@vesk/adapter 0.2.71 → 0.2.74

package/dist/api-function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-function.d.ts","sourceRoot":"","sources":["../src/api-function.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAOhF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,kBAAkB,GAC3B;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAqOtD"}
+{"version":3,"file":"api-function.d.ts","sourceRoot":"","sources":["../src/api-function.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAOhF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,kBAAkB,GAC3B;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAkQtD"}

package/dist/api-function.js

@@ -1,6 +1,7 @@
 import { readFileSync } from 'node:fs';
-import { resolve } from 'node:path';
+import { resolve, dirname } from 'node:path';
 import { stripCodeTypes } from '@vesk/compiler/src/strip-ts';
+import { resolveImportPath } from '@vesk/compiler/src/module-imports';
 function apiRouteName(fullPath) {
     const parts = fullPath.split('/').filter(Boolean);
     return parts.map(s => s.startsWith(':') ? s.slice(1) || 'param' : s).join('_') || 'index';
@@ -13,6 +14,20 @@ export function generateApiFunction(apiNode, _apiDir, outDir, options) {
     if (!routeFilePath)
         throw new Error(`api route ${apiNode.fullPath} has no filePath`);
     let routeSrc = readFileSync(routeFilePath, 'utf-8');
+    // The function file lives in dist/server/api/, so the route's own relative
+    // specifiers (`../../../../src/_lib/...`) would resolve against that layout
+    // and fail to load. Resolve them against the route file's real directory
+    // while it is still known, then point them at build-machine absolute paths:
+    // `vesk start` imports the file directly, and platform bundling inlines it.
+    const routeDir = dirname(routeFilePath);
+    routeSrc = routeSrc.replace(/(from\s+['"]|import\s*\(\s*['"])(\.{1,2}\/[^'"]+)(['"])/g, (match, prefix, spec, suffix) => {
+        try {
+            return prefix + resolveImportPath(spec, routeDir) + suffix;
+        }
+        catch {
+            return match;
+        }
+    });
     routeSrc = routeSrc
         .replace(/from\s+['"]@vesk\/runtime['"]\s*;?/g, "from '../runtime.js';")
         .replace(/from\s+['"]@vesk\/runtime\/(\w+)['"]\s*;?/g, () => {
@@ -29,9 +44,16 @@ export function generateApiFunction(apiNode, _apiDir, outDir, options) {
     const urlParts = apiNode.fullPath.split('/').filter(Boolean);
     const extracts = [];
     let partIdx = 0;
-    for (const p of urlParts) {
-        if (p.startsWith(':') && p.includes('...')) {
+    for (let i = 0; i < urlParts.length; i++) {
+        const p = urlParts[i];
+        // Catch-all routes carry `isCatchAll` separately from their `:name`
+        // path segment, so the shape of the segment alone is not enough to tell
+        // `[...rest]` from `[id]`. Consume the whole remaining tail or the param
+        // would silently stop after the first segment.
+        const isCatchAll = apiNode.isCatchAll && i === urlParts.length - 1;
+        if (p.startsWith(':') && (isCatchAll || p.includes('...'))) {
             extracts.push(`${JSON.stringify(p.slice(1))}: urlParts.slice(${partIdx}).join('/')`);
+            partIdx = urlParts.length;
         }
         else if (p.startsWith(':')) {
             extracts.push(`${JSON.stringify(p.slice(1))}: urlParts[${partIdx}]`);
@@ -222,10 +244,15 @@ export function generateApiFunction(apiNode, _apiDir, outDir, options) {
         middlewareCode ? "import { parseCookies as __parseCookies } from '../runtime.js';" : '',
         '',
         middlewareCode || '',
-        'export async function handle(request) {',
+        // Underscored internal name: route source is inlined above and commonly
+        // imports a user helper called `handle`, which would otherwise clash with
+        // (and crash) this wrapper. The public export name is preserved.
+        'async function __vesk_api_handle(request) {',
         handleBody,
         '}',
         '',
+        'export { __vesk_api_handle as handle };',
+        '',
     ].filter(Boolean).join('\n');
     return { funcPath, funcCode, name };
 }

