@warlock.js/core 5.0.2 → 5.2.0

package/esm/mail/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../core/src/mail/types.ts"],"mappings":";;;;;;AAMA;KAAY,iBAAA;EACV,MAAA;EACA,WAAA;EACA,eAAA;EACA,MAAA;EACA,IAAA,GAAO,WAAW;AAAA;;;;KAMR,kBAAA,GAAqB,kBAAA,GAAqB,iBAAiB;AAAvE;;;AAAA,KAKY,QAAA;AAL2D;AAKvE;;AALuE,KAU3D,YAAA;;AALQ;AAKpB;KAKY,WAAA;EAGN,IAAA;EACA,OAAO;AAAA;AAJb;;;;AAAA,KAWY,cAAA;EACV,QAAA;EACA,WAAA;EACA,QAAA;EACA,GAAA;AAAA;EAGI,OAAA,EAAS,MAAM;EACf,IAAA;AAAA;EAGA,OAAA;EACA,IAAA;AAAA;;;;AAAI;AAqEV;;;;;;;;;;;;;AAwBoB;AAMpB;;;;;;;;;;;;;;AAQ6C;AAM7C;;;;;;;;;;;;;AAQM;AAON;;;;AAAyB;AAezB;;;;;;;;;;;;;KA1EY,kBAAA,GAAqB,aAAA,CAAc,OAAA;EA+FR;;;EA3FrC,MAAA;EA2EA;;;;EAtEA,GAAA;EA0EA;;;;EArEA,QAAA;EAwES;;;;EAnET,QAAA;EAwEa;;;;EAnEb,IAAA,GAAO,WAAW;AAAA;;;;KAMR,aAAA;EAiEuD;AAAA;AAMnE;EAnEE,OAAA,GAAU,kBAAA;;;;EAIV,OAAA,GAAU,MAAA,SAAe,kBAAA;AAAA;;;;KAMf,UAAA;EACV,OAAA;EACA,SAAA;EACA,QAAA;EACA,QAAA;EACA,QAAA;EACA,QAAA;IACE,IAAA;IACA,EAAA;EAAA;AAAA;;;;KAOQ,aAAA;;;;;KAeA,UAAA;EA8DV;;;;EAzDA,aAAA,IAAiB,IAAA,EAAM,WAAA,YAAuB,OAAA,iBAAwB,OAAA;EA8DtE;;;EA1DA,MAAA,IACE,IAAA,EAAM,WAAA,EACN,MAAA,EAAQ,UAAA,SACR,KAAA,EAAO,SAAA,mBACG,OAAA;EA4DF;;;EAxDV,SAAA,IAAa,IAAA,EAAM,WAAA,EAAa,MAAA,EAAQ,UAAA,YAAsB,OAAA;EAiEjD;;;EA7Db,OAAA,IAAW,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,SAAA,YAAqB,OAAA;AAAA;;;;KAMhD,WAAA;EAkDV;;;;;;;;;;;EAtCA,EAAA;EAGA,EAAA;EACA,EAAA;EACA,GAAA;EACA,OAAA;EAGA,OAAA;EACA,IAAA;EACA,IAAA;EACA,SAAA,GAAY,KAAA,CAAM,YAAA;EAGlB,MAAA,GAAS,kBAAA;EACT,MAAA;EACA,IAAA,GAAO,WAAA;EAGP,WAAA,GAAc,cAAA;EAGd,QAAA,GAAW,YAAA;EACX,OAAA,GAAU,MAAA;EACV,IAAA;EAGA,aAAA;AAAA,IACE,UAAA;;;;KAKQ,cAAA;EACV,EAAA;EACA,EAAA;EACA,GAAA;EACA,OAAA;EACA,IAAA,EAAM,WAAA;EACN,OAAA;EACA,IAAA;EACA,IAAA;EACA,WAAA,EAAa,cAAA;EACb,QAAA,EAAU,YAAA;EACV,OAAA,EAAS,MAAA;EACT,IAAA;EACA,aAAA;EACA,MAAA,EAAQ,kBAAA;AAAA;;;;KAME,YAAA;EACV,OAAA,EAAS,WAAA;EACT,UAAA,EAAY,cAAA;EACZ,SAAA,EAAW,IAAA;EACX,MAAA,GAAS,UAAA;EACT,KAAA,GAAQ,SAAA;AAAA;;;;cAMG,SAAA,SAAkB,KAAA;EAAA,SACb,IAAA,EAAM,aAAA;EAAA,SACN,aAAA,GAAgB,KAAA;cAEb,OAAA,UAAiB,IAAA,EAAM,aAAA,EAAe,aAAA,GAAgB,KAAA;AAAA"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["C:/Work/Warlock.js/core/src/mail/types.ts"],"mappings":";;;;;;AAMA;KAAY,iBAAA;EACV,MAAA;EACA,WAAA;EACA,eAAA;EACA,MAAA;EACA,IAAA,GAAO,WAAW;AAAA;;;;KAMR,kBAAA,GAAqB,kBAAA,GAAqB,iBAAiB;AAAvE;;;AAAA,KAKY,QAAA;AAL2D;AAKvE;;AALuE,KAU3D,YAAA;;AALQ;AAKpB;KAKY,WAAA;EAGN,IAAA;EACA,OAAO;AAAA;AAJb;;;;AAAA,KAWY,cAAA;EACV,QAAA;EACA,WAAA;EACA,QAAA;EACA,GAAA;AAAA;EAGI,OAAA,EAAS,MAAM;EACf,IAAA;AAAA;EAGA,OAAA;EACA,IAAA;AAAA;;;;AAAI;AAqEV;;;;;;;;;;;;;AAwBoB;AAMpB;;;;;;;;;;;;;;AAQ6C;AAM7C;;;;;;;;;;;;;AAQM;AAON;;;;AAAyB;AAezB;;;;;;;;;;;;;KA1EY,kBAAA,GAAqB,aAAA,CAAc,OAAA;EA+FR;;;EA3FrC,MAAA;EA2EA;;;;EAtEA,GAAA;EA0EA;;;;EArEA,QAAA;EAwES;;;;EAnET,QAAA;EAwEa;;;;EAnEb,IAAA,GAAO,WAAW;AAAA;;;;KAMR,aAAA;EAiEuD;AAAA;AAMnE;EAnEE,OAAA,GAAU,kBAAA;;;;EAIV,OAAA,GAAU,MAAA,SAAe,kBAAA;AAAA;;;;KAMf,UAAA;EACV,OAAA;EACA,SAAA;EACA,QAAA;EACA,QAAA;EACA,QAAA;EACA,QAAA;IACE,IAAA;IACA,EAAA;EAAA;AAAA;;;;KAOQ,aAAA;;;;;KAeA,UAAA;EA8DV;;;;EAzDA,aAAA,IAAiB,IAAA,EAAM,WAAA,YAAuB,OAAA,iBAAwB,OAAA;EA8DtE;;;EA1DA,MAAA,IACE,IAAA,EAAM,WAAA,EACN,MAAA,EAAQ,UAAA,SACR,KAAA,EAAO,SAAA,mBACG,OAAA;EA4DF;;;EAxDV,SAAA,IAAa,IAAA,EAAM,WAAA,EAAa,MAAA,EAAQ,UAAA,YAAsB,OAAA;EAiEjD;;;EA7Db,OAAA,IAAW,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,SAAA,YAAqB,OAAA;AAAA;;;;KAMhD,WAAA;EAkDV;;;;;;;;;;;EAtCA,EAAA;EAGA,EAAA;EACA,EAAA;EACA,GAAA;EACA,OAAA;EAGA,OAAA;EACA,IAAA;EACA,IAAA;EACA,SAAA,GAAY,KAAA,CAAM,YAAA;EAGlB,MAAA,GAAS,kBAAA;EACT,MAAA;EACA,IAAA,GAAO,WAAA;EAGP,WAAA,GAAc,cAAA;EAGd,QAAA,GAAW,YAAA;EACX,OAAA,GAAU,MAAA;EACV,IAAA;EAGA,aAAA;AAAA,IACE,UAAA;;;;KAKQ,cAAA;EACV,EAAA;EACA,EAAA;EACA,GAAA;EACA,OAAA;EACA,IAAA,EAAM,WAAA;EACN,OAAA;EACA,IAAA;EACA,IAAA;EACA,WAAA,EAAa,cAAA;EACb,QAAA,EAAU,YAAA;EACV,OAAA,EAAS,MAAA;EACT,IAAA;EACA,aAAA;EACA,MAAA,EAAQ,kBAAA;AAAA;;;;KAME,YAAA;EACV,OAAA,EAAS,WAAA;EACT,UAAA,EAAY,cAAA;EACZ,SAAA,EAAW,IAAA;EACX,MAAA,GAAS,UAAA;EACT,KAAA,GAAQ,SAAA;AAAA;;;;cAMG,SAAA,SAAkB,KAAA;EAAA,SACb,IAAA,EAAM,aAAA;EAAA,SACN,aAAA,GAAgB,KAAA;cAEb,OAAA,UAAiB,IAAA,EAAM,aAAA,EAAe,aAAA,GAAgB,KAAA;AAAA"}

package/esm/mail/types.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/mail/types.ts
+//#region core/src/mail/types.ts
 /**
 * Mail error class
 */

