@mesofact/runtime 0.8.29

package/README.md

@@ -0,0 +1,19 @@
+# @mesofact/runtime
+
+Render contract types and adapter API for [mesofact](../../). Consumed by
+render entrypoints (e.g. `examples/yah-dev/`) and by any outside TS project
+that needs the contract — frontends never import a mesofact SDK; they just
+type their `render(req)` against `RenderRequest` / `RenderResult`.
+
+See [`../../.yah/docs/architecture/mesofact.md`](../../.yah/docs/architecture/mesofact.md)
+§"The shared seam: one render contract" and §"Adapter API surface".
+
+## Client-safe subpath: `@mesofact/runtime/hydration`
+
+The package root (`.`) barrel re-exports server-only code (`track-ctx.ts` →
+`node:async_hooks`, `config.ts` → `node:fs`) that a browser bundler can't
+tree-shake past — importing *anything* from `@mesofact/runtime` pulls those
+Node builtins into a client bundle (R513-B11). Browser host adapters that
+only need the hydration handoff constants/helpers (`SPA_STATE_SCRIPT_ID`,
+`hydrationScriptTag`, ...) must import from `@mesofact/runtime/hydration`
+instead — it resolves to `src/hydration.ts`, which has no imports of its own.

package/dist/adapters/r2.d.ts

@@ -0,0 +1,24 @@
+import { BaseSource, type BlobSource, type ListOpts, type R2Object } from "../source.js";
+export type R2Config = {
+    name: string;
+    bucket: string;
+    endpoint: string;
+    accessKeyId: string;
+    secretAccessKey: string;
+    httpFetch?: typeof fetch;
+};
+export declare class R2Adapter extends BaseSource implements BlobSource {
+    readonly bucket: string;
+    private readonly client;
+    private readonly endpoint;
+    private readonly httpFetch;
+    constructor(config: R2Config);
+    fetch(key: string): Promise<Uint8Array | null>;
+    list(prefix: string, opts?: ListOpts): Promise<R2Object[]>;
+    private send;
+    private race;
+}
+export declare function registerR2(adapter: R2Adapter): void;
+export declare function clearR2Registry(): void;
+export declare function r2(name: string): BlobSource;
+//# sourceMappingURL=r2.d.ts.map

package/dist/adapters/r2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2.d.ts","sourceRoot":"","sources":["../../src/adapters/r2.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,KAAK,UAAU,EAAE,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAKzF,MAAM,MAAM,QAAQ,GAAG;IAGrB,IAAI,EAAE,MAAM,CAAC;IAGb,MAAM,EAAE,MAAM,CAAC;IAGf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IAIxB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAEF,qBAAa,SAAU,SAAQ,UAAW,YAAW,UAAU;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,MAAM,EAAE,QAAQ;IAiBtB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAa9C,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,QAAa,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;YAetD,IAAI;YAKJ,IAAI;CAenB;AA4CD,wBAAgB,UAAU,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,CAEnD;AAED,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED,wBAAgB,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAQ3C"}

