@supacloud/compiler 0.38.2 → 0.39.0

package/dist/cli.js

@@ -1433,9 +1433,9 @@ function renderApplication(graph, options) {
     "}",
     "",
     "export async function initializeApplication(services: Record<string, unknown>): Promise<void> {",
-    '  const initializers = [services.environmentInitializer ?? services["supacloud.environment-initializer"], services.appInitializer ?? services["supacloud.app-initializer"]];',
+    '  const initializers = [services["environmentInitializer"] ?? services["supacloud.environment-initializer"], services["appInitializer"] ?? services["supacloud.app-initializer"]];',
     "  for (const group of initializers) {",
-    "    if (Array.isArray(group)) {",
+    "    if (isUnknownArray(group)) {",
     "      for (const init of group) {",
     "        if (isFunction(init)) await init();",
     "      }",
@@ -1446,21 +1446,21 @@ function renderApplication(graph, options) {
     "}",
     "",
     "export async function destroyApplication(services: Record<string, unknown>): Promise<void> {",
-    '  const destroyRef = (Object.prototype.propertyIsEnumerable.call(services, "destroyRef") ? services.destroyRef : undefined)',
+    '  const destroyRef = (Object.prototype.propertyIsEnumerable.call(services, "destroyRef") ? services["destroyRef"] : undefined)',
     '    ?? (Object.prototype.propertyIsEnumerable.call(services, "supacloud.destroy-ref") ? services["supacloud.destroy-ref"] : undefined);',
-    "  if (isRecord(destroyRef) && isFunction(destroyRef.destroy)) {",
-    "    await destroyRef.destroy();",
-    "  } else if (isRecord(destroyRef) && Array.isArray(destroyRef._teardowns)) {",
-    "    for (const teardown of [...destroyRef._teardowns].reverse()) {",
+    '  if (isRecord(destroyRef) && isFunction(destroyRef["destroy"])) {',
+    '    await destroyRef["destroy"]();',
+    '  } else if (isRecord(destroyRef) && isUnknownArray(destroyRef["_teardowns"])) {',
+    '    for (const teardown of [...destroyRef["_teardowns"]].reverse()) {',
     "      if (isFunction(teardown)) await teardown();",
     "    }",
     "  }",
     "  const instances = Object.values(services);",
     "  for (const inst of instances.reverse()) {",
-    "    if (isRecord(inst) && isFunction(inst.onDestroy)) {",
-    "      await inst.onDestroy();",
-    "    } else if (isRecord(inst) && isFunction(inst.ngOnDestroy)) {",
-    "      await inst.ngOnDestroy();",
+    '    if (isRecord(inst) && isFunction(inst["onDestroy"])) {',
+    '      await inst["onDestroy"]();',
+    '    } else if (isRecord(inst) && isFunction(inst["ngOnDestroy"])) {',
+    '      await inst["ngOnDestroy"]();',
     "    }",
     "  }",
     "}",
@@ -1857,7 +1857,7 @@ class ModuleGenerator {
           return "undefined";
         });
         const callArgs = invokerArgs.length > 0 ? invokerArgs.join(", ") : "req";
-        fields.push(`invoker: async (ctrl: unknown, req: { params?: Record<string, unknown>; query?: Record<string, unknown>; body?: unknown; headers?: Record<string, unknown>; cookie?: Record<string, unknown>; context?: unknown }) => { ` + `if (!isRecord(ctrl)) throw new TypeError("Route controller is not an object"); ` + `const handler = ctrl[${JSON.stringify(route.handler)}]; ` + `if (typeof handler !== "function") throw new TypeError("Route handler ${route.handler} is not callable"); ` + `return await Reflect.apply(handler, ctrl, [${callArgs}]); }`);
+        fields.push(`invoker: async (ctrl: unknown, req: { params?: Record<string, unknown>; query?: Record<string, unknown>; body?: unknown; headers?: Record<string, unknown>; cookie?: Record<string, unknown>; context?: unknown }) => { ` + `if (!isRecord(ctrl)) throw new TypeError("Route controller is not an object"); ` + `const handler = ctrl[${JSON.stringify(route.handler)}]; ` + `if (!isFunction(handler)) throw new TypeError("Route handler ${route.handler} is not callable"); ` + `return await Reflect.apply(handler, ctrl, [${callArgs}]); }`);
         if (route.contract !== undefined) {
           fields.push(`contract: ${JSON.stringify(route.contract)}`);
         }
@@ -2029,7 +2029,7 @@ ${indent(item, 2)}`).join(",")}
         if (emitted.constLine)
           lines.push(emitted.constLine);
         if (scoped) {
-          lines.push(`scope[${JSON.stringify(emitted.key)}] = [...(Array.isArray(scope[${JSON.stringify(emitted.key)}]) ? scope[${JSON.stringify(emitted.key)}] : []), ${emitted.expr}];`);
+          lines.push(`scope[${JSON.stringify(emitted.key)}] = [...(isUnknownArray(scope[${JSON.stringify(emitted.key)}]) ? scope[${JSON.stringify(emitted.key)}] : []), ${emitted.expr}];`);
         }
         const list = multiGroups.get(emitted.key) ?? [];
         list.push(emitted.expr);
@@ -2071,14 +2071,14 @@ ${indent(item, 2)}`).join(",")}
           continue;
         const key = camelName(token);
         const expression = this.depExpr(token, scopeKind, this.depOptions(node, token));
-        if (expression === `services.${key}` || expression === `(services.${key} ?? undefined)`) {
+        if (expression === `services[${JSON.stringify(key)}]` || expression === `(services[${JSON.stringify(key)}] ?? undefined)`) {
           if (!returns.has(key))
             borrowed.add(key);
         }
       }
     }
     if (borrowed.size > 0) {
-      const descriptors = [...borrowed].map((key) => `${key}: { value: deps.${key} }`);
+      const descriptors = [...borrowed].map((key) => `${key}: { value: deps[${JSON.stringify(key)}] }`);
       lines.push(`return retainPlatformDependencies(Object.defineProperties({ ${entries.join(", ")} }, { ${descriptors.join(", ")} }), deps);`);
     } else {
       lines.push(`return retainPlatformDependencies({ ${entries.join(", ")} }, deps);`);
@@ -2184,34 +2184,34 @@ ${indent(item, 2)}`).join(",")}
       }
     }
     if (own && factoryOfScope(own.scope) === "services" && kind !== "services" && !isSkipSelf && !isSelf) {
-      return `services.${camelName(token)}`;
+      return `services[${JSON.stringify(camelName(token))}]`;
     }
     if (isSelf) {
-      return isOptional ? "undefined" : `services.${camelName(token)}`;
+      return isOptional ? "undefined" : `services[${JSON.stringify(camelName(token))}]`;
     }
     for (const importName of this.module.imports) {
       const imported = this.graph.modules.find((m) => m.name === importName);
       if (!imported?.exports.includes(token))
         continue;
       if (kind === "services")
-        return `imported.${importName}.${camelName(token)}`;
-      return `imported.${importName}.${camelName(token)}`;
+        return `imported[${JSON.stringify(importName)}][${JSON.stringify(camelName(token))}]`;
+      return `imported[${JSON.stringify(importName)}][${JSON.stringify(camelName(token))}]`;
     }
     for (const mod of this.graph.modules) {
       const rootProv = mod.providers.find((p) => p.token === token && p.providedIn === "root");
       if (rootProv) {
-        return `imported.${mod.name}.${camelName(token)}`;
+        return `imported[${JSON.stringify(mod.name)}][${JSON.stringify(camelName(token))}]`;
       }
     }
     if (isSelf)
-      return isOptional ? "undefined" : `services.${camelName(token)}`;
+      return isOptional ? "undefined" : `services[${JSON.stringify(camelName(token))}]`;
     if (kind === "services")
-      return isOptional ? `(deps.${camelName(token)} ?? undefined)` : `deps.${camelName(token)}`;
+      return isOptional ? `(deps[${JSON.stringify(camelName(token))}] ?? undefined)` : `deps[${JSON.stringify(camelName(token))}]`;
     if (isSkipSelf) {
-      const external = `platformDependencies.get(services)?.${camelName(token)}`;
+      const external = `platformDependencies.get(services)?.[${JSON.stringify(camelName(token))}]`;
       return isOptional ? `(${external} ?? undefined)` : external;
     }
-    return isOptional ? `(services.${camelName(token)} ?? undefined)` : `services.${camelName(token)}`;
+    return isOptional ? `(services[${JSON.stringify(camelName(token))}] ?? undefined)` : `services[${JSON.stringify(camelName(token))}]`;
   }
 }
 function orderProviders(providers) {
@@ -3726,9 +3726,13 @@ function isFunction(value: unknown): value is (...args: unknown[]) => unknown {
   return typeof value === "function";
 }
 
