@warlock.js/core 5.30.0 → 5.31.0

package/esm/openapi/schema-registry.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"schema-registry.mjs","names":[],"sources":["../../../../../../../../packages/core/src/openapi/schema-registry.ts"],"sourcesContent":["import { isLazy } from \"@mongez/reinforcements\";\nimport { isNullableResource } from \"../resource/nullable-resource\";\nimport { castToJsonSchema } from \"./cast-schema\";\nimport type { OpenApiSchema, WarningSink } from \"./types\";\n\ntype ResourceFieldContext = {\n  /** `$ref` schema of the resource whose field is being mapped, the target of `\"self\"`. */\n  ownerRef: OpenApiSchema;\n  /** Display name used in warnings, for example `UserResource.avatar`. */\n  path: string;\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction sanitizeName(name: string): string {\n  return name.replace(/[^A-Za-z0-9._-]/g, \"\");\n}\n\n/**\n * Owns `components.schemas`: names resource classes (by identity), builds their schemas once\n * and hands out `$ref`s, so nested, lazy and `\"self\"` references recurse without unrolling.\n */\nexport class SchemaRegistry {\n  public readonly schemas: Record<string, OpenApiSchema> = {};\n\n  private readonly resourceNames = new Map<unknown, string>();\n  private readonly sharedNames = new Map<string, string>();\n  private fallbackCounter = 0;\n\n  public constructor(\n    private readonly resolveName: ((resource: unknown) => string | undefined) | undefined,\n    private readonly warn: WarningSink,\n  ) {}\n\n  /**\n   * Register a fixed schema (an error shape shared by many operations) under a stable key.\n   * Returns its `$ref`; the component name gets a numeric suffix only if a resource took it.\n   */\n  public shared(key: string, schema: OpenApiSchema): OpenApiSchema {\n    let name = this.sharedNames.get(key);\n\n    if (!name) {\n      name = this.claim(key);\n      this.sharedNames.set(key, name);\n      this.schemas[name] = schema;\n    }\n\n    return { $ref: `#/components/schemas/${name}` };\n  }\n\n  /**\n   * `$ref` to a resource class, building its component on first use.\n   */\n  public resourceRef(resource: unknown): OpenApiSchema {\n    const existing = this.resourceNames.get(resource);\n\n    if (existing) {\n      return { $ref: `#/components/schemas/${existing}` };\n    }\n\n    const name = this.claim(this.nameFor(resource));\n    const ref = { $ref: `#/components/schemas/${name}` };\n\n    // Named before its fields are mapped, so a cycle resolves to this same ref.\n    this.resourceNames.set(resource, name);\n    this.schemas[name] = {};\n    this.schemas[name] = this.buildResourceSchema(resource, name, ref);\n\n    return ref;\n  }\n\n  /**\n   * Schema of a cast string, or `{}` and a warning for an unknown cast.\n   */\n  public cast(cast: string, path: string, warn: WarningSink = this.warn): OpenApiSchema {\n    const schema = castToJsonSchema(cast);\n\n    if (!schema) {\n      warn(`${path}: unknown cast \"${cast}\" is documented as {}.`);\n\n      return {};\n    }\n\n    return schema;\n  }\n\n  /**\n   * True when the function looks like a resource class: it carries a static `schema` object.\n   */\n  public isResourceClass(value: unknown): boolean {\n    return typeof value === \"function\" && isRecord(Reflect.get(value, \"schema\"));\n  }\n\n  private nameFor(resource: unknown): string {\n    const resolved = sanitizeName(this.resolveName?.(resource) ?? \"\");\n\n    if (resolved && resolved !== \"default\") {\n      return resolved;\n    }\n\n    const className = typeof resource === \"function\" ? sanitizeName(resource.name) : \"\";\n\n    if (className && className !== \"default\") {\n      return className;\n    }\n\n    return `Resource${++this.fallbackCounter}`;\n  }\n\n  private claim(base: string): string {\n    if (!(base in this.schemas)) {\n      return base;\n    }\n\n    let suffix = 2;\n\n    while (`${base}${suffix}` in this.schemas) {\n      suffix++;\n    }\n\n    return `${base}${suffix}`;\n  }\n\n  private buildResourceSchema(resource: unknown, name: string, ref: OpenApiSchema): OpenApiSchema {\n    const schema = Reflect.get(resource as object, \"schema\");\n\n    if (!isRecord(schema) || Object.keys(schema).length === 0) {\n      this.warn(`Resource \"${name}\" declares no static schema and is documented as {}.`);\n\n      return {};\n    }\n\n    const properties: Record<string, OpenApiSchema> = {};\n\n    for (const [key, config] of Object.entries(schema)) {\n      properties[key] = this.fieldSchema(config, { ownerRef: ref, path: `${name}.${key}` });\n    }\n\n    return { type: \"object\", properties, required: Object.keys(properties) };\n  }\n\n  private fieldSchema(config: unknown, context: ResourceFieldContext): OpenApiSchema {\n    if (config === \"self\") {\n      return context.ownerRef;\n    }\n\n    if (config === \"self[]\") {\n      return { type: \"array\", items: context.ownerRef };\n    }\n\n    if (typeof config === \"string\") {\n      return this.cast(config, context.path);\n    }\n\n    if (isNullableResource(config)) {\n      return { oneOf: [this.fieldSchema(config.resource, context), { type: \"null\" }] };\n    }\n\n    if (isLazy(config)) {\n      return this.lazyFieldSchema(config, context);\n    }\n\n    if (Array.isArray(config) && config.length === 1) {\n      return { type: \"array\", items: this.fieldSchema(config[0], context) };\n    }\n\n    if (Array.isArray(config) && config.length === 2 && typeof config[1] === \"string\") {\n      return this.cast(config[1], context.path);\n    }\n\n    if (typeof config === \"function\") {\n      if (this.isResourceClass(config)) {\n        return this.resourceRef(config);\n      }\n\n      this.warn(`${context.path}: a resolver function has no static shape and is documented as {}.`);\n\n      return {};\n    }\n\n    if (isRecord(config) && config.__type === \"arrayOf\" && isRecord(config.schema)) {\n      const properties: Record<string, OpenApiSchema> = {};\n\n      for (const [key, item] of Object.entries(config.schema)) {\n        properties[key] = this.fieldSchema(item, { ...context, path: `${context.path}.${key}` });\n      }\n\n      return {\n        type: \"array\",\n        items: { type: \"object\", properties, required: Object.keys(properties) },\n      };\n    }\n\n    this.warn(\n      `${context.path}: a field builder has no static shape and is documented as {}. Declare it with a cast string to document it.`,\n    );\n\n    return {};\n  }\n\n  private lazyFieldSchema(lazy: { resolve(): unknown }, context: ResourceFieldContext): OpenApiSchema {\n    let resolved: unknown;\n\n    try {\n      resolved = lazy.resolve();\n    } catch (error) {\n      this.warn(\n        `${context.path}: a lazy resource reference could not be resolved (${\n          error instanceof Error ? error.message : String(error)\n        }) and is documented as {}.`,\n      );\n\n      return {};\n    }\n\n    return this.fieldSchema(resolved, context);\n  }\n}\n"],"mappings":";;;;;AAYA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,aAAa,MAAsB;CAC1C,OAAO,KAAK,QAAQ,oBAAoB,EAAE;AAC5C;;;;;AAMA,IAAa,iBAAb,MAA4B;CAO1B,AAAO,YACL,AAAiB,aACjB,AAAiB,MACjB;EAFiB;EACA;iBARsC,CAAC;uCAEzB,IAAI,IAAqB;qCAC3B,IAAI,IAAoB;yBAC7B;CAKvB;;;;;CAMH,AAAO,OAAO,KAAa,QAAsC;EAC/D,IAAI,OAAO,KAAK,YAAY,IAAI,GAAG;EAEnC,IAAI,CAAC,MAAM;GACT,OAAO,KAAK,MAAM,GAAG;GACrB,KAAK,YAAY,IAAI,KAAK,IAAI;GAC9B,KAAK,QAAQ,QAAQ;EACvB;EAEA,OAAO,EAAE,MAAM,wBAAwB,OAAO;CAChD;;;;CAKA,AAAO,YAAY,UAAkC;EACnD,MAAM,WAAW,KAAK,cAAc,IAAI,QAAQ;EAEhD,IAAI,UACF,OAAO,EAAE,MAAM,wBAAwB,WAAW;EAGpD,MAAM,OAAO,KAAK,MAAM,KAAK,QAAQ,QAAQ,CAAC;EAC9C,MAAM,MAAM,EAAE,MAAM,wBAAwB,OAAO;EAGnD,KAAK,cAAc,IAAI,UAAU,IAAI;EACrC,KAAK,QAAQ,QAAQ,CAAC;EACtB,KAAK,QAAQ,QAAQ,KAAK,oBAAoB,UAAU,MAAM,GAAG;EAEjE,OAAO;CACT;;;;CAKA,AAAO,KAAK,MAAc,MAAc,OAAoB,KAAK,MAAqB;EACpF,MAAM,SAAS,iBAAiB,IAAI;EAEpC,IAAI,CAAC,QAAQ;GACX,KAAK,GAAG,KAAK,kBAAkB,KAAK,uBAAuB;GAE3D,OAAO,CAAC;EACV;EAEA,OAAO;CACT;;;;CAKA,AAAO,gBAAgB,OAAyB;EAC9C,OAAO,OAAO,UAAU,cAAc,SAAS,QAAQ,IAAI,OAAO,QAAQ,CAAC;CAC7E;CAEA,AAAQ,QAAQ,UAA2B;EACzC,MAAM,WAAW,aAAa,KAAK,cAAc,QAAQ,KAAK,EAAE;EAEhE,IAAI,YAAY,aAAa,WAC3B,OAAO;EAGT,MAAM,YAAY,OAAO,aAAa,aAAa,aAAa,SAAS,IAAI,IAAI;EAEjF,IAAI,aAAa,cAAc,WAC7B,OAAO;EAGT,OAAO,WAAW,EAAE,KAAK;CAC3B;CAEA,AAAQ,MAAM,MAAsB;EAClC,IAAI,EAAE,QAAQ,KAAK,UACjB,OAAO;EAGT,IAAI,SAAS;EAEb,OAAO,GAAG,OAAO,YAAY,KAAK,SAChC;EAGF,OAAO,GAAG,OAAO;CACnB;CAEA,AAAQ,oBAAoB,UAAmB,MAAc,KAAmC;EAC9F,MAAM,SAAS,QAAQ,IAAI,UAAoB,QAAQ;EAEvD,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,KAAK,MAAM,CAAC,CAAC,WAAW,GAAG;GACzD,KAAK,KAAK,aAAa,KAAK,qDAAqD;GAEjF,OAAO,CAAC;EACV;EAEA,MAAM,aAA4C,CAAC;EAEnD,KAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,MAAM,GAC/C,WAAW,OAAO,KAAK,YAAY,QAAQ;GAAE,UAAU;GAAK,MAAM,GAAG,KAAK,GAAG;EAAM,CAAC;EAGtF,OAAO;GAAE,MAAM;GAAU;GAAY,UAAU,OAAO,KAAK,UAAU;EAAE;CACzE;CAEA,AAAQ,YAAY,QAAiB,SAA8C;EACjF,IAAI,WAAW,QACb,OAAO,QAAQ;EAGjB,IAAI,WAAW,UACb,OAAO;GAAE,MAAM;GAAS,OAAO,QAAQ;EAAS;EAGlD,IAAI,OAAO,WAAW,UACpB,OAAO,KAAK,KAAK,QAAQ,QAAQ,IAAI;EAGvC,IAAI,mBAAmB,MAAM,GAC3B,OAAO,EAAE,OAAO,CAAC,KAAK,YAAY,OAAO,UAAU,OAAO,GAAG,EAAE,MAAM,OAAO,CAAC,EAAE;EAGjF,IAAI,OAAO,MAAM,GACf,OAAO,KAAK,gBAAgB,QAAQ,OAAO;EAG7C,IAAI,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAC7C,OAAO;GAAE,MAAM;GAAS,OAAO,KAAK,YAAY,OAAO,IAAI,OAAO;EAAE;EAGtE,IAAI,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,KAAK,OAAO,OAAO,OAAO,UACvE,OAAO,KAAK,KAAK,OAAO,IAAI,QAAQ,IAAI;EAG1C,IAAI,OAAO,WAAW,YAAY;GAChC,IAAI,KAAK,gBAAgB,MAAM,GAC7B,OAAO,KAAK,YAAY,MAAM;GAGhC,KAAK,KAAK,GAAG,QAAQ,KAAK,mEAAmE;GAE7F,OAAO,CAAC;EACV;EAEA,IAAI,SAAS,MAAM,KAAK,OAAO,WAAW,aAAa,SAAS,OAAO,MAAM,GAAG;GAC9E,MAAM,aAA4C,CAAC;GAEnD,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,OAAO,MAAM,GACpD,WAAW,OAAO,KAAK,YAAY,MAAM;IAAE,GAAG;IAAS,MAAM,GAAG,QAAQ,KAAK,GAAG;GAAM,CAAC;GAGzF,OAAO;IACL,MAAM;IACN,OAAO;KAAE,MAAM;KAAU;KAAY,UAAU,OAAO,KAAK,UAAU;IAAE;GACzE;EACF;EAEA,KAAK,KACH,GAAG,QAAQ,KAAK,6GAClB;EAEA,OAAO,CAAC;CACV;CAEA,AAAQ,gBAAgB,MAA8B,SAA8C;EAClG,IAAI;EAEJ,IAAI;GACF,WAAW,KAAK,QAAQ;EAC1B,SAAS,OAAO;GACd,KAAK,KACH,GAAG,QAAQ,KAAK,qDACd,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EACtD,2BACH;GAEA,OAAO,CAAC;EACV;EAEA,OAAO,KAAK,YAAY,UAAU,OAAO;CAC3C;AACF"}
+{"version":3,"file":"schema-registry.mjs","names":[],"sources":["../../../../../../../../packages/core/src/openapi/schema-registry.ts"],"sourcesContent":["import { isLazy } from \"@mongez/reinforcements\";\nimport { isNullableResource } from \"../resource/nullable-resource\";\nimport { castToJsonSchema } from \"./cast-schema\";\nimport type { OpenApiSchema, WarningSink } from \"./types\";\n\ntype ResourceFieldContext = {\n  /** `$ref` schema of the resource whose field is being mapped, the target of `\"self\"`. */\n  ownerRef: OpenApiSchema;\n  /** Display name used in warnings, for example `UserResource.avatar`. */\n  path: string;\n};\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction sanitizeName(name: string): string {\n  return name.replace(/[^A-Za-z0-9._-]/g, \"\");\n}\n\n/**\n * Owns `components.schemas`: names resource classes (by identity), builds their schemas once\n * and hands out `$ref`s, so nested, lazy and `\"self\"` references recurse without unrolling.\n */\nexport class SchemaRegistry {\n  public readonly schemas: Record<string, OpenApiSchema> = {};\n\n  private readonly resourceNames = new Map<unknown, string>();\n  private readonly sharedNames = new Map<string, string>();\n  private fallbackCounter = 0;\n\n  public constructor(\n    private readonly resolveName: ((resource: unknown) => string | undefined) | undefined,\n    private readonly warn: WarningSink,\n  ) {}\n\n  /**\n   * Register a fixed schema (an error shape shared by many operations) under a stable key.\n   * Returns its `$ref`; the component name gets a numeric suffix only if a resource took it.\n   */\n  public shared(key: string, schema: OpenApiSchema): OpenApiSchema {\n    let name = this.sharedNames.get(key);\n\n    if (!name) {\n      name = this.claim(key);\n      this.sharedNames.set(key, name);\n      this.schemas[name] = schema;\n    }\n\n    return { $ref: `#/components/schemas/${name}` };\n  }\n\n  /**\n   * `$ref` to a resource class, building its component on first use.\n   */\n  public resourceRef(resource: unknown): OpenApiSchema {\n    const existing = this.resourceNames.get(resource);\n\n    if (existing) {\n      return { $ref: `#/components/schemas/${existing}` };\n    }\n\n    const name = this.claim(this.nameFor(resource));\n    const ref = { $ref: `#/components/schemas/${name}` };\n\n    // Named before its fields are mapped, so a cycle resolves to this same ref.\n    this.resourceNames.set(resource, name);\n    this.schemas[name] = {};\n    this.schemas[name] = this.buildResourceSchema(resource, name, ref);\n\n    return ref;\n  }\n\n  /**\n   * Schema of a cast string, or `{}` and a warning for an unknown cast.\n   */\n  public cast(cast: string, path: string, warn: WarningSink = this.warn): OpenApiSchema {\n    const schema = castToJsonSchema(cast);\n\n    if (!schema) {\n      warn(`${path}: unknown cast \"${cast}\" is documented as {}.`);\n\n      return {};\n    }\n\n    return schema;\n  }\n\n  /**\n   * True when the function looks like a resource class: it carries a static `schema` object.\n   */\n  public isResourceClass(value: unknown): boolean {\n    return typeof value === \"function\" && isRecord(Reflect.get(value, \"schema\"));\n  }\n\n  private nameFor(resource: unknown): string {\n    const resolved = sanitizeName(this.resolveName?.(resource) ?? \"\");\n\n    if (resolved && resolved !== \"default\") {\n      return resolved;\n    }\n\n    const className = typeof resource === \"function\" ? sanitizeName(resource.name) : \"\";\n\n    if (className && className !== \"default\") {\n      return className;\n    }\n\n    return `Resource${++this.fallbackCounter}`;\n  }\n\n  private claim(base: string): string {\n    if (!(base in this.schemas)) {\n      return base;\n    }\n\n    let suffix = 2;\n\n    while (`${base}${suffix}` in this.schemas) {\n      suffix++;\n    }\n\n    return `${base}${suffix}`;\n  }\n\n  private buildResourceSchema(resource: unknown, name: string, ref: OpenApiSchema): OpenApiSchema {\n    const schema = Reflect.get(resource as object, \"schema\");\n\n    if (!isRecord(schema) || Object.keys(schema).length === 0) {\n      this.warn(`Resource \"${name}\" declares no static schema and is documented as {}.`);\n\n      return {};\n    }\n\n    const properties: Record<string, OpenApiSchema> = {};\n\n    for (const [key, config] of Object.entries(schema)) {\n      properties[key] = this.fieldSchema(config, { ownerRef: ref, path: `${name}.${key}` });\n    }\n\n    return { type: \"object\", properties, required: Object.keys(properties) };\n  }\n\n  private fieldSchema(config: unknown, context: ResourceFieldContext): OpenApiSchema {\n    if (config === \"self\") {\n      return context.ownerRef;\n    }\n\n    if (config === \"self[]\") {\n      return { type: \"array\", items: context.ownerRef };\n    }\n\n    if (typeof config === \"string\") {\n      return this.cast(config, context.path);\n    }\n\n    if (isNullableResource(config)) {\n      return { oneOf: [this.fieldSchema(config.resource, context), { type: \"null\" }] };\n    }\n\n    if (isLazy(config)) {\n      return this.lazyFieldSchema(config, context);\n    }\n\n    if (Array.isArray(config) && config.length === 1) {\n      return { type: \"array\", items: this.fieldSchema(config[0], context) };\n    }\n\n    if (Array.isArray(config) && config.length === 2 && typeof config[1] === \"string\") {\n      return this.cast(config[1], context.path);\n    }\n\n    if (typeof config === \"function\") {\n      if (this.isResourceClass(config)) {\n        return this.resourceRef(config);\n      }\n\n      this.warn(\n        `${context.path}: a resolver function has no static shape and is documented as {}.`,\n      );\n\n      return {};\n    }\n\n    if (isRecord(config) && config.__type === \"arrayOf\" && isRecord(config.schema)) {\n      const properties: Record<string, OpenApiSchema> = {};\n\n      for (const [key, item] of Object.entries(config.schema)) {\n        properties[key] = this.fieldSchema(item, { ...context, path: `${context.path}.${key}` });\n      }\n\n      return {\n        type: \"array\",\n        items: { type: \"object\", properties, required: Object.keys(properties) },\n      };\n    }\n\n    this.warn(\n      `${context.path}: a field builder has no static shape and is documented as {}. Declare it with a cast string to document it.`,\n    );\n\n    return {};\n  }\n\n  private lazyFieldSchema(\n    lazy: { resolve(): unknown },\n    context: ResourceFieldContext,\n  ): OpenApiSchema {\n    let resolved: unknown;\n\n    try {\n      resolved = lazy.resolve();\n    } catch (error) {\n      this.warn(\n        `${context.path}: a lazy resource reference could not be resolved (${\n          error instanceof Error ? error.message : String(error)\n        }) and is documented as {}.`,\n      );\n\n      return {};\n    }\n\n    return this.fieldSchema(resolved, context);\n  }\n}\n"],"mappings":";;;;;AAYA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,aAAa,MAAsB;CAC1C,OAAO,KAAK,QAAQ,oBAAoB,EAAE;AAC5C;;;;;AAMA,IAAa,iBAAb,MAA4B;CAO1B,AAAO,YACL,AAAiB,aACjB,AAAiB,MACjB;EAFiB;EACA;iBARsC,CAAC;uCAEzB,IAAI,IAAqB;qCAC3B,IAAI,IAAoB;yBAC7B;CAKvB;;;;;CAMH,AAAO,OAAO,KAAa,QAAsC;EAC/D,IAAI,OAAO,KAAK,YAAY,IAAI,GAAG;EAEnC,IAAI,CAAC,MAAM;GACT,OAAO,KAAK,MAAM,GAAG;GACrB,KAAK,YAAY,IAAI,KAAK,IAAI;GAC9B,KAAK,QAAQ,QAAQ;EACvB;EAEA,OAAO,EAAE,MAAM,wBAAwB,OAAO;CAChD;;;;CAKA,AAAO,YAAY,UAAkC;EACnD,MAAM,WAAW,KAAK,cAAc,IAAI,QAAQ;EAEhD,IAAI,UACF,OAAO,EAAE,MAAM,wBAAwB,WAAW;EAGpD,MAAM,OAAO,KAAK,MAAM,KAAK,QAAQ,QAAQ,CAAC;EAC9C,MAAM,MAAM,EAAE,MAAM,wBAAwB,OAAO;EAGnD,KAAK,cAAc,IAAI,UAAU,IAAI;EACrC,KAAK,QAAQ,QAAQ,CAAC;EACtB,KAAK,QAAQ,QAAQ,KAAK,oBAAoB,UAAU,MAAM,GAAG;EAEjE,OAAO;CACT;;;;CAKA,AAAO,KAAK,MAAc,MAAc,OAAoB,KAAK,MAAqB;EACpF,MAAM,SAAS,iBAAiB,IAAI;EAEpC,IAAI,CAAC,QAAQ;GACX,KAAK,GAAG,KAAK,kBAAkB,KAAK,uBAAuB;GAE3D,OAAO,CAAC;EACV;EAEA,OAAO;CACT;;;;CAKA,AAAO,gBAAgB,OAAyB;EAC9C,OAAO,OAAO,UAAU,cAAc,SAAS,QAAQ,IAAI,OAAO,QAAQ,CAAC;CAC7E;CAEA,AAAQ,QAAQ,UAA2B;EACzC,MAAM,WAAW,aAAa,KAAK,cAAc,QAAQ,KAAK,EAAE;EAEhE,IAAI,YAAY,aAAa,WAC3B,OAAO;EAGT,MAAM,YAAY,OAAO,aAAa,aAAa,aAAa,SAAS,IAAI,IAAI;EAEjF,IAAI,aAAa,cAAc,WAC7B,OAAO;EAGT,OAAO,WAAW,EAAE,KAAK;CAC3B;CAEA,AAAQ,MAAM,MAAsB;EAClC,IAAI,EAAE,QAAQ,KAAK,UACjB,OAAO;EAGT,IAAI,SAAS;EAEb,OAAO,GAAG,OAAO,YAAY,KAAK,SAChC;EAGF,OAAO,GAAG,OAAO;CACnB;CAEA,AAAQ,oBAAoB,UAAmB,MAAc,KAAmC;EAC9F,MAAM,SAAS,QAAQ,IAAI,UAAoB,QAAQ;EAEvD,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,KAAK,MAAM,CAAC,CAAC,WAAW,GAAG;GACzD,KAAK,KAAK,aAAa,KAAK,qDAAqD;GAEjF,OAAO,CAAC;EACV;EAEA,MAAM,aAA4C,CAAC;EAEnD,KAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,MAAM,GAC/C,WAAW,OAAO,KAAK,YAAY,QAAQ;GAAE,UAAU;GAAK,MAAM,GAAG,KAAK,GAAG;EAAM,CAAC;EAGtF,OAAO;GAAE,MAAM;GAAU;GAAY,UAAU,OAAO,KAAK,UAAU;EAAE;CACzE;CAEA,AAAQ,YAAY,QAAiB,SAA8C;EACjF,IAAI,WAAW,QACb,OAAO,QAAQ;EAGjB,IAAI,WAAW,UACb,OAAO;GAAE,MAAM;GAAS,OAAO,QAAQ;EAAS;EAGlD,IAAI,OAAO,WAAW,UACpB,OAAO,KAAK,KAAK,QAAQ,QAAQ,IAAI;EAGvC,IAAI,mBAAmB,MAAM,GAC3B,OAAO,EAAE,OAAO,CAAC,KAAK,YAAY,OAAO,UAAU,OAAO,GAAG,EAAE,MAAM,OAAO,CAAC,EAAE;EAGjF,IAAI,OAAO,MAAM,GACf,OAAO,KAAK,gBAAgB,QAAQ,OAAO;EAG7C,IAAI,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,GAC7C,OAAO;GAAE,MAAM;GAAS,OAAO,KAAK,YAAY,OAAO,IAAI,OAAO;EAAE;EAGtE,IAAI,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,KAAK,OAAO,OAAO,OAAO,UACvE,OAAO,KAAK,KAAK,OAAO,IAAI,QAAQ,IAAI;EAG1C,IAAI,OAAO,WAAW,YAAY;GAChC,IAAI,KAAK,gBAAgB,MAAM,GAC7B,OAAO,KAAK,YAAY,MAAM;GAGhC,KAAK,KACH,GAAG,QAAQ,KAAK,mEAClB;GAEA,OAAO,CAAC;EACV;EAEA,IAAI,SAAS,MAAM,KAAK,OAAO,WAAW,aAAa,SAAS,OAAO,MAAM,GAAG;GAC9E,MAAM,aAA4C,CAAC;GAEnD,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,OAAO,MAAM,GACpD,WAAW,OAAO,KAAK,YAAY,MAAM;IAAE,GAAG;IAAS,MAAM,GAAG,QAAQ,KAAK,GAAG;GAAM,CAAC;GAGzF,OAAO;IACL,MAAM;IACN,OAAO;KAAE,MAAM;KAAU;KAAY,UAAU,OAAO,KAAK,UAAU;IAAE;GACzE;EACF;EAEA,KAAK,KACH,GAAG,QAAQ,KAAK,6GAClB;EAEA,OAAO,CAAC;CACV;CAEA,AAAQ,gBACN,MACA,SACe;EACf,IAAI;EAEJ,IAAI;GACF,WAAW,KAAK,QAAQ;EAC1B,SAAS,OAAO;GACd,KAAK,KACH,GAAG,QAAQ,KAAK,qDACd,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EACtD,2BACH;GAEA,OAAO,CAAC;EACV;EAEA,OAAO,KAAK,YAAY,UAAU,OAAO;CAC3C;AACF"}

