@timber-js/app 0.2.0-alpha.146 → 0.2.0-alpha.148

package/dist/adapters/nitro.js.map

@@ -1 +1 @@
-{"version":3,"file":"nitro.js","names":[],"sources":["../../src/adapters/compress-module.ts","../../src/adapters/nitro.ts"],"sourcesContent":["// Generated compression module template for self-hosted deployments.\n//\n// This file generates a standalone ESM module (_compress.mjs) that is\n// written to the build output during adapter buildOutput(). It's imported\n// by the Nitro entry and preview server at runtime.\n//\n// Uses CompressionStream (Web API) for gzip. Brotli is left to CDNs/reverse\n// proxies — at streaming quality levels its ratio advantage is marginal and\n// node:zlib buffers output internally, breaking streaming.\n// Cloudflare Workers don't need this — the edge auto-compresses.\n//\n// See design/25-production-deployments.md.\n\n/**\n * Generate a standalone ESM module that exports compressResponse().\n *\n * Written to `_compress.mjs` during buildOutput. Imported by the Nitro entry\n * and preview server.\n *\n * @internal Exported for testing.\n */\nexport function generateCompressModule(): string {\n  return `// Generated by @timber-js/app — response compression for self-hosted deployments.\n// Do not edit — this file is regenerated on each build.\n// Uses node:zlib createGzip() (C++ native) on Node.js, falls back to\n// CompressionStream (Web API) on other runtimes. Brotli is left to CDNs/reverse\n// proxies — at streaming quality levels its ratio advantage is marginal.\nimport { Readable, pipeline } from 'node:stream';\nimport { createGzip, constants } from 'node:zlib';\n\nconst COMPRESSIBLE_TYPES = new Set([\n  'text/html', 'text/css', 'text/plain', 'text/xml', 'text/javascript',\n  'text/x-component', 'application/json', 'application/javascript',\n  'application/xml', 'application/xhtml+xml', 'application/rss+xml',\n  'application/atom+xml', 'image/svg+xml',\n]);\n\nconst NO_COMPRESS_STATUSES = new Set([204, 304]);\n\nfunction negotiateEncoding(acceptEncoding) {\n  if (!acceptEncoding) return null;\n  // Parse tokens with quality values. Per RFC 9110 §12.5.3, q=0 means\n  // \"not acceptable\" — the client explicitly rejects that encoding.\n  // Brotli (br) is intentionally not handled at the application level.\n  const parts = acceptEncoding.split(',');\n  for (const part of parts) {\n    const [token, ...params] = part.split(';');\n    const name = token.trim().toLowerCase();\n    if (name !== 'gzip') continue;\n    let qValue = 1;\n    for (const param of params) {\n      const trimmed = param.trim().toLowerCase();\n      if (trimmed.startsWith('q=')) {\n        qValue = parseFloat(trimmed.slice(2));\n        if (Number.isNaN(qValue)) qValue = 1;\n        break;\n      }\n    }\n    if (qValue > 0) return 'gzip';\n  }\n  return null;\n}\n\nfunction shouldCompress(response) {\n  if (!response.body) return false;\n  if (NO_COMPRESS_STATUSES.has(response.status)) return false;\n  if (response.headers.has('Content-Encoding')) return false;\n  const contentType = response.headers.get('Content-Type');\n  if (!contentType) return false;\n  const mimeType = contentType.split(';')[0].trim().toLowerCase();\n  if (mimeType === 'text/event-stream') return false;\n  return COMPRESSIBLE_TYPES.has(mimeType);\n}\n\nfunction compressWithGzip(body) {\n  // Use node:zlib (C++ native) for gzip compression. The Web Streams\n  // CompressionStream works but every chunk crosses the JS/Promise boundary.\n  // node:zlib.createGzip() compresses entirely in C++ with zero per-chunk\n  // Promise overhead.\n  //\n  // Convert: Web ReadableStream → Node Readable → pipe through gzip →\n  //          Node Readable → Readable.toWeb() → Web ReadableStream\n  try {\n    const nodeReadable = Readable.fromWeb(body);\n    // Z_SYNC_FLUSH ensures each chunk is flushed immediately so the browser\n    // receives the HTML shell before Suspense boundaries resolve. Without it,\n    // gzip buffers internally and breaks streaming.\n    const gzip = createGzip({ flush: constants.Z_SYNC_FLUSH });\n    // pipeline() instead of bare pipe(): pipe() does not forward source\n    // errors, so an erroring body would emit an unhandled 'error' event and\n    // crash the process. pipeline() destroys gzip on source error — the web\n    // stream rejects — and propagates consumer cancel back to the source\n    // body. Errors reach the consumer via the web stream; the callback only\n    // marks them handled at the Node layer.\n    pipeline(nodeReadable, gzip, () => {});\n    return Readable.toWeb(gzip);\n  } catch {\n    // Fallback: CompressionStream (CF Workers, or if node:stream unavailable)\n    return body.pipeThrough(new CompressionStream('gzip'));\n  }\n}\n\nexport function compressResponse(request, response) {\n  if (!shouldCompress(response)) return response;\n  const acceptEncoding = request.headers.get('Accept-Encoding') || '';\n  const encoding = negotiateEncoding(acceptEncoding);\n  if (!encoding) return response;\n  const compressedBody = compressWithGzip(response.body);\n  const headers = new Headers(response.headers);\n  headers.set('Content-Encoding', encoding);\n  headers.delete('Content-Length');\n  const existingVary = headers.get('Vary');\n  if (existingVary) {\n    if (!existingVary.toLowerCase().includes('accept-encoding')) {\n      headers.set('Vary', existingVary + ', Accept-Encoding');\n    }\n  } else {\n    headers.set('Vary', 'Accept-Encoding');\n  }\n  return new Response(compressedBody, {\n    status: response.status,\n    statusText: response.statusText,\n    headers,\n  });\n}\n`;\n}\n","// Nitro adapter — multi-platform deployment\n//\n// Covers everything except Cloudflare Workers: Node.js, Bun, Vercel,\n// Netlify, AWS Lambda, Deno Deploy, Azure Functions. Nitro handles\n// compression, graceful shutdown, static file serving, and platform quirks.\n// See design/11-platform.md and design/25-production-deployments.md.\n\nimport { writeFile, readFile } from 'node:fs/promises';\nimport { execFile } from 'node:child_process';\nimport { join, relative } from 'node:path';\nimport type { TimberPlatformAdapter, TimberConfig } from './types';\nimport { generateCompressModule } from './compress-module.js';\nimport { IMMUTABLE_CACHE } from './shared.js';\nimport { runSharedBuildSteps } from './build-output-helper.js';\n\n// ─── Presets ─────────────────────────────────────────────────────────────────\n\n/**\n * Supported Nitro deployment presets.\n *\n * Each preset maps to a Nitro deployment target. The adapter generates\n * the appropriate configuration and entry point for the selected platform.\n */\nexport type NitroPreset =\n  | 'vercel'\n  | 'vercel-edge'\n  | 'netlify'\n  | 'netlify-edge'\n  | 'aws-lambda'\n  | 'deno-deploy'\n  | 'azure-functions'\n  | 'node-server'\n  | 'bun';\n\n/** Preset-specific Nitro configuration. */\ninterface PresetConfig {\n  /** Nitro preset name passed to the Nitro build. */\n  nitroPreset: string;\n  /** Output directory name within the build dir. */\n  outputDir: string;\n  /** Whether the runtime supports waitUntil. */\n  supportsWaitUntil: boolean;\n  /** Whether the runtime supports application-level 103 Early Hints. */\n  supportsEarlyHints: boolean;\n  /** Value for TIMBER_RUNTIME env var. See design/25-production-deployments.md. */\n  runtimeName: string;\n  /** Additional nitro.config fields for this preset. */\n  extraConfig?: Record<string, unknown>;\n}\n\nconst PRESET_CONFIGS: Record<NitroPreset, PresetConfig> = {\n  'vercel': {\n    nitroPreset: 'vercel',\n    outputDir: '.vercel/output',\n    supportsWaitUntil: true,\n    supportsEarlyHints: false,\n    runtimeName: 'vercel',\n    extraConfig: { vercel: { functions: { maxDuration: 30 } } },\n  },\n  'vercel-edge': {\n    nitroPreset: 'vercel-edge',\n    outputDir: '.vercel/output',\n    supportsWaitUntil: true,\n    supportsEarlyHints: false,\n    runtimeName: 'vercel-edge',\n  },\n  'netlify': {\n    nitroPreset: 'netlify',\n    outputDir: '.netlify/functions-internal',\n    supportsWaitUntil: false,\n    supportsEarlyHints: false,\n    runtimeName: 'netlify',\n  },\n  'netlify-edge': {\n    nitroPreset: 'netlify-edge',\n    outputDir: '.netlify/edge-functions',\n    supportsWaitUntil: true,\n    supportsEarlyHints: false,\n    runtimeName: 'netlify-edge',\n  },\n  'aws-lambda': {\n    nitroPreset: 'aws-lambda',\n    outputDir: '.output',\n    supportsWaitUntil: false,\n    supportsEarlyHints: false,\n    runtimeName: 'aws-lambda',\n  },\n  'deno-deploy': {\n    nitroPreset: 'deno-deploy',\n    outputDir: '.output',\n    supportsWaitUntil: true,\n    supportsEarlyHints: false,\n    runtimeName: 'deno-deploy',\n  },\n  'azure-functions': {\n    nitroPreset: 'azure-functions',\n    outputDir: '.output',\n    supportsWaitUntil: false,\n    supportsEarlyHints: false,\n    runtimeName: 'azure-functions',\n  },\n  'node-server': {\n    nitroPreset: 'node-server',\n    outputDir: '.output',\n    supportsWaitUntil: true,\n    // Disabled by default: most node-server deployments sit behind a\n    // reverse proxy (nginx, caddy, traefik) that doesn't support 103\n    // Early Hints over HTTP/1.1. Sending 103 causes nginx to intermittently\n    // treat the response as an error and retry after proxy_connect_timeout\n    // (~5s stalls on ~23% of requests). Link headers on the 200 response\n    // are the safe fallback — Cloudflare and other CDNs convert them to\n    // 103 automatically at the edge (over HTTP/2+ to the browser).\n    supportsEarlyHints: false,\n    runtimeName: 'node-server',\n  },\n  'bun': {\n    nitroPreset: 'bun',\n    outputDir: '.output',\n    supportsWaitUntil: true,\n    // Disabled for same reason as node-server — reverse proxies choke on 103.\n    // Link headers on the 200 response are converted to 103 by CDNs.\n    supportsEarlyHints: false,\n    runtimeName: 'bun',\n  },\n};\n\n// ─── Options ─────────────────────────────────────────────────────────────────\n\n/** Options for the Nitro adapter. */\nexport interface NitroAdapterOptions {\n  /**\n   * Deployment preset. Determines the target platform.\n   * @default 'node-server'\n   */\n  preset?: NitroPreset;\n\n  /**\n   * Enable application-level gzip compression for HTML and RSC responses.\n   *\n   * When `true` (default), the origin compresses responses using the Web\n   * `CompressionStream` API. This is useful for self-hosted deployments\n   * where no reverse proxy or CDN handles compression.\n   *\n   * Set to `false` when deploying behind a reverse proxy (nginx, caddy)\n   * or CDN (Cloudflare, Fastly, Vercel) that compresses at the edge.