package/esm/mail/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","names":[],"sources":["../../../../../../../core/src/mail/types.ts"],"sourcesContent":["import type SMTPTransport from \"nodemailer/lib/smtp-transport\";\nimport type React from \"react\";\n\n/**\n * AWS SES mail configuration\n */\nexport type SESConfigurations = {\n  driver: \"ses\";\n  accessKeyId: string;\n  secretAccessKey: string;\n  region: string;\n  from?: MailAddress;\n};\n\n/**\n * Any mail configuration (SMTP or SES)\n */\nexport type MailConfigurations = SMTPConfigurations | SESConfigurations;\n\n/**\n * Mail mode determines how emails are handled\n */\nexport type MailMode = \"production\" | \"development\" | \"test\";\n\n/**\n * Mail priority levels\n */\nexport type MailPriority = \"high\" | \"normal\" | \"low\";\n\n/**\n * Email address with optional name\n */\nexport type MailAddress =\n  | string\n  | {\n      name: string;\n      address: string;\n    };\n\n/**\n * Mail attachment\n * Supports both buffer/string content and file paths\n */\nexport type MailAttachment = {\n  filename: string;\n  contentType?: string;\n  encoding?: \"base64\" | \"binary\" | \"hex\";\n  cid?: string; // Content-ID for inline attachments\n} & (\n  | {\n      content: Buffer | string;\n      path?: never;\n    }\n  | {\n      content?: never;\n      path: string; // File path - will be read automatically\n    }\n);\n\n/**\n * Mail configuration for SMTP transport\n *\n * ## Basic Configuration\n *\n * ```typescript\n * setMailConfigurations({\n *   host: \"smtp.gmail.com\",\n *   port: 587,\n *   secure: false,           // true for 465, false for other ports\n *   tls: true,               // Use STARTTLS\n *   username: \"user@gmail.com\",\n *   password: \"app-password\",\n *   from: { name: \"My App\", address: \"noreply@myapp.com\" },\n * });\n * ```\n *\n * ## Configuration Options\n *\n * | Option | Type | Default | Description |\n * |--------|------|---------|-------------|\n * | `host` | `string` | - | SMTP server hostname (e.g., \"smtp.gmail.com\") |\n * | `port` | `number` | 587 | SMTP port. Common: 25, 465 (SSL), 587 (TLS) |\n * | `secure` | `boolean` | false | Use SSL/TLS. Set `true` for port 465 |\n * | `tls` | `boolean` | true | Enable STARTTLS upgrade. For port 587 |\n * | `requireTLS` | `boolean` | - | Fail if STARTTLS upgrade fails |\n * | `username` | `string` | - | SMTP auth username (convenience alias) |\n * | `password` | `string` | - | SMTP auth password (convenience alias) |\n * | `auth` | `object` | - | Full auth object: `{ user, pass, type }` |\n * | `from` | `MailAddress` | - | Default sender for all emails |\n *\n * ## Provider Examples\n *\n * ### Gmail\n * ```typescript\n * { host: \"smtp.gmail.com\", port: 587, tls: true, username: \"...\", password: \"...\" }\n * ```\n *\n * ### SendGrid\n * ```typescript\n * { host: \"smtp.sendgrid.net\", port: 587, username: \"apikey\", password: \"SG.xxx\" }\n * ```\n *\n * ### AWS SES\n * ```typescript\n * { host: \"email-smtp.us-east-1.amazonaws.com\", port: 587, username: \"...\", password: \"...\" }\n * ```\n *\n * ### Mailgun\n * ```typescript\n * { host: \"smtp.mailgun.org\", port: 587, username: \"postmaster@...\", password: \"...\" }\n * ```\n *\n * ## Multi-tenant Usage\n *\n * For multi-tenant apps, pass config per-mail instead of globally:\n * ```typescript\n * await sendMail({\n *   config: tenant.mailSettings,  // Tenant-specific config\n *   to: \"user@example.com\",\n *   subject: \"Hello\",\n *   html: \"<p>World</p>\",\n * });\n * ```\n */\nexport type SMTPConfigurations = SMTPTransport.Options & {\n  /**\n   * Transport driver type\n   */\n  driver?: \"smtp\";\n  /**\n   * Enable STARTTLS upgrade (alias for requireTLS)\n   * Set to `true` for port 587\n   */\n  tls?: boolean;\n  /**\n   * SMTP authentication username\n   * Convenience alias - can also use `auth.user`\n   */\n  username?: string;\n  /**\n   * SMTP authentication password\n   * Convenience alias - can also use `auth.pass`\n   */\n  password?: string;\n  /**\n   * Default sender for all emails\n   * Can be string (\"noreply@app.com\") or object ({ name, address })\n   */\n  from?: MailAddress;\n};\n\n/**\n * Named mailers configuration\n */\nexport type MailersConfig = {\n  /**\n   * Default mailer configuration\n   */\n  default?: MailConfigurations;\n  /**\n   * Named mailer configurations\n   */\n  mailers?: Record<string, MailConfigurations>;\n};\n\n/**\n * Mail result after sending\n */\nexport type MailResult = {\n  success: boolean;\n  messageId?: string;\n  accepted: string[];\n  rejected: string[];\n  response?: string;\n  envelope?: {\n    from: string;\n    to: string[];\n  };\n};\n\n/**\n * Error codes for mail operations\n */\nexport type MailErrorCode =\n  | \"CONNECTION_ERROR\"\n  | \"AUTH_ERROR\"\n  | \"RATE_LIMIT\"\n  | \"INVALID_ADDRESS\"\n  | \"REJECTED\"\n  | \"TIMEOUT\"\n  | \"RENDER_ERROR\"\n  | \"CONFIG_ERROR\"\n  | \"UNKNOWN\";\n\n/**\n * Mail event callbacks (per-mail)\n * For global events, use mailEvents.on() from events.ts\n */\nexport type MailEvents = {\n  /**\n   * Called before sending the email\n   * Can be used to modify the mail or cancel sending\n   */\n  beforeSending?: (mail: MailOptions) => void | Promise<void> | false | Promise<false>;\n  /**\n   * Called after send attempt (success or failure)\n   */\n  onSent?: (\n    mail: MailOptions,\n    result: MailResult | null,\n    error: MailError | null,\n  ) => void | Promise<void>;\n  /**\n   * Called only on successful send\n   */\n  onSuccess?: (mail: MailOptions, result: MailResult) => void | Promise<void>;\n  /**\n   * Called only on error\n   */\n  onError?: (mail: MailOptions, error: MailError) => void | Promise<void>;\n};\n\n/**\n * Mail options for sending\n */\nexport type MailOptions = {\n  /**\n   * Unique mail ID for event namespacing\n   * If not provided, one will be auto-generated\n   *\n   * Use this to subscribe to events for a specific mail:\n   * ```typescript\n   * const mailId = generateMailId();\n   * mailEvents.onMailSuccess(mailId, (mail, result) => { ... });\n   * await sendMail({ id: mailId, to: \"...\", subject: \"...\", html: \"...\" });\n   * ```\n   */\n  id?: string;\n\n  // Recipients\n  to: string | string[];\n  cc?: string | string[];\n  bcc?: string | string[];\n  replyTo?: string;\n\n  // Content\n  subject: string;\n  html?: string;\n  text?: string;\n  component?: React.ReactElement;\n\n  // Configuration\n  config?: MailConfigurations;\n  mailer?: string;\n  from?: MailAddress;\n\n  // Attachments\n  attachments?: MailAttachment[];\n\n  // Options\n  priority?: MailPriority;\n  headers?: Record<string, string>;\n  tags?: string[];\n\n  // Meta\n  correlationId?: string;\n} & MailEvents;\n\n/**\n * Internal normalized mail data\n */\nexport type NormalizedMail = {\n  to: string[];\n  cc: string[];\n  bcc: string[];\n  replyTo?: string;\n  from: MailAddress;\n  subject: string;\n  html?: string;\n  text?: string;\n  attachments: MailAttachment[];\n  priority: MailPriority;\n  headers: Record<string, string>;\n  tags: string[];\n  correlationId?: string;\n  config: MailConfigurations;\n};\n\n/**\n * Captured mail for test mode\n */\nexport type CapturedMail = {\n  options: MailOptions;\n  normalized: NormalizedMail;\n  timestamp: Date;\n  result?: MailResult;\n  error?: MailError;\n};\n\n/**\n * Mail error class\n */\nexport class MailError extends Error {\n  public readonly code: MailErrorCode;\n  public readonly originalError?: Error;\n\n  public constructor(message: string, code: MailErrorCode, originalError?: Error) {\n    super(message);\n    this.name = \"MailError\";\n    this.code = code;\n    this.originalError = originalError;\n  }\n}\n"],"mappings":";;;;AA8SA,IAAa,YAAb,cAA+B,MAAM;CAInC,AAAO,YAAY,SAAiB,MAAqB,eAAuB;EAC9E,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,gBAAgB;CACvB;AACF"}
+{"version":3,"file":"types.mjs","names":[],"sources":["C:/Work/Warlock.js/core/src/mail/types.ts"],"sourcesContent":["import type SMTPTransport from \"nodemailer/lib/smtp-transport\";\nimport type React from \"react\";\n\n/**\n * AWS SES mail configuration\n */\nexport type SESConfigurations = {\n  driver: \"ses\";\n  accessKeyId: string;\n  secretAccessKey: string;\n  region: string;\n  from?: MailAddress;\n};\n\n/**\n * Any mail configuration (SMTP or SES)\n */\nexport type MailConfigurations = SMTPConfigurations | SESConfigurations;\n\n/**\n * Mail mode determines how emails are handled\n */\nexport type MailMode = \"production\" | \"development\" | \"test\";\n\n/**\n * Mail priority levels\n */\nexport type MailPriority = \"high\" | \"normal\" | \"low\";\n\n/**\n * Email address with optional name\n */\nexport type MailAddress =\n  | string\n  | {\n      name: string;\n      address: string;\n    };\n\n/**\n * Mail attachment\n * Supports both buffer/string content and file paths\n */\nexport type MailAttachment = {\n  filename: string;\n  contentType?: string;\n  encoding?: \"base64\" | \"binary\" | \"hex\";\n  cid?: string; // Content-ID for inline attachments\n} & (\n  | {\n      content: Buffer | string;\n      path?: never;\n    }\n  | {\n      content?: never;\n      path: string; // File path - will be read automatically\n    }\n);\n\n/**\n * Mail configuration for SMTP transport\n *\n * ## Basic Configuration\n *\n * ```typescript\n * setMailConfigurations({\n *   host: \"smtp.gmail.com\",\n *   port: 587,\n *   secure: false,           // true for 465, false for other ports\n *   tls: true,               // Use STARTTLS\n *   username: \"user@gmail.com\",\n *   password: \"app-password\",\n *   from: { name: \"My App\", address: \"noreply@myapp.com\" },\n * });\n * ```\n *\n * ## Configuration Options\n *\n * | Option | Type | Default | Description |\n * |--------|------|---------|-------------|\n * | `host` | `string` | - | SMTP server hostname (e.g., \"smtp.gmail.com\") |\n * | `port` | `number` | 587 | SMTP port. Common: 25, 465 (SSL), 587 (TLS) |\n * | `secure` | `boolean` | false | Use SSL/TLS. Set `true` for port 465 |\n * | `tls` | `boolean` | true | Enable STARTTLS upgrade. For port 587 |\n * | `requireTLS` | `boolean` | - | Fail if STARTTLS upgrade fails |\n * | `username` | `string` | - | SMTP auth username (convenience alias) |\n * | `password` | `string` | - | SMTP auth password (convenience alias) |\n * | `auth` | `object` | - | Full auth object: `{ user, pass, type }` |\n * | `from` | `MailAddress` | - | Default sender for all emails |\n *\n * ## Provider Examples\n *\n * ### Gmail\n * ```typescript\n * { host: \"smtp.gmail.com\", port: 587, tls: true, username: \"...\", password: \"...\" }\n * ```\n *\n * ### SendGrid\n * ```typescript\n * { host: \"smtp.sendgrid.net\", port: 587, username: \"apikey\", password: \"SG.xxx\" }\n * ```\n *\n * ### AWS SES\n * ```typescript\n * { host: \"email-smtp.us-east-1.amazonaws.com\", port: 587, username: \"...\", password: \"...\" }\n * ```\n *\n * ### Mailgun\n * ```typescript\n * { host: \"smtp.mailgun.org\", port: 587, username: \"postmaster@...\", password: \"...\" }\n * ```\n *\n * ## Multi-tenant Usage\n *\n * For multi-tenant apps, pass config per-mail instead of globally:\n * ```typescript\n * await sendMail({\n *   config: tenant.mailSettings,  // Tenant-specific config\n *   to: \"user@example.com\",\n *   subject: \"Hello\",\n *   html: \"<p>World</p>\",\n * });\n * ```\n */\nexport type SMTPConfigurations = SMTPTransport.Options & {\n  /**\n   * Transport driver type\n   */\n  driver?: \"smtp\";\n  /**\n   * Enable STARTTLS upgrade (alias for requireTLS)\n   * Set to `true` for port 587\n   */\n  tls?: boolean;\n  /**\n   * SMTP authentication username\n   * Convenience alias - can also use `auth.user`\n   */\n  username?: string;\n  /**\n   * SMTP authentication password\n   * Convenience alias - can also use `auth.pass`\n   */\n  password?: string;\n  /**\n   * Default sender for all emails\n   * Can be string (\"noreply@app.com\") or object ({ name, address })\n   */\n  from?: MailAddress;\n};\n\n/**\n * Named mailers configuration\n */\nexport type MailersConfig = {\n  /**\n   * Default mailer configuration\n   */\n  default?: MailConfigurations;\n  /**\n   * Named mailer configurations\n   */\n  mailers?: Record<string, MailConfigurations>;\n};\n\n/**\n * Mail result after sending\n */\nexport type MailResult = {\n  success: boolean;\n  messageId?: string;\n  accepted: string[];\n  rejected: string[];\n  response?: string;\n  envelope?: {\n    from: string;\n    to: string[];\n  };\n};\n\n/**\n * Error codes for mail operations\n */\nexport type MailErrorCode =\n  | \"CONNECTION_ERROR\"\n  | \"AUTH_ERROR\"\n  | \"RATE_LIMIT\"\n  | \"INVALID_ADDRESS\"\n  | \"REJECTED\"\n  | \"TIMEOUT\"\n  | \"RENDER_ERROR\"\n  | \"CONFIG_ERROR\"\n  | \"UNKNOWN\";\n\n/**\n * Mail event callbacks (per-mail)\n * For global events, use mailEvents.on() from events.ts\n */\nexport type MailEvents = {\n  /**\n   * Called before sending the email\n   * Can be used to modify the mail or cancel sending\n   */\n  beforeSending?: (mail: MailOptions) => void | Promise<void> | false | Promise<false>;\n  /**\n   * Called after send attempt (success or failure)\n   */\n  onSent?: (\n    mail: MailOptions,\n    result: MailResult | null,\n    error: MailError | null,\n  ) => void | Promise<void>;\n  /**\n   * Called only on successful send\n   */\n  onSuccess?: (mail: MailOptions, result: MailResult) => void | Promise<void>;\n  /**\n   * Called only on error\n   */\n  onError?: (mail: MailOptions, error: MailError) => void | Promise<void>;\n};\n\n/**\n * Mail options for sending\n */\nexport type MailOptions = {\n  /**\n   * Unique mail ID for event namespacing\n   * If not provided, one will be auto-generated\n   *\n   * Use this to subscribe to events for a specific mail:\n   * ```typescript\n   * const mailId = generateMailId();\n   * mailEvents.onMailSuccess(mailId, (mail, result) => { ... });\n   * await sendMail({ id: mailId, to: \"...\", subject: \"...\", html: \"...\" });\n   * ```\n   */\n  id?: string;\n\n  // Recipients\n  to: string | string[];\n  cc?: string | string[];\n  bcc?: string | string[];\n  replyTo?: string;\n\n  // Content\n  subject: string;\n  html?: string;\n  text?: string;\n  component?: React.ReactElement;\n\n  // Configuration\n  config?: MailConfigurations;\n  mailer?: string;\n  from?: MailAddress;\n\n  // Attachments\n  attachments?: MailAttachment[];\n\n  // Options\n  priority?: MailPriority;\n  headers?: Record<string, string>;\n  tags?: string[];\n\n  // Meta\n  correlationId?: string;\n} & MailEvents;\n\n/**\n * Internal normalized mail data\n */\nexport type NormalizedMail = {\n  to: string[];\n  cc: string[];\n  bcc: string[];\n  replyTo?: string;\n  from: MailAddress;\n  subject: string;\n  html?: string;\n  text?: string;\n  attachments: MailAttachment[];\n  priority: MailPriority;\n  headers: Record<string, string>;\n  tags: string[];\n  correlationId?: string;\n  config: MailConfigurations;\n};\n\n/**\n * Captured mail for test mode\n */\nexport type CapturedMail = {\n  options: MailOptions;\n  normalized: NormalizedMail;\n  timestamp: Date;\n  result?: MailResult;\n  error?: MailError;\n};\n\n/**\n * Mail error class\n */\nexport class MailError extends Error {\n  public readonly code: MailErrorCode;\n  public readonly originalError?: Error;\n\n  public constructor(message: string, code: MailErrorCode, originalError?: Error) {\n    super(message);\n    this.name = \"MailError\";\n    this.code = code;\n    this.originalError = originalError;\n  }\n}\n"],"mappings":";;;;AA8SA,IAAa,YAAb,cAA+B,MAAM;CAInC,AAAO,YAAY,SAAiB,MAAqB,eAAuB;EAC9E,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,gBAAgB;CACvB;AACF"}