package/esm/openapi/security.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"security.mjs","names":[],"sources":["../../../../../../../../packages/core/src/openapi/security.ts"],"sourcesContent":["import type { AuthDescriptor, OpenApiSecurityRequirement, OpenApiSecurityScheme, WarningSink } from \"./types\";\n\n/**\n * The marker `authMiddleware()` attaches to the middleware it returns.\n * Core reads it structurally; it never imports the auth package.\n */\nexport const AUTH_DESCRIPTOR_SYMBOL = Symbol.for(\"warlock.auth\");\n\nfunction isAuthSource(value: unknown): value is AuthDescriptor[\"sources\"][number] {\n  if (value === \"header\") {\n    return true;\n  }\n\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    typeof (value as { cookie?: unknown }).cookie === \"string\" &&\n    (value as { cookie: string }).cookie.length > 0\n  );\n}\n\n/**\n * Validate an auth descriptor. Returns `undefined` for anything that is not\n * `{ sources: (\"header\" | { cookie: string })[], userTypes?: string[] }` with at least one source.\n */\nexport function parseAuthDescriptor(value: unknown): AuthDescriptor | undefined {\n  if (typeof value !== \"object\" || value === null) {\n    return undefined;\n  }\n\n  const { sources, userTypes } = value as { sources?: unknown; userTypes?: unknown };\n\n  if (!Array.isArray(sources) || sources.length === 0 || !sources.every(isAuthSource)) {\n    return undefined;\n  }\n\n  if (userTypes !== undefined && !(Array.isArray(userTypes) && userTypes.every((type) => typeof type === \"string\"))) {\n    return undefined;\n  }\n\n  return { sources: [...sources], userTypes: Array.isArray(userTypes) ? [...userTypes] : [] };\n}\n\n/**\n * Combine the descriptors of every guard on a route (group middleware is already merged into\n * the route): unique sources, union of user types.\n *\n * Middleware without a descriptor is ordinary middleware and is ignored silently. A function\n * that carries a descriptor of the wrong shape is reported through `warn`.\n *\n * @returns `undefined` when the route has no valid auth descriptor.\n */\nexport function readRouteAuth(middleware: unknown, warn: WarningSink): AuthDescriptor | undefined {\n  if (!Array.isArray(middleware)) {\n    return undefined;\n  }\n\n  const sources: AuthDescriptor[\"sources\"] = [];\n  const userTypes: string[] = [];\n  let found = false;\n\n  for (const fn of middleware) {\n    if (typeof fn !== \"function\") {\n      continue;\n    }\n\n    const raw = Reflect.get(fn, AUTH_DESCRIPTOR_SYMBOL);\n\n    if (raw === undefined) {\n      continue;\n    }\n\n    const descriptor = parseAuthDescriptor(raw);\n\n    if (!descriptor) {\n      warn(\"a middleware carries a malformed warlock.auth descriptor; the route is documented without security.\");\n\n      continue;\n    }\n\n    found = true;\n\n    for (const source of descriptor.sources) {\n      const duplicate = sources.some((existing) =>\n        typeof existing === \"string\" || typeof source === \"string\"\n          ? existing === source\n          : existing.cookie === source.cookie,\n      );\n\n      if (!duplicate) {\n        sources.push(source);\n      }\n    }\n\n    for (const type of descriptor.userTypes) {\n      if (!userTypes.includes(type)) {\n        userTypes.push(type);\n      }\n    }\n  }\n\n  return found ? { sources, userTypes } : undefined;\n}\n\n/**\n * Collects the security schemes the routes actually use and turns descriptors into\n * per-operation requirements. A dual header + cookie guard is an OR: one requirement each.\n */\nexport class SecuritySchemes {\n  public readonly schemes: Record<string, OpenApiSecurityScheme> = {};\n\n  private readonly cookieSchemeNames = new Map<string, string>();\n\n  public requirementsFor(descriptor: AuthDescriptor): OpenApiSecurityRequirement[] {\n    return descriptor.sources.map((source) => {\n      if (source === \"header\") {\n        this.schemes.bearerAuth = { type: \"http\", scheme: \"bearer\", bearerFormat: \"JWT\" };\n\n        return { bearerAuth: [] };\n      }\n\n      const name = this.cookieScheme(source.cookie);\n\n      return { [name]: [] };\n    });\n  }\n\n  private cookieScheme(cookie: string): string {\n    const existing = this.cookieSchemeNames.get(cookie);\n\n    if (existing) {\n      return existing;\n    }\n\n    // The first cookie keeps the conventional name; a second, different cookie gets its own.\n    const name =\n      this.cookieSchemeNames.size === 0 ? \"cookieAuth\" : `cookieAuth_${cookie.replace(/[^A-Za-z0-9._-]/g, \"\")}`;\n\n    this.cookieSchemeNames.set(cookie, name);\n    this.schemes[name] = { type: \"apiKey\", in: \"cookie\", name: cookie };\n\n    return name;\n  }\n\n  public hasSchemes(): boolean {\n    return Object.keys(this.schemes).length > 0;\n  }\n}\n"],"mappings":";;;;;AAMA,MAAa,yBAAyB,OAAO,IAAI,cAAc;AAE/D,SAAS,aAAa,OAA4D;CAChF,IAAI,UAAU,UACZ,OAAO;CAGT,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAA+B,WAAW,YACjD,MAA6B,OAAO,SAAS;AAElD;;;;;AAMA,SAAgB,oBAAoB,OAA4C;CAC9E,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC;CAGF,MAAM,EAAE,SAAS,cAAc;CAE/B,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC,QAAQ,MAAM,YAAY,GAChF;CAGF,IAAI,cAAc,UAAa,EAAE,MAAM,QAAQ,SAAS,KAAK,UAAU,OAAO,SAAS,OAAO,SAAS,QAAQ,IAC7G;CAGF,OAAO;EAAE,SAAS,CAAC,GAAG,OAAO;EAAG,WAAW,MAAM,QAAQ,SAAS,IAAI,CAAC,GAAG,SAAS,IAAI,CAAC;CAAE;AAC5F;;;;;;;;;;AAWA,SAAgB,cAAc,YAAqB,MAA+C;CAChG,IAAI,CAAC,MAAM,QAAQ,UAAU,GAC3B;CAGF,MAAM,UAAqC,CAAC;CAC5C,MAAM,YAAsB,CAAC;CAC7B,IAAI,QAAQ;CAEZ,KAAK,MAAM,MAAM,YAAY;EAC3B,IAAI,OAAO,OAAO,YAChB;EAGF,MAAM,MAAM,QAAQ,IAAI,IAAI,sBAAsB;EAElD,IAAI,QAAQ,QACV;EAGF,MAAM,aAAa,oBAAoB,GAAG;EAE1C,IAAI,CAAC,YAAY;GACf,KAAK,qGAAqG;GAE1G;EACF;EAEA,QAAQ;EAER,KAAK,MAAM,UAAU,WAAW,SAO9B,IAAI,CANc,QAAQ,MAAM,aAC9B,OAAO,aAAa,YAAY,OAAO,WAAW,WAC9C,aAAa,SACb,SAAS,WAAW,OAAO,MAGpB,GACX,QAAQ,KAAK,MAAM;EAIvB,KAAK,MAAM,QAAQ,WAAW,WAC5B,IAAI,CAAC,UAAU,SAAS,IAAI,GAC1B,UAAU,KAAK,IAAI;CAGzB;CAEA,OAAO,QAAQ;EAAE;EAAS;CAAU,IAAI;AAC1C;;;;;AAMA,IAAa,kBAAb,MAA6B;;iBACsC,CAAC;2CAE7B,IAAI,IAAoB;;CAE7D,AAAO,gBAAgB,YAA0D;EAC/E,OAAO,WAAW,QAAQ,KAAK,WAAW;GACxC,IAAI,WAAW,UAAU;IACvB,KAAK,QAAQ,aAAa;KAAE,MAAM;KAAQ,QAAQ;KAAU,cAAc;IAAM;IAEhF,OAAO,EAAE,YAAY,CAAC,EAAE;GAC1B;GAIA,OAAO,GAFM,KAAK,aAAa,OAAO,MAEzB,IAAI,CAAC,EAAE;EACtB,CAAC;CACH;CAEA,AAAQ,aAAa,QAAwB;EAC3C,MAAM,WAAW,KAAK,kBAAkB,IAAI,MAAM;EAElD,IAAI,UACF,OAAO;EAIT,MAAM,OACJ,KAAK,kBAAkB,SAAS,IAAI,eAAe,cAAc,OAAO,QAAQ,oBAAoB,EAAE;EAExG,KAAK,kBAAkB,IAAI,QAAQ,IAAI;EACvC,KAAK,QAAQ,QAAQ;GAAE,MAAM;GAAU,IAAI;GAAU,MAAM;EAAO;EAElE,OAAO;CACT;CAEA,AAAO,aAAsB;EAC3B,OAAO,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,SAAS;CAC5C;AACF"}
+{"version":3,"file":"security.mjs","names":[],"sources":["../../../../../../../../packages/core/src/openapi/security.ts"],"sourcesContent":["import type {\n  AuthDescriptor,\n  OpenApiSecurityRequirement,\n  OpenApiSecurityScheme,\n  WarningSink,\n} from \"./types\";\n\n/**\n * The marker `authMiddleware()` attaches to the middleware it returns.\n * Core reads it structurally; it never imports the auth package.\n */\nexport const AUTH_DESCRIPTOR_SYMBOL = Symbol.for(\"warlock.auth\");\n\nfunction isAuthSource(value: unknown): value is AuthDescriptor[\"sources\"][number] {\n  if (value === \"header\") {\n    return true;\n  }\n\n  return (\n    typeof value === \"object\" &&\n    value !== null &&\n    typeof (value as { cookie?: unknown }).cookie === \"string\" &&\n    (value as { cookie: string }).cookie.length > 0\n  );\n}\n\n/**\n * Validate an auth descriptor. Returns `undefined` for anything that is not\n * `{ sources: (\"header\" | { cookie: string })[], userTypes?: string[] }` with at least one source.\n */\nexport function parseAuthDescriptor(value: unknown): AuthDescriptor | undefined {\n  if (typeof value !== \"object\" || value === null) {\n    return undefined;\n  }\n\n  const { sources, userTypes } = value as { sources?: unknown; userTypes?: unknown };\n\n  if (!Array.isArray(sources) || sources.length === 0 || !sources.every(isAuthSource)) {\n    return undefined;\n  }\n\n  if (\n    userTypes !== undefined &&\n    !(Array.isArray(userTypes) && userTypes.every((type) => typeof type === \"string\"))\n  ) {\n    return undefined;\n  }\n\n  return { sources: [...sources], userTypes: Array.isArray(userTypes) ? [...userTypes] : [] };\n}\n\n/**\n * Combine the descriptors of every guard on a route (group middleware is already merged into\n * the route): unique sources, union of user types.\n *\n * Middleware without a descriptor is ordinary middleware and is ignored silently. A function\n * that carries a descriptor of the wrong shape is reported through `warn`.\n *\n * @returns `undefined` when the route has no valid auth descriptor.\n */\nexport function readRouteAuth(middleware: unknown, warn: WarningSink): AuthDescriptor | undefined {\n  if (!Array.isArray(middleware)) {\n    return undefined;\n  }\n\n  const sources: AuthDescriptor[\"sources\"] = [];\n  const userTypes: string[] = [];\n  let found = false;\n\n  for (const fn of middleware) {\n    if (typeof fn !== \"function\") {\n      continue;\n    }\n\n    const raw = Reflect.get(fn, AUTH_DESCRIPTOR_SYMBOL);\n\n    if (raw === undefined) {\n      continue;\n    }\n\n    const descriptor = parseAuthDescriptor(raw);\n\n    if (!descriptor) {\n      warn(\n        \"a middleware carries a malformed warlock.auth descriptor; the route is documented without security.\",\n      );\n\n      continue;\n    }\n\n    found = true;\n\n    for (const source of descriptor.sources) {\n      const duplicate = sources.some((existing) =>\n        typeof existing === \"string\" || typeof source === \"string\"\n          ? existing === source\n          : existing.cookie === source.cookie,\n      );\n\n      if (!duplicate) {\n        sources.push(source);\n      }\n    }\n\n    for (const type of descriptor.userTypes) {\n      if (!userTypes.includes(type)) {\n        userTypes.push(type);\n      }\n    }\n  }\n\n  return found ? { sources, userTypes } : undefined;\n}\n\n/**\n * Collects the security schemes the routes actually use and turns descriptors into\n * per-operation requirements. A dual header + cookie guard is an OR: one requirement each.\n */\nexport class SecuritySchemes {\n  public readonly schemes: Record<string, OpenApiSecurityScheme> = {};\n\n  private readonly cookieSchemeNames = new Map<string, string>();\n\n  public requirementsFor(descriptor: AuthDescriptor): OpenApiSecurityRequirement[] {\n    return descriptor.sources.map((source) => {\n      if (source === \"header\") {\n        this.schemes.bearerAuth = { type: \"http\", scheme: \"bearer\", bearerFormat: \"JWT\" };\n\n        return { bearerAuth: [] };\n      }\n\n      const name = this.cookieScheme(source.cookie);\n\n      return { [name]: [] };\n    });\n  }\n\n  private cookieScheme(cookie: string): string {\n    const existing = this.cookieSchemeNames.get(cookie);\n\n    if (existing) {\n      return existing;\n    }\n\n    // The first cookie keeps the conventional name; a second, different cookie gets its own.\n    const name =\n      this.cookieSchemeNames.size === 0\n        ? \"cookieAuth\"\n        : `cookieAuth_${cookie.replace(/[^A-Za-z0-9._-]/g, \"\")}`;\n\n    this.cookieSchemeNames.set(cookie, name);\n    this.schemes[name] = { type: \"apiKey\", in: \"cookie\", name: cookie };\n\n    return name;\n  }\n\n  public hasSchemes(): boolean {\n    return Object.keys(this.schemes).length > 0;\n  }\n}\n"],"mappings":";;;;;AAWA,MAAa,yBAAyB,OAAO,IAAI,cAAc;AAE/D,SAAS,aAAa,OAA4D;CAChF,IAAI,UAAU,UACZ,OAAO;CAGT,OACE,OAAO,UAAU,YACjB,UAAU,QACV,OAAQ,MAA+B,WAAW,YACjD,MAA6B,OAAO,SAAS;AAElD;;;;;AAMA,SAAgB,oBAAoB,OAA4C;CAC9E,IAAI,OAAO,UAAU,YAAY,UAAU,MACzC;CAGF,MAAM,EAAE,SAAS,cAAc;CAE/B,IAAI,CAAC,MAAM,QAAQ,OAAO,KAAK,QAAQ,WAAW,KAAK,CAAC,QAAQ,MAAM,YAAY,GAChF;CAGF,IACE,cAAc,UACd,EAAE,MAAM,QAAQ,SAAS,KAAK,UAAU,OAAO,SAAS,OAAO,SAAS,QAAQ,IAEhF;CAGF,OAAO;EAAE,SAAS,CAAC,GAAG,OAAO;EAAG,WAAW,MAAM,QAAQ,SAAS,IAAI,CAAC,GAAG,SAAS,IAAI,CAAC;CAAE;AAC5F;;;;;;;;;;AAWA,SAAgB,cAAc,YAAqB,MAA+C;CAChG,IAAI,CAAC,MAAM,QAAQ,UAAU,GAC3B;CAGF,MAAM,UAAqC,CAAC;CAC5C,MAAM,YAAsB,CAAC;CAC7B,IAAI,QAAQ;CAEZ,KAAK,MAAM,MAAM,YAAY;EAC3B,IAAI,OAAO,OAAO,YAChB;EAGF,MAAM,MAAM,QAAQ,IAAI,IAAI,sBAAsB;EAElD,IAAI,QAAQ,QACV;EAGF,MAAM,aAAa,oBAAoB,GAAG;EAE1C,IAAI,CAAC,YAAY;GACf,KACE,qGACF;GAEA;EACF;EAEA,QAAQ;EAER,KAAK,MAAM,UAAU,WAAW,SAO9B,IAAI,CANc,QAAQ,MAAM,aAC9B,OAAO,aAAa,YAAY,OAAO,WAAW,WAC9C,aAAa,SACb,SAAS,WAAW,OAAO,MAGpB,GACX,QAAQ,KAAK,MAAM;EAIvB,KAAK,MAAM,QAAQ,WAAW,WAC5B,IAAI,CAAC,UAAU,SAAS,IAAI,GAC1B,UAAU,KAAK,IAAI;CAGzB;CAEA,OAAO,QAAQ;EAAE;EAAS;CAAU,IAAI;AAC1C;;;;;AAMA,IAAa,kBAAb,MAA6B;;iBACsC,CAAC;2CAE7B,IAAI,IAAoB;;CAE7D,AAAO,gBAAgB,YAA0D;EAC/E,OAAO,WAAW,QAAQ,KAAK,WAAW;GACxC,IAAI,WAAW,UAAU;IACvB,KAAK,QAAQ,aAAa;KAAE,MAAM;KAAQ,QAAQ;KAAU,cAAc;IAAM;IAEhF,OAAO,EAAE,YAAY,CAAC,EAAE;GAC1B;GAIA,OAAO,GAFM,KAAK,aAAa,OAAO,MAEzB,IAAI,CAAC,EAAE;EACtB,CAAC;CACH;CAEA,AAAQ,aAAa,QAAwB;EAC3C,MAAM,WAAW,KAAK,kBAAkB,IAAI,MAAM;EAElD,IAAI,UACF,OAAO;EAIT,MAAM,OACJ,KAAK,kBAAkB,SAAS,IAC5B,eACA,cAAc,OAAO,QAAQ,oBAAoB,EAAE;EAEzD,KAAK,kBAAkB,IAAI,QAAQ,IAAI;EACvC,KAAK,QAAQ,QAAQ;GAAE,MAAM;GAAU,IAAI;GAAU,MAAM;EAAO;EAElE,OAAO;CACT;CAEA,AAAO,aAAsB;EAC3B,OAAO,OAAO,KAAK,KAAK,OAAO,CAAC,CAAC,SAAS;CAC5C;AACF"}

package/esm/openapi/types.d.mts

@@ -75,7 +75,8 @@ type OpenApiValidationResponseConfig = {
   errors?: string;
   inputKey?: string;
   inputError?: string;
-  status?: number;
+  status?: number; /** The global failure-body hook; only whether it is a function is read. */
+  body?: unknown;
 };
 /**
  * Everything the builder needs besides the routes. Plain values only, so the same call
@@ -102,7 +103,7 @@ type OpenApiBuildResult = {
   warnings: string[];
 };
 /** The slice of a route the builder reads. A full `Route` satisfies it. */
-type OpenApiRouteInput = Pick<Route, "method" | "path" | "handler"> & Partial<Pick<Route, "name" | "label" | "description" | "middleware" | "isPage" | "sourceFile">>;
+type OpenApiRouteInput = Pick<Route, "method" | "path" | "handler"> & Partial<Pick<Route, "name" | "label" | "description" | "middleware" | "isPage" | "sourceFile" | "validation">>;
 /**
  * The descriptor `authMiddleware()` attaches under `Symbol.for("warlock.auth")`.
  * Read structurally and validated; core never imports the auth package.

package/esm/openapi/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/openapi/types.ts"],"mappings":";;;;;AAKA;KAAY,aAAA,GAAgB,MAAM;AAAA,KAEtB,gBAAA;EACV,IAAA;EACA,EAAA;EACA,QAAA;EACA,WAAA;EACA,KAAA;EACA,OAAA;EACA,MAAA,EAAQ,aAAa;AAAA;AAAA,KAGX,kBAAA;EACV,QAAA;EACA,OAAA,EAAS,MAAM;IAAW,MAAA,EAAQ,aAAA;EAAA;AAAA;AAAA,KAGxB,eAAA;EACV,WAAA;EACA,OAAA,GAAU,MAAM;IAAW,MAAA,EAAQ,aAAA;EAAA;AAAA;AAAA,KAGzB,0BAAA,GAA6B,MAAM;AAAA,KAEnC,gBAAA;EACV,WAAA;EACA,OAAA;EACA,WAAA;EACA,IAAA;EACA,UAAA,GAAa,gBAAA;EACb,WAAA,GAAc,kBAAA;EACd,SAAA,EAAW,MAAA,SAAe,eAAA;EAC1B,QAAA,GAAW,0BAAA;AAAA;AAAA,KAGD,qBAAA;EACN,IAAA;EAAc,MAAA;EAAkB,YAAA;AAAA;EAChC,IAAA;EAAgB,EAAA;EAAc,IAAA;AAAA;AAAA,KAExB,iBAAA;EACV,OAAA,GAAU,MAAA,SAAe,aAAA;EACzB,eAAA,GAAkB,MAAA,SAAe,qBAAA;AAAA;AAAA,KAGvB,eAAA;EACV,OAAA;EACA,iBAAA;EACA,IAAA;IAAQ,KAAA;IAAe,OAAA;IAAiB,WAAA;EAAA;EACxC,OAAA;IAAY,GAAA;EAAA;EACZ,IAAA;IAAS,IAAA;EAAA;EACT,KAAA,EAAO,MAAA,SAAe,MAAA,SAAe,gBAAA;EACrC,UAAA,GAAa,iBAAA;AAAA;;;;;KAOH,+BAAA;EACV,MAAA;EACA,QAAA;EACA,UAAA;EACA,MAAA;AAAA;;;;;KAOU,cAAA;EACV,IAAA;IAAQ,KAAA;IAAe,OAAA;IAAiB,WAAA;EAAA,GA/Bb;EAiC3B,OAAA,aAhCyB;EAkCzB,YAAA;EAjCiC;;;;;EAuCjC,mBAAA,IAAuB,QAAA,kCAxCE;EA0CzB,kBAAA,GAAqB,+BAA+B;AAAA;AAAA,KAG1C,kBAAA;EACV,QAAA,EAAU,eAAe;EACzB,QAAA;AAAA;;KAIU,iBAAA,GAAoB,IAAA,CAAK,KAAA,mCACnC,OAAA,CACE,IAAA,CAAK,KAAA;;;;;KAOG,cAAA;EACV,OAAA;IAAuB,MAAA;EAAA;EACvB,SAAA;AAAA;AAAA,KAGU,WAAA,IAAe,OAAe"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/openapi/types.ts"],"mappings":";;;;;AAKA;KAAY,aAAA,GAAgB,MAAM;AAAA,KAEtB,gBAAA;EACV,IAAA;EACA,EAAA;EACA,QAAA;EACA,WAAA;EACA,KAAA;EACA,OAAA;EACA,MAAA,EAAQ,aAAa;AAAA;AAAA,KAGX,kBAAA;EACV,QAAA;EACA,OAAA,EAAS,MAAM;IAAW,MAAA,EAAQ,aAAA;EAAA;AAAA;AAAA,KAGxB,eAAA;EACV,WAAA;EACA,OAAA,GAAU,MAAM;IAAW,MAAA,EAAQ,aAAA;EAAA;AAAA;AAAA,KAGzB,0BAAA,GAA6B,MAAM;AAAA,KAEnC,gBAAA;EACV,WAAA;EACA,OAAA;EACA,WAAA;EACA,IAAA;EACA,UAAA,GAAa,gBAAA;EACb,WAAA,GAAc,kBAAA;EACd,SAAA,EAAW,MAAA,SAAe,eAAA;EAC1B,QAAA,GAAW,0BAAA;AAAA;AAAA,KAGD,qBAAA;EACN,IAAA;EAAc,MAAA;EAAkB,YAAA;AAAA;EAChC,IAAA;EAAgB,EAAA;EAAc,IAAA;AAAA;AAAA,KAExB,iBAAA;EACV,OAAA,GAAU,MAAA,SAAe,aAAA;EACzB,eAAA,GAAkB,MAAA,SAAe,qBAAA;AAAA;AAAA,KAGvB,eAAA;EACV,OAAA;EACA,iBAAA;EACA,IAAA;IAAQ,KAAA;IAAe,OAAA;IAAiB,WAAA;EAAA;EACxC,OAAA;IAAY,GAAA;EAAA;EACZ,IAAA;IAAS,IAAA;EAAA;EACT,KAAA,EAAO,MAAA,SAAe,MAAA,SAAe,gBAAA;EACrC,UAAA,GAAa,iBAAA;AAAA;;;;;KAOH,+BAAA;EACV,MAAA;EACA,QAAA;EACA,UAAA;EACA,MAAA;EAEA,IAAA;AAAA;;;;;KAOU,cAAA;EACV,IAAA;IAAQ,KAAA;IAAe,OAAA;IAAiB,WAAA;EAAA,GAhCf;EAkCzB,OAAA,aAjCiC;EAmCjC,YAAA;EAnCwB;;;;;EAyCxB,mBAAA,IAAuB,QAAA,kCAzCL;EA2ClB,kBAAA,GAAqB,+BAA+B;AAAA;AAAA,KAG1C,kBAAA;EACV,QAAA,EAAU,eAAe;EACzB,QAAA;AAAA;;KAIU,iBAAA,GAAoB,IAAA,CAAK,KAAA,mCACnC,OAAA,CACE,IAAA,CACE,KAAA;;;;;KASM,cAAA;EACV,OAAA;IAAuB,MAAA;EAAA;EACvB,SAAA;AAAA;AAAA,KAGU,WAAA,IAAe,OAAe"}

package/esm/production/assert-generated-imports.mjs

@@ -19,6 +19,7 @@ var UndeclaredGeneratedImportError = class extends Error {
 			"resolves by accident under npm/yarn hoisting and fails under pnpm's strict layout."
 		].join("\n"));
 		this.violations = violations;
+		this.code = "WL7002";
 		this.name = "UndeclaredGeneratedImportError";
 	}
 };

