@tanstack/start-plugin-core 1.167.34 → 1.168.0

package/dist/esm/import-protection-plugin/trace.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"trace.js","names":[],"sources":["../../../src/import-protection-plugin/trace.ts"],"sourcesContent":["import { getOrCreate, relativizePath } from './utils'\n\nexport interface TraceEdge {\n  importer: string\n  specifier?: string\n}\n\n/**\n * Per-environment reverse import graph.\n * Maps a resolved module id to the set of modules that import it.\n */\nexport class ImportGraph {\n  /**\n   * resolvedId -> Map<importer, specifier>\n   *\n   * We use a Map instead of a Set of objects so edges dedupe correctly.\n   */\n  readonly reverseEdges: Map<string, Map<string, string | undefined>> =\n    new Map()\n\n  /**\n   * Forward-edge index: importer -> Set<resolvedId>.\n   *\n   * Maintained alongside reverseEdges so that {@link invalidate} can remove\n   * all outgoing edges for a file in O(outgoing-edges) instead of scanning\n   * every reverse-edge map in the graph.\n   */\n  private readonly forwardEdges: Map<string, Set<string>> = new Map()\n\n  readonly entries: Set<string> = new Set()\n\n  addEdge(resolved: string, importer: string, specifier?: string): void {\n    getOrCreate(this.reverseEdges, resolved, () => new Map()).set(\n      importer,\n      specifier,\n    )\n    getOrCreate(this.forwardEdges, importer, () => new Set()).add(resolved)\n  }\n\n  /** Convenience for tests/debugging. */\n  getEdges(resolved: string): Set<TraceEdge> | undefined {\n    const importers = this.reverseEdges.get(resolved)\n    if (!importers) return undefined\n    const out = new Set<TraceEdge>()\n    for (const [importer, specifier] of importers) {\n      out.add({ importer, specifier })\n    }\n    return out\n  }\n\n  addEntry(id: string): void {\n    this.entries.add(id)\n  }\n\n  clear(): void {\n    this.reverseEdges.clear()\n    this.forwardEdges.clear()\n    this.entries.clear()\n  }\n\n  invalidate(id: string): void {\n    // Remove all outgoing edges (id as importer) using the forward index.\n    const targets = this.forwardEdges.get(id)\n    if (targets) {\n      for (const resolved of targets) {\n        this.reverseEdges.get(resolved)?.delete(id)\n      }\n      this.forwardEdges.delete(id)\n    }\n    // Remove as a target (id as resolved module)\n    this.reverseEdges.delete(id)\n  }\n}\n\nexport interface TraceStep {\n  file: string\n  specifier?: string\n  line?: number\n  column?: number\n}\n\nexport interface Loc {\n  file?: string\n  line: number\n  column: number\n}\n\n/**\n * BFS from a node upward through reverse edges to find the shortest\n * path to an entry module.\n */\nexport function buildTrace(\n  graph: ImportGraph,\n  startNode: string,\n  maxDepth: number = 20,\n): Array<TraceStep> {\n  // BFS upward (startNode -> importers -> ...)\n  const visited = new Set<string>([startNode])\n  const depthByNode = new Map<string, number>([[startNode, 0]])\n\n  // For any importer we visit, store the \"down\" link back toward startNode.\n  // importer --(specifier)--> next\n  const down = new Map<string, { next: string; specifier?: string }>()\n\n  const queue: Array<string> = [startNode]\n  let qi = 0\n\n  let root: string | null = null\n\n  while (qi < queue.length) {\n    const node = queue[qi++]!\n    const depth = depthByNode.get(node)!\n    const importers = graph.reverseEdges.get(node)\n\n    if (node !== startNode) {\n      const isEntry =\n        graph.entries.has(node) || !importers || importers.size === 0\n      if (isEntry) {\n        root = node\n        break\n      }\n    }\n\n    if (depth >= maxDepth) {\n      continue\n    }\n\n    if (!importers || importers.size === 0) {\n      continue\n    }\n\n    for (const [importer, specifier] of importers) {\n      if (visited.has(importer)) continue\n      visited.add(importer)\n      depthByNode.set(importer, depth + 1)\n      down.set(importer, { next: node, specifier })\n      queue.push(importer)\n    }\n  }\n\n  // Best-effort: if we never found a root, just start from the original node.\n  if (!root) {\n    root = startNode\n  }\n\n  const trace: Array<TraceStep> = []\n  let current = root\n  for (let i = 0; i <= maxDepth + 1; i++) {\n    const link = down.get(current)\n    trace.push({ file: current, specifier: link?.specifier })\n    if (!link) break\n    current = link.next\n  }\n\n  return trace\n}\n\nexport interface ViolationInfo {\n  env: string\n  envType: 'client' | 'server'\n  type: 'specifier' | 'file' | 'marker'\n  behavior: 'error' | 'mock'\n  pattern?: string | RegExp\n  specifier: string\n  importer: string\n  importerLoc?: Loc\n  resolved?: string\n  trace: Array<TraceStep>\n  message: string\n  /** Vitest-style code snippet showing the offending usage in the leaf module. */\n  snippet?: {\n    lines: Array<string>\n    highlightLine: number\n    location: string\n  }\n}\n\n/**\n * Suggestion strings for server-only code leaking into client environments.\n * Used by both `formatViolation` (terminal) and runtime mock modules (browser).\n */\nexport const CLIENT_ENV_SUGGESTIONS = [\n  'Use createServerFn().handler(() => ...) to keep the logic on the server and call it from the client via an RPC bridge',\n  'Use createServerOnlyFn(() => ...) to mark it as server-only (it will throw if accidentally called from the client)',\n  'Use createIsomorphicFn().client(() => ...).server(() => ...) to provide separate client and server implementations',\n  'Move the server-only import out of this file into a separate .server.ts module that is not imported by any client code',\n] as const\n\n/**\n * Suggestion strings for client-only code leaking into server environments.\n * The JSX-specific suggestion is conditionally prepended by `formatViolation`.