@timber-js/app 0.2.0-alpha.192 → 0.2.0-alpha.194

package/src/fonts/pipeline.ts

@@ -28,14 +28,14 @@
 
 import { readFileSync, existsSync } from 'node:fs';
 import { resolve, normalize } from 'node:path';
-import type { ExtractedFont, FontEntry, FontFaceDescriptor } from './types.js';
-import type { CachedFont } from './google.js';
-import { contentHash } from './google.js';
-import { generateVariableClass, generateFontFamilyClass, generateFontFaces } from './css.js';
-import { generateFallbackCss } from './fallbacks.js';
-import { generateLocalFontFaces } from './local.js';
-import { hashedFontBasename, fontUrlPrefix } from './paths.js';
-import { VirtualFontCssIdMap } from './virtual-modules.js';
+import type { ExtractedFont, FontEntry, FontFaceDescriptor } from './types.ts';
+import type { CachedFont } from './google.ts';
+import { contentHash } from './google.ts';
+import { generateVariableClass, generateFontFamilyClass, generateFontFaces } from './css.ts';
+import { generateFallbackCss } from './fallbacks.ts';
+import { generateLocalFontFaces } from './local.ts';
+import { hashedFontBasename, fontUrlPrefix } from './paths.ts';
+import { VirtualFontCssIdMap } from './virtual-modules.ts';
 
 export class FontPipeline {
   /**

package/src/fonts/transform.ts

@@ -14,17 +14,17 @@
  */
 
 import MagicString from 'magic-string';
-import type { ExtractedFont, GoogleFontConfig } from './types.js';
-import { buildFontStack } from './fallbacks.js';
-import { processLocalFont } from './local.js';
+import type { ExtractedFont, GoogleFontConfig } from './types.ts';
+import { buildFontStack } from './fallbacks.ts';
+import { processLocalFont } from './local.ts';
 import {
   extractFontConfigAst,
   detectDynamicFontCallAst,
   findFontCallSites,
   extractGoogleFontConfigFromNode,
   extractLocalFontConfigFromNode,
-} from './ast.js';
-import type { FontPipeline } from './pipeline.js';
+} from './ast.ts';
+import type { FontPipeline } from './pipeline.ts';
 
 /**
  * Convert a font family name to a scoped class name.

package/src/fonts/types.ts

@@ -9,7 +9,7 @@
 
 // `CachedFont` lives in `google.ts`. Importing it here is type-only so
 // there is no runtime dependency cycle — TypeScript erases the import.
-import type { CachedFont } from './google.js';
+import type { CachedFont } from './google.ts';
 
 /** Configuration passed to a Google font function (e.g. `Inter({ ... })`). */
 export interface GoogleFontConfig {

package/src/fonts/virtual-modules.ts

@@ -30,7 +30,7 @@
  */
 
 import { createHash } from 'node:crypto';
-import type { ExtractedFont } from './types.js';
+import type { ExtractedFont } from './types.ts';
 
 export const VIRTUAL_GOOGLE = '@timber/fonts/google';
 export const VIRTUAL_LOCAL = '@timber/fonts/local';

