@warlock.js/devtools 5.27.0 → 5.29.0

package/CHANGELOG.md

@@ -4,6 +4,20 @@ All notable changes to `@warlock.js/devtools` are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). `@warlock.js/*` packages are released in lockstep — every package shares the same version number, so a version below may list only the changes that affected this package.
 
+## 5.29.0 - 2026-10-01
+
+### Changed
+
+- Lockstep release; package APIs are unchanged.
+
+## 5.28.0 - 2026-10-01
+
+### Added
+
+- **Swagger UI.** `/__warlock/docs/swagger` renders the same OpenAPI document with [Swagger UI](https://github.com/swagger-api/swagger-ui) (Apache-2.0), and the dashboard's **API** tab has a **Scalar | Swagger UI** switch (Scalar stays the default; the choice is remembered in the browser). The prebuilt `swagger-ui-dist` 5.33.0 bundle and stylesheet are vendored in `ui/vendor/swagger-ui/` with their license and notice and served as `assets/swagger-ui-bundle.js` and `assets/swagger-ui.css`, so apps install no extra dependencies. The schema validator badge is off, so the page makes no outside request.
+- **Downloads in the API tab.** `OpenAPI JSON` (`/__warlock/api/openapi.json`) and `Postman collection` links.
+- **`GET /__warlock/api/postman.json`** returns the Postman collection for the registered routes, built by core's `getDevelopmentPostmanCollection()`. It answers 503 when the host's core cannot build one, with the same dev-only, loopback-only guard.
+
 ## 5.27.0 - 2026-10-01
 
 ### Added

package/cjs/index.cjs

@@ -633,14 +633,16 @@ function devtoolsConnector(options = {}) {
 			await attachSource(log, "cache", () => attachCacheSource(collector));
 			await attachSource(log, "mail", () => attachMailSource(collector));
 			await attachSource(log, "log", () => attachLogSource(collector));
-			const { mountDevtoolsRoutes } = await Promise.resolve().then(() => require("./server-CwK7n3-3.cjs"));
+			const { mountDevtoolsRoutes } = await Promise.resolve().then(() => require("./server-6mVWfWkG.cjs"));
+			const postmanBuilder = await findPostmanBuilder();
 			mountDevtoolsRoutes(getHttpServer(), {
 				collector,
 				options: resolved,
 				isDevelopment: () => Application.runtimeStrategy === "development",
 				explain: (query) => explainQuery(query),
 				listRoutes: () => listRoutes(),
-				getOpenApiDocument: () => getOpenApiDocument()
+				getOpenApiDocument: () => getOpenApiDocument(),
+				getPostmanCollection: postmanBuilder ? async () => unwrapCollection(await postmanBuilder()) : void 0
 			});
 			disposers.push(collector.subscribe((event) => {
 				if (event.type !== "request" || event.data.warningCount === 0) return;
@@ -699,6 +701,28 @@ async function getOpenApiDocument() {
 	const { document } = await getDevelopmentOpenApiDocument();
 	return document;
 }
+/**
+* Looks up core's Postman collection builder, `getDevelopmentPostmanCollection`.
+* Older cores do not export it; the route then answers 503. The lookup is
+* guarded because a namespace without the export may throw on access. Core is
+* imported lazily, like the OpenAPI document above.
+*/
+async function findPostmanBuilder() {
+	try {
+		const build = (await import("@warlock.js/core")).getDevelopmentPostmanCollection;
+		return typeof build === "function" ? build : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* Core may return the collection itself or wrap it in `{ collection, warnings }`,
+* like the OpenAPI generator's `{ document, warnings }`.
+*/
+function unwrapCollection(result) {
+	if (result && typeof result === "object" && "collection" in result) return result.collection;
+	return result;
+}
 
 //#endregion
 exports.devtoolsConnector = devtoolsConnector;

package/cjs/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["requestContext","LogChannel","log"],"sources":["../../../../../../devtools/src/n-plus-one.ts","../../../../../../devtools/src/query-shape.ts","../../../../../../devtools/src/collector.ts","../../../../../../devtools/src/options.ts","../../../../../../devtools/src/current-request-id.ts","../../../../../../devtools/src/sources/cache-source.ts","../../../../../../devtools/src/safe-value.ts","../../../../../../devtools/src/sources/log-source.ts","../../../../../../devtools/src/sources/mail-source.ts","../../../../../../devtools/src/caller-location.ts","../../../../../../devtools/src/sources/query-source.ts","../../../../../../devtools/src/sources/tracing-source.ts","../../../../../../devtools/src/devtools-connector.ts"],"sourcesContent":["import type { DevtoolsCallerLocation, DevtoolsQuery, DevtoolsWarning } from \"./types\";\n\n/** Finds repeated query shapes whose occurrence count reaches the supplied threshold. */\nexport function detectNPlusOne(queries: DevtoolsQuery[], threshold: number): DevtoolsWarning[] {\n  const groups = new Map<string, DevtoolsQuery[]>();\n  for (const query of queries) groups.set(query.shape, [...(groups.get(query.shape) ?? []), query]);\n\n  return [...groups.entries()]\n    .filter(([, grouped]) => grouped.length >= threshold)\n    .sort(([, left], [, right]) => right.length - left.length)\n    .map(([shape, grouped]) => ({\n      type: \"n+1\" as const,\n      shape,\n      count: grouped.length,\n      message: `N+1: ${grouped.length}× \"${truncate(shape, 120)}\"`,\n      ...(mostFrequentCaller(grouped) ? { caller: mostFrequentCaller(grouped) } : {}),\n    }));\n}\n\nfunction truncate(value: string, maximum: number): string {\n  return value.length > maximum ? `${value.slice(0, maximum - 1)}…` : value;\n}\n\nfunction mostFrequentCaller(queries: DevtoolsQuery[]): DevtoolsCallerLocation | undefined {\n  const callers = new Map<string, { caller: DevtoolsCallerLocation; count: number }>();\n  for (const query of queries) {\n    if (!query.caller) continue;\n    const key = `${query.caller.file}:${query.caller.line}`;\n    const found = callers.get(key);\n    callers.set(\n      key,\n      found ? { ...found, count: found.count + 1 } : { caller: query.caller, count: 1 },\n    );\n  }\n  return [...callers.values()].sort((left, right) => right.count - left.count)[0]?.caller;\n}\n","import type { DevtoolsQuery } from \"./types\";\n\ntype QueryShapeInput = Pick<\n  DevtoolsQuery,\n  \"driver\" | \"sql\" | \"collection\" | \"command\" | \"pipeline\"\n>;\n\nconst numericLiteral = /(?