@reliantlabs/forge-web-runtime 0.3.0

package/dist/telemetry.d.ts

@@ -0,0 +1,25 @@
+export interface TelemetryEvent {
+    type: "error" | "unhandled-rejection" | "web-vital";
+    name: string;
+    value?: number;
+    message?: string;
+    detail?: Record<string, unknown>;
+    timestamp: number;
+}
+export interface TelemetryConfig {
+    serviceName?: string;
+    /** OTLP/HTTP-ish collector URL. Unset = no network export (default). */
+    endpoint?: string;
+    /** In-process sink for every event. Default: console.debug in dev. */
+    onEvent?: (event: TelemetryEvent) => void;
+    /** Capture window errors + unhandled rejections. Default true. */
+    captureErrors?: boolean;
+    /** Capture LCP / CLS / FID via PerformanceObserver. Default true. */
+    captureWebVitals?: boolean;
+}
+/**
+ * initClientTelemetry wires the capture listeners and returns a teardown
+ * function. Idempotent and SSR-safe (no-op without a DOM). Call once from the
+ * app shell (e.g. inside Providers' mount effect).
+ */
+export declare function initClientTelemetry(config?: TelemetryConfig): () => void;

package/dist/telemetry.js

@@ -0,0 +1,128 @@
+let started = false;
+/**
+ * initClientTelemetry wires the capture listeners and returns a teardown
+ * function. Idempotent and SSR-safe (no-op without a DOM). Call once from the
+ * app shell (e.g. inside Providers' mount effect).
+ */
+export function initClientTelemetry(config = {}) {
+    if (started || typeof window === "undefined") {
+        return () => { };
+    }
+    started = true;
+    const serviceName = config.serviceName ?? "frontend";
+    const captureErrors = config.captureErrors ?? true;
+    const captureWebVitals = config.captureWebVitals ?? true;
+    const dispatch = (event) => {
+        if (config.onEvent) {
+            config.onEvent(event);
+        }
+        else if (typeof process !== "undefined" &&
+            process.env?.NODE_ENV === "development") {
+            // The `typeof` guard keeps this framework-agnostic — Vite SPAs and
+            // plain browsers have no `process` at all.
+            console.debug("[telemetry]", event.type, event.name, event.value ?? "");
+        }
+        if (config.endpoint) {
+            exportEvent(config.endpoint, serviceName, event);
+        }
+    };
+    const teardowns = [];
+    if (captureErrors) {
+        const onError = (e) => dispatch({
+            type: "error",
+            name: e.error?.name ?? "Error",
+            message: e.message,
+            detail: { filename: e.filename, line: e.lineno, col: e.colno },
+            timestamp: Date.now(),
+        });
+        const onRejection = (e) => dispatch({
+            type: "unhandled-rejection",
+            name: "UnhandledRejection",
+            message: String(e.reason),
+            timestamp: Date.now(),
+        });
+        window.addEventListener("error", onError);
+        window.addEventListener("unhandledrejection", onRejection);
+        teardowns.push(() => window.removeEventListener("error", onError));
+        teardowns.push(() => window.removeEventListener("unhandledrejection", onRejection));
+    }
+    if (captureWebVitals && typeof PerformanceObserver === "function") {
+        let clsValue = 0;
+        const observe = (type, cb) => {
+            try {
+                const obs = new PerformanceObserver((list) => cb(list.getEntries()));
+                obs.observe({ type, buffered: true });
+                teardowns.push(() => obs.disconnect());
+            }
+            catch {
+                // Unsupported entry type in this browser — skip silently.
+            }
+        };
+        observe("largest-contentful-paint", (entries) => {
+            const last = entries.at(-1);
+            if (last) {
+                dispatch({
+                    type: "web-vital",
+                    name: "LCP",
+                    value: Math.round(last.startTime),
+                    timestamp: Date.now(),
+                });
+            }
+        });
+        observe("layout-shift", (entries) => {
+            for (const entry of entries) {
+                if (!entry.hadRecentInput) {
+                    clsValue += entry.value;
+                }
+            }
+            dispatch({
+                type: "web-vital",
+                name: "CLS",
+                value: Number(clsValue.toFixed(4)),
+                timestamp: Date.now(),
+            });
+        });
+        // FID (First Input Delay): processingStart − startTime of the first
+        // input. This is FID, NOT INP — INP needs the full interaction-latency
+        // model from the web-vitals library, which this dependency-free module
+        // deliberately doesn't pull in. Reach for `web-vitals` if you need INP.
+        observe("first-input", (entries) => {
+            const first = entries[0];
+            if (first) {
+                dispatch({
+                    type: "web-vital",
+                    name: "FID",
+                    value: Math.round(first.processingStart - first.startTime),
+                    timestamp: Date.now(),
+                });
+            }
+        });
+    }
+    return () => {
+        for (const t of teardowns) {
+            t();
+        }
+        started = false;
+    };
+}
+/** Best-effort beacon of one event. Never throws into the caller. */
+function exportEvent(endpoint, serviceName, event) {
+    try {
+        const body = JSON.stringify({ service: serviceName, ...event });
+        if (typeof navigator !== "undefined" && navigator.sendBeacon) {
+            navigator.sendBeacon(endpoint, body);
+        }
+        else {
+            void fetch(endpoint, {
+                method: "POST",
+                body,
+                keepalive: true,
+                headers: { "Content-Type": "application/json" },
+            }).catch(() => { });
+        }
+    }
+    catch {
+        // Telemetry must never break the app.
+    }
+}
+//# sourceMappingURL=telemetry.js.map

