@warlock.js/core 5.31.0 → 5.32.0

package/esm/openapi/types.d.mts

@@ -1,11 +1,10 @@
 import { Route } from "../router/types.mjs";
-
 //#region ../../packages/core/src/openapi/types.d.ts
 /**
  * A JSON Schema fragment (OpenAPI 3.1 schemas are JSON Schema 2020-12).
  */
-type OpenApiSchema = Record<string, unknown>;
-type OpenApiParameter = {
+export type OpenApiSchema = Record<string, unknown>;
+export type OpenApiParameter = {
   name: string;
   in: "path" | "query" | "header" | "cookie";
   required?: boolean;
@@ -14,20 +13,20 @@ type OpenApiParameter = {
   explode?: boolean;
   schema: OpenApiSchema;
 };
-type OpenApiRequestBody = {
+export type OpenApiRequestBody = {
   required?: boolean;
   content: Record<string, {
     schema: OpenApiSchema;
   }>;
 };
-type OpenApiResponse = {
+export type OpenApiResponse = {
   description: string;
   content?: Record<string, {
     schema: OpenApiSchema;
   }>;
 };
-type OpenApiSecurityRequirement = Record<string, string[]>;
-type OpenApiOperation = {
+export type OpenApiSecurityRequirement = Record<string, string[]>;
+export type OpenApiOperation = {
   operationId: string;
   summary?: string;
   description?: string;
@@ -37,7 +36,7 @@ type OpenApiOperation = {
   responses: Record<string, OpenApiResponse>;
   security?: OpenApiSecurityRequirement[];
 };
-type OpenApiSecurityScheme = {
+export type OpenApiSecurityScheme = {
   type: "http";
   scheme: "bearer";
   bearerFormat?: string;
@@ -46,11 +45,11 @@ type OpenApiSecurityScheme = {
   in: "cookie";
   name: string;
 };
-type OpenApiComponents = {
+export type OpenApiComponents = {
   schemas?: Record<string, OpenApiSchema>;
   securitySchemes?: Record<string, OpenApiSecurityScheme>;
 };
-type OpenApiDocument = {
+export type OpenApiDocument = {
   openapi: "3.1.0";
   jsonSchemaDialect: string;
   info: {
@@ -71,50 +70,53 @@ type OpenApiDocument = {
  * The `validation.response` configuration keys that shape a failed-validation response.
  * Every key is optional; the documented defaults apply to the missing ones.
  */
-type OpenApiValidationResponseConfig = {
+export type OpenApiValidationResponseConfig = {
   errors?: string;
   inputKey?: string;
   inputError?: string;
-  status?: number; /** The global failure-body hook; only whether it is a function is read. */
+  status?: number;
+  /** The global failure-body hook; only whether it is a function is read. */
   body?: unknown;
 };
 /**
  * Everything the builder needs besides the routes. Plain values only, so the same call
  * serves the CLI child and the in-process dev path.
  */
-type OpenApiContext = {
+export type OpenApiContext = {
   info: {
     title: string;
     version: string;
     description?: string;
-  }; /** Absolute server URLs, first is the default. */
-  servers?: string[]; /** Also document page (SSR) routes. Defaults to `false`. */
+  };
+  /** Absolute server URLs, first is the default. */
+  servers?: string[];
+  /** Also document page (SSR) routes. Defaults to `false`. */
   includePages?: boolean;
   /**
    * Name a resource class for `components.schemas`, usually its export name
    * (`UserResource`). Return `undefined` for an unknown resource: it is named
    * `Resource1`, `Resource2`, ... in encounter order.
    */
-  resolveResourceName?: (resource: unknown) => string | undefined; /** The app's `validation.response` config value. */
+  resolveResourceName?: (resource: unknown) => string | undefined;
+  /** The app's `validation.response` config value. */
   validationResponse?: OpenApiValidationResponseConfig;
 };
-type OpenApiBuildResult = {
+export type OpenApiBuildResult = {
   document: OpenApiDocument;
   warnings: string[];
 };
 /** The slice of a route the builder reads. A full `Route` satisfies it. */
-type OpenApiRouteInput = Pick<Route, "method" | "path" | "handler"> & Partial<Pick<Route, "name" | "label" | "description" | "middleware" | "isPage" | "sourceFile" | "validation">>;
+export type OpenApiRouteInput = Pick<Route, "method" | "path" | "handler"> & Partial<Pick<Route, "name" | "label" | "description" | "middleware" | "isPage" | "sourceFile" | "validation">>;
 /**
  * The descriptor `authMiddleware()` attaches under `Symbol.for("warlock.auth")`.
  * Read structurally and validated; core never imports the auth package.
  */
-type AuthDescriptor = {
+export type AuthDescriptor = {
   sources: ("header" | {
     cookie: string;
   })[];
   userTypes: string[];
 };
-type WarningSink = (message: string) => void;
+export type WarningSink = (message: string) => void;
 //#endregion
-export { AuthDescriptor, OpenApiBuildResult, OpenApiComponents, OpenApiContext, OpenApiDocument, OpenApiOperation, OpenApiParameter, OpenApiRequestBody, OpenApiResponse, OpenApiRouteInput, OpenApiSchema, OpenApiSecurityRequirement, OpenApiSecurityScheme, OpenApiValidationResponseConfig, WarningSink };
 //# sourceMappingURL=types.d.mts.map

package/esm/openapi/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/openapi/types.ts"],"mappings":";;;;;AAKA;KAAY,aAAA,GAAgB,MAAM;AAAA,KAEtB,gBAAA;EACV,IAAA;EACA,EAAA;EACA,QAAA;EACA,WAAA;EACA,KAAA;EACA,OAAA;EACA,MAAA,EAAQ,aAAa;AAAA;AAAA,KAGX,kBAAA;EACV,QAAA;EACA,OAAA,EAAS,MAAM;IAAW,MAAA,EAAQ,aAAA;EAAA;AAAA;AAAA,KAGxB,eAAA;EACV,WAAA;EACA,OAAA,GAAU,MAAM;IAAW,MAAA,EAAQ,aAAA;EAAA;AAAA;AAAA,KAGzB,0BAAA,GAA6B,MAAM;AAAA,KAEnC,gBAAA;EACV,WAAA;EACA,OAAA;EACA,WAAA;EACA,IAAA;EACA,UAAA,GAAa,gBAAA;EACb,WAAA,GAAc,kBAAA;EACd,SAAA,EAAW,MAAA,SAAe,eAAA;EAC1B,QAAA,GAAW,0BAAA;AAAA;AAAA,KAGD,qBAAA;EACN,IAAA;EAAc,MAAA;EAAkB,YAAA;AAAA;EAChC,IAAA;EAAgB,EAAA;EAAc,IAAA;AAAA;AAAA,KAExB,iBAAA;EACV,OAAA,GAAU,MAAA,SAAe,aAAA;EACzB,eAAA,GAAkB,MAAA,SAAe,qBAAA;AAAA;AAAA,KAGvB,eAAA;EACV,OAAA;EACA,iBAAA;EACA,IAAA;IAAQ,KAAA;IAAe,OAAA;IAAiB,WAAA;EAAA;EACxC,OAAA;IAAY,GAAA;EAAA;EACZ,IAAA;IAAS,IAAA;EAAA;EACT,KAAA,EAAO,MAAA,SAAe,MAAA,SAAe,gBAAA;EACrC,UAAA,GAAa,iBAAA;AAAA;;;;;KAOH,+BAAA;EACV,MAAA;EACA,QAAA;EACA,UAAA;EACA,MAAA;EAEA,IAAA;AAAA;;;;;KAOU,cAAA;EACV,IAAA;IAAQ,KAAA;IAAe,OAAA;IAAiB,WAAA;EAAA,GAhCf;EAkCzB,OAAA,aAjCiC;EAmCjC,YAAA;EAnCwB;;;;;EAyCxB,mBAAA,IAAuB,QAAA,kCAzCL;EA2ClB,kBAAA,GAAqB,+BAA+B;AAAA;AAAA,KAG1C,kBAAA;EACV,QAAA,EAAU,eAAe;EACzB,QAAA;AAAA;;KAIU,iBAAA,GAAoB,IAAA,CAAK,KAAA,mCACnC,OAAA,CACE,IAAA,CACE,KAAA;;;;;KASM,cAAA;EACV,OAAA;IAAuB,MAAA;EAAA;EACvB,SAAA;AAAA;AAAA,KAGU,WAAA,IAAe,OAAe"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/openapi/types.ts"],"mappings":";;;;;YAKY,gBAAgB;YAEhB;EACV;EACA;EACA;EACA;EACA;EACA;EACA,QAAQ;;YAGE;EACV;EACA,SAAS;IAAiB,QAAQ;;;YAGxB;EACV;EACA,UAAU;IAAiB,QAAQ;;;YAGzB,6BAA6B;YAE7B;EACV;EACA;EACA;EACA;EACA,aAAa;EACb,cAAc;EACd,WAAW,eAAe;EAC1B,WAAW;;YAGD;EACN;EAAc;EAAkB;;EAChC;EAAgB;EAAc;;YAExB;EACV,UAAU,eAAe;EACzB,kBAAkB,eAAe;;YAGvB;EACV;EACA;EACA;IAAQ;IAAe;IAAiB;;EACxC;IAAY;;EACZ;IAAS;;EACT,OAAO,eAAe,eAAe;EACrC,aAAa;;;;;;YAOH;EACV;EACA;EACA;EACA;;EAEA;;;;;;YAOU;EACV;IAAQ;IAAe;IAAiB;;;EAExC;;EAEA;;;;;;EAMA,uBAAuB;;EAEvB,qBAAqB;;YAGX;EACV,UAAU;EACV;;;YAIU,oBAAoB,KAAK,wCACnC,QACE,KACE;;;;;YASM;EACV;IAAuB;;EACvB;;YAGU,eAAe"}

package/esm/production/assert-generated-imports.mjs

@@ -92,5 +92,5 @@ function assertGeneratedImportsAreDeclared(files, declaredDependencies) {
 }
 
 //#endregion
-export { assertGeneratedImportsAreDeclared };
+export { UndeclaredGeneratedImportError, assertGeneratedImportsAreDeclared, extractSpecifiers, findUndeclaredImports, resolvePackageName };
 //# sourceMappingURL=assert-generated-imports.mjs.map

package/esm/production/build-contributions.mjs

@@ -130,5 +130,5 @@ async function runHook(connector, hook, run) {
 }
 
 //#endregion
-export { dedupe, runEmitContributions, runGenerateContributions, runTypingsContributions };
+export { assertClosedContribution, dedupe, mergeEsbuildPatches, runEmitContributions, runGenerateContributions, runTypingsContributions };
 //# sourceMappingURL=build-contributions.mjs.map

package/esm/production/bundle-framework-dependencies.mjs

@@ -148,5 +148,5 @@ function bundleFrameworkDependencies(options) {
 }
 
 //#endregion
-export { bundleFrameworkDependencies };
+export { bundleFrameworkDependencies, isBareSpecifier, packageNameOfSpecifier };
 //# sourceMappingURL=bundle-framework-dependencies.mjs.map

package/esm/production/dist-build-manifest.mjs

@@ -43,5 +43,5 @@ async function readDistBuildManifestAsync(directory) {
 }
 
 //#endregion
-export { readDistBuildManifestAsync, writeDistBuildManifestAsync };
+export { DIST_BUILD_MANIFEST_FILE_NAME, readDistBuildManifestAsync, writeDistBuildManifestAsync };
 //# sourceMappingURL=dist-build-manifest.mjs.map

package/esm/production/esbuild-plugins.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"esbuild-plugins.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/esbuild-plugins.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport type { OnLoadArgs, OnResolveArgs, PluginBuild } from \"esbuild\";\n\nconst esmRequire = createRequire(import.meta.url);\n\nexport const nativeNodeModulesPlugin = {\n  name: \"native-node-modules\",\n  setup(build: PluginBuild) {\n    build.onResolve({ filter: /\\.node$/, namespace: \"file\" }, (args: OnResolveArgs) => ({\n      path: esmRequire.resolve(args.path, { paths: [args.resolveDir] }),\n      namespace: \"node-file\",\n    }));\n\n    build.onLoad({ filter: /.*/, namespace: \"node-file\" }, (args: OnLoadArgs) => ({\n      contents: `\n          import path from ${JSON.stringify(args.path)}\n          try { module.exports = require(path) }\n          catch {}\n        `,\n    }));\n\n    build.onResolve({ filter: /\\.node$/, namespace: \"node-file\" }, (args: OnResolveArgs) => ({\n      path: args.path,\n      namespace: \"file\",\n    }));\n\n    const opts = build.initialOptions;\n    opts.loader = opts.loader || {};\n    opts.loader[\".node\"] = \"file\";\n  },\n};\n"],"mappings":";;;AAGA,MAAM,aAAa,cAAc,OAAO,KAAK,GAAG;AAEhD,MAAa,0BAA0B;CACrC,MAAM;CACN,MAAM,OAAoB;EACxB,MAAM,UAAU;GAAE,QAAQ;GAAW,WAAW;EAAO,IAAI,UAAyB;GAClF,MAAM,WAAW,QAAQ,KAAK,MAAM,EAAE,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;GAChE,WAAW;EACb,EAAE;EAEF,MAAM,OAAO;GAAE,QAAQ;GAAM,WAAW;EAAY,IAAI,UAAsB,EAC5E,UAAU;6BACa,KAAK,UAAU,KAAK,IAAI,EAAE;;;UAInD,EAAE;EAEF,MAAM,UAAU;GAAE,QAAQ;GAAW,WAAW;EAAY,IAAI,UAAyB;GACvF,MAAM,KAAK;GACX,WAAW;EACb,EAAE;EAEF,MAAM,OAAO,MAAM;EACnB,KAAK,SAAS,KAAK,UAAU,CAAC;EAC9B,KAAK,OAAO,WAAW;CACzB;AACF"}
+{"version":3,"file":"esbuild-plugins.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/esbuild-plugins.ts"],"sourcesContent":["import { createRequire } from \"node:module\";\nimport type { OnLoadArgs, OnResolveArgs, PluginBuild } from \"esbuild\";\n\nconst esmRequire = createRequire(import.meta.url);\n\nexport const nativeNodeModulesPlugin = {\n  name: \"native-node-modules\",\n  setup(build: PluginBuild) {\n    build.onResolve({ filter: /\\.node$/, namespace: \"file\" }, (args: OnResolveArgs) => ({\n      path: esmRequire.resolve(args.path, { paths: [args.resolveDir] }),\n      namespace: \"node-file\",\n    }));\n\n    build.onLoad({ filter: /.*/, namespace: \"node-file\" }, (args: OnLoadArgs) => ({\n      contents: `\n          import path from ${JSON.stringify(args.path)}\n          try { module.exports = require(path) }\n          catch {}\n        `,\n    }));\n\n    build.onResolve({ filter: /\\.node$/, namespace: \"node-file\" }, (args: OnResolveArgs) => ({\n      path: args.path,\n      namespace: \"file\",\n    }));\n\n    const opts = build.initialOptions;\n    opts.loader = opts.loader || {};\n    opts.loader[\".node\"] = \"file\";\n  },\n};\n"],"mappings":";;;AAGA,MAAM,aAAa,cAAc,YAAY,GAAG;AAEhD,MAAa,0BAA0B;CACrC,MAAM;CACN,MAAM,OAAoB;EACxB,MAAM,UAAU;GAAE,QAAQ;GAAW,WAAW;EAAO,IAAI,UAAyB;GAClF,MAAM,WAAW,QAAQ,KAAK,MAAM,EAAE,OAAO,CAAC,KAAK,UAAU,EAAE,CAAC;GAChE,WAAW;EACb,EAAE;EAEF,MAAM,OAAO;GAAE,QAAQ;GAAM,WAAW;EAAY,IAAI,UAAsB,EAC5E,UAAU;6BACa,KAAK,UAAU,KAAK,IAAI,EAAE;;;UAInD,EAAE;EAEF,MAAM,UAAU;GAAE,QAAQ;GAAW,WAAW;EAAY,IAAI,UAAyB;GACvF,MAAM,KAAK;GACX,WAAW;EACb,EAAE;EAEF,MAAM,OAAO,MAAM;EACnB,KAAK,SAAS,KAAK,UAAU,CAAC;EAC9B,KAAK,OAAO,WAAW;CACzB;AACF"}

package/esm/production/esbuild-preflight.mjs

@@ -53,5 +53,5 @@ function isUnlinkedBinaryError(error) {
 }
 
 //#endregion
-export { assertEsbuildBinaryIsLinked };
+export { EsbuildBinaryMissingError, assertEsbuildBinaryIsLinked };
 //# sourceMappingURL=esbuild-preflight.mjs.map

package/esm/production/production-builder.mjs

@@ -287,8 +287,9 @@ bootstrap();
 	* Generate config-loader.ts
 	*/
 	async generateConfigLoader() {
+		const configDirectory = path.join(process.cwd(), "src/config");
 		const configNames = (await glob("**/*.{ts,tsx}", {
-			cwd: path.join(process.cwd(), "src/config"),
+			cwd: configDirectory,
 			absolute: false
 		})).filter((f) => isConfigFile("src/config/" + f)).map((f) => ({
 			path: f.replace(/\.(ts|tsx)$/, ""),