\n   * Disabling origin compression saves CPU on the Node.js event loop —\n   * compressing 1MB+ streaming HTML responses takes 10-15ms of main\n   * thread time per request, directly reducing throughput under load.\n   *\n   * @default true\n   */\n  compress?: boolean;\n\n  /**\n   * Additional Nitro configuration to merge into the generated config.\n   * Overrides default values for the selected preset.\n   */\n  nitroConfig?: Record<string, unknown>;\n}\n\n// ─── Adapter ─────────────────────────────────────────────────────────────────\n\n/**\n * Create a Nitro-based adapter for multi-platform deployment.\n *\n * Nitro abstracts deployment targets — the same timber.js app can deploy\n * to Vercel, Netlify, AWS, Deno Deploy, or Azure by changing the preset.\n *\n * @example\n * ```ts\n * import { nitro } from '@timber-js/app/adapters/nitro'\n *\n * export default {\n *   output: 'server',\n *   adapter: nitro({ preset: 'vercel' }),\n * }\n * ```\n */\nexport function nitro(options: NitroAdapterOptions = {}): TimberPlatformAdapter {\n  const preset = options.preset ?? 'node-server';\n  const compress = options.compress ?? true;\n  const presetConfig = PRESET_CONFIGS[preset];\n  const pendingPromises: Promise<unknown>[] = [];\n\n  return {\n    name: `nitro-${preset}`,\n\n    async buildOutput(config: TimberConfig, buildDir: string) {\n      const outDir = join(buildDir, 'nitro');\n\n      // Steps 1–5: shared across all adapters (mkdir, copy client/rsc/ssr,\n      // write _headers, write manifest-init).\n      await runSharedBuildSteps({\n        config,\n        buildDir,\n        outDir,\n        publicDirName: 'public',\n      });\n\n      // Write the compression helper module for runtime use.\n      // See design/25-production-deployments.md — self-hosted deployments\n      // need application-level compression (Cloudflare handles it at the edge).\n      await writeFile(join(outDir, '_compress.mjs'), generateCompressModule());\n\n      // Prepend the manifest assignment directly into the RSC entry so\n      // globalThis.__TIMBER_BUILD_MANIFEST__ is set before any module reads it.\n      // This must be top-level code, not an import, because rollup tree-shakes\n      // side-effect-only globalThis assignments from imported modules.\n      if (config.manifestInit) {\n        const rscEntry = join(outDir, 'rsc', 'index.js');\n        const rscContent = await readFile(rscEntry, 'utf-8');\n        await writeFile(rscEntry, `${config.manifestInit}\\n${rscContent}`);\n      }\n\n      // Generate the Nitro entry point (imports from ./rsc/ within nitro dir)\n      const entry = generateNitroEntry(buildDir, outDir, preset, compress);\n      await writeFile(join(outDir, 'entry.ts'), entry);\n\n      // Run the Nitro build to produce a production-ready server bundle.\n      // The output goes to dist/nitro/.output/server/index.mjs (for node-server preset).\n      // Config is passed programmatically — no nitro.config.ts file needed.\n      await runNitroBuild(outDir, preset, options.nitroConfig);\n    },\n\n    // Only presets that produce a locally-runnable server get preview().\n    // Serverless presets (vercel, netlify, aws-lambda, etc.) have no\n    // local runtime — Vite's built-in preview is the fallback.\n    preview: LOCALLY_PREVIEWABLE.has(preset)\n      ? async (_config: TimberConfig, buildDir: string) => {\n          // Generate a standalone preview server that uses Node's built-in\n          // HTTP server. The Nitro entry.ts can't be run directly because\n          // it imports h3 (a Nitro dependency not available at runtime).\n          const previewScript = generatePreviewScript(buildDir, preset);\n          const scriptPath = join(buildDir, 'nitro', '_preview-server.mjs');\n          await writeFile(scriptPath, previewScript);\n\n          const command = preset === 'bun' ? 'bun' : 'node';\n          await spawnNitroPreview(command, [scriptPath], join(buildDir, 'nitro'));\n        }\n      : undefined,\n\n    waitUntil: presetConfig.supportsWaitUntil\n      ? (promise: Promise<unknown>) => {\n          const tracked = promise.catch((err) => {\n            console.error('[timber] waitUntil promise rejected:', err);\n          });\n          pendingPromises.push(tracked);\n        }\n      : undefined,\n  };\n}\n\n// ─── Entry Generation ────────────────────────────────────────────────────────\n\n/** @internal Exported for testing. */\nexport function generateNitroEntry(\n  buildDir: string,\n  outDir: string,\n  preset: NitroPreset,\n  compress = true,\n  hasManifestInit = false\n): string {\n  // The RSC entry is the main request handler — it exports the fetch handler as default.\n  // rsc/ is copied into the nitro dir so the import is local.\n  // The manifest init is prepended to rsc/index.js before the nitro build,\n  // so globalThis.__TIMBER_BUILD_MANIFEST__ is set before any code reads it.\n  const serverEntryRelative = './rsc/index.js';\n  const runtimeName = PRESET_CONFIGS[preset].runtimeName;\n  const earlyHints = PRESET_CONFIGS[preset].supportsEarlyHints;\n  const supportsWaitUntil = PRESET_CONFIGS[preset].supportsWaitUntil;\n\n  // On node-server and bun, wrap the handler with ALS so the pipeline\n  // can send 103 Early Hints via res.writeEarlyHints(). Other presets\n  // either don't support 103 or handle it at the CDN level.\n  //\n  // For presets that support waitUntil, bridge h3's event.waitUntil()\n  // to timber's waitUntil() primitive via the ALS bridge.\n  // See design/11-platform.md §\"waitUntil()\".\n  let handlerCall: string;\n  if (earlyHints && supportsWaitUntil) {\n    handlerCall = `  const nodeRes = event.node?.res\n  const earlyHintsSender = (typeof nodeRes?.writeEarlyHints === 'function')\n    ? (links) => { try { nodeRes.writeEarlyHints({ link: links }) } catch {} }\n    : undefined\n\n  const waitUntilFn = (typeof event.waitUntil === 'function')\n    ? (p) => event.waitUntil(p)\n    : undefined\n\n  const callHandler = () => handler(webRequest)\n  let wrappedHandler = earlyHintsSender\n    ? () => runWithEarlyHintsSender(earlyHintsSender, callHandler)\n    : callHandler\n  const webResponse = waitUntilFn\n    ? await runWithWaitUntil(waitUntilFn, wrappedHandler)\n    : await wrappedHandler()`;\n  } else if (earlyHints) {\n    handlerCall = `  const nodeRes = event.node?.res\n  const earlyHintsSender = (typeof nodeRes?.writeEarlyHints === 'function')\n    ? (links) => { try { nodeRes.writeEarlyHints({ link: links }) } catch {} }\n    : undefined\n\n  const webResponse = earlyHintsSender\n    ? await runWithEarlyHintsSender(earlyHintsSender, () => handler(webRequest))\n    : await handler(webRequest)`;\n  } else if (supportsWaitUntil) {\n    handlerCall = `  const waitUntilFn = (typeof event.waitUntil === 'function')\n    ? (p) => event.waitUntil(p)\n    : undefined\n\n  const webResponse = waitUntilFn\n    ? await runWithWaitUntil(waitUntilFn, () => handler(webRequest))\n    : await handler(webRequest)`;\n  } else {\n    handlerCall = `  const webResponse = await handler(webRequest)`;\n  }\n\n  // Build manifest init must be imported before the handler so that\n  // globalThis.__TIMBER_BUILD_MANIFEST__ is set when the virtual module evaluates.\n  // ESM guarantees imports are evaluated in order.\n  const manifestImport = hasManifestInit ? \"import './_timber-manifest-init.js'\\n\" : '';\n\n  // Import runWithWaitUntil only when the preset supports it.\n  const waitUntilImport = supportsWaitUntil ? ', runWithWaitUntil' : '';\n\n  const compressImport = compress ? \"import { compressResponse } from './_compress.mjs'\\n\" : '';\n  const compressCall = compress ? 'compressResponse(webRequest, webResponse)' : 'webResponse';\n\n  return `// Generated by @timber-js/app/adapters/nitro\n// Do not edit — this file is regenerated on each build.\n\n${manifestImport}import handler, { runWithEarlyHintsSender${waitUntilImport} } from '${serverEntryRelative}'\n${compressImport}\n// Set TIMBER_RUNTIME for instrumentation.ts conditional SDK initialization.\n// See design/25-production-deployments.md §\"TIMBER_RUNTIME\".\nprocess.env.TIMBER_RUNTIME = '${runtimeName}'\n\n// Nitro's index.mjs wraps this import with defineLazyEventHandler, which\n// already handles the event handler protocol. We export a plain async\n// function — no defineEventHandler wrapper needed.\n// Nitro bundles h3 into its internal _libs/ directory but doesn't make\n// it available as a bare specifier in the output's node_modules.\nexport default async function timberHandler(event) {\n  // h3 v2: event.req is the Web Request\n  const webRequest = event.req\n${handlerCall}\n  return ${compressCall}\n}\n`;\n}\n\n/** @internal Exported for testing. */\nexport function generateNitroConfig(\n  preset: NitroPreset,\n  userConfig?: Record<string, unknown>\n): string {\n  const presetConfig = PRESET_CONFIGS[preset];\n\n  const config: Record<string, unknown> = {\n    preset: presetConfig.nitroPreset,\n    entry: './entry.ts',\n    output: { dir: presetConfig.outputDir },\n    // Static asset cache headers — hashed assets are immutable, others get 1h.\n    // See design/25-production-deployments.md §\"CDN / Edge Cache\"\n    routeRules: {\n      '/assets/**': { headers: { 'Cache-Control': IMMUTABLE_CACHE } },\n      '/_timber/fonts/**': { headers: { 'Cache-Control': IMMUTABLE_CACHE } },\n    },\n    ...presetConfig.extraConfig,\n    ...userConfig,\n  };\n\n  const configJson = JSON.stringify(config, null, 2);\n\n  return `// Generated by @timber-js/app/adapters/nitro\n// Do not edit — this file is regenerated on each build.\n\nimport { defineNitroConfig } from 'nitro/config'\n\nexport default defineNitroConfig(${configJson})\n`;\n}\n\n// ─── Preview ─────────────────────────────────────────────────────────────────\n\n/** Presets that produce a locally-runnable server entry. */\nconst LOCALLY_PREVIEWABLE = new Set<NitroPreset>(['node-server', 'bun']);\n\n/**\n * Generate a standalone preview server script that uses Node's built-in\n * HTTP server. This bypasses Nitro entirely — the Nitro entry.ts imports\n * h3 which isn't available outside a Nitro build. For local preview we\n * just need to serve static files and route requests to the RSC handler.\n *\n * @internal Exported for testing.\n */\nexport function generatePreviewScript(buildDir: string, preset: NitroPreset): string {\n  const rscEntryRelative = relative(join(buildDir, 'nitro'), join(buildDir, 'rsc', 'index.js'));\n  const rscEntry = rscEntryRelative.startsWith('.') ? rscEntryRelative : './' + rscEntryRelative;\n  const publicDir = './public';\n  const manifestInitPath = './_timber-manifest-init.js';\n  const runtimeName = PRESET_CONFIGS[preset].runtimeName;\n\n  return `// Generated by @timber-js/app — standalone preview server.