package/dist/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../src/telemetry.ts"],"names":[],"mappings":"AA+CA,IAAI,OAAO,GAAG,KAAK,CAAC;AAEpB;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAA0B,EAAE;IAC9D,IAAI,OAAO,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAC7C,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,IAAI,CAAC;IAEf,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;IACnD,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;IAEzD,MAAM,QAAQ,GAAG,CAAC,KAAqB,EAAE,EAAE;QACzC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;aAAM,IACL,OAAO,OAAO,KAAK,WAAW;YAC9B,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,aAAa,EACvC,CAAC;YACD,mEAAmE;YACnE,2CAA2C;YAC3C,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAsB,EAAE,CAAC;IAExC,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,CAAC,CAAa,EAAE,EAAE,CAChC,QAAQ,CAAC;YACP,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,OAAO;YAC9B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE;YAC9D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACL,MAAM,WAAW,GAAG,CAAC,CAAwB,EAAE,EAAE,CAC/C,QAAQ,CAAC;YACP,IAAI,EAAE,qBAAqB;YAC3B,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACL,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAC;QAC3D,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAClB,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAC9D,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,IAAI,OAAO,mBAAmB,KAAK,UAAU,EAAE,CAAC;QAClE,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,CACd,IAAY,EACZ,EAA2C,EAC3C,EAAE;YACF,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBACrE,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,0DAA0D;YAC5D,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,CAAC,0BAA0B,EAAE,CAAC,OAAO,EAAE,EAAE;YAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC;oBACP,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YAClC,KAAK,MAAM,KAAK,IAAI,OAA6B,EAAE,CAAC;gBAClD,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;oBAC1B,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,QAAQ,CAAC;gBACP,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,oEAAoE;QACpE,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,OAAO,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE;YACjC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAgC,CAAC;YACxD,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,CAAC;oBACP,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,KAAK;oBACX,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,SAAS,CAAC;oBAC1D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,CAAC,EAAE,CAAC;QACN,CAAC;QACD,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,SAAS,WAAW,CAClB,QAAgB,EAChB,WAAmB,EACnB,KAAqB;IAErB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAChE,IAAI,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YAC7D,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,KAAK,KAAK,CAAC,QAAQ,EAAE;gBACnB,MAAM,EAAE,MAAM;gBACd,IAAI;gBACJ,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;aAChD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC","sourcesContent":["// Part of @reliantlabs/forge-web-runtime — the web twin of forge/pkg.\n//\n// Lightweight client RUM: unhandled errors + core Web Vitals, captured with\n// native browser APIs (no extra dependency). Export is OPT-IN: by default\n// events go to an in-process sink (console.debug in dev). Set `endpoint` to\n// beacon them to a browser-reachable OTLP/HTTP collector (needs CORS on that\n// collector — stand it up before relying on export). This is the config seam;\n// distributed tracing itself (the traceparent on every RPC) is always on and\n// lives in trace.ts — it does NOT depend on this module.\nexport interface TelemetryEvent {\n  type: \"error\" | \"unhandled-rejection\" | \"web-vital\";\n  name: string;\n  value?: number;\n  message?: string;\n  detail?: Record<string, unknown>;\n  timestamp: number;\n}\n\nexport interface TelemetryConfig {\n  serviceName?: string;\n  /** OTLP/HTTP-ish collector URL. Unset = no network export (default). */\n  endpoint?: string;\n  /** In-process sink for every event. Default: console.debug in dev. */\n  onEvent?: (event: TelemetryEvent) => void;\n  /** Capture window errors + unhandled rejections. Default true. */\n  captureErrors?: boolean;\n  /** Capture LCP / CLS / FID via PerformanceObserver. Default true. */\n  captureWebVitals?: boolean;\n}\n\ninterface LayoutShiftEntry extends PerformanceEntry {\n  value: number;\n  hadRecentInput: boolean;\n}\n\ninterface FirstInputEntry extends PerformanceEntry {\n  processingStart: number;\n}\n\n// `process` is a bundler-injected global (Next replaces the literal\n// `process.env.NODE_ENV` at build time), not a browser one. Declaring it\n// locally keeps this package free of a @types/node dependency while leaving\n// the expression textually intact so that replacement still happens.