@mandujs/core 0.53.0 → 0.53.2

package/src/runtime/server.ts

@@ -1,30 +1,28 @@
-import type { Server, ServerWebSocket } from "bun";
+import type { BunFile, Server, ServerWebSocket } from "bun";
 import type { RoutesManifest, RouteSpec, HydrationConfig, StaticParamSetSchema } from "../spec/schema";
 import type { BundleManifest } from "../bundler/types";
 import type { ManduFilling, RenderMode } from "../filling/filling";
 import { ManduContext, CookieManager } from "../filling/context";
 import { Router } from "./router";
 import { renderSSR, renderStreamingResponse, resolveAsyncElement } from "./ssr";
-import {
-  resolveMetadata,
-  renderMetadata,
-  renderTitle,
-  type Metadata,
+import {
+  resolveMetadata,
+  renderMetadata,
+  renderTitle,
+  type Metadata,
   type MetadataItem,
-  type GenerateMetadata,
-} from "../seo";
-import { type ErrorFallbackProps } from "./boundary";
-import React, { type ReactNode } from "react";
+  type GenerateMetadata,
+} from "../seo";
+import { type ErrorFallbackProps } from "./boundary";
+import React from "react";
 import path from "path";
 import fs from "fs/promises";
 import { PORTS } from "../constants";
 import {
-  type CacheStore,
-  type CacheStoreStats,
-  type CacheLookupResult,
-  type CacheConfig,
-  MemoryCacheStore,
-  lookupCache,
+  type CacheStore,
+  type CacheStoreStats,
+  type CacheConfig,
+  lookupCache,
   createCacheEntry,
   createCachedResponse,
   computeCacheControl,
@@ -53,7 +51,12 @@ import {
 } from "./cors";
 import { validateImportPath } from "./security";
 import { KITCHEN_PREFIX, KitchenHandler, recordRequest } from "../kitchen/kitchen-handler";
-import { eventBus } from "../observability/event-bus";
+import {
+  eventBus,
+  type EventType,
+  type ObservabilityEvent,
+  type ObservabilitySeverity,
+} from "../observability/event-bus";
 import {
   HEAP_ENDPOINT,
   METRICS_ENDPOINT,
@@ -62,11 +65,12 @@ import {
   isObservabilityExposed,
   recordHttpRequest,
 } from "../observability/metrics";
-import {
-  handleOpenAPIRequest,
-  isOpenAPIEndpointEnabled,
-  resolveOpenAPIEndpointSettings,
-} from "./openapi-endpoint";
+import {
+  handleOpenAPIRequest,
+  isOpenAPIEndpointEnabled,
+  resolveOpenAPIEndpointSettings,
+  type OpenAPIEndpointSettings,
+} from "./openapi-endpoint";
 // Phase 18.ψ — user-facing perf marks dashboard append. We include a
 // `perf` block on the `/_mandu/heap` payload when the feature is active
 // so operators see a unified view (heap + caches + perf histogram).
@@ -77,8 +81,7 @@ import { collectPerfSnapshot } from "../perf/user-marks";
 // `startServer()`; `runWithSpan` is used at the absolute TOP of the
 // request handler so every downstream await (middleware, filling
 // loader, SSR render) inherits the active span via AsyncLocalStorage.
-import type {
-  Tracer} from "../observability/tracing";
+import type { Tracer } from "../observability/tracing";
 import {
   createTracerFromConfig,
   runWithSpan,
@@ -99,10 +102,10 @@ import type { Middleware } from "../middleware/define";
 // Phase 18.λ — scheduler wiring (statically imported so `startServer` stays
 // synchronous; the cost of unused code is trivial — `defineCron` is a thin
 // wrapper around `Bun.cron`).
-import { defineCron as schedulerDefineCron } from "../scheduler";
+import { defineCron as schedulerDefineCron, type CronDef, type CronRegistration } from "../scheduler";
 import { setActiveSchedulerRegistration } from "../middleware/scheduler-cron";
 import { createFetchHandler } from "./handler";
-import { wrapBunWebSocket, type WSUpgradeData } from "../filling/ws";
+import { wrapBunWebSocket, type WSHandlers, type WSUpgradeData } from "../filling/ws";
 import { handleImageRequest } from "./image-handler";
 import { extractShellHtml, createPPRResponse } from "./ppr";
 import { isRedirectResponse } from "./redirect";
@@ -110,12 +113,16 @@ import { isNotFoundResponse } from "./not-found";
 import { newId } from "../id";
 // Phase 18.κ — typed RPC dispatch (tRPC-like). See
 // `packages/core/src/contract/rpc.ts` + `docs/architect/typed-rpc.md`.
-import {
-  matchRpcPath,
-  dispatchRpc,
-  registerRpc,
-  clearRpcRegistry,
-} from "../contract/rpc";