package/dist/adapters/r2.js

@@ -0,0 +1,136 @@
+// `r2` adapter — read-only BlobSource over Cloudflare R2 (or any S3-compatible
+// endpoint). Signs requests with SigV4 via `aws4fetch`, emits `r2:<bucket>:<key>`
+// tags into the ambient trackCtx, honors per-call `.noTrack()` / `.timeout(ms)`.
+//
+// See `.yah/docs/architecture/mesofact.md` §"Adapter API surface" + §"Adapter
+// read-set provenance".
+import { AwsClient } from "aws4fetch";
+import { BaseSource } from "../source.js";
+import { SourceQueryError, SourceTimeoutError, SourceUnavailableError } from "../errors.js";
+const DEFAULT_TIMEOUT_MS = 2000;
+export class R2Adapter extends BaseSource {
+    bucket;
+    client;
+    endpoint;
+    httpFetch;
+    constructor(config) {
+        super(config.name);
+        this.bucket = config.bucket;
+        this.endpoint = config.endpoint.replace(/\/$/, "");
+        this.client = new AwsClient({
+            accessKeyId: config.accessKeyId,
+            secretAccessKey: config.secretAccessKey,
+            service: "s3",
+            region: "auto",
+        });
+        // aws4fetch always uses globalThis.fetch internally; we sign manually and
+        // dispatch through `httpFetch` so tests can swap it without touching the
+        // global. Calling `globalThis.fetch.bind(globalThis)` preserves the
+        // expected receiver for fetch implementations that check it.
+        this.httpFetch = config.httpFetch ?? globalThis.fetch.bind(globalThis);
+    }
+    async fetch(key) {
+        const { track, timeout_ms } = this.consumeOverrides(DEFAULT_TIMEOUT_MS);
+        this.emitTag(`r2:${this.bucket}:${key}`, track);
+        const url = `${this.endpoint}/${this.bucket}/${encodeKey(key)}`;
+        const res = await this.send(url, { method: "GET" }, timeout_ms);
+        if (res.status === 404)
+            return null;
+        if (!res.ok) {
+            throw new SourceQueryError(this.name, `r2 GET ${key} → HTTP ${res.status}`);
+        }
+        const buf = await res.arrayBuffer();
+        return new Uint8Array(buf);
+    }
+    async list(prefix, opts = {}) {
+        const { track, timeout_ms } = this.consumeOverrides(DEFAULT_TIMEOUT_MS);
+        this.emitTag(`r2:${this.bucket}:${prefix}*`, track);
+        const params = new URLSearchParams({ "list-type": "2", prefix });
+        if (opts.limit !== undefined)
+            params.set("max-keys", String(opts.limit));
+        if (opts.cursor)
+            params.set("continuation-token", opts.cursor);
+        if (opts.delimiter)
+            params.set("delimiter", opts.delimiter);
+        const url = `${this.endpoint}/${this.bucket}?${params.toString()}`;
+        const res = await this.send(url, { method: "GET" }, timeout_ms);
+        if (!res.ok) {
+            throw new SourceQueryError(this.name, `r2 LIST ${prefix} → HTTP ${res.status}`);
+        }
+        return parseListV2(await res.text());
+    }
+    async send(url, init, timeout_ms) {
+        const signed = await this.client.sign(url, init);
+        return this.race(() => this.httpFetch(signed), timeout_ms);
+    }
+    async race(call, timeout_ms) {
+        let timer;
+        try {
+            return await Promise.race([
+                call().catch((err) => {
+                    throw new SourceUnavailableError(this.name, { cause: err });
+                }),
+                new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new SourceTimeoutError(this.name, timeout_ms)), timeout_ms);
+                }),
+            ]);
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+}
+// `encodeURIComponent` re-encodes `/`, which we want to preserve so S3 sees
+// path-style keys correctly. Other reserved chars stay percent-encoded.
+function encodeKey(key) {
+    return key
+        .split("/")
+        .map((segment) => encodeURIComponent(segment))
+        .join("/");
+}
+// Minimal ListBucketResult v2 parser. S3's XML is a fixed shape; a regex over
+// the `<Contents>` blocks is faster and dep-free than pulling in a full XML
+// parser, and the only fields the contract exposes are key/size/last_modified/
+// etag (per `R2Object`).
+function parseListV2(xml) {
+    const out = [];
+    for (const match of xml.matchAll(/<Contents>([\s\S]*?)<\/Contents>/g)) {
+        const inner = match[1];
+        const key = pick(inner, "Key");
+        const sizeStr = pick(inner, "Size");
+        const last_modified = pick(inner, "LastModified");
+        const etagRaw = pick(inner, "ETag");
+        if (key === undefined || sizeStr === undefined || last_modified === undefined)
+            continue;
+        out.push({
+            key,
+            size: Number.parseInt(sizeStr, 10),
+            last_modified,
+            ...(etagRaw ? { etag: etagRaw.replace(/^"|"$/g, "") } : {}),
+        });
+    }
+    return out;
+}
+function pick(haystack, tag) {
+    const m = haystack.match(new RegExp(`<${tag}>([\\s\\S]*?)</${tag}>`));
+    return m?.[1];
+}
+// Per-process registry. Configuration in T4 loads `mesofact.config.toml` and
+// calls `registerR2()` for each `[sources.*]` of `kind = "r2"`. Render code
+// looks up by name via `r2(name)`.
+const registry = new Map();
+export function registerR2(adapter) {
+    registry.set(adapter.name, adapter);
+}
+export function clearR2Registry() {
+    registry.clear();
+}
+export function r2(name) {
+    const adapter = registry.get(name);
+    if (!adapter) {
+        throw new Error(`r2 source not registered: ${name} (declare it in mesofact.config.toml under [sources.${name}])`);
+    }
+    return adapter;
+}
+//# sourceMappingURL=r2.js.map