\ndeclare const process:\n  | { env?: Record<string, string | undefined> }\n  | undefined;\n\nlet started = false;\n\n/**\n * initClientTelemetry wires the capture listeners and returns a teardown\n * function. Idempotent and SSR-safe (no-op without a DOM). Call once from the\n * app shell (e.g. inside Providers' mount effect).\n */\nexport function initClientTelemetry(config: TelemetryConfig = {}): () => void {\n  if (started || typeof window === \"undefined\") {\n    return () => {};\n  }\n  started = true;\n\n  const serviceName = config.serviceName ?? \"frontend\";\n  const captureErrors = config.captureErrors ?? true;\n  const captureWebVitals = config.captureWebVitals ?? true;\n\n  const dispatch = (event: TelemetryEvent) => {\n    if (config.onEvent) {\n      config.onEvent(event);\n    } else if (\n      typeof process !== \"undefined\" &&\n      process.env?.NODE_ENV === \"development\"\n    ) {\n      // The `typeof` guard keeps this framework-agnostic — Vite SPAs and\n      // plain browsers have no `process` at all.\n      console.debug(\"[telemetry]\", event.type, event.name, event.value ?? \"\");\n    }\n    if (config.endpoint) {\n      exportEvent(config.endpoint, serviceName, event);\n    }\n  };\n\n  const teardowns: Array<() => void> = [];\n\n  if (captureErrors) {\n    const onError = (e: ErrorEvent) =>\n      dispatch({\n        type: \"error\",\n        name: e.error?.name ?? \"Error\",\n        message: e.message,\n        detail: { filename: e.filename, line: e.lineno, col: e.colno },\n        timestamp: Date.now(),\n      });\n    const onRejection = (e: PromiseRejectionEvent) =>\n      dispatch({\n        type: \"unhandled-rejection\",\n        name: \"UnhandledRejection\",\n        message: String(e.reason),\n        timestamp: Date.now(),\n      });\n    window.addEventListener(\"error\", onError);\n    window.addEventListener(\"unhandledrejection\", onRejection);\n    teardowns.push(() => window.removeEventListener(\"error\", onError));\n    teardowns.push(() =>\n      window.removeEventListener(\"unhandledrejection\", onRejection),\n    );\n  }\n\n  if (captureWebVitals && typeof PerformanceObserver === \"function\") {\n    let clsValue = 0;\n    const observe = (\n      type: string,\n      cb: (entries: PerformanceEntryList) => void,\n    ) => {\n      try {\n        const obs = new PerformanceObserver((list) => cb(list.getEntries()));\n        obs.observe({ type, buffered: true });\n        teardowns.push(() => obs.disconnect());\n      } catch {\n        // Unsupported entry type in this browser — skip silently.\n      }\n    };\n\n    observe(\"largest-contentful-paint\", (entries) => {\n      const last = entries.at(-1);\n      if (last) {\n        dispatch({\n          type: \"web-vital\",\n          name: \"LCP\",\n          value: Math.round(last.startTime),\n          timestamp: Date.now(),\n        });\n      }\n    });\n\n    observe(\"layout-shift\", (entries) => {\n      for (const entry of entries as LayoutShiftEntry[]) {\n        if (!entry.hadRecentInput) {\n          clsValue += entry.value;\n        }\n      }\n      dispatch({\n        type: \"web-vital\",\n        name: \"CLS\",\n        value: Number(clsValue.toFixed(4)),\n        timestamp: Date.now(),\n      });\n    });\n\n    // FID (First Input Delay): processingStart − startTime of the first\n    // input. This is FID, NOT INP — INP needs the full interaction-latency\n    // model from the web-vitals library, which this dependency-free module\n    // deliberately doesn't pull in. Reach for `web-vitals` if you need INP.\n    observe(\"first-input\", (entries) => {\n      const first = entries[0] as FirstInputEntry | undefined;\n      if (first) {\n        dispatch({\n          type: \"web-vital\",\n          name: \"FID\",\n          value: Math.round(first.processingStart - first.startTime),\n          timestamp: Date.now(),\n        });\n      }\n    });\n  }\n\n  return () => {\n    for (const t of teardowns) {\n      t();\n    }\n    started = false;\n  };\n}\n\n/** Best-effort beacon of one event. Never throws into the caller. */\nfunction exportEvent(\n  endpoint: string,\n  serviceName: string,\n  event: TelemetryEvent,\n): void {\n  try {\n    const body = JSON.stringify({ service: serviceName, ...event });\n    if (typeof navigator !== \"undefined\" && navigator.sendBeacon) {\n      navigator.sendBeacon(endpoint, body);\n    } else {\n      void fetch(endpoint, {\n        method: \"POST\",\n        body,\n        keepalive: true,\n        headers: { \"Content-Type\": \"application/json\" },\n      }).catch(() => {});\n    }\n  } catch {\n    // Telemetry must never break the app.\n  }\n}\n"]}

