@warlock.js/core 5.20.0 → 5.21.0

package/esm/dev-server/supervisor.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"supervisor.mjs","names":[],"sources":["../../../../../../../core/src/dev-server/supervisor.ts"],"sourcesContent":["import { spawn, type ChildProcess } from \"node:child_process\";\nimport { devLogError, devLogWarn } from \"./dev-logger\";\n\n/**\n * Set on the worker process so it knows it was launched by a supervisor —\n * and so `warlock dev` inside the worker runs the server instead of\n * supervising a third process.\n */\nexport const WORKER_ENV_FLAG = \"WARLOCK_DEV_WORKER\";\n\n/**\n * Exit code a worker uses to ask for a fresh process. Chosen as EX_TEMPFAIL,\n * whose conventional meaning (\"temporary failure, retry\") is close enough that\n * a stray supervisor-less exit reads sensibly in a shell.\n */\nexport const RESTART_EXIT_CODE = 75;\n\n/**\n * Exit code a worker uses when it hit a startup precondition whose cause\n * cannot change by trying again — a busy port, a rejected boot validator, an\n * unusable configured value. Chosen as EX_CONFIG, whose conventional meaning\n * (\"configuration error\") matches the class. The supervisor treats this as\n * terminal: no restart, no crash-budget spend, and no extra banner — the\n * worker has already printed a good message, and the whole point of this\n * exit code is that the supervisor does not scroll it away with a\n * \"restarting\" line and then reprint the same failure a moment later.\n */\nexport const BOOT_PRECONDITION_EXIT_CODE = 78;\n\n/** Signals the supervisor must hand to the worker rather than act on itself. */\nconst FORWARDED_SIGNALS: NodeJS.Signals[] = [\"SIGTERM\", \"SIGHUP\"];\n\n/**\n * How long a worker must survive before an abnormal exit counts as a crash\n * worth recovering from rather than a failed boot worth reporting once.\n */\nconst HEALTHY_UPTIME_MS = 5_000;\n\n/** Crashes allowed inside {@link CRASH_WINDOW_MS} before we stop restarting. */\nconst CRASH_RESTART_LIMIT = 3;\n\n/** The rolling window flapping is measured over. */\nconst CRASH_WINDOW_MS = 60_000;\n\n/** Whether this process is the worker (i.e. a supervisor already exists). */\nexport function isDevWorker(): boolean {\n  return process.env[WORKER_ENV_FLAG] === \"1\";\n}\n\n/**\n * Run `warlock dev` as a supervised pair: a thin parent that owns the terminal\n * and a disposable child that is the actual dev server.\n *\n * The child asks to be replaced by exiting {@link RESTART_EXIT_CODE}; the\n * supervisor spawns a fresh one in its place. Because the parent is never\n * itself replaced, the process tree stays exactly two deep no matter how many\n * restarts happen — the previous design re-exec'd itself and left one idle\n * waiter behind per restart.\n *\n * The supervisor deliberately loads no config, no connectors, and no\n * application code, so a worker that wedges or dies can always be replaced by\n * a process that is known-good.\n *\n * Never resolves: the returned promise is a deliberate dead end so callers can\n * `return` it to stop everything downstream (notably the command's preloaders,\n * which must only ever run in the worker). The process ends with the last\n * worker, not with this promise.\n */\nexport function superviseDevServer(now: () => number = Date.now): Promise<never> {\n  let worker: ChildProcess | undefined;\n  let shuttingDown = false;\n\n  /** Timestamps of recent crash-restarts, used to detect flapping. */\n  let crashes: number[] = [];\n\n  const spawnWorker = (): void => {\n    const spawnedAt = now();\n\n    const spawnedWorker = spawn(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {\n      cwd: process.cwd(),\n      env: { ...process.env, [WORKER_ENV_FLAG]: \"1\" },\n      stdio: \"inherit\",\n      windowsHide: false,\n    });\n    worker = spawnedWorker;\n\n    spawnedWorker.on(\"error\", (error) => {\n      if (worker !== spawnedWorker) return;\n\n      shuttingDown = true;\n      devLogError(`Could not start the development server: ${error.message}`);\n      process.exit(1);\n    });\n\n    spawnedWorker.on(\"exit\", (code, signal) => {\n      // A replaced worker can finish emitting lifecycle events after its\n      // successor is already healthy. It must not spend that successor's crash\n      // budget, spawn another worker, or print a terminal flapping diagnosis.\n      if (worker !== spawnedWorker) return;\n\n      worker = undefined;\n      releaseTerminal();\n\n      // `return` after every exit deliberately: `process.exit` is typed\n      // `never`, but treating it as control flow means anything that stubs it\n      // out turns \"we are shutting down\" into \"spawn another worker\".\n      if (shuttingDown) {\n        process.exit(signal ? 1 : (code ?? 0));\n        return;\n      }\n\n      if (code === RESTART_EXIT_CODE) {\n        spawnWorker();\n        return;\n      }\n\n      // A boot precondition failure cannot be fixed by trying again — skip\n      // the crash-recovery path entirely (no uptime check, no crash-budget\n      // spend, no \"restarting\" banner) and mirror the exit code exactly, the\n      // same way a deliberate shutdown does just below.\n      if (code === BOOT_PRECONDITION_EXIT_CODE) {\n        process.exit(code);\n        return;\n      }\n\n      const crashed = signal !== null || (code ?? 0) !== 0;\n\n      if (crashed && shouldRecoverFromCrash(now() - spawnedAt)) {\n        devLogWarn(\n          `Development server ${signal ? `was killed by ${signal}` : `exited with code ${code}`} — restarting.`,\n        );\n        spawnWorker();\n        return;\n      }\n\n      // The worker owns its own error reporting; the supervisor only mirrors\n      // the outcome so `npm run dev` and CI see the code they expect.\n      process.exit(signal ? 1 : (code ?? 0));\n    });\n  };\n\n  /**\n   * Whether a worker that died on its own should be replaced.\n   *\n   * The rule is minimum healthy uptime, not a bare retry count. A worker that\n   * dies almost immediately failed to *boot* — a broken config, a port already\n   * taken — and it has already printed why; respawning would just reprint the\n   * same error and bury it. A worker that ran fine for a while and then died\n   * (OOM, a native crash, a dead loader thread) is the case worth recovering,\n   * because the state that killed it is usually not reproduced on a fresh boot.\n   *\n   * Flapping is still capped: enough crashes inside one window and we stop and\n   * say so, rather than restarting forever behind the developer's back.\n   */\n  function shouldRecoverFromCrash(uptimeMs: number): boolean {\n    if (uptimeMs < HEALTHY_UPTIME_MS) {\n      return false;\n    }\n\n    const at = now();\n\n    crashes = [...crashes.filter((time) => at - time < CRASH_WINDOW_MS), at];\n\n    if (crashes.length > CRASH_RESTART_LIMIT) {\n      devLogError(\n        `Development server crashed ${crashes.length} times in ` +\n          `${Math.round(CRASH_WINDOW_MS / 1000)}s — not restarting again. ` +\n          `Fix the cause and run \\`warlock dev\\` when you're ready.`,\n      );\n      return false;\n    }\n\n    return true;\n  }\n\n  // SIGINT reaches the worker directly from the terminal (same process group),\n  // so the supervisor must NOT act on it — exiting here would orphan a server\n  // that is still draining. It only notes that the next exit is final.\n  process.on(\"SIGINT\", () => {\n    shuttingDown = true;\n  });\n\n  for (const signal of FORWARDED_SIGNALS) {\n    process.on(signal, () => {\n      shuttingDown = true;\n      worker?.kill(signal);\n    });\n  }\n\n  spawnWorker();\n\n  return new Promise<never>(() => {\n    // Intentionally never settles — see the doc comment.\n  });\n}\n\n/**\n * Put the shared TTY back into a sane state after a worker exits.\n *\n * The worker takes stdin into raw mode for its keyboard shortcuts and releases\n * it on shutdown — but a worker that was killed outright never got the chance,\n * and the mode belongs to the terminal, not the process that set it. Without\n * this, the next worker (or the user's shell) inherits a stdin with no line\n * editing and no Ctrl+C.\n */\nfunction releaseTerminal(): void {\n  try {\n    if (process.stdin.isTTY) {\n      process.stdin.setRawMode(false);\n    }\n  } catch {\n    // Nothing to recover if the terminal is already gone.\n  }\n}\n"],"mappings":";;;;;;;;;AAQA,MAAa,kBAAkB;;;;;;AAO/B,MAAa,oBAAoB;;;;;;;;;;;AAYjC,MAAa,8BAA8B;;AAG3C,MAAM,oBAAsC,CAAC,WAAW,QAAQ;;;;;AAMhE,MAAM,oBAAoB;;AAG1B,MAAM,sBAAsB;;AAG5B,MAAM,kBAAkB;;AAGxB,SAAgB,cAAuB;CACrC,OAAO,QAAQ,IAAI,qBAAqB;AAC1C;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,mBAAmB,MAAoB,KAAK,KAAqB;CAC/E,IAAI;CACJ,IAAI,eAAe;;CAGnB,IAAI,UAAoB,CAAC;CAEzB,MAAM,oBAA0B;EAC9B,MAAM,YAAY,IAAI;EAEtB,MAAM,gBAAgB,MAAM,QAAQ,UAAU,CAAC,GAAG,QAAQ,UAAU,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,GAAG;GAC7F,KAAK,QAAQ,IAAI;GACjB,KAAK;IAAE,GAAG,QAAQ;KAAM,kBAAkB;GAAI;GAC9C,OAAO;GACP,aAAa;EACf,CAAC;EACD,SAAS;EAET,cAAc,GAAG,UAAU,UAAU;GACnC,IAAI,WAAW,eAAe;GAE9B,eAAe;GACf,YAAY,2CAA2C,MAAM,SAAS;GACtE,QAAQ,KAAK,CAAC;EAChB,CAAC;EAED,cAAc,GAAG,SAAS,MAAM,WAAW;GAIzC,IAAI,WAAW,eAAe;GAE9B,SAAS;GACT,gBAAgB;GAKhB,IAAI,cAAc;IAChB,QAAQ,KAAK,SAAS,IAAK,QAAQ,CAAE;IACrC;GACF;GAEA,IAAI,aAA4B;IAC9B,YAAY;IACZ;GACF;GAMA,IAAI,aAAsC;IACxC,QAAQ,KAAK,IAAI;IACjB;GACF;GAIA,KAFgB,WAAW,SAAS,QAAQ,OAAO,MAEpC,uBAAuB,IAAI,IAAI,SAAS,GAAG;IACxD,WACE,sBAAsB,SAAS,iBAAiB,WAAW,oBAAoB,OAAO,eACxF;IACA,YAAY;IACZ;GACF;GAIA,QAAQ,KAAK,SAAS,IAAK,QAAQ,CAAE;EACvC,CAAC;CACH;;;;;;;;;;;;;;CAeA,SAAS,uBAAuB,UAA2B;EACzD,IAAI,WAAW,mBACb,OAAO;EAGT,MAAM,KAAK,IAAI;EAEf,UAAU,CAAC,GAAG,QAAQ,QAAQ,SAAS,KAAK,OAAO,eAAe,GAAG,EAAE;EAEvE,IAAI,QAAQ,SAAS,qBAAqB;GACxC,YACE,8BAA8B,QAAQ,OAAO,YACxC,KAAK,MAAM,kBAAkB,GAAI,EAAE,mFAE1C;GACA,OAAO;EACT;EAEA,OAAO;CACT;CAKA,QAAQ,GAAG,gBAAgB;EACzB,eAAe;CACjB,CAAC;CAED,KAAK,MAAM,UAAU,mBACnB,QAAQ,GAAG,cAAc;EACvB,eAAe;EACf,QAAQ,KAAK,MAAM;CACrB,CAAC;CAGH,YAAY;CAEZ,OAAO,IAAI,cAAqB,CAEhC,CAAC;AACH;;;;;;;;;;AAWA,SAAS,kBAAwB;CAC/B,IAAI;EACF,IAAI,QAAQ,MAAM,OAChB,QAAQ,MAAM,WAAW,KAAK;CAElC,QAAQ,CAER;AACF"}
+{"version":3,"file":"supervisor.mjs","names":[],"sources":["../../../../../../../core/src/dev-server/supervisor.ts"],"sourcesContent":["import { spawn, type ChildProcess } from \"node:child_process\";\nimport { devLogError, devLogWarn } from \"./dev-logger\";\n\n/**\n * Set on the worker process so it knows it was launched by a supervisor —\n * and so `warlock dev` inside the worker runs the server instead of\n * supervising a third process.\n */\nexport const WORKER_ENV_FLAG = \"WARLOCK_DEV_WORKER\";\n\n/**\n * Exit code a worker uses to ask for a fresh process. Chosen as EX_TEMPFAIL,\n * whose conventional meaning (\"temporary failure, retry\") is close enough that\n * a stray supervisor-less exit reads sensibly in a shell.\n */\nexport const RESTART_EXIT_CODE = 75;\n\n/**\n * Exit code a worker uses when it hit a startup precondition whose cause\n * cannot change by trying again — a busy port, a rejected boot validator, an\n * unusable configured value. Chosen as EX_CONFIG, whose conventional meaning\n * (\"configuration error\") matches the class. The supervisor treats this as\n * terminal: no restart, no crash-budget spend, and no extra banner — the\n * worker has already printed a good message, and the whole point of this\n * exit code is that the supervisor does not scroll it away with a\n * \"restarting\" line and then reprint the same failure a moment later.\n */\nexport const BOOT_PRECONDITION_EXIT_CODE = 78;\n\n/**\n * Exit code a worker uses when the user deliberately quit (Ctrl+C, `q`, a\n * signal) but the connector shutdown failed. The supervisor honours it as\n * final — never a crash to recover from — and exits 1.\n */\nexport const QUIT_EXIT_CODE = 79;\n\n/** Signals the supervisor must hand to the worker rather than act on itself. */\nconst FORWARDED_SIGNALS: NodeJS.Signals[] = [\"SIGTERM\", \"SIGHUP\"];\n\n/**\n * How long a worker must survive before an abnormal exit counts as a crash\n * worth recovering from rather than a failed boot worth reporting once.\n */\nconst HEALTHY_UPTIME_MS = 5_000;\n\n/** IPC message the worker sends once boot completes; uptime counts from it. */\nexport const WORKER_BOOTED_MESSAGE = \"warlock:booted\";\n\n/** Crashes allowed inside {@link CRASH_WINDOW_MS} before we stop restarting. */\nconst CRASH_RESTART_LIMIT = 3;\n\n/** The rolling window flapping is measured over. */\nconst CRASH_WINDOW_MS = 60_000;\n\n/** Whether this process is the worker (i.e. a supervisor already exists). */\nexport function isDevWorker(): boolean {\n  return process.env[WORKER_ENV_FLAG] === \"1\";\n}\n\n/**\n * Run `warlock dev` as a supervised pair: a thin parent that owns the terminal\n * and a disposable child that is the actual dev server.\n *\n * The child asks to be replaced by exiting {@link RESTART_EXIT_CODE}; the\n * supervisor spawns a fresh one in its place. Because the parent is never\n * itself replaced, the process tree stays exactly two deep no matter how many\n * restarts happen — the previous design re-exec'd itself and left one idle\n * waiter behind per restart.\n *\n * The supervisor deliberately loads no config, no connectors, and no\n * application code, so a worker that wedges or dies can always be replaced by\n * a process that is known-good.\n *\n * Never resolves: the returned promise is a deliberate dead end so callers can\n * `return` it to stop everything downstream (notably the command's preloaders,\n * which must only ever run in the worker). The process ends with the last\n * worker, not with this promise.\n */\nexport function superviseDevServer(now: () => number = Date.now): Promise<never> {\n  let worker: ChildProcess | undefined;\n  let shuttingDown = false;\n\n  /** Timestamps of recent crash-restarts, used to detect flapping. */\n  let crashes: number[] = [];\n\n  const spawnWorker = (): void => {\n    // Stays undefined until the worker reports a completed boot: a worker that\n    // dies before that failed to boot, however long it took to fail.\n    let bootedAt: number | undefined;\n\n    const spawnedWorker = spawn(process.execPath, [...process.execArgv, ...process.argv.slice(1)], {\n      cwd: process.cwd(),\n      env: { ...process.env, [WORKER_ENV_FLAG]: \"1\" },\n      stdio: [\"inherit\", \"inherit\", \"inherit\", \"ipc\"],\n      windowsHide: false,\n    });\n    worker = spawnedWorker;\n\n    spawnedWorker.on(\"message\", (message) => {\n      if (message === WORKER_BOOTED_MESSAGE) bootedAt = now();\n    });\n\n    spawnedWorker.on(\"error\", (error) => {\n      if (worker !== spawnedWorker) return;\n\n      shuttingDown = true;\n      devLogError(`Could not start the development server: ${error.message}`);\n      process.exit(1);\n    });\n\n    spawnedWorker.on(\"exit\", (code, signal) => {\n      // A replaced worker can finish emitting lifecycle events after its\n      // successor is already healthy. It must not spend that successor's crash\n      // budget, spawn another worker, or print a terminal flapping diagnosis.\n      if (worker !== spawnedWorker) return;\n\n      worker = undefined;\n      releaseTerminal();\n\n      // `return` after every exit deliberately: `process.exit` is typed\n      // `never`, but treating it as control flow means anything that stubs it\n      // out turns \"we are shutting down\" into \"spawn another worker\".\n      if (shuttingDown) {\n        process.exit(signal ? 1 : (code ?? 0));\n        return;\n      }\n\n      if (code === RESTART_EXIT_CODE) {\n        spawnWorker();\n        return;\n      }\n\n      // A boot precondition failure cannot be fixed by trying again — skip\n      // the crash-recovery path entirely (no uptime check, no crash-budget\n      // spend, no \"restarting\" banner) and mirror the exit code exactly, the\n      // same way a deliberate shutdown does just below.\n      if (code === BOOT_PRECONDITION_EXIT_CODE) {\n        process.exit(code);\n        return;\n      }\n\n      if (code === QUIT_EXIT_CODE) {\n        process.exit(1);\n        return;\n      }\n\n      const crashed = signal !== null || (code ?? 0) !== 0;\n\n      if (crashed && shouldRecoverFromCrash(bootedAt === undefined ? 0 : now() - bootedAt)) {\n        devLogWarn(\n          `Development server ${signal ? `was killed by ${signal}` : `exited with code ${code}`} — restarting.`,\n        );\n        spawnWorker();\n        return;\n      }\n\n      // The worker owns its own error reporting; the supervisor only mirrors\n      // the outcome so `npm run dev` and CI see the code they expect.\n      process.exit(signal ? 1 : (code ?? 0));\n    });\n  };\n\n  /**\n   * Whether a worker that died on its own should be replaced.\n   *\n   * The rule is minimum healthy uptime, not a bare retry count. A worker that\n   * dies almost immediately failed to *boot* — a broken config, a port already\n   * taken — and it has already printed why; respawning would just reprint the\n   * same error and bury it. A worker that ran fine for a while and then died\n   * (OOM, a native crash, a dead loader thread) is the case worth recovering,\n   * because the state that killed it is usually not reproduced on a fresh boot.\n   *\n   * Flapping is still capped: enough crashes inside one window and we stop and\n   * say so, rather than restarting forever behind the developer's back.\n   */\n  function shouldRecoverFromCrash(uptimeMs: number): boolean {\n    if (uptimeMs < HEALTHY_UPTIME_MS) {\n      return false;\n    }\n\n    const at = now();\n\n    crashes = [...crashes.filter((time) => at - time < CRASH_WINDOW_MS), at];\n\n    if (crashes.length > CRASH_RESTART_LIMIT) {\n      devLogError(\n        `Development server crashed ${crashes.length} times in ` +\n          `${Math.round(CRASH_WINDOW_MS / 1000)}s — not restarting again. ` +\n          `Fix the cause and run \\`warlock dev\\` when you're ready.`,\n      );\n      return false;\n    }\n\n    return true;\n  }\n\n  // SIGINT reaches the worker directly from the terminal (same process group),\n  // so the supervisor must NOT act on it — exiting here would orphan a server\n  // that is still draining. It only notes that the next exit is final.\n  process.on(\"SIGINT\", () => {\n    shuttingDown = true;\n  });\n\n  for (const signal of FORWARDED_SIGNALS) {\n    process.on(signal, () => {\n      shuttingDown = true;\n      worker?.kill(signal);\n    });\n  }\n\n  spawnWorker();\n\n  return new Promise<never>(() => {\n    // Intentionally never settles — see the doc comment.\n  });\n}\n\n/**\n * Put the shared TTY back into a sane state after a worker exits.\n *\n * The worker takes stdin into raw mode for its keyboard shortcuts and releases\n * it on shutdown — but a worker that was killed outright never got the chance,\n * and the mode belongs to the terminal, not the process that set it. Without\n * this, the next worker (or the user's shell) inherits a stdin with no line\n * editing and no Ctrl+C.\n */\nfunction releaseTerminal(): void {\n  try {\n    if (process.stdin.isTTY) {\n      process.stdin.setRawMode(false);\n    }\n  } catch {\n    // Nothing to recover if the terminal is already gone.\n  }\n}\n"],"mappings":";;;;;;;;;AAQA,MAAa,kBAAkB;;;;;;AAO/B,MAAa,oBAAoB;;;;;;;;;;;AAYjC,MAAa,8BAA8B;;;;;;AAO3C,MAAa,iBAAiB;;AAG9B,MAAM,oBAAsC,CAAC,WAAW,QAAQ;;;;;AAMhE,MAAM,oBAAoB;;AAG1B,MAAa,wBAAwB;;AAGrC,MAAM,sBAAsB;;AAG5B,MAAM,kBAAkB;;AAGxB,SAAgB,cAAuB;CACrC,OAAO,QAAQ,IAAI,qBAAqB;AAC1C;;;;;;;;;;;;;;;;;;;;AAqBA,SAAgB,mBAAmB,MAAoB,KAAK,KAAqB;CAC/E,IAAI;CACJ,IAAI,eAAe;;CAGnB,IAAI,UAAoB,CAAC;CAEzB,MAAM,oBAA0B;EAG9B,IAAI;EAEJ,MAAM,gBAAgB,MAAM,QAAQ,UAAU,CAAC,GAAG,QAAQ,UAAU,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,GAAG;GAC7F,KAAK,QAAQ,IAAI;GACjB,KAAK;IAAE,GAAG,QAAQ;KAAM,kBAAkB;GAAI;GAC9C,OAAO;IAAC;IAAW;IAAW;IAAW;GAAK;GAC9C,aAAa;EACf,CAAC;EACD,SAAS;EAET,cAAc,GAAG,YAAY,YAAY;GACvC,IAAI,8BAAmC,WAAW,IAAI;EACxD,CAAC;EAED,cAAc,GAAG,UAAU,UAAU;GACnC,IAAI,WAAW,eAAe;GAE9B,eAAe;GACf,YAAY,2CAA2C,MAAM,SAAS;GACtE,QAAQ,KAAK,CAAC;EAChB,CAAC;EAED,cAAc,GAAG,SAAS,MAAM,WAAW;GAIzC,IAAI,WAAW,eAAe;GAE9B,SAAS;GACT,gBAAgB;GAKhB,IAAI,cAAc;IAChB,QAAQ,KAAK,SAAS,IAAK,QAAQ,CAAE;IACrC;GACF;GAEA,IAAI,aAA4B;IAC9B,YAAY;IACZ;GACF;GAMA,IAAI,aAAsC;IACxC,QAAQ,KAAK,IAAI;IACjB;GACF;GAEA,IAAI,aAAyB;IAC3B,QAAQ,KAAK,CAAC;IACd;GACF;GAIA,KAFgB,WAAW,SAAS,QAAQ,OAAO,MAEpC,uBAAuB,aAAa,SAAY,IAAI,IAAI,IAAI,QAAQ,GAAG;IACpF,WACE,sBAAsB,SAAS,iBAAiB,WAAW,oBAAoB,OAAO,eACxF;IACA,YAAY;IACZ;GACF;GAIA,QAAQ,KAAK,SAAS,IAAK,QAAQ,CAAE;EACvC,CAAC;CACH;;;;;;;;;;;;;;CAeA,SAAS,uBAAuB,UAA2B;EACzD,IAAI,WAAW,mBACb,OAAO;EAGT,MAAM,KAAK,IAAI;EAEf,UAAU,CAAC,GAAG,QAAQ,QAAQ,SAAS,KAAK,OAAO,eAAe,GAAG,EAAE;EAEvE,IAAI,QAAQ,SAAS,qBAAqB;GACxC,YACE,8BAA8B,QAAQ,OAAO,YACxC,KAAK,MAAM,kBAAkB,GAAI,EAAE,mFAE1C;GACA,OAAO;EACT;EAEA,OAAO;CACT;CAKA,QAAQ,GAAG,gBAAgB;EACzB,eAAe;CACjB,CAAC;CAED,KAAK,MAAM,UAAU,mBACnB,QAAQ,GAAG,cAAc;EACvB,eAAe;EACf,QAAQ,KAAK,MAAM;CACrB,CAAC;CAGH,YAAY;CAEZ,OAAO,IAAI,cAAqB,CAEhC,CAAC;AACH;;;;;;;;;;AAWA,SAAS,kBAAwB;CAC/B,IAAI;EACF,IAAI,QAAQ,MAAM,OAChB,QAAQ,MAAM,WAAW,KAAK;CAElC,QAAQ,CAER;AACF"}

package/esm/dev-server/tsconfig-manager.mjs

@@ -1,6 +1,7 @@
 import { Path } from "../utils/normalized-path.mjs";
 import path from "node:path";
-import ts from "typescript";
+import fs from "node:fs";
+import { readTsconfig } from "get-tsconfig";
 