\n// Uses Node's built-in HTTP server to serve static assets and route\n// dynamic requests through the RSC handler. No Nitro/h3 dependency.\n\nimport { createServer } from 'node:http';\nimport { readFile, stat } from 'node:fs/promises';\nimport { join, extname } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { existsSync } from 'node:fs';\n\n// Set runtime before importing the handler.\nprocess.env.TIMBER_RUNTIME = '${runtimeName}';\n\n// Load the build manifest if it exists.\nconst __dirname = fileURLToPath(new URL('.', import.meta.url));\nconst manifestPath = join(__dirname, '${manifestInitPath}');\nif (existsSync(manifestPath)) {\n  await import('${manifestInitPath}');\n}\n\n// Import the RSC handler (default export is the fetch-like handler).\nconst { default: handler, runWithEarlyHintsSender } = await import('${rscEntry}');\n\n// Import compression helper for self-hosted response compression.\nconst { compressResponse } = await import('./_compress.mjs');\n\nconst MIME_TYPES = {\n  '.html': 'text/html',\n  '.js': 'application/javascript',\n  '.mjs': 'application/javascript',\n  '.css': 'text/css',\n  '.json': 'application/json',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.gif': 'image/gif',\n  '.svg': 'image/svg+xml',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.ttf': 'font/ttf',\n  '.otf': 'font/otf',\n  '.webp': 'image/webp',\n  '.avif': 'image/avif',\n  '.webm': 'video/webm',\n  '.mp4': 'video/mp4',\n  '.txt': 'text/plain',\n  '.xml': 'application/xml',\n  '.wasm': 'application/wasm',\n};\n\nconst publicDir = join(__dirname, '${publicDir}');\n\n// Port resolution (TIM-842):\n//   - Default to 3000\n//   - If PORT env var is set, honor it strictly (fail loudly on conflict)\n//   - Otherwise auto-bump from 3000 until a free port is found\n// Mirrors the dev server behavior so timber dev/preview/production all\n// behave the same way around port selection.\nconst envPort = process.env.PORT ? parseInt(process.env.PORT, 10) : null;\nconst portIsExplicit = envPort != null && Number.isFinite(envPort) && envPort > 0;\nconst startPort = portIsExplicit ? envPort : 3000;\nconst host = process.env.HOST || process.env.HOSTNAME || 'localhost';\n\n// Set after listenWithBump() resolves so request handlers can build\n// absolute URLs from the actual bound port (which may differ from\n// startPort after an auto-bump).\nlet boundPort = startPort;\n\nconst server = createServer(async (req, res) => {\n  // Scheme from the socket's TLS state — a hardcoded http:// breaks CSRF\n  // origin comparison and absolute-URL construction when TLS is terminated\n  // at this server (TIM-1073; mirrors the dev-server fix in TIM-1067).\n  // X-Forwarded-Proto is intentionally not consulted here: on a direct\n  // connection it would be attacker-controlled. The CSRF layer honors it\n  // separately for reverse-proxy deployments.\n  const scheme = req.socket?.encrypted ? 'https' : 'http';\n  const url = new URL(req.url || '/', \\`\\${scheme}://\\${host}:\\${boundPort}\\`);\n\n  // Try serving static files from the public directory first.\n  const filePath = join(publicDir, url.pathname);\n  // Prevent path traversal.\n  if (filePath.startsWith(publicDir)) {\n    try {\n      const fileStat = await stat(filePath);\n      if (fileStat.isFile()) {\n        const ext = extname(filePath);\n        const contentType = MIME_TYPES[ext] || 'application/octet-stream';\n        const body = await readFile(filePath);\n        // Hashed assets get immutable cache, others get short cache.\n        const isImmutable =\n          url.pathname.startsWith('/assets/') || url.pathname.startsWith('/_timber/fonts/');\n        const cacheControl = isImmutable\n          ? 'public, max-age=31536000, immutable'\n          : 'public, max-age=3600, must-revalidate';\n        res.writeHead(200, {\n          'Content-Type': contentType,\n          'Content-Length': body.length,\n          'Cache-Control': cacheControl,\n        });\n        res.end(body);\n        return;\n      }\n    } catch {\n      // File not found — fall through to the RSC handler.\n    }\n  }\n\n  // Convert Node request to Web Request.\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(req.headers)) {\n    if (value) {\n      if (Array.isArray(value)) {\n        for (const v of value) headers.append(key, v);\n      } else {\n        headers.set(key, value);\n      }\n    }\n  }\n\n  let body = undefined;\n  if (req.method !== 'GET' && req.method !== 'HEAD') {\n    body = await new Promise((resolve) => {\n      const chunks = [];\n      req.on('data', (chunk) => chunks.push(chunk));\n      req.on('end', () => resolve(Buffer.concat(chunks)));\n    });\n  }\n\n  const webRequest = new Request(url.href, {\n    method: req.method,\n    headers,\n    body,\n    duplex: body ? 'half' : undefined,\n  });\n\n  try {\n    // Support 103 Early Hints when available.\n    const earlyHintsSender = (typeof res.writeEarlyHints === 'function')\n      ? (links) => { try { res.writeEarlyHints({ link: links }); } catch {} }\n      : undefined;\n\n    const rawResponse = earlyHintsSender && runWithEarlyHintsSender\n      ? await runWithEarlyHintsSender(earlyHintsSender, () => handler(webRequest))\n      : await handler(webRequest);\n\n    // Compress the response for self-hosted deployments.\n    const webResponse = compressResponse(webRequest, rawResponse);\n\n    // Write the response back to the Node response.\n    //\n    // Set-Cookie needs special handling: Headers.entries() joins multiple\n    // Set-Cookie values with \", \" into a single entry, but each cookie must\n    // be its own header per RFC 6265 §4.1. Object.fromEntries() would then\n    // collapse them into one malformed Set-Cookie header that browsers reject\n    // (or only honor partially). Use getSetCookie() to preserve individual\n    // values, and pass them as an array — Node's writeHead accepts\n    // Record<string, string | string[]> and emits one header per array entry.\n    //\n    // Without this, EVERY cookie set by the framework on Node—/Nitro deployments\n    // is silently dropped: defineCookie().setCookie() in actions, middleware\n    // cookie writes, the framework's own session cookies, all of it. See\n    // LOCAL-741.\n    const responseHeaders = {};\n    webResponse.headers.forEach((value, key) => {\n      if (key.toLowerCase() !== 'set-cookie') {\n        responseHeaders[key] = value;\n      }\n    });\n    const setCookies = webResponse.headers.getSetCookie();\n    if (setCookies.length > 0) {\n      responseHeaders['set-cookie'] = setCookies;\n    }\n    res.writeHead(webResponse.status, responseHeaders);\n\n    if (webResponse.body) {\n      const reader = webResponse.body.getReader();\n\n      // Cancel the reader when the client disconnects. This causes any\n      // pending reader.read() to reject, breaking the pump loop. Critical\n      // for SSE and other infinite streams — without this, disconnected\n      // clients leak readers.\n      let clientDisconnected = false;\n      const onClose = () => {\n        clientDisconnected = true;\n        reader.cancel('Client disconnected').catch(() => {});\n      };\n      res.on('close', onClose);\n\n      try {\n        while (true) {\n          const { done, value } = await reader.read();\n          if (done) break;\n          res.write(value);\n        }\n      } catch (err) {\n        // reader.cancel() from the close handler causes read() to reject.\n        // This is expected on client disconnect — not an error.\n        if (!clientDisconnected) {\n          throw err;\n        }\n      } finally {\n        res.off('close', onClose);\n        reader.releaseLock();\n        if (!res.writableEnded) {\n          res.end();\n        }\n      }\n    } else {\n      res.end();\n    }\n  } catch (err) {\n    console.error('[timber preview] Request error:', err);\n    if (!res.headersSent) {\n      res.writeHead(500, { 'Content-Type': 'text/plain' });\n    }\n    res.end('Internal Server Error');\n  }\n});\n\nfunction listenWithBump(port, attempt = 0) {\n  return new Promise((resolveListen, rejectListen) => {\n    const onError = (err) => {\n      server.removeListener('listening', onListening);\n      if (err && err.code === 'EADDRINUSE' && !portIsExplicit && attempt < 100) {\n        if (attempt === 0) {\n          console.log(\\`  [timber] Port \\${port} in use, trying \\${port + 1}...\\`);\n        }\n        listenWithBump(port + 1, attempt + 1).then(resolveListen, rejectListen);\n        return;\n      }\n      rejectListen(err);\n    };\n    const onListening = () => {\n      server.removeListener('error', onError);\n      resolveListen(port);\n    };\n    server.once('error', onError);\n    server.once('listening', onListening);\n    server.listen(port, host);\n  });\n}\n\ntry {\n  boundPort = await listenWithBump(startPort);\n  if (boundPort !== startPort) {\n    console.log();\n    console.log(\\`  [timber] Port \\${startPort} in use, using \\${boundPort}\\`);\n  }\n  console.log();\n  console.log('  ⚡ timber preview server running at:');\n  console.log();\n  console.log(\\`    ➜  http://\\${host}:\\${boundPort}\\`);\n  console.log();\n} catch (err) {\n  if (err && err.code === 'EADDRINUSE') {\n    console.error(\\`[timber] Port \\${startPort} is already in use. \\` +\n      'Set PORT to a free port, or unset PORT to auto-pick.');\n  } else {\n    console.error('[timber] Failed to start preview server:', err);\n  }\n  process.exit(1);\n}\n`;\n}\n\n/** Command descriptor for Nitro preview — testable without spawning. */\nexport interface NitroPreviewCommand {\n  command: string;\n  args: string[];\n  cwd: string;\n}\n\n/** @internal Exported for testing. */\nexport function generateNitroPreviewCommand(\n  buildDir: string,\n  preset: NitroPreset\n): NitroPreviewCommand | null {\n  if (!LOCALLY_PREVIEWABLE.has(preset)) return null;\n\n  const nitroDir = join(buildDir, 'nitro');\n  const entryPath = join(nitroDir, 'entry.ts');\n\n  const command = preset === 'bun' ? 'bun' : 'node';\n  return {\n    command,\n    args: [entryPath],\n    cwd: nitroDir,\n  };\n}\n\n/**\n * Run the Nitro production build using the programmatic API.\n * Uses dynamic import so nitro is only loaded at build time.\n * Externalizes the timber RSC/SSR output — those files are pre-built\n * by timber and have internal references that nitro's bundler can't follow.\n */\nasync function runNitroBuild(\n  nitroDir: string,\n  preset: NitroPreset,\n  userConfig?: Record<string, unknown>\n): Promise<void> {\n  const presetConfig = PRESET_CONFIGS[preset];\n  const {\n    createNitro,\n    build: nitroBuild,\n    prepare,\n    copyPublicAssets,\n  } = await import('nitro/builder');\n\n  const nitro = await createNitro({\n    rootDir: nitroDir,\n    preset: presetConfig.nitroPreset,\n    // Use renderer.entry so Nitro wraps our handler with its server runtime\n    // (HTTP server, static file serving, graceful shutdown, etc.).