+function isUnknownArray(value: unknown): value is unknown[] {
+  return Array.isArray(value);
+}
+
 function resolveFactoryValue(value: unknown): unknown {
-  if (!isRecord(value) || !isFunction(value.factory)) return undefined;
-  return value.factory();
+  if (!isRecord(value) || !isFunction(value["factory"])) return undefined;
+  return value["factory"]();
 }
 
 const scopeDestructions = new WeakMap<object, Promise<void>>();
@@ -3751,14 +3755,14 @@ function destroyScopeInstances(
     for (const entry of [...plan].reverse()) {
       const value = scope[entry.key];
       const instance = entry.index === undefined ? value
-        : Array.isArray(value) ? value[entry.index] : undefined;
+        : isUnknownArray(value) ? value[entry.index] : undefined;
       if (seen.has(instance)) continue;
       seen.add(instance);
       try {
-        if (isRecord(instance) && isFunction(instance.onDestroy)) {
-          await instance.onDestroy();
-        } else if (isRecord(instance) && isFunction(instance.ngOnDestroy)) {
-          await instance.ngOnDestroy();
+        if (isRecord(instance) && isFunction(instance["onDestroy"])) {
+          await instance["onDestroy"]();
+        } else if (isRecord(instance) && isFunction(instance["ngOnDestroy"])) {
+          await instance["ngOnDestroy"]();
         }
       } catch (error) {
         errors.push(error);
@@ -3781,11 +3785,11 @@ async function initializeServiceInstances(
     const value = services[entry.key];
     const instance = entry.index === undefined
       ? value
-      : Array.isArray(value) ? value[entry.index] : undefined;
+      : isUnknownArray(value) ? value[entry.index] : undefined;
     if (seen.has(instance)) continue;
     seen.add(instance);
-    if (!isRecord(instance) || !isFunction(instance.onInit)) continue;
-    await instance.onInit();
+    if (!isRecord(instance) || !isFunction(instance["onInit"])) continue;
+    await instance["onInit"]();
   }
 }
 
@@ -3799,13 +3803,13 @@ async function destroyServiceInstances(
     const value = services[entry.key];
     const instance = entry.index === undefined
       ? value
-      : Array.isArray(value) ? value[entry.index] : undefined;
+      : isUnknownArray(value) ? value[entry.index] : undefined;
     if (seen.has(instance)) continue;
     seen.add(instance);
     if (!isRecord(instance)) continue;
-    const hook = isFunction(instance.onDestroy)
-      ? instance.onDestroy
-      : isFunction(instance.ngOnDestroy) ? instance.ngOnDestroy : undefined;
+    const hook = isFunction(instance["onDestroy"])
+      ? instance["onDestroy"]
+      : isFunction(instance["ngOnDestroy"]) ? instance["ngOnDestroy"] : undefined;
     if (!hook) continue;
     try {
       await hook.call(instance);
@@ -4037,7 +4041,7 @@ var init_graphql_options = __esm(() => {
 });
 
 // src/graphql-inputs.ts
-import { resolve as resolve4 } from "node:path";
+import { resolve as resolve5 } from "node:path";
 import * as ts10 from "@typescript/typescript6";
 function graphqlInputPaths(options) {
   if (!options.graphql)
@@ -4047,9 +4051,9 @@ function graphqlInputPaths(options) {
   } catch {
     return [];
   }
-  const root = resolve4(options.rootDir);
-  const schema = resolve4(root, options.graphql.schema);
-  const documents = ts10.sys.readDirectory(root, [".graphql", ".gql"], ["**/node_modules/**", "**/.git/**", resolve4(options.outDir)], options.graphql.documents ?? ["**/*.graphql", "**/*.gql"]).map((path) => resolve4(path)).filter((path) => path !== schema);
+  const root = resolve5(options.rootDir);
+  const schema = resolve5(root, options.graphql.schema);
+  const documents = ts10.sys.readDirectory(root, [".graphql", ".gql"], ["**/node_modules/**", "**/.git/**", resolve5(options.outDir)], options.graphql.documents ?? ["**/*.graphql", "**/*.gql"]).map((path) => resolve5(path)).filter((path) => path !== schema);
   return [schema, ...[...new Set(documents)].sort()];
 }
 var init_graphql_inputs = __esm(() => {
@@ -4058,9 +4062,9 @@ var init_graphql_inputs = __esm(() => {
 
 // src/graphql-runtime.ts
 import * as ts11 from "@typescript/typescript6";
-import { resolve as resolve5 } from "node:path";
+import { resolve as resolve6 } from "node:path";
 function renderGraphqlValidators(source, operationNames) {
-  const fileName = resolve5("/__supacloud_graphql__/contracts.ts");
+  const fileName = resolve6("/__supacloud_graphql__/contracts.ts");
   const options = {
     strict: true,
     noUncheckedIndexedAccess: true,
@@ -4076,7 +4080,7 @@ function renderGraphqlValidators(source, operationNames) {
   };
   const host = ts11.createCompilerHost(options);
   const getSourceFile = host.getSourceFile.bind(host);
-  host.getSourceFile = (path, languageVersion, onError, shouldCreateNewSourceFile) => resolve5(path) === fileName ? ts11.createSourceFile(path, source, languageVersion, true) : getSourceFile(path, languageVersion, onError, shouldCreateNewSourceFile);
+  host.getSourceFile = (path, languageVersion, onError, shouldCreateNewSourceFile) => resolve6(path) === fileName ? ts11.createSourceFile(path, source, languageVersion, true) : getSourceFile(path, languageVersion, onError, shouldCreateNewSourceFile);
   const program = ts11.createProgram([fileName], options, host);
   const diagnostics = ts11.getPreEmitDiagnostics(program);
   if (diagnostics.length) {
@@ -15727,7 +15731,7 @@ var init_delivery_schema = __esm(() => {
 import { createHash as createHash6 } from "node:crypto";
 import { constants as constants2 } from "node:fs";
 import { lstat, mkdir as mkdir2, open as open3, readFile as readFile3, readdir, realpath, rename as rename2, rm, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname5, isAbsolute as isAbsolute2, join as join6, relative as relative6, resolve as resolve7, sep as sep6 } from "node:path";
+import { dirname as dirname5, isAbsolute as isAbsolute2, join as join6, relative as relative6, resolve as resolve8, sep as sep6 } from "node:path";
 function canonical2(value) {
   return JSON.stringify(value, (_key, item) => item !== null && typeof item === "object" && !Array.isArray(item) ? Object.fromEntries(Object.entries(item).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)) : item);
 }
@@ -15790,7 +15794,7 @@ async function reserveOutput(project, requested) {
   if (!inside(project, requested))
     throw new Error("Delivery output must be inside the application project.");
   const base = await realpath(project);
-  const path = resolve7(base, relative6(project, requested));
+  const path = resolve8(base, relative6(project, requested));
   if (relative6(base, path).split(sep6).some((part) => part === ".git" || part === "node_modules")) {
     throw new Error("Delivery output cannot use repository or dependency internals.");
   }
@@ -15998,9 +16002,9 @@ var init_delivery_build_schema = __esm(() => {
 