package/esm/manifest/manifest-manager.mjs

@@ -2,7 +2,7 @@ import { warlockPath } from "../utils/paths.mjs";
 import "../utils/index.mjs";
 import { getJsonFileAsync, putJsonFileAsync, unlinkAsync } from "@warlock.js/fs";
 
-//#region ../core/src/manifest/manifest-manager.ts
+//#region core/src/manifest/manifest-manager.ts
 var ManifestManager = class {
 	constructor() {
 		this._hasChanges = false;

package/esm/manifest/manifest-manager.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-manager.mjs","names":[],"sources":["../../../../../../../core/src/manifest/manifest-manager.ts"],"sourcesContent":["import { getJsonFileAsync, putJsonFileAsync, unlinkAsync } from \"@warlock.js/fs\";\r\nimport { warlockPath } from \"../utils\";\r\n\r\n/**\r\n * Stored option metadata in manifest\r\n */\r\nexport type ManifestCommandOption = {\r\n  name: string;\r\n  text: string;\r\n  alias?: string;\r\n  description?: string;\r\n  type?: \"string\" | \"boolean\" | \"number\";\r\n  required?: boolean;\r\n  defaultValue?: string | boolean | number;\r\n};\r\n\r\n/**\r\n * Command metadata stored in commands.json\r\n */\r\nexport type ManifestCommandData = {\r\n  relativePath?: string;\r\n  source: \"framework\" | \"plugin\" | \"project\";\r\n  description?: string;\r\n  alias?: string;\r\n  options?: ManifestCommandOption[];\r\n};\r\n\r\ntype ManifestCommandsJson = {\r\n  commands: Record<string, ManifestCommandData>;\r\n};\r\n\r\nexport class ManifestManager {\r\n  /**\r\n   * commands json\r\n   */\r\n  protected _commandsJson?: ManifestCommandsJson;\r\n\r\n  /**\r\n   * Check if commands json is changed\r\n   */\r\n  protected _hasChanges = false;\r\n\r\n  /**\r\n   * Whether commands json is loaded\r\n   */\r\n  protected _isLoaded = false;\r\n\r\n  /**\r\n   * Get if commands json has changes\r\n   */\r\n  public get hasChanges() {\r\n    return this._hasChanges;\r\n  }\r\n\r\n  /**\r\n   * Check if commands json is loaded\r\n   */\r\n  public get isCommandLoaded() {\r\n    return this._isLoaded;\r\n  }\r\n\r\n  /**\r\n   * Load commands.json file\r\n   */\r\n  public async loadCommands(): Promise<ManifestCommandsJson | undefined> {\r\n    // now try to locate it in .warlock folder\r\n    if (this._isLoaded) return this._commandsJson;\r\n\r\n    try {\r\n      this._commandsJson = await getJsonFileAsync(warlockPath(\"commands.json\"));\r\n\r\n      this._isLoaded = true;\r\n\r\n      return this._commandsJson;\r\n    } catch {\r\n      return;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Get commands json content\r\n   */\r\n  public get commandsJson() {\r\n    return this._commandsJson;\r\n  }\r\n\r\n  /**\r\n   * Save commands in commands.json file\r\n   */\r\n  public async saveCommands() {\r\n    await putJsonFileAsync(warlockPath(\"commands.json\"), this._commandsJson);\r\n\r\n    this._isLoaded = true;\r\n    this._hasChanges = false;\r\n  }\r\n\r\n  /**\r\n   * Add command info to commands list (But do not save commands)\r\n   */\r\n  public addCommandToList(name: string, command: ManifestCommandsJson[\"commands\"][string]) {\r\n    if (!this._commandsJson) {\r\n      this._commandsJson = {\r\n        commands: {},\r\n      };\r\n    }\r\n\r\n    this._commandsJson.commands[name] = command;\r\n\r\n    this._hasChanges = true;\r\n  }\r\n\r\n  /**\r\n   * Clear commands cache\r\n   */\r\n  public clearCommandsCache() {\r\n    this._commandsJson = undefined;\r\n    this._hasChanges = false;\r\n    this._isLoaded = false;\r\n  }\r\n\r\n  /**\r\n   * Remove commands.json file\r\n   */\r\n  public async removeCommandsFile() {\r\n    try {\r\n      await unlinkAsync(warlockPath(\"commands.json\"));\r\n    } catch {\r\n      // do nothing\r\n    }\r\n  }\r\n}\r\n\r\nexport const manifestManager = new ManifestManager();\r\n"],"mappings":";;;;;AA+BA,IAAa,kBAAb,MAA6B;;qBASH;mBAKF;;;;;CAKtB,IAAW,aAAa;EACtB,OAAO,KAAK;CACd;;;;CAKA,IAAW,kBAAkB;EAC3B,OAAO,KAAK;CACd;;;;CAKA,MAAa,eAA0D;EAErE,IAAI,KAAK,WAAW,OAAO,KAAK;EAEhC,IAAI;GACF,KAAK,gBAAgB,MAAM,iBAAiB,YAAY,eAAe,CAAC;GAExE,KAAK,YAAY;GAEjB,OAAO,KAAK;EACd,QAAQ;GACN;EACF;CACF;;;;CAKA,IAAW,eAAe;EACxB,OAAO,KAAK;CACd;;;;CAKA,MAAa,eAAe;EAC1B,MAAM,iBAAiB,YAAY,eAAe,GAAG,KAAK,aAAa;EAEvE,KAAK,YAAY;EACjB,KAAK,cAAc;CACrB;;;;CAKA,AAAO,iBAAiB,MAAc,SAAmD;EACvF,IAAI,CAAC,KAAK,eACR,KAAK,gBAAgB,EACnB,UAAU,CAAC,EACb;EAGF,KAAK,cAAc,SAAS,QAAQ;EAEpC,KAAK,cAAc;CACrB;;;;CAKA,AAAO,qBAAqB;EAC1B,KAAK,gBAAgB;EACrB,KAAK,cAAc;EACnB,KAAK,YAAY;CACnB;;;;CAKA,MAAa,qBAAqB;EAChC,IAAI;GACF,MAAM,YAAY,YAAY,eAAe,CAAC;EAChD,QAAQ,CAER;CACF;AACF;AAEA,MAAa,kBAAkB,IAAI,gBAAgB"}
+{"version":3,"file":"manifest-manager.mjs","names":[],"sources":["C:/Work/Warlock.js/core/src/manifest/manifest-manager.ts"],"sourcesContent":["import { getJsonFileAsync, putJsonFileAsync, unlinkAsync } from \"@warlock.js/fs\";\r\nimport { warlockPath } from \"../utils\";\r\n\r\n/**\r\n * Stored option metadata in manifest\r\n */\r\nexport type ManifestCommandOption = {\r\n  name: string;\r\n  text: string;\r\n  alias?: string;\r\n  description?: string;\r\n  type?: \"string\" | \"boolean\" | \"number\";\r\n  required?: boolean;\r\n  defaultValue?: string | boolean | number;\r\n};\r\n\r\n/**\r\n * Command metadata stored in commands.json\r\n */\r\nexport type ManifestCommandData = {\r\n  relativePath?: string;\r\n  source: \"framework\" | \"plugin\" | \"project\";\r\n  description?: string;\r\n  alias?: string;\r\n  options?: ManifestCommandOption[];\r\n};\r\n\r\ntype ManifestCommandsJson = {\r\n  commands: Record<string, ManifestCommandData>;\r\n};\r\n\r\nexport class ManifestManager {\r\n  /**\r\n   * commands json\r\n   */\r\n  protected _commandsJson?: ManifestCommandsJson;\r\n\r\n  /**\r\n   * Check if commands json is changed\r\n   */\r\n  protected _hasChanges = false;\r\n\r\n  /**\r\n   * Whether commands json is loaded\r\n   */\r\n  protected _isLoaded = false;\r\n\r\n  /**\r\n   * Get if commands json has changes\r\n   */\r\n  public get hasChanges() {\r\n    return this._hasChanges;\r\n  }\r\n\r\n  /**\r\n   * Check if commands json is loaded\r\n   */\r\n  public get isCommandLoaded() {\r\n    return this._isLoaded;\r\n  }\r\n\r\n  /**\r\n   * Load commands.json file\r\n   */\r\n  public async loadCommands(): Promise<ManifestCommandsJson | undefined> {\r\n    // now try to locate it in .warlock folder\r\n    if (this._isLoaded) return this._commandsJson;\r\n\r\n    try {\r\n      this._commandsJson = await getJsonFileAsync(warlockPath(\"commands.json\"));\r\n\r\n      this._isLoaded = true;\r\n\r\n      return this._commandsJson;\r\n    } catch {\r\n      return;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Get commands json content\r\n   */\r\n  public get commandsJson() {\r\n    return this._commandsJson;\r\n  }\r\n\r\n  /**\r\n   * Save commands in commands.json file\r\n   */\r\n  public async saveCommands() {\r\n    await putJsonFileAsync(warlockPath(\"commands.json\"), this._commandsJson);\r\n\r\n    this._isLoaded = true;\r\n    this._hasChanges = false;\r\n  }\r\n\r\n  /**\r\n   * Add command info to commands list (But do not save commands)\r\n   */\r\n  public addCommandToList(name: string, command: ManifestCommandsJson[\"commands\"][string]) {\r\n    if (!this._commandsJson) {\r\n      this._commandsJson = {\r\n        commands: {},\r\n      };\r\n    }\r\n\r\n    this._commandsJson.commands[name] = command;\r\n\r\n    this._hasChanges = true;\r\n  }\r\n\r\n  /**\r\n   * Clear commands cache\r\n   */\r\n  public clearCommandsCache() {\r\n    this._commandsJson = undefined;\r\n    this._hasChanges = false;\r\n    this._isLoaded = false;\r\n  }\r\n\r\n  /**\r\n   * Remove commands.json file\r\n   */\r\n  public async removeCommandsFile() {\r\n    try {\r\n      await unlinkAsync(warlockPath(\"commands.json\"));\r\n    } catch {\r\n      // do nothing\r\n    }\r\n  }\r\n}\r\n\r\nexport const manifestManager = new ManifestManager();\r\n"],"mappings":";;;;;AA+BA,IAAa,kBAAb,MAA6B;;qBASH;mBAKF;;;;;CAKtB,IAAW,aAAa;EACtB,OAAO,KAAK;CACd;;;;CAKA,IAAW,kBAAkB;EAC3B,OAAO,KAAK;CACd;;;;CAKA,MAAa,eAA0D;EAErE,IAAI,KAAK,WAAW,OAAO,KAAK;EAEhC,IAAI;GACF,KAAK,gBAAgB,MAAM,iBAAiB,YAAY,eAAe,CAAC;GAExE,KAAK,YAAY;GAEjB,OAAO,KAAK;EACd,QAAQ;GACN;EACF;CACF;;;;CAKA,IAAW,eAAe;EACxB,OAAO,KAAK;CACd;;;;CAKA,MAAa,eAAe;EAC1B,MAAM,iBAAiB,YAAY,eAAe,GAAG,KAAK,aAAa;EAEvE,KAAK,YAAY;EACjB,KAAK,cAAc;CACrB;;;;CAKA,AAAO,iBAAiB,MAAc,SAAmD;EACvF,IAAI,CAAC,KAAK,eACR,KAAK,gBAAgB,EACnB,UAAU,CAAC,EACb;EAGF,KAAK,cAAc,SAAS,QAAQ;EAEpC,KAAK,cAAc;CACrB;;;;CAKA,AAAO,qBAAqB;EAC1B,KAAK,gBAAgB;EACrB,KAAK,cAAc;EACnB,KAAK,YAAY;CACnB;;;;CAKA,MAAa,qBAAqB;EAChC,IAAI;GACF,MAAM,YAAY,YAAY,eAAe,CAAC;EAChD,QAAQ,CAER;CACF;AACF;AAEA,MAAa,kBAAkB,IAAI,gBAAgB"}