package/esm/production/assert-generated-imports.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"assert-generated-imports.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/assert-generated-imports.ts"],"sourcesContent":["import { builtinModules } from \"node:module\";\n\n/**\n * A specifier the builder wrote into generated code that the consuming app does\n * not declare.\n */\nexport type UndeclaredImport = {\n  /** File the import was written into, relative to the generation directory. */\n  file: string;\n  /** The specifier exactly as emitted. */\n  specifier: string;\n  /** The package the specifier resolves to — `@scope/name` for a deep import. */\n  packageName: string;\n};\n\nexport type GeneratedFile = {\n  file: string;\n  content: string;\n};\n\n/**\n * Raised when generated code would ship an import the app cannot resolve.\n *\n * Carries every violation rather than the first, so a build reports the whole\n * problem in one pass instead of one specifier per re-run.\n */\nexport class UndeclaredGeneratedImportError extends Error {\n  public constructor(public readonly violations: UndeclaredImport[]) {\n    super(\n      [\n        `Generated code imports ${violations.length} package(s) the application does not declare:`,\n        \"\",\n        ...violations.map(\n          ({ file, specifier, packageName }) =>\n            `  ${file} → \"${specifier}\" (requires \"${packageName}\" in the app's dependencies)`,\n        ),\n        \"\",\n        \"Generated code may only import packages the app itself declares. A framework-internal\",\n        \"dependency must be reached through a re-export from @warlock.js/core — a bare specifier\",\n        \"resolves by accident under npm/yarn hoisting and fails under pnpm's strict layout.\",\n      ].join(\"\\n\"),\n    );\n\n    this.name = \"UndeclaredGeneratedImportError\";\n  }\n}\n\n// The clause between `import` and `from` excludes `;` and both quote\n// characters so the lazy match cannot run past the end of its own statement.\n// Allowing it to would let a side-effect import (`import \"./bootstrap\";`) bind\n// to the `from` of the NEXT statement and disappear from the results.\nconst IMPORT_PATTERN =\n  /(?:import|export)\\s+(?:[^\"';]*?\\sfrom\\s*)?[\"']([^\"']+)[\"']|import\\s*\\(\\s*[\"']([^\"']+)[\"']\\s*\\)/g;\n\n/**\n * Every module specifier a source file references — static, side-effect,\n * re-export and dynamic `import()` forms alike.\n *\n * Regex is sufficient and deliberate here: the input is code this builder wrote\n * itself, so it has no comments, no strings that look like imports, and no\n * syntax the pattern could misread. Parsing it with a full AST would buy\n * nothing and cost a dependency in the build path.\n */\nexport function extractSpecifiers(content: string): string[] {\n  const specifiers: string[] = [];\n\n  for (const match of content.matchAll(IMPORT_PATTERN)) {\n    const specifier = match[1] ?? match[2];\n\n    if (specifier) {\n      specifiers.push(specifier);\n    }\n  }\n\n  return specifiers;\n}\n\n/**\n * The package a specifier resolves to — `@scope/name` or `name`, ignoring any\n * deep path after it. Returns undefined for anything that is not a package:\n * relative paths, absolute paths, URLs, and Node builtins.\n */\nexport function resolvePackageName(specifier: string): string | undefined {\n  if (\n    specifier.startsWith(\".\") ||\n    specifier.startsWith(\"/\") ||\n    specifier.startsWith(\"node:\") ||\n    specifier.includes(\"://\")\n  ) {\n    return undefined;\n  }\n\n  const segments = specifier.split(\"/\");\n  const packageName = specifier.startsWith(\"@\") ? segments.slice(0, 2).join(\"/\") : segments[0];\n\n  if (!packageName) {\n    return undefined;\n  }\n\n  if (builtinModules.includes(packageName)) {\n    return undefined;\n  }\n\n  return packageName;\n}\n\n/**\n * Find every import in generated code that the app does not declare.\n *\n * `dependencies` only, deliberately: the artifact this checks is a production\n * bundle, so a package the app lists as a dev dependency is not guaranteed to\n * be installed where it runs.\n */\nexport function findUndeclaredImports(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): UndeclaredImport[] {\n  const declared = new Set(declaredDependencies);\n  const violations: UndeclaredImport[] = [];\n\n  for (const { file, content } of files) {\n    for (const specifier of extractSpecifiers(content)) {\n      const packageName = resolvePackageName(specifier);\n\n      if (!packageName || declared.has(packageName)) {\n        continue;\n      }\n\n      violations.push({ file, specifier, packageName });\n    }\n  }\n\n  return violations;\n}\n\n/**\n * Fail the build when generated code would import something the app cannot\n * resolve.\n *\n * This is the part that stops the defect class from returning. Rewriting the\n * one bad specifier fixes today's bundle; only the assertion stops the next\n * change to the generator from reintroducing it — under npm or yarn the mistake\n * is invisible, because hoisting resolves it by accident.\n *\n * @throws {UndeclaredGeneratedImportError} listing every violation found.\n */\nexport function assertGeneratedImportsAreDeclared(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): void {\n  const violations = findUndeclaredImports(files, declaredDependencies);\n\n  if (violations.length > 0) {\n    throw new UndeclaredGeneratedImportError(violations);\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAa,iCAAb,cAAoD,MAAM;CACxD,AAAO,YAAY,AAAgB,YAAgC;EACjE,MACE;GACE,0BAA0B,WAAW,OAAO;GAC5C;GACA,GAAG,WAAW,KACX,EAAE,MAAM,WAAW,kBAClB,KAAK,KAAK,MAAM,UAAU,eAAe,YAAY,6BACzD;GACA;GACA;GACA;GACA;EACF,CAAC,CAAC,KAAK,IAAI,CACb;EAdiC;EAgBjC,KAAK,OAAO;CACd;AACF;AAMA,MAAM,iBACJ;;;;;;;;;;AAWF,SAAgB,kBAAkB,SAA2B;CAC3D,MAAM,aAAuB,CAAC;CAE9B,KAAK,MAAM,SAAS,QAAQ,SAAS,cAAc,GAAG;EACpD,MAAM,YAAY,MAAM,MAAM,MAAM;EAEpC,IAAI,WACF,WAAW,KAAK,SAAS;CAE7B;CAEA,OAAO;AACT;;;;;;AAOA,SAAgB,mBAAmB,WAAuC;CACxE,IACE,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,OAAO,KAC5B,UAAU,SAAS,KAAK,GAExB;CAGF,MAAM,WAAW,UAAU,MAAM,GAAG;CACpC,MAAM,cAAc,UAAU,WAAW,GAAG,IAAI,SAAS,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAAS;CAE1F,IAAI,CAAC,aACH;CAGF,IAAI,eAAe,SAAS,WAAW,GACrC;CAGF,OAAO;AACT;;;;;;;;AASA,SAAgB,sBACd,OACA,sBACoB;CACpB,MAAM,WAAW,IAAI,IAAI,oBAAoB;CAC7C,MAAM,aAAiC,CAAC;CAExC,KAAK,MAAM,EAAE,MAAM,aAAa,OAC9B,KAAK,MAAM,aAAa,kBAAkB,OAAO,GAAG;EAClD,MAAM,cAAc,mBAAmB,SAAS;EAEhD,IAAI,CAAC,eAAe,SAAS,IAAI,WAAW,GAC1C;EAGF,WAAW,KAAK;GAAE;GAAM;GAAW;EAAY,CAAC;CAClD;CAGF,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,kCACd,OACA,sBACM;CACN,MAAM,aAAa,sBAAsB,OAAO,oBAAoB;CAEpE,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,+BAA+B,UAAU;AAEvD"}
+{"version":3,"file":"assert-generated-imports.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/assert-generated-imports.ts"],"sourcesContent":["import { builtinModules } from \"node:module\";\n\n/**\n * A specifier the builder wrote into generated code that the consuming app does\n * not declare.\n */\nexport type UndeclaredImport = {\n  /** File the import was written into, relative to the generation directory. */\n  file: string;\n  /** The specifier exactly as emitted. */\n  specifier: string;\n  /** The package the specifier resolves to — `@scope/name` for a deep import. */\n  packageName: string;\n};\n\nexport type GeneratedFile = {\n  file: string;\n  content: string;\n};\n\n/**\n * Raised when generated code would ship an import the app cannot resolve.\n *\n * Carries every violation rather than the first, so a build reports the whole\n * problem in one pass instead of one specifier per re-run.\n */\nexport class UndeclaredGeneratedImportError extends Error {\n  /** Stable Warlock error code; `warlock explain WL7002` prints the fix. */\n  public readonly code = \"WL7002\";\n\n  public constructor(public readonly violations: UndeclaredImport[]) {\n    super(\n      [\n        `Generated code imports ${violations.length} package(s) the application does not declare:`,\n        \"\",\n        ...violations.map(\n          ({ file, specifier, packageName }) =>\n            `  ${file} → \"${specifier}\" (requires \"${packageName}\" in the app's dependencies)`,\n        ),\n        \"\",\n        \"Generated code may only import packages the app itself declares. A framework-internal\",\n        \"dependency must be reached through a re-export from @warlock.js/core — a bare specifier\",\n        \"resolves by accident under npm/yarn hoisting and fails under pnpm's strict layout.\",\n      ].join(\"\\n\"),\n    );\n\n    this.name = \"UndeclaredGeneratedImportError\";\n  }\n}\n\n// The clause between `import` and `from` excludes `;` and both quote\n// characters so the lazy match cannot run past the end of its own statement.\n// Allowing it to would let a side-effect import (`import \"./bootstrap\";`) bind\n// to the `from` of the NEXT statement and disappear from the results.\nconst IMPORT_PATTERN =\n  /(?:import|export)\\s+(?:[^\"';]*?\\sfrom\\s*)?[\"']([^\"']+)[\"']|import\\s*\\(\\s*[\"']([^\"']+)[\"']\\s*\\)/g;\n\n/**\n * Every module specifier a source file references — static, side-effect,\n * re-export and dynamic `import()` forms alike.\n *\n * Regex is sufficient and deliberate here: the input is code this builder wrote\n * itself, so it has no comments, no strings that look like imports, and no\n * syntax the pattern could misread. Parsing it with a full AST would buy\n * nothing and cost a dependency in the build path.\n */\nexport function extractSpecifiers(content: string): string[] {\n  const specifiers: string[] = [];\n\n  for (const match of content.matchAll(IMPORT_PATTERN)) {\n    const specifier = match[1] ?? match[2];\n\n    if (specifier) {\n      specifiers.push(specifier);\n    }\n  }\n\n  return specifiers;\n}\n\n/**\n * The package a specifier resolves to — `@scope/name` or `name`, ignoring any\n * deep path after it. Returns undefined for anything that is not a package:\n * relative paths, absolute paths, URLs, and Node builtins.\n */\nexport function resolvePackageName(specifier: string): string | undefined {\n  if (\n    specifier.startsWith(\".\") ||\n    specifier.startsWith(\"/\") ||\n    specifier.startsWith(\"node:\") ||\n    specifier.includes(\"://\")\n  ) {\n    return undefined;\n  }\n\n  const segments = specifier.split(\"/\");\n  const packageName = specifier.startsWith(\"@\") ? segments.slice(0, 2).join(\"/\") : segments[0];\n\n  if (!packageName) {\n    return undefined;\n  }\n\n  if (builtinModules.includes(packageName)) {\n    return undefined;\n  }\n\n  return packageName;\n}\n\n/**\n * Find every import in generated code that the app does not declare.\n *\n * `dependencies` only, deliberately: the artifact this checks is a production\n * bundle, so a package the app lists as a dev dependency is not guaranteed to\n * be installed where it runs.\n */\nexport function findUndeclaredImports(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): UndeclaredImport[] {\n  const declared = new Set(declaredDependencies);\n  const violations: UndeclaredImport[] = [];\n\n  for (const { file, content } of files) {\n    for (const specifier of extractSpecifiers(content)) {\n      const packageName = resolvePackageName(specifier);\n\n      if (!packageName || declared.has(packageName)) {\n        continue;\n      }\n\n      violations.push({ file, specifier, packageName });\n    }\n  }\n\n  return violations;\n}\n\n/**\n * Fail the build when generated code would import something the app cannot\n * resolve.\n *\n * This is the part that stops the defect class from returning. Rewriting the\n * one bad specifier fixes today's bundle; only the assertion stops the next\n * change to the generator from reintroducing it — under npm or yarn the mistake\n * is invisible, because hoisting resolves it by accident.\n *\n * @throws {UndeclaredGeneratedImportError} listing every violation found.\n */\nexport function assertGeneratedImportsAreDeclared(\n  files: GeneratedFile[],\n  declaredDependencies: string[],\n): void {\n  const violations = findUndeclaredImports(files, declaredDependencies);\n\n  if (violations.length > 0) {\n    throw new UndeclaredGeneratedImportError(violations);\n  }\n}\n"],"mappings":";;;;;;;;;AA0BA,IAAa,iCAAb,cAAoD,MAAM;CAIxD,AAAO,YAAY,AAAgB,YAAgC;EACjE,MACE;GACE,0BAA0B,WAAW,OAAO;GAC5C;GACA,GAAG,WAAW,KACX,EAAE,MAAM,WAAW,kBAClB,KAAK,KAAK,MAAM,UAAU,eAAe,YAAY,6BACzD;GACA;GACA;GACA;GACA;EACF,CAAC,CAAC,KAAK,IAAI,CACb;EAdiC;cAFZ;EAkBrB,KAAK,OAAO;CACd;AACF;AAMA,MAAM,iBACJ;;;;;;;;;;AAWF,SAAgB,kBAAkB,SAA2B;CAC3D,MAAM,aAAuB,CAAC;CAE9B,KAAK,MAAM,SAAS,QAAQ,SAAS,cAAc,GAAG;EACpD,MAAM,YAAY,MAAM,MAAM,MAAM;EAEpC,IAAI,WACF,WAAW,KAAK,SAAS;CAE7B;CAEA,OAAO;AACT;;;;;;AAOA,SAAgB,mBAAmB,WAAuC;CACxE,IACE,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,GAAG,KACxB,UAAU,WAAW,OAAO,KAC5B,UAAU,SAAS,KAAK,GAExB;CAGF,MAAM,WAAW,UAAU,MAAM,GAAG;CACpC,MAAM,cAAc,UAAU,WAAW,GAAG,IAAI,SAAS,MAAM,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,SAAS;CAE1F,IAAI,CAAC,aACH;CAGF,IAAI,eAAe,SAAS,WAAW,GACrC;CAGF,OAAO;AACT;;;;;;;;AASA,SAAgB,sBACd,OACA,sBACoB;CACpB,MAAM,WAAW,IAAI,IAAI,oBAAoB;CAC7C,MAAM,aAAiC,CAAC;CAExC,KAAK,MAAM,EAAE,MAAM,aAAa,OAC9B,KAAK,MAAM,aAAa,kBAAkB,OAAO,GAAG;EAClD,MAAM,cAAc,mBAAmB,SAAS;EAEhD,IAAI,CAAC,eAAe,SAAS,IAAI,WAAW,GAC1C;EAGF,WAAW,KAAK;GAAE;GAAM;GAAW;EAAY,CAAC;CAClD;CAGF,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,kCACd,OACA,sBACM;CACN,MAAM,aAAa,sBAAsB,OAAO,oBAAoB;CAEpE,IAAI,WAAW,SAAS,GACtB,MAAM,IAAI,+BAA+B,UAAU;AAEvD"}

package/esm/production/production-builder.mjs

@@ -294,15 +294,18 @@ bootstrap();
 			path: f.replace(/\.(ts|tsx)$/, ""),
 			key: configKeyFromPath("src/config/" + f)
 		})).filter((entry) => entry.key !== void 0).sort((a, b) => a.path.localeCompare(b.path));
-		const imports = ["import { setConfig, configSpecialHandlers } from \"@warlock.js/core\";"];
+		const imports = ["import { assertValidConfigModules, configSpecialHandlers, setConfig } from \"@warlock.js/core\";"];
 		const configImports = [];
 		const configSetCalls = [];
+		const validations = [];
 		const executors = [];
 		configNames.forEach(({ path: configPath, key }, index) => {
 			const varName = `config${index}`;
-			configImports.push(`import ${varName} from "../../src/config/${configPath}";`);
-			configSetCalls.push(`setConfig(${JSON.stringify(key)}, ${varName});`);
-			executors.push(`await configSpecialHandlers.execute(${JSON.stringify(key)}, ${varName});`);
+			const name = JSON.stringify(key);
+			configImports.push(`import * as ${varName} from "../../src/config/${configPath}";`);
+			configSetCalls.push(`setConfig(${name}, ${varName}.default);`);
+			validations.push(`  { name: ${name}, module: ${varName} },`);
+			executors.push(`await configSpecialHandlers.execute(${name}, ${varName}.default);`);
 		});
 		const content = [
 			...await fileExistsAsync(appPath("prestart.ts")) ? ["import './../../src/app/prestart';"] : [],
@@ -314,6 +317,11 @@ bootstrap();
 			"// Register configs",
 			...configSetCalls,
 			"",
+			"// Refuse to start when a config file's `configSchema` is not satisfied",
+			"await assertValidConfigModules([",
+			...validations,
+			"]);",
+			"",
 			"// Special handlers",
 			...executors,
 			""

