@pikku/bun-server 0.12.9 → 0.12.11

package/CHANGELOG.md

@@ -1,5 +1,73 @@
 # @pikku/bun-server
 
+## 0.12.11
+
+### Patch Changes
+
+- 3d75643: Run the app's server lifecycle in generated entries, and make an out-of-band
+  account signable-in.
+
+  `pikkuServerLifecycle` was only ever called by `pikku dev` and `pikku serve`, so
+  an app that seeds its first admin account, probes a dependency, or warms a cache
+  in `beforeStart` did all of that in development and silently skipped it
+  everywhere it was actually deployed. The standalone entry and the shared node
+  server entry — the one behind every `target: 'server'` unit — now import the
+  app's lifecycle and call it: `beforeStart` after `init` and before the port
+  opens, so work that must finish before the first request has, `afterStart` once
+  the server is listening, and the stop hooks handed to the signal handler that
+  already owns shutdown rather than a second listener racing it. Each shutdown
+  step is isolated from the ones after it, so a hook that throws is logged without
+  taking the service teardown and the socket close down with it.
+
+  Separately, `createAuthUser` and `setAuthUserPassword` wrote credential accounts
+  with no `issuer`. From better-auth 1.7 a credential account is matched by its
+  issuer as well as its provider, so those accounts were invisible to sign-in,
+  `updatePassword` and `findCredentialAccount` — a user who plainly existed in the
+  table was reported as "user not found". The field is written only when the
+  resolved schema has it, so older better-auth keeps working, and
+  `setAuthUserPassword` repairs an account that predates the fix.
+
+## 0.12.10
+
+### Patch Changes
+
+- 80eb5c0: Generate a desktop shell from `pikku deploy apply --desktop`
+
+  `pikku deploy apply --provider standalone --runtime bun --desktop` now emits a
+  `src-tauri/` crate that ships the compiled binary as a sidecar and opens a
+  window on the server's own HTTP origin, so cookies, CORS and OAuth behave
+  exactly as they do in a browser. Regeneration is idempotent and leaves an
+  edited file alone rather than overwriting it.
+
+  `--desktop-url https://app.example.com` builds the other shape: a shell that
+  points at an already-deployed server. Nothing is bundled — no sidecar, no
+  binary, and so no bun runtime to compile one — and the window is declared in
+  `tauri.conf.json` rather than opened from Rust, because the origin is known up
+  front. The url can also live in `pikku.config.json` as `deploy.desktop.url`,
+  alongside `deploy.desktop.identifier`.
+
+  Supporting changes: `SERVER_READY_MARKER` moved to `@pikku/deploy` (the CLI
+  re-exports it from its old path), both HTTP runtimes expose the port they
+  actually bound so `--port 0` reports a real port, and the generated server
+  entry exits when its parent process goes away.
+
+- 80eb5c0: feat: serve a built frontend from the pikku server's own origin
+
+  A new `frontend` key in `pikku.config.json` names a directory of built
+  frontend output. `pikku serve` mounts it, and `pikku deploy` ships it inside
+  the distributable — into a directory beside the bundle for the node runtime,
+  and embedded in the binary for a `bun build --compile` standalone. `pikku dev`
+  deliberately ignores it and says so, because the frontend's own dev server owns
+  that job.
+
+  Pikku reads the frontend's output and never builds it, so an unbuilt directory
+  fails with a message that says which build to run rather than booting a server
+  that answers every page with a 404.
+
+- Updated dependencies [80eb5c0]
+- Updated dependencies [2252016]
+  - @pikku/core@0.12.98
+
 ## 0.12.9
 
 ### Patch Changes

package/dist/pikku-bun-server.d.ts

@@ -7,6 +7,7 @@ export type StaticMount = {
     urlPrefix: string;
     directory: string;
     spaFallback?: boolean;
+    assets?: Record<string, string>;
 };
 export type BunServerConfig = CoreConfig & {
     port: number;
@@ -25,6 +26,10 @@ export type PikkuBunServerOptions = RunHTTPWiringOptions & {
     mcpPath?: string;
     contentSigningJWT?: JWTService;
 };
+export type ShutdownHooks = {
+    beforeStop?: () => void | Promise<void>;
+    afterStop?: () => void | Promise<void>;
+};
 export declare class PikkuBunServer {
     private readonly config;
     private readonly logger;
@@ -40,8 +45,11 @@ export declare class PikkuBunServer {
     private initMCP;
     start(): Promise<void>;
     get port(): number;
-    private serveStaticMounts;
+    private matchesPrefix;
+    private staticMountCandidates;
+    private serveStaticFiles;
+    private serveSpaFallback;
     private resolveStaticFile;
     stop(): Promise<void>;
-    enableExitOnSignals(): void;
+    enableExitOnSignals(hooks?: ShutdownHooks): void;
 }

