@mandujs/core 0.53.3 → 0.54.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (336) hide show
  1. package/README.md +654 -654
  2. package/package.json +1 -1
  3. package/src/a11y/__tests__/run-audit.test.ts +333 -333
  4. package/src/a11y/fix-hints.ts +76 -76
  5. package/src/a11y/index.ts +18 -18
  6. package/src/a11y/run-audit.ts +394 -394
  7. package/src/a11y/types.ts +125 -125
  8. package/src/auth/__tests__/login.test.ts +1 -1
  9. package/src/auth/__tests__/password.test.ts +122 -122
  10. package/src/auth/__tests__/tokens.test.ts +274 -274
  11. package/src/auth/__tests__/verification.test.ts +274 -274
  12. package/src/auth/index.ts +76 -76
  13. package/src/auth/login.ts +225 -225
  14. package/src/auth/password.ts +120 -120
  15. package/src/auth/reset.ts +243 -243
  16. package/src/auth/tokens.ts +612 -612
  17. package/src/auth/verification.ts +253 -253
  18. package/src/brain/__tests__/redactor.test.ts +94 -94
  19. package/src/brain/adapters/__tests__/_helpers.ts +83 -83
  20. package/src/brain/adapters/__tests__/anthropic-oauth.test.ts +196 -196
  21. package/src/brain/adapters/__tests__/chatgpt-auth.test.ts +193 -193
  22. package/src/brain/adapters/__tests__/openai-oauth.test.ts +209 -209
  23. package/src/brain/adapters/__tests__/resolver.test.ts +143 -143
  24. package/src/brain/adapters/anthropic-oauth.ts +1 -1
  25. package/src/brain/adapters/chatgpt-auth.ts +300 -300
  26. package/src/brain/adapters/index.ts +319 -319
  27. package/src/brain/adapters/oauth-flow.ts +439 -439
  28. package/src/brain/consent.ts +240 -240
  29. package/src/brain/credentials.ts +396 -396
  30. package/src/bundler/__tests__/build-runner.ts +113 -113
  31. package/src/bundler/__tests__/dev-reliability.test.ts +619 -619
  32. package/src/bundler/__tests__/extended-watch.test.ts +711 -711
  33. package/src/bundler/__tests__/fast-refresh.test.ts +10 -10
  34. package/src/bundler/__tests__/hdr.test.ts +353 -353
  35. package/src/bundler/__tests__/hmr-client.test.ts +532 -532
  36. package/src/bundler/__tests__/manifest-schema.test.ts +266 -266
  37. package/src/bundler/__tests__/prod-smoke.test.ts +138 -138
  38. package/src/bundler/__tests__/reverse-import-graph.test.ts +519 -519
  39. package/src/bundler/__tests__/slot-dispatch.test.ts +573 -573
  40. package/src/bundler/__tests__/url-cap-and-slot-regex.test.ts +286 -286
  41. package/src/bundler/__tests__/vendor-cache.test.ts +455 -455
  42. package/src/bundler/budget.ts +404 -404
  43. package/src/bundler/build.test.ts +179 -179
  44. package/src/bundler/build.ts +55 -55
  45. package/src/bundler/dev.ts +42 -42
  46. package/src/bundler/manifest-schema.ts +301 -301
  47. package/src/bundler/plugins/__tests__/block-generated-imports.test.ts +263 -263
  48. package/src/bundler/plugins/__tests__/react-compiler-config.test.ts +83 -83
  49. package/src/bundler/plugins/__tests__/react-compiler-lint.test.ts +110 -110
  50. package/src/bundler/plugins/block-generated-imports.ts +155 -155
  51. package/src/bundler/plugins/index.ts +83 -83
  52. package/src/bundler/plugins/react-compiler-config.ts +108 -108
  53. package/src/bundler/plugins/react-compiler-lint.ts +253 -253
  54. package/src/bundler/plugins/react-compiler.ts +162 -162
  55. package/src/bundler/reverse-import-graph.ts +339 -339
  56. package/src/bundler/safe-build.test.ts +201 -201
  57. package/src/bundler/safe-build.ts +103 -103
  58. package/src/bundler/scenario-matrix.ts +229 -229
  59. package/src/bundler/types.ts +10 -10
  60. package/src/bundler/vendor-cache-types.ts +130 -130
  61. package/src/bundler/vendor-cache.ts +526 -526
  62. package/src/change/snapshot.ts +18 -18
  63. package/src/client/Form.tsx +105 -105
  64. package/src/client/Link.tsx +9 -9
  65. package/src/client/__tests__/use-sse.test.ts +153 -153
  66. package/src/client/globals.ts +1 -1
  67. package/src/client/hooks.ts +362 -362
  68. package/src/client/hydrate.ts +340 -340
  69. package/src/client/prefetch-helper.ts +55 -55
  70. package/src/client/router.ts +11 -11
  71. package/src/client/runtime.ts +47 -47
  72. package/src/client/serialize.ts +404 -404
  73. package/src/client/use-fetch.ts +6 -6
  74. package/src/client/use-head.ts +197 -197
  75. package/src/client/use-sse.ts +378 -378
  76. package/src/client/window-state.ts +101 -101
  77. package/src/components/Image.tsx +162 -162
  78. package/src/config/validate.ts +3 -3
  79. package/src/config/watcher.ts +311 -311
  80. package/src/constants.ts +40 -40
  81. package/src/content/collection.ts +8 -8
  82. package/src/content/content-layer.ts +7 -7
  83. package/src/content/data-store.ts +245 -245
  84. package/src/content/frontmatter.ts +189 -189
  85. package/src/content/loader-context.ts +171 -171
  86. package/src/content/loaders/api.ts +216 -216
  87. package/src/content/loaders/file.ts +172 -172
  88. package/src/content/loaders/glob.ts +253 -253
  89. package/src/content/loaders/index.ts +34 -34
  90. package/src/content/loaders/types.ts +137 -137
  91. package/src/content/meta-store.ts +209 -209
  92. package/src/content/prebuild.test.ts +571 -571
  93. package/src/content/prebuild.ts +636 -636
  94. package/src/content/schema.ts +20 -20
  95. package/src/content/sidebar.ts +630 -630
  96. package/src/content/slug.ts +110 -110
  97. package/src/content/types.ts +282 -282
  98. package/src/content/watcher.ts +135 -135
  99. package/src/contract/client-safe.test.ts +42 -42
  100. package/src/contract/client-safe.ts +114 -114
  101. package/src/contract/define.ts +11 -11
  102. package/src/contract/index.ts +1 -1
  103. package/src/contract/normalize.test.ts +276 -276
  104. package/src/contract/normalize.ts +410 -410
  105. package/src/contract/registry.test.ts +206 -206
  106. package/src/contract/route-helpers.ts +1 -1
  107. package/src/contract/rpc.ts +443 -443
  108. package/src/contract/schema.ts +48 -48
  109. package/src/contract/types.ts +58 -58
  110. package/src/db/__tests__/db.test.ts +482 -482
  111. package/src/db/index.ts +138 -138
  112. package/src/db/migrations/history-table.ts +345 -345