package/esm/production/production-builder.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"production-builder.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/production-builder.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport {\n  ensureDirectoryAsync,\n  fileExistsAsync,\n  getFileAsync,\n  getJsonFileAsync,\n  putFileAsync,\n  removeDirectoryAsync,\n} from \"@warlock.js/fs\";\nimport esbuild from \"esbuild\";\nimport glob from \"fast-glob\";\nimport path from \"path\";\nimport { assertNoReservedConnectorNames } from \"../connectors/assert-no-reserved-connector-names\";\nimport { assertUniqueConnectorNames } from \"../connectors/assert-unique-connector-names\";\nimport type { Connector, ConnectorBuildContext, ConnectorEsbuildPatch } from \"../connectors/types\";\nimport { configKeyFromPath } from \"../config/config-key-from-path\";\nimport {\n  isConfigFile,\n  isEventFile,\n  isLocaleFile,\n  isMainFile,\n  isRouteFile,\n  isWorkerFile,\n} from \"../dev-server/special-file-patterns\";\nimport { tsconfigManager } from \"../dev-server/tsconfig-manager\";\nimport { appPath, rootPath, warlockPath } from \"../utils\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\nimport { assertGeneratedImportsAreDeclared } from \"./assert-generated-imports\";\nimport { bundleFrameworkDependencies } from \"./bundle-framework-dependencies\";\nimport { dedupe, runEmitContributions, runGenerateContributions } from \"./build-contributions\";\nimport { writeDistBuildManifestAsync } from \"./dist-build-manifest\";\nimport { nativeNodeModulesPlugin } from \"./esbuild-plugins\";\nimport { assertEsbuildBinaryIsLinked } from \"./esbuild-preflight\";\nimport { collectRouteRegistrationSnapshot } from \"./route-registration-snapshot\";\nimport { clearOwnedRouteTypes } from \"../dev-server/route-types-publisher\";\nimport {\n  commitDistAsync,\n  createTempOutputDir,\n  rollbackDistAsync,\n  stageDistAsync,\n  type StagedDist,\n} from \"./promote-dist\";\nimport { resolveBuildConfig, type ResolvedBuildConfig } from \"./resolve-build-config\";\nimport { tsconfigPathAliases } from \"./tsconfig-path-aliases\";\nimport { toKebabCase } from \"@mongez/reinforcements\";\n\n/**\n * Recreates `require`, `__filename` and `__dirname` at the top of an ESM bundle.\n *\n * Bundled CommonJS dependencies call `require(\"node:assert\")` and read\n * `__dirname` to locate their own assets. Neither exists in an ES module, so\n * esbuild substitutes a stub that throws — **after the build has reported\n * success**. `Dynamic require of \"node:assert\" is not supported` is that stub\n * firing, and it is the defect this shim removes.\n *\n * `__dirname` matters as much as `require`: without it a dependency resolving\n * an asset path silently gets `undefined` and fails later, further from the\n * cause.\n *\n * Written as one line because esbuild inserts a banner verbatim above the\n * bundle and a multi-line string here would shift every mapped line.\n */\nconst ESM_INTEROP_SHIM =\n  \"import{createRequire as __wlCreateRequire}from'node:module';\" +\n  \"import{fileURLToPath as __wlFileURLToPath}from'node:url';\" +\n  \"import{dirname as __wlDirname}from'node:path';\" +\n  \"const require=__wlCreateRequire(import.meta.url);\" +\n  \"const __filename=__wlFileURLToPath(import.meta.url);\" +\n  \"const __dirname=__wlDirname(__filename);\";\n\n/**\n * Combine the framework's banner with the user's, keeping both.\n *\n * esbuild's `banner` is an object keyed by output type, and every merge in the\n * path to it — the config merge and the options spread — REPLACES that object\n * rather than merging it. So whichever is applied second silently deletes the\n * other. This is the only place the two can coexist.\n *\n * The shim goes first: it defines `require`, which a user banner may use.\n *\n * @param userBanner banner from `warlock.config.ts`, if any\n * @param shim the interop shim, or undefined when it does not apply\n */\nfunction mergeBanner(\n  userBanner: Record<string, string> | undefined,\n  shim: string | undefined,\n): Record<string, string> | undefined {\n  if (!shim) return userBanner;\n\n  const userJs = userBanner?.js;\n\n  return {\n    ...userBanner,\n    js: userJs ? `${shim}${userJs}` : shim,\n  };\n}\n\n/**\n * Prefix every generated file uses to reach the app root.\n *\n * Generated sources are written into `.warlock/production/`, two levels below\n * the app root, so `../../` lands back on it — the same hop already spelled\n * out in the `../../src/app/…` and `../../src/config/…` imports the module and\n * config-loader generators emit. Named once so a generator that needs a new\n * app-root file (`warlock.config`) cannot pick a different depth.\n */\nconst APP_ROOT_FROM_PRODUCTION_DIR = \"../../\";\n\n/**\n * Production Builder\n * Generates production-ready files and bundles them for deployment\n * Build options are loaded from warlock.config.ts\n */\nexport class ProductionBuilder {\n  private options!: ResolvedBuildConfig;\n  private readonly productionDir = warlockPath(\"production\");\n\n  /**\n   * Connectors declared in `warlock.config.ts`. Read statically — `build`\n   * never calls `boot()`/`start()` on them; it only\n   * drains their `build` contributions.\n   */\n  private connectors: readonly Connector[] = [];\n\n  /**\n   * The contributors' merged esbuild patch, produced by the `generate` pass\n   * and consumed by {@link bundle}.\n   */\n  private contributedEsbuild: ConnectorEsbuildPatch = {};\n\n  /** Browser-safe API metadata captured in a fresh registration-only child. */\n  private namedApiRoutes?: readonly import(\"../router/types\").NamedApiRoute[];\n\n  /**\n   * Main build entry point\n   *\n   * The esbuild bundle is written into a TEMP directory next to the real\n   * output directory, never into it, and that directory is renamed over\n   * `outdir` as one filesystem operation — so `outdir` is never observed as\n   * a mix of the old build and the new one, and a build that fails before\n   * that rename never touches `outdir` at all.\n   *\n   * `this.options.outdir` is NOT repointed at the temp directory while that\n   * happens, and must never be. It is not merely a write target: consumers\n   * BAKE it into runtime output — `web`'s build contribution derives the\n   * `clientDir` recorded in its pages manifest from it\n   * (`web/src/build/contribution.ts`) — so a temp path reaching them\n   * produces an artifact whose browser paths point at a directory promotion\n   * has since renamed away. The temp path is passed explicitly, as a\n   * parameter, to the one operation that writes into it ({@link bundle});\n   * everything else, `buildContext()` included, keeps reading the final\n   * destination.\n   *\n   * That is also why promotion is STAGED rather than done at the very end.\n   * Connector `emit` hooks write real artifacts (the web client bundle) and\n   * see the final `outdir`, so they must run when `outdir` genuinely holds\n   * this build — after the rename, not before it, or promotion would replace\n   * the directory they just wrote into. The previous build is kept parked\n   * aside until they finish: `emit` throwing rolls the whole promotion back,\n   * and the build-success marker `warlock start` checks is written last of\n   * all, so a failure at any point leaves no `dist` that start will boot.\n   */\n  public async build(): Promise<void> {\n    console.log(colors.cyan(\"Building for production...\\n\"));\n\n    // Step 0: Fail fast when esbuild's native binary never got linked (the\n    // state pnpm leaves a project in when its build-script approval gate\n    // blocked esbuild's postinstall) rather than let bundling die on esbuild's\n    // own cryptic \"package could not be found\" error several steps from now.\n    assertEsbuildBinaryIsLinked();\n\n    // Step 1: Initialize options from config\n    await this.initializeOptions();\n\n    const finalOutDir = this.options.outdir!;\n    const tempOutDir = createTempOutputDir(finalOutDir);\n\n    // Set once the temp directory has been renamed onto `finalOutDir`. Its\n    // presence is what tells the catch below whether a failure has a\n    // promotion to undo or only a temp directory to discard.\n    let staged: StagedDist | undefined;\n\n    try {\n      // Step 2: Generate combined files\n      await this.generateCombinedFiles();\n\n      // Step 3: Generate entry point\n      await this.generateEntryPoint();\n\n      // Step 4: Refuse to bundle code the app could not resolve at runtime\n      await this.assertGeneratedImports();\n\n      // Step 4.5: Drain the connectors' `generate` contributions\n      await this.captureNamedApiRoutesForWeb();\n      const contributed = await this.runGenerateContributions();\n\n      // Step 4.6: Re-assert over what the contributors just wrote.\n      //\n      // Step 4 only saw core's own generated files; a contributor writes its\n      // code (a pages barrel, say) AFTER that assertion, so an undeclared bare\n      // specifier in it reaches the bundle unchecked. Under\n      // `packages: \"external\"` that specifier survives verbatim into the\n      // artifact and dies as ERR_MODULE_NOT_FOUND at runtime — the same failure\n      // step 4 exists to prevent. Skipped when nothing contributed: re-globbing\n      // and re-reading the production dir is pure cost in the common case.\n      if (contributed) {\n        await this.assertGeneratedImports();\n      }\n\n      // Step 5: Bundle with esbuild into the temp directory. The ONLY\n      // operation handed that path — it is a write target, not config.\n      await this.bundle(tempOutDir);\n\n      // Step 5.5: Promote the bundle into `outdir`, keeping the previous\n      // build parked aside. `outdir` now holds exactly this build, so the\n      // steps below write into — and record — the real destination.\n      staged = await stageDistAsync(tempOutDir, finalOutDir);\n\n      // Step 5.6: Drain the connectors' `emit` contributions — after the\n      // bundle is in place (so what they write survives promotion and the\n      // paths they bake in resolve), and BEFORE step 6 deletes the\n      // production directory they may still read.\n      await runEmitContributions(this.connectors, this.buildContext());\n\n      // Step 5.7: Mark `dist` as a genuine, complete build — the one thing\n      // `warlock start` trusts. Written LAST on purpose: every earlier step\n      // can still fail, and until this file exists nothing will boot what\n      // they left behind.\n      await writeDistBuildManifestAsync(finalOutDir);\n\n      // Step 5.8: Commit — drop the parked previous build. Cannot throw.\n      await commitDistAsync(staged);\n    } catch (error) {\n      if (staged) {\n        // The promotion already happened; put the previous build back and\n        // take this half-finished one out of `outdir`.\n        await rollbackDistAsync(staged);\n      } else {\n        // Nothing this build produced ever reached `outdir` — discard the\n        // temp directory and leave `outdir` exactly as it was.\n        await removeDirectoryAsync(tempOutDir).catch(() => undefined);\n      }\n\n      throw error;\n    }\n\n    // Step 6: Remove production folder\n    await removeDirectoryAsync(this.productionDir);\n\n    console.log(colors.green(\"Build complete!\"));\n    console.log(`Start production server by running ${colors.cyan(\"warlock start\")}`);\n  }\n\n  /**\n   * Initialize options from warlock.config.ts\n   */\n  private async initializeOptions(): Promise<void> {\n    this.options = resolveBuildConfig();\n    // Same config object `resolveBuildConfig` just read — `warlock build`\n    // preloads warlock.config.ts, so no additional load happens here.\n    const connectors = warlockConfigManager.get(\"connectors\") ?? [];\n\n    // Checked here, where the array is first read, so nothing downstream has\n    // drained anything yet: the `generate` and `emit` passes run per ENTRY, so\n    // a name listed twice would write its files and merge its esbuild options\n    // twice into an artifact the runtime then boots that name only once from.\n    // A build that half-applied a connector and reported success is worse than\n    // one that never started.\n    assertUniqueConnectorNames([...connectors]);\n\n    // And here rather than only at boot, for the same reason: a name a built-in\n    // already owns is skipped by the runtime, so an artifact built from it\n    // carries the custom connector's generated files and esbuild patches while\n    // the server boots the built-in instead. Refusing it at boot alone would\n    // mean the build had already emitted that artifact — the failure has to\n    // land on the developer running `warlock build`, not on whoever starts the\n    // server. Same assertion the registration half calls, over the same names.\n    assertNoReservedConnectorNames([...connectors]);\n\n    this.connectors = connectors;\n\n    // Ensure production directory exists\n    await ensureDirectoryAsync(this.productionDir);\n  }\n\n  /**\n   * The context handed to every build contribution.\n   */\n  private buildContext(): ConnectorBuildContext {\n    return {\n      productionDir: this.productionDir,\n      appRoot: rootPath(),\n      options: this.options,\n      namedApiRoutes: this.namedApiRoutes,\n    };\n  }\n\n  /**\n   * Web route declarations need application API registration, which cannot be\n   * inferred from generated files. Capture it once in a disposable child before\n   * contributors write build artifacts; no connector lifecycle runs there.\n   */\n  private async captureNamedApiRoutesForWeb(): Promise<void> {\n    if (!this.connectors.some((connector) => connector.name === \"web\")) {\n      await clearOwnedRouteTypes(rootPath());\n      return;\n    }\n\n    this.namedApiRoutes = (\n      await collectRouteRegistrationSnapshot({\n        cwd: rootPath(),\n        timeoutMs: this.options.routeRegistrationTimeoutMs,\n      })\n    ).routes;\n  }\n\n  /**\n   * Drain the `generate` hooks and fold what they returned back into the\n   * build.\n   *\n   * The entry point is REGENERATED here rather than generated later. The\n   * contribution slot is fixed — after `assertGeneratedImports` (so nothing\n   * bundles that the app could not resolve) and before `bundle` — while\n   * `generateEntryPoint` must stay at step 3, because `app.ts` is itself\n   * generated code the assertion has to see; moving it past the assertion\n   * would silently drop the entry from that check. Rewriting one small file\n   * is cheaper than losing either guarantee, and the write is pure\n   * (`generatedFiles` + these imports), so doing it twice is not a\n   * correctness risk.\n   *\n   * @returns whether any connector ran a `generate` hook — the caller uses it\n   * to decide if the import assertion is worth a second pass. Keyed on the\n   * hook EXISTING, not on what it returned: a hook that returns nothing may\n   * still have written files into `productionDir`, and those are exactly the\n   * files the second pass is there to read.\n   */\n  private async runGenerateContributions(): Promise<boolean> {\n    const contributed = this.connectors.some((connector) => Boolean(connector.build?.generate));\n\n    const { entryImports, esbuild } = await runGenerateContributions(\n      this.connectors,\n      this.buildContext(),\n    );\n\n    this.contributedEsbuild = esbuild;\n\n    if (entryImports.length > 0) {\n      await this.generateEntryPoint(entryImports);\n    }\n\n    return contributed;\n  }\n\n  /**\n   * Track which special files were generated\n   */\n  private generatedFiles = {\n    locales: false,\n    events: false,\n    main: false,\n    routes: false,\n    workers: false,\n  };\n\n  /**\n   * Generate all combined files\n   */\n  private async generateCombinedFiles(): Promise<void> {\n    console.log(colors.yellow(\"   Generating production files...\"));\n\n    // Generate bootstrap.ts file\n    await this.generateBootstrap();\n\n    // Generate config loader\n    await this.generateConfigLoader();\n\n    // Generate special files and track which ones have content\n    const [locales, events, main, routes, workers] = await Promise.all([\n      this.generateLocales(),\n      this.generateEvents(),\n      this.generateMain(),\n      this.generateRoutes(),\n      this.generateWorkers(),\n    ]);\n\n    this.generatedFiles = { locales, events, main, routes, workers };\n  }\n\n  /**\n   * Generate bootstrap.ts - ensures bootstrap() runs first and sets production environment\n   */\n  private async generateBootstrap(): Promise<void> {\n    // ESM hoists imports, so the app bootstrap must be the first import to run first\n    const appBootstrapImport = (await fileExistsAsync(appPath(\"bootstrap.ts\")))\n      ? \"import './../../src/app/bootstrap';\\n\"\n      : \"\";\n\n    const content = `${appBootstrapImport}import { bootstrap, Application } from \"@warlock.js/core\";\n\n// Production runtime; NODE_ENV is only defaulted so an explicit value (e.g. staging) wins\nApplication.setRuntimeStrategy(\"production\");\nif (!process.env.NODE_ENV) {\n  Application.setEnvironment(\"production\");\n}\n\n// Bootstrap the application\nbootstrap();\n`;\n\n    await putFileAsync(path.join(this.productionDir, \"bootstrap.ts\"), content);\n  }\n\n  /**\n   * Fail the build when generated code imports a package the app does not\n   * declare.\n   *\n   * The bundler is configured `packages: \"external\"`, so every bare specifier\n   * written above survives verbatim into an artifact that resolves against the\n   * **consuming app's** node_modules. A framework-internal dependency imported\n   * there resolves by accident under npm/yarn hoisting and dies under pnpm —\n   * which is how a production app shipped that could not boot. Rewriting the\n   * offending import fixes today's bundle; this check is what stops the next\n   * change to the generator from quietly reintroducing it.\n   */\n  private async assertGeneratedImports(): Promise<void> {\n    const generatedPaths = await glob(\"**/*.{ts,tsx,js,mjs}\", {\n      cwd: this.productionDir,\n      absolute: false,\n    });\n\n    const [files, appPackage] = await Promise.all([\n      Promise.all(\n        generatedPaths.map(async (file) => ({\n          file,\n          content: await getFileAsync(path.join(this.productionDir, file)),\n        })),\n      ),\n      getJsonFileAsync<{ dependencies?: Record<string, string> }>(rootPath(\"package.json\")),\n    ]);\n\n    assertGeneratedImportsAreDeclared(files, Object.keys(appPackage.dependencies ?? {}));\n  }\n\n  /**\n   * Glob `src/app` and keep the files the shared dev-server predicate accepts,\n   * so production discovers exactly what the dev collector does.\n   * Returns relative paths from .warlock/production/ to src/app/\n   */\n  private async globModule(matches: (relativePath: string) => boolean): Promise<string[]> {\n    const files = await glob(\"**/*.{ts,tsx,json}\", {\n      cwd: appPath(),\n      absolute: false,\n    });\n\n    // e.g., \"users/main.ts\" -> \"../../src/app/users/main\"\n    return files\n      .filter((file) => matches(\"src/app/\" + file))\n      .sort()\n      .map((file) => \"../../src/app/\" + file.replace(/\\.(ts|tsx)$/, \"\"));\n  }\n\n  /**\n   * Generate config-loader.ts\n   */\n  private async generateConfigLoader(): Promise<void> {\n    const configDirectory = path.join(process.cwd(), \"src/config\");\n\n    const files = await glob(\"**/*.{ts,tsx}\", {\n      cwd: configDirectory,\n      absolute: false,\n    });\n\n    // Same key rule as the dev config loader: the raw path, never camel-cased\n    const configNames = files\n      .filter((f) => isConfigFile(\"src/config/\" + f))\n      .map((f) => ({\n        path: f.replace(/\\.(ts|tsx)$/, \"\"),\n        key: configKeyFromPath(\"src/config/\" + f),\n      }))\n      .filter((entry): entry is { path: string; key: string } => entry.key !== undefined)\n      .sort((a, b) => a.path.localeCompare(b.path));\n\n    // Only `@warlock.js/core` — the one package the app itself declares. See\n    // `assertGeneratedImportsAreDeclared`: `@mongez/config` is core's own\n    // dependency, so a bare import of it resolved by luck under npm/yarn\n    // hoisting and died under pnpm's strict layout.\n    const imports: string[] = [\n      'import { setConfig, configSpecialHandlers } from \"@warlock.js/core\";',\n    ];\n    const configImports: string[] = [];\n    const configSetCalls: string[] = [];\n    const executors: string[] = [];\n\n    configNames.forEach(({ path: configPath, key }, index) => {\n      // Index-based identifier: keys like \"rate-limit\" or \"mail/smtp\" are not valid names\n      const varName = `config${index}`;\n      configImports.push(`import ${varName} from \"../../src/config/${configPath}\";`);\n      configSetCalls.push(`setConfig(${JSON.stringify(key)}, ${varName});`);\n      executors.push(`await configSpecialHandlers.execute(${JSON.stringify(key)}, ${varName});`);\n    });\n\n    // ESM hoists imports, so prestart must be the first import to run first\n    const prestartImports = (await fileExistsAsync(appPath(\"prestart.ts\")))\n      ? [\"import './../../src/app/prestart';\"]\n      : [];\n\n    const content = [\n      ...prestartImports,\n      ...imports,\n      \"\",\n      \"// Config imports\",\n      ...configImports,\n      \"\",\n      \"// Register configs\",\n      ...configSetCalls,\n      \"\",\n      \"// Special handlers\",\n      ...executors,\n      \"\",\n    ].join(\"\\n\");\n\n    await putFileAsync(path.join(this.productionDir, \"config-loader.ts\"), content);\n  }\n\n  /**\n   * Generate locales.ts (only if there are locale files)\n   * @returns true if file was generated with content\n   */\n  private async generateLocales(): Promise<boolean> {\n    const files = await this.globModule(isLocaleFile);\n    if (files.length === 0) return false;\n    const content = files\n      .map((file, index) => {\n        if (!file.endsWith(\".json\")) return `import \"${file}\";`;\n        const moduleFolder = file.split(\"/\").at(-3)!;\n        return [\n          `import dictionary${index} from \"${file}\";`,\n          'import { registerLocaleDictionary } from \"@warlock.js/core\";',\n          `registerLocaleDictionary({ sourceFile: ${JSON.stringify(file)}, source: JSON.stringify(dictionary${index}), defaultNamespace: ${JSON.stringify(moduleFolder)} });`,\n        ].join(\"\\n\");\n      })\n      .join(\"\\n\");\n    await putFileAsync(path.join(this.productionDir, \"locales.ts\"), content + \"\\n\");\n    return true;\n  }\n\n  /**\n   * Generate events.ts (only if there are event files)\n   * @returns true if file was generated with content\n   */\n  private async generateEvents(): Promise<boolean> {\n    const files = await this.globModule(isEventFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"events.ts\");\n    return true;\n  }\n\n  /**\n   * Generate main.ts (only if there are main files)\n   * @returns true if file was generated with content\n   */\n  private async generateMain(): Promise<boolean> {\n    const files = await this.globModule(isMainFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"main.ts\");\n    return true;\n  }\n\n  /**\n   * Generate routes.ts (only if there are route files)\n   * @returns true if file was generated with content\n   */\n  private async generateRoutes(): Promise<boolean> {\n    const files = await this.globModule(isRouteFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"routes.ts\");\n    return true;\n  }\n\n  /**\n   * Generate workers.ts (only if there are worker files)\n   * @returns true if file was generated with content\n   */\n  private async generateWorkers(): Promise<boolean> {\n    const files = await this.globModule(isWorkerFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"workers.ts\");\n    return true;\n  }\n\n  /**\n   * Generate a file with imports from all given files\n   */\n  private async generateImportsFile(importPaths: string[], outputFile: string): Promise<void> {\n    const imports = importPaths.map((importPath) => `import \"${importPath}\";`);\n    const content = imports.join(\"\\n\") + \"\\n\";\n    await putFileAsync(path.join(this.productionDir, outputFile), content);\n  }\n\n  /**\n   * Generate the main entry point (app.ts)\n   *\n   * @param contributedImports lines from connector `generate` hooks, appended\n   * to section 4 after `./routes`\n   */\n  private async generateEntryPoint(contributedImports: string[] = []): Promise<void> {\n    console.log(colors.yellow(\"   Generating entry point...\"));\n\n    // The names this build resolved, baked in as a literal. The entry imports\n    // the config source, and that source is re-evaluated at startup — an\n    // env-conditional `connectors` array can hand the boot a different list\n    // than the one drained here. A literal is the only part of the array that\n    // survives into the artifact unchanged, so it is what the boot compares\n    // against.\n    const expectedNames = this.connectors\n      .map((connector) => JSON.stringify(connector.name))\n      .join(\", \");\n\n    // Build imports based on which files were generated\n    const imports: string[] = [\n      \"// 1. Bootstrap (loads .env, initializes framework)\",\n      'import \"./bootstrap\";',\n      \"\",\n      \"// 2. Load configs\",\n      'import \"./config-loader\";',\n      \"\",\n      // Registration has to sit between the config being available and the\n      // first phase starting: the connectors listed in `connectors` are the\n      // same ones this build drained contributions from, so the bundle boots\n      // exactly what it was built for. Register any later and an early-phase\n      // connector would miss its own start.\n      \"// 2.5 Register connectors declared in warlock.config (the same array this\",\n      \"//     build read its contributions from, so built-for and boots-with match).\",\n      \"//     The config is imported STATICALLY so esbuild bakes it into the bundle\",\n      \"//     and the array is handed over explicitly — an artifact has no\",\n      \"//     warlock.config.ts beside it to read at runtime, and a registration\",\n      \"//     that quietly found nothing to register is the exact drift this\",\n      \"//     section exists to prevent.\",\n      \"//     `expectedNames` is the list this build resolved, in order — boot\",\n      \"//     refuses to start when the config hands over a different set or order.\",\n      'import { registerConfiguredConnectors } from \"@warlock.js/core\";',\n      `import warlockConfig from \"${APP_ROOT_FROM_PRODUCTION_DIR}warlock.config\";`,\n      `registerConfiguredConnectors(warlockConfig.connectors ?? [], { expectedNames: [${expectedNames}] });`,\n      \"\",\n      \"// 2.6 Fail fast on a busy port. `http` is a LATE-phase connector, so its\",\n      \"//     own preflight is not reached until the database and cache have\",\n      \"//     connected and every app module has been imported — seconds of work\",\n      \"//     thrown away before anyone learns the port was taken. This probe is\",\n      \"//     a bind-and-release on a socket that is never served, and it reports\",\n      \"//     on stderr because no log channel is configured this early.\",\n      'import { Application, connectorsManager, ConnectorLifecyclePhase, preflightConfiguredHttpPort } from \"@warlock.js/core\";',\n      'if (Application.hasRole(\"api\") || Application.hasRole(\"web\")) {',\n      \"  await preflightConfiguredHttpPort();\",\n      \"}\",\n      \"\",\n      \"// 3. Start early-phase connectors (database, cache, logger, ...)\",\n      \"//    so data sources, cache, etc. are ready before app code runs\",\n      \"await connectorsManager.startPhase(ConnectorLifecyclePhase.Early);\",\n    ];\n\n    // App code uses dynamic `await import(...)` so each module's side\n    // effects fire at THIS point in execution. Static imports would be\n    // hoisted to module-instantiation time (before the early-phase await\n    // resolves), which is exactly the bug this split is meant to fix.\n    //\n    // The guarantee comes from the imports being DYNAMIC — esbuild wraps a\n    // dynamically-imported module in its `__esm(() => {…})` helper and runs\n    // it at the await, not at instantiation. It does NOT come from\n    // `splitting: true`, which only decides one-file-vs-chunks. This\n    // previously said splitting was required; it is not, and `singleBundle`\n    // (splitting: false) preserves the ordering.\n    imports.push(\"\", \"// 4. Load app code (events, locales, main, routes)\");\n\n    if (this.generatedFiles.events) {\n      imports.push('await import(\"./events\");');\n    }\n    if (this.generatedFiles.locales) {\n      imports.push('await import(\"./locales\");');\n    }\n    if (this.generatedFiles.main) {\n      imports.push('await import(\"./main\");');\n    }\n    if (this.generatedFiles.routes) {\n      imports.push('if (Application.hasRole(\"api\")) {', '  await import(\"./routes\");', \"}\");\n    }\n    if (this.generatedFiles.workers) {\n      imports.push('if (Application.hasRole(\"worker\")) {', '  await import(\"./workers\");', \"}\");\n    }\n\n    // Contributor imports come AFTER `./routes`, never before: a connector\n    // that registers pages needs the routes app code already collected —\n    // the same ordering dev uses (routes first, then the connector installs\n    // on top of them). Emitted verbatim; the contributor writes the whole\n    // statement (e.g. `await import(\"./pages\");`).\n    imports.push(...contributedImports);\n\n    // A rejecting validator (Application.onValidateBoot) must abort boot\n    // before late-phase connectors bind a port.\n    imports.push(\n      \"\",\n      \"// 5. Run startup validators registered via Application.onValidateBoot(...)\",\n      \"await Application.runStartupValidators();\",\n    );\n\n    // Start late-phase connectors after app code registers routes/listeners\n    imports.push(\n      \"\",\n      \"// 6. Start late-phase connectors (http, socket) — routes and\",\n      \"//    listeners registered by app code are now ready to bind\",\n      \"await connectorsManager.startPhase(ConnectorLifecyclePhase.Late);\",\n      \"\",\n      \"// 7. Signal a complete boot so `Application.onceBooted(...)` listeners fire\",\n      \"Application.markBooted({ environment: Application.environment, runtimeStrategy: Application.runtimeStrategy });\",\n      \"connectorsManager.shutdownOnProcessKill();\",\n    );\n\n    const content = imports.join(\"\\n\") + \"\\n\";\n    await putFileAsync(path.join(this.productionDir, \"app.ts\"), content);\n  }\n\n  /**\n   * Bundle with esbuild\n   *\n   * @param writeOutDir the directory esbuild writes into — the build's\n   * private temp directory, NOT `options.outdir`. Taken as a parameter\n   * rather than read off `this.options` because the two are different paths\n   * with different meanings: `options.outdir` is the final destination every\n   * consumer bakes into the artifact, and this is only where bytes land\n   * before promotion moves them there.\n   */\n  private async bundle(writeOutDir: string): Promise<void> {\n    console.log(colors.magenta(\"   Bundling with esbuild...\"));\n\n    const entryPoint = path.join(this.productionDir, \"app.ts\");\n    const outFileName = this.options.outFile!;\n    // Strip extension so entryNames produces \"<base>.js\" via esbuild\n    const entryName = path.basename(outFileName, path.extname(outFileName));\n\n    // `singleBundle` and `esmShim` are ours, not esbuild's — it throws on\n    // unknown keys, and the user options are spread into its call verbatim.\n    const singleBundle = this.options.singleBundle === true;\n    const esmShim = this.options.esmShim !== false;\n    // Read before deleting: the merged banner is applied AFTER the user\n    // spread, so a user banner must not be lost to it or clobber the shim.\n    const userBanner = this.options.banner;\n\n    // `outFile` and `entryPath` are REQUIRED on ResolvedBuildConfig on purpose:\n    // resolve-build-config.ts documents that widening them pushed a lie downstream\n    // into start-production.command.ts, which then could not trust its own config.\n    // This is the one place they must be absent - the object is spread into esbuild's\n    // call verbatim and esbuild throws on unknown keys.\n    //\n    // Stripped off a LOCAL COPY of `this.options`, never off `this.options`\n    // itself: `buildContext()` hands `this.options` to every `generate`/`emit`\n    // contribution hook, including the `emit` pass that runs AFTER this method\n    // returns (`build()` step 5.6). Deleting these keys from the shared object\n    // used to leave those hooks reading `undefined` for `outFile`, `entryPath`,\n    // `singleBundle`, `esmShim` and `banner` even though `ConnectorBuildContext`\n    // types them as present. A shallow copy is enough — every field this method\n    // reads off it is either scalar or already re-merged below (`define`,\n    // `external`, `loader`, `banner`), so nothing here needs a deep clone.\n    const esbuildOptions: Partial<ResolvedBuildConfig> = { ...this.options };\n\n    delete esbuildOptions.outFile;\n    delete esbuildOptions.entryPath;\n    delete esbuildOptions.singleBundle;\n    delete esbuildOptions.esmShim;\n    delete esbuildOptions.banner;\n    delete esbuildOptions.routeRegistrationTimeoutMs;\n\n    await ensureDirectoryAsync(writeOutDir);\n\n    const alias = this.buildAliasMapFromTsconfig();\n\n    // Whether this build decides externality per import EDGE\n    // (`bundle-framework-dependencies.ts`, which explains the rule at\n    // length) or keeps the blunt `packages: \"external\"`.