\n    // Using `entry` directly would bypass the Nitro server runtime.\n    renderer: { handler: join(nitroDir, 'entry.ts') },\n    output: { dir: join(nitroDir, presetConfig.outputDir) },\n    routeRules: {\n      '/assets/**': { headers: { 'Cache-Control': IMMUTABLE_CACHE } },\n      '/_timber/fonts/**': { headers: { 'Cache-Control': IMMUTABLE_CACHE } },\n    },\n    // Don't bundle the timber RSC/SSR build output — it has its own\n    // internal file references that nitro's bundler can't follow.\n    // Mark them as external so rollup leaves the imports as-is.\n    rollupConfig: {\n      external: [/\\.\\.\\/rsc\\//],\n    },\n    ...presetConfig.extraConfig,\n    ...userConfig,\n  });\n\n  await prepare(nitro);\n  await copyPublicAssets(nitro);\n  await nitroBuild(nitro);\n  await nitro.close();\n}\n\n/** Spawn a Nitro preview process and pipe stdio. */\nfunction spawnNitroPreview(command: string, args: string[], cwd: string): Promise<void> {\n  return new Promise<void>((resolve, reject) => {\n    const child = execFile(command, args, { cwd }, (err) => {\n      if (err) reject(err);\n      else resolve();\n    });\n    child.stdout?.pipe(process.stdout);\n    child.stderr?.pipe(process.stderr);\n  });\n}\n\n// ─── Helpers ─────────────────────────────────────────────────────────────────\n\n/**\n * Get the preset configuration for a given preset name.\n * @internal Exported for testing.\n */\nexport function getPresetConfig(preset: NitroPreset): PresetConfig {\n  return PRESET_CONFIGS[preset];\n}\n"],"mappings":";;;;;;;;;;;;;AAqBA,SAAgB,yBAAiC;CAC/C,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwGT;;;AC5EA,IAAM,iBAAoD;CACxD,UAAU;EACR,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;EACb,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,GAAG,EAAE,EAAE;CAC5D;CACA,eAAe;EACb,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,WAAW;EACT,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,gBAAgB;EACd,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,cAAc;EACZ,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,eAAe;EACb,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,mBAAmB;EACjB,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,eAAe;EACb,aAAa;EACb,WAAW;EACX,mBAAmB;EAQnB,oBAAoB;EACpB,aAAa;CACf;CACA,OAAO;EACL,aAAa;EACb,WAAW;EACX,mBAAmB;EAGnB,oBAAoB;EACpB,aAAa;CACf;AACF;;;;;;;;;;;;;;;;;AAsDA,SAAgB,MAAM,UAA+B,CAAC,GAA0B;CAC9E,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,eAAe,eAAe;CACpC,MAAM,kBAAsC,CAAC;CAE7C,OAAO;EACL,MAAM,SAAS;EAEf,MAAM,YAAY,QAAsB,UAAkB;GACxD,MAAM,SAAS,KAAK,UAAU,OAAO;GAIrC,MAAM,oBAAoB;IACxB;IACA;IACA;IACA,eAAe;GACjB,CAAC;GAKD,MAAM,UAAU,KAAK,QAAQ,eAAe,GAAG,uBAAuB,CAAC;GAMvE,IAAI,OAAO,cAAc;IACvB,MAAM,WAAW,KAAK,QAAQ,OAAO,UAAU;IAC/C,MAAM,aAAa,MAAM,SAAS,UAAU,OAAO;IACnD,MAAM,UAAU,UAAU,GAAG,OAAO,aAAa,IAAI,YAAY;GACnE;GAGA,MAAM,QAAQ,mBAAmB,UAAU,QAAQ,QAAQ,QAAQ;GACnE,MAAM,UAAU,KAAK,QAAQ,UAAU,GAAG,KAAK;GAK/C,MAAM,cAAc,QAAQ,QAAQ,QAAQ,WAAW;EACzD;EAKA,SAAS,oBAAoB,IAAI,MAAM,IACnC,OAAO,SAAuB,aAAqB;GAIjD,MAAM,gBAAgB,sBAAsB,UAAU,MAAM;GAC5D,MAAM,aAAa,KAAK,UAAU,SAAS,qBAAqB;GAChE,MAAM,UAAU,YAAY,aAAa;GAGzC,MAAM,kBADU,WAAW,QAAQ,QAAQ,QACV,CAAC,UAAU,GAAG,KAAK,UAAU,OAAO,CAAC;EACxE,IACA,KAAA;EAEJ,WAAW,aAAa,qBACnB,YAA8B;GAC7B,MAAM,UAAU,QAAQ,OAAO,QAAQ;IACrC,QAAQ,MAAM,wCAAwC,GAAG;GAC3D,CAAC;GACD,gBAAgB,KAAK,OAAO;EAC9B,IACA,KAAA;CACN;AACF;;AAKA,SAAgB,mBACd,UACA,QACA,QACA,WAAW,MACX,kBAAkB,OACV;CAKR,MAAM,sBAAsB;CAC5B,MAAM,cAAc,eAAe,QAAQ;CAC3C,MAAM,aAAa,eAAe,QAAQ;CAC1C,MAAM,oBAAoB,eAAe,QAAQ;CASjD,IAAI;CACJ,IAAI,cAAc,mBAChB,cAAc;;;;;;;;;;;;;;;;MAgBT,IAAI,YACT,cAAc;;;;;;;;MAQT,IAAI,mBACT,cAAc;;;;;;;MAQd,cAAc;CAchB,OAAO;;;EARgB,kBAAkB,0CAA0C,GAWpE,2CARS,oBAAoB,uBAAuB,GAQO,WAAW,oBAAoB;EANlF,WAAW,yDAAyD,GAO5E;;;gCAGe,YAAY;;;;;;;;;;EAU1C,YAAY;WAnBS,WAAW,8CAA8C,cAoBxD;;;AAGxB;;AAGA,SAAgB,oBACd,QACA,YACQ;CACR,MAAM,eAAe,eAAe;CAEpC,MAAM,SAAkC;EACtC,QAAQ,aAAa;EACrB,OAAO;EACP,QAAQ,EAAE,KAAK,aAAa,UAAU;EAGtC,YAAY;GACV,cAAc,EAAE,SAAS,EAAE,iBAAiB,gBAAgB,EAAE;GAC9D,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,gBAAgB,EAAE;EACvE;EACA,GAAG,aAAa;EAChB,GAAG;CACL;CAIA,OAAO;;;;;mCAFY,KAAK,UAAU,QAAQ,MAAM,CAOf,EAAW;;AAE9C;;AAKA,IAAM,sBAAsB,IAAI,IAAiB,CAAC,eAAe,KAAK,CAAC;;;;;;;;;AAUvE,SAAgB,sBAAsB,UAAkB,QAA6B;CACnF,MAAM,mBAAmB,SAAS,KAAK,UAAU,OAAO,GAAG,KAAK,UAAU,OAAO,UAAU,CAAC;CAC5F,MAAM,WAAW,iBAAiB,WAAW,GAAG,IAAI,mBAAmB,OAAO;CAC9E,MAAM,YAAY;CAClB,MAAM,mBAAmB;CAGzB,OAAO;;;;;;;;;;;gCAFa,eAAe,QAAQ,YAaD;;;;wCAIJ,iBAAiB;;kBAEvC,iBAAiB;;;;sEAImC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCA8B1C,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqN/C;;AAUA,SAAgB,4BACd,UACA,QAC4B;CAC5B,IAAI,CAAC,oBAAoB,IAAI,MAAM,GAAG,OAAO;CAE7C,MAAM,WAAW,KAAK,UAAU,OAAO;CACvC,MAAM,YAAY,KAAK,UAAU,UAAU;CAG3C,OAAO;EACL,SAFc,WAAW,QAAQ,QAAQ;EAGzC,MAAM,CAAC,SAAS;EAChB,KAAK;CACP;AACF;;;;;;;AAQA,eAAe,cACb,UACA,QACA,YACe;CACf,MAAM,eAAe,eAAe;CACpC,MAAM,EACJ,aACA,OAAO,YACP,SACA,qBACE,MAAM,OAAO;CAEjB,MAAM,QAAQ,MAAM,YAAY;EAC9B,SAAS;EACT,QAAQ,aAAa;EAIrB,UAAU,EAAE,SAAS,KAAK,UAAU,UAAU,EAAE;EAChD,QAAQ,EAAE,KAAK,KAAK,UAAU,aAAa,SAAS,EAAE;EACtD,YAAY;GACV,cAAc,EAAE,SAAS,EAAE,iBAAiB,gBAAgB,EAAE;GAC9D,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,gBAAgB,EAAE;EACvE;EAIA,cAAc,EACZ,UAAU,CAAC,aAAa,EAC1B;EACA,GAAG,aAAa;EAChB,GAAG;CACL,CAAC;CAED,MAAM,QAAQ,KAAK;CACnB,MAAM,iBAAiB,KAAK;CAC5B,MAAM,WAAW,KAAK;CACtB,MAAM,MAAM,MAAM;AACpB;;AAGA,SAAS,kBAAkB,SAAiB,MAAgB,KAA4B;CACtF,OAAO,IAAI,SAAe,SAAS,WAAW;EAC5C,MAAM,QAAQ,SAAS,SAAS,MAAM,EAAE,IAAI,IAAI,QAAQ;GACtD,IAAI,KAAK,OAAO,GAAG;QACd,QAAQ;EACf,CAAC;EACD,MAAM,QAAQ,KAAK,QAAQ,MAAM;EACjC,MAAM,QAAQ,KAAK,QAAQ,MAAM;CACnC,CAAC;AACH;;;;;AAQA,SAAgB,gBAAgB,QAAmC;CACjE,OAAO,eAAe;AACxB"}
+{"version":3,"file":"nitro.js","names":[],"sources":["../../src/adapters/compress-module.ts","../../src/adapters/nitro.ts"],"sourcesContent":["// Compiles server/compress.ts into a standalone ESM module (_compress.mjs)\n// for self-hosted deployments. The adapter writes this to the build output\n// during buildOutput(). It's imported by the Nitro entry and preview server\n// at runtime.\n//\n// By compiling the actual TypeScript source rather than maintaining a\n// hand-written string template, any fix to server/compress.ts automatically\n// flows to the production module. See design/18-build-system.md (\"entry\n// modules are real TypeScript files, not codegen strings\").\n\nimport { transformWithOxc } from 'vite';\n// Vite's ?raw import embeds the file as a string at build time — works\n// in both dev (Vite resolves the TS source) and the published package\n// (the string is inlined into the compiled adapter entry).\nimport compressSource from '../server/compress.ts?raw';\n\n/**\n * Compile server/compress.ts into a standalone ESM module.\n *\n * Uses Vite's OXC transform to strip TypeScript types from the\n * embedded source. The result is written to `_compress.mjs` during\n * buildOutput.\n *\n * @internal Exported for testing.\n */\nexport async function generateCompressModule(): Promise<string> {\n  const result = await transformWithOxc(compressSource, 'compress.ts', {\n    lang: 'ts',\n  });\n\n  return (\n    '// Generated by @timber-js/app — compiled from server/compress.ts.\\n' +\n    '// Do not edit — this file is regenerated on each build.\\n' +\n    result.code\n  );\n}\n","// Nitro adapter — multi-platform deployment\n//\n// Covers everything except Cloudflare Workers: Node.js, Bun, Vercel,\n// Netlify, AWS Lambda, Deno Deploy, Azure Functions. Nitro handles\n// compression, graceful shutdown, static file serving, and platform quirks.\n// See design/11-platform.md and design/25-production-deployments.md.\n\nimport { writeFile, readFile } from 'node:fs/promises';\nimport { execFile } from 'node:child_process';\nimport { join, relative } from 'node:path';\nimport type { TimberPlatformAdapter, TimberConfig } from './types';\nimport { generateCompressModule } from './compress-module.js';\nimport { IMMUTABLE_CACHE } from './shared.js';\nimport { runSharedBuildSteps } from './build-output-helper.js';\n\n// ─── Presets ─────────────────────────────────────────────────────────────────\n\n/**\n * Supported Nitro deployment presets.\n *\n * Each preset maps to a Nitro deployment target. The adapter generates\n * the appropriate configuration and entry point for the selected platform.\n */\nexport type NitroPreset =\n  | 'vercel'\n  | 'vercel-edge'\n  | 'netlify'\n  | 'netlify-edge'\n  | 'aws-lambda'\n  | 'deno-deploy'\n  | 'azure-functions'\n  | 'node-server'\n  | 'bun';\n\n/** Preset-specific Nitro configuration. */\ninterface PresetConfig {\n  /** Nitro preset name passed to the Nitro build. */\n  nitroPreset: string;\n  /** Output directory name within the build dir. */\n  outputDir: string;\n  /** Whether the runtime supports waitUntil. */\n  supportsWaitUntil: boolean;\n  /** Whether the runtime supports application-level 103 Early Hints. */\n  supportsEarlyHints: boolean;\n  /** Value for TIMBER_RUNTIME env var. See design/25-production-deployments.md. */\n  runtimeName: string;\n  /** Additional nitro.config fields for this preset. */\n  extraConfig?: Record<string, unknown>;\n}\n\nconst PRESET_CONFIGS: Record<NitroPreset, PresetConfig> = {\n  'vercel': {\n    nitroPreset: 'vercel',\n    outputDir: '.vercel/output',\n    supportsWaitUntil: true,\n    supportsEarlyHints: false,\n    runtimeName: 'vercel',\n    extraConfig: { vercel: { functions: { maxDuration: 30 } } },\n  },\n  'vercel-edge': {\n    nitroPreset: 'vercel-edge',\n    outputDir: '.vercel/output',\n    supportsWaitUntil: true,\n    supportsEarlyHints: false,\n    runtimeName: 'vercel-edge',\n  },\n  'netlify': {\n    nitroPreset: 'netlify',\n    outputDir: '.netlify/functions-internal',\n    supportsWaitUntil: false,\n    supportsEarlyHints: false,\n    runtimeName: 'netlify',\n  },\n  'netlify-edge': {\n    nitroPreset: 'netlify-edge',\n    outputDir: '.netlify/edge-functions',\n    supportsWaitUntil: true,\n    supportsEarlyHints: false,\n    runtimeName: 'netlify-edge',\n  },\n  'aws-lambda': {\n    nitroPreset: 'aws-lambda',\n    outputDir: '.output',\n    supportsWaitUntil: false,\n    supportsEarlyHints: false,\n    runtimeName: 'aws-lambda',\n  },\n  'deno-deploy': {\n    nitroPreset: 'deno-deploy',\n    outputDir: '.output',\n    supportsWaitUntil: true,\n    supportsEarlyHints: false,\n    runtimeName: 'deno-deploy',\n  },\n  'azure-functions': {\n    nitroPreset: 'azure-functions',\n    outputDir: '.output',\n    supportsWaitUntil: false,\n    supportsEarlyHints: false,\n    runtimeName: 'azure-functions',\n  },\n  'node-server': {\n    nitroPreset: 'node-server',\n    outputDir: '.output',\n    supportsWaitUntil: true,\n    // Disabled by default: most node-server deployments sit behind a\n    // reverse proxy (nginx, caddy, traefik) that doesn't support 103\n    // Early Hints over HTTP/1.1. Sending 103 causes nginx to intermittently\n    // treat the response as an error and retry after proxy_connect_timeout\n    // (~5s stalls on ~23% of requests). Link headers on the 200 response\n    // are the safe fallback — Cloudflare and other CDNs convert them to\n    // 103 automatically at the edge (over HTTP/2+ to the browser).