@meekojs/meeko 0.0.3 → 0.1.0

package/dist/framework/state.js

@@ -0,0 +1,136 @@
+import { createContext, createRoot, finishWithCleanup, inject, provide, signal } from "../reactivity.js";
+import { serializeJson } from "../server.js";
+const stateKey = createContext("Meeko framework state");
+function assertKey(key) {
+    if (!key || key === "__proto__" || key === "constructor" || key === "prototype")
+        throw new TypeError("Invalid state key");
+}
+export class StateStore {
+    values = new Map();
+    constructor(initial = {}) {
+        serializeJson(initial);
+        for (const [key, value] of Object.entries(initial)) {
+            assertKey(key);
+            this.values.set(key, signal(value));
+        }
+    }
+    get(key, factory) {
+        assertKey(key);
+        let value = this.values.get(key);
+        if (!value) {
+            value = signal(factory());
+            this.values.set(key, value);
+        }
+        return value;
+    }
+    /** Seeds values returned by a later server navigation without replacing local state. */
+    seed(values) {
+        serializeJson(values);
+        const entries = Object.entries(values);
+        for (const [key] of entries)
+            assertKey(key);
+        for (const [key, value] of entries) {
+            if (!this.values.has(key))
+                this.values.set(key, signal(value));
+        }
+    }
+    /** Applies navigation state only if the synchronous DOM commit succeeds. */
+    seedForNavigation(values, commit) {
+        const previousKeys = new Set(this.values.keys());
+        this.seed(values);
+        try {
+            return commit();
+        }
+        catch (error) {
+            for (const key of this.values.keys())
+                if (!previousKeys.has(key))
+                    this.values.delete(key);
+            throw error;
+        }
+    }
+    /** Gives an async client loader isolated signals until its route commits. */
+    navigationDraft() {
+        const initial = JSON.parse(serializeJson(this.snapshot()));
+        const draft = new StateStore(initial);
+        return {
+            state: draft,
+            commit: (work) => {
+                const next = draft.snapshot();
+                const changed = Object.entries(next).filter(([key, value]) => !Object.hasOwn(initial, key) || serializeJson(value) !== serializeJson(initial[key]));
+                const current = this.snapshot();
+                for (const [key] of changed) {
+                    if (Object.hasOwn(current, key) !== Object.hasOwn(initial, key)
+                        || (Object.hasOwn(initial, key) && serializeJson(current[key]) !== serializeJson(initial[key]))) {
+                        throw new Error(`Meeko state changed while navigating: ${key}`);
+                    }
+                }
+                const previous = new Map([...this.values].map(([key, value]) => {
+                    const serialized = serializeJson(value.value);
+                    return [key, { signal: value, serialized, value: JSON.parse(serialized) }];
+                }));
+                try {
+                    for (const [key, value] of changed) {
+                        const existing = this.values.get(key);
+                        if (existing)
+                            existing.value = value;
+                        else
+                            this.values.set(key, signal(value));
+                    }
+                    return work();
+                }
+                catch (error) {
+                    const failures = [error];
+                    for (const key of this.values.keys())
+                        if (!previous.has(key))
+                            this.values.delete(key);
+                    for (const [key, prior] of previous) {
+                        this.values.set(key, prior.signal);
+                        let unchanged = false;
+                        try {
+                            unchanged = serializeJson(prior.signal.value) === prior.serialized;
+                        }
+                        catch { /* A now-invalid value still needs restoration. */ }
+                        if (!unchanged) {
+                            try {
+                                prior.signal.value = prior.value;
+                            }
+                            catch (restoreError) {
+                                failures.push(restoreError);
+                            }
+                        }
+                    }
+                    if (failures.length > 1)
+                        throw new AggregateError(failures, "Meeko navigation state recovery failed");
+                    throw error;
+                }
+            },
+        };
+    }
+    snapshot() {
+        const result = Object.create(null);
+        for (const [key, value] of this.values)
+            result[key] = value.value;
+        serializeJson(result);
+        return result;
+    }
+}
+/** One keyed signal per application request or browser app instance. */
+export function useState(key, factory) {
+    return inject(stateKey).get(key, factory);
+}
+/** Runs synchronous SSR rendering with a state provider and releases its root. */
+export function withStateStore(store, render) {
+    return createRoot((dispose) => {
+        provide(stateKey, store);
+        return finishWithCleanup(render, dispose);
+    });
+}
+/** Keeps the provider alive until the hydrated component is released. */
+export function hydrateWithStateStore(store, hydrate) {
+    return createRoot((dispose) => {
+        provide(stateKey, store);
+        const release = hydrate();
+        return () => finishWithCleanup(release, dispose);
+    });
+}
+//# sourceMappingURL=state.js.map

