}@${extractSyncVersion(filePath)}`);
+  return route;
+};
+var findExtractionFailure = (route, kind, field) => {
+  for (const failure of failures.values()) {
+    if (failure.kind !== kind || failure.field !== field) continue;
+    if (routeKeyOf(failure) === route) return failure.message;
+  }
+  return void 0;
+};
+
 // src/typeMap/emitterArtifacts.ts
 var buildImportStatements = ({
   namedImports,
@@ -683,12 +718,17 @@ var validateGeneratedTypeIdentifiers = (content) => {
 };
 var collectFallbacks = (typesByPage, syncTypesByPage) => {
   const entries = [];
-  const flagField = (route, kind, field, value) => {
+  const flagField = (route, kind, field, value, checkZod = false) => {
+    const extractionError = findExtractionFailure(route, kind, field);
+    if (extractionError !== void 0) {
+      entries.push({ route, kind, field, fallback: value, reason: "extraction-error", detail: extractionError });
+      return;
+    }
     if (value === "{ }" || value === "{ status: string }") {
       entries.push({ route, kind, field, fallback: value, reason: "default-fallback" });
       return;
     }
-    const zodSrc = typeTextToZodSource(value);
+    const zodSrc = checkZod ? typeTextToZodSource(value) : null;
     if (zodSrc?.includes("z.any()")) {
       entries.push({ route, kind, field, fallback: value.slice(0, 80), reason: "zod-any-fallback" });
     }
@@ -697,8 +737,9 @@ var collectFallbacks = (typesByPage, syncTypesByPage) => {
     for (const [apiKey, entry] of apis) {
       const { name, version } = splitVersionedKey(apiKey);
       const route = `${pagePath}/${name}@${version}`;
-      flagField(route, "api", "input", entry.input);
+      flagField(route, "api", "input", entry.input, true);
       flagField(route, "api", "output", entry.output);
+      flagField(route, "api", "stream", entry.stream);
     }
   }
   for (const [pagePath, syncs] of syncTypesByPage) {
@@ -708,6 +749,8 @@ var collectFallbacks = (typesByPage, syncTypesByPage) => {
       flagField(route, "sync", "clientInput", entry.clientInput);
       flagField(route, "sync", "serverOutput", entry.serverOutput);
       flagField(route, "sync", "clientOutput", entry.clientOutput);
+      flagField(route, "sync", "serverStream", entry.serverStream);
+      flagField(route, "sync", "clientStream", entry.clientStream);
     }
   }
   return entries;
@@ -1146,7 +1189,7 @@ var getServerProgram = () => {
 var invalidateProgramCache = () => {
   cachedProgram = null;
 };
-var DEPTH_LIMIT = 12;
+var DEPTH_LIMIT = 14;
 var JSON_TYPE_NAMES = /* @__PURE__ */ new Set([
   "Json",
   "JsonValue",
@@ -1169,12 +1212,37 @@ var SKIP_EXPANSION = /* @__PURE__ */ new Set([
   "ArrayBuffer",
   "ReadonlyArray"
 ]);
+var TRANSPORT_DEPENDENT_BINARY_TYPES = /* @__PURE__ */ new Set([
+  "Buffer",
+  "ArrayBuffer",
+  "SharedArrayBuffer",
+  "DataView",
+  "Blob",
+  "File",
+  "Int8Array",
+  "Uint8Array",
+  "Uint8ClampedArray",
+  "Int16Array",
+  "Uint16Array",
+  "Int32Array",
+  "Uint32Array",
+  "Float32Array",
+  "Float64Array",
+  "BigInt64Array",
+  "BigUint64Array"
+]);
+var UnsupportedWireTypeError = class extends Error {
+  constructor(typeName) {
+    super(`[TypeMapGenerator] ${typeName} has transport-dependent or non-JSON output semantics. Return an explicit JSON DTO/base64 string, or use a transport-specific custom route.`);
+    this.name = "UnsupportedWireTypeError";
+  }
+};
 var isJsonLikeType = (type, checker) => {
   const symbolName = type.symbol?.name ?? "";
   const aliasName = type.aliasSymbol?.name ?? "";
   if (JSON_TYPE_NAMES.has(symbolName) || JSON_TYPE_NAMES.has(aliasName)) return true;
-  const rendered = checker.typeToString(type);
-  return /(\bPrisma\.)?(Input)?Json(Value|Object|Array)\b/.test(rendered);
+  const rendered = checker.typeToString(type).trim();
+  return /^(?:Prisma\.)?(?:Input)?Json(?:Value|Object|Array)$/.test(rendered);