 // node_modules/@supacloud/delivery/src/delivery-artifact.ts
 import { readdir as readdir2, realpath as realpath2 } from "node:fs/promises";
-import { basename, dirname as dirname6, join as join7, resolve as resolve8 } from "node:path";
+import { basename, dirname as dirname6, join as join7, resolve as resolve9 } from "node:path";
 async function readDeliveryManifest(manifestPath) {
-  const selected = resolve8(manifestPath);
+  const selected = resolve9(manifestPath);
   const root = await realpath2(dirname6(selected));
   const manifest = parseDeliveryBuildManifest(JSON.parse((await readBoundedOwned(root, join7(root, basename(selected)), JSON_LIMIT)).toString("utf8")));
   return { root, manifest };
@@ -16152,13 +16156,13 @@ var init_delivery_context = __esm(() => {
 // src/fixes.ts
 import { createHash as createHash8, randomUUID } from "node:crypto";
 import { lstat as lstat2, readFile as readFile5, realpath as realpath3, rename as rename3, unlink as unlink2, writeFile as writeFile3 } from "node:fs/promises";
-import { dirname as dirname8, isAbsolute as isAbsolute4, relative as relative9, resolve as resolve12, sep as sep9 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute4, relative as relative9, resolve as resolve13, sep as sep9 } from "node:path";
 import * as ts12 from "@typescript/typescript6";
 async function applyDiagnosticFix(fix, options = {}) {
   if (!fix || typeof fix.targetFile !== "string")
     throw new Error("Invalid DiagnosticFix");
   const root = await realpath3(options.rootDir ?? process.cwd());
-  const file = resolve12(root, fix.targetFile);
+  const file = resolve13(root, fix.targetFile);
   const stat = await lstat2(file);
   const resolved = await realpath3(file);
   const relativePath = relative9(root, resolved);
@@ -16331,8 +16335,8 @@ function moduleObjects(source) {
 }
 function importSymbol(source, path, symbol) {
   identifier2(symbol);
-  const current = resolve12(source.fileName).replace(/\.(tsx?|mts|cts)$/, "");
-  const target = resolve12(dirname8(source.fileName), path).replace(/\.(tsx?|mts|cts)$/, "");
+  const current = resolve13(source.fileName).replace(/\.(tsx?|mts|cts)$/, "");
+  const target = resolve13(dirname8(source.fileName), path).replace(/\.(tsx?|mts|cts)$/, "");
   if (current === target)
     return source.text;
   const matches = source.statements.filter((item) => ts12.isImportDeclaration(item) && ts12.isStringLiteral(item.moduleSpecifier) && item.moduleSpecifier.text === path);
@@ -16830,7 +16834,7 @@ var init_release_evidence = __esm(() => {
 });
 
 // src/release-evidence-cli.ts
-import { resolve as resolve20 } from "node:path";
+import { resolve as resolve21 } from "node:path";
 async function runReleaseEvidenceCommand(args) {
   try {
     const values = new Map;
@@ -16854,7 +16858,7 @@ async function runReleaseEvidenceCommand(args) {
     if (!manifest || !target || manifest.length > 4096 || !/^[a-z][a-z0-9-]{0,62}$/.test(target)) {
       throw new ReleaseEvidenceError("RELEASE_EVIDENCE_INVALID");
     }
-    const evidence = await createReleaseEvidence(resolve20(manifest), target);
+    const evidence = await createReleaseEvidence(resolve21(manifest), target);
     console.log(json ? JSON.stringify(evidence, null, 2) : formatReleaseEvidence(evidence));
   } catch (error) {
     console.error(`Error: ${error instanceof ReleaseEvidenceError ? error.code : "RELEASE_EVIDENCE_INVALID"}`);
@@ -16868,7 +16872,7 @@ var init_release_evidence_cli = __esm(() => {
 // src/database-contracts.ts
 import { createHash as createHash11 } from "node:crypto";
 import { mkdir as mkdir5, readFile as readFile12 } from "node:fs/promises";
-import { dirname as dirname11, relative as relative12, resolve as resolve21 } from "node:path";
+import { dirname as dirname11, relative as relative12, resolve as resolve22 } from "node:path";
 import * as ts17 from "@typescript/typescript6";
 function hash3(value) {
   return createHash11("sha256").update(value).digest("hex");
@@ -16896,18 +16900,18 @@ function parseDatabaseContractsOptions(value, directory) {
     throw new TypeError("migrations must be an ordered list of SQL files");
   }
   return {
-    rootDir: resolve21(directory, field("rootDir")),
-    outDir: resolve21(directory, field("outDir")),
-    postgrestTypes: resolve21(directory, field("postgrestTypes")),
-    drizzleSchema: resolve21(directory, field("drizzleSchema")),
+    rootDir: resolve22(directory, field("rootDir")),
+    outDir: resolve22(directory, field("outDir")),
+    postgrestTypes: resolve22(directory, field("postgrestTypes")),
+    drizzleSchema: resolve22(directory, field("drizzleSchema")),
     role: field("role"),
-    graphql: { ...graphql, schema: resolve21(directory, graphql.schema) },
-    migrations: migrations.map((file) => resolve21(directory, file))
+    graphql: { ...graphql, schema: resolve22(directory, graphql.schema) },
+    migrations: migrations.map((file) => resolve22(directory, file))
   };
 }
 async function generateDatabaseContracts(options, check = false) {
-  const rootDir = resolve21(options.rootDir), outDir = resolve21(options.outDir);
-  const postgrestTypes = resolve21(rootDir, options.postgrestTypes), drizzleSchema = resolve21(rootDir, options.drizzleSchema);
+  const rootDir = resolve22(options.rootDir), outDir = resolve22(options.outDir);
+  const postgrestTypes = resolve22(rootDir, options.postgrestTypes), drizzleSchema = resolve22(rootDir, options.drizzleSchema);
   const snapshot = await readFile12(postgrestTypes, "utf8");
   const syntax = ts17.createSourceFile(postgrestTypes, snapshot, ts17.ScriptTarget.Latest, true);
   const database = syntax.statements.find((node) => (ts17.isTypeAliasDeclaration(node) || ts17.isInterfaceDeclaration(node)) && node.name.text === "Database" && node.modifiers?.some((modifier) => modifier.kind === ts17.SyntaxKind.ExportKeyword));
@@ -16935,7 +16939,7 @@ async function generateDatabaseContracts(options, check = false) {
   }
   const inputs = {};
   const addInput = async (path) => {
-    const absolute = resolve21(rootDir, path);
+    const absolute = resolve22(rootDir, path);
     inputs[relative12(rootDir, absolute).replaceAll("\\", "/")] = hash3(await readFile12(absolute, "utf8"));
   };
   await addInput(postgrestTypes);
@@ -16952,8 +16956,8 @@ async function generateDatabaseContracts(options, check = false) {
     if (!source.isDeclarationFile && !source.fileName.includes("/node_modules/"))
       await addInput(source.fileName);
   }
-  await addInput(resolve21(rootDir, options.graphql.schema));
-  if (new Set(options.migrations.map((path) => resolve21(rootDir, path))).size !== options.migrations.length) {
+  await addInput(resolve22(rootDir, options.graphql.schema));
+  if (new Set(options.migrations.map((path) => resolve22(rootDir, path))).size !== options.migrations.length) {
     throw new Error("Duplicate migration in database contracts configuration");
   }
   for (const path of options.migrations)
@@ -16974,14 +16978,14 @@ async function generateDatabaseContracts(options, check = false) {
     version: 1,
     role: options.role,
     inputs: Object.fromEntries(Object.entries(inputs).sort(([a], [b]) => a.localeCompare(b))),
-    migrationOrder: options.migrations.map((path) => relative12(rootDir, resolve21(rootDir, path)).replaceAll("\\", "/")),
+    migrationOrder: options.migrations.map((path) => relative12(rootDir, resolve22(rootDir, path)).replaceAll("\\", "/")),
     outputs: Object.fromEntries(Object.entries(files).sort(([a], [b]) => a.localeCompare(b)).map(([file, text]) => [file, hash3(text)]))
   };
   files["database.manifest.json"] = JSON.stringify(manifest, null, 2) + `
 `;
   const mismatches = [];
   for (const [file, content] of Object.entries(files)) {
-    const path = resolve21(outDir, file);
+    const path = resolve22(outDir, file);
     let current;
     try {
       current = await readFile12(path, "utf8");
@@ -16995,12 +16999,12 @@ async function generateDatabaseContracts(options, check = false) {
   if (!check) {
     await mkdir5(outDir, { recursive: true });
     for (const [file, content] of Object.entries(files))
-      await writeFileIfChanged(resolve21(outDir, file), content);
+      await writeFileIfChanged(resolve22(outDir, file), content);
   }
   return { upToDate: mismatches.length === 0, mismatches, written: check ? [] : mismatches, manifest };
 }
 async function runDatabaseContractsFile(path, check = false) {
-  const absolute = resolve21(path);
+  const absolute = resolve22(path);
   const value = JSON.parse(await readFile12(absolute, "utf8"));
   return generateDatabaseContracts(parseDatabaseContractsOptions(value, dirname11(absolute)), check);
 }
@@ -17012,7 +17016,7 @@ var init_database_contracts = __esm(() => {
 