  113. package/src/db/migrations/index.ts +3 -3
  114. package/src/db/migrations/lock.ts +324 -324
  115. package/src/db/migrations/runner.ts +650 -650
  116. package/src/deploy/cache.ts +140 -140
  117. package/src/deploy/compile/vercel.ts +344 -344
  118. package/src/deploy/index.ts +87 -87
  119. package/src/deploy/inference/brain.ts +268 -268
  120. package/src/deploy/inference/context.ts +182 -182
  121. package/src/deploy/inference/filling-extract.ts +245 -245
  122. package/src/deploy/inference/heuristic.ts +182 -182
  123. package/src/deploy/intent.ts +173 -173
  124. package/src/deploy/plan.ts +178 -178
  125. package/src/design/__tests__/agents-link.test.ts +109 -109
  126. package/src/design/__tests__/extract-patch-diff.test.ts +265 -265
  127. package/src/design/__tests__/lint.test.ts +110 -110
  128. package/src/design/__tests__/parser.test.ts +195 -195
  129. package/src/design/__tests__/tailwind-theme.test.ts +229 -229
  130. package/src/design/agents-link.ts +165 -165
  131. package/src/design/diff.ts +138 -138
  132. package/src/design/extract.ts +285 -285
  133. package/src/design/index.ts +102 -102
  134. package/src/design/lint.ts +209 -209
  135. package/src/design/parser.ts +555 -555
  136. package/src/design/patch.ts +241 -241
  137. package/src/design/scaffold.ts +147 -147
  138. package/src/design/tailwind-theme.ts +441 -441
  139. package/src/design/types.ts +210 -210
  140. package/src/desktop/__tests__/webview-fallback.test.ts +254 -254
  141. package/src/desktop/__tests__/window.test.ts +248 -248
  142. package/src/desktop/__tests__/worker.test.ts +266 -266
  143. package/src/desktop/index.ts +43 -43
  144. package/src/desktop/types.ts +158 -158
  145. package/src/desktop/worker.ts +180 -180
  146. package/src/dev-error-overlay/__tests__/overlay-injector.test.ts +241 -241
  147. package/src/dev-error-overlay/index.ts +30 -30
  148. package/src/dev-error-overlay/overlay-injector.ts +243 -243
  149. package/src/dev-error-overlay/overlay-styles.ts +52 -52
  150. package/src/dev-error-overlay/types.ts +66 -66
  151. package/src/devtools/ai/context-builder.ts +375 -375
  152. package/src/devtools/ai/index.ts +25 -25
  153. package/src/devtools/ai/mcp-connector.ts +25 -25
  154. package/src/devtools/client/catchers/error-catcher.ts +344 -344
  155. package/src/devtools/client/catchers/index.ts +18 -18
  156. package/src/devtools/client/components/index.ts +39 -39
  157. package/src/devtools/client/components/mandu-character.tsx +331 -331
  158. package/src/devtools/client/components/overlay.tsx +368 -368
  159. package/src/devtools/client/components/panel/errors-panel.tsx +259 -259
  160. package/src/devtools/client/components/panel/guard-panel.tsx +30 -30
  161. package/src/devtools/client/components/panel/islands-panel.tsx +320 -320
  162. package/src/devtools/client/components/panel/network-panel.tsx +291 -291
  163. package/src/devtools/client/components/panel/panel-container.tsx +500 -500
  164. package/src/devtools/client/components/panel/preview-panel.tsx +46 -46
  165. package/src/devtools/client/filters/context-filters.ts +282 -282
  166. package/src/devtools/client/filters/index.ts +16 -16
  167. package/src/devtools/client/index.ts +63 -63
  168. package/src/devtools/client/persistence.ts +335 -335
  169. package/src/devtools/hook/create-hook.ts +207 -207
  170. package/src/devtools/hook/index.ts +13 -13
  171. package/src/devtools/index.ts +439 -439
  172. package/src/devtools/init.ts +265 -265
  173. package/src/devtools/protocol.ts +237 -237
  174. package/src/devtools/server/index.ts +17 -17
  175. package/src/devtools/server/source-context.ts +450 -450
  176. package/src/devtools/types.ts +35 -35
  177. package/src/devtools/worker/index.ts +25 -25
  178. package/src/devtools/worker/redaction-worker.ts +233 -233
  179. package/src/devtools/worker/worker-manager.ts +410 -410
  180. package/src/diagnose/__tests__/checks.test.ts +451 -451
  181. package/src/diagnose/checks.ts +832 -832
  182. package/src/diagnose/index.ts +17 -17
  183. package/src/diagnose/run.ts +93 -93
  184. package/src/diagnose/types.ts +53 -53
  185. package/src/email/__tests__/email.test.ts +355 -355
  186. package/src/email/index.ts +282 -282
  187. package/src/email/smtp.ts +64 -64
  188. package/src/error/domains.ts +265 -265
  189. package/src/error/result.ts +60 -60
  190. package/src/error/types.ts +6 -6
  191. package/src/errors/extractor.ts +409 -409
  192. package/src/errors/index.ts +19 -19
  193. package/src/filling/__tests__/session-sqlite.test.ts +454 -454
  194. package/src/filling/auth.ts +308 -308
  195. package/src/filling/cookie-codec.ts +299 -299
  196. package/src/filling/deps.ts +265 -265
  197. package/src/filling/session-sqlite.ts +617 -617
  198. package/src/filling/sse.ts +5 -5
  199. package/src/filling/ws.ts +78 -78
  200. package/src/generator/index.ts +3 -3
  201. package/src/guard/__tests__/design-inline-class.test.ts +219 -219
  202. package/src/guard/__tests__/tsgolint-bridge.test.ts +347 -347
  203. package/src/guard/analyzer.ts +360 -360
  204. package/src/guard/auto-correct.ts +1 -1
  205. package/src/guard/contract-guard.ts +9 -9
  206. package/src/guard/define-rule.ts +243 -243
  207. package/src/guard/design-inline-class.ts +393 -393
  208. package/src/guard/file-type.test.ts +24 -24
  209. package/src/guard/graph.ts +1 -1
  210. package/src/guard/healing.ts +36 -36
  211. package/src/guard/presets/atomic.ts +70 -70
  212. package/src/guard/presets/clean.ts +77 -77
  213. package/src/guard/presets/fsd.ts +79 -79
  214. package/src/guard/presets/hexagonal.ts +68 -68
  215. package/src/guard/reporter.ts +442 -442
  216. package/src/guard/rule-presets.ts +379 -379
  217. package/src/guard/semantic-slots.ts +1 -1
  218. package/src/guard/suggestions.ts +358 -358
  219. package/src/guard/tsgolint-bridge.ts +512 -512
  220. package/src/guard/types.ts +348 -348
  221. package/src/guard/watcher.ts +405 -405
  222. package/src/i18n/define.ts +126 -126
  223. package/src/i18n/index.ts +52 -52