package/dist/adapters/r2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2.js","sourceRoot":"","sources":["../../src/adapters/r2.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,kFAAkF;AAClF,iFAAiF;AACjF,EAAE;AACF,8EAA8E;AAC9E,wBAAwB;AAExB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAiD,MAAM,cAAc,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE5F,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAoBhC,MAAM,OAAO,SAAU,SAAQ,UAAU;IAC9B,MAAM,CAAS;IACP,MAAM,CAAY;IAClB,QAAQ,CAAS;IACjB,SAAS,CAAe;IAEzC,YAAY,MAAgB;QAC1B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC;YAC1B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;QACH,0EAA0E;QAC1E,yEAAyE;QACzE,oEAAoE;QACpE,6DAA6D;QAC7D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACpC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC;QACpC,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,OAAiB,EAAE;QAC5C,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,MAAM,GAAG,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,IAAiB,EAAE,UAAkB;QACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,IAA6B,EAAE,UAAkB;QAClE,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAW;gBAClC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACnB,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;gBAC9D,CAAC,CAAC;gBACF,IAAI,OAAO,CAAW,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAClC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBAC9F,CAAC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED,4EAA4E;AAC5E,wEAAwE;AACxE,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;SAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,4EAA4E;AAC5E,+EAA+E;AAC/E,yBAAyB;AACzB,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS;YAAE,SAAS;QACxF,GAAG,CAAC,IAAI,CAAC;YACP,GAAG;YACH,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAClC,aAAa;YACb,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CAAC,QAAgB,EAAE,GAAW;IACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,kBAAkB,GAAG,GAAG,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,mCAAmC;AACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAqB,CAAC;AAE9C,MAAM,UAAU,UAAU,CAAC,OAAkB;IAC3C,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,EAAE,CAAC,IAAY;IAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,uDAAuD,IAAI,IAAI,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/adapters/sqlite.d.ts

@@ -0,0 +1,25 @@
+import { BaseSource, type KeyValueSource } from "../source.js";
+export interface SqliteRunner {
+    all(sql: string, params: unknown[]): unknown[];
+    close?(): void;
+}
+export type SqliteConfig = {
+    name: string;
+    path: string;
+    runner?: SqliteRunner;
+};
+export declare class SqliteAdapter extends BaseSource implements KeyValueSource {
+    readonly path: string;
+    private runner;
+    private opening;
+    constructor(config: SqliteConfig);
+    get<T>(table: string, id: string): Promise<T | null>;
+    query<T>(sql: string, params?: unknown[]): Promise<T[]>;
+    private run;
+    private ensureRunner;
+    private race;
+}
+export declare function registerSqlite(adapter: SqliteAdapter): void;
+export declare function clearSqliteRegistry(): void;
+export declare function sqlite(name: string): KeyValueSource;
+//# sourceMappingURL=sqlite.d.ts.map

package/dist/adapters/sqlite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../src/adapters/sqlite.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAS/D,MAAM,WAAW,YAAY;IAE3B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;IAC/C,KAAK,CAAC,IAAI,IAAI,CAAC;CAChB;AAED,MAAM,MAAM,YAAY,GAAG;IAGzB,IAAI,EAAE,MAAM,CAAC;IAGb,IAAI,EAAE,MAAM,CAAC;IAGb,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,CAAC;AAEF,qBAAa,aAAc,SAAQ,UAAW,YAAW,cAAc;IACrE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,OAAO,CAAsC;gBAEzC,MAAM,EAAE,YAAY;IAM1B,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAWpD,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,OAAO,EAAO,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;YAcnD,GAAG;YAYH,YAAY;YAaZ,IAAI;CAgBnB;AAmDD,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAE3D;AAED,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAQnD"}

