@rsc-kit/core 0.22.9 → 0.23.0

package/dist/testHost.d.ts

@@ -0,0 +1,53 @@
+import type { HostCallReply } from './hostCalls.js';
+declare const REPLY: unique symbol;
+/** The name the engine asks a host's route guards under. */
+export declare const HOST_MIDDLEWARE = "__rsc.middleware";
+/** What a test handler is given: the call's arguments, and the headers the renderer forwarded. */
+export interface HostCallInput {
+    args: unknown[];
+    /** The visitor's request headers the renderer passed on - the cookie, the Accept-Language. */
+    headers: Headers;
+}
+/** Answers one function. Return a value for its result, or one of `hostReply`'s answers. */
+export type HostHandler = (call: HostCallInput) => unknown;
+/**
+ * The backend's functions, by the name rpc() calls them with.
+ *
+ * Route guards declared for the host are asked as `__rsc.middleware`
+ * (`HOST_MIDDLEWARE`), with the guard names as the first argument; answer
+ * `true` to let the page render. Anything else refuses, as a real host's
+ * answer would.
+ */
+export type TestHost = Record<string, HostHandler>;
+type Reply = Omit<HostCallReply, 'result'> & {
+    [REPLY]: true;
+};
+/**
+ * The protocol's own answers, for a handler to return.
+ *
+ *     host: {
+ *       'Apps.list': ({ headers }) =>
+ *         headers.get('cookie')?.includes('session=') ? [{ id: 1 }] : hostReply.unauthenticated(),
+ *       'Apps.create': ({ args }) => hostReply.invalid({ name: ['Taken.'] }),
+ *     }
+ */
+export declare const hostReply: {
+    /** No session: the page answers 401, an action its auth error. */
+    readonly unauthenticated: (message?: string) => Reply;
+    /** A session that still may not: 403. */
+    readonly unauthorized: (message?: string) => Reply;
+    /** Send the visitor somewhere else, as the host's redirect does. */
+    readonly redirect: (to: string, status?: number) => Reply;
+    /** Refuse with a status - a 404 for a record this caller cannot see, a 429. */
+    readonly refuse: (status: number, message?: string) => Reply;
+    /** The input was refused, by field: an action returns these as validationErrors. */
+    readonly invalid: (errors: Record<string, string[]>) => Reply;
+    /** A result, and the regions of the page the call says it changed. */
+    readonly revalidating: (result: unknown, ...targets: string[]) => Reply;
+};
+/**
+ * A fetch that answers the host-call endpoint from `host`: one call as
+ * itself, a batch as `{ replies }`, in order.
+ */
+export declare function testHostFetch(host: TestHost): typeof fetch;
+export {};

package/dist/testHost.js

@@ -0,0 +1,76 @@
+// A backend for tests: answers rpc() calls and host middleware the way a Go
+// or Laravel host answers them over HTTP, without one running.
+//
+// The app under test talks to it through the real client, httpHostCalls,
+// handed a fetch that answers in-process. So a test exercises what ships -
+// batching, a redirect raised as the engine's own, an unauthenticated reply
+// becoming a 401 - and only the backend is stood in for.
+const REPLY = Symbol.for('rsc-kit.test-host-reply');
+/** The name the engine asks a host's route guards under. */
+export const HOST_MIDDLEWARE = '__rsc.middleware';
+const reply = (fields) => ({ ...fields, [REPLY]: true });
+/**
+ * The protocol's own answers, for a handler to return.
+ *
+ *     host: {
+ *       'Apps.list': ({ headers }) =>
+ *         headers.get('cookie')?.includes('session=') ? [{ id: 1 }] : hostReply.unauthenticated(),
+ *       'Apps.create': ({ args }) => hostReply.invalid({ name: ['Taken.'] }),
+ *     }
+ */
+export const hostReply = {
+    /** No session: the page answers 401, an action its auth error. */
+    unauthenticated: (message) => reply({ unauthenticated: true, error: message }),
+    /** A session that still may not: 403. */
+    unauthorized: (message) => reply({ unauthorized: true, error: message }),
+    /** Send the visitor somewhere else, as the host's redirect does. */
+    redirect: (to, status = 307) => reply({ redirect: to, redirectStatus: status }),
+    /** Refuse with a status - a 404 for a record this caller cannot see, a 429. */
+    refuse: (status, message = 'Refused.') => reply({ error: message, refusalStatus: status }),
+    /** The input was refused, by field: an action returns these as validationErrors. */
+    invalid: (errors) => reply({ validationErrors: errors }),
+    /** A result, and the regions of the page the call says it changed. */
+    revalidating: (result, ...targets) => reply({ result, revalidate: targets }),
+};
+function isReply(value) {
+    return typeof value === 'object' && value !== null && value[REPLY] === true;
+}
+async function answer(host, name, args, headers) {
+    const handler = host[name];
+    // Fails the call rather than answering null: a function the test forgot
+    // is a test that would otherwise pass against nothing.
+    if (!handler) {
+        return {
+            error: name === HOST_MIDDLEWARE
+                ? `the page asked its host guards (${JSON.stringify(args[0])}) and the test host has no "${HOST_MIDDLEWARE}" handler`
+                : `the test host has no handler for ${JSON.stringify(name)}`,
+        };
+    }
+    const value = await handler({ args, headers });
+    if (isReply(value)) {
+        const { [REPLY]: _, ...fields } = value;
+        return fields;
+    }
+    return { result: value === undefined ? null : value };
+}
+/**
+ * A fetch that answers the host-call endpoint from `host`: one call as
+ * itself, a batch as `{ replies }`, in order.
+ */
+export function testHostFetch(host) {
+    return (async (_input, init) => {
+        const headers = new Headers(init?.headers);
+        const body = JSON.parse(String(init?.body ?? '{}'));
+        // The renderer's own headers are not the visitor's.
+        headers.delete('x-rsc-host-secret');
+        headers.delete('content-type');
+        const json = (value) => new Response(JSON.stringify(value), { headers: { 'content-type': 'application/json' } });
+        if ('calls' in body) {
+            return json({
+                replies: await Promise.all(body.calls.map((c) => answer(host, c.function, c.args ?? [], headers))),
+            });
+        }
+        return json(await answer(host, body.function, body.args ?? [], headers));
+    });
+}
+//# sourceMappingURL=testHost.js.map