\n */\nexport const SERVER_ENV_SUGGESTIONS = [\n  'Use createClientOnlyFn(() => ...) to mark it as client-only (returns undefined on the server)',\n  'Use createIsomorphicFn().client(() => ...).server(() => ...) to provide separate client and server implementations',\n  'Move the client-only import out of this file into a separate .client.ts module that is not imported by any server code',\n] as const\n\nexport function formatViolation(info: ViolationInfo, root: string): string {\n  const rel = (p: string) => relativizePath(p, root)\n\n  const relLoc = (p: string, loc?: Loc) => {\n    const r = rel(p)\n    const file = loc?.file ? rel(loc.file) : r\n    return loc ? `${file}:${loc.line}:${loc.column}` : r\n  }\n\n  const relTraceStep = (step: TraceStep): string => {\n    const file = rel(step.file)\n    if (step.line == null) return file\n    const col = step.column ?? 1\n    return `${file}:${step.line}:${col}`\n  }\n\n  const lines: Array<string> = []\n  lines.push(``)\n  lines.push(`[import-protection] Import denied in ${info.envType} environment`)\n  lines.push(``)\n\n  if (info.type === 'specifier') {\n    lines.push(`  Denied by specifier pattern: ${String(info.pattern)}`)\n  } else if (info.type === 'file') {\n    lines.push(`  Denied by file pattern: ${String(info.pattern)}`)\n  } else {\n    lines.push(\n      `  Denied by marker: module is restricted to the opposite environment`,\n    )\n  }\n\n  lines.push(`  Importer: ${relLoc(info.importer, info.importerLoc)}`)\n  lines.push(`  Import: \"${rel(info.specifier)}\"`)\n  if (info.resolved) {\n    lines.push(`  Resolved: ${rel(info.resolved)}`)\n  }\n\n  if (info.trace.length > 0) {\n    lines.push(``)\n    lines.push(`  Trace:`)\n    for (let i = 0; i < info.trace.length; i++) {\n      const step = info.trace[i]!\n      const isEntry = i === 0\n      const tag = isEntry ? ' (entry)' : ''\n      const spec = step.specifier ? ` (import \"${rel(step.specifier)}\")` : ''\n      lines.push(`    ${i + 1}. ${relTraceStep(step)}${tag}${spec}`)\n    }\n  }\n\n  if (info.snippet) {\n    lines.push(``)\n    lines.push(`  Code:`)\n    for (const snippetLine of info.snippet.lines) {\n      lines.push(snippetLine)\n    }\n    lines.push(``)\n    lines.push(`  ${rel(info.snippet.location)}`)\n  }\n\n  lines.push(``)\n\n  // Add suggestions\n  if (info.envType === 'client') {\n    lines.push(`  Suggestions:`)\n    for (const s of CLIENT_ENV_SUGGESTIONS) {\n      lines.push(`    - ${s}`)\n    }\n  } else {\n    const snippetText = info.snippet?.lines.join('\\n') ?? ''\n    const looksLikeJsx =\n      /<[A-Z]/.test(snippetText) ||\n      (/\\{.*\\(.*\\).*\\}/.test(snippetText) && /</.test(snippetText))\n\n    lines.push(`  Suggestions:`)\n    if (looksLikeJsx) {\n      lines.push(\n        `    - Wrap the JSX in <ClientOnly fallback={<Loading />}>...</ClientOnly> so it only renders in the browser after hydration`,\n      )\n    }\n    for (const s of SERVER_ENV_SUGGESTIONS) {\n      lines.push(`    - ${s}`)\n    }\n  }\n\n  lines.push(``)\n  return lines.join('\\n')\n}\n"],"mappings":";;;;;;AAWA,IAAa,cAAb,MAAyB;;;;;;CAMvB,+BACE,IAAI,KAAK;;;;;;;;CASX,+BAA0D,IAAI,KAAK;CAEnE,0BAAgC,IAAI,KAAK;CAEzC,QAAQ,UAAkB,UAAkB,WAA0B;AACpE,cAAY,KAAK,cAAc,gCAAgB,IAAI,KAAK,CAAC,CAAC,IACxD,UACA,UACD;AACD,cAAY,KAAK,cAAc,gCAAgB,IAAI,KAAK,CAAC,CAAC,IAAI,SAAS;;;CAIzE,SAAS,UAA8C;EACrD,MAAM,YAAY,KAAK,aAAa,IAAI,SAAS;AACjD,MAAI,CAAC,UAAW,QAAO,KAAA;EACvB,MAAM,sBAAM,IAAI,KAAgB;AAChC,OAAK,MAAM,CAAC,UAAU,cAAc,UAClC,KAAI,IAAI;GAAE;GAAU;GAAW,CAAC;AAElC,SAAO;;CAGT,SAAS,IAAkB;AACzB,OAAK,QAAQ,IAAI,GAAG;;CAGtB,QAAc;AACZ,OAAK,aAAa,OAAO;AACzB,OAAK,aAAa,OAAO;AACzB,OAAK,QAAQ,OAAO;;CAGtB,WAAW,IAAkB;EAE3B,MAAM,UAAU,KAAK,aAAa,IAAI,GAAG;AACzC,MAAI,SAAS;AACX,QAAK,MAAM,YAAY,QACrB,MAAK,aAAa,IAAI,SAAS,EAAE,OAAO,GAAG;AAE7C,QAAK,aAAa,OAAO,GAAG;;AAG9B,OAAK,aAAa,OAAO,GAAG;;;;;;;AAqBhC,SAAgB,WACd,OACA,WACA,WAAmB,IACD;CAElB,MAAM,UAAU,IAAI,IAAY,CAAC,UAAU,CAAC;CAC5C,MAAM,cAAc,IAAI,IAAoB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;CAI7D,MAAM,uBAAO,IAAI,KAAmD;CAEpE,MAAM,QAAuB,CAAC,UAAU;CACxC,IAAI,KAAK;CAET,IAAI,OAAsB;AAE1B,QAAO,KAAK,MAAM,QAAQ;EACxB,MAAM,OAAO,MAAM;EACnB,MAAM,QAAQ,YAAY,IAAI,KAAK;EACnC,MAAM,YAAY,MAAM,aAAa,IAAI,KAAK;AAE9C,MAAI,SAAS;OAET,MAAM,QAAQ,IAAI,KAAK,IAAI,CAAC,aAAa,UAAU,SAAS,GACjD;AACX,WAAO;AACP;;;AAIJ,MAAI,SAAS,SACX;AAGF,MAAI,CAAC,aAAa,UAAU,SAAS,EACnC;AAGF,OAAK,MAAM,CAAC,UAAU,cAAc,WAAW;AAC7C,OAAI,QAAQ,IAAI,SAAS,CAAE;AAC3B,WAAQ,IAAI,SAAS;AACrB,eAAY,IAAI,UAAU,QAAQ,EAAE;AACpC,QAAK,IAAI,UAAU;IAAE,MAAM;IAAM;IAAW,CAAC;AAC7C,SAAM,KAAK,SAAS;;;AAKxB,KAAI,CAAC,KACH,QAAO;CAGT,MAAM,QAA0B,EAAE;CAClC,IAAI,UAAU;AACd,MAAK,IAAI,IAAI,GAAG,KAAK,WAAW,GAAG,KAAK;EACtC,MAAM,OAAO,KAAK,IAAI,QAAQ;AAC9B,QAAM,KAAK;GAAE,MAAM;GAAS,WAAW,MAAM;GAAW,CAAC;AACzD,MAAI,CAAC,KAAM;AACX,YAAU,KAAK;;AAGjB,QAAO;;;;;;AA2BT,IAAa,yBAAyB;CACpC;CACA;CACA;CACA;CACD;;;;;AAMD,IAAa,yBAAyB;CACpC;CACA;CACA;CACD;AAED,SAAgB,gBAAgB,MAAqB,MAAsB;CACzE,MAAM,OAAO,MAAc,eAAe,GAAG,KAAK;CAElD,MAAM,UAAU,GAAW,QAAc;EACvC,MAAM,IAAI,IAAI,EAAE;EAChB,MAAM,OAAO,KAAK,OAAO,IAAI,IAAI,KAAK,GAAG;AACzC,SAAO,MAAM,GAAG,KAAK,GAAG,IAAI,KAAK,GAAG,IAAI,WAAW;;CAGrD,MAAM,gBAAgB,SAA4B;EAChD,MAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,MAAI,KAAK,QAAQ,KAAM,QAAO;EAC9B,MAAM,MAAM,KAAK,UAAU;AAC3B,SAAO,GAAG,KAAK,GAAG,KAAK,KAAK,GAAG;;CAGjC,MAAM,QAAuB,EAAE;AAC/B,OAAM,KAAK,GAAG;AACd,OAAM,KAAK,wCAAwC,KAAK,QAAQ,cAAc;AAC9E,OAAM,KAAK,GAAG;AAEd,KAAI,KAAK,SAAS,YAChB,OAAM,KAAK,kCAAkC,OAAO,KAAK,QAAQ,GAAG;UAC3D,KAAK,SAAS,OACvB,OAAM,KAAK,6BAA6B,OAAO,KAAK,QAAQ,GAAG;KAE/D,OAAM,KACJ,uEACD;AAGH,OAAM,KAAK,eAAe,OAAO,KAAK,UAAU,KAAK,YAAY,GAAG;AACpE,OAAM,KAAK,cAAc,IAAI,KAAK,UAAU,CAAC,GAAG;AAChD,KAAI,KAAK,SACP,OAAM,KAAK,eAAe,IAAI,KAAK,SAAS,GAAG;AAGjD,KAAI,KAAK,MAAM,SAAS,GAAG;AACzB,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,WAAW;AACtB,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,MAAM,QAAQ,KAAK;GAC1C,MAAM,OAAO,KAAK,MAAM;GAExB,MAAM,MADU,MAAM,IACA,aAAa;GACnC,MAAM,OAAO,KAAK,YAAY,aAAa,IAAI,KAAK,UAAU,CAAC,MAAM;AACrE,SAAM,KAAK,OAAO,IAAI,EAAE,IAAI,aAAa,KAAK,GAAG,MAAM,OAAO;;;AAIlE,KAAI,KAAK,SAAS;AAChB,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,UAAU;AACrB,OAAK,MAAM,eAAe,KAAK,QAAQ,MACrC,OAAM,KAAK,YAAY;AAEzB,QAAM,KAAK,GAAG;AACd,QAAM,KAAK,KAAK,IAAI,KAAK,QAAQ,SAAS,GAAG;;AAG/C,OAAM,KAAK,GAAG;AAGd,KAAI,KAAK,YAAY,UAAU;AAC7B,QAAM,KAAK,iBAAiB;AAC5B,OAAK,MAAM,KAAK,uBACd,OAAM,KAAK,SAAS,IAAI;QAErB;EACL,MAAM,cAAc,KAAK,SAAS,MAAM,KAAK,KAAK,IAAI;EACtD,MAAM,eACJ,SAAS,KAAK,YAAY,IACzB,iBAAiB,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY;AAE9D,QAAM,KAAK,iBAAiB;AAC5B,MAAI,aACF,OAAM,KACJ,8HACD;AAEH,OAAK,MAAM,KAAK,uBACd,OAAM,KAAK,SAAS,IAAI;;AAI5B,OAAM,KAAK,GAAG;AACd,QAAO,MAAM,KAAK,KAAK"}

package/dist/esm/import-protection-plugin/utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"utils.js","names":[],"sources":["../../../src/import-protection-plugin/utils.ts"],"sourcesContent":["import {\n  extname,\n  isAbsolute,\n  relative,\n  resolve as resolvePath,\n} from 'node:path'\nimport { normalizePath } from 'vite'\n\nimport {\n  IMPORT_PROTECTION_DEBUG,\n  IMPORT_PROTECTION_DEBUG_FILTER,\n  KNOWN_SOURCE_EXTENSIONS,\n} from './constants'\n\nexport type Pattern = string | RegExp\n\nexport function dedupePatterns(patterns: Array<Pattern>): Array<Pattern> {\n  const out: Array<Pattern> = []\n  const seen = new Set<string>()\n  for (const p of patterns) {\n    const key = typeof p === 'string' ? `s:${p}` : `r:${p.toString()}`\n    if (seen.has(key)) continue\n    seen.add(key)\n    out.push(p)\n  }\n  return out\n}\n\n/** Strip both `?query` and `#hash` from a module ID. */\nexport function stripQueryAndHash(id: string): string {\n  const q = id.indexOf('?')\n  const h = id.indexOf('#')\n  if (q === -1 && h === -1) return id\n  if (q === -1) return id.slice(0, h)\n  if (h === -1) return id.slice(0, q)\n  return id.slice(0, Math.min(q, h))\n}\n\n/**\n * Strip Vite query/hash parameters and normalize the path in one step.\n *\n * Results are memoized because the same module IDs are processed many\n * times across resolveId, transform, and trace-building hooks.\n */\nconst normalizeFilePathCache = new Map<string, string>()\nexport function normalizeFilePath(id: string): string {\n  let result = normalizeFilePathCache.get(id)\n  if (result === undefined) {\n    result = normalizePath(stripQueryAndHash(id))\n    normalizeFilePathCache.set(id, result)\n  }\n  return result\n}\n\n/** Clear the memoization cache (call from buildStart to bound growth). */\nexport function clearNormalizeFilePathCache(): void {\n  normalizeFilePathCache.clear()\n}\n\n/**\n * Lightweight regex to extract all import/re-export source strings from\n * post-transform code.  Matches:\n *   - `from \"...\"` / `from '...'`   (static import/export)\n *   - `import(\"...\")` / `import('...')` (dynamic import)\n */\nconst importSourceRe =\n  /\\bfrom\\s+(?:\"([^\"]+)\"|'([^']+)')|import\\s*\\(\\s*(?:\"([^\"]+)\"|'([^']+)')\\s*\\)/g\n\nexport function escapeRegExp(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n}\n\n/** Get a value from a Map, creating it with `factory` if absent. */\nexport function getOrCreate<TKey, TValue>(\n  map: Map<TKey, TValue>,\n  key: TKey,\n  factory: () => TValue,\n): TValue {\n  let value = map.get(key)\n  if (value === undefined) {\n    value = factory()\n    map.set(key, value)\n  }\n  return value\n}\n\n/** Make a path relative to `root`, keeping non-rooted paths as-is. */\nexport function relativizePath(p: string, root: string): string {\n  if (!p.startsWith(root)) return p\n  const ch = p.charCodeAt(root.length)\n  // Must be followed by a separator or end-of-string to be a true child\n  if (ch !== 47 && !Number.isNaN(ch)) return p\n  return ch === 47 ? p.slice(root.length + 1) : p.slice(root.length)\n}\n\nexport function extractImportSources(code: string): Array<string> {\n  const sources: Array<string> = []\n  let m: RegExpExecArray | null\n  importSourceRe.lastIndex = 0\n  while ((m = importSourceRe.exec(code)) !== null) {\n    const src = m[1] ?? m[2] ?? m[3] ?? m[4]\n    if (src) sources.push(src)\n  }\n  return sources\n}\n\n/** Log import-protection debug output when debug mode is enabled. */\nexport function debugLog(...args: Array<unknown>): void {\n  if (!IMPORT_PROTECTION_DEBUG) return\n  console.warn('[import-protection:debug]', ...args)\n}\n\n/** Check if any value matches the configured debug filter (if present). */\nexport function matchesDebugFilter(...values: Array<string>): boolean {\n  const debugFilter = IMPORT_PROTECTION_DEBUG_FILTER\n  if (!debugFilter) return true\n  return values.some((v) => v.includes(debugFilter))\n}\n\n/** Strip `?query` (but not `#hash`) from a module ID. */\nexport function stripQuery(id: string): string {\n  const queryIndex = id.indexOf('?')\n  return queryIndex === -1 ? id : id.slice(0, queryIndex)\n}\n\nexport function withoutKnownExtension(id: string): string {\n  const ext = extname(id)\n  return KNOWN_SOURCE_EXTENSIONS.has(ext) ? id.slice(0, -ext.length) : id\n}\n\n/**\n * Check whether `filePath` is contained inside `directory` using a\n * boundary-safe comparison.  A naïve `filePath.startsWith(directory)`\n * would incorrectly treat `/app/src2/foo.ts` as inside `/app/src`.\n */\nexport function isInsideDirectory(\n  filePath: string,\n  directory: string,\n): boolean {\n  const rel = relative(resolvePath(directory), resolvePath(filePath))\n  return rel.length > 0 && !rel.startsWith('..') && !isAbsolute(rel)\n}\n\n/**\n * Decide whether a violation should be deferred for later verification\n * rather than reported immediately.