+import {
+  matchRpcPath,
+  dispatchRpc,
+  registerRpc,
+  clearRpcRegistry,
+  type RpcDefinition,
+  type RpcProcedureRecord,
+} from "../contract/rpc";
+import type { GuardConfig } from "../guard/types";
+import type { ManduHooks, ManduPlugin } from "../plugins/hooks";
 import { handleMetadataRoute as dispatchMetadataRoute } from "../routes/metadata-routes";
 import {
   DEFAULT_PRERENDER_DIR,
@@ -419,7 +426,7 @@ export interface ServerOptions {
   /**
    * Guard config for Kitchen dev dashboard (dev mode only)
    */
-  guardConfig?: import("../guard/types").GuardConfig | null;
+  guardConfig?: GuardConfig | null;
   /**
    * SSR 캐시 설정 (ISR/SWR 용).
    *
@@ -575,8 +582,8 @@ export interface ServerOptions {
    * `options.middleware` so they run BEFORE user-declared layers. Both
    * fields are optional; omission is a zero-overhead passthrough.
    */
-  plugins?: readonly import("../plugins/hooks").ManduPlugin[];
-  configHooks?: Partial<import("../plugins/hooks").ManduHooks>;
+  plugins?: readonly ManduPlugin[];
+  configHooks?: Partial<ManduHooks>;
   /**
    * Phase 18.κ — tRPC-like typed RPC endpoints.
    *
@@ -589,7 +596,7 @@ export interface ServerOptions {
    * Typically threaded from `ManduConfig.rpc.endpoints`.
    */
   rpc?: {
-    endpoints?: Record<string, import("../contract/rpc").RpcDefinition<import("../contract/rpc").RpcProcedureRecord>>;
+    endpoints?: Record<string, RpcDefinition<RpcProcedureRecord>>;
   };
   /**
    * Phase 18.λ — declarative cron scheduler.
@@ -605,7 +612,7 @@ export interface ServerOptions {
    * Typically threaded from `ManduConfig.scheduler`.
    */
   scheduler?: {
-    jobs?: import("../scheduler").CronDef[];
+    jobs?: CronDef[];
     disabled?: boolean;
   };
   /**
@@ -816,7 +823,7 @@ export interface ServerRegistrySettings {
    * tracing is disabled (the hot path is branch-free). When set, every
    * request opens a root span via `tracer.startSpanFromRequest()`.
    */
-  tracer?: import("../observability/tracing").Tracer;
+  tracer?: Tracer;
   /**
    * Production OpenAPI endpoint — resolved from `ServerOptions.openapi`.
    * `undefined` means the endpoint is disabled (hot path branch-free).
@@ -824,7 +831,7 @@ export interface ServerRegistrySettings {
    * `<basePath>.json` / `<basePath>.yaml` short-circuits before route
    * dispatch to serve the cached spec body.
    */
-  openapi?: import("./openapi-endpoint").OpenAPIEndpointSettings;
+  openapi?: OpenAPIEndpointSettings;
   /**
    * Phase 18 — resolved prerender pass-through state. `undefined`
    * means the feature is disabled for this server instance.
@@ -910,7 +917,7 @@ export class ServerRegistry {
   /** Layout slot 파일 경로 캐시 (모듈 경로 → slot 경로 | null) */
   readonly layoutSlotPaths: Map<string, string | null> = new Map();
   /** WebSocket 핸들러 (라우트 ID → WSHandlers) */
-  readonly wsHandlers: Map<string, import("../filling/ws").WSHandlers> = new Map();
+  readonly wsHandlers: Map<string, WSHandlers> = new Map();
   /**
    * Metadata API 캐시 (#186)
    * - pageMetadata: routeId → page 모듈의 static `metadata` export
@@ -918,10 +925,10 @@ export class ServerRegistry {
    * - layoutMetadata: layout 모듈 경로 → static `metadata` export (null = 시도했지만 없음)
    * - layoutGenerateMetadata: layout 모듈 경로 → `generateMetadata` 함수
    */
-  readonly pageMetadata: Map<string, import("../seo").Metadata> = new Map();
-  readonly pageGenerateMetadata: Map<string, import("../seo").GenerateMetadata> = new Map();
-  readonly layoutMetadata: Map<string, import("../seo").Metadata | null> = new Map();
-  readonly layoutGenerateMetadata: Map<string, import("../seo").GenerateMetadata> = new Map();
+  readonly pageMetadata: Map<string, Metadata> = new Map();
+  readonly pageGenerateMetadata: Map<string, GenerateMetadata> = new Map();
+  readonly layoutMetadata: Map<string, Metadata | null> = new Map();
+  readonly layoutGenerateMetadata: Map<string, GenerateMetadata> = new Map();
   settings: ServerRegistrySettings = {
     isDev: false,
     rootDir: process.cwd(),
@@ -1270,7 +1277,7 @@ export function registerNotFoundHandler(handler: PageHandler): void {
   defaultRegistry.registerNotFoundHandler(handler);
 }
 