package/dist/client-bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-bundle.d.ts","sourceRoot":"","sources":["../src/client-bundle.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,EAAmF,MAAM,yBAAyB,CAAC;AAuEnL;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA4BhE;AAED;;;;;GAKG;AACH,UAAU,YAAY;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7B,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE;gBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IACtH,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1C,YAAY,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,EAAE;gBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE;oBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;oBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;iBAAE,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC/F,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAmDD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAKzD;AAkCD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+B7D;AAiCD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAyBlD;AAuQD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+B5D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASxD;AA4CD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GAAG,MAAM,CAoBnG;AAED,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAKtE;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,SAAS,EAAE,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAysB7B;AAMD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CA+B3D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAUlE;AAoCD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAI/F"}
+{"version":3,"file":"client-bundle.d.ts","sourceRoot":"","sources":["../src/client-bundle.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,SAAS,EAAE,mBAAmB,EAAE,kBAAkB,EAAmF,MAAM,yBAAyB,CAAC;AAuEnL;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CA4BhE;AAED;;;;;GAKG;AACH,UAAU,YAAY;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC7B,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvB,YAAY,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE;gBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IACtH,WAAW,CAAC,EAAE;QACZ,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1C,YAAY,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,EAAE;gBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;gBAAC,MAAM,CAAC,EAAE;oBAAE,IAAI,CAAC,EAAE,MAAM,CAAC;oBAAC,IAAI,CAAC,EAAE,MAAM,CAAA;iBAAE,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC/F,CAAC;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAmDD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAKzD;AAkCD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+B7D;AAiCD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAyBlD;AA8RD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CA+B5D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASxD;AA4CD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,GAAG,MAAM,CAoBnG;AAED,yEAAyE;AACzE,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,MAAM,CAKtE;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,SAAS,EAAE,EACtB,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAqwB7B;AAMD,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CA+B3D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAUlE;AAoCD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAI/F"}