\n *\n * Build mode: always defer — generateBundle checks tree-shaking.\n * Dev mock mode: always defer — edge-survival verifies whether the Start\n *   compiler strips the import (factory-safe pattern).  All violation\n *   types and specifier formats are handled uniformly by the\n *   edge-survival mechanism in processPendingViolations.\n * Dev error mode: never defer — throw immediately (no mock fallback).\n */\nexport function shouldDeferViolation(opts: {\n  isBuild: boolean\n  isDevMock: boolean\n}): boolean {\n  return opts.isBuild || opts.isDevMock\n}\n\nexport function buildSourceCandidates(\n  source: string,\n  resolved: string | undefined,\n  root: string,\n): Set<string> {\n  const candidates = new Set<string>()\n  const push = (value: string | undefined) => {\n    if (!value) return\n    candidates.add(value)\n    candidates.add(stripQuery(value))\n    candidates.add(withoutKnownExtension(stripQuery(value)))\n  }\n\n  push(source)\n  if (resolved) {\n    push(resolved)\n    const relativeResolved = relativizePath(resolved, root)\n    push(relativeResolved)\n    push(`./${relativeResolved}`)\n    push(`/${relativeResolved}`)\n  }\n\n  return candidates\n}\n\nexport function buildResolutionCandidates(id: string): Array<string> {\n  const normalized = normalizeFilePath(id)\n  const stripped = stripQuery(normalized)\n\n  return [...new Set([id, normalized, stripped])]\n}\n\nexport function canonicalizeResolvedId(\n  id: string,\n  root: string,\n  resolveExtensionlessAbsoluteId: (value: string) => string,\n): string {\n  const stripped = stripQuery(id)\n  let normalized = normalizeFilePath(stripped)\n\n  if (\n    !isAbsolute(normalized) &&\n    !normalized.startsWith('.') &&\n    !normalized.startsWith('\\0') &&\n    !/^[a-zA-Z]+:/.test(normalized)\n  ) {\n    normalized = normalizeFilePath(resolvePath(root, normalized))\n  }\n\n  return resolveExtensionlessAbsoluteId(normalized)\n}\n"],"mappings":";;;;AAgBA,SAAgB,eAAe,UAA0C;CACvE,MAAM,MAAsB,EAAE;CAC9B,MAAM,uBAAO,IAAI,KAAa;AAC9B,MAAK,MAAM,KAAK,UAAU;EACxB,MAAM,MAAM,OAAO,MAAM,WAAW,KAAK,MAAM,KAAK,EAAE,UAAU;AAChE,MAAI,KAAK,IAAI,IAAI,CAAE;AACnB,OAAK,IAAI,IAAI;AACb,MAAI,KAAK,EAAE;;AAEb,QAAO;;;AAIT,SAAgB,kBAAkB,IAAoB;CACpD,MAAM,IAAI,GAAG,QAAQ,IAAI;CACzB,MAAM,IAAI,GAAG,QAAQ,IAAI;AACzB,KAAI,MAAM,MAAM,MAAM,GAAI,QAAO;AACjC,KAAI,MAAM,GAAI,QAAO,GAAG,MAAM,GAAG,EAAE;AACnC,KAAI,MAAM,GAAI,QAAO,GAAG,MAAM,GAAG,EAAE;AACnC,QAAO,GAAG,MAAM,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC;;;;;;;;AASpC,IAAM,yCAAyB,IAAI,KAAqB;AACxD,SAAgB,kBAAkB,IAAoB;CACpD,IAAI,SAAS,uBAAuB,IAAI,GAAG;AAC3C,KAAI,WAAW,KAAA,GAAW;AACxB,WAAS,cAAc,kBAAkB,GAAG,CAAC;AAC7C,yBAAuB,IAAI,IAAI,OAAO;;AAExC,QAAO;;;AAIT,SAAgB,8BAAoC;AAClD,wBAAuB,OAAO;;;;;;;;AAShC,IAAM,iBACJ;AAEF,SAAgB,aAAa,GAAmB;AAC9C,QAAO,EAAE,QAAQ,uBAAuB,OAAO;;;AAIjD,SAAgB,YACd,KACA,KACA,SACQ;CACR,IAAI,QAAQ,IAAI,IAAI,IAAI;AACxB,KAAI,UAAU,KAAA,GAAW;AACvB,UAAQ,SAAS;AACjB,MAAI,IAAI,KAAK,MAAM;;AAErB,QAAO;;;AAIT,SAAgB,eAAe,GAAW,MAAsB;AAC9D,KAAI,CAAC,EAAE,WAAW,KAAK,CAAE,QAAO;CAChC,MAAM,KAAK,EAAE,WAAW,KAAK,OAAO;AAEpC,KAAI,OAAO,MAAM,CAAC,OAAO,MAAM,GAAG,CAAE,QAAO;AAC3C,QAAO,OAAO,KAAK,EAAE,MAAM,KAAK,SAAS,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO;;AAGpE,SAAgB,qBAAqB,MAA6B;CAChE,MAAM,UAAyB,EAAE;CACjC,IAAI;AACJ,gBAAe,YAAY;AAC3B,SAAQ,IAAI,eAAe,KAAK,KAAK,MAAM,MAAM;EAC/C,MAAM,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;AACtC,MAAI,IAAK,SAAQ,KAAK,IAAI;;AAE5B,QAAO;;;AAIT,SAAgB,SAAS,GAAG,MAA4B;AACtD,KAAI,CAAC,wBAAyB;AAC9B,SAAQ,KAAK,6BAA6B,GAAG,KAAK;;;AAIpD,SAAgB,mBAAmB,GAAG,QAAgC;CACpE,MAAM,cAAc;AACpB,KAAI,CAAC,YAAa,QAAO;AACzB,QAAO,OAAO,MAAM,MAAM,EAAE,SAAS,YAAY,CAAC;;;AAIpD,SAAgB,WAAW,IAAoB;CAC7C,MAAM,aAAa,GAAG,QAAQ,IAAI;AAClC,QAAO,eAAe,KAAK,KAAK,GAAG,MAAM,GAAG,WAAW;;AAGzD,SAAgB,sBAAsB,IAAoB;CACxD,MAAM,MAAM,QAAQ,GAAG;AACvB,QAAO,wBAAwB,IAAI,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,OAAO,GAAG;;;;;;;AAQvE,SAAgB,kBACd,UACA,WACS;CACT,MAAM,MAAM,SAAS,QAAY,UAAU,EAAE,QAAY,SAAS,CAAC;AACnE,QAAO,IAAI,SAAS,KAAK,CAAC,IAAI,WAAW,KAAK,IAAI,CAAC,WAAW,IAAI;;;;;;;;;;;;;AAcpE,SAAgB,qBAAqB,MAGzB;AACV,QAAO,KAAK,WAAW,KAAK;;AAG9B,SAAgB,sBACd,QACA,UACA,MACa;CACb,MAAM,6BAAa,IAAI,KAAa;CACpC,MAAM,QAAQ,UAA8B;AAC1C,MAAI,CAAC,MAAO;AACZ,aAAW,IAAI,MAAM;AACrB,aAAW,IAAI,WAAW,MAAM,CAAC;AACjC,aAAW,IAAI,sBAAsB,WAAW,MAAM,CAAC,CAAC;;AAG1D,MAAK,OAAO;AACZ,KAAI,UAAU;AACZ,OAAK,SAAS;EACd,MAAM,mBAAmB,eAAe,UAAU,KAAK;AACvD,OAAK,iBAAiB;AACtB,OAAK,KAAK,mBAAmB;AAC7B,OAAK,IAAI,mBAAmB;;AAG9B,QAAO;;AAGT,SAAgB,0BAA0B,IAA2B;CACnE,MAAM,aAAa,kBAAkB,GAAG;CACxC,MAAM,WAAW,WAAW,WAAW;AAEvC,QAAO,CAAC,GAAG,IAAI,IAAI;EAAC;EAAI;EAAY;EAAS,CAAC,CAAC;;AAGjD,SAAgB,uBACd,IACA,MACA,gCACQ;CAER,IAAI,aAAa,kBADA,WAAW,GAAG,CACa;AAE5C,KACE,CAAC,WAAW,WAAW,IACvB,CAAC,WAAW,WAAW,IAAI,IAC3B,CAAC,WAAW,WAAW,KAAK,IAC5B,CAAC,cAAc,KAAK,WAAW,CAE/B,cAAa,kBAAkB,QAAY,MAAM,WAAW,CAAC;AAG/D,QAAO,+BAA+B,WAAW"}

package/dist/esm/import-protection-plugin/virtualModules.d.ts

@@ -1,78 +0,0 @@
-import { ViolationInfo } from './trace.js';
-export declare const MOCK_MODULE_ID = "tanstack-start-import-protection:mock";
-/**
- * Per-violation mock prefix used in build+error mode.
- * Each deferred violation gets a unique ID so we can check which ones
- * survived tree-shaking in `generateBundle`.
- */
-export declare const MOCK_BUILD_PREFIX = "tanstack-start-import-protection:mock:build:";
-export declare const MOCK_EDGE_PREFIX = "tanstack-start-import-protection:mock-edge:";
-export declare const MOCK_RUNTIME_PREFIX = "tanstack-start-import-protection:mock-runtime:";
-export declare function resolvedMarkerVirtualModuleId(kind: 'server' | 'client'): string;
-/**
- * Convenience list for plugin `load` filters/handlers.
- *
- * Vite/Rollup call `load(id)` with the *resolved* virtual id (prefixed by `\0`).
- * `resolveId(source)` sees the *unresolved* id/prefix (without `\0`).