package/esm/production/assert-dist-ready-to-start.mjs

@@ -0,0 +1,24 @@
+import { readDistBuildManifestAsync } from "./dist-build-manifest.mjs";
+
+//#region core/src/production/assert-dist-ready-to-start.ts
+/**
+* Decide whether `outDir` is fit for `warlock start` to boot.
+*
+* Checks the build-success marker a promoted build writes — not any
+* particular output file. Before this existed, `start` only failed on a
+* broken `dist` by accident, because it happened to need a file (the client
+* manifest) that an incomplete build never wrote. That guard said nothing
+* when the missing piece was anything else, and named no reason. This
+* refuses explicitly and says why.
+*/
+async function checkDistReadyToStartAsync(outDir) {
+	if (await readDistBuildManifestAsync(outDir)) return { ready: true };
+	return {
+		ready: false,
+		reason: `"${outDir}" was not produced by a successful \`warlock build\` run (no build-success marker found). Run \`warlock build\` before \`warlock start\`.`
+	};
+}
+
+//#endregion
+export { checkDistReadyToStartAsync };
+//# sourceMappingURL=assert-dist-ready-to-start.mjs.map

package/esm/production/assert-dist-ready-to-start.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"assert-dist-ready-to-start.mjs","names":[],"sources":["C:/Work/Warlock.js/core/src/production/assert-dist-ready-to-start.ts"],"sourcesContent":["import { readDistBuildManifestAsync } from \"./dist-build-manifest\";\n\n/**\n * Whether `dist` is safe for `warlock start` to boot, and — when it is\n * not — the reason to show the developer.\n */\nexport type DistReadiness =\n  | { ready: true }\n  | {\n      ready: false;\n      reason: string;\n    };\n\n/**\n * Decide whether `outDir` is fit for `warlock start` to boot.\n *\n * Checks the build-success marker a promoted build writes — not any\n * particular output file. Before this existed, `start` only failed on a\n * broken `dist` by accident, because it happened to need a file (the client\n * manifest) that an incomplete build never wrote. That guard said nothing\n * when the missing piece was anything else, and named no reason. This\n * refuses explicitly and says why.\n */\nexport async function checkDistReadyToStartAsync(outDir: string): Promise<DistReadiness> {\n  const manifest = await readDistBuildManifestAsync(outDir);\n\n  if (manifest) {\n    return { ready: true };\n  }\n\n  return {\n    ready: false,\n    reason:\n      `\"${outDir}\" was not produced by a successful \\`warlock build\\` run ` +\n      \"(no build-success marker found). Run `warlock build` before `warlock start`.\",\n  };\n}\n"],"mappings":";;;;;;;;;;;;;AAuBA,eAAsB,2BAA2B,QAAwC;CAGvF,IAAI,MAFmB,2BAA2B,MAAM,GAGtD,OAAO,EAAE,OAAO,KAAK;CAGvB,OAAO;EACL,OAAO;EACP,QACE,IAAI,OAAO;CAEf;AACF"}

package/esm/production/assert-generated-imports.mjs

@@ -1,6 +1,6 @@
 import { builtinModules } from "node:module";
 
-//#region ../core/src/production/assert-generated-imports.ts
+//#region core/src/production/assert-generated-imports.ts
 /**
 * Raised when generated code would ship an import the app cannot resolve.
 *