package/dist/client-bundle.js

@@ -11,7 +11,7 @@ import { VskComponentOwners } from '@vesk/compiler/src/vsk-collision';
 import { resolveComponentName } from '@vesk/compiler/src/server-codegen';
 import { collectVskImportPaths, vskImportLines } from '@vesk/compiler/src/vsk-imports';
 import { inlineMdContentAttrs, guessProjectRoots } from '@vesk/compiler/src/md-inline';
-import { resolveImportPath, findTsconfigPath } from '@vesk/compiler/src/module-imports';
+import { resolveImportPath, resolveSsrModule, findTsconfigPath } from '@vesk/compiler/src/module-imports';
 import { serverOnlyPlugin } from '@vesk/adapter/src/server-only-plugin';
 import { availableParallelism } from 'node:os';
 /**
@@ -332,7 +332,10 @@ function chunkHasImports(headLen, mergeAborted) {
  * The shared-module pass needs them so the entry bundle publishes exactly the
  * bindings the shared code will read back off `globalThis`.
  */
-function runtimeImportsOf(filePath) {
+function runtimeImportsOf(filePath, seen = new Set()) {
+    if (seen.has(filePath))
+        return [];
+    seen.add(filePath);
     let text;
     try {
         text = readFileSync(filePath, 'utf8');
@@ -354,6 +357,29 @@ function runtimeImportsOf(filePath) {
                 names.push(name);
         }
     }
+    // Shared modules import each other (student.ts -> ./store), and the shim
+    // redirects EVERY @vesk/runtime import in the shared bundle — including the
+    // transitive ones. Exporting only the direct sources' bindings makes
+    // esbuild reject the build ("No matching export in runtime-shim.js"), the
+    // pass falls back to per-chunk inlining, and every chunk gets its own copy
+    // of the store: writes land in one Cell, components subscribe to another.
+    const relativeImport = /import\s+(?:type\s+)?(?:[^'"]*?\sfrom\s*)?['"](\.[^'"]+)['"]/g;
+    for (const match of text.matchAll(relativeImport)) {
+        const base = resolve(dirname(filePath), match[1]);
+        const candidates = [base, `${base}.ts`, `${base}.tsx`, `${base}.js`, `${base}.jsx`,
+            join(base, 'index.ts'), join(base, 'index.tsx'), join(base, 'index.js')];
+        for (const candidate of candidates) {
+            try {
+                if (!existsSync(candidate) || !statSync(candidate).isFile())
+                    continue;
+            }
+            catch {
+                continue;
+            }
+            names.push(...runtimeImportsOf(candidate, seen));
+            break;
+        }
+    }
     return names;
 }
 /**
@@ -977,6 +1003,13 @@ export async function generateClientBundle(routeTree, appDir, componentMap, opti
     }
     if (codeSplit) {
         const chunkEntries = [];
+        // Import tables of EVERY route chunk, even the ones `onlyRoutes` filters
+        // out. Shared-module selection must not depend on the subset being built:
+        // the entry bundle publishes `globalThis.__veskShared` once at startup,
+        // and an on-demand chunk built from a single route would otherwise see each
+        // module "used once" and inline a duplicate copy — the exact module-scope
+        // duplication (auth/session cells) the shared pass exists to prevent.
+        const allRouteImportTables = [];
         function walkSplit(nodes, _chain) {
             for (const node of nodes) {
                 // Each chunk must be self-contained: reset the compile dedupe so a
@@ -1019,6 +1052,11 @@ export async function generateClientBundle(routeTree, appDir, componentMap, opti
                 }
                 if (chunkCode.length > 0) {
                     const chunkName = `page-${buildChunkName(appDir, node)}.js`;
+                    // Record the import table before the route-level filter below:
+                    // shared-module selection (line ~1130) needs the FULL app graph so
+                    // that an on-demand `onlyRoutes` build picks the same shared set as
+                    // the entry bundle built at startup.
+                    allRouteImportTables.push(chunkImports);
                     // Route-level filter for on-demand dev builds. `only` is FILE-level:
                     // it keeps a recompile cheap but still walks every route, so it
                     // cannot make a COLD build lazy.
@@ -1077,18 +1115,55 @@ export async function generateClientBundle(routeTree, appDir, componentMap, opti
          * bundle for every page.
          */
         const sharedUsage = new Map();
-        for (const entry of chunkEntries) {
-            for (const source of new Set(entry.importsTable.sources())) {
+        const sharedUsageTables = [...allRouteImportTables];
+        if (sharedCode.length > 0)
+            sharedUsageTables.push(sharedImports);
+        for (const table of sharedUsageTables) {
+            for (const source of new Set(table.sources())) {
                 sharedUsage.set(source, (sharedUsage.get(source) ?? 0) + 1);
             }
         }
         const isAppLocal = (source) => !source.includes('node_modules') && source.startsWith(resolve(appDir, '..'));
-        const sharedSources = [...sharedUsage.entries()]
-            .filter(([source, uses]) => uses > 1 && isAppLocal(source))
-            .map(([source]) => source);
+        // Resolve bare package specifiers (`vesk-paystack/client`) to their real
+        // files before inspecting them. The import tables key bare specifiers as
+        // written, while the shared bundle needs a path esbuild can load from the
+        // temp directory (the app's node_modules is not an ancestor of it).
+        const sharedFilesFor = new Map();
+        for (const [source, uses] of sharedUsage) {
+            let file = source;
+            if (!source.startsWith('/')) {
+                try {
+                    file = resolveSsrModule(source, appDir) ?? source;
+                }
+                catch {
+                    // Unresolvable specifier — not hoistable.
+                }
+            }
+            if (file.endsWith('.vsk') || !existsSync(file))
+                continue;
+            // A module that imports the runtime carries reactive state: `track()`
+            // cells created in one bundled copy of @vesk/runtime are invisible to
+            // effects subscribed against the entry bundle's copy. Package modules
+            // (`node_modules`) were excluded historically because third-party code
+            // has "no module state worth sharing" — but a hook library that owns a
+            // tracked cell is exactly that state. Hoist any such module into the
+            // shared bundle, where its runtime imports are redirected to the single
+            // entry instance, even when only one chunk uses it.
+            let needsRuntime = false;
+            try {
+                needsRuntime = runtimeImportsOf(file).length > 0;
+            }
+            catch {
+                // Unparseable/unreadable — leave it to the per-chunk bundler.
+            }
+            if (needsRuntime || (uses > 1 && isAppLocal(source))) {
+                sharedFilesFor.set(source, file);
+            }
+        }
+        const sharedSources = [...new Set(sharedFilesFor.values())];
         if (process.env.VESK_DEBUG_SHARED) {
             console.error('[shared] candidates:', [...sharedUsage.entries()].map(([s, n]) => `${n}x ${s}`).join('\n'));
-            console.error('[shared] selected:', sharedSources.join(', '));
+            console.error('[shared] selected:', [...sharedFilesFor.entries()].map(([s, f]) => `${s} -> ${f}`).join('\n'));
         }
         const chunkAlias = {};
         let sharedBundleCode = '';
@@ -1147,8 +1222,10 @@ export async function generateClientBundle(routeTree, appDir, componentMap, opti
                 });
                 sharedBundleCode = result.outputFiles[0].text;
                 // Per-chunk shims: `export const login = __veskShared['…'].login`.
-                // esbuild inlines these tiny stubs instead of the real module.
-                sharedSources.forEach((source, i) => {
+                // esbuild inlines these tiny stubs instead of the real module. A
+                // package can be imported by its bare specifier in one chunk and by
+                // its absolute path in another; both aliases read the same file entry.
+                [...sharedFilesFor.entries()].forEach(([source, file], i) => {
                     const named = new Set();
                     let hasDefault = false;
                     for (const entry of chunkEntries) {
@@ -1157,7 +1234,7 @@ export async function generateClientBundle(routeTree, appDir, componentMap, opti
                         hasDefault = hasDefault || bindings.hasDefault;
                     }
                     const shim = join(tmpBase, `shim-${i}.js`);
-                    const shimLines = [`const m = globalThis.__veskShared[${JSON.stringify(source)}];`];
+                    const shimLines = [`const m = globalThis.__veskShared[${JSON.stringify(file)}];`];
                     if (hasDefault)
                         shimLines.push(`export default m;`);
                     for (const name of [...named].sort()) {
@@ -1353,7 +1430,7 @@ export async function generateClientBundle(routeTree, appDir, componentMap, opti
                     const fileName = options?.hmr ? chunkName : hashedName(chunkName, emitted.code);
                     node.chunk = `/_vesk/static/${fileName}`;
                 }
-                else if (options?.skipRouteChunks) {
+                else if (options?.skipRouteChunks && (node.page || node.layout)) {
                     // The body is deferred, but the URL must still be published now.
                     // The route tree — chunk URLs included — is baked into the ENTRY
                     // bundle and the client router fetches `node.chunk` with no server
@@ -1362,6 +1439,19 @@ export async function generateClientBundle(routeTree, appDir, componentMap, opti
                     // Dev chunk URLs are unhashed, so they depend only on the route and
                     // are identical whether or not the body has been built — which also
                     // keeps the entry bundle's cache key stable across lazy builds.
+                    //
+                    // Layout-only container nodes (e.g. `app/public` with `layout.vsk`
+                    // but no `page.vsk`) DO own a chunk: hydration calls the layout
+                    // hydrator for every chain node, and without this URL the layout
+                    // chunk is never loaded -> `hydLayout is not a function` -> the
+                    // default 500 page replaces the SSR output.
+                    //
+                    // Page-less and layout-less container nodes (a directory with only
+                    // a dynamic child, e.g. `app/portal/assessments/[assessmentId]`) get
+                    // no chunk, exactly as in a production build. Publishing one here
+                    // makes the router eagerly preload a URL that is never built: the
+                    // 404 surfaces as a dev overlay ("Failed to load chunk") on
+                    // unrelated pages.
                     node.chunk = `/_vesk/static/${chunkName}`;
                 }
                 annotate(node.children || []);