\n    //\n    // Not in `singleBundle` mode: that bundles everything by definition, and\n    // a plugin that can only ever ADD an external would silently narrow it.\n    // Not when the user set `packages` themselves: their value has always\n    // won over the default below, and it must keep winning — the plugin is\n    // the default's implementation, not a new policy layered on top.\n    const perEdgeExternals = !singleBundle && (esbuildOptions as any).packages === undefined;\n\n    // The user can override `format`, so gate the shim on the EFFECTIVE\n    // format rather than on the default below. A CJS build already has\n    // `require` and friends; injecting them there would be a redefinition.\n    const isEsm = (esbuildOptions.format ?? \"esm\") === \"esm\";\n    const banner = mergeBanner(userBanner, esmShim && isEsm ? ESM_INTEROP_SHIM : undefined);\n\n    // Contributor patch, split into the part that can ride the spread order\n    // and the three keys that cannot. `jsx` and `jsxImportSource` are placed\n    // BEFORE the user spread below, which gives the ruled precedence for\n    // free: builder defaults < contributor < user config.\n    //\n    // `define`, `external` and `loader` are pulled out because a spread\n    // REPLACES them wholesale — the same trap `banner` documents. Two\n    // contributors' env defines, a contributor's optional peers plus the\n    // user's, or a contributor's `.svg` loader alongside the user's `.png`,\n    // must both survive, so they are merged by key/by set and re-applied\n    // after the spread with the user still winning per key.\n    const {\n      define: contributedDefine,\n      external: contributedExternal,\n      loader: contributedLoader,\n      plugins: contributedPlugins,\n      ...contributedOptions\n    } = this.contributedEsbuild;\n\n    const userDefine: Record<string, string> | undefined = esbuildOptions.define;\n    const userExternal: string[] | undefined = esbuildOptions.external;\n    const userLoader: ConnectorEsbuildPatch[\"loader\"] = esbuildOptions.loader;\n\n    const define =\n      contributedDefine || userDefine ? { ...contributedDefine, ...userDefine } : undefined;\n\n    const loader =\n      contributedLoader || userLoader ? { ...contributedLoader, ...userLoader } : undefined;\n\n    const external =\n      contributedExternal || userExternal\n        ? dedupe([...(contributedExternal ?? []), ...(userExternal ?? [])])\n        : undefined;\n\n    if (singleBundle) {\n      console.log(\n        colors.magenta(\n          \"   Single-bundle mode — one JS file\" +\n            (esmShim && isEsm ? \" with the ESM interop shim\" : \"\") +\n            \". Native .node addons are still emitted alongside it.\",\n        ),\n      );\n    }\n\n    try {\n      await esbuild.build({\n        platform: \"node\",\n        entryPoints: [entryPoint],\n        bundle: true,\n        // Both are DEFAULTS the user can override — they sit before the\n        // `...esbuildOptions` spread deliberately. `singleBundle` moves them,\n        // an explicit `splitting`/`packages` in warlock.config.ts beats both.\n        //\n        // Phase ordering does not depend on `splitting`: it comes from the\n        // generated app.ts using dynamic `await import(...)` (see\n        // generateAppEntry above), which esbuild defers to the call site in\n        // either mode. Splitting only decides one file vs chunks.\n        splitting: !singleBundle,\n        // `\"bundle\"` under `perEdgeExternals` is not \"bundle everything\":\n        // the plugin below returns `external: true` for every bare specifier\n        // this build must not bundle, which is all of them bar the framework's\n        // own declared dependencies. Saying `\"external\"` here instead would\n        // externalise them before the plugin could rule.\n        packages: singleBundle || perEdgeExternals ? \"bundle\" : \"external\",\n        minify: esbuildOptions.minify,\n        sourcemap: esbuildOptions.sourcemap === true ? \"linked\" : esbuildOptions.sourcemap,\n        format: \"esm\",\n        // Targeting a concrete Node version (not \"esnext\") so esbuild\n        // transpiles TC39 stage 3 decorators into helpers — Node does not\n        // implement them natively yet.\n        target: [\"node22\"],\n        entryNames: entryName,\n        alias,\n        plugins: [\n          nativeNodeModulesPlugin,\n          // BEFORE the framework-dependency plugin, and the order is\n          // load-bearing: the first `onResolve` callback to answer wins, and\n          // `app/users/...` is a bare specifier the other one would rule\n          // external.\n          tsconfigPathAliases(this.tsconfigPathAliasConfig()),\n          ...(perEdgeExternals\n            ? [bundleFrameworkDependencies({ appRoot: rootPath(), aliasKeys: Object.keys(alias) })]\n            : []),\n          // Contributor plugins run last: they load their own file types and\n          // must not shadow the resolvers above.\n          ...(contributedPlugins ?? []),\n        ],\n        // Between the defaults and the user spread — the ruled precedence.\n        ...contributedOptions,\n        ...(esbuildOptions as any),\n        // AFTER the spread, and NOT overridable: `esbuildOptions.outdir` rides\n        // that spread carrying the FINAL destination, which is exactly where\n        // this build must not write yet. The final path is the user's setting\n        // and stays authoritative for everyone reading the config — it is only\n        // this one esbuild call that is redirected, and only until promotion\n        // moves the result onto that very path.\n        outdir: writeOutDir,\n        // AFTER the spread for the same reason `banner` is: a spread replaces\n        // these objects instead of merging them, so the merged values are\n        // re-applied here. The user still wins — they were merged in last.\n        ...(define ? { define } : {}),\n        ...(external ? { external } : {}),\n        ...(loader ? { loader } : {}),\n        // AFTER the spread, and intentionally so: `banner` is an object, and\n        // both the config merge and this spread REPLACE it wholesale rather\n        // than merging. Left as a default above, any user banner would delete\n        // the shim; left to the spread, the shim would delete theirs. The\n        // merge is the only form that keeps both.\n        ...(banner ? { banner } : {}),\n      });\n    } catch (e) {\n      console.log(e);\n      throw e;\n    }\n  }\n\n  /**\n   * The WILDCARD half of the same tsconfig `paths` map that\n   * {@link ProductionBuilder.buildAliasMapFromTsconfig} reads the exact half\n   * of. `tsconfig-path-aliases.ts` explains why the two halves need different\n   * mechanisms — in short, esbuild's `alias` option cannot express a wildcard,\n   * so the entries it skips have to be resolved by a plugin instead of being\n   * left to no one.\n   */\n  private tsconfigPathAliasConfig(): { baseUrl: string; paths: Record<string, string[]> } {\n    tsconfigManager.init();\n\n    return {\n      baseUrl: path.resolve(process.cwd(), tsconfigManager.baseUrl),\n      paths: tsconfigManager.aliases as Record<string, string[]>,\n    };\n  }\n\n  /**\n   * Build an alias map from tsconfig `paths` so esbuild resolves local\n   * source aliases (e.g. `@warlock.js/cascade`) to their on-disk source\n   * folders during bundling. Without this, `packages: \"external\"` would\n   * leave those bare specifiers as raw imports and Node would fail to\n   * resolve them at runtime (they aren't installed in node_modules).\n   *\n   * Only exact (non-wildcard) aliases are included — esbuild's `alias`\n   * option doesn't support glob-style mappings. The wildcard half is not\n   * dropped, it is handled elsewhere: see\n   * {@link ProductionBuilder.tsconfigPathAliasConfig}.\n   */\n  private buildAliasMapFromTsconfig(): Record<string, string> {\n    tsconfigManager.init();\n\n    const alias: Record<string, string> = {};\n    const baseUrl = path.resolve(process.cwd(), tsconfigManager.baseUrl);\n\n    for (const [from, to] of Object.entries(tsconfigManager.aliases)) {\n      if (from.endsWith(\"/*\") || !Array.isArray(to) || to.length === 0) {\n        continue;\n      }\n\n      const target = to[0];\n\n      if (target === undefined) {\n        continue;\n      }\n\n      alias[from] = path.resolve(baseUrl, target);\n    }\n\n    return alias;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8DA,MAAM,mBACJ;;;;;;;;;;;;;;AAoBF,SAAS,YACP,YACA,MACoC;CACpC,IAAI,CAAC,MAAM,OAAO;CAElB,MAAM,SAAS,YAAY;CAE3B,OAAO;EACL,GAAG;EACH,IAAI,SAAS,GAAG,OAAO,WAAW;CACpC;AACF;;;;;;;;;;AAWA,MAAM,+BAA+B;;;;;;AAOrC,IAAa,oBAAb,MAA+B;;uBAEI,YAAY,YAAY;oBAOd,CAAC;4BAMQ,CAAC;wBAoO5B;GACvB,SAAS;GACT,QAAQ;GACR,MAAM;GACN,QAAQ;GACR,SAAS;EACX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAxMA,MAAa,QAAuB;EAClC,QAAQ,IAAI,OAAO,KAAK,8BAA8B,CAAC;EAMvD,4BAA4B;EAG5B,MAAM,KAAK,kBAAkB;EAE7B,MAAM,cAAc,KAAK,QAAQ;EACjC,MAAM,aAAa,oBAAoB,WAAW;EAKlD,IAAI;EAEJ,IAAI;GAEF,MAAM,KAAK,sBAAsB;GAGjC,MAAM,KAAK,mBAAmB;GAG9B,MAAM,KAAK,uBAAuB;GAGlC,MAAM,KAAK,4BAA4B;GAYvC,IAAI,MAXsB,KAAK,yBAAyB,GAYtD,MAAM,KAAK,uBAAuB;GAKpC,MAAM,KAAK,OAAO,UAAU;GAK5B,SAAS,MAAM,eAAe,YAAY,WAAW;GAMrD,MAAM,qBAAqB,KAAK,YAAY,KAAK,aAAa,CAAC;GAM/D,MAAM,4BAA4B,WAAW;GAG7C,MAAM,gBAAgB,MAAM;EAC9B,SAAS,OAAO;GACd,IAAI,QAGF,MAAM,kBAAkB,MAAM;QAI9B,MAAM,qBAAqB,UAAU,CAAC,CAAC,YAAY,MAAS;GAG9D,MAAM;EACR;EAGA,MAAM,qBAAqB,KAAK,aAAa;EAE7C,QAAQ,IAAI,OAAO,MAAM,iBAAiB,CAAC;EAC3C,QAAQ,IAAI,sCAAsC,OAAO,KAAK,eAAe,GAAG;CAClF;;;;CAKA,MAAc,oBAAmC;EAC/C,KAAK,UAAU,mBAAmB;EAGlC,MAAM,aAAa,qBAAqB,IAAI,YAAY,KAAK,CAAC;EAQ9D,2BAA2B,CAAC,GAAG,UAAU,CAAC;EAS1C,+BAA+B,CAAC,GAAG,UAAU,CAAC;EAE9C,KAAK,aAAa;EAGlB,MAAM,qBAAqB,KAAK,aAAa;CAC/C;;;;CAKA,AAAQ,eAAsC;EAC5C,OAAO;GACL,eAAe,KAAK;GACpB,SAAS,SAAS;GAClB,SAAS,KAAK;GACd,gBAAgB,KAAK;EACvB;CACF;;;;;;CAOA,MAAc,8BAA6C;EACzD,IAAI,CAAC,KAAK,WAAW,MAAM,cAAc,UAAU,SAAS,KAAK,GAAG;GAClE,MAAM,qBAAqB,SAAS,CAAC;GACrC;EACF;EAEA,KAAK,kBACH,MAAM,iCAAiC;GACrC,KAAK,SAAS;GACd,WAAW,KAAK,QAAQ;EAC1B,CAAC,EAAC,CACF;CACJ;;;;;;;;;;;;;;;;;;;;;CAsBA,MAAc,2BAA6C;EACzD,MAAM,cAAc,KAAK,WAAW,MAAM,cAAc,QAAQ,UAAU,OAAO,QAAQ,CAAC;EAE1F,MAAM,EAAE,cAAc,YAAY,MAAM,yBACtC,KAAK,YACL,KAAK,aAAa,CACpB;EAEA,KAAK,qBAAqB;EAE1B,IAAI,aAAa,SAAS,GACxB,MAAM,KAAK,mBAAmB,YAAY;EAG5C,OAAO;CACT;;;;CAgBA,MAAc,wBAAuC;EACnD,QAAQ,IAAI,OAAO,OAAO,mCAAmC,CAAC;EAG9D,MAAM,KAAK,kBAAkB;EAG7B,MAAM,KAAK,qBAAqB;EAGhC,MAAM,CAAC,SAAS,QAAQ,MAAM,QAAQ,WAAW,MAAM,QAAQ,IAAI;GACjE,KAAK,gBAAgB;GACrB,KAAK,eAAe;GACpB,KAAK,aAAa;GAClB,KAAK,eAAe;GACpB,KAAK,gBAAgB;EACvB,CAAC;EAED,KAAK,iBAAiB;GAAE;GAAS;GAAQ;GAAM;GAAQ;EAAQ;CACjE;;;;CAKA,MAAc,oBAAmC;EAM/C,MAAM,UAAU,GAJY,MAAM,gBAAgB,QAAQ,cAAc,CAAC,IACrE,0CACA,GAEkC;;;;;;;;;;;EAYtC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,cAAc,GAAG,OAAO;CAC3E;;;;;;;;;;;;;CAcA,MAAc,yBAAwC;EACpD,MAAM,iBAAiB,MAAM,KAAK,wBAAwB;GACxD,KAAK,KAAK;GACV,UAAU;EACZ,CAAC;EAED,MAAM,CAAC,OAAO,cAAc,MAAM,QAAQ,IAAI,CAC5C,QAAQ,IACN,eAAe,IAAI,OAAO,UAAU;GAClC;GACA,SAAS,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,IAAI,CAAC;EACjE,EAAE,CACJ,GACA,iBAA4D,SAAS,cAAc,CAAC,CACtF,CAAC;EAED,kCAAkC,OAAO,OAAO,KAAK,WAAW,gBAAgB,CAAC,CAAC,CAAC;CACrF;;;;;;CAOA,MAAc,WAAW,SAA+D;EAOtF,QAAO,MANa,KAAK,sBAAsB;GAC7C,KAAK,QAAQ;GACb,UAAU;EACZ,CAAC,EAGW,CACT,QAAQ,SAAS,QAAQ,aAAa,IAAI,CAAC,CAAC,CAC5C,KAAK,CAAC,CACN,KAAK,SAAS,mBAAmB,KAAK,QAAQ,eAAe,EAAE,CAAC;CACrE;;;;CAKA,MAAc,uBAAsC;EASlD,MAAM,eAAc,MANA,KAAK,iBAAiB;GACxC,KAHsB,KAAK,KAAK,QAAQ,IAAI,GAAG,YAG5B;GACnB,UAAU;EACZ,CAAC,EAGwB,CACtB,QAAQ,MAAM,aAAa,gBAAgB,CAAC,CAAC,CAAC,CAC9C,KAAK,OAAO;GACX,MAAM,EAAE,QAAQ,eAAe,EAAE;GACjC,KAAK,kBAAkB,gBAAgB,CAAC;EAC1C,EAAE,CAAC,CACF,QAAQ,UAAkD,MAAM,QAAQ,MAAS,CAAC,CAClF,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAM9C,MAAM,UAAoB,CACxB,wEACF;EACA,MAAM,gBAA0B,CAAC;EACjC,MAAM,iBAA2B,CAAC;EAClC,MAAM,YAAsB,CAAC;EAE7B,YAAY,SAAS,EAAE,MAAM,YAAY,OAAO,UAAU;GAExD,MAAM,UAAU,SAAS;GACzB,cAAc,KAAK,UAAU,QAAQ,0BAA0B,WAAW,GAAG;GAC7E,eAAe,KAAK,aAAa,KAAK,UAAU,GAAG,EAAE,IAAI,QAAQ,GAAG;GACpE,UAAU,KAAK,uCAAuC,KAAK,UAAU,GAAG,EAAE,IAAI,QAAQ,GAAG;EAC3F,CAAC;EAOD,MAAM,UAAU;GACd,GALuB,MAAM,gBAAgB,QAAQ,aAAa,CAAC,IACjE,CAAC,oCAAoC,IACrC,CAAC;GAIH,GAAG;GACH;GACA;GACA,GAAG;GACH;GACA;GACA,GAAG;GACH;GACA;GACA,GAAG;GACH;EACF,CAAC,CAAC,KAAK,IAAI;EAEX,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,kBAAkB,GAAG,OAAO;CAC/E;;;;;CAMA,MAAc,kBAAoC;EAChD,MAAM,QAAQ,MAAM,KAAK,WAAW,YAAY;EAChD,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,UAAU,MACb,KAAK,MAAM,UAAU;GACpB,IAAI,CAAC,KAAK,SAAS,OAAO,GAAG,OAAO,WAAW,KAAK;GACpD,MAAM,eAAe,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;GAC1C,OAAO;IACL,oBAAoB,MAAM,SAAS,KAAK;IACxC;IACA,0CAA0C,KAAK,UAAU,IAAI,EAAE,qCAAqC,MAAM,uBAAuB,KAAK,UAAU,YAAY,EAAE;GAChK,CAAC,CAAC,KAAK,IAAI;EACb,CAAC,CAAC,CACD,KAAK,IAAI;EACZ,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,YAAY,GAAG,UAAU,IAAI;EAC9E,OAAO;CACT;;;;;CAMA,MAAc,iBAAmC;EAC/C,MAAM,QAAQ,MAAM,KAAK,WAAW,WAAW;EAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,WAAW;EACjD,OAAO;CACT;;;;;CAMA,MAAc,eAAiC;EAC7C,MAAM,QAAQ,MAAM,KAAK,WAAW,UAAU;EAC9C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,SAAS;EAC/C,OAAO;CACT;;;;;CAMA,MAAc,iBAAmC;EAC/C,MAAM,QAAQ,MAAM,KAAK,WAAW,WAAW;EAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,WAAW;EACjD,OAAO;CACT;;;;;CAMA,MAAc,kBAAoC;EAChD,MAAM,QAAQ,MAAM,KAAK,WAAW,YAAY;EAChD,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,YAAY;EAClD,OAAO;CACT;;;;CAKA,MAAc,oBAAoB,aAAuB,YAAmC;EAE1F,MAAM,UADU,YAAY,KAAK,eAAe,WAAW,WAAW,GAChD,CAAC,CAAC,KAAK,IAAI,IAAI;EACrC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,UAAU,GAAG,OAAO;CACvE;;;;;;;CAQA,MAAc,mBAAmB,qBAA+B,CAAC,GAAkB;EACjF,QAAQ,IAAI,OAAO,OAAO,8BAA8B,CAAC;EAQzD,MAAM,gBAAgB,KAAK,WACxB,KAAK,cAAc,KAAK,UAAU,UAAU,IAAI,CAAC,CAAC,CAClD,KAAK,IAAI;EAGZ,MAAM,UAAoB;GACxB;GACA;GACA;GACA;GACA;GACA;GAMA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,8BAA8B,6BAA6B;GAC3D,kFAAkF,cAAc;GAChG;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF;EAaA,QAAQ,KAAK,IAAI,qDAAqD;EAEtE,IAAI,KAAK,eAAe,QACtB,QAAQ,KAAK,6BAA2B;EAE1C,IAAI,KAAK,eAAe,SACtB,QAAQ,KAAK,8BAA4B;EAE3C,IAAI,KAAK,eAAe,MACtB,QAAQ,KAAK,2BAAyB;EAExC,IAAI,KAAK,eAAe,QACtB,QAAQ,KAAK,uCAAqC,iCAA+B,GAAG;EAEtF,IAAI,KAAK,eAAe,SACtB,QAAQ,KAAK,0CAAwC,kCAAgC,GAAG;EAQ1F,QAAQ,KAAK,GAAG,kBAAkB;EAIlC,QAAQ,KACN,IACA,+EACA,2CACF;EAGA,QAAQ,KACN,IACA,mEACA,gEACA,qEACA,IACA,gFACA,mHACA,4CACF;EAEA,MAAM,UAAU,QAAQ,KAAK,IAAI,IAAI;EACrC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,QAAQ,GAAG,OAAO;CACrE;;;;;;;;;;;CAYA,MAAc,OAAO,aAAoC;EACvD,QAAQ,IAAI,OAAO,QAAQ,6BAA6B,CAAC;EAEzD,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,QAAQ;EACzD,MAAM,cAAc,KAAK,QAAQ;EAEjC,MAAM,YAAY,KAAK,SAAS,aAAa,KAAK,QAAQ,WAAW,CAAC;EAItE,MAAM,eAAe,KAAK,QAAQ,iBAAiB;EACnD,MAAM,UAAU,KAAK,QAAQ,YAAY;EAGzC,MAAM,aAAa,KAAK,QAAQ;EAiBhC,MAAM,iBAA+C,EAAE,GAAG,KAAK,QAAQ;EAEvE,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EAEtB,MAAM,qBAAqB,WAAW;EAEtC,MAAM,QAAQ,KAAK,0BAA0B;EAW7C,MAAM,mBAAmB,CAAC,gBAAiB,eAAuB,aAAa;EAK/E,MAAM,SAAS,eAAe,UAAU,WAAW;EACnD,MAAM,SAAS,YAAY,YAAY,WAAW,QAAQ,mBAAmB,MAAS;EAatF,MAAM,EACJ,QAAQ,mBACR,UAAU,qBACV,QAAQ,mBACR,SAAS,oBACT,GAAG,uBACD,KAAK;EAET,MAAM,aAAiD,eAAe;EACtE,MAAM,eAAqC,eAAe;EAC1D,MAAM,aAA8C,eAAe;EAEnE,MAAM,SACJ,qBAAqB,aAAa;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;EAE9E,MAAM,SACJ,qBAAqB,aAAa;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;EAE9E,MAAM,WACJ,uBAAuB,eACnB,OAAO,CAAC,GAAI,uBAAuB,CAAC,GAAI,GAAI,gBAAgB,CAAC,CAAE,CAAC,IAChE;EAEN,IAAI,cACF,QAAQ,IACN,OAAO,QACL,yCACG,WAAW,QAAQ,+BAA+B,MACnD,uDACJ,CACF;EAGF,IAAI;GACF,MAAM,QAAQ,MAAM;IAClB,UAAU;IACV,aAAa,CAAC,UAAU;IACxB,QAAQ;IASR,WAAW,CAAC;IAMZ,UAAU,gBAAgB,mBAAmB,WAAW;IACxD,QAAQ,eAAe;IACvB,WAAW,eAAe,cAAc,OAAO,WAAW,eAAe;IACzE,QAAQ;IAIR,QAAQ,CAAC,QAAQ;IACjB,YAAY;IACZ;IACA,SAAS;KACP;KAKA,oBAAoB,KAAK,wBAAwB,CAAC;KAClD,GAAI,mBACA,CAAC,4BAA4B;MAAE,SAAS,SAAS;MAAG,WAAW,OAAO,KAAK,KAAK;KAAE,CAAC,CAAC,IACpF,CAAC;KAGL,GAAI,sBAAsB,CAAC;IAC7B;IAEA,GAAG;IACH,GAAI;IAOJ,QAAQ;IAIR,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAC3B,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;IAC/B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAM3B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC7B,CAAC;EACH,SAAS,GAAG;GACV,QAAQ,IAAI,CAAC;GACb,MAAM;EACR;CACF;;;;;;;;;CAUA,AAAQ,0BAAgF;EACtF,gBAAgB,KAAK;EAErB,OAAO;GACL,SAAS,KAAK,QAAQ,QAAQ,IAAI,GAAG,gBAAgB,OAAO;GAC5D,OAAO,gBAAgB;EACzB;CACF;;;;;;;;;;;;;CAcA,AAAQ,4BAAoD;EAC1D,gBAAgB,KAAK;EAErB,MAAM,QAAgC,CAAC;EACvC,MAAM,UAAU,KAAK,QAAQ,QAAQ,IAAI,GAAG,gBAAgB,OAAO;EAEnE,KAAK,MAAM,CAAC,MAAM,OAAO,OAAO,QAAQ,gBAAgB,OAAO,GAAG;GAChE,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,QAAQ,EAAE,KAAK,GAAG,WAAW,GAC7D;GAGF,MAAM,SAAS,GAAG;GAElB,IAAI,WAAW,QACb;GAGF,MAAM,QAAQ,KAAK,QAAQ,SAAS,MAAM;EAC5C;EAEA,OAAO;CACT;AACF"}
+{"version":3,"file":"production-builder.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/production-builder.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport {\n  ensureDirectoryAsync,\n  fileExistsAsync,\n  getFileAsync,\n  getJsonFileAsync,\n  putFileAsync,\n  removeDirectoryAsync,\n} from \"@warlock.js/fs\";\nimport esbuild from \"esbuild\";\nimport glob from \"fast-glob\";\nimport path from \"path\";\nimport { assertNoReservedConnectorNames } from \"../connectors/assert-no-reserved-connector-names\";\nimport { assertUniqueConnectorNames } from \"../connectors/assert-unique-connector-names\";\nimport type { Connector, ConnectorBuildContext, ConnectorEsbuildPatch } from \"../connectors/types\";\nimport { configKeyFromPath } from \"../config/config-key-from-path\";\nimport {\n  isConfigFile,\n  isEventFile,\n  isLocaleFile,\n  isMainFile,\n  isRouteFile,\n  isWorkerFile,\n} from \"../dev-server/special-file-patterns\";\nimport { tsconfigManager } from \"../dev-server/tsconfig-manager\";\nimport { appPath, rootPath, warlockPath } from \"../utils\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\nimport { assertGeneratedImportsAreDeclared } from \"./assert-generated-imports\";\nimport { bundleFrameworkDependencies } from \"./bundle-framework-dependencies\";\nimport { dedupe, runEmitContributions, runGenerateContributions } from \"./build-contributions\";\nimport { writeDistBuildManifestAsync } from \"./dist-build-manifest\";\nimport { nativeNodeModulesPlugin } from \"./esbuild-plugins\";\nimport { assertEsbuildBinaryIsLinked } from \"./esbuild-preflight\";\nimport { collectRouteRegistrationSnapshot } from \"./route-registration-snapshot\";\nimport { clearOwnedRouteTypes } from \"../dev-server/route-types-publisher\";\nimport {\n  commitDistAsync,\n  createTempOutputDir,\n  rollbackDistAsync,\n  stageDistAsync,\n  type StagedDist,\n} from \"./promote-dist\";\nimport { resolveBuildConfig, type ResolvedBuildConfig } from \"./resolve-build-config\";\nimport { tsconfigPathAliases } from \"./tsconfig-path-aliases\";\n\n/**\n * Recreates `require`, `__filename` and `__dirname` at the top of an ESM bundle.\n *\n * Bundled CommonJS dependencies call `require(\"node:assert\")` and read\n * `__dirname` to locate their own assets. Neither exists in an ES module, so\n * esbuild substitutes a stub that throws — **after the build has reported\n * success**. `Dynamic require of \"node:assert\" is not supported` is that stub\n * firing, and it is the defect this shim removes.\n *\n * `__dirname` matters as much as `require`: without it a dependency resolving\n * an asset path silently gets `undefined` and fails later, further from the\n * cause.\n *\n * Written as one line because esbuild inserts a banner verbatim above the\n * bundle and a multi-line string here would shift every mapped line.\n */\nconst ESM_INTEROP_SHIM =\n  \"import{createRequire as __wlCreateRequire}from'node:module';\" +\n  \"import{fileURLToPath as __wlFileURLToPath}from'node:url';\" +\n  \"import{dirname as __wlDirname}from'node:path';\" +\n  \"const require=__wlCreateRequire(import.meta.url);\" +\n  \"const __filename=__wlFileURLToPath(import.meta.url);\" +\n  \"const __dirname=__wlDirname(__filename);\";\n\n/**\n * Combine the framework's banner with the user's, keeping both.\n *\n * esbuild's `banner` is an object keyed by output type, and every merge in the\n * path to it — the config merge and the options spread — REPLACES that object\n * rather than merging it. So whichever is applied second silently deletes the\n * other. This is the only place the two can coexist.\n *\n * The shim goes first: it defines `require`, which a user banner may use.\n *\n * @param userBanner banner from `warlock.config.ts`, if any\n * @param shim the interop shim, or undefined when it does not apply\n */\nfunction mergeBanner(\n  userBanner: Record<string, string> | undefined,\n  shim: string | undefined,\n): Record<string, string> | undefined {\n  if (!shim) return userBanner;\n\n  const userJs = userBanner?.js;\n\n  return {\n    ...userBanner,\n    js: userJs ? `${shim}${userJs}` : shim,\n  };\n}\n\n/**\n * Prefix every generated file uses to reach the app root.\n *\n * Generated sources are written into `.warlock/production/`, two levels below\n * the app root, so `../../` lands back on it — the same hop already spelled\n * out in the `../../src/app/…` and `../../src/config/…` imports the module and\n * config-loader generators emit. Named once so a generator that needs a new\n * app-root file (`warlock.config`) cannot pick a different depth.\n */\nconst APP_ROOT_FROM_PRODUCTION_DIR = \"../../\";\n\n/**\n * Production Builder\n * Generates production-ready files and bundles them for deployment\n * Build options are loaded from warlock.config.ts\n */\nexport class ProductionBuilder {\n  private options!: ResolvedBuildConfig;\n  private readonly productionDir = warlockPath(\"production\");\n\n  /**\n   * Connectors declared in `warlock.config.ts`. Read statically — `build`\n   * never calls `boot()`/`start()` on them; it only\n   * drains their `build` contributions.\n   */\n  private connectors: readonly Connector[] = [];\n\n  /**\n   * The contributors' merged esbuild patch, produced by the `generate` pass\n   * and consumed by {@link bundle}.\n   */\n  private contributedEsbuild: ConnectorEsbuildPatch = {};\n\n  /** Browser-safe API metadata captured in a fresh registration-only child. */\n  private namedApiRoutes?: readonly import(\"../router/types\").NamedApiRoute[];\n\n  /**\n   * Main build entry point\n   *\n   * The esbuild bundle is written into a TEMP directory next to the real\n   * output directory, never into it, and that directory is renamed over\n   * `outdir` as one filesystem operation — so `outdir` is never observed as\n   * a mix of the old build and the new one, and a build that fails before\n   * that rename never touches `outdir` at all.\n   *\n   * `this.options.outdir` is NOT repointed at the temp directory while that\n   * happens, and must never be. It is not merely a write target: consumers\n   * BAKE it into runtime output — `web`'s build contribution derives the\n   * `clientDir` recorded in its pages manifest from it\n   * (`web/src/build/contribution.ts`) — so a temp path reaching them\n   * produces an artifact whose browser paths point at a directory promotion\n   * has since renamed away. The temp path is passed explicitly, as a\n   * parameter, to the one operation that writes into it ({@link bundle});\n   * everything else, `buildContext()` included, keeps reading the final\n   * destination.\n   *\n   * That is also why promotion is STAGED rather than done at the very end.\n   * Connector `emit` hooks write real artifacts (the web client bundle) and\n   * see the final `outdir`, so they must run when `outdir` genuinely holds\n   * this build — after the rename, not before it, or promotion would replace\n   * the directory they just wrote into. The previous build is kept parked\n   * aside until they finish: `emit` throwing rolls the whole promotion back,\n   * and the build-success marker `warlock start` checks is written last of\n   * all, so a failure at any point leaves no `dist` that start will boot.\n   */\n  public async build(): Promise<void> {\n    console.log(colors.cyan(\"Building for production...\\n\"));\n\n    // Step 0: Fail fast when esbuild's native binary never got linked (the\n    // state pnpm leaves a project in when its build-script approval gate\n    // blocked esbuild's postinstall) rather than let bundling die on esbuild's\n    // own cryptic \"package could not be found\" error several steps from now.\n    assertEsbuildBinaryIsLinked();\n\n    // Step 1: Initialize options from config\n    await this.initializeOptions();\n\n    const finalOutDir = this.options.outdir!;\n    const tempOutDir = createTempOutputDir(finalOutDir);\n\n    // Set once the temp directory has been renamed onto `finalOutDir`. Its\n    // presence is what tells the catch below whether a failure has a\n    // promotion to undo or only a temp directory to discard.\n    let staged: StagedDist | undefined;\n\n    try {\n      // Step 2: Generate combined files\n      await this.generateCombinedFiles();\n\n      // Step 3: Generate entry point\n      await this.generateEntryPoint();\n\n      // Step 4: Refuse to bundle code the app could not resolve at runtime\n      await this.assertGeneratedImports();\n\n      // Step 4.5: Drain the connectors' `generate` contributions\n      await this.captureNamedApiRoutesForWeb();\n      const contributed = await this.runGenerateContributions();\n\n      // Step 4.6: Re-assert over what the contributors just wrote.\n      //\n      // Step 4 only saw core's own generated files; a contributor writes its\n      // code (a pages barrel, say) AFTER that assertion, so an undeclared bare\n      // specifier in it reaches the bundle unchecked. Under\n      // `packages: \"external\"` that specifier survives verbatim into the\n      // artifact and dies as ERR_MODULE_NOT_FOUND at runtime — the same failure\n      // step 4 exists to prevent. Skipped when nothing contributed: re-globbing\n      // and re-reading the production dir is pure cost in the common case.\n      if (contributed) {\n        await this.assertGeneratedImports();\n      }\n\n      // Step 5: Bundle with esbuild into the temp directory. The ONLY\n      // operation handed that path — it is a write target, not config.\n      await this.bundle(tempOutDir);\n\n      // Step 5.5: Promote the bundle into `outdir`, keeping the previous\n      // build parked aside. `outdir` now holds exactly this build, so the\n      // steps below write into — and record — the real destination.\n      staged = await stageDistAsync(tempOutDir, finalOutDir);\n\n      // Step 5.6: Drain the connectors' `emit` contributions — after the\n      // bundle is in place (so what they write survives promotion and the\n      // paths they bake in resolve), and BEFORE step 6 deletes the\n      // production directory they may still read.\n      await runEmitContributions(this.connectors, this.buildContext());\n\n      // Step 5.7: Mark `dist` as a genuine, complete build — the one thing\n      // `warlock start` trusts. Written LAST on purpose: every earlier step\n      // can still fail, and until this file exists nothing will boot what\n      // they left behind.\n      await writeDistBuildManifestAsync(finalOutDir);\n\n      // Step 5.8: Commit — drop the parked previous build. Cannot throw.\n      await commitDistAsync(staged);\n    } catch (error) {\n      if (staged) {\n        // The promotion already happened; put the previous build back and\n        // take this half-finished one out of `outdir`.\n        await rollbackDistAsync(staged);\n      } else {\n        // Nothing this build produced ever reached `outdir` — discard the\n        // temp directory and leave `outdir` exactly as it was.\n        await removeDirectoryAsync(tempOutDir).catch(() => undefined);\n      }\n\n      throw error;\n    }\n\n    // Step 6: Remove production folder\n    await removeDirectoryAsync(this.productionDir);\n\n    console.log(colors.green(\"Build complete!\"));\n    console.log(`Start production server by running ${colors.cyan(\"warlock start\")}`);\n  }\n\n  /**\n   * Initialize options from warlock.config.ts\n   */\n  private async initializeOptions(): Promise<void> {\n    this.options = resolveBuildConfig();\n    // Same config object `resolveBuildConfig` just read — `warlock build`\n    // preloads warlock.config.ts, so no additional load happens here.\n    const connectors = warlockConfigManager.get(\"connectors\") ?? [];\n\n    // Checked here, where the array is first read, so nothing downstream has\n    // drained anything yet: the `generate` and `emit` passes run per ENTRY, so\n    // a name listed twice would write its files and merge its esbuild options\n    // twice into an artifact the runtime then boots that name only once from.\n    // A build that half-applied a connector and reported success is worse than\n    // one that never started.\n    assertUniqueConnectorNames([...connectors]);\n\n    // And here rather than only at boot, for the same reason: a name a built-in\n    // already owns is skipped by the runtime, so an artifact built from it\n    // carries the custom connector's generated files and esbuild patches while\n    // the server boots the built-in instead. Refusing it at boot alone would\n    // mean the build had already emitted that artifact — the failure has to\n    // land on the developer running `warlock build`, not on whoever starts the\n    // server. Same assertion the registration half calls, over the same names.\n    assertNoReservedConnectorNames([...connectors]);\n\n    this.connectors = connectors;\n\n    // Ensure production directory exists\n    await ensureDirectoryAsync(this.productionDir);\n  }\n\n  /**\n   * The context handed to every build contribution.\n   */\n  private buildContext(): ConnectorBuildContext {\n    return {\n      productionDir: this.productionDir,\n      appRoot: rootPath(),\n      options: this.options,\n      namedApiRoutes: this.namedApiRoutes,\n    };\n  }\n\n  /**\n   * Web route declarations need application API registration, which cannot be\n   * inferred from generated files. Capture it once in a disposable child before\n   * contributors write build artifacts; no connector lifecycle runs there.\n   */\n  private async captureNamedApiRoutesForWeb(): Promise<void> {\n    if (!this.connectors.some((connector) => connector.name === \"web\")) {\n      await clearOwnedRouteTypes(rootPath());\n      return;\n    }\n\n    this.namedApiRoutes = (\n      await collectRouteRegistrationSnapshot({\n        cwd: rootPath(),\n        timeoutMs: this.options.routeRegistrationTimeoutMs,\n      })\n    ).routes;\n  }\n\n  /**\n   * Drain the `generate` hooks and fold what they returned back into the\n   * build.\n   *\n   * The entry point is REGENERATED here rather than generated later. The\n   * contribution slot is fixed — after `assertGeneratedImports` (so nothing\n   * bundles that the app could not resolve) and before `bundle` — while\n   * `generateEntryPoint` must stay at step 3, because `app.ts` is itself\n   * generated code the assertion has to see; moving it past the assertion\n   * would silently drop the entry from that check. Rewriting one small file\n   * is cheaper than losing either guarantee, and the write is pure\n   * (`generatedFiles` + these imports), so doing it twice is not a\n   * correctness risk.\n   *\n   * @returns whether any connector ran a `generate` hook — the caller uses it\n   * to decide if the import assertion is worth a second pass. Keyed on the\n   * hook EXISTING, not on what it returned: a hook that returns nothing may\n   * still have written files into `productionDir`, and those are exactly the\n   * files the second pass is there to read.\n   */\n  private async runGenerateContributions(): Promise<boolean> {\n    const contributed = this.connectors.some((connector) => Boolean(connector.build?.generate));\n\n    const { entryImports, esbuild } = await runGenerateContributions(\n      this.connectors,\n      this.buildContext(),\n    );\n\n    this.contributedEsbuild = esbuild;\n\n    if (entryImports.length > 0) {\n      await this.generateEntryPoint(entryImports);\n    }\n\n    return contributed;\n  }\n\n  /**\n   * Track which special files were generated\n   */\n  private generatedFiles = {\n    locales: false,\n    events: false,\n    main: false,\n    routes: false,\n    workers: false,\n  };\n\n  /**\n   * Generate all combined files\n   */\n  private async generateCombinedFiles(): Promise<void> {\n    console.log(colors.yellow(\"   Generating production files...\"));\n\n    // Generate bootstrap.ts file\n    await this.generateBootstrap();\n\n    // Generate config loader\n    await this.generateConfigLoader();\n\n    // Generate special files and track which ones have content\n    const [locales, events, main, routes, workers] = await Promise.all([\n      this.generateLocales(),\n      this.generateEvents(),\n      this.generateMain(),\n      this.generateRoutes(),\n      this.generateWorkers(),\n    ]);\n\n    this.generatedFiles = { locales, events, main, routes, workers };\n  }\n\n  /**\n   * Generate bootstrap.ts - ensures bootstrap() runs first and sets production environment\n   */\n  private async generateBootstrap(): Promise<void> {\n    // ESM hoists imports, so the app bootstrap must be the first import to run first\n    const appBootstrapImport = (await fileExistsAsync(appPath(\"bootstrap.ts\")))\n      ? \"import './../../src/app/bootstrap';\\n\"\n      : \"\";\n\n    const content = `${appBootstrapImport}import { bootstrap, Application } from \"@warlock.js/core\";\n\n// Production runtime; NODE_ENV is only defaulted so an explicit value (e.g. staging) wins\nApplication.setRuntimeStrategy(\"production\");\nif (!process.env.NODE_ENV) {\n  Application.setEnvironment(\"production\");\n}\n\n// Bootstrap the application\nbootstrap();\n`;\n\n    await putFileAsync(path.join(this.productionDir, \"bootstrap.ts\"), content);\n  }\n\n  /**\n   * Fail the build when generated code imports a package the app does not\n   * declare.