package/dist/framework/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../src/framework/state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAEzG,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,QAAQ,GAAG,aAAa,CAAa,uBAAuB,CAAC,CAAC;AAEpE,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;AAC5H,CAAC;AAED,MAAM,OAAO,UAAU;IACJ,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE7D,YAAY,OAAO,GAAsC,EAAE;QACzD,aAAa,CAAC,OAAO,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;IAC9G,CAAC;IAED,GAAG,CAAI,GAAW,EAAE,OAAgB;QAClC,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,KAAkB,CAAC;IAC5B,CAAC;IAED,wFAAwF;IACxF,IAAI,CAAC,MAAyC;QAC5C,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,iBAAiB,CAAI,MAAyC,EAAE,MAAe;QAC7E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,IAAI,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QAAC,CAAC;QACxB,OAAO,KAAK,EAAE,CAAC;YACb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1F,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,eAAe;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAA4B,CAAC;QACtF,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,CAAI,IAAa,EAAK,EAAE;gBAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAC3D,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACxF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAChC,KAAK,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;oBAC5B,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC;2BAC1D,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;wBAClG,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,EAAE,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;oBAC7D,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC9C,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAY,EAAE,CAAU,CAAC;gBACjG,CAAC,CAAC,CAAC,CAAC;gBACJ,IAAI,CAAC;oBACH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;wBACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;wBACtC,IAAI,QAAQ;4BAAE,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;;4BAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC3C,CAAC;oBACD,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAc,CAAC,KAAK,CAAC,CAAC;oBACpC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;wBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;4BAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACtF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;wBACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;wBACnC,IAAI,SAAS,GAAG,KAAK,CAAC;wBACtB,IAAI,CAAC;4BAAC,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC;wBAAC,CAAC;wBAC3E,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;wBAC5D,IAAI,CAAC,SAAS,EAAE,CAAC;4BACf,IAAI,CAAC;gCAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;4BAAC,CAAC;4BACzC,OAAO,YAAY,EAAE,CAAC;gCAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;4BAAC,CAAC;wBACvD,CAAC;oBACH,CAAC;oBACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;wBAAE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAC;oBACtG,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED,QAAQ;QACN,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QAClE,aAAa,CAAC,MAAM,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,QAAQ,CAAI,GAAW,EAAE,OAAgB;IACvD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAI,KAAiB,EAAE,MAAe;IAClE,OAAO,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5B,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,qBAAqB,CAAC,KAAiB,EAAE,OAAyB;IAChF,OAAO,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5B,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;QAC1B,OAAO,GAAG,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createContext, createRoot, finishWithCleanup, inject, provide, signal } from \"../reactivity.js\";\nimport type { Signal } from \"../reactivity.js\";\nimport { serializeJson } from \"../server.js\";\n\nconst stateKey = createContext<StateStore>(\"Meeko framework state\");\n\nfunction assertKey(key: string): void {\n  if (!key || key === \"__proto__\" || key === \"constructor\" || key === \"prototype\") throw new TypeError(\"Invalid state key\");\n}\n\nexport class StateStore {\n  private readonly values = new Map<string, Signal<unknown>>();\n\n  constructor(initial: Readonly<Record<string, unknown>> = {}) {\n    serializeJson(initial);\n    for (const [key, value] of Object.entries(initial)) { assertKey(key); this.values.set(key, signal(value)); }\n  }\n\n  get<T>(key: string, factory: () => T): Signal<T> {\n    assertKey(key);\n    let value = this.values.get(key);\n    if (!value) {\n      value = signal(factory());\n      this.values.set(key, value);\n    }\n    return value as Signal<T>;\n  }\n\n  /** Seeds values returned by a later server navigation without replacing local state. */\n  seed(values: Readonly<Record<string, unknown>>): void {\n    serializeJson(values);\n    const entries = Object.entries(values);\n    for (const [key] of entries) assertKey(key);\n    for (const [key, value] of entries) {\n      if (!this.values.has(key)) this.values.set(key, signal(value));\n    }\n  }\n\n  /** Applies navigation state only if the synchronous DOM commit succeeds. */\n  seedForNavigation<T>(values: Readonly<Record<string, unknown>>, commit: () => T): T {\n    const previousKeys = new Set(this.values.keys());\n    this.seed(values);\n    try { return commit(); }\n    catch (error) {\n      for (const key of this.values.keys()) if (!previousKeys.has(key)) this.values.delete(key);\n      throw error;\n    }\n  }\n\n  /** Gives an async client loader isolated signals until its route commits. */\n  navigationDraft(): { state: StateStore; commit<T>(work: () => T): T } {\n    const initial = JSON.parse(serializeJson(this.snapshot())) as Record<string, unknown>;\n    const draft = new StateStore(initial);\n    return {\n      state: draft,\n      commit: <T>(work: () => T): T => {\n        const next = draft.snapshot();\n        const changed = Object.entries(next).filter(([key, value]) =>\n          !Object.hasOwn(initial, key) || serializeJson(value) !== serializeJson(initial[key]));\n        const current = this.snapshot();\n        for (const [key] of changed) {\n          if (Object.hasOwn(current, key) !== Object.hasOwn(initial, key)\n            || (Object.hasOwn(initial, key) && serializeJson(current[key]) !== serializeJson(initial[key]))) {\n            throw new Error(`Meeko state changed while navigating: ${key}`);\n          }\n        }\n        const previous = new Map([...this.values].map(([key, value]) => {\n          const serialized = serializeJson(value.value);\n          return [key, { signal: value, serialized, value: JSON.parse(serialized) as unknown }] as const;\n        }));\n        try {\n          for (const [key, value] of changed) {\n            const existing = this.values.get(key);\n            if (existing) existing.value = value;\n            else this.values.set(key, signal(value));\n          }\n          return work();\n        } catch (error) {\n          const failures: unknown[] = [error];\n          for (const key of this.values.keys()) if (!previous.has(key)) this.values.delete(key);\n          for (const [key, prior] of previous) {\n            this.values.set(key, prior.signal);\n            let unchanged = false;\n            try { unchanged = serializeJson(prior.signal.value) === prior.serialized; }\n            catch { /* A now-invalid value still needs restoration. */ }\n            if (!unchanged) {\n              try { prior.signal.value = prior.value; }\n              catch (restoreError) { failures.push(restoreError); }\n            }\n          }\n          if (failures.length > 1) throw new AggregateError(failures, \"Meeko navigation state recovery failed\");\n          throw error;\n        }\n      },\n    };\n  }\n\n  snapshot(): Record<string, unknown> {\n    const result: Record<string, unknown> = Object.create(null);\n    for (const [key, value] of this.values) result[key] = value.value;\n    serializeJson(result);\n    return result;\n  }\n}\n\n/** One keyed signal per application request or browser app instance. */\nexport function useState<T>(key: string, factory: () => T): Signal<T> {\n  return inject(stateKey).get(key, factory);\n}\n\n/** Runs synchronous SSR rendering with a state provider and releases its root. */\nexport function withStateStore<T>(store: StateStore, render: () => T): T {\n  return createRoot((dispose) => {\n    provide(stateKey, store);\n    return finishWithCleanup(render, dispose);\n  });\n}\n\n/** Keeps the provider alive until the hydrated component is released. */\nexport function hydrateWithStateStore(store: StateStore, hydrate: () => () => void): () => void {\n  return createRoot((dispose) => {\n    provide(stateKey, store);\n    const release = hydrate();\n    return () => finishWithCleanup(release, dispose);\n  });\n}\n"]}