package/dist/dev-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-server.d.ts","sourceRoot":"","sources":["../src/dev-server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,MAAM,EAA6C,MAAM,WAAW,CAAC;AASjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAO7C,OAAO,KAAK,EAAa,gBAAgB,EAAwB,MAAM,yBAAyB,CAAC;AAgBjG;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,IAAI,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;IAC9C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB;+EAC2E;IAC3E,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAgDD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,mHAAmH;IACnH,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B;;8BAE0B;IAC1B,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,WAAW,CAAC;IAChC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,GAAG;IACvE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;CAChH,CAUA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAa3C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIrD;AAUD,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAorBvG"}
+{"version":3,"file":"dev-server.d.ts","sourceRoot":"","sources":["../src/dev-server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,MAAM,EAA6C,MAAM,WAAW,CAAC;AASjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAO7C,OAAO,KAAK,EAAa,gBAAgB,EAAwB,MAAM,yBAAyB,CAAC;AAgBjG;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,IAAI,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;IAC9C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB;+EAC2E;IAC3E,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,IAAI,WAAW,CAEhD;AAwDD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,mHAAmH;IACnH,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC7B;;8BAE0B;IAC1B,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,WAAW,CAAC;IAChC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,uBAAuB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3E;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,GAAG;IACvE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;CAChH,CAUA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAa3C;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIrD;AAUD,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAorBvG"}

package/dist/dev-server.js

@@ -38,8 +38,16 @@ const devHmrState = typeof hmrApi.getHmrState === 'function'
  * Writes a handler Response to the socket, piping a streaming body
  * chunk-by-chunk (SSE / text streams) instead of buffering everything.
  */
+/** Preserve every Set-Cookie header — Headers collapses them otherwise. */
+function toNodeHeaders(response) {
+    const headers = Object.fromEntries(response.headers);
+    const cookies = response.headers.getSetCookie?.() ?? [];
+    if (cookies.length > 0)
+        headers['set-cookie'] = cookies;
+    return headers;
+}
 async function deliverResponse(res, response) {
-    res.writeHead(response.status, Object.fromEntries(response.headers));
+    res.writeHead(response.status, toNodeHeaders(response));
     const body = response.body;
     if (body && typeof body.getReader === 'function') {
         const reader = body.getReader();

package/dist/hmr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hmr.d.ts","sourceRoot":"","sources":["../src/hmr.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,OAAO,EAAsC,KAAK,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEvG,OAAO,KAAK,EAAE,SAAS,EAAkB,MAAM,yBAAyB,CAAC;AAIzE;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAaD,wBAAgB,WAAW,IAAI;IAC7B,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAQA;AAED,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,wBAA6B,GAClC,eAAe,CAsGjB;AAqTD,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC;IACD,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAClE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvH,WAAW,EAAE,MAAM,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;CACnD,CA6KA"}
+{"version":3,"file":"hmr.d.ts","sourceRoot":"","sources":["../src/hmr.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAWxC,OAAO,EAAsC,KAAK,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEvG,OAAO,KAAK,EAAE,SAAS,EAAkB,MAAM,yBAAyB,CAAC;AAIzE;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAaD,wBAAgB,WAAW,IAAI;IAC7B,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAQA;AAED,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,wBAA6B,GAClC,eAAe,CAsGjB;AAyTD,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GACjC;IACD,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IAClE,gBAAgB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvH,WAAW,EAAE,MAAM,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;CACnD,CA6KA"}