package/esm/production/assert-generated-imports.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"assert-generated-imports.mjs","names":[],"sources":["../../../../../../../core/src/production/assert-generated-imports.ts"],"sourcesContent":["import { builtinModules } from \"node:module\";\n\n/**\n * A specifier the builder wrote into generated code that the consuming app does\n * not declare.\n */\nexport type UndeclaredImport = {\n  /** File the import was written into, relative to the generation directory. */\n  file: string;\n  /** The specifier exactly as emitted. */\n  specifier: string;\n  /** The package the specifier resolves to — `@scope/name` for a deep import. */\n  packageName: string;\n};\n\nexport type GeneratedFile = {\n  file: string;\n  content: string;\n};\n\n/**\n * Raised when generated code would ship an import the app cannot resolve.\n *\n * Carries every violation rather than the first, so a build reports the whole\n * problem in one pass instead of one specifier per re-run.\n */\nexport class UndeclaredGeneratedImportError extends Error {\n  public constructor(public readonly violations: UndeclaredImport[]) {\n    super(\n      [\n        `Generated code imports ${violations.length} package(s) the application does not declare:`,\n        \"\",\n        ...violations.map(\n          ({ file, specifier, packageName }) =>\n            `  ${file} → \"${specifier}\" (requires \"${packageName}\" in the app's dependencies)`,\n        ),\n        \"\",\n        \"Generated code may only import packages the app itself declares. A framework-internal\",\n        \"dependency must be reached through a re-export from @warlock.js/core — a bare specifier\",\n        \"resolves by accident under npm/yarn hoisting and fails under pnpm's strict layout.\",\n      ].join(\"\\n\"),\n    );\n\n    this.name = \"UndeclaredGeneratedImportError\";\n  }\n}\n\n// The clause between `import` and `from` excludes `;` and both quote\n// characters so the lazy match cannot run past the end of its own statement.\n// Allowing it to would let a side-effect import (`import \"./bootstrap\";`) bind\n// to the `from` of the NEXT statement and disappear from the results.\nconst IMPORT_PATTERN =\n  /(?:import|export)\\s+(?:[^\"';]*?\\sfrom\\s*)?[\"']([^\"']+)[\"']|import\\s*\\(\\s*[\"']([^\"']+)[\"']\\s*\\)/g;\n\n/**\n * Every module specifier a source file references — static, side-effect,\n * re-export and dynamic `import()` forms alike.\n *\n * Regex is sufficient and deliberate here: the input is code this builder wrote\n * itself, so it has no comments, no strings that look like imports, and no\n * syntax the pattern could misread. Parsing it with a full AST would buy\n * nothing and cost a dependency in the build path.\n */\nexport function extractSpecifiers(content: string): string[] {\n  const specifiers: string[] = [];\n\n  for (const match of content.matchAll(IMPORT_PATTERN)) {\n    const specifier = match[1] ?? match[2];\n\n    if (specifier) {\n      specifiers.push(specifier);\n    }\n  }\n\n  return specifiers;\n}\n\n/**\n * The package a specifier resolves to — `@scope/name` or `name`, ignoring any\n * deep path after it. Returns undefined for anything that is not a package:\n * relative paths, absolute paths, URLs, and Node builtins.\n */\nexport function resolvePackageName(specifier: string): string | undefined {\n  if (\n    specifier.startsWith(\".\") ||\n    specifier.startsWith(\"/\") ||\n    specifier.startsWith(\"node:\") ||\n    specifier.includes(\"://\")\n  ) {\n    return undefined;\n  }\n\n  const segments = specifier.split(\"/\");\n  const packageName = specifier.startsWith(\"@\") ? segments.slice(0, 2).join(\"/\") : segments[0];\n\n  if (builtinModules.includes(packageName)) {\n    return undefined;\n  }\n\n  return packageName;\n}\n\n/**\n * Find every import in generated code that the app does not declare.\n *\n * `dependencies` only, deliberately: the artifact this checks is a production\n * bundle, so a package the app lists as a dev dependency is not guaranteed to\n * be installed where it runs.\n */\nexport function findUndeclaredImports(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): UndeclaredImport[] {\n  const declared = new Set(declaredDependencies);\n  const violations: UndeclaredImport[] = [];\n\n  for (const { file, content } of files) {\n    for (const specifier of extractSpecifiers(content)) {\n      const packageName = resolvePackageName(specifier);\n\n      if (!packageName || declared.has(packageName)) {\n        continue;\n      }\n\n      violations.push({ file, specifier, packageName });\n    }\n  }\n\n  return violations;\n}\n\n/**\n * Fail the build when generated code would import something the app cannot\n * resolve.\n *\n * This is the part that stops the defect class from returning. Rewriting the\n * one bad specifier fixes today's bundle; only the assertion stops the next\n * change to the generator from reintroducing it — under npm or yarn the mistake\n * is invisible, because hoisting resolves it by accident.\n *\n * @throws {UndeclaredGeneratedImportError} listing every violation found.\n */\nexport function assertGeneratedImportsAreDeclared(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): void {\n  const violations = findUndeclaredImports(files, declaredDependencies);\n\n  if (violations.length > 0) {\n    throw new UndeclaredGeneratedImportError(violations);\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAa,iCAAb,cAAoD,MAAM;CACxD,AAAO,YAAY,AAAgB,YAAgC;EACjE,MACE;GACE,0BAA0B,WAAW,OAAO;GAC5C;GACA,GAAG,WAAW,KACX,EAAE,MAAM,WAAW,kBAClB,KAAK,KAAK,MAAM,UAAU,eAAe,YAAY,6BACzD;GACA;GACA;GACA;GACA;EACF,CAAC,CAAC,KAAK,IAAI,CACb;EAdiC;EAgBjC,KAAK,OAAO;CACd;AACF;AAMA,MAAM,iBACJ;;;;;;;;;;AAWF,SAAgB,kBAAkB,SAA2B;CAC3D,MAAM,aAAuB,CAAC;CAE9B,KAAK,MAAM,SAAS,QAAQ,SAAS,cAAc,GAAG;EACpD,MAAM,YAAY,MAAM,MAAM,MAAM;EAEpC,IAAI,WACF,WAAW,KAAK,SAAS;CAE7B;CAEA,OAAO;AACT;;;;;;AAOA,SAAgB,mBAAmB,WAAuC;CACxE,IACE,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,OAAO,KAC5B,UAAU,SAAS,KAAK,GAExB;CAGF,MAAM,WAAW,UAAU,MAAM,GAAG;CACpC,MAAM,cAAc,UAAU,WAAW,GAAG,IAAI,SAAS,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAAS;CAE1F,IAAI,eAAe,SAAS,WAAW,GACrC;CAGF,OAAO;AACT;;;;;;;;AASA,SAAgB,sBACd,OACA,sBACoB;CACpB,MAAM,WAAW,IAAI,IAAI,oBAAoB;CAC7C,MAAM,aAAiC,CAAC;CAExC,KAAK,MAAM,EAAE,MAAM,aAAa,OAC9B,KAAK,MAAM,aAAa,kBAAkB,OAAO,GAAG;EAClD,MAAM,cAAc,mBAAmB,SAAS;EAEhD,IAAI,CAAC,eAAe,SAAS,IAAI,WAAW,GAC1C;EAGF,WAAW,KAAK;GAAE;GAAM;GAAW;EAAY,CAAC;CAClD;CAGF,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,kCACd,OACA,sBACM;CACN,MAAM,aAAa,sBAAsB,OAAO,oBAAoB;CAEpE,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,+BAA+B,UAAU;AAEvD"}
+{"version":3,"file":"assert-generated-imports.mjs","names":[],"sources":["C:/Work/Warlock.js/core/src/production/assert-generated-imports.ts"],"sourcesContent":["import { builtinModules } from \"node:module\";\n\n/**\n * A specifier the builder wrote into generated code that the consuming app does\n * not declare.\n */\nexport type UndeclaredImport = {\n  /** File the import was written into, relative to the generation directory. */\n  file: string;\n  /** The specifier exactly as emitted. */\n  specifier: string;\n  /** The package the specifier resolves to — `@scope/name` for a deep import. */\n  packageName: string;\n};\n\nexport type GeneratedFile = {\n  file: string;\n  content: string;\n};\n\n/**\n * Raised when generated code would ship an import the app cannot resolve.\n *\n * Carries every violation rather than the first, so a build reports the whole\n * problem in one pass instead of one specifier per re-run.\n */\nexport class UndeclaredGeneratedImportError extends Error {\n  public constructor(public readonly violations: UndeclaredImport[]) {\n    super(\n      [\n        `Generated code imports ${violations.length} package(s) the application does not declare:`,\n        \"\",\n        ...violations.map(\n          ({ file, specifier, packageName }) =>\n            `  ${file} → \"${specifier}\" (requires \"${packageName}\" in the app's dependencies)`,\n        ),\n        \"\",\n        \"Generated code may only import packages the app itself declares. A framework-internal\",\n        \"dependency must be reached through a re-export from @warlock.js/core — a bare specifier\",\n        \"resolves by accident under npm/yarn hoisting and fails under pnpm's strict layout.\",\n      ].join(\"\\n\"),\n    );\n\n    this.name = \"UndeclaredGeneratedImportError\";\n  }\n}\n\n// The clause between `import` and `from` excludes `;` and both quote\n// characters so the lazy match cannot run past the end of its own statement.\n// Allowing it to would let a side-effect import (`import \"./bootstrap\";`) bind\n// to the `from` of the NEXT statement and disappear from the results.\nconst IMPORT_PATTERN =\n  /(?:import|export)\\s+(?:[^\"';]*?\\sfrom\\s*)?[\"']([^\"']+)[\"']|import\\s*\\(\\s*[\"']([^\"']+)[\"']\\s*\\)/g;\n\n/**\n * Every module specifier a source file references — static, side-effect,\n * re-export and dynamic `import()` forms alike.\n *\n * Regex is sufficient and deliberate here: the input is code this builder wrote\n * itself, so it has no comments, no strings that look like imports, and no\n * syntax the pattern could misread. Parsing it with a full AST would buy\n * nothing and cost a dependency in the build path.\n */\nexport function extractSpecifiers(content: string): string[] {\n  const specifiers: string[] = [];\n\n  for (const match of content.matchAll(IMPORT_PATTERN)) {\n    const specifier = match[1] ?? match[2];\n\n    if (specifier) {\n      specifiers.push(specifier);\n    }\n  }\n\n  return specifiers;\n}\n\n/**\n * The package a specifier resolves to — `@scope/name` or `name`, ignoring any\n * deep path after it. Returns undefined for anything that is not a package:\n * relative paths, absolute paths, URLs, and Node builtins.\n */\nexport function resolvePackageName(specifier: string): string | undefined {\n  if (\n    specifier.startsWith(\".\") ||\n    specifier.startsWith(\"/\") ||\n    specifier.startsWith(\"node:\") ||\n    specifier.includes(\"://\")\n  ) {\n    return undefined;\n  }\n\n  const segments = specifier.split(\"/\");\n  const packageName = specifier.startsWith(\"@\") ? segments.slice(0, 2).join(\"/\") : segments[0];\n\n  if (builtinModules.includes(packageName)) {\n    return undefined;\n  }\n\n  return packageName;\n}\n\n/**\n * Find every import in generated code that the app does not declare.\n *\n * `dependencies` only, deliberately: the artifact this checks is a production\n * bundle, so a package the app lists as a dev dependency is not guaranteed to\n * be installed where it runs.\n */\nexport function findUndeclaredImports(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): UndeclaredImport[] {\n  const declared = new Set(declaredDependencies);\n  const violations: UndeclaredImport[] = [];\n\n  for (const { file, content } of files) {\n    for (const specifier of extractSpecifiers(content)) {\n      const packageName = resolvePackageName(specifier);\n\n      if (!packageName || declared.has(packageName)) {\n        continue;\n      }\n\n      violations.push({ file, specifier, packageName });\n    }\n  }\n\n  return violations;\n}\n\n/**\n * Fail the build when generated code would import something the app cannot\n * resolve.\n *\n * This is the part that stops the defect class from returning. Rewriting the\n * one bad specifier fixes today's bundle; only the assertion stops the next\n * change to the generator from reintroducing it — under npm or yarn the mistake\n * is invisible, because hoisting resolves it by accident.\n *\n * @throws {UndeclaredGeneratedImportError} listing every violation found.\n */\nexport function assertGeneratedImportsAreDeclared(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): void {\n  const violations = findUndeclaredImports(files, declaredDependencies);\n\n  if (violations.length > 0) {\n    throw new UndeclaredGeneratedImportError(violations);\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAa,iCAAb,cAAoD,MAAM;CACxD,AAAO,YAAY,AAAgB,YAAgC;EACjE,MACE;GACE,0BAA0B,WAAW,OAAO;GAC5C;GACA,GAAG,WAAW,KACX,EAAE,MAAM,WAAW,kBAClB,KAAK,KAAK,MAAM,UAAU,eAAe,YAAY,6BACzD;GACA;GACA;GACA;GACA;EACF,EAAE,KAAK,IAAI,CACb;EAdiC;EAgBjC,KAAK,OAAO;CACd;AACF;AAMA,MAAM,iBACJ;;;;;;;;;;AAWF,SAAgB,kBAAkB,SAA2B;CAC3D,MAAM,aAAuB,CAAC;CAE9B,KAAK,MAAM,SAAS,QAAQ,SAAS,cAAc,GAAG;EACpD,MAAM,YAAY,MAAM,MAAM,MAAM;EAEpC,IAAI,WACF,WAAW,KAAK,SAAS;CAE7B;CAEA,OAAO;AACT;;;;;;AAOA,SAAgB,mBAAmB,WAAuC;CACxE,IACE,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,OAAO,KAC5B,UAAU,SAAS,KAAK,GAExB;CAGF,MAAM,WAAW,UAAU,MAAM,GAAG;CACpC,MAAM,cAAc,UAAU,WAAW,GAAG,IAAI,SAAS,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,SAAS;CAE1F,IAAI,eAAe,SAAS,WAAW,GACrC;CAGF,OAAO;AACT;;;;;;;;AASA,SAAgB,sBACd,OACA,sBACoB;CACpB,MAAM,WAAW,IAAI,IAAI,oBAAoB;CAC7C,MAAM,aAAiC,CAAC;CAExC,KAAK,MAAM,EAAE,MAAM,aAAa,OAC9B,KAAK,MAAM,aAAa,kBAAkB,OAAO,GAAG;EAClD,MAAM,cAAc,mBAAmB,SAAS;EAEhD,IAAI,CAAC,eAAe,SAAS,IAAI,WAAW,GAC1C;EAGF,WAAW,KAAK;GAAE;GAAM;GAAW;EAAY,CAAC;CAClD;CAGF,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,kCACd,OACA,sBACM;CACN,MAAM,aAAa,sBAAsB,OAAO,oBAAoB;CAEpE,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,+BAA+B,UAAU;AAEvD"}

package/esm/production/build-app-production.mjs

@@ -1,6 +1,6 @@
 import { ProductionBuilder } from "./production-builder.mjs";
 
-//#region ../core/src/production/build-app-production.ts
+//#region core/src/production/build-app-production.ts
 /**
 * Build the application for production
 * Options are loaded from warlock.config.ts

package/esm/production/build-app-production.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"build-app-production.mjs","names":[],"sources":["../../../../../../../core/src/production/build-app-production.ts"],"sourcesContent":["import { ProductionBuilder } from \"./production-builder\";\n\n/**\n * Build the application for production\n * Options are loaded from warlock.config.ts\n */\nexport async function buildAppProduction() {\n  const builder = new ProductionBuilder();\n  await builder.build();\n}\n"],"mappings":";;;;;;;AAMA,eAAsB,qBAAqB;CAEzC,MAAM,IADc,kBACR,CAAC,CAAC,MAAM;AACtB"}
+{"version":3,"file":"build-app-production.mjs","names":[],"sources":["C:/Work/Warlock.js/core/src/production/build-app-production.ts"],"sourcesContent":["import { ProductionBuilder } from \"./production-builder\";\n\n/**\n * Build the application for production\n * Options are loaded from warlock.config.ts\n */\nexport async function buildAppProduction() {\n  const builder = new ProductionBuilder();\n  await builder.build();\n}\n"],"mappings":";;;;;;;AAMA,eAAsB,qBAAqB;CAEzC,MAAM,IADc,kBACR,EAAE,MAAM;AACtB"}

package/esm/production/build-contributions.mjs

@@ -1,4 +1,4 @@
-//#region ../core/src/production/build-contributions.ts
+//#region core/src/production/build-contributions.ts
 const ErrorWithCause = Error;
 /**
 * The only keys a `build` contribution may carry.