 //#region ../core/src/dev-server/tsconfig-manager.ts
 var TSConfigManager = class {
@@ -10,10 +11,15 @@ var TSConfigManager = class {
 	}
 	init() {
 		if (this.tsconfig) return;
-		const output = ts.readConfigFile(Path.toAbsolute("tsconfig.json"), ts.sys.readFile);
-		this.tsconfig = output.config;
-		this.aliases = output.config?.compilerOptions?.paths || {};
-		this.baseUrl = output.config?.compilerOptions?.baseUrl || ".";
+		const configPath = Path.toAbsolute("tsconfig.json");
+		const parsed = fs.existsSync(configPath) ? readTsconfig(configPath, { typescriptVersion: false }).config : {};
+		const compilerOptions = parsed.compilerOptions ?? {};
+		this.tsconfig = {
+			...parsed,
+			compilerOptions
+		};
+		this.aliases = compilerOptions.paths || {};
+		this.baseUrl = compilerOptions.baseUrl || ".";
 	}
 	/**
 	* Check if the given path is an alias
@@ -25,22 +31,26 @@ var TSConfigManager = class {
 	isAlias(path) {
 		if (!this.tsconfig) this.init();
 		return Object.keys(this.aliases).some((alias) => {
-			const aliasPattern = alias.replace("/*", "");
-			if (!path.startsWith(aliasPattern)) return false;
+			if (!this.matchesAliasPattern(alias, path)) return false;
 			const aliasTargets = this.aliases[alias];
 			if (!Array.isArray(aliasTargets) || aliasTargets.length === 0) return false;
-			if (aliasPattern.startsWith("@")) return false;
+			if (!alias.endsWith("/*") && aliasTargets.every((target) => target === alias)) return false;
 			return true;
 		});
 	}
 	/**
+	* Check if an import path matches a tsconfig paths pattern
+	* (exact match, or `prefix/*` matching anything under `prefix/`)
+	*/
+	matchesAliasPattern(alias, importPath) {
+		if (alias.endsWith("/*")) return importPath.startsWith(alias.slice(0, -1));
+		return importPath === alias;
+	}
+	/**
 	* Get the alias key that matches the given import path
 	*/
 	getMatchingAlias(path) {
-		return Object.keys(this.aliases).find((alias) => {
-			const aliasPattern = alias.replace("/*", "");
-			return path.startsWith(aliasPattern);
-		}) || null;
+		return Object.keys(this.aliases).find((alias) => this.matchesAliasPattern(alias, path)) || null;
 	}
 	/**
 	* Resolve an alias import path to a relative path based on tsconfig paths

package/esm/dev-server/tsconfig-manager.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"tsconfig-manager.mjs","names":[],"sources":["../../../../../../../core/src/dev-server/tsconfig-manager.ts"],"sourcesContent":["import path from \"node:path\";\nimport ts from \"typescript\";\nimport { Path } from \"../utils/normalized-path\";\n\nexport class TSConfigManager {\n  /**\n   * Aliases list (from tsconfig paths)\n   */\n  public aliases: Record<string, string[]> = {};\n\n  /**\n   * Base URL for resolving paths\n   */\n  public baseUrl: string = \".\";\n\n  /**\n   * TSConfig\n   */\n  public tsconfig: any;\n\n  public init() {\n    if (this.tsconfig) return;\n\n    // use typescript to load the tsconfig.json file\n    const output = ts.readConfigFile(Path.toAbsolute(\"tsconfig.json\"), ts.sys.readFile);\n\n    this.tsconfig = output.config!;\n\n    this.aliases = output.config?.compilerOptions?.paths || {};\n\n    this.baseUrl = output.config?.compilerOptions?.baseUrl || \".\";\n  }\n\n  /**\n   * Check if the given path is an alias\n   * This checks if it's a REAL path alias (not an external package alias)\n   *\n   * Real aliases map to local paths (e.g., app/* -> src/app/*, src/* -> src/*)\n   * External package aliases map to themselves with @ prefix (e.g., @warlock.js/core -> @warlock.js/core)\n   */\n  public isAlias(path: string) {\n    if (!this.tsconfig) {\n      this.init();\n    }\n\n    return Object.keys(this.aliases).some((alias) => {\n      // Remove /* from alias pattern for matching\n      const aliasPattern = alias.replace(\"/*\", \"\");\n\n      if (!path.startsWith(aliasPattern)) {\n        return false;\n      }\n\n      // Check if this is a real alias or just an external package mapping\n      const aliasTargets = this.aliases[alias];\n      if (!Array.isArray(aliasTargets) || aliasTargets.length === 0) {\n        return false;\n      }\n\n      // If the alias starts with @, it's likely an external package alias\n      // Example: \"@warlock.js/core\" -> \"@warlock.js/core\" (external package)\n      if (aliasPattern.startsWith(\"@\")) {\n        return false;\n      }\n\n      // Otherwise, it's a real path alias (including self-referencing ones like src/* -> src/*)\n      // Example: \"app/*\" -> \"src/app/*\" (real alias)\n      // Example: \"src/*\" -> \"src/*\" (self-referencing alias, still valid)\n      return true;\n    });\n  }\n\n  /**\n   * Get the alias key that matches the given import path\n   */\n  public getMatchingAlias(path: string): string | null {\n    const aliasKey = Object.keys(this.aliases).find((alias) => {\n      const aliasPattern = alias.replace(\"/*\", \"\");\n      return path.startsWith(aliasPattern);\n    });\n\n    return aliasKey || null;\n  }\n\n  /**\n   * Resolve an alias import path to a relative path based on tsconfig paths\n   * Example: \"app/users/services/get-users.service\" -> \"src/app/users/services/get-users.service\"\n   *\n   * @param path - The import path with alias (e.g., \"app/users/services/get-users.service\")\n   * @returns The resolved relative path or null if alias not found\n   */\n  public resolveAliasPath(checkingPath: string): string | null {\n    // Find matching alias from tsconfig paths\n    const aliasKey = this.getMatchingAlias(checkingPath);\n\n    if (!aliasKey) return null;\n\n    const aliasTargets = this.aliases[aliasKey];\n    if (!Array.isArray(aliasTargets) || aliasTargets.length === 0) {\n      return null;\n    }\n\n    // Get the first target path (usually there's only one)\n    const targetPattern = aliasTargets[0];\n\n    if (targetPattern === undefined) {\n      return null;\n    }\n\n    // Replace alias pattern with target pattern\n    const aliasPattern = aliasKey.replace(\"/*\", \"\");\n    const targetBase = targetPattern.replace(\"/*\", \"\");\n    // Remove any leading slash so path.join does not drop the base\n    const relativePart = checkingPath.substring(aliasPattern.length).replace(/^[/\\\\]/, \"\");\n\n    // Join the target base with the relative part\n    const resolvedPath = path.join(targetBase, relativePart);\n\n    return Path.normalize(resolvedPath);\n  }\n\n  /**\n   * Resolve an alias import path to an absolute path\n   * Example: \"app/users/services/get-users.service\" -> \"/absolute/path/to/src/app/users/services/get-users.service\"\n   *\n   * @param path - The import path with alias\n   * @returns The resolved absolute path or null if alias not found\n   */\n  public resolveAliasToAbsolute(path: string): string | null {\n    const relativePath = this.resolveAliasPath(path);\n\n    if (!relativePath) return null;\n\n    return Path.normalize(Path.toAbsolute(relativePath));\n  }\n}\n\nexport const tsconfigManager = new TSConfigManager();\n"],"mappings":";;;;;AAIA,IAAa,kBAAb,MAA6B;;iBAIgB,CAAC;iBAKnB;;CAOzB,AAAO,OAAO;EACZ,IAAI,KAAK,UAAU;EAGnB,MAAM,SAAS,GAAG,eAAe,KAAK,WAAW,eAAe,GAAG,GAAG,IAAI,QAAQ;EAElF,KAAK,WAAW,OAAO;EAEvB,KAAK,UAAU,OAAO,QAAQ,iBAAiB,SAAS,CAAC;EAEzD,KAAK,UAAU,OAAO,QAAQ,iBAAiB,WAAW;CAC5D;;;;;;;;CASA,AAAO,QAAQ,MAAc;EAC3B,IAAI,CAAC,KAAK,UACR,KAAK,KAAK;EAGZ,OAAO,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,MAAM,UAAU;GAE/C,MAAM,eAAe,MAAM,QAAQ,MAAM,EAAE;GAE3C,IAAI,CAAC,KAAK,WAAW,YAAY,GAC/B,OAAO;GAIT,MAAM,eAAe,KAAK,QAAQ;GAClC,IAAI,CAAC,MAAM,QAAQ,YAAY,KAAK,aAAa,WAAW,GAC1D,OAAO;GAKT,IAAI,aAAa,WAAW,GAAG,GAC7B,OAAO;GAMT,OAAO;EACT,CAAC;CACH;;;;CAKA,AAAO,iBAAiB,MAA6B;EAMnD,OALiB,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,MAAM,UAAU;GACzD,MAAM,eAAe,MAAM,QAAQ,MAAM,EAAE;GAC3C,OAAO,KAAK,WAAW,YAAY;EACrC,CAEc,KAAK;CACrB;;;;;;;;CASA,AAAO,iBAAiB,cAAqC;EAE3D,MAAM,WAAW,KAAK,iBAAiB,YAAY;EAEnD,IAAI,CAAC,UAAU,OAAO;EAEtB,MAAM,eAAe,KAAK,QAAQ;EAClC,IAAI,CAAC,MAAM,QAAQ,YAAY,KAAK,aAAa,WAAW,GAC1D,OAAO;EAIT,MAAM,gBAAgB,aAAa;EAEnC,IAAI,kBAAkB,QACpB,OAAO;EAIT,MAAM,eAAe,SAAS,QAAQ,MAAM,EAAE;EAC9C,MAAM,aAAa,cAAc,QAAQ,MAAM,EAAE;EAEjD,MAAM,eAAe,aAAa,UAAU,aAAa,MAAM,CAAC,CAAC,QAAQ,UAAU,EAAE;EAGrF,MAAM,eAAe,KAAK,KAAK,YAAY,YAAY;EAEvD,OAAO,KAAK,UAAU,YAAY;CACpC;;;;;;;;CASA,AAAO,uBAAuB,MAA6B;EACzD,MAAM,eAAe,KAAK,iBAAiB,IAAI;EAE/C,IAAI,CAAC,cAAc,OAAO;EAE1B,OAAO,KAAK,UAAU,KAAK,WAAW,YAAY,CAAC;CACrD;AACF;AAEA,MAAa,kBAAkB,IAAI,gBAAgB"}
+{"version":3,"file":"tsconfig-manager.mjs","names":[],"sources":["../../../../../../../core/src/dev-server/tsconfig-manager.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { readTsconfig } from \"get-tsconfig\";\nimport { Path } from \"../utils/normalized-path\";\n\nexport class TSConfigManager {\n  /**\n   * Aliases list (from tsconfig paths)\n   */\n  public aliases: Record<string, string[]> = {};\n\n  /**\n   * Base URL for resolving paths\n   */\n  public baseUrl: string = \".\";\n\n  /**\n   * TSConfig\n   */\n  public tsconfig: any;\n\n  public init() {\n    if (this.tsconfig) return;\n\n    // `ts.readConfigFile` does not follow `extends`; `readTsconfig` resolves the\n    // whole chain (paths, baseUrl, decorator flags) and keeps string enum values,\n    // which is what esbuild's `tsconfigRaw` expects.\n    const configPath = Path.toAbsolute(\"tsconfig.json\");\n    const parsed = fs.existsSync(configPath)\n      ? readTsconfig(configPath, { typescriptVersion: false }).config\n      : {};\n    const compilerOptions = parsed.compilerOptions ?? {};\n\n    this.tsconfig = { ...parsed, compilerOptions };\n\n    this.aliases = (compilerOptions.paths as Record<string, string[]> | undefined) || {};\n\n    this.baseUrl = compilerOptions.baseUrl || \".\";\n  }\n\n  /**\n   * Check if the given path is an alias\n   * This checks if it's a REAL path alias (not an external package alias)\n   *\n   * Real aliases map to local paths (e.g., app/* -> src/app/*, src/* -> src/*)\n   * External package aliases map to themselves with @ prefix (e.g., @warlock.js/core -> @warlock.js/core)\n   */\n  public isAlias(path: string) {\n    if (!this.tsconfig) {\n      this.init();\n    }\n\n    return Object.keys(this.aliases).some((alias) => {\n      if (!this.matchesAliasPattern(alias, path)) {\n        return false;\n      }\n\n      const aliasTargets = this.aliases[alias];\n      if (!Array.isArray(aliasTargets) || aliasTargets.length === 0) {\n        return false;\n      }\n\n      // A package mapped onto itself is an external package, not a local alias\n      // Example: \"@warlock.js/core\" -> \"@warlock.js/core\"\n      // (self-referencing local ones like src/* -> src/* are still aliases)\n      if (!alias.endsWith(\"/*\") && aliasTargets.every((target) => target === alias)) {\n        return false;\n      }\n\n      return true;\n    });\n  }\n\n  /**\n   * Check if an import path matches a tsconfig paths pattern\n   * (exact match, or `prefix/*` matching anything under `prefix/`)\n   */\n  private matchesAliasPattern(alias: string, importPath: string): boolean {\n    if (alias.endsWith(\"/*\")) {\n      return importPath.startsWith(alias.slice(0, -1));\n    }\n\n    return importPath === alias;\n  }\n\n  /**\n   * Get the alias key that matches the given import path\n   */\n  public getMatchingAlias(path: string): string | null {\n    const aliasKey = Object.keys(this.aliases).find((alias) => this.matchesAliasPattern(alias, path));\n\n    return aliasKey || null;\n  }\n\n  /**\n   * Resolve an alias import path to a relative path based on tsconfig paths\n   * Example: \"app/users/services/get-users.service\" -> \"src/app/users/services/get-users.service\"\n   *\n   * @param path - The import path with alias (e.g., \"app/users/services/get-users.service\")\n   * @returns The resolved relative path or null if alias not found\n   */\n  public resolveAliasPath(checkingPath: string): string | null {\n    // Find matching alias from tsconfig paths\n    const aliasKey = this.getMatchingAlias(checkingPath);\n\n    if (!aliasKey) return null;\n\n    const aliasTargets = this.aliases[aliasKey];\n    if (!Array.isArray(aliasTargets) || aliasTargets.length === 0) {\n      return null;\n    }\n\n    // Get the first target path (usually there's only one)\n    const targetPattern = aliasTargets[0];\n\n    if (targetPattern === undefined) {\n      return null;\n    }\n\n    // Replace alias pattern with target pattern\n    const aliasPattern = aliasKey.replace(\"/*\", \"\");\n    const targetBase = targetPattern.replace(\"/*\", \"\");\n    // Remove any leading slash so path.join does not drop the base\n    const relativePart = checkingPath.substring(aliasPattern.length).replace(/^[/\\\\]/, \"\");\n\n    // Join the target base with the relative part\n    const resolvedPath = path.join(targetBase, relativePart);\n\n    return Path.normalize(resolvedPath);\n  }\n\n  /**\n   * Resolve an alias import path to an absolute path\n   * Example: \"app/users/services/get-users.service\" -> \"/absolute/path/to/src/app/users/services/get-users.service\"\n   *\n   * @param path - The import path with alias\n   * @returns The resolved absolute path or null if alias not found\n   */\n  public resolveAliasToAbsolute(path: string): string | null {\n    const relativePath = this.resolveAliasPath(path);\n\n    if (!relativePath) return null;\n\n    return Path.normalize(Path.toAbsolute(relativePath));\n  }\n}\n\nexport const tsconfigManager = new TSConfigManager();\n"],"mappings":";;;;;;AAKA,IAAa,kBAAb,MAA6B;;iBAIgB,CAAC;iBAKnB;;CAOzB,AAAO,OAAO;EACZ,IAAI,KAAK,UAAU;EAKnB,MAAM,aAAa,KAAK,WAAW,eAAe;EAClD,MAAM,SAAS,GAAG,WAAW,UAAU,IACnC,aAAa,YAAY,EAAE,mBAAmB,MAAM,CAAC,CAAC,CAAC,SACvD,CAAC;EACL,MAAM,kBAAkB,OAAO,mBAAmB,CAAC;EAEnD,KAAK,WAAW;GAAE,GAAG;GAAQ;EAAgB;EAE7C,KAAK,UAAW,gBAAgB,SAAkD,CAAC;EAEnF,KAAK,UAAU,gBAAgB,WAAW;CAC5C;;;;;;;;CASA,AAAO,QAAQ,MAAc;EAC3B,IAAI,CAAC,KAAK,UACR,KAAK,KAAK;EAGZ,OAAO,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,MAAM,UAAU;GAC/C,IAAI,CAAC,KAAK,oBAAoB,OAAO,IAAI,GACvC,OAAO;GAGT,MAAM,eAAe,KAAK,QAAQ;GAClC,IAAI,CAAC,MAAM,QAAQ,YAAY,KAAK,aAAa,WAAW,GAC1D,OAAO;GAMT,IAAI,CAAC,MAAM,SAAS,IAAI,KAAK,aAAa,OAAO,WAAW,WAAW,KAAK,GAC1E,OAAO;GAGT,OAAO;EACT,CAAC;CACH;;;;;CAMA,AAAQ,oBAAoB,OAAe,YAA6B;EACtE,IAAI,MAAM,SAAS,IAAI,GACrB,OAAO,WAAW,WAAW,MAAM,MAAM,GAAG,EAAE,CAAC;EAGjD,OAAO,eAAe;CACxB;;;;CAKA,AAAO,iBAAiB,MAA6B;EAGnD,OAFiB,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,MAAM,UAAU,KAAK,oBAAoB,OAAO,IAAI,CAEjF,KAAK;CACrB;;;;;;;;CASA,AAAO,iBAAiB,cAAqC;EAE3D,MAAM,WAAW,KAAK,iBAAiB,YAAY;EAEnD,IAAI,CAAC,UAAU,OAAO;EAEtB,MAAM,eAAe,KAAK,QAAQ;EAClC,IAAI,CAAC,MAAM,QAAQ,YAAY,KAAK,aAAa,WAAW,GAC1D,OAAO;EAIT,MAAM,gBAAgB,aAAa;EAEnC,IAAI,kBAAkB,QACpB,OAAO;EAIT,MAAM,eAAe,SAAS,QAAQ,MAAM,EAAE;EAC9C,MAAM,aAAa,cAAc,QAAQ,MAAM,EAAE;EAEjD,MAAM,eAAe,aAAa,UAAU,aAAa,MAAM,CAAC,CAAC,QAAQ,UAAU,EAAE;EAGrF,MAAM,eAAe,KAAK,KAAK,YAAY,YAAY;EAEvD,OAAO,KAAK,UAAU,YAAY;CACpC;;;;;;;;CASA,AAAO,uBAAuB,MAA6B;EACzD,MAAM,eAAe,KAAK,iBAAiB,IAAI;EAE/C,IAAI,CAAC,cAAc,OAAO;EAE1B,OAAO,KAAK,UAAU,KAAK,WAAW,YAAY,CAAC;CACrD;AACF;AAEA,MAAa,kBAAkB,IAAI,gBAAgB"}

package/esm/dev-server/type-generator.mjs

@@ -11,8 +11,8 @@ import { join, resolve } from "path";
 import { ensureDirectoryAsync } from "@warlock.js/fs";
 import { constants } from "fs";
 import { access, readFile, writeFile } from "fs/promises";
-import ts from "typescript";
 import { pathToFileURL } from "node:url";
+import ts from "typescript";
 import { moduleResolve } from "import-meta-resolve";
 
