@squadbase/vantage 0.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Squadbase
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,95 @@
+# @squadbase/vantage
+
+Data dashboard framework for [Squadbase](https://squadbase.dev) Editor —
+Vite-powered, config-free, one-file first.
+
+You write `index.tsx`. Vantage owns routing, React, TanStack Query, Tailwind v4,
+the UI kit, the dev server, the optional API server, and the build. There is no
+config file.
+
+> **Status: prototype (v0.0.1).** APIs may still change between releases.
+
+## Install
+
+```bash
+npm install @squadbase/vantage
+# or: pnpm add @squadbase/vantage
+```
+
+`react` and `react-dom` (>=18.2) are peer dependencies — install them if your
+project doesn't have them yet.
+
+## Quick start
+
+Create a single `index.tsx` at your project root. The default-exported component
+becomes the `/` route:
+
+```tsx
+// index.tsx
+export default function Dashboard() {
+  return (
+    <main className="p-6">
+      <h1 className="text-2xl font-semibold">Dashboard</h1>
+    </main>
+  );
+}
+```
+
+Add scripts to your `package.json` so the CLI runs with the local binary on
+`PATH`, then start the dev server:
+
+```json
+{
+  "scripts": {
+    "dev": "vantage dev",
+    "build": "vantage build",
+    "preview": "vantage preview"
+  }
+}
+```
+
+```bash
+npm run dev        # → http://localhost:5173 (HMR + optional API)
+```
+
+Prefer a one-off invocation? Use `pnpm exec vantage dev` or `npx vantage dev` —
+a bare `vantage dev` only works from inside an npm script, where
+`node_modules/.bin` is on `PATH`.
+
+## CLI
+
+| Command | What it does |
+|---|---|
+| `vantage dev` | Dev server (HMR + optional API). Default `:5173` |
+| `vantage build` | Production build → `dist/` (client + optional server + `vantage-manifest.json`) |
+| `vantage preview` | Run the production build locally |
+| `vantage check` | Static diagnostics (routes, boundaries, forbidden files). Exit 1 on error |
+| `vantage routes` | Print the page + API URL map |
+| `vantage add` | Copy an editable UI component or block into your project |
+| `vantage doctor` | Report environment / project health |
+| `vantage upgrade` | Regenerate the `.vantage/` artifacts |
+
+## Growing past one file
+
+Vantage discovers structure from the filesystem — no config, no route table:
+
+- **Pages** — any `*.tsx` with a default export becomes a route
+  (`sales/index.tsx` → `/sales`, `sales/[customerId].tsx` → `/sales/:customerId`).
+- **Layouts** — `_layout.tsx` wraps its directory; `_404.tsx` / `_error.tsx`
+  handle not-found and errors.
+- **API** — add `server/api/**` handlers to enable a backend; they run
+  identically in `dev` and in the production build.
+- **Styling** — Tailwind v4 works out of the box; drop in a `styles.css`.
+
+Import only from the curated `@squadbase/vantage` subpaths (`/query`, `/router`,
+`/ui`, `/server`); the internally-managed stack (TanStack, Hono, Vite) is not
+imported directly.
+
+## Documentation
+
+Full guides live in the [Vantage docs](https://github.com/squadbase/vantage-framework/tree/main/docs)
+(bilingual — English under `docs/content/en`, Japanese under `docs/content`).
+
+## License
+
+[MIT](./LICENSE) © Squadbase

package/dist/chunk-73J5ZD4C.js

@@ -0,0 +1,96 @@
+import { isHttpError } from './chunk-B7LLBNLV.js';
+
+// @squadbase/vantage — generated build. Do not edit.