-export function registerWSHandler(routeId: string, handlers: import("../filling/ws").WSHandlers): void {
+export function registerWSHandler(routeId: string, handlers: WSHandlers): void {
   defaultRegistry.wsHandlers.set(routeId, handlers);
 }
 
@@ -1356,7 +1363,7 @@ function handleEventsStreamRequest(req: Request): Response {
   const filterSource = url.searchParams.get("source") || undefined;
   const filterTrace = url.searchParams.get("trace") || undefined;
 
-  const matches = (e: import("../observability/event-bus").ObservabilityEvent): boolean => {
+  const matches = (e: ObservabilityEvent): boolean => {
     if (filterType && e.type !== filterType) return false;
     if (filterSeverity && e.severity !== filterSeverity) return false;
     if (filterSource && e.source !== filterSource) return false;
@@ -1437,8 +1444,8 @@ function handleEventsRecentRequest(req: Request): Response {
   const events = eventBus.getRecent(
     count ? Number(count) : undefined,
     {
-      type: type as import("../observability/event-bus").EventType | undefined,
-      severity: severity as import("../observability/event-bus").ObservabilitySeverity | undefined,
+      type: type as EventType | undefined,
+      severity: severity as ObservabilitySeverity | undefined,
     },
   );
   const stats = eventBus.getStats(windowMs);
@@ -1544,7 +1551,7 @@ function evictEtagCacheIfNeeded(): void {
  */
 async function computeStrongEtag(
   filePath: string,
-  file: import("bun").BunFile,
+  file: BunFile,
 ): Promise<string> {
   const size = file.size;
   const mtime = file.lastModified;
@@ -4675,12 +4682,12 @@ export function startServer(manifest: RoutesManifest, options: ServerOptions = {
   }
   // ─── End Phase 18.ζ ────────────────────────────────────────────────────
 
-  // Kitchen dev dashboard (dev mode only)
-  if (isDev) {
-    const kitchen = new KitchenHandler({ rootDir, manifest, guardConfig });
-    kitchen.start();
-    registry.kitchen = kitchen;
-  }
+  // Kitchen dev dashboard (dev mode only)
+  if (isDev) {
+    const kitchen = new KitchenHandler({ rootDir, manifest, guardConfig });
+    void kitchen.start();
+    registry.kitchen = kitchen;
+  }
 
   const router = new Router(manifest.routes);
 