package/dist/toast-host.d.ts

@@ -0,0 +1,36 @@
+import { type ReactElement, type ReactNode } from "react";
+export type RuntimeToastVariant = "success" | "error" | "warning" | "info";
+/** A toast as emitted — no identity yet; the host assigns one. */
+export interface RuntimeToastPayload {
+    message: string;
+    variant?: RuntimeToastVariant;
+    duration?: number;
+}
+/** A toast the host is currently holding. */
+export interface RuntimeToast extends RuntimeToastPayload {
+    id: string;
+}
+/** What the host hands the app so the app can push events into it. */
+export interface RuntimeToastSink {
+    /** Enqueue a toast. */
+    onShow: (toast: RuntimeToastPayload) => void;
+    /** Dismiss one toast by id, or all of them when id is omitted. */
+    onDismiss: (id?: string) => void;
+}
+export interface RuntimeToastHostProps {
+    /**
+     * Wire the app's event source to the host: called with the sink, returns an
+     * unsubscribe function. Memoize it (useCallback) — the host re-subscribes
+     * whenever its identity changes.
+     */
+    subscribe: (sink: RuntimeToastSink) => () => void;
+    /**
+     * Render the app's own toast presentation. The runtime owns the queue; the
+     * component library owns the markup.
+     */
+    render: (props: {
+        toasts: RuntimeToast[];
+        onDismiss: (id: string) => void;
+    }) => ReactNode;
+}
+export declare function RuntimeToastHost({ subscribe, render, }: RuntimeToastHostProps): ReactElement;

package/dist/toast-host.js

@@ -0,0 +1,34 @@
+"use client";
+import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
+// Part of @reliantlabs/forge-web-runtime — the web twin of forge/pkg.
+//
+// The toast host: the queue and its lifecycle, with NO opinion about how a
+// toast looks or where the events come from. The app supplies both —
+// `subscribe` (its event bus) and `render` (its own toast component from the
+// forkable component library). That is what keeps this forge-owned file
+// independent of files the app is free to restyle, rename, or delete.
+import { useCallback, useEffect, useMemo, useState, } from "react";
+let seq = 0;
+function nextId() {
+    seq += 1;
+    return `t${seq}-${Date.now()}`;
+}
+export function RuntimeToastHost({ subscribe, render, }) {
+    const [toasts, setToasts] = useState([]);
+    const dismiss = useCallback((id) => {
+        setToasts((prev) => prev.filter((t) => t.id !== id));
+    }, []);
+    // Stable across renders: every update is functional, so the sink never
+    // needs to close over the current toast list.
+    const sink = useMemo(() => ({
+        onShow: (toast) => {
+            setToasts((prev) => [...prev, { ...toast, id: nextId() }]);
+        },
+        onDismiss: (id) => {
+            setToasts((prev) => (id ? prev.filter((t) => t.id !== id) : []));
+        },
+    }), []);
+    useEffect(() => subscribe(sink), [subscribe, sink]);
+    return _jsx(_Fragment, { children: render({ toasts, onDismiss: dismiss }) });
+}
+//# sourceMappingURL=toast-host.js.map