package/src/index.ts

@@ -15,34 +15,43 @@ import { createLogger } from 'vite';
 import { join, relative, resolve } from 'node:path';
 import { createRequire } from 'node:module';
 import react, { reactCompilerPreset } from '@vitejs/plugin-react';
-import { timberContent } from './plugins/content';
-import { timberDevServer } from './plugins/dev-server';
-import { timberEntries } from './plugins/entries';
-import { timberMdx } from './plugins/mdx';
-import { timberRouting } from './plugins/routing';
-import { timberShims } from './plugins/shims';
-import { timberFonts } from './plugins/fonts';
-import { timberStaticBuild } from './plugins/static-build';
-import { timberBuildManifest } from './plugins/build-manifest';
-import { timberDevLogs, originalConsole, wrapLoggerWithOriginalConsole } from './dev-tools/logs';
-import { resolveForwardConsole } from './dev-tools/browser-logs';
-import { timberReactProd } from './plugins/react-prod';
-import { timberChunks } from './plugins/chunks';
-import { clientChunkGroup } from './plugins/client-chunks';
-import { timberServerBundle } from './plugins/server-bundle';
-import { timberCacheTransform } from './plugins/cache';
-import { timberRequestDep } from './plugins/request-dep/index.js';
-import { timberPrebuilt } from './plugins/prebuilt';
-import { timberPrerenderSugar } from './plugins/prerender-sugar';
-import { timberCloudflareWasm } from './plugins/cloudflare-wasm';
-import { timberAdapterBuild } from './plugins/adapter-build';
-import { timberBuildReport } from './plugins/build-report';
-import { createNoopTimer } from './utils/startup-timer';
-import { resolveEncryptionKeyExpression, shouldEnableEncryption } from './server/action-encryption';
-import { createHoldingServer } from './dev-tools/holding-server.js';
-import { resolveStartPort, startDevServerPort } from './server/port-resolution.js';
-import type { TimberUserConfig } from './config-types.js';
-import type { PluginContext, TimberPluginApi } from './plugin-context.js';
+import { timberContent } from './plugins/content.ts';
+import { timberDevServer } from './plugins/dev-server.ts';
+import { timberEntries } from './plugins/entries.ts';
+import { timberMdx } from './plugins/mdx.ts';
+import { timberRouting } from './plugins/routing.ts';
+import { timberShims } from './plugins/shims.ts';
+import { timberFonts } from './plugins/fonts.ts';
+import { timberStaticBuild } from './plugins/static-build.ts';
+import { timberBuildManifest } from './plugins/build-manifest.ts';
+import { timberDevLogs, originalConsole, wrapLoggerWithOriginalConsole } from './dev-tools/logs.ts';
+import { resolveForwardConsole } from './dev-tools/browser-logs.ts';
+import { timberReactProd } from './plugins/react-prod.ts';
+import { timberChunks } from './plugins/chunks.ts';
+import { clientChunkGroup } from './plugins/client-chunks.ts';
+import { timberServerBundle } from './plugins/server-bundle.ts';
+import { timberCacheTransform } from './plugins/cache.ts';
+import { timberRequestDep } from './plugins/request-dep/index.ts';
+import { timberPrebuilt } from './plugins/prebuilt.ts';
+import { timberPrerenderSugar } from './plugins/prerender-sugar.ts';
+import { timberCloudflareWasm } from './plugins/cloudflare-wasm.ts';
+import { timberAdapterBuild } from './plugins/adapter-build.ts';
+import { timberBuildReport } from './plugins/build-report.ts';
+import { createNoopTimer } from './utils/startup-timer.ts';
+import {
+  validateConfig,
+  formatConfigErrors,
+  checkPeerDependencies,
+  formatMissingPeers,
+} from './config-validation.ts';
+import {
+  resolveEncryptionKeyExpression,
+  shouldEnableEncryption,
+} from './server/action-encryption.ts';
+import { createHoldingServer } from './dev-tools/holding-server.ts';
+import { resolveStartPort, startDevServerPort } from './server/port-resolution.ts';
+import type { TimberUserConfig } from './config-types.ts';
+import type { PluginContext, TimberPluginApi } from './plugin-context.ts';
 import {
   createPluginContext,
   loadTimberConfigFile,
@@ -50,11 +59,11 @@ import {
   resolveAppDir,
   resolveClientJavascript,
   resolveBuildDir,
-} from './plugin-context.js';
+} from './plugin-context.ts';
 
 // ── Public API ────────────────────────────────────────────────────────────
 
-export type { TimberUserConfig } from './config-types.js';
+export type { TimberUserConfig } from './config-types.ts';
 
 // Metadata route handler types — re-exported so user-authored metadata
 // route files (sitemap.ts, robots.ts, manifest.ts, icon.tsx, etc.) can
@@ -62,7 +71,7 @@ export type { TimberUserConfig } from './config-types.js';
 // The canonical location for these types is '@timber-js/app/server'; this
 // root re-export is a convenience for typed metadata route handlers.
 // See design/16-metadata.md §"Metadata Routes".
-export type { Metadata, MetadataRoute, MetadataHandler, MetadataResult } from './server/types.js';
+export type { Metadata, MetadataRoute, MetadataHandler, MetadataResult } from './server/types.ts';
 