<![\\w$])[-+]?(?:\\d+(?:\\.\\d+)?|\\.\\d+)(?![\\w$])/g;\nconst quotedLiteral = /'(?:''|[^'])*'/g;\n\n/** Returns a binding-independent shape for a database query. */\nexport function queryShape(query: QueryShapeInput): string {\n  if (query.driver === \"postgres\") {\n    return (query.sql ?? \"\")\n      .replace(quotedLiteral, \"?\")\n      .replace(numericLiteral, \"?\")\n      .replace(/\\s+/g, \" \")\n      .trim();\n  }\n\n  return `${query.collection ?? \"\"}.${query.command ?? \"\"} ${JSON.stringify(normalizeMongoValue(query.pipeline))}`;\n}\n\nfunction normalizeMongoValue(value: unknown): unknown {\n  if (isMongoLeaf(value)) return \"?\";\n\n  if (Array.isArray(value)) {\n    if (value.every(isMongoLeaf)) return [\"?\"];\n    return value.map(normalizeMongoValue);\n  }\n\n  const record = value as Record<string, unknown>;\n  return Object.fromEntries(\n    Object.keys(record).map((key) => [key, normalizeMongoValue(record[key])]),\n  );\n}\n\nfunction isMongoLeaf(value: unknown): boolean {\n  if (value === null || typeof value !== \"object\") return true;\n  if (value instanceof Date) return true;\n  const record = value as Record<string, unknown>;\n  return typeof record.toHexString === \"function\" || typeof record.$oid === \"string\";\n}\n","import type {\n  DevtoolsBackground,\n  DevtoolsCacheOperation,\n  DevtoolsCollector,\n  DevtoolsDisposer,\n  DevtoolsLogEntry,\n  DevtoolsMail,\n  DevtoolsMailSummary,\n  DevtoolsPhase,\n  DevtoolsQuery,\n  DevtoolsRequest,\n  DevtoolsRequestSummary,\n  DevtoolsStreamEvent,\n  ResolvedDevtoolsOptions,\n} from \"./types\";\nimport { detectNPlusOne } from \"./n-plus-one\";\nimport { queryShape } from \"./query-shape\";\n\nconst mailLimit = 100;\nconst logLimit = 1000;\nconst backgroundLimit = 500;\n\n/**\n * Creates the in-memory devtools store.\n *\n * Read methods return shallow structural copies, including copied arrays, so consumers\n * cannot mutate collector-owned arrays. The individual nested entries are retained.\n */\nexport function createCollector(options: ResolvedDevtoolsOptions): DevtoolsCollector {\n  const requests = new Map<string, DevtoolsRequest>();\n  const mails = new Map<string, DevtoolsMail>();\n  const logs: DevtoolsLogEntry[] = [];\n  const background: DevtoolsBackground = { queries: [], cache: [], logs: [] };\n  const listeners = new Set<(event: DevtoolsStreamEvent) => void>();\n  let querySequence = 0;\n\n  const emit = (event: DevtoolsStreamEvent) => {\n    for (const listener of listeners) {\n      try {\n        listener(event);\n      } catch {\n        /* Subscribers must not affect collection. */\n      }\n    }\n  };\n\n  const addBackground = <T>(list: T[], value: T) => {\n    list.push(value);\n    if (list.length > backgroundLimit) list.shift();\n  };\n\n  return {\n    startRequest(request) {\n      requests.delete(request.id);\n      requests.set(request.id, {\n        ...request,\n        phases: [],\n        queries: [],\n        cache: [],\n        logs: [],\n        mails: [],\n        warnings: [],\n      });\n      while (requests.size > options.maxRequests)\n        requests.delete(requests.keys().next().value as string);\n    },\n    endRequest(id, result) {\n      const request = requests.get(id);\n      if (!request) return;\n      request.status = result.status;\n      request.durationMs = result.durationMs;\n      request.error = result.error;\n      if (result.route !== undefined) request.route = result.route;\n      request.warnings = detectNPlusOne(request.queries, options.nPlusOneThreshold);\n      emit({ type: \"request\", data: summary(request) });\n    },\n    addPhase(requestId, phase) {\n      requests.get(requestId)?.phases.push(phase);\n    },\n    addQuery(requestId, query) {\n      const stored: DevtoolsQuery = {\n        ...query,\n        id: `q${++querySequence}`,\n        shape: queryShape(query),\n      };\n      const request = requestId ? requests.get(requestId) : undefined;\n      if (request) request.queries.push(stored);\n      else addBackground(background.queries, stored);\n      return stored;\n    },\n    addCacheOperation(requestId, operation) {\n      const request = requestId ? requests.get(requestId) : undefined;\n      if (request) request.cache.push(operation);\n      else addBackground(background.cache, operation);\n    },\n    addLog(requestId, entry) {\n      const request = requestId ? requests.get(requestId) : undefined;\n      if (request) request.logs.push(entry);\n      else addBackground(background.logs, entry);\n      logs.unshift(entry);\n      if (logs.length > logLimit) logs.pop();\n      emit({ type: \"log\", data: entry });\n    },\n    addMail(mail) {\n      mails.delete(mail.id);\n      mails.set(mail.id, mail);\n      while (mails.size > mailLimit) mails.delete(mails.keys().next().value as string);\n      if (mail.requestId) requests.get(mail.requestId)?.mails.push(mail.id);\n      emit({ type: \"mail\", data: mailSummary(mail) });\n    },\n    listRequests() {\n      return [...requests.values()].reverse().map(summary);\n    },\n    getRequest(id) {\n      const request = requests.get(id);\n      return request && copyRequest(request);\n    },\n    listMails() {\n      return [...mails.values()].reverse().map(mailSummary);\n    },\n    getMail(id) {\n      const mail = mails.get(id);\n      return (\n        mail && {\n          ...mail,\n          to: [...mail.to],\n          cc: [...mail.cc],\n          bcc: [...mail.bcc],\n          headers: { ...mail.headers },\n          attachments: [...mail.attachments],\n        }\n      );\n    },\n    listLogs(filter = {}) {\n      const module = filter.module?.toLowerCase();\n      return logs\n        .filter(\n          (entry) =>\n            (!filter.level || entry.level === filter.level) &&\n            (!module || entry.module.toLowerCase().includes(module)),\n        )\n        .map((entry) => ({ ...entry }));\n    },\n    getBackground() {\n      return {\n        queries: [...background.queries],\n        cache: [...background.cache],\n        logs: [...background.logs],\n      };\n    },\n    subscribe(listener): DevtoolsDisposer {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n    clear() {\n      requests.clear();\n      mails.clear();\n      logs.length = 0;\n      background.queries.length = 0;\n      background.cache.length = 0;\n      background.logs.length = 0;\n    },\n  };\n}\n\nfunction summary(request: DevtoolsRequest): DevtoolsRequestSummary {\n  const { id, method, path, route, status, startedAt, durationMs } = request;\n  return {\n    id,\n    method,\n    path,\n    route,\n    status,\n    startedAt,\n    durationMs,\n    queryCount: request.queries.length,\n    warningCount: request.warnings.length,\n  };\n}\n\nfunction mailSummary(mail: DevtoolsMail): DevtoolsMailSummary {\n  const { id, requestId, capturedAt, to, subject } = mail;\n  return { id, requestId, capturedAt, to: [...to], subject };\n}\n\nfunction copyRequest(request: DevtoolsRequest): DevtoolsRequest {\n  return {\n    ...request,\n    phases: [...request.phases],\n    queries: [...request.queries],\n    cache: [...request.cache],\n    logs: [...request.logs],\n    mails: [...request.mails],\n    warnings: [...request.warnings],\n  };\n}\n","import type { DevtoolsOptions, ResolvedDevtoolsOptions } from \"./types\";\n\n/** Resolves dashboard options and rejects invalid capacity or URL-prefix values. */\nexport function resolveDevtoolsOptions(options: DevtoolsOptions = {}): ResolvedDevtoolsOptions {\n  const path = (options.path ?? \"/__warlock\").replace(/\\/+$/, \"\");\n  const maxRequests = options.maxRequests ?? 200;\n  const nPlusOneThreshold = options.nPlusOneThreshold ?? 5;\n\n  if (!path || !path.startsWith(\"/\")) {\n    throw new Error('Devtools option \"path\" must be a non-root path starting with \"/\".');\n  }\n\n  if (maxRequests < 1) {\n    throw new Error('Devtools option \"maxRequests\" must be at least 1.');\n  }\n\n  if (nPlusOneThreshold < 2) {\n    throw new Error('Devtools option \"nPlusOneThreshold\" must be at least 2.');\n  }\n\n  return { path, maxRequests, nPlusOneThreshold };\n}\n","import { requestContext } from \"@warlock.js/core\";\n\n/**\n * The current request's id (core's `request.id`, threaded through\n * `AsyncLocalStorage`), or `undefined` outside a request — sources feed\n * devtools' background bucket in that case.\n *\n * Only ever reached through `./sources/*`, which the connector imports\n * dynamically inside `boot()` — by then core is already running, so this\n * static import never drags core's runtime graph into config-load time (see\n * `devtools-connector.ts`).\n */\nexport function currentRequestId(): string | undefined {\n  try {\n    return requestContext.getRequest()?.id;\n  } catch {\n    return undefined;\n  }\n}\n","import { currentRequestId } from \"../current-request-id\";\nimport type { DevtoolsCacheOperation, DevtoolsCollector, DevtoolsDisposer } from \"../types\";\n\n/** Cache events the dashboard's waterfall and background bucket care about. */\nconst EVENT_TYPES = [\"hit\", \"miss\", \"set\", \"removed\", \"invalidated\", \"flushed\"] as const;\n\n/** The shape `cache.on(event, handler)` hands the handler. */\ntype CacheEventData = {\n  key?: string;\n  driver: string;\n  tags?: string[];\n  keys?: string[];\n  durationMs?: number;\n};\n\n/**\n * Feeds cache hits, misses and mutations, from `@warlock.js/cache`, into the\n * collector. A no-op when `@warlock.js/cache` isn't installed — it is an\n * optional peer.\n */\nexport async function attachCacheSource(collector: DevtoolsCollector): Promise<DevtoolsDisposer> {\n  let cache: {\n    on(event: (typeof EVENT_TYPES)[number], handler: (data: CacheEventData) => void): unknown;\n    off(event: (typeof EVENT_TYPES)[number], handler: (data: CacheEventData) => void): unknown;\n  };\n\n  try {\n    ({ cache } = await import(\"@warlock.js/cache\"));\n  } catch {\n    return () => {};\n  }\n\n  const handlers = EVENT_TYPES.map((type) => {\n    const handler = (data: CacheEventData) => {\n      const operation: DevtoolsCacheOperation = {\n        type,\n        driver: data.driver,\n        key: data.key,\n        tags: data.tags,\n        keys: data.keys,\n        at: Date.now(),\n        durationMs: data.durationMs,\n      };\n\n      collector.addCacheOperation(currentRequestId(), operation);\n    };\n\n    cache.on(type, handler);\n\n    return { type, handler };\n  });\n\n  return () => {\n    for (const { type, handler } of handlers) cache.off(type, handler);\n  };\n}\n","const MAX_DEPTH = 6;\n\n/**\n * A JSON-safe snapshot of a value devtools keeps for later display.\n *\n * Log contexts and phase attributes are app data: they can hold live objects\n * (a request, its socket) whose graphs are circular and which must not be kept\n * alive by the collector anyway. Plain objects and arrays are copied; anything\n * with a `toJSON()` is serialized through it; other class instances collapse\n * to `[ClassName]`, cycles to `[Circular]`, and nesting past a fixed depth to\n * `[Object]` / `[Array]`.\n */\nexport function toSafeValue(value: unknown): unknown {\n  return snapshot(value, 0, new WeakSet());\n}\n\nfunction snapshot(value: unknown, depth: number, seen: WeakSet<object>): unknown {\n  if (value === null || value === undefined) return value;\n\n  switch (typeof value) {\n    case \"string\":\n    case \"number\":\n    case \"boolean\":\n      return value;\n    case \"bigint\":\n      return value.toString();\n    case \"symbol\":\n      return value.toString();\n    case \"function\":\n      return undefined;\n  }\n\n  const object = value as object;\n\n  if (seen.has(object)) return \"[Circular]\";\n  if (value instanceof Date) return Number.isNaN(value.getTime()) ? \"Invalid Date\" : value.toISOString();\n  if (value instanceof Error) return { name: value.name, message: value.message };\n\n  if (depth >= MAX_DEPTH) return Array.isArray(value) ? \"[Array]\" : \"[Object]\";\n\n  seen.add(object);\n\n  try {\n    if (Array.isArray(value)) return value.map((item) => snapshot(item, depth + 1, seen));\n\n    const prototype = Object.getPrototypeOf(object);\n\n    if (prototype !