package/esm/production/build-contributions.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"build-contributions.mjs","names":[],"sources":["../../../../../../../core/src/production/build-contributions.ts"],"sourcesContent":["import type {\n  Connector,\n  ConnectorBuildContext,\n  ConnectorEsbuildPatch,\n} from \"../connectors/types\";\n\n/**\n * `Error` with the `cause` option typed. Same shim as\n * `application.ts` — lib.es2022 declares `cause` on `ErrorOptions`, but the\n * package still compiles against an older lib in some consumers.\n */\ntype ErrorWithCauseConstructor = new (message: string, options: { cause: unknown }) => Error;\n\nconst ErrorWithCause = Error as ErrorWithCauseConstructor;\n\n/**\n * The only keys a `build` contribution may carry.\n *\n * The runtime half of the closed-contribution constraint: the\n * type already makes `build: { plugins: [...] }` unrepresentable, but a\n * plain `warlock.config.js`, an `as any`, or a connector compiled against an\n * older core all slip past the type. Rejected rather than ignored — the same\n * posture as the `tsconfig` guard in `resolve-build-config`: dropping the key\n * quietly would leave the author believing their plugin ran.\n */\nconst ALLOWED_CONTRIBUTION_KEYS = [\"generate\", \"emit\"] as const;\n\n/**\n * What the generate pass produced, merged across every contributor.\n */\nexport type GenerateContributionsResult = {\n  /** Entry lines in contributor order, appended after `./routes` */\n  entryImports: string[];\n  /** The contributors' esbuild patches, merged into one */\n  esbuild: ConnectorEsbuildPatch;\n};\n\n/**\n * Reject a contribution object carrying anything but the two hooks.\n *\n * @throws Error naming the connector and the offending key\n */\nexport function assertClosedContribution(connector: Connector): void {\n  const contribution = connector.build;\n\n  if (!contribution) return;\n\n  for (const key of Object.keys(contribution)) {\n    if ((ALLOWED_CONTRIBUTION_KEYS as readonly string[]).includes(key)) continue;\n\n    throw new Error(\n      `Connector \"${connector.name}\" declares an unsupported build contribution key \"${key}\". ` +\n        `A build contribution carries exactly two optional hooks — ` +\n        `${ALLOWED_CONTRIBUTION_KEYS.join(\" and \")} — and no data. ` +\n        `Anything a hook needs (plugins, pipelines, aliases) must be constructed inside ` +\n        `that hook, so it never lands in the connector's static import graph.`,\n    );\n  }\n}\n\n/**\n * Drain every connector's `generate` hook, in array order, sequentially.\n *\n * Semantics are copied from `Application.runStartupValidators`\n * (`application.ts:304-329`) on purpose: ordered, awaited one at a time, and\n * a throw is rethrown wrapped in an error NAMING the contributor. A\n * contributor failure IS the build failing — that is what makes\n * \"green build, no client bundle\" unrepresentable rather than merely\n * unlikely.\n */\nexport async function runGenerateContributions(\n  connectors: readonly Connector[],\n  context: ConnectorBuildContext,\n): Promise<GenerateContributionsResult> {\n  const entryImports: string[] = [];\n  let esbuild: ConnectorEsbuildPatch = {};\n\n  for (const connector of connectors) {\n    assertClosedContribution(connector);\n\n    const generate = connector.build?.generate;\n\n    if (!generate) continue;\n\n    const result = await runHook(connector, \"generate\", () => generate(context));\n\n    if (!result) continue;\n\n    if (result.entryImports) {\n      entryImports.push(...result.entryImports);\n    }\n\n    if (result.esbuild) {\n      esbuild = mergeEsbuildPatches(esbuild, result.esbuild);\n    }\n  }\n\n  return { entryImports, esbuild };\n}\n\n/**\n * Drain every connector's `emit` hook, in array order, sequentially.\n *\n * Runs after esbuild and before `.warlock/production` is removed, so a hook\n * may still read what `generate` wrote there.\n */\nexport async function runEmitContributions(\n  connectors: readonly Connector[],\n  context: ConnectorBuildContext,\n): Promise<void> {\n  for (const connector of connectors) {\n    assertClosedContribution(connector);\n\n    const emit = connector.build?.emit;\n\n    if (!emit) continue;\n\n    await runHook(connector, \"emit\", () => emit(context));\n  }\n}\n\n/**\n * Merge two contributor patches. Later wins, except:\n *\n * - `define` merges per key — two contributors defining different\n *   `import.meta.env.*` entries must both survive; a wholesale replace would\n *   drop one silently.\n * - `external` concatenates and dedupes — it is a set of package names, and\n *   under `singleBundle` each contributor adds its own optional peers.\n * - `loader` merges per extension, for the same reason as `define`.\n */\nexport function mergeEsbuildPatches(\n  base: ConnectorEsbuildPatch,\n  patch: ConnectorEsbuildPatch,\n): ConnectorEsbuildPatch {\n  const merged: ConnectorEsbuildPatch = { ...base, ...patch };\n\n  if (base.define || patch.define) {\n    merged.define = { ...base.define, ...patch.define };\n  }\n\n  if (base.external || patch.external) {\n    merged.external = dedupe([...(base.external ?? []), ...(patch.external ?? [])]);\n  }\n\n  if (base.loader || patch.loader) {\n    merged.loader = { ...base.loader, ...patch.loader };\n  }\n\n  return merged;\n}\n\n/**\n * Concatenation order preserved — esbuild does not care, but a stable order\n * keeps build output diffable.\n */\nexport function dedupe(values: string[]): string[] {\n  return [...new Set(values)];\n}\n\n/**\n * Run one hook and rename its failure after the connector that owns it.\n */\nasync function runHook<Result>(\n  connector: Connector,\n  hook: \"generate\" | \"emit\",\n  run: () => Result | Promise<Result>,\n): Promise<Result> {\n  try {\n    return await run();\n  } catch (error) {\n    const cause = error instanceof Error ? error.message : String(error);\n\n    throw new ErrorWithCause(\n      `Build contribution \"${connector.name}\" failed during ${hook}: ${cause}. ` +\n        `The build cannot continue — an artifact this connector was responsible for ` +\n        `is missing, and shipping the bundle without it would fail at runtime instead.`,\n      { cause: error },\n    );\n  }\n}\n"],"mappings":";AAaA,MAAM,iBAAiB;;;;;;;;;;;AAYvB,MAAM,4BAA4B,CAAC,YAAY,MAAM;;;;;;AAiBrD,SAAgB,yBAAyB,WAA4B;CACnE,MAAM,eAAe,UAAU;CAE/B,IAAI,CAAC,cAAc;CAEnB,KAAK,MAAM,OAAO,OAAO,KAAK,YAAY,GAAG;EAC3C,IAAK,0BAAgD,SAAS,GAAG,GAAG;EAEpE,MAAM,IAAI,MACR,cAAc,UAAU,KAAK,oDAAoD,IAAI,+DAEhF,0BAA0B,KAAK,OAAO,EAAE,oKAG/C;CACF;AACF;;;;;;;;;;;AAYA,eAAsB,yBACpB,YACA,SACsC;CACtC,MAAM,eAAyB,CAAC;CAChC,IAAI,UAAiC,CAAC;CAEtC,KAAK,MAAM,aAAa,YAAY;EAClC,yBAAyB,SAAS;EAElC,MAAM,WAAW,UAAU,OAAO;EAElC,IAAI,CAAC,UAAU;EAEf,MAAM,SAAS,MAAM,QAAQ,WAAW,kBAAkB,SAAS,OAAO,CAAC;EAE3E,IAAI,CAAC,QAAQ;EAEb,IAAI,OAAO,cACT,aAAa,KAAK,GAAG,OAAO,YAAY;EAG1C,IAAI,OAAO,SACT,UAAU,oBAAoB,SAAS,OAAO,OAAO;CAEzD;CAEA,OAAO;EAAE;EAAc;CAAQ;AACjC;;;;;;;AAQA,eAAsB,qBACpB,YACA,SACe;CACf,KAAK,MAAM,aAAa,YAAY;EAClC,yBAAyB,SAAS;EAElC,MAAM,OAAO,UAAU,OAAO;EAE9B,IAAI,CAAC,MAAM;EAEX,MAAM,QAAQ,WAAW,cAAc,KAAK,OAAO,CAAC;CACtD;AACF;;;;;;;;;;;AAYA,SAAgB,oBACd,MACA,OACuB;CACvB,MAAM,SAAgC;EAAE,GAAG;EAAM,GAAG;CAAM;CAE1D,IAAI,KAAK,UAAU,MAAM,QACvB,OAAO,SAAS;EAAE,GAAG,KAAK;EAAQ,GAAG,MAAM;CAAO;CAGpD,IAAI,KAAK,YAAY,MAAM,UACzB,OAAO,WAAW,OAAO,CAAC,GAAI,KAAK,YAAY,CAAC,GAAI,GAAI,MAAM,YAAY,CAAC,CAAE,CAAC;CAGhF,IAAI,KAAK,UAAU,MAAM,QACvB,OAAO,SAAS;EAAE,GAAG,KAAK;EAAQ,GAAG,MAAM;CAAO;CAGpD,OAAO;AACT;;;;;AAMA,SAAgB,OAAO,QAA4B;CACjD,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;;;;AAKA,eAAe,QACb,WACA,MACA,KACiB;CACjB,IAAI;EACF,OAAO,MAAM,IAAI;CACnB,SAAS,OAAO;EACd,MAAM,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAEnE,MAAM,IAAI,eACR,uBAAuB,UAAU,KAAK,kBAAkB,KAAK,IAAI,MAAM,6JAGvE,EAAE,OAAO,MAAM,CACjB;CACF;AACF"}
+{"version":3,"file":"build-contributions.mjs","names":[],"sources":["C:/Work/Warlock.js/core/src/production/build-contributions.ts"],"sourcesContent":["import type {\n  Connector,\n  ConnectorBuildContext,\n  ConnectorEsbuildPatch,\n} from \"../connectors/types\";\n\n/**\n * `Error` with the `cause` option typed. Same shim as\n * `application.ts` — lib.es2022 declares `cause` on `ErrorOptions`, but the\n * package still compiles against an older lib in some consumers.\n */\ntype ErrorWithCauseConstructor = new (message: string, options: { cause: unknown }) => Error;\n\nconst ErrorWithCause = Error as ErrorWithCauseConstructor;\n\n/**\n * The only keys a `build` contribution may carry.\n *\n * The runtime half of the closed-contribution constraint: the\n * type already makes `build: { plugins: [...] }` unrepresentable, but a\n * plain `warlock.config.js`, an `as any`, or a connector compiled against an\n * older core all slip past the type. Rejected rather than ignored — the same\n * posture as the `tsconfig` guard in `resolve-build-config`: dropping the key\n * quietly would leave the author believing their plugin ran.\n */\nconst ALLOWED_CONTRIBUTION_KEYS = [\"generate\", \"emit\"] as const;\n\n/**\n * What the generate pass produced, merged across every contributor.\n */\nexport type GenerateContributionsResult = {\n  /** Entry lines in contributor order, appended after `./routes` */\n  entryImports: string[];\n  /** The contributors' esbuild patches, merged into one */\n  esbuild: ConnectorEsbuildPatch;\n};\n\n/**\n * Reject a contribution object carrying anything but the two hooks.\n *\n * @throws Error naming the connector and the offending key\n */\nexport function assertClosedContribution(connector: Connector): void {\n  const contribution = connector.build;\n\n  if (!contribution) return;\n\n  for (const key of Object.keys(contribution)) {\n    if ((ALLOWED_CONTRIBUTION_KEYS as readonly string[]).includes(key)) continue;\n\n    throw new Error(\n      `Connector \"${connector.name}\" declares an unsupported build contribution key \"${key}\". ` +\n        `A build contribution carries exactly two optional hooks — ` +\n        `${ALLOWED_CONTRIBUTION_KEYS.join(\" and \")} — and no data. ` +\n        `Anything a hook needs (plugins, pipelines, aliases) must be constructed inside ` +\n        `that hook, so it never lands in the connector's static import graph.`,\n    );\n  }\n}\n\n/**\n * Drain every connector's `generate` hook, in array order, sequentially.\n *\n * Semantics are copied from `Application.runStartupValidators`\n * (`application.ts:304-329`) on purpose: ordered, awaited one at a time, and\n * a throw is rethrown wrapped in an error NAMING the contributor. A\n * contributor failure IS the build failing — that is what makes\n * \"green build, no client bundle\" unrepresentable rather than merely\n * unlikely.\n */\nexport async function runGenerateContributions(\n  connectors: readonly Connector[],\n  context: ConnectorBuildContext,\n): Promise<GenerateContributionsResult> {\n  const entryImports: string[] = [];\n  let esbuild: ConnectorEsbuildPatch = {};\n\n  for (const connector of connectors) {\n    assertClosedContribution(connector);\n\n    const generate = connector.build?.generate;\n\n    if (!generate) continue;\n\n    const result = await runHook(connector, \"generate\", () => generate(context));\n\n    if (!result) continue;\n\n    if (result.entryImports) {\n      entryImports.push(...result.entryImports);\n    }\n\n    if (result.esbuild) {\n      esbuild = mergeEsbuildPatches(esbuild, result.esbuild);\n    }\n  }\n\n  return { entryImports, esbuild };\n}\n\n/**\n * Drain every connector's `emit` hook, in array order, sequentially.\n *\n * Runs after esbuild and before `.warlock/production` is removed, so a hook\n * may still read what `generate` wrote there.\n */\nexport async function runEmitContributions(\n  connectors: readonly Connector[],\n  context: ConnectorBuildContext,\n): Promise<void> {\n  for (const connector of connectors) {\n    assertClosedContribution(connector);\n\n    const emit = connector.build?.emit;\n\n    if (!emit) continue;\n\n    await runHook(connector, \"emit\", () => emit(context));\n  }\n}\n\n/**\n * Merge two contributor patches. Later wins, except:\n *\n * - `define` merges per key — two contributors defining different\n *   `import.meta.env.*` entries must both survive; a wholesale replace would\n *   drop one silently.\n * - `external` concatenates and dedupes — it is a set of package names, and\n *   under `singleBundle` each contributor adds its own optional peers.\n * - `loader` merges per extension, for the same reason as `define`.\n */\nexport function mergeEsbuildPatches(\n  base: ConnectorEsbuildPatch,\n  patch: ConnectorEsbuildPatch,\n): ConnectorEsbuildPatch {\n  const merged: ConnectorEsbuildPatch = { ...base, ...patch };\n\n  if (base.define || patch.define) {\n    merged.define = { ...base.define, ...patch.define };\n  }\n\n  if (base.external || patch.external) {\n    merged.external = dedupe([...(base.external ?? []), ...(patch.external ?? [])]);\n  }\n\n  if (base.loader || patch.loader) {\n    merged.loader = { ...base.loader, ...patch.loader };\n  }\n\n  return merged;\n}\n\n/**\n * Concatenation order preserved — esbuild does not care, but a stable order\n * keeps build output diffable.\n */\nexport function dedupe(values: string[]): string[] {\n  return [...new Set(values)];\n}\n\n/**\n * Run one hook and rename its failure after the connector that owns it.\n */\nasync function runHook<Result>(\n  connector: Connector,\n  hook: \"generate\" | \"emit\",\n  run: () => Result | Promise<Result>,\n): Promise<Result> {\n  try {\n    return await run();\n  } catch (error) {\n    const cause = error instanceof Error ? error.message : String(error);\n\n    throw new ErrorWithCause(\n      `Build contribution \"${connector.name}\" failed during ${hook}: ${cause}. ` +\n        `The build cannot continue — an artifact this connector was responsible for ` +\n        `is missing, and shipping the bundle without it would fail at runtime instead.`,\n      { cause: error },\n    );\n  }\n}\n"],"mappings":";AAaA,MAAM,iBAAiB;;;;;;;;;;;AAYvB,MAAM,4BAA4B,CAAC,YAAY,MAAM;;;;;;AAiBrD,SAAgB,yBAAyB,WAA4B;CACnE,MAAM,eAAe,UAAU;CAE/B,IAAI,CAAC,cAAc;CAEnB,KAAK,MAAM,OAAO,OAAO,KAAK,YAAY,GAAG;EAC3C,IAAK,0BAAgD,SAAS,GAAG,GAAG;EAEpE,MAAM,IAAI,MACR,cAAc,UAAU,KAAK,oDAAoD,IAAI,+DAEhF,0BAA0B,KAAK,OAAO,EAAE,oKAG/C;CACF;AACF;;;;;;;;;;;AAYA,eAAsB,yBACpB,YACA,SACsC;CACtC,MAAM,eAAyB,CAAC;CAChC,IAAI,UAAiC,CAAC;CAEtC,KAAK,MAAM,aAAa,YAAY;EAClC,yBAAyB,SAAS;EAElC,MAAM,WAAW,UAAU,OAAO;EAElC,IAAI,CAAC,UAAU;EAEf,MAAM,SAAS,MAAM,QAAQ,WAAW,kBAAkB,SAAS,OAAO,CAAC;EAE3E,IAAI,CAAC,QAAQ;EAEb,IAAI,OAAO,cACT,aAAa,KAAK,GAAG,OAAO,YAAY;EAG1C,IAAI,OAAO,SACT,UAAU,oBAAoB,SAAS,OAAO,OAAO;CAEzD;CAEA,OAAO;EAAE;EAAc;CAAQ;AACjC;;;;;;;AAQA,eAAsB,qBACpB,YACA,SACe;CACf,KAAK,MAAM,aAAa,YAAY;EAClC,yBAAyB,SAAS;EAElC,MAAM,OAAO,UAAU,OAAO;EAE9B,IAAI,CAAC,MAAM;EAEX,MAAM,QAAQ,WAAW,cAAc,KAAK,OAAO,CAAC;CACtD;AACF;;;;;;;;;;;AAYA,SAAgB,oBACd,MACA,OACuB;CACvB,MAAM,SAAgC;EAAE,GAAG;EAAM,GAAG;CAAM;CAE1D,IAAI,KAAK,UAAU,MAAM,QACvB,OAAO,SAAS;EAAE,GAAG,KAAK;EAAQ,GAAG,MAAM;CAAO;CAGpD,IAAI,KAAK,YAAY,MAAM,UACzB,OAAO,WAAW,OAAO,CAAC,GAAI,KAAK,YAAY,CAAC,GAAI,GAAI,MAAM,YAAY,CAAC,CAAE,CAAC;CAGhF,IAAI,KAAK,UAAU,MAAM,QACvB,OAAO,SAAS;EAAE,GAAG,KAAK;EAAQ,GAAG,MAAM;CAAO;CAGpD,OAAO;AACT;;;;;AAMA,SAAgB,OAAO,QAA4B;CACjD,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;;;;AAKA,eAAe,QACb,WACA,MACA,KACiB;CACjB,IAAI;EACF,OAAO,MAAM,IAAI;CACnB,SAAS,OAAO;EACd,MAAM,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAEnE,MAAM,IAAI,eACR,uBAAuB,UAAU,KAAK,kBAAkB,KAAK,IAAI,MAAM,6JAGvE,EAAE,OAAO,MAAM,CACjB;CACF;AACF"}