package/esm/production/production-builder.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"production-builder.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/production-builder.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport {\n  ensureDirectoryAsync,\n  fileExistsAsync,\n  getFileAsync,\n  getJsonFileAsync,\n  putFileAsync,\n  removeDirectoryAsync,\n} from \"@warlock.js/fs\";\nimport esbuild from \"esbuild\";\nimport glob from \"fast-glob\";\nimport path from \"path\";\nimport { assertNoReservedConnectorNames } from \"../connectors/assert-no-reserved-connector-names\";\nimport { assertUniqueConnectorNames } from \"../connectors/assert-unique-connector-names\";\nimport type { Connector, ConnectorBuildContext, ConnectorEsbuildPatch } from \"../connectors/types\";\nimport { configKeyFromPath } from \"../config/config-key-from-path\";\nimport {\n  isConfigFile,\n  isEventFile,\n  isLocaleFile,\n  isMainFile,\n  isRouteFile,\n  isWorkerFile,\n} from \"../dev-server/special-file-patterns\";\nimport { tsconfigManager } from \"../dev-server/tsconfig-manager\";\nimport { appPath, rootPath, warlockPath } from \"../utils\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\nimport { assertGeneratedImportsAreDeclared } from \"./assert-generated-imports\";\nimport { bundleFrameworkDependencies } from \"./bundle-framework-dependencies\";\nimport { dedupe, runEmitContributions, runGenerateContributions } from \"./build-contributions\";\nimport { writeDistBuildManifestAsync } from \"./dist-build-manifest\";\nimport { nativeNodeModulesPlugin } from \"./esbuild-plugins\";\nimport { assertEsbuildBinaryIsLinked } from \"./esbuild-preflight\";\nimport { collectRouteRegistrationSnapshot } from \"./route-registration-snapshot\";\nimport { clearOwnedRouteTypes } from \"../dev-server/route-types-publisher\";\nimport {\n  commitDistAsync,\n  createTempOutputDir,\n  rollbackDistAsync,\n  stageDistAsync,\n  type StagedDist,\n} from \"./promote-dist\";\nimport { resolveBuildConfig, type ResolvedBuildConfig } from \"./resolve-build-config\";\nimport { tsconfigPathAliases } from \"./tsconfig-path-aliases\";\n\n/**\n * Recreates `require`, `__filename` and `__dirname` at the top of an ESM bundle.\n *\n * Bundled CommonJS dependencies call `require(\"node:assert\")` and read\n * `__dirname` to locate their own assets. Neither exists in an ES module, so\n * esbuild substitutes a stub that throws — **after the build has reported\n * success**. `Dynamic require of \"node:assert\" is not supported` is that stub\n * firing, and it is the defect this shim removes.\n *\n * `__dirname` matters as much as `require`: without it a dependency resolving\n * an asset path silently gets `undefined` and fails later, further from the\n * cause.\n *\n * Written as one line because esbuild inserts a banner verbatim above the\n * bundle and a multi-line string here would shift every mapped line.\n */\nconst ESM_INTEROP_SHIM =\n  \"import{createRequire as __wlCreateRequire}from'node:module';\" +\n  \"import{fileURLToPath as __wlFileURLToPath}from'node:url';\" +\n  \"import{dirname as __wlDirname}from'node:path';\" +\n  \"const require=__wlCreateRequire(import.meta.url);\" +\n  \"const __filename=__wlFileURLToPath(import.meta.url);\" +\n  \"const __dirname=__wlDirname(__filename);\";\n\n/**\n * Combine the framework's banner with the user's, keeping both.\n *\n * esbuild's `banner` is an object keyed by output type, and every merge in the\n * path to it — the config merge and the options spread — REPLACES that object\n * rather than merging it. So whichever is applied second silently deletes the\n * other. This is the only place the two can coexist.\n *\n * The shim goes first: it defines `require`, which a user banner may use.\n *\n * @param userBanner banner from `warlock.config.ts`, if any\n * @param shim the interop shim, or undefined when it does not apply\n */\nfunction mergeBanner(\n  userBanner: Record<string, string> | undefined,\n  shim: string | undefined,\n): Record<string, string> | undefined {\n  if (!shim) return userBanner;\n\n  const userJs = userBanner?.js;\n\n  return {\n    ...userBanner,\n    js: userJs ? `${shim}${userJs}` : shim,\n  };\n}\n\n/**\n * Prefix every generated file uses to reach the app root.\n *\n * Generated sources are written into `.warlock/production/`, two levels below\n * the app root, so `../../` lands back on it — the same hop already spelled\n * out in the `../../src/app/…` and `../../src/config/…` imports the module and\n * config-loader generators emit. Named once so a generator that needs a new\n * app-root file (`warlock.config`) cannot pick a different depth.\n */\nconst APP_ROOT_FROM_PRODUCTION_DIR = \"../../\";\n\n/**\n * Production Builder\n * Generates production-ready files and bundles them for deployment\n * Build options are loaded from warlock.config.ts\n */\nexport class ProductionBuilder {\n  private options!: ResolvedBuildConfig;\n  private readonly productionDir = warlockPath(\"production\");\n\n  /**\n   * Connectors declared in `warlock.config.ts`. Read statically — `build`\n   * never calls `boot()`/`start()` on them; it only\n   * drains their `build` contributions.\n   */\n  private connectors: readonly Connector[] = [];\n\n  /**\n   * The contributors' merged esbuild patch, produced by the `generate` pass\n   * and consumed by {@link bundle}.\n   */\n  private contributedEsbuild: ConnectorEsbuildPatch = {};\n\n  /** Browser-safe API metadata captured in a fresh registration-only child. */\n  private namedApiRoutes?: readonly import(\"../router/types\").NamedApiRoute[];\n\n  /**\n   * Main build entry point\n   *\n   * The esbuild bundle is written into a TEMP directory next to the real\n   * output directory, never into it, and that directory is renamed over\n   * `outdir` as one filesystem operation — so `outdir` is never observed as\n   * a mix of the old build and the new one, and a build that fails before\n   * that rename never touches `outdir` at all.\n   *\n   * `this.options.outdir` is NOT repointed at the temp directory while that\n   * happens, and must never be. It is not merely a write target: consumers\n   * BAKE it into runtime output — `web`'s build contribution derives the\n   * `clientDir` recorded in its pages manifest from it\n   * (`web/src/build/contribution.ts`) — so a temp path reaching them\n   * produces an artifact whose browser paths point at a directory promotion\n   * has since renamed away. The temp path is passed explicitly, as a\n   * parameter, to the one operation that writes into it ({@link bundle});\n   * everything else, `buildContext()` included, keeps reading the final\n   * destination.\n   *\n   * That is also why promotion is STAGED rather than done at the very end.\n   * Connector `emit` hooks write real artifacts (the web client bundle) and\n   * see the final `outdir`, so they must run when `outdir` genuinely holds\n   * this build — after the rename, not before it, or promotion would replace\n   * the directory they just wrote into. The previous build is kept parked\n   * aside until they finish: `emit` throwing rolls the whole promotion back,\n   * and the build-success marker `warlock start` checks is written last of\n   * all, so a failure at any point leaves no `dist` that start will boot.\n   */\n  public async build(): Promise<void> {\n    console.log(colors.cyan(\"Building for production...\\n\"));\n\n    // Step 0: Fail fast when esbuild's native binary never got linked (the\n    // state pnpm leaves a project in when its build-script approval gate\n    // blocked esbuild's postinstall) rather than let bundling die on esbuild's\n    // own cryptic \"package could not be found\" error several steps from now.\n    assertEsbuildBinaryIsLinked();\n\n    // Step 1: Initialize options from config\n    await this.initializeOptions();\n\n    const finalOutDir = this.options.outdir!;\n    const tempOutDir = createTempOutputDir(finalOutDir);\n\n    // Set once the temp directory has been renamed onto `finalOutDir`. Its\n    // presence is what tells the catch below whether a failure has a\n    // promotion to undo or only a temp directory to discard.\n    let staged: StagedDist | undefined;\n\n    try {\n      // Step 2: Generate combined files\n      await this.generateCombinedFiles();\n\n      // Step 3: Generate entry point\n      await this.generateEntryPoint();\n\n      // Step 4: Refuse to bundle code the app could not resolve at runtime\n      await this.assertGeneratedImports();\n\n      // Step 4.5: Drain the connectors' `generate` contributions\n      await this.captureNamedApiRoutesForWeb();\n      const contributed = await this.runGenerateContributions();\n\n      // Step 4.6: Re-assert over what the contributors just wrote.\n      //\n      // Step 4 only saw core's own generated files; a contributor writes its\n      // code (a pages barrel, say) AFTER that assertion, so an undeclared bare\n      // specifier in it reaches the bundle unchecked. Under\n      // `packages: \"external\"` that specifier survives verbatim into the\n      // artifact and dies as ERR_MODULE_NOT_FOUND at runtime — the same failure\n      // step 4 exists to prevent. Skipped when nothing contributed: re-globbing\n      // and re-reading the production dir is pure cost in the common case.\n      if (contributed) {\n        await this.assertGeneratedImports();\n      }\n\n      // Step 5: Bundle with esbuild into the temp directory. The ONLY\n      // operation handed that path — it is a write target, not config.\n      await this.bundle(tempOutDir);\n\n      // Step 5.5: Promote the bundle into `outdir`, keeping the previous\n      // build parked aside. `outdir` now holds exactly this build, so the\n      // steps below write into — and record — the real destination.\n      staged = await stageDistAsync(tempOutDir, finalOutDir);\n\n      // Step 5.6: Drain the connectors' `emit` contributions — after the\n      // bundle is in place (so what they write survives promotion and the\n      // paths they bake in resolve), and BEFORE step 6 deletes the\n      // production directory they may still read.\n      await runEmitContributions(this.connectors, this.buildContext());\n\n      // Step 5.7: Mark `dist` as a genuine, complete build — the one thing\n      // `warlock start` trusts. Written LAST on purpose: every earlier step\n      // can still fail, and until this file exists nothing will boot what\n      // they left behind.\n      await writeDistBuildManifestAsync(finalOutDir);\n\n      // Step 5.8: Commit — drop the parked previous build. Cannot throw.\n      await commitDistAsync(staged);\n    } catch (error) {\n      if (staged) {\n        // The promotion already happened; put the previous build back and\n        // take this half-finished one out of `outdir`.\n        await rollbackDistAsync(staged);\n      } else {\n        // Nothing this build produced ever reached `outdir` — discard the\n        // temp directory and leave `outdir` exactly as it was.\n        await removeDirectoryAsync(tempOutDir).catch(() => undefined);\n      }\n\n      throw error;\n    }\n\n    // Step 6: Remove production folder\n    await removeDirectoryAsync(this.productionDir);\n\n    console.log(colors.green(\"Build complete!\"));\n    console.log(`Start production server by running ${colors.cyan(\"warlock start\")}`);\n  }\n\n  /**\n   * Initialize options from warlock.config.ts\n   */\n  private async initializeOptions(): Promise<void> {\n    this.options = resolveBuildConfig();\n    // Same config object `resolveBuildConfig` just read — `warlock build`\n    // preloads warlock.config.ts, so no additional load happens here.\n    const connectors = warlockConfigManager.get(\"connectors\") ?? [];\n\n    // Checked here, where the array is first read, so nothing downstream has\n    // drained anything yet: the `generate` and `emit` passes run per ENTRY, so\n    // a name listed twice would write its files and merge its esbuild options\n    // twice into an artifact the runtime then boots that name only once from.\n    // A build that half-applied a connector and reported success is worse than\n    // one that never started.\n    assertUniqueConnectorNames([...connectors]);\n\n    // And here rather than only at boot, for the same reason: a name a built-in\n    // already owns is skipped by the runtime, so an artifact built from it\n    // carries the custom connector's generated files and esbuild patches while\n    // the server boots the built-in instead. Refusing it at boot alone would\n    // mean the build had already emitted that artifact — the failure has to\n    // land on the developer running `warlock build`, not on whoever starts the\n    // server. Same assertion the registration half calls, over the same names.\n    assertNoReservedConnectorNames([...connectors]);\n\n    this.connectors = connectors;\n\n    // Ensure production directory exists\n    await ensureDirectoryAsync(this.productionDir);\n  }\n\n  /**\n   * The context handed to every build contribution.\n   */\n  private buildContext(): ConnectorBuildContext {\n    return {\n      productionDir: this.productionDir,\n      appRoot: rootPath(),\n      options: this.options,\n      namedApiRoutes: this.namedApiRoutes,\n    };\n  }\n\n  /**\n   * Web route declarations need application API registration, which cannot be\n   * inferred from generated files. Capture it once in a disposable child before\n   * contributors write build artifacts; no connector lifecycle runs there.\n   */\n  private async captureNamedApiRoutesForWeb(): Promise<void> {\n    if (!this.connectors.some((connector) => connector.name === \"web\")) {\n      await clearOwnedRouteTypes(rootPath());\n      return;\n    }\n\n    this.namedApiRoutes = (\n      await collectRouteRegistrationSnapshot({\n        cwd: rootPath(),\n        timeoutMs: this.options.routeRegistrationTimeoutMs,\n      })\n    ).routes;\n  }\n\n  /**\n   * Drain the `generate` hooks and fold what they returned back into the\n   * build.\n   *\n   * The entry point is REGENERATED here rather than generated later. The\n   * contribution slot is fixed — after `assertGeneratedImports` (so nothing\n   * bundles that the app could not resolve) and before `bundle` — while\n   * `generateEntryPoint` must stay at step 3, because `app.ts` is itself\n   * generated code the assertion has to see; moving it past the assertion\n   * would silently drop the entry from that check. Rewriting one small file\n   * is cheaper than losing either guarantee, and the write is pure\n   * (`generatedFiles` + these imports), so doing it twice is not a\n   * correctness risk.\n   *\n   * @returns whether any connector ran a `generate` hook — the caller uses it\n   * to decide if the import assertion is worth a second pass. Keyed on the\n   * hook EXISTING, not on what it returned: a hook that returns nothing may\n   * still have written files into `productionDir`, and those are exactly the\n   * files the second pass is there to read.\n   */\n  private async runGenerateContributions(): Promise<boolean> {\n    const contributed = this.connectors.some((connector) => Boolean(connector.build?.generate));\n\n    const { entryImports, esbuild } = await runGenerateContributions(\n      this.connectors,\n      this.buildContext(),\n    );\n\n    this.contributedEsbuild = esbuild;\n\n    if (entryImports.length > 0) {\n      await this.generateEntryPoint(entryImports);\n    }\n\n    return contributed;\n  }\n\n  /**\n   * Track which special files were generated\n   */\n  private generatedFiles = {\n    locales: false,\n    events: false,\n    main: false,\n    routes: false,\n    workers: false,\n  };\n\n  /**\n   * Generate all combined files\n   */\n  private async generateCombinedFiles(): Promise<void> {\n    console.log(colors.yellow(\"   Generating production files...\"));\n\n    // Generate bootstrap.ts file\n    await this.generateBootstrap();\n\n    // Generate config loader\n    await this.generateConfigLoader();\n\n    // Generate special files and track which ones have content\n    const [locales, events, main, routes, workers] = await Promise.all([\n      this.generateLocales(),\n      this.generateEvents(),\n      this.generateMain(),\n      this.generateRoutes(),\n      this.generateWorkers(),\n    ]);\n\n    this.generatedFiles = { locales, events, main, routes, workers };\n  }\n\n  /**\n   * Generate bootstrap.ts - ensures bootstrap() runs first and sets production environment\n   */\n  private async generateBootstrap(): Promise<void> {\n    // ESM hoists imports, so the app bootstrap must be the first import to run first\n    const appBootstrapImport = (await fileExistsAsync(appPath(\"bootstrap.ts\")))\n      ? \"import './../../src/app/bootstrap';\\n\"\n      : \"\";\n\n    const content = `${appBootstrapImport}import { bootstrap, Application } from \"@warlock.js/core\";\n\n// Production runtime; NODE_ENV is only defaulted so an explicit value (e.g. staging) wins\nApplication.setRuntimeStrategy(\"production\");\nif (!process.env.NODE_ENV) {\n  Application.setEnvironment(\"production\");\n}\n\n// Bootstrap the application\nbootstrap();\n`;\n\n    await putFileAsync(path.join(this.productionDir, \"bootstrap.ts\"), content);\n  }\n\n  /**\n   * Fail the build when generated code imports a package the app does not\n   * declare.\n   *\n   * The bundler is configured `packages: \"external\"`, so every bare specifier\n   * written above survives verbatim into an artifact that resolves against the\n   * **consuming app's** node_modules. A framework-internal dependency imported\n   * there resolves by accident under npm/yarn hoisting and dies under pnpm —\n   * which is how a production app shipped that could not boot. Rewriting the\n   * offending import fixes today's bundle; this check is what stops the next\n   * change to the generator from quietly reintroducing it.\n   */\n  private async assertGeneratedImports(): Promise<void> {\n    const generatedPaths = await glob(\"**/*.{ts,tsx,js,mjs}\", {\n      cwd: this.productionDir,\n      absolute: false,\n    });\n\n    const [files, appPackage] = await Promise.all([\n      Promise.all(\n        generatedPaths.map(async (file) => ({\n          file,\n          content: await getFileAsync(path.join(this.productionDir, file)),\n        })),\n      ),\n      getJsonFileAsync<{ dependencies?: Record<string, string> }>(rootPath(\"package.json\")),\n    ]);\n\n    assertGeneratedImportsAreDeclared(files, Object.keys(appPackage.dependencies ?? {}));\n  }\n\n  /**\n   * Glob `src/app` and keep the files the shared dev-server predicate accepts,\n   * so production discovers exactly what the dev collector does.\n   * Returns relative paths from .warlock/production/ to src/app/\n   */\n  private async globModule(matches: (relativePath: string) => boolean): Promise<string[]> {\n    const files = await glob(\"**/*.{ts,tsx,json}\", {\n      cwd: appPath(),\n      absolute: false,\n    });\n\n    // e.g., \"users/main.ts\" -> \"../../src/app/users/main\"\n    return files\n      .filter((file) => matches(\"src/app/\" + file))\n      .sort()\n      .map((file) => \"../../src/app/\" + file.replace(/\\.(ts|tsx)$/, \"\"));\n  }\n\n  /**\n   * Generate config-loader.ts\n   */\n  private async generateConfigLoader(): Promise<void> {\n    const configDirectory = path.join(process.cwd(), \"src/config\");\n\n    const files = await glob(\"**/*.{ts,tsx}\", {\n      cwd: configDirectory,\n      absolute: false,\n    });\n\n    // Same key rule as the dev config loader: the raw path, never camel-cased\n    const configNames = files\n      .filter((f) => isConfigFile(\"src/config/\" + f))\n      .map((f) => ({\n        path: f.replace(/\\.(ts|tsx)$/, \"\"),\n        key: configKeyFromPath(\"src/config/\" + f),\n      }))\n      .filter((entry): entry is { path: string; key: string } => entry.key !== undefined)\n      .sort((a, b) => a.path.localeCompare(b.path));\n\n    // Only `@warlock.js/core` — the one package the app itself declares. See\n    // `assertGeneratedImportsAreDeclared`: `@mongez/config` is core's own\n    // dependency, so a bare import of it resolved by luck under npm/yarn\n    // hoisting and died under pnpm's strict layout.