\n    supportsEarlyHints: false,\n    runtimeName: 'node-server',\n  },\n  'bun': {\n    nitroPreset: 'bun',\n    outputDir: '.output',\n    supportsWaitUntil: true,\n    // Disabled for same reason as node-server — reverse proxies choke on 103.\n    // Link headers on the 200 response are converted to 103 by CDNs.\n    supportsEarlyHints: false,\n    runtimeName: 'bun',\n  },\n};\n\n// ─── Options ─────────────────────────────────────────────────────────────────\n\n/** Options for the Nitro adapter. */\nexport interface NitroAdapterOptions {\n  /**\n   * Deployment preset. Determines the target platform.\n   * @default 'node-server'\n   */\n  preset?: NitroPreset;\n\n  /**\n   * Enable application-level gzip compression for HTML and RSC responses.\n   *\n   * When `true` (default), the origin compresses responses using the Web\n   * `CompressionStream` API. This is useful for self-hosted deployments\n   * where no reverse proxy or CDN handles compression.\n   *\n   * Set to `false` when deploying behind a reverse proxy (nginx, caddy)\n   * or CDN (Cloudflare, Fastly, Vercel) that compresses at the edge.\n   * Disabling origin compression saves CPU on the Node.js event loop —\n   * compressing 1MB+ streaming HTML responses takes 10-15ms of main\n   * thread time per request, directly reducing throughput under load.\n   *\n   * @default true\n   */\n  compress?: boolean;\n\n  /**\n   * Additional Nitro configuration to merge into the generated config.\n   * Overrides default values for the selected preset.\n   */\n  nitroConfig?: Record<string, unknown>;\n}\n\n// ─── Adapter ─────────────────────────────────────────────────────────────────\n\n/**\n * Create a Nitro-based adapter for multi-platform deployment.\n *\n * Nitro abstracts deployment targets — the same timber.js app can deploy\n * to Vercel, Netlify, AWS, Deno Deploy, or Azure by changing the preset.\n *\n * @example\n * ```ts\n * import { nitro } from '@timber-js/app/adapters/nitro'\n *\n * export default {\n *   output: 'server',\n *   adapter: nitro({ preset: 'vercel' }),\n * }\n * ```\n */\nexport function nitro(options: NitroAdapterOptions = {}): TimberPlatformAdapter {\n  const preset = options.preset ?? 'node-server';\n  const compress = options.compress ?? true;\n  const presetConfig = PRESET_CONFIGS[preset];\n  const pendingPromises: Promise<unknown>[] = [];\n\n  return {\n    name: `nitro-${preset}`,\n\n    async buildOutput(config: TimberConfig, buildDir: string) {\n      const outDir = join(buildDir, 'nitro');\n\n      // Steps 1–5: shared across all adapters (mkdir, copy client/rsc/ssr,\n      // write _headers, write manifest-init).\n      await runSharedBuildSteps({\n        config,\n        buildDir,\n        outDir,\n        publicDirName: 'public',\n      });\n\n      // Write the compression helper module for runtime use.\n      // See design/25-production-deployments.md — self-hosted deployments\n      // need application-level compression (Cloudflare handles it at the edge).\n      await writeFile(join(outDir, '_compress.mjs'), await generateCompressModule());\n\n      // Prepend the manifest assignment directly into the RSC entry so\n      // globalThis.__TIMBER_BUILD_MANIFEST__ is set before any module reads it.\n      // This must be top-level code, not an import, because rollup tree-shakes\n      // side-effect-only globalThis assignments from imported modules.\n      if (config.manifestInit) {\n        const rscEntry = join(outDir, 'rsc', 'index.js');\n        const rscContent = await readFile(rscEntry, 'utf-8');\n        await writeFile(rscEntry, `${config.manifestInit}\\n${rscContent}`);\n      }\n\n      // Generate the Nitro entry point (imports from ./rsc/ within nitro dir)\n      const entry = generateNitroEntry(buildDir, outDir, preset, compress);\n      await writeFile(join(outDir, 'entry.ts'), entry);\n\n      // Run the Nitro build to produce a production-ready server bundle.\n      // The output goes to dist/nitro/.output/server/index.mjs (for node-server preset).\n      // Config is passed programmatically — no nitro.config.ts file needed.\n      await runNitroBuild(outDir, preset, options.nitroConfig);\n    },\n\n    // Only presets that produce a locally-runnable server get preview().\n    // Serverless presets (vercel, netlify, aws-lambda, etc.) have no\n    // local runtime — Vite's built-in preview is the fallback.\n    preview: LOCALLY_PREVIEWABLE.has(preset)\n      ? async (_config: TimberConfig, buildDir: string) => {\n          // Generate a standalone preview server that uses Node's built-in\n          // HTTP server. The Nitro entry.ts can't be run directly because\n          // it imports h3 (a Nitro dependency not available at runtime).\n          const previewScript = generatePreviewScript(buildDir, preset);\n          const scriptPath = join(buildDir, 'nitro', '_preview-server.mjs');\n          await writeFile(scriptPath, previewScript);\n\n          const command = preset === 'bun' ? 'bun' : 'node';\n          await spawnNitroPreview(command, [scriptPath], join(buildDir, 'nitro'));\n        }\n      : undefined,\n\n    waitUntil: presetConfig.supportsWaitUntil\n      ? (promise: Promise<unknown>) => {\n          const tracked = promise.catch((err) => {\n            console.error('[timber] waitUntil promise rejected:', err);\n          });\n          pendingPromises.push(tracked);\n        }\n      : undefined,\n  };\n}\n\n// ─── Entry Generation ────────────────────────────────────────────────────────\n\n/** @internal Exported for testing. */\nexport function generateNitroEntry(\n  buildDir: string,\n  outDir: string,\n  preset: NitroPreset,\n  compress = true\n): string {\n  // The RSC entry is the main request handler — it exports the fetch handler as default.\n  // rsc/ is copied into the nitro dir so the import is local.\n  // The manifest init is prepended to rsc/index.js before the nitro build,\n  // so globalThis.__TIMBER_BUILD_MANIFEST__ is set before any code reads it.\n  const serverEntryRelative = './rsc/index.js';\n  const runtimeName = PRESET_CONFIGS[preset].runtimeName;\n  const earlyHints = PRESET_CONFIGS[preset].supportsEarlyHints;\n  const supportsWaitUntil = PRESET_CONFIGS[preset].supportsWaitUntil;\n\n  // On node-server and bun, wrap the handler with ALS so the pipeline\n  // can send 103 Early Hints via res.writeEarlyHints(). Other presets\n  // either don't support 103 or handle it at the CDN level.\n  //\n  // For presets that support waitUntil, bridge h3's event.waitUntil()\n  // to timber's waitUntil() primitive via the ALS bridge.\n  // See design/11-platform.md §\"waitUntil()\".\n  let handlerCall: string;\n  if (earlyHints && supportsWaitUntil) {\n    handlerCall = `  const nodeRes = event.node?.res\n  const earlyHintsSender = (typeof nodeRes?.writeEarlyHints === 'function')\n    ? (links) => { try { nodeRes.writeEarlyHints({ link: links }) } catch {} }\n    : undefined\n\n  const waitUntilFn = (typeof event.waitUntil === 'function')\n    ? (p) => event.waitUntil(p)\n    : undefined\n\n  const callHandler = () => handler(webRequest)\n  let wrappedHandler = earlyHintsSender\n    ? () => runWithEarlyHintsSender(earlyHintsSender, callHandler)\n    : callHandler\n  const webResponse = waitUntilFn\n    ? await runWithWaitUntil(waitUntilFn, wrappedHandler)\n    : await wrappedHandler()`;\n  } else if (earlyHints) {\n    handlerCall = `  const nodeRes = event.node?.res\n  const earlyHintsSender = (typeof nodeRes?.writeEarlyHints === 'function')\n    ? (links) => { try { nodeRes.writeEarlyHints({ link: links }) } catch {} }\n    : undefined\n\n  const webResponse = earlyHintsSender\n    ? await runWithEarlyHintsSender(earlyHintsSender, () => handler(webRequest))\n    : await handler(webRequest)`;\n  } else if (supportsWaitUntil) {\n    handlerCall = `  const waitUntilFn = (typeof event.waitUntil === 'function')\n    ? (p) => event.waitUntil(p)\n    : undefined\n\n  const webResponse = waitUntilFn\n    ? await runWithWaitUntil(waitUntilFn, () => handler(webRequest))\n    : await handler(webRequest)`;\n  } else {\n    handlerCall = `  const webResponse = await handler(webRequest)`;\n  }\n\n  // Import runWithWaitUntil only when the preset supports it.\n  const waitUntilImport = supportsWaitUntil ? ', runWithWaitUntil' : '';\n\n  const compressImport = compress ? \"import { compressResponse } from './_compress.mjs'\\n\" : '';\n  const compressCall = compress ? 'compressResponse(webRequest, webResponse)' : 'webResponse';\n\n  return `// Generated by @timber-js/app/adapters/nitro\n// Do not edit — this file is regenerated on each build.\n\nimport handler, { runWithEarlyHintsSender${waitUntilImport} } from '${serverEntryRelative}'\n${compressImport}\n// Set TIMBER_RUNTIME for instrumentation.ts conditional SDK initialization.\n// See design/25-production-deployments.md §\"TIMBER_RUNTIME\".\nprocess.env.TIMBER_RUNTIME = '${runtimeName}'\n\n// Nitro's index.mjs wraps this import with defineLazyEventHandler, which\n// already handles the event handler protocol. We export a plain async\n// function — no defineEventHandler wrapper needed.\n// Nitro bundles h3 into its internal _libs/ directory but doesn't make\n// it available as a bare specifier in the output's node_modules.\nexport default async function timberHandler(event) {\n  // h3 v2: event.req is the Web Request\n  const webRequest = event.req\n${handlerCall}\n  return ${compressCall}\n}\n`;\n}\n\n// ─── Preview ─────────────────────────────────────────────────────────────────\n\n/** Presets that produce a locally-runnable server entry. */\nconst LOCALLY_PREVIEWABLE = new Set<NitroPreset>(['node-server', 'bun']);\n\n/**\n * Generate a standalone preview server script that uses Node's built-in\n * HTTP server. This bypasses Nitro entirely — the Nitro entry.ts imports\n * h3 which isn't available outside a Nitro build. For local preview we\n * just need to serve static files and route requests to the RSC handler.\n *\n * @internal Exported for testing.