 };
 var getLiteralTypeFromExpression = (expression, checker, depth) => {
   if (ts4.isParenthesizedExpression(expression)) {
@@ -1258,8 +1326,64 @@ var collectTypeSymbolFallback = (type) => {
     importPath: normalizeImportPath(sourceFile)
   }];
 };
-var expandTypeDetailed = (type, checker, depth = 0, state) => {
-  const expandState = state ?? { stackTypeIds: /* @__PURE__ */ new Set() };
+var WIRE_PROJECTED_TYPES = /* @__PURE__ */ new Map([["Date", "string"]]);
+var resolveToJsonReturnType = (type, checker) => {
+  const toJson = type.getProperty("toJSON");
+  if (!toJson) return null;
+  const declaration = toJson.valueDeclaration ?? toJson.declarations?.[0];
+  if (!declaration) return null;
+  const signature = checker.getTypeOfSymbolAtLocation(toJson, declaration).getCallSignatures()[0];
+  return signature ? signature.getReturnType() : null;
+};
+var isFunctionValueType = (type) => type.getCallSignatures().length > 0;
+var typeNameOf = (type, checker) => {
+  const objectType = type;
+  if (type.flags & ts4.TypeFlags.Object && objectType.objectFlags & ts4.ObjectFlags.Reference) {
+    const targetName = objectType.target.getSymbol()?.name;
+    if (targetName) return targetName;
+  }
+  return type.getSymbol()?.name ?? checker.typeToString(type);
+};
+var assertSupportedWireType = (type, checker) => {
+  const typeName = typeNameOf(type, checker);
+  if (TRANSPORT_DEPENDENT_BINARY_TYPES.has(typeName)) {
+    throw new UnsupportedWireTypeError(typeName);
+  }
+  if ((type.flags & (ts4.TypeFlags.BigInt | ts4.TypeFlags.BigIntLiteral)) !== 0) {
+    throw new UnsupportedWireTypeError("bigint");
+  }
+};
+var isJsonOmittedValueType = (type) => (type.flags & (ts4.TypeFlags.Undefined | ts4.TypeFlags.Void | ts4.TypeFlags.ESSymbol | ts4.TypeFlags.UniqueESSymbol)) !== 0 || isFunctionValueType(type);
+var resolveWireConstituents = (type, checker) => {
+  const queue = type.isUnion() ? [...type.types] : [type];
+  const serializable = [];
+  let omitted = false;
+  let changed = false;
+  for (const candidate of queue) {
+    assertSupportedWireType(candidate, checker);
+    if (isJsonOmittedValueType(candidate)) {
+      omitted = true;
+      changed = true;
+      continue;
+    }
+    const jsonType = resolveToJsonReturnType(candidate, checker);
+    const effective = jsonType && jsonType !== candidate ? jsonType : candidate;
+    if (effective !== candidate) changed = true;
+    const effectiveTypes = effective.isUnion() ? effective.types : [effective];
+    for (const effectiveType of effectiveTypes) {
+      assertSupportedWireType(effectiveType, checker);
+      if (isJsonOmittedValueType(effectiveType)) {
+        omitted = true;
+        changed = true;
+      } else {
+        serializable.push(effectiveType);
+      }
+    }
+  }
+  return changed ? { serializable, omitted } : { serializable: [type], omitted: false };
+};
+var expandTypeDetailed = (type, checker, depth = 0, state, options) => {
+  const expandState = state ?? { stackTypeIds: /* @__PURE__ */ new Set(), wireProjection: options?.wireProjection ?? false };
   const typeId = type.id;
   if (typeId !== void 0) {
     if (expandState.stackTypeIds.has(typeId)) {
@@ -1271,6 +1395,12 @@ var expandTypeDetailed = (type, checker, depth = 0, state) => {
     expandState.stackTypeIds.add(typeId);
   }
   try {
+    if (expandState.wireProjection) {
+      assertSupportedWireType(type, checker);
+      if (isJsonOmittedValueType(type)) {
+        throw new UnsupportedWireTypeError(checker.typeToString(type));
+      }
+    }
     if (depth > DEPTH_LIMIT) {
       return {
         text: checker.typeToString(type),
@@ -1290,7 +1420,8 @@ var expandTypeDetailed = (type, checker, depth = 0, state) => {
         unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, expanded.unresolvedSymbols);
         return expanded.text;
