@waniwani/kit 0.1.6 → 0.1.8

package/dist/cli/template.js

@@ -0,0 +1,173 @@
+/**
+ * Resolve the distribution template.
+ *
+ * The template is a separate public repo, consumed as-is. Nothing is forked
+ * into this package: the generator downloads the repo at a pinned commit,
+ * caches it, and copies the plumbing out of it. What ships to customers is the
+ * same tree anyone can read on GitHub, clone, and deploy by hand.
+ *
+ * Sources:
+ *   github:OWNER/REPO#REF   a GitHub repo at a branch, tag, or SHA (default)
+ *   /path/to/checkout       a local clone, for working on the template itself
+ *
+ * Override per command with `--template <source>` or `WANIWANI_TEMPLATE`.
+ */
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, readdirSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { homedir, tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+/**
+ * A commit, not a branch.
+ *
+ * A published version of this package is frozen, and what it generates has to
+ * be frozen with it. While the default was `beta`, the ref was re-resolved on
+ * the customer's machine at every command, so a push to that branch changed the
+ * output of every installed copy, and the assertions that catch a layout move
+ * (`REQUIRED` and `assertSeam` in `./codegen.js`) fired in a customer's
+ * terminal. Pinning a commit moves that failure into this repo's CI, where
+ * `scripts/template-contract.ts` builds a real app against the pin before a
+ * release goes out.
+ *
+ * Bumping it is a one-line diff, and `scripts/bump-deps.ts` proposes it. The
+ * commit is on the template's `beta` branch: the generator is written against
+ * that branch's layout (`vite.config.ts`, `src/server.ts`, `src/views/`), and
+ * `main` is still the older `server/` + `web/` + `api/` split, which it cannot
+ * absorb. An annotated tag can replace the SHA here whenever the template grows
+ * one, with no change to the resolver.
+ *
+ * This commit is `beta`'s head, and it reads `search` and `tracking` off
+ * `src/waniwani.ts` — the two fields `generateServerApp` emits from the app's
+ * `defineApp({ ... })`. That pairing is the reason to bump the two together:
+ * moving the pin here without the generator emitting those fields compiles to
+ * TS2339, and the contract is what catches it.
+ *
+ * Working on the template itself does not need a release: pass `--template` or
+ * set `WANIWANI_TEMPLATE` to a branch ref or a local checkout.
+ */
+export const DEFAULT_TEMPLATE = "github:WaniWani-AI/mcp-distribution-template#c0d00e72a3733a5f42389731fe6bbaf7e0e07863";
+const CACHE_ROOT = join(homedir(), ".cache", "waniwani", "templates");
+/** `github:owner/repo#ref` -> its parts. */
+function parseGithub(source) {
+    const match = /^github:([^/]+)\/([^#]+)(?:#(.+))?$/.exec(source);
+    if (!match)
+        return null;
+    return { owner: match[1], repo: match[2], ref: match[3] ?? "main" };
+}
+/** A full commit SHA, which is already the thing a ref has to be resolved to. */
+function isSha(ref) {
+    return /^[0-9a-f]{40}$/i.test(ref);
+}
+/**
+ * Resolve a ref to a commit SHA, so a cache entry is content-addressed and two
+ * builds of the same ref cannot silently differ.
+ */
+async function resolveSha({ owner, repo, ref }) {
+    // The pinned default is a commit, and asking the API to resolve a commit to
+    // itself is a round trip that can rate-limit, fail, or go down. A cached
+    // pin then needs no network at all, which is the point of pinning.
+    if (isSha(ref))
+        return ref.toLowerCase();
+    let response;
+    try {
+        response = await fetch(`https://api.github.com/repos/${owner}/${repo}/commits/${ref}`, {
+            headers: { Accept: "application/vnd.github.sha" },
+        });
+    }
+    catch (cause) {
+        // Unreachable network. A cached template is a reasonable answer.
+        const reason = cause instanceof Error ? cause.message : String(cause);
+        throw Object.assign(new Error(`cannot reach GitHub: ${reason}`), { offline: true });
+    }
+    // A bad ref is the caller's mistake, not a network problem — falling back
+    // to a cached template here would hide the typo.
+    if (!response.ok) {
+        throw new Error(`GitHub returned ${response.status} for ${owner}/${repo}@${ref}` +
+            (response.status === 404 ? " — check the repo name and ref, or that it is public" : ""));
+    }
+    return (await response.text()).trim();
+}
+async function download({ owner, repo, sha }, destination) {
+    const response = await fetch(`https://codeload.github.com/${owner}/${repo}/tar.gz/${sha}`);
+    if (!response.ok) {
+        throw new Error(`could not download ${owner}/${repo}@${sha}: ${response.status}`);
+    }
+    const archive = join(tmpdir(), `waniwani-template-${sha}.tar.gz`);
+    writeFileSync(archive, Buffer.from(await response.arrayBuffer()));
+    // Extract into a staging directory first, so an interrupted run cannot
+    // leave a half-populated cache entry that later builds would trust.