\n    const imports: string[] = [\n      'import { assertValidConfigModules, configSpecialHandlers, setConfig } from \"@warlock.js/core\";',\n    ];\n    const configImports: string[] = [];\n    const configSetCalls: string[] = [];\n    const validations: string[] = [];\n    const executors: string[] = [];\n\n    configNames.forEach(({ path: configPath, key }, index) => {\n      // Index-based identifier: keys like \"rate-limit\" or \"mail/smtp\" are not valid names.\n      // A namespace import, so a file's optional `configSchema` export travels with it.\n      const varName = `config${index}`;\n      const name = JSON.stringify(key);\n      configImports.push(`import * as ${varName} from \"../../src/config/${configPath}\";`);\n      configSetCalls.push(`setConfig(${name}, ${varName}.default);`);\n      validations.push(`  { name: ${name}, module: ${varName} },`);\n      executors.push(`await configSpecialHandlers.execute(${name}, ${varName}.default);`);\n    });\n\n    // ESM hoists imports, so prestart must be the first import to run first\n    const prestartImports = (await fileExistsAsync(appPath(\"prestart.ts\")))\n      ? [\"import './../../src/app/prestart';\"]\n      : [];\n\n    const content = [\n      ...prestartImports,\n      ...imports,\n      \"\",\n      \"// Config imports\",\n      ...configImports,\n      \"\",\n      \"// Register configs\",\n      ...configSetCalls,\n      \"\",\n      \"// Refuse to start when a config file's `configSchema` is not satisfied\",\n      \"await assertValidConfigModules([\",\n      ...validations,\n      \"]);\",\n      \"\",\n      \"// Special handlers\",\n      ...executors,\n      \"\",\n    ].join(\"\\n\");\n\n    await putFileAsync(path.join(this.productionDir, \"config-loader.ts\"), content);\n  }\n\n  /**\n   * Generate locales.ts (only if there are locale files)\n   * @returns true if file was generated with content\n   */\n  private async generateLocales(): Promise<boolean> {\n    const files = await this.globModule(isLocaleFile);\n    if (files.length === 0) return false;\n    const content = files\n      .map((file, index) => {\n        if (!file.endsWith(\".json\")) return `import \"${file}\";`;\n        const moduleFolder = file.split(\"/\").at(-3)!;\n        return [\n          `import dictionary${index} from \"${file}\";`,\n          'import { registerLocaleDictionary } from \"@warlock.js/core\";',\n          `registerLocaleDictionary({ sourceFile: ${JSON.stringify(file)}, source: JSON.stringify(dictionary${index}), defaultNamespace: ${JSON.stringify(moduleFolder)} });`,\n        ].join(\"\\n\");\n      })\n      .join(\"\\n\");\n    await putFileAsync(path.join(this.productionDir, \"locales.ts\"), content + \"\\n\");\n    return true;\n  }\n\n  /**\n   * Generate events.ts (only if there are event files)\n   * @returns true if file was generated with content\n   */\n  private async generateEvents(): Promise<boolean> {\n    const files = await this.globModule(isEventFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"events.ts\");\n    return true;\n  }\n\n  /**\n   * Generate main.ts (only if there are main files)\n   * @returns true if file was generated with content\n   */\n  private async generateMain(): Promise<boolean> {\n    const files = await this.globModule(isMainFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"main.ts\");\n    return true;\n  }\n\n  /**\n   * Generate routes.ts (only if there are route files)\n   * @returns true if file was generated with content\n   */\n  private async generateRoutes(): Promise<boolean> {\n    const files = await this.globModule(isRouteFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"routes.ts\");\n    return true;\n  }\n\n  /**\n   * Generate workers.ts (only if there are worker files)\n   * @returns true if file was generated with content\n   */\n  private async generateWorkers(): Promise<boolean> {\n    const files = await this.globModule(isWorkerFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"workers.ts\");\n    return true;\n  }\n\n  /**\n   * Generate a file with imports from all given files\n   */\n  private async generateImportsFile(importPaths: string[], outputFile: string): Promise<void> {\n    const imports = importPaths.map((importPath) => `import \"${importPath}\";`);\n    const content = imports.join(\"\\n\") + \"\\n\";\n    await putFileAsync(path.join(this.productionDir, outputFile), content);\n  }\n\n  /**\n   * Generate the main entry point (app.ts)\n   *\n   * @param contributedImports lines from connector `generate` hooks, appended\n   * to section 4 after `./routes`\n   */\n  private async generateEntryPoint(contributedImports: string[] = []): Promise<void> {\n    console.log(colors.yellow(\"   Generating entry point...\"));\n\n    // The names this build resolved, baked in as a literal. The entry imports\n    // the config source, and that source is re-evaluated at startup — an\n    // env-conditional `connectors` array can hand the boot a different list\n    // than the one drained here. A literal is the only part of the array that\n    // survives into the artifact unchanged, so it is what the boot compares\n    // against.\n    const expectedNames = this.connectors\n      .map((connector) => JSON.stringify(connector.name))\n      .join(\", \");\n\n    // Build imports based on which files were generated\n    const imports: string[] = [\n      \"// 1. Bootstrap (loads .env, initializes framework)\",\n      'import \"./bootstrap\";',\n      \"\",\n      \"// 2. Load configs\",\n      'import \"./config-loader\";',\n      \"\",\n      // Registration has to sit between the config being available and the\n      // first phase starting: the connectors listed in `connectors` are the\n      // same ones this build drained contributions from, so the bundle boots\n      // exactly what it was built for. Register any later and an early-phase\n      // connector would miss its own start.\n      \"// 2.5 Register connectors declared in warlock.config (the same array this\",\n      \"//     build read its contributions from, so built-for and boots-with match).\",\n      \"//     The config is imported STATICALLY so esbuild bakes it into the bundle\",\n      \"//     and the array is handed over explicitly — an artifact has no\",\n      \"//     warlock.config.ts beside it to read at runtime, and a registration\",\n      \"//     that quietly found nothing to register is the exact drift this\",\n      \"//     section exists to prevent.\",\n      \"//     `expectedNames` is the list this build resolved, in order — boot\",\n      \"//     refuses to start when the config hands over a different set or order.\",\n      'import { registerConfiguredConnectors } from \"@warlock.js/core\";',\n      `import warlockConfig from \"${APP_ROOT_FROM_PRODUCTION_DIR}warlock.config\";`,\n      `registerConfiguredConnectors(warlockConfig.connectors ?? [], { expectedNames: [${expectedNames}] });`,\n      \"\",\n      \"// 2.6 Fail fast on a busy port. `http` is a LATE-phase connector, so its\",\n      \"//     own preflight is not reached until the database and cache have\",\n      \"//     connected and every app module has been imported — seconds of work\",\n      \"//     thrown away before anyone learns the port was taken. This probe is\",\n      \"//     a bind-and-release on a socket that is never served, and it reports\",\n      \"//     on stderr because no log channel is configured this early.\",\n      'import { Application, connectorsManager, ConnectorLifecyclePhase, preflightConfiguredHttpPort } from \"@warlock.js/core\";',\n      'if (Application.hasRole(\"api\") || Application.hasRole(\"web\")) {',\n      \"  await preflightConfiguredHttpPort();\",\n      \"}\",\n      \"\",\n      \"// 3. Start early-phase connectors (database, cache, logger, ...)\",\n      \"//    so data sources, cache, etc. are ready before app code runs\",\n      \"await connectorsManager.startPhase(ConnectorLifecyclePhase.Early);\",\n    ];\n\n    // App code uses dynamic `await import(...)` so each module's side\n    // effects fire at THIS point in execution. Static imports would be\n    // hoisted to module-instantiation time (before the early-phase await\n    // resolves), which is exactly the bug this split is meant to fix.\n    //\n    // The guarantee comes from the imports being DYNAMIC — esbuild wraps a\n    // dynamically-imported module in its `__esm(() => {…})` helper and runs\n    // it at the await, not at instantiation. It does NOT come from\n    // `splitting: true`, which only decides one-file-vs-chunks. This\n    // previously said splitting was required; it is not, and `singleBundle`\n    // (splitting: false) preserves the ordering.\n    imports.push(\"\", \"// 4. Load app code (events, locales, main, routes)\");\n\n    if (this.generatedFiles.events) {\n      imports.push('await import(\"./events\");');\n    }\n    if (this.generatedFiles.locales) {\n      imports.push('await import(\"./locales\");');\n    }\n    if (this.generatedFiles.main) {\n      imports.push('await import(\"./main\");');\n    }\n    if (this.generatedFiles.routes) {\n      imports.push('if (Application.hasRole(\"api\")) {', '  await import(\"./routes\");', \"}\");\n    }\n    if (this.generatedFiles.workers) {\n      imports.push('if (Application.hasRole(\"worker\")) {', '  await import(\"./workers\");', \"}\");\n    }\n\n    // Contributor imports come AFTER `./routes`, never before: a connector\n    // that registers pages needs the routes app code already collected —\n    // the same ordering dev uses (routes first, then the connector installs\n    // on top of them). Emitted verbatim; the contributor writes the whole\n    // statement (e.g. `await import(\"./pages\");`).\n    imports.push(...contributedImports);\n\n    // A rejecting validator (Application.onValidateBoot) must abort boot\n    // before late-phase connectors bind a port.\n    imports.push(\n      \"\",\n      \"// 5. Run startup validators registered via Application.onValidateBoot(...)\",\n      \"await Application.runStartupValidators();\",\n    );\n\n    // Start late-phase connectors after app code registers routes/listeners\n    imports.push(\n      \"\",\n      \"// 6. Start late-phase connectors (http, socket) — routes and\",\n      \"//    listeners registered by app code are now ready to bind\",\n      \"await connectorsManager.startPhase(ConnectorLifecyclePhase.Late);\",\n      \"\",\n      \"// 7. Signal a complete boot so `Application.onceBooted(...)` listeners fire\",\n      \"Application.markBooted({ environment: Application.environment, runtimeStrategy: Application.runtimeStrategy });\",\n      \"connectorsManager.shutdownOnProcessKill();\",\n    );\n\n    const content = imports.join(\"\\n\") + \"\\n\";\n    await putFileAsync(path.join(this.productionDir, \"app.ts\"), content);\n  }\n\n  /**\n   * Bundle with esbuild\n   *\n   * @param writeOutDir the directory esbuild writes into — the build's\n   * private temp directory, NOT `options.outdir`. Taken as a parameter\n   * rather than read off `this.options` because the two are different paths\n   * with different meanings: `options.outdir` is the final destination every\n   * consumer bakes into the artifact, and this is only where bytes land\n   * before promotion moves them there.\n   */\n  private async bundle(writeOutDir: string): Promise<void> {\n    console.log(colors.magenta(\"   Bundling with esbuild...\"));\n\n    const entryPoint = path.join(this.productionDir, \"app.ts\");\n    const outFileName = this.options.outFile!;\n    // Strip extension so entryNames produces \"<base>.js\" via esbuild\n    const entryName = path.basename(outFileName, path.extname(outFileName));\n\n    // `singleBundle` and `esmShim` are ours, not esbuild's — it throws on\n    // unknown keys, and the user options are spread into its call verbatim.\n    const singleBundle = this.options.singleBundle === true;\n    const esmShim = this.options.esmShim !== false;\n    // Read before deleting: the merged banner is applied AFTER the user\n    // spread, so a user banner must not be lost to it or clobber the shim.\n    const userBanner = this.options.banner;\n\n    // `outFile` and `entryPath` are REQUIRED on ResolvedBuildConfig on purpose:\n    // resolve-build-config.ts documents that widening them pushed a lie downstream\n    // into start-production.command.ts, which then could not trust its own config.\n    // This is the one place they must be absent - the object is spread into esbuild's\n    // call verbatim and esbuild throws on unknown keys.\n    //\n    // Stripped off a LOCAL COPY of `this.options`, never off `this.options`\n    // itself: `buildContext()` hands `this.options` to every `generate`/`emit`\n    // contribution hook, including the `emit` pass that runs AFTER this method\n    // returns (`build()` step 5.6). Deleting these keys from the shared object\n    // used to leave those hooks reading `undefined` for `outFile`, `entryPath`,\n    // `singleBundle`, `esmShim` and `banner` even though `ConnectorBuildContext`\n    // types them as present. A shallow copy is enough — every field this method\n    // reads off it is either scalar or already re-merged below (`define`,\n    // `external`, `loader`, `banner`), so nothing here needs a deep clone.\n    const esbuildOptions: Partial<ResolvedBuildConfig> = { ...this.options };\n\n    delete esbuildOptions.outFile;\n    delete esbuildOptions.entryPath;\n    delete esbuildOptions.singleBundle;\n    delete esbuildOptions.esmShim;\n    delete esbuildOptions.banner;\n    delete esbuildOptions.routeRegistrationTimeoutMs;\n\n    await ensureDirectoryAsync(writeOutDir);\n\n    const alias = this.buildAliasMapFromTsconfig();\n\n    // Whether this build decides externality per import EDGE\n    // (`bundle-framework-dependencies.ts`, which explains the rule at\n    // length) or keeps the blunt `packages: \"external\"`.\n    //\n    // Not in `singleBundle` mode: that bundles everything by definition, and\n    // a plugin that can only ever ADD an external would silently narrow it.\n    // Not when the user set `packages` themselves: their value has always\n    // won over the default below, and it must keep winning — the plugin is\n    // the default's implementation, not a new policy layered on top.\n    const perEdgeExternals = !singleBundle && (esbuildOptions as any).packages === undefined;\n\n    // The user can override `format`, so gate the shim on the EFFECTIVE\n    // format rather than on the default below. A CJS build already has\n    // `require` and friends; injecting them there would be a redefinition.\n    const isEsm = (esbuildOptions.format ?? \"esm\") === \"esm\";\n    const banner = mergeBanner(userBanner, esmShim && isEsm ? ESM_INTEROP_SHIM : undefined);\n\n    // Contributor patch, split into the part that can ride the spread order\n    // and the three keys that cannot. `jsx` and `jsxImportSource` are placed\n    // BEFORE the user spread below, which gives the ruled precedence for\n    // free: builder defaults < contributor < user config.\n    //\n    // `define`, `external` and `loader` are pulled out because a spread\n    // REPLACES them wholesale — the same trap `banner` documents. Two\n    // contributors' env defines, a contributor's optional peers plus the\n    // user's, or a contributor's `.svg` loader alongside the user's `.png`,\n    // must both survive, so they are merged by key/by set and re-applied\n    // after the spread with the user still winning per key.\n    const {\n      define: contributedDefine,\n      external: contributedExternal,\n      loader: contributedLoader,\n      plugins: contributedPlugins,\n      ...contributedOptions\n    } = this.contributedEsbuild;\n\n    const userDefine: Record<string, string> | undefined = esbuildOptions.define;\n    const userExternal: string[] | undefined = esbuildOptions.external;\n    const userLoader: ConnectorEsbuildPatch[\"loader\"] = esbuildOptions.loader;\n\n    const define =\n      contributedDefine || userDefine ? { ...contributedDefine, ...userDefine } : undefined;\n\n    const loader =\n      contributedLoader || userLoader ? { ...contributedLoader, ...userLoader } : undefined;\n\n    const external =\n      contributedExternal || userExternal\n        ? dedupe([...(contributedExternal ?? []), ...(userExternal ?? [])])\n        : undefined;\n\n    if (singleBundle) {\n      console.log(\n        colors.magenta(\n          \"   Single-bundle mode — one JS file\" +\n            (esmShim && isEsm ? \" with the ESM interop shim\" : \"\") +\n            \". Native .node addons are still emitted alongside it.\",\n        ),\n      );\n    }\n\n    try {\n      await esbuild.build({\n        platform: \"node\",\n        entryPoints: [entryPoint],\n        bundle: true,\n        // Both are DEFAULTS the user can override — they sit before the\n        // `...esbuildOptions` spread deliberately. `singleBundle` moves them,\n        // an explicit `splitting`/`packages` in warlock.config.ts beats both.\n        //\n        // Phase ordering does not depend on `splitting`: it comes from the\n        // generated app.ts using dynamic `await import(...)` (see\n        // generateAppEntry above), which esbuild defers to the call site in\n        // either mode. Splitting only decides one file vs chunks.\n        splitting: !singleBundle,\n        // `\"bundle\"` under `perEdgeExternals` is not \"bundle everything\":\n        // the plugin below returns `external: true` for every bare specifier\n        // this build must not bundle, which is all of them bar the framework's\n        // own declared dependencies. Saying `\"external\"` here instead would\n        // externalise them before the plugin could rule.\n        packages: singleBundle || perEdgeExternals ? \"bundle\" : \"external\",\n        minify: esbuildOptions.minify,\n        sourcemap: esbuildOptions.sourcemap === true ? \"linked\" : esbuildOptions.sourcemap,\n        format: \"esm\",\n        // Targeting a concrete Node version (not \"esnext\") so esbuild\n        // transpiles TC39 stage 3 decorators into helpers — Node does not\n        // implement them natively yet.\n        target: [\"node22\"],\n        entryNames: entryName,\n        alias,\n        plugins: [\n          nativeNodeModulesPlugin,\n          // BEFORE the framework-dependency plugin, and the order is\n          // load-bearing: the first `onResolve` callback to answer wins, and\n          // `app/users/...` is a bare specifier the other one would rule\n          // external.\n          tsconfigPathAliases(this.tsconfigPathAliasConfig()),\n          ...(perEdgeExternals\n            ? [bundleFrameworkDependencies({ appRoot: rootPath(), aliasKeys: Object.keys(alias) })]\n            : []),\n          // Contributor plugins run last: they load their own file types and\n          // must not shadow the resolvers above.\n          ...(contributedPlugins ?? []),\n        ],\n        // Between the defaults and the user spread — the ruled precedence.\n        ...contributedOptions,\n        ...(esbuildOptions as any),\n        // AFTER the spread, and NOT overridable: `esbuildOptions.outdir` rides\n        // that spread carrying the FINAL destination, which is exactly where\n        // this build must not write yet. The final path is the user's setting\n        // and stays authoritative for everyone reading the config — it is only\n        // this one esbuild call that is redirected, and only until promotion\n        // moves the result onto that very path.\n        outdir: writeOutDir,\n        // AFTER the spread for the same reason `banner` is: a spread replaces\n        // these objects instead of merging them, so the merged values are\n        // re-applied here. The user still wins — they were merged in last.\n        ...(define ? { define } : {}),\n        ...(external ? { external } : {}),\n        ...(loader ? { loader } : {}),\n        // AFTER the spread, and intentionally so: `banner` is an object, and\n        // both the config merge and this spread REPLACE it wholesale rather\n        // than merging. Left as a default above, any user banner would delete\n        // the shim; left to the spread, the shim would delete theirs. The\n        // merge is the only form that keeps both.\n        ...