@thednp/rpc 0.0.1 → 0.0.5

package/dist/server/server.d.mts

@@ -3,33 +3,115 @@ import "@thednp/rpc";
 import "express";
 import "hono";
 import "@hono/node-server";
+import "hono/factory";
 import "fastify";
+import "fastify-plugin";
 import "koa";
 //#region src/types.d.ts
+/**
+ * Content types the RPC client modules send with each request.
+ */
 type ContentType = "application/json" | "text/plain";
+/**
+ * Fetch `credentials` policy used by the generated client modules.
+ */
+type Credentials = "same-origin" | "include" | "omit";
+/**
+ * Options for a single server function, controlling how the generated
+ * client module serializes the request body and sends credentials.
+ */
 interface ServerFunctionOptions {
+  /**
+   * Content type used for the request body.
+   * @default "application/json"
+   */
   contentType: ContentType;
+  /**
+   * Fetch credentials policy.
+   * @default "same-origin"
+   */
+  credentials?: Credentials;
+  /**
+   * HTTP method used for the RPC request.
+   * GET requests send arguments as an `?args=` JSON query parameter
+   * (a fetch request body is not allowed on GET).
+   * @default "POST"
+   */
+  method?: "GET" | "POST";
 }
 // primitives and their compositions
+/**
+ * Primitive JSON values, including `undefined` for optional parameters.
+ */
 type JsonPrimitive = string | number | boolean | null | undefined;
+/**
+ * A JSON object whose values are JSON values or arrays.
+ */
 type JsonObject = {
   [key: string]: JsonValue | JsonArray;
 };
+/**
+ * A JSON array of JSON values.
+ */
 type JsonArray = JsonValue[];
+/**
+ * Any JSON-serializable value: primitive, array, or object.
+ */
 type JsonValue = JsonPrimitive | JsonArray | JsonObject;
+/**
+ * Server function initialization signature, identical to `ServerFunction`.
+ * Used when registering a function with `createServerFunction`.
+ */
 type ServerFunctionInit<TArgs extends JsonArray = JsonArray, TResult extends JsonValue = JsonValue> = (signal: AbortSignal, ...args: TArgs) => Promise<TResult>;
+/**
+ * Client-side stub signature generated for each server function.
+ * Returns a promise-backed `data` handle plus a `cancel` function
+ * that aborts the underlying fetch request.
+ */
 type ClientFunction<TArgs extends JsonArray = JsonArray, TResult extends JsonValue = JsonValue> = (...args: TArgs) => {
+  /** Promise resolving to the server response data */
   data: Promise<TResult>;
+  /** Aborts the in-flight request with the given reason */
   cancel: (reason: string) => void;
 };
+/**
+ * A client function augmented with its registered export name and
+ * per-function options (content type, credentials).
+ */
 type ClientFunctionWithOptions = ClientFunction & {
+  /** Registered export name of the server function */
   name: string;
+  /** Per-function content type and credentials options */
   options?: ServerFunctionOptions;
 };
+/**
+ * Internal plugin options accepted by `getClientModules`.
+ */
+interface RpcPluginOptionsInternal {
+  /** RPC endpoint prefix (e.g. "__rpc") */
+  rpcPrefix: string;
+  /** Framework adapter name */
+  adapter?: string | undefined;
+}
+/**
+ * Partial Vite config used when scanning server files outside a running dev server.
+ */
+type ScanConfig = Pick<ResolvedConfig, "root" | "base"> & {
+  /** Vite server options override (e.g. `middlewareMode`) */
+  server?: Partial<ResolvedConfig["server"]>;
+};
+/**
+ * Entry in the server functions map: registered name, client handler,
+ * optional per-function options, and the original export name.
+ */
 interface ServerFnEntry {
+  /** Registered RPC function name (used in the URL path) */
   name: string;
+  /** Client-side handler stub for this function */
   handler: ClientFunctionWithOptions;
+  /** Per-function content type and credentials options */
   options?: ServerFunctionOptions;
+  /** Original export name from the server module */
   exportName?: string;
 }
 /**
@@ -47,9 +129,9 @@ interface RpcPluginOptions {
    * @default "__rpc"
    * @example
    * // Results in endpoints like: /api/rpc/myFunction
-   * rpcPreffix: "api/rpc"
+   * rpcPrefix: "api/rpc"
    */
-  rpcPreffix: "__rpc" | string;
+  rpcPrefix: "__rpc" | string;
   /**
    * Option to set an adapter for the middleware connection. The default is _express_,
    * which is the most popular and battle tested server app. The _express_ adapter is
@@ -63,29 +145,48 @@ interface RpcPluginOptions {
 declare const serverFunctionsMap: Map<string, ServerFnEntry>;
 //#endregion
 //#region src/scanForServerFiles.d.ts
-type ScanConfig = Pick<ResolvedConfig, "root" | "base"> & {
-  server?: Partial<ResolvedConfig["server"]>;
-};
+/**
+ * Scans `src/api/` for server function files (`server.ts`, `server.js`, `server.mjs`, `server.mts`)
+ * and populates the global `serverFunctionsMap` with their exported functions.
+ * Uses Vite's SSR module loading to resolve and execute each file.
+ * @param initialCfg - Optional Vite config overrides (root, base, server)
+ * @param devServer - Optional running Vite dev server instance; when provided, skips creating a new one
+ */
 declare const scanForServerFiles: (initialCfg?: ScanConfig, devServer?: ViteDevServer) => Promise<void>;
 //#endregion
 //#region src/createFunction.d.ts
+/**
+ * Creates a server-side RPC function.
+ * Registers the function in the server functions map and returns a client-compatible
+ * wrapper that exposes `data` (Promise) and `cancel` (function) for request lifecycle control.
+ * @param name - Unique identifier used by the RPC router to dispatch requests
+ * @param handler - The actual implementation receiving an AbortSignal followed by JSON-serializable arguments
+ * @param fnOptions - Optional contentType and credentials settings
+ * @returns A client stub with `data` promise and `cancel` method, auto-registered in the server map
+ */
 declare function createServerFunction<TArgs extends JsonArray = JsonArray, TResult extends JsonValue = JsonValue>(name: string, handler: ServerFunctionInit<TArgs, TResult>, fnOptions?: Partial<ServerFunctionOptions>): ClientFunction<TArgs, TResult>;
 //#endregion
 //#region src/getClientModules.d.ts
-interface RpcPluginOptionsInternal {
-  rpcPreffix: string;
-  adapter?: string | undefined;
-}
+/**
+ * Generates the complete client-side module bundle by iterating all registered server functions
+ * and producing fetch-based stubs for each. The result is transformed by Vite (or Oxc) during
+ * the dev server or production build.