package/dist/pikku-bun-server.js

@@ -118,7 +118,7 @@ export class PikkuBunServer {
                 if (contentResponse) {
                     return contentResponse;
                 }
-                const staticResponse = await this.serveStaticMounts(req);
+                const staticResponse = await this.serveStaticFiles(req);
                 if (staticResponse) {
                     return staticResponse;
                 }
@@ -128,7 +128,14 @@ export class PikkuBunServer {
                     respondWith404: true,
                     ...options,
                 });
-                return pikkuRes.toResponse();
+                const response = pikkuRes.toResponse();
+                if (response.status === 404) {
+                    const fallback = await this.serveSpaFallback(req);
+                    if (fallback) {
+                        return fallback;
+                    }
+                }
+                return response;
             },
             websocket: {
                 open: (ws) => {
@@ -169,48 +176,82 @@ export class PikkuBunServer {
             },
         });
         eventHub.setServer(this.server);
-        logger.info(`pikku-bun-server: listening on http://${config.hostname ?? 'localhost'}:${config.port}`);
+        logger.info(`pikku-bun-server: listening on http://${config.hostname ?? 'localhost'}:${this.port}`);
     }
     get port() {
         return this.server?.port ?? this.config.port;
     }
-    async serveStaticMounts(req) {
+    matchesPrefix(pathname, prefix) {
+        if (prefix === '' || prefix === '/') {
+            return true;
+        }
+        return pathname === prefix || pathname.startsWith(`${prefix}/`);
+    }
+    staticMountCandidates(req) {
         const mounts = this.config.staticMounts;
         if (!mounts?.length || (req.method !== 'GET' && req.method !== 'HEAD')) {
             return null;
         }
         const pathname = decodeURIComponent(new URL(req.url).pathname);
-        for (const mount of mounts) {
-            if (pathname !== mount.urlPrefix &&
-                !pathname.startsWith(`${mount.urlPrefix}/`)) {
-                continue;
+        return {
+            pathname,
+            mounts: mounts.filter((mount) => this.matchesPrefix(pathname, mount.urlPrefix)),
+        };
+    }
+    async serveStaticFiles(req) {
+        const candidates = this.staticMountCandidates(req);
+        if (!candidates) {
+            return null;
+        }
+        for (const mount of candidates.mounts) {
+            const key = candidates.pathname
+                .slice(mount.urlPrefix.length)
+                .replace(/^\/+/, '');
+            const result = await this.resolveStaticFile(mount, key);
+            if (result === 'rejected') {
+                return new Response('Not Found', { status: 404 });
             }
-            const key = pathname.slice(mount.urlPrefix.length).replace(/^\/+/, '');
-            const file = await this.resolveStaticFile(mount, key);
-            if (file) {
-                return new Response(req.method === 'HEAD' ? null : file);
+            if (result) {
+                return new Response(req.method === 'HEAD' ? null : result);
             }
-            if (mount.spaFallback) {
-                const index = await this.resolveStaticFile(mount, 'index.html');
-                if (index) {
-                    return new Response(req.method === 'HEAD' ? null : index);
-                }
+        }
+        return null;
+    }
+    async serveSpaFallback(req) {
+        const candidates = this.staticMountCandidates(req);
+        if (!candidates) {
+            return null;
+        }
+        for (const mount of candidates.mounts) {
+            if (!mount.spaFallback) {
+                continue;
+            }
+            const index = await this.resolveStaticFile(mount, 'index.html');
+            if (index && index !== 'rejected') {
+                return new Response(req.method === 'HEAD' ? null : index);
             }
-            return new Response('Not Found', { status: 404 });
         }
         return null;
     }
     async resolveStaticFile(mount, key) {
+        if (mount.assets) {
+            const assetPath = mount.assets[key === '' ? 'index.html' : key];
+            if (!assetPath) {
+                return null;
+            }
+            const asset = Bun.file(assetPath);
+            return (await asset.exists()) ? asset : null;
+        }
         const directory = resolve(mount.directory);
         const targetPath = key === '' ? resolve(directory, 'index.html') : resolve(directory, key);
         if (targetPath !== directory && !targetPath.startsWith(`${directory}/`)) {
-            return null;
+            return 'rejected';
         }
         let file = Bun.file(targetPath);
         if (!(await file.exists())) {
             const indexPath = resolve(targetPath, 'index.html');
             if (!indexPath.startsWith(`${directory}/`)) {
-                return null;
+                return 'rejected';
             }
             file = Bun.file(indexPath);
             if (!(await file.exists())) {
@@ -223,12 +264,22 @@ export class PikkuBunServer {
         await this.server?.stop();
         this.server = null;
     }
-    enableExitOnSignals() {
+    enableExitOnSignals(hooks) {
+        const phase = async (name, run) => {
+            try {
+                await run();
+            }
+            catch (error) {
+                this.logger.error(`pikku-bun-server: ${name} failed during shutdown`, error);
+            }
+        };
         const shutdown = async (signal) => {
             this.logger.info(`pikku-bun-server: ${signal} received, stopping`);
             try {
-                await stopSingletonServices();
-                await this.stop();
+                await phase('beforeStop', () => hooks?.beforeStop?.());
+                await phase('stopping singleton services', () => stopSingletonServices());
+                await phase('stopping the server', () => this.stop());
+                await phase('afterStop', () => hooks?.afterStop?.());
             }
             finally {
                 process.exit(0);