  224. package/src/i18n/message-registry.ts +173 -173
  225. package/src/i18n/types.ts +112 -112
  226. package/src/id/index.ts +105 -105
  227. package/src/index.ts +2 -2
  228. package/src/kitchen/api/agent-devtools-api.ts +779 -544
  229. package/src/kitchen/api/errors-grouping.ts +126 -0
  230. package/src/kitchen/kitchen-handler.ts +192 -63
  231. package/src/kitchen/kitchen-ui.ts +842 -464
  232. package/src/logging/index.ts +22 -22
  233. package/src/logging/transports.ts +365 -365
  234. package/src/middleware/bridge.ts +147 -147
  235. package/src/middleware/compose.ts +134 -134
  236. package/src/middleware/compress.ts +62 -62
  237. package/src/middleware/cors.ts +47 -47
  238. package/src/middleware/csrf.ts +328 -328
  239. package/src/middleware/define.ts +132 -132
  240. package/src/middleware/jwt.ts +134 -134
  241. package/src/middleware/logger.ts +58 -58
  242. package/src/middleware/oauth/__tests__/oauth.test.ts +1 -1
  243. package/src/middleware/oauth/index.ts +505 -505
  244. package/src/middleware/oauth/providers.ts +115 -115
  245. package/src/middleware/rate-limit/index.ts +522 -522
  246. package/src/middleware/rate-limit/sqlite-store.ts +382 -382
  247. package/src/middleware/scheduler-cron.ts +96 -96
  248. package/src/middleware/secure/__tests__/secure.test.ts +360 -360
  249. package/src/middleware/secure/csp.ts +193 -193
  250. package/src/middleware/session.ts +174 -174
  251. package/src/middleware/timeout.ts +55 -55
  252. package/src/observability/logger-adapter.ts +36 -36
  253. package/src/observability/sqlite-store.ts +254 -254
  254. package/src/openapi/generator.ts +1 -1
  255. package/src/openapi/openapi.test.ts +43 -43
  256. package/src/perf/__tests__/user-marks.test.ts +354 -354
  257. package/src/perf/index.ts +133 -133
  258. package/src/plugins/__tests__/lifecycle-integration.test.ts +272 -272
  259. package/src/plugins/__tests__/runner.test.ts +409 -409
  260. package/src/plugins/define.ts +124 -124
  261. package/src/plugins/examples/dep-check-plugin.ts +80 -80
  262. package/src/plugins/examples/prerender-cache-plugin.ts +111 -111
  263. package/src/plugins/examples/sitemap-plugin.ts +65 -65
  264. package/src/plugins/runner.ts +361 -361
  265. package/src/plugins/types.ts +368 -368
  266. package/src/report/index.ts +1 -1
  267. package/src/resource/__tests__/generator.test.ts +32 -32
  268. package/src/resource/ddl/__tests__/diff.test.ts +639 -639
  269. package/src/resource/ddl/__tests__/emit.test.ts +823 -823
  270. package/src/resource/ddl/__tests__/snapshot.test.ts +499 -499
  271. package/src/resource/ddl/emit.ts +559 -559
  272. package/src/resource/ddl/persistence-types.ts +218 -218
  273. package/src/resource/ddl/type-map.ts +223 -223
  274. package/src/resource/ddl/types.ts +232 -232
  275. package/src/resource/generator-repo.ts +630 -630
  276. package/src/resource/schema.ts +1 -1
  277. package/src/router/fs-patterns.test.ts +96 -96
  278. package/src/router/fs-routes.ts +6 -6
  279. package/src/routes/index.ts +74 -74
  280. package/src/routes/metadata-routes.ts +427 -427
  281. package/src/routes/types.ts +341 -341
  282. package/src/runtime/__tests__/error-boundary-redaction.test.ts +141 -141
  283. package/src/runtime/__tests__/hdr-client.test.ts +223 -223
  284. package/src/runtime/__tests__/http-errors.test.ts +117 -117
  285. package/src/runtime/__tests__/not-found.test.ts +152 -152
  286. package/src/runtime/adapter.ts +47 -47
  287. package/src/runtime/boundary.tsx +252 -252
  288. package/src/runtime/cache.ts +494 -494
  289. package/src/runtime/compose.ts +222 -222
  290. package/src/runtime/fast-refresh-runtime.ts +322 -322
  291. package/src/runtime/handler.ts +65 -65
  292. package/src/runtime/handlers.ts +300 -300
  293. package/src/runtime/http-errors.ts +113 -113
  294. package/src/runtime/image-handler.ts +1 -1
  295. package/src/runtime/lifecycle.ts +381 -381
  296. package/src/runtime/logger.test.ts +345 -345
  297. package/src/runtime/middleware.ts +264 -264
  298. package/src/runtime/not-found.ts +93 -93
  299. package/src/runtime/openapi-endpoint.ts +236 -236
  300. package/src/runtime/ppr.ts +74 -74
  301. package/src/runtime/registry.ts +171 -171
  302. package/src/runtime/router.ts +105 -105
  303. package/src/runtime/server.ts +67 -67
  304. package/src/runtime/shims.ts +48 -48
  305. package/src/runtime/trace.ts +144 -144
  306. package/src/scheduler/validate.ts +169 -169
  307. package/src/seo/index.ts +219 -219
  308. package/src/seo/integration/ssr.ts +306 -306
  309. package/src/seo/render/basic.ts +435 -435
  310. package/src/seo/render/index.ts +143 -143
  311. package/src/seo/render/jsonld.ts +539 -539
  312. package/src/seo/render/opengraph.ts +197 -197
  313. package/src/seo/render/robots.ts +116 -116
  314. package/src/seo/render/sitemap.ts +137 -137
  315. package/src/seo/render/twitter.ts +127 -127
  316. package/src/seo/resolve/opengraph.ts +143 -143
  317. package/src/seo/resolve/robots.ts +73 -73
  318. package/src/seo/resolve/title.ts +94 -94
  319. package/src/seo/resolve/twitter.ts +73 -73
  320. package/src/seo/resolve/url.ts +104 -104
  321. package/src/seo/routes/index.ts +290 -290
  322. package/src/seo/types.ts +588 -588
  323. package/src/slot/validator.ts +39 -39
  324. package/src/storage/s3/__tests__/s3.test.ts +479 -479
  325. package/src/storage/s3/index.ts +412 -412
  326. package/src/testing/__tests__/assertions.test.ts +632 -632
  327. package/src/testing/__tests__/reporter.test.ts +454 -454
  328. package/src/testing/assertions.ts +986 -986
  329. package/src/testing/db.ts +157 -157
  330. package/src/testing/mocks.ts +203 -203
  331. package/src/testing/session.ts +190 -190
  332. package/src/types/branded.ts +56 -56
  333. package/src/types/index.ts +1 -1
  334. package/src/utils/safe-io.ts +188 -188
  335. package/src/utils/string-safe.ts +298 -298
  336. package/src/watcher/watcher.ts +18 -18
package/src/dev-error-overlay/overlay-injector.ts CHANGED
@@ -1,243 +1,243 @@
1
- /**
2
- * Phase 18.α — Dev Error Overlay injector.