(banner ? { banner } : {}),\n      });\n    } catch (e) {\n      console.log(e);\n      throw e;\n    }\n  }\n\n  /**\n   * The WILDCARD half of the same tsconfig `paths` map that\n   * {@link ProductionBuilder.buildAliasMapFromTsconfig} reads the exact half\n   * of. `tsconfig-path-aliases.ts` explains why the two halves need different\n   * mechanisms — in short, esbuild's `alias` option cannot express a wildcard,\n   * so the entries it skips have to be resolved by a plugin instead of being\n   * left to no one.\n   */\n  private tsconfigPathAliasConfig(): { baseUrl: string; paths: Record<string, string[]> } {\n    tsconfigManager.init();\n\n    return {\n      baseUrl: path.resolve(process.cwd(), tsconfigManager.baseUrl),\n      paths: tsconfigManager.aliases as Record<string, string[]>,\n    };\n  }\n\n  /**\n   * Build an alias map from tsconfig `paths` so esbuild resolves local\n   * source aliases (e.g. `@warlock.js/cascade`) to their on-disk source\n   * folders during bundling. Without this, `packages: \"external\"` would\n   * leave those bare specifiers as raw imports and Node would fail to\n   * resolve them at runtime (they aren't installed in node_modules).\n   *\n   * Only exact (non-wildcard) aliases are included — esbuild's `alias`\n   * option doesn't support glob-style mappings. The wildcard half is not\n   * dropped, it is handled elsewhere: see\n   * {@link ProductionBuilder.tsconfigPathAliasConfig}.\n   */\n  private buildAliasMapFromTsconfig(): Record<string, string> {\n    tsconfigManager.init();\n\n    const alias: Record<string, string> = {};\n    const baseUrl = path.resolve(process.cwd(), tsconfigManager.baseUrl);\n\n    for (const [from, to] of Object.entries(tsconfigManager.aliases)) {\n      if (from.endsWith(\"/*\") || !Array.isArray(to) || to.length === 0) {\n        continue;\n      }\n\n      const target = to[0];\n\n      if (target === undefined) {\n        continue;\n      }\n\n      alias[from] = path.resolve(baseUrl, target);\n    }\n\n    return alias;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,MAAM,mBACJ;;;;;;;;;;;;;;AAoBF,SAAS,YACP,YACA,MACoC;CACpC,IAAI,CAAC,MAAM,OAAO;CAElB,MAAM,SAAS,YAAY;CAE3B,OAAO;EACL,GAAG;EACH,IAAI,SAAS,GAAG,OAAO,WAAW;CACpC;AACF;;;;;;;;;;AAWA,MAAM,+BAA+B;;;;;;AAOrC,IAAa,oBAAb,MAA+B;;uBAEI,YAAY,YAAY;oBAOd,CAAC;4BAMQ,CAAC;wBAoO5B;GACvB,SAAS;GACT,QAAQ;GACR,MAAM;GACN,QAAQ;GACR,SAAS;EACX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAxMA,MAAa,QAAuB;EAClC,QAAQ,IAAI,OAAO,KAAK,8BAA8B,CAAC;EAMvD,4BAA4B;EAG5B,MAAM,KAAK,kBAAkB;EAE7B,MAAM,cAAc,KAAK,QAAQ;EACjC,MAAM,aAAa,oBAAoB,WAAW;EAKlD,IAAI;EAEJ,IAAI;GAEF,MAAM,KAAK,sBAAsB;GAGjC,MAAM,KAAK,mBAAmB;GAG9B,MAAM,KAAK,uBAAuB;GAGlC,MAAM,KAAK,4BAA4B;GAYvC,IAAI,MAXsB,KAAK,yBAAyB,GAYtD,MAAM,KAAK,uBAAuB;GAKpC,MAAM,KAAK,OAAO,UAAU;GAK5B,SAAS,MAAM,eAAe,YAAY,WAAW;GAMrD,MAAM,qBAAqB,KAAK,YAAY,KAAK,aAAa,CAAC;GAM/D,MAAM,4BAA4B,WAAW;GAG7C,MAAM,gBAAgB,MAAM;EAC9B,SAAS,OAAO;GACd,IAAI,QAGF,MAAM,kBAAkB,MAAM;QAI9B,MAAM,qBAAqB,UAAU,CAAC,CAAC,YAAY,MAAS;GAG9D,MAAM;EACR;EAGA,MAAM,qBAAqB,KAAK,aAAa;EAE7C,QAAQ,IAAI,OAAO,MAAM,iBAAiB,CAAC;EAC3C,QAAQ,IAAI,sCAAsC,OAAO,KAAK,eAAe,GAAG;CAClF;;;;CAKA,MAAc,oBAAmC;EAC/C,KAAK,UAAU,mBAAmB;EAGlC,MAAM,aAAa,qBAAqB,IAAI,YAAY,KAAK,CAAC;EAQ9D,2BAA2B,CAAC,GAAG,UAAU,CAAC;EAS1C,+BAA+B,CAAC,GAAG,UAAU,CAAC;EAE9C,KAAK,aAAa;EAGlB,MAAM,qBAAqB,KAAK,aAAa;CAC/C;;;;CAKA,AAAQ,eAAsC;EAC5C,OAAO;GACL,eAAe,KAAK;GACpB,SAAS,SAAS;GAClB,SAAS,KAAK;GACd,gBAAgB,KAAK;EACvB;CACF;;;;;;CAOA,MAAc,8BAA6C;EACzD,IAAI,CAAC,KAAK,WAAW,MAAM,cAAc,UAAU,SAAS,KAAK,GAAG;GAClE,MAAM,qBAAqB,SAAS,CAAC;GACrC;EACF;EAEA,KAAK,kBACH,MAAM,iCAAiC;GACrC,KAAK,SAAS;GACd,WAAW,KAAK,QAAQ;EAC1B,CAAC,EAAC,CACF;CACJ;;;;;;;;;;;;;;;;;;;;;CAsBA,MAAc,2BAA6C;EACzD,MAAM,cAAc,KAAK,WAAW,MAAM,cAAc,QAAQ,UAAU,OAAO,QAAQ,CAAC;EAE1F,MAAM,EAAE,cAAc,YAAY,MAAM,yBACtC,KAAK,YACL,KAAK,aAAa,CACpB;EAEA,KAAK,qBAAqB;EAE1B,IAAI,aAAa,SAAS,GACxB,MAAM,KAAK,mBAAmB,YAAY;EAG5C,OAAO;CACT;;;;CAgBA,MAAc,wBAAuC;EACnD,QAAQ,IAAI,OAAO,OAAO,mCAAmC,CAAC;EAG9D,MAAM,KAAK,kBAAkB;EAG7B,MAAM,KAAK,qBAAqB;EAGhC,MAAM,CAAC,SAAS,QAAQ,MAAM,QAAQ,WAAW,MAAM,QAAQ,IAAI;GACjE,KAAK,gBAAgB;GACrB,KAAK,eAAe;GACpB,KAAK,aAAa;GAClB,KAAK,eAAe;GACpB,KAAK,gBAAgB;EACvB,CAAC;EAED,KAAK,iBAAiB;GAAE;GAAS;GAAQ;GAAM;GAAQ;EAAQ;CACjE;;;;CAKA,MAAc,oBAAmC;EAM/C,MAAM,UAAU,GAJY,MAAM,gBAAgB,QAAQ,cAAc,CAAC,IACrE,0CACA,GAEkC;;;;;;;;;;;EAYtC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,cAAc,GAAG,OAAO;CAC3E;;;;;;;;;;;;;CAcA,MAAc,yBAAwC;EACpD,MAAM,iBAAiB,MAAM,KAAK,wBAAwB;GACxD,KAAK,KAAK;GACV,UAAU;EACZ,CAAC;EAED,MAAM,CAAC,OAAO,cAAc,MAAM,QAAQ,IAAI,CAC5C,QAAQ,IACN,eAAe,IAAI,OAAO,UAAU;GAClC;GACA,SAAS,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,IAAI,CAAC;EACjE,EAAE,CACJ,GACA,iBAA4D,SAAS,cAAc,CAAC,CACtF,CAAC;EAED,kCAAkC,OAAO,OAAO,KAAK,WAAW,gBAAgB,CAAC,CAAC,CAAC;CACrF;;;;;;CAOA,MAAc,WAAW,SAA+D;EAOtF,QAAO,MANa,KAAK,sBAAsB;GAC7C,KAAK,QAAQ;GACb,UAAU;EACZ,CAAC,EAGW,CACT,QAAQ,SAAS,QAAQ,aAAa,IAAI,CAAC,CAAC,CAC5C,KAAK,CAAC,CACN,KAAK,SAAS,mBAAmB,KAAK,QAAQ,eAAe,EAAE,CAAC;CACrE;;;;CAKA,MAAc,uBAAsC;EASlD,MAAM,eAAc,MANA,KAAK,iBAAiB;GACxC,KAHsB,KAAK,KAAK,QAAQ,IAAI,GAAG,YAG5B;GACnB,UAAU;EACZ,CAAC,EAGwB,CACtB,QAAQ,MAAM,aAAa,gBAAgB,CAAC,CAAC,CAAC,CAC9C,KAAK,OAAO;GACX,MAAM,EAAE,QAAQ,eAAe,EAAE;GACjC,KAAK,kBAAkB,gBAAgB,CAAC;EAC1C,EAAE,CAAC,CACF,QAAQ,UAAkD,MAAM,QAAQ,MAAS,CAAC,CAClF,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAM9C,MAAM,UAAoB,CACxB,kGACF;EACA,MAAM,gBAA0B,CAAC;EACjC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAC/B,MAAM,YAAsB,CAAC;EAE7B,YAAY,SAAS,EAAE,MAAM,YAAY,OAAO,UAAU;GAGxD,MAAM,UAAU,SAAS;GACzB,MAAM,OAAO,KAAK,UAAU,GAAG;GAC/B,cAAc,KAAK,eAAe,QAAQ,0BAA0B,WAAW,GAAG;GAClF,eAAe,KAAK,aAAa,KAAK,IAAI,QAAQ,WAAW;GAC7D,YAAY,KAAK,aAAa,KAAK,YAAY,QAAQ,IAAI;GAC3D,UAAU,KAAK,uCAAuC,KAAK,IAAI,QAAQ,WAAW;EACpF,CAAC;EAOD,MAAM,UAAU;GACd,GALuB,MAAM,gBAAgB,QAAQ,aAAa,CAAC,IACjE,CAAC,oCAAoC,IACrC,CAAC;GAIH,GAAG;GACH;GACA;GACA,GAAG;GACH;GACA;GACA,GAAG;GACH;GACA;GACA;GACA,GAAG;GACH;GACA;GACA;GACA,GAAG;GACH;EACF,CAAC,CAAC,KAAK,IAAI;EAEX,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,kBAAkB,GAAG,OAAO;CAC/E;;;;;CAMA,MAAc,kBAAoC;EAChD,MAAM,QAAQ,MAAM,KAAK,WAAW,YAAY;EAChD,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,UAAU,MACb,KAAK,MAAM,UAAU;GACpB,IAAI,CAAC,KAAK,SAAS,OAAO,GAAG,OAAO,WAAW,KAAK;GACpD,MAAM,eAAe,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;GAC1C,OAAO;IACL,oBAAoB,MAAM,SAAS,KAAK;IACxC;IACA,0CAA0C,KAAK,UAAU,IAAI,EAAE,qCAAqC,MAAM,uBAAuB,KAAK,UAAU,YAAY,EAAE;GAChK,CAAC,CAAC,KAAK,IAAI;EACb,CAAC,CAAC,CACD,KAAK,IAAI;EACZ,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,YAAY,GAAG,UAAU,IAAI;EAC9E,OAAO;CACT;;;;;CAMA,MAAc,iBAAmC;EAC/C,MAAM,QAAQ,MAAM,KAAK,WAAW,WAAW;EAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,WAAW;EACjD,OAAO;CACT;;;;;CAMA,MAAc,eAAiC;EAC7C,MAAM,QAAQ,MAAM,KAAK,WAAW,UAAU;EAC9C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,SAAS;EAC/C,OAAO;CACT;;;;;CAMA,MAAc,iBAAmC;EAC/C,MAAM,QAAQ,MAAM,KAAK,WAAW,WAAW;EAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,WAAW;EACjD,OAAO;CACT;;;;;CAMA,MAAc,kBAAoC;EAChD,MAAM,QAAQ,MAAM,KAAK,WAAW,YAAY;EAChD,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,YAAY;EAClD,OAAO;CACT;;;;CAKA,MAAc,oBAAoB,aAAuB,YAAmC;EAE1F,MAAM,UADU,YAAY,KAAK,eAAe,WAAW,WAAW,GAChD,CAAC,CAAC,KAAK,IAAI,IAAI;EACrC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,UAAU,GAAG,OAAO;CACvE;;;;;;;CAQA,MAAc,mBAAmB,qBAA+B,CAAC,GAAkB;EACjF,QAAQ,IAAI,OAAO,OAAO,8BAA8B,CAAC;EAQzD,MAAM,gBAAgB,KAAK,WACxB,KAAK,cAAc,KAAK,UAAU,UAAU,IAAI,CAAC,CAAC,CAClD,KAAK,IAAI;EAGZ,MAAM,UAAoB;GACxB;GACA;GACA;GACA;GACA;GACA;GAMA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,8BAA8B,6BAA6B;GAC3D,kFAAkF,cAAc;GAChG;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF;EAaA,QAAQ,KAAK,IAAI,qDAAqD;EAEtE,IAAI,KAAK,eAAe,QACtB,QAAQ,KAAK,6BAA2B;EAE1C,IAAI,KAAK,eAAe,SACtB,QAAQ,KAAK,8BAA4B;EAE3C,IAAI,KAAK,eAAe,MACtB,QAAQ,KAAK,2BAAyB;EAExC,IAAI,KAAK,eAAe,QACtB,QAAQ,KAAK,uCAAqC,iCAA+B,GAAG;EAEtF,IAAI,KAAK,eAAe,SACtB,QAAQ,KAAK,0CAAwC,kCAAgC,GAAG;EAQ1F,QAAQ,KAAK,GAAG,kBAAkB;EAIlC,QAAQ,KACN,IACA,+EACA,2CACF;EAGA,QAAQ,KACN,IACA,mEACA,gEACA,qEACA,IACA,gFACA,mHACA,4CACF;EAEA,MAAM,UAAU,QAAQ,KAAK,IAAI,IAAI;EACrC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,QAAQ,GAAG,OAAO;CACrE;;;;;;;;;;;CAYA,MAAc,OAAO,aAAoC;EACvD,QAAQ,IAAI,OAAO,QAAQ,6BAA6B,CAAC;EAEzD,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,QAAQ;EACzD,MAAM,cAAc,KAAK,QAAQ;EAEjC,MAAM,YAAY,KAAK,SAAS,aAAa,KAAK,QAAQ,WAAW,CAAC;EAItE,MAAM,eAAe,KAAK,QAAQ,iBAAiB;EACnD,MAAM,UAAU,KAAK,QAAQ,YAAY;EAGzC,MAAM,aAAa,KAAK,QAAQ;EAiBhC,MAAM,iBAA+C,EAAE,GAAG,KAAK,QAAQ;EAEvE,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EAEtB,MAAM,qBAAqB,WAAW;EAEtC,MAAM,QAAQ,KAAK,0BAA0B;EAW7C,MAAM,mBAAmB,CAAC,gBAAiB,eAAuB,aAAa;EAK/E,MAAM,SAAS,eAAe,UAAU,WAAW;EACnD,MAAM,SAAS,YAAY,YAAY,WAAW,QAAQ,mBAAmB,MAAS;EAatF,MAAM,EACJ,QAAQ,mBACR,UAAU,qBACV,QAAQ,mBACR,SAAS,oBACT,GAAG,uBACD,KAAK;EAET,MAAM,aAAiD,eAAe;EACtE,MAAM,eAAqC,eAAe;EAC1D,MAAM,aAA8C,eAAe;EAEnE,MAAM,SACJ,qBAAqB,aAAa;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;EAE9E,MAAM,SACJ,qBAAqB,aAAa;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;EAE9E,MAAM,WACJ,uBAAuB,eACnB,OAAO,CAAC,GAAI,uBAAuB,CAAC,GAAI,GAAI,gBAAgB,CAAC,CAAE,CAAC,IAChE;EAEN,IAAI,cACF,QAAQ,IACN,OAAO,QACL,yCACG,WAAW,QAAQ,+BAA+B,MACnD,uDACJ,CACF;EAGF,IAAI;GACF,MAAM,QAAQ,MAAM;IAClB,UAAU;IACV,aAAa,CAAC,UAAU;IACxB,QAAQ;IASR,WAAW,CAAC;IAMZ,UAAU,gBAAgB,mBAAmB,WAAW;IACxD,QAAQ,eAAe;IACvB,WAAW,eAAe,cAAc,OAAO,WAAW,eAAe;IACzE,QAAQ;IAIR,QAAQ,CAAC,QAAQ;IACjB,YAAY;IACZ;IACA,SAAS;KACP;KAKA,oBAAoB,KAAK,wBAAwB,CAAC;KAClD,GAAI,mBACA,CAAC,4BAA4B;MAAE,SAAS,SAAS;MAAG,WAAW,OAAO,KAAK,KAAK;KAAE,CAAC,CAAC,IACpF,CAAC;KAGL,GAAI,sBAAsB,CAAC;IAC7B;IAEA,GAAG;IACH,GAAI;IAOJ,QAAQ;IAIR,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAC3B,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;IAC/B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAM3B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC7B,CAAC;EACH,SAAS,GAAG;GACV,QAAQ,IAAI,CAAC;GACb,MAAM;EACR;CACF;;;;;;;;;CAUA,AAAQ,0BAAgF;EACtF,gBAAgB,KAAK;EAErB,OAAO;GACL,SAAS,KAAK,QAAQ,QAAQ,IAAI,GAAG,gBAAgB,OAAO;GAC5D,OAAO,gBAAgB;EACzB;CACF;;;;;;;;;;;;;CAcA,AAAQ,4BAAoD;EAC1D,gBAAgB,KAAK;EAErB,MAAM,QAAgC,CAAC;EACvC,MAAM,UAAU,KAAK,QAAQ,QAAQ,IAAI,GAAG,gBAAgB,OAAO;EAEnE,KAAK,MAAM,CAAC,MAAM,OAAO,OAAO,QAAQ,gBAAgB,OAAO,GAAG;GAChE,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,QAAQ,EAAE,KAAK,GAAG,WAAW,GAC7D;GAGF,MAAM,SAAS,GAAG;GAElB,IAAI,WAAW,QACb;GAGF,MAAM,QAAQ,KAAK,QAAQ,SAAS,MAAM;EAC5C;EAEA,OAAO;CACT;AACF"}
+{"version":3,"file":"production-builder.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/production-builder.ts"],"sourcesContent":["import { colors } from \"@mongez/copper\";\nimport {\n  ensureDirectoryAsync,\n  fileExistsAsync,\n  getFileAsync,\n  getJsonFileAsync,\n  putFileAsync,\n  removeDirectoryAsync,\n} from \"@warlock.js/fs\";\nimport esbuild from \"esbuild\";\nimport glob from \"fast-glob\";\nimport path from \"path\";\nimport { assertNoReservedConnectorNames } from \"../connectors/assert-no-reserved-connector-names\";\nimport { assertUniqueConnectorNames } from \"../connectors/assert-unique-connector-names\";\nimport type { Connector, ConnectorBuildContext, ConnectorEsbuildPatch } from \"../connectors/types\";\nimport { configKeyFromPath } from \"../config/config-key-from-path\";\nimport {\n  isConfigFile,\n  isEventFile,\n  isLocaleFile,\n  isMainFile,\n  isRouteFile,\n  isWorkerFile,\n} from \"../dev-server/special-file-patterns\";\nimport { tsconfigManager } from \"../dev-server/tsconfig-manager\";\nimport { appPath, rootPath, warlockPath } from \"../utils\";\nimport { warlockConfigManager } from \"../warlock-config/warlock-config.manager\";\nimport { assertGeneratedImportsAreDeclared } from \"./assert-generated-imports\";\nimport { bundleFrameworkDependencies } from \"./bundle-framework-dependencies\";\nimport { dedupe, runEmitContributions, runGenerateContributions } from \"./build-contributions\";\nimport { writeDistBuildManifestAsync } from \"./dist-build-manifest\";\nimport { nativeNodeModulesPlugin } from \"./esbuild-plugins\";\nimport { assertEsbuildBinaryIsLinked } from \"./esbuild-preflight\";\nimport { collectRouteRegistrationSnapshot } from \"./route-registration-snapshot\";\nimport { clearOwnedRouteTypes } from \"../dev-server/route-types-publisher\";\nimport {\n  commitDistAsync,\n  createTempOutputDir,\n  rollbackDistAsync,\n  stageDistAsync,\n  type StagedDist,\n} from \"./promote-dist\";\nimport { resolveBuildConfig, type ResolvedBuildConfig } from \"./resolve-build-config\";\nimport { tsconfigPathAliases } from \"./tsconfig-path-aliases\";\n\n/**\n * Recreates `require`, `__filename` and `__dirname` at the top of an ESM bundle.\n *\n * Bundled CommonJS dependencies call `require(\"node:assert\")` and read\n * `__dirname` to locate their own assets. Neither exists in an ES module, so\n * esbuild substitutes a stub that throws — **after the build has reported\n * success**. `Dynamic require of \"node:assert\" is not supported` is that stub\n * firing, and it is the defect this shim removes.\n *\n * `__dirname` matters as much as `require`: without it a dependency resolving\n * an asset path silently gets `undefined` and fails later, further from the\n * cause.\n *\n * Written as one line because esbuild inserts a banner verbatim above the\n * bundle and a multi-line string here would shift every mapped line.\n */\nconst ESM_INTEROP_SHIM =\n  \"import{createRequire as __wlCreateRequire}from'node:module';\" +\n  \"import{fileURLToPath as __wlFileURLToPath}from'node:url';\" +\n  \"import{dirname as __wlDirname}from'node:path';\" +\n  \"const require=__wlCreateRequire(import.meta.url);\" +\n  \"const __filename=__wlFileURLToPath(import.meta.url);\" +\n  \"const __dirname=__wlDirname(__filename);\";\n\n/**\n * Combine the framework's banner with the user's, keeping both.\n *\n * esbuild's `banner` is an object keyed by output type, and every merge in the\n * path to it — the config merge and the options spread — REPLACES that object\n * rather than merging it. So whichever is applied second silently deletes the\n * other. This is the only place the two can coexist.\n *\n * The shim goes first: it defines `require`, which a user banner may use.\n *\n * @param userBanner banner from `warlock.config.ts`, if any\n * @param shim the interop shim, or undefined when it does not apply\n */\nfunction mergeBanner(\n  userBanner: Record<string, string> | undefined,\n  shim: string | undefined,\n): Record<string, string> | undefined {\n  if (!shim) return userBanner;\n\n  const userJs = userBanner?.js;\n\n  return {\n    ...userBanner,\n    js: userJs ? `${shim}${userJs}` : shim,\n  };\n}\n\n/**\n * Prefix every generated file uses to reach the app root.\n *\n * Generated sources are written into `.warlock/production/`, two levels below\n * the app root, so `../../` lands back on it — the same hop already spelled\n * out in the `../../src/app/…` and `../../src/config/…` imports the module and\n * config-loader generators emit. Named once so a generator that needs a new\n * app-root file (`warlock.config`) cannot pick a different depth.\n */\nconst APP_ROOT_FROM_PRODUCTION_DIR = \"../../\";\n\n/**\n * Production Builder\n * Generates production-ready files and bundles them for deployment\n * Build options are loaded from warlock.config.ts\n */\nexport class ProductionBuilder {\n  private options!: ResolvedBuildConfig;\n  private readonly productionDir = warlockPath(\"production\");\n\n  /**\n   * Connectors declared in `warlock.config.ts`. Read statically — `build`\n   * never calls `boot()`/`start()` on them; it only\n   * drains their `build` contributions.\n   */\n  private connectors: readonly Connector[] = [];\n\n  /**\n   * The contributors' merged esbuild patch, produced by the `generate` pass\n   * and consumed by {@link bundle}.\n   */\n  private contributedEsbuild: ConnectorEsbuildPatch = {};\n\n  /** Browser-safe API metadata captured in a fresh registration-only child. */\n  private namedApiRoutes?: readonly import(\"../router/types\").NamedApiRoute[];\n\n  /**\n   * Main build entry point\n   *\n   * The esbuild bundle is written into a TEMP directory next to the real\n   * output directory, never into it, and that directory is renamed over\n   * `outdir` as one filesystem operation — so `outdir` is never observed as\n   * a mix of the old build and the new one, and a build that fails before\n   * that rename never touches `outdir` at all.\n   *\n   * `this.options.outdir` is NOT repointed at the temp directory while that\n   * happens, and must never be. It is not merely a write target: consumers\n   * BAKE it into runtime output — `web`'s build contribution derives the\n   * `clientDir` recorded in its pages manifest from it\n   * (`web/src/build/contribution.ts`) — so a temp path reaching them\n   * produces an artifact whose browser paths point at a directory promotion\n   * has since renamed away. The temp path is passed explicitly, as a\n   * parameter, to the one operation that writes into it ({@link bundle});\n   * everything else, `buildContext()` included, keeps reading the final\n   * destination.\n   *\n   * That is also why promotion is STAGED rather than done at the very end.\n   * Connector `emit` hooks write real artifacts (the web client bundle) and\n   * see the final `outdir`, so they must run when `outdir` genuinely holds\n   * this build — after the rename, not before it, or promotion would replace\n   * the directory they just wrote into. The previous build is kept parked\n   * aside until they finish: `emit` throwing rolls the whole promotion back,\n   * and the build-success marker `warlock start` checks is written last of\n   * all, so a failure at any point leaves no `dist` that start will boot.\n   */\n  public async build(): Promise<void> {\n    console.log(colors.cyan(\"Building for production...\\n\"));\n\n    // Step 0: Fail fast when esbuild's native binary never got linked (the\n    // state pnpm leaves a project in when its build-script approval gate\n    // blocked esbuild's postinstall) rather than let bundling die on esbuild's\n    // own cryptic \"package could not be found\" error several steps from now.\n    assertEsbuildBinaryIsLinked();\n\n    // Step 1: Initialize options from config\n    await this.initializeOptions();\n\n    const finalOutDir = this.options.outdir!;\n    const tempOutDir = createTempOutputDir(finalOutDir);\n\n    // Set once the temp directory has been renamed onto `finalOutDir`. Its\n    // presence is what tells the catch below whether a failure has a\n    // promotion to undo or only a temp directory to discard.\n    let staged: StagedDist | undefined;\n\n    try {\n      // Step 2: Generate combined files\n      await this.generateCombinedFiles();\n\n      // Step 3: Generate entry point\n      await this.generateEntryPoint();\n\n      // Step 4: Refuse to bundle code the app could not resolve at runtime\n      await this.assertGeneratedImports();\n\n      // Step 4.5: Drain the connectors' `generate` contributions\n      await this.captureNamedApiRoutesForWeb();\n      const contributed = await this.runGenerateContributions();\n\n      // Step 4.6: Re-assert over what the contributors just wrote.\n      //\n      // Step 4 only saw core's own generated files; a contributor writes its\n      // code (a pages barrel, say) AFTER that assertion, so an undeclared bare\n      // specifier in it reaches the bundle unchecked. Under\n      // `packages: \"external\"` that specifier survives verbatim into the\n      // artifact and dies as ERR_MODULE_NOT_FOUND at runtime — the same failure\n      // step 4 exists to prevent. Skipped when nothing contributed: re-globbing\n      // and re-reading the production dir is pure cost in the common case.\n      if (contributed) {\n        await this.assertGeneratedImports();\n      }\n\n      // Step 5: Bundle with esbuild into the temp directory. The ONLY\n      // operation handed that path — it is a write target, not config.\n      await this.bundle(tempOutDir);\n\n      // Step 5.5: Promote the bundle into `outdir`, keeping the previous\n      // build parked aside. `outdir` now holds exactly this build, so the\n      // steps below write into — and record — the real destination.\n      staged = await stageDistAsync(tempOutDir, finalOutDir);\n\n      // Step 5.6: Drain the connectors' `emit` contributions — after the\n      // bundle is in place (so what they write survives promotion and the\n      // paths they bake in resolve), and BEFORE step 6 deletes the\n      // production directory they may still read.