package/dist/testHost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testHost.js","sourceRoot":"","sources":["../src/testHost.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+DAA+D;AAC/D,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yDAAyD;AAIzD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;AAEnD,4DAA4D;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAA;AAwBjD,MAAM,KAAK,GAAG,CAAC,MAAiC,EAAS,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;AAE1F;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,kEAAkE;IAClE,eAAe,EAAE,CAAC,OAAgB,EAAS,EAAE,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC9F,yCAAyC;IACzC,YAAY,EAAE,CAAC,OAAgB,EAAS,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACxF,oEAAoE;IACpE,QAAQ,EAAE,CAAC,EAAU,EAAE,MAAM,GAAG,GAAG,EAAS,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;IAC9F,+EAA+E;IAC/E,MAAM,EAAE,CAAC,MAAc,EAAE,OAAO,GAAG,UAAU,EAAS,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IACzG,oFAAoF;IACpF,OAAO,EAAE,CAAC,MAAgC,EAAS,EAAE,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IACzF,sEAAsE;IACtE,YAAY,EAAE,CAAC,MAAe,EAAE,GAAG,OAAiB,EAAS,EAAE,CAC7D,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAA+B,CAAC;CAC7D,CAAA;AAEV,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAiC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA;AAC1G,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,IAAY,EAAE,IAAe,EAAE,OAAgB;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;IAE1B,wEAAwE;IACxE,uDAAuD;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EACH,IAAI,KAAK,eAAe;gBACtB,CAAC,CAAC,mCAAmC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,+BAA+B,eAAe,WAAW;gBACrH,CAAC,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;SACjE,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAE9C,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,KAAK,CAAA;QAEvC,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAA;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,CAAC,KAAK,EAAE,MAAyB,EAAE,IAAkB,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAEK,CAAA;QAEvD,oDAAoD;QACpD,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAA;QACnC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;QAE9B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAA;QAE1F,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CAAC;gBACV,OAAO,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;aACnG,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;IAC1E,CAAC,CAAiB,CAAA;AACpB,CAAC","sourcesContent":["// A backend for tests: answers rpc() calls and host middleware the way a Go\n// or Laravel host answers them over HTTP, without one running.\n//\n// The app under test talks to it through the real client, httpHostCalls,\n// handed a fetch that answers in-process. So a test exercises what ships -\n// batching, a redirect raised as the engine's own, an unauthenticated reply\n// becoming a 401 - and only the backend is stood in for.\n\nimport type { HostCallReply } from './hostCalls.js'\n\nconst REPLY = Symbol.for('rsc-kit.test-host-reply')\n\n/** The name the engine asks a host's route guards under. */\nexport const HOST_MIDDLEWARE = '__rsc.middleware'\n\n/** What a test handler is given: the call's arguments, and the headers the renderer forwarded. */\nexport interface HostCallInput {\n  args: unknown[]\n  /** The visitor's request headers the renderer passed on - the cookie, the Accept-Language. */\n  headers: Headers\n}\n\n/** Answers one function. Return a value for its result, or one of `hostReply`'s answers. */\nexport type HostHandler = (call: HostCallInput) => unknown\n\n/**\n * The backend's functions, by the name rpc() calls them with.\n *\n * Route guards declared for the host are asked as `__rsc.middleware`\n * (`HOST_MIDDLEWARE`), with the guard names as the first argument; answer\n * `true` to let the page render. Anything else refuses, as a real host's\n * answer would.\n */\nexport type TestHost = Record<string, HostHandler>\n\ntype Reply = Omit<HostCallReply, 'result'> & { [REPLY]: true }\n\nconst reply = (fields: Omit<Reply, typeof REPLY>): Reply => ({ ...fields, [REPLY]: true })\n\n/**\n * The protocol's own answers, for a handler to return.\n *\n *     host: {\n *       'Apps.list': ({ headers }) =>\n *         headers.get('cookie')?.includes('session=') ? [{ id: 1 }] : hostReply.unauthenticated(),\n *       'Apps.create': ({ args }) => hostReply.invalid({ name: ['Taken.'] }),\n *     }\n */\nexport const hostReply = {\n  /** No session: the page answers 401, an action its auth error. */\n  unauthenticated: (message?: string): Reply => reply({ unauthenticated: true, error: message }),\n  /** A session that still may not: 403. */\n  unauthorized: (message?: string): Reply => reply({ unauthorized: true, error: message }),\n  /** Send the visitor somewhere else, as the host's redirect does. */\n  redirect: (to: string, status = 307): Reply => reply({ redirect: to, redirectStatus: status }),\n  /** Refuse with a status - a 404 for a record this caller cannot see, a 429. */\n  refuse: (status: number, message = 'Refused.'): Reply => reply({ error: message, refusalStatus: status }),\n  /** The input was refused, by field: an action returns these as validationErrors. */\n  invalid: (errors: Record<string, string[]>): Reply => reply({ validationErrors: errors }),\n  /** A result, and the regions of the page the call says it changed. */\n  revalidating: (result: unknown, ...targets: string[]): Reply =>\n    reply({ result, revalidate: targets } as Omit<Reply, typeof REPLY>),\n} as const\n\nfunction isReply(value: unknown): value is Reply {\n  return typeof value === 'object' && value !== null && (value as Record<symbol, unknown>)[REPLY] === true\n}\n\nasync function answer(host: TestHost, name: string, args: unknown[], headers: Headers): Promise<HostCallReply> {\n  const handler = host[name]\n\n  // Fails the call rather than answering null: a function the test forgot\n  // is a test that would otherwise pass against nothing.\n  if (!handler) {\n    return {\n      error:\n        name === HOST_MIDDLEWARE\n          ? `the page asked its host guards (${JSON.stringify(args[0])}) and the test host has no \"${HOST_MIDDLEWARE}\" handler`\n          : `the test host has no handler for ${JSON.stringify(name)}`,\n    }\n  }\n\n  const value = await handler({ args, headers })\n\n  if (isReply(value)) {\n    const { [REPLY]: _, ...fields } = value\n\n    return fields\n  }\n\n  return { result: value === undefined ? null : value }\n}\n\n/**\n * A fetch that answers the host-call endpoint from `host`: one call as\n * itself, a batch as `{ replies }`, in order.\n */\nexport function testHostFetch(host: TestHost): typeof fetch {\n  return (async (_input: RequestInfo | URL, init?: RequestInit) => {\n    const headers = new Headers(init?.headers)\n    const body = JSON.parse(String(init?.body ?? '{}')) as\n      | { function: string; args?: unknown[] }\n      | { calls: { function: string; args?: unknown[] }[] }\n\n    // The renderer's own headers are not the visitor's.\n    headers.delete('x-rsc-host-secret')\n    headers.delete('content-type')\n\n    const json = (value: unknown) =>\n      new Response(JSON.stringify(value), { headers: { 'content-type': 'application/json' } })\n\n    if ('calls' in body) {\n      return json({\n        replies: await Promise.all(body.calls.map((c) => answer(host, c.function, c.args ?? [], headers))),\n      })\n    }\n\n    return json(await answer(host, body.function, body.args ?? [], headers))\n  }) as typeof fetch\n}\n"]}