3
- *
4
- * Provides two surfaces:
5
- *
6
- * 1. `buildOverlayHeadTag(config)` — returns the `<style>` + `<script>`
7
- * block to splice into the SSR `<head>`. Returns `""` in production
8
- * mode, when the user opts out via `ManduConfig.dev.errorOverlay:
9
- * false`, or when the environment signals a non-dev build. This is
10
- * the canonical entry point called from `runtime/ssr.ts`.
11
- *
12
- * 2. `buildOverlayErrorEmbed(payload)` — serialises a
13
- * `DevErrorPayload` into two tags (a `<script type="application/json">`
14
- * the IIFE reads on DOMContentLoaded, plus a fire-and-forget event
15
- * dispatch for late-mounted pages). Used by the 500-response path
16
- * in `runtime/server.ts` so SSR crashes still render the overlay
17
- * even when the React tree never produced output.
18
- *
19
- * Security posture:
20
- * - Prod NEVER renders the overlay — triple-gated by env, explicit
21
- * opt-in, and the injector's early-return.
22
- * - The payload is escaped with the existing `escapeJsonForInlineScript`
23
- * so `</script>` sequences cannot break out.
24
- * - Stack traces contain absolute paths. Acceptable in dev; the
25
- * injector refuses to emit when NODE_ENV=production regardless of
26
- * any other flag.
27
- */
28
- import { escapeJsonForInlineScript } from "../runtime/escape";
29
- import { OVERLAY_CLIENT_SCRIPT } from "./overlay-client";
30
- import { OVERLAY_STYLES } from "./overlay-styles";
31
- import type { DevErrorPayload, DevErrorStackFrame } from "./types";
32
- import {
33
- OVERLAY_CUSTOM_EVENT,
34
- OVERLAY_PAYLOAD_ELEMENT_ID,
35
- } from "./types";
36
-
37
- /**
38
- * Config consumed by the injector. Mirrors `ManduConfig.dev.errorOverlay`
39
- * plus an `isDev` escape hatch for callers that already know the runtime
40
- * mode (e.g. the SSR pipeline computes this from `settings.isDev`).
41
- */
42
- export interface DevOverlayInjectorConfig {
43
- /** Explicit dev-mode signal. When `false`, the injector ALWAYS returns "". */
44
- isDev: boolean;
45
- /**
46
- * User-level opt-out from `ManduConfig.dev.errorOverlay`. `undefined`
47
- * means "default" (enabled in dev). `false` disables; `true` is a
48
- * no-op (dev is always enabled).
49
- */
50
- enabled?: boolean;
51
- }
52
-
53
- /**
54
- * The absolute guard: production NEVER renders. Triple-checks:
55
- * - `config.isDev === true` (caller authoritative)
56
- * - `NODE_ENV !== "production"` (env authoritative; `isDev` can't lie)
57
- * - user did not set `dev.errorOverlay: false`
58
- *
59
- * All three must pass. If any check fails we return `false` and the
60
- * injector emits an empty string.
61
- */
62
- export function shouldInjectOverlay(config: DevOverlayInjectorConfig): boolean {
63
- if (config.enabled === false) return false;
64
- if (!config.isDev) return false;
65
- try {
66
- if (typeof process !== "undefined" && process.env && process.env.NODE_ENV === "production") {
67
- return false;
68
- }
69
- } catch {
70
- // edge runtimes that sandbox `process` — fall through; isDev already
71
- // passed and the caller asserted dev mode.
72
- }
73
- return true;
74
- }
75
-
76
- /**
77
- * Build the `<style>` + `<script>` block to inject into the SSR `<head>`.
78
- * Returns `""` in production or when the user opts out.
79
- *
80
- * The returned string is expected to be spliced AS-IS into the
81
- * `renderToHTML` head template — `escapeJsonForInlineScript` is NOT
82
- * applied at this layer because the content is already safe (a verbatim
83
- * IIFE string and a verbatim CSS string, both authored in this repo).
84
- */
85
- export function buildOverlayHeadTag(config: DevOverlayInjectorConfig): string {
86
- if (!shouldInjectOverlay(config)) return "";
87
- // `id` attributes let tests + HMR locate the tags. The IIFE guards
88
- // against double-mount via `OVERLAY_MOUNTED_FLAG`, so even if two
89
- // copies somehow slip in the user-visible behaviour is still correct.
90
- return (
91
- `<style id="__mandu-dev-overlay-style">${OVERLAY_STYLES}</style>` +
92
- `<script id="__mandu-dev-overlay-client">${OVERLAY_CLIENT_SCRIPT}</script>`
93
- );
94
- }
95
-
96
- /**
97
- * Thin wrapper called from `runtime/ssr.ts`. The function name matches
98
- * the spec ("maybeInjectDevOverlay"). Returning a string keeps ssr.ts'
99
- * template-literal interpolation ergonomic.
100
- */
101
- export function maybeInjectDevOverlay(config: DevOverlayInjectorConfig): string {
102
- return buildOverlayHeadTag(config);
103
- }
104
-
105
- /**
106
- * Parse a raw `error.stack` string into frames on the server, mirroring
107
- * the client-side parser. Server-side preparation means the overlay
108
- * renders the structured list immediately — no regex cost on the main
109
- * thread at page load.
110
- *
111
- * Deliberately simple: handles Chrome / V8 (` at fn (file:line:col)`)
112
- * and Firefox (`fn@file:line:col`). Anything else becomes an
113
- * `<anonymous>` frame carrying the raw line text, so information is
114
- * never lost.
115
- */
116
- export function parseStackFrames(stack: string | undefined | null): DevErrorStackFrame[] {
117
- if (!stack) return [];
118
- const lines = stack.split("\n");
119
- const out: DevErrorStackFrame[] = [];
120
- for (const raw of lines) {
121
- const t = raw.trim();
122
- if (!t) continue;
123
- // Skip the first line if it's just "Error: message" (the header).