- */
-export declare function getResolvedVirtualModuleMatchers(): ReadonlyArray<string>;
-/**
- * Resolve import-protection's internal virtual module IDs.
- *
- * `resolveId(source)` sees *unresolved* ids/prefixes (no `\0`).
- * Returning a resolved id (with `\0`) ensures Vite/Rollup route it to `load`.
- */
-export declare function resolveInternalVirtualModuleId(source: string): string | undefined;
-type MockAccessMode = 'error' | 'warn' | 'off';
-/**
- * Compact runtime suggestion text for browser console, derived from
- * {@link CLIENT_ENV_SUGGESTIONS} so there's a single source of truth.
- */
-export declare const RUNTIME_SUGGESTION_TEXT: string;
-export declare function mockRuntimeModuleIdFromViolation(info: ViolationInfo, mode: MockAccessMode, root: string): string;
-export declare function makeMockEdgeModuleId(exports: Array<string>, runtimeId: string): string;
-export declare function loadSilentMockModule(): {
-    code: string;
-};
-/**
- * Generate a self-contained mock module with explicit named exports.
- *
- * Used by the transform hook's "self-denial" check: when a denied file
- * (e.g. `.server.ts` in the client environment) is transformed, its entire
- * content is replaced with this mock module.  This avoids returning virtual
- * module IDs from `resolveId`, which prevents cross-environment cache
- * contamination from third-party resolver plugins.
- *
- * The generated code is side-effect-free and tree-shakeable.
- */
-export declare function generateSelfContainedMockModule(exportNames: Array<string>): {
-    code: string;
-};
-/**
- * Generate a dev-mode mock module for self-denial transforms.
- *
- * Similar to `loadMockEdgeModule` but takes export names and a runtime ID
- * directly (instead of parsing them from a base64url-encoded payload).
- * Used by the transform hook when a denied file (e.g. `.server.ts` in
- * the client environment) is replaced in dev mode.
- *
- * The generated module imports mock-runtime for runtime diagnostics
- * (error/warn on property access) and re-exports explicit named exports
- * so that `import { foo } from './denied.server'` works.
- */
-export declare function generateDevSelfDenialModule(exportNames: Array<string>, runtimeId: string): {
-    code: string;
-};
-export declare function loadMockEdgeModule(encodedPayload: string): {
-    code: string;
-};
-export declare function loadMockRuntimeModule(encodedPayload: string): {
-    code: string;
-};
-export declare function loadMarkerModule(): {
-    code: string;
-};
-export declare function loadResolvedVirtualModule(id: string): {
-    code: string;
-} | undefined;
-export {};

package/dist/esm/import-protection-plugin/virtualModules.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"virtualModules.js","names":[],"sources":["../../../src/import-protection-plugin/virtualModules.ts"],"sourcesContent":["import { resolveViteId } from '../utils'\nimport { VITE_ENVIRONMENT_NAMES } from '../constants'\nimport { isValidExportName } from './rewriteDeniedImports'\nimport { CLIENT_ENV_SUGGESTIONS } from './trace'\nimport { VITE_BROWSER_VIRTUAL_PREFIX } from './constants'\nimport { relativizePath } from './utils'\nimport type { ViolationInfo } from './trace'\n\nexport const MOCK_MODULE_ID = 'tanstack-start-import-protection:mock'\nconst RESOLVED_MOCK_MODULE_ID = resolveViteId(MOCK_MODULE_ID)\n\n/**\n * Per-violation mock prefix used in build+error mode.\n * Each deferred violation gets a unique ID so we can check which ones\n * survived tree-shaking in `generateBundle`.\n */\nexport const MOCK_BUILD_PREFIX = 'tanstack-start-import-protection:mock:build:'\nconst RESOLVED_MOCK_BUILD_PREFIX = resolveViteId(MOCK_BUILD_PREFIX)\n\nexport const MOCK_EDGE_PREFIX = 'tanstack-start-import-protection:mock-edge:'\nconst RESOLVED_MOCK_EDGE_PREFIX = resolveViteId(MOCK_EDGE_PREFIX)\n\nexport const MOCK_RUNTIME_PREFIX =\n  'tanstack-start-import-protection:mock-runtime:'\nconst RESOLVED_MOCK_RUNTIME_PREFIX = resolveViteId(MOCK_RUNTIME_PREFIX)\n\nconst MARKER_PREFIX = 'tanstack-start-import-protection:marker:'\nconst RESOLVED_MARKER_PREFIX = resolveViteId(MARKER_PREFIX)\n\nconst RESOLVED_MARKER_SERVER_ONLY = resolveViteId(`${MARKER_PREFIX}server-only`)\nconst RESOLVED_MARKER_CLIENT_ONLY = resolveViteId(`${MARKER_PREFIX}client-only`)\n\nexport function resolvedMarkerVirtualModuleId(\n  kind: 'server' | 'client',\n): string {\n  return kind === 'server'\n    ? RESOLVED_MARKER_SERVER_ONLY\n    : RESOLVED_MARKER_CLIENT_ONLY\n}\n\n/**\n * Convenience list for plugin `load` filters/handlers.\n *\n * Vite/Rollup call `load(id)` with the *resolved* virtual id (prefixed by `\\0`).\n * `resolveId(source)` sees the *unresolved* id/prefix (without `\\0`).\n */\nexport function getResolvedVirtualModuleMatchers(): ReadonlyArray<string> {\n  return RESOLVED_VIRTUAL_MODULE_MATCHERS\n}\n\nconst RESOLVED_VIRTUAL_MODULE_MATCHERS = [\n  RESOLVED_MOCK_MODULE_ID,\n  RESOLVED_MOCK_BUILD_PREFIX,\n  RESOLVED_MOCK_EDGE_PREFIX,\n  RESOLVED_MOCK_RUNTIME_PREFIX,\n  RESOLVED_MARKER_PREFIX,\n] as const\n\nconst RESOLVE_PREFIX_PAIRS = [\n  [MOCK_EDGE_PREFIX, RESOLVED_MOCK_EDGE_PREFIX],\n  [MOCK_RUNTIME_PREFIX, RESOLVED_MOCK_RUNTIME_PREFIX],\n  [MOCK_BUILD_PREFIX, RESOLVED_MOCK_BUILD_PREFIX],\n  [MARKER_PREFIX, RESOLVED_MARKER_PREFIX],\n] as const\n\n/**\n * Resolve import-protection's internal virtual module IDs.\n *\n * `resolveId(source)` sees *unresolved* ids/prefixes (no `\\0`).\n * Returning a resolved id (with `\\0`) ensures Vite/Rollup route it to `load`.