package/dist/framework/styles.d.ts

@@ -0,0 +1,2 @@
+/** Renders stylesheet URLs from a Vite manifest or the development convention. */
+export declare function stylesheetLinks(paths: readonly string[]): string;

package/dist/framework/styles.js

@@ -0,0 +1,6 @@
+import { escapeHtml } from "../server.js";
+/** Renders stylesheet URLs from a Vite manifest or the development convention. */
+export function stylesheetLinks(paths) {
+    return paths.map((path) => `<link rel="stylesheet" href="${escapeHtml(path)}">`).join("");
+}
+//# sourceMappingURL=styles.js.map

package/dist/framework/styles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"styles.js","sourceRoot":"","sources":["../../src/framework/styles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,KAAwB;IACtD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gCAAgC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5F,CAAC","sourcesContent":["import { escapeHtml } from \"../server.js\";\n\n/** Renders stylesheet URLs from a Vite manifest or the development convention. */\nexport function stylesheetLinks(paths: readonly string[]): string {\n  return paths.map((path) => `<link rel=\"stylesheet\" href=\"${escapeHtml(path)}\">`).join(\"\");\n}\n"]}

package/dist/framework/type-declarations.d.ts

@@ -0,0 +1,5 @@
+export declare const projectNames: readonly ["app", "server", "shared"];
+/** Keeps TypeScript's three execution scopes under Meeko's generated directory. */
+export declare function generateFrameworkTsconfigs(projectRoot: string): Promise<string[]>;
+/** Generates declarations without loading a Vite server into the editor host. */
+export declare function prepareFrameworkTypeDeclarations(projectRoot: string): Promise<void>;

package/dist/framework/type-declarations.js

@@ -0,0 +1,84 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { join, relative, resolve } from "node:path";
+import { generateTypeScriptAutoImports } from "../autoimports-ts.js";
+import { generateAppTypes } from "./check-app.js";
+import { resolveConfigSources } from "./config.js";
+import { generateServerContracts } from "./contracts-generate.js";
+import { generateRoutes } from "./generate.js";
+import { generatePageContracts } from "./page-contracts-generate.js";
+export const projectNames = ["app", "server", "shared"];
+const compilerOptions = {
+    target: "ES2022", module: "NodeNext", moduleResolution: "NodeNext", lib: ["ES2022", "DOM"],
+    types: ["node", "vite/client"], strict: true, noEmit: true, allowArbitraryExtensions: true,
+    exactOptionalPropertyTypes: true, noUncheckedIndexedAccess: true, verbatimModuleSyntax: true,
+    skipLibCheck: true,
+};
+const generatedIncludes = {
+    app: [
+        "generated/entry-client.ts", "generated/clients.client.ts", "generated/socket-contracts.ts",
+        "types/**/*.d.meeko.ts", "types/routes.d.ts", "types/virtual-pages.d.ts",
+        "types/server-contracts.d.ts", "types/autoimports/client.d.ts",
+    ],
+    server: [
+        "generated/entry-server.ts", "generated/clients.server.ts", "generated/socket-contracts.ts",
+        "generated/page-contracts.server.ts", "types/virtual-pages.d.ts", "types/routes.d.ts",
+        "types/**/*.d.meeko.ts", "types/autoimports/server.d.ts",
+    ],
+    shared: ["types/autoimports/shared.d.ts"],
+};
+async function writeIfChanged(file, source) {
+    try {
+        if (await readFile(file, "utf8") === source)
+            return;
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    await writeFile(file, source, "utf8");
+}
+/** Keeps TypeScript's three execution scopes under Meeko's generated directory. */
+export async function generateFrameworkTsconfigs(projectRoot) {
+    const generatedRoot = join(resolve(projectRoot), ".meeko");
+    const sourceRoots = (await resolveConfigSources(projectRoot)).map(({ root }) => relative(generatedRoot, root).replaceAll("\\", "/"));
+    await mkdir(generatedRoot, { recursive: true });
+    const configs = [];
+    for (const name of projectNames) {
+        const file = join(generatedRoot, `tsconfig.${name}.json`);
+        const includes = [...generatedIncludes[name]];
+        const excludes = [];
+        for (const root of sourceRoots) {
+            if (name === "app") {
+                includes.push(`${root}/app/**/*.ts`, `${root}/server/**/*.client.ts`, `${root}/shared/**/*.client.ts`);
+                excludes.push(`${root}/app/pages/**/*.route.ts`, `${root}/app/**/*.server.ts`, `${root}/app/**/*.shared.ts`);
+            }
+            else if (name === "server") {
+                includes.push(`${root}/server/**/*.ts`, `${root}/app/**/*.server.ts`, `${root}/app/pages/**/*.route.ts`, `${root}/shared/**/*.server.ts`);
+                excludes.push(`${root}/server/**/*.client.ts`, `${root}/server/**/*.shared.ts`);
+            }
+            else {
+                includes.push(`${root}/shared/**/*.ts`, `${root}/app/**/*.shared.ts`, `${root}/server/**/*.shared.ts`);
+                excludes.push(`${root}/shared/**/*.client.ts`, `${root}/shared/**/*.server.ts`);
+            }
+        }
+        const source = JSON.stringify({
+            compilerOptions: { ...compilerOptions, rootDirs: name === "shared" ? undefined : ["..", "./types"] },
+            include: includes,
+            ...(excludes.length ? { exclude: excludes } : {}),
+        }, null, 2) + "\n";
+        await writeIfChanged(file, source);
+        configs.push(file);
+    }
+    return configs;
+}
+/** Generates declarations without loading a Vite server into the editor host. */
+export async function prepareFrameworkTypeDeclarations(projectRoot) {
+    const root = resolve(projectRoot);
+    await generateRoutes(root);
+    await generateServerContracts(root);
+    await generateAppTypes(root);
+    await generatePageContracts(root);
+    await generateTypeScriptAutoImports(root);
+    await generateFrameworkTsconfigs(root);
+}
+//# sourceMappingURL=type-declarations.js.map