\n      await runEmitContributions(this.connectors, this.buildContext());\n\n      // Step 5.7: Mark `dist` as a genuine, complete build — the one thing\n      // `warlock start` trusts. Written LAST on purpose: every earlier step\n      // can still fail, and until this file exists nothing will boot what\n      // they left behind.\n      await writeDistBuildManifestAsync(finalOutDir);\n\n      // Step 5.8: Commit — drop the parked previous build. Cannot throw.\n      await commitDistAsync(staged);\n    } catch (error) {\n      if (staged) {\n        // The promotion already happened; put the previous build back and\n        // take this half-finished one out of `outdir`.\n        await rollbackDistAsync(staged);\n      } else {\n        // Nothing this build produced ever reached `outdir` — discard the\n        // temp directory and leave `outdir` exactly as it was.\n        await removeDirectoryAsync(tempOutDir).catch(() => undefined);\n      }\n\n      throw error;\n    }\n\n    // Step 6: Remove production folder\n    await removeDirectoryAsync(this.productionDir);\n\n    console.log(colors.green(\"Build complete!\"));\n    console.log(`Start production server by running ${colors.cyan(\"warlock start\")}`);\n  }\n\n  /**\n   * Initialize options from warlock.config.ts\n   */\n  private async initializeOptions(): Promise<void> {\n    this.options = resolveBuildConfig();\n    // Same config object `resolveBuildConfig` just read — `warlock build`\n    // preloads warlock.config.ts, so no additional load happens here.\n    const connectors = warlockConfigManager.get(\"connectors\") ?? [];\n\n    // Checked here, where the array is first read, so nothing downstream has\n    // drained anything yet: the `generate` and `emit` passes run per ENTRY, so\n    // a name listed twice would write its files and merge its esbuild options\n    // twice into an artifact the runtime then boots that name only once from.\n    // A build that half-applied a connector and reported success is worse than\n    // one that never started.\n    assertUniqueConnectorNames([...connectors]);\n\n    // And here rather than only at boot, for the same reason: a name a built-in\n    // already owns is skipped by the runtime, so an artifact built from it\n    // carries the custom connector's generated files and esbuild patches while\n    // the server boots the built-in instead. Refusing it at boot alone would\n    // mean the build had already emitted that artifact — the failure has to\n    // land on the developer running `warlock build`, not on whoever starts the\n    // server. Same assertion the registration half calls, over the same names.\n    assertNoReservedConnectorNames([...connectors]);\n\n    this.connectors = connectors;\n\n    // Ensure production directory exists\n    await ensureDirectoryAsync(this.productionDir);\n  }\n\n  /**\n   * The context handed to every build contribution.\n   */\n  private buildContext(): ConnectorBuildContext {\n    return {\n      productionDir: this.productionDir,\n      appRoot: rootPath(),\n      options: this.options,\n      namedApiRoutes: this.namedApiRoutes,\n    };\n  }\n\n  /**\n   * Web route declarations need application API registration, which cannot be\n   * inferred from generated files. Capture it once in a disposable child before\n   * contributors write build artifacts; no connector lifecycle runs there.\n   */\n  private async captureNamedApiRoutesForWeb(): Promise<void> {\n    if (!this.connectors.some((connector) => connector.name === \"web\")) {\n      await clearOwnedRouteTypes(rootPath());\n      return;\n    }\n\n    this.namedApiRoutes = (\n      await collectRouteRegistrationSnapshot({\n        cwd: rootPath(),\n        timeoutMs: this.options.routeRegistrationTimeoutMs,\n      })\n    ).routes;\n  }\n\n  /**\n   * Drain the `generate` hooks and fold what they returned back into the\n   * build.\n   *\n   * The entry point is REGENERATED here rather than generated later. The\n   * contribution slot is fixed — after `assertGeneratedImports` (so nothing\n   * bundles that the app could not resolve) and before `bundle` — while\n   * `generateEntryPoint` must stay at step 3, because `app.ts` is itself\n   * generated code the assertion has to see; moving it past the assertion\n   * would silently drop the entry from that check. Rewriting one small file\n   * is cheaper than losing either guarantee, and the write is pure\n   * (`generatedFiles` + these imports), so doing it twice is not a\n   * correctness risk.\n   *\n   * @returns whether any connector ran a `generate` hook — the caller uses it\n   * to decide if the import assertion is worth a second pass. Keyed on the\n   * hook EXISTING, not on what it returned: a hook that returns nothing may\n   * still have written files into `productionDir`, and those are exactly the\n   * files the second pass is there to read.\n   */\n  private async runGenerateContributions(): Promise<boolean> {\n    const contributed = this.connectors.some((connector) => Boolean(connector.build?.generate));\n\n    const { entryImports, esbuild } = await runGenerateContributions(\n      this.connectors,\n      this.buildContext(),\n    );\n\n    this.contributedEsbuild = esbuild;\n\n    if (entryImports.length > 0) {\n      await this.generateEntryPoint(entryImports);\n    }\n\n    return contributed;\n  }\n\n  /**\n   * Track which special files were generated\n   */\n  private generatedFiles = {\n    locales: false,\n    events: false,\n    main: false,\n    routes: false,\n    workers: false,\n  };\n\n  /**\n   * Generate all combined files\n   */\n  private async generateCombinedFiles(): Promise<void> {\n    console.log(colors.yellow(\"   Generating production files...\"));\n\n    // Generate bootstrap.ts file\n    await this.generateBootstrap();\n\n    // Generate config loader\n    await this.generateConfigLoader();\n\n    // Generate special files and track which ones have content\n    const [locales, events, main, routes, workers] = await Promise.all([\n      this.generateLocales(),\n      this.generateEvents(),\n      this.generateMain(),\n      this.generateRoutes(),\n      this.generateWorkers(),\n    ]);\n\n    this.generatedFiles = { locales, events, main, routes, workers };\n  }\n\n  /**\n   * Generate bootstrap.ts - ensures bootstrap() runs first and sets production environment\n   */\n  private async generateBootstrap(): Promise<void> {\n    // ESM hoists imports, so the app bootstrap must be the first import to run first\n    const appBootstrapImport = (await fileExistsAsync(appPath(\"bootstrap.ts\")))\n      ? \"import './../../src/app/bootstrap';\\n\"\n      : \"\";\n\n    const content = `${appBootstrapImport}import { bootstrap, Application } from \"@warlock.js/core\";\n\n// Production runtime; NODE_ENV is only defaulted so an explicit value (e.g. staging) wins\nApplication.setRuntimeStrategy(\"production\");\nif (!process.env.NODE_ENV) {\n  Application.setEnvironment(\"production\");\n}\n\n// Bootstrap the application\nbootstrap();\n`;\n\n    await putFileAsync(path.join(this.productionDir, \"bootstrap.ts\"), content);\n  }\n\n  /**\n   * Fail the build when generated code imports a package the app does not\n   * declare.\n   *\n   * The bundler is configured `packages: \"external\"`, so every bare specifier\n   * written above survives verbatim into an artifact that resolves against the\n   * **consuming app's** node_modules. A framework-internal dependency imported\n   * there resolves by accident under npm/yarn hoisting and dies under pnpm —\n   * which is how a production app shipped that could not boot. Rewriting the\n   * offending import fixes today's bundle; this check is what stops the next\n   * change to the generator from quietly reintroducing it.\n   */\n  private async assertGeneratedImports(): Promise<void> {\n    const generatedPaths = await glob(\"**/*.{ts,tsx,js,mjs}\", {\n      cwd: this.productionDir,\n      absolute: false,\n    });\n\n    const [files, appPackage] = await Promise.all([\n      Promise.all(\n        generatedPaths.map(async (file) => ({\n          file,\n          content: await getFileAsync(path.join(this.productionDir, file)),\n        })),\n      ),\n      getJsonFileAsync<{ dependencies?: Record<string, string> }>(rootPath(\"package.json\")),\n    ]);\n\n    assertGeneratedImportsAreDeclared(files, Object.keys(appPackage.dependencies ?? {}));\n  }\n\n  /**\n   * Glob `src/app` and keep the files the shared dev-server predicate accepts,\n   * so production discovers exactly what the dev collector does.\n   * Returns relative paths from .warlock/production/ to src/app/\n   */\n  private async globModule(matches: (relativePath: string) => boolean): Promise<string[]> {\n    const files = await glob(\"**/*.{ts,tsx,json}\", {\n      cwd: appPath(),\n      absolute: false,\n    });\n\n    // e.g., \"users/main.ts\" -> \"../../src/app/users/main\"\n    return files\n      .filter((file) => matches(\"src/app/\" + file))\n      .sort()\n      .map((file) => \"../../src/app/\" + file.replace(/\\.(ts|tsx)$/, \"\"));\n  }\n\n  /**\n   * Generate config-loader.ts\n   */\n  private async generateConfigLoader(): Promise<void> {\n    const configDirectory = path.join(process.cwd(), \"src/config\");\n\n    const files = await glob(\"**/*.{ts,tsx}\", {\n      cwd: configDirectory,\n      absolute: false,\n    });\n\n    // Same key rule as the dev config loader: the raw path, never camel-cased\n    const configNames = files\n      .filter((f) => isConfigFile(\"src/config/\" + f))\n      .map((f) => ({\n        path: f.replace(/\\.(ts|tsx)$/, \"\"),\n        key: configKeyFromPath(\"src/config/\" + f),\n      }))\n      .filter((entry): entry is { path: string; key: string } => entry.key !== undefined)\n      .sort((a, b) => a.path.localeCompare(b.path));\n\n    // Only `@warlock.js/core` — the one package the app itself declares. See\n    // `assertGeneratedImportsAreDeclared`: `@mongez/config` is core's own\n    // dependency, so a bare import of it resolved by luck under npm/yarn\n    // hoisting and died under pnpm's strict layout.\n    const imports: string[] = [\n      'import { assertValidConfigModules, configSpecialHandlers, setConfig } from \"@warlock.js/core\";',\n    ];\n    const configImports: string[] = [];\n    const configSetCalls: string[] = [];\n    const validations: string[] = [];\n    const executors: string[] = [];\n\n    configNames.forEach(({ path: configPath, key }, index) => {\n      // Index-based identifier: keys like \"rate-limit\" or \"mail/smtp\" are not valid names.\n      // A namespace import, so a file's optional `configSchema` export travels with it.\n      const varName = `config${index}`;\n      const name = JSON.stringify(key);\n      configImports.push(`import * as ${varName} from \"../../src/config/${configPath}\";`);\n      configSetCalls.push(`setConfig(${name}, ${varName}.default);`);\n      validations.push(`  { name: ${name}, module: ${varName} },`);\n      executors.push(`await configSpecialHandlers.execute(${name}, ${varName}.default);`);\n    });\n\n    // ESM hoists imports, so prestart must be the first import to run first\n    const prestartImports = (await fileExistsAsync(appPath(\"prestart.ts\")))\n      ? [\"import './../../src/app/prestart';\"]\n      : [];\n\n    const content = [\n      ...prestartImports,\n      ...imports,\n      \"\",\n      \"// Config imports\",\n      ...configImports,\n      \"\",\n      \"// Register configs\",\n      ...configSetCalls,\n      \"\",\n      \"// Refuse to start when a config file's `configSchema` is not satisfied\",\n      \"await assertValidConfigModules([\",\n      ...validations,\n      \"]);\",\n      \"\",\n      \"// Special handlers\",\n      ...executors,\n      \"\",\n    ].join(\"\\n\");\n\n    await putFileAsync(path.join(this.productionDir, \"config-loader.ts\"), content);\n  }\n\n  /**\n   * Generate locales.ts (only if there are locale files)\n   * @returns true if file was generated with content\n   */\n  private async generateLocales(): Promise<boolean> {\n    const files = await this.globModule(isLocaleFile);\n    if (files.length === 0) return false;\n    const content = files\n      .map((file, index) => {\n        if (!file.endsWith(\".json\")) return `import \"${file}\";`;\n        const moduleFolder = file.split(\"/\").at(-3)!;\n        return [\n          `import dictionary${index} from \"${file}\";`,\n          'import { registerLocaleDictionary } from \"@warlock.js/core\";',\n          `registerLocaleDictionary({ sourceFile: ${JSON.stringify(file)}, source: JSON.stringify(dictionary${index}), defaultNamespace: ${JSON.stringify(moduleFolder)} });`,\n        ].join(\"\\n\");\n      })\n      .join(\"\\n\");\n    await putFileAsync(path.join(this.productionDir, \"locales.ts\"), content + \"\\n\");\n    return true;\n  }\n\n  /**\n   * Generate events.ts (only if there are event files)\n   * @returns true if file was generated with content\n   */\n  private async generateEvents(): Promise<boolean> {\n    const files = await this.globModule(isEventFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"events.ts\");\n    return true;\n  }\n\n  /**\n   * Generate main.ts (only if there are main files)\n   * @returns true if file was generated with content\n   */\n  private async generateMain(): Promise<boolean> {\n    const files = await this.globModule(isMainFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"main.ts\");\n    return true;\n  }\n\n  /**\n   * Generate routes.ts (only if there are route files)\n   * @returns true if file was generated with content\n   */\n  private async generateRoutes(): Promise<boolean> {\n    const files = await this.globModule(isRouteFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"routes.ts\");\n    return true;\n  }\n\n  /**\n   * Generate workers.ts (only if there are worker files)\n   * @returns true if file was generated with content\n   */\n  private async generateWorkers(): Promise<boolean> {\n    const files = await this.globModule(isWorkerFile);\n    if (files.length === 0) return false;\n    await this.generateImportsFile(files, \"workers.ts\");\n    return true;\n  }\n\n  /**\n   * Generate a file with imports from all given files\n   */\n  private async generateImportsFile(importPaths: string[], outputFile: string): Promise<void> {\n    const imports = importPaths.map((importPath) => `import \"${importPath}\";`);\n    const content = imports.join(\"\\n\") + \"\\n\";\n    await putFileAsync(path.join(this.productionDir, outputFile), content);\n  }\n\n  /**\n   * Generate the main entry point (app.ts)\n   *\n   * @param contributedImports lines from connector `generate` hooks, appended\n   * to section 4 after `./routes`\n   */\n  private async generateEntryPoint(contributedImports: string[] = []): Promise<void> {\n    console.log(colors.yellow(\"   Generating entry point...\"));\n\n    // The names this build resolved, baked in as a literal. The entry imports\n    // the config source, and that source is re-evaluated at startup — an\n    // env-conditional `connectors` array can hand the boot a different list\n    // than the one drained here. A literal is the only part of the array that\n    // survives into the artifact unchanged, so it is what the boot compares\n    // against.\n    const expectedNames = this.connectors\n      .map((connector) => JSON.stringify(connector.name))\n      .join(\", \");\n\n    // Build imports based on which files were generated\n    const imports: string[] = [\n      \"// 1. Bootstrap (loads .env, initializes framework)\",\n      'import \"./bootstrap\";',\n      \"\",\n      \"// 2. Load configs\",\n      'import \"./config-loader\";',\n      \"\",\n      // Registration has to sit between the config being available and the\n      // first phase starting: the connectors listed in `connectors` are the\n      // same ones this build drained contributions from, so the bundle boots\n      // exactly what it was built for. Register any later and an early-phase\n      // connector would miss its own start.\n      \"// 2.5 Register connectors declared in warlock.config (the same array this\",\n      \"//     build read its contributions from, so built-for and boots-with match).\",\n      \"//     The config is imported STATICALLY so esbuild bakes it into the bundle\",\n      \"//     and the array is handed over explicitly — an artifact has no\",\n      \"//     warlock.config.ts beside it to read at runtime, and a registration\",\n      \"//     that quietly found nothing to register is the exact drift this\",\n      \"//     section exists to prevent.\",\n      \"//     `expectedNames` is the list this build resolved, in order — boot\",\n      \"//     refuses to start when the config hands over a different set or order.\",\n      'import { registerConfiguredConnectors } from \"@warlock.js/core\";',\n      `import warlockConfig from \"${APP_ROOT_FROM_PRODUCTION_DIR}warlock.config\";`,\n      `registerConfiguredConnectors(warlockConfig.connectors ?? [], { expectedNames: [${expectedNames}] });`,\n      \"\",\n      \"// 2.6 Fail fast on a busy port. `http` is a LATE-phase connector, so its\",\n      \"//     own preflight is not reached until the database and cache have\",\n      \"//     connected and every app module has been imported — seconds of work\",\n      \"//     thrown away before anyone learns the port was taken. This probe is\",\n      \"//     a bind-and-release on a socket that is never served, and it reports\",\n      \"//     on stderr because no log channel is configured this early.\",\n      'import { Application, connectorsManager, ConnectorLifecyclePhase, preflightConfiguredHttpPort } from \"@warlock.js/core\";',\n      'if (Application.hasRole(\"api\") || Application.hasRole(\"web\")) {',\n      \"  await preflightConfiguredHttpPort();\",\n      \"}\",\n      \"\",\n      \"// 3. Start early-phase connectors (database, cache, logger, ...)\",\n      \"//    so data sources, cache, etc. are ready before app code runs\",\n      \"await connectorsManager.startPhase(ConnectorLifecyclePhase.Early);\",\n    ];\n\n    // App code uses dynamic `await import(...)` so each module's side\n    // effects fire at THIS point in execution. Static imports would be\n    // hoisted to module-instantiation time (before the early-phase await\n    // resolves), which is exactly the bug this split is meant to fix.\n    //\n    // The guarantee comes from the imports being DYNAMIC — esbuild wraps a\n    // dynamically-imported module in its `__esm(() => {…})` helper and runs\n    // it at the await, not at instantiation. It does NOT come from\n    // `splitting: true`, which only decides one-file-vs-chunks. This\n    // previously said splitting was required; it is not, and `singleBundle`\n    // (splitting: false) preserves the ordering.\n    imports.push(\"\", \"// 4. Load app code (events, locales, main, routes)\");\n\n    if (this.generatedFiles.events) {\n      imports.push('await import(\"./events\");');\n    }\n    if (this.generatedFiles.locales) {\n      imports.push('await import(\"./locales\");');\n    }\n    if (this.generatedFiles.main) {\n      imports.push('await import(\"./main\");');\n    }\n    if (this.generatedFiles.routes) {\n      imports.push('if (Application.hasRole(\"api\")) {', '  await import(\"./routes\");', \"}\");\n    }\n    if (this.generatedFiles.workers) {\n      imports.push('if (Application.hasRole(\"worker\")) {', '  await import(\"./workers\");', \"}\");\n    }\n\n    // Contributor imports come AFTER `./routes`, never before: a connector\n    // that registers pages needs the routes app code already collected —\n    // the same ordering dev uses (routes first, then the connector installs\n    // on top of them). Emitted verbatim; the contributor writes the whole\n    // statement (e.g. `await import(\"./pages\");`).\n    imports.push(...contributedImports);\n\n    // A rejecting validator (Application.onValidateBoot) must abort boot\n    // before late-phase connectors bind a port.\n    imports.push(\n      \"\",\n      \"// 5. Run startup validators registered via Application.onValidateBoot(...)\",\n      \"await Application.runStartupValidators();\",\n    );\n\n    // Start late-phase connectors after app code registers routes/listeners\n    imports.push(\n      \"\",\n      \"// 6. Start late-phase connectors (http, socket) — routes and\",\n      \"//    listeners registered by app code are now ready to bind\",\n      \"await connectorsManager.startPhase(ConnectorLifecyclePhase.Late);\",\n      \"\",\n      \"// 7. Signal a complete boot so `Application.onceBooted(...)