package/dist/pikku-bun-server.js.map

@@ -1 +1 @@
-{"version":3,"file":"pikku-bun-server.js","sourceRoot":"","sources":["../src/pikku-bun-server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAEzD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EACL,gCAAgC,GAEjC,MAAM,oDAAoD,CAAA;AAC3D,OAAO,EACL,SAAS,EACT,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,SAAS,IAAI,iBAAiB,GAE/B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAEtD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAuD/D,MAAM,cAAc,GAAG,CAAC,IAAa,EAAW,EAAE,CAChD,CAAC,CACC,OAAO,IAAI,KAAK,QAAQ;IACxB,IAAI,YAAY,WAAW;IAC3B,IAAI,YAAY,UAAU;IAC1B,IAAI,YAAY,SAAS;IACzB,IAAI,YAAY,WAAW;IAC3B,IAAI,YAAY,UAAU;IAC1B,IAAI,YAAY,WAAW;IAC3B,IAAI,YAAY,UAAU;IAC1B,IAAI,YAAY,YAAY;IAC5B,IAAI,YAAY,YAAY,CAC7B,CAAA;AAQH,MAAM,OAAO,cAAc;IAUN;IACA;IAVX,MAAM,GAA6B,IAAI,CAAA;IAC9B,QAAQ,CAAoB;IAC5B,OAAO,CAAsB;IAC7B,OAAO,CAAmC;IAC1C,OAAO,CAAQ;IACxB,UAAU,CAA0C;IAC3C,YAAY,CAA6B;IAE1D,YACmB,MAAuB,EACvB,MAAc,EAC/B,UAAiC,EAAE;QAFlB,WAAM,GAAN,MAAM,CAAiB;QACvB,WAAM,GAAN,MAAM,CAAQ;QAG/B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,WAAW,EAAE,GACrE,OAAO,CAAA;QACT,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,kBAAkB,EAAE,CAAA;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,MAAM,CAAA;QAChC,IAAI,CAAC,OAAO,GAAG,WAAW,CAAA;QAC1B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO;YAChC,CAAC,CAAC,gCAAgC,CAAC;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM;gBAGN,MAAM,EAAE,GAAG,EAAE,CACX,iBAAiB;oBACjB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,GAAG;aACxD,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,OAAO,CAAA;QAC5D,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAClE,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAA;YACtE,MAAM,SAAS,GAAG,IAAI,cAAc,CAClC;gBACE,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,OAAO;gBAChB,YAAY,EAAE;oBACZ,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBACtC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;oBAC9C,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;iBAC3C;aACF,EACD,IAAI,CAAC,MAAM,CACZ,CAAA;YACD,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;YACtB,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;YACxE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAA;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gDAAgD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnG,CAAA;QACH,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QAEvE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAS;YAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YAEzB,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;gBAC3B,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;oBAC9D,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,GAAG,CAAC,CAAA;oBAC/C,MAAM,QAAQ,GAAG,IAAI,sBAAsB,EAAE,CAAA;oBAC7C,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC;wBAC3C,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;wBAC9B,OAAO,EAAE,QAAQ;wBACjB,QAAQ,EAAE,QAAQ;wBAClB,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;qBACjC,CAAC,CAAA;oBACF,IAAI,CAAC,cAAc,EAAE,CAAC;wBACpB,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;oBACnD,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAA;oBAClE,IAAI,QAAQ;wBAAE,OAAO,SAAgC,CAAA;oBACrD,OAAO,IAAI,QAAQ,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;gBAClE,CAAC;gBAED,IACE,MAAM,CAAC,eAAe;oBACtB,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,eAAe,EACpD,CAAC;oBACD,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE;wBACjC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;oBAC1C,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;wBAC/D,OAAO,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;oBAC9B,CAAC;gBACH,CAAC;gBAKD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAA;gBACtD,IAAI,eAAe,EAAE,CAAC;oBACpB,OAAO,eAAe,CAAA;gBACxB,CAAC;gBAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;gBACxD,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,cAAc,CAAA;gBACvB,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,GAAG,CAAC,CAAA;gBAC/C,MAAM,QAAQ,GAAG,IAAI,sBAAsB,EAAE,CAAA;gBAC7C,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE;oBAClC,cAAc,EAAE,IAAI;oBACpB,GAAG,OAAO;iBACX,CAAC,CAAA;gBACF,OAAO,QAAQ,CAAC,UAAU,EAAE,CAAA;YAC9B,CAAC;YAED,SAAS,EAAE;gBACT,IAAI,EAAE,CAAC,EAA2B,EAAE,EAAE;oBACpC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAA;oBAClC,cAAc,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE;wBACrC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAY,CAAC,CAAA;oBACtE,CAAC,CAAC,CAAA;oBACF,cAAc,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,EAAE;wBAC3C,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;oBACrB,CAAC,CAAC,CAAA;oBACF,cAAc,CAAC,eAAe,CAAC,GAAG,EAAE;wBAClC,EAAE,CAAC,KAAK,EAAE,CAAA;oBACZ,CAAC,CAAC,CAAA;oBACF,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;oBACtD,cAAc,CAAC,IAAI,EAAE,CAAA;gBACvB,CAAC;gBAED,OAAO,EAAE,KAAK,EAAE,EAA2B,EAAE,OAAO,EAAE,EAAE;oBACtD,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAA;oBAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;wBAChC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;wBACpD,IAAI,MAAM;4BAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;oBAC7C,CAAC;yBAAM,CAAC;wBACN,MAAM,KAAK,GACT,OAAO,YAAY,WAAW;4BAC5B,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC;4BACzB,CAAC,CAAC,IAAI,UAAU,CACZ,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,UAAU,CACnB,CAAA;wBACP,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;wBACxD,IAAI,MAAM;4BAAE,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;oBAC/C,CAAC;gBACH,CAAC;gBAED,KAAK,EAAE,CAAC,EAA2B,EAAE,EAAE;oBACrC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAA;oBAClC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;oBAClD,cAAc,CAAC,KAAK,EAAE,CAAA;gBACxB,CAAC;aACF;SACF,CAAC,CAAA;QAEF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAA4B,CAAC,CAAA;QACrD,MAAM,CAAC,IAAI,CACT,yCAAyC,MAAM,CAAC,QAAQ,IAAI,WAAW,IAAI,MAAM,CAAC,IAAI,EAAE,CACzF,CAAA;IACH,CAAC;IAED,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAA;IAC9C,