package/dist/testing.d.ts

@@ -1,3 +1,5 @@
+import { type TestHost } from './testHost.js';
+export { hostReply, HOST_MIDDLEWARE, type HostCallInput, type HostHandler, type TestHost } from './testHost.js';
 export interface TestApp {
     /** A path, not a url. The origin is whatever the app was told it is. */
     fetch(path: string, init?: RequestInit): Promise<Response>;
@@ -18,6 +20,12 @@ export interface TestAppOptions {
     build?: boolean;
     /** The origin requests are made against. Nothing reads it; it is a url. */
     origin?: string;
+    /**
+     * The backend, answered in the test: rpc() calls and host guards by name.
+     * The app reaches it through the same client it uses against a real one,
+     * so nothing listens and RSC_BACKEND is not called. See `hostReply`.
+     */
+    host?: TestHost;
 }
 /**
  * A file the build put in .output/public, answered the way Nitro's static

package/dist/testing.js

@@ -19,6 +19,9 @@ import { spawnSync } from 'node:child_process';
 import { existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
 import { extname, join, resolve, sep } from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { httpHostCalls } from './hostCalls.js';
+import { testHostFetch } from './testHost.js';
+export { hostReply, HOST_MIDDLEWARE } from './testHost.js';
 /**
  * Where the build put the server bundle.
  *
@@ -169,10 +172,20 @@ export async function createTestApp(options = {}) {
     if (typeof entry.default !== 'function') {
         throw new Error(`[rsc-kit] ${bundle} does not export a request handler.`);
     }
+    const host = options.host
+        ? httpHostCalls({ endpoint: 'http://test-host/__rsc/host-call', secret: 'test', fetch: testHostFetch(options.host) })
+        : null;
+    if (host && !entry.installHostFn) {
+        throw new Error(`[rsc-kit] ${bundle} cannot take a host. Rebuild against the current @rsc-kit/core.`);
+    }
     return {
         bundle,
         fetch: async (path, init) => {
             const request = new Request(new URL(path, origin), init);
+            // Per request, not once: the loaded bundle is shared by every app a
+            // run creates, and the host is this app's.
+            if (host)
+                entry.installHostFn(host);
             return staticFile(root, request) ?? entry.default(request);
         },
     };