+ * @param initialOptions - Plugin options containing rpcPrefix and optional adapter
+ * @returns A string of JavaScript code with all client RPC modules and their import dependencies
+ */
 declare const getClientModules: (initialOptions: RpcPluginOptionsInternal) => string;
 //#endregion
 //#region src/options.d.ts
 declare const defaultServerFnOptions: {
   contentType: "application/json";
+  credentials: "same-origin";
+  method: "POST";
 };
 declare const defaultRPCOptions: RpcPluginOptions;
 declare const defaultMiddlewareOptions: {
-  rpcPreffix: undefined;
+  rpcPrefix: undefined;
   path: undefined;
+  origin: undefined;
 };
 //#endregion
 export { createServerFunction, defaultMiddlewareOptions, defaultRPCOptions, defaultServerFnOptions, getClientModules, scanForServerFiles, serverFunctionsMap };

package/dist/server/server.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.mts","names":[],"sources":["../../src/types.d.ts","../../src/functionsMap.ts","../../src/scanForServerFiles.ts","../../src/createFunction.ts","../../src/getClientModules.ts","../../src/options.ts"],"mappings":";;;;;;;;KAmCY;UAMK;EACf,aAAa;;;KAIH;KACA;GAAgB,cAAc,YAAY;;KAC1C,YAAY;KACZ,YAAY,gBAAgB,YAAY;KA2BxC,mBACV,cAAc,YAAY,WAC1B,gBAAgB,YAAY,cACzB,QAAQ,gBAAgB,MAAM,UAAU,QAAQ;KAEzC,eACV,cAAc,YAAY,WAC1B,gBAAgB,YAAY,iBACtB,MAAM;EACZ,MAAM,QAAQ;EACd,SAAS;;KAGC,4BAA4B;EACtC;EACA,UAAU;;UAGK;EACf;EACA,SAAS;EACT,UAAU;EACV;;;;;;;;UAee;;;;;;;;;;;EAWf;;;;;;;EAQA;;;;cClIW,oBAAkB,YAAA;;;KCO1B,aAAa,KAAK;EACrB,SAAS,QAAQ;;cAIN,qBAAkB,aAChB,YAAU,YACX,kBAAa;;;iBCLX,qBACd,cAAc,YAAY,WAC1B,gBAAgB,YAAY,WAE5B,cACA,SAAS,mBAAmB,OAAO,UACnC,YAAW,QAAQ,yBAA2B,eAAA,OAAA;;;UChBtC;EACR;EACA;;cAwEW,mBAAgB,gBAAoB;;;cCrEpC;EAAA;;cAIA,mBAAmB;cAKnB;EAAA;EAAA"}
+{"version":3,"file":"server.d.mts","names":[],"sources":["../../src/types.d.ts","../../src/functionsMap.ts","../../src/scanForServerFiles.ts","../../src/createFunction.ts","../../src/getClientModules.ts","../../src/options.ts"],"mappings":";;;;;;;;;;;;;KA2DY;;;;KAKA;;;;;UAaK;;;;;EAKf,aAAa;;;;;EAKb,cAAc;;;;;;;EAOd;;;;;;KAOU;;;;KAIA;GAAgB,cAAc,YAAY;;;;;KAI1C,YAAY;;;;KAIZ,YAAY,gBAAgB,YAAY;;;;;KAsCxC,mBACV,cAAc,YAAY,WAC1B,gBAAgB,YAAY,cACzB,QAAQ,gBAAgB,MAAM,UAAU,QAAQ;;;;;;KAOzC,eACV,cAAc,YAAY,WAC1B,gBAAgB,YAAY,iBACtB,MAAM;;EAEZ,MAAM,QAAQ;;EAEd,SAAS;;;;;;KAOC,4BAA4B;;EAEtC;;EAEA,UAAU;;;;;UAMK;;EAEf;;EAEA;;;;;KAMU,aAAa,KAAK;;EAE5B,SAAS,QAAQ;;;;;;UAOF;;EAEf;;EAEA,SAAS;;EAET,UAAU;;EAEV;;;;;;;;UASe;;;;;;;;;;;EAWf;;;;;;;EAQA;;;;cC9OW,oBAAoB,YAAY;;;;;;;;;;cCgBhC,qBAAkB,aAChB,YAAU,YACX,kBACX;;;;;;;;;;;;iBCAa,qBACd,cAAc,YAAY,WAC1B,gBAAgB,YAAY,WAE5B,cACA,SAAS,mBAAmB,OAAO,UACnC,YAAW,QAAQ,yBAClB,eAAe,OAAO;;;;;;;;;;cCkDZ,mBAAgB,gBACX;;;cCzEL;;;;;cAMA,mBAAmB;cAKnB"}

package/dist/server/server.mjs

@@ -5,8 +5,24 @@ import process from "node:process";
 //#region src/functionsMap.ts
 const serverFunctionsMap = /* @__PURE__ */ new Map();
 //#endregion
+//#region src/constants.ts
+const OPERATION_ABORTED = "Operation aborted";
+const NO_SERVER_FUNCTION_FOUND = "No server function found.";
+const ERROR_LOADING_FILE = "Error loading file:";
+/** Error message when a value fails the safe-identifier validation. @param label - What kind of value was being validated. @param name - The rejected value */
+const INVALID_IDENTIFIER = (label, name) => `Invalid ${label}: "${name}" must match /^[A-Za-z_$][A-Za-z0-9_$]*$/`;
+/** Error message when a value fails the safe-path-segment validation. @param label - What kind of value was being validated. @param segment - The rejected value */
+const INVALID_PATH_SEGMENT = (label, segment) => `Invalid ${label}: "${segment}" must match /^[A-Za-z0-9_$][A-Za-z0-9_$/-]*$/`;
+//#endregion
 //#region src/scanForServerFiles.ts
 let isScanned = false;
+/**
+* Scans `src/api/` for server function files (`server.ts`, `server.js`, `server.mjs`, `server.mts`)
+* and populates the global `serverFunctionsMap` with their exported functions.
+* Uses Vite's SSR module loading to resolve and execute each file.
+* @param initialCfg - Optional Vite config overrides (root, base, server)
+* @param devServer - Optional running Vite dev server instance; when provided, skips creating a new one
+*/
 const scanForServerFiles = async (initialCfg, devServer) => {
 	if (isScanned && !devServer) return;
 	const config = !initialCfg && !devServer || !initialCfg ? {
@@ -33,7 +49,7 @@ const scanForServerFiles = async (initialCfg, devServer) => {
 	const apiDir = join(config.root, "src", "api");
 	let files;
 	try {
-		files = (await readdir(apiDir, { withFileTypes: true })).filter((f) => svFiles.some((fn) => f.name.includes(fn))).map((f) => join(apiDir, f.name));
+		files = (await readdir(apiDir, { withFileTypes: true })).filter((f) => svFiles.includes(f.name)).map((f) => join(apiDir, f.name));
 	} catch (_e) {
 		files = [];
 	}
@@ -42,7 +58,7 @@ const scanForServerFiles = async (initialCfg, devServer) => {
 			const moduleExports = await server.ssrLoadModule(file);
 			const moduleEntries = Object.entries(moduleExports);
 			if (!moduleEntries.length) {
-				console.warn("No server function found.");
+				console.warn(NO_SERVER_FUNCTION_FOUND);
 				return;
 			}
 			for (const [exportName, exportValue] of moduleEntries) {
@@ -55,7 +71,7 @@ const scanForServerFiles = async (initialCfg, devServer) => {
 				});
 			}
 		} catch (error) {
-			console.error("Error loading file:", file, error);
+			console.error(ERROR_LOADING_FILE, file, error);
 		}
 	} finally {
 		if (!devServer && server) await server.close();
@@ -64,24 +80,38 @@ const scanForServerFiles = async (initialCfg, devServer) => {
 };
 //#endregion
 //#region src/options.ts
-const defaultServerFnOptions = { contentType: "application/json" };
+const defaultServerFnOptions = {
+	contentType: "application/json",
+	credentials: "same-origin",
+	method: "POST"
+};
 const defaultRPCOptions = {
-	rpcPreffix: "__rpc",
+	rpcPrefix: "__rpc",
 	adapter: "express"
 };
 const defaultMiddlewareOptions = {
-	rpcPreffix: void 0,
-	path: void 0
+	rpcPrefix: void 0,
+	path: void 0,
+	origin: void 0
 };
 //#endregion
 //#region src/createFunction.ts
+/**
+* Creates a server-side RPC function.
+* Registers the function in the server functions map and returns a client-compatible
+* wrapper that exposes `data` (Promise) and `cancel` (function) for request lifecycle control.