       });
-      return { text: expandedTypes.join(" | "), unresolvedSymbols };
+      const uniqueTypes = [...new Set(expandedTypes)];
+      return { text: uniqueTypes.join(" | "), unresolvedSymbols };
     }
     if (type.isIntersection()) {
       let unresolvedSymbols = [];
@@ -1303,16 +1434,29 @@ var expandTypeDetailed = (type, checker, depth = 0, state) => {
     }
     if (type.flags & ts4.TypeFlags.Object) {
       const objectType = type;
-      if (objectType.objectFlags & ts4.ObjectFlags.Tuple) {
+      const tupleTarget = objectType.objectFlags & ts4.ObjectFlags.Reference ? objectType.target : objectType;
+      if (tupleTarget.objectFlags & ts4.ObjectFlags.Tuple) {
         const typeArgs = checker.getTypeArguments(objectType);
         let unresolvedSymbols = [];
         const tupleTypes = typeArgs.map((innerType) => {
-          const expanded = expandTypeDetailed(innerType, checker, depth + 1, expandState);
-          unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, expanded.unresolvedSymbols);
-          return expanded.text;
+          const wire = expandState.wireProjection ? resolveWireConstituents(innerType, checker) : { serializable: [innerType], omitted: false };
+          const texts = [];
+          for (const serializableType of wire.serializable) {
+            const expanded = expandTypeDetailed(serializableType, checker, depth + 1, expandState);
+            unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, expanded.unresolvedSymbols);
+            texts.push(expanded.text);
+          }
+          if (wire.omitted) texts.push("null");
+          return [...new Set(texts)].join(" | ");
         });
         return { text: `[${tupleTypes.join(", ")}]`, unresolvedSymbols };
       }
+      if (expandState.wireProjection) {
+        const jsonType = resolveToJsonReturnType(type, checker);
+        if (jsonType && jsonType !== type) {
+          return expandTypeDetailed(jsonType, checker, depth + 1, expandState);
+        }
+      }
       if (objectType.objectFlags & ts4.ObjectFlags.Reference) {
         const refType = objectType;
         const targetName = refType.target.symbol?.name ?? "";
@@ -1320,21 +1464,29 @@ var expandTypeDetailed = (type, checker, depth = 0, state) => {
           const typeArgs = checker.getTypeArguments(refType);
           const firstArg = typeArgs[0];
           if (firstArg) {
-            const expanded = expandTypeDetailed(firstArg, checker, depth + 1, expandState);
-            const elementType = /\s[|&]\s/.test(expanded.text) ? `(${expanded.text})` : expanded.text;
-            return {
-              text: `${elementType}[]`,
-              unresolvedSymbols: expanded.unresolvedSymbols
-            };
+            const wire = expandState.wireProjection ? resolveWireConstituents(firstArg, checker) : { serializable: [firstArg], omitted: false };
+            let unresolvedSymbols = [];
+            const texts = [];
+            for (const serializableType of wire.serializable) {
+              const expanded = expandTypeDetailed(serializableType, checker, depth + 1, expandState);
+              unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, expanded.unresolvedSymbols);
+              texts.push(expanded.text);
+            }
+            if (wire.omitted) texts.push("null");
+            const expandedText = [...new Set(texts)].join(" | ");
+            const elementType = /\s[|&]\s/.test(expandedText) ? `(${expandedText})` : expandedText;
+            return { text: `${elementType}[]`, unresolvedSymbols };
           }
         }
         if (SKIP_EXPANSION.has(targetName)) {
-          return { text: checker.typeToString(type), unresolvedSymbols: [] };
+          const projected = expandState.wireProjection ? WIRE_PROJECTED_TYPES.get(targetName) : void 0;
+          return { text: projected ?? checker.typeToString(type), unresolvedSymbols: [] };