 // src/graphql-schema.ts
 import { mkdir as mkdir6, readFile as readFile13 } from "node:fs/promises";
-import { dirname as dirname12, resolve as resolve22 } from "node:path";
+import { dirname as dirname12, resolve as resolve23 } from "node:path";
 async function pullGraphqlSchema(options) {
   assertGraphqlOptions({ schema: options.output });
   const endpoint = new URL(options.url);
@@ -17052,7 +17056,7 @@ async function pullGraphqlSchema(options) {
     throw new Error("GraphQL schema export failed. Verify caller grants and enable introspection only in the intended development environment.");
   }
   const schema = lexicographicSortSchema(buildClientSchema(data));
-  const path = resolve22(options.output);
+  const path = resolve23(options.output);
   const content = path.endsWith(".json") ? JSON.stringify(introspectionFromSchema(schema), null, 2) + `
 ` : `# GENERATED BY supacloud-compiler graphql-schema. DO NOT EDIT.
 # Database First: change database declarations, apply migrations, then re-export for the intended role.
@@ -17080,7 +17084,7 @@ var init_graphql_schema = __esm(() => {
 });
 
 // src/cli.ts
-import { resolve as resolve23 } from "node:path";
+import { resolve as resolve24 } from "node:path";
 import { readFile as readFile14 } from "node:fs/promises";
 
 // src/analyze.ts
@@ -20515,6 +20519,55 @@ function isAnyKeyword(node) {
 
 // src/compile.ts
 init_route_contracts();
+
+// src/client-schema-boundaries.ts
+import { resolve as resolve4 } from "node:path";
+function validateClientSchemaBoundaries(graph, options) {
+  if (!options.generateClient)
+    return [];
+  const identity = (path) => resolve4(options.rootDir, path).replace(/\.(?:[cm]?ts|[cm]?js)$/, "");
+  const runtimeModules = new Set(graph.modules.flatMap((module) => [
+    module.file,
+    ...module.controllers.map((controller) => controller.file),
+    ...module.providers.map((provider) => provider.file)
+  ]).filter((file) => typeof file === "string").map(identity));
+  const diagnostics = [];
+  const seen = new Set;
+  for (const module of graph.modules) {
+    for (const controller of module.controllers) {
+      for (const route of controller.routes) {
+        const symbols = [
+          route.body,
+          route.params,
+          route.query,
+          route.headers,
+          route.cookie,
+          ...route.responses && Object.keys(route.responses).length ? Object.values(route.responses) : [route.response]
+        ];
+        for (const symbol of symbols) {
+          if (!symbol)
+            continue;
+          const importedFrom = controller.schemaImports?.[symbol];
+          if (!importedFrom || !runtimeModules.has(identity(importedFrom)))
+            continue;
+          const key = `${identity(importedFrom)}:${symbol}`;
+          if (seen.has(key))
+            continue;
+          seen.add(key);
+          diagnostics.push({
+            severity: "warn",
+            code: "client-schema-runtime-import",
+            file: controller.file,
+            message: `Generated client schema "${symbol}" imports application runtime module "${importedFrom}". Move the schema to a shared contract-only module and import it into the controller. This also avoids checking server decorators in the browser TypeScript project.`
+          });
+        }
+      }
+    }
+  }
+  return diagnostics;
+}
+
+// src/compile.ts
 function withDefaultGovernance(options) {
   return options.commandCapabilities === undefined ? { ...options, commandCapabilities: {
     requirePersistentAdapters: true,
@@ -20532,7 +20585,8 @@ async function compileProject(options) {
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
-    ...validateGraph(graph, options)
+    ...validateGraph(graph, options),
+    ...validateClientSchemaBoundaries(graph, options)
   ];
   if (diagnostics.some((item) => item.code === "runtime-injection-disallowed")) {
     return { diagnostics, graph, written: [] };
@@ -20595,7 +20649,8 @@ async function checkProject(options) {
   const graph = await analyzeProject(options.rootDir, options.include, options.cache, options.changedPaths);
   const diagnostics = [
     ...graph.diagnostics ?? [],
-    ...validateGraph(graph, options)
+    ...validateGraph(graph, options),
+    ...validateClientSchemaBoundaries(graph, options)
   ];
   if (diagnostics.some((item) => item.code === "runtime-injection-disallowed")) {
     return { diagnostics, graph, upToDate: false, mismatches: ["Runtime DI must be migrated to constructor injection."] };
@@ -20929,12 +20984,12 @@ init_delivery_context();
 
 // src/watch.ts
 import { existsSync as existsSync4, watch } from "node:fs";
-import { dirname as dirname7, relative as relative8, resolve as resolve10, sep as sep8 } from "node:path";
+import { dirname as dirname7, relative as relative8, resolve as resolve11, sep as sep8 } from "node:path";
 