\n   *\n   * The bundler is configured `packages: \"external\"`, so every bare specifier\n   * written above survives verbatim into an artifact that resolves against the\n   * **consuming app's** node_modules. A framework-internal dependency imported\n   * there resolves by accident under npm/yarn hoisting and dies under pnpm —\n   * which is how a production app shipped that could not boot. Rewriting the\n   * offending import fixes today's bundle; this check is what stops the next\n   * change to the generator from quietly reintroducing it.\n   */\n  private async assertGeneratedImports(): Promise<void> {\n    const generatedPaths = await glob(\"**/*.{ts,tsx,js,mjs}\", {\n      cwd: this.productionDir,\n      absolute: false,\n    });\n\n    const [files, appPackage] = await Promise.all([\n      Promise.all(\n        generatedPaths.map(async (file) => ({\n          file,\n          content: await getFileAsync(path.join(this.productionDir, file)),\n        })),\n      ),\n      getJsonFileAsync<{ dependencies?: Record<string, string> }>(rootPath(\"package.json\")),\n    ]);\n\n    assertGeneratedImportsAreDeclared(files, Object.keys(appPackage.dependencies ?? {}));\n  }\n\n  /**\n   * Glob `src/app` and keep the files the shared dev-server predicate accepts,\n   * so production discovers exactly what the dev collector does.\n   * Returns relative paths from .warlock/production/ to src/app/\n   */\n  private async globModule(matches: (relativePath: string) => boolean): Promise<string[]> {\n    const files = await glob(\"**/*.{ts,tsx,json}\", {\n      cwd: appPath(),\n      absolute: false,\n    });\n\n    // e.g., \"users/main.ts\" -> \"../../src/app/users/main\"\n    return files\n      .filter((file) => matches(\"src/app/\" + file))\n      .sort()\n      .map((file) => \"../../src/app/\" + file.replace(/\\.(ts|tsx)$/, \"\"));\n  }\n\n  /**\n   * Generate config-loader.ts\n   */\n  private async generateConfigLoader(): Promise<void> {\n    const configDirectory = path.join(process.cwd(), \"src/config\");\n\n    const files = await glob(\"**/*.{ts,tsx}\", {\n      cwd: configDirectory,\n      absolute: false,\n    });\n\n    // Same key rule as the dev config loader: the raw path, never camel-cased\n    const configNames = files\n      .filter((f) => isConfigFile(\"src/config/\" + f))\n      .map((f) => ({\n        path: f.replace(/\\.(ts|tsx)$/, \"\"),\n        key: configKeyFromPath(\"src/config/\" + f),\n      }))\n      .filter((entry): entry is { path: string; key: string } => entry.key !== undefined)\n      .sort((a, b) => a.path.localeCompare(b.path));\n\n    // Only `@warlock.js/core` — the one package the app itself declares. See\n    // `assertGeneratedImportsAreDeclared`: `@mongez/config` is core's own\n    // dependency, so a bare import of it resolved by luck under npm/yarn\n    // hoisting and died under pnpm's strict layout.\n    const imports: string[] = [\n      'import { assertValidConfigModules, configSpecialHandlers, setConfig } from \"@warlock.js/core\";',\n    ];\n    const configImports: string[] = [];\n    const configSetCalls: string[] = [];\n    const validations: string[] = [];\n    const executors: string[] = [];\n\n    configNames.forEach(({ path: configPath, key }, index) => {\n      // Index-based identifier: keys like \"rate-limit\" or \"mail/smtp\" are not valid names.\n      // A namespace import, so a file's optional `configSchema` export travels with it.\n      const varName = `config${index}`;\n      const name = JSON.stringify(key);\n      configImports.push(`import * as ${varName} from \"../../src/config/${configPath}\";`);\n      configSetCalls.push(`setConfig(${name}, ${varName}.default);`);\n      validations.push(`  { name: ${name}, module: ${varName} },`);\n      executors.push(`await configSpecialHandlers.execute(${name}, ${varName}.default);`);\n    });\n\n    // ESM hoists imports, so prestart must be the first import to run first\n    const prestartImports = (await fileExistsAsync(appPath(\"prestart.ts\")))\n      ? [\"import './../../src/app/prestart';\"]\n      : [];\n\n    const content = [\n      ...prestartImports,\n      ...imports,\n      \"\",\n      \"// Config imports\",\n      ...configImports,\n      \"\",\n      \"// Register configs\",\n      ...configSetCalls,\n      \"\",\n      \"// Refuse to start when a config file's `configSchema` is not satisfied\",\n      \"await assertValidConfigModules([\",\n      ...validations,\n      \"]);\",\n      \"\",\n      \"// Special handlers\",\n      ...executors,\n      \"\",\n    ].join(\"\\n\");\n\n    await putFileAsync(path.join(this.productionDir, \"config-loader.ts\"), content);\n  }\n\n  /**\n   * Generate locales.ts (only if there are locale files)\n   * @returns true if file was generated with content\n   */\n  private async generateLocales(): Promise<boolean> {\n    const files = await this.globModule(isLocaleFile);\n    if (files.length === 0) return false;\n    const content = files\n      .map((file, index) => {\n        if (!file.endsWith(\".json\")) return `import \"${file}\";`;\n        const moduleFolder = file.split(\"/\").at(-3)!;\n        return [\n          `import dictionary${index} from \"${file}\";`,\n          'import { registerLocaleDictionary } from \"@warlock.js/core\";',\n          `registerLocaleDictionary({ sourceFile: ${JSON.stringify(file)}, source: JSON.stringify(dictionary${index}), defaultNamespace: ${JSON.stringify(moduleFolder)} });`,\n        ].join(\"\\n\");\n      })\n      .join(\"\\n\");\n    await putFileAsync(path.join(this.productionDir, \"locales.ts\"), content + \"\\n\");\n    return true;\n  }\n\n  /**\n   * Generate events.ts (only if there are event files)\n   * @returns true if file was generated with content\n   */\n  private async generateEvents(): Promise<boolean> {\n    const files = await this.globModule(isEventFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"events.ts\");\n    return true;\n  }\n\n  /**\n   * Generate main.ts (only if there are main files)\n   * @returns true if file was generated with content\n   */\n  private async generateMain(): Promise<boolean> {\n    const files = await this.globModule(isMainFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"main.ts\");\n    return true;\n  }\n\n  /**\n   * Generate routes.ts (only if there are route files)\n   * @returns true if file was generated with content\n   */\n  private async generateRoutes(): Promise<boolean> {\n    const files = await this.globModule(isRouteFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"routes.ts\");\n    return true;\n  }\n\n  /**\n   * Generate workers.ts (only if there are worker files)\n   * @returns true if file was generated with content\n   */\n  private async generateWorkers(): Promise<boolean> {\n    const files = await this.globModule(isWorkerFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"workers.ts\");\n    return true;\n  }\n\n  /**\n   * Generate a file with imports from all given files\n   */\n  private async generateImportsFile(importPaths: string[], outputFile: string): Promise<void> {\n    const imports = importPaths.map((importPath) => `import \"${importPath}\";`);\n    const content = imports.join(\"\\n\") + \"\\n\";\n    await putFileAsync(path.join(this.productionDir, outputFile), content);\n  }\n\n  /**\n   * Generate the main entry point (app.ts)\n   *\n   * @param contributedImports lines from connector `generate` hooks, appended\n   * to section 4 after `./routes`\n   */\n  private async generateEntryPoint(contributedImports: string[] = []): Promise<void> {\n    console.log(colors.yellow(\"   Generating entry point...\"));\n\n    // The names this build resolved, baked in as a literal. The entry imports\n    // the config source, and that source is re-evaluated at startup — an\n    // env-conditional `connectors` array can hand the boot a different list\n    // than the one drained here. A literal is the only part of the array that\n    // survives into the artifact unchanged, so it is what the boot compares\n    // against.\n    const expectedNames = this.connectors\n      .map((connector) => JSON.stringify(connector.name))\n      .join(\", \");\n\n    // Build imports based on which files were generated\n    const imports: string[] = [\n      \"// 1. Bootstrap (loads .env, initializes framework)\",\n      'import \"./bootstrap\";',\n      \"\",\n      \"// 2. Load configs\",\n      'import \"./config-loader\";',\n      \"\",\n      // Registration has to sit between the config being available and the\n      // first phase starting: the connectors listed in `connectors` are the\n      // same ones this build drained contributions from, so the bundle boots\n      // exactly what it was built for. Register any later and an early-phase\n      // connector would miss its own start.\n      \"// 2.5 Register connectors declared in warlock.config (the same array this\",\n      \"//     build read its contributions from, so built-for and boots-with match).\",\n      \"//     The config is imported STATICALLY so esbuild bakes it into the bundle\",\n      \"//     and the array is handed over explicitly — an artifact has no\",\n      \"//     warlock.config.ts beside it to read at runtime, and a registration\",\n      \"//     that quietly found nothing to register is the exact drift this\",\n      \"//     section exists to prevent.\",\n      \"//     `expectedNames` is the list this build resolved, in order — boot\",\n      \"//     refuses to start when the config hands over a different set or order.\",\n      'import { registerConfiguredConnectors } from \"@warlock.js/core\";',\n      `import warlockConfig from \"${APP_ROOT_FROM_PRODUCTION_DIR}warlock.config\";`,\n      `registerConfiguredConnectors(warlockConfig.connectors ?? [], { expectedNames: [${expectedNames}] });`,\n      \"\",\n      \"// 2.6 Fail fast on a busy port. `http` is a LATE-phase connector, so its\",\n      \"//     own preflight is not reached until the database and cache have\",\n      \"//     connected and every app module has been imported — seconds of work\",\n      \"//     thrown away before anyone learns the port was taken. This probe is\",\n      \"//     a bind-and-release on a socket that is never served, and it reports\",\n      \"//     on stderr because no log channel is configured this early.\",\n      'import { Application, connectorsManager, ConnectorLifecyclePhase, preflightConfiguredHttpPort } from \"@warlock.js/core\";',\n      'if (Application.hasRole(\"api\") || Application.hasRole(\"web\")) {',\n      \"  await preflightConfiguredHttpPort();\",\n      \"}\",\n      \"\",\n      \"// 3. Start early-phase connectors (database, cache, logger, ...)\",\n      \"//    so data sources, cache, etc. are ready before app code runs\",\n      \"await connectorsManager.startPhase(ConnectorLifecyclePhase.Early);\",\n    ];\n\n    // App code uses dynamic `await import(...)` so each module's side\n    // effects fire at THIS point in execution. Static imports would be\n    // hoisted to module-instantiation time (before the early-phase await\n    // resolves), which is exactly the bug this split is meant to fix.\n    //\n    // The guarantee comes from the imports being DYNAMIC — esbuild wraps a\n    // dynamically-imported module in its `__esm(() => {…})` helper and runs\n    // it at the await, not at instantiation. It does NOT come from\n    // `splitting: true`, which only decides one-file-vs-chunks. This\n    // previously said splitting was required; it is not, and `singleBundle`\n    // (splitting: false) preserves the ordering.\n    imports.push(\"\", \"// 4. Load app code (events, locales, main, routes)\");\n\n    if (this.generatedFiles.events) {\n      imports.push('await import(\"./events\");');\n    }\n    if (this.generatedFiles.locales) {\n      imports.push('await import(\"./locales\");');\n    }\n    if (this.generatedFiles.main) {\n      imports.push('await import(\"./main\");');\n    }\n    if (this.generatedFiles.routes) {\n      imports.push('if (Application.hasRole(\"api\")) {', '  await import(\"./routes\");', \"}\");\n    }\n    if (this.generatedFiles.workers) {\n      imports.push('if (Application.hasRole(\"worker\")) {', '  await import(\"./workers\");', \"}\");\n    }\n\n    // Contributor imports come AFTER `./routes`, never before: a connector\n    // that registers pages needs the routes app code already collected —\n    // the same ordering dev uses (routes first, then the connector installs\n    // on top of them). Emitted verbatim; the contributor writes the whole\n    // statement (e.g. `await import(\"./pages\");`).\n    imports.push(...contributedImports);\n\n    // A rejecting validator (Application.onValidateBoot) must abort boot\n    // before late-phase connectors bind a port.\n    imports.push(\n      \"\",\n      \"// 5. Run startup validators registered via Application.onValidateBoot(...)\",\n      \"await Application.runStartupValidators();\",\n    );\n\n    // Start late-phase connectors after app code registers routes/listeners\n    imports.push(\n      \"\",\n      \"// 6. Start late-phase connectors (http, socket) — routes and\",\n      \"//    listeners registered by app code are now ready to bind\",\n      \"await connectorsManager.startPhase(ConnectorLifecyclePhase.Late);\",\n      \"\",\n      \"// 7. Signal a complete boot so `Application.onceBooted(...)` listeners fire\",\n      \"Application.markBooted({ environment: Application.environment, runtimeStrategy: Application.runtimeStrategy });\",\n      \"connectorsManager.shutdownOnProcessKill();\",\n    );\n\n    const content = imports.join(\"\\n\") + \"\\n\";\n    await putFileAsync(path.join(this.productionDir, \"app.ts\"), content);\n  }\n\n  /**\n   * Bundle with esbuild\n   *\n   * @param writeOutDir the directory esbuild writes into — the build's\n   * private temp directory, NOT `options.outdir`. Taken as a parameter\n   * rather than read off `this.options` because the two are different paths\n   * with different meanings: `options.outdir` is the final destination every\n   * consumer bakes into the artifact, and this is only where bytes land\n   * before promotion moves them there.\n   */\n  private async bundle(writeOutDir: string): Promise<void> {\n    console.log(colors.magenta(\"   Bundling with esbuild...\"));\n\n    const entryPoint = path.join(this.productionDir, \"app.ts\");\n    const outFileName = this.options.outFile!;\n    // Strip extension so entryNames produces \"<base>.js\" via esbuild\n    const entryName = path.basename(outFileName, path.extname(outFileName));\n\n    // `singleBundle` and `esmShim` are ours, not esbuild's — it throws on\n    // unknown keys, and the user options are spread into its call verbatim.\n    const singleBundle = this.options.singleBundle === true;\n    const esmShim = this.options.esmShim !== false;\n    // Read before deleting: the merged banner is applied AFTER the user\n    // spread, so a user banner must not be lost to it or clobber the shim.\n    const userBanner = this.options.banner;\n\n    // `outFile` and `entryPath` are REQUIRED on ResolvedBuildConfig on purpose:\n    // resolve-build-config.ts documents that widening them pushed a lie downstream\n    // into start-production.command.ts, which then could not trust its own config.\n    // This is the one place they must be absent - the object is spread into esbuild's\n    // call verbatim and esbuild throws on unknown keys.\n    //\n    // Stripped off a LOCAL COPY of `this.options`, never off `this.options`\n    // itself: `buildContext()` hands `this.options` to every `generate`/`emit`\n    // contribution hook, including the `emit` pass that runs AFTER this method\n    // returns (`build()` step 5.6). Deleting these keys from the shared object\n    // used to leave those hooks reading `undefined` for `outFile`, `entryPath`,\n    // `singleBundle`, `esmShim` and `banner` even though `ConnectorBuildContext`\n    // types them as present. A shallow copy is enough — every field this method\n    // reads off it is either scalar or already re-merged below (`define`,\n    // `external`, `loader`, `banner`), so nothing here needs a deep clone.\n    const esbuildOptions: Partial<ResolvedBuildConfig> = { ...this.options };\n\n    delete esbuildOptions.outFile;\n    delete esbuildOptions.entryPath;\n    delete esbuildOptions.singleBundle;\n    delete esbuildOptions.esmShim;\n    delete esbuildOptions.banner;\n    delete esbuildOptions.routeRegistrationTimeoutMs;\n\n    await ensureDirectoryAsync(writeOutDir);\n\n    const alias = this.buildAliasMapFromTsconfig();\n\n    // Whether this build decides externality per import EDGE\n    // (`bundle-framework-dependencies.ts`, which explains the rule at\n    // length) or keeps the blunt `packages: \"external\"`.\n    //\n    // Not in `singleBundle` mode: that bundles everything by definition, and\n    // a plugin that can only ever ADD an external would silently narrow it.\n    // Not when the user set `packages` themselves: their value has always\n    // won over the default below, and it must keep winning — the plugin is\n    // the default's implementation, not a new policy layered on top.\n    const perEdgeExternals = !singleBundle && (esbuildOptions as any).packages === undefined;\n\n    // The user can override `format`, so gate the shim on the EFFECTIVE\n    // format rather than on the default below. A CJS build already has\n    // `require` and friends; injecting them there would be a redefinition.\n    const isEsm = (esbuildOptions.format ?? \"esm\") === \"esm\";\n    const banner = mergeBanner(userBanner, esmShim && isEsm ? ESM_INTEROP_SHIM : undefined);\n\n    // Contributor patch, split into the part that can ride the spread order\n    // and the three keys that cannot. `jsx` and `jsxImportSource` are placed\n    // BEFORE the user spread below, which gives the ruled precedence for\n    // free: builder defaults < contributor < user config.\n    //\n    // `define`, `external` and `loader` are pulled out because a spread\n    // REPLACES them wholesale — the same trap `banner` documents. Two\n    // contributors' env defines, a contributor's optional peers plus the\n    // user's, or a contributor's `.svg` loader alongside the user's `.png`,\n    // must both survive, so they are merged by key/by set and re-applied\n    // after the spread with the user still winning per key.\n    const {\n      define: contributedDefine,\n      external: contributedExternal,\n      loader: contributedLoader,\n      plugins: contributedPlugins,\n      ...contributedOptions\n    } = this.contributedEsbuild;\n\n    const userDefine: Record<string, string> | undefined = esbuildOptions.define;\n    const userExternal: string[] | undefined = esbuildOptions.external;\n    const userLoader: ConnectorEsbuildPatch[\"loader\"] = esbuildOptions.loader;\n\n    const define =\n      contributedDefine || userDefine ? { ...contributedDefine, ...userDefine } : undefined;\n\n    const loader =\n      contributedLoader || userLoader ? { ...contributedLoader, ...userLoader } : undefined;\n\n    const external =\n      contributedExternal || userExternal\n        ? dedupe([...(contributedExternal ?? []), ...(userExternal ?? [])])\n        : undefined;\n\n    if (singleBundle) {\n      console.log(\n        colors.magenta(\n          \"   Single-bundle mode — one JS file\" +\n            (esmShim && isEsm ? \" with the ESM interop shim\" : \"\") +\n            \". Native .node addons are still emitted alongside it.\",\n        ),\n      );\n    }\n\n    try {\n      await esbuild.build({\n        platform: \"node\",\n        entryPoints: [entryPoint],\n        bundle: true,\n        // Both are DEFAULTS the user can override — they sit before the\n        // `...esbuildOptions` spread deliberately. `singleBundle` moves them,\n        // an explicit `splitting`/`packages` in warlock.config.ts beats both.\n        //\n        // Phase ordering does not depend on `splitting`: it comes from the\n        // generated app.ts using dynamic `await import(...)` (see\n        // generateAppEntry above), which esbuild defers to the call site in\n        // either mode. Splitting only decides one file vs chunks.\n        splitting: !singleBundle,\n        // `\"bundle\"` under `perEdgeExternals` is not \"bundle everything\":\n        // the plugin below returns `external: true` for every bare specifier\n        // this build must not bundle, which is all of them bar the framework's\n        // own declared dependencies. Saying `\"external\"` here instead would\n        // externalise them before the plugin could rule.\n        packages: singleBundle || perEdgeExternals ? \"bundle\" : \"external\",\n        minify: esbuildOptions.minify,\n        sourcemap: esbuildOptions.sourcemap === true ? \"linked\" : esbuildOptions.sourcemap,\n        format: \"esm\",\n        // Targeting a concrete Node version (not \"esnext\") so esbuild\n        // transpiles TC39 stage 3 decorators into helpers — Node does not\n        // implement them natively yet.\n        target: [\"node22\"],\n        entryNames: entryName,\n        alias,\n        plugins: [\n          nativeNodeModulesPlugin,\n          // BEFORE the framework-dependency plugin, and the order is\n          // load-bearing: the first `onResolve` callback to answer wins, and\n          // `app/users/...` is a bare specifier the other one would rule\n          // external.\n          tsconfigPathAliases(this.tsconfigPathAliasConfig()),\n          ...(perEdgeExternals\n            ? [bundleFrameworkDependencies({ appRoot: rootPath(), aliasKeys: Object.keys(alias) })]\n            : []),\n          // Contributor plugins run last: they load their own file types and\n          // must not shadow the resolvers above.\n          ...(contributedPlugins ?? []),\n        ],\n        // Between the defaults and the user spread — the ruled precedence.\n        ...contributedOptions,\n        ...(esbuildOptions as any),\n        // AFTER the spread, and NOT overridable: `esbuildOptions.outdir` rides\n        // that spread carrying the FINAL destination, which is exactly where\n        // this build must not write yet. The final path is the user's setting\n        // and stays authoritative for everyone reading the config — it is only\n        // this one esbuild call that is redirected, and only until promotion\n        // moves the result onto that very path.\n        outdir: writeOutDir,\n        // AFTER the spread for the same reason `banner` is: a spread replaces\n        // these objects instead of merging them, so the merged values are\n        // re-applied here. The user still wins — they were merged in last.\n        ...(define ? { define } : {}),\n        ...(external ? { external } : {}),\n        ...(loader ? { loader } : {}),\n        // AFTER the spread, and intentionally so: `banner` is an object, and\n        // both the config merge and this spread REPLACE it wholesale rather\n        // than merging. Left as a default above, any user banner would delete\n        // the shim; left to the spread, the shim would delete theirs. The\n        // merge is the only form that keeps both.\n        ...(banner ? { banner } : {}),\n      });\n    } catch (e) {\n      console.log(e);\n      throw e;\n    }\n  }\n\n  /**\n   * The WILDCARD half of the same tsconfig `paths` map that\n   * {@link ProductionBuilder.buildAliasMapFromTsconfig} reads the exact half\n   * of. `tsconfig-path-aliases.ts` explains why the two halves need different\n   * mechanisms — in short, esbuild's `alias` option cannot express a wildcard,\n   * so the entries it skips have to be resolved by a plugin instead of being\n   * left to no one.\n   */\n  private tsconfigPathAliasConfig(): { baseUrl: string; paths: Record<string, string[]> } {\n    tsconfigManager.init();\n\n    return {\n      baseUrl: path.resolve(process.cwd(), tsconfigManager.baseUrl),\n      paths: tsconfigManager.aliases as Record<string, string[]>,\n    };\n  }\n\n  /**\n   * Build an alias map from tsconfig `paths` so esbuild resolves local\n   * source aliases (e.g. `@warlock.js/cascade`) to their on-disk source\n   * folders during bundling. Without this, `packages: \"external\"` would\n   * leave those bare specifiers as raw imports and Node would fail to\n   * resolve them at runtime (they aren't installed in node_modules).\n   *\n   * Only exact (non-wildcard) aliases are included — esbuild's `alias`\n   * option doesn't support glob-style mappings. The wildcard half is not\n   * dropped, it is handled elsewhere: see\n   * {@link ProductionBuilder.tsconfigPathAliasConfig}.\n   */\n  private buildAliasMapFromTsconfig(): Record<string, string> {\n    tsconfigManager.init();\n\n    const alias: Record<string, string> = {};\n    const baseUrl = path.resolve(process.cwd(), tsconfigManager.baseUrl);\n\n    for (const [from, to] of Object.entries(tsconfigManager.aliases)) {\n      if (from.endsWith(\"/*\") || !Array.isArray(to) || to.length === 0) {\n        continue;\n      }\n\n      const target = to[0];\n\n      if (target === undefined) {\n        continue;\n      }\n\n      alias[from] = path.resolve(baseUrl, target);\n    }\n\n    return alias;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,MAAM,mBACJ;;;;;;;;;;;;;;AAoBF,SAAS,YACP,YACA,MACoC;CACpC,IAAI,CAAC,MAAM,OAAO;CAElB,MAAM,SAAS,YAAY;CAE3B,OAAO;EACL,GAAG;EACH,IAAI,SAAS,GAAG,OAAO,WAAW;CACpC;AACF;;;;;;;;;;AAWA,MAAM,+BAA+B;;;;;;AAOrC,IAAa,oBAAb,MAA+B;;uBAEI,YAAY,YAAY;oBAOd,CAAC;4BAMQ,CAAC;wBAoO5B;GACvB,SAAS;GACT,QAAQ;GACR,MAAM;GACN,QAAQ;GACR,SAAS;EACX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAxMA,MAAa,QAAuB;EAClC,QAAQ,IAAI,OAAO,KAAK,8BAA8B,CAAC;EAMvD,4BAA4B;EAG5B,MAAM,KAAK,kBAAkB;EAE7B,MAAM,cAAc,KAAK,QAAQ;EACjC,MAAM,aAAa,oBAAoB,WAAW;EAKlD,IAAI;EAEJ,IAAI;GAEF,MAAM,KAAK,sBAAsB;GAGjC,MAAM,KAAK,mBAAmB;GAG9B,MAAM,KAAK,uBAAuB;GAGlC,MAAM,KAAK,4BAA4B;GAYvC,IAAI,MAXsB,KAAK,yBAAyB,GAYtD,MAAM,KAAK,uBAAuB;GAKpC,MAAM,KAAK,OAAO,UAAU;GAK5B,SAAS,MAAM,eAAe,YAAY,WAAW;GAMrD,MAAM,qBAAqB,KAAK,YAAY,KAAK,aAAa,CAAC;GAM/D,MAAM,4BAA4B,WAAW;GAG7C,MAAM,gBAAgB,MAAM;EAC9B,SAAS,OAAO;GACd,IAAI,QAGF,MAAM,kBAAkB,MAAM;QAI9B,MAAM,qBAAqB,UAAU,CAAC,CAAC,YAAY,MAAS;GAG9D,MAAM;EACR;EAGA,MAAM,qBAAqB,KAAK,aAAa;EAE7C,QAAQ,IAAI,OAAO,MAAM,iBAAiB,CAAC;EAC3C,QAAQ,IAAI,sCAAsC,OAAO,KAAK,eAAe,GAAG;CAClF;;;;CAKA,MAAc,oBAAmC;EAC/C,KAAK,UAAU,mBAAmB;EAGlC,MAAM,aAAa,qBAAqB,IAAI,YAAY,KAAK,CAAC;EAQ9D,2BAA2B,CAAC,GAAG,UAAU,CAAC;EAS1C,+BAA+B,CAAC,GAAG,UAAU,CAAC;EAE9C,KAAK,aAAa;EAGlB,MAAM,qBAAqB,KAAK,aAAa;CAC/C;;;;CAKA,AAAQ,eAAsC;EAC5C,OAAO;GACL,eAAe,KAAK;GACpB,SAAS,SAAS;GAClB,SAAS,KAAK;GACd,gBAAgB,KAAK;EACvB;CACF;;;;;;CAOA,MAAc,8BAA6C;EACzD,IAAI,CAAC,KAAK,WAAW,MAAM,cAAc,UAAU,SAAS,KAAK,GAAG;GAClE,MAAM,qBAAqB,SAAS,CAAC;GACrC;EACF;EAEA,KAAK,kBACH,MAAM,iCAAiC;GACrC,KAAK,SAAS;GACd,WAAW,KAAK,QAAQ;EAC1B,CAAC,EAAC,CACF;CACJ;;;;;;;;;;;;;;;;;;;;;CAsBA,MAAc,2BAA6C;EACzD,MAAM,cAAc,KAAK,WAAW,MAAM,cAAc,QAAQ,UAAU,OAAO,QAAQ,CAAC;EAE1F,MAAM,EAAE,cAAc,YAAY,MAAM,yBACtC,KAAK,YACL,KAAK,aAAa,CACpB;EAEA,KAAK,qBAAqB;EAE1B,IAAI,aAAa,SAAS,GACxB,MAAM,KAAK,mBAAmB,YAAY;EAG5C,OAAO;CACT;;;;CAgBA,MAAc,wBAAuC;EACnD,QAAQ,IAAI,OAAO,OAAO,mCAAmC,CAAC;EAG9D,MAAM,KAAK,kBAAkB;EAG7B,MAAM,KAAK,qBAAqB;EAGhC,MAAM,CAAC,SAAS,QAAQ,MAAM,QAAQ,WAAW,MAAM,QAAQ,IAAI;GACjE,KAAK,gBAAgB;GACrB,KAAK,eAAe;GACpB,KAAK,aAAa;GAClB,KAAK,eAAe;GACpB,KAAK,gBAAgB;EACvB,CAAC;EAED,KAAK,iBAAiB;GAAE;GAAS;GAAQ;GAAM;GAAQ;EAAQ;CACjE;;;;CAKA,MAAc,oBAAmC;EAM/C,MAAM,UAAU,GAJY,MAAM,gBAAgB,QAAQ,cAAc,CAAC,IACrE,0CACA,GAEkC;;;;;;;;;;;EAYtC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,cAAc,GAAG,OAAO;CAC3E;;;;;;;;;;;;;CAcA,MAAc,yBAAwC;EACpD,MAAM,iBAAiB,MAAM,KAAK,wBAAwB;GACxD,KAAK,KAAK;GACV,UAAU;EACZ,CAAC;EAED,MAAM,CAAC,OAAO,cAAc,MAAM,QAAQ,IAAI,CAC5C,QAAQ,IACN,eAAe,IAAI,OAAO,UAAU;GAClC;GACA,SAAS,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,IAAI,CAAC;EACjE,EAAE,CACJ,GACA,iBAA4D,SAAS,cAAc,CAAC,CACtF,CAAC;EAED,kCAAkC,OAAO,OAAO,KAAK,WAAW,gBAAgB,CAAC,CAAC,CAAC;CACrF;;;;;;CAOA,MAAc,WAAW,SAA+D;EAOtF,QAAO,MANa,KAAK,sBAAsB;GAC7C,KAAK,QAAQ;GACb,UAAU;EACZ,CAAC,EAGW,CACT,QAAQ,SAAS,QAAQ,aAAa,IAAI,CAAC,CAAC,CAC5C,KAAK,CAAC,CACN,KAAK,SAAS,mBAAmB,KAAK,QAAQ,eAAe,EAAE,CAAC;CACrE;;;;CAKA,MAAc,uBAAsC;EASlD,MAAM,eAAc,MANA,KAAK,iBAAiB;GACxC,KAHsB,KAAK,KAAK,QAAQ,IAAI,GAAG,YAG5B;GACnB,UAAU;EACZ,CAAC,EAGwB,CACtB,QAAQ,MAAM,aAAa,gBAAgB,CAAC,CAAC,CAAC,CAC9C,KAAK,OAAO;GACX,MAAM,EAAE,QAAQ,eAAe,EAAE;GACjC,KAAK,kBAAkB,gBAAgB,CAAC;EAC1C,EAAE,CAAC,CACF,QAAQ,UAAkD,MAAM,QAAQ,MAAS,CAAC,CAClF,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAM9C,MAAM,UAAoB,CACxB,kGACF;EACA,MAAM,gBAA0B,CAAC;EACjC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAC/B,MAAM,YAAsB,CAAC;EAE7B,YAAY,SAAS,EAAE,MAAM,YAAY,OAAO,UAAU;GAGxD,MAAM,UAAU,SAAS;GACzB,MAAM,OAAO,KAAK,UAAU,GAAG;GAC/B,cAAc,KAAK,eAAe,QAAQ,0BAA0B,WAAW,GAAG;GAClF,eAAe,KAAK,aAAa,KAAK,IAAI,QAAQ,WAAW;GAC7D,YAAY,KAAK,aAAa,KAAK,YAAY,QAAQ,IAAI;GAC3D,UAAU,KAAK,uCAAuC,KAAK,IAAI,QAAQ,WAAW;EACpF,CAAC;EAOD,MAAM,UAAU;GACd,GALuB,MAAM,gBAAgB,QAAQ,aAAa,CAAC,IACjE,CAAC,oCAAoC,IACrC,CAAC;GAIH,GAAG;GACH;GACA;GACA,GAAG;GACH;GACA;GACA,GAAG;GACH;GACA;GACA;GACA,GAAG;GACH;GACA;GACA;GACA,GAAG;GACH;EACF,CAAC,CAAC,KAAK,IAAI;EAEX,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,kBAAkB,GAAG,OAAO;CAC/E;;;;;CAMA,MAAc,kBAAoC;EAChD,MAAM,QAAQ,MAAM,KAAK,WAAW,YAAY;EAChD,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,UAAU,MACb,KAAK,MAAM,UAAU;GACpB,IAAI,CAAC,KAAK,SAAS,OAAO,GAAG,OAAO,WAAW,KAAK;GACpD,MAAM,eAAe,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;GAC1C,OAAO;IACL,oBAAoB,MAAM,SAAS,KAAK;IACxC;IACA,0CAA0C,KAAK,UAAU,IAAI,EAAE,qCAAqC,MAAM,uBAAuB,KAAK,UAAU,YAAY,EAAE;GAChK,CAAC,CAAC,KAAK,IAAI;EACb,CAAC,CAAC,CACD,KAAK,IAAI;EACZ,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,YAAY,GAAG,UAAU,IAAI;EAC9E,OAAO;CACT;;;;;CAMA,MAAc,iBAAmC;EAC/C,MAAM,QAAQ,MAAM,KAAK,WAAW,WAAW;EAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,WAAW;EACjD,OAAO;CACT;;;;;CAMA,MAAc,eAAiC;EAC7C,MAAM,QAAQ,MAAM,KAAK,WAAW,UAAU;EAC9C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,SAAS;EAC/C,OAAO;CACT;;;;;CAMA,MAAc,iBAAmC;EAC/C,MAAM,QAAQ,MAAM,KAAK,WAAW,WAAW;EAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,WAAW;EACjD,OAAO;CACT;;;;;CAMA,MAAc,kBAAoC;EAChD,MAAM,QAAQ,MAAM,KAAK,WAAW,YAAY;EAChD,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,YAAY;EAClD,OAAO;CACT;;;;CAKA,MAAc,oBAAoB,aAAuB,YAAmC;EAE1F,MAAM,UADU,YAAY,KAAK,eAAe,WAAW,WAAW,GAChD,CAAC,CAAC,KAAK,IAAI,IAAI;EACrC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,UAAU,GAAG,OAAO;CACvE;;;;;;;CAQA,MAAc,mBAAmB,qBAA+B,CAAC,GAAkB;EACjF,QAAQ,IAAI,OAAO,OAAO,8BAA8B,CAAC;EAQzD,MAAM,gBAAgB,KAAK,WACxB,KAAK,cAAc,KAAK,UAAU,UAAU,IAAI,CAAC,CAAC,CAClD,KAAK,IAAI;EAGZ,MAAM,UAAoB;GACxB;GACA;GACA;GACA;GACA;GACA;GAMA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,8BAA8B,6BAA6B;GAC3D,kFAAkF,cAAc;GAChG;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF;EAaA,QAAQ,KAAK,IAAI,qDAAqD;EAEtE,IAAI,KAAK,eAAe,QACtB,QAAQ,KAAK,6BAA2B;EAE1C,IAAI,KAAK,eAAe,SACtB,QAAQ,KAAK,8BAA4B;EAE3C,IAAI,KAAK,eAAe,MACtB,QAAQ,KAAK,2BAAyB;EAExC,IAAI,KAAK,eAAe,QACtB,QAAQ,KAAK,uCAAqC,iCAA+B,GAAG;EAEtF,IAAI,KAAK,eAAe,SACtB,QAAQ,KAAK,0CAAwC,kCAAgC,GAAG;EAQ1F,QAAQ,KAAK,GAAG,kBAAkB;EAIlC,QAAQ,KACN,IACA,+EACA,2CACF;EAGA,QAAQ,KACN,IACA,mEACA,gEACA,qEACA,IACA,gFACA,mHACA,4CACF;EAEA,MAAM,UAAU,QAAQ,KAAK,IAAI,IAAI;EACrC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,QAAQ,GAAG,OAAO;CACrE;;;;;;;;;;;CAYA,MAAc,OAAO,aAAoC;EACvD,QAAQ,IAAI,OAAO,QAAQ,6BAA6B,CAAC;EAEzD,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,QAAQ;EACzD,MAAM,cAAc,KAAK,QAAQ;EAEjC,MAAM,YAAY,KAAK,SAAS,aAAa,KAAK,QAAQ,WAAW,CAAC;EAItE,MAAM,eAAe,KAAK,QAAQ,iBAAiB;EACnD,MAAM,UAAU,KAAK,QAAQ,YAAY;EAGzC,MAAM,aAAa,KAAK,QAAQ;EAiBhC,MAAM,iBAA+C,EAAE,GAAG,KAAK,QAAQ;EAEvE,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EAEtB,MAAM,qBAAqB,WAAW;EAEtC,MAAM,QAAQ,KAAK,0BAA0B;EAW7C,MAAM,mBAAmB,CAAC,gBAAiB,eAAuB,aAAa;EAK/E,MAAM,SAAS,eAAe,UAAU,WAAW;EACnD,MAAM,SAAS,YAAY,YAAY,WAAW,QAAQ,mBAAmB,MAAS;EAatF,MAAM,EACJ,QAAQ,mBACR,UAAU,qBACV,QAAQ,mBACR,SAAS,oBACT,GAAG,uBACD,KAAK;EAET,MAAM,aAAiD,eAAe;EACtE,MAAM,eAAqC,eAAe;EAC1D,MAAM,aAA8C,eAAe;EAEnE,MAAM,SACJ,qBAAqB,aAAa;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;EAE9E,MAAM,SACJ,qBAAqB,aAAa;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;EAE9E,MAAM,WACJ,uBAAuB,eACnB,OAAO,CAAC,GAAI,uBAAuB,CAAC,GAAI,GAAI,gBAAgB,CAAC,CAAE,CAAC,IAChE;EAEN,IAAI,cACF,QAAQ,IACN,OAAO,QACL,yCACG,WAAW,QAAQ,+BAA+B,MACnD,uDACJ,CACF;EAGF,IAAI;GACF,MAAM,QAAQ,MAAM;IAClB,UAAU;IACV,aAAa,CAAC,UAAU;IACxB,QAAQ;IASR,WAAW,CAAC;IAMZ,UAAU,gBAAgB,mBAAmB,WAAW;IACxD,QAAQ,eAAe;IACvB,WAAW,eAAe,cAAc,OAAO,WAAW,eAAe;IACzE,QAAQ;IAIR,QAAQ,CAAC,QAAQ;IACjB,YAAY;IACZ;IACA,SAAS;KACP;KAKA,oBAAoB,KAAK,wBAAwB,CAAC;KAClD,GAAI,mBACA,CAAC,4BAA4B;MAAE,SAAS,SAAS;MAAG,WAAW,OAAO,KAAK,KAAK;KAAE,CAAC,CAAC,IACpF,CAAC;KAGL,GAAI,sBAAsB,CAAC;IAC7B;IAEA,GAAG;IACH,GAAI;IAOJ,QAAQ;IAIR,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAC3B,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;IAC/B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAM3B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC7B,CAAC;EACH,SAAS,GAAG;GACV,QAAQ,IAAI,CAAC;GACb,MAAM;EACR;CACF;;;;;;;;;CAUA,AAAQ,0BAAgF;EACtF,gBAAgB,KAAK;EAErB,OAAO;GACL,SAAS,KAAK,QAAQ,QAAQ,IAAI,GAAG,gBAAgB,OAAO;GAC5D,OAAO,gBAAgB;EACzB;CACF;;;;;;;;;;;;;CAcA,AAAQ,4BAAoD;EAC1D,gBAAgB,KAAK;EAErB,MAAM,QAAgC,CAAC;EACvC,MAAM,UAAU,KAAK,QAAQ,QAAQ,IAAI,GAAG,gBAAgB,OAAO;EAEnE,KAAK,MAAM,CAAC,MAAM,OAAO,OAAO,QAAQ,gBAAgB,OAAO,GAAG;GAChE,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,QAAQ,EAAE,KAAK,GAAG,WAAW,GAC7D;GAGF,MAAM,SAAS,GAAG;GAElB,IAAI,WAAW,QACb;GAGF,MAAM,QAAQ,KAAK,QAAQ,SAAS,MAAM;EAC5C;EAEA,OAAO;CACT;AACF"}