124
- if (/^[A-Z][a-zA-Z]*(?:Error)?:/.test(t) && out.length === 0) continue;
125
- let m = t.match(/^at\s+(.+?)\s+\((.+):(\d+):(\d+)\)$/);
126
- if (m) {
127
- out.push({
128
- fn: m[1],
129
- file: m[2],
130
- line: Number.parseInt(m[3], 10),
131
- column: Number.parseInt(m[4], 10),
132
- raw,
133
- });
134
- continue;
135
- }
136
- m = t.match(/^at\s+(.+):(\d+):(\d+)$/);
137
- if (m) {
138
- out.push({
139
- fn: "<anonymous>",
140
- file: m[1],
141
- line: Number.parseInt(m[2], 10),
142
- column: Number.parseInt(m[3], 10),
143
- raw,
144
- });
145
- continue;
146
- }
147
- m = t.match(/^(.*?)@(.+):(\d+):(\d+)$/);
148
- if (m) {
149
- out.push({
150
- fn: m[1] || "<anonymous>",
151
- file: m[2],
152
- line: Number.parseInt(m[3], 10),
153
- column: Number.parseInt(m[4], 10),
154
- raw,
155
- });
156
- continue;
157
- }
158
- out.push({ fn: "<anonymous>", file: t, line: null, column: null, raw });
159
- }
160
- return out;
161
- }
162
-
163
- /**
164
- * Build a `DevErrorPayload` from a caught `Error`-like value. Safe
165
- * against non-Error throws (strings, plain objects, undefined).
166
- */
167
- export function buildPayloadFromError(
168
- err: unknown,
169
- extra: { kind?: DevErrorPayload["kind"]; routeId?: string; url?: string } = {},
170
- ): DevErrorPayload {
171
- let name = "Error";
172
- let message = "";
173
- let stack = "";
174
- if (err && typeof err === "object") {
175
- const rec = err as { name?: unknown; message?: unknown; stack?: unknown };
176
- name = typeof rec.name === "string" ? rec.name : "Error";
177
- message = typeof rec.message === "string" ? rec.message : "";
178
- stack = typeof rec.stack === "string" ? rec.stack : "";
179
- } else if (typeof err === "string") {
180
- message = err;
181
- } else if (err !== null && err !== undefined) {
182
- try { message = String(err); } catch { message = "<unserializable>"; }
183
- }
184
- return {
185
- name,
186
- message,
187
- frames: parseStackFrames(stack),
188
- stack,
189
- kind: extra.kind ?? "ssr",
190
- timestamp: Date.now(),
191
- routeId: extra.routeId,
192
- url: extra.url,
193
- };
194
- }
195
-
196
- /**
197
- * Build the body-end embed tags for an SSR 500 response. The first tag
198
- * carries the payload as JSON (the IIFE picks it up on
199
- * DOMContentLoaded); the second tag is a defensive re-dispatch for
200
- * pages that already fired DOMContentLoaded by the time the overlay
201
- * mounts (possible when HMR re-runs the client bundle).
202
- *
203
- * Both tags are safe to splice verbatim — `escapeJsonForInlineScript`
204
- * neutralises any `</script>` in the payload.
205
- */
206
- export function buildOverlayErrorEmbed(payload: DevErrorPayload): string {
207
- const json = escapeJsonForInlineScript(JSON.stringify(payload));
208
- const dispatch = `(function(){try{var d=${json};window.dispatchEvent(new CustomEvent(${JSON.stringify(
209
- OVERLAY_CUSTOM_EVENT,
210
- )},{detail:d}));}catch(_){}})();`;
211
- return (
212
- `<script id="${OVERLAY_PAYLOAD_ELEMENT_ID}" type="application/json">${json}</script>` +
213
- `<script>${dispatch}</script>`
214
- );
215
- }
216
-
217
- /**
218
- * Produce a minimal HTML document for the SSR 500 surface in dev. The
219
- * overlay client IIFE is inlined so the overlay renders even when the
220
- * React tree never emitted a root — which is exactly when `createSSRErrorResponse`
221
- * fires. Returns a complete `<!doctype html>` string; the server wraps
222
- * it in a 500 `Response`.
223
- */
224
- export function buildOverlayErrorHtml(payload: DevErrorPayload): string {
225
- return (
226
- `<!doctype html><html lang="en"><head><meta charset="UTF-8">` +
227
- `<title>Mandu — ${escapeTitle(payload.name)}</title>` +
228
- buildOverlayHeadTag({ isDev: true }) +
229
- `</head><body><div id="root"></div>` +
230
- buildOverlayErrorEmbed(payload) +
231
- `</body></html>`
232
- );
233
- }
234
-
235
- function escapeTitle(s: string): string {
236
- return s.replace(/[<>&"']/g, (c) =>
237
- c === "<" ? "&lt;"
238
- : c === ">" ? "&gt;"
239
- : c === "&" ? "&amp;"
240
- : c === "\"" ? "&quot;"
241
- : "&#39;",
242
- );
243
- }
1
+ /**
2
+ * Phase 18.α — Dev Error Overlay injector.
3
+ *
4
+ * Provides two surfaces:
5
+ *
6
+ * 1. `buildOverlayHeadTag(config)` — returns the `<style>` + `<script>`
7
+ * block to splice into the SSR `<head>`. Returns `""` in production
8
+ * mode, when the user opts out via `ManduConfig.dev.errorOverlay:
9
+ * false`, or when the environment signals a non-dev build. This is
10
+ * the canonical entry point called from `runtime/ssr.ts`.
11
+ *
12
+ * 2. `buildOverlayErrorEmbed(payload)` — serialises a
13
+ * `DevErrorPayload` into two tags (a `<script type="application/json">`
14
+ * the IIFE reads on DOMContentLoaded, plus a fire-and-forget event
15
+ * dispatch for late-mounted pages). Used by the 500-response path
16
+ * in `runtime/server.ts` so SSR crashes still render the overlay
17
+ * even when the React tree never produced output.
18
+ *
19
+ * Security posture:
20
+ * - Prod NEVER renders the overlay — triple-gated by env, explicit
21
+ * opt-in, and the injector's early-return.
22
+ * - The payload is escaped with the existing `escapeJsonForInlineScript`
23
+ * so `</script>` sequences cannot break out.
24
+ * - Stack traces contain absolute paths. Acceptable in dev; the
25
+ * injector refuses to emit when NODE_ENV=production regardless of
26
+ * any other flag.
27
+ */
28
+ import { escapeJsonForInlineScript } from "../runtime/escape";
29
+ import { OVERLAY_CLIENT_SCRIPT } from "./overlay-client";
30
+ import { OVERLAY_STYLES } from "./overlay-styles";
31
+ import type { DevErrorPayload, DevErrorStackFrame } from "./types";
32
+ import {
33
+ OVERLAY_CUSTOM_EVENT,
34
+ OVERLAY_PAYLOAD_ELEMENT_ID,
35
+ } from "./types";
36
+
37
+ /**
38
+ * Config consumed by the injector. Mirrors `ManduConfig.dev.errorOverlay`
39
+ * plus an `isDev` escape hatch for callers that already know the runtime
40
+ * mode (e.g. the SSR pipeline computes this from `settings.isDev`).
41
+ */
42
+ export interface DevOverlayInjectorConfig {
43
+ /** Explicit dev-mode signal. When `false`, the injector ALWAYS returns "". */
44
+ isDev: boolean;
45
+ /**
46
+ * User-level opt-out from `ManduConfig.dev.errorOverlay`. `undefined`
47
+ * means "default" (enabled in dev). `false` disables; `true` is a
48
+ * no-op (dev is always enabled).