@@ -4862,7 +4869,7 @@ export function startServer(manifest: RoutesManifest, options: ServerOptions = {
   // other boot errors rather than aborting the server. `startServer` is
   // synchronous by contract, so we use the already-imported scheduler
   // module rather than `await import`.
-  let schedulerRegistration: import("../scheduler").CronRegistration | null = null;
+  let schedulerRegistration: CronRegistration | null = null;
   const jobDefs = schedulerOption?.jobs ?? [];
   const schedulerDisabled = schedulerOption?.disabled === true;
   if (jobDefs.length > 0 && !schedulerDisabled) {
@@ -4914,10 +4921,10 @@ export function startServer(manifest: RoutesManifest, options: ServerOptions = {
             console.error("[scheduler] shutdown error:", err);
           });
       }
-      server.stop();
-    },
-  };
-}
+      void server.stop();
+    },
+  };
+}
 
 // Clear registries (useful for testing) - deprecated, use clearDefaultRegistry()
 export function clearRegistry(): void {

package/src/runtime/ssr.ts

@@ -165,7 +165,7 @@ export interface SSROptions {
 
 let projectRenderToString: ((element: ReactElement) => string) | null | undefined;
 
-function loadProjectRenderToString(): ((element: ReactElement) => string) | null {
+function _loadProjectRenderToString(): ((element: ReactElement) => string) | null {
   if (projectRenderToString !== undefined) {
     return projectRenderToString;
   }
@@ -851,7 +851,7 @@ export function renderToHTML(element: ReactElement, options: SSROptions = {}): s
 function generateRouteScript(
   routeId: string,
   pattern: string,
-  serverData?: Record<string, unknown>
+  _serverData?: Record<string, unknown>
 ): string {
   const routeInfo = {
     id: routeId,
@@ -867,7 +867,7 @@ function generateRouteScript(
 /**
  * URL 패턴에서 파라미터 추출 (클라이언트에서 사용)
  */
-function extractParamsFromUrl(pattern: string): Record<string, string> {
+function extractParamsFromUrl(_pattern: string): Record<string, string> {
   // 서버에서는 실제 params를 전달받으므로 빈 객체 반환
   // 실제 params는 serverData나 별도 전달
   return {};

package/src/runtime/streaming-ssr.ts

@@ -80,10 +80,10 @@ export interface StreamingError {
 export interface StreamingMetrics {
   /** Shell ready까지 걸린 시간 (ms) */
   shellReadyTime: number;
-  /** All ready까지 걸린 시간 (ms) */
-  allReadyTime: number;
-  /** Deferred chunk 개수 */
-  deferredChunkCount: number;
+  /** All ready까지 걸린 시간 (ms) */
+  allReadyTime: number;
+  /** Deferred chunk 개수 */
+  deferredChunkCount: number;
   /** 에러 발생 여부 */
   hasError: boolean;
   /** 시작 시간 */
@@ -1001,9 +1001,9 @@ export async function renderToStream(
 
   // 메트릭 수집
   const metrics: StreamingMetrics = {
-    shellReadyTime: 0,
-    allReadyTime: 0,
-    deferredChunkCount: 0,
+    shellReadyTime: 0,
+    allReadyTime: 0,
+    deferredChunkCount: 0,
     hasError: false,
     startTime: Date.now(),
   };
@@ -1379,10 +1379,9 @@ export async function renderWithDeferredData(
   const encoder = new TextEncoder();
   const startTime = Date.now();
 
-  // 준비된 deferred 스크립트를 담을 배열 (mutable)
-  const readyScripts: string[] = [];
-  let deferredChunkCount = 0;
-  let allDeferredSettled = false;
+  // 준비된 deferred 스크립트를 담을 배열 (mutable)
+  const readyScripts: string[] = [];
+  let allDeferredSettled = false;
 
   // 1. Deferred promises 병렬 시작 (막지 않음!)
   const deferredEntries = Object.entries(deferredPromises);
@@ -1396,12 +1395,11 @@ export async function renderWithDeferredData(
             );
             const data = await Promise.race([promise, timeoutPromise]);
 
-            // 스크립트 생성 및 추가
-            const script = generateDeferredDataScript(routeId, key, data);
-            readyScripts.push(script);
-            deferredChunkCount++;
-
-            if (isDev) {
+            // 스크립트 생성 및 추가
+            const script = generateDeferredDataScript(routeId, key, data);
+            readyScripts.push(script);
+
+            if (isDev) {
               console.log(`[Mandu Streaming] Deferred ready: ${key} (${Date.now() - startTime}ms)`);
             }
           } catch (error) {
@@ -1475,22 +1473,22 @@ export async function renderWithDeferredData(
 