package/dist/adapters/sqlite.js

@@ -0,0 +1,131 @@
+// `sqlite` adapter — read-only KeyValueSource over a local SQLite file (or a
+// Litestream / LiteFS replica). Emits `sqlite:<source>:<table>:<id>` (row) and
+// `sqlite:<source>:<table>` (table-wide) tags into the ambient trackCtx, honors
+// per-call `.noTrack()` / `.timeout(ms)`, 100 ms default timeout.
+//
+// See `.yah/docs/architecture/mesofact.md` §"Adapter API surface", §"Adapter
+// read-set provenance" (tag taxonomy), and §"Cache-key composition" (the
+// proxy folds the file mtime into the cache key — generation is computed
+// proxy-side from the source path, not here).
+import { BaseSource } from "../source.js";
+import { SourceQueryError, SourceTimeoutError, SourceUnavailableError } from "../errors.js";
+const DEFAULT_TIMEOUT_MS = 100;
+export class SqliteAdapter extends BaseSource {
+    path;
+    runner;
+    opening = null;
+    constructor(config) {
+        super(config.name);
+        this.path = config.path;
+        this.runner = config.runner ?? null;
+    }
+    async get(table, id) {
+        const { track, timeout_ms } = this.consumeOverrides(DEFAULT_TIMEOUT_MS);
+        this.emitTag(`sqlite:${this.name}:${table}:${id}`, track);
+        const rows = await this.run(`SELECT * FROM ${quoteIdent(table)} WHERE id = ? LIMIT 1`, [id], timeout_ms);
+        return rows[0] ?? null;
+    }
+    async query(sql, params = []) {
+        const { track, timeout_ms } = this.consumeOverrides(DEFAULT_TIMEOUT_MS);
+        // Tag every table the query reads. When no table can be extracted (CTEs,
+        // exotic SQL), fall back to a source-wide tag so invalidation stays
+        // conservative — over-purging is recoverable; a missed tag is stale-forever.
+        const tables = extractTables(sql);
+        if (tables.length === 0) {
+            this.emitTag(`sqlite:${this.name}`, track);
+        }
+        else {
+            for (const table of tables)
+                this.emitTag(`sqlite:${this.name}:${table}`, track);
+        }
+        return (await this.run(sql, params, timeout_ms));
+    }
+    async run(sql, params, timeout_ms) {
+        const exec = (async () => {
+            const runner = await this.ensureRunner();
+            try {
+                return runner.all(sql, params);
+            }
+            catch (err) {
+                throw new SourceQueryError(this.name, sqliteMessage(sql, err), { cause: err });
+            }
+        })();
+        return this.race(exec, timeout_ms);
+    }
+    async ensureRunner() {
+        if (this.runner)
+            return this.runner;
+        if (!this.opening) {
+            this.opening = openBunSqlite(this.path)
+                .then((r) => (this.runner = r))
+                .catch((err) => {
+                this.opening = null;
+                throw new SourceUnavailableError(this.name, { cause: err });
+            });
+        }
+        return this.opening;
+    }
+    async race(call, timeout_ms) {
+        let timer;
+        try {
+            return await Promise.race([
+                call,
+                new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new SourceTimeoutError(this.name, timeout_ms)), timeout_ms);
+                }),
+            ]);
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+}
+function sqliteMessage(sql, err) {
+    const head = sql.length > 80 ? `${sql.slice(0, 77)}...` : sql;
+    return `sqlite query failed (${head}): ${err instanceof Error ? err.message : String(err)}`;
+}
+// Quote a table identifier so a table named like a keyword (or containing a
+// dot) can't break the generated SQL. Table names come from server-side render
+// code, not request input, so this is defensive rather than an injection guard;
+// `id` and `query` params are always bound, never interpolated.
+function quoteIdent(name) {
+    return `"${name.replace(/"/g, '""')}"`;
+}
+// Pull table names out of a SELECT for table-wide tag emission. A regex over
+// `FROM`/`JOIN` clauses — same pragmatic posture as the build's regex source
+// inference and the r2 list-XML parser. Misses are absorbed by the source-wide
+// fallback in `query`.
+function extractTables(sql) {
+    const out = new Set();
+    for (const m of sql.matchAll(/\b(?:from|join)\s+["'`]?([A-Za-z_][\w$]*)/gi)) {
+        out.add(m[1]);
+    }
+    return [...out];
+}
+async function openBunSqlite(path) {
+    const mod = (await import("bun:sqlite"));
+    const db = new mod.Database(path, { readonly: true });
+    return {
+        all: (sql, params) => db.query(sql).all(...params),
+        close: () => db.close(),
+    };
+}
+// Per-process registry, mirroring the r2 adapter. `registerSourcesFromConfig`
+// populates it from `[sources.*]` of `kind = "sqlite"`; render code looks up by
+// name via `sqlite(name)`.
+const registry = new Map();
+export function registerSqlite(adapter) {
+    registry.set(adapter.name, adapter);
+}
+export function clearSqliteRegistry() {
+    registry.clear();
+}
+export function sqlite(name) {
+    const adapter = registry.get(name);
+    if (!adapter) {
+        throw new Error(`sqlite source not registered: ${name} (declare it in mesofact.config.toml under [sources.${name}])`);
+    }
+    return adapter;
+}
+//# sourceMappingURL=sqlite.js.map