+* @param name - Unique identifier used by the RPC router to dispatch requests
+* @param handler - The actual implementation receiving an AbortSignal followed by JSON-serializable arguments
+* @param fnOptions - Optional contentType and credentials settings
+* @returns A client stub with `data` promise and `cancel` method, auto-registered in the server map
+*/
 function createServerFunction(name, handler, fnOptions = {}) {
 	const options = Object.assign({}, defaultServerFnOptions, fnOptions);
 	const wrappedFunction = (...args) => {
 		const controller = new AbortController();
 		const cancel = (reason) => controller.abort(reason);
 		const fetcher = async () => {
-			if (controller.signal.aborted) throw new Error("Operation aborted");
+			if (controller.signal.aborted) throw new Error(OPERATION_ABORTED);
 			return await handler(controller.signal, ...args);
 		};
 		return {
@@ -93,12 +123,12 @@ function createServerFunction(name, handler, fnOptions = {}) {
 		name: {
 			value: name,
 			enumerable: true,
-			configurable: true
+			configurable: false
 		},
 		options: {
 			value: options,
 			enumerable: true,
-			configurable: true
+			configurable: false
 		}
 	});
 	serverFunctionsMap.set(name, {
@@ -109,21 +139,78 @@ function createServerFunction(name, handler, fnOptions = {}) {
 	return wrappedFunction;
 }
 //#endregion
-//#region src/getClientModules.ts
+//#region src/validate.ts
 const SAFE_IDENTIFIER = /^[A-Za-z_$][A-Za-z0-9_$]*$/;
 const SAFE_PATH_SEGMENT = /^[A-Za-z0-9_$][A-Za-z0-9_$/-]*$/;
+const CREDENTIALS_VALUES = [
+	"same-origin",
+	"include",
+	"omit"
+];
+/**
+* Validates that a string is a safe JavaScript identifier.
+* Used to prevent code injection when interpolating export names into generated client code.
+* @param name - The string to validate
+* @param label - Human-readable label for error messages (e.g. "export name")
+* @returns The validated name if it passes
+* @throws Error if the name contains characters outside /^[A-Za-z_$][A-Za-z0-9_$]*$/
+*/
 function validateIdentifier(name, label) {
-	if (!SAFE_IDENTIFIER.test(name)) throw new Error(`Invalid ${label}: "${name}" must match /^[A-Za-z_$][A-Za-z0-9_$]*$/`);
+	if (!SAFE_IDENTIFIER.test(name)) throw new Error(INVALID_IDENTIFIER(label, name));
 	return name;
 }
+/**
+* Validates that a string is a safe path segment for RPC routing.
+* Allows alphanumeric characters, underscores, dollar signs, hyphens, and forward slashes.
+* @param segment - The string to validate
+* @param label - Human-readable label for error messages (e.g. "rpcPrefix")
+* @returns The validated segment if it passes
+* @throws Error if the segment contains disallowed characters
+*/
 function validatePathSegment(segment, label) {
-	if (!SAFE_PATH_SEGMENT.test(segment)) throw new Error(`Invalid ${label}: "${segment}" must match /^[A-Za-z0-9_$][A-Za-z0-9_$/-]*$/`);
+	if (!SAFE_PATH_SEGMENT.test(segment)) throw new Error(INVALID_PATH_SEGMENT(label, segment));
 	return segment;
 }
+/**
+* Validates and normalizes the credentials option.
+* Accepts "same-origin", "include", or "omit"; defaults to "same-origin" when undefined.
+* @param value - Credentials value to validate
+* @returns The validated credentials string
+* @throws Error if the value is not one of the accepted credentials
+*/
+function validateCredentials(value) {
+	const creds = value || "same-origin";
+	if (!CREDENTIALS_VALUES.includes(creds)) throw new Error(`Invalid credentials: "${value}" must be one of ${CREDENTIALS_VALUES.join(", ")}`);
+	return creds;
+}
+/**
+* Validates and normalizes the HTTP method option for a server function.
+* Accepts "GET" or "POST" (case-insensitive); defaults to "POST" when undefined.
+* @param value - Method value to validate
+* @returns The validated uppercase method string
+* @throws Error if the value is not "GET" or "POST"
+*/
+function validateMethod(value) {
+	const method = (value || "POST").toUpperCase();
+	if (method !== "GET" && method !== "POST") throw new Error(`Invalid method: "${value}" must be one of GET, POST`);
+	return method;
+}
+//#endregion
+//#region src/getClientModules.ts
+/**
+* Generates a JavaScript client module string for a single server function.
+* All interpolated values are validated to prevent code injection.
+* @param fnName - Registered RPC function name (validated as path segment)
+* @param fnEntry - Export name used in the generated module (validated as identifier)
+* @param options - Content type, credentials, and RPC prefix settings
+* @returns A string of JavaScript code exporting the client stub
+*/
 const getModule = (fnName, fnEntry, options) => {
 	const safeFnName = validatePathSegment(fnName, "function name");
 	const safeFnEntry = validateIdentifier(fnEntry, "export name");
-	const safePrefix = validatePathSegment(options.rpcPreffix, "rpcPreffix");
+	const safePrefix = validatePathSegment(options.rpcPrefix, "rpcPrefix");
+	const credentials = validateCredentials(options.credentials);
+	const method = validateMethod(options.method);
 	let body = "";
 	let headers = "{}";
 	switch (options.contentType) {
@@ -135,17 +222,30 @@ const getModule = (fnName, fnEntry, options) => {
 			body = `JSON.stringify(args)`;
 			headers = `{ 'Content-Type': 'application/json' }`;
 	}
+	if (method === "GET") {
+		body = `JSON.stringify(args)`;
+		headers = `{}`;
+	}
 	return `
 export const ${safeFnEntry} = (...args) => {
   const body = ${body};
   const headers = ${headers};
-  const preffix = "${safePrefix}";
+  const prefix = "${safePrefix}";
   const name = "${safeFnName}";
-  return innerModule(body, headers, preffix, name);
+  const credentials = "${credentials}";
+  const method = "${method}";
+  return innerModule(body, headers, credentials, prefix, name, method);
 }`.trim();
 };
+/**
+* Generates the complete client-side module bundle by iterating all registered server functions
+* and producing fetch-based stubs for each. The result is transformed by Vite (or Oxc) during
+* the dev server or production build.
+* @param initialOptions - Plugin options containing rpcPrefix and optional adapter
+* @returns A string of JavaScript code with all client RPC modules and their import dependencies
+*/
 const getClientModules = (initialOptions) => {
-	validatePathSegment(initialOptions.rpcPreffix, "rpcPreffix");
+	validatePathSegment(initialOptions.rpcPrefix, "rpcPrefix");