49
+ */
50
+ enabled?: boolean;
51
+ }
52
+
53
+ /**
54
+ * The absolute guard: production NEVER renders. Triple-checks:
55
+ * - `config.isDev === true` (caller authoritative)
56
+ * - `NODE_ENV !== "production"` (env authoritative; `isDev` can't lie)
57
+ * - user did not set `dev.errorOverlay: false`
58
+ *
59
+ * All three must pass. If any check fails we return `false` and the
60
+ * injector emits an empty string.
61
+ */
62
+ export function shouldInjectOverlay(config: DevOverlayInjectorConfig): boolean {
63
+ if (config.enabled === false) return false;
64
+ if (!config.isDev) return false;
65
+ try {
66
+ if (typeof process !== "undefined" && process.env && process.env.NODE_ENV === "production") {
67
+ return false;
68
+ }
69
+ } catch {
70
+ // edge runtimes that sandbox `process` — fall through; isDev already
71
+ // passed and the caller asserted dev mode.
72
+ }
73
+ return true;
74
+ }
75
+
76
+ /**
77
+ * Build the `<style>` + `<script>` block to inject into the SSR `<head>`.
78
+ * Returns `""` in production or when the user opts out.
79
+ *
80
+ * The returned string is expected to be spliced AS-IS into the
81
+ * `renderToHTML` head template — `escapeJsonForInlineScript` is NOT
82
+ * applied at this layer because the content is already safe (a verbatim
83
+ * IIFE string and a verbatim CSS string, both authored in this repo).
84
+ */
85
+ export function buildOverlayHeadTag(config: DevOverlayInjectorConfig): string {
86
+ if (!shouldInjectOverlay(config)) return "";
87
+ // `id` attributes let tests + HMR locate the tags. The IIFE guards
88
+ // against double-mount via `OVERLAY_MOUNTED_FLAG`, so even if two
89
+ // copies somehow slip in the user-visible behaviour is still correct.
90
+ return (
91
+ `<style id="__mandu-dev-overlay-style">${OVERLAY_STYLES}</style>` +
92
+ `<script id="__mandu-dev-overlay-client">${OVERLAY_CLIENT_SCRIPT}</script>`
93
+ );
94
+ }
95
+
96
+ /**
97
+ * Thin wrapper called from `runtime/ssr.ts`. The function name matches
98
+ * the spec ("maybeInjectDevOverlay"). Returning a string keeps ssr.ts'
99
+ * template-literal interpolation ergonomic.
100
+ */
101
+ export function maybeInjectDevOverlay(config: DevOverlayInjectorConfig): string {
102
+ return buildOverlayHeadTag(config);
103
+ }
104
+
105
+ /**
106
+ * Parse a raw `error.stack` string into frames on the server, mirroring
107
+ * the client-side parser. Server-side preparation means the overlay
108
+ * renders the structured list immediately — no regex cost on the main
109
+ * thread at page load.
110
+ *
111
+ * Deliberately simple: handles Chrome / V8 (` at fn (file:line:col)`)
112
+ * and Firefox (`fn@file:line:col`). Anything else becomes an
113
+ * `<anonymous>` frame carrying the raw line text, so information is
114
+ * never lost.
115
+ */
116
+ export function parseStackFrames(stack: string | undefined | null): DevErrorStackFrame[] {
117
+ if (!stack) return [];
118
+ const lines = stack.split("\n");
119
+ const out: DevErrorStackFrame[] = [];
120
+ for (const raw of lines) {
121
+ const t = raw.trim();
122
+ if (!t) continue;
123
+ // Skip the first line if it's just "Error: message" (the header).
124
+ if (/^[A-Z][a-zA-Z]*(?:Error)?:/.test(t) && out.length === 0) continue;
125
+ let m = t.match(/^at\s+(.+?)\s+\((.+):(\d+):(\d+)\)$/);
126
+ if (m) {
127
+ out.push({
128
+ fn: m[1],
129
+ file: m[2],
130
+ line: Number.parseInt(m[3], 10),
131
+ column: Number.parseInt(m[4], 10),
132
+ raw,
133
+ });
134
+ continue;
135
+ }
136
+ m = t.match(/^at\s+(.+):(\d+):(\d+)$/);
137
+ if (m) {
138
+ out.push({
139
+ fn: "<anonymous>",
140
+ file: m[1],
141
+ line: Number.parseInt(m[2], 10),
142
+ column: Number.parseInt(m[3], 10),
143
+ raw,
144
+ });
145
+ continue;
146
+ }
147
+ m = t.match(/^(.*?)@(.+):(\d+):(\d+)$/);
148
+ if (m) {
149
+ out.push({
150
+ fn: m[1] || "<anonymous>",
151
+ file: m[2],
152
+ line: Number.parseInt(m[3], 10),
153
+ column: Number.parseInt(m[4], 10),
154
+ raw,
155
+ });
156
+ continue;
157
+ }
158
+ out.push({ fn: "<anonymous>", file: t, line: null, column: null, raw });
159
+ }
160
+ return out;
161
+ }
162
+
163
+ /**
164
+ * Build a `DevErrorPayload` from a caught `Error`-like value. Safe
165
+ * against non-Error throws (strings, plain objects, undefined).
166
+ */
167
+ export function buildPayloadFromError(
168
+ err: unknown,
169
+ extra: { kind?: DevErrorPayload["kind"]; routeId?: string; url?: string } = {},
170
+ ): DevErrorPayload {
171
+ let name = "Error";
172
+ let message = "";
173
+ let stack = "";
174
+ if (err && typeof err === "object") {
175
+ const rec = err as { name?: unknown; message?: unknown; stack?: unknown };
176
+ name = typeof rec.name === "string" ? rec.name : "Error";
177
+ message = typeof rec.message === "string" ? rec.message : "";
178
+ stack = typeof rec.stack === "string" ? rec.stack : "";
179
+ } else if (typeof err === "string") {
180
+ message = err;
181
+ } else if (err !== null && err !== undefined) {
182
+ try { message = String(err); } catch { message = "<unserializable>"; }
183
+ }
184
+ return {
185
+ name,
186
+ message,
187
+ frames: parseStackFrames(stack),
188
+ stack,
189
+ kind: extra.kind ?? "ssr",
190
+ timestamp: Date.now(),
191
+ routeId: extra.routeId,
192
+ url: extra.url,
193
+ };
194
+ }
195
+
196
+ /**
197
+ * Build the body-end embed tags for an SSR 500 response. The first tag
198
+ * carries the payload as JSON (the IIFE picks it up on
199
+ * DOMContentLoaded); the second tag is a defensive re-dispatch for
200
+ * pages that already fired DOMContentLoaded by the time the overlay
201
+ * mounts (possible when HMR re-runs the client bundle).