package/dist/framework/type-declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-declarations.js","sourceRoot":"","sources":["../../src/framework/type-declarations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAEjE,MAAM,eAAe,GAAG;IACtB,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;IAC1F,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI;IAC1F,0BAA0B,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI;IAC5F,YAAY,EAAE,IAAI;CACV,CAAC;AAEX,MAAM,iBAAiB,GAAoD;IACzE,GAAG,EAAE;QACH,2BAA2B,EAAE,6BAA6B,EAAE,+BAA+B;QAC3F,uBAAuB,EAAE,mBAAmB,EAAE,0BAA0B;QACxE,6BAA6B,EAAE,+BAA+B;KAC/D;IACD,MAAM,EAAE;QACN,2BAA2B,EAAE,6BAA6B,EAAE,+BAA+B;QAC3F,oCAAoC,EAAE,0BAA0B,EAAE,mBAAmB;QACrF,uBAAuB,EAAE,+BAA+B;KACzD;IACD,MAAM,EAAE,CAAC,+BAA+B,CAAC;CAC1C,CAAC;AAEF,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,MAAc;IACxD,IAAI,CAAC;QAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,MAAM;YAAE,OAAO;IAAC,CAAC;IAC5D,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IAAC,CAAC;IACtF,MAAM,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,WAAmB;IAClE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,CAAC,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACrI,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,YAAY,IAAI,OAAO,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,cAAc,EAAE,GAAG,IAAI,wBAAwB,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC;gBACvG,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,0BAA0B,EAAE,GAAG,IAAI,qBAAqB,EAAE,GAAG,IAAI,qBAAqB,CAAC,CAAC;YAC/G,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,iBAAiB,EAAE,GAAG,IAAI,qBAAqB,EAAE,GAAG,IAAI,0BAA0B,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC;gBAC1I,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,wBAAwB,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC;YAClF,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,iBAAiB,EAAE,GAAG,IAAI,qBAAqB,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC;gBACvG,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,wBAAwB,EAAE,GAAG,IAAI,wBAAwB,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;YAC5B,eAAe,EAAE,EAAE,GAAG,eAAe,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE;YACpG,OAAO,EAAE,QAAQ;YACjB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;QACnB,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,WAAmB;IACxE,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAC3B,MAAM,uBAAuB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,6BAA6B,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC","sourcesContent":["import { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { join, relative, resolve } from \"node:path\";\nimport { generateTypeScriptAutoImports } from \"../autoimports-ts.js\";\nimport { generateAppTypes } from \"./check-app.js\";\nimport { resolveConfigSources } from \"./config.js\";\nimport { generateServerContracts } from \"./contracts-generate.js\";\nimport { generateRoutes } from \"./generate.js\";\nimport { generatePageContracts } from \"./page-contracts-generate.js\";\n\nexport const projectNames = [\"app\", \"server\", \"shared\"] as const;\n\nconst compilerOptions = {\n  target: \"ES2022\", module: \"NodeNext\", moduleResolution: \"NodeNext\", lib: [\"ES2022\", \"DOM\"],\n  types: [\"node\", \"vite/client\"], strict: true, noEmit: true, allowArbitraryExtensions: true,\n  exactOptionalPropertyTypes: true, noUncheckedIndexedAccess: true, verbatimModuleSyntax: true,\n  skipLibCheck: true,\n} as const;\n\nconst generatedIncludes: Record<(typeof projectNames)[number], string[]> = {\n  app: [\n    \"generated/entry-client.ts\", \"generated/clients.client.ts\", \"generated/socket-contracts.ts\",\n    \"types/**/*.d.meeko.ts\", \"types/routes.d.ts\", \"types/virtual-pages.d.ts\",\n    \"types/server-contracts.d.ts\", \"types/autoimports/client.d.ts\",\n  ],\n  server: [\n    \"generated/entry-server.ts\", \"generated/clients.server.ts\", \"generated/socket-contracts.ts\",\n    \"generated/page-contracts.server.ts\", \"types/virtual-pages.d.ts\", \"types/routes.d.ts\",\n    \"types/**/*.d.meeko.ts\", \"types/autoimports/server.d.ts\",\n  ],\n  shared: [\"types/autoimports/shared.d.ts\"],\n};\n\nasync function writeIfChanged(file: string, source: string): Promise<void> {\n  try { if (await readFile(file, \"utf8\") === source) return; }\n  catch (error) { if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error; }\n  await writeFile(file, source, \"utf8\");\n}\n\n/** Keeps TypeScript's three execution scopes under Meeko's generated directory. */\nexport async function generateFrameworkTsconfigs(projectRoot: string): Promise<string[]> {\n  const generatedRoot = join(resolve(projectRoot), \".meeko\");\n  const sourceRoots = (await resolveConfigSources(projectRoot)).map(({ root }) => relative(generatedRoot, root).replaceAll(\"\\\\\", \"/\"));\n  await mkdir(generatedRoot, { recursive: true });\n  const configs: string[] = [];\n  for (const name of projectNames) {\n    const file = join(generatedRoot, `tsconfig.${name}.json`);\n    const includes = [...generatedIncludes[name]];\n    const excludes: string[] = [];\n    for (const root of sourceRoots) {\n      if (name === \"app\") {\n        includes.push(`${root}/app/**/*.ts`, `${root}/server/**/*.client.ts`, `${root}/shared/**/*.client.ts`);\n        excludes.push(`${root}/app/pages/**/*.route.ts`, `${root}/app/**/*.server.ts`, `${root}/app/**/*.shared.ts`);\n      } else if (name === \"server\") {\n        includes.push(`${root}/server/**/*.ts`, `${root}/app/**/*.server.ts`, `${root}/app/pages/**/*.route.ts`, `${root}/shared/**/*.server.ts`);\n        excludes.push(`${root}/server/**/*.client.ts`, `${root}/server/**/*.shared.ts`);\n      } else {\n        includes.push(`${root}/shared/**/*.ts`, `${root}/app/**/*.shared.ts`, `${root}/server/**/*.shared.ts`);\n        excludes.push(`${root}/shared/**/*.client.ts`, `${root}/shared/**/*.server.ts`);\n      }\n    }\n    const source = JSON.stringify({\n      compilerOptions: { ...compilerOptions, rootDirs: name === \"shared\" ? undefined : [\"..\", \"./types\"] },\n      include: includes,\n      ...(excludes.length ? { exclude: excludes } : {}),\n    }, null, 2) + \"\\n\";\n    await writeIfChanged(file, source);\n    configs.push(file);\n  }\n  return configs;\n}\n\n/** Generates declarations without loading a Vite server into the editor host. */\nexport async function prepareFrameworkTypeDeclarations(projectRoot: string): Promise<void> {\n  const root = resolve(projectRoot);\n  await generateRoutes(root);\n  await generateServerContracts(root);\n  await generateAppTypes(root);\n  await generatePageContracts(root);\n  await generateTypeScriptAutoImports(root);\n  await generateFrameworkTsconfigs(root);\n}\n"]}