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,0DAA0D;AAC1D,EAAE;AACF,sCAAsC;AACtC,oFAAoF;AACpF,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gBAAgB;AAChB,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,gEAAgE;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAyBxC;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,EAAE,gDAAgD,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC;KACtC,CAAA;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAA;AAC5D,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAA;IAE9B,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEzE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAA;QAExE,IAAI,IAAI,GAAG,MAAM;YAAE,MAAM,GAAG,IAAI,CAAA;IAClC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAA;AAEhD,sFAAsF;AACtF,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,cAAc,EAAE,2BAA2B;IAC3C,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,kBAAkB;CAC3B,CAAA;AAED;;;;;;;;;;;GAWG;AACH,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAgB;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAEtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAA;IAE/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAA;IAEnG,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAA;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAElE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE;KAC3F,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,uCAAuC;AACvC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAA;IAEtD,IAAI,OAAO,GAA2B,EAAE,CAAA;IAExC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAA;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AACjF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAc;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,8EAA8E,CAC/H,CAAA;QACH,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAEhF,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAA;IAE1B,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACnC,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE;KAChD,CAAC,CAAA;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qEAAqE,IAAI,+BAA+B,CACzG,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAO,GAAmB,EAAE;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAA;IAEnD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAA;IAE5E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;IACrC,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAEtD,CAAA;IAED,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,qCAAqC,CAAC,CAAA;IAC3E,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;YAExD,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["// The whole app as a function, for tests.\n//\n//   import { createTestApp } from '@rsc-kit/core/testing'\n//\n//   const app = await createTestApp()\n//   const res = await app.fetch('/api/orders', { headers: { Cookie: 'user=ada' } })\n//\n// No port, no browser, no server process. The built entry already exports the\n// same Request → Response handler the dev server and the production server\n// both call, so a test can hand it a Request and read the Response — through\n// the real router, the real middleware, the real api routes, and the pages the\n// build stored.\n//\n// That is the tier between a unit test and a browser. An action or a route is\n// a function and can be imported and called; a browser test proves the page\n// works; this proves the app answers a url the way it is deployed, which is\n// where a route that renders fine and is served wrong shows up.\n\nimport { spawnSync } from 'node:child_process'\nimport { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'\nimport { extname, join, resolve, sep } from 'node:path'\nimport { pathToFileURL } from 'node:url'\n\nexport interface TestApp {\n  /** A path, not a url. The origin is whatever the app was told it is. */\n  fetch(path: string, init?: RequestInit): Promise<Response>\n  /** Where the build was read from, for a test that wants to look. */\n  bundle: string\n}\n\nexport interface TestAppOptions {\n  /** The project. Defaults to the working directory. */\n  root?: string\n  /**\n   * Whether to build first.\n   *\n   * `true` builds when the source is newer than the last build, which is what\n   * a test run wants: the first run pays for it, the rest do not, and an edit\n   * is picked up. `false` never builds and fails loudly if there is nothing to\n   * read — for a ci step that already built.\n   */\n  build?: boolean\n  /** The origin requests are made against. Nothing reads it; it is a url. */\n  origin?: string\n}\n\n/**\n * Where the build put the server bundle.\n *\n * Two layouts, because two ways of building. Under Nitro — every scaffolded\n * app — it is inside Nitro's own directory. On its own the plugin writes\n * <outDir>/dist/rsc. The first that exists wins.\n */\nfunction findBundle(root: string): string | null {\n  const candidates = [\n    join(root, 'node_modules/.nitro/vite/services/rsc/index.js'),\n    join(root, '.rsc/dist/rsc/index.js'),\n    join(root, 'build/dist/rsc/index.js'),\n  ]\n\n  return candidates.find((path) => existsSync(path)) ?? null\n}\n\n/** The newest mtime under a directory, for deciding whether a build is stale. */\nfunction newest(dir: string): number {\n  if (!existsSync(dir)) return 0\n\n  let latest = 0\n\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    if (entry.name === 'node_modules' || entry.name.startsWith('.')) continue\n\n    const path = join(dir, entry.name)\n    const time = entry.isDirectory() ? newest(path) : statSync(path).mtimeMs\n\n    if (time > latest) latest = time\n  }\n\n  return latest\n}\n\n/** One build per process per root, however many test files ask. */\nconst built = new Map<string, Promise<string>>()\n\n/** The content types a test is likely to assert on; anything else is octet-stream. */\nconst CONTENT_TYPES: Record<string, string> = {\n  '.html': 'text/html; charset=utf-8',\n  '.js': 'text/javascript; charset=utf-8',\n  '.mjs': 'text/javascript; charset=utf-8',\n  '.css': 'text/css; charset=utf-8',\n  '.json': 'application/json; charset=utf-8',\n  '.webmanifest': 'application/manifest+json',\n  '.xml': 'application/xml',\n  '.txt': 'text/plain; charset=utf-8',\n  '.svg': 'image/svg+xml',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.webp': 'image/webp',\n  '.avif': 'image/avif',\n  '.gif': 'image/gif',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.wasm': 'application/wasm',\n  '.map': 'application/json',\n}\n\n/**\n * A file the build put in .output/public, answered the way Nitro's static\n * layer would - which the handler this harness loads does not include. The\n * handler is the rsc service: routing, pages, actions, api routes. Assets,\n * the service worker, the manifest and the icons are files Nitro serves in\n * production from .output/public, and a test that asked for /sw.js used to\n * get the router's 404 for a file the deployment serves fine - the one\n * shape this harness exists to catch, in the other direction.\n *\n * Files only, for GET and HEAD, within the directory: a path that escapes it\n * is a request for the handler, not a file.\n */\n/** @internal Exported for its test. */\nexport function staticFile(root: string, request: Request): Response | null {\n  if (request.method !== 'GET' && request.method !== 'HEAD') return null\n\n  const publicDir = join(root, '.output/public')\n  const pathname = decodeURIComponent(new URL(request.url).pathname)\n  const file = resolve(publicDir, '.' + pathname)\n\n  if (!file.startsWith(publicDir + sep) || !existsSync(file) || !statSync(file).isFile()) return null\n\n  const type = CONTENT_TYPES[extname(file).toLowerCase()] ?? 'application/octet-stream'\n  const body = request.method === 'HEAD' ? null : readFileSync(file)\n\n  return new Response(body, {\n    status: 200,\n    headers: { 'Content-Type': type, 'Cache-Control': 'no-store', 'X-RSC-Kit-Test': 'static' },\n  })\n}\n\n/**\n * How this project builds: its own `build` script, run by the package manager\n * this test is running under. Without a script, Vite directly - on Bun's\n * runtime when the tests are, since a bin's node shebang would otherwise\n * start it under Node.