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,GAAY;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAA;QACvC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;QAE9D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IACE,QAAQ,KAAK,KAAK,CAAC,SAAS;gBAC5B,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,EAC3C,CAAC;gBACD,SAAQ;YACV,CAAC;YACD,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;YACtE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACrD,IAAI,IAAI,EAAE,CAAC;gBACT,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC1D,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;gBAC/D,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;gBAC3D,CAAC;YACH,CAAC;YACD,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACnD,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,KAAkB,EAClB,GAAW;QAEX,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC1C,MAAM,UAAU,GACd,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACzE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;YACnD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;gBAC3C,OAAO,IAAI,CAAA;YACb,CAAC;YACD,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC1B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;QACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IACpB,CAAC;IAEM,mBAAmB;QACxB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,qBAAqB,CAAC,CAAA;YAClE,IAAI,CAAC;gBACH,MAAM,qBAAqB,EAAE,CAAA;gBAC7B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;YACnB,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;QACH,CAAC,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAChD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;IACpD,CAAC;CACF"}
+{"version":3,"file":"pikku-bun-server.js","sourceRoot":"","sources":["../src/pikku-bun-server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAEzD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EACL,gCAAgC,GAEjC,MAAM,oDAAoD,CAAA;AAC3D,OAAO,EACL,SAAS,EACT,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,kBAAkB,CAAA;AACzB,OAAO,EACL,SAAS,IAAI,iBAAiB,GAE/B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAEtD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAA;AAkE/D,MAAM,cAAc,GAAG,CAAC,IAAa,EAAW,EAAE,CAChD,CAAC,CACC,OAAO,IAAI,KAAK,QAAQ;IACxB,IAAI,YAAY,WAAW;IAC3B,IAAI,YAAY,UAAU;IAC1B,IAAI,YAAY,SAAS;IACzB,IAAI,YAAY,WAAW;IAC3B,IAAI,YAAY,UAAU;IAC1B,IAAI,YAAY,WAAW;IAC3B,IAAI,YAAY,UAAU;IAC1B,IAAI,YAAY,YAAY;IAC5B,IAAI,YAAY,YAAY,CAC7B,CAAA;AAkBH,MAAM,OAAO,cAAc;IAUN;IACA;IAVX,MAAM,GAA6B,IAAI,CAAA;IAC9B,QAAQ,CAAoB;IAC5B,OAAO,CAAsB;IAC7B,OAAO,CAAmC;IAC1C,OAAO,CAAQ;IACxB,UAAU,CAA0C;IAC3C,YAAY,CAA6B;IAE1D,YACmB,MAAuB,EACvB,MAAc,EAC/B,UAAiC,EAAE;QAFlB,WAAM,GAAN,MAAM,CAAiB;QACvB,WAAM,GAAN,MAAM,CAAQ;QAG/B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,WAAW,EAAE,GACrE,OAAO,CAAA;QACT,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,kBAAkB,EAAE,CAAA;QACpD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,MAAM,CAAA;QAChC,IAAI,CAAC,OAAO,GAAG,WAAW,CAAA;QAC1B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO;YAChC,CAAC,CAAC,gCAAgC,CAAC;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM;gBAGN,MAAM,EAAE,GAAG,EAAE,CACX,iBAAiB;oBACjB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,mBAAmB,CAAC,EAAE,GAAG;aACxD,CAAC;YACJ,CAAC,CAAC,SAAS,CAAA;IACf,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACxB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;IACtB,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,MAAM,EAAE,KAAK,GAAG,EAAE,EAAE,SAAS,GAAG,EAAE,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,OAAO,CAAA;QAC5D,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAClE,IAAI,CAAC;YACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAA;YACtE,MAAM,SAAS,GAAG,IAAI,cAAc,CAClC;gBACE,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO;gBAChB,OAAO,EAAE,OAAO;gBAChB,YAAY,EAAE;oBACZ,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBACtC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;oBAC9C,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;iBAC3C;aACF,EACD,IAAI,CAAC,MAAM,CACZ,CAAA;YACD,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;YACtB,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;YACxE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAA;YACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAA;QACtE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gDAAgD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACnG,CAAA;QACH,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QAEvE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAS;YAC9B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YAEzB,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;gBAC3B,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;oBAC9D,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,GAAG,CAAC,CAAA;oBAC/C,MAAM,QAAQ,GAAG,IAAI,sBAAsB,EAAE,CAAA;oBAC7C,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC;wBAC3C,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE;wBAC9B,OAAO,EAAE,QAAQ;wBACjB,QAAQ,EAAE,QAAQ;wBAClB,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;qBACjC,CAAC,CAAA;oBACF,IAAI,CAAC,cAAc,EAAE,CAAC;wBACpB,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;oBACnD,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAA;oBAClE,IAAI,QAAQ;wBAAE,OAAO,SAAgC,CAAA;oBACrD,OAAO,IAAI,QAAQ,CAAC,0BAA0B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;gBAClE,CAAC;gBAED,IACE,MAAM,CAAC,eAAe;oBACtB,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,eAAe,EACpD,CAAC;oBACD,OAAO,IAAI,QAAQ,CAAC,aAAa,EAAE;wBACjC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;qBAChD,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,UAAU,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAA;oBAC1C,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,OAAO,GAAG,CAAC,EAAE,CAAC;wBAC/D,OAAO,MAAM,UAAU,CAAC,GAAG,CAAC,CAAA;oBAC9B,CAAC;gBACH,CAAC;gBAKD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,GAAG,CAAC,CAAA;gBACtD,IAAI,eAAe,EAAE,CAAC;oBACpB,OAAO,eAAe,CAAA;gBACxB,CAAC;gBAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;gBACvD,