package/dist/hmr.js

@@ -446,12 +446,16 @@ function regenerateSsrFunction(routeNode, appDir, outDir, componentMap, options)
         '',
         persistedStoreSsrCode(),
         '',
-        'export async function handle(request) {',
+        // Underscored internal name (see api-function.ts): page source is inlined
+        // above and may declare its own `handle`.
+        'async function __vesk_ssr_handle(request) {',
         '  const url = new URL(request.url);',
         "  const urlParts = url.pathname.split('/').filter(Boolean);",
         `  ${paramsCode}`,
         renderCode,
         '}',
+        '',
+        'export { __vesk_ssr_handle as handle };',
     ].join('\n');
     writeFileSync(funcPath, funcCode, 'utf-8');
 }

package/dist/prod-server.d.ts

@@ -1,7 +1,6 @@
-import { type Server } from 'node:http';
+import { type IncomingMessage, type Server } from 'node:http';
 import type { CompressionConfig, ProdServerOptions } from '@vesk/adapter/src/types';
-export declare function startProdServer(outDir: string, options?: ProdServerOptions & {
-    compression?: CompressionConfig | false;
-    healthCheck?: boolean;
-}): Promise<Server>;
+export type { CompressionConfig, ProdServerOptions };
+export declare function resolveRequestUrl(req: IncomingMessage, port: number, trustProxy: boolean): URL;
+export declare function startProdServer(outDir: string, options?: ProdServerOptions): Promise<Server>;
 //# sourceMappingURL=prod-server.d.ts.map

package/dist/prod-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prod-server.d.ts","sourceRoot":"","sources":["../src/prod-server.ts"],"names":[],"mappings":"AAEA,OAAO,EAA2D,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAejG,OAAO,KAAK,EAAkB,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAyHpG,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG;IAAE,WAAW,CAAC,EAAE,iBAAiB,GAAG,KAAK,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAwoBvK"}
+{"version":3,"file":"prod-server.d.ts","sourceRoot":"","sources":["../src/prod-server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgB,KAAK,eAAe,EAAuB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAejG,OAAO,KAAK,EAAkB,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAIpG,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;AAuIrD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,GAAG,CAY9F;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAooBlG"}

package/dist/prod-server.js

@@ -43,8 +43,16 @@ const DELIVER_BUFFER_LIMIT = 1024 * 1024;
  * or that declares an open-ended content type, falls back to streaming so the
  * memory and time-to-first-byte cost of a genuinely large body is unchanged.
  */
-async function deliverResponse(res, response) {
+/** Preserve every Set-Cookie header — Headers collapses them otherwise. */
+function toNodeHeaders(response) {
     const headers = Object.fromEntries(response.headers);
+    const cookies = response.headers.getSetCookie?.() ?? [];
+    if (cookies.length > 0)
+        headers['set-cookie'] = cookies;
+    return headers;
+}
+async function deliverResponse(res, response) {
+    const headers = toNodeHeaders(response);
     const body = response.body;
     if (!body || typeof body.getReader !== 'function') {
         res.writeHead(response.status, headers);
@@ -107,6 +115,25 @@ function errorStatus(e, fallback) {
     const s = e?.status ?? e?.statusCode;
     return typeof s === 'number' && s >= 400 && s < 600 ? s : fallback;
 }
+function firstHeaderValue(value) {
+    const raw = Array.isArray(value) ? value[0] : value;
+    const trimmed = raw?.split(',')[0]?.trim();
+    return trimmed || undefined;
+}
+export function resolveRequestUrl(req, port, trustProxy) {
+    const proto = req.socket.encrypted
+        ? 'https'
+        : getClientProtocol({ headers: req.headers }, trustProxy);
+    const forwardedHost = trustProxy ? firstHeaderValue(req.headers['x-forwarded-host']) : undefined;
+    const host = forwardedHost || req.headers.host || `localhost:${port}`;
+    const path = req.url || '/';
+    try {
+        return new URL(path, `${proto}://${host}`);
+    }
+    catch {
+        return new URL(path, `http://localhost:${port}`);
+    }
+}
 export async function startProdServer(outDir, options) {
     const port = options?.port || 3000;
     const host = options?.host || '127.0.0.1';
@@ -276,12 +303,8 @@ export async function startProdServer(outDir, options) {
         return req.headers['x-real-ip'] || req.socket?.remoteAddress || 'unknown';
     }
     const server = createServer(async (req, res) => {
-        const url = new URL(req.url || '/', `http://localhost:${port}`);
-        const reqHost = req.headers.host || `localhost:${port}`;
-        const proto = req.socket.encrypted
-            ? 'https'
-            : getClientProtocol({ headers: req.headers }, !!securityConfig?.trustProxy);
-        globalThis.__vesk_ssr_base_url = `${proto}://${reqHost}`;
+        const url = resolveRequestUrl(req, port, !!securityConfig?.trustProxy);
+        globalThis.__vesk_ssr_base_url = url.origin;
         // Liveness probe. Deliberately the FIRST thing in the handler, ahead of the
         // rate limiter, middleware and the pipeline below:
         //  - a probe that can be answered 429 is indistinguishable from a dead