+
+// src/server/dispatch.ts
+function sortApiRoutes(routes) {
+  return [...routes].sort((a, b) => {
+    if (a.hasCatchall !== b.hasCatchall) return a.hasCatchall ? 1 : -1;
+    if (a.staticCount !== b.staticCount) return b.staticCount - a.staticCount;
+    return b.segments.length - a.segments.length;
+  });
+}
+function matchSegments(segments, parts) {
+  const params = {};
+  let i = 0;
+  for (const seg of segments) {
+    if (seg.kind === "catchall") {
+      params[seg.name] = parts.slice(i).map(decode).join("/");
+      return params;
+    }
+    if (i >= parts.length) return null;
+    if (seg.kind === "static") {
+      if (parts[i] !== seg.value) return null;
+    } else {
+      params[seg.name] = decode(parts[i]);
+    }
+    i++;
+  }
+  return i === parts.length ? params : null;
+}
+function decode(s) {
+  try {
+    return decodeURIComponent(s);
+  } catch {
+    return s;
+  }
+}
+function matchApiRoute(routes, pathname) {
+  if (pathname !== "/api" && !pathname.startsWith("/api/")) return null;
+  let rest = pathname.slice(4);
+  if (rest.startsWith("/")) rest = rest.slice(1);
+  if (rest.endsWith("/")) rest = rest.slice(0, -1);
+  const parts = rest === "" ? [] : rest.split("/");
+  for (const route of routes) {
+    const params = matchSegments(route.segments, parts);
+    if (params) return { route, params };
+  }
+  return null;
+}
+function requestId() {
+  const g = globalThis;
+  if (g.crypto?.randomUUID) return g.crypto.randomUUID();
+  return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+}
+async function dispatchApi(mod, request, params, env) {
+  const method = request.method.toUpperCase();
+  const handler = mod[method];
+  const rid = requestId();
+  if (typeof handler !== "function") {
+    const allowed = ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"].filter(
+      (m) => typeof mod[m] === "function"
+    );
+    return Response.json(
+      { error: "Method Not Allowed", method: request.method, requestId: rid },
+      { status: 405, headers: { Allow: allowed.join(", "), "x-vantage-request-id": rid } }
+    );
+  }
+  const ctx = {
+    request,
+    params,
+    env,
+    // Fire-and-forget: runs after the response is sent, on the server's own
+    // event loop; errors are swallowed so background work can't crash it.
+    waitUntil: (p) => {
+      void Promise.resolve(p).catch(() => void 0);
+    }
+  };
+  try {
+    const res = await handler(ctx);
+    const headers = new Headers(res.headers);
+    headers.set("x-vantage-request-id", rid);
+    return new Response(res.body, { status: res.status, statusText: res.statusText, headers });
+  } catch (err) {
+    const status = isHttpError(err) ? err.status : 500;
+    const message = isHttpError(err) ? err.message : "Internal Server Error";
+    console.error(`[vantage] API error (${rid}) ${request.method} ${new URL(request.url).pathname}:`, err);
+    return Response.json(
+      { error: message, requestId: rid },
+      { status, headers: { "x-vantage-request-id": rid } }
+    );
+  }
+}
+
+export { dispatchApi, matchApiRoute, sortApiRoutes };
+//# sourceMappingURL=chunk-73J5ZD4C.js.map
+//# sourceMappingURL=chunk-73J5ZD4C.js.map