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,cAAc,CAAA;gBACvB,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,GAAG,CAAC,CAAA;gBAC/C,MAAM,QAAQ,GAAG,IAAI,sBAAsB,EAAE,CAAA;gBAC7C,MAAM,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE;oBAClC,cAAc,EAAE,IAAI;oBACpB,GAAG,OAAO;iBACX,CAAC,CAAA;gBACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAA;gBACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAA;oBACjD,IAAI,QAAQ,EAAE,CAAC;wBACb,OAAO,QAAQ,CAAA;oBACjB,CAAC;gBACH,CAAC;gBACD,OAAO,QAAQ,CAAA;YACjB,CAAC;YAED,SAAS,EAAE;gBACT,IAAI,EAAE,CAAC,EAA2B,EAAE,EAAE;oBACpC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAA;oBAClC,cAAc,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE;wBACrC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAY,CAAC,CAAA;oBACtE,CAAC,CAAC,CAAA;oBACF,cAAc,CAAC,oBAAoB,CAAC,CAAC,IAAI,EAAE,EAAE;wBAC3C,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;oBACrB,CAAC,CAAC,CAAA;oBACF,cAAc,CAAC,eAAe,CAAC,GAAG,EAAE;wBAClC,EAAE,CAAC,KAAK,EAAE,CAAA;oBACZ,CAAC,CAAC,CAAA;oBACF,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;oBACtD,cAAc,CAAC,IAAI,EAAE,CAAA;gBACvB,CAAC;gBAED,OAAO,EAAE,KAAK,EAAE,EAA2B,EAAE,OAAO,EAAE,EAAE;oBACtD,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAA;oBAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;wBAChC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;wBACpD,IAAI,MAAM;4BAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;oBAC7C,CAAC;yBAAM,CAAC;wBACN,MAAM,KAAK,GACT,OAAO,YAAY,WAAW;4BAC5B,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC;4BACzB,CAAC,CAAC,IAAI,UAAU,CACZ,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,UAAU,EAClB,OAAO,CAAC,UAAU,CACnB,CAAA;wBACP,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;wBACxD,IAAI,MAAM;4BAAE,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;oBAC/C,CAAC;gBACH,CAAC;gBAED,KAAK,EAAE,CAAC,EAA2B,EAAE,EAAE;oBACrC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAA;oBAClC,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;oBAClD,cAAc,CAAC,KAAK,EAAE,CAAA;gBACxB,CAAC;aACF;SACF,CAAC,CAAA;QAEF,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,MAA4B,CAAC,CAAA;QACrD,MAAM,CAAC,IAAI,CACT,yCAAyC,MAAM,CAAC,QAAQ,IAAI,WAAW,IAAI,IAAI,CAAC,IAAI,EAAE,CACvF,CAAA;IACH,CAAC;IASD,IAAW,IAAI;QACb,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAA;IAC9C,CAAC;IAEO,aAAa,CAAC,QAAgB,EAAE,MAAc;QAGpD,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAA;IACjE,CAAC;IAMO,qBAAqB,CAC3B,GAAY;QAEZ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAA;QACvC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC9D,OAAO;YACL,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC9B,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAC9C;SACF,CAAA;IACH,CAAC;IAOO,KAAK,CAAC,gBAAgB,CAAC,GAAY;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAA;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ;iBAC5B,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC;iBAC7B,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;YACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACvD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBAI1B,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACnD,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAMO,KAAK,CAAC,gBAAgB,CAAC,GAAY;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAA;QAClD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvB,SAAQ;YACV,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;YAC/D,IAAI,KAAK,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;gBAClC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAQO,KAAK,CAAC,iBAAiB,CAC7B,KAAkB,EAClB,GAAW;QAEX,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO,IAAI,CAAA;YACb,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACjC,OAAO,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC1C,MAAM,UAAU,GACd,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;QACzE,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;YACxE,OAAO,UAAU,CAAA;QACnB,CAAC;QACD,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC/B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;YACnD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;gBAC3C,OAAO,UAAU,CAAA;YACnB,CAAC;YACD,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC1B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAA;YACb,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IAEM,KAAK,CAAC,IAAI;QACf,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAA;QACzB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IACpB,CAAC;IAEM,mBAAmB,CAAC,KAAqB;QAO9C,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,GAA+B,EAAE,EAAE;YACpE,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAA;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,qBAAqB,IAAI,yBAAyB,EAClD,KAAK,CACN,CAAA;YACH,CAAC;QACH,CAAC,CAAA;QACD,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,qBAAqB,CAAC,CAAA;YAClE,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;gBACtD,MAAM,KAAK,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAC9C,qBAAqB,EAAE,CACxB,CAAA;gBACD,MAAM,KAAK,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;gBACrD,MAAM,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAA;YACtD,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;QACH,CAAC,CAAA;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAChD,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;IACpD,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pikku/bun-server",
-  "version": "0.12.9",
+  "version": "0.12.11",
   "description": "Pikku server adapter for Bun (Bun.serve)",
   "license": "MIT",
   "author": "yasser.fadl@gmail.com",
@@ -16,7 +16,7 @@
     "prepublishOnly": "bun run build"
   },
   "peerDependencies": {
-    "@pikku/core": "^0.12.85",
+    "@pikku/core": "^0.12.98",
     "@pikku/modelcontextprotocol": "^0.12.10"
   },
   "peerDependenciesMeta": {
@@ -25,7 +25,7 @@
     }
   },
   "devDependencies": {
-    "@pikku/core": "^0.12.85",
+    "@pikku/core": "^0.12.98",
     "@pikku/modelcontextprotocol": "^0.12.10",
     "@types/bun": "^1.4.0",
     "typescript": "^6.0.3"