package/dist/response-pipeline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"response-pipeline.d.ts","sourceRoot":"","sources":["../src/response-pipeline.ts"],"names":[],"mappings":"AAyCA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAKjE,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AAE5C;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,eAAe,GAAG,IAAI,CAgC/F;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAwB3E;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAWjG;AAED,MAAM,WAAW,uBAAuB;IACvC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mDAAmD;IACnD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AA8BD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,uBAA4B,GACnC,IAAI,CA2ON"}
+{"version":3,"file":"response-pipeline.d.ts","sourceRoot":"","sources":["../src/response-pipeline.ts"],"names":[],"mappings":"AAgEA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAKjE,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,MAAM,CAAC;AAE5C;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,eAAe,GAAG,IAAI,CAgC/F;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAwB3E;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAWjG;AAED,MAAM,WAAW,uBAAuB;IACvC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mDAAmD;IACnD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AA8BD;;;;GAIG;AACH,wBAAgB,uBAAuB,CACtC,GAAG,EAAE,cAAc,EACnB,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,uBAA4B,GACnC,IAAI,CA2ON"}

package/dist/response-pipeline.js

@@ -29,6 +29,29 @@
  * Deliberately not here: range requests, `Last-Modified`/`If-Modified-Since`
  * (the ETag covers the same revalidation need and cannot disagree with itself),
  * and compression of already-encoded bodies.
+ *
+ * ## Shape
+ *
+ * ```ts
+ * installResponsePipeline(res, req, {
+ *   compress?: boolean;        // default true
+ *   compressThreshold?: number;// default 1024
+ *   etag?: boolean;            // default true
+ *   brotliQuality?: number;    // 0-11, default 5
+ *   gzipLevel?: number;        // 1-9, default 6
+ * })
+ *
+ * // pure helpers, exported for testing and for any other transport
+ * negotiateEncoding(acceptEncoding): 'br' | 'gzip' | null
+ * isCompressibleType(contentType): boolean
+ * etagFor(body: Buffer): '"..."'
+ * ifNoneMatchSatisfied(ifNoneMatch, etag): boolean
+ * ```
+ *
+ * Install it ONCE per request, before any header is written. It is idempotent
+ * per `res` in the sense that matters — a second install would defer again —
+ * but a handler that bypasses it loses compression, `Vary`, ETag and 304 for
+ * everything it serves, silently.
  */
 import { createHash } from 'node:crypto';
 import { brotliCompress, constants as zlibConstants, createBrotliCompress, createGzip, gzip, } from 'node:zlib';

package/dist/server-only-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-only-plugin.d.ts","sourceRoot":"","sources":["../src/server-only-plugin.ts"],"names":[],"mappings":"AA0BA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,qEAAqE;IACrE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,CAAC;IACtC,kEAAkE;IAClE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAClE;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACtF;AAED,kGAAkG;AAClG,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,CACT,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,EAC5C,EAAE,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,KACtD,IAAI,CAAC;QACV,MAAM,EAAE,CACN,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,EAC3C,EAAE,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,KAAK;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,KACjE,IAAI,CAAC;KACX,KAAK,IAAI,CAAC;CACZ;AAMD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CA+C1E;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAmB3D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAoDxE;AAED,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,iBAAiB,CAoDzF"}
+{"version":3,"file":"server-only-plugin.d.ts","sourceRoot":"","sources":["../src/server-only-plugin.ts"],"names":[],"mappings":"AA6CA,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,qEAAqE;IACrE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,IAAI,CAAC;IACtC,kEAAkE;IAClE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAClE;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACtF;AAED,kGAAkG;AAClG,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,CACT,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,EAC5C,EAAE,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,KACtD,IAAI,CAAC;QACV,MAAM,EAAE,CACN,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,EAC3C,EAAE,EAAE,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,KAAK;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,KACjE,IAAI,CAAC;KACX,KAAK,IAAI,CAAC;CACZ;AAMD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CA+C1E;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAmB3D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAoDxE;AAED,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,iBAAiB,CAoDzF"}

package/dist/server-only-plugin.js

@@ -19,6 +19,25 @@
  * TCP drivers are NOT stubbed. A browser bundle cannot contain one under any
  * circumstances, so a stub would ship a page that looks fine and fails at the
  * first query; they are reported and left for esbuild to reject.
+ *
+ * ## Shape
+ *
+ * ```ts
+ * serverOnlyPlugin({
+ *   onStub?:  (hit: { specifier, binding, importer }) => void,   // stubbed
+ *   onDriver?:(hit: { specifier, importer }) => void,           // refused
+ *   onEager?: (hit: { specifier, bindings: string[], importer }) => void, // module-scope: build error
+ * })
+ *
+ * // helpers, exported for testing
+ * importedNamesFor(code, specifier): string[]      // what the importer asks for
+ * referencedAtTopLevel(code, name): boolean       // module-scope use?
+ * stubFactorySource(specifier): string             // the shared throwing proxy
+ * ```
+ *
+ * `onEager` returning null (rather than a stub) is deliberate: the browser would
+ * evaluate that statement while loading the chunk, so there is no call site to
+ * throw at.
  */
 import { readFileSync } from 'node:fs';
 import { parse } from '@vesk/compiler/src/parser';