 /**
  * Route map interface — augmented by the generated timber-routes.d.ts.
@@ -338,7 +347,12 @@ export function timber(config?: TimberUserConfig): PluginOption[] {
       // See design/21-dev-server.md §"Default Port and Auto-Bump".
       let resolvedDevPort: number | null = null;
       let resolvedDevPortExplicit = false;
-      if (command === 'serve' && !isPreview) {
+      // Middleware-mode embeddings (the analyze crawl, custom servers)
+      // never bind a port, and the dev-server plugin's listen() handoff
+      // that closes the holding server never runs — starting it would
+      // occupy the default port for the embedding's lifetime.
+      const isMiddlewareMode = Boolean(userConfig.server?.middlewareMode);
+      if (command === 'serve' && !isPreview && !isMiddlewareMode) {
         ctx.holdingServer = createHoldingServer();
         const holdingRef = ctx.holdingServer;
         const result = await startDevServerPort({
@@ -513,11 +527,6 @@ export function timber(config?: TimberUserConfig): PluginOption[] {
       // Validate config and check peer dependencies at startup.
       // Errors are logged to stderr but don't block startup — Vite may
       // still work partially, and the errors guide the user to fix things.
-      /* eslint-disable no-var-requires -- sync require for startup validation */
-      const { validateConfig, formatConfigErrors, checkPeerDependencies, formatMissingPeers } =
-        require('./config-validation.js') as typeof import('./config-validation.js');
-      /* eslint-enable no-var-requires */
-
       const configErrors = validateConfig(ctx.config);
       if (configErrors.length > 0) {
         process.stderr.write(`${formatConfigErrors(configErrors)}\n\n`);

package/src/params/codec-registry.ts

@@ -12,7 +12,7 @@
  * Design doc: design/41-global-params.md §"Link Component"
  */
 
-import type { Codec } from '../codec.js';
+import type { Codec } from '../codec.ts';
 
 let _codecs: Record<string, Codec<unknown>> | null = null;
 

package/src/params/define-schema.ts

@@ -8,8 +8,8 @@
  * Design doc: design/41-global-params.md
  */
 
-import type { Codec, CatchAllCodec, OptionalCatchAllCodec } from '../codec.js';
-import type { StandardSchemaV1 } from '../schema-bridge.js';
+import type { Codec, CatchAllCodec, OptionalCatchAllCodec } from '../codec.ts';
+import type { StandardSchemaV1 } from '../schema-bridge.ts';
 
 // ---------------------------------------------------------------------------
 // Types

package/src/params/index.ts

@@ -5,13 +5,13 @@
 //
 // See design/41-global-params.md
 
-export { defineSchema } from './define-schema.js';
+export { defineSchema } from './define-schema.ts';
 export type {
   InferCodecType,
   SchemaConfig,
   SegmentParamCodec,
   ValidDynamicSegmentKeys,
   ValidDynamicSegmentKeysRegistry,
-} from './define-schema.js';
-export { resolveSchemaCodecs, toBracketKey } from './resolve-schema.js';
-export { setLinkCodecs, getLinkCodec } from './codec-registry.js';
+} from './define-schema.ts';
+export { resolveSchemaCodecs, toBracketKey } from './resolve-schema.ts';
+export { setLinkCodecs, getLinkCodec } from './codec-registry.ts';

package/src/params/resolve-schema.ts

@@ -9,8 +9,8 @@
  * Design doc: design/41-global-params.md §Pipeline Integration
  */
 
-import type { Codec } from '../codec.js';
-import { isCodec, resolveCodecOrSchema } from '../schema-bridge.js';
+import type { Codec } from '../codec.ts';
+import { isCodec, resolveCodecOrSchema } from '../schema-bridge.ts';
 
 /**
  * Reconstruct the bracket key for a segment from its type and param name.