 	return `
 
 import { innerModule } from "@thednp/rpc/helpers";

package/dist/server/server.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"server.mjs","names":[],"sources":["../../src/functionsMap.ts","../../src/scanForServerFiles.ts","../../src/options.ts","../../src/createFunction.ts","../../src/getClientModules.ts"],"sourcesContent":["import type { ServerFnEntry } from \"./types.d.ts\";\n\nexport const serverFunctionsMap = new Map<string, ServerFnEntry>();\n","import type { ResolvedConfig, ViteDevServer } from \"vite\";\nimport type { ClientFunctionWithOptions } from \"./types.d.ts\";\nimport { createServer } from \"vite\";\nimport { readdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport process from \"node:process\";\n\nimport { serverFunctionsMap } from \"./functionsMap.ts\";\n\ntype ScanConfig = Pick<ResolvedConfig, \"root\" | \"base\"> & {\n  server?: Partial<ResolvedConfig[\"server\"]>;\n};\n\nlet isScanned = false;\nexport const scanForServerFiles = async (\n  initialCfg?: ScanConfig,\n  devServer?: ViteDevServer,\n) => {\n  if (isScanned && !devServer) {\n    return;\n  }\n  const config = (!initialCfg && !devServer) || !initialCfg\n    ? {\n      root: process.cwd(),\n      base: process.env.BASE || \"/\",\n      server: { middlewareMode: true },\n    }\n    : {\n      ...initialCfg,\n      root: process.cwd(),\n    };\n\n  let server = devServer;\n  if (!server) {\n    server = await createServer({\n      server: config.server,\n      appType: \"custom\",\n      base: config.base,\n      root: config.root,\n    });\n  }\n\n  const svFiles = [\"server.ts\", \"server.js\", \"server.mjs\", \"server.mts\"];\n  const apiDir = join(config.root, \"src\", \"api\");\n  let files: string[];\n  try {\n    files = (await readdir(apiDir, { withFileTypes: true }))\n      .filter((f) => svFiles.some((fn) => f.name.includes(fn)))\n      .map((f) => join(apiDir, f.name));\n  } catch (_e) {\n    files = [];\n  }\n\n  try {\n    for (const file of files) {\n      try {\n        const moduleExports = (await server.ssrLoadModule(file)) as Record<\n          string,\n          ClientFunctionWithOptions\n        >;\n        const moduleEntries = Object.entries(moduleExports);\n        if (!moduleEntries.length) {\n          console.warn(\"No server function found.\");\n          return;\n        }\n\n        for (const [exportName, exportValue] of moduleEntries) {\n          // const registeredName = exportValue?.name ?? exportName;\n          const registeredName = exportValue.name;\n          serverFunctionsMap.set(registeredName, {\n            name: registeredName,\n            handler: exportValue,\n            options: exportValue?.options,\n            exportName,\n          });\n        }\n      } catch (error) {\n        console.error(\"Error loading file:\", file, error);\n      }\n    }\n  } finally {\n    if (!devServer && server) {\n      await server.close();\n    }\n    isScanned = true;\n  }\n};\n","import type {\n  MiddlewareOptions,\n  RpcPluginOptions,\n  ServerFunctionOptions,\n} from \"./types.d.ts\";\n\nexport const defaultServerFnOptions = {\n  contentType: \"application/json\",\n} satisfies ServerFunctionOptions;\n\nexport const defaultRPCOptions: RpcPluginOptions = {\n  rpcPreffix: \"__rpc\",\n  adapter: \"express\",\n};\n\nexport const defaultMiddlewareOptions = {\n  rpcPreffix: undefined,\n  path: undefined,\n} satisfies MiddlewareOptions;\n","// /@thednp/rpc/src/createFn.ts\nimport type {\n  ClientFunction,\n  JsonArray,\n  JsonValue,\n  ServerFunctionInit,\n  ServerFunctionOptions,\n} from \"./types.d.ts\";\nimport { serverFunctionsMap } from \"./functionsMap.ts\";\nimport { defaultServerFnOptions } from \"./options.ts\";\n\nexport function createServerFunction<\n  TArgs extends JsonArray = JsonArray,\n  TResult extends JsonValue = JsonValue,\n>(\n  name: string,\n  handler: ServerFunctionInit<TArgs, TResult>,\n  fnOptions: Partial<ServerFunctionOptions> = {},\n) {\n  const options = Object.assign({}, defaultServerFnOptions, fnOptions);\n\n  const wrappedFunction: ClientFunction<TArgs, TResult> = (...args: TArgs) => {\n    const controller = new AbortController();\n    const cancel = (reason: string) => controller.abort(reason);\n\n    const fetcher = async () => {\n      if (controller.signal.aborted) {\n        throw new Error(\"Operation aborted\");\n      }\n\n      return await handler(controller.signal, ...args);\n    };\n\n    return {\n      data: fetcher(),\n      cancel,\n    };\n  };\n\n  Object.defineProperties(wrappedFunction, {\n    name: { value: name, enumerable: true, configurable: true },\n    options: { value: options, enumerable: true, configurable: true },\n  });\n\n  serverFunctionsMap.set(\n    name,\n    {\n      name,\n      handler: wrappedFunction as never,\n      options,\n    },\n  );\n\n  return wrappedFunction;\n}\n","// Internal type that accepts all adapters\ninterface RpcPluginOptionsInternal {\n  rpcPreffix: string;\n  adapter?: string | undefined;\n}\n\nimport type { ServerFunctionOptions } from \"./types.d.ts\";\nimport { serverFunctionsMap } from \"./functionsMap.ts\";\n\n// Safe identifier pattern: must match JS identifier rules (letters, digits, $, _)\n// and must not contain regex metacharacters or template literal interpolation.\nconst SAFE_IDENTIFIER = /^[A-Za-z_$][A-Za-z0-9_$]*$/;\n// Safe URL path segment: identifier characters plus \"/\" for nested prefixes like \"api/rpc\"\nconst SAFE_PATH_SEGMENT = /^[A-Za-z0-9_$][A-Za-z0-9_$/-]*$/;\n\nfunction validateIdentifier(name: string, label: string): string {\n  // istanbul ignore if\n  if (!SAFE_IDENTIFIER.test(name)) {\n    throw new Error(\n      `Invalid ${label}: \"${name}\" must match /^[A-Za-z_$][A-Za-z0-9_$]*$/`,\n    );\n  }\n  return name;\n}\n\nfunction validatePathSegment(segment: string, label: string): string {\n  // istanbul ignore if\n  if (!SAFE_PATH_SEGMENT.test(segment)) {\n    throw new Error(\n      `Invalid ${label}: \"${segment}\" must match /^[A-Za-z0-9_$][A-Za-z0-9_$/-]*$/`,\n    );\n  }\n  return segment;\n}\n\nconst getModule = (\n  fnName: string,\n  fnEntry: string,\n  options: Partial<ServerFunctionOptions> & {\n    contentType: ServerFunctionOptions[\"contentType\"];\n    rpcPreffix: string;\n  },\n) => {\n  // Validate all interpolated strings to prevent code injection\n  const