package/dist/toast-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toast-host.js","sourceRoot":"","sources":["../src/toast-host.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAEb,sEAAsE;AACtE,EAAE;AACF,2EAA2E;AAC3E,qEAAqE;AACrE,6EAA6E;AAC7E,wEAAwE;AACxE,sEAAsE;AACtE,OAAO,EACL,WAAW,EACX,SAAS,EACT,OAAO,EACP,QAAQ,GAGT,MAAM,OAAO,CAAC;AAyCf,IAAI,GAAG,GAAG,CAAC,CAAC;AACZ,SAAS,MAAM;IACb,GAAG,IAAI,CAAC,CAAC;IACT,OAAO,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,EAC/B,SAAS,EACT,MAAM,GACgB;IACtB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAiB,EAAE,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,EAAU,EAAE,EAAE;QACzC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,uEAAuE;IACvE,8CAA8C;IAC9C,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CAAC,CAAC;QACL,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE;YAChB,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC;KACF,CAAC,EACF,EAAE,CACH,CAAC;IAEF,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAEpD,OAAO,4BAAG,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,GAAI,CAAC;AACvD,CAAC","sourcesContent":["\"use client\";\n\n// Part of @reliantlabs/forge-web-runtime — the web twin of forge/pkg.\n//\n// The toast host: the queue and its lifecycle, with NO opinion about how a\n// toast looks or where the events come from. The app supplies both —\n// `subscribe` (its event bus) and `render` (its own toast component from the\n// forkable component library). That is what keeps this forge-owned file\n// independent of files the app is free to restyle, rename, or delete.\nimport {\n  useCallback,\n  useEffect,\n  useMemo,\n  useState,\n  type ReactElement,\n  type ReactNode,\n} from \"react\";\n\nexport type RuntimeToastVariant = \"success\" | \"error\" | \"warning\" | \"info\";\n\n/** A toast as emitted — no identity yet; the host assigns one. */\nexport interface RuntimeToastPayload {\n  message: string;\n  variant?: RuntimeToastVariant;\n  duration?: number;\n}\n\n/** A toast the host is currently holding. */\nexport interface RuntimeToast extends RuntimeToastPayload {\n  id: string;\n}\n\n/** What the host hands the app so the app can push events into it. */\nexport interface RuntimeToastSink {\n  /** Enqueue a toast. */\n  onShow: (toast: RuntimeToastPayload) => void;\n  /** Dismiss one toast by id, or all of them when id is omitted. */\n  onDismiss: (id?: string) => void;\n}\n\nexport interface RuntimeToastHostProps {\n  /**\n   * Wire the app's event source to the host: called with the sink, returns an\n   * unsubscribe function. Memoize it (useCallback) — the host re-subscribes\n   * whenever its identity changes.\n   */\n  subscribe: (sink: RuntimeToastSink) => () => void;\n  /**\n   * Render the app's own toast presentation. The runtime owns the queue; the\n   * component library owns the markup.\n   */\n  render: (props: {\n    toasts: RuntimeToast[];\n    onDismiss: (id: string) => void;\n  }) => ReactNode;\n}\n\nlet seq = 0;\nfunction nextId(): string {\n  seq += 1;\n  return `t${seq}-${Date.now()}`;\n}\n\nexport function RuntimeToastHost({\n  subscribe,\n  render,\n}: RuntimeToastHostProps): ReactElement {\n  const [toasts, setToasts] = useState<RuntimeToast[]>([]);\n\n  const dismiss = useCallback((id: string) => {\n    setToasts((prev) => prev.filter((t) => t.id !== id));\n  }, []);\n\n  // Stable across renders: every update is functional, so the sink never\n  // needs to close over the current toast list.\n  const sink = useMemo<RuntimeToastSink>(\n    () => ({\n      onShow: (toast) => {\n        setToasts((prev) => [...prev, { ...toast, id: nextId() }]);\n      },\n      onDismiss: (id) => {\n        setToasts((prev) => (id ? prev.filter((t) => t.id !== id) : []));\n      },\n    }),\n    [],\n  );\n\n  useEffect(() => subscribe(sink), [subscribe, sink]);\n\n  return <>{render({ toasts, onDismiss: dismiss })}</>;\n}\n"]}

package/dist/trace.d.ts

@@ -0,0 +1,21 @@
+/** Matches a well-formed W3C traceparent: version-traceid-spanid-flags. */
+export declare const TRACEPARENT_RE: RegExp;
+/** Override the sampled flag on synthesized traceparents. Default true. */
+export declare function setTraceSampled(sampled: boolean): void;
+/**
+ * freshTraceparent synthesizes a valid W3C traceparent. The trace-flags byte
+ * reflects the configurable sampled flag (setTraceSampled; default 01 =
+ * sampled). Trace/span ids are re-rolled on the astronomically-unlikely
+ * all-zero draw (the spec forbids all-zero ids).
+ */
+export declare function freshTraceparent(): string;
+/**
+ * injectTraceContext writes a `traceparent` (and any accompanying W3C
+ * context headers, e.g. `tracestate`) onto the outgoing request headers.
+ *
+ * Prefers an active OpenTelemetry span so a fully-instrumented app stitches
+ * the browser and backend spans into one trace; otherwise falls back to a
+ * synthesized traceparent so propagation ALWAYS happens. Idempotent per
+ * request — safe to call once per attempt.
+ */
+export declare function injectTraceContext(header: Headers): void;