         }
       }
-      const symbolName = type.symbol.name || (type.aliasSymbol?.name ?? "");
+      const symbolName = type.symbol?.name || (type.aliasSymbol?.name ?? "");
       if (SKIP_EXPANSION.has(symbolName)) {
-        return { text: checker.typeToString(type), unresolvedSymbols: [] };
+        const projected = expandState.wireProjection ? WIRE_PROJECTED_TYPES.get(symbolName) : void 0;
+        return { text: projected ?? checker.typeToString(type), unresolvedSymbols: [] };
       }
       const props = checker.getPropertiesOfType(type);
       const indexInfos = checker.getIndexInfosOfType(type);
@@ -1344,22 +1496,34 @@ var expandTypeDetailed = (type, checker, depth = 0, state) => {
         for (const prop of props) {
           if (prop.getName().startsWith("__@")) continue;
           const propType = checker.getTypeOfSymbol(prop);
+          const wire = expandState.wireProjection ? resolveWireConstituents(propType, checker) : { serializable: [propType], omitted: false };
+          if (wire.serializable.length === 0) continue;
           const literalType = getLiteralTypeFromPropertySymbol(prop, checker, depth + 1);
-          const isOptional = (prop.flags & ts4.SymbolFlags.Optional) !== 0;
-          if (literalType) {
+          const isOptional = (prop.flags & ts4.SymbolFlags.Optional) !== 0 || wire.omitted;
+          if (literalType && !wire.omitted) {
             fields.push(`${prop.name}${isOptional ? "?" : ""}: ${literalType}`);
             continue;
           }
-          const expandedProp = expandTypeDetailed(propType, checker, depth + 1, expandState);
-          unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, expandedProp.unresolvedSymbols);
-          fields.push(`${prop.name}${isOptional ? "?" : ""}: ${expandedProp.text}`);
+          const texts = [];
+          for (const serializableType of wire.serializable) {
+            const expandedProp = expandTypeDetailed(serializableType, checker, depth + 1, expandState);
+            unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, expandedProp.unresolvedSymbols);
+            texts.push(expandedProp.text);
+          }
+          fields.push(`${prop.name}${isOptional ? "?" : ""}: ${[...new Set(texts)].join(" | ")}`);
         }
         for (const indexInfo of indexInfos) {
           const keyType = expandTypeDetailed(indexInfo.keyType, checker, depth + 1, expandState);
-          const valueType = expandTypeDetailed(indexInfo.type, checker, depth + 1, expandState);
+          const wire = expandState.wireProjection ? resolveWireConstituents(indexInfo.type, checker) : { serializable: [indexInfo.type], omitted: false };
+          if (wire.serializable.length === 0) continue;
+          const valueTexts = [];
+          for (const serializableType of wire.serializable) {
+            const valueType = expandTypeDetailed(serializableType, checker, depth + 1, expandState);
+            unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, valueType.unresolvedSymbols);
+            valueTexts.push(valueType.text);
+          }
           unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, keyType.unresolvedSymbols);
-          unresolvedSymbols = mergeUnresolvedSymbols(unresolvedSymbols, valueType.unresolvedSymbols);
-          fields.push(`[key: ${keyType.text}]: ${valueType.text}`);
+          fields.push(`[key: ${keyType.text}]: ${[...new Set(valueTexts)].join(" | ")}`);
         }
         const indent = "  ".repeat(depth + 1);
         const outerIndent = "  ".repeat(depth);
@@ -1504,7 +1668,7 @@ var collectReturnObjectTypeDetails = (funcNode, checker) => {
   const visit = (node) => {
     if (ts5.isReturnStatement(node) && node.expression && ts5.isObjectLiteralExpression(node.expression)) {
       const type = checker.getTypeAtLocation(node.expression);
