@oddsquad/vite-plugin-lit 0.6.0 → 0.6.1

package/lib/devframe/vite.js.map

@@ -1 +1 @@
-{"version":3,"file":"vite.js","sourceRoot":"","sources":["../../src/lib/devframe/vite.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAuBH,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EAAC,wBAAwB,EAAC,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAC,yBAAyB,EAAC,MAAM,yBAAyB,CAAC;AAQlE,OAAO,EAAC,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAC,eAAe,EAAC,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAC,gBAAgB,EAAC,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAC,iBAAiB,EAAC,CAAC;AA+C3B;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IAC5B,IAAI,CAAmC;IACvC,KAAK,CAA2B;IAChC,IAAI,CAAiC;IAErC;;;;OAIG;IACH,IAAI,CAAC,MAAqB,EAAE,GAAwB;QAClD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAEhB,GAAG,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,IAAgC,EAAE,EAAE;YACrE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,2BAA2B,EAAE,CAAC,IAA6B,EAAE,EAAE;YACpE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE;gBAAE,OAAO;YAC5B,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,IAAsB,EAAE,EAAE;YACtD,yEAAyE;YACzE,sEAAsE;YACtE,4DAA4D;YAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,kEAAkE;gBAClE,kEAAkE;gBAClE,8DAA8D;gBAC9D,yDAAyD;gBACzD,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,EAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAC,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,wBAAwB,EAAE,CAAC,KAA8B,EAAE,EAAE;YAClE,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,mEAAmE;QACnE,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,GAAG,CAAC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACxC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,aAAa;QACX,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,IAAkB;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QAClD,CAAC,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,GAAqB;QACjC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,YAAY,CAAC,SAAkB;QAC7B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,gCAAgC,EAAE,EAAC,SAAS,EAAC,CAAC,CAAC;IACjE,CAAC;IAED,SAAS,CAAC,MAA2B;QACnC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,mBAAmB,CAAC,QAA0B;QAC5C,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;;;;GAKG;AACH,IAAI,0BAA0B,GAAG,KAAK,CAAC;AAEvC,MAAM,wBAAwB,GAAG,CAAC,MAAc,EAAQ,EAAE;IACxD,IAAI,0BAA0B;QAAE,OAAO;IACvC,0BAA0B,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,IAAI,CACV,gEAAgE;QAC9D,IAAI,MAAM,qDAAqD;QAC/D,mEAAmE;QACnE,gDAAgD,CACnD,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAuB,EACvB,IAAY;IAEZ,sEAAsE;IACtE,uEAAuE;IACvE,kDAAkD;IAClD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC,KAAK,CACpE,GAAG,EAAE,CAAC,IAAI,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAC,MAAM,EAAE,qCAAqC,EAAC,CAAC;IACvE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAC,MAAM,EAAE,kCAAkC,EAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,SAAS,CAAC,mBAAmB,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAC,MAAM,EAAE,yBAAyB,EAAC,CAAC;IAExD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAC,MAAM,EAAE,2BAA2B,MAAM,GAAG,QAAQ,EAAE,EAAC,CAAC;IAClE,CAAC;IAED,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IACvC,MAAM,OAAO,GACX,QAAQ,KAAK,SAAS;QACpB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YACxB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,GAAG,QAAQ,GAAG,QAAQ,EAAE,CAAC;IAEjC,MAAM,EAAC,UAAU,EAAC,GAAG,QAAQ,CAAC,wBAAwB,CAAC;QACrD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,6BAA6B;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ;QACR,EAAE,EAAE,eAAe;QACnB,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;QACtB,kEAAkE;QAClE,oEAAoE;QACpE,4CAA4C;QAC5C,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,IAAI,EAAE,OAAO,EAAC;QAC9C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IACH,OAAO,EAAC,UAAU,EAAC,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B,CACpC,GAAuB,EACvB,IAAY;IAEZ,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,sDAAsD;QACtD,wBAAwB,CAAC,mCAAmC,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,GAAS,EAAE;QACrB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC;aACxB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,IAAI,UAAU,CAAC,SAAS;QAAE,GAAG,EAAE,CAAC;;QAC3B,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACvC,mEAAmE;IACnE,2CAA2C;IAC3C,IAAI,QAA4B,CAAC;IACjC,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACnC,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;KAC3B,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,YAAY,eAAe,EAAE;QACnC,QAAQ,EAAE;YACR,kEAAkE;YAClE,sDAAsD;YACtD,qCAAqC;YACrC,YAAY,EAAE,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAC;YACvC,KAAK,CAAC,KAAK,CAAC,GAAG;gBACb,uEAAuE;gBACvE,+DAA+D;gBAC/D,mCAAmC;gBACnC,IAAI,GAAG,CAAC,UAAU;oBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBACrD,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;gBACvC,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAE9B,mEAAmE;gBACnE,oEAAoE;gBACpE,qCAAqC;gBACrC,IAAI,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC;oBAChD,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;wBACvB,EAAE,EAAE,oBAAoB;wBACxB,KAAK,EAAE,kBAAkB;wBACzB,WAAW,EACT,2FAA2F;wBAC7F,IAAI,EAAE,sBAAsB;wBAC5B,QAAQ,EAAE,KAAK;wBACf,WAAW,EAAE,CAAC,EAAC,GAAG,EAAE,cAAc,EAAC,CAAC;wBACpC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE;qBACtC,CAAC,CAAC;gBACL,CAAC;gBAED,mEAAmE;gBACnE,mEAAmE;gBACnE,mEAAmE;gBACnE,6BAA6B,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAsB,EAAE,CAC7D,IAAI,iBAAiB,EAAE,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\n/**\n * Mounts the Lit devframe ({@link createLitDevframe}) into the Vite DevTools\n * hub and bridges the page runtime's `import.meta.hot` transport to the\n * definition's `TimelineSource` port. Everything Vite-specific lives here:\n * the definition itself must keep running under `createDevServer()` with no\n * Vite installed.\n *\n * Vite DevTools 0.7+ is itself built on devframe, so its plugin context is a\n * devframe hub context: `ctx.install(definition)` serves the panel SPA from\n * the definition's `clientAssets`, registers its dock, and exposes its RPC\n * over the hub's authenticated WebSocket. That is all\n * `createPluginFromDevframe()` from `@vitejs/devtools-kit` does, so calling\n * `install` directly keeps DevTools an optional peer we never import at\n * runtime — the hook below is duck-typed, exactly as the panel's previous\n * dock registration was.\n *\n * @see plans/devframe-foundation.md\n */\n\nimport type {Plugin, ViteDevServer} from 'vite';\nimport type {DevframeDefinition} from 'devframe';\nimport {\n  INSPECT_CMD_CHANNEL,\n  INSPECT_DATA_CHANNEL,\n  INSPECT_OVERLAY_TOGGLE_CHANNEL,\n} from '../../types/inspector.js';\nimport type {\n  InspectorCommand,\n  InspectorMessage,\n} from '../../types/inspector.js';\nimport {HMR_INCOMPATIBLE_CHANNEL} from '../../types/hmr-incompatibility.js';\nimport type {HmrIncompatibilityEvent} from '../../types/hmr-incompatibility.js';\nimport {SETTINGS_OVERRIDE_CHANNEL} from '../../types/timeline.js';\nimport type {\n  FeatureSettings,\n  SettingsOverride,\n  TimelineEvent,\n  TimelineLayer,\n  TimelineLayersState,\n} from '../../types/timeline.js';\nimport {createLitDevframe} from './definition.js';\nimport {LIT_DEVFRAME_ID} from './protocol.js';\nimport {layersWireFormat} from './source.js';\nimport type {TimelineSink, TimelineSource} from './source.js';\n\nexport {createLitDevframe};\n\n/**\n * The slice of the Vite DevTools hub context this plugin uses. Structurally a\n * subset of `ViteDevToolsNodeContext` from `@vitejs/devtools-kit/node`;\n * declared here so the package never imports that optional peer at runtime.\n * Install `@vitejs/devtools-kit` as a dev dependency to check it against the\n * real declarations.\n */\ninterface DevToolsHubContext {\n  readonly viteServer?: ViteDevServer;\n  /** Serve a devframe's SPA, register its dock, and run its `setup()`. */\n  install: (\n    devframe: DevframeDefinition,\n    options?: {base?: string; dock?: Record<string, unknown>}\n  ) => Promise<void>;\n  docks?: {\n    activate?: (dockId: string, params?: Record<string, unknown>) => void;\n  };\n  commands?: {register?: (command: Record<string, unknown>) => unknown};\n  /**\n   * The hub's host runtime. Structurally the slice of devframe's\n   * `DevframeHost` {@link registerInstance} needs; `DevframeHubContext`\n   * extends `DevframeNodeContext`, which carries it.\n   */\n  host?: {resolveOrigin?: () => string};\n}\n\ndeclare module 'vite' {\n  interface Plugin {\n    /** Vite DevTools plugin hook, contributed by `@vitejs/devtools`. */\n    devtools?: {\n      capabilities?: {dev?: boolean; build?: boolean};\n      setup: (ctx: DevToolsHubContext) => void | Promise<void>;\n    };\n  }\n}\n\nexport interface CreateLitDevframePluginOptions {\n  version: string;\n  features?: () => FeatureSettings | null;\n  /** See {@link CreateLitDevframeOptions.configuredEditor}. */\n  configuredEditor?: () => string | undefined;\n  /** Override the built panel SPA directory. Defaults to `dist/client`. */\n  clientAssets?: string;\n}\n\n/**\n * `TimelineSource` over a Vite dev server's `hot` channel.\n *\n * `install()` runs the definition's `setup()` — and therefore\n * `source.attach()` — before it resolves, so this is attached before a dev\n * server is necessarily in hand. Calls made before {@link bind} are dropped\n * rather than buffered: nothing can emit a page-runtime event until a page\n * has connected to a bound server.\n */\nexport class HotTimelineSource implements TimelineSource {\n  #hot: ViteDevServer['hot'] | undefined;\n  #sink: TimelineSink | undefined;\n  #hub: DevToolsHubContext | undefined;\n\n  /**\n   * Wire the source to a live dev server. Call once, from `devtools.setup()`.\n   * `hub` is optional: without it the bridge still carries page traffic both\n   * ways, it just cannot bring the dock to the front on an overlay pick.\n   */\n  bind(server: ViteDevServer, hub?: DevToolsHubContext): void {\n    this.#hub = hub;\n    const hot = server.hot;\n    this.#hot = hot;\n\n    hot.on('lit:timeline:push-event', (data: {events?: TimelineEvent[]}) => {\n      this.#sink?.pushEvents(data.events ?? []);\n    });\n\n    hot.on('lit:timeline:custom-layer', (data: {layer?: TimelineLayer}) => {\n      if (!data.layer?.id) return;\n      this.#sink?.addLayer(data.layer);\n    });\n\n    hot.on(INSPECT_DATA_CHANNEL, (data: InspectorMessage) => {\n      // An overlay pick means the developer clicked an element in the page and\n      // wants the Components tab. Bring the dock forward from the node side\n      // rather than having the panel reach into the parent frame.\n      if (data.type === 'pick') {\n        // Carry the target with the activation, not just the dock id: the\n        // params ride the hub's `devframe:docks:active` state, so a panel\n        // that mounts *because of* this pick still lands on the right\n        // element instead of racing the separate `pick` message.\n        this.#hub?.docks?.activate?.(LIT_DEVFRAME_ID, {componentId: data.id});\n      }\n      this.#sink?.inspectorMessage(data);\n    });\n\n    hot.on(HMR_INCOMPATIBLE_CHANNEL, (event: HmrIncompatibilityEvent) => {\n      this.#sink?.hmrIncompatible(event);\n    });\n\n    // The runtime announces itself on every connect. It boots from the\n    // compiled-in defaults (recording off), so the session's current state\n    // has to be pushed back down or a page that loads while recording is on\n    // captures nothing while every surface still reports `recording: true`.\n    hot.on('lit:timeline:runtime-ready', () => {\n      this.#sink?.runtimeReady();\n    });\n  }\n\n  /** Toggle the page's inspect overlay. Also used by the palette command. */\n  toggleOverlay(): void {\n    this.#hot?.send(INSPECT_OVERLAY_TOGGLE_CHANNEL);\n  }\n\n  attach(sink: TimelineSink): () => void {\n    this.#sink = sink;\n    return () => {\n      if (this.#sink === sink) this.#sink = undefined;\n    };\n  }\n\n  sendInspector(cmd: InspectorCommand): void {\n    this.#hot?.send(INSPECT_CMD_CHANNEL, cmd);\n  }\n\n  setRecording(recording: boolean): void {\n    this.#hot?.send('lit:timeline:recording-changed', {recording});\n  }\n\n  setLayers(layers: TimelineLayersState): void {\n    this.#hot?.send('lit:timeline:layers-changed', layersWireFormat(layers));\n  }\n\n  setSettingsOverride(override: SettingsOverride): void {\n    this.#hot?.send(SETTINGS_OVERRIDE_CHANNEL, override);\n  }\n}\n\n/**\n * One warning per process, not per dev server: a restart-heavy session\n * should not paper the terminal with the same advisory. Carries the reason,\n * because \"discovery unavailable\" with no cause is the kind of message that\n * costs an afternoon when the guess below finally goes stale.\n */\nlet warnedDiscoveryUnavailable = false;\n\nconst warnDiscoveryUnavailable = (reason: string): void => {\n  if (warnedDiscoveryUnavailable) return;\n  warnedDiscoveryUnavailable = true;\n  console.warn(\n    `[lit-plugin] devframe instance-registry discovery unavailable ` +\n      `(${reason}); stdio MCP clients cannot auto-discover this dev ` +\n      `server. The MCP endpoint itself is unaffected — point clients at ` +\n      `<dev-server-origin>/__devtools/__mcp directly.`\n  );\n};\n\n/**\n * Publish this devframe in devframe's global instance registry\n * (`~/.devframe/instances/`), so stdio MCP connectors — `devframe connect`,\n * this package's own `lit-devtools mcp` — find the running dev server\n * without port guessing.\n *\n * `createDevServer()` registers itself, but this plugin never goes through\n * it: it mounts into the Vite DevTools hub, and `@vitejs/devtools@0.7.5`\n * calls `initHub()` with no `register` option, which defaults to off. So a\n * Vite-hosted devframe is invisible to discovery unless a plugin publishes\n * the record itself — which is all this does. `registerDevframeInstance()`\n * is documented for exactly this case (\"custom hosts that serve a devframe\n * in-process call this explicitly with the origin they are reachable at\"),\n * and the registry is a directory of per-`pid`+`port` JSON files, so\n * registrants coexist.\n *\n * The mount path is the soft spot: `/__devtools/` is where this version of\n * Vite DevTools mounts, not a promise about where a devframe host mounts in\n * general. So the guess is verified before it is published — the same\n * `probeDevframeOrigin()` primitive the registry's own liveness check uses\n * has to answer at that base, or nothing is registered. A record that\n * doesn't answer is worse than no record: an agent dials it and gets 404s\n * from a server that claimed to be there.