\n */\n/** @internal Exported for its test. */\nexport function buildCommand(root: string): [string, string[]] {\n  const onBun = typeof process.versions.bun === 'string'\n\n  let scripts: Record<string, string> = {}\n\n  try {\n    scripts = JSON.parse(readFileSync(join(root, 'package.json'), 'utf-8')).scripts ?? {}\n  } catch {\n    // No package.json, or not JSON: there is no script to run.\n  }\n\n  if (typeof scripts.build === 'string') {\n    return onBun ? ['bun', ['run', 'build']] : ['npm', ['run', 'build']]\n  }\n\n  return onBun ? ['bun', ['--bun', 'vite', 'build']] : ['npx', ['vite', 'build']]\n}\n\nasync function ensureBuilt(root: string, build: boolean): Promise<string> {\n  const existing = findBundle(root)\n\n  if (!build) {\n    if (!existing) {\n      throw new Error(\n        `[rsc-kit] No build to test against under ${root}. Run the build first, or let createTestApp() do it by leaving \\`build\\` on.`,\n      )\n    }\n\n    return existing\n  }\n\n  const fresh = existing && statSync(existing).mtimeMs > newest(join(root, 'src'))\n\n  if (fresh) return existing\n\n  // The user's own build command, so what is tested is what ships. A test\n  // that built some other way would pass against a bundle nobody deploys -\n  // and used to: this ran `npx vite build` whatever package.json said, which\n  // on a Bun project built under Node and failed on the first `import 'bun'`.\n  const [command, args] = buildCommand(root)\n  const run = spawnSync(command, args, {\n    cwd: root,\n    stdio: ['ignore', 'pipe', 'pipe'],\n    env: { ...process.env, NODE_ENV: 'production' },\n  })\n\n  if (run.status !== 0) {\n    throw new Error(`[rsc-kit] The build failed, so there is nothing to test:\\n${run.stderr}`)\n  }\n\n  const bundle = findBundle(root)\n\n  if (!bundle) {\n    throw new Error(\n      `[rsc-kit] The build finished but no server bundle was found under ${root}. Is rscKit() in vite.config?`,\n    )\n  }\n\n  return bundle\n}\n\n/**\n * Build the app if it needs it, load it, and hand back something to fetch from.\n *\n * Memoised per root: every test file in a run shares one build and one loaded\n * module, which is both the fast path and the correct one — two copies of the\n * server bundle in one process would be two client-reference registries.\n */\nexport async function createTestApp(options: TestAppOptions = {}): Promise<TestApp> {\n  const root = resolve(options.root ?? process.cwd())\n  const origin = options.origin ?? 'https://app.test'\n\n  built.set(root, built.get(root) ?? ensureBuilt(root, options.build ?? true))\n\n  const bundle = await built.get(root)!\n  const entry = (await import(pathToFileURL(bundle).href)) as {\n    default: (request: Request) => Promise<Response>\n  }\n\n  if (typeof entry.default !== 'function') {\n    throw new Error(`[rsc-kit] ${bundle} does not export a request handler.`)\n  }\n\n  return {\n    bundle,\n    fetch: async (path, init) => {\n      const request = new Request(new URL(path, origin), init)\n\n      return staticFile(root, request) ?? entry.default(request)\n    },\n  }\n}\n"]}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,0DAA0D;AAC1D,EAAE;AACF,sCAAsC;AACtC,oFAAoF;AACpF,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gBAAgB;AAChB,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,gEAAgE;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,aAAa,EAAiB,MAAM,eAAe,CAAA;AAE5D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAuD,MAAM,eAAe,CAAA;AA+B/G;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,EAAE,gDAAgD,CAAC;QAC5D,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC;KACtC,CAAA;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAA;AAC5D,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAA;IAE9B,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEzE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAA;QAExE,IAAI,IAAI,GAAG,MAAM;YAAE,MAAM,GAAG,IAAI,CAAA;IAClC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAA;AAEhD,sFAAsF;AACtF,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,cAAc,EAAE,2BAA2B;IAC3C,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,kBAAkB;CAC3B,CAAA;AAED;;;;;;;;;;;GAWG;AACH,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAgB;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAEtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAA;IAE/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAA;IAEnG,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAA;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAElE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE;KAC3F,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,uCAAuC;AACvC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAA;IAEtD,IAAI,OAAO,GAA2B,EAAE,CAAA;IAExC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAA;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AACjF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAc;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,8EAA8E,CAC/H,CAAA;QACH,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAEhF,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAA;IAE1B,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACnC,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE;KAChD,CAAC,CAAA;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qEAAqE,IAAI,+BAA+B,CACzG,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAO,GAAmB,EAAE;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAA;IAEnD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAA;IAE5E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;IACrC,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAGtD,CAAA;IAED,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,qCAAqC,CAAC,CAAA;IAC3E,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;QACvB,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kCAAkC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrH,CAAC,CAAC,IAAI,CAAA;IAER,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,iEAAiE,CAAC,CAAA;IACvG,CAAC;IAED,OAAO;QACL,MAAM;QACN,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;YAExD,oEAAoE;YACpE,2CAA2C;YAC3C,IAAI,IAAI;gBAAE,KAAK,CAAC,aAAc,CAAC,IAAI,CAAC,CAAA;YAEpC,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC5D,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["// The whole app as a function, for tests.\n//\n//   import { createTestApp } from '@rsc-kit/core/testing'\n//\n//   const app = await createTestApp()\n//   const res = await app.fetch('/api/orders', { headers: { Cookie: 'user=ada' } })\n//\n// No port, no browser, no server process. The built entry already exports the\n// same Request → Response handler the dev server and the production server\n// both call, so a test can hand it a Request and read the Response — through\n// the real router, the real middleware, the real api routes, and the pages the\n// build stored.\n//\n// That is the tier between a unit test and a browser. An action or a route is\n// a function and can be imported and called; a browser test proves the page\n// works; this proves the app answers a url the way it is deployed, which is\n// where a route that renders fine and is served wrong shows up.\n\nimport { spawnSync } from 'node:child_process'\nimport { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'\nimport { extname, join, resolve, sep } from 'node:path'\nimport { pathToFileURL } from 'node:url'\nimport { httpHostCalls } from './hostCalls.js'\nimport { testHostFetch, type TestHost } from './testHost.js'\n\nexport { hostReply, HOST_MIDDLEWARE, type HostCallInput, type HostHandler, type TestHost } from './testHost.js'\n\nexport interface TestApp {\n  /** A path, not a url. The origin is whatever the app was told it is. */\n  fetch(path: string, init?: RequestInit): Promise<Response>\n  /** Where the build was read from, for a test that wants to look. */\n  bundle: string\n}\n\nexport interface TestAppOptions {\n  /** The project. Defaults to the working directory. */\n  root?: string\n  /**\n   * Whether to build first.