\n */\nexport function resolveInternalVirtualModuleId(\n  source: string,\n): string | undefined {\n  if (source.startsWith(VITE_BROWSER_VIRTUAL_PREFIX)) {\n    return resolveInternalVirtualModuleId(\n      `\\0${source.slice(VITE_BROWSER_VIRTUAL_PREFIX.length)}`,\n    )\n  }\n\n  if (source === MOCK_MODULE_ID || source === RESOLVED_MOCK_MODULE_ID) {\n    return RESOLVED_MOCK_MODULE_ID\n  }\n\n  for (const [unresolvedPrefix, resolvedPrefix] of RESOLVE_PREFIX_PAIRS) {\n    if (source.startsWith(unresolvedPrefix)) {\n      return resolveViteId(source)\n    }\n\n    if (source.startsWith(resolvedPrefix)) {\n      return source\n    }\n  }\n\n  return undefined\n}\n\nfunction toBase64Url(input: string): string {\n  return Buffer.from(input, 'utf8').toString('base64url')\n}\n\nfunction fromBase64Url(input: string): string {\n  return Buffer.from(input, 'base64url').toString('utf8')\n}\n\ntype MockAccessMode = 'error' | 'warn' | 'off'\n\n/**\n * Compact runtime suggestion text for browser console, derived from\n * {@link CLIENT_ENV_SUGGESTIONS} so there's a single source of truth.\n */\nexport const RUNTIME_SUGGESTION_TEXT =\n  'Fix: ' +\n  CLIENT_ENV_SUGGESTIONS.join('. ') +\n  '. To disable these runtime diagnostics, set importProtection.mockAccess: \"off\".'\n\nexport function mockRuntimeModuleIdFromViolation(\n  info: ViolationInfo,\n  mode: MockAccessMode,\n  root: string,\n): string {\n  if (mode === 'off') return MOCK_MODULE_ID\n  if (info.env !== VITE_ENVIRONMENT_NAMES.client) return MOCK_MODULE_ID\n\n  const rel = (p: string) => relativizePath(p, root)\n  const trace = info.trace.map((s) => {\n    const file = rel(s.file)\n    if (s.line == null) return file\n    return `${file}:${s.line}:${s.column ?? 1}`\n  })\n\n  const payload = {\n    env: info.env,\n    importer: info.importer,\n    specifier: info.specifier,\n    trace,\n    mode,\n  }\n  return `${MOCK_RUNTIME_PREFIX}${toBase64Url(JSON.stringify(payload))}`\n}\n\nexport function makeMockEdgeModuleId(\n  exports: Array<string>,\n  runtimeId: string,\n): string {\n  const payload = { exports, runtimeId }\n  return `${MOCK_EDGE_PREFIX}${toBase64Url(JSON.stringify(payload))}`\n}\n\n/**\n * Generate a recursive Proxy-based mock module.\n *\n * When `diagnostics` is provided, the generated code includes a `__report`\n * function that logs runtime warnings/errors when the mock is actually used\n * (property access for primitive coercion, calls, construction, sets).\n *\n * When `diagnostics` is omitted, the mock is completely silent — suitable\n * for base mock modules (e.g. `MOCK_MODULE_ID` or per-violation build mocks)\n * that are consumed by mock-edge modules providing explicit named exports.\n */\nfunction generateMockCode(diagnostics?: {\n  meta: {\n    env: string\n    importer: string\n    specifier: string\n    trace: Array<unknown>\n  }\n  mode: 'error' | 'warn' | 'off'\n}): string {\n  const fnName = diagnostics ? '__createMock' : 'createMock'\n  const hasDiag = !!diagnostics\n\n  const preamble = hasDiag\n    ? `const __meta = ${JSON.stringify(diagnostics.meta)};\nconst __mode = ${JSON.stringify(diagnostics.mode)};\n\nconst __seen = new Set();\nfunction __report(action, accessPath) {\n  if (__mode === 'off') return;\n  const key = action + ':' + accessPath;\n  if (__seen.has(key)) return;\n  __seen.add(key);\n\n  const traceLines = Array.isArray(__meta.trace) && __meta.trace.length\n    ? \"\\\\n\\\\nTrace:\\\\n\" + __meta.trace.map((t, i) => '  ' + (i + 1) + '. ' + String(t)).join('\\\\n')\n    : '';\n\n  const msg =\n    '[import-protection] Mocked import used in dev client\\\\n\\\\n' +\n    'Denied import: \"' + __meta.specifier + '\"\\\\n' +\n    'Importer: ' + __meta.importer + '\\\\n' +\n    'Access: ' + accessPath + ' (' + action + ')' +\n    traceLines +\n    '\\\\n\\\\n' + ${JSON.stringify(RUNTIME_SUGGESTION_TEXT)};\n\n  const err = new Error(msg);\n  if (__mode === 'warn') {\n    console.warn(err);\n  } else {\n    console.error(err);\n  }\n}\n`\n    : ''\n\n  // Diagnostic-only traps for primitive coercion, set\n  const diagGetTraps = hasDiag\n    ? `\n      if (prop === Symbol.toPrimitive) {\n        return () => {\n          __report('toPrimitive', name);\n          return '[import-protection mock]';\n        };\n      }\n      if (prop === 'toString' || prop === 'valueOf' || prop === 'toJSON') {\n        return () => {\n          __report(String(prop), name);\n          return '[import-protection mock]';\n        };\n      }`\n    : ''\n\n  const applyBody = hasDiag\n    ? `__report('call', name + '()');\n      return ${fnName}(name + '()');`\n    : `return ${fnName}(name + '()');`\n\n  const constructBody = hasDiag\n    ? `__report('construct', 'new ' + name);\n      return ${fnName}('new ' + name);`\n    : `return ${fnName}('new ' + name);`\n\n  const setTrap = hasDiag\n    ? `\n    set(_target, prop) {\n      __report('set', name + '.' + String(prop));\n      return true;\n    },`\n    : ''\n\n  return `\n${preamble}/* @__NO_SIDE_EFFECTS__ */\nfunction ${fnName}(name) {\n  const fn = function () {};\n  fn.prototype.name = name;\n  const children = Object.create(null);\n  const proxy = new Proxy(fn, {\n    get(_target, prop) {\n      if (prop === '__esModule') return true;\n      if (prop === 'default') return proxy;\n      if (prop === 'caller') return null;\n      if (prop === 'then') return (f) => Promise.resolve(f(proxy));\n      if (prop === 'catch') return () => Promise.resolve(proxy);\n      if (prop === 'finally') return (f) => { f(); return Promise.resolve(proxy); };${diagGetTraps}\n      if (typeof prop === 'symbol') return undefined;\n      if (!(prop in children)) {\n        children[prop] = ${fnName}(name + '.' + prop);\n      }\n      return children[prop];\n    },\n    apply() {\n      ${applyBody}\n    },\n    construct() {\n      ${constructBody}\n    },${setTrap}\n  });\n  return proxy;\n}\nconst mock = /* @__PURE__ */ ${fnName}('mock');\nexport default mock;\n`\n}\n\nexport function loadSilentMockModule(): { code: string } {\n  return { code: generateMockCode() }\n}\n\n/**\n * Filter export names to valid, non-default names.