package/dist/adapters/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../src/adapters/sqlite.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,kEAAkE;AAClE,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,yEAAyE;AACzE,8CAA8C;AAE9C,OAAO,EAAE,UAAU,EAAuB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE5F,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAwB/B,MAAM,OAAO,aAAc,SAAQ,UAAU;IAClC,IAAI,CAAS;IACd,MAAM,CAAsB;IAC5B,OAAO,GAAiC,IAAI,CAAC;IAErD,YAAY,MAAoB;QAC9B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,KAAa,EAAE,EAAU;QACpC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CACzB,iBAAiB,UAAU,CAAC,KAAK,CAAC,uBAAuB,EACzD,CAAC,EAAE,CAAC,EACJ,UAAU,CACX,CAAC;QACF,OAAQ,IAAI,CAAC,CAAC,CAAmB,IAAI,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAI,GAAW,EAAE,SAAoB,EAAE;QAChD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QACxE,yEAAyE;QACzE,oEAAoE;QACpE,6EAA6E;QAC7E,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,CAAQ,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,MAAiB,EAAE,UAAkB;QAClE,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACzC,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,CAAC,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;iBACpC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;iBAC9B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACb,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;gBACpB,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,IAAgB,EAAE,UAAkB;QACxD,IAAI,KAAgD,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAI;gBAC3B,IAAI;gBACJ,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAC3B,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,EAC3D,UAAU,CACX,CAAC;gBACJ,CAAC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,GAAY;IAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9D,OAAO,wBAAwB,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,gEAAgE;AAChE,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,uBAAuB;AACvB,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAUD,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,YAAsB,CAAC,CAEhD,CAAC;IACF,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO;QACL,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QAClD,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,gFAAgF;AAChF,2BAA2B;AAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;AAElD,MAAM,UAAU,cAAc,CAAC,OAAsB;IACnD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,QAAQ,CAAC,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,IAAY;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,iCAAiC,IAAI,uDAAuD,IAAI,IAAI,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,29 @@
+import type { SourceScope } from "./validate.js";
+export type R2SourceConfig = {
+    kind: "r2";
+    scope: SourceScope;
+    bucket: string;
+    endpoint_env: string;
+    access_key_id_env?: string;
+    secret_access_key_env?: string;
+};
+export type SqliteSourceConfig = {
+    kind: "sqlite";
+    scope: SourceScope;
+    path: string;
+};
+export type SourceConfig = R2SourceConfig | SqliteSourceConfig;
+export type BuildConfig = {
+    public_dir?: string;
+};
+export type MesofactConfig = {
+    sources: Record<string, SourceConfig>;
+    build?: BuildConfig;
+};
+export declare function loadConfig(path: string): MesofactConfig;
+export declare function parseConfig(toml: string): MesofactConfig;
+export declare function registerSourcesFromConfig(config: MesofactConfig, env?: Record<string, string | undefined>): string[];
+export declare class ConfigError extends Error {
+    constructor(message: string);
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,WAAW,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IAIf,YAAY,EAAE,MAAM,CAAC;IAGrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IAInB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAGF,MAAM,MAAM,YAAY,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAM/D,MAAM,MAAM,WAAW,GAAG;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAEvD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAgBxD;AAoFD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,cAAc,EACtB,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,EAAE,CA2BV;AAiBD,qBAAa,WAAY,SAAQ,KAAK;gBACxB,OAAO,EAAE,MAAM;CAI5B"}