package/esm/production/dist-build-manifest.mjs

@@ -0,0 +1,47 @@
+import path from "path";
+import { getJsonFileAsync, putJsonFileAsync } from "@warlock.js/fs";
+
+//#region core/src/production/dist-build-manifest.ts
+/**
+* Name of the marker file `warlock build` writes into the output directory
+* as the last step before promoting it to `dist`, and the only thing
+* `warlock start` trusts to tell a genuine build from stale or
+* hand-assembled output.
+*
+* Hidden (leading dot) so it never collides with a route, a static asset, or
+* anything an app might legitimately name `manifest.json`.
+*/
+const DIST_BUILD_MANIFEST_FILE_NAME = ".warlock-build.json";
+/**
+* Write the build-success marker into an output directory (the temp
+* directory a build assembled, before it is promoted to `dist`).
+*/
+async function writeDistBuildManifestAsync(directory) {
+	const manifest = {
+		status: "success",
+		builtAt: (/* @__PURE__ */ new Date()).toISOString()
+	};
+	await putJsonFileAsync(path.join(directory, DIST_BUILD_MANIFEST_FILE_NAME), manifest);
+}
+/**
+* Read the build-success marker out of `dist`.
+*
+* Returns `undefined` for every way the marker can fail to back a real
+* build: missing, unreadable, malformed JSON, or present without
+* `status: "success"`. "Never built", "build failed before promoting", and
+* "someone hand-edited dist" all collapse to the same outcome, because
+* `warlock start` treats them identically — refuse, and say why.
+*/
+async function readDistBuildManifestAsync(directory) {
+	try {
+		const manifest = await getJsonFileAsync(path.join(directory, DIST_BUILD_MANIFEST_FILE_NAME));
+		if (manifest?.status !== "success") return;
+		return manifest;
+	} catch {
+		return;
+	}
+}
+
+//#endregion
+export { readDistBuildManifestAsync, writeDistBuildManifestAsync };
+//# sourceMappingURL=dist-build-manifest.mjs.map

package/esm/production/dist-build-manifest.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist-build-manifest.mjs","names":[],"sources":["C:/Work/Warlock.js/core/src/production/dist-build-manifest.ts"],"sourcesContent":["import { getJsonFileAsync, putJsonFileAsync } from \"@warlock.js/fs\";\nimport path from \"path\";\n\n/**\n * Name of the marker file `warlock build` writes into the output directory\n * as the last step before promoting it to `dist`, and the only thing\n * `warlock start` trusts to tell a genuine build from stale or\n * hand-assembled output.\n *\n * Hidden (leading dot) so it never collides with a route, a static asset, or\n * anything an app might legitimately name `manifest.json`.\n */\nexport const DIST_BUILD_MANIFEST_FILE_NAME = \".warlock-build.json\";\n\n/**\n * Recorded once, at the end of a build that reached the promote step. Its\n * presence — with `status: \"success\"` — is the whole contract `warlock\n * start` checks. Not any particular output file, which a future build shape\n * could rename or drop.\n */\nexport type DistBuildManifest = {\n  status: \"success\";\n  builtAt: string;\n};\n\n/**\n * Write the build-success marker into an output directory (the temp\n * directory a build assembled, before it is promoted to `dist`).\n */\nexport async function writeDistBuildManifestAsync(directory: string): Promise<void> {\n  const manifest: DistBuildManifest = {\n    status: \"success\",\n    builtAt: new Date().toISOString(),\n  };\n\n  await putJsonFileAsync(path.join(directory, DIST_BUILD_MANIFEST_FILE_NAME), manifest);\n}\n\n/**\n * Read the build-success marker out of `dist`.\n *\n * Returns `undefined` for every way the marker can fail to back a real\n * build: missing, unreadable, malformed JSON, or present without\n * `status: \"success\"`. \"Never built\", \"build failed before promoting\", and\n * \"someone hand-edited dist\" all collapse to the same outcome, because\n * `warlock start` treats them identically — refuse, and say why.\n */\nexport async function readDistBuildManifestAsync(\n  directory: string,\n): Promise<DistBuildManifest | undefined> {\n  try {\n    const manifest = await getJsonFileAsync<DistBuildManifest>(\n      path.join(directory, DIST_BUILD_MANIFEST_FILE_NAME),\n    );\n\n    if (manifest?.status !== \"success\") {\n      return undefined;\n    }\n\n    return manifest;\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,MAAa,gCAAgC;;;;;AAiB7C,eAAsB,4BAA4B,WAAkC;CAClF,MAAM,WAA8B;EAClC,QAAQ;EACR,0BAAS,IAAI,KAAK,GAAE,YAAY;CAClC;CAEA,MAAM,iBAAiB,KAAK,KAAK,WAAW,6BAA6B,GAAG,QAAQ;AACtF;;;;;;;;;;AAWA,eAAsB,2BACpB,WACwC;CACxC,IAAI;EACF,MAAM,WAAW,MAAM,iBACrB,KAAK,KAAK,WAAW,6BAA6B,CACpD;EAEA,IAAI,UAAU,WAAW,WACvB;EAGF,OAAO;CACT,QAAQ;EACN;CACF;AACF"}

package/esm/production/esbuild-plugins.mjs

@@ -1,6 +1,6 @@
 import { __require } from "../_virtual/_rolldown/runtime.mjs";
 