 //#region ../core/src/dev-server/type-generator.ts
@@ -97,6 +97,7 @@ var TypeGenerator = class {
 		const files = filesOrchestrator.getFiles();
 		let configChanged = false;
 		let unchangedCount = 0;
+		this.configCache.clear();
 		for (const [path, fileManager] of files) if (path.startsWith("src/config/storage")) {
 			const manifestEntry = this.manifest?.storage;
 			if (!manifestEntry || manifestEntry.sourceHash !== fileManager.hash) await this.generateStorageTypes(path);
@@ -104,7 +105,7 @@ var TypeGenerator = class {
 		}
 		for (const [path, fileManager] of files) {
 			if (!path.startsWith("src/config/")) continue;
-			if (path.includes("index")) continue;
+			if (path.split("/").pop()?.replace(/[.][^.]+$/, "") === "index") continue;
 			const configName = path.replace("src/config/", "").replace(/\.[^.]+$/, "");
 			const manifestEntry = this.manifest?.config[configName];
 			if (!manifestEntry || manifestEntry.sourceHash !== fileManager.hash) {
@@ -131,7 +132,7 @@ var TypeGenerator = class {
 		try {
 			const driverKeys = await this.extractStorageDriverKeys(configPath);
 			if (driverKeys.length === 0) {
-				devServeLog("âš\xA0️ No storage drivers found in config");
+				devServeLog("⚠️ No storage drivers found in config");
 				return;
 			}
 			const sourceHash = filesOrchestrator.getFiles().get(configPath)?.hash || "";
@@ -155,7 +156,7 @@ ${driverKeys.map((k) => `    ${this.toInterfaceKey(k)}: true;`).join("\n")}
 			await writeFile(join(this.outputDir, "storage.d.ts"), content, "utf-8");
 			devLogSuccess(`Generated storage types: ${driverKeys.join(", ")}`);
 		} catch (error) {
-			devServeLog(`⚠️ Failed to generate storage types: ${error}`);
+			devServeLog(`⚠️ Failed to generate storage types: ${error}`);
 		}
 	}
 	/**
@@ -181,7 +182,7 @@ ${driverKeys.map((k) => `    ${this.toInterfaceKey(k)}: true;`).join("\n")}
 		const match = changedPath.match(/config\/([^/]+)\.[^.]+$/);
 		if (!match) return;
 		const configName = match[1];
-		if (configName === "index") return;
+		if (!configName || configName === "index") return;
 		devLogInfo(`Config changed: ${configName}, updating...`);
 		const sourceHash = filesOrchestrator.getFiles().get(changedPath)?.hash || Date.now().toString();
 		const configPath = join(join(process.cwd(), "src/config"), `${configName}.ts`);
@@ -204,7 +205,7 @@ ${driverKeys.map((k) => `    ${this.toInterfaceKey(k)}: true;`).join("\n")}
 			this.configCache.clear();
 			for (const [path, fileManager] of files) {
 				if (!path.startsWith("src/config/")) continue;
-				if (path.includes("index")) continue;
+				if (path.split("/").pop()?.replace(/[.][^.]+$/, "") === "index") continue;
 				const configName = path.replace("src/config/", "").replace(/\.[^.]+$/, "");
 				const info = await this.extractConfigInfo(fileManager.absolutePath, configName);
 				this.configCache.set(configName, {
@@ -216,7 +217,7 @@ ${driverKeys.map((k) => `    ${this.toInterfaceKey(k)}: true;`).join("\n")}
 			}
 			await this.writeConfigTypesFromCache();
 		} catch (error) {
-			devServeLog(`⚠️ Failed to generate config types: ${error}`);
+			devServeLog(`⚠️ Failed to generate config types: ${error}`);
 		}
 	}
 	/**
@@ -424,12 +425,12 @@ ${allKeys.map((key) => `    "${key}": true;`).join("\n")}
 	async extractStorageDriverKeys(configPath) {
 		const absolutePath = resolve(configPath);
 		if (!await this.exists(absolutePath)) {
-			devServeLog(`⚠️ Storage config not found: ${absolutePath}`);
+			devServeLog(`⚠️ Storage config not found: ${absolutePath}`);
 			return [];
 		}
 		const sourceFile = await readConfigAst(absolutePath);
 		if (!sourceFile) {
-			devServeLog(`⚠️ Could not parse storage config: ${absolutePath}`);
+			devServeLog(`⚠️ Could not parse storage config: ${absolutePath}`);
 			return [];
 		}
 		const keys = [];