\n *\n * The MCP path is then taken from what that probe *reports* rather than\n * assumed to be the `__mcp` default, which removes the second guess\n * entirely. Note the two path conventions in play: `__connection.json`\n * serves `mcp.path` **relative** to the base (`\"__mcp\"`), while a registry\n * record stores it **absolute** (`\"/__devtools/__mcp\"`) because the\n * connector dials `origin + record.mcp.path` directly. Joining the two is\n * exactly what devframe's own `probePort()` does with its root-mounted\n * probe.\n *\n * Known sharp edge: records are keyed by `pid`+`port` alone. Another\n * devframe-hosting plugin in the same Vite process would share this file,\n * and whichever unregisters first removes it for both. Single-devframe use\n * is the common case and there is no cross-plugin coordination primitive\n * today.\n */\nasync function registerInstance(\n  ctx: DevToolsHubContext,\n  name: string\n): Promise<{unregister: () => void} | {reason: string}> {\n  // Both imports are dynamic and optional: `@vitejs/devtools-kit` is an\n  // optional peer this package must never hard-resolve, and `devframe`'s\n  // `internal` subpath is only needed on this path.\n  const constants = await import('@vitejs/devtools-kit/constants').catch(\n    () => null\n  );\n  const internal = await import('devframe/internal').catch(() => null);\n  if (!constants) return {reason: '@vitejs/devtools-kit not resolvable'};\n  if (!internal) return {reason: 'devframe/internal not resolvable'};\n\n  const basePath = constants.DEVTOOLS_MOUNT_PATH;\n  const origin = ctx.host?.resolveOrigin?.();\n  if (!origin) return {reason: 'host origin unavailable'};\n\n  const probed = await internal.probeDevframeOrigin(origin, basePath);\n  if (!probed) {\n    return {reason: `no devframe answered at ${origin}${basePath}`};\n  }\n\n  // Relative (`\"__mcp\"`) as served, absolute as stored — see above. A host\n  // that already reports an absolute path is passed through unchanged.\n  const reported = probed.meta.mcp?.path;\n  const mcpPath =\n    reported === undefined\n      ? null\n      : reported.startsWith('/')\n        ? reported\n        : `${basePath}${reported}`;\n\n  const {unregister} = internal.registerDevframeInstance({\n    pid: process.pid,\n    // The probe reports the origin that actually answered — a `localhost`\n    // bind may only be dialable as `127.0.0.1` or `[::1]` — so its port is\n    // the one truly listening, which `config.server.port` is not when the\n    // configured port was taken.\n    port: Number(new URL(probed.origin).port) || 0,\n    origin: probed.origin,\n    basePath,\n    id: LIT_DEVFRAME_ID,\n    name,\n    rootDir: process.cwd(),\n    // Registering with `mcp: null` is honest rather than useless: the\n    // connector surfaces the instance with its own \"MCP disabled\" hint,\n    // which beats the instance being invisible.\n    mcp: mcpPath === null ? null : {path: mcpPath},\n    startedAt: Date.now(),\n  });\n  return {unregister};\n}\n\n/**\n * Register once the dev server is actually accepting connections. The\n * DevTools `setup()` hook runs during server construction, well before\n * `listen()` resolves, so probing from there always fails to connect — the\n * record has to wait for the port it is about to advertise to be real.\n */\nfunction registerInstanceWhenListening(\n  ctx: DevToolsHubContext,\n  name: string\n): void {\n  const httpServer = ctx.viteServer?.httpServer;\n  if (!httpServer) {\n    // Middleware mode: no server of our own to advertise.\n    warnDiscoveryUnavailable('no HTTP server (middleware mode?)');\n    return;\n  }\n\n  const run = (): void => {\n    registerInstance(ctx, name)\n      .then((result) => {\n        if ('unregister' in result) {\n          httpServer.once('close', result.unregister);\n        } else {\n          warnDiscoveryUnavailable(result.reason);\n        }\n      })\n      .catch((error: unknown) => {\n        warnDiscoveryUnavailable(String(error));\n      });\n  };\n\n  if (httpServer.listening) run();\n  else httpServer.once('listening', run);\n}\n\n/**\n * The Vite plugin that mounts the Lit devframe on the DevTools hub. A no-op\n * when DevTools is not active: without it nothing calls `devtools.setup()`,\n * so the definition is never installed and the panel simply isn't there.\n */\nexport function createLitDevframePlugin(\n  options: CreateLitDevframePluginOptions\n): Plugin {\n  const source = new HotTimelineSource();\n  // Only known once `setup()` has the dev server, which is after the\n  // definition is built -- hence the getter.\n  let viteRoot: string | undefined;\n  const definition = createLitDevframe({\n    source,\n    version: options.version,\n    features: options.features,\n    configuredEditor: options.configuredEditor,\n    clientAssets: options.clientAssets,\n    sourceRoot: () => viteRoot,\n  });\n\n  return {\n    name: `devframe:${LIT_DEVFRAME_ID}`,\n    devtools: {\n      // The panel reflects a running page, so there is nothing to mount\n      // during `vite build`. A static snapshot goes through\n      // `devframe/adapters/build` instead.\n      capabilities: {dev: true, build: false},\n      async setup(ctx) {\n        // Bind before installing: `install()` runs the definition's `setup()`,\n        // which attaches to this source, and the dev server is already\n        // available on the context by now.\n        if (ctx.viteServer) source.bind(ctx.viteServer, ctx);\n        viteRoot = ctx.viteServer?.config.root;\n        await ctx.install(definition);\n\n        // The overlay picker as a palette command with a managed shortcut.\n        // Only meaningful when the source overlay is enabled, since that is\n        // what draws the picker in the page.\n        if (options.features?.()?.sourceOverlay.enabled) {\n          ctx.commands?.register?.({\n            id: 'lit:overlay:toggle',\n            title: 'Pick Lit Element',\n            description:\n              'Click to inspect in the Components panel, hold Meta/Ctrl and click to open in your editor',\n            icon: 'ph:crosshair-duotone',\n            category: 'Lit',\n            keybindings: [{key: 'Meta+Shift+E'}],\n            handler: () => source.toggleOverlay(),\n          });\n        }\n\n        // Discovery is a convenience on top of a panel that already works,\n        // so this never blocks `setup()` and never throws: a failure costs\n        // the user the stdio MCP shortcut, and the direct URL still works.\n        registerInstanceWhenListening(ctx, definition.name);\n      },\n    },\n  };\n}\n\n/**\n * The page-runtime bridge on its own, for a host that drives its own mount\n * (or a test that wants to observe page traffic without a hub). Bind it to a\n * dev server, then either hand it to {@link createLitDevframe} or\n * {@link TimelineSource.attach} your own sink.\n */\nexport const createHotTimelineSource = (): HotTimelineSource =>\n  new HotTimelineSource();\n"]}
+{"version":3,"file":"vite.js","sourceRoot":"","sources":["../../src/lib/devframe/vite.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAuBH,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAKlC,OAAO,EAAC,wBAAwB,EAAC,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAC,yBAAyB,EAAC,MAAM,yBAAyB,CAAC;AAQlE,OAAO,EAAC,iBAAiB,EAAC,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAC,eAAe,EAAC,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAC,gBAAgB,EAAC,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAC,iBAAiB,EAAC,CAAC;AA+C3B;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAiB;IAC5B,IAAI,CAAmC;IACvC,KAAK,CAA2B;IAChC,IAAI,CAAiC;IAErC;;;;OAIG;IACH,IAAI,CAAC,MAAqB,EAAE,GAAwB;QAClD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAEhB,GAAG,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,IAAgC,EAAE,EAAE;YACrE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,2BAA2B,EAAE,CAAC,IAA6B,EAAE,EAAE;YACpE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE;gBAAE,OAAO;YAC5B,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,IAAsB,EAAE,EAAE;YACtD,yEAAyE;YACzE,sEAAsE;YACtE,4DAA4D;YAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,kEAAkE;gBAClE,kEAAkE;gBAClE,8DAA8D;gBAC9D,yDAAyD;gBACzD,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,eAAe,EAAE,EAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAC,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,wBAAwB,EAAE,CAAC,KAA8B,EAAE,EAAE;YAClE,IAAI,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QAEH,mEAAmE;QACnE,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,GAAG,CAAC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACxC,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,aAAa;QACX,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,CAAC,IAAkB;QACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI;gBAAE,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QAClD,CAAC,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,GAAqB;QACjC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAED,YAAY,CAAC,SAAkB;QAC7B,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,gCAAgC,EAAE,EAAC,SAAS,EAAC,CAAC,CAAC;IACjE,CAAC;IAED,SAAS,CAAC,MAA2B;QACnC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,6BAA6B,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED,mBAAmB,CAAC,QAA0B;QAC5C,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;CACF;AAED;;;;;GAKG;AACH,IAAI,0BAA0B,GAAG,KAAK,CAAC;AAEvC,MAAM,wBAAwB,GAAG,CAAC,MAAc,EAAQ,EAAE;IACxD,IAAI,0BAA0B;QAAE,OAAO;IACvC,0BAA0B,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,IAAI,CACV,gEAAgE;QAC9D,IAAI,MAAM,qDAAqD;QAC/D,mEAAmE;QACnE,gDAAgD,CACnD,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,KAAK,UAAU,gBAAgB,CAC7B,GAAuB,EACvB,IAAY;IAEZ,sEAAsE;IACtE,uEAAuE;IACvE,kDAAkD;IAClD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC,KAAK,CACpE,GAAG,EAAE,CAAC,IAAI,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAC,MAAM,EAAE,qCAAqC,EAAC,CAAC;IACvE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAC,MAAM,EAAE,kCAAkC,EAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,SAAS,CAAC,mBAAmB,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAC,MAAM,EAAE,yBAAyB,EAAC,CAAC;IAExD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAC,MAAM,EAAE,2BAA2B,MAAM,GAAG,QAAQ,EAAE,EAAC,CAAC;IAClE,CAAC;IAED,yEAAyE;IACzE,qEAAqE;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;IACvC,MAAM,OAAO,GACX,QAAQ,KAAK,SAAS;QACpB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YACxB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,GAAG,QAAQ,GAAG,QAAQ,EAAE,CAAC;IAEjC,MAAM,EAAC,UAAU,EAAC,GAAG,QAAQ,CAAC,wBAAwB,CAAC;QACrD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,6BAA6B;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9C,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ;QACR,EAAE,EAAE,eAAe;QACnB,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;QACtB,kEAAkE;QAClE,oEAAoE;QACpE,4CAA4C;QAC5C,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,IAAI,EAAE,OAAO,EAAC;QAC9C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IACH,OAAO,EAAC,UAAU,EAAC,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,SAAS,6BAA6B,CACpC,GAAuB,EACvB,IAAY;IAEZ,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC;IAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,sDAAsD;QACtD,wBAAwB,CAAC,mCAAmC,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,GAAS,EAAE;QACrB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC;aACxB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,wBAAwB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,IAAI,UAAU,CAAC,SAAS;QAAE,GAAG,EAAE,CAAC;;QAC3B,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAuC;IAEvC,MAAM,MAAM,GAAG,IAAI,iBAAiB,EAAE,CAAC;IACvC,mEAAmE;IACnE,2CAA2C;IAC3C,IAAI,QAA4B,CAAC;IACjC,IAAI,OAAO,GAAsB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACnC,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;QAC1B,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO;KAC5B,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,YAAY,eAAe,EAAE;QACnC,QAAQ,EAAE;YACR,kEAAkE;YAClE,sDAAsD;YACtD,qCAAqC;YACrC,YAAY,EAAE,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAC;YACvC,KAAK,CAAC,KAAK,CAAC,GAAG;gBACb,uEAAuE;gBACvE,+DAA+D;gBAC/D,mCAAmC;gBACnC,IAAI,GAAG,CAAC,UAAU;oBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBACrD,QAAQ,GAAG,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC;gBACvC,OAAO,GAAG,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;gBACxD,MAAM,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAE9B,mEAAmE;gBACnE,oEAAoE;gBACpE,qCAAqC;gBACrC,IAAI,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,aAAa,CAAC,OAAO,EAAE,CAAC;oBAChD,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;wBACvB,EAAE,EAAE,oBAAoB;wBACxB,KAAK,EAAE,kBAAkB;wBACzB,WAAW,EACT,2FAA2F;wBAC7F,IAAI,EAAE,sBAAsB;wBAC5B,QAAQ,EAAE,KAAK;wBACf,WAAW,EAAE,CAAC,EAAC,GAAG,EAAE,cAAc,EAAC,CAAC;wBACpC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE;qBACtC,CAAC,CAAC;gBACL,CAAC;gBAED,mEAAmE;gBACnE,mEAAmE;gBACnE,mEAAmE;gBACnE,6BAA6B,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAsB,EAAE,CAC7D,IAAI,iBAAiB,EAAE,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\n/**\n * Mounts the Lit devframe ({@link createLitDevframe}) into the Vite DevTools\n * hub and bridges the page runtime's `import.meta.hot` transport to the\n * definition's `TimelineSource` port. Everything Vite-specific lives here:\n * the definition itself must keep running under `createDevServer()` with no\n * Vite installed.\n *\n * Vite DevTools 0.7+ is itself built on devframe, so its plugin context is a\n * devframe hub context: `ctx.install(definition)` serves the panel SPA from\n * the definition's `clientAssets`, registers its dock, and exposes its RPC\n * over the hub's authenticated WebSocket. That is all\n * `createPluginFromDevframe()` from `@vitejs/devtools-kit` does, so calling\n * `install` directly keeps DevTools an optional peer we never import at\n * runtime — the hook below is duck-typed, exactly as the panel's previous\n * dock registration was.\n *\n * @see plans/devframe-foundation.md\n */\n\nimport type {Plugin, ViteDevServer} from 'vite';\nimport type {DevframeDefinition} from 'devframe';\nimport {\n  INSPECT_CMD_CHANNEL,\n  INSPECT_DATA_CHANNEL,\n  INSPECT_OVERLAY_TOGGLE_CHANNEL,\n} from '../../types/inspector.js';\nimport type {\n  InspectorCommand,\n  InspectorMessage,\n} from '../../types/inspector.js';\nimport {HMR_INCOMPATIBLE_CHANNEL} from '../../types/hmr-incompatibility.js';\nimport type {HmrIncompatibilityEvent} from '../../types/hmr-incompatibility.js';\nimport {SETTINGS_OVERRIDE_CHANNEL} from '../../types/timeline.js';\nimport type {\n  FeatureSettings,\n  SettingsOverride,\n  TimelineEvent,\n  TimelineLayer,\n  TimelineLayersState,\n} from '../../types/timeline.js';\nimport {createLitDevframe} from './definition.js';\nimport {LIT_DEVFRAME_ID} from './protocol.js';\nimport {layersWireFormat} from './source.js';\nimport type {TimelineSink, TimelineSource} from './source.js';\n\nexport {createLitDevframe};\n\n/**\n * The slice of the Vite DevTools hub context this plugin uses. Structurally a\n * subset of `ViteDevToolsNodeContext` from `@vitejs/devtools-kit/node`;\n * declared here so the package never imports that optional peer at runtime.