-      const expanded = expandTypeDetailed(type, checker);
+      const expanded = expandTypeDetailed(type, checker, 0, void 0, { wireProjection: true });
       types.push(expanded.text);
       unresolvedSymbols = mergeUnresolvedSymbols2(unresolvedSymbols, expanded.unresolvedSymbols);
       unresolvedSymbols = mergeUnresolvedSymbols2(
@@ -1531,7 +1695,7 @@ var collectStreamCallPayloadTypeDetails = (funcNode, checker) => {
       if (payloadArg) {
         const argType = checker.getTypeAtLocation(payloadArg);
         const nonNullableArgType = checker.getNonNullableType(argType);
-        const expanded = expandTypeDetailed(nonNullableArgType, checker);
+        const expanded = expandTypeDetailed(nonNullableArgType, checker, 0, void 0, { wireProjection: true });
         if (expanded.text.trim().length > 0) {
           types.push(expanded.text);
         }
@@ -1553,11 +1717,34 @@ var unionTypes = (types) => {
   const unique = [...new Set(types)];
   return unique.length > 0 ? unique.join(" | ") : "";
 };
+var UnsupportedTransportInputError = class extends Error {
+  constructor(filePath) {
+    super(`[TypeMapGenerator] ${filePath} declares Date in a transport input. JSON delivers an ISO string; declare string and validate/convert it explicitly.`);
+    this.name = "UnsupportedTransportInputError";
+  }
+};
+var assertTransportInputIsWireSafe = (typeText, filePath) => {
+  const sourceFile = ts5.createSourceFile(
+    "__luckystack_input_check.ts",
+    `type __LuckyStackInput = ${typeText};`,
+    ts5.ScriptTarget.Latest,
+    true,
+    ts5.ScriptKind.TS
+  );
+  const containsDate = (node) => {
+    if (ts5.isTypeReferenceNode(node) && ts5.isIdentifier(node.typeName) && node.typeName.text === "Date") {
+      return true;
+    }
+    return node.getChildren(sourceFile).some((child) => containsDate(child));
+  };
+  if (containsDate(sourceFile)) throw new UnsupportedTransportInputError(filePath);
+};
 var getInputTypeFromFile = (filePath) => {
   return getInputTypeDetailsFromFile(filePath).text;
 };
 var getInputTypeDetailsFromFile = (filePath) => {
   const DEFAULT = "{ }";
+  recordExtractionOutcome({ filePath, kind: "api", field: "input", error: null });
   try {
     const program = getServerProgram();
     const sourceFile = program.getSourceFile(filePath);
@@ -1571,9 +1758,12 @@ var getInputTypeDetailsFromFile = (filePath) => {
     const dataType = getInterfacePropertyType(iface, "data", checker);
     if (!dataType) return { text: DEFAULT, unresolvedSymbols: [] };
     const expanded = expandTypeDetailed(dataType, checker);
+    assertTransportInputIsWireSafe(expanded.text, filePath);
     return { text: expanded.text || DEFAULT, unresolvedSymbols: expanded.unresolvedSymbols };
   } catch (error) {
+    if (error instanceof UnsupportedTransportInputError) throw error;
     console.error(`[TypeMapGenerator] Error extracting input type from ${filePath}:`, error);
+    recordExtractionOutcome({ filePath, kind: "api", field: "input", error });
     return { text: DEFAULT, unresolvedSymbols: [] };
   }
 };
@@ -1594,7 +1784,7 @@ var extractDeclaredStreamTypeFromApiParams = (sourceFile, checker) => {
           const typeArg = member.type.typeArguments?.[0];
           if (typeArg) {
             const argType = checker.getNonNullableType(checker.getTypeFromTypeNode(typeArg));
-            const expanded = expandTypeDetailed(argType, checker);
+            const expanded = expandTypeDetailed(argType, checker, 0, void 0, { wireProjection: true });
             if (expanded.text.trim().length > 0) {
               result = { text: expanded.text, unresolvedSymbols: expanded.unresolvedSymbols };
               return;
@@ -1610,6 +1800,7 @@ var extractDeclaredStreamTypeFromApiParams = (sourceFile, checker) => {
 };
 var getApiStreamPayloadTypeDetailsFromFile = (filePath) => {
   const DEFAULT = "never";