package/esm/dev-server/type-generator.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"type-generator.mjs","names":[],"sources":["../../../../../../../core/src/dev-server/type-generator.ts"],"sourcesContent":["import { ensureDirectoryAsync } from \"@warlock.js/fs\";\r\nimport { constants } from \"fs\";\r\nimport { access, readFile, writeFile } from \"fs/promises\";\r\nimport { moduleResolve } from \"import-meta-resolve\";\r\nimport { join, resolve } from \"path\";\r\nimport { pathToFileURL } from \"node:url\";\r\nimport ts from \"typescript\";\r\nimport { warlockPath } from \"../utils\";\r\nimport { devLogError, devLogInfo, devLogSuccess, devServeLog } from \"./dev-logger\";\r\nimport { readConfigAst } from \"./read-config-ast\";\r\nimport { runTypingsGeneration, type TypingsGenerationPorts } from \"./run-typings-generation\";\r\nimport { filesOrchestrator } from \"./files-orchestrator\";\r\nimport { Path } from \"../utils/normalized-path\";\r\nimport { extractTranslationKeys } from \"./extract-translation-keys\";\r\nimport { isTranslationRegisteringSource } from \"./translation-keys-sources\";\r\n\r\ntype RouteLocaleBuildModule = {\r\n  listRouteLocaleKeys?: (options: {\r\n    appRoot?: string;\r\n  }) => readonly string[] | Promise<readonly string[]>;\r\n};\r\n\r\nconst WEB_PACKAGE = \"@warlock.js/web\";\r\nconst WEB_BUILD_PACKAGE = \"@warlock.js/web/build\";\r\n\r\nfunction isAbsentOptionalWebPackage(thrown: unknown): boolean {\r\n  return (\r\n    typeof thrown === \"object\" &&\r\n    thrown !== null &&\r\n    \"code\" in thrown &&\r\n    (thrown as { code?: unknown }).code === \"ERR_MODULE_NOT_FOUND\" &&\r\n    thrown instanceof Error &&\r\n    thrown.message.includes(`Cannot find package '${WEB_PACKAGE}'`)\r\n  );\r\n}\r\n\r\n/** Load the build-only web key lister without creating a core-to-web static edge. */\r\nexport async function listRouteLocaleKeysForTypeGeneration(\r\n  appRoot = process.cwd(),\r\n): Promise<readonly string[]> {\r\n  // Published web entries are import-only. Resolve with ESM conditions from\r\n  // the consuming project; require.resolve rejects those installed exports.\r\n  const projectUrl = pathToFileURL(resolve(appRoot, \"package.json\"));\r\n\r\n  try {\r\n    moduleResolve(WEB_PACKAGE, projectUrl);\r\n  } catch (thrown) {\r\n    if (isAbsentOptionalWebPackage(thrown)) return [];\r\n    throw thrown;\r\n  }\r\n\r\n  const buildModuleUrl = moduleResolve(WEB_BUILD_PACKAGE, projectUrl);\r\n  const buildModule = (await import(buildModuleUrl.href)) as RouteLocaleBuildModule;\r\n\r\n  if (typeof buildModule.listRouteLocaleKeys !== \"function\") {\r\n    throw new Error(\r\n      `${WEB_BUILD_PACKAGE} does not export listRouteLocaleKeys. Upgrade @warlock.js/web to a compatible version.`,\r\n    );\r\n  }\r\n\r\n  return buildModule.listRouteLocaleKeys({ appRoot });\r\n}\r\n\r\n/** True only for the route-locales convention under the canonical web root. */\r\nexport function isRouteLocalesJsonPath(path: string): boolean {\r\n  const normalized = Path.normalize(path);\r\n  const relativePath = normalized.startsWith(\"src/\") ? normalized : Path.toRelative(normalized);\r\n  return /^src\\/web(?:\\/.*)?\\/locales\\.json$/.test(relativePath);\r\n}\r\n\r\n/**\r\n * Typings manifest structure for tracking file hashes\r\n */\r\ntype TypingsManifest = {\r\n  version: string;\r\n  lastBuildTime: number;\r\n  storage: {\r\n    sourceHash: string;\r\n    drivers: string[];\r\n  } | null;\r\n  config: Record<\r\n    string,\r\n    {\r\n      sourceHash: string;\r\n      typeName: string | null;\r\n      importSource: string | null;\r\n      keys: string[];\r\n    }\r\n  >;\r\n};\r\n\r\n/**\r\n * TypeGenerator - Generates TypeScript type definitions from config files\r\n *\r\n * Parses source config files using the TypeScript Compiler API to extract\r\n * keys and generate module augmentation types for IDE autocomplete.\r\n *\r\n * Uses manifest-based reconciliation to only regenerate when source files change.\r\n */\r\nexport class TypeGenerator {\r\n  /**\r\n   * Output directory for generated typings\r\n   */\r\n  private outputDir = warlockPath(\"typings\");\r\n\r\n  /**\r\n   * Path to typings manifest file\r\n   */\r\n  private manifestPath = join(this.outputDir, \"typings-manifest.json\");\r\n\r\n  /**\r\n   * Cached manifest data\r\n   */\r\n  private manifest: TypingsManifest | null = null;\r\n\r\n  /**\r\n   * Cache for config type info and keys\r\n   */\r\n  private configCache = new Map<\r\n    string,\r\n    {\r\n      sourceHash: string;\r\n      typeName: string | null;\r\n      importSource: string | null;\r\n      keys: string[];\r\n    }\r\n  >();\r\n\r\n  /**\r\n   * Generate all framework type definitions\r\n   *\r\n   * Uses manifest-based reconciliation:\r\n   * - If output files don't exist: full regeneration\r\n   * - If files exist: only regenerate changed configs\r\n   */\r\n  public async generateAll(): Promise<void> {\r\n    await this.ensureOutputDir();\r\n\r\n    const storageFile = join(this.outputDir, \"storage.d.ts\");\r\n    const configFile = join(this.outputDir, \"config.d.ts\");\r\n    const translationsFile = join(this.outputDir, \"translations.d.ts\");\r\n\r\n    const [manifestExists, storageExists, configExists, translationsExist] = await Promise.all([\r\n      this.exists(this.manifestPath),\r\n      this.exists(storageFile),\r\n      this.exists(configFile),\r\n      this.exists(translationsFile),\r\n    ]);\r\n\r\n    if (!manifestExists || !storageExists || !configExists || !translationsExist) {\r\n      // Full regeneration (first run or files deleted)\r\n      await this.fullGeneration();\r\n    } else {\r\n      // Load manifest for hash comparison\r\n      await this.loadManifest();\r\n      // Reconciliation: only regenerate changed files\r\n      await this.reconcile();\r\n    }\r\n\r\n    await this.generateTranslationTypes();\r\n\r\n    await this.saveManifest();\r\n  }\r\n\r\n  /**\r\n   * Full regeneration of all type files\r\n   */\r\n  private async fullGeneration(): Promise<void> {\r\n    // Generate storage types\r\n    const storageConfigPath = await this.findConfigFile(\"storage\");\r\n    if (storageConfigPath) {\r\n      this.generateStorageTypes(storageConfigPath);\r\n    }\r\n\r\n    // Generate config types\r\n    await this.generateConfigTypes();\r\n  }\r\n\r\n  /**\r\n   * Reconcile: only regenerate changed files\r\n   */\r\n  private async reconcile(): Promise<void> {\r\n    const files = filesOrchestrator.getFiles();\r\n    let storageChanged = false;\r\n    let configChanged = false;\r\n    let unchangedCount = 0;\r\n\r\n    // Check storage config\r\n    for (const [path, fileManager] of files) {\r\n      if (path.startsWith(\"src/config/storage\")) {\r\n        const manifestEntry = this.manifest?.storage;\r\n        if (!manifestEntry || manifestEntry.sourceHash !== fileManager.hash) {\r\n          storageChanged = true;\r\n          await this.generateStorageTypes(path);\r\n        }\r\n        break;\r\n      }\r\n    }\r\n\r\n    // Check config files\r\n    for (const [path, fileManager] of files) {\r\n      if (!path.startsWith(\"src/config/\")) continue;\r\n      if (path.includes(\"index\")) continue;\r\n\r\n      // Extract config name (remove dir prefix and extension)\r\n      const configName = path.replace(\"src/config/\", \"\").replace(/\\.[^.]+$/, \"\");\r\n\r\n      const manifestEntry = this.manifest?.config[configName];\r\n\r\n      if (!manifestEntry || manifestEntry.sourceHash !== fileManager.hash) {\r\n        // File changed or new - regenerate\r\n        configChanged = true;\r\n        const info = await this.extractConfigInfo(fileManager.absolutePath, configName);\r\n\r\n        this.configCache.set(configName, {\r\n          sourceHash: fileManager.hash,\r\n          typeName: info.typeName,\r\n          importSource: info.importSource,\r\n          keys: info.keys,\r\n        });\r\n      } else {\r\n        // Unchanged - load from manifest\r\n        unchangedCount++;\r\n        this.configCache.set(configName, manifestEntry);\r\n      }\r\n    }\r\n\r\n    if (configChanged) {\r\n      await this.writeConfigTypesFromCache();\r\n    } else {\r\n      devLogInfo(`Config types unchanged (${unchangedCount} configs cached)`);\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Generate storage driver name types\r\n   */\r\n  public async generateStorageTypes(configPath: string): Promise<void> {\r\n    try {\r\n      const driverKeys = await this.extractStorageDriverKeys(configPath);\r\n\r\n      if (driverKeys.length === 0) {\r\n        devServeLog(\"⚠️ No storage drivers found in config\");\r\n        return;\r\n      }\r\n\r\n      // Get file hash from filesOrchestrator\r\n      const fileManager = filesOrchestrator.getFiles().get(configPath);\r\n      const sourceHash = fileManager?.hash || \"\";\r\n\r\n      // Update manifest\r\n      if (!this.manifest) {\r\n        this.manifest = this.createEmptyManifest();\r\n      }\r\n      this.manifest.storage = {\r\n        sourceHash,\r\n        drivers: driverKeys,\r\n      };\r\n\r\n      const interfaceContent = driverKeys\r\n        .map((k) => `    ${this.toInterfaceKey(k)}: true;`)\r\n        .join(\"\\n\");\r\n\r\n      const content = `// Auto-generated by Warlock.js - DO NOT EDIT\r\n// Generated from: ${configPath}\r\n// Regenerates on dev-server start and when storage config changes\r\n\r\nimport \"@warlock.js/core\";\r\n\r\ndeclare module \"@warlock.js/core\" {\r\n  interface StorageDriverRegistry {\r\n${interfaceContent}\r\n  }\r\n}\r\n`;\r\n\r\n      const outputPath = join(this.outputDir, \"storage.d.ts\");\r\n      await writeFile(outputPath, content, \"utf-8\");\r\n\r\n      devLogSuccess(`Generated storage types: ${driverKeys.join(\", \")}`);\r\n    } catch (error) {\r\n      devServeLog(`⚠️ Failed to generate storage types: ${error}`);\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Check if a file change should trigger type regeneration\r\n   */\r\n  public shouldRegenerateTypes(changedPath: string): boolean {\r\n    return (\r\n      changedPath.includes(\"src/config/\") ||\r\n      changedPath.includes(\"config/\") ||\r\n      this.isLocalesFile(changedPath) ||\r\n      isRouteLocalesJsonPath(changedPath)\r\n    );\r\n  }\r\n\r\n  /**\r\n   * Handle file change - uses incremental update via cache\r\n   */\r\n  public async handleFileChange(changedPath: string): Promise<void> {\r\n    if (!this.shouldRegenerateTypes(changedPath)) {\r\n      return;\r\n    }\r\n\r\n    // Regenerate storage types if storage config changed\r\n    if (changedPath.includes(\"config/storage\")) {\r\n      await this.generateStorageTypes(changedPath);\r\n      await this.saveManifest();\r\n      return;\r\n    }\r\n\r\n    if (this.isLocalesFile(changedPath) || isRouteLocalesJsonPath(changedPath)) {\r\n      await this.generateTranslationTypes();\r\n      return;\r\n    }\r\n\r\n    // Extract config name from path\r\n    const match = changedPath.match(/config\\/([^/]+)\\.[^.]+$/);\r\n    if (!match) {\r\n      return;\r\n    }\r\n\r\n    const configName = match[1];\r\n    if (configName === \"index\") return;\r\n\r\n    devLogInfo(`Config changed: ${configName}, updating...`);\r\n\r\n    // Get file manager for hash\r\n    const fileManager = filesOrchestrator.getFiles().get(changedPath);\r\n    const sourceHash = fileManager?.hash || Date.now().toString();\r\n\r\n    // Update only the changed config in cache (use optimized combined extraction)\r\n    const configDir = join(process.cwd(), \"src/config\");\r\n    const configPath = join(configDir, `${configName}.ts`);\r\n\r\n    const info = await this.extractConfigInfo(configPath, configName);\r\n\r\n    this.configCache.set(configName, {\r\n      sourceHash,\r\n      typeName: info.typeName,\r\n      importSource: info.importSource,\r\n      keys: info.keys,\r\n    });\r\n\r\n    // Regenerate config.d.ts from cache\r\n    await this.writeConfigTypesFromCache();\r\n    await this.saveManifest();\r\n  }\r\n\r\n  /**\r\n   * Generate config types - populates cache and writes file\r\n   */\r\n  public async generateConfigTypes(): Promise<void> {\r\n    try {\r\n      const files = filesOrchestrator.getFiles();\r\n\r\n      // Clear and repopulate cache\r\n      this.configCache.clear();\r\n\r\n      for (const [path, fileManager] of files) {\r\n        if (!path.startsWith(\"src/config/\")) continue;\r\n        if (path.includes(\"index\")) continue;\r\n\r\n        // Extract config name\r\n        const configName = path.replace(\"src/config/\", \"\").replace(/\\.[^.]+$/, \"\");\r\n\r\n        // One parse per config, both extractions off it — see `read-config-ast.ts`.\r\n        const info = await this.extractConfigInfo(fileManager.absolutePath, configName);\r\n\r\n        this.configCache.set(configName, {\r\n          sourceHash: fileManager.hash,\r\n          typeName: info.typeName,\r\n          importSource: info.importSource,\r\n          keys: info.keys,\r\n        });\r\n      }\r\n\r\n      await this.writeConfigTypesFromCache();\r\n    } catch (error) {\r\n      devServeLog(`⚠️ Failed to generate config types: ${error}`);\r\n    }\r\n  }\r\n\r\n  /**\r\n   * Files (relative paths) that contributed to the last generated registry —\r\n   * used to notice a registering file being deleted, since by the time a\r\n   * delete event reaches {@link executeTypingsGenerator} the file is already\r\n   * gone from `filesOrchestrator`'s map and its content can no longer be\r\n   * inspected.\r\n   */\r\n  private translationSourceFiles = new Set<string>();\r\n\r\n  /**\r\n   * Generate web's app-augmented translation-key registry.\r\n   *\r\n   * Scans every discovered app source file — not only dedicated\r\n   * `utils/locales.*` files — for `groupedTranslations` calls, both the\r\n   * named-group and object forms, at any nesting depth. Dynamic group names,\r\n   * dictionaries, or keys cannot be resolved statically and are skipped; an\r\n   * app relying on those must document them itself.\r\n   */\r\n  private async generateTranslationTypes(): Promise<void> {\r\n    const keys = new Set<string>();\r\n    const sourceFiles = new Set<string>();\r\n\r\n    for (const [path, fileManager] of filesOrchestrator.getFiles()) {\r\n      if (!isTranslationRegisteringSource(fileManager.source)) {\r\n        continue;\r\n      }\r\n\r\n      sourceFiles.add(path);\r\n\r\n      const sourceFile = await readConfigAst(fileManager.absolutePath);\r\n      if (sourceFile) {\r\n        for (const key of extractTranslationKeys(sourceFile)) {\r\n          keys.add(key);\r\n        }\r\n      }\r\n    }\r\n\r\n    for (const key of await listRouteLocaleKeysForTypeGeneration()) {\r\n      keys.add(key);\r\n    }\r\n\r\n    this.translationSourceFiles = sourceFiles;\r\n\r\n    const entries = Array.from(keys)\r\n      .sort()\r\n      .map((key) => `    ${JSON.stringify(key)}: true;`)\r\n      .join(\"\\n\");\r\n    const content = `// Auto-generated by Warlock.js - DO NOT EDIT\r\n// Generated from groupedTranslations calls and route-locales JSON in discovered\r\n// app source. Dynamic group names/keys cannot be resolved statically and are\r\n// not included here — document those yourself.\r\n\r\nimport \"@warlock.js/web\";\r\n\r\ndeclare module \"@warlock.js/web\" {\r\n  interface TranslationKeyRegistry {\r\n${entries}\r\n  }\r\n}\r\n`;\r\n\r\n    await writeFile(join(this.outputDir, \"translations.d.ts\"), content, \"utf-8\");\r\n    devLogSuccess(`Generated translation types: ${keys.size} keys`);\r\n  }\r\n\r\n  private isLocalesFile(path: string): boolean {\r\n    return Path.normalize(path).includes(\"/utils/locales.\");\r\n  }\r\n\r\n  /**\r\n   * Quote an interface key that isn't a valid JS identifier (e.g. a config\r\n   * named `use-cases` or a storage driver `do-spaces`) so the generated\r\n   * `.d.ts` stays syntactically valid. Identifier-safe names are left bare\r\n   * to keep the output clean.\r\n   */\r\n  private toInterfaceKey(name: string): string {\r\n    return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);\r\n  }\r\n\r\n  /**\r\n   * Write config.d.ts from cached data\r\n   */\r\n  private async writeConfigTypesFromCache(): Promise<void> {\r\n    const configTypeInfos: Array<{\r\n      name: string;\r\n      typeName: string | null;\r\n      importSource: string | null;\r\n    }> = [];\r\n    const allKeys: string[] = [];\r\n\r\n    // Update manifest config section\r\n    if (!this.manifest) {\r\n      this.manifest = this.createEmptyManifest();\r\n    }\r\n    this.manifest.config = {};\r\n\r\n    for (const [name, data] of this.configCache) {\r\n      configTypeInfos.push({\r\n        name,\r\n        typeName: data.typeName,\r\n        importSource: data.importSource,\r\n      });\r\n      allKeys.push(...data.keys);\r\n\r\n      // Store in manifest\r\n      this.manifest.config[name] = data;\r\n    }\r\n\r\n    // Group imports by source\r\n    const imports = new Map<string, Set<string>>();\r\n    for (const info of configTypeInfos) {\r\n      if (info.typeName && info.importSource) {\r\n        if (!imports.has(info.importSource)) {\r\n          imports.set(info.importSource, new Set());\r\n        }\r\n        imports.get(info.importSource)!.add(info.typeName);\r\n      }\r\n    }\r\n\r\n    const importStatements = Array.from(imports.entries())\r\n      .map(([source, types]) => `import type { ${Array.from(types).join(\", \")} } from \"${source}\";`)\r\n      .join(\"\\n\");\r\n\r\n    const configEntries = configTypeInfos\r\n      .map((info) => `    ${this.toInterfaceKey(info.name)}: ${info.typeName || \"unknown\"};`)\r\n      .join(\"\\n\");\r\n\r\n    const keyEntries = allKeys.map((key) => `    \"${key}\": true;`).join(\"\\n\");\r\n\r\n    const content = `// Auto-generated by Warlock.js - DO NOT EDIT\r\n// Regenerates on dev-server start and when config files change\r\n\r\n${importStatements}\r\nimport \"@warlock.js/core\";\r\n\r\ndeclare module \"@warlock.js/core\" {\r\n  interface ConfigRegistry {\r\n${configEntries}\r\n  }\r\n\r\n  interface ConfigKeyRegistry {\r\n${keyEntries}\r\n  }\r\n}\r\n`;\r\n\r\n    const outputPath = join(this.outputDir, \"config.d.ts\");\r\n    await writeFile(outputPath, content, \"utf-8\");\r\n\r\n    devLogSuccess(\r\n      `Generated config types: ${this.configCache.size} configs, ${allKeys.length} keys`,\r\n    );\r\n  }\r\n\r\n  // ============================================================\r\n  // Manifest Management\r\n  // ============================================================\r\n\r\n  /**\r\n   * Load manifest from disk\r\n   */\r\n  private async loadManifest(): Promise<boolean> {\r\n    try {\r\n      if (await this.exists(this.manifestPath)) {\r\n        const content = await readFile(this.manifestPath, \"utf-8\");\r\n        this.manifest = JSON.parse(content);\r\n        return true;\r\n      }\r\n    } catch {\r\n      // Manifest corrupted or missing\r\n    }\r\n    this.manifest = null;\r\n    return false;\r\n  }\r\n\r\n  /**\r\n   * Save manifest to disk\r\n   */\r\n  private async saveManifest(): Promise<void> {\r\n    if (!this.manifest) {\r\n      this.manifest = this.createEmptyManifest();\r\n    }\r\n    this.manifest.lastBuildTime = Date.now();\r\n\r\n    await writeFile(this.manifestPath, JSON.stringify(this.manifest, null, 2), \"utf-8\");\r\n  }\r\n\r\n  /**\r\n   * Create empty manifest structure\r\n   */\r\n  private createEmptyManifest(): TypingsManifest {\r\n    return {\r\n      version: \"1.0.0\",\r\n      lastBuildTime: Date.now(),\r\n      storage: null,\r\n      config: {},\r\n    };\r\n  }\r\n\r\n  // ============================================================\r\n  // Type Extraction Methods\r\n  // ============================================================\r\n\r\n  /**\r\n   * Extract BOTH type info AND keys in a single pass\r\n   *\r\n   * One parse serves both extractions. It used to be one whole TypeScript\r\n   * Program per file — halved from two by an earlier pass, which optimised\r\n   * inside a premise that did not need to hold. `read-config-ast.ts` has the\r\n   * numbers.\r\n   *\r\n   * @param configPath Absolute path to the config file\r\n   * @param configName Config name (e.g., \"auth\", \"notifications\")\r\n   * @returns Combined result with type info and keys\r\n   */\r\n  private async extractConfigInfo(\r\n    configPath: string,\r\n    configName: string,\r\n  ): Promise<{\r\n    typeName: string | null;\r\n    importSource: string | null;\r\n    keys: string[];\r\n  }> {\r\n    if (!(await this.exists(configPath))) {\r\n      return { typeName: null, importSource: null, keys: [] };\r\n    }\r\n\r\n    // Parse, do not resolve — `read-config-ast.ts` explains why, with numbers.\r\n    const sourceFile = await readConfigAst(configPath);\r\n\r\n    if (!sourceFile) {\r\n      return { typeName: null, importSource: null, keys: [] };\r\n    }\r\n\r\n    // === Type Info Extraction ===\r\n    const importedTypes = new Map<string, string>();\r\n    const localExportedTypes = new Set<string>();\r\n    let foundTypeName: string | null = null;\r\n\r\n    // === Keys Extraction ===\r\n    const keys: string[] = [];\r\n\r\n    const visitForTypes = (node: ts.Node): void => {\r\n      // Collect imported types\r\n      if (ts.isImportDeclaration(node)) {\r\n        const moduleSpecifier = node.moduleSpecifier;\r\n        if (ts.isStringLiteral(moduleSpecifier)) {\r\n          const source = moduleSpecifier.text;\r\n          const importClause = node.importClause;\r\n          if (importClause?.namedBindings && ts.isNamedImports(importClause.namedBindings)) {\r\n            for (const element of importClause.namedBindings.elements) {\r\n              importedTypes.set(element.name.text, source);\r\n            }\r\n          }\r\n        }\r\n      }\r\n\r\n      // Collect locally exported types\r\n      if (ts.isTypeAliasDeclaration(node)) {\r\n        const modifiers = ts.getModifiers(node);\r\n        if (modifiers?.some((m) => m.kind === ts.SyntaxKind.ExportKeyword)) {\r\n          localExportedTypes.add(node.name.text);\r\n        }\r\n      }\r\n\r\n      // Collect locally exported interfaces\r\n      if (ts.isInterfaceDeclaration(node)) {\r\n        const modifiers = ts.getModifiers(node);\r\n        if (modifiers?.some((m) => m.kind === ts.SyntaxKind.ExportKeyword)) {\r\n          localExportedTypes.add(node.name.text);\r\n        }\r\n      }\r\n\r\n      // Find type used on config variable + extract keys\r\n      if (ts.isVariableDeclaration(node)) {\r\n        // Type info\r\n        if (node.type && ts.isTypeReferenceNode(node.type)) {\r\n          foundTypeName = node.type.typeName.getText(sourceFile);\r\n        }\r\n\r\n        // Keys extraction\r\n        if (node.initializer && ts.isObjectLiteralExpression(node.initializer)) {\r\n          const visitKeys = (objNode: ts.ObjectLiteralExpression, prefix: string): void => {\r\n            for (const prop of objNode.properties) {\r\n              if (ts.isPropertyAssignment(prop) && prop.name) {\r\n                const keyName = prop.name.getText(sourceFile);\r\n                const fullKey = prefix ? `${prefix}.${keyName}` : keyName;\r\n                keys.push(fullKey);\r\n                if (ts.isObjectLiteralExpression(prop.initializer)) {\r\n                  visitKeys(prop.initializer, fullKey);\r\n                }\r\n              }\r\n            }\r\n          };\r\n          visitKeys(node.initializer, configName);\r\n        }\r\n      }\r\n\r\n      ts.forEachChild(node, visitForTypes);\r\n    };\r\n\r\n    ts.forEachChild(sourceFile, visitForTypes);\r\n\r\n    // Resolve type info\r\n    let typeName: string | null = null;\r\n    let importSource: string | null = null;\r\n\r\n    if (foundTypeName) {\r\n      if (importedTypes.has(foundTypeName)) {\r\n        typeName = foundTypeName;\r\n        importSource = importedTypes.get(foundTypeName)!;\r\n      } else if (localExportedTypes.has(foundTypeName)) {\r\n        typeName = foundTypeName;\r\n        const relativePath = Path.toRelative(configPath).replace(/\\.(ts|tsx)$/, \"\");\r\n        importSource = `../../${relativePath}`;\r\n      }\r\n    }\r\n\r\n    return { typeName, importSource, keys };\r\n  }\r\n\r\n  /**\r\n   * Extract driver keys from storage config\r\n   */\r\n  private async extractStorageDriverKeys(configPath: string): Promise<string[]> {\r\n    const absolutePath = resolve(configPath);\r\n\r\n    if (!(await this.exists(absolutePath))) {\r\n      devServeLog(`⚠️ Storage config not found: ${absolutePath}`);\r\n      return [];\r\n    }\r\n\r\n    const sourceFile = await readConfigAst(absolutePath);\r\n\r\n    if (!sourceFile) {\r\n      devServeLog(`⚠️ Could not parse storage config: ${absolutePath}`);\r\n      return [];\r\n    }\r\n\r\n    const keys: string[] = [];\r\n\r\n    const visit = (node: ts.Node): void => {\r\n      if (ts.isPropertyAssignment(node)) {\r\n        const propName = node.name.getText(sourceFile);\r\n\r\n        if (propName === \"drivers\" && ts.isObjectLiteralExpression(node.initializer)) {\r\n          for (const prop of node.initializer.properties) {\r\n            if (ts.isPropertyAssignment(prop) || ts.isShorthandPropertyAssignment(prop)) {\r\n              const keyName = prop.name?.getText(sourceFile);\r\n\r\n              if (keyName) {\r\n                keys.push(keyName);\r\n              }\r\n            }\r\n          }\r\n        }\r\n      }\r\n\r\n      ts.forEachChild(node, visit);\r\n    };\r\n\r\n    ts.forEachChild(sourceFile, visit);\r\n\r\n    return keys;\r\n  }\r\n\r\n  /**\r\n   * Find a config file by name\r\n   */\r\n  private async findConfigFile(configName: string): Promise<string | undefined> {\r\n    const possiblePaths = [`src/config/${configName}.ts`, `config/${configName}.ts`];\r\n\r\n    for (const path of possiblePaths) {\r\n      const fullPath = join(process.cwd(), path);\r\n\r\n      if (await this.exists(fullPath)) {\r\n        return path;\r\n      }\r\n    }\r\n\r\n    try {\r\n      const files = filesOrchestrator.getFiles();\r\n\r\n      for (const [filePath] of files) {\r\n        if (filePath.includes(`config/${configName}`)) {\r\n          return filePath;\r\n        }\r\n      }\r\n    } catch {\r\n      // Files orchestrator not initialized yet\r\n    }\r\n\r\n    return undefined;\r\n  }\r\n\r\n  /**\r\n   * Ensure output directory exists\r\n   */\r\n  private async ensureOutputDir(): Promise<void> {\r\n    await ensureDirectoryAsync(this.outputDir);\r\n  }\r\n\r\n  /**\r\n   * Check if a path exists (async wrapper)\r\n   */\r\n  private async exists(path: string): Promise<boolean> {\r\n    try {\r\n      await access(path, constants.F_OK);\r\n      return true;\r\n    } catch {\r\n      return false;\r\n    }\r\n  }\r\n\r\n  /**\r\n   * The ports `runTypingsGeneration` needs, bound to this instance and this\r\n   * package's dev logger.