\n */\nfunction filterExportNames(exports: ReadonlyArray<string>): Array<string> {\n  return exports.filter((n) => n.length > 0 && n !== 'default')\n}\n\n/**\n * Generate ESM export lines that re-export named properties from `mock`.\n *\n * Produces `export const foo = mock.foo;` for valid identifiers and\n * string-keyed re-exports for non-identifier names.\n */\nfunction generateExportLines(names: ReadonlyArray<string>): Array<string> {\n  const lines: Array<string> = []\n  const stringExports: Array<{ alias: string; name: string }> = []\n\n  for (let i = 0; i < names.length; i++) {\n    const n = names[i]!\n    if (isValidExportName(n)) {\n      lines.push(`export const ${n} = mock.${n};`)\n    } else {\n      const alias = `__tss_str_${i}`\n      lines.push(`const ${alias} = mock[${JSON.stringify(n)}];`)\n      stringExports.push({ alias, name: n })\n    }\n  }\n\n  if (stringExports.length > 0) {\n    const reexports = stringExports\n      .map((s) => `${s.alias} as ${JSON.stringify(s.name)}`)\n      .join(', ')\n    lines.push(`export { ${reexports} };`)\n  }\n\n  return lines\n}\n\n/**\n * Generate a self-contained mock module with explicit named exports.\n *\n * Used by the transform hook's \"self-denial\" check: when a denied file\n * (e.g. `.server.ts` in the client environment) is transformed, its entire\n * content is replaced with this mock module.  This avoids returning virtual\n * module IDs from `resolveId`, which prevents cross-environment cache\n * contamination from third-party resolver plugins.\n *\n * The generated code is side-effect-free and tree-shakeable.\n */\nexport function generateSelfContainedMockModule(exportNames: Array<string>): {\n  code: string\n} {\n  const mockCode = generateMockCode()\n  const exportLines = generateExportLines(filterExportNames(exportNames))\n\n  return {\n    code: `${mockCode}\n${exportLines.join('\\n')}\n`,\n  }\n}\n\n/**\n * Generate a dev-mode mock module for self-denial transforms.\n *\n * Similar to `loadMockEdgeModule` but takes export names and a runtime ID\n * directly (instead of parsing them from a base64url-encoded payload).\n * Used by the transform hook when a denied file (e.g. `.server.ts` in\n * the client environment) is replaced in dev mode.\n *\n * The generated module imports mock-runtime for runtime diagnostics\n * (error/warn on property access) and re-exports explicit named exports\n * so that `import { foo } from './denied.server'` works.\n */\nexport function generateDevSelfDenialModule(\n  exportNames: Array<string>,\n  runtimeId: string,\n): { code: string } {\n  const names = filterExportNames(exportNames)\n  const exportLines = generateExportLines(names)\n\n  return {\n    code: `import mock from ${JSON.stringify(runtimeId)};\n${exportLines.join('\\n')}\nexport default mock;\n`,\n  }\n}\n\nexport function loadMockEdgeModule(encodedPayload: string): { code: string } {\n  let payload: { exports?: Array<string>; runtimeId?: string }\n  try {\n    payload = JSON.parse(fromBase64Url(encodedPayload)) as typeof payload\n  } catch {\n    payload = { exports: [] }\n  }\n  const names = filterExportNames(payload.exports ?? [])\n\n  const runtimeId: string =\n    typeof payload.runtimeId === 'string' && payload.runtimeId.length > 0\n      ? payload.runtimeId\n      : MOCK_MODULE_ID\n\n  const exportLines = generateExportLines(names)\n\n  return {\n    code: `import mock from ${JSON.stringify(runtimeId)};\n${exportLines.join('\\n')}\nexport default mock;\n`,\n  }\n}\n\nexport function loadMockRuntimeModule(encodedPayload: string): {\n  code: string\n} {\n  let payload: {\n    mode?: string\n    env?: string\n    importer?: string\n    specifier?: string\n    trace?: Array<unknown>\n  }\n  try {\n    payload = JSON.parse(fromBase64Url(encodedPayload)) as typeof payload\n  } catch {\n    payload = {}\n  }\n\n  const mode: 'error' | 'warn' | 'off' =\n    payload.mode === 'warn' || payload.mode === 'off' ? payload.mode : 'error'\n\n  const meta = {\n    env: String(payload.env ?? ''),\n    importer: String(payload.importer ?? ''),\n    specifier: String(payload.specifier ?? ''),\n    trace: Array.isArray(payload.trace) ? payload.trace : [],\n  }\n\n  return { code: generateMockCode({ meta, mode }) }\n}\n\nconst MARKER_MODULE_RESULT = { code: 'export {}' } as const\n\nexport function loadMarkerModule(): { code: string } {\n  return MARKER_MODULE_RESULT\n}\n\nexport function loadResolvedVirtualModule(\n  id: string,\n): { code: string } | undefined {\n  if (id === RESOLVED_MOCK_MODULE_ID) {\n    return loadSilentMockModule()\n  }\n\n  // Per-violation build mock modules — same silent mock code\n  if (id.startsWith(RESOLVED_MOCK_BUILD_PREFIX)) {\n    return loadSilentMockModule()\n  }\n\n  if (id.startsWith(RESOLVED_MOCK_EDGE_PREFIX)) {\n    return loadMockEdgeModule(id.slice(RESOLVED_MOCK_EDGE_PREFIX.length))\n  }\n\n  if (id.startsWith(RESOLVED_MOCK_RUNTIME_PREFIX)) {\n    return loadMockRuntimeModule(id.slice(RESOLVED_MOCK_RUNTIME_PREFIX.length))\n  }\n\n  if (id.startsWith(RESOLVED_MARKER_PREFIX)) {\n    return loadMarkerModule()\n  }\n\n  return