+  recordExtractionOutcome({ filePath, kind: "api", field: "stream", error: null });
   try {
     const program = getServerProgram();
     const sourceFile = program.getSourceFile(filePath);
@@ -1623,12 +1814,15 @@ var getApiStreamPayloadTypeDetailsFromFile = (filePath) => {
     if (declared) return declared;
     return { text: DEFAULT, unresolvedSymbols: [] };
   } catch (error) {
+    if (error instanceof UnsupportedWireTypeError) throw error;
     console.error(`[TypeMapGenerator] Error extracting API stream payload type from ${filePath}:`, error);
+    recordExtractionOutcome({ filePath, kind: "api", field: "stream", error });
     return { text: DEFAULT, unresolvedSymbols: [] };
   }
 };
 var getOutputTypeDetailsFromFile = (filePath) => {
   const DEFAULT = "{ status: string }";
+  recordExtractionOutcome({ filePath, kind: "api", field: "output", error: null });
   try {
     const program = getServerProgram();
     const sourceFile = program.getSourceFile(filePath);
@@ -1639,7 +1833,9 @@ var getOutputTypeDetailsFromFile = (filePath) => {
     const details = collectReturnObjectTypeDetails(mainFn, checker);
     return { text: details.text || DEFAULT, unresolvedSymbols: details.unresolvedSymbols };
   } catch (error) {
+    if (error instanceof UnsupportedWireTypeError) throw error;
     console.error(`[TypeMapGenerator] Error extracting output type from ${filePath}:`, error);
+    recordExtractionOutcome({ filePath, kind: "api", field: "output", error });
     return { text: DEFAULT, unresolvedSymbols: [] };
   }
 };
@@ -1648,6 +1844,7 @@ var getSyncClientDataType = (filePath) => {
 };
 var getSyncClientDataTypeDetailsFromFile = (filePath) => {
   const DEFAULT = "{ }";
+  recordExtractionOutcome({ filePath, kind: "sync", field: "clientInput", error: null });
   try {
     const program = getServerProgram();
     const sourceFile = program.getSourceFile(filePath);
@@ -1658,14 +1855,18 @@ var getSyncClientDataTypeDetailsFromFile = (filePath) => {
     const dataType = getInterfacePropertyType(iface, "clientInput", checker) ?? getInterfacePropertyType(iface, "clientData", checker);
     if (!dataType) return { text: DEFAULT, unresolvedSymbols: [] };
     const expanded = expandTypeDetailed(dataType, checker);
+    assertTransportInputIsWireSafe(expanded.text, filePath);
     return { text: expanded.text || DEFAULT, unresolvedSymbols: expanded.unresolvedSymbols };
   } catch (error) {
+    if (error instanceof UnsupportedTransportInputError) throw error;
     console.error(`[TypeMapGenerator] Error extracting sync clientData type from ${filePath}:`, error);
+    recordExtractionOutcome({ filePath, kind: "sync", field: "clientInput", error });
     return { text: DEFAULT, unresolvedSymbols: [] };
   }
 };
 var getSyncServerStreamPayloadTypeDetailsFromFile = (filePath) => {
   const DEFAULT = "never";
+  recordExtractionOutcome({ filePath, kind: "sync", field: "serverStream", error: null });
   try {
     const program = getServerProgram();
     const sourceFile = program.getSourceFile(filePath);
@@ -1676,12 +1877,15 @@ var getSyncServerStreamPayloadTypeDetailsFromFile = (filePath) => {
     const details = collectStreamCallPayloadTypeDetails(mainFn, checker);
     return { text: details.text || DEFAULT, unresolvedSymbols: details.unresolvedSymbols };
   } catch (error) {
+    if (error instanceof UnsupportedWireTypeError) throw error;
     console.error(`[TypeMapGenerator] Error extracting sync server stream payload type from ${filePath}:`, error);
+    recordExtractionOutcome({ filePath, kind: "sync", field: "serverStream", error });
     return { text: DEFAULT, unresolvedSymbols: [] };
   }
 };
 var getSyncServerOutputTypeDetailsFromFile = (filePath) => {
   const DEFAULT = "{ status: string }";
+  recordExtractionOutcome({ filePath, kind: "sync", field: "serverOutput", error: null });
   try {