\n * Install `@vitejs/devtools-kit` as a dev dependency to check it against the\n * real declarations.\n */\ninterface DevToolsHubContext {\n  readonly viteServer?: ViteDevServer;\n  /** Serve a devframe's SPA, register its dock, and run its `setup()`. */\n  install: (\n    devframe: DevframeDefinition,\n    options?: {base?: string; dock?: Record<string, unknown>}\n  ) => Promise<void>;\n  docks?: {\n    activate?: (dockId: string, params?: Record<string, unknown>) => void;\n  };\n  commands?: {register?: (command: Record<string, unknown>) => unknown};\n  /**\n   * The hub's host runtime. Structurally the slice of devframe's\n   * `DevframeHost` {@link registerInstance} needs; `DevframeHubContext`\n   * extends `DevframeNodeContext`, which carries it.\n   */\n  host?: {resolveOrigin?: () => string};\n}\n\ndeclare module 'vite' {\n  interface Plugin {\n    /** Vite DevTools plugin hook, contributed by `@vitejs/devtools`. */\n    devtools?: {\n      capabilities?: {dev?: boolean; build?: boolean};\n      setup: (ctx: DevToolsHubContext) => void | Promise<void>;\n    };\n  }\n}\n\nexport interface CreateLitDevframePluginOptions {\n  version: string;\n  features?: () => FeatureSettings | null;\n  /** See {@link CreateLitDevframeOptions.configuredEditor}. */\n  configuredEditor?: () => string | undefined;\n  /** Override the built panel SPA directory. Defaults to `dist/client`. */\n  clientAssets?: string;\n}\n\n/**\n * `TimelineSource` over a Vite dev server's `hot` channel.\n *\n * `install()` runs the definition's `setup()` — and therefore\n * `source.attach()` — before it resolves, so this is attached before a dev\n * server is necessarily in hand. Calls made before {@link bind} are dropped\n * rather than buffered: nothing can emit a page-runtime event until a page\n * has connected to a bound server.\n */\nexport class HotTimelineSource implements TimelineSource {\n  #hot: ViteDevServer['hot'] | undefined;\n  #sink: TimelineSink | undefined;\n  #hub: DevToolsHubContext | undefined;\n\n  /**\n   * Wire the source to a live dev server. Call once, from `devtools.setup()`.\n   * `hub` is optional: without it the bridge still carries page traffic both\n   * ways, it just cannot bring the dock to the front on an overlay pick.\n   */\n  bind(server: ViteDevServer, hub?: DevToolsHubContext): void {\n    this.#hub = hub;\n    const hot = server.hot;\n    this.#hot = hot;\n\n    hot.on('lit:timeline:push-event', (data: {events?: TimelineEvent[]}) => {\n      this.#sink?.pushEvents(data.events ?? []);\n    });\n\n    hot.on('lit:timeline:custom-layer', (data: {layer?: TimelineLayer}) => {\n      if (!data.layer?.id) return;\n      this.#sink?.addLayer(data.layer);\n    });\n\n    hot.on(INSPECT_DATA_CHANNEL, (data: InspectorMessage) => {\n      // An overlay pick means the developer clicked an element in the page and\n      // wants the Components tab. Bring the dock forward from the node side\n      // rather than having the panel reach into the parent frame.\n      if (data.type === 'pick') {\n        // Carry the target with the activation, not just the dock id: the\n        // params ride the hub's `devframe:docks:active` state, so a panel\n        // that mounts *because of* this pick still lands on the right\n        // element instead of racing the separate `pick` message.\n        this.#hub?.docks?.activate?.(LIT_DEVFRAME_ID, {componentId: data.id});\n      }\n      this.#sink?.inspectorMessage(data);\n    });\n\n    hot.on(HMR_INCOMPATIBLE_CHANNEL, (event: HmrIncompatibilityEvent) => {\n      this.#sink?.hmrIncompatible(event);\n    });\n\n    // The runtime announces itself on every connect. It boots from the\n    // compiled-in defaults (recording off), so the session's current state\n    // has to be pushed back down or a page that loads while recording is on\n    // captures nothing while every surface still reports `recording: true`.\n    hot.on('lit:timeline:runtime-ready', () => {\n      this.#sink?.runtimeReady();\n    });\n  }\n\n  /** Toggle the page's inspect overlay. Also used by the palette command. */\n  toggleOverlay(): void {\n    this.#hot?.send(INSPECT_OVERLAY_TOGGLE_CHANNEL);\n  }\n\n  attach(sink: TimelineSink): () => void {\n    this.#sink = sink;\n    return () => {\n      if (this.#sink === sink) this.#sink = undefined;\n    };\n  }\n\n  sendInspector(cmd: InspectorCommand): void {\n    this.#hot?.send(INSPECT_CMD_CHANNEL, cmd);\n  }\n\n  setRecording(recording: boolean): void {\n    this.#hot?.send('lit:timeline:recording-changed', {recording});\n  }\n\n  setLayers(layers: TimelineLayersState): void {\n    this.#hot?.send('lit:timeline:layers-changed', layersWireFormat(layers));\n  }\n\n  setSettingsOverride(override: SettingsOverride): void {\n    this.#hot?.send(SETTINGS_OVERRIDE_CHANNEL, override);\n  }\n}\n\n/**\n * One warning per process, not per dev server: a restart-heavy session\n * should not paper the terminal with the same advisory. Carries the reason,\n * because \"discovery unavailable\" with no cause is the kind of message that\n * costs an afternoon when the guess below finally goes stale.\n */\nlet warnedDiscoveryUnavailable = false;\n\nconst warnDiscoveryUnavailable = (reason: string): void => {\n  if (warnedDiscoveryUnavailable) return;\n  warnedDiscoveryUnavailable = true;\n  console.warn(\n    `[lit-plugin] devframe instance-registry discovery unavailable ` +\n      `(${reason}); stdio MCP clients cannot auto-discover this dev ` +\n      `server. The MCP endpoint itself is unaffected — point clients at ` +\n      `<dev-server-origin>/__devtools/__mcp directly.`\n  );\n};\n\n/**\n * Publish this devframe in devframe's global instance registry\n * (`~/.devframe/instances/`), so stdio MCP connectors — `devframe connect`,\n * this package's own `lit-devtools mcp` — find the running dev server\n * without port guessing.\n *\n * `createDevServer()` registers itself, but this plugin never goes through\n * it: it mounts into the Vite DevTools hub, and `@vitejs/devtools@0.7.5`\n * calls `initHub()` with no `register` option, which defaults to off. So a\n * Vite-hosted devframe is invisible to discovery unless a plugin publishes\n * the record itself — which is all this does. `registerDevframeInstance()`\n * is documented for exactly this case (\"custom hosts that serve a devframe\n * in-process call this explicitly with the origin they are reachable at\"),\n * and the registry is a directory of per-`pid`+`port` JSON files, so\n * registrants coexist.\n *\n * The mount path is the soft spot: `/__devtools/` is where this version of\n * Vite DevTools mounts, not a promise about where a devframe host mounts in\n * general. So the guess is verified before it is published — the same\n * `probeDevframeOrigin()` primitive the registry's own liveness check uses\n * has to answer at that base, or nothing is registered. A record that\n * doesn't answer is worse than no record: an agent dials it and gets 404s\n * from a server that claimed to be there.\n *\n * The MCP path is then taken from what that probe *reports* rather than\n * assumed to be the `__mcp` default, which removes the second guess\n * entirely. Note the two path conventions in play: `__connection.json`\n * serves `mcp.path` **relative** to the base (`\"__mcp\"`), while a registry\n * record stores it **absolute** (`\"/__devtools/__mcp\"`) because the\n * connector dials `origin + record.mcp.path` directly. Joining the two is\n * exactly what devframe's own `probePort()` does with its root-mounted\n * probe.\n *\n * Known sharp edge: records are keyed by `pid`+`port` alone. Another\n * devframe-hosting plugin in the same Vite process would share this file,\n * and whichever unregisters first removes it for both. Single-devframe use\n * is the common case and there is no cross-plugin coordination primitive\n * today.\n */\nasync function registerInstance(\n  ctx: DevToolsHubContext,\n  name: string\n): Promise<{unregister: () => void} | {reason: string}> {\n  // Both imports are dynamic and optional: `@vitejs/devtools-kit` is an\n  // optional peer this package must never hard-resolve, and `devframe`'s\n  // `internal` subpath is only needed on this path.\n  const constants = await import('@vitejs/devtools-kit/constants').catch(\n    () => null\n  );\n  const internal = await import('devframe/internal').catch(() => null);\n  if (!constants) return {reason: '@vitejs/devtools-kit not resolvable'};\n  if (!internal) return {reason: 'devframe/internal not resolvable'};\n\n  const basePath = constants.DEVTOOLS_MOUNT_PATH;\n  const origin = ctx.host?.resolveOrigin?.();\n  if (!origin) return {reason: 'host origin unavailable'};\n\n  const probed = await internal.probeDevframeOrigin(origin, basePath);\n  if (!probed) {\n    return {reason: `no devframe answered at ${origin}${basePath}`};\n  }\n\n  // Relative (`\"__mcp\"`) as served, absolute as stored — see above. A host\n  // that already reports an absolute path is passed through unchanged.\n  const reported = probed.meta.mcp?.path;\n  const mcpPath =\n    reported === undefined\n      ? null\n      : reported.startsWith('/')\n        ? reported\n        : `${basePath}${reported}`;\n\n  const {unregister} = internal.registerDevframeInstance({\n    pid: process.pid,\n    // The probe reports the origin that actually answered — a `localhost`\n    // bind may only be dialable as `127.0.0.1` or `[::1]` — so its port is\n    // the one truly listening, which `config.server.port` is not when the\n    // configured port was taken.\n    port: Number(new URL(probed.origin).port) || 0,\n    origin: probed.origin,\n    basePath,\n    id: LIT_DEVFRAME_ID,\n    name,\n    rootDir: process.cwd(),\n    // Registering with `mcp: null` is honest rather than useless: the\n    // connector surfaces the instance with its own \"MCP disabled\" hint,\n    // which beats the instance being invisible.\n    mcp: mcpPath === null ? null : {path: mcpPath},\n    startedAt: Date.now(),\n  });\n  return {unregister};\n}\n\n/**\n * Register once the dev server is actually accepting connections. The\n * DevTools `setup()` hook runs during server construction, well before\n * `listen()` resolves, so probing from there always fails to connect — the\n * record has to wait for the port it is about to advertise to be real.\n */\nfunction registerInstanceWhenListening(\n  ctx: DevToolsHubContext,\n  name: string\n): void {\n  const httpServer = ctx.viteServer?.httpServer;\n  if (!httpServer) {\n    // Middleware mode: no server of our own to advertise.\n    warnDiscoveryUnavailable('no HTTP server (middleware mode?)');\n    return;\n  }\n\n  const run = (): void => {\n    registerInstance(ctx, name)\n      .then((result) => {\n        if ('unregister' in result) {\n          httpServer.once('close', result.unregister);\n        } else {\n          warnDiscoveryUnavailable(result.reason);\n        }\n      })\n      .catch((error: unknown) => {\n        warnDiscoveryUnavailable(String(error));\n      });\n  };\n\n  if (httpServer.listening) run();\n  else httpServer.once('listening', run);\n}\n\n/**\n * The Vite plugin that mounts the Lit devframe on the DevTools hub. A no-op\n * when DevTools is not active: without it nothing calls `devtools.setup()`,\n * so the definition is never installed and the panel simply isn't there.\n */\nexport function createLitDevframePlugin(\n  options: CreateLitDevframePluginOptions\n): Plugin {\n  const source = new HotTimelineSource();\n  // Only known once `setup()` has the dev server, which is after the\n  // definition is built -- hence the getter.\n  let viteRoot: string | undefined;\n  let fsAllow: readonly string[] = [];\n  const definition = createLitDevframe({\n    source,\n    version: options.version,\n    features: options.features,\n    configuredEditor: options.configuredEditor,\n    clientAssets: options.clientAssets,\n    sourceRoot: () => viteRoot,\n    allowedRoots: () => fsAllow,\n  });\n\n  return {\n    name: `devframe:${LIT_DEVFRAME_ID}`,\n    devtools: {\n      // The panel reflects a running page, so there is nothing to mount\n      // during `vite build`. A static snapshot goes through\n      // `devframe/adapters/build` instead.\n      capabilities: {dev: true, build: false},\n      async setup(ctx) {\n        // Bind before installing: `install()` runs the definition's `setup()`,\n        // which attaches to this source, and the dev server is already\n        // available on the context by now.\n        if (ctx.viteServer) source.bind(ctx.viteServer, ctx);\n        viteRoot = ctx.viteServer?.config.root;\n        fsAllow = ctx.viteServer?.config.server.fs?.allow ?? [];\n        await ctx.install(definition);\n\n        // The overlay picker as a palette command with a managed shortcut.\n        // Only meaningful when the source overlay is enabled, since that is\n        // what draws the picker in the page.\n        if (options.features?.()?.sourceOverlay.enabled) {\n          ctx.commands?.register?.({\n            id: 'lit:overlay:toggle',\n            title: 'Pick Lit Element',\n            description:\n              'Click to inspect in the Components panel, hold Meta/Ctrl and click to open in your editor',\n            icon: 'ph:crosshair-duotone',\n            category: 'Lit',\n            keybindings: [{key: 'Meta+Shift+E'}],\n            handler: () => source.toggleOverlay(),\n          });\n        }\n\n        // Discovery is a convenience on top of a panel that already works,\n        // so this never blocks `setup()` and never throws: a failure costs\n        // the user the stdio MCP shortcut, and the direct URL still works.\n        registerInstanceWhenListening(ctx, definition.name);\n      },\n    },\n  };\n}\n\n/**\n * The page-runtime bridge on its own, for a host that drives its own mount\n * (or a test that wants to observe page traffic without a hub). Bind it to a\n * dev server, then either hand it to {@link createLitDevframe} or\n * {@link TimelineSource.attach} your own sink.\n */\nexport const createHotTimelineSource = (): HotTimelineSource =>\n  new HotTimelineSource();\n"]}