+    const staging = `${destination}.partial`;
+    rmSync(staging, { recursive: true, force: true });
+    mkdirSync(staging, { recursive: true });
+    const result = spawnSync("tar", ["-xzf", archive, "-C", staging, "--strip-components=1"]);
+    rmSync(archive, { force: true });
+    if (result.status !== 0) {
+        rmSync(staging, { recursive: true, force: true });
+        throw new Error(`could not extract the template archive: ${result.stderr?.toString().trim()}`);
+    }
+    rmSync(destination, { recursive: true, force: true });
+    spawnSync("mv", [staging, destination]);
+}
+/** The newest cache entry for a repo, used when the network is unavailable. */
+function newestCached(owner, repo) {
+    if (!existsSync(CACHE_ROOT))
+        return null;
+    const prefix = `${owner}-${repo}-`;
+    const entries = readdirSync(CACHE_ROOT)
+        .filter((name) => name.startsWith(prefix))
+        .map((name) => ({ name, mtime: statSync(join(CACHE_ROOT, name)).mtimeMs }))
+        .sort((a, b) => b.mtime - a.mtime);
+    const newest = entries[0];
+    return newest ? join(CACHE_ROOT, newest.name) : null;
+}
+/**
+ * @param source `github:owner/repo#ref` or a local path
+ */
+export async function resolveTemplate(source = DEFAULT_TEMPLATE) {
+    const github = parseGithub(source);
+    if (!github) {
+        const dir = resolve(source);
+        if (!existsSync(dir)) {
+            throw new Error(`template not found: ${dir}`);
+        }
+        return { dir, source, local: true };
+    }
+    const { owner, repo, ref } = github;
+    mkdirSync(CACHE_ROOT, { recursive: true });
+    let sha;
+    try {
+        sha = await resolveSha(github);
+    }
+    catch (error) {
+        const fallback = error.offline ? newestCached(owner, repo) : null;
+        if (!fallback)
+            throw error;
+        return {
+            dir: fallback,
+            source,
+            ref,
+            sha: fallback.split("-").pop(),
+            cached: true,
+            offline: true,
+        };
+    }
+    const dir = join(CACHE_ROOT, `${owner}-${repo}-${sha}`);
+    const cached = existsSync(dir);
+    if (!cached) {
+        await download({ owner, repo, sha }, dir);
+    }
+    return { dir, source, ref, sha, cached };
+}
+/** One-line description of what a build used, for logs and provenance files. */
+export function describeTemplate(template) {
+    if (template.local)
+        return `${template.dir} (local)`;
+    const state = template.offline ? "offline, cached" : template.cached ? "cached" : "downloaded";
+    // A pinned source already carries the commit, so printing the source verbatim
+    // would repeat all 40 characters of it next to the short form. Collapse to
+    // the repo, and say that the commit came from a pin rather than a branch.
+    const github = parseGithub(template.source);
+    const pinned = github && isSha(github.ref);
+    const origin = pinned ? `github:${github.owner}/${github.repo}` : template.source;
+    return `${origin} @ ${template.sha?.slice(0, 7)} (${pinned ? `pinned, ${state}` : state})`;
+}
+//# sourceMappingURL=template.js.map

package/dist/cli/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../cli/template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC9F,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAe1C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAC5B,uFAAuF,CAAC;AAEzF,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;AAEtE,4CAA4C;AAC5C,SAAS,WAAW,CAAC,MAAc;IAClC,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAW,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;AACzF,CAAC;AAED,iFAAiF;AACjF,SAAS,KAAK,CAAC,GAAW;IACzB,OAAO,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAgB;IAC3D,4EAA4E;IAC5E,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;IAEzC,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,gCAAgC,KAAK,IAAI,IAAI,YAAY,GAAG,EAAE,EAAE;YACtF,OAAO,EAAE,EAAE,MAAM,EAAE,4BAA4B,EAAE;SACjD,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,iEAAiE;QACjE,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,0EAA0E;IAC1E,iDAAiD;IACjD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACd,mBAAmB,QAAQ,CAAC,MAAM,QAAQ,KAAK,IAAI,IAAI,IAAI,GAAG,EAAE;YAC/D,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,sDAAsD,CAAC,CAAC,CAAC,EAAE,CAAC,CACxF,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,QAAQ,CACtB,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAgD,EAClE,WAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,+BAA+B,KAAK,IAAI,IAAI,WAAW,GAAG,EAAE,CAAC,CAAC;IAC3F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,IAAI,IAAI,IAAI,GAAG,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,GAAG,SAAS,CAAC,CAAC;IAClE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAElE,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,OAAO,GAAG,GAAG,WAAW,UAAU,CAAC;IACzC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,SAAS,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,KAAa,EAAE,IAAY;IAChD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC;IACnC,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC;SACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SAC1E,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,gBAAgB;IACtE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAEnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IACpC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACJ,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAI,KAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpF,IAAI,CAAC,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC3B,OAAO;YACN,GAAG,EAAE,QAAQ;YACb,MAAM;YACN,GAAG;YACH,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE;YAC9B,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;SACb,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,IAAI,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAC1C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IAClD,IAAI,QAAQ,CAAC,KAAK;QAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IAC/F,8EAA8E;IAC9E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IAClF,OAAO,GAAG,MAAM,MAAM,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;AAC5F,CAAC"}

package/dist/cli/types.js

@@ -0,0 +1,14 @@
+/**
+ * The shapes that cross module boundaries in this CLI.