package/dist/trace.js

@@ -0,0 +1,106 @@
+// Part of @reliantlabs/forge-web-runtime — the web twin of forge/pkg.
+//
+// W3C trace-context propagation for the browser.
+//
+// The headline capability: EVERY Connect call carries a valid `traceparent`
+// header, so the backend (which runs otelconnect + otelhttp with a
+// TraceContext propagator) joins the SAME distributed trace. This works
+// WITHOUT any OTLP collector configured — traceparent generation is
+// decoupled from span export.
+//
+//   - If the app opted into full OpenTelemetry tracing (src/lib/otel.ts
+//     ran initTelemetry with an endpoint, registering a WebTracerProvider),
+//     there is an active recording span; we inject ITS context so the
+//     browser span and the server span share one trace id.
+//   - Otherwise we synthesize a fresh, valid W3C traceparent from a CSPRNG.
+//     The backend still roots a trace we can correlate this request to, and
+//     no browser-side collector is required.
+import { context, propagation } from "@opentelemetry/api";
+/** Matches a well-formed W3C traceparent: version-traceid-spanid-flags. */
+export const TRACEPARENT_RE = /^00-[0-9a-f]{32}-[0-9a-f]{16}-0[0-9a-f]$/;
+const ZERO_TRACE_ID = "0".repeat(32);
+const ZERO_SPAN_ID = "0".repeat(16);
+/**
+ * Whether a SYNTHESIZED traceparent (the no-active-span fallback below)
+ * marks the trace as sampled/recorded.
+ *
+ * Default true — "correlation-safe": a browser-initiated request is always
+ * recorded, so it can be joined to its server span even when the backend
+ * uses head-based sampling (this module's whole promise is "every call is
+ * correlatable"). Flip it to false via setTraceSampled() to instead DEFER to
+ * the server's sampler — cheaper at high volume, but a synthesized trace the
+ * server samples out leaves that browser request uncorrelated. Only affects
+ * the synthesized path; when a real OpenTelemetry span is active, ITS
+ * sampling flag is propagated verbatim (see injectTraceContext).
+ */
+let traceSampled = true;
+/** Override the sampled flag on synthesized traceparents. Default true. */
+export function setTraceSampled(sampled) {
+    traceSampled = sampled;
+}
+/**
+ * randomHex returns `bytes` random bytes as a lowercase hex string using a
+ * CSPRNG. Falls back to Math.random only if Web Crypto is unavailable (old
+ * embedded webviews); the fallback is fine for a correlation id that carries
+ * no security weight.
+ */
+function randomHex(bytes) {
+    const buf = new Uint8Array(bytes);
+    const c = globalThis.crypto;
+    if (c && typeof c.getRandomValues === "function") {
+        c.getRandomValues(buf);
+    }
+    else {
+        for (let i = 0; i < bytes; i++) {
+            buf[i] = Math.floor(Math.random() * 256);
+        }
+    }
+    let out = "";
+    for (const b of buf) {
+        out += b.toString(16).padStart(2, "0");
+    }
+    return out;
+}
+/**
+ * freshTraceparent synthesizes a valid W3C traceparent. The trace-flags byte
+ * reflects the configurable sampled flag (setTraceSampled; default 01 =
+ * sampled). Trace/span ids are re-rolled on the astronomically-unlikely
+ * all-zero draw (the spec forbids all-zero ids).
+ */
+export function freshTraceparent() {
+    let traceId = randomHex(16);
+    while (traceId === ZERO_TRACE_ID) {
+        traceId = randomHex(16);
+    }
+    let spanId = randomHex(8);
+    while (spanId === ZERO_SPAN_ID) {
+        spanId = randomHex(8);
+    }
+    const flags = traceSampled ? "01" : "00";
+    return `00-${traceId}-${spanId}-${flags}`;
+}
+/**
+ * injectTraceContext writes a `traceparent` (and any accompanying W3C
+ * context headers, e.g. `tracestate`) onto the outgoing request headers.
+ *
+ * Prefers an active OpenTelemetry span so a fully-instrumented app stitches
+ * the browser and backend spans into one trace; otherwise falls back to a
+ * synthesized traceparent so propagation ALWAYS happens. Idempotent per
+ * request — safe to call once per attempt.
+ */
+export function injectTraceContext(header) {
+    const carrier = {};
+    propagation.inject(context.active(), carrier, {
+        set(c, k, v) {
+            c[k] = String(v);
+        },
+    });
+    if (carrier.traceparent && TRACEPARENT_RE.test(carrier.traceparent)) {
+        for (const [k, v] of Object.entries(carrier)) {
+            header.set(k, v);
+        }
+        return;
+    }
+    header.set("traceparent", freshTraceparent());
+}
+//# sourceMappingURL=trace.js.map