package/dist/framework-server/auto-clients.d.ts

@@ -0,0 +1,3 @@
+import type { ClientOptions } from "../framework/clients.js";
+/** Dynamic options prevent a module-level client from retaining any user's credentials. */
+export declare function createServerClientOptions(): ClientOptions;

package/dist/framework-server/auto-clients.js

@@ -0,0 +1,27 @@
+import { currentRequest } from "./context.js";
+/** Dynamic options prevent a module-level client from retaining any user's credentials. */
+export function createServerClientOptions() {
+    return {
+        baseUrl: () => currentRequest().context.request.url,
+        headers: () => {
+            const request = currentRequest().context.request;
+            const headers = new Headers();
+            for (const name of ["cookie", "authorization"]) {
+                const value = request.headers.get(name);
+                if (value !== null)
+                    headers.set(name, value);
+            }
+            headers.set("origin", new URL(request.url).origin);
+            return headers;
+        },
+        csrfToken: () => currentRequest().context.session.current?.csrfToken,
+        fetch: async (input, init) => {
+            const active = currentRequest();
+            const request = new Request(input, init);
+            if (active.serverFetch)
+                return active.serverFetch(request, active.context);
+            return fetch(request);
+        },
+    };
+}
+//# sourceMappingURL=auto-clients.js.map

package/dist/framework-server/auto-clients.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-clients.js","sourceRoot":"","sources":["../../src/framework-server/auto-clients.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAG9C,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG;QACnD,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;gBAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS;QACpE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACzC,IAAI,MAAM,CAAC,WAAW;gBAAE,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { currentRequest } from \"./context.js\";\nimport type { ClientOptions } from \"../framework/clients.js\";\n\n/** Dynamic options prevent a module-level client from retaining any user's credentials. */\nexport function createServerClientOptions(): ClientOptions {\n  return {\n    baseUrl: () => currentRequest().context.request.url,\n    headers: () => {\n      const request = currentRequest().context.request;\n      const headers = new Headers();\n      for (const name of [\"cookie\", \"authorization\"]) {\n        const value = request.headers.get(name);\n        if (value !== null) headers.set(name, value);\n      }\n      headers.set(\"origin\", new URL(request.url).origin);\n      return headers;\n    },\n    csrfToken: () => currentRequest().context.session.current?.csrfToken,\n    fetch: async (input, init) => {\n      const active = currentRequest();\n      const request = new Request(input, init);\n      if (active.serverFetch) return active.serverFetch(request, active.context);\n      return fetch(request);\n    },\n  };\n}\n"]}