\r\n   */\r\n  private get typingsGenerationPorts(): TypingsGenerationPorts {\r\n    return {\r\n      generate: () => this.generateAll(),\r\n      info: (message) => devLogInfo(message),\r\n      success: (message) => devLogSuccess(message),\r\n      error: (message) => devLogError(message),\r\n    };\r\n  }\r\n\r\n  /**\r\n   * Generate every config's typings.\r\n   *\r\n   * Runs IN THIS PROCESS. It used to spawn `npx warlock generate.typings`,\r\n   * which could not resolve in a source checkout — see\r\n   * `run-typings-generation.ts` for the whole story.\r\n   */\r\n  public async executeGenerateAllCommand(): Promise<void> {\r\n    await runTypingsGeneration(this.typingsGenerationPorts);\r\n  }\r\n\r\n  /**\r\n   * Regenerate typings after a batch reload — but only when the batch\r\n   * plausibly touched something the typings depend on: a config file, a file\r\n   * that registers translation keys, or a registering file that was deleted.\r\n   *\r\n   * A deleted file is already gone from `filesOrchestrator` by the time this\r\n   * runs (deletes are processed before `dev-server:batch-complete` fires), so\r\n   * its content can't be re-checked here — `translationSourceFiles` is the\r\n   * set from the last generation, kept for exactly this comparison.\r\n   */\r\n  public async executeTypingsGenerator(upcomingFiles: string[]): Promise<void> {\r\n    const files = filesOrchestrator.getFiles();\r\n\r\n    const aKnownTranslationSourceVanished = Array.from(this.translationSourceFiles).some(\r\n      (path) => !files.has(path),\r\n    );\r\n\r\n    const touchedAConfig =\r\n      aKnownTranslationSourceVanished ||\r\n      Array.from(new Set(upcomingFiles)).some((file) => {\r\n        const normalizedPath = Path.normalize(file);\r\n        if (normalizedPath.includes(\"src/config/\")) return true;\r\n        if (isRouteLocalesJsonPath(normalizedPath)) return true;\r\n        if (this.translationSourceFiles.has(normalizedPath)) return true;\r\n\r\n        const fileManager = files.get(normalizedPath);\r\n        return fileManager !== undefined && isTranslationRegisteringSource(fileManager.source);\r\n      });\r\n\r\n    if (!touchedAConfig) return;\r\n\r\n    /*\r\n      The changed paths are deliberately NOT passed along. The previous version\r\n      built a `files` array here and then threw it away, spawning the same\r\n      whole-project command as the branch above — so \"incremental\" was a name,\r\n      not a behaviour. `generateAll()` reads the orchestrator, which the batch\r\n      reload has already updated, so the full pass is both correct and the only\r\n      pass that ever actually ran.\r\n    */\r\n    await runTypingsGeneration(this.typingsGenerationPorts);\r\n  }\r\n}\r\n\r\n/**\r\n * Singleton instance for use throughout dev-server\r\n */\r\nexport const typeGenerator = new TypeGenerator();\r\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsBA,MAAM,cAAc;AACpB,MAAM,oBAAoB;AAE1B,SAAS,2BAA2B,QAA0B;CAC5D,OACE,OAAO,WAAW,YAClB,WAAW,QACX,UAAU,UACT,OAA8B,SAAS,0BACxC,kBAAkB,SAClB,OAAO,QAAQ,SAAS,wBAAwB,YAAY,EAAE;AAElE;;AAGA,eAAsB,qCACpB,UAAU,QAAQ,IAAI,GACM;CAG5B,MAAM,aAAa,cAAc,QAAQ,SAAS,cAAc,CAAC;CAEjE,IAAI;EACF,cAAc,aAAa,UAAU;CACvC,SAAS,QAAQ;EACf,IAAI,2BAA2B,MAAM,GAAG,OAAO,CAAC;EAChD,MAAM;CACR;CAGA,MAAM,cAAe,MAAM,OADJ,cAAc,mBAAmB,UACT,CAAC,CAAC;CAEjD,IAAI,OAAO,YAAY,wBAAwB,YAC7C,MAAM,IAAI,MACR,GAAG,kBAAkB,uFACvB;CAGF,OAAO,YAAY,oBAAoB,EAAE,QAAQ,CAAC;AACpD;;AAGA,SAAgB,uBAAuB,MAAuB;CAC5D,MAAM,aAAa,KAAK,UAAU,IAAI;CACtC,MAAM,eAAe,WAAW,WAAW,MAAM,IAAI,aAAa,KAAK,WAAW,UAAU;CAC5F,OAAO,qCAAqC,KAAK,YAAY;AAC/D;;;;;;;;;AA+BA,IAAa,gBAAb,MAA2B;;mBAIL,YAAY,SAAS;sBAKlB,KAAK,KAAK,WAAW,uBAAuB;kBAKxB;qCAKrB,IAAI,IAQxB;gDAyQ+B,IAAI,IAAY;;;;;;;;;CAhQjD,MAAa,cAA6B;EACxC,MAAM,KAAK,gBAAgB;EAE3B,MAAM,cAAc,KAAK,KAAK,WAAW,cAAc;EACvD,MAAM,aAAa,KAAK,KAAK,WAAW,aAAa;EACrD,MAAM,mBAAmB,KAAK,KAAK,WAAW,mBAAmB;EAEjE,MAAM,CAAC,gBAAgB,eAAe,cAAc,qBAAqB,MAAM,QAAQ,IAAI;GACzF,KAAK,OAAO,KAAK,YAAY;GAC7B,KAAK,OAAO,WAAW;GACvB,KAAK,OAAO,UAAU;GACtB,KAAK,OAAO,gBAAgB;EAC9B,CAAC;EAED,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,mBAEzD,MAAM,KAAK,eAAe;OACrB;GAEL,MAAM,KAAK,aAAa;GAExB,MAAM,KAAK,UAAU;EACvB;EAEA,MAAM,KAAK,yBAAyB;EAEpC,MAAM,KAAK,aAAa;CAC1B;;;;CAKA,MAAc,iBAAgC;EAE5C,MAAM,oBAAoB,MAAM,KAAK,eAAe,SAAS;EAC7D,IAAI,mBACF,KAAK,qBAAqB,iBAAiB;EAI7C,MAAM,KAAK,oBAAoB;CACjC;;;;CAKA,MAAc,YAA2B;EACvC,MAAM,QAAQ,kBAAkB,SAAS;EAEzC,IAAI,gBAAgB;EACpB,IAAI,iBAAiB;EAGrB,KAAK,MAAM,CAAC,MAAM,gBAAgB,OAChC,IAAI,KAAK,WAAW,oBAAoB,GAAG;GACzC,MAAM,gBAAgB,KAAK,UAAU;GACrC,IAAI,CAAC,iBAAiB,cAAc,eAAe,YAAY,MAE7D,MAAM,KAAK,qBAAqB,IAAI;GAEtC;EACF;EAIF,KAAK,MAAM,CAAC,MAAM,gBAAgB,OAAO;GACvC,IAAI,CAAC,KAAK,WAAW,aAAa,GAAG;GACrC,IAAI,KAAK,SAAS,OAAO,GAAG;GAG5B,MAAM,aAAa,KAAK,QAAQ,eAAe,EAAE,CAAC,CAAC,QAAQ,YAAY,EAAE;GAEzE,MAAM,gBAAgB,KAAK,UAAU,OAAO;GAE5C,IAAI,CAAC,iBAAiB,cAAc,eAAe,YAAY,MAAM;IAEnE,gBAAgB;IAChB,MAAM,OAAO,MAAM,KAAK,kBAAkB,YAAY,cAAc,UAAU;IAE9E,KAAK,YAAY,IAAI,YAAY;KAC/B,YAAY,YAAY;KACxB,UAAU,KAAK;KACf,cAAc,KAAK;KACnB,MAAM,KAAK;IACb,CAAC;GACH,OAAO;IAEL;IACA,KAAK,YAAY,IAAI,YAAY,aAAa;GAChD;EACF;EAEA,IAAI,eACF,MAAM,KAAK,0BAA0B;OAErC,WAAW,2BAA2B,eAAe,iBAAiB;CAE1E;;;;CAKA,MAAa,qBAAqB,YAAmC;EACnE,IAAI;GACF,MAAM,aAAa,MAAM,KAAK,yBAAyB,UAAU;GAEjE,IAAI,WAAW,WAAW,GAAG;IAC3B,YAAY,8CAA2C;IACvD;GACF;GAIA,MAAM,aADc,kBAAkB,SAAS,CAAC,CAAC,IAAI,UACxB,CAAC,EAAE,QAAQ;GAGxC,IAAI,CAAC,KAAK,UACR,KAAK,WAAW,KAAK,oBAAoB;GAE3C,KAAK,SAAS,UAAU;IACtB;IACA,SAAS;GACX;GAMA,MAAM,UAAU;qBACD,WAAW;;;;;;;EALD,WACtB,KAAK,MAAM,OAAO,KAAK,eAAe,CAAC,EAAE,QAAQ,CAAC,CAClD,KAAK,IAUG,EAAE;;;;GAMb,MAAM,UADa,KAAK,KAAK,WAAW,cACf,GAAG,SAAS,OAAO;GAE5C,cAAc,4BAA4B,WAAW,KAAK,IAAI,GAAG;EACnE,SAAS,OAAO;GACd,YAAY,4CAA4C,OAAO;EACjE;CACF;;;;CAKA,AAAO,sBAAsB,aAA8B;EACzD,OACE,YAAY,SAAS,aAAa,KAClC,YAAY,SAAS,SAAS,KAC9B,KAAK,cAAc,WAAW,KAC9B,uBAAuB,WAAW;CAEtC;;;;CAKA,MAAa,iBAAiB,aAAoC;EAChE,IAAI,CAAC,KAAK,sBAAsB,WAAW,GACzC;EAIF,IAAI,YAAY,SAAS,gBAAgB,GAAG;GAC1C,MAAM,KAAK,qBAAqB,WAAW;GAC3C,MAAM,KAAK,aAAa;GACxB;EACF;EAEA,IAAI,KAAK,cAAc,WAAW,KAAK,uBAAuB,WAAW,GAAG;GAC1E,MAAM,KAAK,yBAAyB;GACpC;EACF;EAGA,MAAM,QAAQ,YAAY,MAAM,yBAAyB;EACzD,IAAI,CAAC,OACH;EAGF,MAAM,aAAa,MAAM;EACzB,IAAI,eAAe,SAAS;EAE5B,WAAW,mBAAmB,WAAW,cAAc;EAIvD,MAAM,aADc,kBAAkB,SAAS,CAAC,CAAC,IAAI,WACxB,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,SAAS;EAI5D,MAAM,aAAa,KADD,KAAK,QAAQ,IAAI,GAAG,YACN,GAAG,GAAG,WAAW,IAAI;EAErD,MAAM,OAAO,MAAM,KAAK,kBAAkB,YAAY,UAAU;EAEhE,KAAK,YAAY,IAAI,YAAY;GAC/B;GACA,UAAU,KAAK;GACf,cAAc,KAAK;GACnB,MAAM,KAAK;EACb,CAAC;EAGD,MAAM,KAAK,0BAA0B;EACrC,MAAM,KAAK,aAAa;CAC1B;;;;CAKA,MAAa,sBAAqC;EAChD,IAAI;GACF,MAAM,QAAQ,kBAAkB,SAAS;GAGzC,KAAK,YAAY,MAAM;GAEvB,KAAK,MAAM,CAAC,MAAM,gBAAgB,OAAO;IACvC,IAAI,CAAC,KAAK,WAAW,aAAa,GAAG;IACrC,IAAI,KAAK,SAAS,OAAO,GAAG;IAG5B,MAAM,aAAa,KAAK,QAAQ,eAAe,EAAE,CAAC,CAAC,QAAQ,YAAY,EAAE;IAGzE,MAAM,OAAO,MAAM,KAAK,kBAAkB,YAAY,cAAc,UAAU;IAE9E,KAAK,YAAY,IAAI,YAAY;KAC/B,YAAY,YAAY;KACxB,UAAU,KAAK;KACf,cAAc,KAAK;KACnB,MAAM,KAAK;IACb,CAAC;GACH;GAEA,MAAM,KAAK,0BAA0B;EACvC,SAAS,OAAO;GACd,YAAY,2CAA2C,OAAO;EAChE;CACF;;;;;;;;;;CAoBA,MAAc,2BAA0C;EACtD,MAAM,uBAAO,IAAI,IAAY;EAC7B,MAAM,8BAAc,IAAI,IAAY;EAEpC,KAAK,MAAM,CAAC,MAAM,gBAAgB,kBAAkB,SAAS,GAAG;GAC9D,IAAI,CAAC,+BAA+B,YAAY,MAAM,GACpD;GAGF,YAAY,IAAI,IAAI;GAEpB,MAAM,aAAa,MAAM,cAAc,YAAY,YAAY;GAC/D,IAAI,YACF,KAAK,MAAM,OAAO,uBAAuB,UAAU,GACjD,KAAK,IAAI,GAAG;EAGlB;EAEA,KAAK,MAAM,OAAO,MAAM,qCAAqC,GAC3D,KAAK,IAAI,GAAG;EAGd,KAAK,yBAAyB;EAM9B,MAAM,UAAU;;;;;;;;;EAJA,MAAM,KAAK,IAAI,CAAC,CAC7B,KAAK,CAAC,CACN,KAAK,QAAQ,OAAO,KAAK,UAAU,GAAG,EAAE,QAAQ,CAAC,CACjD,KAAK,IAUJ,EAAE;;;;EAKN,MAAM,UAAU,KAAK,KAAK,WAAW,mBAAmB,GAAG,SAAS,OAAO;EAC3E,cAAc,gCAAgC,KAAK,KAAK,MAAM;CAChE;CAEA,AAAQ,cAAc,MAAuB;EAC3C,OAAO,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,iBAAiB;CACxD;;;;;;;CAQA,AAAQ,eAAe,MAAsB;EAC3C,OAAO,6BAA6B,KAAK,IAAI,IAAI,OAAO,KAAK,UAAU,IAAI;CAC7E;;;;CAKA,MAAc,4BAA2C;EACvD,MAAM,kBAID,CAAC;EACN,MAAM,UAAoB,CAAC;EAG3B,IAAI,CAAC,KAAK,UACR,KAAK,WAAW,KAAK,oBAAoB;EAE3C,KAAK,SAAS,SAAS,CAAC;EAExB,KAAK,MAAM,CAAC,MAAM,SAAS,KAAK,aAAa;GAC3C,gBAAgB,KAAK;IACnB;IACA,UAAU,KAAK;IACf,cAAc,KAAK;GACrB,CAAC;GACD,QAAQ,KAAK,GAAG,KAAK,IAAI;GAGzB,KAAK,SAAS,OAAO,QAAQ;EAC/B;EAGA,MAAM,0BAAU,IAAI,IAAyB;EAC7C,KAAK,MAAM,QAAQ,iBACjB,IAAI,KAAK,YAAY,KAAK,cAAc;GACtC,IAAI,CAAC,QAAQ,IAAI,KAAK,YAAY,GAChC,QAAQ,IAAI,KAAK,8BAAc,IAAI,IAAI,CAAC;GAE1C,QAAQ,IAAI,KAAK,YAAY,CAAC,CAAE,IAAI,KAAK,QAAQ;EACnD;EAaF,MAAM,UAAU;;;EAVS,MAAM,KAAK,QAAQ,QAAQ,CAAC,CAAC,CACnD,KAAK,CAAC,QAAQ,WAAW,iBAAiB,MAAM,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,WAAW,OAAO,GAAG,CAAC,CAC7F,KAAK,IAWK,EAAE;;;;;EATO,gBACnB,KAAK,SAAS,OAAO,KAAK,eAAe,KAAK,IAAI,EAAE,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC,CACtF,KAAK,IAYE,EAAE;;;;EAVO,QAAQ,KAAK,QAAQ,QAAQ,IAAI,SAAS,CAAC,CAAC,KAAK,IAc7D,EAAE;;;;EAMT,MAAM,UADa,KAAK,KAAK,WAAW,aACf,GAAG,SAAS,OAAO;EAE5C,cACE,2BAA2B,KAAK,YAAY,KAAK,YAAY,QAAQ,OAAO,MAC9E;CACF;;;;CASA,MAAc,eAAiC;EAC7C,IAAI;GACF,IAAI,MAAM,KAAK,OAAO,KAAK,YAAY,GAAG;IACxC,MAAM,UAAU,MAAM,SAAS,KAAK,cAAc,OAAO;IACzD,KAAK,WAAW,KAAK,MAAM,OAAO;IAClC,OAAO;GACT;EACF,QAAQ,CAER;EACA,KAAK,WAAW;EAChB,OAAO;CACT;;;;CAKA,MAAc,eAA8B;EAC1C,IAAI,CAAC,KAAK,UACR,KAAK,WAAW,KAAK,oBAAoB;EAE3C,KAAK,SAAS,gBAAgB,KAAK,IAAI;EAEvC,MAAM,UAAU,KAAK,cAAc,KAAK,UAAU,KAAK,UAAU,MAAM,CAAC,GAAG,OAAO;CACpF;;;;CAKA,AAAQ,sBAAuC;EAC7C,OAAO;GACL,SAAS;GACT,eAAe,KAAK,IAAI;GACxB,SAAS;GACT,QAAQ,CAAC;EACX;CACF;;;;;;;;;;;;;CAkBA,MAAc,kBACZ,YACA,YAKC;EACD,IAAI,CAAE,MAAM,KAAK,OAAO,UAAU,GAChC,OAAO;GAAE,UAAU;GAAM,cAAc;GAAM,MAAM,CAAC;EAAE;EAIxD,MAAM,aAAa,MAAM,cAAc,UAAU;EAEjD,IAAI,CAAC,YACH,OAAO;GAAE,UAAU;GAAM,cAAc;GAAM,MAAM,CAAC;EAAE;EAIxD,MAAM,gCAAgB,IAAI,IAAoB;EAC9C,MAAM,qCAAqB,IAAI,IAAY;EAC3C,IAAI,gBAA+B;EAGnC,MAAM,OAAiB,CAAC;EAExB,MAAM,iBAAiB,SAAwB;GAE7C,IAAI,GAAG,oBAAoB,IAAI,GAAG;IAChC,MAAM,kBAAkB,KAAK;IAC7B,IAAI,GAAG,gBAAgB,eAAe,GAAG;KACvC,MAAM,SAAS,gBAAgB;KAC/B,MAAM,eAAe,KAAK;KAC1B,IAAI,cAAc,iBAAiB,GAAG,eAAe,aAAa,aAAa,GAC7E,KAAK,MAAM,WAAW,aAAa,cAAc,UAC/C,cAAc,IAAI,QAAQ,KAAK,MAAM,MAAM;IAGjD;GACF;GAGA,IAAI,GAAG,uBAAuB,IAAI,GAEhC;QADkB,GAAG,aAAa,IACtB,CAAC,EAAE,MAAM,MAAM,EAAE,SAAS,GAAG,WAAW,aAAa,GAC/D,mBAAmB,IAAI,KAAK,KAAK,IAAI;GACvC;GAIF,IAAI,GAAG,uBAAuB,IAAI,GAEhC;QADkB,GAAG,aAAa,IACtB,CAAC,EAAE,MAAM,MAAM,EAAE,SAAS,GAAG,WAAW,aAAa,GAC/D,mBAAmB,IAAI,KAAK,KAAK,IAAI;GACvC;GAIF,IAAI,GAAG,sBAAsB,IAAI,GAAG;IAElC,IAAI,KAAK,QAAQ,GAAG,oBAAoB,KAAK,IAAI,GAC/C,gBAAgB,KAAK,KAAK,SAAS,QAAQ,UAAU;IAIvD,IAAI,KAAK,eAAe,GAAG,0BAA0B,KAAK,WAAW,GAAG;KACtE,MAAM,aAAa,SAAqC,WAAyB;MAC/E,KAAK,MAAM,QAAQ,QAAQ,YACzB,IAAI,GAAG,qBAAqB,IAAI,KAAK,KAAK,MAAM;OAC9C,MAAM,UAAU,KAAK,KAAK,QAAQ,UAAU;OAC5C,MAAM,UAAU,SAAS,GAAG,OAAO,GAAG,YAAY;OAClD,KAAK,KAAK,OAAO;OACjB,IAAI,GAAG,0BAA0B,KAAK,WAAW,GAC/C,UAAU,KAAK,aAAa,OAAO;MAEvC;KAEJ;KACA,UAAU,KAAK,aAAa,UAAU;IACxC;GACF;GAEA,GAAG,aAAa,MAAM,aAAa;EACrC;EAEA,GAAG,aAAa,YAAY,aAAa;EAGzC,IAAI,WAA0B;EAC9B,IAAI,eAA8B;EAElC,IAAI,eACF;OAAI,cAAc,IAAI,aAAa,GAAG;IACpC,WAAW;IACX,eAAe,cAAc,IAAI,aAAa;GAChD,OAAO,IAAI,mBAAmB,IAAI,aAAa,GAAG;IAChD,WAAW;IAEX,eAAe,SADM,KAAK,WAAW,UAAU,CAAC,CAAC,QAAQ,eAAe,EACrC;GACrC;;EAGF,OAAO;GAAE;GAAU;GAAc;EAAK;CACxC;;;;CAKA,MAAc,yBAAyB,YAAuC;EAC5E,MAAM,eAAe,QAAQ,UAAU;EAEvC,IAAI,CAAE,MAAM,KAAK,OAAO,YAAY,GAAI;GACtC,YAAY,oCAAoC,cAAc;GAC9D,OAAO,CAAC;EACV;EAEA,MAAM,aAAa,MAAM,cAAc,YAAY;EAEnD,IAAI,CAAC,YAAY;GACf,YAAY,0CAA0C,cAAc;GACpE,OAAO,CAAC;EACV;EAEA,MAAM,OAAiB,CAAC;EAExB,MAAM,SAAS,SAAwB;GACrC,IAAI,GAAG,qBAAqB,IAAI,GAG9B;QAFiB,KAAK,KAAK,QAAQ,UAExB,MAAM,aAAa,GAAG,0BAA0B,KAAK,WAAW,GACzE;UAAK,MAAM,QAAQ,KAAK,YAAY,YAClC,IAAI,GAAG,qBAAqB,IAAI,KAAK,GAAG,8BAA8B,IAAI,GAAG;MAC3E,MAAM,UAAU,KAAK,MAAM,QAAQ,UAAU;MAE7C,IAAI,SACF,KAAK,KAAK,OAAO;KAErB;IACF;GACF;GAGF,GAAG,aAAa,MAAM,KAAK;EAC7B;EAEA,GAAG,aAAa,YAAY,KAAK;EAEjC,OAAO;CACT;;;;CAKA,MAAc,eAAe,YAAiD;EAC5E,MAAM,gBAAgB,CAAC,cAAc,WAAW,MAAM,UAAU,WAAW,IAAI;EAE/E,KAAK,MAAM,QAAQ,eAAe;GAChC,MAAM,WAAW,KAAK,QAAQ,IAAI,GAAG,IAAI;GAEzC,IAAI,MAAM,KAAK,OAAO,QAAQ,GAC5B,OAAO;EAEX;EAEA,IAAI;GACF,MAAM,QAAQ,kBAAkB,SAAS;GAEzC,KAAK,MAAM,CAAC,aAAa,OACvB,IAAI,SAAS,SAAS,UAAU,YAAY,GAC1C,OAAO;EAGb,QAAQ,CAER;CAGF;;;;CAKA,MAAc,kBAAiC;EAC7C,MAAM,qBAAqB,KAAK,SAAS;CAC3C;;;;CAKA,MAAc,OAAO,MAAgC;EACnD,IAAI;GACF,MAAM,OAAO,MAAM,UAAU,IAAI;GACjC,OAAO;EACT,QAAQ;GACN,OAAO;EACT;CACF;;;;;CAMA,IAAY,yBAAiD;EAC3D,OAAO;GACL,gBAAgB,KAAK,YAAY;GACjC,OAAO,YAAY,WAAW,OAAO;GACrC,UAAU,YAAY,cAAc,OAAO;GAC3C,QAAQ,YAAY,YAAY,OAAO;EACzC;CACF;;;;;;;;CASA,MAAa,4BAA2C;EACtD,MAAM,qBAAqB,KAAK,sBAAsB;CACxD;;;;;;;;;;;CAYA,MAAa,wBAAwB,eAAwC;EAC3E,MAAM,QAAQ,kBAAkB,SAAS;EAkBzC,IAAI,EAhBoC,MAAM,KAAK,KAAK,sBAAsB,CAAC,CAAC,MAC7E,SAAS,CAAC,MAAM,IAAI,IAAI,CAIK,KAC9B,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,MAAM,SAAS;GAChD,MAAM,iBAAiB,KAAK,UAAU,IAAI;GAC1C,IAAI,eAAe,SAAS,aAAa,GAAG,OAAO;GACnD,IAAI,uBAAuB,cAAc,GAAG,OAAO;GACnD,IAAI,KAAK,uBAAuB,IAAI,cAAc,GAAG,OAAO;GAE5D,MAAM,cAAc,MAAM,IAAI,cAAc;GAC5C,OAAO,gBAAgB,UAAa,+BAA+B,YAAY,MAAM;EACvF,CAAC,IAEkB;EAUrB,MAAM,qBAAqB,KAAK,sBAAsB;CACxD;AACF;;;;AAKA,MAAa,gBAAgB,IAAI,cAAc"}
+{"version":3,"file":"type-generator.mjs","names":[],"sources":["../../../../../../../core/src/dev-server/type-generator.ts"],"sourcesContent":["import { ensureDirectoryAsync } from \"@warlock.js/fs\";\nimport { constants } from \"fs\";\nimport { access, readFile, writeFile } from \"fs/promises\";\nimport { moduleResolve } from \"import-meta-resolve\";\nimport { join, resolve } from \"path\";\nimport { pathToFileURL } from \"node:url\";\nimport ts from \"typescript\";\nimport { warlockPath } from \"../utils\";\nimport { devLogError, devLogInfo, devLogSuccess, devServeLog } from \"./dev-logger\";\nimport { readConfigAst } from \"./read-config-ast\";\nimport { runTypingsGeneration, type TypingsGenerationPorts } from \"./run-typings-generation\";\nimport { filesOrchestrator } from \"./files-orchestrator\";\nimport { Path } from \"../utils/normalized-path\";\nimport { extractTranslationKeys } from \"./extract-translation-keys\";\nimport { isTranslationRegisteringSource } from \"./translation-keys-sources\";\n\ntype RouteLocaleBuildModule = {\n  listRouteLocaleKeys?: (options: {\n    appRoot?: string;\n  }) => readonly string[] | Promise<readonly string[]>;\n};\n\nconst WEB_PACKAGE = \"@warlock.js/web\";\nconst WEB_BUILD_PACKAGE = \"@warlock.js/web/build\";\n\nfunction isAbsentOptionalWebPackage(thrown: unknown): boolean {\n  return (\n    typeof thrown === \"object\" &&\n    thrown !== null &&\n    \"code\" in thrown &&\n    (thrown as { code?: unknown }).code === \"ERR_MODULE_NOT_FOUND\" &&\n    thrown instanceof Error &&\n    thrown.message.includes(`Cannot find package '${WEB_PACKAGE}'`)\n  );\n}\n\n/** Load the build-only web key lister without creating a core-to-web static edge. */\nexport async function listRouteLocaleKeysForTypeGeneration(\n  appRoot = process.cwd(),\n): Promise<readonly string[]> {\n  // Published web entries are import-only. Resolve with ESM conditions from\n  // the consuming project; require.resolve rejects those installed exports.\n  const projectUrl = pathToFileURL(resolve(appRoot, \"package.json\"));\n\n  try {\n    moduleResolve(WEB_PACKAGE, projectUrl);\n  } catch (thrown) {\n    if (isAbsentOptionalWebPackage(thrown)) return [];\n    throw thrown;\n  }\n\n  const buildModuleUrl = moduleResolve(WEB_BUILD_PACKAGE, projectUrl);\n  const buildModule = (await import(buildModuleUrl.href)) as RouteLocaleBuildModule;\n\n  if (typeof buildModule.listRouteLocaleKeys !== \"function\") {\n    throw new Error(\n      `${WEB_BUILD_PACKAGE} does not export listRouteLocaleKeys. Upgrade @warlock.js/web to a compatible version.`,\n    );\n  }\n\n  return buildModule.listRouteLocaleKeys({ appRoot });\n}\n\n/** True only for the route-locales convention under the canonical web root. */\nexport function isRouteLocalesJsonPath(path: string): boolean {\n  const normalized = Path.normalize(path);\n  const relativePath = normalized.startsWith(\"src/\") ? normalized : Path.toRelative(normalized);\n  return /^src\\/web(?:\\/.*)?\\/locales\\.json$/.test(relativePath);\n}\n\n/**\n * Typings manifest structure for tracking file hashes\n */\ntype TypingsManifest = {\n  version: string;\n  lastBuildTime: number;\n  storage: {\n    sourceHash: string;\n    drivers: string[];\n  } | null;\n  config: Record<\n    string,\n    {\n      sourceHash: string;\n      typeName: string | null;\n      importSource: string | null;\n      keys: string[];\n    }\n  >;\n};\n\n/**\n * TypeGenerator - Generates TypeScript type definitions from config files\n *\n * Parses source config files using the TypeScript Compiler API to extract\n * keys and generate module augmentation types for IDE autocomplete.\n *\n * Uses manifest-based reconciliation to only regenerate when source files change.\n */\nexport class TypeGenerator {\n  /**\n   * Output directory for generated typings\n   */\n  private outputDir = warlockPath(\"typings\");\n\n  /**\n   * Path to typings manifest file\n   */\n  private manifestPath = join(this.outputDir, \"typings-manifest.json\");\n\n  /**\n   * Cached manifest data\n   */\n  private manifest: TypingsManifest | null = null;\n\n  /**\n   * Cache for config type info and keys\n   */\n  private configCache = new Map<\n    string,\n    {\n      sourceHash: string;\n      typeName: string | null;\n      importSource: string | null;\n      keys: string[];\n    }\n  >();\n\n  /**\n   * Generate all framework type definitions\n   *\n   * Uses manifest-based reconciliation:\n   * - If output files don't exist: full regeneration\n   * - If files exist: only regenerate changed configs\n   */\n  public async generateAll(): Promise<void> {\n    await this.ensureOutputDir();\n\n    const storageFile = join(this.outputDir, \"storage.d.ts\");\n    const configFile = join(this.outputDir, \"config.d.ts\");\n    const translationsFile = join(this.outputDir, \"translations.d.ts\");\n\n    const [manifestExists, storageExists, configExists, translationsExist] = await Promise.all([\n      this.exists(this.manifestPath),\n      this.exists(storageFile),\n      this.exists(configFile),\n      this.exists(translationsFile),\n    ]);\n\n    if (!manifestExists || !storageExists || !configExists || !translationsExist) {\n      // Full regeneration (first run or files deleted)\n      await this.fullGeneration();\n    } else {\n      // Load manifest for hash comparison\n      await this.loadManifest();\n      // Reconciliation: only regenerate changed files\n      await this.reconcile();\n    }\n\n    await this.generateTranslationTypes();\n\n    await this.saveManifest();\n  }\n\n  /**\n   * Full regeneration of all type files\n   */\n  private async fullGeneration(): Promise<void> {\n    // Generate storage types\n    const storageConfigPath = await this.findConfigFile(\"storage\");\n    if (storageConfigPath) {\n      this.generateStorageTypes(storageConfigPath);\n    }\n\n    // Generate config types\n    await this.generateConfigTypes();\n  }\n\n  /**\n   * Reconcile: only regenerate changed files\n   */\n  private async reconcile(): Promise<void> {\n    const files = filesOrchestrator.getFiles();\n    let storageChanged = false;\n    let configChanged = false;\n    let unchangedCount = 0;\n\n    this.configCache.clear();\n\n    // Check storage config\n    for (const [path, fileManager] of files) {\n      if (path.startsWith(\"src/config/storage\")) {\n        const manifestEntry = this.manifest?.storage;\n        if (!manifestEntry || manifestEntry.sourceHash !== fileManager.hash) {\n          storageChanged = true;\n          await this.generateStorageTypes(path);\n        }\n        break;\n      }\n    }\n\n    // Check config files\n    for (const [path, fileManager] of files) {\n      if (!path.startsWith(\"src/config/\")) continue;\n      if (path.split(\"/\").pop()?.replace(/[.][^.]+$/, \"\") === \"index\") continue;\n\n      // Extract config name (remove dir prefix and extension)\n      const configName = path.replace(\"src/config/\", \"\").replace(/\\.[^.]+$/, \"\");\n\n      const manifestEntry = this.manifest?.config[configName];\n\n      if (!manifestEntry || manifestEntry.sourceHash !== fileManager.hash) {\n        // File changed or new - regenerate\n        configChanged = true;\n        const info = await this.extractConfigInfo(fileManager.absolutePath, configName);\n\n        this.configCache.set(configName, {\n          sourceHash: fileManager.hash,\n          typeName: info.typeName,\n          importSource: info.importSource,\n          keys: info.keys,\n        });\n      } else {\n        // Unchanged - load from manifest\n        unchangedCount++;\n        this.configCache.set(configName, manifestEntry);\n      }\n    }\n\n    if (configChanged) {\n      await this.writeConfigTypesFromCache();\n    } else {\n      devLogInfo(`Config types unchanged (${unchangedCount} configs cached)`);\n    }\n  }\n\n  /**\n   * Generate storage driver name types\n   */\n  public async generateStorageTypes(configPath: string): Promise<void> {\n    try {\n      const driverKeys = await this.extractStorageDriverKeys(configPath);\n\n      if (driverKeys.length === 0) {\n        devServeLog(\"⚠️ No storage drivers found in config\");\n        return;\n      }\n\n      // Get file hash from filesOrchestrator\n      const fileManager = filesOrchestrator.getFiles().get(configPath);\n      const sourceHash = fileManager?.hash || \"\";\n\n      // Update manifest\n      if (!this.manifest) {\n        this.manifest = this.createEmptyManifest();\n      }\n      this.manifest.storage = {\n        sourceHash,\n        drivers: driverKeys,\n      };\n\n      const interfaceContent = driverKeys\n        .map((k) => `    ${this.toInterfaceKey(k)}: true;`)\n        .join(\"\\n\");\n\n      const content = `// Auto-generated by Warlock.js - DO NOT EDIT\n// Generated from: ${configPath}\n// Regenerates on dev-server start and when storage config changes\n\nimport \"@warlock.js/core\";\n\ndeclare module \"@warlock.js/core\" {\n  interface StorageDriverRegistry {\n${interfaceContent}\n  }\n}\n`;\n\n      const outputPath = join(this.outputDir, \"storage.d.ts\");\n      await writeFile(outputPath, content, \"utf-8\");\n\n      devLogSuccess(`Generated storage types: ${driverKeys.join(\", \")}`);\n    } catch (error) {\n      devServeLog(`⚠️ Failed to generate storage types: ${error}`);\n    }\n  }\n\n  /**\n   * Check if a file change should trigger type regeneration\n   */\n  public shouldRegenerateTypes(changedPath: string): boolean {\n    return (\n      changedPath.includes(\"src/config/\") ||\n      changedPath.includes(\"config/\") ||\n      this.isLocalesFile(changedPath) ||\n      isRouteLocalesJsonPath(changedPath)\n    );\n  }\n\n  /**\n   * Handle file change - uses incremental update via cache\n   */\n  public async handleFileChange(changedPath: string): Promise<void> {\n    if (!this.shouldRegenerateTypes(changedPath)) {\n      return;\n    }\n\n    // Regenerate storage types if storage config changed\n    if (changedPath.includes(\"config/storage\")) {\n      await this.generateStorageTypes(changedPath);\n      await this.saveManifest();\n      return;\n    }\n\n    if (this.isLocalesFile(changedPath) || isRouteLocalesJsonPath(changedPath)) {\n      await this.generateTranslationTypes();\n      return;\n    }\n\n    // Extract config name from path\n    const match = changedPath.match(/config\\/([^/]+)\\.[^.]+$/);\n    if (!match) {\n      return;\n    }\n\n    const configName = match[1];\n    if (!configName || configName === \"index\") return;\n\n    devLogInfo(`Config changed: ${configName}, updating...`);\n\n    // Get file manager for hash\n    const fileManager = filesOrchestrator.getFiles().get(changedPath);\n    const sourceHash = fileManager?.hash || Date.now().toString();\n\n    // Update only the changed config in cache (use optimized combined extraction)\n    const configDir = join(process.cwd(), \"src/config\");\n    const configPath = join(configDir, `${configName}.ts`);\n\n    const info = await this.extractConfigInfo(configPath, configName);\n\n    this.configCache.set(configName, {\n      sourceHash,\n      typeName: info.typeName,\n      importSource: info.importSource,\n      keys: info.keys,\n    });\n\n    // Regenerate config.d.ts from cache\n    await this.writeConfigTypesFromCache();\n    await this.saveManifest();\n  }\n\n  /**\n   * Generate config types - populates cache and writes file\n   */\n  public async generateConfigTypes(): Promise<void> {\n    try {\n      const files = filesOrchestrator.getFiles();\n\n      // Clear and repopulate cache\n      this.configCache.clear();\n\n      for (const [path, fileManager] of files) {\n        if (!path.startsWith(\"src/config/\")) continue;\n        if (path.split(\"/\").pop()?.replace(/[.][^.]+$/, \"\") === \"index\") continue;\n\n        // Extract config name\n        const configName = path.replace(\"src/config/\", \"\").replace(/\\.[^.]+$/, \"\");\n\n        // One parse per config, both extractions off it — see `read-config-ast.ts`.