package/src/pikku-bun-server.ts

@@ -31,6 +31,17 @@ export type StaticMount = {
   urlPrefix: string
   directory: string
   spaFallback?: boolean
+  /**
+   * Serve from an explicit key → path map instead of from `directory`, which is
+   * then unused. Keys are mount-relative request paths (`index.html`,
+   * `assets/app-a1b2c3.js`).
+   *
+   * This exists for assets that are not laid out as a directory at all: a
+   * `bun build --compile` binary embeds each file and hands back an opaque
+   * `/$bunfs/…` path, so the only way to find one is to have recorded it at
+   * build time.
+   */
+  assets?: Record<string, string>
 }
 
 export type BunServerConfig = CoreConfig & {
@@ -100,6 +111,16 @@ const isSerializable = (data: unknown): boolean =>
  * Handles HTTP via the fetch handler and WebSocket via Bun.serve's native
  * websocket handler (which is backed by uWebSockets internally).
  */
+/**
+ * Work the process owes its app on the way down, run around the service
+ * teardown `enableExitOnSignals` already does. A failing hook is logged and
+ * shutdown continues: a process that has been told to stop has to stop.
+ */
+export type ShutdownHooks = {
+  beforeStop?: () => void | Promise<void>
+  afterStop?: () => void | Promise<void>
+}
+
 export class PikkuBunServer {
   private server: BunServer<WsData> | null = null
   private readonly eventHub: BunEventHubService
@@ -220,7 +241,7 @@ export class PikkuBunServer {
           return contentResponse
         }
 
-        const staticResponse = await this.serveStaticMounts(req)
+        const staticResponse = await this.serveStaticFiles(req)
         if (staticResponse) {
           return staticResponse
         }
@@ -231,7 +252,14 @@ export class PikkuBunServer {
           respondWith404: true,
           ...options,
         })
-        return pikkuRes.toResponse()
+        const response = pikkuRes.toResponse()
+        if (response.status === 404) {
+          const fallback = await this.serveSpaFallback(req)
+          if (fallback) {
+            return fallback
+          }
+        }
+        return response
       },
 
       websocket: {
@@ -279,60 +307,133 @@ export class PikkuBunServer {
 
     eventHub.setServer(this.server as BunServer<unknown>)
     logger.info(
-      `pikku-bun-server: listening on http://${config.hostname ?? 'localhost'}:${config.port}`
+      `pikku-bun-server: listening on http://${config.hostname ?? 'localhost'}:${this.port}`
     )
   }
 
+  /**
+   * The port the server is actually listening on.
+   *
+   * Not the same as `config.port` whenever that is `0`: the OS picks a free
+   * port at bind time, and a parent process that was told `0` has no other way
+   * to find out which one. Falls back to the requested port before `start()`.
+   */
   public get port(): number {
     return this.server?.port ?? this.config.port
   }
 
-  private async serveStaticMounts(req: Request): Promise<Response | null> {
+  private matchesPrefix(pathname: string, prefix: string): boolean {
+    // A root mount covers the whole tree; the generic test below would match
+    // only `/` itself, since nothing starts with `//`.
+    if (prefix === '' || prefix === '/') {
+      return true
+    }
+    return pathname === prefix || pathname.startsWith(`${prefix}/`)
+  }
+
+  /**
+   * Resolve the mounts a GET/HEAD request could be served from, or null when
+   * static serving does not apply to this request at all.
+   */
+  private staticMountCandidates(
+    req: Request
+  ): { pathname: string; mounts: StaticMount[] } | null {
     const mounts = this.config.staticMounts
     if (!mounts?.length || (req.method !== 'GET' && req.method !== 'HEAD')) {
       return null
     }
     const pathname = decodeURIComponent(new URL(req.url).pathname)
+    return {
+      pathname,
+      mounts: mounts.filter((mount) =>
+        this.matchesPrefix(pathname, mount.urlPrefix)
+      ),
+    }
+  }
 
-    for (const mount of mounts) {
-      if (
-        pathname !== mount.urlPrefix &&
-        !pathname.startsWith(`${mount.urlPrefix}/`)
-      ) {
-        continue
+  /**
+   * Serve an exact file hit only. A miss falls through to route dispatch, so a
+   * mount at `/` cannot swallow the API — the app shell is served afterwards by
+   * `serveSpaFallback`, once dispatch has had its chance and produced a 404.
+   */
+  private async serveStaticFiles(req: Request): Promise<Response | null> {
+    const candidates = this.staticMountCandidates(req)
+    if (!candidates) {
+      return null
+    }
+
+    for (const mount of candidates.mounts) {
+      const key = candidates.pathname
+        .slice(mount.urlPrefix.length)
+        .replace(/^\/+/, '')
+      const result = await this.resolveStaticFile(mount, key)
+      if (result === 'rejected') {
+        // A key that escaped the mount directory is refused outright rather
+        // than falling through, which would answer a traversal attempt with a
+        // 200 and the app shell.
+        return new Response('Not Found', { status: 404 })
       }
-      const key = pathname.slice(mount.urlPrefix.length).replace(/^\/+/, '')
-      const file = await this.resolveStaticFile(mount, key)
-      if (file) {
-        return new Response(req.method === 'HEAD' ? null : file)
+      if (result) {
+        return new Response(req.method === 'HEAD' ? null : result)
       }
-      if (mount.spaFallback) {
-        const index = await this.resolveStaticFile(mount, 'index.html')
-        if (index) {
-          return new Response(req.method === 'HEAD' ? null : index)
-        }
+    }
+
+    return null
+  }
+
+  /**
+   * Last resort for a client-side route: dispatch has already 404'd, so an
+   * unmatched path under a `spaFallback` mount is the SPA's own routing.
+   */
+  private async serveSpaFallback(req: Request): Promise<Response | null> {
+    const candidates = this.staticMountCandidates(req)
+    if (!candidates) {
+      return null
+    }
+
+    for (const mount of candidates.mounts) {
+      if (!mount.spaFallback) {
+        continue
+      }
+      const index = await this.resolveStaticFile(mount, 'index.html')
+      if (index && index !== 'rejected') {
+        return new Response(req.method === 'HEAD' ? null : index)
       }
-      return new Response('Not Found', { status: 404 })
     }
 