 // src/incremental.ts
 import { createHash as createHash7 } from "node:crypto";
 import { access as access3, readdir as readdir3, readFile as readFile4 } from "node:fs/promises";
-import { isAbsolute as isAbsolute3, relative as relative7, resolve as resolve9, sep as sep7 } from "node:path";
+import { isAbsolute as isAbsolute3, relative as relative7, resolve as resolve10, sep as sep7 } from "node:path";
 init_graphql_inputs();
 function createDependencyGraphCache() {
   return {
@@ -21015,11 +21070,11 @@ async function readSourceBytes(path) {
   return readFile4(path);
 }
 async function updateSnapshot(previous, options, changedPaths) {
-  const rootDir = resolve9(options.rootDir);
-  const outDir = resolve9(options.outDir);
+  const rootDir = resolve10(options.rootDir);
+  const outDir = resolve10(options.outDir);
   const files = { ...previous.files };
   await Promise.all(changedPaths.map(async (changedPath) => {
-    const absolutePath = isAbsolute3(changedPath) ? resolve9(changedPath) : resolve9(rootDir, changedPath);
+    const absolutePath = isAbsolute3(changedPath) ? resolve10(changedPath) : resolve10(rootDir, changedPath);
     const relativeChangedPath = relative7(rootDir, absolutePath);
     if (relativeChangedPath === ".." || relativeChangedPath.startsWith(`..${sep7}`))
       return;
@@ -21037,8 +21092,8 @@ async function updateSnapshot(previous, options, changedPaths) {
   return { files, optionsKey: optionsKeyOf(options) };
 }
 async function createSnapshot(options) {
-  const rootDir = resolve9(options.rootDir);
-  const outDir = resolve9(options.outDir);
+  const rootDir = resolve10(options.rootDir);
+  const outDir = resolve10(options.outDir);
   const paths = await listSourceFiles(rootDir, outDir);
   const files = {};
   const entries = await Promise.all(paths.map(async (path) => {
@@ -21061,8 +21116,8 @@ async function createSnapshot(options) {
 }
 function optionsKeyOf(options) {
   return JSON.stringify({
-    rootDir: resolve9(options.rootDir),
-    outDir: resolve9(options.outDir),
+    rootDir: resolve10(options.rootDir),
+    outDir: resolve10(options.outDir),
     include: options.include,
     strict: options.strict,
     writeOnError: options.writeOnError,
@@ -21086,7 +21141,7 @@ async function listSourceFiles(rootDir, outDir) {
   const result = [];
   const visit = async (directory) => {
     for (const entry of await readdir3(directory, { withFileTypes: true })) {
-      const path = resolve9(directory, entry.name);
+      const path = resolve10(directory, entry.name);
       if (entry.isDirectory()) {
         if (entry.name === "node_modules" || entry.name === ".git" || path === outDir)
           continue;
@@ -21221,8 +21276,8 @@ function isCompilerConfigurationPath(rootDir, changedPath) {
   ].includes(relativePath) || /^tsconfig\.[^/]+\.json$/.test(relativePath);
 }
 function watchProject(options) {
-  const rootDir = resolve10(options.rootDir);
-  const outDir = resolve10(options.outDir);
+  const rootDir = resolve11(options.rootDir);
+  const outDir = resolve11(options.outDir);
   const debounceMs = options.debounceMs ?? DEFAULT_DEBOUNCE_MS;
   let timer;
   let closed = false;
@@ -21232,7 +21287,7 @@ function watchProject(options) {
   const pendingPaths = new Set;
   let watcher;
   let schemaWatcher;
-  const schemaPath = options.graphql ? resolve10(rootDir, options.graphql.schema) : undefined;
+  const schemaPath = options.graphql ? resolve11(rootDir, options.graphql.schema) : undefined;
   const incremental = createIncrementalCompiler();
   let initialEvent;
   let resolveReady = () => {
@@ -21342,7 +21397,7 @@ function watchProject(options) {
     watcher = watch(rootDir, { recursive: true }, (_eventType, filename) => {
       if (!filename)
         return schedule();
-      const changedPath = resolve10(rootDir, filename.toString());
+      const changedPath = resolve11(rootDir, filename.toString());
       const relativePath = relative8(outDir, changedPath);
       if (!relativePath.startsWith("..") && relativePath !== "")
         return;
@@ -21355,7 +21410,7 @@ function watchProject(options) {
       while (!existsSync4(directory) && dirname7(directory) !== directory)
         directory = dirname7(directory);
       schemaWatcher = watch(directory, { recursive: true }, (_eventType, filename) => {
-        if (!filename || resolve10(directory, filename.toString()) === schemaPath)
+        if (!filename || resolve11(directory, filename.toString()) === schemaPath)
           schedule(schemaPath);
       });
     }
@@ -21380,7 +21435,7 @@ function watchProject(options) {
 // src/config.ts
 init_graphql_options();
 import { existsSync as existsSync5 } from "node:fs";
-import { join as join8, resolve as resolve11 } from "node:path";
+import { join as join8, resolve as resolve12 } from "node:path";
 import { pathToFileURL } from "node:url";
 
 // src/delivery-schema.ts
@@ -21478,8 +21533,8 @@ function validateGovernanceConfig(config) {
 function resolveSupacloudConfig(config = {}, cwd = process.cwd()) {
   const resolved = defineSupacloudConfig(config);
   return {
-    rootDir: resolve11(cwd, resolved.root ?? DEFAULT_SUPACLOUD_CONFIG.root),
-    outDir: resolve11(cwd, resolved.outDir ?? DEFAULT_SUPACLOUD_CONFIG.outDir),
+    rootDir: resolve12(cwd, resolved.root ?? DEFAULT_SUPACLOUD_CONFIG.root),
+    outDir: resolve12(cwd, resolved.outDir ?? DEFAULT_SUPACLOUD_CONFIG.outDir),
     include: resolved.include ?? [...DEFAULT_SUPACLOUD_CONFIG.include],
     strict: resolved.strict ?? DEFAULT_SUPACLOUD_CONFIG.strict,
     requireRouteContracts: resolved.requireRouteContracts ?? DEFAULT_SUPACLOUD_CONFIG.requireRouteContracts,
@@ -21497,7 +21552,7 @@ function resolveSupacloudConfig(config = {}, cwd = process.cwd()) {
     treeShakeUnusedProviders: resolved.treeShakeUnusedProviders ?? DEFAULT_SUPACLOUD_CONFIG.treeShakeUnusedProviders,
     graphql: resolved.graphql ? {
       ...resolved.graphql,
-      schema: resolve11(cwd, resolved.graphql.schema)
+      schema: resolve12(cwd, resolved.graphql.schema)
     } : undefined
   };
 }
@@ -21825,7 +21880,7 @@ function formatDeliveryPlan(result) {
 // src/delivery-build.ts
 import { mkdir as mkdir3, mkdtemp, readFile as readFile7, realpath as realpath4, rename as rename4, rm as rm2 } from "node:fs/promises";
 import { readFileSync as readFileSync3 } from "node:fs";
-import { dirname as dirname9, join as join10, relative as relative10, resolve as resolve15, sep as sep10 } from "node:path";
+import { dirname as dirname9, join as join10, relative as relative10, resolve as resolve16, sep as sep10 } from "node:path";
 import * as ts15 from "@typescript/typescript6";
 
 // src/delivery-build-schema.ts
@@ -21867,7 +21922,7 @@ function renderDeliveryTarget(graph, target, options) {
 init_delivery_files2();
 import { isBuiltin } from "node:module";
 import { readFile as readFile6 } from "node:fs/promises";
-import { join as join9, resolve as resolve13 } from "node:path";
+import { join as join9, resolve as resolve14 } from "node:path";
 import * as ts14 from "@typescript/typescript6";
 