\n */\nexport function generatePreviewScript(buildDir: string, preset: NitroPreset): string {\n  const rscEntryRelative = relative(join(buildDir, 'nitro'), join(buildDir, 'rsc', 'index.js'));\n  const rscEntry = rscEntryRelative.startsWith('.') ? rscEntryRelative : './' + rscEntryRelative;\n  const publicDir = './public';\n  const manifestInitPath = './_timber-manifest-init.js';\n  const runtimeName = PRESET_CONFIGS[preset].runtimeName;\n\n  return `// Generated by @timber-js/app — standalone preview server.\n// Uses Node's built-in HTTP server to serve static assets and route\n// dynamic requests through the RSC handler. No Nitro/h3 dependency.\n\nimport { createServer } from 'node:http';\nimport { readFile, stat } from 'node:fs/promises';\nimport { join, extname } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport { existsSync } from 'node:fs';\n\n// Set runtime before importing the handler.\nprocess.env.TIMBER_RUNTIME = '${runtimeName}';\n\n// Load the build manifest if it exists.\nconst __dirname = fileURLToPath(new URL('.', import.meta.url));\nconst manifestPath = join(__dirname, '${manifestInitPath}');\nif (existsSync(manifestPath)) {\n  await import('${manifestInitPath}');\n}\n\n// Import the RSC handler (default export is the fetch-like handler).\nconst { default: handler, runWithEarlyHintsSender } = await import('${rscEntry}');\n\n// Import compression helper for self-hosted response compression.\nconst { compressResponse } = await import('./_compress.mjs');\n\nconst MIME_TYPES = {\n  '.html': 'text/html',\n  '.js': 'application/javascript',\n  '.mjs': 'application/javascript',\n  '.css': 'text/css',\n  '.json': 'application/json',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.gif': 'image/gif',\n  '.svg': 'image/svg+xml',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.ttf': 'font/ttf',\n  '.otf': 'font/otf',\n  '.webp': 'image/webp',\n  '.avif': 'image/avif',\n  '.webm': 'video/webm',\n  '.mp4': 'video/mp4',\n  '.txt': 'text/plain',\n  '.xml': 'application/xml',\n  '.wasm': 'application/wasm',\n};\n\nconst publicDir = join(__dirname, '${publicDir}');\n\n// Port resolution (TIM-842):\n//   - Default to 3000\n//   - If PORT env var is set, honor it strictly (fail loudly on conflict)\n//   - Otherwise auto-bump from 3000 until a free port is found\n// Mirrors the dev server behavior so timber dev/preview/production all\n// behave the same way around port selection.\nconst envPort = process.env.PORT ? parseInt(process.env.PORT, 10) : null;\nconst portIsExplicit = envPort != null && Number.isFinite(envPort) && envPort > 0;\nconst startPort = portIsExplicit ? envPort : 3000;\nconst host = process.env.HOST || process.env.HOSTNAME || 'localhost';\n\n// Set after listenWithBump() resolves so request handlers can build\n// absolute URLs from the actual bound port (which may differ from\n// startPort after an auto-bump).\nlet boundPort = startPort;\n\nconst server = createServer(async (req, res) => {\n  // Scheme from the socket's TLS state — a hardcoded http:// breaks CSRF\n  // origin comparison and absolute-URL construction when TLS is terminated\n  // at this server (TIM-1073; mirrors the dev-server fix in TIM-1067).\n  // X-Forwarded-Proto is intentionally not consulted here: on a direct\n  // connection it would be attacker-controlled. The CSRF layer honors it\n  // separately for reverse-proxy deployments.\n  const scheme = req.socket?.encrypted ? 'https' : 'http';\n  const url = new URL(req.url || '/', \\`\\${scheme}://\\${host}:\\${boundPort}\\`);\n\n  // Try serving static files from the public directory first.\n  const filePath = join(publicDir, url.pathname);\n  // Prevent path traversal.\n  if (filePath.startsWith(publicDir)) {\n    try {\n      const fileStat = await stat(filePath);\n      if (fileStat.isFile()) {\n        const ext = extname(filePath);\n        const contentType = MIME_TYPES[ext] || 'application/octet-stream';\n        const body = await readFile(filePath);\n        // Hashed assets get immutable cache, others get short cache.\n        const isImmutable =\n          url.pathname.startsWith('/assets/') || url.pathname.startsWith('/_timber/fonts/');\n        const cacheControl = isImmutable\n          ? 'public, max-age=31536000, immutable'\n          : 'public, max-age=3600, must-revalidate';\n        res.writeHead(200, {\n          'Content-Type': contentType,\n          'Content-Length': body.length,\n          'Cache-Control': cacheControl,\n        });\n        res.end(body);\n        return;\n      }\n    } catch {\n      // File not found — fall through to the RSC handler.\n    }\n  }\n\n  // Convert Node request to Web Request.\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(req.headers)) {\n    if (value) {\n      if (Array.isArray(value)) {\n        for (const v of value) headers.append(key, v);\n      } else {\n        headers.set(key, value);\n      }\n    }\n  }\n\n  let body = undefined;\n  if (req.method !== 'GET' && req.method !== 'HEAD') {\n    body = await new Promise((resolve) => {\n      const chunks = [];\n      req.on('data', (chunk) => chunks.push(chunk));\n      req.on('end', () => resolve(Buffer.concat(chunks)));\n    });\n  }\n\n  const webRequest = new Request(url.href, {\n    method: req.method,\n    headers,\n    body,\n    duplex: body ? 'half' : undefined,\n  });\n\n  try {\n    // Support 103 Early Hints when available.\n    const earlyHintsSender = (typeof res.writeEarlyHints === 'function')\n      ? (links) => { try { res.writeEarlyHints({ link: links }); } catch {} }\n      : undefined;\n\n    const rawResponse = earlyHintsSender && runWithEarlyHintsSender\n      ? await runWithEarlyHintsSender(earlyHintsSender, () => handler(webRequest))\n      : await handler(webRequest);\n\n    // Compress the response for self-hosted deployments.\n    const webResponse = compressResponse(webRequest, rawResponse);\n\n    // Write the response back to the Node response.\n    //\n    // Set-Cookie needs special handling: Headers.entries() joins multiple\n    // Set-Cookie values with \", \" into a single entry, but each cookie must\n    // be its own header per RFC 6265 §4.1. Object.fromEntries() would then\n    // collapse them into one malformed Set-Cookie header that browsers reject\n    // (or only honor partially). Use getSetCookie() to preserve individual\n    // values, and pass them as an array — Node's writeHead accepts\n    // Record<string, string | string[]> and emits one header per array entry.\n    //\n    // Without this, EVERY cookie set by the framework on Node—/Nitro deployments\n    // is silently dropped: defineCookie().setCookie() in actions, middleware\n    // cookie writes, the framework's own session cookies, all of it. See\n    // LOCAL-741.\n    const responseHeaders = {};\n    webResponse.headers.forEach((value, key) => {\n      if (key.toLowerCase() !== 'set-cookie') {\n        responseHeaders[key] = value;\n      }\n    });\n    const setCookies = webResponse.headers.getSetCookie();\n    if (setCookies.length > 0) {\n      responseHeaders['set-cookie'] = setCookies;\n    }\n    res.writeHead(webResponse.status, responseHeaders);\n\n    if (webResponse.body) {\n      const reader = webResponse.body.getReader();\n\n      // Cancel the reader when the client disconnects. This causes any\n      // pending reader.read() to reject, breaking the pump loop. Critical\n      // for SSE and other infinite streams — without this, disconnected\n      // clients leak readers.\n      let clientDisconnected = false;\n      const onClose = () => {\n        clientDisconnected = true;\n        reader.cancel('Client disconnected').catch(() => {});\n      };\n      res.on('close', onClose);\n\n      try {\n        while (true) {\n          const { done, value } = await reader.read();\n          if (done) break;\n          res.write(value);\n        }\n      } catch (err) {\n        // reader.cancel() from the close handler causes read() to reject.\n        // This is expected on client disconnect — not an error.\n        if (!clientDisconnected) {\n          throw err;\n        }\n      } finally {\n        res.off('close', onClose);\n        reader.releaseLock();\n        if (!res.writableEnded) {\n          res.end();\n        }\n      }\n    } else {\n      res.end();\n    }\n  } catch (err) {\n    console.error('[timber preview] Request error:', err);\n    if (!res.headersSent) {\n      res.writeHead(500, { 'Content-Type': 'text/plain' });\n    }\n    res.end('Internal Server Error');\n  }\n});\n\nfunction listenWithBump(port, attempt = 0) {\n  return new Promise((resolveListen, rejectListen) => {\n    const onError = (err) => {\n      server.removeListener('listening', onListening);\n      if (err && err.code === 'EADDRINUSE' && !portIsExplicit && attempt < 100) {\n        if (attempt === 0) {\n          console.log(\\`  [timber] Port \\${port} in use, trying \\${port + 1}...\\`);\n        }\n        listenWithBump(port + 1, attempt + 1).then(resolveListen, rejectListen);\n        return;\n      }\n      rejectListen(err);\n    };\n    const onListening = () => {\n      server.removeListener('error', onError);\n      resolveListen(port);\n    };\n    server.once('error', onError);\n    server.once('listening', onListening);\n    server.listen(port, host);\n  });\n}\n\ntry {\n  boundPort = await listenWithBump(startPort);\n  if (boundPort !== startPort) {\n    console.log();\n    console.log(\\`  [timber] Port \\${startPort} in use, using \\${boundPort}\\`);\n  }\n  console.log();\n  console.log('  ⚡ timber preview server running at:');\n  console.log();\n  console.log(\\`    ➜  http://\\${host}:\\${boundPort}\\`);\n  console.log();\n} catch (err) {\n  if (err && err.code === 'EADDRINUSE') {\n    console.error(\\`[timber] Port \\${startPort} is already in use. \\` +\n      'Set PORT to a free port, or unset PORT to auto-pick.');\n  } else {\n    console.error('[timber] Failed to start preview server:', err);\n  }\n  process.exit(1);\n}\n`;\n}\n\n/** Command descriptor for Nitro preview — testable without spawning. */\nexport interface NitroPreviewCommand {\n  command: string;\n  args: string[];\n  cwd: string;\n}\n\n/** @internal Exported for testing. */\nexport function generateNitroPreviewCommand(\n  buildDir: string,\n  preset: NitroPreset\n): NitroPreviewCommand | null {\n  if (!LOCALLY_PREVIEWABLE.has(preset)) return null;\n\n  const nitroDir = join(buildDir, 'nitro');\n  const entryPath = join(nitroDir, 'entry.ts');\n\n  const command = preset === 'bun' ? 'bun' : 'node';\n  return {\n    command,\n    args: [entryPath],\n    cwd: nitroDir,\n  };\n}\n\n/**\n * Run the Nitro production build using the programmatic API.\n * Uses dynamic import so nitro is only loaded at build time.