` listeners fire\",\n      \"Application.markBooted({ environment: Application.environment, runtimeStrategy: Application.runtimeStrategy });\",\n      \"connectorsManager.shutdownOnProcessKill();\",\n    );\n\n    const content = imports.join(\"\\n\") + \"\\n\";\n    await putFileAsync(path.join(this.productionDir, \"app.ts\"), content);\n  }\n\n  /**\n   * Bundle with esbuild\n   *\n   * @param writeOutDir the directory esbuild writes into — the build's\n   * private temp directory, NOT `options.outdir`. Taken as a parameter\n   * rather than read off `this.options` because the two are different paths\n   * with different meanings: `options.outdir` is the final destination every\n   * consumer bakes into the artifact, and this is only where bytes land\n   * before promotion moves them there.\n   */\n  private async bundle(writeOutDir: string): Promise<void> {\n    console.log(colors.magenta(\"   Bundling with esbuild...\"));\n\n    const entryPoint = path.join(this.productionDir, \"app.ts\");\n    const outFileName = this.options.outFile!;\n    // Strip extension so entryNames produces \"<base>.js\" via esbuild\n    const entryName = path.basename(outFileName, path.extname(outFileName));\n\n    // `singleBundle` and `esmShim` are ours, not esbuild's — it throws on\n    // unknown keys, and the user options are spread into its call verbatim.\n    const singleBundle = this.options.singleBundle === true;\n    const esmShim = this.options.esmShim !== false;\n    // Read before deleting: the merged banner is applied AFTER the user\n    // spread, so a user banner must not be lost to it or clobber the shim.\n    const userBanner = this.options.banner;\n\n    // `outFile` and `entryPath` are REQUIRED on ResolvedBuildConfig on purpose:\n    // resolve-build-config.ts documents that widening them pushed a lie downstream\n    // into start-production.command.ts, which then could not trust its own config.\n    // This is the one place they must be absent - the object is spread into esbuild's\n    // call verbatim and esbuild throws on unknown keys.\n    //\n    // Stripped off a LOCAL COPY of `this.options`, never off `this.options`\n    // itself: `buildContext()` hands `this.options` to every `generate`/`emit`\n    // contribution hook, including the `emit` pass that runs AFTER this method\n    // returns (`build()` step 5.6). Deleting these keys from the shared object\n    // used to leave those hooks reading `undefined` for `outFile`, `entryPath`,\n    // `singleBundle`, `esmShim` and `banner` even though `ConnectorBuildContext`\n    // types them as present. A shallow copy is enough — every field this method\n    // reads off it is either scalar or already re-merged below (`define`,\n    // `external`, `loader`, `banner`), so nothing here needs a deep clone.\n    const esbuildOptions: Partial<ResolvedBuildConfig> = { ...this.options };\n\n    delete esbuildOptions.outFile;\n    delete esbuildOptions.entryPath;\n    delete esbuildOptions.singleBundle;\n    delete esbuildOptions.esmShim;\n    delete esbuildOptions.banner;\n    delete esbuildOptions.routeRegistrationTimeoutMs;\n\n    await ensureDirectoryAsync(writeOutDir);\n\n    const alias = this.buildAliasMapFromTsconfig();\n\n    // Whether this build decides externality per import EDGE\n    // (`bundle-framework-dependencies.ts`, which explains the rule at\n    // length) or keeps the blunt `packages: \"external\"`.\n    //\n    // Not in `singleBundle` mode: that bundles everything by definition, and\n    // a plugin that can only ever ADD an external would silently narrow it.\n    // Not when the user set `packages` themselves: their value has always\n    // won over the default below, and it must keep winning — the plugin is\n    // the default's implementation, not a new policy layered on top.\n    const perEdgeExternals = !singleBundle && (esbuildOptions as any).packages === undefined;\n\n    // The user can override `format`, so gate the shim on the EFFECTIVE\n    // format rather than on the default below. A CJS build already has\n    // `require` and friends; injecting them there would be a redefinition.\n    const isEsm = (esbuildOptions.format ?? \"esm\") === \"esm\";\n    const banner = mergeBanner(userBanner, esmShim && isEsm ? ESM_INTEROP_SHIM : undefined);\n\n    // Contributor patch, split into the part that can ride the spread order\n    // and the three keys that cannot. `jsx` and `jsxImportSource` are placed\n    // BEFORE the user spread below, which gives the ruled precedence for\n    // free: builder defaults < contributor < user config.\n    //\n    // `define`, `external` and `loader` are pulled out because a spread\n    // REPLACES them wholesale — the same trap `banner` documents. Two\n    // contributors' env defines, a contributor's optional peers plus the\n    // user's, or a contributor's `.svg` loader alongside the user's `.png`,\n    // must both survive, so they are merged by key/by set and re-applied\n    // after the spread with the user still winning per key.\n    const {\n      define: contributedDefine,\n      external: contributedExternal,\n      loader: contributedLoader,\n      plugins: contributedPlugins,\n      ...contributedOptions\n    } = this.contributedEsbuild;\n\n    const userDefine: Record<string, string> | undefined = esbuildOptions.define;\n    const userExternal: string[] | undefined = esbuildOptions.external;\n    const userLoader: ConnectorEsbuildPatch[\"loader\"] = esbuildOptions.loader;\n\n    const define =\n      contributedDefine || userDefine ? { ...contributedDefine, ...userDefine } : undefined;\n\n    const loader =\n      contributedLoader || userLoader ? { ...contributedLoader, ...userLoader } : undefined;\n\n    const external =\n      contributedExternal || userExternal\n        ? dedupe([...(contributedExternal ?? []), ...(userExternal ?? [])])\n        : undefined;\n\n    if (singleBundle) {\n      console.log(\n        colors.magenta(\n          \"   Single-bundle mode — one JS file\" +\n            (esmShim && isEsm ? \" with the ESM interop shim\" : \"\") +\n            \". Native .node addons are still emitted alongside it.\",\n        ),\n      );\n    }\n\n    try {\n      await esbuild.build({\n        platform: \"node\",\n        entryPoints: [entryPoint],\n        bundle: true,\n        // Both are DEFAULTS the user can override — they sit before the\n        // `...esbuildOptions` spread deliberately. `singleBundle` moves them,\n        // an explicit `splitting`/`packages` in warlock.config.ts beats both.\n        //\n        // Phase ordering does not depend on `splitting`: it comes from the\n        // generated app.ts using dynamic `await import(...)` (see\n        // generateAppEntry above), which esbuild defers to the call site in\n        // either mode. Splitting only decides one file vs chunks.\n        splitting: !singleBundle,\n        // `\"bundle\"` under `perEdgeExternals` is not \"bundle everything\":\n        // the plugin below returns `external: true` for every bare specifier\n        // this build must not bundle, which is all of them bar the framework's\n        // own declared dependencies. Saying `\"external\"` here instead would\n        // externalise them before the plugin could rule.\n        packages: singleBundle || perEdgeExternals ? \"bundle\" : \"external\",\n        minify: esbuildOptions.minify,\n        sourcemap: esbuildOptions.sourcemap === true ? \"linked\" : esbuildOptions.sourcemap,\n        format: \"esm\",\n        // Targeting a concrete Node version (not \"esnext\") so esbuild\n        // transpiles TC39 stage 3 decorators into helpers — Node does not\n        // implement them natively yet.\n        target: [\"node22\"],\n        entryNames: entryName,\n        alias,\n        plugins: [\n          nativeNodeModulesPlugin,\n          // BEFORE the framework-dependency plugin, and the order is\n          // load-bearing: the first `onResolve` callback to answer wins, and\n          // `app/users/...` is a bare specifier the other one would rule\n          // external.\n          tsconfigPathAliases(this.tsconfigPathAliasConfig()),\n          ...(perEdgeExternals\n            ? [bundleFrameworkDependencies({ appRoot: rootPath(), aliasKeys: Object.keys(alias) })]\n            : []),\n          // Contributor plugins run last: they load their own file types and\n          // must not shadow the resolvers above.\n          ...(contributedPlugins ?? []),\n        ],\n        // Between the defaults and the user spread — the ruled precedence.\n        ...contributedOptions,\n        ...(esbuildOptions as any),\n        // AFTER the spread, and NOT overridable: `esbuildOptions.outdir` rides\n        // that spread carrying the FINAL destination, which is exactly where\n        // this build must not write yet. The final path is the user's setting\n        // and stays authoritative for everyone reading the config — it is only\n        // this one esbuild call that is redirected, and only until promotion\n        // moves the result onto that very path.\n        outdir: writeOutDir,\n        // AFTER the spread for the same reason `banner` is: a spread replaces\n        // these objects instead of merging them, so the merged values are\n        // re-applied here. The user still wins — they were merged in last.\n        ...(define ? { define } : {}),\n        ...(external ? { external } : {}),\n        ...(loader ? { loader } : {}),\n        // AFTER the spread, and intentionally so: `banner` is an object, and\n        // both the config merge and this spread REPLACE it wholesale rather\n        // than merging. Left as a default above, any user banner would delete\n        // the shim; left to the spread, the shim would delete theirs. The\n        // merge is the only form that keeps both.\n        ...(banner ? { banner } : {}),\n      });\n    } catch (e) {\n      console.log(e);\n      throw e;\n    }\n  }\n\n  /**\n   * The WILDCARD half of the same tsconfig `paths` map that\n   * {@link ProductionBuilder.buildAliasMapFromTsconfig} reads the exact half\n   * of. `tsconfig-path-aliases.ts` explains why the two halves need different\n   * mechanisms — in short, esbuild's `alias` option cannot express a wildcard,\n   * so the entries it skips have to be resolved by a plugin instead of being\n   * left to no one.\n   */\n  private tsconfigPathAliasConfig(): { baseUrl: string; paths: Record<string, string[]> } {\n    tsconfigManager.init();\n\n    return {\n      baseUrl: path.resolve(process.cwd(), tsconfigManager.baseUrl),\n      paths: tsconfigManager.aliases as Record<string, string[]>,\n    };\n  }\n\n  /**\n   * Build an alias map from tsconfig `paths` so esbuild resolves local\n   * source aliases (e.g. `@warlock.js/cascade`) to their on-disk source\n   * folders during bundling. Without this, `packages: \"external\"` would\n   * leave those bare specifiers as raw imports and Node would fail to\n   * resolve them at runtime (they aren't installed in node_modules).\n   *\n   * Only exact (non-wildcard) aliases are included — esbuild's `alias`\n   * option doesn't support glob-style mappings. The wildcard half is not\n   * dropped, it is handled elsewhere: see\n   * {@link ProductionBuilder.tsconfigPathAliasConfig}.\n   */\n  private buildAliasMapFromTsconfig(): Record<string, string> {\n    tsconfigManager.init();\n\n    const alias: Record<string, string> = {};\n    const baseUrl = path.resolve(process.cwd(), tsconfigManager.baseUrl);\n\n    for (const [from, to] of Object.entries(tsconfigManager.aliases)) {\n      if (from.endsWith(\"/*\") || !Array.isArray(to) || to.length === 0) {\n        continue;\n      }\n\n      const target = to[0];\n\n      if (target === undefined) {\n        continue;\n      }\n\n      alias[from] = path.resolve(baseUrl, target);\n    }\n\n    return alias;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6DA,MAAM,mBACJ;;;;;;;;;;;;;;AAoBF,SAAS,YACP,YACA,MACoC;CACpC,IAAI,CAAC,MAAM,OAAO;CAElB,MAAM,SAAS,YAAY;CAE3B,OAAO;EACL,GAAG;EACH,IAAI,SAAS,GAAG,OAAO,WAAW;CACpC;AACF;;;;;;;;;;AAWA,MAAM,+BAA+B;;;;;;AAOrC,IAAa,oBAAb,MAA+B;;uBAEI,YAAY,YAAY;oBAOd,CAAC;4BAMQ,CAAC;wBAoO5B;GACvB,SAAS;GACT,QAAQ;GACR,MAAM;GACN,QAAQ;GACR,SAAS;EACX;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAxMA,MAAa,QAAuB;EAClC,QAAQ,IAAI,OAAO,KAAK,8BAA8B,CAAC;EAMvD,4BAA4B;EAG5B,MAAM,KAAK,kBAAkB;EAE7B,MAAM,cAAc,KAAK,QAAQ;EACjC,MAAM,aAAa,oBAAoB,WAAW;EAKlD,IAAI;EAEJ,IAAI;GAEF,MAAM,KAAK,sBAAsB;GAGjC,MAAM,KAAK,mBAAmB;GAG9B,MAAM,KAAK,uBAAuB;GAGlC,MAAM,KAAK,4BAA4B;GAYvC,IAAI,MAXsB,KAAK,yBAAyB,GAYtD,MAAM,KAAK,uBAAuB;GAKpC,MAAM,KAAK,OAAO,UAAU;GAK5B,SAAS,MAAM,eAAe,YAAY,WAAW;GAMrD,MAAM,qBAAqB,KAAK,YAAY,KAAK,aAAa,CAAC;GAM/D,MAAM,4BAA4B,WAAW;GAG7C,MAAM,gBAAgB,MAAM;EAC9B,SAAS,OAAO;GACd,IAAI,QAGF,MAAM,kBAAkB,MAAM;QAI9B,MAAM,qBAAqB,UAAU,CAAC,CAAC,YAAY,MAAS;GAG9D,MAAM;EACR;EAGA,MAAM,qBAAqB,KAAK,aAAa;EAE7C,QAAQ,IAAI,OAAO,MAAM,iBAAiB,CAAC;EAC3C,QAAQ,IAAI,sCAAsC,OAAO,KAAK,eAAe,GAAG;CAClF;;;;CAKA,MAAc,oBAAmC;EAC/C,KAAK,UAAU,mBAAmB;EAGlC,MAAM,aAAa,qBAAqB,IAAI,YAAY,KAAK,CAAC;EAQ9D,2BAA2B,CAAC,GAAG,UAAU,CAAC;EAS1C,+BAA+B,CAAC,GAAG,UAAU,CAAC;EAE9C,KAAK,aAAa;EAGlB,MAAM,qBAAqB,KAAK,aAAa;CAC/C;;;;CAKA,AAAQ,eAAsC;EAC5C,OAAO;GACL,eAAe,KAAK;GACpB,SAAS,SAAS;GAClB,SAAS,KAAK;GACd,gBAAgB,KAAK;EACvB;CACF;;;;;;CAOA,MAAc,8BAA6C;EACzD,IAAI,CAAC,KAAK,WAAW,MAAM,cAAc,UAAU,SAAS,KAAK,GAAG;GAClE,MAAM,qBAAqB,SAAS,CAAC;GACrC;EACF;EAEA,KAAK,kBACH,MAAM,iCAAiC;GACrC,KAAK,SAAS;GACd,WAAW,KAAK,QAAQ;EAC1B,CAAC,EAAC,CACF;CACJ;;;;;;;;;;;;;;;;;;;;;CAsBA,MAAc,2BAA6C;EACzD,MAAM,cAAc,KAAK,WAAW,MAAM,cAAc,QAAQ,UAAU,OAAO,QAAQ,CAAC;EAE1F,MAAM,EAAE,cAAc,YAAY,MAAM,yBACtC,KAAK,YACL,KAAK,aAAa,CACpB;EAEA,KAAK,qBAAqB;EAE1B,IAAI,aAAa,SAAS,GACxB,MAAM,KAAK,mBAAmB,YAAY;EAG5C,OAAO;CACT;;;;CAgBA,MAAc,wBAAuC;EACnD,QAAQ,IAAI,OAAO,OAAO,mCAAmC,CAAC;EAG9D,MAAM,KAAK,kBAAkB;EAG7B,MAAM,KAAK,qBAAqB;EAGhC,MAAM,CAAC,SAAS,QAAQ,MAAM,QAAQ,WAAW,MAAM,QAAQ,IAAI;GACjE,KAAK,gBAAgB;GACrB,KAAK,eAAe;GACpB,KAAK,aAAa;GAClB,KAAK,eAAe;GACpB,KAAK,gBAAgB;EACvB,CAAC;EAED,KAAK,iBAAiB;GAAE;GAAS;GAAQ;GAAM;GAAQ;EAAQ;CACjE;;;;CAKA,MAAc,oBAAmC;EAM/C,MAAM,UAAU,GAJY,MAAM,gBAAgB,QAAQ,cAAc,CAAC,IACrE,0CACA,GAEkC;;;;;;;;;;;EAYtC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,cAAc,GAAG,OAAO;CAC3E;;;;;;;;;;;;;CAcA,MAAc,yBAAwC;EACpD,MAAM,iBAAiB,MAAM,KAAK,wBAAwB;GACxD,KAAK,KAAK;GACV,UAAU;EACZ,CAAC;EAED,MAAM,CAAC,OAAO,cAAc,MAAM,QAAQ,IAAI,CAC5C,QAAQ,IACN,eAAe,IAAI,OAAO,UAAU;GAClC;GACA,SAAS,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,IAAI,CAAC;EACjE,EAAE,CACJ,GACA,iBAA4D,SAAS,cAAc,CAAC,CACtF,CAAC;EAED,kCAAkC,OAAO,OAAO,KAAK,WAAW,gBAAgB,CAAC,CAAC,CAAC;CACrF;;;;;;CAOA,MAAc,WAAW,SAA+D;EAOtF,QAAO,MANa,KAAK,sBAAsB;GAC7C,KAAK,QAAQ;GACb,UAAU;EACZ,CAAC,EAGW,CACT,QAAQ,SAAS,QAAQ,aAAa,IAAI,CAAC,CAAC,CAC5C,KAAK,CAAC,CACN,KAAK,SAAS,mBAAmB,KAAK,QAAQ,eAAe,EAAE,CAAC;CACrE;;;;CAKA,MAAc,uBAAsC;EAClD,MAAM,kBAAkB,KAAK,KAAK,QAAQ,IAAI,GAAG,YAAY;EAQ7D,MAAM,eAAc,MANA,KAAK,iBAAiB;GACxC,KAAK;GACL,UAAU;EACZ,CAAC,EAGwB,CACtB,QAAQ,MAAM,aAAa,gBAAgB,CAAC,CAAC,CAAC,CAC9C,KAAK,OAAO;GACX,MAAM,EAAE,QAAQ,eAAe,EAAE;GACjC,KAAK,kBAAkB,gBAAgB,CAAC;EAC1C,EAAE,CAAC,CACF,QAAQ,UAAkD,MAAM,QAAQ,MAAS,CAAC,CAClF,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;EAM9C,MAAM,UAAoB,CACxB,kGACF;EACA,MAAM,gBAA0B,CAAC;EACjC,MAAM,iBAA2B,CAAC;EAClC,MAAM,cAAwB,CAAC;EAC/B,MAAM,YAAsB,CAAC;EAE7B,YAAY,SAAS,EAAE,MAAM,YAAY,OAAO,UAAU;GAGxD,MAAM,UAAU,SAAS;GACzB,MAAM,OAAO,KAAK,UAAU,GAAG;GAC/B,cAAc,KAAK,eAAe,QAAQ,0BAA0B,WAAW,GAAG;GAClF,eAAe,KAAK,aAAa,KAAK,IAAI,QAAQ,WAAW;GAC7D,YAAY,KAAK,aAAa,KAAK,YAAY,QAAQ,IAAI;GAC3D,UAAU,KAAK,uCAAuC,KAAK,IAAI,QAAQ,WAAW;EACpF,CAAC;EAOD,MAAM,UAAU;GACd,GALuB,MAAM,gBAAgB,QAAQ,aAAa,CAAC,IACjE,CAAC,oCAAoC,IACrC,CAAC;GAIH,GAAG;GACH;GACA;GACA,GAAG;GACH;GACA;GACA,GAAG;GACH;GACA;GACA;GACA,GAAG;GACH;GACA;GACA;GACA,GAAG;GACH;EACF,CAAC,CAAC,KAAK,IAAI;EAEX,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,kBAAkB,GAAG,OAAO;CAC/E;;;;;CAMA,MAAc,kBAAoC;EAChD,MAAM,QAAQ,MAAM,KAAK,WAAW,YAAY;EAChD,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,UAAU,MACb,KAAK,MAAM,UAAU;GACpB,IAAI,CAAC,KAAK,SAAS,OAAO,GAAG,OAAO,WAAW,KAAK;GACpD,MAAM,eAAe,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;GAC1C,OAAO;IACL,oBAAoB,MAAM,SAAS,KAAK;IACxC;IACA,0CAA0C,KAAK,UAAU,IAAI,EAAE,qCAAqC,MAAM,uBAAuB,KAAK,UAAU,YAAY,EAAE;GAChK,CAAC,CAAC,KAAK,IAAI;EACb,CAAC,CAAC,CACD,KAAK,IAAI;EACZ,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,YAAY,GAAG,UAAU,IAAI;EAC9E,OAAO;CACT;;;;;CAMA,MAAc,iBAAmC;EAC/C,MAAM,QAAQ,MAAM,KAAK,WAAW,WAAW;EAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,WAAW;EACjD,OAAO;CACT;;;;;CAMA,MAAc,eAAiC;EAC7C,MAAM,QAAQ,MAAM,KAAK,WAAW,UAAU;EAC9C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,SAAS;EAC/C,OAAO;CACT;;;;;CAMA,MAAc,iBAAmC;EAC/C,MAAM,QAAQ,MAAM,KAAK,WAAW,WAAW;EAC/C,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,WAAW;EACjD,OAAO;CACT;;;;;CAMA,MAAc,kBAAoC;EAChD,MAAM,QAAQ,MAAM,KAAK,WAAW,YAAY;EAChD,IAAI,MAAM,WAAW,GAAG,OAAO;EAC/B,MAAM,KAAK,oBAAoB,OAAO,YAAY;EAClD,OAAO;CACT;;;;CAKA,MAAc,oBAAoB,aAAuB,YAAmC;EAE1F,MAAM,UADU,YAAY,KAAK,eAAe,WAAW,WAAW,GAChD,CAAC,CAAC,KAAK,IAAI,IAAI;EACrC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,UAAU,GAAG,OAAO;CACvE;;;;;;;CAQA,MAAc,mBAAmB,qBAA+B,CAAC,GAAkB;EACjF,QAAQ,IAAI,OAAO,OAAO,8BAA8B,CAAC;EAQzD,MAAM,gBAAgB,KAAK,WACxB,KAAK,cAAc,KAAK,UAAU,UAAU,IAAI,CAAC,CAAC,CAClD,KAAK,IAAI;EAGZ,MAAM,UAAoB;GACxB;GACA;GACA;GACA;GACA;GACA;GAMA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,8BAA8B,6BAA6B;GAC3D,kFAAkF,cAAc;GAChG;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACF;EAaA,QAAQ,KAAK,IAAI,qDAAqD;EAEtE,IAAI,KAAK,eAAe,QACtB,QAAQ,KAAK,6BAA2B;EAE1C,IAAI,KAAK,eAAe,SACtB,QAAQ,KAAK,8BAA4B;EAE3C,IAAI,KAAK,eAAe,MACtB,QAAQ,KAAK,2BAAyB;EAExC,IAAI,KAAK,eAAe,QACtB,QAAQ,KAAK,uCAAqC,iCAA+B,GAAG;EAEtF,IAAI,KAAK,eAAe,SACtB,QAAQ,KAAK,0CAAwC,kCAAgC,GAAG;EAQ1F,QAAQ,KAAK,GAAG,kBAAkB;EAIlC,QAAQ,KACN,IACA,+EACA,2CACF;EAGA,QAAQ,KACN,IACA,mEACA,gEACA,qEACA,IACA,gFACA,mHACA,4CACF;EAEA,MAAM,UAAU,QAAQ,KAAK,IAAI,IAAI;EACrC,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,QAAQ,GAAG,OAAO;CACrE;;;;;;;;;;;CAYA,MAAc,OAAO,aAAoC;EACvD,QAAQ,IAAI,OAAO,QAAQ,6BAA6B,CAAC;EAEzD,MAAM,aAAa,KAAK,KAAK,KAAK,eAAe,QAAQ;EACzD,MAAM,cAAc,KAAK,QAAQ;EAEjC,MAAM,YAAY,KAAK,SAAS,aAAa,KAAK,QAAQ,WAAW,CAAC;EAItE,MAAM,eAAe,KAAK,QAAQ,iBAAiB;EACnD,MAAM,UAAU,KAAK,QAAQ,YAAY;EAGzC,MAAM,aAAa,KAAK,QAAQ;EAiBhC,MAAM,iBAA+C,EAAE,GAAG,KAAK,QAAQ;EAEvE,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EACtB,OAAO,eAAe;EAEtB,MAAM,qBAAqB,WAAW;EAEtC,MAAM,QAAQ,KAAK,0BAA0B;EAW7C,MAAM,mBAAmB,CAAC,gBAAiB,eAAuB,aAAa;EAK/E,MAAM,SAAS,eAAe,UAAU,WAAW;EACnD,MAAM,SAAS,YAAY,YAAY,WAAW,QAAQ,mBAAmB,MAAS;EAatF,MAAM,EACJ,QAAQ,mBACR,UAAU,qBACV,QAAQ,mBACR,SAAS,oBACT,GAAG,uBACD,KAAK;EAET,MAAM,aAAiD,eAAe;EACtE,MAAM,eAAqC,eAAe;EAC1D,MAAM,aAA8C,eAAe;EAEnE,MAAM,SACJ,qBAAqB,aAAa;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;EAE9E,MAAM,SACJ,qBAAqB,aAAa;GAAE,GAAG;GAAmB,GAAG;EAAW,IAAI;EAE9E,MAAM,WACJ,uBAAuB,eACnB,OAAO,CAAC,GAAI,uBAAuB,CAAC,GAAI,GAAI,gBAAgB,CAAC,CAAE,CAAC,IAChE;EAEN,IAAI,cACF,QAAQ,IACN,OAAO,QACL,yCACG,WAAW,QAAQ,+BAA+B,MACnD,uDACJ,CACF;EAGF,IAAI;GACF,MAAM,QAAQ,MAAM;IAClB,UAAU;IACV,aAAa,CAAC,UAAU;IACxB,QAAQ;IASR,WAAW,CAAC;IAMZ,UAAU,gBAAgB,mBAAmB,WAAW;IACxD,QAAQ,eAAe;IACvB,WAAW,eAAe,cAAc,OAAO,WAAW,eAAe;IACzE,QAAQ;IAIR,QAAQ,CAAC,QAAQ;IACjB,YAAY;IACZ;IACA,SAAS;KACP;KAKA,oBAAoB,KAAK,wBAAwB,CAAC;KAClD,GAAI,mBACA,CAAC,4BAA4B;MAAE,SAAS,SAAS;MAAG,WAAW,OAAO,KAAK,KAAK;KAAE,CAAC,CAAC,IACpF,CAAC;KAGL,GAAI,sBAAsB,CAAC;IAC7B;IAEA,GAAG;IACH,GAAI;IAOJ,QAAQ;IAIR,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAC3B,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;IAC/B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAM3B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;GAC7B,CAAC;EACH,SAAS,GAAG;GACV,QAAQ,IAAI,CAAC;GACb,MAAM;EACR;CACF;;;;;;;;;CAUA,AAAQ,0BAAgF;EACtF,gBAAgB,KAAK;EAErB,OAAO;GACL,SAAS,KAAK,QAAQ,QAAQ,IAAI,GAAG,gBAAgB,OAAO;GAC5D,OAAO,gBAAgB;EACzB;CACF;;;;;;;;;;;;;CAcA,AAAQ,4BAAoD;EAC1D,gBAAgB,KAAK;EAErB,MAAM,QAAgC,CAAC;EACvC,MAAM,UAAU,KAAK,QAAQ,QAAQ,IAAI,GAAG,gBAAgB,OAAO;EAEnE,KAAK,MAAM,CAAC,MAAM,OAAO,OAAO,QAAQ,gBAAgB,OAAO,GAAG;GAChE,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,QAAQ,EAAE,KAAK,GAAG,WAAW,GAC7D;GAGF,MAAM,SAAS,GAAG;GAElB,IAAI,WAAW,QACb;GAGF,MAAM,QAAQ,KAAK,QAAQ,SAAS,MAAM;EAC5C;EAEA,OAAO;CACT;AACF"}