 // src/delivery-imports.ts
@@ -22044,7 +22099,7 @@ async function bundleDeliveryTarget(name, code, project, generatedDirectory, opt
 async function bundleDeliveryTargetInProcess(name, code, project, generatedDirectory, options) {
   const inputs = new Map;
   const workingDirectory = process.cwd();
-  const entry = resolve13(generatedDirectory, `delivery-${name}.ts`);
+  const entry = resolve14(generatedDirectory, `delivery-${name}.ts`);
   const entryPattern = new RegExp(`^${entry.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}$`);
   const result = await Bun.build({
     entrypoints: [entry],
@@ -22067,7 +22122,7 @@ async function bundleDeliveryTargetInProcess(name, code, project, generatedDirec
           if (args.path === entry)
             return { contents: code, loader: "ts" };
           const bytes = await readFile6(args.path);
-          inputs.set(resolve13(args.path), digest(bytes));
+          inputs.set(resolve14(args.path), digest(bytes));
           return { contents: staticDeliveryImports(args.path, bytes), loader: args.loader };
         });
       }
@@ -22077,7 +22132,7 @@ async function bundleDeliveryTargetInProcess(name, code, project, generatedDirec
     throw new Error("Independent bundle failed or has no dependency metadata.");
   const runtimeImports = new Set;
   for (const [path, metadata] of Object.entries(result.metafile.inputs)) {
-    if (resolve13(workingDirectory, path) !== entry && !inputs.has(resolve13(workingDirectory, path))) {
+    if (resolve14(workingDirectory, path) !== entry && !inputs.has(resolve14(workingDirectory, path))) {
       throw new Error("Bundler reported an input that was not captured by the delivery snapshot.");
     }
     for (const imported of metadata.imports) {
@@ -22416,14 +22471,14 @@ interface DeliveryWorkerHost {
 
 // src/delivery-migrations.ts
 init_delivery_files2();
-import { resolve as resolve14 } from "node:path";
+import { resolve as resolve15 } from "node:path";
 async function prepareDeliveryMigrations(project, generatedRoot, declarations = []) {
   const entries = [];
   const files = new Map;
   const inputs = new Map;
   let totalBytes = 0;
   for (const declaration of [...declarations].sort((a, b) => BigInt(a.version) < BigInt(b.version) ? -1 : BigInt(a.version) > BigInt(b.version) ? 1 : 0)) {
-    const source = resolve14(project, declaration.source);
+    const source = resolve15(project, declaration.source);
     if (!inside(project, source) || inside(generatedRoot, source))
       throw new Error("Invalid migration source.");
     const bytes = await readBoundedOwned(project, source, 1048576);
@@ -22474,7 +22529,7 @@ async function buildDeliveryProject(options, delivery) {
     const settings = parseDeliveryOptions(delivery);
     if (typeof Bun === "undefined")
       throw new Error("Independent delivery builds require Bun.");
-    const configPath = ts15.findConfigFile(resolve15(options.rootDir), ts15.sys.fileExists);
+    const configPath = ts15.findConfigFile(resolve16(options.rootDir), ts15.sys.fileExists);
     if (!configPath)
       throw new Error("Independent delivery builds require a project tsconfig.json.");
     const lexicalProject = dirname9(configPath);
@@ -22482,11 +22537,11 @@ async function buildDeliveryProject(options, delivery) {
     const sourceRoot = await realpath4(options.rootDir);
     if (!inside(project, sourceRoot))
       throw new Error("Application sources must be inside the project.");
-    const requested = resolve15(options.outDir, "delivery");
+    const requested = resolve16(options.outDir, "delivery");
     if (!inside(lexicalProject, requested))
       throw new Error("Output must be inside the application project.");
-    const buildRoot = resolve15(project, relative10(lexicalProject, requested));
-    const generatedRoot = resolve15(project, relative10(lexicalProject, options.outDir));
+    const buildRoot = resolve16(project, relative10(lexicalProject, requested));
+    const generatedRoot = resolve16(project, relative10(lexicalProject, options.outDir));
     if (inside(generatedRoot, sourceRoot))
       throw new Error("Output must not contain the application source root.");
     const configInputs = new Map;
@@ -22494,7 +22549,7 @@ async function buildDeliveryProject(options, delivery) {
       ...ts15.sys,
       readFile(path) {
         const contents = readFileSync3(path, "utf8");
-        configInputs.set(resolve15(path), digest(contents));
+        configInputs.set(resolve16(path), digest(contents));
         return contents;
       },
       onUnRecoverableConfigFileDiagnostic() {
@@ -22532,7 +22587,7 @@ async function buildDeliveryProject(options, delivery) {
         if (!target || (kind === "worker" ? target.kind !== "jobs" : target.kind === "jobs")) {
           throw new Error("Delivery host kind does not match its target.");
         }
-        const path = resolve15(sourceRoot, app.source);
+        const path = resolve16(sourceRoot, app.source);
         if (inside(generatedRoot, path) || !/\.[cm]?ts$/.test(path))
           throw new Error("Hosts require application TypeScript source.");
         hosts.set(app.target, { path, kind, hash: digest(await readOwned(sourceRoot, path)) });
@@ -22659,7 +22714,7 @@ async function buildDeliveryProject(options, delivery) {
       }));
       const assetInputs = {};
       for (const asset of assets.filter((asset) => asset.target === target.name)) {
-        const path = resolve15(sourceRoot, asset.source);
+        const path = resolve16(sourceRoot, asset.source);
         const bytes = await readOwned(sourceRoot, path);
         const hash = digest(bytes);
         const previousHash = snapshots.get(path);
@@ -22769,19 +22824,19 @@ async function buildDeliveryProject(options, delivery) {
 
 // src/migrations.ts
 import { rename as rename5, readFile as readFile9, writeFile as writeFile4, rm as rm3 } from "node:fs/promises";
-import { relative as relative11, resolve as resolve17 } from "node:path";
+import { relative as relative11, resolve as resolve18 } from "node:path";
 import * as ts16 from "@typescript/typescript6";
 
 // src/migration-policy.ts
 import { readFile as readFile8 } from "node:fs/promises";
 import { readFileSync as readFileSync4 } from "node:fs";
-import { resolve as resolve16 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 
 // src/migration-app-version.ts
 var MIGRATION_APP_VERSION = "0.23.0";
 
 // src/migration-elysia-version.ts
-var MIGRATION_ELYSIA_VERSION = "0.25.0";
+var MIGRATION_ELYSIA_VERSION = "0.26.0";
 