202
+ *
203
+ * Both tags are safe to splice verbatim — `escapeJsonForInlineScript`
204
+ * neutralises any `</script>` in the payload.
205
+ */
206
+ export function buildOverlayErrorEmbed(payload: DevErrorPayload): string {
207
+ const json = escapeJsonForInlineScript(JSON.stringify(payload));
208
+ const dispatch = `(function(){try{var d=${json};window.dispatchEvent(new CustomEvent(${JSON.stringify(
209
+ OVERLAY_CUSTOM_EVENT,
210
+ )},{detail:d}));}catch(_){}})();`;
211
+ return (
212
+ `<script id="${OVERLAY_PAYLOAD_ELEMENT_ID}" type="application/json">${json}</script>` +
213
+ `<script>${dispatch}</script>`
214
+ );
215
+ }
216
+
217
+ /**
218
+ * Produce a minimal HTML document for the SSR 500 surface in dev. The
219
+ * overlay client IIFE is inlined so the overlay renders even when the
220
+ * React tree never emitted a root — which is exactly when `createSSRErrorResponse`
221
+ * fires. Returns a complete `<!doctype html>` string; the server wraps
222
+ * it in a 500 `Response`.
223
+ */
224
+ export function buildOverlayErrorHtml(payload: DevErrorPayload): string {
225
+ return (
226
+ `<!doctype html><html lang="en"><head><meta charset="UTF-8">` +
227
+ `<title>Mandu — ${escapeTitle(payload.name)}</title>` +
228
+ buildOverlayHeadTag({ isDev: true }) +
229
+ `</head><body><div id="root"></div>` +
230
+ buildOverlayErrorEmbed(payload) +
231
+ `</body></html>`
232
+ );
233
+ }
234
+
235
+ function escapeTitle(s: string): string {
236
+ return s.replace(/[<>&"']/g, (c) =>
237
+ c === "<" ? "&lt;"
238
+ : c === ">" ? "&gt;"
239
+ : c === "&" ? "&amp;"
240
+ : c === "\"" ? "&quot;"
241
+ : "&#39;",
242
+ );
243
+ }
package/src/dev-error-overlay/overlay-styles.ts CHANGED
@@ -1,52 +1,52 @@
1
- /**
2
- * Phase 18.α — Dev Error Overlay styles.
3
- *
4
- * Scoped CSS string emitted inside a single `<style>` tag by the
5
- * injector. Deliberately:
6
- *
7
- * - Prefix every selector with `.mandu-dev-overlay` so we never leak
8
- * into the host page's stylesheet (no `*` or `body` selectors).
9
- * - Inline all values — no Tailwind, no CSS vars from userland.
10
- * - Use `system-ui, -apple-system, ...` + a monospace stack so the
11
- * overlay works even on pages that have not yet loaded webfonts
12
- * (broken SSR responses often haven't).
13
- * - Hit contrast ratio ≥ 7:1 (WCAG AAA) for the text-on-backdrop
14
- * combination: `#f4f4f5` on `rgba(10,10,10,0.94)` ≈ 14.2:1.
15
- *
16
- * The whole string weighs ~2.2 KB uncompressed. gzip ≈ 0.9 KB.
17
- */
18
- export const OVERLAY_STYLES = `
19
- .mandu-dev-overlay{position:fixed;inset:0;z-index:2147483647;background:rgba(10,10,10,0.94);color:#f4f4f5;font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:13px;line-height:1.5;overflow:auto;padding:32px;box-sizing:border-box;-webkit-font-smoothing:antialiased}
20
- .mandu-dev-overlay *,.mandu-dev-overlay *::before,.mandu-dev-overlay *::after{box-sizing:border-box}
21
- .mandu-dev-overlay__panel{max-width:960px;margin:0 auto;background:#18181b;border:1px solid #3f3f46;border-radius:8px;box-shadow:0 20px 60px rgba(0,0,0,0.6);overflow:hidden}
22
- .mandu-dev-overlay__header{display:flex;align-items:center;justify-content:space-between;padding:16px 24px;background:#27272a;border-bottom:1px solid #3f3f46}
23
- .mandu-dev-overlay__title{display:flex;flex-direction:column;gap:4px}
24
- .mandu-dev-overlay__kind{font-size:11px;text-transform:uppercase;letter-spacing:0.08em;color:#fca5a5;font-weight:600}
25
- .mandu-dev-overlay__name{font-size:18px;color:#fafafa;font-weight:600;font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif}
26
- .mandu-dev-overlay__actions{display:flex;gap:8px}
27
- .mandu-dev-overlay__btn{appearance:none;background:#3f3f46;border:1px solid #52525b;color:#fafafa;padding:6px 12px;border-radius:6px;font-family:inherit;font-size:12px;cursor:pointer;transition:background 120ms ease;font-weight:500}
28
- .mandu-dev-overlay__btn:hover{background:#52525b}
29
- .mandu-dev-overlay__btn:focus-visible{outline:2px solid #60a5fa;outline-offset:2px}
30
- .mandu-dev-overlay__btn--primary{background:#2563eb;border-color:#1d4ed8}
31
- .mandu-dev-overlay__btn--primary:hover{background:#1d4ed8}
32
- .mandu-dev-overlay__body{padding:24px}
33
- .mandu-dev-overlay__message{font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif;font-size:15px;color:#fafafa;margin:0 0 20px;white-space:pre-wrap;word-break:break-word;padding:12px 16px;background:#0a0a0a;border-left:3px solid #ef4444;border-radius:4px}
34
- .mandu-dev-overlay__meta{display:flex;flex-wrap:wrap;gap:16px;margin-bottom:20px;padding:12px 16px;background:#0a0a0a;border-radius:6px;font-size:12px}
35
- .mandu-dev-overlay__meta-item{display:flex;flex-direction:column;gap:2px}
36
- .mandu-dev-overlay__meta-label{color:#a1a1aa;font-size:10px;text-transform:uppercase;letter-spacing:0.06em}
37
- .mandu-dev-overlay__meta-value{color:#e4e4e7}
38
- .mandu-dev-overlay__section-title{font-size:11px;text-transform:uppercase;letter-spacing:0.08em;color:#a1a1aa;margin:0 0 8px;font-weight:600}
39
- .mandu-dev-overlay__frames{list-style:none;margin:0;padding:0;background:#0a0a0a;border-radius:6px;overflow:hidden}
40
- .mandu-dev-overlay__frame{padding:10px 16px;border-bottom:1px solid #27272a;display:flex;flex-direction:column;gap:2px}
41
- .mandu-dev-overlay__frame:last-child{border-bottom:none}
42
- .mandu-dev-overlay__frame-fn{color:#fbbf24;font-weight:500}
43
- .mandu-dev-overlay__frame-loc{color:#a1a1aa;font-size:12px}
44
- .mandu-dev-overlay__frame-link{color:#93c5fd;text-decoration:none;cursor:pointer}
45
- .mandu-dev-overlay__frame-link:hover{text-decoration:underline;color:#bfdbfe}
46
- .mandu-dev-overlay__frame-link:focus-visible{outline:2px solid #60a5fa;outline-offset:1px;border-radius:2px}
47
- .mandu-dev-overlay__stack{margin-top:16px;padding:12px 16px;background:#0a0a0a;border-radius:6px;max-height:240px;overflow:auto;white-space:pre-wrap;word-break:break-all;color:#d4d4d8;font-size:12px}
48
- .mandu-dev-overlay__footer{padding:12px 24px;background:#0a0a0a;border-top:1px solid #27272a;font-size:11px;color:#71717a;text-align:center}
49
- .mandu-dev-overlay__footer code{background:#27272a;padding:1px 6px;border-radius:3px;color:#a1a1aa}
50
- .mandu-dev-overlay[hidden]{display:none}
51
- @media (prefers-reduced-motion:reduce){.mandu-dev-overlay__btn{transition:none}}
52
- `.trim();
1
+ /**
2
+ * Phase 18.α — Dev Error Overlay styles.