\n   *\n   * `true` builds when the source is newer than the last build, which is what\n   * a test run wants: the first run pays for it, the rest do not, and an edit\n   * is picked up. `false` never builds and fails loudly if there is nothing to\n   * read — for a ci step that already built.\n   */\n  build?: boolean\n  /** The origin requests are made against. Nothing reads it; it is a url. */\n  origin?: string\n  /**\n   * The backend, answered in the test: rpc() calls and host guards by name.\n   * The app reaches it through the same client it uses against a real one,\n   * so nothing listens and RSC_BACKEND is not called. See `hostReply`.\n   */\n  host?: TestHost\n}\n\n/**\n * Where the build put the server bundle.\n *\n * Two layouts, because two ways of building. Under Nitro — every scaffolded\n * app — it is inside Nitro's own directory. On its own the plugin writes\n * <outDir>/dist/rsc. The first that exists wins.\n */\nfunction findBundle(root: string): string | null {\n  const candidates = [\n    join(root, 'node_modules/.nitro/vite/services/rsc/index.js'),\n    join(root, '.rsc/dist/rsc/index.js'),\n    join(root, 'build/dist/rsc/index.js'),\n  ]\n\n  return candidates.find((path) => existsSync(path)) ?? null\n}\n\n/** The newest mtime under a directory, for deciding whether a build is stale. */\nfunction newest(dir: string): number {\n  if (!existsSync(dir)) return 0\n\n  let latest = 0\n\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    if (entry.name === 'node_modules' || entry.name.startsWith('.')) continue\n\n    const path = join(dir, entry.name)\n    const time = entry.isDirectory() ? newest(path) : statSync(path).mtimeMs\n\n    if (time > latest) latest = time\n  }\n\n  return latest\n}\n\n/** One build per process per root, however many test files ask. */\nconst built = new Map<string, Promise<string>>()\n\n/** The content types a test is likely to assert on; anything else is octet-stream. */\nconst CONTENT_TYPES: Record<string, string> = {\n  '.html': 'text/html; charset=utf-8',\n  '.js': 'text/javascript; charset=utf-8',\n  '.mjs': 'text/javascript; charset=utf-8',\n  '.css': 'text/css; charset=utf-8',\n  '.json': 'application/json; charset=utf-8',\n  '.webmanifest': 'application/manifest+json',\n  '.xml': 'application/xml',\n  '.txt': 'text/plain; charset=utf-8',\n  '.svg': 'image/svg+xml',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.webp': 'image/webp',\n  '.avif': 'image/avif',\n  '.gif': 'image/gif',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.wasm': 'application/wasm',\n  '.map': 'application/json',\n}\n\n/**\n * A file the build put in .output/public, answered the way Nitro's static\n * layer would - which the handler this harness loads does not include. The\n * handler is the rsc service: routing, pages, actions, api routes. Assets,\n * the service worker, the manifest and the icons are files Nitro serves in\n * production from .output/public, and a test that asked for /sw.js used to\n * get the router's 404 for a file the deployment serves fine - the one\n * shape this harness exists to catch, in the other direction.\n *\n * Files only, for GET and HEAD, within the directory: a path that escapes it\n * is a request for the handler, not a file.\n */\n/** @internal Exported for its test. */\nexport function staticFile(root: string, request: Request): Response | null {\n  if (request.method !== 'GET' && request.method !== 'HEAD') return null\n\n  const publicDir = join(root, '.output/public')\n  const pathname = decodeURIComponent(new URL(request.url).pathname)\n  const file = resolve(publicDir, '.' + pathname)\n\n  if (!file.startsWith(publicDir + sep) || !existsSync(file) || !statSync(file).isFile()) return null\n\n  const type = CONTENT_TYPES[extname(file).toLowerCase()] ?? 'application/octet-stream'\n  const body = request.method === 'HEAD' ? null : readFileSync(file)\n\n  return new Response(body, {\n    status: 200,\n    headers: { 'Content-Type': type, 'Cache-Control': 'no-store', 'X-RSC-Kit-Test': 'static' },\n  })\n}\n\n/**\n * How this project builds: its own `build` script, run by the package manager\n * this test is running under. Without a script, Vite directly - on Bun's\n * runtime when the tests are, since a bin's node shebang would otherwise\n * start it under Node.\n */\n/** @internal Exported for its test. */\nexport function buildCommand(root: string): [string, string[]] {\n  const onBun = typeof process.versions.bun === 'string'\n\n  let scripts: Record<string, string> = {}\n\n  try {\n    scripts = JSON.parse(readFileSync(join(root, 'package.json'), 'utf-8')).scripts ?? {}\n  } catch {\n    // No package.json, or not JSON: there is no script to run.\n  }\n\n  if (typeof scripts.build === 'string') {\n    return onBun ? ['bun', ['run', 'build']] : ['npm', ['run', 'build']]\n  }\n\n  return onBun ? ['bun', ['--bun', 'vite', 'build']] : ['npx', ['vite', 'build']]\n}\n\nasync function ensureBuilt(root: string, build: boolean): Promise<string> {\n  const existing = findBundle(root)\n\n  if (!build) {\n    if (!existing) {\n      throw new Error(\n        `[rsc-kit] No build to test against under ${root}. Run the build first, or let createTestApp() do it by leaving \\`build\\` on.`,\n      )\n    }\n\n    return existing\n  }\n\n  const fresh = existing && statSync(existing).mtimeMs > newest(join(root, 'src'))\n\n  if (fresh) return existing\n\n  // The user's own build command, so what is tested is what ships. A test\n  // that built some other way would pass against a bundle nobody deploys -\n  // and used to: this ran `npx vite build` whatever package.json said, which\n  // on a Bun project built under Node and failed on the first `import 'bun'`.\n  const [command, args] = buildCommand(root)\n  const run = spawnSync(command, args, {\n    cwd: root,\n    stdio: ['ignore', 'pipe', 'pipe'],\n    env: { ...process.env, NODE_ENV: 'production' },\n  })\n\n  if (run.status !== 0) {\n    throw new Error(`[rsc-kit] The build failed, so there is nothing to test:\\n${run.stderr}`)\n  }\n\n  const bundle = findBundle(root)\n\n  if (!bundle) {\n    throw new Error(\n      `[rsc-kit] The build finished but no server bundle was found under ${root}. Is rscKit() in vite.config?`,\n    )\n  }\n\n  return bundle\n}\n\n/**\n * Build the app if it needs it, load it, and hand back something to fetch from.\n *\n * Memoised per root: every test file in a run shares one build and one loaded\n * module, which is both the fast path and the correct one — two copies of the\n * server bundle in one process would be two client-reference registries.\n */\nexport async function createTestApp(options: TestAppOptions = {}): Promise<TestApp> {\n  const root = resolve(options.root ?? process.cwd())\n  const origin = options.origin ?? 'https://app.test'\n\n  built.set(root, built.get(root) ?? ensureBuilt(root, options.build ?? true))\n\n  const bundle = await built.get(root)!\n  const entry = (await import(pathToFileURL(bundle).href)) as {\n    default: (request: Request) => Promise<Response>\n    installHostFn?: (fn: (name: string, ...args: unknown[]) => Promise<unknown>) => () => void\n  }\n\n  if (typeof entry.default !== 'function') {\n    throw new Error(`[rsc-kit] ${bundle} does not export a request handler.`)\n  }\n\n  const host = options.host\n    ? httpHostCalls({ endpoint: 'http://test-host/__rsc/host-call', secret: 'test', fetch: testHostFetch(options.host) })\n    : null\n\n  if (host && !entry.installHostFn) {\n    throw new Error(`[rsc-kit] ${bundle} cannot take a host. Rebuild against the current @rsc-kit/core.`)\n  }\n\n  return {\n    bundle,\n    fetch: async (path, init) => {\n      const request = new Request(new URL(path, origin), init)\n\n      // Per request, not once: the loaded bundle is shared by every app a\n      // run creates, and the host is this app's.\n      if (host) entry.installHostFn!(host)\n\n      return staticFile(root, request) ?? entry.default(request)\n    },\n  }\n}\n"]}