package/dist/config.js

@@ -0,0 +1,139 @@
+// `mesofact.config.toml` parser. Yubaba writes this file atomically and
+// SIGHUPs the proxy + Bun pool on change; mesofact reads it on boot to
+// instantiate adapters. Credentials come in via env vars (yubaba injects);
+// the config carries only the env var *names*, never the secrets themselves.
+//
+// See `.yah/docs/architecture/mesofact.md` §"Yubaba owns config and credentials".
+import { readFileSync } from "node:fs";
+import { parse as parseToml } from "smol-toml";
+import { R2Adapter, registerR2 } from "./adapters/r2.js";
+import { SqliteAdapter, registerSqlite } from "./adapters/sqlite.js";
+export function loadConfig(path) {
+    return parseConfig(readFileSync(path, "utf8"));
+}
+export function parseConfig(toml) {
+    const raw = parseToml(toml);
+    if (!isPlainObject(raw)) {
+        throw new ConfigError("config must be a TOML object at top level");
+    }
+    const build = parseBuild(raw.build);
+    const sourcesRaw = raw.sources;
+    if (sourcesRaw === undefined)
+        return { sources: {}, ...(build ? { build } : {}) };
+    if (!isPlainObject(sourcesRaw)) {
+        throw new ConfigError("[sources] must be a table");
+    }
+    const sources = {};
+    for (const [name, body] of Object.entries(sourcesRaw)) {
+        sources[name] = parseSource(name, body);
+    }
+    return { sources, ...(build ? { build } : {}) };
+}
+function parseBuild(raw) {
+    if (raw === undefined)
+        return undefined;
+    if (!isPlainObject(raw)) {
+        throw new ConfigError("[build] must be a table");
+    }
+    const out = {};
+    if (raw.public_dir !== undefined) {
+        if (typeof raw.public_dir !== "string" || raw.public_dir.length === 0) {
+            throw new ConfigError("[build] public_dir must be a non-empty string");
+        }
+        out.public_dir = raw.public_dir;
+    }
+    return out;
+}
+function parseSource(name, body) {
+    if (!isPlainObject(body)) {
+        throw new ConfigError(`[sources.${name}] must be a table`);
+    }
+    const kind = body.kind;
+    const scope = parseScope(name, body.scope);
+    if (kind === "r2")
+        return parseR2(name, body, scope);
+    if (kind === "sqlite")
+        return parseSqlite(name, body, scope);
+    // P4 shipped r2; P9 adds sqlite. pg/rpc widen this union later.
+    throw new ConfigError(`[sources.${name}] unsupported kind: ${JSON.stringify(kind)} (supported: "r2", "sqlite")`);
+}
+function parseScope(name, raw) {
+    const scope = raw ?? "global";
+    if (scope !== "global" && scope !== "project" && scope !== "user") {
+        throw new ConfigError(`[sources.${name}] invalid scope: ${JSON.stringify(scope)} (expected "global" | "project" | "user")`);
+    }
+    return scope;
+}
+function parseR2(name, body, scope) {
+    const bucket = body.bucket;
+    if (typeof bucket !== "string" || bucket === "") {
+        throw new ConfigError(`[sources.${name}] missing or empty \`bucket\` (string)`);
+    }
+    const endpoint_env = body.endpoint_env;
+    if (typeof endpoint_env !== "string" || endpoint_env === "") {
+        throw new ConfigError(`[sources.${name}] missing or empty \`endpoint_env\` (string)`);
+    }
+    const access_key_id_env = optionalString(body.access_key_id_env, name, "access_key_id_env");
+    const secret_access_key_env = optionalString(body.secret_access_key_env, name, "secret_access_key_env");
+    return {
+        kind: "r2",
+        scope,
+        bucket,
+        endpoint_env,
+        ...(access_key_id_env !== undefined ? { access_key_id_env } : {}),
+        ...(secret_access_key_env !== undefined ? { secret_access_key_env } : {}),
+    };
+}
+function parseSqlite(name, body, scope) {
+    const path = body.path;
+    if (typeof path !== "string" || path === "") {
+        throw new ConfigError(`[sources.${name}] missing or empty \`path\` (string)`);
+    }
+    return { kind: "sqlite", scope, path };
+}
+function optionalString(value, source, field) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string" || value === "") {
+        throw new ConfigError(`[sources.${source}] \`${field}\` must be a non-empty string`);
+    }
+    return value;
+}
+// Resolve credentials from env and register an R2Adapter for each r2 source.
+// Returns the resolved adapter names so callers can verify a known set landed.
+export function registerSourcesFromConfig(config, env = process.env) {