safeFnName = validatePathSegment(fnName, \"function name\");\n  const safeFnEntry = validateIdentifier(fnEntry, \"export name\");\n  const safePrefix = validatePathSegment(options.rpcPreffix, \"rpcPreffix\");\n\n  let body = \"\";\n  let headers = \"{}\";\n  switch (options.contentType) {\n    case \"text/plain\":\n      {\n        body = `args[0]`;\n        headers = `{ 'Content-Type': 'text/plain' }`;\n      }\n      break;\n    default: {\n      body = `JSON.stringify(args)`;\n      headers = `{ 'Content-Type': 'application/json' }`;\n    }\n  }\n\n  const output = `\nexport const ${safeFnEntry} = (...args) => {\n  const body = ${body};\n  const headers = ${headers};\n  const preffix = \"${safePrefix}\";\n  const name = \"${safeFnName}\";\n  return innerModule(body, headers, preffix, name);\n}`;\n\n  return output.trim();\n};\n\nexport const getClientModules = (initialOptions: RpcPluginOptionsInternal) => {\n  // Validate prefix once at the top level\n  validatePathSegment(initialOptions.rpcPreffix, \"rpcPreffix\");\n\n  return `\n// Client-side RPC modules\nimport { innerModule } from \"@thednp/rpc/helpers\";\n${\n    Array.from(serverFunctionsMap.entries())\n      .filter(([, entry]) => entry.exportName)\n      .map(([registeredName, entry]) =>\n        getModule(registeredName, entry.exportName!, {\n          ...initialOptions,\n          ...((entry.options as ServerFunctionOptions) || {}),\n        })\n      )\n      .join(\"\\n\")\n  }\n`.trim();\n};\n"],"mappings":";;;;;AAEA,MAAa,qCAAqB,IAAI,IAA2B;;;ACWjE,IAAI,YAAY;AAChB,MAAa,qBAAqB,OAChC,YACA,cACG;CACH,IAAI,aAAa,CAAC,WAChB;CAEF,MAAM,SAAU,CAAC,cAAc,CAAC,aAAc,CAAC,aAC3C;EACA,MAAM,QAAQ,IAAI;EAClB,MAAM,QAAQ,IAAI,QAAQ;EAC1B,QAAQ,EAAE,gBAAgB,KAAK;CACjC,IACE;EACA,GAAG;EACH,MAAM,QAAQ,IAAI;CACpB;CAEF,IAAI,SAAS;CACb,IAAI,CAAC,QACH,SAAS,MAAM,aAAa;EAC1B,QAAQ,OAAO;EACf,SAAS;EACT,MAAM,OAAO;EACb,MAAM,OAAO;CACf,CAAC;CAGH,MAAM,UAAU;EAAC;EAAa;EAAa;EAAc;CAAY;CACrE,MAAM,SAAS,KAAK,OAAO,MAAM,OAAO,KAAK;CAC7C,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,QAAQ,QAAQ,EAAE,eAAe,KAAK,CAAC,EAAA,CACnD,QAAQ,MAAM,QAAQ,MAAM,OAAO,EAAE,KAAK,SAAS,EAAE,CAAC,CAAC,CAAC,CACxD,KAAK,MAAM,KAAK,QAAQ,EAAE,IAAI,CAAC;CACpC,SAAS,IAAI;EACX,QAAQ,CAAC;CACX;CAEA,IAAI;EACF,KAAK,MAAM,QAAQ,OACjB,IAAI;GACF,MAAM,gBAAiB,MAAM,OAAO,cAAc,IAAI;GAItD,MAAM,gBAAgB,OAAO,QAAQ,aAAa;GAClD,IAAI,CAAC,cAAc,QAAQ;IACzB,QAAQ,KAAK,2BAA2B;IACxC;GACF;GAEA,KAAK,MAAM,CAAC,YAAY,gBAAgB,eAAe;IAErD,MAAM,iBAAiB,YAAY;IACnC,mBAAmB,IAAI,gBAAgB;KACrC,MAAM;KACN,SAAS;KACT,SAAS,aAAa;KACtB;IACF,CAAC;GACH;EACF,SAAS,OAAO;GACd,QAAQ,MAAM,uBAAuB,MAAM,KAAK;EAClD;CAEJ,UAAU;EACR,IAAI,CAAC,aAAa,QAChB,MAAM,OAAO,MAAM;EAErB,YAAY;CACd;AACF;;;AChFA,MAAa,yBAAyB,EACpC,aAAa,mBACf;AAEA,MAAa,oBAAsC;CACjD,YAAY;CACZ,SAAS;AACX;AAEA,MAAa,2BAA2B;CACtC,YAAY,KAAA;CACZ,MAAM,KAAA;AACR;;;ACPA,SAAgB,qBAId,MACA,SACA,YAA4C,CAAC,GAC7C;CACA,MAAM,UAAU,OAAO,OAAO,CAAC,GAAG,wBAAwB,SAAS;CAEnE,MAAM,mBAAmD,GAAG,SAAgB;EAC1E,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,UAAU,WAAmB,WAAW,MAAM,MAAM;EAE1D,MAAM,UAAU,YAAY;GAC1B,IAAI,WAAW,OAAO,SACpB,MAAM,IAAI,MAAM,mBAAmB;GAGrC,OAAO,MAAM,QAAQ,WAAW,QAAQ,GAAG,IAAI;EACjD;EAEA,OAAO;GACL,MAAM,QAAQ;GACd;EACF;CACF;CAEA,OAAO,iBAAiB,iBAAiB;EACvC,MAAM;GAAE,OAAO;GAAM,YAAY;GAAM,cAAc;EAAK;EAC1D,SAAS;GAAE,OAAO;GAAS,YAAY;GAAM,cAAc;EAAK;CAClE,CAAC;CAED,mBAAmB,IACjB,MACA;EACE;EACA,SAAS;EACT;CACF,CACF;CAEA,OAAO;AACT;;;AC3CA,MAAM,kBAAkB;AAExB,MAAM,oBAAoB;AAE1B,SAAS,mBAAmB,MAAc,OAAuB;CAE/D,IAAI,CAAC,gBAAgB,KAAK,IAAI,GAC5B,MAAM,IAAI,MACR,WAAW,MAAM,KAAK,KAAK,0CAC7B;CAEF,OAAO;AACT;AAEA,SAAS,oBAAoB,SAAiB,OAAuB;CAEnE,IAAI,CAAC,kBAAkB,KAAK,OAAO,GACjC,MAAM,IAAI,MACR,WAAW,MAAM,KAAK,QAAQ,+CAChC;CAEF,OAAO;AACT;AAEA,MAAM,aACJ,QACA,SACA,YAIG;CAEH,MAAM,aAAa,oBAAoB,QAAQ,eAAe;CAC9D,MAAM,cAAc,mBAAmB,SAAS,aAAa;CAC7D,MAAM,aAAa,oBAAoB,QAAQ,YAAY,YAAY;CAEvE,IAAI,OAAO;CACX,IAAI,UAAU;CACd,QAAQ,QAAQ,aAAhB;EACE,KAAK;GAED,OAAO;GACP,UAAU;GAEZ;EACF;GACE,OAAO;GACP,UAAU;CAEd;CAWA,OAAO;eARM,YAAY;iBACV,KAAK;oBACF,QAAQ;qBACP,WAAW;kBACd,WAAW;;GAIb,KAAK;AACrB;AAEA,MAAa,oBAAoB,mBAA6C;CAE5E,oBAAoB,eAAe,YAAY,YAAY;CAE3D,OAAO;;;EAIL,MAAM,KAAK,mBAAmB,QAAQ,CAAC,CAAC,CACrC,QAAQ,GAAG,WAAW,MAAM,UAAU,CAAC,CACvC,KAAK,CAAC,gBAAgB,WACrB,UAAU,gBAAgB,MAAM,YAAa;EAC3C,GAAG;EACH,GAAK,MAAM,WAAqC,CAAC;CACnD,CAAC,CACH,CAAC,CACA,KAAK,IAAI,EACb;EACD,KAAK;AACP"}
+{"version":3,"file":"server.mjs","names":[],"sources":["../../src/functionsMap.ts","../../src/constants.ts","../../src/scanForServerFiles.ts","../../src/options.ts","../../src/createFunction.ts","../../src/validate.ts","../../src/getClientModules.ts"],"sourcesContent":["import type { ServerFnEntry } from \"./types.d.ts\";\n\nexport const serverFunctionsMap: Map<string, ServerFnEntry> = new Map<\n  string,\n  ServerFnEntry\n>();\n","export const OPERATION_ABORTED = \"Operation aborted\";\n\nexport const REQUEST_CANCELLED = \"Request was cancelled\";\n\nexport const FETCH_ERROR_PREFIX = \"Fetch error: \";\n\nexport const NO_SERVER_FUNCTION_FOUND = \"No server function found.\";\n\nexport const ERROR_LOADING_FILE = \"Error loading file:\";\n\nexport const FUNCTION_NOT_FOUND = \"Function not found\";\n\nexport const METHOD_NOT_ALLOWED = \"Method Not Allowed\";\n\nexport const REQUEST_FORBIDDEN = \"Forbidden\";\n\nexport const INTERNAL_SERVER_ERROR = \"Internal Server Error\";\n\nexport const CLIENT_DISCONNECTED = \"client disconnected\";\n\n/** Returns a warning when a middleware name is reused, preventing registration conflicts. @param name - The duplicate middleware name */\nexport const MIDDLEWARE_NAME_USED = (name: string) =>\n  `The middleware name \"${name}\" is already used.`;\n\n/** Error message when a value fails the safe-identifier validation. @param label - What kind of value was being validated. @param name - The rejected value */\nexport const INVALID_IDENTIFIER = (label: string, name: string) =>\n  `Invalid ${label}: \"${name}\" must match /^[A-Za-z_$][A-Za-z0-9_$]*$/`;\n\n/** Error message when a value fails the safe-path-segment validation. @param label - What kind of value was being validated. @param segment - The rejected value */\nexport const INVALID_PATH_SEGMENT = (label: string, segment: string) =>\n  `Invalid ${label}: \"${segment}\" must match /^[A-Za-z0-9_$][A-Za-z0-9_$/-]*$/`;\n\n/** Warning message when a specified RPC config file cannot be resolved on disk. @param configFile - The requested config filename. @param configFilePath - The resolved absolute path */\nexport const CONFIG_FILE_NOT_FOUND = (\n  configFile: string,\n  configFilePath: string,\n) =>\n  `  ⚠︎ The specified RPC config file ${configFile} cannot be found at ${configFilePath}, loading the defaults..