         // 최종 메트릭 보고 (injectedCount가 실제 메트릭)
         if (onMetrics && baseMetrics) {
-          onMetrics({
-            ...baseMetrics,
-            deferredChunkCount: injectedCount,
-            allReadyTime: Date.now() - startTime,
-          });
+          onMetrics({
+            ...baseMetrics,
+            deferredChunkCount: injectedCount,
+            allReadyTime: Date.now() - startTime,
+          });
         }
 
         controller.close();
       } catch (error) {
         controller.error(error);
       }
-    },
-    cancel() {
-      reader.cancel();
-    },
-  });
+    },
+    cancel() {
+      void reader.cancel();
+    },
+  });
 
   // Phase 7.2 R1 Agent C (H1): if the base stream produced a CSP
   // nonce during shell emission, forward the matching header on the

package/src/scheduler/validate.ts

@@ -159,7 +159,7 @@ export function validateTimezone(tz: string): void {
   }
   try {
     // `Intl.DateTimeFormat` throws `RangeError` for unknown zones.
-    new Intl.DateTimeFormat("en-US", { timeZone: tz });
+    Intl.DateTimeFormat("en-US", { timeZone: tz });
   } catch {
     throw new Error(
       `[@mandujs/core/scheduler] unknown IANA timezone "${tz}". ` +