package/dist/chunk-73J5ZD4C.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/dispatch.ts"],"names":[],"mappings":";;;;;AAcO,SAAS,cAAuC,MAAA,EAAkB;AACvE,EAAA,OAAO,CAAC,GAAG,MAAM,EAAE,IAAA,CAAK,CAAC,GAAG,CAAA,KAAM;AAChC,IAAA,IAAI,EAAE,WAAA,KAAgB,CAAA,CAAE,aAAa,OAAO,CAAA,CAAE,cAAc,CAAA,GAAI,EAAA;AAChE,IAAA,IAAI,EAAE,WAAA,KAAgB,CAAA,CAAE,aAAa,OAAO,CAAA,CAAE,cAAc,CAAA,CAAE,WAAA;AAC9D,IAAA,OAAO,CAAA,CAAE,QAAA,CAAS,MAAA,GAAS,CAAA,CAAE,QAAA,CAAS,MAAA;AAAA,EACxC,CAAC,CAAA;AACH;AAEA,SAAS,aAAA,CAAc,UAAqB,KAAA,EAAgD;AAC1F,EAAA,MAAM,SAAiC,EAAC;AACxC,EAAA,IAAI,CAAA,GAAI,CAAA;AACR,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,GAAA,CAAI,SAAS,UAAA,EAAY;AAC3B,MAAA,MAAA,CAAO,GAAA,CAAI,IAAI,CAAA,GAAI,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA;AACtD,MAAA,OAAO,MAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAA,IAAK,KAAA,CAAM,MAAA,EAAQ,OAAO,IAAA;AAC9B,IAAA,IAAI,GAAA,CAAI,SAAS,QAAA,EAAU;AACzB,MAAA,IAAI,KAAA,CAAM,CAAC,CAAA,KAAM,GAAA,CAAI,OAAO,OAAO,IAAA;AAAA,IACrC,CAAA,MAAO;AACL,MAAA,MAAA,CAAO,IAAI,IAAI,CAAA,GAAI,MAAA,CAAO,KAAA,CAAM,CAAC,CAAE,CAAA;AAAA,IACrC;AACA,IAAA,CAAA,EAAA;AAAA,EACF;AACA,EAAA,OAAO,CAAA,KAAM,KAAA,CAAM,MAAA,GAAS,MAAA,GAAS,IAAA;AACvC;AAEA,SAAS,OAAO,CAAA,EAAmB;AACjC,EAAA,IAAI;AACF,IAAA,OAAO,mBAAmB,CAAC,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA;AAAA,EACT;AACF;AAGO,SAAS,aAAA,CACd,QACA,QAAA,EACiE;AACjE,EAAA,IAAI,aAAa,MAAA,IAAU,CAAC,SAAS,UAAA,CAAW,OAAO,GAAG,OAAO,IAAA;AACjE,EAAA,IAAI,IAAA,GAAO,QAAA,CAAS,KAAA,CAAM,CAAC,CAAA;AAC3B,EAAA,IAAI,KAAK,UAAA,CAAW,GAAG,GAAG,IAAA,GAAO,IAAA,CAAK,MAAM,CAAC,CAAA;AAG7C,EAAA,IAAI,IAAA,CAAK,SAAS,GAAG,CAAA,SAAU,IAAA,CAAK,KAAA,CAAM,GAAG,EAAE,CAAA;AAC/C,EAAA,MAAM,QAAQ,IAAA,KAAS,EAAA,GAAK,EAAC,GAAI,IAAA,CAAK,MAAM,GAAG,CAAA;AAC/C,EAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,IAAA,MAAM,MAAA,GAAS,aAAA,CAAc,KAAA,CAAM,QAAA,EAAU,KAAK,CAAA;AAClD,IAAA,IAAI,MAAA,EAAQ,OAAO,EAAE,KAAA,EAAO,MAAA,EAAO;AAAA,EACrC;AACA,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,SAAA,GAAoB;AAC3B,EAAA,MAAM,CAAA,GAAI,UAAA;AACV,EAAA,IAAI,EAAE,MAAA,EAAQ,UAAA,EAAY,OAAO,CAAA,CAAE,OAAO,UAAA,EAAW;AACrD,EAAA,OAAO,GAAG,IAAA,CAAK,GAAA,EAAI,CAAE,QAAA,CAAS,EAAE,CAAC,CAAA,CAAA,EAAI,IAAA,CAAK,MAAA,GAAS,QAAA,CAAS,EAAE,EAAE,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,CAAA;AAC9E;AAMA,eAAsB,WAAA,CACpB,GAAA,EACA,OAAA,EACA,MAAA,EACA,GAAA,EACmB;AACnB,EAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAY;AAC1C,EAAA,MAAM,OAAA,GAAU,IAAI,MAAM,CAAA;AAC1B,EAAA,MAAM,MAAM,SAAA,EAAU;AAEtB,EAAA,IAAI,OAAO,YAAY,UAAA,EAAY;AACjC,IAAA,MAAM,OAAA,GAAW,CAAC,KAAA,EAAO,MAAA,EAAQ,OAAO,OAAA,EAAS,QAAA,EAAU,SAAS,CAAA,CAAY,MAAA;AAAA,MAC9E,CAAC,CAAA,KAAM,OAAO,GAAA,CAAI,CAAC,CAAA,KAAM;AAAA,KAC3B;AACA,IAAA,OAAO,QAAA,CAAS,IAAA;AAAA,MACd,EAAE,KAAA,EAAO,oBAAA,EAAsB,QAAQ,OAAA,CAAQ,MAAA,EAAQ,WAAW,GAAA,EAAI;AAAA,MACtE,EAAE,MAAA,EAAQ,GAAA,EAAK,OAAA,EAAS,EAAE,KAAA,EAAO,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,EAAG,sBAAA,EAAwB,GAAA,EAAI;AAAE,KACrF;AAAA,EACF;AAEA,EAAA,MAAM,GAAA,GAAkB;AAAA,IACtB,OAAA;AAAA,IACA,MAAA;AAAA,IACA,GAAA;AAAA;AAAA;AAAA,IAGA,SAAA,EAAW,CAAC,CAAA,KAAM;AAChB,MAAA,KAAK,QAAQ,OAAA,CAAQ,CAAC,CAAA,CAAE,KAAA,CAAM,MAAM,MAAS,CAAA;AAAA,IAC/C;AAAA,GACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,GAAG,CAAA;AAE7B,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA;AACvC,IAAA,OAAA,CAAQ,GAAA,CAAI,wBAAwB,GAAG,CAAA;AACvC,IAAA,OAAO,IAAI,QAAA,CAAS,GAAA,CAAI,IAAA,EAAM,EAAE,MAAA,EAAQ,GAAA,CAAI,MAAA,EAAQ,UAAA,EAAY,GAAA,CAAI,UAAA,EAAY,OAAA,EAAS,CAAA;AAAA,EAC3F,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAA,GAAS,WAAA,CAAY,GAAG,CAAA,GAAI,IAAI,MAAA,GAAS,GAAA;AAG/C,IAAA,MAAM,OAAA,GAAU,WAAA,CAAY,GAAG,CAAA,GAAI,IAAI,OAAA,GAAU,uBAAA;AAEjD,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,qBAAA,EAAwB,GAAG,CAAA,EAAA,EAAK,QAAQ,MAAM,CAAA,CAAA,EAAI,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAQ,KAAK,GAAG,CAAA;AACrG,IAAA,OAAO,QAAA,CAAS,IAAA;AAAA,MACd,EAAE,KAAA,EAAO,OAAA,EAAS,SAAA,EAAW,GAAA,EAAI;AAAA,MACjC,EAAE,MAAA,EAAQ,OAAA,EAAS,EAAE,sBAAA,EAAwB,KAAI;AAAE,KACrD;AAAA,EACF;AACF","file":"chunk-73J5ZD4C.js","sourcesContent":["import