3
+ *
4
+ * Scoped CSS string emitted inside a single `<style>` tag by the
5
+ * injector. Deliberately:
6
+ *
7
+ * - Prefix every selector with `.mandu-dev-overlay` so we never leak
8
+ * into the host page's stylesheet (no `*` or `body` selectors).
9
+ * - Inline all values — no Tailwind, no CSS vars from userland.
10
+ * - Use `system-ui, -apple-system, ...` + a monospace stack so the
11
+ * overlay works even on pages that have not yet loaded webfonts
12
+ * (broken SSR responses often haven't).
13
+ * - Hit contrast ratio ≥ 7:1 (WCAG AAA) for the text-on-backdrop
14
+ * combination: `#f4f4f5` on `rgba(10,10,10,0.94)` ≈ 14.2:1.
15
+ *
16
+ * The whole string weighs ~2.2 KB uncompressed. gzip ≈ 0.9 KB.
17
+ */
18
+ export const OVERLAY_STYLES = `
19
+ .mandu-dev-overlay{position:fixed;inset:0;z-index:2147483647;background:rgba(10,10,10,0.94);color:#f4f4f5;font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;font-size:13px;line-height:1.5;overflow:auto;padding:32px;box-sizing:border-box;-webkit-font-smoothing:antialiased}
20
+ .mandu-dev-overlay *,.mandu-dev-overlay *::before,.mandu-dev-overlay *::after{box-sizing:border-box}
21
+ .mandu-dev-overlay__panel{max-width:960px;margin:0 auto;background:#18181b;border:1px solid #3f3f46;border-radius:8px;box-shadow:0 20px 60px rgba(0,0,0,0.6);overflow:hidden}
22
+ .mandu-dev-overlay__header{display:flex;align-items:center;justify-content:space-between;padding:16px 24px;background:#27272a;border-bottom:1px solid #3f3f46}
23
+ .mandu-dev-overlay__title{display:flex;flex-direction:column;gap:4px}
24
+ .mandu-dev-overlay__kind{font-size:11px;text-transform:uppercase;letter-spacing:0.08em;color:#fca5a5;font-weight:600}
25
+ .mandu-dev-overlay__name{font-size:18px;color:#fafafa;font-weight:600;font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif}
26
+ .mandu-dev-overlay__actions{display:flex;gap:8px}
27
+ .mandu-dev-overlay__btn{appearance:none;background:#3f3f46;border:1px solid #52525b;color:#fafafa;padding:6px 12px;border-radius:6px;font-family:inherit;font-size:12px;cursor:pointer;transition:background 120ms ease;font-weight:500}
28
+ .mandu-dev-overlay__btn:hover{background:#52525b}
29
+ .mandu-dev-overlay__btn:focus-visible{outline:2px solid #60a5fa;outline-offset:2px}
30
+ .mandu-dev-overlay__btn--primary{background:#2563eb;border-color:#1d4ed8}
31
+ .mandu-dev-overlay__btn--primary:hover{background:#1d4ed8}
32
+ .mandu-dev-overlay__body{padding:24px}
33
+ .mandu-dev-overlay__message{font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif;font-size:15px;color:#fafafa;margin:0 0 20px;white-space:pre-wrap;word-break:break-word;padding:12px 16px;background:#0a0a0a;border-left:3px solid #ef4444;border-radius:4px}
34
+ .mandu-dev-overlay__meta{display:flex;flex-wrap:wrap;gap:16px;margin-bottom:20px;padding:12px 16px;background:#0a0a0a;border-radius:6px;font-size:12px}
35
+ .mandu-dev-overlay__meta-item{display:flex;flex-direction:column;gap:2px}
36
+ .mandu-dev-overlay__meta-label{color:#a1a1aa;font-size:10px;text-transform:uppercase;letter-spacing:0.06em}
37
+ .mandu-dev-overlay__meta-value{color:#e4e4e7}
38
+ .mandu-dev-overlay__section-title{font-size:11px;text-transform:uppercase;letter-spacing:0.08em;color:#a1a1aa;margin:0 0 8px;font-weight:600}
39
+ .mandu-dev-overlay__frames{list-style:none;margin:0;padding:0;background:#0a0a0a;border-radius:6px;overflow:hidden}
40
+ .mandu-dev-overlay__frame{padding:10px 16px;border-bottom:1px solid #27272a;display:flex;flex-direction:column;gap:2px}
41
+ .mandu-dev-overlay__frame:last-child{border-bottom:none}
42
+ .mandu-dev-overlay__frame-fn{color:#fbbf24;font-weight:500}
43
+ .mandu-dev-overlay__frame-loc{color:#a1a1aa;font-size:12px}
44
+ .mandu-dev-overlay__frame-link{color:#93c5fd;text-decoration:none;cursor:pointer}
45
+ .mandu-dev-overlay__frame-link:hover{text-decoration:underline;color:#bfdbfe}
46
+ .mandu-dev-overlay__frame-link:focus-visible{outline:2px solid #60a5fa;outline-offset:1px;border-radius:2px}
47
+ .mandu-dev-overlay__stack{margin-top:16px;padding:12px 16px;background:#0a0a0a;border-radius:6px;max-height:240px;overflow:auto;white-space:pre-wrap;word-break:break-all;color:#d4d4d8;font-size:12px}
48
+ .mandu-dev-overlay__footer{padding:12px 24px;background:#0a0a0a;border-top:1px solid #27272a;font-size:11px;color:#71717a;text-align:center}
49
+ .mandu-dev-overlay__footer code{background:#27272a;padding:1px 6px;border-radius:3px;color:#a1a1aa}
50
+ .mandu-dev-overlay[hidden]{display:none}
51
+ @media (prefers-reduced-motion:reduce){.mandu-dev-overlay__btn{transition:none}}
52
+ `.trim();