\n        const info = await this.extractConfigInfo(fileManager.absolutePath, configName);\n\n        this.configCache.set(configName, {\n          sourceHash: fileManager.hash,\n          typeName: info.typeName,\n          importSource: info.importSource,\n          keys: info.keys,\n        });\n      }\n\n      await this.writeConfigTypesFromCache();\n    } catch (error) {\n      devServeLog(`⚠️ Failed to generate config types: ${error}`);\n    }\n  }\n\n  /**\n   * Files (relative paths) that contributed to the last generated registry —\n   * used to notice a registering file being deleted, since by the time a\n   * delete event reaches {@link executeTypingsGenerator} the file is already\n   * gone from `filesOrchestrator`'s map and its content can no longer be\n   * inspected.\n   */\n  private translationSourceFiles = new Set<string>();\n\n  /**\n   * Generate web's app-augmented translation-key registry.\n   *\n   * Scans every discovered app source file — not only dedicated\n   * `utils/locales.*` files — for `groupedTranslations` calls, both the\n   * named-group and object forms, at any nesting depth. Dynamic group names,\n   * dictionaries, or keys cannot be resolved statically and are skipped; an\n   * app relying on those must document them itself.\n   */\n  private async generateTranslationTypes(): Promise<void> {\n    const keys = new Set<string>();\n    const sourceFiles = new Set<string>();\n\n    for (const [path, fileManager] of filesOrchestrator.getFiles()) {\n      if (!isTranslationRegisteringSource(fileManager.source)) {\n        continue;\n      }\n\n      sourceFiles.add(path);\n\n      const sourceFile = await readConfigAst(fileManager.absolutePath);\n      if (sourceFile) {\n        for (const key of extractTranslationKeys(sourceFile)) {\n          keys.add(key);\n        }\n      }\n    }\n\n    for (const key of await listRouteLocaleKeysForTypeGeneration()) {\n      keys.add(key);\n    }\n\n    this.translationSourceFiles = sourceFiles;\n\n    const entries = Array.from(keys)\n      .sort()\n      .map((key) => `    ${JSON.stringify(key)}: true;`)\n      .join(\"\\n\");\n    const content = `// Auto-generated by Warlock.js - DO NOT EDIT\n// Generated from groupedTranslations calls and route-locales JSON in discovered\n// app source. Dynamic group names/keys cannot be resolved statically and are\n// not included here — document those yourself.\n\nimport \"@warlock.js/web\";\n\ndeclare module \"@warlock.js/web\" {\n  interface TranslationKeyRegistry {\n${entries}\n  }\n}\n`;\n\n    await writeFile(join(this.outputDir, \"translations.d.ts\"), content, \"utf-8\");\n    devLogSuccess(`Generated translation types: ${keys.size} keys`);\n  }\n\n  private isLocalesFile(path: string): boolean {\n    return Path.normalize(path).includes(\"/utils/locales.\");\n  }\n\n  /**\n   * Quote an interface key that isn't a valid JS identifier (e.g. a config\n   * named `use-cases` or a storage driver `do-spaces`) so the generated\n   * `.d.ts` stays syntactically valid. Identifier-safe names are left bare\n   * to keep the output clean.\n   */\n  private toInterfaceKey(name: string): string {\n    return /^[A-Za-z_$][A-Za-z0-9_$]*$/.test(name) ? name : JSON.stringify(name);\n  }\n\n  /**\n   * Write config.d.ts from cached data\n   */\n  private async writeConfigTypesFromCache(): Promise<void> {\n    const configTypeInfos: Array<{\n      name: string;\n      typeName: string | null;\n      importSource: string | null;\n    }> = [];\n    const allKeys: string[] = [];\n\n    // Update manifest config section\n    if (!this.manifest) {\n      this.manifest = this.createEmptyManifest();\n    }\n    this.manifest.config = {};\n\n    for (const [name, data] of this.configCache) {\n      configTypeInfos.push({\n        name,\n        typeName: data.typeName,\n        importSource: data.importSource,\n      });\n      allKeys.push(...data.keys);\n\n      // Store in manifest\n      this.manifest.config[name] = data;\n    }\n\n    // Group imports by source\n    const imports = new Map<string, Set<string>>();\n    for (const info of configTypeInfos) {\n      if (info.typeName && info.importSource) {\n        if (!imports.has(info.importSource)) {\n          imports.set(info.importSource, new Set());\n        }\n        imports.get(info.importSource)!.add(info.typeName);\n      }\n    }\n\n    const importStatements = Array.from(imports.entries())\n      .map(([source, types]) => `import type { ${Array.from(types).join(\", \")} } from \"${source}\";`)\n      .join(\"\\n\");\n\n    const configEntries = configTypeInfos\n      .map((info) => `    ${this.toInterfaceKey(info.name)}: ${info.typeName || \"unknown\"};`)\n      .join(\"\\n\");\n\n    const keyEntries = allKeys.map((key) => `    \"${key}\": true;`).join(\"\\n\");\n\n    const content = `// Auto-generated by Warlock.js - DO NOT EDIT\n// Regenerates on dev-server start and when config files change\n\n${importStatements}\nimport \"@warlock.js/core\";\n\ndeclare module \"@warlock.js/core\" {\n  interface ConfigRegistry {\n${configEntries}\n  }\n\n  interface ConfigKeyRegistry {\n${keyEntries}\n  }\n}\n`;\n\n    const outputPath = join(this.outputDir, \"config.d.ts\");\n    await writeFile(outputPath, content, \"utf-8\");\n\n    devLogSuccess(\n      `Generated config types: ${this.configCache.size} configs, ${allKeys.length} keys`,\n    );\n  }\n\n  // ============================================================\n  // Manifest Management\n  // ============================================================\n\n  /**\n   * Load manifest from disk\n   */\n  private async loadManifest(): Promise<boolean> {\n    try {\n      if (await this.exists(this.manifestPath)) {\n        const content = await readFile(this.manifestPath, \"utf-8\");\n        this.manifest = JSON.parse(content);\n        return true;\n      }\n    } catch {\n      // Manifest corrupted or missing\n    }\n    this.manifest = null;\n    return false;\n  }\n\n  /**\n   * Save manifest to disk\n   */\n  private async saveManifest(): Promise<void> {\n    if (!this.manifest) {\n      this.manifest = this.createEmptyManifest();\n    }\n    this.manifest.lastBuildTime = Date.now();\n\n    await writeFile(this.manifestPath, JSON.stringify(this.manifest, null, 2), \"utf-8\");\n  }\n\n  /**\n   * Create empty manifest structure\n   */\n  private createEmptyManifest(): TypingsManifest {\n    return {\n      version: \"1.0.0\",\n      lastBuildTime: Date.now(),\n      storage: null,\n      config: {},\n    };\n  }\n\n  // ============================================================\n  // Type Extraction Methods\n  // ============================================================\n\n  /**\n   * Extract BOTH type info AND keys in a single pass\n   *\n   * One parse serves both extractions. It used to be one whole TypeScript\n   * Program per file — halved from two by an earlier pass, which optimised\n   * inside a premise that did not need to hold. `read-config-ast.ts` has the\n   * numbers.\n   *\n   * @param configPath Absolute path to the config file\n   * @param configName Config name (e.g., \"auth\", \"notifications\")\n   * @returns Combined result with type info and keys\n   */\n  private async extractConfigInfo(\n    configPath: string,\n    configName: string,\n  ): Promise<{\n    typeName: string | null;\n    importSource: string | null;\n    keys: string[];\n  }> {\n    if (!(await this.exists(configPath))) {\n      return { typeName: null, importSource: null, keys: [] };\n    }\n\n    // Parse, do not resolve — `read-config-ast.ts` explains why, with numbers.\n    const sourceFile = await readConfigAst(configPath);\n\n    if (!sourceFile) {\n      return { typeName: null, importSource: null, keys: [] };\n    }\n\n    // === Type Info Extraction ===\n    const importedTypes = new Map<string, string>();\n    const localExportedTypes = new Set<string>();\n    let foundTypeName: string | null = null;\n\n    // === Keys Extraction ===\n    const keys: string[] = [];\n\n    const visitForTypes = (node: ts.Node): void => {\n      // Collect imported types\n      if (ts.isImportDeclaration(node)) {\n        const moduleSpecifier = node.moduleSpecifier;\n        if (ts.isStringLiteral(moduleSpecifier)) {\n          const source = moduleSpecifier.text;\n          const importClause = node.importClause;\n          if (importClause?.namedBindings && ts.isNamedImports(importClause.namedBindings)) {\n            for (const element of importClause.namedBindings.elements) {\n              importedTypes.set(element.name.text, source);\n            }\n          }\n        }\n      }\n\n      // Collect locally exported types\n      if (ts.isTypeAliasDeclaration(node)) {\n        const modifiers = ts.getModifiers(node);\n        if (modifiers?.some((m) => m.kind === ts.SyntaxKind.ExportKeyword)) {\n          localExportedTypes.add(node.name.text);\n        }\n      }\n\n      // Collect locally exported interfaces\n      if (ts.isInterfaceDeclaration(node)) {\n        const modifiers = ts.getModifiers(node);\n        if (modifiers?.some((m) => m.kind === ts.SyntaxKind.ExportKeyword)) {\n          localExportedTypes.add(node.name.text);\n        }\n      }\n\n      // Find type used on config variable + extract keys\n      if (ts.isVariableDeclaration(node)) {\n        // Type info\n        if (node.type && ts.isTypeReferenceNode(node.type)) {\n          foundTypeName = node.type.typeName.getText(sourceFile);\n        }\n\n        // Keys extraction\n        if (node.initializer && ts.isObjectLiteralExpression(node.initializer)) {\n          const visitKeys = (objNode: ts.ObjectLiteralExpression, prefix: string): void => {\n            for (const prop of objNode.properties) {\n              if (ts.isPropertyAssignment(prop) && prop.name) {\n                const keyName = prop.name.getText(sourceFile);\n                const fullKey = prefix ? `${prefix}.${keyName}` : keyName;\n                keys.push(fullKey);\n                if (ts.isObjectLiteralExpression(prop.initializer)) {\n                  visitKeys(prop.initializer, fullKey);\n                }\n              }\n            }\n          };\n          visitKeys(node.initializer, configName);\n        }\n      }\n\n      ts.forEachChild(node, visitForTypes);\n    };\n\n    ts.forEachChild(sourceFile, visitForTypes);\n\n    // Resolve type info\n    let typeName: string | null = null;\n    let importSource: string | null = null;\n\n    if (foundTypeName) {\n      if (importedTypes.has(foundTypeName)) {\n        typeName = foundTypeName;\n        importSource = importedTypes.get(foundTypeName)!;\n      } else if (localExportedTypes.has(foundTypeName)) {\n        typeName = foundTypeName;\n        const relativePath = Path.toRelative(configPath).replace(/\\.(ts|tsx)$/, \"\");\n        importSource = `../../${relativePath}`;\n      }\n    }\n\n    return { typeName, importSource, keys };\n  }\n\n  /**\n   * Extract driver keys from storage config\n   */\n  private async extractStorageDriverKeys(configPath: string): Promise<string[]> {\n    const absolutePath = resolve(configPath);\n\n    if (!(await this.exists(absolutePath))) {\n      devServeLog(`⚠️ Storage config not found: ${absolutePath}`);\n      return [];\n    }\n\n    const sourceFile = await readConfigAst(absolutePath);\n\n    if (!sourceFile) {\n      devServeLog(`⚠️ Could not parse storage config: ${absolutePath}`);\n      return [];\n    }\n\n    const keys: string[] = [];\n\n    const visit = (node: ts.Node): void => {\n      if (ts.isPropertyAssignment(node)) {\n        const propName = node.name.getText(sourceFile);\n\n        if (propName === \"drivers\" && ts.isObjectLiteralExpression(node.initializer)) {\n          for (const prop of node.initializer.properties) {\n            if (ts.isPropertyAssignment(prop) || ts.isShorthandPropertyAssignment(prop)) {\n              const keyName = prop.name?.getText(sourceFile);\n\n              if (keyName) {\n                keys.push(keyName);\n              }\n            }\n          }\n        }\n      }\n\n      ts.forEachChild(node, visit);\n    };\n\n    ts.forEachChild(sourceFile, visit);\n\n    return keys;\n  }\n\n  /**\n   * Find a config file by name\n   */\n  private async findConfigFile(configName: string): Promise<string | undefined> {\n    const possiblePaths = [`src/config/${configName}.ts`, `config/${configName}.ts`];\n\n    for (const path of possiblePaths) {\n      const fullPath = join(process.cwd(), path);\n\n      if (await this.exists(fullPath)) {\n        return path;\n      }\n    }\n\n    try {\n      const files = filesOrchestrator.getFiles();\n\n      for (const [filePath] of files) {\n        if (filePath.includes(`config/${configName}`)) {\n          return filePath;\n        }\n      }\n    } catch {\n      // Files orchestrator not initialized yet\n    }\n\n    return undefined;\n  }\n\n  /**\n   * Ensure output directory exists\n   */\n  private async ensureOutputDir(): Promise<void> {\n    await ensureDirectoryAsync(this.outputDir);\n  }\n\n  /**\n   * Check if a path exists (async wrapper)\n   */\n  private async exists(path: string): Promise<boolean> {\n    try {\n      await access(path, constants.F_OK);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  /**\n   * The ports `runTypingsGeneration` needs, bound to this instance and this\n   * package's dev logger.\n   */\n  private get typingsGenerationPorts(): TypingsGenerationPorts {\n    return {\n      generate: () => this.generateAll(),\n      info: (message) => devLogInfo(message),\n      success: (message) => devLogSuccess(message),\n      error: (message) => devLogError(message),\n    };\n  }\n\n  /**\n   * Generate every config's typings.\n   *\n   * Runs IN THIS PROCESS. It used to spawn `npx warlock generate.typings`,\n   * which could not resolve in a source checkout — see\n   * `run-typings-generation.ts` for the whole story.\n   */\n  public async executeGenerateAllCommand(): Promise<void> {\n    await runTypingsGeneration(this.typingsGenerationPorts);\n  }\n\n  /**\n   * Regenerate typings after a batch reload — but only when the batch\n   * plausibly touched something the typings depend on: a config file, a file\n   * that registers translation keys, or a registering file that was deleted.\n   *\n   * A deleted file is already gone from `filesOrchestrator` by the time this\n   * runs (deletes are processed before `dev-server:batch-complete` fires), so\n   * its content can't be re-checked here — `translationSourceFiles` is the\n   * set from the last generation, kept for exactly this comparison.\n   */\n  public async executeTypingsGenerator(upcomingFiles: string[]): Promise<void> {\n    const files = filesOrchestrator.getFiles();\n\n    const aKnownTranslationSourceVanished = Array.from(this.translationSourceFiles).some(\n      (path) => !files.has(path),\n    );\n\n    const touchedAConfig =\n      aKnownTranslationSourceVanished ||\n      Array.from(new Set(upcomingFiles)).some((file) => {\n        const normalizedPath = Path.normalize(file);\n        if (normalizedPath.includes(\"src/config/\")) return true;\n        if (isRouteLocalesJsonPath(normalizedPath)) return true;\n        if (this.translationSourceFiles.has(normalizedPath)) return true;\n\n        const fileManager = files.get(normalizedPath);\n        return fileManager !== undefined && isTranslationRegisteringSource(fileManager.source);\n      });\n\n    if (!touchedAConfig) return;\n\n    /*\n      The changed paths are deliberately NOT passed along. The previous version\n      built a `files` array here and then threw it away, spawning the same\n      whole-project command as the branch above — so \"incremental\" was a name,\n      not a behaviour. `generateAll()` reads the orchestrator, which the batch\n      reload has already updated, so the full pass is both correct and the only\n      pass that ever actually ran.\n    */\n    await runTypingsGeneration(this.typingsGenerationPorts);\n  }\n}\n\n/**\n * Singleton instance for use throughout dev-server\n */\nexport const typeGenerator = new TypeGenerator();\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsBA,MAAM,cAAc;AACpB,MAAM,oBAAoB;AAE1B,SAAS,2BAA2B,QAA0B;CAC5D,OACE,OAAO,WAAW,YAClB,WAAW,QACX,UAAU,UACT,OAA8B,SAAS,0BACxC,kBAAkB,SAClB,OAAO,QAAQ,SAAS,wBAAwB,YAAY,EAAE;AAElE;;AAGA,eAAsB,qCACpB,UAAU,QAAQ,IAAI,GACM;CAG5B,MAAM,aAAa,cAAc,QAAQ,SAAS,cAAc,CAAC;CAEjE,IAAI;EACF,cAAc,aAAa,UAAU;CACvC,SAAS,QAAQ;EACf,IAAI,2BAA2B,MAAM,GAAG,OAAO,CAAC;EAChD,MAAM;CACR;CAGA,MAAM,cAAe,MAAM,OADJ,cAAc,mBAAmB,UACT,CAAC,CAAC;CAEjD,IAAI,OAAO,YAAY,wBAAwB,YAC7C,MAAM,IAAI,MACR,GAAG,kBAAkB,uFACvB;CAGF,OAAO,YAAY,oBAAoB,EAAE,QAAQ,CAAC;AACpD;;AAGA,SAAgB,uBAAuB,MAAuB;CAC5D,MAAM,aAAa,KAAK,UAAU,IAAI;CACtC,MAAM,eAAe,WAAW,WAAW,MAAM,IAAI,aAAa,KAAK,WAAW,UAAU;CAC5F,OAAO,qCAAqC,KAAK,YAAY;AAC/D;;;;;;;;;AA+BA,IAAa,gBAAb,MAA2B;;mBAIL,YAAY,SAAS;sBAKlB,KAAK,KAAK,WAAW,uBAAuB;kBAKxB;qCAKrB,IAAI,IAQxB;gDA2Q+B,IAAI,IAAY;;;;;;;;;CAlQjD,MAAa,cAA6B;EACxC,MAAM,KAAK,gBAAgB;EAE3B,MAAM,cAAc,KAAK,KAAK,WAAW,cAAc;EACvD,MAAM,aAAa,KAAK,KAAK,WAAW,aAAa;EACrD,MAAM,mBAAmB,KAAK,KAAK,WAAW,mBAAmB;EAEjE,MAAM,CAAC,gBAAgB,eAAe,cAAc,qBAAqB,MAAM,QAAQ,IAAI;GACzF,KAAK,OAAO,KAAK,YAAY;GAC7B,KAAK,OAAO,WAAW;GACvB,KAAK,OAAO,UAAU;GACtB,KAAK,OAAO,gBAAgB;EAC9B,CAAC;EAED,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,mBAEzD,MAAM,KAAK,eAAe;OACrB;GAEL,MAAM,KAAK,aAAa;GAExB,MAAM,KAAK,UAAU;EACvB;EAEA,MAAM,KAAK,yBAAyB;EAEpC,MAAM,KAAK,aAAa;CAC1B;;;;CAKA,MAAc,iBAAgC;EAE5C,MAAM,oBAAoB,MAAM,KAAK,eAAe,SAAS;EAC7D,IAAI,mBACF,KAAK,qBAAqB,iBAAiB;EAI7C,MAAM,KAAK,oBAAoB;CACjC;;;;CAKA,MAAc,YAA2B;EACvC,MAAM,QAAQ,kBAAkB,SAAS;EAEzC,IAAI,gBAAgB;EACpB,IAAI,iBAAiB;EAErB,KAAK,YAAY,MAAM;EAGvB,KAAK,MAAM,CAAC,MAAM,gBAAgB,OAChC,IAAI,KAAK,WAAW,oBAAoB,GAAG;GACzC,MAAM,gBAAgB,KAAK,UAAU;GACrC,IAAI,CAAC,iBAAiB,cAAc,eAAe,YAAY,MAE7D,MAAM,KAAK,qBAAqB,IAAI;GAEtC;EACF;EAIF,KAAK,MAAM,CAAC,MAAM,gBAAgB,OAAO;GACvC,IAAI,CAAC,KAAK,WAAW,aAAa,GAAG;GACrC,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,aAAa,EAAE,MAAM,SAAS;GAGjE,MAAM,aAAa,KAAK,QAAQ,eAAe,EAAE,CAAC,CAAC,QAAQ,YAAY,EAAE;GAEzE,MAAM,gBAAgB,KAAK,UAAU,OAAO;GAE5C,IAAI,CAAC,iBAAiB,cAAc,eAAe,YAAY,MAAM;IAEnE,gBAAgB;IAChB,MAAM,OAAO,MAAM,KAAK,kBAAkB,YAAY,cAAc,UAAU;IAE9E,KAAK,YAAY,IAAI,YAAY;KAC/B,YAAY,YAAY;KACxB,UAAU,KAAK;KACf,cAAc,KAAK;KACnB,MAAM,KAAK;IACb,CAAC;GACH,OAAO;IAEL;IACA,KAAK,YAAY,IAAI,YAAY,aAAa;GAChD;EACF;EAEA,IAAI,eACF,MAAM,KAAK,0BAA0B;OAErC,WAAW,2BAA2B,eAAe,iBAAiB;CAE1E;;;;CAKA,MAAa,qBAAqB,YAAmC;EACnE,IAAI;GACF,MAAM,aAAa,MAAM,KAAK,yBAAyB,UAAU;GAEjE,IAAI,WAAW,WAAW,GAAG;IAC3B,YAAY,uCAAuC;IACnD;GACF;GAIA,MAAM,aADc,kBAAkB,SAAS,CAAC,CAAC,IAAI,UACxB,CAAC,EAAE,QAAQ;GAGxC,IAAI,CAAC,KAAK,UACR,KAAK,WAAW,KAAK,oBAAoB;GAE3C,KAAK,SAAS,UAAU;IACtB;IACA,SAAS;GACX;GAMA,MAAM,UAAU;qBACD,WAAW;;;;;;;EALD,WACtB,KAAK,MAAM,OAAO,KAAK,eAAe,CAAC,EAAE,QAAQ,CAAC,CAClD,KAAK,IAUG,EAAE;;;;GAMb,MAAM,UADa,KAAK,KAAK,WAAW,cACf,GAAG,SAAS,OAAO;GAE5C,cAAc,4BAA4B,WAAW,KAAK,IAAI,GAAG;EACnE,SAAS,OAAO;GACd,YAAY,wCAAwC,OAAO;EAC7D;CACF;;;;CAKA,AAAO,sBAAsB,aAA8B;EACzD,OACE,YAAY,SAAS,aAAa,KAClC,YAAY,SAAS,SAAS,KAC9B,KAAK,cAAc,WAAW,KAC9B,uBAAuB,WAAW;CAEtC;;;;CAKA,MAAa,iBAAiB,aAAoC;EAChE,IAAI,CAAC,KAAK,sBAAsB,WAAW,GACzC;EAIF,IAAI,YAAY,SAAS,gBAAgB,GAAG;GAC1C,MAAM,KAAK,qBAAqB,WAAW;GAC3C,MAAM,KAAK,aAAa;GACxB;EACF;EAEA,IAAI,KAAK,cAAc,WAAW,KAAK,uBAAuB,WAAW,GAAG;GAC1E,MAAM,KAAK,yBAAyB;GACpC;EACF;EAGA,MAAM,QAAQ,YAAY,MAAM,yBAAyB;EACzD,IAAI,CAAC,OACH;EAGF,MAAM,aAAa,MAAM;EACzB,IAAI,CAAC,cAAc,eAAe,SAAS;EAE3C,WAAW,mBAAmB,WAAW,cAAc;EAIvD,MAAM,aADc,kBAAkB,SAAS,CAAC,CAAC,IAAI,WACxB,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,SAAS;EAI5D,MAAM,aAAa,KADD,KAAK,QAAQ,IAAI,GAAG,YACN,GAAG,GAAG,WAAW,IAAI;EAErD,MAAM,OAAO,MAAM,KAAK,kBAAkB,YAAY,UAAU;EAEhE,KAAK,YAAY,IAAI,YAAY;GAC/B;GACA,UAAU,KAAK;GACf,cAAc,KAAK;GACnB,MAAM,KAAK;EACb,CAAC;EAGD,MAAM,KAAK,0BAA0B;EACrC,MAAM,KAAK,aAAa;CAC1B;;;;CAKA,MAAa,sBAAqC;EAChD,IAAI;GACF,MAAM,QAAQ,kBAAkB,SAAS;GAGzC,KAAK,YAAY,MAAM;GAEvB,KAAK,MAAM,CAAC,MAAM,gBAAgB,OAAO;IACvC,IAAI,CAAC,KAAK,WAAW,aAAa,GAAG;IACrC,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,aAAa,EAAE,MAAM,SAAS;IAGjE,MAAM,aAAa,KAAK,QAAQ,eAAe,EAAE,CAAC,CAAC,QAAQ,YAAY,EAAE;IAGzE,MAAM,OAAO,MAAM,KAAK,kBAAkB,YAAY,cAAc,UAAU;IAE9E,KAAK,YAAY,IAAI,YAAY;KAC/B,YAAY,YAAY;KACxB,UAAU,KAAK;KACf,cAAc,KAAK;KACnB,MAAM,KAAK;IACb,CAAC;GACH;GAEA,MAAM,KAAK,0BAA0B;EACvC,SAAS,OAAO;GACd,YAAY,uCAAuC,OAAO;EAC5D;CACF;;;;;;;;;;CAoBA,MAAc,2BAA0C;EACtD,MAAM,uBAAO,IAAI,IAAY;EAC7B,MAAM,8BAAc,IAAI,IAAY;EAEpC,KAAK,MAAM,CAAC,MAAM,gBAAgB,kBAAkB,SAAS,GAAG;GAC9D,IAAI,CAAC,+BAA+B,YAAY,MAAM,GACpD;GAGF,YAAY,IAAI,IAAI;GAEpB,MAAM,aAAa,MAAM,cAAc,YAAY,YAAY;GAC/D,IAAI,YACF,KAAK,MAAM,OAAO,uBAAuB,UAAU,GACjD,KAAK,IAAI,GAAG;EAGlB;EAEA,KAAK,MAAM,OAAO,MAAM,qCAAqC,GAC3D,KAAK,IAAI,GAAG;EAGd,KAAK,yBAAyB;EAM9B,MAAM,UAAU;;;;;;;;;EAJA,MAAM,KAAK,IAAI,CAAC,CAC7B,KAAK,CAAC,CACN,KAAK,QAAQ,OAAO,KAAK,UAAU,GAAG,EAAE,QAAQ,CAAC,CACjD,KAAK,IAUJ,EAAE;;;;EAKN,MAAM,UAAU,KAAK,KAAK,WAAW,mBAAmB,GAAG,SAAS,OAAO;EAC3E,cAAc,gCAAgC,KAAK,KAAK,MAAM;CAChE;CAEA,AAAQ,cAAc,MAAuB;EAC3C,OAAO,KAAK,UAAU,IAAI,CAAC,CAAC,SAAS,iBAAiB;CACxD;;;;;;;CAQA,AAAQ,eAAe,MAAsB;EAC3C,OAAO,6BAA6B,KAAK,IAAI,IAAI,OAAO,KAAK,UAAU,IAAI;CAC7E;;;;CAKA,MAAc,4BAA2C;EACvD,MAAM,kBAID,CAAC;EACN,MAAM,UAAoB,CAAC;EAG3B,IAAI,CAAC,KAAK,UACR,KAAK,WAAW,KAAK,oBAAoB;EAE3C,KAAK,SAAS,SAAS,CAAC;EAExB,KAAK,MAAM,CAAC,MAAM,SAAS,KAAK,aAAa;GAC3C,gBAAgB,KAAK;IACnB;IACA,UAAU,KAAK;IACf,cAAc,KAAK;GACrB,CAAC;GACD,QAAQ,KAAK,GAAG,KAAK,IAAI;GAGzB,KAAK,SAAS,OAAO,QAAQ;EAC/B;EAGA,MAAM,0BAAU,IAAI,IAAyB;EAC7C,KAAK,MAAM,QAAQ,iBACjB,IAAI,KAAK,YAAY,KAAK,cAAc;GACtC,IAAI,CAAC,QAAQ,IAAI,KAAK,YAAY,GAChC,QAAQ,IAAI,KAAK,8BAAc,IAAI,IAAI,CAAC;GAE1C,QAAQ,IAAI,KAAK,YAAY,CAAC,CAAE,IAAI,KAAK,QAAQ;EACnD;EAaF,MAAM,UAAU;;;EAVS,MAAM,KAAK,QAAQ,QAAQ,CAAC,CAAC,CACnD,KAAK,CAAC,QAAQ,WAAW,iBAAiB,MAAM,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,WAAW,OAAO,GAAG,CAAC,CAC7F,KAAK,IAWK,EAAE;;;;;EATO,gBACnB,KAAK,SAAS,OAAO,KAAK,eAAe,KAAK,IAAI,EAAE,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC,CACtF,KAAK,IAYE,EAAE;;;;EAVO,QAAQ,KAAK,QAAQ,QAAQ,IAAI,SAAS,CAAC,CAAC,KAAK,IAc7D,EAAE;;;;EAMT,MAAM,UADa,KAAK,KAAK,WAAW,aACf,GAAG,SAAS,OAAO;EAE5C,cACE,2BAA2B,KAAK,YAAY,KAAK,YAAY,QAAQ,OAAO,MAC9E;CACF;;;;CASA,MAAc,eAAiC;EAC7C,IAAI;GACF,IAAI,MAAM,KAAK,OAAO,KAAK,YAAY,GAAG;IACxC,MAAM,UAAU,MAAM,SAAS,KAAK,cAAc,OAAO;IACzD,KAAK,WAAW,KAAK,MAAM,OAAO;IAClC,OAAO;GACT;EACF,QAAQ,CAER;EACA,KAAK,WAAW;EAChB,OAAO;CACT;;;;CAKA,MAAc,eAA8B;EAC1C,IAAI,CAAC,KAAK,UACR,KAAK,WAAW,KAAK,oBAAoB;EAE3C,KAAK,SAAS,gBAAgB,KAAK,IAAI;EAEvC,MAAM,UAAU,KAAK,cAAc,KAAK,UAAU,KAAK,UAAU,MAAM,CAAC,GAAG,OAAO;CACpF;;;;CAKA,AAAQ,sBAAuC;EAC7C,OAAO;GACL,SAAS;GACT,eAAe,KAAK,IAAI;GACxB,SAAS;GACT,QAAQ,CAAC;EACX;CACF;;;;;;;;;;;;;CAkBA,MAAc,kBACZ,YACA,YAKC;EACD,IAAI,CAAE,MAAM,KAAK,OAAO,UAAU,GAChC,OAAO;GAAE,UAAU;GAAM,cAAc;GAAM,MAAM,CAAC;EAAE;EAIxD,MAAM,aAAa,MAAM,cAAc,UAAU;EAEjD,IAAI,CAAC,YACH,OAAO;GAAE,UAAU;GAAM,cAAc;GAAM,MAAM,CAAC;EAAE;EAIxD,MAAM,gCAAgB,IAAI,IAAoB;EAC9C,MAAM,qCAAqB,IAAI,IAAY;EAC3C,IAAI,gBAA+B;EAGnC,MAAM,OAAiB,CAAC;EAExB,MAAM,iBAAiB,SAAwB;GAE7C,IAAI,GAAG,oBAAoB,IAAI,GAAG;IAChC,MAAM,kBAAkB,KAAK;IAC7B,IAAI,GAAG,gBAAgB,eAAe,GAAG;KACvC,MAAM,SAAS,gBAAgB;KAC/B,MAAM,eAAe,KAAK;KAC1B,IAAI,cAAc,iBAAiB,GAAG,eAAe,aAAa,aAAa,GAC7E,KAAK,MAAM,WAAW,aAAa,cAAc,UAC/C,cAAc,IAAI,QAAQ,KAAK,MAAM,MAAM;IAGjD;GACF;GAGA,IAAI,GAAG,uBAAuB,IAAI,GAEhC;QADkB,GAAG,aAAa,IACtB,CAAC,EAAE,MAAM,MAAM,EAAE,SAAS,GAAG,WAAW,aAAa,GAC/D,mBAAmB,IAAI,KAAK,KAAK,IAAI;GACvC;GAIF,IAAI,GAAG,uBAAuB,IAAI,GAEhC;QADkB,GAAG,aAAa,IACtB,CAAC,EAAE,MAAM,MAAM,EAAE,SAAS,GAAG,WAAW,aAAa,GAC/D,mBAAmB,IAAI,KAAK,KAAK,IAAI;GACvC;GAIF,IAAI,GAAG,sBAAsB,IAAI,GAAG;IAElC,IAAI,KAAK,QAAQ,GAAG,oBAAoB,KAAK,IAAI,GAC/C,gBAAgB,KAAK,KAAK,SAAS,QAAQ,UAAU;IAIvD,IAAI,KAAK,eAAe,GAAG,0BAA0B,KAAK,WAAW,GAAG;KACtE,MAAM,aAAa,SAAqC,WAAyB;MAC/E,KAAK,MAAM,QAAQ,QAAQ,YACzB,IAAI,GAAG,qBAAqB,IAAI,KAAK,KAAK,MAAM;OAC9C,MAAM,UAAU,KAAK,KAAK,QAAQ,UAAU;OAC5C,MAAM,UAAU,SAAS,GAAG,OAAO,GAAG,YAAY;OAClD,KAAK,KAAK,OAAO;OACjB,IAAI,GAAG,0BAA0B,KAAK,WAAW,GAC/C,UAAU,KAAK,aAAa,OAAO;MAEvC;KAEJ;KACA,UAAU,KAAK,aAAa,UAAU;IACxC;GACF;GAEA,GAAG,aAAa,MAAM,aAAa;EACrC;EAEA,GAAG,aAAa,YAAY,aAAa;EAGzC,IAAI,WAA0B;EAC9B,IAAI,eAA8B;EAElC,IAAI,eACF;OAAI,cAAc,IAAI,aAAa,GAAG;IACpC,WAAW;IACX,eAAe,cAAc,IAAI,aAAa;GAChD,OAAO,IAAI,mBAAmB,IAAI,aAAa,GAAG;IAChD,WAAW;IAEX,eAAe,SADM,KAAK,WAAW,UAAU,CAAC,CAAC,QAAQ,eAAe,EACrC;GACrC;;EAGF,OAAO;GAAE;GAAU;GAAc;EAAK;CACxC;;;;CAKA,MAAc,yBAAyB,YAAuC;EAC5E,MAAM,eAAe,QAAQ,UAAU;EAEvC,IAAI,CAAE,MAAM,KAAK,OAAO,YAAY,GAAI;GACtC,YAAY,gCAAgC,cAAc;GAC1D,OAAO,CAAC;EACV;EAEA,MAAM,aAAa,MAAM,cAAc,YAAY;EAEnD,IAAI,CAAC,YAAY;GACf,YAAY,sCAAsC,cAAc;GAChE,OAAO,CAAC;EACV;EAEA,MAAM,OAAiB,CAAC;EAExB,MAAM,SAAS,SAAwB;GACrC,IAAI,GAAG,qBAAqB,IAAI,GAG9B;QAFiB,KAAK,KAAK,QAAQ,UAExB,MAAM,aAAa,GAAG,0BAA0B,KAAK,WAAW,GACzE;UAAK,MAAM,QAAQ,KAAK,YAAY,YAClC,IAAI,GAAG,qBAAqB,IAAI,KAAK,GAAG,8BAA8B,IAAI,GAAG;MAC3E,MAAM,UAAU,KAAK,MAAM,QAAQ,UAAU;MAE7C,IAAI,SACF,KAAK,KAAK,OAAO;KAErB;IACF;GACF;GAGF,GAAG,aAAa,MAAM,KAAK;EAC7B;EAEA,GAAG,aAAa,YAAY,KAAK;EAEjC,OAAO;CACT;;;;CAKA,MAAc,eAAe,YAAiD;EAC5E,MAAM,gBAAgB,CAAC,cAAc,WAAW,MAAM,UAAU,WAAW,IAAI;EAE/E,KAAK,MAAM,QAAQ,eAAe;GAChC,MAAM,WAAW,KAAK,QAAQ,IAAI,GAAG,IAAI;GAEzC,IAAI,MAAM,KAAK,OAAO,QAAQ,GAC5B,OAAO;EAEX;EAEA,IAAI;GACF,MAAM,QAAQ,kBAAkB,SAAS;GAEzC,KAAK,MAAM,CAAC,aAAa,OACvB,IAAI,SAAS,SAAS,UAAU,YAAY,GAC1C,OAAO;EAGb,QAAQ,CAER;CAGF;;;;CAKA,MAAc,kBAAiC;EAC7C,MAAM,qBAAqB,KAAK,SAAS;CAC3C;;;;CAKA,MAAc,OAAO,MAAgC;EACnD,IAAI;GACF,MAAM,OAAO,MAAM,UAAU,IAAI;GACjC,OAAO;EACT,QAAQ;GACN,OAAO;EACT;CACF;;;;;CAMA,IAAY,yBAAiD;EAC3D,OAAO;GACL,gBAAgB,KAAK,YAAY;GACjC,OAAO,YAAY,WAAW,OAAO;GACrC,UAAU,YAAY,cAAc,OAAO;GAC3C,QAAQ,YAAY,YAAY,OAAO;EACzC;CACF;;;;;;;;CASA,MAAa,4BAA2C;EACtD,MAAM,qBAAqB,KAAK,sBAAsB;CACxD;;;;;;;;;;;CAYA,MAAa,wBAAwB,eAAwC;EAC3E,MAAM,QAAQ,kBAAkB,SAAS;EAkBzC,IAAI,EAhBoC,MAAM,KAAK,KAAK,sBAAsB,CAAC,CAAC,MAC7E,SAAS,CAAC,MAAM,IAAI,IAAI,CAIK,KAC9B,MAAM,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,MAAM,SAAS;GAChD,MAAM,iBAAiB,KAAK,UAAU,IAAI;GAC1C,IAAI,eAAe,SAAS,aAAa,GAAG,OAAO;GACnD,IAAI,uBAAuB,cAAc,GAAG,OAAO;GACnD,IAAI,KAAK,uBAAuB,IAAI,cAAc,GAAG,OAAO;GAE5D,MAAM,cAAc,MAAM,IAAI,cAAc;GAC5C,OAAO,gBAAgB,UAAa,+BAA+B,YAAY,MAAM;EACvF,CAAC,IAEkB;EAUrB,MAAM,qBAAqB,KAAK,sBAAsB;CACxD;AACF;;;;AAKA,MAAa,gBAAgB,IAAI,cAAc"}