`;\n\nexport const NO_CONFIG_FOUND = ` ⚡︎ No RPC config found, loading the defaults..`;\n\nexport const FAILED_LOAD_CONFIG = ` ⚠︎ Failed to load RPC config:`;\n","import type { ViteDevServer } from \"vite\";\nimport type { ClientFunctionWithOptions, ScanConfig } from \"./types.d.ts\";\nimport { createServer } from \"vite\";\nimport { readdir } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport process from \"node:process\";\n\nimport { serverFunctionsMap } from \"./functionsMap.ts\";\nimport { ERROR_LOADING_FILE, NO_SERVER_FUNCTION_FOUND } from \"./constants.ts\";\n\nlet isScanned = false;\n/**\n * Scans `src/api/` for server function files (`server.ts`, `server.js`, `server.mjs`, `server.mts`)\n * and populates the global `serverFunctionsMap` with their exported functions.\n * Uses Vite's SSR module loading to resolve and execute each file.\n * @param initialCfg - Optional Vite config overrides (root, base, server)\n * @param devServer - Optional running Vite dev server instance; when provided, skips creating a new one\n */\nexport const scanForServerFiles = async (\n  initialCfg?: ScanConfig,\n  devServer?: ViteDevServer,\n): Promise<void> => {\n  if (isScanned && !devServer) {\n    return;\n  }\n  const config = (!initialCfg && !devServer) || !initialCfg\n    ? {\n      root: process.cwd(),\n      base: process.env.BASE || \"/\",\n      server: { middlewareMode: true },\n    }\n    : {\n      ...initialCfg,\n      root: process.cwd(),\n    };\n\n  let server = devServer;\n  if (!server) {\n    server = await createServer({\n      server: config.server,\n      appType: \"custom\",\n      base: config.base,\n      root: config.root,\n    });\n  }\n\n  const svFiles = [\"server.ts\", \"server.js\", \"server.mjs\", \"server.mts\"];\n  const apiDir = join(config.root, \"src\", \"api\");\n  let files: string[];\n  try {\n    files = (await readdir(apiDir, { withFileTypes: true }))\n      .filter((f) => svFiles.includes(f.name))\n      .map((f) => join(apiDir, f.name));\n  } catch (_e) {\n    files = [];\n  }\n\n  try {\n    for (const file of files) {\n      try {\n        const moduleExports = (await server.ssrLoadModule(file)) as Record<\n          string,\n          ClientFunctionWithOptions\n        >;\n        const moduleEntries = Object.entries(moduleExports);\n        if (!moduleEntries.length) {\n          console.warn(NO_SERVER_FUNCTION_FOUND);\n          return;\n        }\n\n        for (const [exportName, exportValue] of moduleEntries) {\n          // const registeredName = exportValue?.name ?? exportName;\n          const registeredName = exportValue.name;\n          serverFunctionsMap.set(registeredName, {\n            name: registeredName,\n            handler: exportValue,\n            options: exportValue?.options,\n            exportName,\n          });\n        }\n      } catch (error) {\n        console.error(ERROR_LOADING_FILE, file, error);\n      }\n    }\n  } finally {\n    if (!devServer && server) {\n      await server.close();\n    }\n    isScanned = true;\n  }\n};\n","import type {\n  MiddlewareOptions,\n  RpcPluginOptions,\n  ServerFunctionOptions,\n} from \"./types.d.ts\";\n\nexport const defaultServerFnOptions = {\n  contentType: \"application/json\",\n  credentials: \"same-origin\",\n  method: \"POST\",\n} satisfies ServerFunctionOptions;\n\nexport const defaultRPCOptions: RpcPluginOptions = {\n  rpcPrefix: \"__rpc\",\n  adapter: \"express\",\n};\n\nexport const defaultMiddlewareOptions = {\n  rpcPrefix: undefined,\n  path: undefined,\n  origin: undefined,\n} satisfies MiddlewareOptions;\n","// /@thednp/rpc/src/createFn.ts\nimport type {\n  ClientFunction,\n  JsonArray,\n  JsonValue,\n  ServerFunctionInit,\n  ServerFunctionOptions,\n} from \"./types.d.ts\";\nimport { serverFunctionsMap } from \"./functionsMap.ts\";\nimport { defaultServerFnOptions } from \"./options.ts\";\nimport { OPERATION_ABORTED } from \"./constants.ts\";\n\n/**\n * Creates a server-side RPC function.\n * Registers the function in the server functions map and returns a client-compatible\n * wrapper that exposes `data` (Promise) and `cancel` (function) for request lifecycle control.\n * @param name - Unique identifier used by the RPC router to dispatch requests\n * @param handler - The actual implementation receiving an AbortSignal followed by JSON-serializable arguments\n * @param fnOptions - Optional contentType and credentials settings\n * @returns A client stub with `data` promise and `cancel` method, auto-registered in the server map\n */\nexport function createServerFunction<\n  TArgs extends JsonArray = JsonArray,\n  TResult extends JsonValue = JsonValue,\n>(\n  name: string,\n  handler: ServerFunctionInit<TArgs, TResult>,\n  fnOptions: Partial<ServerFunctionOptions> = {},\n): ClientFunction<TArgs, TResult> {\n  const options = Object.assign({}, defaultServerFnOptions, fnOptions);\n\n  const wrappedFunction: ClientFunction<TArgs, TResult> = (...args: TArgs) => {\n    const controller = new AbortController();\n    const cancel = (reason: string) => controller.abort(reason);\n\n    const fetcher = async () => {\n      if (controller.signal.aborted) {\n        throw new Error(OPERATION_ABORTED);\n      }\n\n      return await handler(controller.signal, ...args);\n    };\n\n    return {\n      data: fetcher(),\n      cancel,\n    };\n  };\n\n  Object.defineProperties(wrappedFunction, {\n    name: { value: name, enumerable: true, configurable: false },\n    options: { value: options, enumerable: true, configurable: false },\n  });\n\n  serverFunctionsMap.set(\n    name,\n    {\n      name,\n      handler: wrappedFunction as never,\n      options,\n    },\n  );\n\n  return wrappedFunction;\n}\n","import type { Credentials } from \"./types.d.ts\";\nimport { INVALID_IDENTIFIER, INVALID_PATH_SEGMENT } from \"./constants.ts\";\n\nconst SAFE_IDENTIFIER = /^[A-Za-z_$][A-Za-z0-9_$]*$/;\nconst SAFE_PATH_SEGMENT = /^[A-Za-z0-9_$][A-Za-z0-9_$/-]*$/;\nconst CREDENTIALS_VALUES: readonly Credentials[] = [\n  \"same-origin\",\n  \"include\",\n  \"omit\",\n];\n\n/**\n * Validates that a string is a safe JavaScript identifier.