+    const registered = [];
+    for (const [name, src] of Object.entries(config.sources)) {
+        if (src.kind === "r2") {
+            const endpoint = requireEnv(env, src.endpoint_env, name, "endpoint_env");
+            const accessKeyId = requireEnv(env, src.access_key_id_env ?? "AWS_ACCESS_KEY_ID", name, "access_key_id_env");
+            const secretAccessKey = requireEnv(env, src.secret_access_key_env ?? "AWS_SECRET_ACCESS_KEY", name, "secret_access_key_env");
+            registerR2(new R2Adapter({ name, bucket: src.bucket, endpoint, accessKeyId, secretAccessKey }));
+            registered.push(name);
+        }
+        else if (src.kind === "sqlite") {
+            // No credentials — sqlite is a local file. The DB opens lazily on first
+            // read, so registration never touches disk.
+            registerSqlite(new SqliteAdapter({ name, path: src.path }));
+            registered.push(name);
+        }
+    }
+    return registered;
+}
+function requireEnv(env, varName, source, field) {
+    const v = env[varName];
+    if (v === undefined || v === "") {
+        throw new ConfigError(`[sources.${source}] env var \`${varName}\` (from ${field}) is unset or empty`);
+    }
+    return v;
+}
+export class ConfigError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ConfigError";
+    }
+}
+function isPlainObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,uEAAuE;AACvE,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,kFAAkF;AAElF,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AA0CrE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,OAAO,WAAW,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAY,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,2CAA2C,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC;IAC/B,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAClF,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,WAAW,CAAC,2BAA2B,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,WAAW,CAAC,+CAA+C,CAAC,CAAC;QACzE,CAAC;QACD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,IAAa;IAC9C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,WAAW,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7D,gEAAgE;IAChE,MAAM,IAAI,WAAW,CACnB,YAAY,IAAI,uBAAuB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8BAA8B,CAC1F,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,GAAY;IAC5C,MAAM,KAAK,GAAG,GAAG,IAAI,QAAQ,CAAC;IAC9B,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,WAAW,CACnB,YAAY,IAAI,oBAAoB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,2CAA2C,CACrG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,IAA6B,EAAE,KAAkB;IAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,WAAW,CAAC,YAAY,IAAI,wCAAwC,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACvC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,WAAW,CAAC,YAAY,IAAI,8CAA8C,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,iBAAiB,GAAG,cAAc,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC5F,MAAM,qBAAqB,GAAG,cAAc,CAAC,IAAI,CAAC,qBAAqB,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC;IACxG,OAAO;QACL,IAAI,EAAE,IAAI;QACV,KAAK;QACL,MAAM;QACN,YAAY;QACZ,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,qBAAqB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,IAAY,EACZ,IAA6B,EAC7B,KAAkB;IAElB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,WAAW,CAAC,YAAY,IAAI,sCAAsC,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAc,EAAE,KAAa;IACnE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,WAAW,CAAC,YAAY,MAAM,OAAO,KAAK,+BAA+B,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,+EAA+E;AAC/E,MAAM,UAAU,yBAAyB,CACvC,MAAsB,EACtB,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;YACzE,MAAM,WAAW,GAAG,UAAU,CAC5B,GAAG,EACH,GAAG,CAAC,iBAAiB,IAAI,mBAAmB,EAC5C,IAAI,EACJ,mBAAmB,CACpB,CAAC;YACF,MAAM,eAAe,GAAG,UAAU,CAChC,GAAG,EACH,GAAG,CAAC,qBAAqB,IAAI,uBAAuB,EACpD,IAAI,EACJ,uBAAuB,CACxB,CAAC;YACF,UAAU,CAAC,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;YAChG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,wEAAwE;YACxE,4CAA4C;YAC5C,cAAc,CAAC,IAAI,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC5D,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,UAAU,CACjB,GAAuC,EACvC,OAAe,EACf,MAAc,EACd,KAAa;IAEb,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,WAAW,CACnB,YAAY,MAAM,eAAe,OAAO,YAAY,KAAK,qBAAqB,CAC/E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC"}