package/src/plugin-context.ts

@@ -12,18 +12,18 @@ import { existsSync } from 'node:fs';
 import { join, resolve } from 'node:path';
 import { createRequire } from 'node:module';
 import { parseAst } from 'vite';
-import type { RouteTree } from './routing/types';
-import type { BuildManifest } from './server/build-manifest';
-import type { CaptureSummary } from './server/prebuilt-builder';
-import type { StartupTimer } from './utils/startup-timer';
-import { createStartupTimer } from './utils/startup-timer';
-import type { TimberUserConfig, ClientJavascriptConfig } from './config-types.js';
-import type { RscManifest } from './plugins/static-build.js';
-import type { HoldingServer } from './dev-tools/holding-server.js';
-import type { ProgramNode } from './plugins/callsite-ast.js';
+import type { RouteTree } from './routing/types.ts';
+import type { BuildManifest } from './server/build-manifest.ts';
+import type { CaptureSummary } from './server/prebuilt-builder.ts';
+import type { StartupTimer } from './utils/startup-timer.ts';
+import { createStartupTimer } from './utils/startup-timer.ts';
+import type { TimberUserConfig, ClientJavascriptConfig } from './config-types.ts';
+import type { RscManifest } from './plugins/static-build.ts';
+import type { HoldingServer } from './dev-tools/holding-server.ts';
+import type { ProgramNode } from './plugins/callsite-ast.ts';
 
 // Re-export for sub-plugin convenience — they import from plugin-context.ts
-export type { TimberUserConfig, ClientJavascriptConfig } from './config-types.js';
+export type { TimberUserConfig, ClientJavascriptConfig } from './config-types.ts';
 
 // ── Client JavaScript config ─────────────────────────────────────────────
 

package/src/plugins/adapter-build.ts

@@ -17,11 +17,11 @@ import type { Plugin } from 'vite';
 import { join } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { readFile, writeFile } from 'node:fs/promises';
-import type { PluginContext } from '../plugin-context.js';
-import type { TimberPlatformAdapter, TimberConfig } from '../adapters/types.js';
-import type { BuildManifest } from '../server/build-manifest.js';
-import { swallow } from '../server/logger.js';
-import { normalizeBasePath } from '../shared/base-path.js';
+import type { PluginContext } from '../plugin-context.ts';
+import type { TimberPlatformAdapter, TimberConfig } from '../adapters/types.ts';
+import type { BuildManifest } from '../server/build-manifest.ts';
+import { swallow } from '../server/logger.ts';
+import { normalizeBasePath } from '../shared/base-path.ts';
 
 export function timberAdapterBuild(ctx: PluginContext): Plugin {
   return {

package/src/plugins/build-manifest.ts

@@ -19,10 +19,10 @@
 import { randomUUID, createHash } from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import type { Plugin, ResolvedConfig } from 'vite';
-import type { PluginContext } from '../plugin-context.js';
-import { EMPTY_BUILD_MANIFEST, type BuildManifest } from '../server/build-manifest.js';
-import type { SegmentNode, RouteFile } from '../routing/types.js';
-import { isDynamicMetadataExtension } from '../server/metadata-routes.js';
+import type { PluginContext } from '../plugin-context.ts';
+import { EMPTY_BUILD_MANIFEST, type BuildManifest } from '../server/build-manifest.ts';
+import type { SegmentNode, RouteFile } from '../routing/types.ts';
+import { isDynamicMetadataExtension } from '../server/metadata-routes.ts';
 
 // Rollup types used by generateBundle hook — imported from vite which re-exports them.
 // We define minimal interfaces here to avoid a direct 'rollup' dependency.

package/src/plugins/build-report.ts

@@ -17,12 +17,12 @@ import { readFileSync } from 'node:fs';
 import { join, relative } from 'node:path';
 import { gzipSync } from 'node:zlib';
 import type { Plugin, Logger } from 'vite';
-import type { PluginContext } from '../plugin-context.js';
-import type { SegmentNode, RouteTree } from '../routing/types.js';
-import type { CaptureSummary } from '../server/prebuilt-builder.js';
-import type { PrebuiltManifest } from '../server/prebuilt/payload-source.js';
-import { collectLeafRoutes } from '../routing/walkers.js';
-import { formatSize } from '../utils/format.js';
+import type { PluginContext } from '../plugin-context.ts';
+import type { SegmentNode, RouteTree } from '../routing/types.ts';
+import type { CaptureSummary } from '../server/prebuilt-builder.ts';
+import type { PrebuiltManifest } from '../server/prebuilt/payload-source.ts';
+import { collectLeafRoutes } from '../routing/walkers.ts';
+import { formatSize } from '../utils/format.ts';
 