package/dist/framework-server/context.d.ts

@@ -0,0 +1,21 @@
+import type { SessionHandle } from "./sessions.js";
+/** State belongs to one HTTP request and is never shared between users. */
+export interface RequestContext<TServices = unknown> {
+    readonly request: Request;
+    readonly requestId: string;
+    readonly signal: AbortSignal;
+    readonly services: TServices;
+    readonly session: SessionHandle;
+    readonly state: Map<string, unknown>;
+}
+export type ServerFetch = (request: Request, context: RequestContext) => Promise<Response>;
+interface ActiveRequest {
+    readonly context: RequestContext;
+    readonly serverFetch?: ServerFetch;
+}
+/** Binds automatic server clients to the current request across async work. */
+export declare function withRequestContext<T>(context: RequestContext, serverFetch: ServerFetch | undefined, run: () => T): T;
+export declare function currentRequest(): ActiveRequest;
+export declare function createRequestContext<TServices>(request: Request, services: TServices, session: SessionHandle): RequestContext<TServices>;
+export declare function useRequestState<T>(context: RequestContext, key: string, factory: () => T): T;
+export {};

package/dist/framework-server/context.js

@@ -0,0 +1,22 @@
+import { randomUUID } from "node:crypto";
+import { AsyncLocalStorage } from "node:async_hooks";
+const activeRequest = new AsyncLocalStorage();
+/** Binds automatic server clients to the current request across async work. */
+export function withRequestContext(context, serverFetch, run) {
+    return activeRequest.run({ context, ...(serverFetch ? { serverFetch } : {}) }, run);
+}
+export function currentRequest() {
+    const active = activeRequest.getStore();
+    if (!active)
+        throw new Error("Automatic server clients require an active Meeko request context");
+    return active;
+}
+export function createRequestContext(request, services, session) {
+    return { request, requestId: randomUUID(), signal: request.signal, services, session, state: new Map() };
+}
+export function useRequestState(context, key, factory) {
+    if (!context.state.has(key))
+        context.state.set(key, factory());
+    return context.state.get(key);
+}
+//# sourceMappingURL=context.js.map

package/dist/framework-server/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/framework-server/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAerD,MAAM,aAAa,GAAG,IAAI,iBAAiB,EAAiB,CAAC;AAE7D,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAI,OAAuB,EAAE,WAAoC,EAAE,GAAY;IAC/G,OAAO,aAAa,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACjG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAY,OAAgB,EAAE,QAAmB,EAAE,OAAsB;IAC3G,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,eAAe,CAAI,OAAuB,EAAE,GAAW,EAAE,OAAgB;IACvF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAM,CAAC;AACrC,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\nimport type { SessionHandle } from \"./sessions.js\";\n\n/** State belongs to one HTTP request and is never shared between users. */\nexport interface RequestContext<TServices = unknown> {\n  readonly request: Request;\n  readonly requestId: string;\n  readonly signal: AbortSignal;\n  readonly services: TServices;\n  readonly session: SessionHandle;\n  readonly state: Map<string, unknown>;\n}\n\nexport type ServerFetch = (request: Request, context: RequestContext) => Promise<Response>;\ninterface ActiveRequest { readonly context: RequestContext; readonly serverFetch?: ServerFetch }\nconst activeRequest = new AsyncLocalStorage<ActiveRequest>();\n\n/** Binds automatic server clients to the current request across async work. */\nexport function withRequestContext<T>(context: RequestContext, serverFetch: ServerFetch | undefined, run: () => T): T {\n  return activeRequest.run({ context, ...(serverFetch ? { serverFetch } : {}) }, run);\n}\n\nexport function currentRequest(): ActiveRequest {\n  const active = activeRequest.getStore();\n  if (!active) throw new Error(\"Automatic server clients require an active Meeko request context\");\n  return active;\n}\n\nexport function createRequestContext<TServices>(request: Request, services: TServices, session: SessionHandle): RequestContext<TServices> {\n  return { request, requestId: randomUUID(), signal: request.signal, services, session, state: new Map() };\n}\n\nexport function useRequestState<T>(context: RequestContext, key: string, factory: () => T): T {\n  if (!context.state.has(key)) context.state.set(key, factory());\n  return context.state.get(key) as T;\n}\n"]}