\n * Externalizes the timber RSC/SSR output — those files are pre-built\n * by timber and have internal references that nitro's bundler can't follow.\n */\nasync function runNitroBuild(\n  nitroDir: string,\n  preset: NitroPreset,\n  userConfig?: Record<string, unknown>\n): Promise<void> {\n  const presetConfig = PRESET_CONFIGS[preset];\n  const {\n    createNitro,\n    build: nitroBuild,\n    prepare,\n    copyPublicAssets,\n  } = await import('nitro/builder');\n\n  const nitro = await createNitro({\n    rootDir: nitroDir,\n    preset: presetConfig.nitroPreset,\n    // Use renderer.entry so Nitro wraps our handler with its server runtime\n    // (HTTP server, static file serving, graceful shutdown, etc.).\n    // Using `entry` directly would bypass the Nitro server runtime.\n    renderer: { handler: join(nitroDir, 'entry.ts') },\n    output: { dir: join(nitroDir, presetConfig.outputDir) },\n    routeRules: {\n      '/assets/**': { headers: { 'Cache-Control': IMMUTABLE_CACHE } },\n      '/_timber/fonts/**': { headers: { 'Cache-Control': IMMUTABLE_CACHE } },\n    },\n    // Don't bundle the timber RSC/SSR build output — it has its own\n    // internal file references that nitro's bundler can't follow.\n    // Mark them as external so rollup leaves the imports as-is.\n    rollupConfig: {\n      external: [/\\.\\.\\/rsc\\//],\n    },\n    ...presetConfig.extraConfig,\n    ...userConfig,\n  });\n\n  await prepare(nitro);\n  await copyPublicAssets(nitro);\n  await nitroBuild(nitro);\n  await nitro.close();\n}\n\n/** Spawn a Nitro preview process and pipe stdio. */\nfunction spawnNitroPreview(command: string, args: string[], cwd: string): Promise<void> {\n  return new Promise<void>((resolve, reject) => {\n    const child = execFile(command, args, { cwd }, (err) => {\n      if (err) reject(err);\n      else resolve();\n    });\n    child.stdout?.pipe(process.stdout);\n    child.stderr?.pipe(process.stderr);\n  });\n}\n\n// ─── Helpers ─────────────────────────────────────────────────────────────────\n\n/**\n * Get the preset configuration for a given preset name.\n * @internal Exported for testing.\n */\nexport function getPresetConfig(preset: NitroPreset): PresetConfig {\n  return PRESET_CONFIGS[preset];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAyBA,eAAsB,yBAA0C;CAK9D,OACE,oIAEA,MAPmB,iBAAiB,kBAAgB,eAAe,EACnE,MAAM,KACR,CAAC,GAKQ;AAEX;;;ACeA,IAAM,iBAAoD;CACxD,UAAU;EACR,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;EACb,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,GAAG,EAAE,EAAE;CAC5D;CACA,eAAe;EACb,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,WAAW;EACT,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,gBAAgB;EACd,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,cAAc;EACZ,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,eAAe;EACb,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,mBAAmB;EACjB,aAAa;EACb,WAAW;EACX,mBAAmB;EACnB,oBAAoB;EACpB,aAAa;CACf;CACA,eAAe;EACb,aAAa;EACb,WAAW;EACX,mBAAmB;EAQnB,oBAAoB;EACpB,aAAa;CACf;CACA,OAAO;EACL,aAAa;EACb,WAAW;EACX,mBAAmB;EAGnB,oBAAoB;EACpB,aAAa;CACf;AACF;;;;;;;;;;;;;;;;;AAsDA,SAAgB,MAAM,UAA+B,CAAC,GAA0B;CAC9E,MAAM,SAAS,QAAQ,UAAU;CACjC,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,eAAe,eAAe;CACpC,MAAM,kBAAsC,CAAC;CAE7C,OAAO;EACL,MAAM,SAAS;EAEf,MAAM,YAAY,QAAsB,UAAkB;GACxD,MAAM,SAAS,KAAK,UAAU,OAAO;GAIrC,MAAM,oBAAoB;IACxB;IACA;IACA;IACA,eAAe;GACjB,CAAC;GAKD,MAAM,UAAU,KAAK,QAAQ,eAAe,GAAG,MAAM,uBAAuB,CAAC;GAM7E,IAAI,OAAO,cAAc;IACvB,MAAM,WAAW,KAAK,QAAQ,OAAO,UAAU;IAC/C,MAAM,aAAa,MAAM,SAAS,UAAU,OAAO;IACnD,MAAM,UAAU,UAAU,GAAG,OAAO,aAAa,IAAI,YAAY;GACnE;GAGA,MAAM,QAAQ,mBAAmB,UAAU,QAAQ,QAAQ,QAAQ;GACnE,MAAM,UAAU,KAAK,QAAQ,UAAU,GAAG,KAAK;GAK/C,MAAM,cAAc,QAAQ,QAAQ,QAAQ,WAAW;EACzD;EAKA,SAAS,oBAAoB,IAAI,MAAM,IACnC,OAAO,SAAuB,aAAqB;GAIjD,MAAM,gBAAgB,sBAAsB,UAAU,MAAM;GAC5D,MAAM,aAAa,KAAK,UAAU,SAAS,qBAAqB;GAChE,MAAM,UAAU,YAAY,aAAa;GAGzC,MAAM,kBADU,WAAW,QAAQ,QAAQ,QACV,CAAC,UAAU,GAAG,KAAK,UAAU,OAAO,CAAC;EACxE,IACA,KAAA;EAEJ,WAAW,aAAa,qBACnB,YAA8B;GAC7B,MAAM,UAAU,QAAQ,OAAO,QAAQ;IACrC,QAAQ,MAAM,wCAAwC,GAAG;GAC3D,CAAC;GACD,gBAAgB,KAAK,OAAO;EAC9B,IACA,KAAA;CACN;AACF;;AAKA,SAAgB,mBACd,UACA,QACA,QACA,WAAW,MACH;CAKR,MAAM,sBAAsB;CAC5B,MAAM,cAAc,eAAe,QAAQ;CAC3C,MAAM,aAAa,eAAe,QAAQ;CAC1C,MAAM,oBAAoB,eAAe,QAAQ;CASjD,IAAI;CACJ,IAAI,cAAc,mBAChB,cAAc;;;;;;;;;;;;;;;;MAgBT,IAAI,YACT,cAAc;;;;;;;;MAQT,IAAI,mBACT,cAAc;;;;;;;MAQd,cAAc;CAShB,OAAO;;;2CALiB,oBAAoB,uBAAuB,GAQV,WAAW,oBAAoB;EANjE,WAAW,yDAAyD,GAO5E;;;gCAGe,YAAY;;;;;;;;;;EAU1C,YAAY;WAnBS,WAAW,8CAA8C,cAoBxD;;;AAGxB;;AAKA,IAAM,sBAAsB,IAAI,IAAiB,CAAC,eAAe,KAAK,CAAC;;;;;;;;;AAUvE,SAAgB,sBAAsB,UAAkB,QAA6B;CACnF,MAAM,mBAAmB,SAAS,KAAK,UAAU,OAAO,GAAG,KAAK,UAAU,OAAO,UAAU,CAAC;CAC5F,MAAM,WAAW,iBAAiB,WAAW,GAAG,IAAI,mBAAmB,OAAO;CAC9E,MAAM,YAAY;CAClB,MAAM,mBAAmB;CAGzB,OAAO;;;;;;;;;;;gCAFa,eAAe,QAAQ,YAaD;;;;wCAIJ,iBAAiB;;kBAEvC,iBAAiB;;;;sEAImC,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qCA8B1C,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqN/C;;AAUA,SAAgB,4BACd,UACA,QAC4B;CAC5B,IAAI,CAAC,oBAAoB,IAAI,MAAM,GAAG,OAAO;CAE7C,MAAM,WAAW,KAAK,UAAU,OAAO;CACvC,MAAM,YAAY,KAAK,UAAU,UAAU;CAG3C,OAAO;EACL,SAFc,WAAW,QAAQ,QAAQ;EAGzC,MAAM,CAAC,SAAS;EAChB,KAAK;CACP;AACF;;;;;;;AAQA,eAAe,cACb,UACA,QACA,YACe;CACf,MAAM,eAAe,eAAe;CACpC,MAAM,EACJ,aACA,OAAO,YACP,SACA,qBACE,MAAM,OAAO;CAEjB,MAAM,QAAQ,MAAM,YAAY;EAC9B,SAAS;EACT,QAAQ,aAAa;EAIrB,UAAU,EAAE,SAAS,KAAK,UAAU,UAAU,EAAE;EAChD,QAAQ,EAAE,KAAK,KAAK,UAAU,aAAa,SAAS,EAAE;EACtD,YAAY;GACV,cAAc,EAAE,SAAS,EAAE,iBAAiB,gBAAgB,EAAE;GAC9D,qBAAqB,EAAE,SAAS,EAAE,iBAAiB,gBAAgB,EAAE;EACvE;EAIA,cAAc,EACZ,UAAU,CAAC,aAAa,EAC1B;EACA,GAAG,aAAa;EAChB,GAAG;CACL,CAAC;CAED,MAAM,QAAQ,KAAK;CACnB,MAAM,iBAAiB,KAAK;CAC5B,MAAM,WAAW,KAAK;CACtB,MAAM,MAAM,MAAM;AACpB;;AAGA,SAAS,kBAAkB,SAAiB,MAAgB,KAA4B;CACtF,OAAO,IAAI,SAAe,SAAS,WAAW;EAC5C,MAAM,QAAQ,SAAS,SAAS,MAAM,EAAE,IAAI,IAAI,QAAQ;GACtD,IAAI,KAAK,OAAO,GAAG;QACd,QAAQ;EACf,CAAC;EACD,MAAM,QAAQ,KAAK,QAAQ,MAAM;EACjC,MAAM,QAAQ,KAAK,QAAQ,MAAM;CACnC,CAAC;AACH;;;;;AAQA,SAAgB,gBAAgB,QAAmC;CACjE,OAAO,eAAe;AACxB"}

package/dist/cache/cache-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-api.d.ts","sourceRoot":"","sources":["../../src/cache/cache-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAI5C;;;;;;;;;;;;;;GAcG;AAEH,wBAAgB,KAAK,CAAC,EAAE,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,EAC/D,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,EACtB,QAAQ,CAAC,EAAE,MAAM,GAChB,EAAE,CAEJ;yBANe,KAAK;2BAgB8B;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC"}
+{"version":3,"file":"cache-api.d.ts","sourceRoot":"","sources":["../../src/cache/cache-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAK5C;;;;;;;;;;;;;;GAcG;AAEH,wBAAgB,KAAK,CAAC,EAAE,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,EAC/D,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC,EACtB,QAAQ,CAAC,EAAE,MAAM,GAChB,EAAE,CAMJ;yBAVe,KAAK;2BAoB8B;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC"}

package/dist/cache/index.d.ts

@@ -40,6 +40,7 @@ export declare class MemoryCacheHandler implements CacheHandler {
     private maxBytes;
     private maxEntryBytes;
     private currentBytes;
+    private readonly _trackBytes;
     constructor(opts?: MemoryCacheHandlerOptions);
     get(key: string): Promise<{
         value: unknown;
@@ -55,7 +56,7 @@ export declare class MemoryCacheHandler implements CacheHandler {
     }): Promise<void>;
     /** Number of entries currently in the cache. */
     get size(): number;
-    /** Estimated total byte size of all cached values. */
+    /** Estimated total byte size of all cached values. Only tracked when maxBytes or maxEntryBytes is configured; returns 0 otherwise. */
     get bytes(): number;
     /** Evict the oldest entry (front of Map). */
     private evictOldest;
@@ -64,5 +65,6 @@ export { RedisCacheHandler } from './redis-handler';
 export type { RedisClient } from './redis-handler';
 export { cache } from './cache-api';
 export { setCacheHandler, getCacheHandler } from './handler-store';
+export { setDefaultSingleflightTimeout } from './timber-cache';
 export { estimateByteSize } from './sizeof';
 //# sourceMappingURL=index.d.ts.map

package/dist/cache/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,UAAU,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAGD,MAAM,WAAW,YAAY,CAAC,EAAE,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC;IAC1C,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IAC1D;uFACmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oHAAoH;IACpH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kHAAkH;IAClH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,KAAK,CAGT;IACJ,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,YAAY,CAAK;gBAEb,IAAI,CAAC,EAAE,yBAAyB;IAOtC,GAAG,CAAC,GAAG,EAAE,MAAM;;;;IAYf,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE;IAwCtE,UAAU,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE;IAkBrD,gDAAgD;IAChD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,sDAAsD;IACtD,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,6CAA6C;IAC7C,OAAO,CAAC,WAAW;CAQpB;AAED,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACrE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvF,UAAU,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjE;AAGD,MAAM,WAAW,YAAY,CAAC,EAAE,SAAS,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG;IAC9D,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC;IAC1C,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC;IAC1D;uFACmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oHAAoH;IACpH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kHAAkH;IAClH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,KAAK,CAGT;IACJ,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAqB;IACrC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;gBAE1B,IAAI,CAAC,EAAE,yBAAyB;IAQtC,GAAG,CAAC,GAAG,EAAE,MAAM;;;;IAYf,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE;IAwCtE,UAAU,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE;IAkBrD,gDAAgD;IAChD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,sIAAsI;IACtI,IAAI,KAAK,IAAI,MAAM,CAElB;IAED,6CAA6C;IAC7C,OAAO,CAAC,WAAW;CAQpB;AAED,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAG/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC"}

package/dist/cache/index.js

@@ -1,7 +1,4 @@
-import { n as addSpanEventSync } from "../_chunks/tracing-M_zKubhk.js";
-import { d as logSwrRefetchFailed } from "../_chunks/logger-Dt-jQaBO.js";
-import { t as fnv1aHash } from "../_chunks/fast-hash-D6hIVt1Y.js";
-import { n as setCacheHandler, r as getWaitUntil, t as getCacheHandler } from "../_chunks/handler-store-BVDgyTh7.js";
+import { i as setDefaultSingleflightTimeout, n as getCacheHandler, r as setCacheHandler, t as cache } from "../_chunks/cache-api-Co-yI-gP.js";
 //#region src/cache/sizeof.ts
 /**
 * Lightweight byte-size estimation for cache entries.