\n * Used to prevent code injection when interpolating export names into generated client code.\n * @param name - The string to validate\n * @param label - Human-readable label for error messages (e.g. \"export name\")\n * @returns The validated name if it passes\n * @throws Error if the name contains characters outside /^[A-Za-z_$][A-Za-z0-9_$]*$/\n */\nexport function validateIdentifier(name: string, label: string): string {\n  if (!SAFE_IDENTIFIER.test(name)) {\n    throw new Error(INVALID_IDENTIFIER(label, name));\n  }\n  return name;\n}\n\n/**\n * Validates that a string is a safe path segment for RPC routing.\n * Allows alphanumeric characters, underscores, dollar signs, hyphens, and forward slashes.\n * @param segment - The string to validate\n * @param label - Human-readable label for error messages (e.g. \"rpcPrefix\")\n * @returns The validated segment if it passes\n * @throws Error if the segment contains disallowed characters\n */\nexport function validatePathSegment(segment: string, label: string): string {\n  if (!SAFE_PATH_SEGMENT.test(segment)) {\n    throw new Error(INVALID_PATH_SEGMENT(label, segment));\n  }\n  return segment;\n}\n\n/**\n * Validates and normalizes the credentials option.\n * Accepts \"same-origin\", \"include\", or \"omit\"; defaults to \"same-origin\" when undefined.\n * @param value - Credentials value to validate\n * @returns The validated credentials string\n * @throws Error if the value is not one of the accepted credentials\n */\nexport function validateCredentials(value?: string): Credentials {\n  const creds = value || \"same-origin\";\n  if (!CREDENTIALS_VALUES.includes(creds as Credentials)) {\n    throw new Error(\n      `Invalid credentials: \"${value}\" must be one of ${\n        CREDENTIALS_VALUES.join(\", \")\n      }`,\n    );\n  }\n  return creds as Credentials;\n}\n\n/**\n * Validates and normalizes the HTTP method option for a server function.\n * Accepts \"GET\" or \"POST\" (case-insensitive); defaults to \"POST\" when undefined.\n * @param value - Method value to validate\n * @returns The validated uppercase method string\n * @throws Error if the value is not \"GET\" or \"POST\"\n */\nexport function validateMethod(value?: string): \"GET\" | \"POST\" {\n  const method = (value || \"POST\").toUpperCase();\n  if (method !== \"GET\" && method !== \"POST\") {\n    throw new Error(`Invalid method: \"${value}\" must be one of GET, POST`);\n  }\n  return method;\n}\n","/**\n * @module Client module generation.\n */\nimport type {\n  RpcPluginOptionsInternal,\n  ServerFunctionOptions,\n} from \"./types.d.ts\";\nimport { serverFunctionsMap } from \"./functionsMap.ts\";\nimport {\n  validateCredentials,\n  validateIdentifier,\n  validateMethod,\n  validatePathSegment,\n} from \"./validate.ts\";\n\n/**\n * Generates a JavaScript client module string for a single server function.\n * All interpolated values are validated to prevent code injection.\n * @param fnName - Registered RPC function name (validated as path segment)\n * @param fnEntry - Export name used in the generated module (validated as identifier)\n * @param options - Content type, credentials, and RPC prefix settings\n * @returns A string of JavaScript code exporting the client stub\n */\nconst getModule = (\n  fnName: string,\n  fnEntry: string,\n  options: Partial<ServerFunctionOptions> & {\n    contentType: ServerFunctionOptions[\"contentType\"];\n    rpcPrefix: string;\n  },\n): string => {\n  // Validate all interpolated strings to prevent code injection\n  const safeFnName = validatePathSegment(fnName, \"function name\");\n  const safeFnEntry = validateIdentifier(fnEntry, \"export name\");\n  const safePrefix = validatePathSegment(options.rpcPrefix, \"rpcPrefix\");\n  const credentials = validateCredentials(options.credentials);\n  const method = validateMethod(options.method);\n  let body = \"\";\n  let headers = \"{}\";\n  switch (options.contentType) {\n    case \"text/plain\":\n      {\n        body = `args[0]`;\n        headers = `{ 'Content-Type': 'text/plain' }`;\n      }\n      break;\n    default: {\n      body = `JSON.stringify(args)`;\n      headers = `{ 'Content-Type': 'application/json' }`;\n    }\n  }\n  // GET requests cannot carry a body: args travel as a JSON query parameter\n  if (method === \"GET\") {\n    body = `JSON.stringify(args)`;\n    headers = `{}`;\n  }\n\n  const output = `\nexport const ${safeFnEntry} = (...args) => {\n  const body = ${body};\n  const headers = ${headers};\n  const prefix = \"${safePrefix}\";\n  const name = \"${safeFnName}\";\n  const credentials = \"${credentials}\";\n  const method = \"${method}\";\n  return innerModule(body, headers, credentials, prefix, name, method);\n}`;\n\n  return output.trim();\n};\n\n/**\n * Generates the complete client-side module bundle by iterating all registered server functions\n * and producing fetch-based stubs for each. The result is transformed by Vite (or Oxc) during\n * the dev server or production build.\n * @param initialOptions - Plugin options containing rpcPrefix and optional adapter\n * @returns A string of JavaScript code with all client RPC modules and their import dependencies\n */\nexport const getClientModules = (\n  initialOptions: RpcPluginOptionsInternal,\n): string => {\n  // Validate prefix once at the top level\n  validatePathSegment(initialOptions.rpcPrefix, \"rpcPrefix\");\n\n  return `\n// Client-side RPC modules\nimport { innerModule } from \"@thednp/rpc/helpers\";\n${\n    Array.from(serverFunctionsMap.entries())\n      .filter(([, entry]) => entry.exportName)\n      .map(([registeredName, entry]) =>\n        getModule(registeredName, entry.exportName!, {\n          ...initialOptions,\n          ...