 // src/migration-policy.ts
 var cachedCompilerVersion;
@@ -22808,7 +22863,7 @@ async function checkMigrationDependencies(rootDir) {
   const problems = [];
   for (const [name, expected] of Object.entries(migrationDependencies())) {
     try {
-      const manifest = JSON.parse(await readFile8(resolve16(rootDir, "node_modules", name, "package.json"), "utf8"));
+      const manifest = JSON.parse(await readFile8(resolve17(rootDir, "node_modules", name, "package.json"), "utf8"));
       if (!manifest || typeof manifest !== "object" || !("name" in manifest) || manifest.name !== name || !("version" in manifest) || manifest.version !== expected) {
         problems.push(`${name}: requires tested installed version ${expected}`);
       }
@@ -22923,10 +22978,10 @@ function createMigrationProgram(fileNames, sourceOverrides, rootDir) {
   const fileExists = host.fileExists.bind(host);
   const readFile = host.readFile.bind(host);
   const currentDirectory = host.getCurrentDirectory.bind(host);
-  host.fileExists = (fileName) => sourceOverrides.has(resolve17(fileName)) || fileExists(fileName);
-  host.readFile = (fileName) => sourceOverrides.get(resolve17(fileName)) ?? readFile(fileName);
+  host.fileExists = (fileName) => sourceOverrides.has(resolve18(fileName)) || fileExists(fileName);
+  host.readFile = (fileName) => sourceOverrides.get(resolve18(fileName)) ?? readFile(fileName);
   host.getSourceFile = (fileName, languageVersion, onError, shouldCreateNewSourceFile) => {
-    const source = sourceOverrides.get(resolve17(fileName));
+    const source = sourceOverrides.get(resolve18(fileName));
     return source === undefined ? getSourceFile(fileName, languageVersion, onError, shouldCreateNewSourceFile) : ts16.createSourceFile(fileName, source, languageVersion, true);
   };
   host.getCurrentDirectory = () => rootDir ?? currentDirectory();
@@ -22952,7 +23007,7 @@ function planRouteResponseMigration(sourceFiles, checker, rootDir, includedFiles
     issues.push(issue);
   };
   for (const sourceFile of sourceFiles) {
-    const sourcePath = resolve17(sourceFile.fileName);
+    const sourcePath = resolve18(sourceFile.fileName);
     if (!includedFiles.has(sourcePath))
       continue;
     const visit = (node) => {
@@ -22960,7 +23015,7 @@ function planRouteResponseMigration(sourceFiles, checker, rootDir, includedFiles
         const options = node.arguments[1];
         const object = options && resolveStaticObjectLiteral2(options, checker);
         if (object) {
-          const objectPath = resolve17(object.getSourceFile().fileName);
+          const objectPath = resolve18(object.getSourceFile().fileName);
           const properties = routeResponseProperties(object);
           if (properties.response) {
             if (!includedFiles.has(objectPath)) {
@@ -23003,13 +23058,13 @@ function planRouteResponseMigration(sourceFiles, checker, rootDir, includedFiles
         line: lineOf2(sourceFile, response)
       });
     } else {
-      const replacements = replacementsByFile.get(resolve17(sourceFile.fileName)) ?? [];
+      const replacements = replacementsByFile.get(resolve18(sourceFile.fileName)) ?? [];
       replacements.push({
         start: response.getStart(sourceFile),
         end: response.getEnd(),
         text: `responses: { 200: ${response.initializer.getText(sourceFile)} }`
       });
-      replacementsByFile.set(resolve17(sourceFile.fileName), replacements);
+      replacementsByFile.set(resolve18(sourceFile.fileName), replacements);
     }
   }
   return { replacementsByFile, issues };
@@ -23022,7 +23077,7 @@ function applyReplacements(source, replacements) {
   return content;
 }
 function migrateRouteResponse(source, fileName) {
-  const absoluteFile = resolve17(fileName);
+  const absoluteFile = resolve18(fileName);
   const sourceOverrides = new Map([[absoluteFile, source]]);
   const program = createMigrationProgram([absoluteFile], sourceOverrides);
   const sourceFile = program.getSourceFile(absoluteFile);
@@ -23038,7 +23093,7 @@ function migrateRouteResponse(source, fileName) {
       }]
     };
   }
-  const plan = planRouteResponseMigration([sourceFile], program.getTypeChecker(), resolve17("."), new Set([absoluteFile]));
+  const plan = planRouteResponseMigration([sourceFile], program.getTypeChecker(), resolve18("."), new Set([absoluteFile]));
   const replacements = plan.replacementsByFile.get(absoluteFile) ?? [];
   return {
     changed: replacements.length > 0,
@@ -23048,7 +23103,7 @@ function migrateRouteResponse(source, fileName) {
   };
 }
 function migrateRouteResponseProject(files, rootDir, sourceByPath) {
-  const absoluteFiles = files.map((file) => resolve17(file));
+  const absoluteFiles = files.map((file) => resolve18(file));
   const program = createMigrationProgram(absoluteFiles, sourceByPath, rootDir);
   const sourceFiles = absoluteFiles.map((file) => program.getSourceFile(file)).filter((file) => file !== undefined);
   const plan = planRouteResponseMigration(sourceFiles, program.getTypeChecker(), rootDir, new Set(absoluteFiles));
@@ -23061,11 +23116,11 @@ function migrateRouteResponseProject(files, rootDir, sourceByPath) {
       changed: replacements.length > 0,
       content: applyReplacements(source, replacements),
       replacements: replacements.length,
-      issues: plan.issues.filter((issue) => resolve17(rootDir, issue.file) === file)
+      issues: plan.issues.filter((issue) => resolve18(rootDir, issue.file) === file)
     });
   }
   for (const issue of plan.issues) {
-    const path = resolve17(rootDir, issue.file);
+    const path = resolve18(rootDir, issue.file);
     if (!results.has(path) && sourceByPath.has(path)) {
       results.set(path, {
         changed: false,
@@ -23103,7 +23158,7 @@ async function writeAtomically(path, content) {
   }
 }
 async function migrateProject(options) {
-  const rootDir = resolve17(options.rootDir);
+  const rootDir = resolve18(options.rootDir);
   let migrations = SUPACLOUD_MIGRATIONS;
   const preflightIssues = [];
   if (options.fromVersion !== undefined || options.toVersion !== undefined) {
@@ -23159,7 +23214,7 @@ async function migrateProject(options) {
     }
   };
   for (const filePath of files) {
-    sourceByPath.set(resolve17(filePath), await readFile9(filePath, "utf8"));
+    sourceByPath.set(resolve18(filePath), await readFile9(filePath, "utf8"));
   }
   const originalSources = new Map(sourceByPath);
   const writtenFiles = new Set;
@@ -23168,7 +23223,7 @@ async function migrateProject(options) {
     if (projectResults)
       appendIssues(projectResults.issues);
     for (const filePath of files) {
-      const absoluteFile = resolve17(filePath);
+      const absoluteFile = resolve18(filePath);
       const file = relative11(rootDir, absoluteFile) || absoluteFile;
       const before = sourceByPath.get(absoluteFile);
       if (before === undefined)
@@ -23230,11 +23285,11 @@ async function migrateProject(options) {
 // src/migration-assess.ts
 import { createHash as createHash10 } from "node:crypto";
 import { readFile as readFile11 } from "node:fs/promises";
-import { join as join11, resolve as resolve19 } from "node:path";
+import { join as join11, resolve as resolve20 } from "node:path";
 