package/dist/vite.d.ts

@@ -273,6 +273,22 @@ export interface RscKitOptions {
      * A host whose functions are already JavaScript passes nothing.
      */
     hostActions?: Record<string, string>;
+    /**
+     * The backend's command that writes its manifest, run as dev or a build
+     * starts so the manifest cannot go stale:
+     *
+     *     rscKit({ hostManifest: { command: ['go', 'run', './cmd/api', 'rsc-manifest'] } })
+     *     rscKit({ hostManifest: { command: ['php', 'artisan', 'rsc:host-manifest'] } })
+     *
+     * It writes rsc-host.json: the actions the build makes stubs for, and the
+     * names rpc() may be called with. Run once per process, from `cwd`
+     * (default: the project root). A failure fails a build; under dev it is
+     * reported and the manifest already on disk is used.
+     */
+    hostManifest?: {
+        command: string[];
+        cwd?: string;
+    };
 }
 /**
  * The service worker, written into the client output at build time.

package/dist/vite.js

@@ -199,6 +199,16 @@ let foundAssets = {
 };
 /** Host functions to generate stubs for — see RscKitOptions.hostActions. */
 let hostActions;
+/** What rpc() may be called with, from rsc-host-functions.json; null when the backend lists none. */
+let hostFunctions = null;
+/**
+ * The manifest commands run in this process, by project and command.
+ *
+ * Once, not on every config load: a dev server reloads its config when the
+ * manifest changes, and running the command again there rewrote the file it
+ * had just restarted for - a restart that never ended.
+ */
+const hostManifestRan = new Set();
 /**
  * This file's directory.
  *
@@ -230,47 +240,62 @@ function envRouteConfig() {
     return { file, dynamicPattern: new RegExp(pattern) };
 }
 /** The file a backend writes its action names into. */
-const HOST_ACTIONS_FILE = "rsc-host-actions.json";
+const HOST_FILE = "rsc-host.json";
 /**
- * Host actions, read from a file the backend wrote.
+ * What the backend offers the app, read from a file it wrote:
+ *
+ *     {
+ *       "actions": { "ordersCreate": "Orders.create" },
+ *       "functions": ["Orders.create", "Orders.recent"]
+ *     }
+ *
+ * `actions` are the server actions the build writes "use server" stubs for,
+ * by JavaScript name. `functions` are the names rpc() may be called with,
+ * which the build turns into a type so a misspelt one fails the typecheck.
  *
  * A file rather than an environment variable, because the backend no longer
- * drives the build — `vite build` does. Discovery has to stay where the classes
- * are (reflection through Composer's autoloader finds what a class inherits;
- * a regex would silently miss every inherited action), but the handoff is just
- * a map of names, and a JSON file is something any language can write:
+ * drives the build - `vite build` does. Discovery has to stay where the code
+ * is (reflection through Composer's autoloader finds what a class inherits; a
+ * regex would silently miss every inherited action), but the handoff is just
+ * names, and a JSON file is something any language can write:
  *
- *     php artisan rsc:action-manifest > rsc-host-actions.json
- *     go run ./cmd/rsc-actions       > rsc-host-actions.json
+ *     php artisan rsc:host-manifest
+ *     go run ./backend -manifest rsc-host.json
  *
- * Absent is not an error. An app with no host actions has no file, and one
- * that has them regenerates it as part of its build.
+ * Absent is not an error: a backend-less app has no file. `hostManifest`
+ * runs the command as dev or a build starts.
  */
-function fileHostActions(root) {
-    const path = join(root, HOST_ACTIONS_FILE);
-    if (!existsSync(path))
-        return {};
-    try {
-        const parsed = JSON.parse(readFileSync(path, "utf-8"));
-        // An empty list is an empty map. PHP's json_encode writes an empty
-        // array as [] whatever it was declared as, so a backend with no
-        // actions yet wrote exactly that - and the first `dev` of a fresh
-        // install refused to start over a file that said, correctly, "none".
-        if (Array.isArray(parsed) && parsed.length === 0)
-            return {};
-        if (parsed === null ||
-            typeof parsed !== "object" ||
-            Array.isArray(parsed)) {
-            throw new Error('expected an object of { jsName: "Class.method" }');
+function fileHostManifest(root) {
+    const path = join(root, HOST_FILE);
+    if (!existsSync(path)) {
+        if (existsSync(join(root, "rsc-host-actions.json"))) {
+            throw new Error("[rsc-kit] rsc-host-actions.json is the old manifest. The backend now writes " +
+                HOST_FILE + " - { actions, functions } - so update the adapter and run its manifest command.");
         }
-        return parsed;
+        return { actions: {}, functions: null };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(path, "utf-8"));
     }
     catch (error) {
-        // Loud, because the alternative is generating no stubs: every import of a
-        // server action then fails at build time, naming the import rather than
-        // this file.
-        throw new Error(`Could not read ${HOST_ACTIONS_FILE}: ${error instanceof Error ? error.message : String(error)}`);
+        throw new Error(`[rsc-kit] Could not read ${HOST_FILE}: ${error.message}`);
+    }
+    // An empty list is an empty map: PHP's json_encode writes an empty array