package/lib/http.d.ts

@@ -24,6 +24,11 @@ export interface TrustHeaders {
  *     user-typed URL) are ours, `cross-site`/`same-site` are not.
  * A request is trusted only when every signal it does carry says same-origin,
  * and at least one of them is present.
+ *
+ * This does not stop DNS rebinding, where a hostile page reaches the server
+ * under its own name and `Origin` and `Host` agree. Vite's
+ * `server.allowedHosts` check does, and it runs before any plugin middleware,
+ * so this doesn't repeat it (source-overlay_test pins that ordering).
  */
 export declare const isTrustedRequest: (headers: TrustHeaders) => boolean;
 //# sourceMappingURL=http.d.ts.map

package/lib/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/lib/http.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,gBAAgB,YAAa,YAAY,KAAG,OAgBxD,CAAC"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/lib/http.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,gBAAgB,YAAa,YAAY,KAAG,OAgBxD,CAAC"}

package/lib/http.js

@@ -14,6 +14,11 @@
  *     user-typed URL) are ours, `cross-site`/`same-site` are not.
  * A request is trusted only when every signal it does carry says same-origin,
  * and at least one of them is present.
+ *
+ * This does not stop DNS rebinding, where a hostile page reaches the server
+ * under its own name and `Origin` and `Host` agree. Vite's
+ * `server.allowedHosts` check does, and it runs before any plugin middleware,
+ * so this doesn't repeat it (source-overlay_test pins that ordering).
  */
 export const isTrustedRequest = (headers) => {
   const site = headers['sec-fetch-site'];

package/lib/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/lib/http.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAqB,EAAW,EAAE;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;IAC9D,CAAC;IACD,MAAM,EAAC,MAAM,EAAE,IAAI,EAAC,GAAG,OAAO,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,OAAO,IAAI,KAAK,SAAS,CAAC;AAC5B,CAAC,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\n/**\n * Headers the trust check looks at. Both the open-in-editor endpoint and the\n * timeline/inspector endpoints are local-only dev tooling: only the page the\n * dev server itself served may drive them.\n */\nexport interface TrustHeaders {\n  origin?: string;\n  host?: string;\n  'sec-fetch-site'?: string;\n}\n\n/**\n * True when the request demonstrably comes from the dev server's own page.\n *\n * Two independent signals, because neither is present on every request:\n *   - `Origin` is sent on CORS-mode fetches and on every non-GET/HEAD request,\n *     but NOT on a plain cross-site GET (`<img>`, `<iframe>`, a navigation).\n *   - `Sec-Fetch-Site` is sent by Chromium and Firefox on every request and is\n *     the signal that covers exactly that gap; `same-origin` and `none` (a\n *     user-typed URL) are ours, `cross-site`/`same-site` are not.\n * A request is trusted only when every signal it does carry says same-origin,\n * and at least one of them is present.\n */\nexport const isTrustedRequest = (headers: TrustHeaders): boolean => {\n  const site = headers['sec-fetch-site'];\n  if (site !== undefined) {\n    if (site !== 'same-origin' && site !== 'none') return false;\n  }\n  const {origin, host} = headers;\n  if (origin !== undefined && origin !== 'null') {\n    try {\n      if (new URL(origin).host !== host) return false;\n    } catch {\n      return false;\n    }\n    return true;\n  }\n  // No `Origin`: trust only when `Sec-Fetch-Site` vouched for it above.\n  return site !== undefined;\n};\n"]}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/lib/http.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAqB,EAAW,EAAE;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;IAC9D,CAAC;IACD,MAAM,EAAC,MAAM,EAAE,IAAI,EAAC,GAAG,OAAO,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9C,IAAI,CAAC;YACH,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,KAAK,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,OAAO,IAAI,KAAK,SAAS,CAAC;AAC5B,CAAC,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\n/**\n * Headers the trust check looks at. Both the open-in-editor endpoint and the\n * timeline/inspector endpoints are local-only dev tooling: only the page the\n * dev server itself served may drive them.\n */\nexport interface TrustHeaders {\n  origin?: string;\n  host?: string;\n  'sec-fetch-site'?: string;\n}\n\n/**\n * True when the request demonstrably comes from the dev server's own page.\n *\n * Two independent signals, because neither is present on every request:\n *   - `Origin` is sent on CORS-mode fetches and on every non-GET/HEAD request,\n *     but NOT on a plain cross-site GET (`<img>`, `<iframe>`, a navigation).\n *   - `Sec-Fetch-Site` is sent by Chromium and Firefox on every request and is\n *     the signal that covers exactly that gap; `same-origin` and `none` (a\n *     user-typed URL) are ours, `cross-site`/`same-site` are not.\n * A request is trusted only when every signal it does carry says same-origin,\n * and at least one of them is present.\n *\n * This does not stop DNS rebinding, where a hostile page reaches the server\n * under its own name and `Origin` and `Host` agree. Vite's\n * `server.allowedHosts` check does, and it runs before any plugin middleware,\n * so this doesn't repeat it (source-overlay_test pins that ordering).\n */\nexport const isTrustedRequest = (headers: TrustHeaders): boolean => {\n  const site = headers['sec-fetch-site'];\n  if (site !== undefined) {\n    if (site !== 'same-origin' && site !== 'none') return false;\n  }\n  const {origin, host} = headers;\n  if (origin !== undefined && origin !== 'null') {\n    try {\n      if (new URL(origin).host !== host) return false;\n    } catch {\n      return false;\n    }\n    return true;\n  }\n  // No `Origin`: trust only when `Sec-Fetch-Site` vouched for it above.\n  return site !== undefined;\n};\n"]}

package/lib/plugins/open-in-editor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"open-in-editor.d.ts","sourceRoot":"","sources":["../../src/lib/plugins/open-in-editor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAmB,KAAK,YAAY,EAAC,MAAM,YAAY,CAAC;AAE/D,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AAE3D,eAAO,MAAM,4BAA4B,iBACzB,SAAS,MAAM,EAAE,WAMxB;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,YAAY,CAAA;CAAC,OACvD;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAC,QAC/C,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,SAiGhC,CAAC"}
+{"version":3,"file":"open-in-editor.d.ts","sourceRoot":"","sources":["../../src/lib/plugins/open-in-editor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAmB,KAAK,YAAY,EAAC,MAAM,YAAY,CAAC;AAE/D,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AAE3D,eAAO,MAAM,4BAA4B,iBACzB,SAAS,MAAM,EAAE,WAMxB;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,YAAY,CAAA;CAAC,OACvD;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;CAAC,QAC/C,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,SAyFhC,CAAC"}

package/lib/plugins/open-in-editor.js

@@ -3,8 +3,8 @@
  * Copyright 2026 Google LLC
  * SPDX-License-Identifier: BSD-3-Clause
  */
-import {existsSync} from 'node:fs';
-import {resolve as resolvePath, sep} from 'node:path';
+import {resolve as resolvePath} from 'node:path';
+import {confineToRoots} from '../confine.js';
 import {toLaunchEditor} from '../devframe/launch-editor.js';
 import {isTrustedRequest} from '../http.js';
 export const OPEN_IN_EDITOR_PATH = '/__lit-open-in-editor';
@@ -37,25 +37,17 @@ export const createOpenInEditorMiddleware = (allowedRoots) => {
       res.end('missing file parameter');
       return;
     }
-    // Confine the open to the allowed roots: resolve the requested path and
-    // reject anything that escapes all of them (path traversal, absolute
-    // paths to arbitrary files). `launch-editor` spawns the user's editor on
-    // this path, so an unvalidated `file` is a local-file-open /
-    // arg-injection vector.
-    const resolved = resolvePath(roots[0] ?? process.cwd(), file);
-    const allowed = roots.some(
-      (root) => resolved === root || resolved.startsWith(root + sep)
-    );
-    if (!allowed) {
-      res.statusCode = 403;
-      res.end('file outside allowed roots');
-      return;
-    }
-    if (!existsSync(resolved)) {
-      res.statusCode = 404;
-      res.end('file not found');
+    // Confine the open to the allowed roots: `launch-editor` spawns the
+    // user's editor on this path, so an unvalidated `file` is a
+    // local-file-open / arg-injection vector.
+    const confined = confineToRoots(roots, file);
+    if ('failure' in confined) {
+      const outside = confined.failure === 'outside';
+      res.statusCode = outside ? 403 : 404;
+      res.end(outside ? 'file outside allowed roots' : 'file not found');
       return;
     }
+    const resolved = confined.path;
     // Coerce to integers so a crafted `line`/`column` can't smuggle extra
     // shell-visible content through the `file:line:column` ref.
     const line = String(