== Object.prototype && prototype !== null) {\n      const toJSON = (object as { toJSON?: unknown }).toJSON;\n\n      if (typeof toJSON === \"function\") {\n        try {\n          return snapshot(toJSON.call(object), depth + 1, seen);\n        } catch {\n          return `[${constructorName(object)}]`;\n        }\n      }\n\n      return `[${constructorName(object)}]`;\n    }\n\n    const copy: Record<string, unknown> = {};\n\n    for (const [key, entry] of Object.entries(object)) {\n      const safe = snapshot(entry, depth + 1, seen);\n      if (safe !== undefined) copy[key] = safe;\n    }\n\n    return copy;\n  } finally {\n    seen.delete(object);\n  }\n}\n\nfunction constructorName(object: object): string {\n  return (object as { constructor?: { name?: string } }).constructor?.name || \"Object\";\n}\n","import { LogChannel, log, type LoggingData } from \"@warlock.js/logger\";\nimport { currentRequestId } from \"../current-request-id\";\nimport { toSafeValue } from \"../safe-value\";\nimport type { DevtoolsCollector, DevtoolsDisposer, DevtoolsLogEntry } from \"../types\";\n\n/** `LoggingData.type` includes `fatal`, which devtools folds into `error`. */\nfunction toDevtoolsLevel(type: LoggingData[\"type\"]): DevtoolsLogEntry[\"level\"] {\n  return type === \"fatal\" ? \"error\" : type;\n}\n\nclass DevtoolsLogChannel extends LogChannel {\n  public override name = \"devtools\";\n  public active = true;\n\n  public constructor(private readonly collector: DevtoolsCollector) {\n    super();\n  }\n\n  public log(data: LoggingData): void {\n    if (!this.active) return;\n\n    // Already passed through the logger's redaction floor (`Logger.log`\n    // applies it before invoking any channel). It is still app data, and can\n    // hold live objects (a request, its socket), so a JSON-safe snapshot is\n    // kept instead of the object itself.\n    const entry: DevtoolsLogEntry = {\n      level: toDevtoolsLevel(data.type),\n      module: data.module,\n      action: data.action,\n      message: data.message,\n      at: Date.now(),\n      context: toSafeValue(data.context),\n    };\n\n    this.collector.addLog(currentRequestId(), entry);\n  }\n}\n\n/**\n * Feeds every log entry, from `@warlock.js/logger`, into the collector by\n * registering an additional channel. `Logger` has no way to remove a\n * channel, so the disposer flag-ignores further entries instead — the\n * channel stays registered for the process's lifetime.\n */\nexport async function attachLogSource(collector: DevtoolsCollector): Promise<DevtoolsDisposer> {\n  const channel = new DevtoolsLogChannel(collector);\n\n  log.addChannel(channel);\n\n  return () => {\n    channel.active = false;\n  };\n}\n","import type { CapturedMail, MailAddress, MailAttachment } from \"@warlock.js/core\";\nimport { currentRequestId } from \"../current-request-id\";\nimport type { DevtoolsCollector, DevtoolsDisposer, DevtoolsMailAttachment } from \"../types\";\n\nfunction addressToString(address: MailAddress | undefined): string | undefined {\n  if (!address) return undefined;\n\n  return typeof address === \"string\" ? address : `${address.name} <${address.address}>`;\n}\n\nfunction attachmentSize(attachment: MailAttachment): number | undefined {\n  if (typeof attachment.content === \"string\") return Buffer.byteLength(attachment.content);\n  if (Buffer.isBuffer(attachment.content)) return attachment.content.length;\n\n  return undefined;\n}\n\nfunction toDevtoolsAttachment(attachment: MailAttachment): DevtoolsMailAttachment {\n  return {\n    filename: attachment.filename,\n    contentType: attachment.contentType,\n    size: attachmentSize(attachment),\n  };\n}\n\n/**\n * Feeds mails captured in development mode, from core's `mailEvents`, into\n * the collector. The captured attachments carry their content, but only\n * metadata is stored — the bytes are never kept.\n */\nexport async function attachMailSource(collector: DevtoolsCollector): Promise<DevtoolsDisposer> {\n  const { mailEvents } = await import(\"@warlock.js/core\");\n\n  const subscription = mailEvents.onCaptured((mail: CapturedMail) => {\n    const { normalized } = mail;\n\n    collector.addMail({\n      id: mail.id,\n      requestId: currentRequestId(),\n      capturedAt: mail.timestamp.getTime(),\n      from: addressToString(normalized.from),\n      to: normalized.to,\n      cc: normalized.cc,\n      bcc: normalized.bcc,\n      subject: normalized.subject,\n      html: normalized.html,\n      text: normalized.text,\n      headers: normalized.headers,\n      attachments: normalized.attachments.map(toDevtoolsAttachment),\n    });\n  });\n\n  return () => subscription.unsubscribe();\n}\n","import { fileURLToPath } from \"node:url\";\n\nimport type { DevtoolsCallerLocation } from \"./types\";\n\nconst packageDirectory = normalizePath(fileURLToPath(new URL(\"../\", import.meta.url)));\n\n/** Returns the first non-runtime, non-devtools frame in a V8 stack trace. */\nexport function captureCallerLocation(\n  stack: string = new Error().stack ?? \"\",\n): DevtoolsCallerLocation | undefined {\n  for (const line of stack.split(\"\\n\")) {\n    const frame = parseFrame(line);\n    if (!frame || shouldSkip(frame.file)) continue;\n    return frame;\n  }\n  return undefined;\n}\n\nfunction parseFrame(frame: string): DevtoolsCallerLocation | undefined {\n  const match = frame.match(/\\bat\\s+(?:.*?\\s+\\()?(.+?):(\\d+):(\\d+)\\)?