package/dist/framework-server/contracts.d.ts

@@ -0,0 +1,73 @@
+import type { RequestContext } from "./context.js";
+import { type SessionManager } from "./sessions.js";
+/** Valibot schemas implement this public Standard Schema contract. */
+export interface Schema<I = unknown, O = I> {
+    readonly "~standard": {
+        readonly version: 1;
+        readonly validate: (value: unknown) => {
+            value: O;
+            issues?: undefined;
+        } | {
+            issues: readonly unknown[];
+        } | Promise<{
+            value: O;
+            issues?: undefined;
+        } | {
+            issues: readonly unknown[];
+        }>;
+        readonly types?: {
+            readonly input: I;
+            readonly output: O;
+        } | undefined;
+    };
+}
+type Input<S> = S extends Schema<infer I, unknown> ? I : never;
+type Output<S> = S extends Schema<unknown, infer O> ? O : never;
+type OptionalOutput<S> = S extends Schema ? Output<S> : undefined;
+export declare class ApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, status: number, message?: string);
+}
+/** Preserve public errors loaded through separate Vite module graphs; hide all others. */
+export declare function normalizeServerError(error: unknown): ApiError;
+export type ServerErrorObserver = (error: unknown, requestId: string) => void;
+/** Observer failures cannot replace a response or escape as unhandled rejections. */
+export declare function observeErrorCallback(error: unknown, observer?: (error: unknown) => void, requestId?: string): void;
+/** Apply the same isolation to observers that also receive a request ID. */
+export declare function observeServerError(error: unknown, requestId: string, observer?: ServerErrorObserver): void;
+/** Surface internal failures to the host while keeping observers out of the response path. */
+export declare function reportServerError(error: unknown, requestId: string, observer?: ServerErrorObserver): void;
+export interface ApiRouteDefinition<P extends Schema | undefined, Q extends Schema | undefined, B extends Schema | undefined, R extends Schema | undefined, S = unknown> {
+    params?: P;
+    query?: Q;
+    body?: B;
+    response?: R;
+    auth?: "required" | "optional";
+    contentType?: "json" | "response";
+    authorize?: (context: RequestContext<S>) => boolean | Promise<boolean>;
+    handler: (args: {
+        params: OptionalOutput<P>;
+        query: OptionalOutput<Q>;
+        body: OptionalOutput<B>;
+        context: RequestContext<S>;
+    }) => Promise<R extends Schema ? Output<R> : Response> | (R extends Schema ? Output<R> : Response);
+}
+export declare function defineApiRoute<P extends Schema | undefined = undefined, Q extends Schema | undefined = undefined, B extends Schema | undefined = undefined, R extends Schema | undefined = undefined, S = unknown>(definition: ApiRouteDefinition<P, Q, B, R, S>): ApiRouteDefinition<P, Q, B, R, S>;
+export interface RpcDefinition<I extends Schema, O extends Schema, S = unknown> {
+    input: I;
+    output: O;
+    auth?: "required" | "optional";
+    authorize?: (context: RequestContext<S>) => boolean | Promise<boolean>;
+    handler: (args: {
+        input: Output<I>;
+        context: RequestContext<S>;
+    }) => Promise<Input<O> | Output<O>> | Input<O> | Output<O>;
+}
+export declare function defineRpc<I extends Schema, O extends Schema, S = unknown>(definition: RpcDefinition<I, O, S>): RpcDefinition<I, O, S>;
+export declare function executeApiRoute<P extends Schema | undefined, Q extends Schema | undefined, B extends Schema | undefined, R extends Schema | undefined, S>(definition: ApiRouteDefinition<P, Q, B, R, S>, context: RequestContext<S>, sessions: SessionManager, rawParams?: unknown): Promise<Response>;
+export declare function executeRpc<I extends Schema, O extends Schema, S>(definition: RpcDefinition<I, O, S>, rawInput: unknown, context: RequestContext<S>, sessions: SessionManager): Promise<Output<O>>;
+export declare function errorResponse(error: unknown, requestId: string): Response;
+export declare function dispatchApiRoute<P extends Schema | undefined, Q extends Schema | undefined, B extends Schema | undefined, R extends Schema | undefined, S>(definition: ApiRouteDefinition<P, Q, B, R, S>, context: RequestContext<S>, sessions: SessionManager, params?: unknown, onError?: ServerErrorObserver): Promise<Response>;
+export declare function dispatchRpc<I extends Schema, O extends Schema, S>(definition: RpcDefinition<I, O, S>, context: RequestContext<S>, sessions: SessionManager, onError?: ServerErrorObserver): Promise<Response>;
+export {};