package/lib/plugins/open-in-editor.js.map

@@ -1 +1 @@
-{"version":3,"file":"open-in-editor.js","sourceRoot":"","sources":["../../src/lib/plugins/open-in-editor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,UAAU,EAAC,MAAM,SAAS,CAAC;AACnC,OAAO,EAAC,OAAO,IAAI,WAAW,EAAE,GAAG,EAAC,MAAM,WAAW,CAAC;AACtD,OAAO,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAC,gBAAgB,EAAoB,MAAM,YAAY,CAAC;AAE/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,YAA+B,EAC/B,EAAE;IACF,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CACL,GAA4D,EAC5D,GAAqD,EACrD,IAA6B,EAC7B,EAAE;QACF,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACrD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,qEAAqE;QACrE,yEAAyE;QACzE,6DAA6D;QAC7D,wBAAwB;QACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CACxB,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAC/D,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,sEAAsE;QACtE,4DAA4D;QAC5D,MAAM,IAAI,GAAG,MAAM,CACjB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CACjE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CACnB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CACnE,CAAC;QACF,2EAA2E;QAC3E,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QAChD,MAAM,CAAC,eAAe,CAAC;aACpB,IAAI,CACH,CAAC,GAMA,EAAE,EAAE;YACH,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAIzB,CAAC;YACV,uEAAuE;YACvE,uEAAuE;YACvE,oEAAoE;YACpE,8DAA8D;YAC9D,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,GAAW,EAAE,EAAE;gBACjD,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,CAAC;YACF,MAAM,CACJ,OAAO,EACP,MAAM,EACN,CAAC,SAAiB,EAAE,YAA2B,EAAE,EAAE;gBACjD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC1B,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC,CACF,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpB,CAAC,CACF;aACA,KAAK,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\nimport {existsSync} from 'node:fs';\nimport {resolve as resolvePath, sep} from 'node:path';\nimport {toLaunchEditor} from '../devframe/launch-editor.js';\nimport {isTrustedRequest, type TrustHeaders} from '../http.js';\n\nexport const OPEN_IN_EDITOR_PATH = '/__lit-open-in-editor';\n\nexport const createOpenInEditorMiddleware = (\n  allowedRoots: readonly string[]\n) => {\n  // First entry is the primary root: relative `file` params resolve against\n  // it. Every entry grants open access to files beneath it.\n  const roots = allowedRoots.map((r) => resolvePath(r));\n  return (\n    req: {url?: string; method?: string; headers?: TrustHeaders},\n    res: {statusCode: number; end: (msg: string) => void},\n    next: (err?: unknown) => void\n  ) => {\n    if (req.url === undefined) {\n      next();\n      return;\n    }\n    if (req.method !== undefined && req.method !== 'GET') {\n      res.statusCode = 405;\n      res.end('method not allowed');\n      return;\n    }\n    if (!isTrustedRequest(req.headers ?? {})) {\n      res.statusCode = 403;\n      res.end('forbidden');\n      return;\n    }\n    const query = req.url.includes('?')\n      ? req.url.slice(req.url.indexOf('?') + 1)\n      : '';\n    const params = new URLSearchParams(query);\n    const file = params.get('file');\n    if (file === null) {\n      res.statusCode = 400;\n      res.end('missing file parameter');\n      return;\n    }\n    // Confine the open to the allowed roots: resolve the requested path and\n    // reject anything that escapes all of them (path traversal, absolute\n    // paths to arbitrary files). `launch-editor` spawns the user's editor on\n    // this path, so an unvalidated `file` is a local-file-open /\n    // arg-injection vector.\n    const resolved = resolvePath(roots[0] ?? process.cwd(), file);\n    const allowed = roots.some(\n      (root) => resolved === root || resolved.startsWith(root + sep)\n    );\n    if (!allowed) {\n      res.statusCode = 403;\n      res.end('file outside allowed roots');\n      return;\n    }\n    if (!existsSync(resolved)) {\n      res.statusCode = 404;\n      res.end('file not found');\n      return;\n    }\n    // Coerce to integers so a crafted `line`/`column` can't smuggle extra\n    // shell-visible content through the `file:line:column` ref.\n    const line = String(\n      Math.max(1, Number.parseInt(params.get('line') ?? '1', 10) || 1)\n    );\n    const column = String(\n      Math.max(1, Number.parseInt(params.get('column') ?? '1', 10) || 1)\n    );\n    // The overlay names the editor it is using (the panel's override, else the\n    // configured one). Only keys `toLaunchEditor` knows become a command;\n    // anything else, or nothing, leaves `launch-editor` to auto-detect.\n    const editor = toLaunchEditor(params.get('editor') ?? undefined);\n    const fileRef = `${resolved}:${line}:${column}`;\n    import('launch-editor')\n      .then(\n        (mod: {\n          default?: (\n            file: string,\n            editor: string | undefined,\n            cb: (fileName: string, errorMessage: string | null) => void\n          ) => void;\n        }) => {\n          const launch = (mod.default ?? mod) as (\n            file: string,\n            editor: string | undefined,\n            cb: (fileName: string, errorMessage: string | null) => void\n          ) => void;\n          // `launch-editor` invokes the callback only on failure — synchronously\n          // when it can't guess an editor, later if the spawn errors. Reply `ok`\n          // right after launching; the guard keeps a sync failure's 500 first\n          // and drops a late async failure (the response is long gone).\n          let finished = false;\n          const finish = (statusCode: number, msg: string) => {\n            if (finished) return;\n            finished = true;\n            res.statusCode = statusCode;\n            res.end(msg);\n          };\n          launch(\n            fileRef,\n            editor,\n            (_fileName: string, errorMessage: string | null) => {\n              if (errorMessage !== null) {\n                finish(500, errorMessage);\n              }\n            }\n          );\n          finish(200, 'ok');\n        }\n      )\n      .catch(next);\n  };\n};\n"]}
+{"version":3,"file":"open-in-editor.js","sourceRoot":"","sources":["../../src/lib/plugins/open-in-editor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAC,OAAO,IAAI,WAAW,EAAC,MAAM,WAAW,CAAC;AACjD,OAAO,EAAC,cAAc,EAAC,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAC,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAC,gBAAgB,EAAoB,MAAM,YAAY,CAAC;AAE/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,YAA+B,EAC/B,EAAE;IACF,0EAA0E;IAC1E,0DAA0D;IAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CACL,GAA4D,EAC5D,GAAqD,EACrD,IAA6B,EAC7B,EAAE;QACF,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACrD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YACjC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,oEAAoE;QACpE,4DAA4D;QAC5D,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC;YAC/C,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACrC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC/B,sEAAsE;QACtE,4DAA4D;QAC5D,MAAM,IAAI,GAAG,MAAM,CACjB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CACjE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CACnB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CACnE,CAAC;QACF,2EAA2E;QAC3E,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,GAAG,QAAQ,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QAChD,MAAM,CAAC,eAAe,CAAC;aACpB,IAAI,CACH,CAAC,GAMA,EAAE,EAAE;YACH,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAIzB,CAAC;YACV,uEAAuE;YACvE,uEAAuE;YACvE,oEAAoE;YACpE,8DAA8D;YAC9D,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,GAAW,EAAE,EAAE;gBACjD,IAAI,QAAQ;oBAAE,OAAO;gBACrB,QAAQ,GAAG,IAAI,CAAC;gBAChB,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;gBAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,CAAC;YACF,MAAM,CACJ,OAAO,EACP,MAAM,EACN,CAAC,SAAiB,EAAE,YAA2B,EAAE,EAAE;gBACjD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;oBAC1B,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC,CACF,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpB,CAAC,CACF;aACA,KAAK,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\nimport {resolve as resolvePath} from 'node:path';\nimport {confineToRoots} from '../confine.js';\nimport {toLaunchEditor} from '../devframe/launch-editor.js';\nimport {isTrustedRequest, type TrustHeaders} from '../http.js';\n\nexport const OPEN_IN_EDITOR_PATH = '/__lit-open-in-editor';\n\nexport const createOpenInEditorMiddleware = (\n  allowedRoots: readonly string[]\n) => {\n  // First entry is the primary root: relative `file` params resolve against\n  // it. Every entry grants open access to files beneath it.\n  const roots = allowedRoots.map((r) => resolvePath(r));\n  return (\n    req: {url?: string; method?: string; headers?: TrustHeaders},\n    res: {statusCode: number; end: (msg: string) => void},\n    next: (err?: unknown) => void\n  ) => {\n    if (req.url === undefined) {\n      next();\n      return;\n    }\n    if (req.method !== undefined && req.method !== 'GET') {\n      res.statusCode = 405;\n      res.end('method not allowed');\n      return;\n    }\n    if (!isTrustedRequest(req.headers ?? {})) {\n      res.statusCode = 403;\n      res.end('forbidden');\n      return;\n    }\n    const query = req.url.includes('?')\n      ? req.url.slice(req.url.indexOf('?') + 1)\n      : '';\n    const params = new URLSearchParams(query);\n    const file = params.get('file');\n    if (file === null) {\n      res.statusCode = 400;\n      res.end('missing file parameter');\n      return;\n    }\n    // Confine the open to the allowed roots: `launch-editor` spawns the\n    // user's editor on this path, so an unvalidated `file` is a\n    // local-file-open / arg-injection vector.\n    const confined = confineToRoots(roots, file);\n    if ('failure' in confined) {\n      const outside = confined.failure === 'outside';\n      res.statusCode = outside ? 403 : 404;\n      res.end(outside ? 'file outside allowed roots' : 'file not found');\n      return;\n    }\n    const resolved = confined.path;\n    // Coerce to integers so a crafted `line`/`column` can't smuggle extra\n    // shell-visible content through the `file:line:column` ref.\n    const line = String(\n      Math.max(1, Number.parseInt(params.get('line') ?? '1', 10) || 1)\n    );\n    const column = String(\n      Math.max(1, Number.parseInt(params.get('column') ?? '1', 10) || 1)\n    );\n    // The overlay names the editor it is using (the panel's override, else the\n    // configured one). Only keys `toLaunchEditor` knows become a command;\n    // anything else, or nothing, leaves `launch-editor` to auto-detect.\n    const editor = toLaunchEditor(params.get('editor') ?? undefined);\n    const fileRef = `${resolved}:${line}:${column}`;\n    import('launch-editor')\n      .then(\n        (mod: {\n          default?: (\n            file: string,\n            editor: string | undefined,\n            cb: (fileName: string, errorMessage: string | null) => void\n          ) => void;\n        }) => {\n          const launch = (mod.default ?? mod) as (\n            file: string,\n            editor: string | undefined,\n            cb: (fileName: string, errorMessage: string | null) => void\n          ) => void;\n          // `launch-editor` invokes the callback only on failure — synchronously\n          // when it can't guess an editor, later if the spawn errors. Reply `ok`\n          // right after launching; the guard keeps a sync failure's 500 first\n          // and drops a late async failure (the response is long gone).\n          let finished = false;\n          const finish = (statusCode: number, msg: string) => {\n            if (finished) return;\n            finished = true;\n            res.statusCode = statusCode;\n            res.end(msg);\n          };\n          launch(\n            fileRef,\n            editor,\n            (_fileName: string, errorMessage: string | null) => {\n              if (errorMessage !== null) {\n                finish(500, errorMessage);\n              }\n            }\n          );\n          finish(200, 'ok');\n        }\n      )\n      .catch(next);\n  };\n};\n"]}

package/lib/snapshot.d.ts

@@ -13,7 +13,8 @@ export interface SnapshotBuildResult {
     details: number;
 }
 /**
- * Write `snapshot` to `outDir` as a self-contained static panel.
+ * Write `snapshot` to `outDir` as a self-contained static panel, replacing an
+ * earlier snapshot there. Any other existing directory is refused.
  *
  * The build adapter is imported dynamically: it reaches for `node:fs`, and
  * `definition.ts` is deliberately framework- and environment-neutral, so a

package/lib/snapshot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../src/lib/snapshot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;;GAOG;AACH,eAAO,MAAM,aAAa,aACd,eAAe,WAChB;IACP,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KACA,OAAO,CAAC,mBAAmB,CA0B7B,CAAC"}
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../src/lib/snapshot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkBH,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,sBAAsB,CAAC;AAE1D,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;;;;GAQG;AACH,eAAO,MAAM,aAAa,aACd,eAAe,WAChB;IACP,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,KACA,OAAO,CAAC,mBAAmB,CAyC7B,CAAC"}

package/lib/snapshot.js

@@ -22,7 +22,8 @@ import {createNullSource} from './devframe/source.js';
 const countNodes = (nodes) =>
   nodes.reduce((total, node) => total + 1 + countNodes(node.children), 0);
 /**
- * Write `snapshot` to `outDir` as a self-contained static panel.
+ * Write `snapshot` to `outDir` as a self-contained static panel, replacing an
+ * earlier snapshot there. Any other existing directory is refused.
  *
  * The build adapter is imported dynamically: it reaches for `node:fs`, and
  * `definition.ts` is deliberately framework- and environment-neutral, so a
@@ -31,6 +32,21 @@ const countNodes = (nodes) =>
  */
 export const buildSnapshot = async (snapshot, options) => {
   const {createBuild} = await import('devframe/adapters/build');
+  // `createBuild` deletes `outDir` recursively before writing. Replacing an
+  // earlier export is the point, but a typo'd `outDir` that names the project
+  // (or `src`) must not cost the developer their tree: only a directory that
+  // already holds a snapshot may be replaced.
+  const {existsSync} = await import('node:fs');
+  const {join} = await import('node:path');
+  if (
+    existsSync(options.outDir) &&
+    !existsSync(join(options.outDir, '__connection.json'))
+  ) {
+    throw new Error(
+      `[lit-devtools] ${options.outDir} exists and is not a snapshot; ` +
+        'refusing to replace it'
+    );
+  }
   const definition = createLitDevframe({
     // Nothing to attach to: the page this session describes is gone, and
     // every answer the frozen panel needs is already in `replay`.