\\s*$/);\n  const [, rawFile, line, column] = match ?? [];\n  if (!rawFile || !line || !column) return undefined;\n  const file = normalizePath(rawFile);\n  return { file, line: Number(line), column: Number(column) };\n}\n\n/** A drive-letter file URL names a Windows path on whichever host decodes it. */\nconst WINDOWS_DRIVE_FILE_URL = /^file:\\/\\/\\/[A-Za-z]:/;\n\nfunction normalizePath(path: string): string {\n  const decoded = !path.startsWith(\"file:\")\n    ? path\n    : WINDOWS_DRIVE_FILE_URL.test(path)\n      ? fileURLToPath(path, { windows: true })\n      : fileURLToPath(path);\n  return decoded.replace(/\\\\/g, \"/\");\n}\n\nfunction shouldSkip(file: string): boolean {\n  return (\n    file.startsWith(\"node:\") ||\n    file.includes(\"/node_modules/\") ||\n    // Node's own frames (`node:internal/…`, or bare `internal/…` on older\n    // runtimes); an app folder named `internal` is still an app frame.\n    file.startsWith(\"internal/\") ||\n    file.startsWith(packageDirectory)\n  );\n}\n","import { applyRedact, log } from \"@warlock.js/logger\";\nimport { captureCallerLocation } from \"../caller-location\";\nimport { currentRequestId } from \"../current-request-id\";\nimport { toSafeValue } from \"../safe-value\";\nimport type { DevtoolsCollector, DevtoolsDisposer } from \"../types\";\n\n/** The shape of the event `dataSourceRegistry` emits for `\"query\"`. */\ntype QueryEvent = {\n  connection: string;\n  driver: \"postgres\" | \"mongodb\";\n  sql?: string;\n  bindings?: unknown[];\n  collection?: string;\n  command?: string;\n  pipeline?: unknown;\n  durationMs: number;\n  startedAt: number;\n  rowCount?: number;\n  error?: unknown;\n};\n\n/** Redacts query bindings through the logger's redaction rules. */\nfunction redactBindings(bindings: unknown[] | undefined): unknown[] | undefined {\n  if (!bindings) return bindings;\n\n  const redacted = applyRedact(\n    {\n      type: \"debug\",\n      module: \"devtools\",\n      action: \"query\",\n      message: undefined,\n      context: { bindings },\n    },\n    log.getRedact(),\n  );\n\n  return (redacted.context as { bindings: unknown[] }).bindings;\n}\n\n/**\n * Feeds every settled database query, from cascade's data source registry,\n * into the collector. A no-op when `@warlock.js/cascade` isn't installed —\n * it is an optional peer.\n */\nexport async function attachQuerySource(collector: DevtoolsCollector): Promise<DevtoolsDisposer> {\n  let dataSourceRegistry: {\n    on(event: \"query\", listener: (event: QueryEvent) => void): void;\n    off(event: \"query\", listener: (event: QueryEvent) => void): void;\n  };\n\n  try {\n    ({ dataSourceRegistry } = await import(\"@warlock.js/cascade\"));\n  } catch {\n    return () => {};\n  }\n\n  const listener = (event: QueryEvent) => {\n    collector.addQuery(currentRequestId(), {\n      connection: event.connection,\n      driver: event.driver,\n      sql: event.sql,\n      bindings: toSafeValue(redactBindings(event.bindings)) as unknown[] | undefined,\n      collection: event.collection,\n      command: event.command,\n      pipeline: event.pipeline,\n      startedAt: event.startedAt,\n      durationMs: event.durationMs,\n      rowCount: event.rowCount,\n      error:\n        event.error === undefined\n          ? undefined\n          : event.error instanceof Error\n            ? event.error.message\n            : String(event.error),\n      caller: captureCallerLocation(),\n    });\n  };\n\n  dataSourceRegistry.on(\"query\", listener);\n\n  return () => dataSourceRegistry.off(\"query\", listener);\n}\n","import type { TracingContext, TracingPhaseInfo, TracingRequestEndInfo } from \"@warlock.js/core\";\nimport { toSafeValue } from \"../safe-value\";\nimport type { DevtoolsCollector, DevtoolsDisposer, ResolvedDevtoolsOptions } from \"../types\";\n\n/**\n * Feeds request timelines from core's tracing hooks into the collector: one\n * `startRequest`/`endRequest` pair per HTTP request, with every named phase\n * in between. Requests to the dashboard's own path are never recorded, so\n * the dashboard never watches itself.\n */\nexport async function attachTracingSource(\n  collector: DevtoolsCollector,\n  options: ResolvedDevtoolsOptions,\n): Promise<DevtoolsDisposer> {\n  const { registerTracingHooks } = await import(\"@warlock.js/core\");\n\n  const isDashboardPath = (path: string): boolean => path.startsWith(options.path);\n\n  return registerTracingHooks({\n    onRequestStart(ctx: TracingContext) {\n      if (isDashboardPath(ctx.path)) return;\n\n      collector.startRequest({\n        id: ctx.requestId,\n        method: ctx.method,\n        path: ctx.path,\n        route: ctx.route,\n        startedAt: performance.timeOrigin + performance.now(),\n      });\n    },\n    onPhase(ctx: TracingContext, phase: TracingPhaseInfo) {\n      if (isDashboardPath(ctx.path)) return;\n\n      collector.addPhase(ctx.requestId, {\n        name: phase.name,\n        durationMs: phase.durationMs,\n        startedAt: phase.startedAt ?? performance.timeOrigin + performance.now() - phase.durationMs,\n        attrs: phase.attrs === undefined ? undefined : (toSafeValue(phase.attrs) as Record<string, unknown>),\n      });\n    },\n    onRequestEnd(ctx: TracingContext, result: TracingRequestEndInfo) {\n      if (isDashboardPath(ctx.path)) return;\n\n      collector.endRequest(ctx.requestId, {\n        status: result.status,\n        durationMs: result.durationMs,\n        error:\n          result.error === undefined\n            ? undefined\n            : result.error instanceof Error\n              ? result.error.message\n              : String(result.error),\n        route: ctx.route,\n      });\n    },\n  });\n}\n","/**\n * The devtools connector for `warlock.config.ts > connectors`.\n *\n * Deliberately a plain object with TYPE-ONLY imports from core: the config\n * file that constructs it must not drag core's runtime graph in at\n * config-load time. Core is imported lazily inside `boot()`, where the app\n * has already loaded it — see `queue/src/queue-connector.ts`, the pattern\n * this mirrors.