     return null
   }
 
+  /**
+   * `'rejected'` is kept distinct from `null` because the two must not share a
+   * fate: a missing file is a candidate for the SPA fallback, while a key that
+   * resolved outside the mount directory must never be. An `assets` mount never
+   * produces `'rejected'` at all — a map lookup has no directory to escape.
+   */
   private async resolveStaticFile(
     mount: StaticMount,
     key: string
-  ): Promise<ReturnType<typeof Bun.file> | null> {
+  ): Promise<ReturnType<typeof Bun.file> | 'rejected' | null> {
+    if (mount.assets) {
+      const assetPath = mount.assets[key === '' ? 'index.html' : key]
+      if (!assetPath) {
+        return null
+      }
+      const asset = Bun.file(assetPath)
+      return (await asset.exists()) ? asset : null
+    }
+
     const directory = resolve(mount.directory)
     const targetPath =
       key === '' ? resolve(directory, 'index.html') : resolve(directory, key)
     if (targetPath !== directory && !targetPath.startsWith(`${directory}/`)) {
-      return null
+      return 'rejected'
     }
     let file = Bun.file(targetPath)
     if (!(await file.exists())) {
       const indexPath = resolve(targetPath, 'index.html')
       if (!indexPath.startsWith(`${directory}/`)) {
-        return null
+        return 'rejected'
       }
       file = Bun.file(indexPath)
       if (!(await file.exists())) {
@@ -347,12 +448,32 @@ export class PikkuBunServer {
     this.server = null
   }
 
-  public enableExitOnSignals(): void {
+  public enableExitOnSignals(hooks?: ShutdownHooks): void {
+    /**
+     * Every step of the shutdown is isolated from the ones after it. Sharing
+     * one catch means a hook that throws takes the service teardown and the
+     * socket close down with it, leaving the process to exit with connections
+     * still open and services still holding their handles.
+     */
+    const phase = async (name: string, run: () => void | Promise<void>) => {
+      try {
+        await run()
+      } catch (error) {
+        this.logger.error(
+          `pikku-bun-server: ${name} failed during shutdown`,
+          error
+        )
+      }
+    }
     const shutdown = async (signal: string) => {
       this.logger.info(`pikku-bun-server: ${signal} received, stopping`)
       try {
-        await stopSingletonServices()
-        await this.stop()
+        await phase('beforeStop', () => hooks?.beforeStop?.())
+        await phase('stopping singleton services', () =>
+          stopSingletonServices()
+        )
+        await phase('stopping the server', () => this.stop())
+        await phase('afterStop', () => hooks?.afterStop?.())
       } finally {
         process.exit(0)
       }

package/src/static-mount.test.ts

@@ -4,7 +4,9 @@ import { mkdtempSync, mkdirSync, writeFileSync, rmSync } from 'node:fs'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
 import { setSingletonServices } from '@pikku/core/state'
-import { resetPikkuState } from '@pikku/core/state'
+import { pikkuState, resetPikkuState } from '@pikku/core/state'
+import { httpRouter, wireHTTP } from '@pikku/core/http'
+import { addFunction } from '@pikku/core/function'
 import type { Logger } from '@pikku/core/services'
 import { PikkuBunServer } from './pikku-bun-server.js'
 