package/dist/server-only.d.ts

@@ -25,6 +25,32 @@
  *   opt-out: the alternative is discovering it in a deployment log.
  *
  * AST-only throughout. No text scanning — see the module rules.
+ *
+ * ## Shape
+ *
+ * ```ts
+ * // classification
+ * classifySpecifier(spec): 'server-only-package' | 'tcp-driver' | null
+ * isServerOnlySpecifier(spec): boolean
+ * isTcpDriverSpecifier(spec): boolean
+ *
+ * // enforcement
+ * serverOnlyStubs(notes: Array<{ specifier, binding }>): string        // from a recorded list
+ * serverOnlyImportStubs(code, classify?): string                      // scanned from source
+ * scanServerOnlyImports(files: Array<{ path, code }>): ServerOnlyViolation[]
+ * tcpDriverViolations(appDir): ServerOnlyViolation[]                  // whole app tree
+ * edgeDriverBuildError(violations): Error                             // the socketless message
+ *
+ * // target
+ * isSocketlessTarget(platform, target): boolean
+ * collectAppSources(dir, out?): string[]
+ * ```
+ *
+ * Adding to the table: extend `SERVER_ONLY_EXACT` / `TCP_DRIVERS`, and — if the
+ * package is legitimately usable on the client through a subpath — leave that
+ * subpath unmatched, as `slintorm/edge` is. See
+ * `packages/adapter/AGENTS.md` for the three outcomes the plugin must
+ * distinguish.
  */
 export type ServerOnlyKind = 'server-only-package' | 'tcp-driver';
 /**

package/dist/server-only.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-only.d.ts","sourceRoot":"","sources":["../src/server-only.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAsCH,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAAG,YAAY,CAAC;AAElE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAMrE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,CAkB5F;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,cAAc,GAAG,IAAwB,GAAG,MAAM,CAoBjI;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3C,mBAAmB,EAAE,CA8BvB;AAYD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,KAAK,CAU7E;AAYD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAGlH;AAMD,sDAAsD;AACtD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,EAAO,GAAG,MAAM,EAAE,CAwB3E;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAUzE"}
+{"version":3,"file":"server-only.d.ts","sourceRoot":"","sources":["../src/server-only.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAsCH,MAAM,MAAM,cAAc,GAAG,qBAAqB,GAAG,YAAY,CAAC;AAElE;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAMrE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,MAAM,CAkB5F;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,cAAc,GAAG,IAAwB,GAAG,MAAM,CAoBjI;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,2BAA2B;IAC3B,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3C,mBAAmB,EAAE,CA8BvB;AAYD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,KAAK,CAU7E;AAYD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAGlH;AAMD,sDAAsD;AACtD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,EAAO,GAAG,MAAM,EAAE,CAwB3E;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,EAAE,CAUzE"}

package/dist/server-only.js

@@ -25,6 +25,32 @@
  *   opt-out: the alternative is discovering it in a deployment log.
  *
  * AST-only throughout. No text scanning — see the module rules.
+ *
+ * ## Shape
+ *
+ * ```ts
+ * // classification
+ * classifySpecifier(spec): 'server-only-package' | 'tcp-driver' | null
+ * isServerOnlySpecifier(spec): boolean
+ * isTcpDriverSpecifier(spec): boolean
+ *
+ * // enforcement
+ * serverOnlyStubs(notes: Array<{ specifier, binding }>): string        // from a recorded list
+ * serverOnlyImportStubs(code, classify?): string                      // scanned from source
+ * scanServerOnlyImports(files: Array<{ path, code }>): ServerOnlyViolation[]
+ * tcpDriverViolations(appDir): ServerOnlyViolation[]                  // whole app tree
+ * edgeDriverBuildError(violations): Error                             // the socketless message
+ *
+ * // target
+ * isSocketlessTarget(platform, target): boolean
+ * collectAppSources(dir, out?): string[]
+ * ```
+ *
+ * Adding to the table: extend `SERVER_ONLY_EXACT` / `TCP_DRIVERS`, and — if the
+ * package is legitimately usable on the client through a subpath — leave that
+ * subpath unmatched, as `slintorm/edge` is. See
+ * `packages/adapter/AGENTS.md` for the three outcomes the plugin must
+ * distinguish.
  */
 import { parse } from '@vesk/compiler/src/parser';
 import { readFileSync, readdirSync, statSync } from 'node:fs';