\n */\nimport type { Connector, ConnectorLifecyclePhase } from \"@warlock.js/core\";\nimport { createCollector } from \"./collector\";\nimport { resolveDevtoolsOptions } from \"./options\";\nimport type { DevtoolsRouteRow } from \"./server\";\nimport { attachCacheSource } from \"./sources/cache-source\";\nimport { attachLogSource } from \"./sources/log-source\";\nimport { attachMailSource } from \"./sources/mail-source\";\nimport { attachQuerySource } from \"./sources/query-source\";\nimport { attachTracingSource } from \"./sources/tracing-source\";\nimport type { DevtoolsDisposer, DevtoolsOptions, DevtoolsQuery } from \"./types\";\n\n/**\n * Boots after the queue connector (priority 11), which is the last\n * built-in/framework connector to claim a priority; devtools has nothing\n * that depends on it, so it simply goes last.\n */\nexport const DEVTOOLS_CONNECTOR_PRIORITY = 12;\n\n/** Options accepted by `devtoolsConnector()`. */\nexport type DevtoolsConnectorOptions = DevtoolsOptions;\n\n/**\n * Construct the devtools connector.\n *\n * Refuses to run outside development: `boot()` checks\n * `Application.runtimeStrategy` and, when it isn't `\"development\"`, logs one\n * warning and returns without mounting a route or subscribing to anything.\n * In development it attaches every source (tracing, queries, cache, mail,\n * logs), then mounts the dashboard's routes on the HTTP server — before it\n * starts listening, the only point in the boot sequence where mounting is\n * possible (see `queue/src/dashboard-boot.ts` for the same constraint).\n *\n * Apps don't call this: `warlock dev` registers it automatically when the\n * package is installed (`warlock add devtools`). Keep it OUT of\n * `warlock.config.ts` — devtools is a dev dependency, so a production\n * install doesn't have it and a config import of it would fail there.\n */\nexport function devtoolsConnector(options: DevtoolsConnectorOptions = {}): Connector {\n  let active = false;\n  const disposers: DevtoolsDisposer[] = [];\n\n  const connector: Connector = {\n    name: \"devtools\",\n    priority: DEVTOOLS_CONNECTOR_PRIORITY,\n    // Core's `ConnectorLifecyclePhase.Late`; spelled out so this module stays\n    // free of a runtime import of core.\n    lifecyclePhase: \"late\" as ConnectorLifecyclePhase,\n    isActive: () => active,\n    async boot() {\n      const { Application, getHttpServer } = await import(\"@warlock.js/core\");\n      const { log } = await import(\"@warlock.js/logger\");\n\n      if (Application.runtimeStrategy !== \"development\") {\n        log.warn(\n          \"devtools\",\n          \"disabled\",\n          \"@warlock.js/devtools only runs in development; it is not mounted\",\n        );\n        return;\n      }\n\n      const resolved = resolveDevtoolsOptions(options);\n      const collector = createCollector(resolved);\n\n      await attachSource(log, \"tracing\", () => attachTracingSource(collector, resolved));\n      await attachSource(log, \"query\", () => attachQuerySource(collector));\n      await attachSource(log, \"cache\", () => attachCacheSource(collector));\n      await attachSource(log, \"mail\", () => attachMailSource(collector));\n      await attachSource(log, \"log\", () => attachLogSource(collector));\n\n      const { mountDevtoolsRoutes } = await import(\"./server\");\n\n      mountDevtoolsRoutes(getHttpServer(), {\n        collector,\n        options: resolved,\n        isDevelopment: () => Application.runtimeStrategy === \"development\",\n        explain: (query) => explainQuery(query),\n        listRoutes: () => listRoutes(),\n        getOpenApiDocument: () => getOpenApiDocument(),\n      });\n\n      // An N+1 is worth a terminal line, not just a badge the developer has\n      // to go looking for: one warning per offending query shape, with the\n      // line that issued it.\n      disposers.push(\n        collector.subscribe((event) => {\n          if (event.type !== \"request\" || event.data.warningCount === 0) return;\n\n          for (const warning of collector.getRequest(event.data.id)?.warnings ?? []) {\n            const where = warning.caller ? ` — ${warning.caller.file}:${warning.caller.line}` : \"\";\n\n            log.warn(\n              \"devtools\",\n              \"n+1\",\n              `${warning.message}${where} (${event.data.method} ${event.data.path})`,\n            );\n          }\n        }),\n      );\n\n      active = true;\n\n      log.info(\"devtools\", \"ready\", `devtools ready at ${resolved.path}`);\n    },\n    async start() {},\n    async restart() {\n      await connector.shutdown();\n      await connector.start();\n    },\n    async shutdown() {\n      for (const dispose of disposers.splice(0)) dispose();\n      active = false;\n    },\n    shouldRestart: () => false,\n  };\n\n  /** Attaches one source, logging and continuing when it fails to attach. */\n  async function attachSource(\n    logger: { warn: (module: string, action: string, message: string) => unknown },\n    name: string,\n    attach: () => Promise<DevtoolsDisposer>,\n  ): Promise<void> {\n    try {\n      disposers.push(await attach());\n    } catch (error) {\n      logger.warn(\n        \"devtools\",\n        \"source-failed\",\n        `devtools' ${name} source failed to attach: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n\n  return connector;\n}\n\n/** Runs `EXPLAIN (FORMAT JSON)` for a stored Postgres query on its own connection. */\nasync function explainQuery(query: DevtoolsQuery): Promise<unknown> {\n  const { dataSourceRegistry } = await import(\"@warlock.js/cascade\");\n  const dataSource = dataSourceRegistry.get(query.connection);\n  const { rows } = await dataSource.raw(`EXPLAIN (FORMAT JSON) ${query.sql}`, query.bindings);\n\n  return rows;\n}\n\n/** Lists every registered HTTP route — the same source `warlock routes --json` reads. */\nasync function listRoutes(): Promise<DevtoolsRouteRow[]> {\n  const { router } = await import(\"@warlock.js/core\");\n\n  return router.list().map((route) => ({\n    method: route.method.toUpperCase(),\n    path: route.path,\n    name: route.name,\n    middleware: route.middleware?.map((middleware) => middleware.name || \"anonymous\"),\n  }));\n}\n\n/**\n * Builds the OpenAPI 3.1 document from the routes registered in this process —\n * the same generator behind `warlock generate.openapi`. Core is imported\n * lazily so this module stays free of a load-time dependency on it.