package/esm/encryption/encrypt.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"encrypt.d.mts","names":[],"sources":["../../../../../../../core/src/encryption/encrypt.ts"],"mappings":";;AAoDA;;;;AAAyC;AAiCzC;;;;iBAjCgB,OAAA,CAAQ,SAAiB;;;;;;;;;;;iBAiCzB,OAAA,CAAQ,UAAkB"}
+{"version":3,"file":"encrypt.d.mts","names":[],"sources":["../../../../../../../core/src/encryption/encrypt.ts"],"mappings":";;AAuEA;;;;AAAyC;AAiCzC;;;;iBAjCgB,OAAA,CAAQ,SAAiB;;;;;;;;;;;iBAiCzB,OAAA,CAAQ,UAAkB"}

package/esm/encryption/encrypt.mjs

@@ -10,18 +10,29 @@ const DEFAULT_ALGORITHM = "aes-256-gcm";
 /**
 * Get the encryption key from config, validated as a 32-byte hex string.
 */
-function getEncryptionKey() {
+function getEncryptionKey(keyBytes) {
 	const key = config.key("encryption.key");
 	if (!key) throw new Error("Missing encryption key. Set 'encryption.key' in your config (64 hex characters = 32 bytes).");
 	const buffer = Buffer.from(key, "hex");
-	if (buffer.length !== 32) throw new Error(`Encryption key must be exactly 32 bytes (64 hex characters). Got ${buffer.length} bytes for key ${key}.`);
+	if (buffer.length !== keyBytes) throw new Error(`Encryption key must be exactly ${keyBytes} bytes (${keyBytes * 2} hex characters). Got ${buffer.length} bytes.`);
 	return buffer;
 }
 /**
+* Supported algorithms (the format assumes GCM: 16-byte IV + auth tag)
+* mapped to their required key size in bytes.
+*/
+const ALGORITHM_KEY_BYTES = {
+	"aes-128-gcm": 16,
+	"aes-192-gcm": 24,
+	"aes-256-gcm": 32
+};
+/**
 * Get the configured encryption algorithm, defaults to aes-256-gcm.
 */
 function getAlgorithm() {
-	return config.key("encryption.algorithm", DEFAULT_ALGORITHM);
+	const algorithm = config.key("encryption.algorithm", DEFAULT_ALGORITHM);
+	if (!(algorithm in ALGORITHM_KEY_BYTES)) throw new Error(`Unsupported encryption algorithm '${algorithm}'. Supported: ${Object.keys(ALGORITHM_KEY_BYTES).join(", ")}.`);
+	return algorithm;
 }
 /**
 * Encrypts a plaintext string using AES-256-GCM (or the configured algorithm).
@@ -35,8 +46,8 @@ function getAlgorithm() {
 */
 function encrypt(plainText) {
 	if (!plainText) return plainText;
-	const keyBuffer = getEncryptionKey();
 	const algorithm = getAlgorithm();
+	const keyBuffer = getEncryptionKey(ALGORITHM_KEY_BYTES[algorithm]);
 	try {
 		const iv = crypto.randomBytes(16);
 		const cipher = crypto.createCipheriv(algorithm, keyBuffer, iv);
@@ -60,8 +71,8 @@ function encrypt(plainText) {
 */
 function decrypt(cipherText) {
 	if (!cipherText) return cipherText;
-	const keyBuffer = getEncryptionKey();
 	const algorithm = getAlgorithm();
+	const keyBuffer = getEncryptionKey(ALGORITHM_KEY_BYTES[algorithm]);
 	try {
 		const parts = cipherText.split(":");
 		if (parts.length !== 3) throw new Error("Invalid encrypted format. Expected iv:ciphertext:authTag");

package/esm/encryption/encrypt.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"encrypt.mjs","names":[],"sources":["../../../../../../../core/src/encryption/encrypt.ts"],"sourcesContent":["import crypto from \"crypto\";\nimport { config } from \"../config\";\nimport { type EncryptionConfigurations } from \"./types\";\n\n/**\n * Default encryption algorithm.\n */\nconst DEFAULT_ALGORITHM = \"aes-256-gcm\";\n\n/**\n * Get the encryption key from config, validated as a 32-byte hex string.\n */\nfunction getEncryptionKey(): Buffer {\n  const key = config.key<EncryptionConfigurations[\"key\"]>(\"encryption.key\");\n\n  if (!key) {\n    throw new Error(\n      \"Missing encryption key. Set 'encryption.key' in your config (64 hex characters = 32 bytes).\",\n    );\n  }\n\n  const buffer = Buffer.from(key, \"hex\");\n\n  if (buffer.length !== 32) {\n    throw new Error(\n      `Encryption key must be exactly 32 bytes (64 hex characters). Got ${buffer.length} bytes for key ${key}.`,\n    );\n  }\n\n  return buffer;\n}\n\n/**\n * Get the configured encryption algorithm, defaults to aes-256-gcm.\n */\nfunction getAlgorithm(): string {\n  return config.key<EncryptionConfigurations[\"algorithm\"]>(\n    \"encryption.algorithm\",\n    DEFAULT_ALGORITHM,\n  )!;\n}\n\n/**\n * Encrypts a plaintext string using AES-256-GCM (or the configured algorithm).\n * Returns a combined string in the format `iv:ciphertext:authTag`.\n *\n * @example\n * import { encrypt } from \"@warlock.js/core\";\n *\n * const encrypted = encrypt(\"sk-proj-12345\");\n * // => \"a1b2c3...:d4e5f6...:g7h8i9...\"\n */\nexport function encrypt(plainText: string): string {\n  if (!plainText) return plainText;\n\n  const keyBuffer = getEncryptionKey();\n  const algorithm = getAlgorithm();\n\n  try {\n    // IV must be unique per encryption. 16 bytes is standard for AES.\n    const iv = crypto.randomBytes(16);\n    const cipher = crypto.createCipheriv(algorithm, keyBuffer, iv);\n\n    let encrypted = cipher.update(plainText, \"utf8\", \"hex\");\n    encrypted += cipher.final(\"hex\");\n\n    // Auth tag validates ciphertext integrity (tamper detection)\n    const authTag = (cipher as crypto.CipherGCM).getAuthTag().toString(\"hex\");\n\n    return `${iv.toString(\"hex\")}:${encrypted}:${authTag}`;\n  } catch (error) {\n    throw new Error(`Encryption failed: ${(error as Error).message}`);\n  }\n}\n\n/**\n * Decrypts a string previously encrypted with {@link encrypt}.\n * Expects the format `iv:ciphertext:authTag`.\n *\n * @example\n * import { decrypt } from \"@warlock.js/core\";\n *\n * const original = decrypt(encryptedString);\n * // => \"sk-proj-12345\"\n */\nexport function decrypt(cipherText: string): string {\n  if (!cipherText) return cipherText;\n\n  const keyBuffer = getEncryptionKey();\n  const algorithm = getAlgorithm();\n\n  try {\n    const parts = cipherText.split(\":\");\n\n    if (parts.length !== 3) {\n      throw new Error(\"Invalid encrypted format. Expected iv:ciphertext:authTag\");\n    }\n\n    const [ivHex, encryptedHex, authTagHex] = parts;\n\n    if (ivHex === undefined || encryptedHex === undefined || authTagHex === undefined) {\n      throw new Error(\"Invalid encrypted format. Expected iv:ciphertext:authTag\");\n    }\n\n    const decipher = crypto.createDecipheriv(algorithm, keyBuffer, Buffer.from(ivHex, \"hex\"));\n\n    (decipher as crypto.DecipherGCM).setAuthTag(Buffer.from(authTagHex, \"hex\"));\n\n    let decrypted = decipher.update(encryptedHex, \"hex\", \"utf8\");\n    // .final() throws if auth tag is invalid (data tampered)\n    decrypted += decipher.final(\"utf8\");\n\n    return decrypted;\n  } catch (error) {\n    throw new Error(`Decryption failed: ${(error as Error).message}`);\n  }\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,oBAAoB;;;;AAK1B,SAAS,mBAA2B;CAClC,MAAM,MAAM,OAAO,IAAqC,gBAAgB;CAExE,IAAI,CAAC,KACH,MAAM,IAAI,MACR,6FACF;CAGF,MAAM,SAAS,OAAO,KAAK,KAAK,KAAK;CAErC,IAAI,OAAO,WAAW,IACpB,MAAM,IAAI,MACR,oEAAoE,OAAO,OAAO,iBAAiB,IAAI,EACzG;CAGF,OAAO;AACT;;;;AAKA,SAAS,eAAuB;CAC9B,OAAO,OAAO,IACZ,wBACA,iBACF;AACF;;;;;;;;;;;AAYA,SAAgB,QAAQ,WAA2B;CACjD,IAAI,CAAC,WAAW,OAAO;CAEvB,MAAM,YAAY,iBAAiB;CACnC,MAAM,YAAY,aAAa;CAE/B,IAAI;EAEF,MAAM,KAAK,OAAO,YAAY,EAAE;EAChC,MAAM,SAAS,OAAO,eAAe,WAAW,WAAW,EAAE;EAE7D,IAAI,YAAY,OAAO,OAAO,WAAW,QAAQ,KAAK;EACtD,aAAa,OAAO,MAAM,KAAK;EAG/B,MAAM,UAAW,OAA4B,WAAW,CAAC,CAAC,SAAS,KAAK;EAExE,OAAO,GAAG,GAAG,SAAS,KAAK,EAAE,GAAG,UAAU,GAAG;CAC/C,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,sBAAuB,MAAgB,SAAS;CAClE;AACF;;;;;;;;;;;AAYA,SAAgB,QAAQ,YAA4B;CAClD,IAAI,CAAC,YAAY,OAAO;CAExB,MAAM,YAAY,iBAAiB;CACnC,MAAM,YAAY,aAAa;CAE/B,IAAI;EACF,MAAM,QAAQ,WAAW,MAAM,GAAG;EAElC,IAAI,MAAM,WAAW,GACnB,MAAM,IAAI,MAAM,0DAA0D;EAG5E,MAAM,CAAC,OAAO,cAAc,cAAc;EAE1C,IAAI,UAAU,UAAa,iBAAiB,UAAa,eAAe,QACtE,MAAM,IAAI,MAAM,0DAA0D;EAG5E,MAAM,WAAW,OAAO,iBAAiB,WAAW,WAAW,OAAO,KAAK,OAAO,KAAK,CAAC;EAExF,AAAC,SAAgC,WAAW,OAAO,KAAK,YAAY,KAAK,CAAC;EAE1E,IAAI,YAAY,SAAS,OAAO,cAAc,OAAO,MAAM;EAE3D,aAAa,SAAS,MAAM,MAAM;EAElC,OAAO;CACT,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,sBAAuB,MAAgB,SAAS;CAClE;AACF"}
+{"version":3,"file":"encrypt.mjs","names":[],"sources":["../../../../../../../core/src/encryption/encrypt.ts"],"sourcesContent":["import crypto from \"crypto\";\nimport { config } from \"../config\";\nimport { type EncryptionConfigurations } from \"./types\";\n\n/**\n * Default encryption algorithm.\n */\nconst DEFAULT_ALGORITHM = \"aes-256-gcm\";\n\n/**\n * Get the encryption key from config, validated as a 32-byte hex string.\n */\nfunction getEncryptionKey(keyBytes: number): Buffer {\n  const key = config.key<EncryptionConfigurations[\"key\"]>(\"encryption.key\");\n\n  if (!key) {\n    throw new Error(\n      \"Missing encryption key. Set 'encryption.key' in your config (64 hex characters = 32 bytes).\",\n    );\n  }\n\n  const buffer = Buffer.from(key, \"hex\");\n\n  if (buffer.length !== keyBytes) {\n    // Never include the key itself: this message reaches logs and error pages.\n    throw new Error(\n      `Encryption key must be exactly ${keyBytes} bytes (${keyBytes * 2} hex characters). Got ${buffer.length} bytes.`,\n    );\n  }\n\n  return buffer;\n}\n\n/**\n * Supported algorithms (the format assumes GCM: 16-byte IV + auth tag)\n * mapped to their required key size in bytes.\n */\nconst ALGORITHM_KEY_BYTES: Record<string, number> = {\n  \"aes-128-gcm\": 16,\n  \"aes-192-gcm\": 24,\n  \"aes-256-gcm\": 32,\n};\n\n/**\n * Get the configured encryption algorithm, defaults to aes-256-gcm.\n */\nfunction getAlgorithm(): string {\n  const algorithm = config.key<EncryptionConfigurations[\"algorithm\"]>(\n    \"encryption.algorithm\",\n    DEFAULT_ALGORITHM,\n  )!;\n\n  if (!(algorithm in ALGORITHM_KEY_BYTES)) {\n    throw new Error(\n      `Unsupported encryption algorithm '${algorithm}'. Supported: ${Object.keys(ALGORITHM_KEY_BYTES).join(\", \")}.`,\n    );\n  }\n\n  return algorithm;\n}\n\n/**\n * Encrypts a plaintext string using AES-256-GCM (or the configured algorithm).\n * Returns a combined string in the format `iv:ciphertext:authTag`.\n *\n * @example\n * import { encrypt } from \"@warlock.js/core\";\n *\n * const encrypted = encrypt(\"sk-proj-12345\");\n * // => \"a1b2c3...:d4e5f6...:g7h8i9...\"\n */\nexport function encrypt(plainText: string): string {\n  if (!plainText) return plainText;\n\n  const algorithm = getAlgorithm();\n  const keyBuffer = getEncryptionKey(ALGORITHM_KEY_BYTES[algorithm]!);\n\n  try {\n    // IV must be unique per encryption. 16 bytes is standard for AES.\n    const iv = crypto.randomBytes(16);\n    const cipher = crypto.createCipheriv(algorithm, keyBuffer, iv);\n\n    let encrypted = cipher.update(plainText, \"utf8\", \"hex\");\n    encrypted += cipher.final(\"hex\");\n\n    // Auth tag validates ciphertext integrity (tamper detection)\n    const authTag = (cipher as crypto.CipherGCM).getAuthTag().toString(\"hex\");\n\n    return `${iv.toString(\"hex\")}:${encrypted}:${authTag}`;\n  } catch (error) {\n    throw new Error(`Encryption failed: ${(error as Error).message}`);\n  }\n}\n\n/**\n * Decrypts a string previously encrypted with {@link encrypt}.\n * Expects the format `iv:ciphertext:authTag`.\n *\n * @example\n * import { decrypt } from \"@warlock.js/core\";\n *\n * const original = decrypt(encryptedString);\n * // => \"sk-proj-12345\"\n */\nexport function decrypt(cipherText: string): string {\n  if (!cipherText) return cipherText;\n\n  const algorithm = getAlgorithm();\n  const keyBuffer = getEncryptionKey(ALGORITHM_KEY_BYTES[algorithm]!);\n\n  try {\n    const parts = cipherText.split(\":\");\n\n    if (parts.length !== 3) {\n      throw new Error(\"Invalid encrypted format. Expected iv:ciphertext:authTag\");\n    }\n\n    const [ivHex, encryptedHex, authTagHex] = parts;\n\n    if (ivHex === undefined || encryptedHex === undefined || authTagHex === undefined) {\n      throw new Error(\"Invalid encrypted format. Expected iv:ciphertext:authTag\");\n    }\n\n    const decipher = crypto.createDecipheriv(algorithm, keyBuffer, Buffer.from(ivHex, \"hex\"));\n\n    (decipher as crypto.DecipherGCM).setAuthTag(Buffer.from(authTagHex, \"hex\"));\n\n    let decrypted = decipher.update(encryptedHex, \"hex\", \"utf8\");\n    // .final() throws if auth tag is invalid (data tampered)\n    decrypted += decipher.final(\"utf8\");\n\n    return decrypted;\n  } catch (error) {\n    throw new Error(`Decryption failed: ${(error as Error).message}`);\n  }\n}\n"],"mappings":";;;;;;;;AAOA,MAAM,oBAAoB;;;;AAK1B,SAAS,iBAAiB,UAA0B;CAClD,MAAM,MAAM,OAAO,IAAqC,gBAAgB;CAExE,IAAI,CAAC,KACH,MAAM,IAAI,MACR,6FACF;CAGF,MAAM,SAAS,OAAO,KAAK,KAAK,KAAK;CAErC,IAAI,OAAO,WAAW,UAEpB,MAAM,IAAI,MACR,kCAAkC,SAAS,UAAU,WAAW,EAAE,wBAAwB,OAAO,OAAO,QAC1G;CAGF,OAAO;AACT;;;;;AAMA,MAAM,sBAA8C;CAClD,eAAe;CACf,eAAe;CACf,eAAe;AACjB;;;;AAKA,SAAS,eAAuB;CAC9B,MAAM,YAAY,OAAO,IACvB,wBACA,iBACF;CAEA,IAAI,EAAE,aAAa,sBACjB,MAAM,IAAI,MACR,qCAAqC,UAAU,gBAAgB,OAAO,KAAK,mBAAmB,CAAC,CAAC,KAAK,IAAI,EAAE,EAC7G;CAGF,OAAO;AACT;;;;;;;;;;;AAYA,SAAgB,QAAQ,WAA2B;CACjD,IAAI,CAAC,WAAW,OAAO;CAEvB,MAAM,YAAY,aAAa;CAC/B,MAAM,YAAY,iBAAiB,oBAAoB,UAAW;CAElE,IAAI;EAEF,MAAM,KAAK,OAAO,YAAY,EAAE;EAChC,MAAM,SAAS,OAAO,eAAe,WAAW,WAAW,EAAE;EAE7D,IAAI,YAAY,OAAO,OAAO,WAAW,QAAQ,KAAK;EACtD,aAAa,OAAO,MAAM,KAAK;EAG/B,MAAM,UAAW,OAA4B,WAAW,CAAC,CAAC,SAAS,KAAK;EAExE,OAAO,GAAG,GAAG,SAAS,KAAK,EAAE,GAAG,UAAU,GAAG;CAC/C,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,sBAAuB,MAAgB,SAAS;CAClE;AACF;;;;;;;;;;;AAYA,SAAgB,QAAQ,YAA4B;CAClD,IAAI,CAAC,YAAY,OAAO;CAExB,MAAM,YAAY,aAAa;CAC/B,MAAM,YAAY,iBAAiB,oBAAoB,UAAW;CAElE,IAAI;EACF,MAAM,QAAQ,WAAW,MAAM,GAAG;EAElC,IAAI,MAAM,WAAW,GACnB,MAAM,IAAI,MAAM,0DAA0D;EAG5E,MAAM,CAAC,OAAO,cAAc,cAAc;EAE1C,IAAI,UAAU,UAAa,iBAAiB,UAAa,eAAe,QACtE,MAAM,IAAI,MAAM,0DAA0D;EAG5E,MAAM,WAAW,OAAO,iBAAiB,WAAW,WAAW,OAAO,KAAK,OAAO,KAAK,CAAC;EAExF,AAAC,SAAgC,WAAW,OAAO,KAAK,YAAY,KAAK,CAAC;EAE1E,IAAI,YAAY,SAAS,OAAO,cAAc,OAAO,MAAM;EAE3D,aAAa,SAAS,MAAM,MAAM;EAElC,OAAO;CACT,SAAS,OAAO;EACd,MAAM,IAAI,MAAM,sBAAuB,MAAgB,SAAS;CAClE;AACF"}