package/esm/production/resolve-build-config.mjs

@@ -42,6 +42,7 @@ var ForbiddenBuildOptionError = class extends Error {
 			"change how your own sources compile, edit that tsconfig.json instead."
 		].join("\n"));
 		this.option = option;
+		this.code = "WL1006";
 		this.name = "ForbiddenBuildOptionError";
 	}
 };

package/esm/production/resolve-build-config.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-build-config.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/resolve-build-config.ts"],"sourcesContent":["import path from \"path\";\nimport { defaultWarlockConfigurations } from \"../warlock-config/default-configurations\";\nimport { normalizeBuildConfig } from \"../warlock-config/normalize-build-config\";\nimport type { WarlockConfig } from \"../warlock-config/types\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\n\n/**\n * Keys the builder deletes before handing the options to esbuild — ours\n * (`singleBundle`, `esmShim`), which esbuild would reject as unknown, and\n * `banner`, which is re-merged and re-applied after the user spread.\n *\n * They are optional here for a concrete reason: `Required<…>` makes `delete`\n * a type error (TS2790). Naming exactly these three says which keys are\n * removable, rather than casting at each `delete` — a cast there would also\n * hide a genuine mistake.\n *\n * `outFile` and `entryPath` stay REQUIRED even though the builder deletes\n * them too. They are always present after resolution and callers depend on\n * that; widening them to `string | undefined` pushed the lie downstream into\n * `start-production.command.ts`, which then could not trust its own config.\n */\ntype BuilderStrippedKeys = \"singleBundle\" | \"esmShim\" | \"banner\" | \"routeRegistrationTimeoutMs\";\n\nexport type ResolvedBuildConfig = Required<\n  Omit<NonNullable<WarlockConfig[\"build\"]>, \"outDirectory\" | BuilderStrippedKeys>\n> &\n  Partial<Pick<NonNullable<WarlockConfig[\"build\"]>, BuilderStrippedKeys>> & {\n    /** Absolute path to the bundled entry file (`{outdir}/{outFile}`) */\n    entryPath: string;\n  };\n\n/**\n * esbuild options the build config may not carry, and why.\n *\n * Both apply the named compiler options to EVERY file in the bundle, not just\n * the app's own sources — workspace packages compiled under their own tsconfig\n * are silently recompiled under the app's. An app-level\n * `verbatimModuleSyntax: true` reaching package sources that never opted into\n * it strips the imports their decorators rely on, and the build succeeds only\n * to die at import time with `Class extends value undefined`.\n */\nconst FORBIDDEN_BUILD_OPTIONS = {\n  tsconfig: \"points esbuild at a tsconfig file\",\n  tsconfigRaw: \"inlines compiler options\",\n} as const;\n\n/**\n * Raised when the build config carries an esbuild option the framework owns.\n *\n * The typed config already omits these keys; this catches the forms the type\n * cannot see — an `as any` cast, or a plain `warlock.config.js`. Rejected\n * rather than deleted: dropping the key quietly would leave the author\n * believing a setting applied when it never did.\n */\nexport class ForbiddenBuildOptionError extends Error {\n  public constructor(public readonly option: keyof typeof FORBIDDEN_BUILD_OPTIONS) {\n    super(\n      [\n        `build.${option} is not a supported warlock build option.`,\n        \"\",\n        `Setting it ${FORBIDDEN_BUILD_OPTIONS[option]} for every file in the bundle,`,\n        \"including workspace packages that were compiled under their own tsconfig.\",\n        \"Options such as `verbatimModuleSyntax` then apply to sources that never\",\n        \"opted into them, and the build succeeds but crashes at import time with\",\n        \"`Class extends value undefined`.\",\n        \"\",\n        `Remove \\`${option}\\` from the \\`build\\` block of your warlock config. The builder`,\n        \"already reads the app's tsconfig for the parts it needs (path aliases); to\",\n        \"change how your own sources compile, edit that tsconfig.json instead.\",\n      ].join(\"\\n\"),\n    );\n\n    this.name = \"ForbiddenBuildOptionError\";\n  }\n}\n\n/**\n * Resolve the build config with framework defaults applied.\n *\n * Both the production builder and `warlock start` call this so they\n * agree on where the bundle lives — previously each had its own local\n * fallbacks and they drifted (`.warlock/production` vs `dist`),\n * letting `build` and `start` look at different paths.\n */\nexport function resolveBuildConfig(): ResolvedBuildConfig {\n  // Normalised here rather than only in `defineConfig` because a project may\n  // export a plain config object that never went through it.\n  const userBuild = normalizeBuildConfig(warlockConfigManager.get(\"build\") ?? {});\n\n  // Before the merge, so the option cannot reach the esbuild spread in\n  // production-builder — which overrides framework defaults with user config.\n  for (const option of Object.keys(FORBIDDEN_BUILD_OPTIONS) as Array<\n    keyof typeof FORBIDDEN_BUILD_OPTIONS\n  >) {\n    if (option in userBuild) {\n      throw new ForbiddenBuildOptionError(option);\n    }\n  }\n\n  const defaults = defaultWarlockConfigurations.build!;\n  const merged = { ...defaults, ...userBuild } as ResolvedBuildConfig;\n\n  return {\n    ...merged,\n    routeRegistrationTimeoutMs: resolveRouteRegistrationTimeoutMs(merged.routeRegistrationTimeoutMs),\n    entryPath: path.resolve(merged.outdir, merged.outFile),\n  };\n}\n\nconst DEFAULT_ROUTE_REGISTRATION_TIMEOUT_MS = 30_000;\nconst ROUTE_REGISTRATION_TIMEOUT_ENV = \"WARLOCK_ROUTE_REGISTRATION_TIMEOUT_MS\";\n\nfunction resolveRouteRegistrationTimeoutMs(configured: unknown): number {\n  const environment = process.env[ROUTE_REGISTRATION_TIMEOUT_ENV];\n  const value = environment === undefined ? configured : environment;\n  const source = environment === undefined ? \"build.routeRegistrationTimeoutMs\" : ROUTE_REGISTRATION_TIMEOUT_ENV;\n\n  if (typeof value === \"number\" && Number.isFinite(value) && value > 0) return value;\n  if (typeof value === \"string\" && value.trim() !== \"\") {\n    const parsed = Number(value);\n    if (Number.isFinite(parsed) && parsed > 0) return parsed;\n  }\n\n  console.warn(\n    `Invalid ${source} value ${JSON.stringify(value)}; using ${DEFAULT_ROUTE_REGISTRATION_TIMEOUT_MS}ms.`,\n  );\n  return DEFAULT_ROUTE_REGISTRATION_TIMEOUT_MS;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAyCA,MAAM,0BAA0B;CAC9B,UAAU;CACV,aAAa;AACf;;;;;;;;;AAUA,IAAa,4BAAb,cAA+C,MAAM;CACnD,AAAO,YAAY,AAAgB,QAA8C;EAC/E,MACE;GACE,SAAS,OAAO;GAChB;GACA,cAAc,wBAAwB,QAAQ;GAC9C;GACA;GACA;GACA;GACA;GACA,YAAY,OAAO;GACnB;GACA;EACF,CAAC,CAAC,KAAK,IAAI,CACb;EAfiC;EAiBjC,KAAK,OAAO;CACd;AACF;;;;;;;;;AAUA,SAAgB,qBAA0C;CAGxD,MAAM,YAAY,qBAAqB,qBAAqB,IAAI,OAAO,KAAK,CAAC,CAAC;CAI9E,KAAK,MAAM,UAAU,OAAO,KAAK,uBAAuB,GAGtD,IAAI,UAAU,WACZ,MAAM,IAAI,0BAA0B,MAAM;CAK9C,MAAM,SAAS;EAAE,GADA,6BAA6B;EAChB,GAAG;CAAU;CAE3C,OAAO;EACL,GAAG;EACH,4BAA4B,kCAAkC,OAAO,0BAA0B;EAC/F,WAAW,KAAK,QAAQ,OAAO,QAAQ,OAAO,OAAO;CACvD;AACF;AAEA,MAAM,wCAAwC;AAC9C,MAAM,iCAAiC;AAEvC,SAAS,kCAAkC,YAA6B;CACtE,MAAM,cAAc,QAAQ,IAAI;CAChC,MAAM,QAAQ,gBAAgB,SAAY,aAAa;CACvD,MAAM,SAAS,gBAAgB,SAAY,qCAAqC;CAEhF,IAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,QAAQ,GAAG,OAAO;CAC7E,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;EACpD,MAAM,SAAS,OAAO,KAAK;EAC3B,IAAI,OAAO,SAAS,MAAM,KAAK,SAAS,GAAG,OAAO;CACpD;CAEA,QAAQ,KACN,WAAW,OAAO,SAAS,KAAK,UAAU,KAAK,EAAE,UAAU,sCAAsC,IACnG;CACA,OAAO;AACT"}
+{"version":3,"file":"resolve-build-config.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/resolve-build-config.ts"],"sourcesContent":["import path from \"path\";\nimport { defaultWarlockConfigurations } from \"../warlock-config/default-configurations\";\nimport { normalizeBuildConfig } from \"../warlock-config/normalize-build-config\";\nimport type { WarlockConfig } from \"../warlock-config/types\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\n\n/**\n * Keys the builder deletes before handing the options to esbuild — ours\n * (`singleBundle`, `esmShim`), which esbuild would reject as unknown, and\n * `banner`, which is re-merged and re-applied after the user spread.\n *\n * They are optional here for a concrete reason: `Required<…>` makes `delete`\n * a type error (TS2790). Naming exactly these three says which keys are\n * removable, rather than casting at each `delete` — a cast there would also\n * hide a genuine mistake.\n *\n * `outFile` and `entryPath` stay REQUIRED even though the builder deletes\n * them too. They are always present after resolution and callers depend on\n * that; widening them to `string | undefined` pushed the lie downstream into\n * `start-production.command.ts`, which then could not trust its own config.\n */\ntype BuilderStrippedKeys = \"singleBundle\" | \"esmShim\" | \"banner\" | \"routeRegistrationTimeoutMs\";\n\nexport type ResolvedBuildConfig = Required<\n  Omit<NonNullable<WarlockConfig[\"build\"]>, \"outDirectory\" | BuilderStrippedKeys>\n> &\n  Partial<Pick<NonNullable<WarlockConfig[\"build\"]>, BuilderStrippedKeys>> & {\n    /** Absolute path to the bundled entry file (`{outdir}/{outFile}`) */\n    entryPath: string;\n  };\n\n/**\n * esbuild options the build config may not carry, and why.\n *\n * Both apply the named compiler options to EVERY file in the bundle, not just\n * the app's own sources — workspace packages compiled under their own tsconfig\n * are silently recompiled under the app's. An app-level\n * `verbatimModuleSyntax: true` reaching package sources that never opted into\n * it strips the imports their decorators rely on, and the build succeeds only\n * to die at import time with `Class extends value undefined`.\n */\nconst FORBIDDEN_BUILD_OPTIONS = {\n  tsconfig: \"points esbuild at a tsconfig file\",\n  tsconfigRaw: \"inlines compiler options\",\n} as const;\n\n/**\n * Raised when the build config carries an esbuild option the framework owns.\n *\n * The typed config already omits these keys; this catches the forms the type\n * cannot see — an `as any` cast, or a plain `warlock.config.js`. Rejected\n * rather than deleted: dropping the key quietly would leave the author\n * believing a setting applied when it never did.\n */\nexport class ForbiddenBuildOptionError extends Error {\n  /** Stable Warlock error code; `warlock explain WL1006` prints the fix. */\n  public readonly code = \"WL1006\";\n\n  public constructor(public readonly option: keyof typeof FORBIDDEN_BUILD_OPTIONS) {\n    super(\n      [\n        `build.${option} is not a supported warlock build option.`,\n        \"\",\n        `Setting it ${FORBIDDEN_BUILD_OPTIONS[option]} for every file in the bundle,`,\n        \"including workspace packages that were compiled under their own tsconfig.\",\n        \"Options such as `verbatimModuleSyntax` then apply to sources that never\",\n        \"opted into them, and the build succeeds but crashes at import time with\",\n        \"`Class extends value undefined`.\",\n        \"\",\n        `Remove \\`${option}\\` from the \\`build\\` block of your warlock config. The builder`,\n        \"already reads the app's tsconfig for the parts it needs (path aliases); to\",\n        \"change how your own sources compile, edit that tsconfig.json instead.\",\n      ].join(\"\\n\"),\n    );\n\n    this.name = \"ForbiddenBuildOptionError\";\n  }\n}\n\n/**\n * Resolve the build config with framework defaults applied.\n *\n * Both the production builder and `warlock start` call this so they\n * agree on where the bundle lives — previously each had its own local\n * fallbacks and they drifted (`.warlock/production` vs `dist`),\n * letting `build` and `start` look at different paths.\n */\nexport function resolveBuildConfig(): ResolvedBuildConfig {\n  // Normalised here rather than only in `defineConfig` because a project may\n  // export a plain config object that never went through it.\n  const userBuild = normalizeBuildConfig(warlockConfigManager.get(\"build\") ?? {});\n\n  // Before the merge, so the option cannot reach the esbuild spread in\n  // production-builder — which overrides framework defaults with user config.\n  for (const option of Object.keys(FORBIDDEN_BUILD_OPTIONS) as Array<\n    keyof typeof FORBIDDEN_BUILD_OPTIONS\n  >) {\n    if (option in userBuild) {\n      throw new ForbiddenBuildOptionError(option);\n    }\n  }\n\n  const defaults = defaultWarlockConfigurations.build!;\n  const merged = { ...defaults, ...userBuild } as ResolvedBuildConfig;\n\n  return {\n    ...merged,\n    routeRegistrationTimeoutMs: resolveRouteRegistrationTimeoutMs(\n      merged.routeRegistrationTimeoutMs,\n    ),\n    entryPath: path.resolve(merged.outdir, merged.outFile),\n  };\n}\n\nconst DEFAULT_ROUTE_REGISTRATION_TIMEOUT_MS = 30_000;\nconst ROUTE_REGISTRATION_TIMEOUT_ENV = \"WARLOCK_ROUTE_REGISTRATION_TIMEOUT_MS\";\n\nfunction resolveRouteRegistrationTimeoutMs(configured: unknown): number {\n  const environment = process.env[ROUTE_REGISTRATION_TIMEOUT_ENV];\n  const value = environment === undefined ? configured : environment;\n  const source =\n    environment === undefined ? \"build.routeRegistrationTimeoutMs\" : ROUTE_REGISTRATION_TIMEOUT_ENV;\n\n  if (typeof value === \"number\" && Number.isFinite(value) && value > 0) return value;\n  if (typeof value === \"string\" && value.trim() !== \"\") {\n    const parsed = Number(value);\n    if (Number.isFinite(parsed) && parsed > 0) return parsed;\n  }\n\n  console.warn(\n    `Invalid ${source} value ${JSON.stringify(value)}; using ${DEFAULT_ROUTE_REGISTRATION_TIMEOUT_MS}ms.`,\n  );\n  return DEFAULT_ROUTE_REGISTRATION_TIMEOUT_MS;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAyCA,MAAM,0BAA0B;CAC9B,UAAU;CACV,aAAa;AACf;;;;;;;;;AAUA,IAAa,4BAAb,cAA+C,MAAM;CAInD,AAAO,YAAY,AAAgB,QAA8C;EAC/E,MACE;GACE,SAAS,OAAO;GAChB;GACA,cAAc,wBAAwB,QAAQ;GAC9C;GACA;GACA;GACA;GACA;GACA,YAAY,OAAO;GACnB;GACA;EACF,CAAC,CAAC,KAAK,IAAI,CACb;EAfiC;cAFZ;EAmBrB,KAAK,OAAO;CACd;AACF;;;;;;;;;AAUA,SAAgB,qBAA0C;CAGxD,MAAM,YAAY,qBAAqB,qBAAqB,IAAI,OAAO,KAAK,CAAC,CAAC;CAI9E,KAAK,MAAM,UAAU,OAAO,KAAK,uBAAuB,GAGtD,IAAI,UAAU,WACZ,MAAM,IAAI,0BAA0B,MAAM;CAK9C,MAAM,SAAS;EAAE,GADA,6BAA6B;EAChB,GAAG;CAAU;CAE3C,OAAO;EACL,GAAG;EACH,4BAA4B,kCAC1B,OAAO,0BACT;EACA,WAAW,KAAK,QAAQ,OAAO,QAAQ,OAAO,OAAO;CACvD;AACF;AAEA,MAAM,wCAAwC;AAC9C,MAAM,iCAAiC;AAEvC,SAAS,kCAAkC,YAA6B;CACtE,MAAM,cAAc,QAAQ,IAAI;CAChC,MAAM,QAAQ,gBAAgB,SAAY,aAAa;CACvD,MAAM,SACJ,gBAAgB,SAAY,qCAAqC;CAEnE,IAAI,OAAO,UAAU,YAAY,OAAO,SAAS,KAAK,KAAK,QAAQ,GAAG,OAAO;CAC7E,IAAI,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM,IAAI;EACpD,MAAM,SAAS,OAAO,KAAK;EAC3B,IAAI,OAAO,SAAS,MAAM,KAAK,SAAS,GAAG,OAAO;CACpD;CAEA,QAAQ,KACN,WAAW,OAAO,SAAS,KAAK,UAAU,KAAK,EAAE,UAAU,sCAAsC,IACnG;CACA,OAAO;AACT"}