 // ─── Public types ─────────────────────────────────────────────────────────
 

package/src/plugins/cache.ts

@@ -56,14 +56,14 @@
 import { relative } from 'node:path';
 import MagicString from 'magic-string';
 import type { Plugin } from 'vite';
-import type { PluginContext } from '../plugin-context.js';
+import type { PluginContext } from '../plugin-context.ts';
 import {
   CACHE_MODULE_SOURCES,
   collectShadowRanges,
   findCallSites,
   findImportBindings,
   generateStableCallsiteId,
-} from './callsite-ast.js';
+} from './callsite-ast.ts';
 import type {
   CallExpressionNode,
   IdentifierNode,
@@ -72,7 +72,7 @@ import type {
   PositionedNode,
   ProgramNode,
   ShadowRange,
-} from './callsite-ast.js';
+} from './callsite-ast.ts';
 
 /**
  * Is this callee a `cache.data(...)` call? Matches two forms:

package/src/plugins/callsite-ast.ts

@@ -10,7 +10,7 @@
  * See TIM-997, TIM-1053, design/06-caching.md §"Cache Key Security".
  */
 
-import { fnv1aHash } from '../cache/fast-hash.js';
+import { fnv1aHash } from '../cache/fast-hash.ts';
 
 /** Module specifiers whose bindings the transforms track. */
 export const CACHE_MODULE_SOURCES = new Set(['@timber-js/app/cache', 'timber/cache']);

package/src/plugins/callsite-jsx.ts

@@ -11,8 +11,8 @@
  * See design/44-render-at-build-time.md §Props Derivation at Build Time.
  */
 
-import type { PluginContext } from '../plugin-context.js';
-import type { IdentifierNode, PositionedNode, ProgramNode } from './callsite-ast.js';
+import type { PluginContext } from '../plugin-context.ts';
+import type { IdentifierNode, PositionedNode, ProgramNode } from './callsite-ast.ts';
 
 interface JSXElementNode extends PositionedNode {
   type: 'JSXElement';

package/src/plugins/chunks.ts

@@ -22,7 +22,7 @@
  */
 
 import type { Plugin, Rollup } from 'vite';
-import type { PluginContext } from '../plugin-context';
+import type { PluginContext } from '../plugin-context.ts';
 
 /**
  * Check if a module is part of the timber framework runtime.

package/src/plugins/cloudflare-wasm.ts

@@ -20,7 +20,7 @@ import { basename, resolve, dirname } from 'node:path';
 import { createHash } from 'node:crypto';
 import { copyFile, mkdir, readFile } from 'node:fs/promises';
 import type { Plugin, ResolvedConfig } from 'vite';
-import type { PluginContext } from '../plugin-context.js';
+import type { PluginContext } from '../plugin-context.ts';
 
 function isCloudflareAdapter(ctx: PluginContext): boolean {
   const adapter = ctx.config.adapter as { name?: string } | undefined;

package/src/plugins/content.ts

@@ -11,7 +11,7 @@
 import type { Plugin } from 'vite';
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
-import type { PluginContext } from '../plugin-context.js';
+import type { PluginContext } from '../plugin-context.ts';
 
 const CONFIG_FILE_NAMES = [
   'content-collections.ts',
@@ -127,6 +127,10 @@ export function timberContent(ctx: PluginContext): Plugin {
     },
 
     async configureServer(server) {
+      // The analyze crawl child must not start content-collections'
+      // file watcher — it outlives server.close() and holds the
+      // process open (the child relies on process.exit to clean up).
+      if (process.env.TIMBER_ANALYZE === '1') return;
       if (!innerPlugin) return;
       if (typeof innerPlugin.configureServer === 'function') {
         await (innerPlugin.configureServer as (...args: unknown[]) => unknown).call(this, server);