package/dist/trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace.js","sourceRoot":"","sources":["../src/trace.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,4EAA4E;AAC5E,mEAAmE;AACnE,wEAAwE;AACxE,oEAAoE;AACpE,8BAA8B;AAC9B,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,sEAAsE;AACtE,2DAA2D;AAC3D,4EAA4E;AAC5E,4EAA4E;AAC5E,6CAA6C;AAC7C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE1D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAEzE,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACrC,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEpC;;;;;;;;;;;;GAYG;AACH,IAAI,YAAY,GAAG,IAAI,CAAC;AAExB,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,YAAY,GAAG,OAAO,CAAC;AACzB,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QACjD,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACpB,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC5B,OAAO,OAAO,KAAK,aAAa,EAAE,CAAC;QACjC,OAAO,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,MAAM,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,OAAO,MAAM,OAAO,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe;IAChD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE;QAC5C,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACT,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACpE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAChD,CAAC","sourcesContent":["// Part of @reliantlabs/forge-web-runtime — the web twin of forge/pkg.\n//\n// W3C trace-context propagation for the browser.\n//\n// The headline capability: EVERY Connect call carries a valid `traceparent`\n// header, so the backend (which runs otelconnect + otelhttp with a\n// TraceContext propagator) joins the SAME distributed trace. This works\n// WITHOUT any OTLP collector configured — traceparent generation is\n// decoupled from span export.\n//\n//   - If the app opted into full OpenTelemetry tracing (src/lib/otel.ts\n//     ran initTelemetry with an endpoint, registering a WebTracerProvider),\n//     there is an active recording span; we inject ITS context so the\n//     browser span and the server span share one trace id.\n//   - Otherwise we synthesize a fresh, valid W3C traceparent from a CSPRNG.\n//     The backend still roots a trace we can correlate this request to, and\n//     no browser-side collector is required.\nimport { context, propagation } from \"@opentelemetry/api\";\n\n/** Matches a well-formed W3C traceparent: version-traceid-spanid-flags. */\nexport const TRACEPARENT_RE = /^00-[0-9a-f]{32}-[0-9a-f]{16}-0[0-9a-f]$/;\n\nconst ZERO_TRACE_ID = \"0\".repeat(32);\nconst ZERO_SPAN_ID = \"0\".repeat(16);\n\n/**\n * Whether a SYNTHESIZED traceparent (the no-active-span fallback below)\n * marks the trace as sampled/recorded.\n *\n * Default true — \"correlation-safe\": a browser-initiated request is always\n * recorded, so it can be joined to its server span even when the backend\n * uses head-based sampling (this module's whole promise is \"every call is\n * correlatable\"). Flip it to false via setTraceSampled() to instead DEFER to\n * the server's sampler — cheaper at high volume, but a synthesized trace the\n * server samples out leaves that browser request uncorrelated. Only affects\n * the synthesized path; when a real OpenTelemetry span is active, ITS\n * sampling flag is propagated verbatim (see injectTraceContext).\n */\nlet traceSampled = true;\n\n/** Override the sampled flag on synthesized traceparents. Default true. */\nexport function setTraceSampled(sampled: boolean): void {\n  traceSampled = sampled;\n}\n\n/**\n * randomHex returns `bytes` random bytes as a lowercase hex string using a\n * CSPRNG. Falls back to Math.random only if Web Crypto is unavailable (old\n * embedded webviews); the fallback is fine for a correlation id that carries\n * no security weight.\n */\nfunction randomHex(bytes: number): string {\n  const buf = new Uint8Array(bytes);\n  const c = globalThis.crypto;\n  if (c && typeof c.getRandomValues === \"function\") {\n    c.getRandomValues(buf);\n  } else {\n    for (let i = 0; i < bytes; i++) {\n      buf[i] = Math.floor(Math.random() * 256);\n    }\n  }\n  let out = \"\";\n  for (const b of buf) {\n    out += b.toString(16).padStart(2, \"0\");\n  }\n  return out;\n}\n\n/**\n * freshTraceparent synthesizes a valid W3C traceparent. The trace-flags byte\n * reflects the configurable sampled flag (setTraceSampled; default 01 =\n * sampled). Trace/span ids are re-rolled on the astronomically-unlikely\n * all-zero draw (the spec forbids all-zero ids).\n */\nexport function freshTraceparent(): string {\n  let traceId = randomHex(16);\n  while (traceId === ZERO_TRACE_ID) {\n    traceId = randomHex(16);\n  }\n  let spanId = randomHex(8);\n  while (spanId === ZERO_SPAN_ID) {\n    spanId = randomHex(8);\n  }\n  const flags = traceSampled ? \"01\" : \"00\";\n  return `00-${traceId}-${spanId}-${flags}`;\n}\n\n/**\n * injectTraceContext writes a `traceparent` (and any accompanying W3C\n * context headers, e.g. `tracestate`) onto the outgoing request headers.\n *\n * Prefers an active OpenTelemetry span so a fully-instrumented app stitches\n * the browser and backend spans into one trace; otherwise falls back to a\n * synthesized traceparent so propagation ALWAYS happens. Idempotent per\n * request — safe to call once per attempt.\n */\nexport function injectTraceContext(header: Headers): void {\n  const carrier: Record<string, string> = {};\n  propagation.inject(context.active(), carrier, {\n    set(c, k, v) {\n      c[k] = String(v);\n    },\n  });\n\n  if (carrier.traceparent && TRACEPARENT_RE.test(carrier.traceparent)) {\n    for (const [k, v] of Object.entries(carrier)) {\n      header.set(k, v);\n    }\n    return;\n  }\n\n  header.set(\"traceparent\", freshTraceparent());\n}\n"]}