-//#region ../core/src/production/esbuild-plugins.ts
+//#region core/src/production/esbuild-plugins.ts
 const nativeNodeModulesPlugin = {
 	name: "native-node-modules",
 	setup(build) {

package/esm/production/esbuild-plugins.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"esbuild-plugins.mjs","names":[],"sources":["../../../../../../../core/src/production/esbuild-plugins.ts"],"sourcesContent":["import type { OnLoadArgs, OnResolveArgs, PluginBuild } from \"esbuild\";\n\nexport const nativeNodeModulesPlugin = {\n  name: \"native-node-modules\",\n  setup(build: PluginBuild) {\n    build.onResolve({ filter: /\\.node$/, namespace: \"file\" }, (args: OnResolveArgs) => ({\n      path: require.resolve(args.path, { paths: [args.resolveDir] }),\n      namespace: \"node-file\",\n    }));\n\n    build.onLoad({ filter: /.*/, namespace: \"node-file\" }, (args: OnLoadArgs) => ({\n      contents: `\n          import path from ${JSON.stringify(args.path)}\n          try { module.exports = require(path) }\n          catch {}\n        `,\n    }));\n\n    build.onResolve({ filter: /\\.node$/, namespace: \"node-file\" }, (args: OnResolveArgs) => ({\n      path: args.path,\n      namespace: \"file\",\n    }));\n\n    const opts = build.initialOptions;\n    opts.loader = opts.loader || {};\n    opts.loader[\".node\"] = \"file\";\n  },\n};\n"],"mappings":";;;AAEA,MAAa,0BAA0B;CACrC,MAAM;CACN,MAAM,OAAoB;EACxB,MAAM,UAAU;GAAE,QAAQ;GAAW,WAAW;EAAO,IAAI,UAAyB;GAClF,gBAAc,QAAQ,KAAK,MAAM,EAAE,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;GAC7D,WAAW;EACb,EAAE;EAEF,MAAM,OAAO;GAAE,QAAQ;GAAM,WAAW;EAAY,IAAI,UAAsB,EAC5E,UAAU;6BACa,KAAK,UAAU,KAAK,IAAI,EAAE;;;UAInD,EAAE;EAEF,MAAM,UAAU;GAAE,QAAQ;GAAW,WAAW;EAAY,IAAI,UAAyB;GACvF,MAAM,KAAK;GACX,WAAW;EACb,EAAE;EAEF,MAAM,OAAO,MAAM;EACnB,KAAK,SAAS,KAAK,UAAU,CAAC;EAC9B,KAAK,OAAO,WAAW;CACzB;AACF"}
+{"version":3,"file":"esbuild-plugins.mjs","names":[],"sources":["C:/Work/Warlock.js/core/src/production/esbuild-plugins.ts"],"sourcesContent":["import type { OnLoadArgs, OnResolveArgs, PluginBuild } from \"esbuild\";\n\nexport const nativeNodeModulesPlugin = {\n  name: \"native-node-modules\",\n  setup(build: PluginBuild) {\n    build.onResolve({ filter: /\\.node$/, namespace: \"file\" }, (args: OnResolveArgs) => ({\n      path: require.resolve(args.path, { paths: [args.resolveDir] }),\n      namespace: \"node-file\",\n    }));\n\n    build.onLoad({ filter: /.*/, namespace: \"node-file\" }, (args: OnLoadArgs) => ({\n      contents: `\n          import path from ${JSON.stringify(args.path)}\n          try { module.exports = require(path) }\n          catch {}\n        `,\n    }));\n\n    build.onResolve({ filter: /\\.node$/, namespace: \"node-file\" }, (args: OnResolveArgs) => ({\n      path: args.path,\n      namespace: \"file\",\n    }));\n\n    const opts = build.initialOptions;\n    opts.loader = opts.loader || {};\n    opts.loader[\".node\"] = \"file\";\n  },\n};\n"],"mappings":";;;AAEA,MAAa,0BAA0B;CACrC,MAAM;CACN,MAAM,OAAoB;EACxB,MAAM,UAAU;GAAE,QAAQ;GAAW,WAAW;EAAO,IAAI,UAAyB;GAClF,gBAAc,QAAQ,KAAK,MAAM,EAAE,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;GAC7D,WAAW;EACb,EAAE;EAEF,MAAM,OAAO;GAAE,QAAQ;GAAM,WAAW;EAAY,IAAI,UAAsB,EAC5E,UAAU;6BACa,KAAK,UAAU,KAAK,IAAI,EAAE;;;UAInD,EAAE;EAEF,MAAM,UAAU;GAAE,QAAQ;GAAW,WAAW;EAAY,IAAI,UAAyB;GACvF,MAAM,KAAK;GACX,WAAW;EACb,EAAE;EAEF,MAAM,OAAO,MAAM;EACnB,KAAK,SAAS,KAAK,UAAU,CAAC;EAC9B,KAAK,OAAO,WAAW;CACzB;AACF"}

package/esm/production/production-builder.mjs

@@ -6,7 +6,9 @@ import { warlockConfigManager } from "../warlock-config/warlock-config.manager.m
 import { tsconfigManager } from "../dev-server/tsconfig-manager.mjs";
 import { assertGeneratedImportsAreDeclared } from "./assert-generated-imports.mjs";
 import { dedupe, runEmitContributions, runGenerateContributions } from "./build-contributions.mjs";
+import { writeDistBuildManifestAsync } from "./dist-build-manifest.mjs";
 import { nativeNodeModulesPlugin } from "./esbuild-plugins.mjs";
+import { commitDistAsync, createTempOutputDir, rollbackDistAsync, stageDistAsync } from "./promote-dist.mjs";
 import { resolveBuildConfig } from "./resolve-build-config.mjs";
 import path from "path";
 import { toCamelCase } from "@mongez/reinforcements";
@@ -15,7 +17,7 @@ import { ensureDirectoryAsync, fileExistsAsync, getFileAsync, getJsonFileAsync,
 import glob from "fast-glob";
 import esbuild from "esbuild";
 
-//#region ../core/src/production/production-builder.ts
+//#region core/src/production/production-builder.ts
 /**
 * Recreates `require`, `__filename` and `__dirname` at the top of an ESM bundle.
 *
@@ -83,16 +85,54 @@ var ProductionBuilder = class {
 	}
 	/**
 	* Main build entry point
+	*
+	* The esbuild bundle is written into a TEMP directory next to the real
+	* output directory, never into it, and that directory is renamed over
+	* `outdir` as one filesystem operation — so `outdir` is never observed as
+	* a mix of the old build and the new one, and a build that fails before
+	* that rename never touches `outdir` at all.
+	*
+	* `this.options.outdir` is NOT repointed at the temp directory while that
+	* happens, and must never be. It is not merely a write target: consumers
+	* BAKE it into runtime output — `web`'s build contribution derives the
+	* `clientDir` recorded in its pages manifest from it
+	* (`web/src/build/contribution.ts`) — so a temp path reaching them
+	* produces an artifact whose browser paths point at a directory promotion
+	* has since renamed away. The temp path is passed explicitly, as a
+	* parameter, to the one operation that writes into it ({@link bundle});
+	* everything else, `buildContext()` included, keeps reading the final
+	* destination.
+	*
+	* That is also why promotion is STAGED rather than done at the very end.
+	* Connector `emit` hooks write real artifacts (the web client bundle) and
+	* see the final `outdir`, so they must run when `outdir` genuinely holds
+	* this build — after the rename, not before it, or promotion would replace
+	* the directory they just wrote into. The previous build is kept parked
+	* aside until they finish: `emit` throwing rolls the whole promotion back,
+	* and the build-success marker `warlock start` checks is written last of
+	* all, so a failure at any point leaves no `dist` that start will boot.
 	*/
 	async build() {
 		console.log(colors.cyan("Building for production...\n"));
 		await this.initializeOptions();
-		await this.generateCombinedFiles();
-		await this.generateEntryPoint();
-		await this.assertGeneratedImports();
-		if (await this.runGenerateContributions()) await this.assertGeneratedImports();
-		await this.bundle();
-		await runEmitContributions(this.connectors, this.buildContext());
+		const finalOutDir = this.options.outdir;
+		const tempOutDir = createTempOutputDir(finalOutDir);
+		let staged;
+		try {
+			await this.generateCombinedFiles();
+			await this.generateEntryPoint();
+			await this.assertGeneratedImports();
+			if (await this.runGenerateContributions()) await this.assertGeneratedImports();
+			await this.bundle(tempOutDir);
+			staged = await stageDistAsync(tempOutDir, finalOutDir);
+			await runEmitContributions(this.connectors, this.buildContext());
+			await writeDistBuildManifestAsync(finalOutDir);
+			await commitDistAsync(staged);
+		} catch (error) {
+			if (staged) await rollbackDistAsync(staged);
+			else await removeDirectoryAsync(tempOutDir).catch(() => void 0);
+			throw error;
+		}
 		await removeDirectoryAsync(this.productionDir);
 		console.log(colors.green("Build complete!"));
 		console.log(`Start production server by running ${colors.cyan("warlock start")}`);
@@ -335,9 +375,17 @@ bootstrap();
 			`import warlockConfig from "${APP_ROOT_FROM_PRODUCTION_DIR}warlock.config";`,
 			`registerConfiguredConnectors(warlockConfig.connectors ?? [], { expectedNames: [${expectedNames}] });`,
 			"",
+			"// 2.6 Fail fast on a busy port. `http` is a LATE-phase connector, so its",
+			"//     own preflight is not reached until the database and cache have",
+			"//     connected and every app module has been imported — seconds of work",
+			"//     thrown away before anyone learns the port was taken. This probe is",
+			"//     a bind-and-release on a socket that is never served, and it reports",
+			"//     on stderr because no log channel is configured this early.",
+			"import { Application, connectorsManager, ConnectorLifecyclePhase, preflightConfiguredHttpPort } from \"@warlock.js/core\";",
+			"await preflightConfiguredHttpPort();",
+			"",
 			"// 3. Start early-phase connectors (database, cache, logger, ...)",
 			"//    so data sources, cache, etc. are ready before app code runs",
-			"import { Application, connectorsManager, ConnectorLifecyclePhase } from \"@warlock.js/core\";",
 			"await connectorsManager.startPhase(ConnectorLifecyclePhase.Early);"
 		];
 		imports.push("", "// 4. Load app code (events, locales, main, routes)");
@@ -353,22 +401,29 @@ bootstrap();
 	}
 	/**
 	* Bundle with esbuild
+	*
+	* @param writeOutDir the directory esbuild writes into — the build's
+	* private temp directory, NOT `options.outdir`. Taken as a parameter
+	* rather than read off `this.options` because the two are different paths
+	* with different meanings: `options.outdir` is the final destination every
+	* consumer bakes into the artifact, and this is only where bytes land
+	* before promotion moves them there.
 	*/
-	async bundle() {
+	async bundle(writeOutDir) {
 		console.log(colors.magenta("   Bundling with esbuild..."));
 		const entryPoint = path.join(this.productionDir, "app.ts");
-		const outDir = this.options.outdir;
 		const outFileName = this.options.outFile;
 		const entryName = path.basename(outFileName, path.extname(outFileName));
 		const singleBundle = this.options.singleBundle === true;
 		const esmShim = this.options.esmShim !== false;
 		const userBanner = this.options.banner;
-		delete this.options.outFile;
-		delete this.options.entryPath;
+		const strippable = this.options;
+		delete strippable.outFile;
+		delete strippable.entryPath;
 		delete this.options.singleBundle;
 		delete this.options.esmShim;
 		delete this.options.banner;
-		await ensureDirectoryAsync(outDir);
+		await ensureDirectoryAsync(writeOutDir);
 		const alias = this.buildAliasMapFromTsconfig();
 		const isEsm = (this.options.format ?? "esm") === "esm";
 		const banner = mergeBanner(userBanner, esmShim && isEsm ? ESM_INTEROP_SHIM : void 0);
@@ -397,12 +452,12 @@ bootstrap();
 				sourcemap: this.options.sourcemap === true ? "linked" : this.options.sourcemap,
 				format: "esm",
 				target: ["node22"],
-				outdir: outDir,
 				entryNames: entryName,
 				alias,
 				plugins: [nativeNodeModulesPlugin],
 				...contributedOptions,
 				...this.options,
+				outdir: writeOutDir,
 				...define ? { define } : {},
 				...external ? { external } : {},
 				...loader ? { loader } : {},