undefined\n}\n"],"mappings":";;;;;;;AAQA,IAAa,iBAAiB;AAC9B,IAAM,0BAA0B,cAAc,eAAe;;;;;;AAO7D,IAAa,oBAAoB;AACjC,IAAM,6BAA6B,cAAc,kBAAkB;AAEnE,IAAa,mBAAmB;AAChC,IAAM,4BAA4B,cAAc,iBAAiB;AAEjE,IAAa,sBACX;AACF,IAAM,+BAA+B,cAAc,oBAAoB;AAEvE,IAAM,gBAAgB;AACtB,IAAM,yBAAyB,cAAc,cAAc;AAE3D,IAAM,8BAA8B,cAAc,GAAG,cAAc,aAAa;AAChF,IAAM,8BAA8B,cAAc,GAAG,cAAc,aAAa;AAEhF,SAAgB,8BACd,MACQ;AACR,QAAO,SAAS,WACZ,8BACA;;;;;;;;AASN,SAAgB,mCAA0D;AACxE,QAAO;;AAGT,IAAM,mCAAmC;CACvC;CACA;CACA;CACA;CACA;CACD;AAED,IAAM,uBAAuB;CAC3B,CAAC,kBAAkB,0BAA0B;CAC7C,CAAC,qBAAqB,6BAA6B;CACnD,CAAC,mBAAmB,2BAA2B;CAC/C,CAAC,eAAe,uBAAuB;CACxC;;;;;;;AAQD,SAAgB,+BACd,QACoB;AACpB,KAAI,OAAO,WAAA,eAAuC,CAChD,QAAO,+BACL,KAAK,OAAO,MAAM,4BAA4B,OAAO,GACtD;AAGH,KAAI,WAAA,2CAA6B,WAAW,wBAC1C,QAAO;AAGT,MAAK,MAAM,CAAC,kBAAkB,mBAAmB,sBAAsB;AACrE,MAAI,OAAO,WAAW,iBAAiB,CACrC,QAAO,cAAc,OAAO;AAG9B,MAAI,OAAO,WAAW,eAAe,CACnC,QAAO;;;AAOb,SAAS,YAAY,OAAuB;AAC1C,QAAO,OAAO,KAAK,OAAO,OAAO,CAAC,SAAS,YAAY;;AAGzD,SAAS,cAAc,OAAuB;AAC5C,QAAO,OAAO,KAAK,OAAO,YAAY,CAAC,SAAS,OAAO;;;;;;AASzD,IAAa,0BACX,UACA,uBAAuB,KAAK,KAAK,GACjC;AAEF,SAAgB,iCACd,MACA,MACA,MACQ;AACR,KAAI,SAAS,MAAO,QAAO;AAC3B,KAAI,KAAK,QAAQ,uBAAuB,OAAQ,QAAO;CAEvD,MAAM,OAAO,MAAc,eAAe,GAAG,KAAK;CAClD,MAAM,QAAQ,KAAK,MAAM,KAAK,MAAM;EAClC,MAAM,OAAO,IAAI,EAAE,KAAK;AACxB,MAAI,EAAE,QAAQ,KAAM,QAAO;AAC3B,SAAO,GAAG,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,UAAU;GACxC;CAEF,MAAM,UAAU;EACd,KAAK,KAAK;EACV,UAAU,KAAK;EACf,WAAW,KAAK;EAChB;EACA;EACD;AACD,QAAO,GAAG,sBAAsB,YAAY,KAAK,UAAU,QAAQ,CAAC;;AAGtE,SAAgB,qBACd,SACA,WACQ;CACR,MAAM,UAAU;EAAE;EAAS;EAAW;AACtC,QAAO,GAAG,mBAAmB,YAAY,KAAK,UAAU,QAAQ,CAAC;;;;;;;;;;;;;AAcnE,SAAS,iBAAiB,aAQf;CACT,MAAM,SAAS,cAAc,iBAAiB;CAC9C,MAAM,UAAU,CAAC,CAAC;AAsElB,QAAO;EApEU,UACb,kBAAkB,KAAK,UAAU,YAAY,KAAK,CAAC;iBACxC,KAAK,UAAU,YAAY,KAAK,CAAC;;;;;;;;;;;;;;;;;;;iBAmBjC,KAAK,UAAU,wBAAwB,CAAC;;;;;;;;;IAUnD,GAsCK;WACA,OAAO;;;;;;;;;;;sFApCK,UACjB;;;;;;;;;;;;WAaA,GAiC6F;;;2BAGxE,OAAO;;;;;QAlCd,UACd;eACS,OAAO,kBAChB,UAAU,OAAO,gBAoCL;;;QAlCM,UAClB;eACS,OAAO,oBAChB,UAAU,OAAO,kBAkCD;QAhCJ,UACZ;;;;UAKA,GA2BU;;;;+BAIe,OAAO;;;;AAKtC,SAAgB,uBAAyC;AACvD,QAAO,EAAE,MAAM,kBAAkB,EAAE;;;;;AAMrC,SAAS,kBAAkB,SAA+C;AACxE,QAAO,QAAQ,QAAQ,MAAM,EAAE,SAAS,KAAK,MAAM,UAAU;;;;;;;;AAS/D,SAAS,oBAAoB,OAA6C;CACxE,MAAM,QAAuB,EAAE;CAC/B,MAAM,gBAAwD,EAAE;AAEhE,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,IAAI,MAAM;AAChB,MAAI,kBAAkB,EAAE,CACtB,OAAM,KAAK,gBAAgB,EAAE,UAAU,EAAE,GAAG;OACvC;GACL,MAAM,QAAQ,aAAa;AAC3B,SAAM,KAAK,SAAS,MAAM,UAAU,KAAK,UAAU,EAAE,CAAC,IAAI;AAC1D,iBAAc,KAAK;IAAE;IAAO,MAAM;IAAG,CAAC;;;AAI1C,KAAI,cAAc,SAAS,GAAG;EAC5B,MAAM,YAAY,cACf,KAAK,MAAM,GAAG,EAAE,MAAM,MAAM,KAAK,UAAU,EAAE,KAAK,GAAG,CACrD,KAAK,KAAK;AACb,QAAM,KAAK,YAAY,UAAU,KAAK;;AAGxC,QAAO;;;;;;;;;;;;;AAcT,SAAgB,gCAAgC,aAE9C;AAIA,QAAO,EACL,MAAM,GAJS,kBAAkB,CAIf;EAHA,oBAAoB,kBAAkB,YAAY,CAAC,CAI3D,KAAK,KAAK,CAAC;GAEtB;;;;;;;;;;;;;;AAeH,SAAgB,4BACd,aACA,WACkB;CAElB,MAAM,cAAc,oBADN,kBAAkB,YAAY,CACE;AAE9C,QAAO,EACL,MAAM,oBAAoB,KAAK,UAAU,UAAU,CAAC;EACtD,YAAY,KAAK,KAAK,CAAC;;GAGtB;;AAGH,SAAgB,mBAAmB,gBAA0C;CAC3E,IAAI;AACJ,KAAI;AACF,YAAU,KAAK,MAAM,cAAc,eAAe,CAAC;SAC7C;AACN,YAAU,EAAE,SAAS,EAAE,EAAE;;CAE3B,MAAM,QAAQ,kBAAkB,QAAQ,WAAW,EAAE,CAAC;CAEtD,MAAM,YACJ,OAAO,QAAQ,cAAc,YAAY,QAAQ,UAAU,SAAS,IAChE,QAAQ,YACR;CAEN,MAAM,cAAc,oBAAoB,MAAM;AAE9C,QAAO,EACL,MAAM,oBAAoB,KAAK,UAAU,UAAU,CAAC;EACtD,YAAY,KAAK,KAAK,CAAC;;GAGtB;;AAGH,SAAgB,sBAAsB,gBAEpC;CACA,IAAI;AAOJ,KAAI;AACF,YAAU,KAAK,MAAM,cAAc,eAAe,CAAC;SAC7C;AACN,YAAU,EAAE;;CAGd,MAAM,OACJ,QAAQ,SAAS,UAAU,QAAQ,SAAS,QAAQ,QAAQ,OAAO;AASrE,QAAO,EAAE,MAAM,iBAAiB;EAAE,MAPrB;GACX,KAAK,OAAO,QAAQ,OAAO,GAAG;GAC9B,UAAU,OAAO,QAAQ,YAAY,GAAG;GACxC,WAAW,OAAO,QAAQ,aAAa,GAAG;GAC1C,OAAO,MAAM,QAAQ,QAAQ,MAAM,GAAG,QAAQ,QAAQ,EAAE;GACzD;EAEuC;EAAM,CAAC,EAAE;;AAGnD,IAAM,uBAAuB,EAAE,MAAM,aAAa;AAElD,SAAgB,mBAAqC;AACnD,QAAO;;AAGT,SAAgB,0BACd,IAC8B;AAC9B,KAAI,OAAO,wBACT,QAAO,sBAAsB;AAI/B,KAAI,GAAG,WAAW,2BAA2B,CAC3C,QAAO,sBAAsB;AAG/B,KAAI,GAAG,WAAW,0BAA0B,CAC1C,QAAO,mBAAmB,GAAG,MAAM,0BAA0B,OAAO,CAAC;AAGvE,KAAI,GAAG,WAAW,6BAA6B,CAC7C,QAAO,sBAAsB,GAAG,MAAM,6BAA6B,OAAO,CAAC;AAG7E,KAAI,GAAG,WAAW,uBAAuB,CACvC,QAAO,kBAAkB"}

package/dist/esm/start-compiler/load-module.d.ts

@@ -1,14 +0,0 @@
-import { StartCompiler } from './compiler.js';
-interface ViteCompilerModuleLoaderOptions {
-    compiler: StartCompiler;
-    mode: string;
-    fetchModule?: (id: string) => Promise<unknown>;
-    loadModule: (opts: {
-        id: string;
-    }) => Promise<{
-        code?: string | null;
-    }>;
-    id: string;
-}
-export declare function loadModuleForViteCompiler(opts: ViteCompilerModuleLoaderOptions): Promise<void>;
-export {};

package/dist/esm/start-compiler/load-module.js

@@ -1,18 +0,0 @@
-import { SERVER_FN_LOOKUP } from "../constants.js";
-//#region src/start-compiler/load-module.ts
-async function loadModuleForViteCompiler(opts) {
-	if (opts.mode === "build") {
-		const code = (await opts.loadModule({ id: opts.id })).code ?? "";
-		opts.compiler.ingestModule({
-			code,
-			id: opts.id
-		});
-		return;
-	}
-	if (opts.mode !== "dev" || !opts.fetchModule) throw new Error(`could not load module ${opts.id}: unknown environment mode ${opts.mode}`);
-	await opts.fetchModule(`${opts.id}?${SERVER_FN_LOOKUP}`);
-}
-//#endregion
-export { loadModuleForViteCompiler };
-
-//# sourceMappingURL=load-module.js.map

package/dist/esm/start-compiler/load-module.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"load-module.js","names":[],"sources":["../../../src/start-compiler/load-module.ts"],"sourcesContent":["import { SERVER_FN_LOOKUP } from '../constants'\nimport type { StartCompiler } from './compiler'\n\ninterface ViteCompilerModuleLoaderOptions {\n  compiler: StartCompiler\n  mode: string\n  fetchModule?: (id: string) => Promise<unknown>\n  loadModule: (opts: { id: string }) => Promise<{ code?: string | null }>\n  id: string\n}\n\nexport async function loadModuleForViteCompiler(\n  opts: ViteCompilerModuleLoaderOptions,\n): Promise<void> {\n  if (opts.mode === 'build') {\n    const loaded = await opts.loadModule({ id: opts.id })\n    const code = loaded.code ?? ''\n\n    opts.compiler.ingestModule({ code, id: opts.id })\n\n    return\n  }\n\n  if (opts.mode !== 'dev' || !opts.fetchModule) {\n    throw new Error(\n      `could not load module ${opts.id}: unknown environment mode ${opts.mode}`,\n    )\n  }\n\n  await opts.fetchModule(`${opts.id}?${SERVER_FN_LOOKUP}`)\n}\n"],"mappings":";;AAWA,eAAsB,0BACpB,MACe;AACf,KAAI,KAAK,SAAS,SAAS;EAEzB,MAAM,QADS,MAAM,KAAK,WAAW,EAAE,IAAI,KAAK,IAAI,CAAC,EACjC,QAAQ;AAE5B,OAAK,SAAS,aAAa;GAAE;GAAM,IAAI,KAAK;GAAI,CAAC;AAEjD;;AAGF,KAAI,KAAK,SAAS,SAAS,CAAC,KAAK,YAC/B,OAAM,IAAI,MACR,yBAAyB,KAAK,GAAG,6BAA6B,KAAK,OACpE;AAGH,OAAM,KAAK,YAAY,GAAG,KAAK,GAAG,GAAG,mBAAmB"}