package/lib/snapshot.js.map

@@ -1 +1 @@
-{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../src/lib/snapshot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAC,iBAAiB,EAAC,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAYtD,yEAAyE;AACzE,MAAM,UAAU,GAAG,CAAC,KAA+B,EAAU,EAAE,CAC7D,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAE1E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,QAAyB,EACzB,OAIC,EAC6B,EAAE;IAChC,MAAM,EAAC,WAAW,EAAC,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACnC,qEAAqE;QACrE,8DAA8D;QAC9D,MAAM,EAAE,gBAAgB,EAAE;QAC1B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ;QAChC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC,UAAU,EAAE;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,wEAAwE;QACxE,0EAA0E;QAC1E,sCAAsC;QACtC,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;QAC9B,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\n/**\n * Freezing a live session into a static panel someone else can open.\n *\n * Capture needs no transport: by the time a developer wants to export, the\n * node side is already holding the timeline buffer, the component tree, the\n * details of everything that was inspected, and the HMR incompatibility list.\n * The export reads its own state and hands it to devframe's build adapter as\n * a second, replaying definition.\n *\n * The output is a plain directory: the panel SPA, a `__connection.json` that\n * says `backend: 'static'`, and the baked RPC dump. It is mount-path agnostic,\n * so it works opened from a file server at any base — zip it onto an issue.\n */\n\nimport {createLitDevframe} from './devframe/definition.js';\nimport {createNullSource} from './devframe/source.js';\nimport type {FeatureSettings} from '../types/timeline.js';\nimport type {SessionSnapshot} from '../types/snapshot.js';\n\n/** What {@link buildSnapshot} reports back to whoever asked for the export. */\nexport interface SnapshotBuildResult {\n  outDir: string;\n  events: number;\n  components: number;\n  details: number;\n}\n\n/** Count the nodes of a tree, so the caller can say what it exported. */\nconst countNodes = (nodes: SessionSnapshot['roots']): number =>\n  nodes.reduce((total, node) => total + 1 + countNodes(node.children), 0);\n\n/**\n * Write `snapshot` to `outDir` as a self-contained static panel.\n *\n * The build adapter is imported dynamically: it reaches for `node:fs`, and\n * `definition.ts` is deliberately framework- and environment-neutral, so a\n * static import would drag filesystem code into every context that merely\n * builds the definition.\n */\nexport const buildSnapshot = async (\n  snapshot: SessionSnapshot,\n  options: {\n    outDir: string;\n    features: FeatureSettings | null;\n    clientAssets?: string;\n  }\n): Promise<SnapshotBuildResult> => {\n  const {createBuild} = await import('devframe/adapters/build');\n  const definition = createLitDevframe({\n    // Nothing to attach to: the page this session describes is gone, and\n    // every answer the frozen panel needs is already in `replay`.\n    source: createNullSource(),\n    version: snapshot.version,\n    features: () => options.features,\n    clientAssets: options.clientAssets,\n    replay: snapshot,\n  });\n\n  await createBuild(definition, {\n    outDir: options.outDir,\n    // The Vite plugin declares `capabilities.build: false` because there is\n    // nothing to render during `vite build` — a *recorded* session is the one\n    // case where a build does make sense.\n    force: true,\n  });\n\n  return {\n    outDir: options.outDir,\n    events: snapshot.events.length,\n    components: countNodes(snapshot.roots),\n    details: snapshot.details.length,\n  };\n};\n"]}
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../src/lib/snapshot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAC,iBAAiB,EAAC,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAYtD,yEAAyE;AACzE,MAAM,UAAU,GAAG,CAAC,KAA+B,EAAU,EAAE,CAC7D,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAChC,QAAyB,EACzB,OAIC,EAC6B,EAAE;IAChC,MAAM,EAAC,WAAW,EAAC,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC9D,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,4CAA4C;IAC5C,MAAM,EAAC,UAAU,EAAC,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,EAAC,IAAI,EAAC,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IACzC,IACE,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;QAC1B,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kBAAkB,OAAO,CAAC,MAAM,iCAAiC;YAC/D,wBAAwB,CAC3B,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC;QACnC,qEAAqE;QACrE,8DAA8D;QAC9D,MAAM,EAAE,gBAAgB,EAAE;QAC1B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ;QAChC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC,UAAU,EAAE;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,wEAAwE;QACxE,0EAA0E;QAC1E,sCAAsC;QACtC,KAAK,EAAE,IAAI;KACZ,CAAC,CAAC;IAEH,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;QAC9B,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QACtC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\n/**\n * Freezing a live session into a static panel someone else can open.\n *\n * Capture needs no transport: by the time a developer wants to export, the\n * node side is already holding the timeline buffer, the component tree, the\n * details of everything that was inspected, and the HMR incompatibility list.\n * The export reads its own state and hands it to devframe's build adapter as\n * a second, replaying definition.\n *\n * The output is a plain directory: the panel SPA, a `__connection.json` that\n * says `backend: 'static'`, and the baked RPC dump. It is mount-path agnostic,\n * so it works opened from a file server at any base — zip it onto an issue.\n */\n\nimport {createLitDevframe} from './devframe/definition.js';\nimport {createNullSource} from './devframe/source.js';\nimport type {FeatureSettings} from '../types/timeline.js';\nimport type {SessionSnapshot} from '../types/snapshot.js';\n\n/** What {@link buildSnapshot} reports back to whoever asked for the export. */\nexport interface SnapshotBuildResult {\n  outDir: string;\n  events: number;\n  components: number;\n  details: number;\n}\n\n/** Count the nodes of a tree, so the caller can say what it exported. */\nconst countNodes = (nodes: SessionSnapshot['roots']): number =>\n  nodes.reduce((total, node) => total + 1 + countNodes(node.children), 0);\n\n/**\n * Write `snapshot` to `outDir` as a self-contained static panel, replacing an\n * earlier snapshot there. Any other existing directory is refused.\n *\n * The build adapter is imported dynamically: it reaches for `node:fs`, and\n * `definition.ts` is deliberately framework- and environment-neutral, so a\n * static import would drag filesystem code into every context that merely\n * builds the definition.\n */\nexport const buildSnapshot = async (\n  snapshot: SessionSnapshot,\n  options: {\n    outDir: string;\n    features: FeatureSettings | null;\n    clientAssets?: string;\n  }\n): Promise<SnapshotBuildResult> => {\n  const {createBuild} = await import('devframe/adapters/build');\n  // `createBuild` deletes `outDir` recursively before writing. Replacing an\n  // earlier export is the point, but a typo'd `outDir` that names the project\n  // (or `src`) must not cost the developer their tree: only a directory that\n  // already holds a snapshot may be replaced.\n  const {existsSync} = await import('node:fs');\n  const {join} = await import('node:path');\n  if (\n    existsSync(options.outDir) &&\n    !existsSync(join(options.outDir, '__connection.json'))\n  ) {\n    throw new Error(\n      `[lit-devtools] ${options.outDir} exists and is not a snapshot; ` +\n        'refusing to replace it'\n    );\n  }\n  const definition = createLitDevframe({\n    // Nothing to attach to: the page this session describes is gone, and\n    // every answer the frozen panel needs is already in `replay`.\n    source: createNullSource(),\n    version: snapshot.version,\n    features: () => options.features,\n    clientAssets: options.clientAssets,\n    replay: snapshot,\n  });\n\n  await createBuild(definition, {\n    outDir: options.outDir,\n    // The Vite plugin declares `capabilities.build: false` because there is\n    // nothing to render during `vite build` — a *recorded* session is the one\n    // case where a build does make sense.\n    force: true,\n  });\n\n  return {\n    outDir: options.outDir,\n    events: snapshot.events.length,\n    components: countNodes(snapshot.roots),\n    details: snapshot.details.length,\n  };\n};\n"]}

package/lib/source-meta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"source-meta.d.ts","sourceRoot":"","sources":["../src/lib/source-meta.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,WAAW,MAAM,cAAc,CAAC;AAE5C,yEAAyE;AACzE,eAAO,MAAM,eAAe,qCAAqC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,eAAe,mDAAqC,CAAC;AAElE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,uDAAuD;AACvD,eAAO,MAAM,YAAY,SAAU,MAAM,SAAS,MAAM,KAAG,MAClB,CAAC;AA8I1C;;;GAGG;AACH,eAAO,MAAM,gBAAgB,SACrB,MAAM,YACF,MAAM,MACZ,WAAW,KACd,OAiEF,CAAC"}
+{"version":3,"file":"source-meta.d.ts","sourceRoot":"","sources":["../src/lib/source-meta.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,WAAW,MAAM,cAAc,CAAC;AAE5C,yEAAyE;AACzE,eAAO,MAAM,eAAe,qCAAqC,CAAC;AAElE;;;GAGG;AACH,eAAO,MAAM,eAAe,mDAAqC,CAAC;AAElE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,uDAAuD;AACvD,eAAO,MAAM,YAAY,SAAU,MAAM,SAAS,MAAM,KAAG,MAClB,CAAC;AAsL1C;;;GAGG;AACH,eAAO,MAAM,gBAAgB,SACrB,MAAM,YACF,MAAM,MACZ,WAAW,KACd,OAiEF,CAAC"}

package/lib/source-meta.js

@@ -13,6 +13,45 @@ export const SOURCE_META_SYM = `Symbol.for('${SOURCE_META_KEY}')`;
 /** 1-based line number for an index in source text. */
 export const lineNumberAt = (code, index) =>
   code.slice(0, index).split('\n').length;
+/**
+ * Finds the `{` that opens the body of the class starting at `classStart`:
+ * the first one at the top level of the heading. The heading can hold braces
+ * of its own — type literals in generic arguments
+ * (`extends Dialog<{open: boolean}>`), options passed to a mixin
+ * (`extends Mixin(Base, {shadow: true})`) — so anything nested in `<…>`,
+ * `(…)` or `[…]` is skipped, along with strings and comments. The `>` of an
+ * arrow type (`() => void`) doesn't close a `<`.
+ */
+const findClassBodyOpen = (code, classStart) => {
+  let depth = 0;
+  for (let i = classStart + 'class'.length; i < code.length; i++) {
+    const ch = code[i];
+    if (ch === '"' || ch === "'" || ch === '`') {
+      i++;
+      while (i < code.length && code[i] !== ch) {
+        if (code[i] === '\\') i++;
+        i++;
+      }
+    } else if (ch === '/' && code[i + 1] === '/') {
+      i = code.indexOf('\n', i);
+      if (i === -1) return -1;
+    } else if (ch === '/' && code[i + 1] === '*') {
+      i = code.indexOf('*/', i + 2);
+      if (i === -1) return -1;
+      i++;
+    } else if (ch === '{') {
+      if (depth === 0) return i;
+      depth++;
+    } else if (ch === '(' || ch === '[' || ch === '<') {
+      depth++;
+    } else if (ch === '}' || ch === ')' || ch === ']') {
+      depth--;
+    } else if (ch === '>' && code[i - 1] !== '=') {
+      depth--;
+    }
+  }
+  return -1;
+};
 /**
  * Finds the index after the closing `}` of a class body starting at
  * `classStart`. Skips braces inside strings, comments, regex literals, and
@@ -20,7 +59,7 @@ export const lineNumberAt = (code, index) =>
  * templates (Lit's `html\`…\`` inside `.map()` etc.) recurse arbitrarily.
  */
 const findClassBodyEnd = (code, classStart) => {
-  const open = code.indexOf('{', classStart);
+  const open = findClassBodyOpen(code, classStart);
   if (open === -1) return -1;
   // Brace depth of the code scope currently being scanned. Entering a `${…}`
   // interpolation pushes the enclosing scope's depth and restarts at 1 (the