+    // as [] whatever it was declared as.
+    const actions = Array.isArray(parsed?.actions) && parsed.actions.length === 0 ? {} : parsed?.actions ?? {};
+    if (typeof actions !== "object" || actions === null || Array.isArray(actions)) {
+        throw new Error(`[rsc-kit] ${HOST_FILE}: "actions" must be an object of { jsName: "Function.name" }.`);
+    }
+    const functions = parsed?.functions;
+    if (functions !== undefined && (!Array.isArray(functions) || functions.some((n) => typeof n !== "string"))) {
+        throw new Error(`[rsc-kit] ${HOST_FILE}: "functions" must be an array of names.`);
     }
+    return {
+        actions: actions,
+        // The reserved guard call is the engine's to make, not the app's.
+        functions: functions ? functions.filter((n) => !n.startsWith("__rsc.")).sort() : null,
+    };
 }
 /**
  * The alias that lets a vendored copy of this package be imported by name.
@@ -402,7 +427,41 @@ function resolvePaths(options) {
             screenshots: foundAssets.screenshots.map((shot) => shot.href),
         };
     }
-    hostActions = options.hostActions ?? fileHostActions(projectRoot);
+    loadHostManifest(options);
+}
+function loadHostManifest(options) {
+    const manifest = fileHostManifest(projectRoot);
+    hostActions = options.hostActions ?? manifest.actions;
+    hostFunctions = manifest.functions;
+}
+/** Run the backend's manifest command, once per process; see the option. */
+function runHostManifest(options, isBuild) {
+    const spec = options.hostManifest;
+    if (!spec)
+        return;
+    const ran = projectRoot + "\0" + spec.command.join("\0");
+    if (hostManifestRan.has(ran))
+        return;
+    hostManifestRan.add(ran);
+    const [command, ...args] = spec.command;
+    if (!command)
+        throw new Error("[rsc-kit] hostManifest.command is empty.");
+    const run = spawnSync(command, args, {
+        cwd: spec.cwd ? resolve(projectRoot, spec.cwd) : projectRoot,
+        stdio: ["ignore", "inherit", "pipe"],
+        encoding: "utf-8",
+    });
+    if (run.status === 0) {
+        loadHostManifest(options);
+        return;
+    }
+    const message = `the backend's manifest command failed (${spec.command.join(" ")}):\n` +
+        (run.error?.message ?? run.stderr ?? "").trim();
+    // A build from a stale manifest ships stubs for functions the backend no
+    // longer has; dev carries on with the one on disk, and says so.
+    if (isBuild)
+        throw new Error(`[rsc-kit] ${message}`);
+    log(`${message}\n  Using the ${HOST_FILE} already on disk.`);
 }
 function log(...args) {
     console.error("[rsc-kit]", ...args);
@@ -1994,9 +2053,19 @@ function renderHostGlobalTypes() {
         "// Deliberately not a module — no import/export — so the declaration is",
         "// global to the project without every file having to reference it.",
         "",
+        // The names the backend listed, so a misspelt one fails the typecheck
+        // rather than the render. Without a list, any string.
+        ...(hostFunctions?.length
+            ? [
+                "// From " + HOST_FILE + ", which the backend writes.",
+                "type RscHostFunction =",
+                ...hostFunctions.map((name, i) => "  | " + JSON.stringify(name) + (i === hostFunctions.length - 1 ? ";" : "")),
+                "",
+            ]
+            : []),
         "declare function " +
             hostGlobal +
-            "<T = unknown>(name: string, ...args: unknown[]): Promise<T>;",
+            "<T = unknown>(name: " + (hostFunctions?.length ? "RscHostFunction" : "string") + ", ...args: unknown[]): Promise<T>;",
         "",
     ].join("\n");
 }
@@ -2461,6 +2530,11 @@ function installHostCallsOnce(): void {
   if (hostInstalled) return
   hostInstalled = true
 
+  // One installed already - a test's, through createTestApp({ host }) - is
+  // the host. Replacing it with the backend in .env would send the test's
+  // calls to a server that may not be running.
+  if (currentHost) return
+
   const origin = process.env.RSC_BACKEND ?? process.env.APP_URL
   const secret = process.env.RSC_HOST_CALL_SECRET
 
@@ -6224,6 +6298,7 @@ export function rscKit(options = {}) {
             },
         },
         config(_config, env) {
+            runHostManifest(options, env.command === "build");
             if (!existsSync(appDir)) {
                 throw new Error(`[rsc-kit] No app directory at ${appDir} — nothing to build.`);
             }
@@ -6674,11 +6749,11 @@ export function rscKit(options = {}) {
                 // dev server - rewrites the file, and until the server started again
                 // the stub was not there to import. Any event: the file appears on a
                 // first action, changes on the next, and goes when the last is removed.
-                const hostActionsPath = join(projectRoot, HOST_ACTIONS_FILE);
+                const hostActionsPath = join(projectRoot, HOST_FILE);
                 const hostActionsChanged = (file) => {
                     if (file !== hostActionsPath)
                         return;
-                    server.config.logger.info(`[rsc-kit] ${HOST_ACTIONS_FILE} changed — restarting`);
+                    server.config.logger.info(`[rsc-kit] ${relative(projectRoot, file)} changed — restarting`);
                     void server.restart();
                 };
                 server.watcher.add(hostActionsPath);