package/interceptors/package.json

@@ -0,0 +1,7 @@
+{
+  "//": "Legacy-resolver shim for the '@reliantlabs/forge-web-runtime/interceptors' subpath. Resolvers that read package.json 'exports' never look here. Resolvers that do NOT — TypeScript moduleResolution node10 and Metro with unstable_enablePackageExports off, which is what Expo SDK 52 / React Native 0.76 ship — resolve the subpath as a real directory and read the fields below. Both routes land on the same BUILD OUTPUT under dist/, never on src/: a consumer must never typecheck this package's sources against its own React. See README.md, 'What this package publishes' and 'The DOM-free interceptors entry point'.",
+  "types": "../dist/interceptors.d.ts",
+  "main": "../dist/interceptors.js",
+  "react-native": "../dist/interceptors.js",
+  "sideEffects": false
+}

package/package.json

@@ -0,0 +1,100 @@
+{
+  "name": "@reliantlabs/forge-web-runtime",
+  "version": "0.3.0",
+  "description": "The forge frontend runtime: Connect interceptor stack, session, error boundary, toast queue, <Resource> container, W3C trace propagation and client RUM. The web twin of forge/pkg.",
+  "license": "BUSL-1.1",
+  "//publishConfig note": "A SCOPED package defaults to restricted. Restricted breaks `npm install` for anyone outside the org — including every machine that scaffolds a project with a released forge, which resolves this package from the registry by semver range. Declaring access here means a publish cannot accidentally ship private by omitting --access public.",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "interceptors",
+    "README.md"
+  ],
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./interceptors": {
+      "types": "./dist/interceptors.d.ts",
+      "default": "./dist/interceptors.js"
+    },
+    "./mock-transport": {
+      "types": "./dist/mock-transport.d.ts",
+      "default": "./dist/mock-transport.js"
+    },
+    "./otel": {
+      "types": "./dist/otel.d.ts",
+      "default": "./dist/otel.js"
+    },
+    "./service-hooks": {
+      "types": "./dist/service-hooks.d.ts",
+      "default": "./dist/service-hooks.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.react18.json --noEmit",
+    "build": "node scripts/build.mjs",
+    "dev": "tsc -p tsconfig.build.json --watch --preserveWatchOutput",
+    "prepare": "node scripts/build.mjs",
+    "pretest": "node scripts/build.mjs",
+    "test": "vitest run"
+  },
+  "// peerDependencies note": "@opentelemetry/api is REQUIRED (trace.ts propagates traceparent on every RPC — always on, no collector). The eight SDK packages below it are OPTIONAL: they are imported only by the './otel' subpath, which only the Next.js scaffold reaches. A Vite-SPA or React-Native frontend installs @opentelemetry/api alone and imports the barrel, and must not be told it is missing dependencies it will never resolve.",
+  "peerDependencies": {
+    "@bufbuild/protobuf": "^2.5.0",
+    "@connectrpc/connect": "^2.0.0",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/auto-instrumentations-web": "^0.54.0",
+    "@opentelemetry/core": "^2.0.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.200.0",
+    "@opentelemetry/instrumentation": "^0.200.0",
+    "@opentelemetry/resources": "^2.0.0",
+    "@opentelemetry/sdk-trace-base": "^2.0.0",
+    "@opentelemetry/sdk-trace-web": "^2.0.0",
+    "@opentelemetry/semantic-conventions": "^1.28.0",
+    "@tanstack/react-query": "^5.59.0",
+    "react": "^18.3.0 || ^19.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@tanstack/react-query": { "optional": true },
+    "@opentelemetry/auto-instrumentations-web": { "optional": true },
+    "@opentelemetry/core": { "optional": true },
+    "@opentelemetry/exporter-trace-otlp-http": { "optional": true },
+    "@opentelemetry/instrumentation": { "optional": true },
+    "@opentelemetry/resources": { "optional": true },
+    "@opentelemetry/sdk-trace-base": { "optional": true },
+    "@opentelemetry/sdk-trace-web": { "optional": true },
+    "@opentelemetry/semantic-conventions": { "optional": true }
+  },
+  "devDependencies": {
+    "@bufbuild/protobuf": "^2.5.0",
+    "@connectrpc/connect": "^2.0.0",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/auto-instrumentations-web": "^0.54.0",
+    "@opentelemetry/core": "^2.0.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.200.0",
+    "@opentelemetry/instrumentation": "^0.200.0",
+    "@opentelemetry/resources": "^2.0.0",
+    "@opentelemetry/sdk-trace-base": "^2.0.0",
+    "@opentelemetry/sdk-trace-web": "^2.0.0",
+    "@opentelemetry/semantic-conventions": "^1.28.0",
+    "@tanstack/react-query": "^5.59.0",
+    "@types/node": "^22.14.0",
+    "@types/react": "^19.1.0",
+    "@types/react-18": "npm:@types/react@~18.3.0",
+    "react": "^19.1.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.1.0"
+  },
+  "engines": {
+    "node": ">=22"
+  }
+}