package/lib/source-meta.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-meta.js","sourceRoot":"","sources":["../src/lib/source-meta.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,eAAe,IAAI,CAAC;AAQlE,uDAAuD;AACvD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAClE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,UAAkB,EAAU,EAAE;IACpE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IAC3B,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,UAAU,GAAG,KAAK,CAAC;gBACnB,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACtC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/B,KAAK,GAAG,CAAC,CAAC;gBACV,UAAU,GAAG,KAAK,CAAC;gBACnB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,EAAE,CAAC;gBAC1B,CAAC,EAAE,CAAC;YACN,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,UAAU,GAAG,IAAI,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9B,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC;gBACxB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,mEAAmE;YACnE,kEAAkE;YAClE,qEAAqE;YACrE,sDAAsD;YACtD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,aAAa,GACjB,CAAC,GAAG,CAAC;gBACL,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC9B,gGAAgG,CAAC,IAAI,CACnG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CACvC,CAAC;YACJ,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,IAAI,WAAW,GAAG,KAAK,CAAC;gBACxB,OACE,CAAC,GAAG,IAAI,CAAC,MAAM;oBACf,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;oBAChB,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAChC,CAAC;oBACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,CAAC,EAAE,CAAC;yBACrB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,WAAW,GAAG,IAAI,CAAC;yBACxC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,WAAW,GAAG,KAAK,CAAC;oBAC9C,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACpB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACV,SAAS;gBACX,CAAC;gBACD,+DAA+D;YACjE,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC;gBAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO,CAAC,GAAG,CAAC,CAAC;gBACf,CAAC;gBACD,KAAK,GAAG,SAAS,CAAC;gBAClB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,SAAiB,EACjB,QAAgB,EAChB,UAAkB,EAClB,EAAE,CACF,GAAG,SAAS,IAAI,eAAe,eAAe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,UAAU,kBAAkB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC;AAEjJ;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAW,EAAE,CAC3E,IAAI,MAAM,CACR,8CAA8C,SAAS,KAAK,EAC5D,GAAG,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,4EAA4E;AAC5E,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE,CAC7D,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,IAAY,EACZ,QAAgB,EAChB,EAAe,EACN,EAAE;IACX,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,MAAM,gBAAgB,GAAG,CACvB,SAAiB,EACjB,UAAkB,EAClB,KAAa,EACb,EAAE;QACF,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QACpC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,WAAW,KAAK,CAAC,CAAC;YAAE,OAAO;QAC/B,MAAM,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;QAC5C,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO;QACvB,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,wEAAwE;QACxE,wEAAwE;QACxE,uCAAuC;QACvC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC;IAEF,8DAA8D;IAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAC3B,2DAA2D,CAC5D,EAAE,CAAC;QACF,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAC3B,2DAA2D,CAC5D,EAAE,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,sDAAsD;IACtD,0DAA0D;IAC1D,qDAAqD;IACrD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAC3B,sFAAsF,CACvF,EAAE,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YAAE,SAAS;QACvE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\nimport type MagicString from 'magic-string';\n\n/** Stable key shared between transform output and runtime resolution. */\nexport const SOURCE_META_KEY = '@lit-labs/vite-plugin-lit#source';\n\n/**\n * The expression string used in generated code to reference the shared\n * symbol at runtime.\n */\nexport const SOURCE_META_SYM = `Symbol.for('${SOURCE_META_KEY}')`;\n\nexport interface InjectedSourceMeta {\n  filePath: string;\n  lineNumber: number;\n  componentName?: string;\n}\n\n/** 1-based line number for an index in source text. */\nexport const lineNumberAt = (code: string, index: number): number =>\n  code.slice(0, index).split('\\n').length;\n\n/**\n * Finds the index after the closing `}` of a class body starting at\n * `classStart`. Skips braces inside strings, comments, regex literals, and\n * template literals — including code in `${…}` interpolations, where nested\n * templates (Lit's `html\\`…\\`` inside `.map()` etc.) recurse arbitrarily.\n */\nconst findClassBodyEnd = (code: string, classStart: number): number => {\n  const open = code.indexOf('{', classStart);\n  if (open === -1) return -1;\n  // Brace depth of the code scope currently being scanned. Entering a `${…}`\n  // interpolation pushes the enclosing scope's depth and restarts at 1 (the\n  // `${` counts as the open brace); balancing it pops back into the template.\n  let depth = 1;\n  const interpolationStack: number[] = [];\n  let inTemplate = false;\n  let i = open + 1;\n  while (i < code.length) {\n    const ch = code[i];\n    if (inTemplate) {\n      if (ch === '\\\\') {\n        i += 2;\n        continue;\n      }\n      if (ch === '`') {\n        inTemplate = false;\n        i++;\n        continue;\n      }\n      if (ch === '$' && code[i + 1] === '{') {\n        interpolationStack.push(depth);\n        depth = 1;\n        inTemplate = false;\n        i += 2;\n        continue;\n      }\n      i++;\n      continue;\n    }\n    if (ch === '\"' || ch === \"'\") {\n      const quote = ch;\n      i++;\n      while (i < code.length && code[i] !== quote) {\n        if (code[i] === '\\\\') i++;\n        i++;\n      }\n      i++;\n      continue;\n    }\n    if (ch === '`') {\n      inTemplate = true;\n      i++;\n      continue;\n    }\n    if (ch === '/') {\n      const next = code[i + 1];\n      if (next === '/') {\n        i = code.indexOf('\\n', i);\n        if (i === -1) return -1;\n        continue;\n      }\n      if (next === '*') {\n        i = code.indexOf('*/', i + 2);\n        if (i === -1) return -1;\n        i += 2;\n        continue;\n      }\n      // Regex literal vs division: scan back over whitespace to the last\n      // significant char — a regex can only follow an operator, opening\n      // punctuation, or a keyword like `return`. `a / b` has an identifier\n      // there, so it's division and scans on as plain code.\n      let j = i - 1;\n      while (j >= 0 && /\\s/.test(code[j])) j--;\n      const prev = j >= 0 ? code[j] : '';\n      const regexPossible =\n        j < 0 ||\n        /[=:(,+\\-!&|?{}[;]/.test(prev) ||\n        /(?:^|[^\\w$])(?:return|typeof|case|instanceof|in|of|new|delete|void|throw|do|else|yield|await)$/.test(\n          code.slice(Math.max(0, j - 11), j + 1)\n        );\n      if (regexPossible) {\n        let k = i + 1;\n        let inCharClass = false;\n        while (\n          k < code.length &&\n          code[k] !== '\\n' &&\n          (inCharClass || code[k] !== '/')\n        ) {\n          if (code[k] === '\\\\') k++;\n          else if (code[k] === '[') inCharClass = true;\n          else if (code[k] === ']') inCharClass = false;\n          k++;\n        }\n        if (code[k] === '/') {\n          i = k + 1;\n          continue;\n        }\n        // No closing `/` before the line ends — not a regex after all.\n      }\n    }\n    if (ch === '{') {\n      depth++;\n    } else if (ch === '}') {\n      depth--;\n      if (depth === 0) {\n        const enclosing = interpolationStack.pop();\n        if (enclosing === undefined) {\n          return i + 1;\n        }\n        depth = enclosing;\n        inTemplate = true;\n      }\n    }\n    i++;\n  }\n  return -1;\n};\n\nconst makeAssignment = (\n  className: string,\n  filePath: string,\n  lineNumber: number\n) =>\n  `${className}[${SOURCE_META_SYM}]={filePath:${JSON.stringify(filePath)},lineNumber:${lineNumber},componentName:${JSON.stringify(className)}};`;\n\n/**\n * True when `className` is declared at module top level (column 0). Nested\n * declarations are skipped deliberately: the metadata assignment for this path\n * is appended at the end of the module, where a function/block-scoped binding\n * would not be in scope (a `ReferenceError` at module evaluation).\n */\nconst isClassDeclaredInModule = (code: string, className: string): boolean =>\n  new RegExp(\n    `^(?:export\\\\s+)?(?:class|let|const|var)\\\\s+${className}\\\\b`,\n    'm'\n  ).test(code);\n\n/** True when `index` starts a line (module top level in emitted output). */\nconst isAtLineStart = (code: string, index: number): boolean =>\n  index === 0 || code[index - 1] === '\\n';\n\n/**\n * Injects component source metadata onto custom element class constructors.\n * Returns whether any injection was made.\n */\nexport const injectSourceMeta = (\n  code: string,\n  filePath: string,\n  ms: MagicString\n): boolean => {\n  if (code.includes(SOURCE_META_SYM)) {\n    return false;\n  }\n  let changed = false;\n  const injected = new Set<string>();\n\n  const injectAtClassEnd = (\n    className: string,\n    matchIndex: number,\n    match: string\n  ) => {\n    if (injected.has(className)) return;\n    const classOffset = match.indexOf('class');\n    if (classOffset === -1) return;\n    const classStart = matchIndex + classOffset;\n    const end = findClassBodyEnd(code, classStart);\n    if (end === -1) return;\n    // Report the match start (the `@customElement` decorator) rather than the\n    // `class` keyword, so the overlay points at the top of the component.\n    const line = lineNumberAt(code, matchIndex);\n    // Insert right after the class body so the assignment lives in the same\n    // scope as the declaration — appending at module end breaks for a class\n    // declared inside a function or block.\n    ms.appendLeft(end, '\\n' + makeAssignment(className, filePath, line));\n    injected.add(className);\n    changed = true;\n  };\n\n  // @customElement(...) class Foo (any whitespace between them)\n  for (const m of code.matchAll(\n    /@customElement\\s*\\([^)]*\\)\\s+(?:export\\s+)?class\\s+(\\w+)/g\n  )) {\n    injectAtClassEnd(m[1], m.index, m[0]);\n  }\n\n  // customElements.define('tag', ClassName)\n  for (const m of code.matchAll(\n    /customElements\\.define\\s*\\(\\s*['\"][^'\"]+['\"]\\s*,\\s*(\\w+)/g\n  )) {\n    const className = m[1];\n    if (injected.has(className) || !isClassDeclaredInModule(code, className)) {\n      continue;\n    }\n    const line = lineNumberAt(code, m.index);\n    ms.append('\\n' + makeAssignment(className, filePath, line));\n    injected.add(className);\n    changed = true;\n  }\n\n  // TypeScript experimental-decorators / esbuild output\n  // e.g. `Foo = __decorateClass([customElement(...)], Foo)`\n  //       `Foo = _decorate([customElement(...)], Foo)`\n  for (const m of code.matchAll(\n    /(\\w+)\\s*=\\s*__decorate\\w*\\(\\s*\\[[\\s\\S]*?customElement\\s*\\([^)]*\\)[\\s\\S]*?\\],\\s*\\1\\)/g\n  )) {\n    const className = m[1];\n    if (injected.has(className) || !isAtLineStart(code, m.index)) continue;\n    const line = lineNumberAt(code, m.index);\n    ms.append('\\n' + makeAssignment(className, filePath, line));\n    injected.add(className);\n    changed = true;\n  }\n\n  return changed;\n};\n"]}
+{"version":3,"file":"source-meta.js","sourceRoot":"","sources":["../src/lib/source-meta.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAElE;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,eAAe,eAAe,IAAI,CAAC;AAQlE,uDAAuD;AACvD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,KAAa,EAAU,EAAE,CAClE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;AAE1C;;;;;;;;GAQG;AACH,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,UAAkB,EAAU,EAAE;IACrE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC3C,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBACzC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,EAAE,CAAC;gBAC1B,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7C,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7C,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC;YACxB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,CAAC,CAAC;YAC1B,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAClD,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAClD,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7C,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,UAAkB,EAAU,EAAE;IACpE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC;IAC3B,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACjB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,UAAU,GAAG,KAAK,CAAC;gBACnB,CAAC,EAAE,CAAC;gBACJ,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACtC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC/B,KAAK,GAAG,CAAC,CAAC;gBACV,UAAU,GAAG,KAAK,CAAC;gBACnB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;oBAAE,CAAC,EAAE,CAAC;gBAC1B,CAAC,EAAE,CAAC;YACN,CAAC;YACD,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,UAAU,GAAG,IAAI,CAAC;YAClB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC1B,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC;gBACxB,SAAS;YACX,CAAC;YACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACjB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9B,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAE,OAAO,CAAC,CAAC,CAAC;gBACxB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,mEAAmE;YACnE,kEAAkE;YAClE,qEAAqE;YACrE,sDAAsD;YACtD