type { Segment } from \"../core/types.js\"\nimport type { ApiContext, ApiHandler, ApiModule } from \"./index.js\"\nimport { isHttpError } from \"./index.js\"\n\n/** A resolvable API route: its segments plus a lazy module loader. */\nexport interface ApiRouteEntry {\n  routePath: string\n  segments: Segment[]\n  hasCatchall: boolean\n  staticCount: number\n  load: () => Promise<ApiModule>\n}\n\n/** Order routes so the most specific matches first (static > param > catchall). */\nexport function sortApiRoutes<T extends ApiRouteEntry>(routes: T[]): T[] {\n  return [...routes].sort((a, b) => {\n    if (a.hasCatchall !== b.hasCatchall) return a.hasCatchall ? 1 : -1\n    if (a.staticCount !== b.staticCount) return b.staticCount - a.staticCount\n    return b.segments.length - a.segments.length\n  })\n}\n\nfunction matchSegments(segments: Segment[], parts: string[]): Record<string, string> | null {\n  const params: Record<string, string> = {}\n  let i = 0\n  for (const seg of segments) {\n    if (seg.kind === \"catchall\") {\n      params[seg.name] = parts.slice(i).map(decode).join(\"/\")\n      return params\n    }\n    if (i >= parts.length) return null\n    if (seg.kind === \"static\") {\n      if (parts[i] !== seg.value) return null\n    } else {\n      params[seg.name] = decode(parts[i]!)\n    }\n    i++\n  }\n  return i === parts.length ? params : null\n}\n\nfunction decode(s: string): string {\n  try {\n    return decodeURIComponent(s)\n  } catch {\n    return s\n  }\n}\n\n/** Match a pathname (e.g. `/api/customers/42`) against the API routes. */\nexport function matchApiRoute(\n  routes: ApiRouteEntry[],\n  pathname: string,\n): { route: ApiRouteEntry; params: Record<string, string> } | null {\n  if (pathname !== \"/api\" && !pathname.startsWith(\"/api/\")) return null\n  let rest = pathname.slice(4)\n  if (rest.startsWith(\"/\")) rest = rest.slice(1)\n  // Normalize a single trailing slash so `/api/customers/` doesn't match a\n  // `:id` route with an empty-string param.\n  if (rest.endsWith(\"/\")) rest = rest.slice(0, -1)\n  const parts = rest === \"\" ? [] : rest.split(\"/\")\n  for (const route of routes) {\n    const params = matchSegments(route.segments, parts)\n    if (params) return { route, params }\n  }\n  return null\n}\n\n/** Unique per-request id used to correlate the terminal log with the response. */\nfunction requestId(): string {\n  const g = globalThis as { crypto?: { randomUUID?: () => string } }\n  if (g.crypto?.randomUUID) return g.crypto.randomUUID()\n  return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`\n}\n\n/**\n * Invoke a matched API module for a request. Shared by the dev middleware and\n * the production Node server so behavior is identical across environments.