package/dist/contract.d.ts

@@ -0,0 +1,40 @@
+import type { Head } from "./head.js";
+export type Region = string;
+export type User = {
+    id: string;
+    attrs: Record<string, unknown>;
+};
+export type Project = {
+    id: string;
+    home_region: Region;
+    generation: string;
+};
+export type RenderRequest = {
+    url: string;
+    params: Record<string, string>;
+    query: Record<string, string>;
+    headers: Record<string, string>;
+    cookies: Record<string, string>;
+    user?: User;
+    project?: Project;
+    region?: Region;
+    ctx?: Record<string, unknown>;
+    data?: Record<string, unknown>;
+};
+export type CachePolicy = {
+    ttl: number;
+    tags?: readonly string[];
+};
+export type Hydration = {
+    script?: string;
+    initial_state?: unknown;
+};
+export type RenderResult = {
+    html: string;
+    headers?: Record<string, string>;
+    cache: CachePolicy;
+    hydration?: Hydration;
+    head?: Head;
+};
+export type RenderFn = (req: RenderRequest) => Promise<RenderResult>;
+//# sourceMappingURL=contract.d.ts.map

package/dist/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC;AAE5B,MAAM,MAAM,IAAI,GAAG;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAKhC,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAKhB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAK9B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B,CAAC;AAkBF,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,CAAC,EAAE,SAAS,CAAC;IAItB,IAAI,CAAC,EAAE,IAAI,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,aAAa,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC"}

package/dist/contract.js

@@ -0,0 +1,5 @@
+// Render contract — the single seam between mesofact and any frontend.
+// See `.yah/docs/architecture/mesofact.md` §"The shared seam: one render
+// contract" and §"Request context — what Rust pre-resolves".
+export {};
+//# sourceMappingURL=contract.js.map

package/dist/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yEAAyE;AACzE,6DAA6D"}

package/dist/errors.d.ts

@@ -0,0 +1,29 @@
+export declare class SourceError extends Error {
+    readonly source: string;
+    readonly retryable: boolean;
+    constructor(message: string, source: string, retryable: boolean, options?: {
+        cause?: unknown;
+    });
+}
+export declare class SourceUnavailableError extends SourceError {
+    constructor(source: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare class SourceTimeoutError extends SourceError {
+    readonly timeout_ms: number;
+    constructor(source: string, timeout_ms: number, options?: {
+        cause?: unknown;
+    });
+}
+export declare class SourceQueryError extends SourceError {
+    constructor(source: string, message: string, options?: {
+        cause?: unknown;
+    });
+}
+export declare class RowNotFoundError extends SourceError {
+    readonly table: string;
+    readonly id: string;
+    constructor(source: string, table: string, id: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAIA,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAG1B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,OAAO,EAClB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAOhC;AAED,qBAAa,sBAAuB,SAAQ,WAAW;gBACzC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAG1D;AAED,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;gBAEhB,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAI9E;AAED,qBAAa,gBAAiB,SAAQ,WAAW;gBACnC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAG3E;AAED,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;gBAER,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM;CAKtD"}