package/src/plugins/dev-discovery.ts

@@ -0,0 +1,218 @@
+/**
+ * Dev-server discovery records — `.timber/dev/<pid>-<port>-<token>.json`.
+ *
+ * On startup each dev server writes `{ port, pid, host, protocol }` to its own record
+ * file under the app's `.timber/dev/` so the `timber graph` CLI and the
+ * VS Code extension can discover a running dev server for the
+ * live-graph fast path.
+ *
+ * One record file per server, one writer per file. This is what makes
+ * multi-server roots (Vite auto-increments the port across processes;
+ * programmatic embeddings run several servers in one process) safe
+ * without any coordination: there is no shared file to displace, no
+ * ownership to arbitrate, and no shutdown-order dependency — each
+ * server removes exactly its own record.
+ *
+ * Consumers must list the directory and trust a record only if its pid
+ * is alive AND a probe request to the endpoint succeeds; anything else
+ * is treated as absent (silent fallback), never an error. Stale records
+ * (crashed servers) are therefore the normal case — startup sweeps
+ * dead-pid records best-effort, and consumers validate the rest away.
+ *
+ * The directory layout and file format are implementation details, not
+ * a public contract.
+ *
+ * Design doc: 47-module-environment-tooling.md §5, 21-dev-server.md.
+ */
+
+import type { Server } from 'node:net';
+import { Server as TlsServer } from 'node:tls';
+import { randomUUID } from 'node:crypto';
+import { mkdirSync, writeFileSync, rmSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+
+/** Relative path of the discovery directory within the project root. */
+export const DEV_DISCOVERY_DIR = join('.timber', 'dev');
+
+export interface DevRecord {
+  port: number;
+  pid: number;
+  /**
+   * The bound address, as reported by the socket. Consumers probing the
+   * endpoint need it for servers bound to non-default interfaces;
+   * wildcard addresses (`0.0.0.0`, `::`) should be probed via loopback.
+   */
+  host: string;
+  /**
+   * Probe scheme. `server.https` dev servers (including HTTP/2) answer
+   * only TLS — an http:// probe of one would fail and wrongly trigger
+   * the cold-crawl fallback.
+   */
+  protocol: 'http' | 'https';
+  /**
+   * Vite `base` path. When non-root (e.g. `/my-app/`), the WebSocket
+   * upgrade path is `base + hmrPath`.
+   */
+  base?: string;
+  /**
+   * HMR WebSocket path (from `server.ws.path` or deprecated
+   * `server.hmr.path`). Absent when no path is configured (default `/`).
+   */
+  hmrPath?: string;
+  /**
+   * Custom WebSocket host override (from `server.ws.host` or deprecated
+   * `server.hmr.host`). When set, the WS connection targets this host
+   * instead of the HTTP server's bound address.
+   */
+  hmrHost?: string;
+  /**
+   * Custom WebSocket port override (from `server.ws.clientPort` ??
+   * `server.ws.port`, or deprecated `server.hmr.clientPort` ??
+   * `server.hmr.port`). When set, the WS connection targets this port
+   * instead of the HTTP server's bound port.
+   */
+  hmrPort?: number;
+  /**
+   * Custom WebSocket protocol override (from `server.ws.protocol` or
+   * deprecated `server.hmr.protocol`). When set (e.g. `'wss'`), the
+   * upgrade request uses the corresponding HTTP scheme.
+   */
+  hmrProtocol?: string;
+  /**
+   * Vite 8 WebSocket token (from `config.webSocketToken`). Required for
+   * browser WS upgrades; the extension passes it as `?token=` on the
+   * WebSocket URL.
+   */
+  webSocketToken?: string;
+  /**
+   * Absolute path to the Vite config file this server was started with.
+   * When multiple dev servers share a project root but use different
+   * configs, the fast path must only accept the record matching the
+   * config the CLI resolved (TIM-1393).
+   */
+  configFile?: string;
+}
+
+/** Best-effort "is this pid alive" — signal 0 probes without killing. */
+export function isPidAlive(pid: number): boolean {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (error) {
+    // EPERM means the process exists but is owned by someone else.
+    return (error as NodeJS.ErrnoException).code === 'EPERM';
+  }
+}
+
+/**
+ * Remove sibling records whose pid is no longer alive. Purely a
+ * tidiness sweep — consumers already ignore records that fail the