\n */\nexport async function dispatchApi(\n  mod: ApiModule,\n  request: Request,\n  params: Record<string, string>,\n  env: Record<string, string | undefined>,\n): Promise<Response> {\n  const method = request.method.toUpperCase() as keyof ApiModule\n  const handler = mod[method] as ApiHandler | undefined\n  const rid = requestId()\n\n  if (typeof handler !== \"function\") {\n    const allowed = ([\"GET\", \"POST\", \"PUT\", \"PATCH\", \"DELETE\", \"OPTIONS\"] as const).filter(\n      (m) => typeof mod[m] === \"function\",\n    )\n    return Response.json(\n      { error: \"Method Not Allowed\", method: request.method, requestId: rid },\n      { status: 405, headers: { Allow: allowed.join(\", \"), \"x-vantage-request-id\": rid } },\n    )\n  }\n\n  const ctx: ApiContext = {\n    request,\n    params,\n    env,\n    // Fire-and-forget: runs after the response is sent, on the server's own\n    // event loop; errors are swallowed so background work can't crash it.\n    waitUntil: (p) => {\n      void Promise.resolve(p).catch(() => undefined)\n    },\n  }\n\n  try {\n    const res = await handler(ctx)\n    // waitUntil work runs after the response is returned, never blocking it.\n    const headers = new Headers(res.headers)\n    headers.set(\"x-vantage-request-id\", rid)\n    return new Response(res.body, { status: res.status, statusText: res.statusText, headers })\n  } catch (err) {\n    const status = isHttpError(err) ? err.status : 500\n    // Only surface intentional HttpError messages; internal errors are logged\n    // server-side but returned generically to avoid information disclosure.\n    const message = isHttpError(err) ? err.message : \"Internal Server Error\"\n    // Logged with request id so agents can correlate terminal + response.\n    console.error(`[vantage] API error (${rid}) ${request.method} ${new URL(request.url).pathname}:`, err)\n    return Response.json(\n      { error: message, requestId: rid },\n      { status, headers: { \"x-vantage-request-id\": rid } },\n    )\n  }\n}\n"]}

package/dist/chunk-ATYZ45XL.js

@@ -0,0 +1,19 @@
+import { QueryClient } from '@tanstack/react-query';
+
+// @squadbase/vantage — generated build. Do not edit.
+
+function createQueryClient() {
+  return new QueryClient({
+    defaultOptions: {
+      queries: {
+        staleTime: 3e4,
+        retry: 1,
+        refetchOnWindowFocus: false
+      }
+    }
+  });
+}
+
+export { createQueryClient };
+//# sourceMappingURL=chunk-ATYZ45XL.js.map
+//# sourceMappingURL=chunk-ATYZ45XL.js.map

package/dist/chunk-ATYZ45XL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/query/client.ts"],"names":[],"mappings":";;;;AAOO,SAAS,iBAAA,GAAiC;AAC/C,EAAA,OAAO,IAAI,WAAA,CAAY;AAAA,IACrB,cAAA,EAAgB;AAAA,MACd,OAAA,EAAS;AAAA,QACP,SAAA,EAAW,GAAA;AAAA,QACX,KAAA,EAAO,CAAA;AAAA,QACP,oBAAA,EAAsB;AAAA;AACxB;AACF,GACD,CAAA;AACH","file":"chunk-ATYZ45XL.js","sourcesContent":["import { QueryClient } from \"@tanstack/react-query\"\n\n/**\n * Create the QueryClient with Vantage defaults. Individual queries may override\n * these, but replacing the QueryClient wholesale is intentionally not exposed —\n * Squadbase relies on a single managed client for auth, logging and telemetry.\n */\nexport function createQueryClient(): QueryClient {\n  return new QueryClient({\n    defaultOptions: {\n      queries: {\n        staleTime: 30_000,\n        retry: 1,\n        refetchOnWindowFocus: false,\n      },\n    },\n  })\n}\n"]}

package/dist/chunk-B7LLBNLV.js

@@ -0,0 +1,23 @@
+// @squadbase/vantage — generated build. Do not edit.