package/src/seo/integration/ssr.ts

@@ -27,7 +27,6 @@
  * ```
  */
 
-import type { ReactElement } from 'react'
 import type { Metadata, MetadataItem, ResolvedMetadata } from '../types'
 import { resolveMetadata, createDefaultMetadata } from '../resolve'
 import { renderMetadata } from '../render'
@@ -88,7 +87,7 @@ export async function resolveSEO(options: SEOOptions = {}): Promise<SEOResult> {
     resolved = await resolveMetadata(metadata, routeParams, searchParams)
   } else if (staticMetadata) {
     // 단일 정적 메타데이터
-    const base = createDefaultMetadata()
+    const _base = createDefaultMetadata()
     resolved = await resolveMetadata([staticMetadata], routeParams, searchParams)
   } else {
     // 기본 메타데이터
@@ -186,7 +185,7 @@ export async function injectSEOIntoOptions<T extends { title?: string; headTags?
   options: T,
   seoOptions: SEOOptions
 ): Promise<T & { title: string; headTags: string }> {
-  const { resolved, html, title } = await resolveSEO(seoOptions)
+  const { resolved: _resolved, html, title } = await resolveSEO(seoOptions)
 
   // 기존 headTags와 병합
   const existingHeadTags = options.headTags || ''

package/src/seo/render/opengraph.ts

@@ -2,7 +2,7 @@
  * Mandu SEO - Open Graph Meta Tags Rendering
  */
 
-import type { ResolvedMetadata, ResolvedOpenGraph } from '../types'
+import type { ResolvedMetadata } from '../types'
 import { urlToString } from '../resolve/url'
 
 /**

package/src/seo/resolve/index.ts

@@ -17,10 +17,6 @@ import type {
   ResolvedVerification,
   JsonLd,
   ThemeColor,
-  ResourceHint,
-  FormatDetection,
-  GoogleMeta,
-  AppLinks,
 } from '../types'
 import { resolveTitle, extractTitleTemplate } from './title'
 import { normalizeMetadataBase, resolveUrl } from './url'

package/src/slot/corrector.ts

@@ -111,7 +111,7 @@ function fixForbiddenImport(
 
   // 어떤 금지된 모듈인지 찾기
   let forbiddenModule = "";
-  for (const [module, alternative] of Object.entries(SAFE_ALTERNATIVES)) {
+  for (const [module, _alternative] of Object.entries(SAFE_ALTERNATIVES)) {
     if (originalLine.includes(`'${module}'`) || originalLine.includes(`"${module}"`)) {
       forbiddenModule = module;
       break;

package/src/slot/validator.ts

@@ -125,14 +125,14 @@ function stripComments(content: string): string {
 }
 
 // 올바른 응답 패턴 (ctx 메서드 호출)
-const VALID_RESPONSE_PATTERNS = [
+const _VALID_RESPONSE_PATTERNS = [
   /return\s+ctx\s*\.\s*(ok|json|created|noContent|notFound|badRequest|error|html|redirect|stream)\s*\(/,
   /return\s+new\s+Response\s*\(/,
   /return\s+Response\s*\.\s*(json|redirect)\s*\(/,
 ];
 
 // 잘못된 반환 패턴 (일반 객체 직접 반환)
-const INVALID_RETURN_PATTERNS = [
+const _INVALID_RETURN_PATTERNS = [
   /return\s+\{\s*[^}]*\}\s*;?\s*$/m,  // return { ... }; (Response가 아닌 객체)
 ];
 
@@ -337,7 +337,7 @@ function checkBasicSyntax(
 /**
  * HTTP 메서드 핸들러 검사
  */
-function checkHttpMethods(content: string, lines: string[]): SlotValidationIssue[] {
+function checkHttpMethods(content: string, _lines: string[]): SlotValidationIssue[] {
   const issues: SlotValidationIssue[] = [];
 
   // .get(), .post() 등의 핸들러가 있는지 확인
@@ -404,7 +404,7 @@ function checkHandlerReturns(content: string, lines: string[]): SlotValidationIs
       const isStringReturn = /return\s+['"`]/.test(returnStmt) && !isValidReturn;
 
       // throw 문자열 감지 (Error 객체가 아닌 문자열)
-      const throwStringPattern = /throw\s+['"`][^'"`]+['"`]/;
+      const _throwStringPattern = /throw\s+['"`][^'"`]+['"`]/;
 
       if (isObjectReturn) {
         // return 문이 있는 라인 번호 찾기

package/src/watcher/reporter.ts

@@ -5,7 +5,7 @@
  * Warnings only - never blocks operations.
  */
 
-import type { WatchWarning, WatchStatus, ArchRule } from "../brain/types";
+import type { WatchWarning, WatchStatus } from "../brain/types";
 import { getRule } from "./rules";
 
 /**

package/src/watcher/watcher.ts

@@ -10,7 +10,7 @@ import type {
   WatchWarning,
   WatchEventHandler,
 } from "../brain/types";
-import { validateFile, MVP_RULES } from "./rules";
+import { validateFile } from "./rules";
 import path from "path";
 import fs from "fs";
 import { spawn, type ChildProcess } from "child_process";
@@ -156,20 +156,20 @@ export class FileWatcher {
       this._fileCount = count;
     });
 
-    // Handle events (v5 passes absolute paths when watching absolute rootDir)
-    this.chokidarWatcher.on("change", (filePath) => {
-      this.processFileEvent("modify", filePath);
-    });
-
-    this.chokidarWatcher.on("add", (filePath) => {
-      this._fileCount++;
-      this.processFileEvent("create", filePath);
-    });
-
-    this.chokidarWatcher.on("unlink", (filePath) => {
-      this._fileCount = Math.max(0, this._fileCount - 1);
-      this.processFileEvent("delete", filePath);
-    });
+    // Handle events (v5 passes absolute paths when watching absolute rootDir)
+    this.chokidarWatcher.on("change", (filePath) => {
+      void this.processFileEvent("modify", filePath);
+    });
+
+    this.chokidarWatcher.on("add", (filePath) => {
+      this._fileCount++;
+      void this.processFileEvent("create", filePath);
+    });
+
+    this.chokidarWatcher.on("unlink", (filePath) => {
+      this._fileCount = Math.max(0, this._fileCount - 1);
+      void this.processFileEvent("delete", filePath);
+    });
 
     this.chokidarWatcher.on("error", (error: unknown) => {
       const message = error instanceof Error ? error.message : String(error);
@@ -406,10 +406,10 @@ export function getWatcher(config?: WatcherConfig): FileWatcher | null {
 /**
  * Start the global watcher
  */
-export async function startWatcher(config: WatcherConfig): Promise<FileWatcher> {
-  if (globalWatcher) {
-    globalWatcher.stop();
-  }
+export async function startWatcher(config: WatcherConfig): Promise<FileWatcher> {
+  if (globalWatcher) {
+    await globalWatcher.stop();
+  }
 
   globalWatcher = createWatcher(config);
   await globalWatcher.start();