+ *
+ * Four of them carry the bugs this package has actually shipped, which is why
+ * they are written down rather than inferred: `App` flows from the scanner into
+ * both the validator and the generator, `Override` is the fleet-wide dependency
+ * mechanism, `PackageManifest` is the object `codegen` performs surgery on, and
+ * `Report` is the verdict every command exits on.
+ *
+ * Everything else in here is a small record that happens to be shared by two
+ * modules. Types local to one module stay in that module.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/cli/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../cli/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/cli/validate.js

@@ -0,0 +1,328 @@
+/**
+ * The build check.
+ *
+ * Structural rules first (cheap, from the filesystem), then the modules are
+ * actually imported so a broken export or a flow that fails to compile is
+ * reported here rather than as a stack trace at request time.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join, relative } from "node:path";
+import { loadAppEnv } from "./env.js";
+import { compare, floorOf, installable } from "./peers.js";
+const NAME_RE = /^[a-z0-9](?:[a-z0-9_-]*[a-z0-9])?$/;
+/**
+ * What may appear in an endpoint path segment. Deliberately narrower than what
+ * a filesystem allows: the segment becomes a URL path, and a file called
+ * `Book Call.ts` would be served at a URL nobody would guess.
+ */
+const SEGMENT_RE = /^[a-zA-Z0-9._-]+$/;
+const HTTP_METHODS = new Set(["get", "post", "put", "patch", "delete", "head", "options"]);
+class Report {
+    root;
+    errors = [];
+    warnings = [];
+    constructor(root) {
+        this.root = root;
+    }
+    error(where, message, hint) {
+        this.errors.push({ where, message, hint });
+    }
+    warn(where, message, hint) {
+        this.warnings.push({ where, message, hint });
+    }
+    get ok() {
+        return this.errors.length === 0;
+    }
+}
+function rel(root, file) {
+    return relative(root, file) || ".";
+}
+/** Everything the filesystem alone can tell us. */
+function checkStructure(app, report) {
+    const { root } = app;
+    if (!app.configFile) {
+        report.error("waniwani.config.ts", "missing app config", "create waniwani.config.ts with `export default defineApp({ name: '...' })`");
+    }
+    if (app.tools.length + app.widgets.length + app.flows.length === 0) {
+        report.error(".", "this app exposes nothing", "add a tool (tools/<name>.ts), a widget (widgets/<name>/), or a flow (flows/<name>.ts)");
+    }
+    for (const widget of app.widgets) {
+        const where = rel(root, widget.dir);
+        if (!widget.contract) {
+            report.error(where, "missing widget.ts", "every widget folder needs a widget.ts with `export default defineWidget({ ... })`");
+        }
+        if (!widget.ui) {
+            report.error(where, "missing ui.tsx", "every widget folder needs a ui.tsx with a default-exported React component");
+        }
+    }
+    // Styling is Tailwind, out of the template's `src/index.css`. Nothing imports
+    // an app's own CSS, so a styles.css is a file whose rules never load — and it
+    // fails in the worst way, by rendering an unstyled widget rather than an
+    // error. Naming it here costs one deletion; missing it costs a debugging
+    // session against a bundle that never mentions the file.
+    for (const file of app.strayStyles) {
+        report.error(rel(root, file), "app CSS is not bundled — nothing imports this file", "style with Tailwind utility classes in ui.tsx; the template's src/index.css carries the @theme tokens and the `dark` variant");
+    }
+    // A widget's folder name is its MCP tool name and its bundle entry name, so
+    // it has to survive both.