@@ -76,14 +73,25 @@ var RedisCacheHandler = class {
 		const expiresAt = Date.now() + opts.ttl * 1e3;
 		const payload = JSON.stringify({
 			value,
-			expiresAt
+			expiresAt,
+			tags: opts.tags
 		});
 		const redisTtlSeconds = Math.max(opts.ttl * 2 + 60, 120);
 		await this.client.set(ck, payload, redisTtlSeconds);
-		for (const tag of opts.tags) await this.client.sadd(this.tagKey(tag), key);
+		for (const tag of opts.tags) {
+			await this.client.sadd(this.tagKey(tag), key);
+			if (await this.client.ttl(this.tagKey(tag)) < redisTtlSeconds) await this.client.expire(this.tagKey(tag), redisTtlSeconds);
+		}
 	}
 	async invalidate(opts) {
-		if (opts.key) await this.client.del(this.cacheKey(opts.key));
+		if (opts.key) {
+			const raw = await this.client.get(this.cacheKey(opts.key));
+			if (raw !== null) {
+				const entry = JSON.parse(raw);
+				if (entry.tags) await Promise.all(entry.tags.map((tag) => this.client.srem(this.tagKey(tag), opts.key)));
+			}
+			await this.client.del(this.cacheKey(opts.key));
+		}
 		if (opts.tag) {
 			const tk = this.tagKey(opts.tag);
 			const keys = await this.client.smembers(tk);
@@ -93,231 +101,6 @@ var RedisCacheHandler = class {
 	}
 };
 //#endregion
-//#region src/cache/stable-stringify.ts
-/**
-* Deterministic JSON serialization with sorted object keys.
-* Used for cache key generation — ensures { a: 1, b: 2 } and { b: 2, a: 1 }
-* produce the same string.
-*
-* Matches JSON.stringify semantics for toJSON: Date serializes to its ISO
-* string, URL to its href, and class instances with a custom toJSON use it.
-* Map and Set serialize their entries explicitly (insertion-order
-* independent). Values that would serialize lossily — functions, symbols,
-* and non-plain objects with no enumerable own state (RegExp, class
-* instances holding data behind getters or internal slots) — throw instead:
-* every such value would collapse to the same cache key, silently returning
-* one argument's cached data for another (TIM-1020).
-*/
-function stableStringify(value) {
-	if (value === null || value === void 0) return String(value);
-	const type = typeof value;
-	if (type === "function" || type === "symbol") throw new TypeError(`stableStringify: cannot serialize a ${type} into a stable cache key — all such values would collide. Provide an explicit \`key\` option to cache().`);
-	if (type !== "object") return JSON.stringify(value);
-	if (Array.isArray(value)) return "[" + value.map((item) => stableStringify(item)).join(",") + "]";
-	const withToJSON = value;
-	if (typeof withToJSON.toJSON === "function") {
-		const json = withToJSON.toJSON();
-		if (json !== value) return stableStringify(json);
-	}
-	if (value instanceof Map) return "Map(" + [...value.entries()].map(([k, v]) => stableStringify(k) + "=>" + stableStringify(v)).sort().join(",") + ")";
-	if (value instanceof Set) return "Set(" + [...value].map((member) => stableStringify(member)).sort().join(",") + ")";
-	const obj = value;
-	const keys = Object.keys(obj).sort();
-	const pairs = [];
-	for (const key of keys) {
-		if (obj[key] === void 0) continue;
-		if (key === "toJSON" && typeof obj[key] === "function") continue;
-		pairs.push(JSON.stringify(key) + ":" + stableStringify(obj[key]));
-	}
-	if (pairs.length === 0) {
-		const proto = Object.getPrototypeOf(value);
-		if (proto !== Object.prototype && proto !== null) {
-			const name = value.constructor?.name || "Object";
-			throw new TypeError(`stableStringify: ${name} instance has no serializable own state — all instances would share one cache key. Provide an explicit \`key\` option to cache(), or add a toJSON() method.`);
-		}
-	}
-	return "{" + pairs.join(",") + "}";
-}
-//#endregion
-//#region src/cache/singleflight.ts
-/**
-* Error thrown when a singleflight call exceeds `timeoutMs`.
-* Exported so callers can distinguish timeout from other errors.
-*/
-var SingleflightTimeoutError = class extends Error {
-	constructor(key, timeoutMs) {
-		super(`Singleflight timeout: key "${key}" exceeded ${timeoutMs}ms`);
-		this.name = "SingleflightTimeoutError";
-	}
-};
-function createSingleflight(opts) {
-	const inflight = /* @__PURE__ */ new Map();
-	const timeoutMs = opts?.timeoutMs;
-	return { do(key, fn) {
-		const existing = inflight.get(key);
-		if (existing) return existing;
-		let promise;
-		if (timeoutMs != null && timeoutMs > 0) promise = new Promise((resolve, reject) => {
-			const timer = setTimeout(() => reject(new SingleflightTimeoutError(key, timeoutMs)), timeoutMs);
-			try {
-				fn().then((value) => {
-					clearTimeout(timer);
-					resolve(value);
-				}, (err) => {
-					clearTimeout(timer);
-					reject(err);
-				});
-			} catch (err) {
-				clearTimeout(timer);
-				reject(err);
-			}
-		});
-		else promise = fn();
-		const tracked = promise.finally(() => {
-			inflight.delete(key);
-		});
-		inflight.set(key, tracked);
-		return tracked;
-	} };
-}
-//#endregion
-//#region src/cache/timber-cache.ts
-var defaultSingleflight = createSingleflight();
-/**
-* Generate a cache key from function identity and serialized args.
-*
-* Uses FNV-1a (fast non-crypto hash) instead of SHA-256. Cache keys don't
-* need collision resistance — they need speed. The fnId prefix provides
-* namespace isolation; the hash covers the args.
-*
-* See TIM-370 for perf motivation.
-*/
-function defaultKeyGenerator(fnId, args) {
-	const raw = fnId + ":" + stableStringify(args);
-	return fnId + ":" + fnv1aHash(raw);
-}
-/**
-* Resolve tags from the options — supports static array or function form.
-*/
-function resolveTags(opts, args) {
-	if (!opts.tags) return [];
-	if (Array.isArray(opts.tags)) return opts.tags;
-	return opts.tags(...args);
-}
-var unstableIdCounter = 0;
-var hasWarnedUnstableId = false;
-/**
-* Creates a cached wrapper around an async function.
-*
-* - SHA-256 default keys with normalized JSON args
-* - Singleflight: concurrent misses → single execution
-* - SWR: serve stale immediately, background refetch
-* - Tags as string[] or function of args
-* - No ALS dependency for correctness — cache() works outside a request
-*   context. The waitUntil ALS bridge is read optionally so the SWR
-*   background refetch survives handler return on Workers/Lambda.
-*
-* Cache hits/misses are recorded as OTEL span events on the enclosing
-* span (not child spans). The DevSpanProcessor reads these for dev log output.
-*/
-function createCache(fn, opts, handler, stableId) {
-	let fnId;
-	if (stableId) fnId = stableId;
-	else if (opts.key) fnId = `timber-cache:${unstableIdCounter++}`;
-	else {
-		fnId = `timber-cache:unstable:${unstableIdCounter++}`;
-		if (!hasWarnedUnstableId && typeof process !== "undefined" && process.env.NODE_ENV !== "test") {
-			hasWarnedUnstableId = true;
-			console.warn("[timber] cache() called without a stable ID or explicit key function. Cache keys will use a process-local counter which is unstable across cold starts. Run through the timber Vite plugin or provide an explicit `key` option to fix this.");
-		}
-	}
-	const sf = opts.timeoutMs ? createSingleflight({ timeoutMs: opts.timeoutMs }) : defaultSingleflight;
-	return (async (...args) => {
-		const key = opts.key ? opts.key(...args) : defaultKeyGenerator(fnId, args);
-		const cacheStart = performance.now();
-		const cached = await handler.get(key);
-		if (cached && !cached.stale) {
-			addSpanEventSync("timber.cache.hit", {
-				key,
-				duration_ms: Math.round(performance.now() - cacheStart)
-			});
-			return cached.value;
-		}
-		if (cached && cached.stale && opts.staleWhileRevalidate) {
-			addSpanEventSync("timber.cache.hit", {
-				key,
-				duration_ms: Math.round(performance.now() - cacheStart),
-				stale: true
-			});
-			const refetch = sf.do(`swr:${key}`, async () => {
-				try {
-					const fresh = await fn(...args);
-					const tags = resolveTags(opts, args);
-					await handler.set(key, fresh, {
-						ttl: opts.ttl,
-						tags
-					});
-				} catch (err) {
-					logSwrRefetchFailed({
-						cacheKey: key,
-						error: err
-					});
-				}
-			}).catch(() => {});
-			getWaitUntil()?.(refetch);
-			return cached.value;
-		}
-		const result = await sf.do(key, () => fn(...args));
-		const tags = resolveTags(opts, args);
-		await handler.set(key, result, {
-			ttl: opts.ttl,
-			tags
-		});
-		addSpanEventSync("timber.cache.miss", {
-			key,
-			duration_ms: Math.round(performance.now() - cacheStart)
-		});
-		return result;
-	});
-}
-/**
-* Invalidate cache entries by tag or key.
-*/
-createCache.invalidate = async function invalidate(handler, opts) {
-	await handler.invalidate(opts);
-};
-//#endregion
-//#region src/cache/cache-api.ts
-/**
-* Public caching API: `cache(fn, opts)`.
-*
-* Wraps an async function with cross-request caching. Uses the configured
-* cache handler (defaults to MemoryCacheHandler, overridable via timber.config.ts).
-*
-* ```ts
-* import { cache } from '@timber-js/app/cache';
-*
-* const getUser = cache(
-*   async (id: string) => db.users.findUnique({ where: { id } }),
-*   { ttl: 60, tags: (id) => [`user:${id}`] }
-* );
-* ```
-*/
-function cache(fn, opts, stableId) {
-	return createCache(fn, opts, getCacheHandler(), stableId);
-}
-/**
-* Invalidate cache entries by tag or key.
-*
-* ```ts
-* cache.invalidate({ tag: 'products' });
-* cache.invalidate({ key: 'user:abc' });
-* ```
-*/
-cache.invalidate = async function invalidate(opts) {
-	await getCacheHandler().invalidate(opts);
-};
-//#endregion
 //#region src/cache/index.ts
 var MemoryCacheHandler = class {
 	store = /* @__PURE__ */ new Map();
@@ -325,10 +108,12 @@ var MemoryCacheHandler = class {
 	maxBytes;
 	maxEntryBytes;
 	currentBytes = 0;
+	_trackBytes;
 	constructor(opts) {
 		this.maxEntries = opts?.maxEntries ?? opts?.maxSize ?? 1e3;
 		this.maxBytes = opts?.maxBytes;
 		this.maxEntryBytes = opts?.maxEntryBytes;
+		this._trackBytes = this.maxBytes !== void 0 || this.maxEntryBytes !== void 0;
 	}
 	async get(key) {
 		const entry = this.store.get(key);
@@ -342,7 +127,7 @@ var MemoryCacheHandler = class {
 		};
 	}
 	async set(key, value, opts) {
-		const byteSize = estimateByteSize(value);
+		const byteSize = this._trackBytes ? estimateByteSize(value) : 0;
 		if (this.maxEntryBytes !== void 0 && byteSize > this.maxEntryBytes) return;
 		if (this.store.has(key)) {
 			const existing = this.store.get(key);
@@ -381,7 +166,7 @@ var MemoryCacheHandler = class {
 	get size() {
 		return this.store.size;
 	}
-	/** Estimated total byte size of all cached values. */
+	/** Estimated total byte size of all cached values. Only tracked when maxBytes or maxEntryBytes is configured; returns 0 otherwise. */
 	get bytes() {
 		return this.currentBytes;
 	}
@@ -396,6 +181,6 @@ var MemoryCacheHandler = class {
 	}
 };
 //#endregion
-export { MemoryCacheHandler, RedisCacheHandler, cache, estimateByteSize, getCacheHandler, setCacheHandler };
+export { MemoryCacheHandler, RedisCacheHandler, cache, estimateByteSize, getCacheHandler, setCacheHandler, setDefaultSingleflightTimeout };
 
 //# sourceMappingURL=index.js.map