     const program = getServerProgram();
     const sourceFile = program.getSourceFile(filePath);
@@ -1692,12 +1896,15 @@ var getSyncServerOutputTypeDetailsFromFile = (filePath) => {
     const details = collectReturnObjectTypeDetails(mainFn, checker);
     return { text: details.text || DEFAULT, unresolvedSymbols: details.unresolvedSymbols };
   } catch (error) {
+    if (error instanceof UnsupportedWireTypeError) throw error;
     console.error(`[TypeMapGenerator] Error extracting sync serverOutput type from ${filePath}:`, error);
+    recordExtractionOutcome({ filePath, kind: "sync", field: "serverOutput", error });
     return { text: DEFAULT, unresolvedSymbols: [] };
   }
 };
 var getSyncClientStreamPayloadTypeDetailsFromFile = (filePath) => {
   const DEFAULT = "never";
+  recordExtractionOutcome({ filePath, kind: "sync", field: "clientStream", error: null });
   try {
     const program = getServerProgram();
     const sourceFile = program.getSourceFile(filePath);
@@ -1708,12 +1915,15 @@ var getSyncClientStreamPayloadTypeDetailsFromFile = (filePath) => {
     const details = collectStreamCallPayloadTypeDetails(mainFn, checker);
     return { text: details.text || DEFAULT, unresolvedSymbols: details.unresolvedSymbols };
   } catch (error) {
+    if (error instanceof UnsupportedWireTypeError) throw error;
     console.error(`[TypeMapGenerator] Error extracting sync client stream payload type from ${filePath}:`, error);
+    recordExtractionOutcome({ filePath, kind: "sync", field: "clientStream", error });
     return { text: DEFAULT, unresolvedSymbols: [] };
   }
 };
 var getSyncClientOutputTypeDetailsFromFile = (filePath) => {
   const DEFAULT = "{ }";
+  recordExtractionOutcome({ filePath, kind: "sync", field: "clientOutput", error: null });
   try {
     const program = getServerProgram();
     const sourceFile = program.getSourceFile(filePath);
@@ -1724,7 +1934,9 @@ var getSyncClientOutputTypeDetailsFromFile = (filePath) => {
     const details = collectReturnObjectTypeDetails(mainFn, checker);
     return { text: details.text || DEFAULT, unresolvedSymbols: details.unresolvedSymbols };
   } catch (error) {
+    if (error instanceof UnsupportedWireTypeError) throw error;
     console.error(`[TypeMapGenerator] Error extracting sync clientOutput type from ${filePath}:`, error);
+    recordExtractionOutcome({ filePath, kind: "sync", field: "clientOutput", error });
     return { text: DEFAULT, unresolvedSymbols: [] };
   }
 };
@@ -1855,6 +2067,14 @@ var simplifyInferredType = (value) => {
   return value;
 };
 var getGeneratedFileDir = () => path7.dirname(getGeneratedSocketTypesPath5());
+var sourceModuleSpecifier = (sourceFilePath) => {
+  const relative = path7.relative(getGeneratedFileDir(), sourceFilePath).replaceAll("\\", "/").replace(/\.tsx?$/i, "");
+  return relative.startsWith(".") ? relative : `./${relative}`;
+};
+var portableInferredValueType = (inferred, sourceFilePath, exportName) => {
+  if (!inferred.includes("typeof import(") && !inferred.includes("...")) return null;
+  return `typeof import('${sourceModuleSpecifier(sourceFilePath)}')['${exportName}']`;
+};
 var relativizeModuleSpecifier = (specifier, sourceFilePath) => {
   if (!specifier.startsWith("./") && !specifier.startsWith("../")) {
     return specifier;
@@ -1949,6 +2169,8 @@ var inferValueTypeForExport = ({
     const programDeclaration = findProgramVariableDeclaration(resolvedSource, exportName);
     if (!programDeclaration) return "any";
     const inferred = resolvedChecker.typeToString(resolvedChecker.getTypeAtLocation(programDeclaration.name));
+    const portable = portableInferredValueType(inferred, filePath, exportName);
+    if (portable) return portable;
     const simplified = simplifyInferredType(normalizeInlineType(inferred));
     const localResolvedType = resolveLocalExportedTypes({
       type: simplified,