+
+// src/server/index.ts
+function json(data, init) {
+  return Response.json(data, init);
+}
+var HTTP_ERROR_BRAND = /* @__PURE__ */ Symbol.for("vantage.HttpError");
+var HttpError = class extends Error {
+  status;
+  [HTTP_ERROR_BRAND] = true;
+  constructor(status, message) {
+    super(message);
+    this.status = status;
+    this.name = "HttpError";
+  }
+};
+function isHttpError(err) {
+  return typeof err === "object" && err !== null && err[HTTP_ERROR_BRAND] === true;
+}
+
+export { HttpError, isHttpError, json };
+//# sourceMappingURL=chunk-B7LLBNLV.js.map
+//# sourceMappingURL=chunk-B7LLBNLV.js.map

package/dist/chunk-B7LLBNLV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/index.ts"],"names":[],"mappings":";;;AAiCO,SAAS,IAAA,CAAK,MAAe,IAAA,EAA+B;AACjE,EAAA,OAAO,QAAA,CAAS,IAAA,CAAK,IAAA,EAAM,IAAI,CAAA;AACjC;AAUA,IAAM,gBAAA,mBAAkC,MAAA,CAAO,GAAA,CAAI,mBAAmB,CAAA;AAG/D,IAAM,SAAA,GAAN,cAAwB,KAAA,CAAM;AAAA,EACnC,MAAA;AAAA,EACA,CAAU,gBAAgB,IAAI,IAAA;AAAA,EAC9B,WAAA,CAAY,QAAgB,OAAA,EAAiB;AAC3C,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AAAA,EACd;AACF;AAOO,SAAS,YAAY,GAAA,EAAgC;AAC1D,EAAA,OACE,OAAO,GAAA,KAAQ,QAAA,IACf,QAAQ,IAAA,IACP,GAAA,CAAqC,gBAAgB,CAAA,KAAM,IAAA;AAEhE","file":"chunk-B7LLBNLV.js","sourcesContent":["/**\n * `@squadbase/vantage/server` — the server API contract.\n *\n * API modules under `server/api/**` export HTTP method handlers that receive an\n * `ApiContext` built from Web Standards (`Request`, `Response`, `URL`).\n */\n\n/** Context passed to every API handler. */\nexport interface ApiContext {\n  /** The incoming Web `Request`. */\n  request: Request\n  /** Route params, e.g. `{ customerId: \"42\" }`. */\n  params: Record<string, string>\n  /** Server environment variables (secrets included; never sent to the client). */\n  env: Record<string, string | undefined>\n  /** Register background work to run after the response is sent. */\n  waitUntil(promise: Promise<unknown>): void\n}\n\n/** An API method handler. */\nexport type ApiHandler = (ctx: ApiContext) => Response | Promise<Response>\n\n/** The set of method exports an API module may provide. */\nexport interface ApiModule {\n  GET?: ApiHandler\n  POST?: ApiHandler\n  PUT?: ApiHandler\n  PATCH?: ApiHandler\n  DELETE?: ApiHandler\n  OPTIONS?: ApiHandler\n}\n\n/** Convenience JSON response helper (equivalent to `Response.json`). */\nexport function json(data: unknown, init?: ResponseInit): Response {\n  return Response.json(data, init)\n}\n\n/**\n * Stable cross-realm brand. `instanceof HttpError` breaks when this module is\n * evaluated in two realms — in dev the user's API module is loaded through\n * Vite's `ssrLoadModule`, a separate module graph from the Node-side dispatch\n * chunk — so the two `HttpError` classes are different objects. `Symbol.for`\n * draws from the process-global registry, so every realm resolves the same\n * symbol; `isHttpError` matches on this brand instead of class identity.\n */\nconst HTTP_ERROR_BRAND: unique symbol = Symbol.for(\"vantage.HttpError\")\n\n/** Throwable HTTP error that the runtime converts into a JSON response. */\nexport class HttpError extends Error {\n  status: number\n  readonly [HTTP_ERROR_BRAND] = true\n  constructor(status: number, message: string) {\n    super(message)\n    this.status = status\n    this.name = \"HttpError\"\n  }\n}\n\n/**\n * Realm-independent check for {@link HttpError}. Use this instead of\n * `instanceof` anywhere an error may have crossed a module-realm boundary\n * (notably the dev `ssrLoadModule` seam), so dev and prod behave identically.\n */\nexport function isHttpError(err: unknown): err is HttpError {\n  return (\n    typeof err === \"object\" &&\n    err !== null &&\n    (err as Record<PropertyKey, unknown>)[HTTP_ERROR_BRAND] === true\n  )\n}\n"]}