+    const named = [
+        ...app.tools.map((t) => ({ kind: "tool", name: t.name, where: rel(root, t.file) })),
+        ...app.widgets.map((w) => ({ kind: "widget", name: w.name, where: rel(root, w.dir) })),
+    ];
+    const seen = new Map();
+    for (const entry of named) {
+        if (!NAME_RE.test(entry.name)) {
+            report.error(entry.where, `"${entry.name}" is not a valid MCP tool name`, "use lowercase letters, digits, dashes and underscores");
+        }
+        const previous = seen.get(entry.name);
+        if (previous) {
+            report.error(entry.where, `name "${entry.name}" is already taken by ${previous.kind} ${previous.where}`, "tool and widget names share one namespace — rename one of them");
+        }
+        seen.set(entry.name, entry);
+    }
+    // An endpoint's file position is its URL, so a segment that cannot appear in
+    // a URL is a file served somewhere unguessable, and two files resolving to
+    // one path means the second mount is dead — Express answers from the first.
+    const paths = new Map();
+    // The generator names one import per endpoint, camel-cased from the path, so
+    // two paths that camel-case alike (`api/cal-slots.ts`, `api/cal/slots.ts`)
+    // would emit the same identifier twice and fail in generated code the author
+    // cannot open.
+    const identifiers = new Map();
+    for (const endpoint of app.endpoints) {
+        const where = rel(root, endpoint.file);
+        const identifier = endpoint.segments
+            .join("-")
+            .replace(/[^a-zA-Z0-9]/g, "")
+            .toLowerCase();
+        const clash = identifiers.get(identifier);
+        if (clash) {
+            report.error(where, `this path generates the same import name as ${clash}`, "rename one of the two — the generator derives an identifier from the path");
+        }
+        identifiers.set(identifier, where);
+        for (const segment of endpoint.segments) {
+            if (SEGMENT_RE.test(segment))
+                continue;
+            report.error(where, `"${segment}" cannot be part of a URL path`, "use letters, digits, dashes, dots and underscores — the file's position is the endpoint's path");
+        }
+        const previous = paths.get(endpoint.path);
+        if (previous) {
+            report.error(where, `${endpoint.path} is already served by ${previous}`, "two files resolve to one path — Express answers from the first, so this one never runs");
+        }
+        paths.set(endpoint.path, where);
+    }
+    // Flows point at widgets by name. Catching a typo here beats catching it
+    // when a user is halfway through a conversation.
+    const widgetNames = new Set(app.widgets.map((w) => w.name));
+    for (const flow of app.flows) {
+        const source = readFileSync(flow.file, "utf-8");
+        for (const match of source.matchAll(/showWidget\(\s*\{[^}]*?tool:\s*["'`]([^"'`]+)["'`]/gs)) {
+            const target = match[1];
+            if (!widgetNames.has(target)) {
+                report.error(rel(root, flow.file), `showWidget references the widget "${target}", which does not exist`, widgetNames.size > 0
+                    ? `known widgets: ${[...widgetNames].join(", ")}`
+                    : "this app has no widgets/ folder");
+            }
+        }
+    }
+}
+/** Import each module and check the shape of what it exports. */
+async function checkModules(app, report) {
+    const { root } = app;
+    if (app.configFile) {
+        const config = await load(app.configFile, rel(root, app.configFile), report);
+        if (config && !config.name) {
+            report.error(rel(root, app.configFile), "defineApp() is missing `name`", "the MCP server name, e.g. name: 'oney-split-payment'");
+        }
+    }
+    for (const tool of app.tools) {
+        const where = rel(root, tool.file);
+        const def = await load(tool.file, where, report);
+        if (!def)
+            continue;
+        if (typeof def.run !== "function") {
+            report.error(where, "tool is missing run()", "export default defineTool({ ..., run })");
+        }
+        if (!def.description) {
+            report.error(where, "tool is missing a description", "the description is how the model decides to call it — say when to use it");
+        }
+        if (!def.title) {
+            report.warn(where, "tool is missing a title", "titles show up in connector UIs");
+        }
+    }
+    for (const widget of app.widgets) {
+        if (!widget.contract)
+            continue;
+        const where = rel(root, widget.contract);
+        const def = await load(widget.contract, where, report);
+        if (!def)
+            continue;
+        if (!def.data || typeof def.data !== "object") {
+            report.error(where, "widget is missing a `data` schema", "data is the single schema for input, output, and the component's props");
+        }
+        if (!def.description) {
+            report.error(where, "widget is missing a description", "the description is how the model decides to show it");
+        }
+    }
+    for (const endpoint of app.endpoints) {
+        const where = rel(root, endpoint.file);
+        const def = await load(endpoint.file, where, report);
+        if (!def)
+            continue;
+        if (typeof def.handler !== "function") {
+            report.error(where, "endpoint is missing handler()", "export default defineEndpoint({ handler: (req, res) => { ... } })");
+        }
+        for (const method of (def.method ? [def.method].flat() : [])) {
+            if (HTTP_METHODS.has(method))
+                continue;
+            report.error(where, `"${method}" is not an HTTP method`, `one of: ${[...HTTP_METHODS].join(", ")}`);
+        }
+    }
+    for (const flow of app.flows) {
+        const where = rel(root, flow.file);
+        const def = await load(flow.file, where, report);
+        if (!def)
+            continue;
+        if (!def.name || !def.config || typeof def.handler !== "function") {
+            report.error(where, "this is not a compiled flow", "export default createFlow({ ... }).addEdge(...).compile()");
+        }
+    }
+}
+/**
+ * App modules are TypeScript, and they import each other with the `.js`
+ * specifiers TypeScript's ESM output requires — `../lib/plans.js` for a file on
+ * disk called `plans.ts`. Node's built-in type stripping does not remap those,
+ * so validation registers tsx's resolver before importing anything out of the
+ * app folder. Bun does the remapping on its own, which is what hid this while
+ * the CLI still ran under bun.