package/esm/encryption/hash.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"hash.d.mts","names":[],"sources":["../../../../../../../core/src/encryption/hash.ts"],"mappings":";;AAmBA;;;;AAA0C;;;;;;;;;;iBAA1B,QAAA,CAAS,SAAiB"}
+{"version":3,"file":"hash.d.mts","names":[],"sources":["../../../../../../../core/src/encryption/hash.ts"],"mappings":";;AAqBA;;;;AAA0C;;;;;;;;;;iBAA1B,QAAA,CAAS,SAAiB"}

package/esm/encryption/hash.mjs

@@ -3,6 +3,7 @@ import "../config/index.mjs";
 import crypto from "crypto";
 
 //#region ../core/src/encryption/hash.ts
+const MIN_HMAC_KEY_BYTES = 16;
 /**
 * Creates a deterministic HMAC-SHA256 hash of the given string.
 *
@@ -22,6 +23,7 @@ function hmacHash(plainText) {
 	if (!plainText) return plainText;
 	const hmacKey = config.key("encryption.hmacKey") || config.key("encryption.key");
 	if (!hmacKey) throw new Error("Missing HMAC key. Set 'encryption.hmacKey' (or 'encryption.key') in your config.");
+	if (!/^(?:[0-9a-fA-F]{2})+$/.test(hmacKey) || hmacKey.length / 2 < MIN_HMAC_KEY_BYTES) throw new Error("Invalid HMAC key. 'encryption.hmacKey' (or 'encryption.key') must be an even-length hex string of at least 16 bytes. Generate one with: openssl rand -hex 32");
 	const keyBuffer = Buffer.from(hmacKey, "hex");
 	return crypto.createHmac("sha256", keyBuffer).update(plainText).digest("hex");
 }

package/esm/encryption/hash.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"hash.mjs","names":[],"sources":["../../../../../../../core/src/encryption/hash.ts"],"sourcesContent":["import crypto from \"crypto\";\nimport { config } from \"../config\";\nimport { type EncryptionConfigurations } from \"./types\";\n\n/**\n * Creates a deterministic HMAC-SHA256 hash of the given string.\n *\n * Useful for creating searchable, unique fingerprints of sensitive data\n * (e.g., an API key) without storing the plaintext.\n *\n * Uses a dedicated HMAC key from config. Falls back to the encryption key\n * if no separate HMAC key is configured.\n *\n * @example\n * import { hmacHash } from \"@warlock.js/core\";\n *\n * const fingerprint = hmacHash(\"sk-proj-12345\");\n * // Store `fingerprint` in DB for lookups, store encrypted value separately\n */\nexport function hmacHash(plainText: string): string {\n  if (!plainText) return plainText;\n\n  const hmacKey =\n    config.key<EncryptionConfigurations[\"hmacKey\"]>(\"encryption.hmacKey\") ||\n    config.key<EncryptionConfigurations[\"key\"]>(\"encryption.key\");\n\n  if (!hmacKey) {\n    throw new Error(\n      \"Missing HMAC key. Set 'encryption.hmacKey' (or 'encryption.key') in your config.\",\n    );\n  }\n\n  const keyBuffer = Buffer.from(hmacKey, \"hex\");\n\n  return crypto.createHmac(\"sha256\", keyBuffer).update(plainText).digest(\"hex\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAmBA,SAAgB,SAAS,WAA2B;CAClD,IAAI,CAAC,WAAW,OAAO;CAEvB,MAAM,UACJ,OAAO,IAAyC,oBAAoB,KACpE,OAAO,IAAqC,gBAAgB;CAE9D,IAAI,CAAC,SACH,MAAM,IAAI,MACR,kFACF;CAGF,MAAM,YAAY,OAAO,KAAK,SAAS,KAAK;CAE5C,OAAO,OAAO,WAAW,UAAU,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK;AAC9E"}
+{"version":3,"file":"hash.mjs","names":[],"sources":["../../../../../../../core/src/encryption/hash.ts"],"sourcesContent":["import crypto from \"crypto\";\nimport { config } from \"../config\";\nimport { type EncryptionConfigurations } from \"./types\";\n\nconst MIN_HMAC_KEY_BYTES = 16;\n\n/**\n * Creates a deterministic HMAC-SHA256 hash of the given string.\n *\n * Useful for creating searchable, unique fingerprints of sensitive data\n * (e.g., an API key) without storing the plaintext.\n *\n * Uses a dedicated HMAC key from config. Falls back to the encryption key\n * if no separate HMAC key is configured.\n *\n * @example\n * import { hmacHash } from \"@warlock.js/core\";\n *\n * const fingerprint = hmacHash(\"sk-proj-12345\");\n * // Store `fingerprint` in DB for lookups, store encrypted value separately\n */\nexport function hmacHash(plainText: string): string {\n  if (!plainText) return plainText;\n\n  const hmacKey =\n    config.key<EncryptionConfigurations[\"hmacKey\"]>(\"encryption.hmacKey\") ||\n    config.key<EncryptionConfigurations[\"key\"]>(\"encryption.key\");\n\n  if (!hmacKey) {\n    throw new Error(\n      \"Missing HMAC key. Set 'encryption.hmacKey' (or 'encryption.key') in your config.\",\n    );\n  }\n\n  if (!/^(?:[0-9a-fA-F]{2})+$/.test(hmacKey) || hmacKey.length / 2 < MIN_HMAC_KEY_BYTES) {\n    throw new Error(\n      \"Invalid HMAC key. 'encryption.hmacKey' (or 'encryption.key') must be an even-length hex string of at least 16 bytes. Generate one with: openssl rand -hex 32\",\n    );\n  }\n\n  const keyBuffer = Buffer.from(hmacKey, \"hex\");\n\n  return crypto.createHmac(\"sha256\", keyBuffer).update(plainText).digest(\"hex\");\n}\n"],"mappings":";;;;;AAIA,MAAM,qBAAqB;;;;;;;;;;;;;;;;AAiB3B,SAAgB,SAAS,WAA2B;CAClD,IAAI,CAAC,WAAW,OAAO;CAEvB,MAAM,UACJ,OAAO,IAAyC,oBAAoB,KACpE,OAAO,IAAqC,gBAAgB;CAE9D,IAAI,CAAC,SACH,MAAM,IAAI,MACR,kFACF;CAGF,IAAI,CAAC,wBAAwB,KAAK,OAAO,KAAK,QAAQ,SAAS,IAAI,oBACjE,MAAM,IAAI,MACR,8JACF;CAGF,MAAM,YAAY,OAAO,KAAK,SAAS,KAAK;CAE5C,OAAO,OAAO,WAAW,UAAU,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC,CAAC,OAAO,KAAK;AAC9E"}

package/esm/encryption/password.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"password.d.mts","names":[],"sources":["../../../../../../../core/src/encryption/password.ts"],"mappings":";;AA6DA;;;;AAA6D;AAqB7D;;;;;;iBArBsB,YAAA,CAAa,QAAA,WAAmB,OAAO;;AAwBnD;;;;;;;iBAHY,cAAA,CACpB,aAAA,UACA,cAAA,WACC,OAAO"}
+{"version":3,"file":"password.d.mts","names":[],"sources":["../../../../../../../core/src/encryption/password.ts"],"mappings":";;AA6DA;;;;AAA6D;AAuB7D;;;;;;iBAvBsB,YAAA,CAAa,QAAA,WAAmB,OAAO;;AA0BnD;;;;;;;iBAHY,cAAA,CACpB,aAAA,UACA,cAAA,WACC,OAAO"}

package/esm/encryption/password.mjs

@@ -37,7 +37,7 @@ async function loadBcryptjs() {
 		isModuleExists = false;
 	}
 }
-loadBcryptjs();
+const bcryptjsLoading = loadBcryptjs();
 /**
 * Hashes a password using bcrypt (async — does not block the event loop).
 *
@@ -51,6 +51,7 @@ loadBcryptjs();
 * // Store \`hashed\` in the database
 */
 async function hashPassword(password) {
+	await bcryptjsLoading;
 	if (!isModuleExists) throw new Error(BCRYPTJS_INSTALL_INSTRUCTIONS);
 	const saltRounds = config.key("encryption.password.salt", DEFAULT_SALT_ROUNDS);
 	return Bcryptjs.hash(String(password), saltRounds);
@@ -64,6 +65,7 @@ async function hashPassword(password) {
 * const isValid = await verifyPassword("user-password-123", storedHash);
 */
 async function verifyPassword(plainPassword, hashedPassword) {
+	await bcryptjsLoading;
 	if (!isModuleExists) throw new Error(BCRYPTJS_INSTALL_INSTRUCTIONS);
 	return Bcryptjs.compare(String(plainPassword), String(hashedPassword));
 }

package/esm/encryption/password.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"password.mjs","names":[],"sources":["../../../../../../../core/src/encryption/password.ts"],"sourcesContent":["import { config } from \"../config\";\r\nimport { type EncryptionPasswordConfigurations } from \"./types\";\r\n\r\n/**\r\n * Default bcrypt salt rounds.\r\n */\r\nconst DEFAULT_SALT_ROUNDS = 12;\r\n\r\n// ============================================================\r\n// Lazy-loaded bcryptjs SDK Types\r\n// ============================================================\r\n\r\n/**\r\n * Cached bcryptjs module (loaded once, reused)\r\n */\r\nlet Bcryptjs: typeof import(\"bcryptjs\");\r\n\r\nlet isModuleExists: boolean | null = null;\r\n\r\n/**\r\n * Installation instructions for bcryptjs package\r\n */\r\nconst BCRYPTJS_INSTALL_INSTRUCTIONS = `\r\nPassword encryption requires the bcryptjs package.\r\nInstall it with:\r\n\r\n  yarn add bcryptjs\r\n\r\nOr with your preferred package manager:\r\n\r\n  npm install bcryptjs\r\n  pnpm add bcryptjs\r\n  yarn add bcryptjs\r\n`.trim();\r\n\r\n/**\r\n * Load bcryptjs module\r\n */\r\nasync function loadBcryptjs() {\r\n  try {\r\n    Bcryptjs = await import(\"bcryptjs\");\r\n    isModuleExists = true;\r\n  } catch {\r\n    isModuleExists = false;\r\n  }\r\n}\r\n\r\nloadBcryptjs();\r\n\r\n/**\r\n * Hashes a password using bcrypt (async — does not block the event loop).\r\n *\r\n * Salt rounds are read from \\`encryption.password.saltRounds\\` config,\r\n * defaulting to 12.\r\n *\r\n * @example\r\n * import { hashPassword } from \"@warlock.js/core\";\r\n *\r\n * const hashed = await hashPassword(\"user-password-123\");\r\n * // Store \\`hashed\\` in the database\r\n */\r\nexport async function hashPassword(password: string): Promise<string> {\r\n  if (!isModuleExists) {\r\n    throw new Error(BCRYPTJS_INSTALL_INSTRUCTIONS);\r\n  }\r\n\r\n  const saltRounds = config.key<EncryptionPasswordConfigurations[\"salt\"]>(\r\n    \"encryption.password.salt\",\r\n    DEFAULT_SALT_ROUNDS,\r\n  )!;\r\n\r\n  return Bcryptjs.hash(String(password), saltRounds);\r\n}\r\n\r\n/**\r\n * Verifies a plain password against a bcrypt hash (async — does not block the event loop).\r\n *\r\n * @example\r\n * import { verifyPassword } from \"@warlock.js/core\";\r\n *\r\n * const isValid = await verifyPassword(\"user-password-123\", storedHash);\r\n */\r\nexport async function verifyPassword(\r\n  plainPassword: string,\r\n  hashedPassword: string,\r\n): Promise<boolean> {\r\n  if (!isModuleExists) {\r\n    throw new Error(BCRYPTJS_INSTALL_INSTRUCTIONS);\r\n  }\r\n\r\n  return Bcryptjs.compare(String(plainPassword), String(hashedPassword));\r\n}\r\n"],"mappings":";;;;;;;AAMA,MAAM,sBAAsB;;;;AAS5B,IAAI;AAEJ,IAAI,iBAAiC;;;;AAKrC,MAAM,gCAAgC;;;;;;;;;;;EAWpC,KAAK;;;;AAKP,eAAe,eAAe;CAC5B,IAAI;EACF,WAAW,MAAM,OAAO;EACxB,iBAAiB;CACnB,QAAQ;EACN,iBAAiB;CACnB;AACF;AAEA,aAAa;;;;;;;;;;;;;AAcb,eAAsB,aAAa,UAAmC;CACpE,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,aAAa,OAAO,IACxB,4BACA,mBACF;CAEA,OAAO,SAAS,KAAK,OAAO,QAAQ,GAAG,UAAU;AACnD;;;;;;;;;AAUA,eAAsB,eACpB,eACA,gBACkB;CAClB,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,6BAA6B;CAG/C,OAAO,SAAS,QAAQ,OAAO,aAAa,GAAG,OAAO,cAAc,CAAC;AACvE"}
+{"version":3,"file":"password.mjs","names":[],"sources":["../../../../../../../core/src/encryption/password.ts"],"sourcesContent":["import { config } from \"../config\";\r\nimport { type EncryptionPasswordConfigurations } from \"./types\";\r\n\r\n/**\r\n * Default bcrypt salt rounds.\r\n */\r\nconst DEFAULT_SALT_ROUNDS = 12;\r\n\r\n// ============================================================\r\n// Lazy-loaded bcryptjs SDK Types\r\n// ============================================================\r\n\r\n/**\r\n * Cached bcryptjs module (loaded once, reused)\r\n */\r\nlet Bcryptjs: typeof import(\"bcryptjs\");\r\n\r\nlet isModuleExists: boolean | null = null;\r\n\r\n/**\r\n * Installation instructions for bcryptjs package\r\n */\r\nconst BCRYPTJS_INSTALL_INSTRUCTIONS = `\r\nPassword encryption requires the bcryptjs package.\r\nInstall it with:\r\n\r\n  yarn add bcryptjs\r\n\r\nOr with your preferred package manager:\r\n\r\n  npm install bcryptjs\r\n  pnpm add bcryptjs\r\n  yarn add bcryptjs\r\n`.trim();\r\n\r\n/**\r\n * Load bcryptjs module\r\n */\r\nasync function loadBcryptjs() {\r\n  try {\r\n    Bcryptjs = await import(\"bcryptjs\");\r\n    isModuleExists = true;\r\n  } catch {\r\n    isModuleExists = false;\r\n  }\r\n}\r\n\r\nconst bcryptjsLoading = loadBcryptjs();\r\n\r\n/**\r\n * Hashes a password using bcrypt (async — does not block the event loop).\r\n *\r\n * Salt rounds are read from \\`encryption.password.saltRounds\\` config,\r\n * defaulting to 12.\r\n *\r\n * @example\r\n * import { hashPassword } from \"@warlock.js/core\";\r\n *\r\n * const hashed = await hashPassword(\"user-password-123\");\r\n * // Store \\`hashed\\` in the database\r\n */\r\nexport async function hashPassword(password: string): Promise<string> {\r\n  await bcryptjsLoading;\r\n\r\n  if (!isModuleExists) {\r\n    throw new Error(BCRYPTJS_INSTALL_INSTRUCTIONS);\r\n  }\r\n\r\n  const saltRounds = config.key<EncryptionPasswordConfigurations[\"salt\"]>(\r\n    \"encryption.password.salt\",\r\n    DEFAULT_SALT_ROUNDS,\r\n  )!;\r\n\r\n  return Bcryptjs.hash(String(password), saltRounds);\r\n}\r\n\r\n/**\r\n * Verifies a plain password against a bcrypt hash (async — does not block the event loop).\r\n *\r\n * @example\r\n * import { verifyPassword } from \"@warlock.js/core\";\r\n *\r\n * const isValid = await verifyPassword(\"user-password-123\", storedHash);\r\n */\r\nexport async function verifyPassword(\r\n  plainPassword: string,\r\n  hashedPassword: string,\r\n): Promise<boolean> {\r\n  await bcryptjsLoading;\r\n\r\n  if (!isModuleExists) {\r\n    throw new Error(BCRYPTJS_INSTALL_INSTRUCTIONS);\r\n  }\r\n\r\n  return Bcryptjs.compare(String(plainPassword), String(hashedPassword));\r\n}\r\n"],"mappings":";;;;;;;AAMA,MAAM,sBAAsB;;;;AAS5B,IAAI;AAEJ,IAAI,iBAAiC;;;;AAKrC,MAAM,gCAAgC;;;;;;;;;;;EAWpC,KAAK;;;;AAKP,eAAe,eAAe;CAC5B,IAAI;EACF,WAAW,MAAM,OAAO;EACxB,iBAAiB;CACnB,QAAQ;EACN,iBAAiB;CACnB;AACF;AAEA,MAAM,kBAAkB,aAAa;;;;;;;;;;;;;AAcrC,eAAsB,aAAa,UAAmC;CACpE,MAAM;CAEN,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,6BAA6B;CAG/C,MAAM,aAAa,OAAO,IACxB,4BACA,mBACF;CAEA,OAAO,SAAS,KAAK,OAAO,QAAQ,GAAG,UAAU;AACnD;;;;;;;;;AAUA,eAAsB,eACpB,eACA,gBACkB;CAClB,MAAM;CAEN,IAAI,CAAC,gBACH,MAAM,IAAI,MAAM,6BAA6B;CAG/C,OAAO,SAAS,QAAQ,OAAO,aAAa,GAAG,OAAO,cAAc,CAAC;AACvE"}