package/dist/ssr-function.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssr-function.d.ts","sourceRoot":"","sources":["../src/ssr-function.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAkB,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7F;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQlG;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEjF;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpF;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQvG;AAgED;;;2EAG2E;AAC3E,wBAAgB,qBAAqB,IAAI,MAAM,CA4C9C;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,OAAO,CAAC,EAAE,kBAAkB,GAC3B;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CA6etD"}
+{"version":3,"file":"ssr-function.d.ts","sourceRoot":"","sources":["../src/ssr-function.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,SAAS,EAAkB,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7F;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQlG;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEjF;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEpF;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQvG;AAgED;;;2EAG2E;AAC3E,wBAAgB,qBAAqB,IAAI,MAAM,CA4C9C;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,OAAO,CAAC,EAAE,kBAAkB,GAC3B;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAiftD"}

package/dist/ssr-function.js

@@ -528,7 +528,9 @@ export function generateSsrFunction(routeNode, appDir, outDir, componentMap, opt
         '',
     ].join('\n');
     const actionCode = [
-        'export async function handleAction(request, id) {',
+        // Underscored internal name (see api-function.ts): page source is inlined
+        // into this module and may declare/import `handleAction` itself.
+        'async function __vesk_handleAction(request, id) {',
         '  // CSRF defense: cross-site browser POSTs always carry an Origin header.',
         '  try {',
         '    assertSameOrigin(request);',
@@ -606,6 +608,8 @@ export function generateSsrFunction(routeNode, appDir, outDir, componentMap, opt
         '  }',
         '}',
         '',
+        'export { __vesk_handleAction as handleAction };',
+        '',
     ].join('\n');
     const funcCode = [
         "import { renderFullPage, renderPageStream, renderPage, hydratePrecompile, parseCookies, getAction, validateActionInput, issuesToFieldMap, storeDataScriptGlobal, withSsrStore, assertSameOrigin, VeskRequest, installPersistedStoreServerHooks, persistedStoreCookieName, getPersistedStoreKeys, resetPersistedStoreKeys, buildStorePrePaintPayload, storeInitScriptGlobal, storeInitScriptTag } from '../runtime.js';",

package/dist/web-request.d.ts

@@ -19,6 +19,28 @@
  * `text()`/`json()`/`formData()` serve from that cache if the stream has already
  * been taken. A handler that reads `request.body` and then calls
  * `request.text()` gets the body once, not a hang.
+ *
+ * ## Shape
+ *
+ * ```ts
+ * makeWebRequest(nodeReq, url, maxBodyBytes?): ExtendedRequest
+ *
+ * interface ExtendedRequest extends Request {
+ *   body: ReadableStream<Uint8Array> | null;   // lazy; null for GET/HEAD
+ *   text(): Promise<string>;
+ *   json(): Promise<unknown>;
+ *   formData(): Promise<FormData>;
+ *   clone(): ExtendedRequest;                  // same object — one socket, one read
+ *   cookies: Record<string, string>;
+ *   query: Record<string, string>;
+ * }
+ *
+ * bodyTooLarge(maxBytes): Error & { status: 413 }   // re-exported by prod-server
+ * ```
+ *
+ * One instance per request. Do not attach string-keyed properties to it — that is
+ * a public name the framework has to reserve forever, with no type for it. Use a
+ * private `Symbol` (see `AUTO_PARSED` in `@vesk/plugin-multipart`).
  */
 import type { IncomingMessage } from 'node:http';
 export interface ExtendedRequest extends Request {

package/dist/web-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-request.d.ts","sourceRoot":"","sources":["../src/web-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAIjD,MAAM,WAAW,eAAgB,SAAQ,OAAO;IAC9C,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,KAAK,IAAI,eAAe,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAIzE;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,MAAM,EACX,YAAY,GAAE,MAA+B,GAC5C,eAAe,CAwIjB"}
+{"version":3,"file":"web-request.d.ts","sourceRoot":"","sources":["../src/web-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAIjD,MAAM,WAAW,eAAgB,SAAQ,OAAO;IAC9C,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,KAAK,IAAI,eAAe,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAIzE;AAED,wBAAgB,cAAc,CAC5B,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,MAAM,EACX,YAAY,GAAE,MAA+B,GAC5C,eAAe,CAwIjB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vesk/adapter",
-  "version": "0.2.71",
+  "version": "0.2.74",
   "type": "module",
   "description": "Vesk adapter — builds deployable .vesk/ output for Deno and Node serverless",
   "main": "./dist/index.js",
@@ -23,9 +23,9 @@
     "sharp": "^0.35.3"
   },
   "dependencies": {
-    "@vesk/compiler": "^0.2.71",
-    "@vesk/runtime": "^0.2.71",
-    "@vesk/types": "^0.2.71"
+    "@vesk/compiler": "^0.2.74",
+    "@vesk/runtime": "^0.2.74",
+    "@vesk/types": "^0.2.74"
   },
   "devDependencies": {
     "@types/ws": "^8.18.1",