package/esm/production/production-supervisor.mjs

@@ -129,5 +129,5 @@ function superviseProductionProcess({ nodeArgs, cwd = process.cwd(), env = proce
 }
 
 //#endregion
-export { superviseProductionProcess };
+export { DEFAULT_READINESS_NOTICE_DELAY_MS, superviseProductionProcess };
 //# sourceMappingURL=production-supervisor.mjs.map

package/esm/production/registration-child-runner.mjs

@@ -95,7 +95,7 @@ function runRegistrationChild(options) {
 	});
 }
 function defaultForkProcess(entry, options) {
-	return fork(entry, [], {
+	const forkOptions = {
 		cwd: options.cwd,
 		stdio: [
 			"ignore",
@@ -104,7 +104,8 @@ function defaultForkProcess(entry, options) {
 			"ipc"
 		],
 		windowsHide: true
-	});
+	};
+	return fork(entry, [], forkOptions);
 }
 /** Resolve from Core's package root, not an assumed bundler-preserved dirname. */
 function resolveCompiledChildEntry() {
@@ -135,5 +136,5 @@ function formatDiagnostics(stdout, stderr) {
 }
 
 //#endregion
-export { runRegistrationChild };
+export { REGISTRATION_ERROR_MESSAGE, REGISTRATION_PROGRESS_MESSAGE, runRegistrationChild };
 //# sourceMappingURL=registration-child-runner.mjs.map