package/dist/framework-server/contracts.js

@@ -0,0 +1,184 @@
+import { serializeJson } from "../server.js";
+import { SessionSecurityError } from "./sessions.js";
+export class ApiError extends Error {
+    code;
+    status;
+    constructor(code, status, message = code) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = "ApiError";
+    }
+}
+/** Preserve public errors loaded through separate Vite module graphs; hide all others. */
+export function normalizeServerError(error) {
+    if (error instanceof SessionSecurityError)
+        return new ApiError(error.code, 403);
+    if (error instanceof Error && (error.name === "SessionSecurityError" || error.constructor.name === "SessionSecurityError")) {
+        const code = error.code;
+        if (code === "INVALID_ORIGIN" || code === "INVALID_CSRF")
+            return new ApiError(code, 403);
+    }
+    if (error instanceof Error && (error instanceof ApiError || error.name === "ApiError" || error.constructor.name === "ApiError")) {
+        const candidate = error;
+        if (typeof candidate.code === "string" && candidate.code.length > 0
+            && typeof candidate.status === "number" && Number.isInteger(candidate.status)
+            && candidate.status >= 400 && candidate.status <= 599) {
+            return error instanceof ApiError ? error : new ApiError(candidate.code, candidate.status);
+        }
+    }
+    return new ApiError("INTERNAL_ERROR", 500);
+}
+function reportObserverFailure(error, observerError, requestId) {
+    try {
+        const label = requestId ? `Meeko server error observer failed (${requestId})` : "Meeko server error observer failed";
+        // Error messages and custom properties may contain private server data.
+        console.error(label, { original: error instanceof Error ? "Error" : typeof error, observer: observerError instanceof Error ? "Error" : typeof observerError });
+    }
+    catch { /* The fallback logger cannot change the original response. */ }
+}
+/** Observer failures cannot replace a response or escape as unhandled rejections. */
+export function observeErrorCallback(error, observer, requestId) {
+    try {
+        void Promise.resolve(observer?.(error)).catch((observerError) => reportObserverFailure(error, observerError, requestId));
+    }
+    catch (observerError) {
+        reportObserverFailure(error, observerError, requestId);
+    }
+}
+/** Apply the same isolation to observers that also receive a request ID. */
+export function observeServerError(error, requestId, observer) {
+    observeErrorCallback(error, observer ? (failure) => observer(failure, requestId) : undefined, requestId);
+}
+/** Surface internal failures to the host while keeping observers out of the response path. */
+export function reportServerError(error, requestId, observer) {
+    if (normalizeServerError(error).status < 500)
+        return;
+    observeServerError(error, requestId, observer);
+}
+export function defineApiRoute(definition) {
+    return definition;
+}
+export function defineRpc(definition) {
+    return definition;
+}
+async function validate(schema, value, label) {
+    const result = await schema["~standard"].validate(value);
+    if ("issues" in result && result.issues)
+        throw new ApiError(`INVALID_${label.toUpperCase()}`, label === "response" || label === "output" ? 500 : 400);
+    return result.value;
+}
+async function readJson(request, maxBytes = 1024 * 1024) {
+    if (!request.headers.get("content-type")?.toLowerCase().startsWith("application/json"))
+        throw new ApiError("UNSUPPORTED_MEDIA_TYPE", 415);
+    const reader = request.body?.getReader();
+    if (!reader)
+        throw new ApiError("INVALID_JSON", 400);
+    let length = 0;
+    const chunks = [];
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            length += next.value.byteLength;
+            if (length > maxBytes)
+                throw new ApiError("BODY_TOO_LARGE", 413);
+            chunks.push(next.value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(length);
+    let position = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, position);
+        position += chunk.byteLength;
+    }
+    try {
+        return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+    }
+    catch {
+        throw new ApiError("INVALID_JSON", 400);
+    }
+}
+function queryObject(url) {
+    const result = Object.create(null);
+    for (const [key, value] of url.searchParams) {
+        const previous = result[key];
+        result[key] = previous === undefined ? value : Array.isArray(previous) ? [...previous, value] : [previous, value];
+    }
+    return result;
+}
+async function guard(definition, context, sessions, mutating) {
+    sessions.assertMutationAllowed(context.request, context.session, mutating);
+    if (definition.auth === "required" && !context.session.current)
+        throw new ApiError("UNAUTHENTICATED", 401);
+    if (definition.authorize && !(await definition.authorize(context)))
+        throw new ApiError("FORBIDDEN", 403);
+}
+export async function executeApiRoute(definition, context, sessions, rawParams = {}) {
+    await guard(definition, context, sessions);
+    const params = definition.params ? await validate(definition.params, rawParams, "params") : undefined;
+    const query = definition.query ? await validate(definition.query, queryObject(new URL(context.request.url)), "query") : undefined;
+    const body = definition.body ? await validate(definition.body, await readJson(context.request), "body") : undefined;
+    const result = await definition.handler({ params: params, query: query, body: body, context });
+    if (definition.contentType === "response") {
+        if (!(result instanceof Response))
+            throw new ApiError("INVALID_RESPONSE", 500);
+        return result;
+    }
+    if (!definition.response)
+        throw new ApiError("MISSING_RESPONSE_SCHEMA", 500);
+    const output = await validate(definition.response, result, "response");
+    return new Response(serializeJson(output), { headers: { "content-type": "application/json; charset=utf-8" } });
+}
+export async function executeRpc(definition, rawInput, context, sessions) {
+    await guard(definition, context, sessions, true);
+    const input = await validate(definition.input, rawInput, "input");
+    const result = await definition.handler({ input, context });
+    const output = await validate(definition.output, result, "output");
+    serializeJson(output);
+    return output;
+}
+export function errorResponse(error, requestId) {
+    const known = normalizeServerError(error);
+    return new Response(serializeJson({ code: known.code, status: known.status, requestId }), { status: known.status, headers: { "content-type": "application/json; charset=utf-8", "x-request-id": requestId } });
+}
+function finish(response, context) {
+    // Fetch-created responses such as Response.redirect have immutable headers.
+    // Wrap the response to preserve its status, body, and headers before adding
+    // request metadata and session changes.
+    const finished = new Response(response.body, response);
+    finished.headers.set("x-request-id", context.requestId);
+    if (context.session.cookieHeader)
+        finished.headers.append("set-cookie", context.session.cookieHeader);
+    if (context.session.current)
+        finished.headers.set("x-meeko-csrf-token", context.session.current.csrfToken);
+    else if (context.session.cookieHeader)
+        finished.headers.set("x-meeko-csrf-token", "");
+    return finished;
+}
+export async function dispatchApiRoute(definition, context, sessions, params = {}, onError) {
+    try {
+        return finish(await executeApiRoute(definition, context, sessions, params), context);
+    }
+    catch (error) {
+        reportServerError(error, context.requestId, onError);
+        return finish(errorResponse(error, context.requestId), context);
+    }
+}
+export async function dispatchRpc(definition, context, sessions, onError) {
+    try {
+        if (context.request.method !== "POST")
+            throw new ApiError("METHOD_NOT_ALLOWED", 405);
+        const output = await executeRpc(definition, await readJson(context.request), context, sessions);
+        return finish(new Response(serializeJson(output), { headers: { "content-type": "application/json; charset=utf-8" } }), context);
+    }
+    catch (error) {
+        reportServerError(error, context.requestId, onError);
+        return finish(errorResponse(error, context.requestId), context);
+    }
+}
+//# sourceMappingURL=contracts.js.map