+ * pid + probe validation, so missing a stale record here is harmless.
+ */
+function sweepDeadRecords(dir: string): void {
+  let entries: string[];
+  try {
+    entries = readdirSync(dir);
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (!entry.endsWith('.json')) continue;
+    const filePath = join(dir, entry);
+    try {
+      const record = JSON.parse(readFileSync(filePath, 'utf8')) as Partial<DevRecord>;
+      // Remove only records that parse AND name a dead pid. An
+      // unreadable file may be a sibling's record mid-write — leave it;
+      // consumers ignore records that fail validation anyway.
+      if (typeof record.pid === 'number' && !isPidAlive(record.pid)) {
+        rmSync(filePath, { force: true });
+      }
+    } catch {
+      // Unreadable — skip, never delete another writer's in-flight file.
+    }
+  }
+}
+
+/**
+ * Register discovery-record lifecycle handlers on the dev server's HTTP
+ * server. Writes `.timber/dev/<pid>-<port>-<token>.json` once the server is
+ * listening (the bound port is only known then) and removes exactly
+ * that record on clean shutdown.
+ *
+ * All filesystem work is best-effort: a failure to write or remove a
+ * record must never break the dev server. `httpServer` is null in
+ * middleware mode — no port exists, so there is nothing to advertise.
+ * Typed as `net.Server` — the common base of Vite's `http.Server` and
+ * `Http2SecureServer` variants, which carries the events and `address()`.
+ */
+export function registerDevDiscovery(
+  httpServer: Server | null,
+  root: string,
+  config?: {
+    configFile?: string | false;
+    base?: string;
+    server?: {
+      hmr?:
+        | { path?: string; host?: string; port?: number; clientPort?: number; protocol?: string }
+        | boolean;
+      ws?:
+        | { path?: string; host?: string; port?: number; clientPort?: number; protocol?: string }
+        | false;
+    };
+    webSocketToken?: string;
+  }
+): void {
+  if (!httpServer) return;
+
+  const dir = join(root, DEV_DISCOVERY_DIR);
+  let recordPath: string | null = null;
+
+  httpServer.on('listening', () => {
+    const address = httpServer.address();
+    // Unix-socket listeners have a string address — no port to advertise.
+    if (address === null || typeof address === 'string') return;
+    const hmrOpts = typeof config?.server?.hmr === 'object' ? config.server.hmr : undefined;
+    const wsOpts = typeof config?.server?.ws === 'object' ? config.server.ws : undefined;
+    const record: DevRecord = {
+      port: address.port,
+      pid: process.pid,
+      host: address.address,
+      // Vite's https/h2 servers are tls.Server subclasses; plain HTTP
+      // and h2c are not.
+      protocol: httpServer instanceof TlsServer ? 'https' : 'http',
+      base: config?.base && config.base !== '/' ? config.base : undefined,
+      hmrPath: wsOpts?.path ?? hmrOpts?.path,
+      hmrHost: wsOpts?.host ?? hmrOpts?.host,
+      hmrPort:
+        wsOpts?.clientPort || wsOpts?.port || hmrOpts?.clientPort || hmrOpts?.port || undefined,
+      hmrProtocol: wsOpts?.protocol ?? hmrOpts?.protocol,
+      webSocketToken: config?.webSocketToken,
+      configFile: typeof config?.configFile === 'string' ? config.configFile : undefined,
+    };
+    // pid+port alone is not a unique server identity (same port on two
+    // interfaces; worker threads and duplicate module copies share a
+    // pid but not module state, so a counter cannot disambiguate
+    // either). A random token makes the filename unique regardless of
+    // process/isolate topology; pid and port stay in the name only for
+    // human debuggability.
+    recordPath = join(dir, `${record.pid}-${record.port}-${randomUUID()}.json`);
+    try {
+      mkdirSync(dir, { recursive: true });
+      writeFileSync(recordPath, JSON.stringify(record));
+      sweepDeadRecords(dir);
+    } catch {
+      // Best-effort — consumers fall back to the cold crawl.
+    }
+  });
+
+  httpServer.on('close', () => {
+    if (!recordPath) return;
+    try {
+      // Only ever this server's own record — sibling servers' records
+      // are separate files and survive any shutdown order untouched.
+      rmSync(recordPath, { force: true });
+    } catch {
+      // Best-effort — a stale record is validated away by consumers.
+    }
+  });
+}