((entry.options as ServerFunctionOptions) || {}),\n        })\n      )\n      .join(\"\\n\")\n  }\n`.trim();\n};\n"],"mappings":";;;;;AAEA,MAAa,qCAAiD,IAAI,IAGhE;;;ACLF,MAAa,oBAAoB;AAMjC,MAAa,2BAA2B;AAExC,MAAa,qBAAqB;;AAiBlC,MAAa,sBAAsB,OAAe,SAChD,WAAW,MAAM,KAAK,KAAK;;AAG7B,MAAa,wBAAwB,OAAe,YAClD,WAAW,MAAM,KAAK,QAAQ;;;ACpBhC,IAAI,YAAY;;;;;;;;AAQhB,MAAa,qBAAqB,OAChC,YACA,cACkB;CAClB,IAAI,aAAa,CAAC,WAChB;CAEF,MAAM,SAAU,CAAC,cAAc,CAAC,aAAc,CAAC,aAC3C;EACA,MAAM,QAAQ,IAAI;EAClB,MAAM,QAAQ,IAAI,QAAQ;EAC1B,QAAQ,EAAE,gBAAgB,KAAK;CACjC,IACE;EACA,GAAG;EACH,MAAM,QAAQ,IAAI;CACpB;CAEF,IAAI,SAAS;CACb,IAAI,CAAC,QACH,SAAS,MAAM,aAAa;EAC1B,QAAQ,OAAO;EACf,SAAS;EACT,MAAM,OAAO;EACb,MAAM,OAAO;CACf,CAAC;CAGH,MAAM,UAAU;EAAC;EAAa;EAAa;EAAc;CAAY;CACrE,MAAM,SAAS,KAAK,OAAO,MAAM,OAAO,KAAK;CAC7C,IAAI;CACJ,IAAI;EACF,SAAS,MAAM,QAAQ,QAAQ,EAAE,eAAe,KAAK,CAAC,EAAA,CACnD,QAAQ,MAAM,QAAQ,SAAS,EAAE,IAAI,CAAC,CAAC,CACvC,KAAK,MAAM,KAAK,QAAQ,EAAE,IAAI,CAAC;CACpC,SAAS,IAAI;EACX,QAAQ,CAAC;CACX;CAEA,IAAI;EACF,KAAK,MAAM,QAAQ,OACjB,IAAI;GACF,MAAM,gBAAiB,MAAM,OAAO,cAAc,IAAI;GAItD,MAAM,gBAAgB,OAAO,QAAQ,aAAa;GAClD,IAAI,CAAC,cAAc,QAAQ;IACzB,QAAQ,KAAK,wBAAwB;IACrC;GACF;GAEA,KAAK,MAAM,CAAC,YAAY,gBAAgB,eAAe;IAErD,MAAM,iBAAiB,YAAY;IACnC,mBAAmB,IAAI,gBAAgB;KACrC,MAAM;KACN,SAAS;KACT,SAAS,aAAa;KACtB;IACF,CAAC;GACH;EACF,SAAS,OAAO;GACd,QAAQ,MAAM,oBAAoB,MAAM,KAAK;EAC/C;CAEJ,UAAU;EACR,IAAI,CAAC,aAAa,QAChB,MAAM,OAAO,MAAM;EAErB,YAAY;CACd;AACF;;;ACpFA,MAAa,yBAAyB;CACpC,aAAa;CACb,aAAa;CACb,QAAQ;AACV;AAEA,MAAa,oBAAsC;CACjD,WAAW;CACX,SAAS;AACX;AAEA,MAAa,2BAA2B;CACtC,WAAW,KAAA;CACX,MAAM,KAAA;CACN,QAAQ,KAAA;AACV;;;;;;;;;;;;ACAA,SAAgB,qBAId,MACA,SACA,YAA4C,CAAC,GACb;CAChC,MAAM,UAAU,OAAO,OAAO,CAAC,GAAG,wBAAwB,SAAS;CAEnE,MAAM,mBAAmD,GAAG,SAAgB;EAC1E,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,UAAU,WAAmB,WAAW,MAAM,MAAM;EAE1D,MAAM,UAAU,YAAY;GAC1B,IAAI,WAAW,OAAO,SACpB,MAAM,IAAI,MAAM,iBAAiB;GAGnC,OAAO,MAAM,QAAQ,WAAW,QAAQ,GAAG,IAAI;EACjD;EAEA,OAAO;GACL,MAAM,QAAQ;GACd;EACF;CACF;CAEA,OAAO,iBAAiB,iBAAiB;EACvC,MAAM;GAAE,OAAO;GAAM,YAAY;GAAM,cAAc;EAAM;EAC3D,SAAS;GAAE,OAAO;GAAS,YAAY;GAAM,cAAc;EAAM;CACnE,CAAC;CAED,mBAAmB,IACjB,MACA;EACE;EACA,SAAS;EACT;CACF,CACF;CAEA,OAAO;AACT;;;AC7DA,MAAM,kBAAkB;AACxB,MAAM,oBAAoB;AAC1B,MAAM,qBAA6C;CACjD;CACA;CACA;AACF;;;;;;;;;AAUA,SAAgB,mBAAmB,MAAc,OAAuB;CACtE,IAAI,CAAC,gBAAgB,KAAK,IAAI,GAC5B,MAAM,IAAI,MAAM,mBAAmB,OAAO,IAAI,CAAC;CAEjD,OAAO;AACT;;;;;;;;;AAUA,SAAgB,oBAAoB,SAAiB,OAAuB;CAC1E,IAAI,CAAC,kBAAkB,KAAK,OAAO,GACjC,MAAM,IAAI,MAAM,qBAAqB,OAAO,OAAO,CAAC;CAEtD,OAAO;AACT;;;;;;;;AASA,SAAgB,oBAAoB,OAA6B;CAC/D,MAAM,QAAQ,SAAS;CACvB,IAAI,CAAC,mBAAmB,SAAS,KAAoB,GACnD,MAAM,IAAI,MACR,yBAAyB,MAAM,mBAC7B,mBAAmB,KAAK,IAAI,GAEhC;CAEF,OAAO;AACT;;;;;;;;AASA,SAAgB,eAAe,OAAgC;CAC7D,MAAM,UAAU,SAAS,OAAA,CAAQ,YAAY;CAC7C,IAAI,WAAW,SAAS,WAAW,QACjC,MAAM,IAAI,MAAM,oBAAoB,MAAM,2BAA2B;CAEvE,OAAO;AACT;;;;;;;;;;;AClDA,MAAM,aACJ,QACA,SACA,YAIW;CAEX,MAAM,aAAa,oBAAoB,QAAQ,eAAe;CAC9D,MAAM,cAAc,mBAAmB,SAAS,aAAa;CAC7D,MAAM,aAAa,oBAAoB,QAAQ,WAAW,WAAW;CACrE,MAAM,cAAc,oBAAoB,QAAQ,WAAW;CAC3D,MAAM,SAAS,eAAe,QAAQ,MAAM;CAC5C,IAAI,OAAO;CACX,IAAI,UAAU;CACd,QAAQ,QAAQ,aAAhB;EACE,KAAK;GAED,OAAO;GACP,UAAU;GAEZ;EACF;GACE,OAAO;GACP,UAAU;CAEd;CAEA,IAAI,WAAW,OAAO;EACpB,OAAO;EACP,UAAU;CACZ;CAaA,OAAO;eAVM,YAAY;iBACV,KAAK;oBACF,QAAQ;oBACR,WAAW;kBACb,WAAW;yBACJ,YAAY;oBACjB,OAAO;;GAIX,KAAK;AACrB;;;;;;;;AASA,MAAa,oBACX,mBACW;CAEX,oBAAoB,eAAe,WAAW,WAAW;CAEzD,OAAO;;;EAIL,MAAM,KAAK,mBAAmB,QAAQ,CAAC,CAAC,CACrC,QAAQ,GAAG,WAAW,MAAM,UAAU,CAAC,CACvC,KAAK,CAAC,gBAAgB,WACrB,UAAU,gBAAgB,MAAM,YAAa;EAC3C,GAAG;EACH,GAAK,MAAM,WAAqC,CAAC;CACnD,CAAC,CACH,CAAC,CACA,KAAK,IAAI,EACb;EACD,KAAK;AACP"}

package/package.json

@@ -1,24 +1,38 @@
 {
   "name": "@thednp/rpc",
-  "version": "0.0.1",
+  "version": "0.0.5",
+  "license": "MIT",
+  "author": "thednp",
   "description": "⚡ A Vite plugin for creating server functions with automatic Remote Procedure Calls (RPC)",
   "homepage": "https://github.com/thednp/rpc#readme",
+  "keywords": [
+    "rpc",
+    "vite",
+    "vite-plugin",
+    "express",
+    "fastify",
+    "hono",
+    "koa"
+  ],
   "bugs": {
     "url": "https://github.com/thednp/rpc/issues"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/thednp/rpc.git"
+    "url": "https://github.com/thednp/rpc.git"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": false
   },
-  "license": "MIT",
-  "author": "thednp",
   "type": "module",
   "types": "./dist/index.d.mts",
+  "sideEffects": false,
   "files": [
     "dist",
-    "wiki",
     "README.md",
     "AGENTS.md",
+    "CLAUDE.md",
     "LICENSE"
   ],
   "exports": {
@@ -32,31 +46,11 @@
     "./server": "./dist/server/server.mjs",
     "./package.json": "./package.json"
   },
-  "dependencies": {
-    "vite": "^8.1.5"
-  },
-  "devDependencies": {
-    "@hono/node-server": "^2.0.12",
-    "@types/express": "^5.0.6",
-    "@types/koa": "^3.0.3",
-    "@types/node": "^26.1.2",
-    "@vitest/coverage-istanbul": "^4.1.10",
-    "@vitest/ui": "^4.1.10",
-    "fastify": "^5.10.0",
-    "fastify-plugin": "^6.0.0",
-    "hono": "^4.12.32",
-    "koa": "^3.2.1",
-    "picocolors": "^1.1.1",
-    "tsdown": "^0.22.14",
-    "typescript": "^7.0.2",
-    "vite-plugin-strip-comments": "^0.0.10",
-    "vitest": "^4.1.10"
-  },
   "scripts": {
     "test": "vitest",
     "test-ui": "vitest --ui",
-    "test-dev": "node dev-test",
-    "test-prod": "node dev-test --mode=preview",
+    "test-dev": "node scripts/dev-test",
+    "test-prod": "node scripts/dev-test --mode=preview",
     "format": "deno fmt src tests examples/**/src",
     "clean": "rm -rf examples/**/dist examples/**/node_modules examples/**/package-lock.json examples/**/pnpm-lock.yaml examples/**/bun.lockb examples/**/deno.lock",
     "dev": "cd examples/spa && pnpm up && pnpm dev",
@@ -69,10 +63,33 @@
     "lint:ts": "deno lint src",
     "fix:ts": "deno lint src --fix",
     "check:ts": "tsc -noEmit",
-    "up:examples": "pnpm up -r --latest --filter \"./examples/*\"",
-    "up:examples_1": "for d in examples/*/; do (cd \"$d\" && pnpm up --latest); done",
+    "up:examples": "pnpm up -r --latest --filter \"./examples/*\" && pnpm ci -r --filter \"./examples/*\"",
     "up:root": "pnpm up --latest",
+    "up:deno": "deno update && deno -A scripts/update-deno.js",
     "upd": "pnpm up:examples && pnpm up:root",
+    "audit:src": "node scripts/audit-src.js",
+    "prepublishOnly": "pnpm upd && pnpm up:deno && pnpm lint && pnpm format && pnpm audit:src && pnpm build",
     "build": "tsdown"
-  }
-}
+  },
+  "dependencies": {
+    "express": "^5.2.1",
+    "fastify": "^5.11.0",
+    "fastify-plugin": "^6.0.0",
+    "hono": "^4.12.33",
+    "koa": "^3.2.1",
+    "vite": "^8.2.0"
+  },
+  "devDependencies": {
+    "@hono/node-server": "^2.0.12",
+    "@types/express": "^5.0.6",
+    "@types/koa": "^3.0.3",
+    "@types/node": "^26.1.2",
+    "@vitest/coverage-istanbul": "^4.1.10",
+    "@vitest/ui": "^4.1.10",
+    "tsdown": "^0.22.14",
+    "typescript": "^7.0.2",
+    "vite-plugin-strip-comments": "^0.0.10",
+    "vitest": "^4.1.10"
+  },
+  "packageManager": "pnpm@11.18.0"
+}