@@ -106,3 +108,223 @@ describe('PikkuBunServer static mounts', () => {
     }
   })
 })
+
+describe('PikkuBunServer root-mounted SPA', () => {
+  let server: PikkuBunServer
+  let tmpDir: string
+  let origin: string
+
+  before(async () => {
+    resetPikkuState()
+    httpRouter.reset()
+    setSingletonServices({
+      logger: noopLogger,
+      schema: {
+        compileSchema: () => {},
+        getSchemaNames: () => new Set<string>(),
+      },
+    } as any)
+    tmpDir = mkdtempSync(join(tmpdir(), 'pikku-bun-spa-'))
+    writeFileSync(
+      join(tmpDir, 'index.html'),
+      '<!doctype html><title>app shell</title>'
+    )
+    mkdirSync(join(tmpDir, 'assets'))
+    writeFileSync(join(tmpDir, 'assets', 'app.js'), 'console.log("app")')
+
+    pikkuState(null, 'function', 'meta', {
+      things_func: {
+        pikkuFuncId: 'things_func',
+        inputSchemaName: null,
+        outputSchemaName: null,
+        sessionless: true,
+      },
+    } as any)
+    pikkuState(null, 'http', 'meta', {
+      get: {
+        '/api/things': {
+          pikkuFuncId: 'things_func',
+          route: '/api/things',
+          method: 'get',
+        },
+      },
+      post: {},
+      delete: {},
+      patch: {},
+      head: {},
+      put: {},
+      options: {},
+    } as any)
+    addFunction('things_func', { func: async () => ({ things: ['one'] }) })
+    wireHTTP({
+      route: '/api/things',
+      method: 'get',
+      auth: false,
+      func: { func: async () => ({ things: ['one'] }) },
+    } as any)
+    httpRouter.initialize()
+
+    server = new PikkuBunServer(
+      {
+        port: 0,
+        hostname: '127.0.0.1',
+        staticMounts: [
+          { urlPrefix: '/', directory: tmpDir, spaFallback: true },
+        ],
+      } as any,
+      noopLogger
+    )
+    await server.init()
+    await server.start()
+    origin = `http://127.0.0.1:${server.port}`
+  })
+
+  after(async () => {
+    await server.stop()
+    rmSync(tmpDir, { recursive: true, force: true })
+  })
+
+  test('a wired API route still dispatches under a root SPA mount', async () => {
+    const response = await fetch(`${origin}/api/things`)
+    assert.equal(response.status, 200)
+    assert.match(
+      response.headers.get('content-type') ?? '',
+      /application\/json/,
+      'API route returned the SPA shell instead of dispatching'
+    )
+    assert.deepEqual(await response.json(), { things: ['one'] })
+  })
+
+  test('static files still win over the SPA fallback', async () => {
+    const response = await fetch(`${origin}/assets/app.js`)
+    assert.equal(response.status, 200)
+    assert.equal(await response.text(), 'console.log("app")')
+  })
+
+  test('unknown client routes still fall back to the app shell', async () => {
+    const response = await fetch(`${origin}/records/42`)
+    assert.equal(response.status, 200)
+    assert.match(await response.text(), /<title>app shell<\/title>/)
+  })
+})
+
+describe('PikkuBunServer asset-mapped mount', () => {
+  let server: PikkuBunServer
+  let tmpDir: string
+  let origin: string
+
+  before(async () => {
+    resetPikkuState()
+    httpRouter.reset()
+    setSingletonServices({
+      logger: noopLogger,
+      schema: {
+        compileSchema: () => {},
+        getSchemaNames: () => new Set<string>(),
+      },
+    } as any)
+    tmpDir = mkdtempSync(join(tmpdir(), 'pikku-bun-assets-'))
+
+    // The files live in a `store` subdirectory that the mount's own `directory`
+    // does not contain, so a hit can only come from the map.
+    const store = join(tmpDir, 'store')
+    mkdirSync(store)
+    writeFileSync(
+      join(store, 'shell-abc123.html'),
+      '<!doctype html><title>embedded shell</title>'
+    )
+    writeFileSync(join(store, 'app-def456.js'), 'console.log("embedded")')
+
+    pikkuState(null, 'function', 'meta', {
+      things_func: {
+        pikkuFuncId: 'things_func',
+        inputSchemaName: null,
+        outputSchemaName: null,
+        sessionless: true,
+      },
+    } as any)
+    pikkuState(null, 'http', 'meta', {
+      get: {
+        '/api/things': {
+          pikkuFuncId: 'things_func',
+          route: '/api/things',
+          method: 'get',
+        },
+      },
+      post: {},
+      delete: {},
+      patch: {},
+      head: {},
+      put: {},
+      options: {},
+    } as any)
+    addFunction('things_func', { func: async () => ({ things: ['one'] }) })
+    wireHTTP({
+      route: '/api/things',
+      method: 'get',
+      auth: false,
+      func: { func: async () => ({ things: ['one'] }) },
+    } as any)
+    httpRouter.initialize()
+
+    server = new PikkuBunServer(
+      {
+        port: 0,
+        hostname: '127.0.0.1',
+        staticMounts: [
+          {
+            urlPrefix: '/',
+            directory: join(tmpDir, 'nonexistent'),
+            spaFallback: true,
+            assets: {
+              'index.html': join(store, 'shell-abc123.html'),
+              'assets/app.js': join(store, 'app-def456.js'),
+            },
+          },
+        ],
+      } as any,
+      noopLogger
+    )
+    await server.init()
+    await server.start()
+    origin = `http://127.0.0.1:${server.port}`
+  })
+
+  after(async () => {
+    await server.stop()
+    rmSync(tmpDir, { recursive: true, force: true })
+  })
+
+  test('serves a mapped asset from the path the map names', async () => {
+    const response = await fetch(`${origin}/assets/app.js`)
+    assert.equal(response.status, 200)
+    assert.match(response.headers.get('content-type') ?? '', /javascript/)
+    assert.equal(await response.text(), 'console.log("embedded")')
+  })
+
+  test('serves the mapped index.html at the mount root', async () => {
+    const response = await fetch(`${origin}/`)
+    assert.equal(response.status, 200)
+    assert.match(await response.text(), /<title>embedded shell<\/title>/)
+  })
+
+  test('a wired API route still dispatches under a root asset mount', async () => {
+    const response = await fetch(`${origin}/api/things`)
+    assert.equal(response.status, 200)
+    assert.deepEqual(await response.json(), { things: ['one'] })
+  })
+
+  test('an unmapped key falls back to the app shell', async () => {
+    const response = await fetch(`${origin}/records/42`)
+    assert.equal(response.status, 200)
+    assert.match(await response.text(), /<title>embedded shell<\/title>/)
+  })
+
+  test('a traversal-shaped key is a plain miss, not a rejection', async () => {
+    // A map lookup cannot escape a directory, so there is nothing to reject:
+    // the key is simply absent and the SPA fallback is allowed to answer.
+    const response = await fetch(`${origin}/%2e%2e/pikku-bun-assets-secret.txt`)
+    assert.equal(response.status, 200)
+    assert.match(await response.text(), /<title>embedded shell<\/title>/)
+  })
+})