+ *
+ * Registration is global to the process and idempotent here, so it happens once
+ * on the first load rather than at startup — `waniwani start` never validates.
+ */
+let resolverRegistered = false;
+async function registerTypeScriptResolver() {
+    if (resolverRegistered)
+        return;
+    resolverRegistered = true;
+    const { register } = await import("tsx/esm/api");
+    register();
+}
+async function load(file, where, report) {
+    try {
+        await registerTypeScriptResolver();
+        const module = (await import(`${file}?t=${Date.now()}`));
+        const def = module.default;
+        if (!def) {
+            report.error(where, "no default export", "the runtime loads this module's default export");
+            return null;
+        }
+        return def;
+    }
+    catch (error) {
+        report.error(where, "failed to load", error instanceof Error ? error.message : String(error));
+        return null;
+    }
+}
+/**
+ * The SDK version an app asked for, against the floor this package declares.
+ *
+ * `@waniwani/sdk` is a required peer (see the manifest's `//sdk` note), so the
+ * app owns the version and this is the one place that says what the runtime and
+ * the pinned template need underneath it. It reads two manifests off disk and
+ * fetches nothing, which is why it runs in `check` rather than waiting for the
+ * dependency merge in `codegen.ts` — a version that cannot work should not
+ * need a template download to be told so.
+ *
+ * Undeclared is not an error. npm and bun both install a required peer, and
+ * `codegen.ts` writes one into the generated project, so an app that never
+ * mentions the SDK still gets a working copy.
+ */
+function checkPeers(app, report) {
+    let manifest;
+    try {
+        manifest = JSON.parse(readFileSync(join(app.root, "package.json"), "utf-8"));
+    }
+    catch {
+        // No manifest, or an unparseable one. Both are `init`'s business, and
+        // neither is improved by a second error about a dependency inside it.
+        return;
+    }
+    const name = "@waniwani/sdk";
+    const spec = manifest.dependencies?.[name] ?? manifest.devDependencies?.[name];
+    if (spec == null) {
+        return;
+    }
+    const floor = floorOf(name);
+    const suggestion = installable(name);
+    switch (compare(spec, name)) {
+        case "below":
+            report.error("package.json", `${name} ${spec} cannot reach ${floor}, which this kit needs`, `no version that range allows will work: below the floor the SDK declares a @modelcontextprotocol/ext-apps peer that conflicts with the framework's, and npm refuses the tree. Set ${name} to ${suggestion}.`);
+            break;
+        case "prerelease":
+            report.warn("package.json", `${name} ${spec} is a prerelease, and ${floor} does not accept one`, `npm and bun both exclude a prerelease from a range that names none, so the install warns and the tree may not be what this spec says. Deliberate is fine; ${suggestion} is the released floor.`);
+            break;
+        case "reachable":
+            report.warn("package.json", `${name} ${spec} also allows versions below ${floor}`, `a fresh install resolves above the floor, and a lockfile written before it moved can hold this tree below it. ${suggestion} says the floor out loud.`);
+            break;
+        default:
+            // "ok", and "unknown" for an expression this cannot parse — a
+            // workspace protocol or a git URL, where the version is not in the
+            // string and guessing at it would be a false alarm either way.
+            break;
+    }
+}
+/**
+ * A `vercel.json` at the app root, when the kit's build output needs none.