package/esm/production/route-registration-child.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"route-registration-child.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/route-registration-child.ts"],"sourcesContent":["import { fileExistsAsync } from \"@warlock.js/fs\";\nimport { Application } from \"../application\";\nimport { bootstrap } from \"../bootstrap\";\nimport { loadConfigFiles } from \"../config/load-config-files\";\nimport { filesOrchestrator } from \"../dev-server/files-orchestrator\";\nimport { buildOpenApiForChild } from \"../openapi/openapi-child-output\";\nimport {\n  OPENAPI_PROTOCOL_VERSION,\n  OPENAPI_RESULT_MESSAGE,\n  parseOpenApiChildOptions,\n  type OpenApiChildRequestOptions,\n} from \"../openapi/openapi-protocol\";\nimport { collectNamedApiRoutesWithResponses } from \"../router/named-api-routes-with-responses\";\nimport { loadEnvironmentFiles } from \"../utils/load-environment\";\nimport { appPath } from \"../utils/paths\";\nimport type { Environment, RuntimeStrategy } from \"../utils/environment\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\n\nconst PROTOCOL_VERSION = 1;\n\ntype RequestMessage = Readonly<{\n  version: typeof PROTOCOL_VERSION;\n  cwd: string;\n  environment?: Environment;\n  runtimeStrategy?: RuntimeStrategy;\n  /**\n   * Present for `warlock generate.openapi`: build the OpenAPI document in this process and\n   * send it instead of the route snapshot. The loading above is identical for both.\n   */\n  openapi?: OpenApiChildRequestOptions;\n}>;\n\nprocess.once(\"message\", async (message: unknown) => {\n  try {\n    const request = validateRequest(message);\n    process.chdir(request.cwd);\n\n    if (request.environment) Application.setEnvironment(request.environment);\n    if (request.runtimeStrategy) Application.setRuntimeStrategy(request.runtimeStrategy);\n\n    await loadEnvironmentFiles();\n    await warlockConfigManager.load();\n    await filesOrchestrator.init();\n    await bootstrap();\n\n    if (await fileExistsAsync(appPath(\"bootstrap.ts\"))) {\n      await filesOrchestrator.load(\"src/app/bootstrap.ts\");\n    }\n\n    await filesOrchestrator.initializeAll();\n    filesOrchestrator.specialFilesCollector.collect(filesOrchestrator.getFiles());\n    await loadConfigFiles(true);\n\n    for (const file of filesOrchestrator.files.values()) {\n      if (file.type === \"model\") {\n        await sendProgress(file.relativePath);\n        await filesOrchestrator.moduleLoader.loadModule(file, \"model\");\n      }\n    }\n\n    await filesOrchestrator.moduleLoader.loadAll({ onBeforeLoad: (file) => sendProgress(file.relativePath) });\n\n    if (request.openapi) {\n      const { document, warnings } = await buildOpenApiForChild({\n        cwd: request.cwd,\n        files: filesOrchestrator.files.values(),\n        request: request.openapi,\n        onWarn: (warning) => {\n          process.stderr.write(`[warlock] ${warning}\\n`);\n        },\n      });\n\n      await sendAndExit({\n        type: OPENAPI_RESULT_MESSAGE,\n        result: { version: OPENAPI_PROTOCOL_VERSION, document, warnings },\n      });\n    }\n\n    const routes = await collectNamedApiRoutesWithResponses({\n      appRoot: request.cwd,\n      files: filesOrchestrator.files.values(),\n      onWarn: (warning) => {\n        process.stderr.write(`[warlock] ${warning}\\n`);\n      },\n    });\n\n    await sendAndExit({\n      type: \"route-registration:snapshot\",\n      snapshot: { version: PROTOCOL_VERSION, routes },\n    });\n  } catch (error) {\n    const message = error instanceof Error ? error.stack || error.message : String(error);\n    await sendAndExit({ type: \"route-registration:error\", message }, 1);\n  }\n});\n\nfunction validateRequest(value: unknown): RequestMessage {\n  if (\n    typeof value !== \"object\" ||\n    value === null ||\n    (value as { version?: unknown }).version !== PROTOCOL_VERSION ||\n    typeof (value as { cwd?: unknown }).cwd !== \"string\" ||\n    !isOptionalEnvironment((value as { environment?: unknown }).environment) ||\n    !isOptionalRuntimeStrategy((value as { runtimeStrategy?: unknown }).runtimeStrategy)\n  ) {\n    throw new Error(\"Route registration child received an invalid protocol request.\");\n  }\n\n  const openapi = (value as { openapi?: unknown }).openapi;\n\n  if (openapi !== undefined) {\n    parseOpenApiChildOptions(openapi);\n  }\n\n  return value as RequestMessage;\n}\n\nfunction isOptionalEnvironment(value: unknown): value is Environment | undefined {\n  return (\n    value === undefined || value === \"development\" || value === \"production\" || value === \"test\"\n  );\n}\n\nfunction isOptionalRuntimeStrategy(value: unknown): value is RuntimeStrategy | undefined {\n  return value === undefined || value === \"development\" || value === \"production\";\n}\n\nasync function sendAndExit(message: unknown, exitCode = 0): Promise<never> {\n  if (typeof process.send !== \"function\") {\n    throw new Error(\"Route registration child requires an IPC channel.\");\n  }\n\n  await new Promise<void>((resolve, reject) => {\n    process.send!(message, (error) => (error ? reject(error) : resolve()));\n  });\n  process.disconnect?.();\n  process.exit(exitCode);\n}\n\nasync function sendProgress(module: string): Promise<void> {\n  if (typeof process.send !== \"function\") return;\n  await new Promise<void>((resolve, reject) => {\n    process.send!({ type: \"route-registration:progress\", module }, (error) =>\n      error ? reject(error) : resolve(),\n    );\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,MAAM,mBAAmB;AAczB,QAAQ,KAAK,WAAW,OAAO,YAAqB;CAClD,IAAI;EACF,MAAM,UAAU,gBAAgB,OAAO;EACvC,QAAQ,MAAM,QAAQ,GAAG;EAEzB,IAAI,QAAQ,aAAa,YAAY,eAAe,QAAQ,WAAW;EACvE,IAAI,QAAQ,iBAAiB,YAAY,mBAAmB,QAAQ,eAAe;EAEnF,MAAM,qBAAqB;EAC3B,MAAM,qBAAqB,KAAK;EAChC,MAAM,kBAAkB,KAAK;EAC7B,MAAM,UAAU;EAEhB,IAAI,MAAM,gBAAgB,QAAQ,cAAc,CAAC,GAC/C,MAAM,kBAAkB,KAAK,sBAAsB;EAGrD,MAAM,kBAAkB,cAAc;EACtC,kBAAkB,sBAAsB,QAAQ,kBAAkB,SAAS,CAAC;EAC5E,MAAM,gBAAgB,IAAI;EAE1B,KAAK,MAAM,QAAQ,kBAAkB,MAAM,OAAO,GAChD,IAAI,KAAK,SAAS,SAAS;GACzB,MAAM,aAAa,KAAK,YAAY;GACpC,MAAM,kBAAkB,aAAa,WAAW,MAAM,OAAO;EAC/D;EAGF,MAAM,kBAAkB,aAAa,QAAQ,EAAE,eAAe,SAAS,aAAa,KAAK,YAAY,EAAE,CAAC;EAExG,IAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,UAAU,aAAa,MAAM,qBAAqB;IACxD,KAAK,QAAQ;IACb,OAAO,kBAAkB,MAAM,OAAO;IACtC,SAAS,QAAQ;IACjB,SAAS,YAAY;KACnB,QAAQ,OAAO,MAAM,aAAa,QAAQ,GAAG;IAC/C;GACF,CAAC;GAED,MAAM,YAAY;IAChB,MAAM;IACN,QAAQ;KAAE;KAAmC;KAAU;IAAS;GAClE,CAAC;EACH;EAUA,MAAM,YAAY;GAChB,MAAM;GACN,UAAU;IAAE,SAAS;IAAkB,cAVpB,mCAAmC;KACtD,SAAS,QAAQ;KACjB,OAAO,kBAAkB,MAAM,OAAO;KACtC,SAAS,YAAY;MACnB,QAAQ,OAAO,MAAM,aAAa,QAAQ,GAAG;KAC/C;IACF,CAAC;GAI+C;EAChD,CAAC;CACH,SAAS,OAAO;EAEd,MAAM,YAAY;GAAE,MAAM;GAA4B,SADtC,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK;EACtB,GAAG,CAAC;CACpE;AACF,CAAC;AAED,SAAS,gBAAgB,OAAgC;CACvD,IACE,OAAO,UAAU,YACjB,UAAU,QACT,MAAgC,YAAY,oBAC7C,OAAQ,MAA4B,QAAQ,YAC5C,CAAC,sBAAuB,MAAoC,WAAW,KACvE,CAAC,0BAA2B,MAAwC,eAAe,GAEnF,MAAM,IAAI,MAAM,gEAAgE;CAGlF,MAAM,UAAW,MAAgC;CAEjD,IAAI,YAAY,QACd,yBAAyB,OAAO;CAGlC,OAAO;AACT;AAEA,SAAS,sBAAsB,OAAkD;CAC/E,OACE,UAAU,UAAa,UAAU,iBAAiB,UAAU,gBAAgB,UAAU;AAE1F;AAEA,SAAS,0BAA0B,OAAsD;CACvF,OAAO,UAAU,UAAa,UAAU,iBAAiB,UAAU;AACrE;AAEA,eAAe,YAAY,SAAkB,WAAW,GAAmB;CACzE,IAAI,OAAO,QAAQ,SAAS,YAC1B,MAAM,IAAI,MAAM,mDAAmD;CAGrE,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,QAAQ,KAAM,UAAU,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE;CACvE,CAAC;CACD,QAAQ,aAAa;CACrB,QAAQ,KAAK,QAAQ;AACvB;AAEA,eAAe,aAAa,QAA+B;CACzD,IAAI,OAAO,QAAQ,SAAS,YAAY;CACxC,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,QAAQ,KAAM;GAAE,MAAM;GAA+B;EAAO,IAAI,UAC9D,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAClC;CACF,CAAC;AACH"}
+{"version":3,"file":"route-registration-child.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/route-registration-child.ts"],"sourcesContent":["import { fileExistsAsync } from \"@warlock.js/fs\";\nimport { Application } from \"../application\";\nimport { bootstrap } from \"../bootstrap\";\nimport { loadConfigFiles } from \"../config/load-config-files\";\nimport { filesOrchestrator } from \"../dev-server/files-orchestrator\";\nimport { buildOpenApiForChild } from \"../openapi/openapi-child-output\";\nimport {\n  OPENAPI_PROTOCOL_VERSION,\n  OPENAPI_RESULT_MESSAGE,\n  parseOpenApiChildOptions,\n  type OpenApiChildRequestOptions,\n} from \"../openapi/openapi-protocol\";\nimport { collectNamedApiRoutesWithResponses } from \"../router/named-api-routes-with-responses\";\nimport { loadEnvironmentFiles } from \"../utils/load-environment\";\nimport { appPath } from \"../utils/paths\";\nimport type { Environment, RuntimeStrategy } from \"../utils/environment\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\n\nconst PROTOCOL_VERSION = 1;\n\ntype RequestMessage = Readonly<{\n  version: typeof PROTOCOL_VERSION;\n  cwd: string;\n  environment?: Environment;\n  runtimeStrategy?: RuntimeStrategy;\n  /**\n   * Present for `warlock generate.openapi`: build the OpenAPI document in this process and\n   * send it instead of the route snapshot. The loading above is identical for both.\n   */\n  openapi?: OpenApiChildRequestOptions;\n}>;\n\nprocess.once(\"message\", async (message: unknown) => {\n  try {\n    const request = validateRequest(message);\n    process.chdir(request.cwd);\n\n    if (request.environment) Application.setEnvironment(request.environment);\n    if (request.runtimeStrategy) Application.setRuntimeStrategy(request.runtimeStrategy);\n\n    await loadEnvironmentFiles();\n    await warlockConfigManager.load();\n    await filesOrchestrator.init();\n    await bootstrap();\n\n    if (await fileExistsAsync(appPath(\"bootstrap.ts\"))) {\n      await filesOrchestrator.load(\"src/app/bootstrap.ts\");\n    }\n\n    await filesOrchestrator.initializeAll();\n    filesOrchestrator.specialFilesCollector.collect(filesOrchestrator.getFiles());\n    await loadConfigFiles(true);\n\n    for (const file of filesOrchestrator.files.values()) {\n      if (file.type === \"model\") {\n        await sendProgress(file.relativePath);\n        await filesOrchestrator.moduleLoader.loadModule(file, \"model\");\n      }\n    }\n\n    await filesOrchestrator.moduleLoader.loadAll({\n      onBeforeLoad: (file) => sendProgress(file.relativePath),\n    });\n\n    if (request.openapi) {\n      const { document, warnings } = await buildOpenApiForChild({\n        cwd: request.cwd,\n        files: filesOrchestrator.files.values(),\n        request: request.openapi,\n        onWarn: (warning) => {\n          process.stderr.write(`[warlock] ${warning}\\n`);\n        },\n      });\n\n      await sendAndExit({\n        type: OPENAPI_RESULT_MESSAGE,\n        result: { version: OPENAPI_PROTOCOL_VERSION, document, warnings },\n      });\n    }\n\n    const routes = await collectNamedApiRoutesWithResponses({\n      appRoot: request.cwd,\n      files: filesOrchestrator.files.values(),\n      onWarn: (warning) => {\n        process.stderr.write(`[warlock] ${warning}\\n`);\n      },\n    });\n\n    await sendAndExit({\n      type: \"route-registration:snapshot\",\n      snapshot: { version: PROTOCOL_VERSION, routes },\n    });\n  } catch (error) {\n    const message = error instanceof Error ? error.stack || error.message : String(error);\n    await sendAndExit({ type: \"route-registration:error\", message }, 1);\n  }\n});\n\nfunction validateRequest(value: unknown): RequestMessage {\n  if (\n    typeof value !== \"object\" ||\n    value === null ||\n    (value as { version?: unknown }).version !== PROTOCOL_VERSION ||\n    typeof (value as { cwd?: unknown }).cwd !== \"string\" ||\n    !isOptionalEnvironment((value as { environment?: unknown }).environment) ||\n    !isOptionalRuntimeStrategy((value as { runtimeStrategy?: unknown }).runtimeStrategy)\n  ) {\n    throw new Error(\"Route registration child received an invalid protocol request.\");\n  }\n\n  const openapi = (value as { openapi?: unknown }).openapi;\n\n  if (openapi !== undefined) {\n    parseOpenApiChildOptions(openapi);\n  }\n\n  return value as RequestMessage;\n}\n\nfunction isOptionalEnvironment(value: unknown): value is Environment | undefined {\n  return (\n    value === undefined || value === \"development\" || value === \"production\" || value === \"test\"\n  );\n}\n\nfunction isOptionalRuntimeStrategy(value: unknown): value is RuntimeStrategy | undefined {\n  return value === undefined || value === \"development\" || value === \"production\";\n}\n\nasync function sendAndExit(message: unknown, exitCode = 0): Promise<never> {\n  if (typeof process.send !== \"function\") {\n    throw new Error(\"Route registration child requires an IPC channel.\");\n  }\n\n  await new Promise<void>((resolve, reject) => {\n    process.send!(message, (error) => (error ? reject(error) : resolve()));\n  });\n  process.disconnect?.();\n  process.exit(exitCode);\n}\n\nasync function sendProgress(module: string): Promise<void> {\n  if (typeof process.send !== \"function\") return;\n  await new Promise<void>((resolve, reject) => {\n    process.send!({ type: \"route-registration:progress\", module }, (error) =>\n      error ? reject(error) : resolve(),\n    );\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,MAAM,mBAAmB;AAczB,QAAQ,KAAK,WAAW,OAAO,YAAqB;CAClD,IAAI;EACF,MAAM,UAAU,gBAAgB,OAAO;EACvC,QAAQ,MAAM,QAAQ,GAAG;EAEzB,IAAI,QAAQ,aAAa,YAAY,eAAe,QAAQ,WAAW;EACvE,IAAI,QAAQ,iBAAiB,YAAY,mBAAmB,QAAQ,eAAe;EAEnF,MAAM,qBAAqB;EAC3B,MAAM,qBAAqB,KAAK;EAChC,MAAM,kBAAkB,KAAK;EAC7B,MAAM,UAAU;EAEhB,IAAI,MAAM,gBAAgB,QAAQ,cAAc,CAAC,GAC/C,MAAM,kBAAkB,KAAK,sBAAsB;EAGrD,MAAM,kBAAkB,cAAc;EACtC,kBAAkB,sBAAsB,QAAQ,kBAAkB,SAAS,CAAC;EAC5E,MAAM,gBAAgB,IAAI;EAE1B,KAAK,MAAM,QAAQ,kBAAkB,MAAM,OAAO,GAChD,IAAI,KAAK,SAAS,SAAS;GACzB,MAAM,aAAa,KAAK,YAAY;GACpC,MAAM,kBAAkB,aAAa,WAAW,MAAM,OAAO;EAC/D;EAGF,MAAM,kBAAkB,aAAa,QAAQ,EAC3C,eAAe,SAAS,aAAa,KAAK,YAAY,EACxD,CAAC;EAED,IAAI,QAAQ,SAAS;GACnB,MAAM,EAAE,UAAU,aAAa,MAAM,qBAAqB;IACxD,KAAK,QAAQ;IACb,OAAO,kBAAkB,MAAM,OAAO;IACtC,SAAS,QAAQ;IACjB,SAAS,YAAY;KACnB,QAAQ,OAAO,MAAM,aAAa,QAAQ,GAAG;IAC/C;GACF,CAAC;GAED,MAAM,YAAY;IAChB,MAAM;IACN,QAAQ;KAAE;KAAmC;KAAU;IAAS;GAClE,CAAC;EACH;EAUA,MAAM,YAAY;GAChB,MAAM;GACN,UAAU;IAAE,SAAS;IAAkB,cAVpB,mCAAmC;KACtD,SAAS,QAAQ;KACjB,OAAO,kBAAkB,MAAM,OAAO;KACtC,SAAS,YAAY;MACnB,QAAQ,OAAO,MAAM,aAAa,QAAQ,GAAG;KAC/C;IACF,CAAC;GAI+C;EAChD,CAAC;CACH,SAAS,OAAO;EAEd,MAAM,YAAY;GAAE,MAAM;GAA4B,SADtC,iBAAiB,QAAQ,MAAM,SAAS,MAAM,UAAU,OAAO,KAAK;EACtB,GAAG,CAAC;CACpE;AACF,CAAC;AAED,SAAS,gBAAgB,OAAgC;CACvD,IACE,OAAO,UAAU,YACjB,UAAU,QACT,MAAgC,YAAY,oBAC7C,OAAQ,MAA4B,QAAQ,YAC5C,CAAC,sBAAuB,MAAoC,WAAW,KACvE,CAAC,0BAA2B,MAAwC,eAAe,GAEnF,MAAM,IAAI,MAAM,gEAAgE;CAGlF,MAAM,UAAW,MAAgC;CAEjD,IAAI,YAAY,QACd,yBAAyB,OAAO;CAGlC,OAAO;AACT;AAEA,SAAS,sBAAsB,OAAkD;CAC/E,OACE,UAAU,UAAa,UAAU,iBAAiB,UAAU,gBAAgB,UAAU;AAE1F;AAEA,SAAS,0BAA0B,OAAsD;CACvF,OAAO,UAAU,UAAa,UAAU,iBAAiB,UAAU;AACrE;AAEA,eAAe,YAAY,SAAkB,WAAW,GAAmB;CACzE,IAAI,OAAO,QAAQ,SAAS,YAC1B,MAAM,IAAI,MAAM,mDAAmD;CAGrE,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,QAAQ,KAAM,UAAU,UAAW,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAAE;CACvE,CAAC;CACD,QAAQ,aAAa;CACrB,QAAQ,KAAK,QAAQ;AACvB;AAEA,eAAe,aAAa,QAA+B;CACzD,IAAI,OAAO,QAAQ,SAAS,YAAY;CACxC,MAAM,IAAI,SAAe,SAAS,WAAW;EAC3C,QAAQ,KAAM;GAAE,MAAM;GAA+B;EAAO,IAAI,UAC9D,QAAQ,OAAO,KAAK,IAAI,QAAQ,CAClC;CACF,CAAC;AACH"}

package/esm/production/route-registration-snapshot.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"route-registration-snapshot.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/route-registration-snapshot.ts"],"sourcesContent":["import type { NamedApiRoute, RequestMethod } from \"../router/types\";\nimport type { Environment, RuntimeStrategy } from \"../utils/environment\";\nimport {\n  runRegistrationChild,\n  type RegistrationChildForker,\n  type RegistrationChildProcess,\n} from \"./registration-child-runner\";\n\nconst PROTOCOL_VERSION = 1;\n\nexport type RouteRegistrationSnapshot = Readonly<{\n  version: typeof PROTOCOL_VERSION;\n  routes: readonly NamedApiRoute[];\n}>;\n\nexport type RouteRegistrationChildRequest = Readonly<{\n  version: typeof PROTOCOL_VERSION;\n  cwd: string;\n  environment?: Environment;\n  runtimeStrategy?: RuntimeStrategy;\n}>;\n\nexport type RouteRegistrationChildProcess = RegistrationChildProcess;\n\nexport type RouteRegistrationSnapshotOptions = Readonly<{\n  cwd?: string;\n  environment?: Environment;\n  runtimeStrategy?: RuntimeStrategy;\n  timeoutMs?: number;\n  childEntry?: string;\n  forkProcess?: RegistrationChildForker;\n}>;\n\n/**\n * Collect named application API routes in a fresh process.\n *\n * The child imports application registration modules but deliberately does not\n * register, boot, or start connectors. Application module top-level code can\n * still have arbitrary user-owned side effects; this boundary is framework-only.\n */\nexport function collectRouteRegistrationSnapshot(\n  options: RouteRegistrationSnapshotOptions = {},\n): Promise<RouteRegistrationSnapshot> {\n  const cwd = options.cwd ?? process.cwd();\n\n  return runRegistrationChild<RouteRegistrationSnapshot>({\n    cwd,\n    timeoutMs: options.timeoutMs,\n    childEntry: options.childEntry,\n    forkProcess: options.forkProcess,\n    request: {\n      version: PROTOCOL_VERSION,\n      cwd,\n      environment: options.environment,\n      runtimeStrategy: options.runtimeStrategy,\n    } satisfies RouteRegistrationChildRequest,\n    resultMessageType: \"route-registration:snapshot\",\n    resultNoun: \"snapshot\",\n    readResult: (message) => validateSnapshot(message.snapshot),\n  });\n}\n\nfunction validateSnapshot(value: unknown): RouteRegistrationSnapshot {\n  if (!isRecord(value) || value.version !== PROTOCOL_VERSION || !Array.isArray(value.routes)) {\n    throw new Error(\"Route registration child sent an invalid snapshot protocol payload.\");\n  }\n\n  const routes = value.routes.map((route) => {\n    if (\n      !isRecord(route) ||\n      typeof route.name !== \"string\" ||\n      typeof route.path !== \"string\" ||\n      !isRequestMethod(route.method)\n    ) {\n      throw new Error(\"Route registration child sent an invalid route record.\");\n    }\n\n    const response = route.response;\n    const allowedKeys = response === undefined ? 3 : 4;\n\n    if (\n      Object.keys(route).length !== allowedKeys ||\n      (response !== undefined && !isResponseTypeRecord(response))\n    ) {\n      throw new Error(\"Route registration child sent a route record with non-browser-safe fields.\");\n    }\n\n    const base = {\n      name: route.name,\n      path: route.path,\n      method: normalizeRequestMethod(route.method),\n    };\n\n    return Object.freeze(\n      response === undefined ? base : { ...base, response: Object.freeze({ ...response }) },\n    );\n  });\n\n  return Object.freeze({ version: PROTOCOL_VERSION, routes: Object.freeze(routes) });\n}\n\nfunction isResponseTypeRecord(value: unknown): value is Record<string, string> {\n  return isRecord(value) && Object.values(value).every((entry) => typeof entry === \"string\");\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isRequestMethod(value: unknown): value is RequestMethod {\n  return (\n    typeof value === \"string\" &&\n    [\"get\", \"post\", \"put\", \"delete\", \"patch\", \"options\", \"head\", \"all\"].includes(\n      value.toLowerCase(),\n    )\n  );\n}\n\nfunction normalizeRequestMethod(value: RequestMethod | string): RequestMethod {\n  return value.toLowerCase() === \"all\" ? \"all\" : (value.toUpperCase() as RequestMethod);\n}\n\n"],"mappings":";;;AAQA,MAAM,mBAAmB;;;;;;;;AAgCzB,SAAgB,iCACd,UAA4C,CAAC,GACT;CACpC,MAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;CAEvC,OAAO,qBAAgD;EACrD;EACA,WAAW,QAAQ;EACnB,YAAY,QAAQ;EACpB,aAAa,QAAQ;EACrB,SAAS;GACP,SAAS;GACT;GACA,aAAa,QAAQ;GACrB,iBAAiB,QAAQ;EAC3B;EACA,mBAAmB;EACnB,YAAY;EACZ,aAAa,YAAY,iBAAiB,QAAQ,QAAQ;CAC5D,CAAC;AACH;AAEA,SAAS,iBAAiB,OAA2C;CACnE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,YAAY,oBAAoB,CAAC,MAAM,QAAQ,MAAM,MAAM,GACvF,MAAM,IAAI,MAAM,qEAAqE;CAGvF,MAAM,SAAS,MAAM,OAAO,KAAK,UAAU;EACzC,IACE,CAAC,SAAS,KAAK,KACf,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,SAAS,YACtB,CAAC,gBAAgB,MAAM,MAAM,GAE7B,MAAM,IAAI,MAAM,wDAAwD;EAG1E,MAAM,WAAW,MAAM;EACvB,MAAM,cAAc,aAAa,SAAY,IAAI;EAEjD,IACE,OAAO,KAAK,KAAK,CAAC,CAAC,WAAW,eAC7B,aAAa,UAAa,CAAC,qBAAqB,QAAQ,GAEzD,MAAM,IAAI,MAAM,4EAA4E;EAG9F,MAAM,OAAO;GACX,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,QAAQ,uBAAuB,MAAM,MAAM;EAC7C;EAEA,OAAO,OAAO,OACZ,aAAa,SAAY,OAAO;GAAE,GAAG;GAAM,UAAU,OAAO,OAAO,EAAE,GAAG,SAAS,CAAC;EAAE,CACtF;CACF,CAAC;CAED,OAAO,OAAO,OAAO;EAAE,SAAS;EAAkB,QAAQ,OAAO,OAAO,MAAM;CAAE,CAAC;AACnF;AAEA,SAAS,qBAAqB,OAAiD;CAC7E,OAAO,SAAS,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,CAAC,OAAO,UAAU,OAAO,UAAU,QAAQ;AAC3F;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBAAgB,OAAwC;CAC/D,OACE,OAAO,UAAU,YACjB;EAAC;EAAO;EAAQ;EAAO;EAAU;EAAS;EAAW;EAAQ;CAAK,CAAC,CAAC,SAClE,MAAM,YAAY,CACpB;AAEJ;AAEA,SAAS,uBAAuB,OAA8C;CAC5E,OAAO,MAAM,YAAY,MAAM,QAAQ,QAAS,MAAM,YAAY;AACpE"}
+{"version":3,"file":"route-registration-snapshot.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/route-registration-snapshot.ts"],"sourcesContent":["import type { NamedApiRoute, RequestMethod } from \"../router/types\";\nimport type { Environment, RuntimeStrategy } from \"../utils/environment\";\nimport {\n  runRegistrationChild,\n  type RegistrationChildForker,\n  type RegistrationChildProcess,\n} from \"./registration-child-runner\";\n\nconst PROTOCOL_VERSION = 1;\n\nexport type RouteRegistrationSnapshot = Readonly<{\n  version: typeof PROTOCOL_VERSION;\n  routes: readonly NamedApiRoute[];\n}>;\n\nexport type RouteRegistrationChildRequest = Readonly<{\n  version: typeof PROTOCOL_VERSION;\n  cwd: string;\n  environment?: Environment;\n  runtimeStrategy?: RuntimeStrategy;\n}>;\n\nexport type RouteRegistrationChildProcess = RegistrationChildProcess;\n\nexport type RouteRegistrationSnapshotOptions = Readonly<{\n  cwd?: string;\n  environment?: Environment;\n  runtimeStrategy?: RuntimeStrategy;\n  timeoutMs?: number;\n  childEntry?: string;\n  forkProcess?: RegistrationChildForker;\n}>;\n\n/**\n * Collect named application API routes in a fresh process.\n *\n * The child imports application registration modules but deliberately does not\n * register, boot, or start connectors. Application module top-level code can\n * still have arbitrary user-owned side effects; this boundary is framework-only.\n */\nexport function collectRouteRegistrationSnapshot(\n  options: RouteRegistrationSnapshotOptions = {},\n): Promise<RouteRegistrationSnapshot> {\n  const cwd = options.cwd ?? process.cwd();\n\n  return runRegistrationChild<RouteRegistrationSnapshot>({\n    cwd,\n    timeoutMs: options.timeoutMs,\n    childEntry: options.childEntry,\n    forkProcess: options.forkProcess,\n    request: {\n      version: PROTOCOL_VERSION,\n      cwd,\n      environment: options.environment,\n      runtimeStrategy: options.runtimeStrategy,\n    } satisfies RouteRegistrationChildRequest,\n    resultMessageType: \"route-registration:snapshot\",\n    resultNoun: \"snapshot\",\n    readResult: (message) => validateSnapshot(message.snapshot),\n  });\n}\n\nfunction validateSnapshot(value: unknown): RouteRegistrationSnapshot {\n  if (!isRecord(value) || value.version !== PROTOCOL_VERSION || !Array.isArray(value.routes)) {\n    throw new Error(\"Route registration child sent an invalid snapshot protocol payload.\");\n  }\n\n  const routes = value.routes.map((route) => {\n    if (\n      !isRecord(route) ||\n      typeof route.name !== \"string\" ||\n      typeof route.path !== \"string\" ||\n      !isRequestMethod(route.method)\n    ) {\n      throw new Error(\"Route registration child sent an invalid route record.\");\n    }\n\n    const response = route.response;\n    const allowedKeys = response === undefined ? 3 : 4;\n\n    if (\n      Object.keys(route).length !== allowedKeys ||\n      (response !== undefined && !isResponseTypeRecord(response))\n    ) {\n      throw new Error(\"Route registration child sent a route record with non-browser-safe fields.\");\n    }\n\n    const base = {\n      name: route.name,\n      path: route.path,\n      method: normalizeRequestMethod(route.method),\n    };\n\n    return Object.freeze(\n      response === undefined ? base : { ...base, response: Object.freeze({ ...response }) },\n    );\n  });\n\n  return Object.freeze({ version: PROTOCOL_VERSION, routes: Object.freeze(routes) });\n}\n\nfunction isResponseTypeRecord(value: unknown): value is Record<string, string> {\n  return isRecord(value) && Object.values(value).every((entry) => typeof entry === \"string\");\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isRequestMethod(value: unknown): value is RequestMethod {\n  return (\n    typeof value === \"string\" &&\n    [\"get\", \"post\", \"put\", \"delete\", \"patch\", \"options\", \"head\", \"all\"].includes(\n      value.toLowerCase(),\n    )\n  );\n}\n\nfunction normalizeRequestMethod(value: RequestMethod | string): RequestMethod {\n  return value.toLowerCase() === \"all\" ? \"all\" : (value.toUpperCase() as RequestMethod);\n}\n"],"mappings":";;;AAQA,MAAM,mBAAmB;;;;;;;;AAgCzB,SAAgB,iCACd,UAA4C,CAAC,GACT;CACpC,MAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;CAEvC,OAAO,qBAAgD;EACrD;EACA,WAAW,QAAQ;EACnB,YAAY,QAAQ;EACpB,aAAa,QAAQ;EACrB,SAAS;GACP,SAAS;GACT;GACA,aAAa,QAAQ;GACrB,iBAAiB,QAAQ;EAC3B;EACA,mBAAmB;EACnB,YAAY;EACZ,aAAa,YAAY,iBAAiB,QAAQ,QAAQ;CAC5D,CAAC;AACH;AAEA,SAAS,iBAAiB,OAA2C;CACnE,IAAI,CAAC,SAAS,KAAK,KAAK,MAAM,YAAY,oBAAoB,CAAC,MAAM,QAAQ,MAAM,MAAM,GACvF,MAAM,IAAI,MAAM,qEAAqE;CAGvF,MAAM,SAAS,MAAM,OAAO,KAAK,UAAU;EACzC,IACE,CAAC,SAAS,KAAK,KACf,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,SAAS,YACtB,CAAC,gBAAgB,MAAM,MAAM,GAE7B,MAAM,IAAI,MAAM,wDAAwD;EAG1E,MAAM,WAAW,MAAM;EACvB,MAAM,cAAc,aAAa,SAAY,IAAI;EAEjD,IACE,OAAO,KAAK,KAAK,CAAC,CAAC,WAAW,eAC7B,aAAa,UAAa,CAAC,qBAAqB,QAAQ,GAEzD,MAAM,IAAI,MAAM,4EAA4E;EAG9F,MAAM,OAAO;GACX,MAAM,MAAM;GACZ,MAAM,MAAM;GACZ,QAAQ,uBAAuB,MAAM,MAAM;EAC7C;EAEA,OAAO,OAAO,OACZ,aAAa,SAAY,OAAO;GAAE,GAAG;GAAM,UAAU,OAAO,OAAO,EAAE,GAAG,SAAS,CAAC;EAAE,CACtF;CACF,CAAC;CAED,OAAO,OAAO,OAAO;EAAE,SAAS;EAAkB,QAAQ,OAAO,OAAO,MAAM;CAAE,CAAC;AACnF;AAEA,SAAS,qBAAqB,OAAiD;CAC7E,OAAO,SAAS,KAAK,KAAK,OAAO,OAAO,KAAK,CAAC,CAAC,OAAO,UAAU,OAAO,UAAU,QAAQ;AAC3F;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBAAgB,OAAwC;CAC/D,OACE,OAAO,UAAU,YACjB;EAAC;EAAO;EAAQ;EAAO;EAAU;EAAS;EAAW;EAAQ;CAAK,CAAC,CAAC,SAClE,MAAM,YAAY,CACpB;AAEJ;AAEA,SAAS,uBAAuB,OAA8C;CAC5E,OAAO,MAAM,YAAY,MAAM,QAAQ,QAAS,MAAM,YAAY;AACpE"}