 // src/openapi-tools.ts
 import { mkdir as mkdir4, readFile as readFile10, rename as rename6, unlink as unlink3, writeFile as writeFile5 } from "node:fs/promises";
-import { dirname as dirname10, resolve as resolve18 } from "node:path";
+import { dirname as dirname10, resolve as resolve19 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 
 class OpenApiDocumentError extends Error {
@@ -23625,7 +23680,7 @@ function serializeOpenApiJson(document, space = 2) {
 }
 async function readOpenApiJson(path) {
   try {
-    const value = JSON.parse(await readFile10(resolve18(path), "utf8"));
+    const value = JSON.parse(await readFile10(resolve19(path), "utf8"));
     return parseOpenApiDocument(value);
   } catch (error) {
     if (error instanceof OpenApiDocumentError)
@@ -23634,7 +23689,7 @@ async function readOpenApiJson(path) {
   }
 }
 async function writeOpenApiJson(document, outputPath, space = 2) {
-  const path = resolve18(outputPath);
+  const path = resolve19(outputPath);
   const content = serializeOpenApiJson(document, space);
   await mkdir4(dirname10(path), { recursive: true });
   try {
@@ -23655,7 +23710,7 @@ async function writeOpenApiJson(document, outputPath, space = 2) {
 }
 async function loadGeneratedOpenApiDocument(modulePath) {
   try {
-    const moduleUrl = pathToFileURL2(resolve18(modulePath));
+    const moduleUrl = pathToFileURL2(resolve19(modulePath));
     moduleUrl.searchParams.set("supacloud-openapi-export", "1");
     const loaded = await import(moduleUrl.href);
     if (!isRecord(loaded))
@@ -23758,11 +23813,11 @@ function overallStatus(findings) {
   return findings.reduce((current, finding) => STATUS_PRIORITY[finding.status] > STATUS_PRIORITY[current] ? finding.status : current, "compatible");
 }
 async function assessMigration(options) {
-  const projectDir = resolve19(options.projectDir);
+  const projectDir = resolve20(options.projectDir);
   const compile = {
     ...options.compile,
-    rootDir: resolve19(options.compile.rootDir),
-    outDir: resolve19(options.compile.outDir)
+    rootDir: resolve20(options.compile.rootDir),
+    outDir: resolve20(options.compile.outDir)
   };
   const findings = [];
   const dependencyProblems = await checkMigrationDependencies(projectDir);
@@ -23842,8 +23897,8 @@ async function assessMigration(options) {
   }
   let openApi;
   if (options.baselineOpenApiPath && options.currentOpenApiPath) {
-    const baselinePath = resolve19(projectDir, options.baselineOpenApiPath);
-    const currentPath = resolve19(projectDir, options.currentOpenApiPath);
+    const baselinePath = resolve20(projectDir, options.baselineOpenApiPath);
+    const currentPath = resolve20(projectDir, options.currentOpenApiPath);
     try {
       const diff = diffOpenApiDocuments(await readOpenApiJson(baselinePath), await readOpenApiJson(currentPath));
       openApi = {
@@ -24272,7 +24327,7 @@ async function run() {
       throw new Error("Build context requires a manifest, target, subject, events, request ID and --json");
     }
     try {
-      const pack = await createDeliveryExecutionContextPack(contextManifest, contextTarget, query, await readExecutionMetadata(resolve23(executionEventsPath)), executionRequestId);
+      const pack = await createDeliveryExecutionContextPack(contextManifest, contextTarget, query, await readExecutionMetadata(resolve24(executionEventsPath)), executionRequestId);
       console.log(JSON.stringify(pack, null, 2));
     } catch (error) {
       console.log(JSON.stringify({
@@ -24291,7 +24346,7 @@ async function run() {
     const currentPath = openApiDiffPaths[1];
     if (!basePath || !currentPath)
       throw new Error("openapi-diff requires two JSON file paths");
-    const result = diffOpenApiDocuments(await readOpenApiJson(resolve23(process.cwd(), basePath)), await readOpenApiJson(resolve23(process.cwd(), currentPath)));
+    const result = diffOpenApiDocuments(await readOpenApiJson(resolve24(process.cwd(), basePath)), await readOpenApiJson(resolve24(process.cwd(), currentPath)));
     console.log(json ? JSON.stringify(result, null, 2) : formatOpenApiDiff(result));
     if (!result.ok)
       process.exitCode = 1;
@@ -24306,8 +24361,8 @@ async function run() {
     if (!modulePath || !outputPath)
       throw new Error("openapi-export requires an OpenAPI module and output path");
     const result = await exportGeneratedOpenApiJson({
-      modulePath: resolve23(process.cwd(), modulePath),
-      outputPath: resolve23(process.cwd(), outputPath),
+      modulePath: resolve24(process.cwd(), modulePath),
+      outputPath: resolve24(process.cwd(), outputPath),
       ...openApiExportSpace === undefined ? {} : { space: openApiExportSpace }
     });
     console.log(json ? JSON.stringify({ ok: true, ...result }, null, 2) : result.written ? `OpenAPI JSON written: ${result.path}` : `OpenAPI JSON matches: ${result.path}`);
@@ -24315,7 +24370,7 @@ async function run() {
   }
   if (command === "migrate") {
     const result = await migrateProject({
-      rootDir: rootDir ? resolve23(process.cwd(), rootDir) : process.cwd(),
+      rootDir: rootDir ? resolve24(process.cwd(), rootDir) : process.cwd(),
       write: !dryRun,
       ...fromVersion === undefined ? {} : { fromVersion },
       ...toVersion === undefined ? {} : { toVersion }
@@ -24353,8 +24408,8 @@ async function run() {
   if (checkSchema && command !== "graphql-schema")
     throw new Error("--check is only supported by graphql-schema");
   const defaults = resolveSupacloudConfig(loadedConfig, process.cwd());
-  const resolvedRoot = rootDir ? resolve23(process.cwd(), rootDir) : defaults.rootDir;
-  const resolvedOut = outDir ? resolve23(process.cwd(), outDir) : defaults.outDir;
+  const resolvedRoot = rootDir ? resolve24(process.cwd(), rootDir) : defaults.rootDir;
+  const resolvedOut = outDir ? resolve24(process.cwd(), outDir) : defaults.outDir;
   const configured = compileOptionsFromConfig({
     ...loadedConfig,
     root: resolvedRoot,
@@ -24373,7 +24428,7 @@ async function run() {
     let delivery = loadedConfig.delivery;
     if (deliveryPath !== undefined) {
       try {
-        delivery = JSON.parse(await readFile14(resolve23(process.cwd(), deliveryPath), "utf8"));
+        delivery = JSON.parse(await readFile14(resolve24(process.cwd(), deliveryPath), "utf8"));
       } catch {
         throw new DeliveryConfigurationError;
       }
@@ -24431,7 +24486,7 @@ ${item.suggestion ?? ""}`).join(`
   } else if (command === "fix") {
     if (!query)
       throw new Error("fix requires a JSON file containing one DiagnosticFix");
-    const input = JSON.parse(await readFile14(resolve23(process.cwd(), query), "utf8"));
+    const input = JSON.parse(await readFile14(resolve24(process.cwd(), query), "utf8"));
     const envelope = input && typeof input === "object" && "fix" in input;
     if (envelope && (typeof input.expectedSourceHash !== "string" || !/^[a-f0-9]{64}$/.test(input.expectedSourceHash))) {
       throw new Error("Editor fix requires the source hash from its validated preview");
@@ -24572,7 +24627,7 @@ Source change detected; compiling...`);
       process.exitCode = 1;
       return;
     }
-    const file = resolve23(rootDir ? resolve23(process.cwd(), rootDir) : process.cwd(), bindingsFile ?? "supacloud.environments.json");
+    const file = resolve24(rootDir ? resolve24(process.cwd(), rootDir) : process.cwd(), bindingsFile ?? "supacloud.environments.json");
     try {
       const document = await readEnvironmentBindingsFile(file);
       const graph = await analyzeProject(resolvedRoot);
@@ -24607,7 +24662,7 @@ Source change detected; compiling...`);
     try {
       const result = await checkProject(compileDefaults);
       if (executionEventsPath && executionRequestId) {
-        const pack = createExecutionContextPack({ ...result.graph, diagnostics: result.diagnostics }, query, await readExecutionMetadata(resolve23(process.cwd(), executionEventsPath)), executionRequestId);
+        const pack = createExecutionContextPack({ ...result.graph, diagnostics: result.diagnostics }, query, await readExecutionMetadata(resolve24(process.cwd(), executionEventsPath)), executionRequestId);
         console.log(JSON.stringify(pack, null, 2));
         return;
       }