+ *
+ * A deploy config that names a build command is the dangerous half: it overrides
+ * the one Vercel would pick, and the command it names is a build this kit no
+ * longer performs. The staging command is called out by name because it is what
+ * a build wrote into every app repo before the tree moved to the app root, and
+ * it now deletes the tree it used to place: `waniwani build` stages
+ * `.vercel/output`, then the `rm -rf` in that command removes it and the `cp`
+ * fails on a source that is gone.
+ *
+ * Anything else in the file is the app's own business — a `maxDuration`, a
+ * region, a cron — so this warns and never fails.
+ */
+function checkDeployConfig(app, report) {
+    const file = join(app.root, "vercel.json");
+    if (!existsSync(file))
+        return;
+    let config;
+    try {
+        config = JSON.parse(readFileSync(file, "utf-8"));
+    }
+    catch {
+        report.warn("vercel.json", "is not valid JSON", "Vercel fails the build before it starts.");
+        return;
+    }
+    const command = typeof config.buildCommand === "string" ? config.buildCommand : "";
+    if (command.includes(".waniwani/.vercel/output")) {
+        report.warn("vercel.json", "stages the build output itself, and the build already does", "`waniwani build` leaves the tree at `.vercel/output`, so this command's `rm -rf` deletes it and its `cp` fails on a source that no longer exists. Drop the field: `framework: null` is the only key this file needs.");
+        return;
+    }
+    if (command) {
+        report.warn("vercel.json", `overrides the build command with ${JSON.stringify(command)}`, "Vercel runs this instead of the `build` script in package.json, which is what runs `waniwani build`. Drop the field unless the app genuinely builds differently.");
+    }
+    if (Array.isArray(config.routes)) {
+        report.warn("vercel.json", "carries a `routes` table", "the build's own routing config already sends `/api/*` at the server, and a top-level `routes` entry replaces Vercel's whole routing phase rather than adding to it.");
+    }
+}
+export async function validateApp(app) {
+    // The check imports every server-safe module for real, and a module that
+    // builds a client at import time reads the environment while doing it. An app
+    // that runs fine would otherwise fail its own build check over a variable
+    // sitting in the file next to it.
+    loadAppEnv(app.root);
+    const report = new Report(app.root);
+    checkStructure(app, report);
+    checkPeers(app, report);
+    checkDeployConfig(app, report);
+    // Importing broken modules produces noise on top of structural errors.
+    if (report.ok) {
+        await checkModules(app, report);
+    }
+    return report;
+}
+//# sourceMappingURL=validate.js.map

package/dist/cli/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../cli/validate.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAY3D,MAAM,OAAO,GAAG,oCAAoC,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,GAAG,mBAAmB,CAAC;AAEvC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAE3F,MAAM,MAAM;IACF,IAAI,CAAS;IACb,MAAM,GAAiB,EAAE,CAAC;IAC1B,QAAQ,GAAiB,EAAE,CAAC;IAErC,YAAY,IAAY;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,KAAa,EAAE,OAAe,EAAE,IAAa;QAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,OAAe,EAAE,IAAa;QACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,EAAE;QACL,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;IACjC,CAAC;CACD;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,IAAY;IACtC,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC;AACpC,CAAC;AAED,mDAAmD;AACnD,SAAS,cAAc,CAAC,GAAQ,EAAE,MAAc;IAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAErB,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QACrB,MAAM,CAAC,KAAK,CACX,oBAAoB,EACpB,oBAAoB,EACpB,4EAA4E,CAC5E,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,CAAC,KAAK,CACX,GAAG,EACH,0BAA0B,EAC1B,uFAAuF,CACvF,CAAC;IACH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CACX,KAAK,EACL,mBAAmB,EACnB,mFAAmF,CACnF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CACX,KAAK,EACL,gBAAgB,EAChB,4EAA4E,CAC5E,CAAC;QACH,CAAC;IACF,CAAC;IAED,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,yEAAyE;IACzE,yDAAyD;IACzD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CACX,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,EACf,oDAAoD,EACpD,8HAA8H,CAC9H,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,0BAA0B;IAC1B,MAAM,KAAK,GAAG;QACb,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnF,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KACtF,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkC,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,KAAK,CACX,KAAK,CAAC,KAAK,EACX,IAAI,KAAK,CAAC,IAAI,gCAAgC,EAC9C,uDAAuD,CACvD,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CACX,KAAK,CAAC,KAAK,EACX,SAAS,KAAK,CAAC,IAAI,yBAAyB,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,EAC7E,gEAAgE,CAChE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,eAAe;IACf,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ;aAClC,IAAI,CAAC,GAAG,CAAC;aACT,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,WAAW,EAAE,CAAC;QAChB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CACX,KAAK,EACL,+CAA+C,KAAK,EAAE,EACtD,2EAA2E,CAC3E,CAAC;QACH,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAEnC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvC,MAAM,CAAC,KAAK,CACX,KAAK,EACL,IAAI,OAAO,gCAAgC,EAC3C,gGAAgG,CAChG,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CACX,KAAK,EACL,GAAG,QAAQ,CAAC,IAAI,yBAAyB,QAAQ,EAAE,EACnD,wFAAwF,CACxF,CAAC;QACH,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,sDAAsD,CAAC,EAAE,CAAC;YAC7F,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;YAClC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,KAAK,CACX,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EACpB,qCAAqC,MAAM,yBAAyB,EACpE,WAAW,CAAC,IAAI,GAAG,CAAC;oBACnB,CAAC,CAAC,kBAAkB,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBACjD,CAAC,CAAC,iCAAiC,CACpC,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC;AAED,iEAAiE;AACjE,KAAK,UAAU,YAAY,CAAC,GAAQ,EAAE,MAAc;IACnD,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC;IAErB,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC7E,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CACX,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,EACzB,+BAA+B,EAC/B,sDAAsD,CACtD,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;YACnC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,uBAAuB,EAAE,yCAAyC,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CACX,KAAK,EACL,+BAA+B,EAC/B,0EAA0E,CAC1E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,yBAAyB,EAAE,iCAAiC,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,SAAS;QAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/C,MAAM,CAAC,KAAK,CACX,KAAK,EACL,mCAAmC,EACnC,wEAAwE,CACxE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CACX,KAAK,EACL,iCAAiC,EACjC,qDAAqD,CACrD,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CACX,KAAK,EACL,+BAA+B,EAC/B,mEAAmE,CACnE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAa,EAAE,CAAC;YAC1E,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YACvC,MAAM,CAAC,KAAK,CACX,KAAK,EACL,IAAI,MAAM,yBAAyB,EACnC,WAAW,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzC,CAAC;QACH,CAAC;IACF,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YACnE,MAAM,CAAC,KAAK,CACX,KAAK,EACL,6BAA6B,EAC7B,2DAA2D,CAC3D,CAAC;QACH,CAAC;IACF,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAC/B,KAAK,UAAU,0BAA0B;IACxC,IAAI,kBAAkB;QAAE,OAAO;IAC/B,kBAAkB,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACjD,QAAQ,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IAC9D,IAAI,CAAC;QACJ,MAAM,0BAA0B,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,IAAI,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAA+B,CAAC;QACvF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,mBAAmB,EAAE,gDAAgD,CAAC,CAAC;YAC3F,OAAO,IAAI,CAAC;QACb,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9F,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,UAAU,CAAC,GAAQ,EAAE,MAAc;IAC3C,IAAI,QAAyB,CAAC;IAC9B,IAAI,CAAC;QACJ,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAoB,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACR,sEAAsE;QACtE,sEAAsE;QACtE,OAAO;IACR,CAAC;IAED,MAAM,IAAI,GAAG,eAAe,CAAC;IAC7B,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/E,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;QAClB,OAAO;IACR,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7B,KAAK,OAAO;YACX,MAAM,CAAC,KAAK,CACX,cAAc,EACd,GAAG,IAAI,IAAI,IAAI,iBAAiB,KAAK,wBAAwB,EAC7D,qLAAqL,IAAI,OAAO,UAAU,GAAG,CAC7M,CAAC;YACF,MAAM;QACP,KAAK,YAAY;YAChB,MAAM,CAAC,IAAI,CACV,cAAc,EACd,GAAG,IAAI,IAAI,IAAI,yBAAyB,KAAK,sBAAsB,EACnE,6JAA6J,UAAU,yBAAyB,CAChM,CAAC;YACF,MAAM;QACP,KAAK,WAAW;YACf,MAAM,CAAC,IAAI,CACV,cAAc,EACd,GAAG,IAAI,IAAI,IAAI,+BAA+B,KAAK,EAAE,EACrD,iHAAiH,UAAU,2BAA2B,CACtJ,CAAC;YACF,MAAM;QACP;YACC,8DAA8D;YAC9D,mEAAmE;YACnE,+DAA+D;YAC/D,MAAM;IACR,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,iBAAiB,CAAC,GAAQ,EAAE,MAAc;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAE9B,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAkB,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,EAAE,0CAA0C,CAAC,CAAC;QAC5F,OAAO;IACR,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,IAAI,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CACV,aAAa,EACb,4DAA4D,EAC5D,sNAAsN,CACtN,CAAC;QACF,OAAO;IACR,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACV,aAAa,EACb,oCAAoC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAC7D,kKAAkK,CAClK,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CACV,aAAa,EACb,0BAA0B,EAC1B,qKAAqK,CACrK,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAQ;IACzC,yEAAyE;IACzE,8EAA8E;IAC9E,0EAA0E;IAC1E,kCAAkC;IAClC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5B,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxB,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC/B,uEAAuE;IACvE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/cli/vercel.js

@@ -0,0 +1,103 @@
+/**
+ * The Vercel boundary.