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,MAAM,aAAa,GACjB,CAAC,GAAG,CAAC;gBACL,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC9B,gGAAgG,CAAC,IAAI,CACnG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CACvC,CAAC;YACJ,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,IAAI,WAAW,GAAG,KAAK,CAAC;gBACxB,OACE,CAAC,GAAG,IAAI,CAAC,MAAM;oBACf,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;oBAChB,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,EAChC,CAAC;oBACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,CAAC,EAAE,CAAC;yBACrB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,WAAW,GAAG,IAAI,CAAC;yBACxC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;wBAAE,WAAW,GAAG,KAAK,CAAC;oBAC9C,CAAC,EAAE,CAAC;gBACN,CAAC;gBACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACpB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACV,SAAS;gBACX,CAAC;gBACD,+DAA+D;YACjE,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACtB,KAAK,EAAE,CAAC;YACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC;gBAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,OAAO,CAAC,GAAG,CAAC,CAAC;gBACf,CAAC;gBACD,KAAK,GAAG,SAAS,CAAC;gBAClB,UAAU,GAAG,IAAI,CAAC;YACpB,CAAC;QACH,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,SAAiB,EACjB,QAAgB,EAChB,UAAkB,EAClB,EAAE,CACF,GAAG,SAAS,IAAI,eAAe,eAAe,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,eAAe,UAAU,kBAAkB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC;AAEjJ;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAW,EAAE,CAC3E,IAAI,MAAM,CACR,8CAA8C,SAAS,KAAK,EAC5D,GAAG,CACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,4EAA4E;AAC5E,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE,CAC7D,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,IAAY,EACZ,QAAgB,EAChB,EAAe,EACN,EAAE;IACX,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAEnC,MAAM,gBAAgB,GAAG,CACvB,SAAiB,EACjB,UAAkB,EAClB,KAAa,EACb,EAAE;QACF,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO;QACpC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,WAAW,KAAK,CAAC,CAAC;YAAE,OAAO;QAC/B,MAAM,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;QAC5C,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/C,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,OAAO;QACvB,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5C,wEAAwE;QACxE,wEAAwE;QACxE,uCAAuC;QACvC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC;IAEF,8DAA8D;IAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAC3B,2DAA2D,CAC5D,EAAE,CAAC;QACF,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAC3B,2DAA2D,CAC5D,EAAE,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACzE,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,sDAAsD;IACtD,0DAA0D;IAC1D,qDAAqD;IACrD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAC3B,sFAAsF,CACvF,EAAE,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YAAE,SAAS;QACvE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QACzC,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC","sourcesContent":["/**\n * @license\n * Copyright 2026 Google LLC\n * SPDX-License-Identifier: BSD-3-Clause\n */\n\nimport type MagicString from 'magic-string';\n\n/** Stable key shared between transform output and runtime resolution. */\nexport const SOURCE_META_KEY = '@lit-labs/vite-plugin-lit#source';\n\n/**\n * The expression string used in generated code to reference the shared\n * symbol at runtime.\n */\nexport const SOURCE_META_SYM = `Symbol.for('${SOURCE_META_KEY}')`;\n\nexport interface InjectedSourceMeta {\n  filePath: string;\n  lineNumber: number;\n  componentName?: string;\n}\n\n/** 1-based line number for an index in source text. */\nexport const lineNumberAt = (code: string, index: number): number =>\n  code.slice(0, index).split('\\n').length;\n\n/**\n * Finds the `{` that opens the body of the class starting at `classStart`:\n * the first one at the top level of the heading. The heading can hold braces\n * of its own — type literals in generic arguments\n * (`extends Dialog<{open: boolean}>`), options passed to a mixin\n * (`extends Mixin(Base, {shadow: true})`) — so anything nested in `<…>`,\n * `(…)` or `[…]` is skipped, along with strings and comments. The `>` of an\n * arrow type (`() => void`) doesn't close a `<`.\n */\nconst findClassBodyOpen = (code: string, classStart: number): number => {\n  let depth = 0;\n  for (let i = classStart + 'class'.length; i < code.length; i++) {\n    const ch = code[i];\n    if (ch === '\"' || ch === \"'\" || ch === '`') {\n      i++;\n      while (i < code.length && code[i] !== ch) {\n        if (code[i] === '\\\\') i++;\n        i++;\n      }\n    } else if (ch === '/' && code[i + 1] === '/') {\n      i = code.indexOf('\\n', i);\n      if (i === -1) return -1;\n    } else if (ch === '/' && code[i + 1] === '*') {\n      i = code.indexOf('*/', i + 2);\n      if (i === -1) return -1;\n      i++;\n    } else if (ch === '{') {\n      if (depth === 0) return i;\n      depth++;\n    } else if (ch === '(' || ch === '[' || ch === '<') {\n      depth++;\n    } else if (ch === '}' || ch === ')' || ch === ']') {\n      depth--;\n    } else if (ch === '>' && code[i - 1] !== '=') {\n      depth--;\n    }\n  }\n  return -1;\n};\n\n/**\n * Finds the index after the closing `}` of a class body starting at\n * `classStart`. Skips braces inside strings, comments, regex literals, and\n * template literals — including code in `${…}` interpolations, where nested\n * templates (Lit's `html\\`…\\`` inside `.map()` etc.) recurse arbitrarily.\n */\nconst findClassBodyEnd = (code: string, classStart: number): number => {\n  const open = findClassBodyOpen(code, classStart);\n  if (open === -1) return -1;\n  // Brace depth of the code scope currently being scanned. Entering a `${…}`\n  // interpolation pushes the enclosing scope's depth and restarts at 1 (the\n  // `${` counts as the open brace); balancing it pops back into the template.\n  let depth = 1;\n  const interpolationStack: number[] = [];\n  let inTemplate = false;\n  let i = open + 1;\n  while (i < code.length) {\n    const ch = code[i];\n    if (inTemplate) {\n      if (ch === '\\\\') {\n        i += 2;\n        continue;\n      }\n      if (ch === '`') {\n        inTemplate = false;\n        i++;\n        continue;\n      }\n      if (ch === '$' && code[i + 1] === '{') {\n        interpolationStack.push(depth);\n        depth = 1;\n        inTemplate = false;\n        i += 2;\n        continue;\n      }\n      i++;\n      continue;\n    }\n    if (ch === '\"' || ch === \"'\") {\n      const quote = ch;\n      i++;\n      while (i < code.length && code[i] !== quote) {\n        if (code[i] === '\\\\') i++;\n        i++;\n      }\n      i++;\n      continue;\n    }\n    if (ch === '`') {\n      inTemplate = true;\n      i++;\n      continue;\n    }\n    if (ch === '/') {\n      const next = code[i + 1];\n      if (next === '/') {\n        i = code.indexOf('\\n', i);\n        if (i === -1) return -1;\n        continue;\n      }\n      if (next === '*') {\n        i = code.indexOf('*/', i + 2);\n        if (i === -1) return -1;\n        i += 2;\n        continue;\n      }\n      // Regex literal vs division: scan back over whitespace to the last\n      // significant char — a regex can only follow an operator, opening\n      // punctuation, or a keyword like `return`. `a / b` has an identifier\n      // there, so it's division and scans on as plain code.\n      let j = i - 1;\n      while (j >= 0 && /\\s/.test(code[j])) j--;\n      const prev = j >= 0 ? code[j] : '';\n      const regexPossible =\n        j < 0 ||\n        /[=:(,+\\-!&|?{}[;]/.test(prev) ||\n        /(?:^|[^\\w$])(?:return|typeof|case|instanceof|in|of|new|delete|void|throw|do|else|yield|await)$/.test(\n          code.slice(Math.max(0, j - 11), j + 1)\n        );\n      if (regexPossible) {\n        let k = i + 1;\n        let inCharClass = false;\n        while (\n          k < code.length &&\n          code[k] !== '\\n' &&\n          (inCharClass || code[k] !== '/')\n        ) {\n          if (code[k] === '\\\\') k++;\n          else if (code[k] === '[') inCharClass = true;\n          else if (code[k] === ']') inCharClass = false;\n          k++;\n        }\n        if (code[k] === '/') {\n          i = k + 1;\n          continue;\n        }\n        // No closing `/` before the line ends — not a regex after all.\n      }\n    }\n    if (ch === '{') {\n      depth++;\n    } else if (ch === '}') {\n      depth--;\n      if (depth === 0) {\n        const enclosing = interpolationStack.pop();\n        if (enclosing === undefined) {\n          return i + 1;\n        }\n        depth = enclosing;\n        inTemplate = true;\n      }\n    }\n    i++;\n  }\n  return -1;\n};\n\nconst makeAssignment = (\n  className: string,\n  filePath: string,\n  lineNumber: number\n) =>\n  `${className}[${SOURCE_META_SYM}]={filePath:${JSON.stringify(filePath)},lineNumber:${lineNumber},componentName:${JSON.stringify(className)}};`;\n\n/**\n * True when `className` is declared at module top level (column 0). Nested\n * declarations are skipped deliberately: the metadata assignment for this path\n * is appended at the end of the module, where a function/block-scoped binding\n * would not be in scope (a `ReferenceError` at module evaluation).\n */\nconst isClassDeclaredInModule = (code: string, className: string): boolean =>\n  new RegExp(\n    `^(?:export\\\\s+)?(?:class|let|const|var)\\\\s+${className}\\\\b`,\n    'm'\n  ).test(code);\n\n/** True when `index` starts a line (module top level in emitted output). */\nconst isAtLineStart = (code: string, index: number): boolean =>\n  index === 0 || code[index - 1] === '\\n';\n\n/**\n * Injects component source metadata onto custom element class constructors.\n * Returns whether any injection was made.\n */\nexport const injectSourceMeta = (\n  code: string,\n  filePath: string,\n  ms: MagicString\n): boolean => {\n  if (code.includes(SOURCE_META_SYM)) {\n    return false;\n  }\n  let changed = false;\n  const injected = new Set<string>();\n\n  const injectAtClassEnd = (\n    className: string,\n    matchIndex: number,\n    match: string\n  ) => {\n    if (injected.has(className)) return;\n    const classOffset = match.indexOf('class');\n    if (classOffset === -1) return;\n    const classStart = matchIndex + classOffset;\n    const end = findClassBodyEnd(code, classStart);\n    if (end === -1) return;\n    // Report the match start (the `@customElement` decorator) rather than the\n    // `class` keyword, so the overlay points at the top of the component.\n    const line = lineNumberAt(code, matchIndex);\n    // Insert right after the class body so the assignment lives in the same\n    // scope as the declaration — appending at module end breaks for a class\n    // declared inside a function or block.\n    ms.appendLeft(end, '\\n' + makeAssignment(className, filePath, line));\n    injected.add(className);\n    changed = true;\n  };\n\n  // @customElement(...) class Foo (any whitespace between them)\n  for (const m of code.matchAll(\n    /@customElement\\s*\\([^)]*\\)\\s+(?:export\\s+)?class\\s+(\\w+)/g\n  )) {\n    injectAtClassEnd(m[1], m.index, m[0]);\n  }\n\n  // customElements.define('tag', ClassName)\n  for (const m of code.matchAll(\n    /customElements\\.define\\s*\\(\\s*['\"][^'\"]+['\"]\\s*,\\s*(\\w+)/g\n  )) {\n    const className = m[1];\n    if (injected.has(className) || !isClassDeclaredInModule(code, className)) {\n      continue;\n    }\n    const line = lineNumberAt(code, m.index);\n    ms.append('\\n' + makeAssignment(className, filePath, line));\n    injected.add(className);\n    changed = true;\n  }\n\n  // TypeScript experimental-decorators / esbuild output\n  // e.g. `Foo = __decorateClass([customElement(...)], Foo)`\n  //       `Foo = _decorate([customElement(...)], Foo)`\n  for (const m of code.matchAll(\n    /(\\w+)\\s*=\\s*__decorate\\w*\\(\\s*\\[[\\s\\S]*?customElement\\s*\\([^)]*\\)[\\s\\S]*?\\],\\s*\\1\\)/g\n  )) {\n    const className = m[1];\n    if (injected.has(className) || !isAtLineStart(code, m.index)) continue;\n    const line = lineNumberAt(code, m.index);\n    ms.append('\\n' + makeAssignment(className, filePath, line));\n    injected.add(className);\n    changed = true;\n  }\n\n  return changed;\n};\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oddsquad/vite-plugin-lit",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Vite plugin providing true HMR for Lit components, plus CSS helpers and a DevTools panel",
   "license": "BSD-3-Clause",
   "author": "Oddsquad (based on @lit-labs/vite-hmr by Google LLC)",
@@ -44,13 +44,13 @@
     "url": "https://github.com/oddcelot/vite-plugin-lit/issues"
   },
   "dependencies": {
-    "devframe": "1.0.0",
+    "devframe": "^1.1.0",
     "es-module-lexer": "^3.0.2",
     "launch-editor": "^2.14.1",
     "magic-string": "^1.4.1"
   },
   "peerDependencies": {
-    "@devframes/agentic": "1.0.0",
+    "@devframes/agentic": "^1.0.0",
     "@vitejs/devtools-kit": "^0.7.5",
     "cac": "^7.0.0",
     "lightningcss": "^1.30.0",
@@ -72,14 +72,14 @@
     }
   },
   "devDependencies": {
-    "@devframes/agentic": "1.0.0",
-    "@devframes/service-open": "1.0.0",
+    "@devframes/agentic": "1.1.0",
+    "@devframes/service-open": "1.1.0",
     "@lit-labs/signals": "^0.3.0",
     "@lit-labs/virtualizer": "^2.1.1",
     "@lit/context": "^1.1.6",
     "@lit/task": "^1.0.3",
     "@types/node": "^26.6.1",
-    "@vitejs/devtools-kit": "0.7.5",
+    "@vitejs/devtools-kit": "0.7.6",
     "cac": "7.0.0",
     "git-cliff": "^2.13.1",
     "lightningcss": "^1.33.0",