package/esm/production/registration-child-runner.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"registration-child-runner.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/registration-child-runner.ts"],"sourcesContent":["import { fork, type ChildProcess, type Serializable } from \"node:child_process\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\nconst MAX_DIAGNOSTIC_BYTES = 16_384;\n\n/** Message a registration child sends when it fails. Shared by every result kind. */\nexport const REGISTRATION_ERROR_MESSAGE = \"route-registration:error\";\n\n/** Message a registration child sends before it imports each module. Shared by every result kind. */\nexport const REGISTRATION_PROGRESS_MESSAGE = \"route-registration:progress\";\n\nexport type RegistrationChildProcess = Pick<\n  ChildProcess,\n  \"send\" | \"kill\" | \"disconnect\" | \"on\" | \"stdout\" | \"stderr\" | \"connected\"\n>;\n\nexport type RegistrationChildForker = (\n  entry: string,\n  options: { cwd: string },\n) => RegistrationChildProcess;\n\nexport type RegistrationChildRunOptions<TResult> = Readonly<{\n  cwd: string;\n  timeoutMs?: number;\n  childEntry?: string;\n  /**\n   * Test seam. An injected fork is a protocol seam, not an installation check, so the\n   * compiled child is not resolved when it is set.\n   */\n  forkProcess?: RegistrationChildForker;\n  /** The single IPC request the child receives after it starts. */\n  request: Serializable;\n  /** `type` of the one message that carries the result (for example `route-registration:snapshot`). */\n  resultMessageType: string;\n  /** What the result is called in error messages (\"snapshot\", \"document\"). */\n  resultNoun: string;\n  /**\n   * Validate and freeze the result message. Throw to reject the run with that error.\n   */\n  readResult: (message: Record<string, unknown>) => TResult;\n}>;\n\n/**\n * Run the compiled registration child in a fresh process and wait for its result.\n *\n * This is the fork / IPC / timeout / diagnostics plumbing shared by the route snapshot and\n * the OpenAPI document: the child is forked, sent one request, and must answer with exactly\n * one result message (or an error message) and exit 0. The timeout names the module the\n * child was still importing; the last 16 KiB of child stdout/stderr are attached to failures.\n */\nexport function runRegistrationChild<TResult>(\n  options: RegistrationChildRunOptions<TResult>,\n): Promise<TResult> {\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const startedAt = Date.now();\n  const forkProcess = options.forkProcess ?? defaultForkProcess;\n  const entry =\n    options.childEntry ??\n    (options.forkProcess ? \"<injected-route-registration-child>\" : resolveCompiledChildEntry());\n\n  return new Promise<TResult>((resolve, reject) => {\n    const child = forkProcess(entry, { cwd: options.cwd });\n    let settled = false;\n    let received: { value: TResult } | undefined;\n    let stdout = \"\";\n    let stderr = \"\";\n    let pendingModule: string | undefined;\n\n    const append = (current: string, chunk: Buffer) => {\n      const remaining = MAX_DIAGNOSTIC_BYTES - Buffer.byteLength(current);\n\n      return remaining <= 0 ? current : current + chunk.toString(\"utf8\", 0, remaining);\n    };\n\n    const finish = (error?: Error, result?: TResult) => {\n      if (settled) {\n        return;\n      }\n\n      settled = true;\n      clearTimeout(timeout);\n\n      if (child.connected) {\n        child.disconnect?.();\n      }\n\n      if (error) {\n        child.kill?.();\n        reject(error);\n      } else {\n        resolve(result as TResult);\n      }\n    };\n\n    child.stdout?.on(\"data\", (chunk: Buffer) => {\n      stdout = append(stdout, chunk);\n    });\n    child.stderr?.on(\"data\", (chunk: Buffer) => {\n      stderr = append(stderr, chunk);\n    });\n\n    const timeout = setTimeout(() => {\n      const elapsedMs = Date.now() - startedAt;\n\n      finish(\n        new Error(\n          `Route registration child timed out after ${elapsedMs}ms${pendingModule ? ` while registering ${pendingModule}` : \"\"}.${formatDiagnostics(stdout, stderr)}`,\n        ),\n      );\n    }, timeoutMs);\n    timeout.unref?.();\n\n    child.on(\"error\", (error) => {\n      finish(\n        new Error(\n          `Could not start route registration child: ${error.message}${formatDiagnostics(stdout, stderr)}`,\n        ),\n      );\n    });\n\n    child.on(\"message\", (message: unknown) => {\n      if (!isChildMessage(message, options.resultMessageType)) {\n        return;\n      }\n\n      if (message.type === REGISTRATION_ERROR_MESSAGE) {\n        finish(\n          new Error(\n            `Route registration child failed: ${String(message.message)}${formatDiagnostics(stdout, stderr)}`,\n          ),\n        );\n\n        return;\n      }\n\n      if (message.type === REGISTRATION_PROGRESS_MESSAGE) {\n        pendingModule = String(message.module);\n\n        return;\n      }\n\n      try {\n        const result = options.readResult(message);\n\n        if (received) {\n          finish(new Error(`Route registration child sent more than one ${options.resultNoun}.`));\n\n          return;\n        }\n\n        received = { value: result };\n      } catch (error) {\n        finish(error as Error);\n      }\n    });\n\n    child.on(\"close\", (code) => {\n      if (settled) {\n        return;\n      }\n\n      if (code === 0 && received) {\n        finish(undefined, received.value);\n\n        return;\n      }\n\n      finish(\n        new Error(\n          `Route registration child exited ${code ?? \"by signal\"} without a valid ${options.resultNoun}.${formatDiagnostics(stdout, stderr)}`,\n        ),\n      );\n    });\n\n    if (!child.send) {\n      finish(new Error(\"Route registration child did not provide an IPC send channel.\"));\n\n      return;\n    }\n\n    child.send(options.request);\n  });\n}\n\nfunction defaultForkProcess(entry: string, options: { cwd: string }): RegistrationChildProcess {\n  const forkOptions: NonNullable<Parameters<typeof fork>[2]> & { windowsHide?: boolean } = {\n    cwd: options.cwd,\n    stdio: [\"ignore\", \"pipe\", \"pipe\", \"ipc\"],\n    windowsHide: true,\n  };\n\n  return fork(entry, [], forkOptions);\n}\n\n/** Resolve from Core's package root, not an assumed bundler-preserved dirname. */\nfunction resolveCompiledChildEntry(): string {\n  let directory = path.dirname(fileURLToPath(import.meta.url));\n\n  while (directory !== path.dirname(directory)) {\n    const packageJson = path.join(directory, \"package.json\");\n\n    if (existsSync(packageJson)) {\n      try {\n        if (JSON.parse(readFileSync(packageJson, \"utf8\")).name === \"@warlock.js/core\") {\n          const child = path.join(directory, \"esm\", \"production\", \"route-registration-child.mjs\");\n\n          if (existsSync(child)) {\n            return child;\n          }\n\n          throw new Error(\n            `@warlock.js/core is missing its compiled route-registration child at ${child}. Reinstall a complete package.`,\n          );\n        }\n      } catch (error) {\n        if (error instanceof Error && error.message.includes(\"route-registration child\")) {\n          throw error;\n        }\n      }\n    }\n\n    directory = path.dirname(directory);\n  }\n\n  throw new Error(\n    \"Could not locate @warlock.js/core package root for the route-registration child.\",\n  );\n}\n\nfunction isChildMessage(\n  value: unknown,\n  resultMessageType: string,\n): value is Record<string, unknown> & { type: string } {\n  if (typeof value !== \"object\" || value === null || !(\"type\" in value)) {\n    return false;\n  }\n\n  const type = (value as { type?: unknown }).type;\n\n  return (\n    type === resultMessageType ||\n    type === REGISTRATION_ERROR_MESSAGE ||\n    type === REGISTRATION_PROGRESS_MESSAGE\n  );\n}\n\nfunction formatDiagnostics(stdout: string, stderr: string): string {\n  if (!stdout && !stderr) {\n    return \"\";\n  }\n\n  return `\\nChild stdout:\\n${stdout}\\nChild stderr:\\n${stderr}`;\n}\n"],"mappings":";;;;;;AAKA,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;;AAG7B,MAAa,6BAA6B;;AAG1C,MAAa,gCAAgC;;;;;;;;;AAyC7C,SAAgB,qBACd,SACkB;CAClB,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,YAAY,KAAK,IAAI;CAC3B,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,QACJ,QAAQ,eACP,QAAQ,cAAc,wCAAwC,0BAA0B;CAE3F,OAAO,IAAI,SAAkB,SAAS,WAAW;EAC/C,MAAM,QAAQ,YAAY,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC;EACrD,IAAI,UAAU;EACd,IAAI;EACJ,IAAI,SAAS;EACb,IAAI,SAAS;EACb,IAAI;EAEJ,MAAM,UAAU,SAAiB,UAAkB;GACjD,MAAM,YAAY,uBAAuB,OAAO,WAAW,OAAO;GAElE,OAAO,aAAa,IAAI,UAAU,UAAU,MAAM,SAAS,QAAQ,GAAG,SAAS;EACjF;EAEA,MAAM,UAAU,OAAe,WAAqB;GAClD,IAAI,SACF;GAGF,UAAU;GACV,aAAa,OAAO;GAEpB,IAAI,MAAM,WACR,MAAM,aAAa;GAGrB,IAAI,OAAO;IACT,MAAM,OAAO;IACb,OAAO,KAAK;GACd,OACE,QAAQ,MAAiB;EAE7B;EAEA,MAAM,QAAQ,GAAG,SAAS,UAAkB;GAC1C,SAAS,OAAO,QAAQ,KAAK;EAC/B,CAAC;EACD,MAAM,QAAQ,GAAG,SAAS,UAAkB;GAC1C,SAAS,OAAO,QAAQ,KAAK;EAC/B,CAAC;EAED,MAAM,UAAU,iBAAiB;GAC/B,MAAM,YAAY,KAAK,IAAI,IAAI;GAE/B,uBACE,IAAI,MACF,4CAA4C,UAAU,IAAI,gBAAgB,sBAAsB,kBAAkB,GAAG,GAAG,kBAAkB,QAAQ,MAAM,GAC1J,CACF;EACF,GAAG,SAAS;EACZ,QAAQ,QAAQ;EAEhB,MAAM,GAAG,UAAU,UAAU;GAC3B,uBACE,IAAI,MACF,6CAA6C,MAAM,UAAU,kBAAkB,QAAQ,MAAM,GAC/F,CACF;EACF,CAAC;EAED,MAAM,GAAG,YAAY,YAAqB;GACxC,IAAI,CAAC,eAAe,SAAS,QAAQ,iBAAiB,GACpD;GAGF,IAAI,QAAQ,qCAAqC;IAC/C,uBACE,IAAI,MACF,oCAAoC,OAAO,QAAQ,OAAO,IAAI,kBAAkB,QAAQ,MAAM,GAChG,CACF;IAEA;GACF;GAEA,IAAI,QAAQ,wCAAwC;IAClD,gBAAgB,OAAO,QAAQ,MAAM;IAErC;GACF;GAEA,IAAI;IACF,MAAM,SAAS,QAAQ,WAAW,OAAO;IAEzC,IAAI,UAAU;KACZ,uBAAO,IAAI,MAAM,+CAA+C,QAAQ,WAAW,EAAE,CAAC;KAEtF;IACF;IAEA,WAAW,EAAE,OAAO,OAAO;GAC7B,SAAS,OAAO;IACd,OAAO,KAAc;GACvB;EACF,CAAC;EAED,MAAM,GAAG,UAAU,SAAS;GAC1B,IAAI,SACF;GAGF,IAAI,SAAS,KAAK,UAAU;IAC1B,OAAO,QAAW,SAAS,KAAK;IAEhC;GACF;GAEA,uBACE,IAAI,MACF,mCAAmC,QAAQ,YAAY,mBAAmB,QAAQ,WAAW,GAAG,kBAAkB,QAAQ,MAAM,GAClI,CACF;EACF,CAAC;EAED,IAAI,CAAC,MAAM,MAAM;GACf,uBAAO,IAAI,MAAM,+DAA+D,CAAC;GAEjF;EACF;EAEA,MAAM,KAAK,QAAQ,OAAO;CAC5B,CAAC;AACH;AAEA,SAAS,mBAAmB,OAAe,SAAoD;CAO7F,OAAO,KAAK,OAAO,CAAC,GAAG;EALrB,KAAK,QAAQ;EACb,OAAO;GAAC;GAAU;GAAQ;GAAQ;EAAK;EACvC,aAAa;CAGkB,CAAC;AACpC;;AAGA,SAAS,4BAAoC;CAC3C,IAAI,YAAY,KAAK,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC;CAE3D,OAAO,cAAc,KAAK,QAAQ,SAAS,GAAG;EAC5C,MAAM,cAAc,KAAK,KAAK,WAAW,cAAc;EAEvD,IAAI,WAAW,WAAW,GACxB,IAAI;GACF,IAAI,KAAK,MAAM,aAAa,aAAa,MAAM,CAAC,CAAC,CAAC,SAAS,oBAAoB;IAC7E,MAAM,QAAQ,KAAK,KAAK,WAAW,OAAO,cAAc,8BAA8B;IAEtF,IAAI,WAAW,KAAK,GAClB,OAAO;IAGT,MAAM,IAAI,MACR,wEAAwE,MAAM,gCAChF;GACF;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,0BAA0B,GAC7E,MAAM;EAEV;EAGF,YAAY,KAAK,QAAQ,SAAS;CACpC;CAEA,MAAM,IAAI,MACR,kFACF;AACF;AAEA,SAAS,eACP,OACA,mBACqD;CACrD,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,UAAU,QAC7D,OAAO;CAGT,MAAM,OAAQ,MAA6B;CAE3C,OACE,SAAS,qBACT,uCACA;AAEJ;AAEA,SAAS,kBAAkB,QAAgB,QAAwB;CACjE,IAAI,CAAC,UAAU,CAAC,QACd,OAAO;CAGT,OAAO,oBAAoB,OAAO,mBAAmB;AACvD"}
+{"version":3,"file":"registration-child-runner.mjs","names":[],"sources":["../../../../../../../../packages/core/src/production/registration-child-runner.ts"],"sourcesContent":["import { fork, type ChildProcess, type Serializable } from \"node:child_process\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nconst DEFAULT_TIMEOUT_MS = 30_000;\nconst MAX_DIAGNOSTIC_BYTES = 16_384;\n\n/** Message a registration child sends when it fails. Shared by every result kind. */\nexport const REGISTRATION_ERROR_MESSAGE = \"route-registration:error\";\n\n/** Message a registration child sends before it imports each module. Shared by every result kind. */\nexport const REGISTRATION_PROGRESS_MESSAGE = \"route-registration:progress\";\n\nexport type RegistrationChildProcess = Pick<\n  ChildProcess,\n  \"send\" | \"kill\" | \"disconnect\" | \"on\" | \"stdout\" | \"stderr\" | \"connected\"\n>;\n\nexport type RegistrationChildForker = (\n  entry: string,\n  options: { cwd: string },\n) => RegistrationChildProcess;\n\nexport type RegistrationChildRunOptions<TResult> = Readonly<{\n  cwd: string;\n  timeoutMs?: number;\n  childEntry?: string;\n  /**\n   * Test seam. An injected fork is a protocol seam, not an installation check, so the\n   * compiled child is not resolved when it is set.\n   */\n  forkProcess?: RegistrationChildForker;\n  /** The single IPC request the child receives after it starts. */\n  request: Serializable;\n  /** `type` of the one message that carries the result (for example `route-registration:snapshot`). */\n  resultMessageType: string;\n  /** What the result is called in error messages (\"snapshot\", \"document\"). */\n  resultNoun: string;\n  /**\n   * Validate and freeze the result message. Throw to reject the run with that error.\n   */\n  readResult: (message: Record<string, unknown>) => TResult;\n}>;\n\n/**\n * Run the compiled registration child in a fresh process and wait for its result.\n *\n * This is the fork / IPC / timeout / diagnostics plumbing shared by the route snapshot and\n * the OpenAPI document: the child is forked, sent one request, and must answer with exactly\n * one result message (or an error message) and exit 0. The timeout names the module the\n * child was still importing; the last 16 KiB of child stdout/stderr are attached to failures.\n */\nexport function runRegistrationChild<TResult>(\n  options: RegistrationChildRunOptions<TResult>,\n): Promise<TResult> {\n  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n  const startedAt = Date.now();\n  const forkProcess = options.forkProcess ?? defaultForkProcess;\n  const entry =\n    options.childEntry ??\n    (options.forkProcess ? \"<injected-route-registration-child>\" : resolveCompiledChildEntry());\n\n  return new Promise<TResult>((resolve, reject) => {\n    const child = forkProcess(entry, { cwd: options.cwd });\n    let settled = false;\n    let received: { value: TResult } | undefined;\n    let stdout = \"\";\n    let stderr = \"\";\n    let pendingModule: string | undefined;\n\n    const append = (current: string, chunk: Buffer) => {\n      const remaining = MAX_DIAGNOSTIC_BYTES - Buffer.byteLength(current);\n\n      return remaining <= 0 ? current : current + chunk.toString(\"utf8\", 0, remaining);\n    };\n\n    const finish = (error?: Error, result?: TResult) => {\n      if (settled) {\n        return;\n      }\n\n      settled = true;\n      clearTimeout(timeout);\n\n      if (child.connected) {\n        child.disconnect?.();\n      }\n\n      if (error) {\n        child.kill?.();\n        reject(error);\n      } else {\n        resolve(result as TResult);\n      }\n    };\n\n    child.stdout?.on(\"data\", (chunk: Buffer) => {\n      stdout = append(stdout, chunk);\n    });\n    child.stderr?.on(\"data\", (chunk: Buffer) => {\n      stderr = append(stderr, chunk);\n    });\n\n    const timeout = setTimeout(() => {\n      const elapsedMs = Date.now() - startedAt;\n\n      finish(\n        new Error(\n          `Route registration child timed out after ${elapsedMs}ms${pendingModule ? ` while registering ${pendingModule}` : \"\"}.${formatDiagnostics(stdout, stderr)}`,\n        ),\n      );\n    }, timeoutMs);\n    timeout.unref?.();\n\n    child.on(\"error\", (error) => {\n      finish(\n        new Error(\n          `Could not start route registration child: ${error.message}${formatDiagnostics(stdout, stderr)}`,\n        ),\n      );\n    });\n\n    child.on(\"message\", (message: unknown) => {\n      if (!isChildMessage(message, options.resultMessageType)) {\n        return;\n      }\n\n      if (message.type === REGISTRATION_ERROR_MESSAGE) {\n        finish(\n          new Error(\n            `Route registration child failed: ${String(message.message)}${formatDiagnostics(stdout, stderr)}`,\n          ),\n        );\n\n        return;\n      }\n\n      if (message.type === REGISTRATION_PROGRESS_MESSAGE) {\n        pendingModule = String(message.module);\n\n        return;\n      }\n\n      try {\n        const result = options.readResult(message);\n\n        if (received) {\n          finish(new Error(`Route registration child sent more than one ${options.resultNoun}.`));\n\n          return;\n        }\n\n        received = { value: result };\n      } catch (error) {\n        finish(error as Error);\n      }\n    });\n\n    child.on(\"close\", (code) => {\n      if (settled) {\n        return;\n      }\n\n      if (code === 0 && received) {\n        finish(undefined, received.value);\n\n        return;\n      }\n\n      finish(\n        new Error(\n          `Route registration child exited ${code ?? \"by signal\"} without a valid ${options.resultNoun}.${formatDiagnostics(stdout, stderr)}`,\n        ),\n      );\n    });\n\n    if (!child.send) {\n      finish(new Error(\"Route registration child did not provide an IPC send channel.\"));\n\n      return;\n    }\n\n    child.send(options.request);\n  });\n}\n\nfunction defaultForkProcess(entry: string, options: { cwd: string }): RegistrationChildProcess {\n  const forkOptions: NonNullable<Parameters<typeof fork>[2]> & { windowsHide?: boolean } = {\n    cwd: options.cwd,\n    stdio: [\"ignore\", \"pipe\", \"pipe\", \"ipc\"],\n    windowsHide: true,\n  };\n\n  return fork(entry, [], forkOptions);\n}\n\n/** Resolve from Core's package root, not an assumed bundler-preserved dirname. */\nfunction resolveCompiledChildEntry(): string {\n  let directory = path.dirname(fileURLToPath(import.meta.url));\n\n  while (directory !== path.dirname(directory)) {\n    const packageJson = path.join(directory, \"package.json\");\n\n    if (existsSync(packageJson)) {\n      try {\n        if (JSON.parse(readFileSync(packageJson, \"utf8\")).name === \"@warlock.js/core\") {\n          const child = path.join(directory, \"esm\", \"production\", \"route-registration-child.mjs\");\n\n          if (existsSync(child)) {\n            return child;\n          }\n\n          throw new Error(\n            `@warlock.js/core is missing its compiled route-registration child at ${child}. Reinstall a complete package.`,\n          );\n        }\n      } catch (error) {\n        if (error instanceof Error && error.message.includes(\"route-registration child\")) {\n          throw error;\n        }\n      }\n    }\n\n    directory = path.dirname(directory);\n  }\n\n  throw new Error(\n    \"Could not locate @warlock.js/core package root for the route-registration child.\",\n  );\n}\n\nfunction isChildMessage(\n  value: unknown,\n  resultMessageType: string,\n): value is Record<string, unknown> & { type: string } {\n  if (typeof value !== \"object\" || value === null || !(\"type\" in value)) {\n    return false;\n  }\n\n  const type = (value as { type?: unknown }).type;\n\n  return (\n    type === resultMessageType ||\n    type === REGISTRATION_ERROR_MESSAGE ||\n    type === REGISTRATION_PROGRESS_MESSAGE\n  );\n}\n\nfunction formatDiagnostics(stdout: string, stderr: string): string {\n  if (!stdout && !stderr) {\n    return \"\";\n  }\n\n  return `\\nChild stdout:\\n${stdout}\\nChild stderr:\\n${stderr}`;\n}\n"],"mappings":";;;;;;AAKA,MAAM,qBAAqB;AAC3B,MAAM,uBAAuB;;AAG7B,MAAa,6BAA6B;;AAG1C,MAAa,gCAAgC;;;;;;;;;AAyC7C,SAAgB,qBACd,SACkB;CAClB,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,YAAY,KAAK,IAAI;CAC3B,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,QACJ,QAAQ,eACP,QAAQ,cAAc,wCAAwC,0BAA0B;CAE3F,OAAO,IAAI,SAAkB,SAAS,WAAW;EAC/C,MAAM,QAAQ,YAAY,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC;EACrD,IAAI,UAAU;EACd,IAAI;EACJ,IAAI,SAAS;EACb,IAAI,SAAS;EACb,IAAI;EAEJ,MAAM,UAAU,SAAiB,UAAkB;GACjD,MAAM,YAAY,uBAAuB,OAAO,WAAW,OAAO;GAElE,OAAO,aAAa,IAAI,UAAU,UAAU,MAAM,SAAS,QAAQ,GAAG,SAAS;EACjF;EAEA,MAAM,UAAU,OAAe,WAAqB;GAClD,IAAI,SACF;GAGF,UAAU;GACV,aAAa,OAAO;GAEpB,IAAI,MAAM,WACR,MAAM,aAAa;GAGrB,IAAI,OAAO;IACT,MAAM,OAAO;IACb,OAAO,KAAK;GACd,OACE,QAAQ,MAAiB;EAE7B;EAEA,MAAM,QAAQ,GAAG,SAAS,UAAkB;GAC1C,SAAS,OAAO,QAAQ,KAAK;EAC/B,CAAC;EACD,MAAM,QAAQ,GAAG,SAAS,UAAkB;GAC1C,SAAS,OAAO,QAAQ,KAAK;EAC/B,CAAC;EAED,MAAM,UAAU,iBAAiB;GAC/B,MAAM,YAAY,KAAK,IAAI,IAAI;GAE/B,uBACE,IAAI,MACF,4CAA4C,UAAU,IAAI,gBAAgB,sBAAsB,kBAAkB,GAAG,GAAG,kBAAkB,QAAQ,MAAM,GAC1J,CACF;EACF,GAAG,SAAS;EACZ,QAAQ,QAAQ;EAEhB,MAAM,GAAG,UAAU,UAAU;GAC3B,uBACE,IAAI,MACF,6CAA6C,MAAM,UAAU,kBAAkB,QAAQ,MAAM,GAC/F,CACF;EACF,CAAC;EAED,MAAM,GAAG,YAAY,YAAqB;GACxC,IAAI,CAAC,eAAe,SAAS,QAAQ,iBAAiB,GACpD;GAGF,IAAI,QAAQ,qCAAqC;IAC/C,uBACE,IAAI,MACF,oCAAoC,OAAO,QAAQ,OAAO,IAAI,kBAAkB,QAAQ,MAAM,GAChG,CACF;IAEA;GACF;GAEA,IAAI,QAAQ,wCAAwC;IAClD,gBAAgB,OAAO,QAAQ,MAAM;IAErC;GACF;GAEA,IAAI;IACF,MAAM,SAAS,QAAQ,WAAW,OAAO;IAEzC,IAAI,UAAU;KACZ,uBAAO,IAAI,MAAM,+CAA+C,QAAQ,WAAW,EAAE,CAAC;KAEtF;IACF;IAEA,WAAW,EAAE,OAAO,OAAO;GAC7B,SAAS,OAAO;IACd,OAAO,KAAc;GACvB;EACF,CAAC;EAED,MAAM,GAAG,UAAU,SAAS;GAC1B,IAAI,SACF;GAGF,IAAI,SAAS,KAAK,UAAU;IAC1B,OAAO,QAAW,SAAS,KAAK;IAEhC;GACF;GAEA,uBACE,IAAI,MACF,mCAAmC,QAAQ,YAAY,mBAAmB,QAAQ,WAAW,GAAG,kBAAkB,QAAQ,MAAM,GAClI,CACF;EACF,CAAC;EAED,IAAI,CAAC,MAAM,MAAM;GACf,uBAAO,IAAI,MAAM,+DAA+D,CAAC;GAEjF;EACF;EAEA,MAAM,KAAK,QAAQ,OAAO;CAC5B,CAAC;AACH;AAEA,SAAS,mBAAmB,OAAe,SAAoD;CAC7F,MAAM,cAAmF;EACvF,KAAK,QAAQ;EACb,OAAO;GAAC;GAAU;GAAQ;GAAQ;EAAK;EACvC,aAAa;CACf;CAEA,OAAO,KAAK,OAAO,CAAC,GAAG,WAAW;AACpC;;AAGA,SAAS,4BAAoC;CAC3C,IAAI,YAAY,KAAK,QAAQ,cAAc,YAAY,GAAG,CAAC;CAE3D,OAAO,cAAc,KAAK,QAAQ,SAAS,GAAG;EAC5C,MAAM,cAAc,KAAK,KAAK,WAAW,cAAc;EAEvD,IAAI,WAAW,WAAW,GACxB,IAAI;GACF,IAAI,KAAK,MAAM,aAAa,aAAa,MAAM,CAAC,CAAC,CAAC,SAAS,oBAAoB;IAC7E,MAAM,QAAQ,KAAK,KAAK,WAAW,OAAO,cAAc,8BAA8B;IAEtF,IAAI,WAAW,KAAK,GAClB,OAAO;IAGT,MAAM,IAAI,MACR,wEAAwE,MAAM,gCAChF;GACF;EACF,SAAS,OAAO;GACd,IAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,0BAA0B,GAC7E,MAAM;EAEV;EAGF,YAAY,KAAK,QAAQ,SAAS;CACpC;CAEA,MAAM,IAAI,MACR,kFACF;AACF;AAEA,SAAS,eACP,OACA,mBACqD;CACrD,IAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,EAAE,UAAU,QAC7D,OAAO;CAGT,MAAM,OAAQ,MAA6B;CAE3C,OACE,SAAS,qBACT,uCACA;AAEJ;AAEA,SAAS,kBAAkB,QAAgB,QAAwB;CACjE,IAAI,CAAC,UAAU,CAAC,QACd,OAAO;CAGT,OAAO,oBAAoB,OAAO,mBAAmB;AACvD"}

package/esm/production/resolve-build-config.d.mts

@@ -1,5 +1,4 @@
 import { WarlockConfig } from "../warlock-config/types.mjs";
-
 //#region ../../packages/core/src/production/resolve-build-config.d.ts
 /**
  * Keys the builder deletes before handing the options to esbuild — ours
@@ -17,9 +16,10 @@ import { WarlockConfig } from "../warlock-config/types.mjs";
  * `start-production.command.ts`, which then could not trust its own config.
  */
 type BuilderStrippedKeys = "singleBundle" | "esmShim" | "banner" | "routeRegistrationTimeoutMs";
-type ResolvedBuildConfig = Required<Omit<NonNullable<WarlockConfig["build"]>, "outDirectory" | BuilderStrippedKeys>> & Partial<Pick<NonNullable<WarlockConfig["build"]>, BuilderStrippedKeys>> & {
-  /** Absolute path to the bundled entry file (`{outdir}/{outFile}`) */entryPath: string;
+export type ResolvedBuildConfig = Required<Omit<NonNullable<WarlockConfig["build"]>, "outDirectory" | BuilderStrippedKeys>> & Partial<Pick<NonNullable<WarlockConfig["build"]>, BuilderStrippedKeys>> & {
+  /** Absolute path to the bundled entry file (`{outdir}/{outFile}`) */
+  entryPath: string;
 };
 //#endregion
-export { ResolvedBuildConfig };
+export {};
 //# sourceMappingURL=resolve-build-config.d.mts.map

package/esm/production/resolve-build-config.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-build-config.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/production/resolve-build-config.ts"],"mappings":";;;;;AAG6D;;;;AAkBrC;AAExB;;;;;;;;KAFK,mBAAA;AAAA,KAEO,mBAAA,GAAsB,QAAA,CAChC,IAAA,CAAK,WAAA,CAAY,aAAA,6BAA0C,mBAAA,KAE3D,OAAA,CAAQ,IAAA,CAAK,WAAA,CAAY,aAAA,YAAyB,mBAAA;EAAA,qEAEhD,SAAA;AAAA"}
+{"version":3,"file":"resolve-build-config.d.mts","names":[],"sources":["../../../../../../../../packages/core/src/production/resolve-build-config.ts"],"mappings":";;;;;;;;;;;;;;;;;KAqBK;YAEO,sBAAsB,SAChC,KAAK,YAAY,0CAA0C,wBAE3D,QAAQ,KAAK,YAAY,yBAAyB;;EAEhD"}

package/esm/production/resolve-build-config.mjs

@@ -83,5 +83,5 @@ function resolveRouteRegistrationTimeoutMs(configured) {
 }
 
 //#endregion
-export { resolveBuildConfig };
+export { ForbiddenBuildOptionError, resolveBuildConfig };
 //# sourceMappingURL=resolve-build-config.mjs.map

package/esm/production/route-registration-child.d.mts

@@ -1 +1 @@
-export { };
+export {}