+ *
+ * Vercel adopts a build's output when it finds a Build Output API tree at
+ * `.vercel/output` in the project's root directory, and nowhere else. The
+ * framework emits that tree inside the generated project, which is gitignored
+ * and absent from a clone, so the last thing a build does is move it up to the
+ * app root — the one path Vercel reads.
+ *
+ * That move is what removes the need for a `vercel.json` in an app repo. With
+ * the tree where Vercel looks for it, a git-connected project needs no deploy
+ * config at all: the `Other` preset runs the `build` script from `package.json`,
+ * which is `waniwani build`, and the output is adopted as built. Every decision
+ * a deploy config would carry is taken here instead, once, for every app on
+ * this kit.
+ */
+import { cpSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { dirname, join } from "node:path";
+/** Where the framework writes its tree, and where Vercel reads one. */
+const OUTPUT = join(".vercel", "output");
+/**
+ * Every request under `/api` reaches the server this kit built.
+ *
+ * Vercel reserves a root `api/` directory and compiles every file under one
+ * into a serverless function of its own, which for an app folder means one
+ * broken function per endpoint — `defineEndpoint({ ... })` is an object, not a
+ * Vercel handler — sitting in the filesystem layer ahead of the server that
+ * actually serves them. The reservation cannot be waived: the file list is read
+ * before the build command runs, so a build that deletes the directory fails
+ * with `File not found`, and `outputDirectory` does not suppress the builder.
+ *
+ * What it can be beaten by is precedence. This route goes in ahead of the
+ * `filesystem` handler, which is where those functions sit, so `/api/*` never
+ * reaches them.
+ */
+const API_ROUTE = "/api(/.*)?";
+/**
+ * Move the framework's Build Output tree from the generated project up to the
+ * app root, and route `/api/*` at the server on the way.
+ *
+ * @returns the directory Vercel will read, or null when the build emitted no tree
+ */
+export function stageBuildOutput(generatedDir, appRoot) {
+    const from = join(generatedDir, OUTPUT);
+    if (!existsSync(from))
+        return null;
+    const to = join(appRoot, OUTPUT);
+    if (from !== to) {
+        // `.vercel/` also holds the CLI's project link, so only the output half is
+        // cleared. Rename over a copy: same filesystem, and it leaves nothing
+        // behind to fall out of date.
+        rmSync(to, { recursive: true, force: true });
+        mkdirSync(dirname(to), { recursive: true });
+        try {
+            renameSync(from, to);
+        }
+        catch {
+            cpSync(from, to, { recursive: true });
+            rmSync(from, { recursive: true, force: true });
+        }
+        // The framework recreates its own `.vercel/` on every build, so what the
+        // move leaves behind is an empty directory that means nothing.
+        rmSync(dirname(from), { recursive: true, force: true });
+    }
+    routeApiAtTheServer(to);
+    return to;
+}
+/**
+ * Insert the `/api` route ahead of the filesystem handler in the tree's own
+ * routing table.
+ *
+ * The destination is read from the config rather than named here: the framework
+ * decides what its function is called, and a route pointing at a name it has
+ * since changed would black-hole every request.
+ */
+function routeApiAtTheServer(outputDir) {
+    const file = join(outputDir, "config.json");
+    if (!existsSync(file))
+        return;
+    let config;
+    try {
+        config = JSON.parse(readFileSync(file, "utf-8"));
+    }
+    catch {
+        return;
+    }
+    const routes = config.routes;
+    if (!Array.isArray(routes))
+        return;
+    if (routes.some((route) => route.src === API_ROUTE))
+        return;
+    const filesystem = routes.findIndex((route) => route.handle === "filesystem");
+    if (filesystem === -1)
+        return;
+    // The catch-all below the filesystem handler is the server. Anything under
+    // `/api` that the app did not build is already going there.
+    const server = routes.slice(filesystem).find((route) => route.dest && !route.handle);
+    if (!server?.dest)
+        return;
+    routes.splice(filesystem, 0, { src: API_ROUTE, dest: server.dest });
+    writeFileSync(file, `${JSON.stringify(config, null, 2)}\n`);
+}
+//# sourceMappingURL=vercel.js.map