\n */\nasync function getOpenApiDocument(): Promise<object> {\n  const { getDevelopmentOpenApiDocument } = await import(\"@warlock.js/core\");\n  const { document } = await getDevelopmentOpenApiDocument();\n\n  return document;\n}\n"],"mappings":";;;;;;;AAGA,SAAgB,eAAe,SAA0B,WAAsC;CAC7F,MAAM,yBAAS,IAAI,IAA6B;CAChD,KAAK,MAAM,SAAS,SAAS,OAAO,IAAI,MAAM,OAAO,CAAC,GAAI,OAAO,IAAI,MAAM,KAAK,KAAK,CAAC,GAAI,KAAK,CAAC;CAEhG,OAAO,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC,CACzB,QAAQ,GAAG,aAAa,QAAQ,UAAU,SAAS,CAAC,CACpD,MAAM,GAAG,OAAO,GAAG,WAAW,MAAM,SAAS,KAAK,MAAM,CAAC,CACzD,KAAK,CAAC,OAAO,cAAc;EAC1B,MAAM;EACN;EACA,OAAO,QAAQ;EACf,SAAS,QAAQ,QAAQ,OAAO,KAAK,SAAS,OAAO,GAAG,EAAE;EAC1D,GAAI,mBAAmB,OAAO,IAAI,EAAE,QAAQ,mBAAmB,OAAO,EAAE,IAAI,CAAC;CAC/E,EAAE;AACN;AAEA,SAAS,SAAS,OAAe,SAAyB;CACxD,OAAO,MAAM,SAAS,UAAU,GAAG,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,KAAK;AACtE;AAEA,SAAS,mBAAmB,SAA8D;CACxF,MAAM,0BAAU,IAAI,IAA+D;CACnF,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,CAAC,MAAM,QAAQ;EACnB,MAAM,MAAM,GAAG,MAAM,OAAO,KAAK,GAAG,MAAM,OAAO;EACjD,MAAM,QAAQ,QAAQ,IAAI,GAAG;EAC7B,QAAQ,IACN,KACA,QAAQ;GAAE,GAAG;GAAO,OAAO,MAAM,QAAQ;EAAE,IAAI;GAAE,QAAQ,MAAM;GAAQ,OAAO;EAAE,CAClF;CACF;CACA,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,CAAC,CAAC,EAAE,EAAE;AACnF;;;;AC5BA,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;;AAGtB,SAAgB,WAAW,OAAgC;CACzD,IAAI,MAAM,WAAW,YACnB,QAAQ,MAAM,OAAO,GAAE,CACpB,QAAQ,eAAe,GAAG,CAAC,CAC3B,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,QAAQ,GAAG,CAAC,CACpB,KAAK;CAGV,OAAO,GAAG,MAAM,cAAc,GAAG,GAAG,MAAM,WAAW,GAAG,GAAG,KAAK,UAAU,oBAAoB,MAAM,QAAQ,CAAC;AAC/G;AAEA,SAAS,oBAAoB,OAAyB;CACpD,IAAI,YAAY,KAAK,GAAG,OAAO;CAE/B,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,IAAI,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG;EACzC,OAAO,MAAM,IAAI,mBAAmB;CACtC;CAEA,MAAM,SAAS;CACf,OAAO,OAAO,YACZ,OAAO,KAAK,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,oBAAoB,OAAO,IAAI,CAAC,CAAC,CAC1E;AACF;AAEA,SAAS,YAAY,OAAyB;CAC5C,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;CACxD,IAAI,iBAAiB,MAAM,OAAO;CAClC,MAAM,SAAS;CACf,OAAO,OAAO,OAAO,gBAAgB,cAAc,OAAO,OAAO,SAAS;AAC5E;;;;ACxBA,MAAM,YAAY;AAClB,MAAM,WAAW;AACjB,MAAM,kBAAkB;;;;;;;AAQxB,SAAgB,gBAAgB,SAAqD;CACnF,MAAM,2BAAW,IAAI,IAA6B;CAClD,MAAM,wBAAQ,IAAI,IAA0B;CAC5C,MAAM,OAA2B,CAAC;CAClC,MAAM,aAAiC;EAAE,SAAS,CAAC;EAAG,OAAO,CAAC;EAAG,MAAM,CAAC;CAAE;CAC1E,MAAM,4BAAY,IAAI,IAA0C;CAChE,IAAI,gBAAgB;CAEpB,MAAM,QAAQ,UAA+B;EAC3C,KAAK,MAAM,YAAY,WACrB,IAAI;GACF,SAAS,KAAK;EAChB,QAAQ,CAER;CAEJ;CAEA,MAAM,iBAAoB,MAAW,UAAa;EAChD,KAAK,KAAK,KAAK;EACf,IAAI,KAAK,SAAS,iBAAiB,KAAK,MAAM;CAChD;CAEA,OAAO;EACL,aAAa,SAAS;GACpB,SAAS,OAAO,QAAQ,EAAE;GAC1B,SAAS,IAAI,QAAQ,IAAI;IACvB,GAAG;IACH,QAAQ,CAAC;IACT,SAAS,CAAC;IACV,OAAO,CAAC;IACR,MAAM,CAAC;IACP,OAAO,CAAC;IACR,UAAU,CAAC;GACb,CAAC;GACD,OAAO,SAAS,OAAO,QAAQ,aAC7B,SAAS,OAAO,SAAS,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAe;EAC1D;EACA,WAAW,IAAI,QAAQ;GACrB,MAAM,UAAU,SAAS,IAAI,EAAE;GAC/B,IAAI,CAAC,SAAS;GACd,QAAQ,SAAS,OAAO;GACxB,QAAQ,aAAa,OAAO;GAC5B,QAAQ,QAAQ,OAAO;GACvB,IAAI,OAAO,UAAU,QAAW,QAAQ,QAAQ,OAAO;GACvD,QAAQ,WAAW,eAAe,QAAQ,SAAS,QAAQ,iBAAiB;GAC5E,KAAK;IAAE,MAAM;IAAW,MAAM,QAAQ,OAAO;GAAE,CAAC;EAClD;EACA,SAAS,WAAW,OAAO;GACzB,SAAS,IAAI,SAAS,CAAC,EAAE,OAAO,KAAK,KAAK;EAC5C;EACA,SAAS,WAAW,OAAO;GACzB,MAAM,SAAwB;IAC5B,GAAG;IACH,IAAI,IAAI,EAAE;IACV,OAAO,WAAW,KAAK;GACzB;GACA,MAAM,UAAU,YAAY,SAAS,IAAI,SAAS,IAAI;GACtD,IAAI,SAAS,QAAQ,QAAQ,KAAK,MAAM;QACnC,cAAc,WAAW,SAAS,MAAM;GAC7C,OAAO;EACT;EACA,kBAAkB,WAAW,WAAW;GACtC,MAAM,UAAU,YAAY,SAAS,IAAI,SAAS,IAAI;GACtD,IAAI,SAAS,QAAQ,MAAM,KAAK,SAAS;QACpC,cAAc,WAAW,OAAO,SAAS;EAChD;EACA,OAAO,WAAW,OAAO;GACvB,MAAM,UAAU,YAAY,SAAS,IAAI,SAAS,IAAI;GACtD,IAAI,SAAS,QAAQ,KAAK,KAAK,KAAK;QAC/B,cAAc,WAAW,MAAM,KAAK;GACzC,KAAK,QAAQ,KAAK;GAClB,IAAI,KAAK,SAAS,UAAU,KAAK,IAAI;GACrC,KAAK;IAAE,MAAM;IAAO,MAAM;GAAM,CAAC;EACnC;EACA,QAAQ,MAAM;GACZ,MAAM,OAAO,KAAK,EAAE;GACpB,MAAM,IAAI,KAAK,IAAI,IAAI;GACvB,OAAO,MAAM,OAAO,WAAW,MAAM,OAAO,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAe;GAC/E,IAAI,KAAK,WAAW,SAAS,IAAI,KAAK,SAAS,CAAC,EAAE,MAAM,KAAK,KAAK,EAAE;GACpE,KAAK;IAAE,MAAM;IAAQ,MAAM,YAAY,IAAI;GAAE,CAAC;EAChD;EACA,eAAe;GACb,OAAO,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,OAAO;EACrD;EACA,WAAW,IAAI;GACb,MAAM,UAAU,SAAS,IAAI,EAAE;GAC/B,OAAO,WAAW,YAAY,OAAO;EACvC;EACA,YAAY;GACV,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,WAAW;EACtD;EACA,QAAQ,IAAI;GACV,MAAM,OAAO,MAAM,IAAI,EAAE;GACzB,OACE,QAAQ;IACN,GAAG;IACH,IAAI,CAAC,GAAG,KAAK,EAAE;IACf,IAAI,CAAC,GAAG,KAAK,EAAE;IACf,KAAK,CAAC,GAAG,KAAK,GAAG;IACjB,SAAS,EAAE,GAAG,KAAK,QAAQ;IAC3B,aAAa,CAAC,GAAG,KAAK,WAAW;GACnC;EAEJ;EACA,SAAS,SAAS,CAAC,GAAG;GACpB,MAAM,SAAS,OAAO,QAAQ,YAAY;GAC1C,OAAO,KACJ,QACE,WACE,CAAC,OAAO,SAAS,MAAM,UAAU,OAAO,WACxC,CAAC,UAAU,MAAM,OAAO,YAAY,CAAC,CAAC,SAAS,MAAM,EAC1D,CAAC,CACA,KAAK,WAAW,EAAE,GAAG,MAAM,EAAE;EAClC;EACA,gBAAgB;GACd,OAAO;IACL,SAAS,CAAC,GAAG,WAAW,OAAO;IAC/B,OAAO,CAAC,GAAG,WAAW,KAAK;IAC3B,MAAM,CAAC,GAAG,WAAW,IAAI;GAC3B;EACF;EACA,UAAU,UAA4B;GACpC,UAAU,IAAI,QAAQ;GACtB,aAAa,UAAU,OAAO,QAAQ;EACxC;EACA,QAAQ;GACN,SAAS,MAAM;GACf,MAAM,MAAM;GACZ,KAAK,SAAS;GACd,WAAW,QAAQ,SAAS;GAC5B,WAAW,MAAM,SAAS;GAC1B,WAAW,KAAK,SAAS;EAC3B;CACF;AACF;AAEA,SAAS,QAAQ,SAAkD;CACjE,MAAM,EAAE,IAAI,QAAQ,MAAM,OAAO,QAAQ,WAAW,eAAe;CACnE,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY,QAAQ,QAAQ;EAC5B,cAAc,QAAQ,SAAS;CACjC;AACF;AAEA,SAAS,YAAY,MAAyC;CAC5D,MAAM,EAAE,IAAI,WAAW,YAAY,IAAI,YAAY;CACnD,OAAO;EAAE;EAAI;EAAW;EAAY,IAAI,CAAC,GAAG,EAAE;EAAG;CAAQ;AAC3D;AAEA,SAAS,YAAY,SAA2C;CAC9D,OAAO;EACL,GAAG;EACH,QAAQ,CAAC,GAAG,QAAQ,MAAM;EAC1B,SAAS,CAAC,GAAG,QAAQ,OAAO;EAC5B,OAAO,CAAC,GAAG,QAAQ,KAAK;EACxB,MAAM,CAAC,GAAG,QAAQ,IAAI;EACtB,OAAO,CAAC,GAAG,QAAQ,KAAK;EACxB,UAAU,CAAC,GAAG,QAAQ,QAAQ;CAChC;AACF;;;;;AChMA,SAAgB,uBAAuB,UAA2B,CAAC,GAA4B;CAC7F,MAAM,QAAQ,QAAQ,QAAQ,aAAY,CAAE,QAAQ,QAAQ,EAAE;CAC9D,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,oBAAoB,QAAQ,qBAAqB;CAEvD,IAAI,CAAC,QAAQ,CAAC,KAAK,WAAW,GAAG,GAC/B,MAAM,IAAI,MAAM,uEAAmE;CAGrF,IAAI,cAAc,GAChB,MAAM,IAAI,MAAM,qDAAmD;CAGrE,IAAI,oBAAoB,GACtB,MAAM,IAAI,MAAM,2DAAyD;CAG3E,OAAO;EAAE;EAAM;EAAa;CAAkB;AAChD;;;;;;;;;;;;;;ACTA,SAAgB,mBAAuC;CACrD,IAAI;EACF,OAAOA,gCAAe,WAAW,CAAC,EAAE;CACtC,QAAQ;EACN;CACF;AACF;;;;;ACdA,MAAM,cAAc;CAAC;CAAO;CAAQ;CAAO;CAAW;CAAe;AAAS;;;;;;AAgB9E,eAAsB,kBAAkB,WAAyD;CAC/F,IAAI;CAKJ,IAAI;EACF,CAAC,CAAE,SAAU,MAAM,OAAO;CAC5B,QAAQ;EACN,aAAa,CAAC;CAChB;CAEA,MAAM,WAAW,YAAY,KAAK,SAAS;EACzC,MAAM,WAAW,SAAyB;GACxC,MAAM,YAAoC;IACxC;IACA,QAAQ,KAAK;IACb,KAAK,KAAK;IACV,MAAM,KAAK;IACX,MAAM,KAAK;IACX,IAAI,KAAK,IAAI;IACb,YAAY,KAAK;GACnB;GAEA,UAAU,kBAAkB,iBAAiB,GAAG,SAAS;EAC3D;EAEA,MAAM,GAAG,MAAM,OAAO;EAEtB,OAAO;GAAE;GAAM;EAAQ;CACzB,CAAC;CAED,aAAa;EACX,KAAK,MAAM,EAAE,MAAM,aAAa,UAAU,MAAM,IAAI,MAAM,OAAO;CACnE;AACF;;;;ACvDA,MAAM,YAAY;;;;;;;;;;;AAYlB,SAAgB,YAAY,OAAyB;CACnD,OAAO,SAAS,OAAO,mBAAG,IAAI,QAAQ,CAAC;AACzC;AAEA,SAAS,SAAS,OAAgB,OAAe,MAAgC;CAC/E,IAAI,UAAU,QAAQ,UAAU,QAAW,OAAO;CAElD,QAAQ,OAAO,OAAf;EACE,KAAK;EACL,KAAK;EACL,KAAK,WACH,OAAO;EACT,KAAK,UACH,OAAO,MAAM,SAAS;EACxB,KAAK,UACH,OAAO,MAAM,SAAS;EACxB,KAAK,YACH;CACJ;CAEA,MAAM,SAAS;CAEf,IAAI,KAAK,IAAI,MAAM,GAAG,OAAO;CAC7B,IAAI,iBAAiB,MAAM,OAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,iBAAiB,MAAM,YAAY;CACrG,IAAI,iBAAiB,OAAO,OAAO;EAAE,MAAM,MAAM;EAAM,SAAS,MAAM;CAAQ;CAE9E,IAAI,SAAS,WAAW,OAAO,MAAM,QAAQ,KAAK,IAAI,YAAY;CAElE,KAAK,IAAI,MAAM;CAEf,IAAI;EACF,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,KAAK,SAAS,SAAS,MAAM,QAAQ,GAAG,IAAI,CAAC;EAEpF,MAAM,YAAY,OAAO,eAAe,MAAM;EAE9C,IAAI,cAAc,OAAO,aAAa,cAAc,MAAM;GACxD,MAAM,SAAU,OAAgC;GAEhD,IAAI,OAAO,WAAW,YACpB,IAAI;IACF,OAAO,SAAS,OAAO,KAAK,MAAM,GAAG,QAAQ,GAAG,IAAI;GACtD,QAAQ;IACN,OAAO,IAAI,gBAAgB,MAAM,EAAE;GACrC;GAGF,OAAO,IAAI,gBAAgB,MAAM,EAAE;EACrC;EAEA,MAAM,OAAgC,CAAC;EAEvC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;GACjD,MAAM,OAAO,SAAS,OAAO,QAAQ,GAAG,IAAI;GAC5C,IAAI,SAAS,QAAW,KAAK,OAAO;EACtC;EAEA,OAAO;CACT,UAAU;EACR,KAAK,OAAO,MAAM;CACpB;AACF;AAEA,SAAS,gBAAgB,QAAwB;CAC/C,OAAQ,OAA+C,aAAa,QAAQ;AAC9E;;;;;ACtEA,SAAS,gBAAgB,MAAsD;CAC7E,OAAO,SAAS,UAAU,UAAU;AACtC;AAEA,IAAM,qBAAN,cAAiCC,8BAAW;CAI1C,AAAO,YAAY,AAAiB,WAA8B;EAChE,MAAM;EAD4B;cAHb;gBACP;CAIhB;CAEA,AAAO,IAAI,MAAyB;EAClC,IAAI,CAAC,KAAK,QAAQ;EAMlB,MAAM,QAA0B;GAC9B,OAAO,gBAAgB,KAAK,IAAI;GAChC,QAAQ,KAAK;GACb,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,IAAI,KAAK,IAAI;GACb,SAAS,YAAY,KAAK,OAAO;EACnC;EAEA,KAAK,UAAU,OAAO,iBAAiB,GAAG,KAAK;CACjD;AACF;;;;;;;AAQA,eAAsB,gBAAgB,WAAyD;CAC7F,MAAM,UAAU,IAAI,mBAAmB,SAAS;CAEhD,uBAAI,WAAW,OAAO;CAEtB,aAAa;EACX,QAAQ,SAAS;CACnB;AACF;;;;AChDA,SAAS,gBAAgB,SAAsD;CAC7E,IAAI,CAAC,SAAS,OAAO;CAErB,OAAO,OAAO,YAAY,WAAW,UAAU,GAAG,QAAQ,KAAK,IAAI,QAAQ,QAAQ;AACrF;AAEA,SAAS,eAAe,YAAgD;CACtE,IAAI,OAAO,WAAW,YAAY,UAAU,OAAO,OAAO,WAAW,WAAW,OAAO;CACvF,IAAI,OAAO,SAAS,WAAW,OAAO,GAAG,OAAO,WAAW,QAAQ;AAGrE;AAEA,SAAS,qBAAqB,YAAoD;CAChF,OAAO;EACL,UAAU,WAAW;EACrB,aAAa,WAAW;EACxB,MAAM,eAAe,UAAU;CACjC;AACF;;;;;;AAOA,eAAsB,iBAAiB,WAAyD;CAC9F,MAAM,EAAE,eAAe,MAAM,OAAO;CAEpC,MAAM,eAAe,WAAW,YAAY,SAAuB;EACjE,MAAM,EAAE,eAAe;EAEvB,UAAU,QAAQ;GAChB,IAAI,KAAK;GACT,WAAW,iBAAiB;GAC5B,YAAY,KAAK,UAAU,QAAQ;GACnC,MAAM,gBAAgB,WAAW,IAAI;GACrC,IAAI,WAAW;GACf,IAAI,WAAW;GACf,KAAK,WAAW;GAChB,SAAS,WAAW;GACpB,MAAM,WAAW;GACjB,MAAM,WAAW;GACjB,SAAS,WAAW;GACpB,aAAa,WAAW,YAAY,IAAI,oBAAoB;EAC9D,CAAC;CACH,CAAC;CAED,aAAa,aAAa,YAAY;AACxC;;;;ACjDA,MAAM,mBAAmB,0CAA4B,IAAI,IAAI,oDAAsB,CAAC,CAAC;;AAGrF,SAAgB,sBACd,yBAAgB,IAAI,MAAM,EAAC,CAAC,SAAS,IACD;CACpC,KAAK,MAAM,QAAQ,MAAM,MAAM,IAAI,GAAG;EACpC,MAAM,QAAQ,WAAW,IAAI;EAC7B,IAAI,CAAC,SAAS,WAAW,MAAM,IAAI,GAAG;EACtC,OAAO;CACT;AAEF;AAEA,SAAS,WAAW,OAAmD;CAErE,MAAM,GAAG,SAAS,MAAM,UADV,MAAM,MAAM,8CACY,KAAK,CAAC;CAC5C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,OAAO;CAEzC,OAAO;EAAE,MADI,cAAc,OACf;EAAG,MAAM,OAAO,IAAI;EAAG,QAAQ,OAAO,MAAM;CAAE;AAC5D;;AAGA,MAAM,yBAAyB;AAE/B,SAAS,cAAc,MAAsB;CAM3C,QALgB,CAAC,KAAK,WAAW,OAAO,IACpC,OACA,uBAAuB,KAAK,IAAI,gCAChB,MAAM,EAAE,SAAS,KAAK,CAAC,gCACvB,IAAI,EACV,CAAC,QAAQ,OAAO,GAAG;AACnC;AAEA,SAAS,WAAW,MAAuB;CACzC,OACE,KAAK,WAAW,OAAO,KACvB,KAAK,SAAS,gBAAgB,KAG9B,KAAK,WAAW,WAAW,KAC3B,KAAK,WAAW,gBAAgB;AAEpC;;;;;ACzBA,SAAS,eAAe,UAAwD;CAC9E,IAAI,CAAC,UAAU,OAAO;CAatB,2CAVE;EACE,MAAM;EACN,QAAQ;EACR,QAAQ;EACR,SAAS;EACT,SAAS,EAAE,SAAS;CACtB,GACAC,uBAAI,UAAU,CAGD,CAAC,CAAC,QAAoC;AACvD;;;;;;AAOA,eAAsB,kBAAkB,WAAyD;CAC/F,IAAI;CAKJ,IAAI;EACF,CAAC,CAAE,sBAAuB,MAAM,OAAO;CACzC,QAAQ;EACN,aAAa,CAAC;CAChB;CAEA,MAAM,YAAY,UAAsB;EACtC,UAAU,SAAS,iBAAiB,GAAG;GACrC,YAAY,MAAM;GAClB,QAAQ,MAAM;GACd,KAAK,MAAM;GACX,UAAU,YAAY,eAAe,MAAM,QAAQ,CAAC;GACpD,YAAY,MAAM;GAClB,SAAS,MAAM;GACf,UAAU,MAAM;GAChB,WAAW,MAAM;GACjB,YAAY,MAAM;GAClB,UAAU,MAAM;GAChB,OACE,MAAM,UAAU,SACZ,SACA,MAAM,iBAAiB,QACrB,MAAM,MAAM,UACZ,OAAO,MAAM,KAAK;GAC1B,QAAQ,sBAAsB;EAChC,CAAC;CACH;CAEA,mBAAmB,GAAG,SAAS,QAAQ;CAEvC,aAAa,mBAAmB,IAAI,SAAS,QAAQ;AACvD;;;;;;;;;;ACvEA,eAAsB,oBACpB,WACA,SAC2B;CAC3B,MAAM,EAAE,yBAAyB,MAAM,OAAO;CAE9C,MAAM,mBAAmB,SAA0B,KAAK,WAAW,QAAQ,IAAI;CAE/E,OAAO,qBAAqB;EAC1B,eAAe,KAAqB;GAClC,IAAI,gBAAgB,IAAI,IAAI,GAAG;GAE/B,UAAU,aAAa;IACrB,IAAI,IAAI;IACR,QAAQ,IAAI;IACZ,MAAM,IAAI;IACV,OAAO,IAAI;IACX,WAAW,YAAY,aAAa,YAAY,IAAI;GACtD,CAAC;EACH;EACA,QAAQ,KAAqB,OAAyB;GACpD,IAAI,gBAAgB,IAAI,IAAI,GAAG;GAE/B,UAAU,SAAS,IAAI,WAAW;IAChC,MAAM,MAAM;IACZ,YAAY,MAAM;IAClB,WAAW,MAAM,aAAa,YAAY,aAAa,YAAY,IAAI,IAAI,MAAM;IACjF,OAAO,MAAM,UAAU,SAAY,SAAa,YAAY,MAAM,KAAK;GACzE,CAAC;EACH;EACA,aAAa,KAAqB,QAA+B;GAC/D,IAAI,gBAAgB,IAAI,IAAI,GAAG;GAE/B,UAAU,WAAW,IAAI,WAAW;IAClC,QAAQ,OAAO;IACf,YAAY,OAAO;IACnB,OACE,OAAO,UAAU,SACb,SACA,OAAO,iBAAiB,QACtB,OAAO,MAAM,UACb,OAAO,OAAO,KAAK;IAC3B,OAAO,IAAI;GACb,CAAC;EACH;CACF,CAAC;AACH;;;;;;;;;AC/BA,MAAa,8BAA8B;;;;;;;;;;;;;;;;;AAqB3C,SAAgB,kBAAkB,UAAoC,CAAC,GAAc;CACnF,IAAI,SAAS;CACb,MAAM,YAAgC,CAAC;CAEvC,MAAM,YAAuB;EAC3B,MAAM;EACN;EAGA,gBAAgB;EAChB,gBAAgB;EAChB,MAAM,OAAO;GACX,MAAM,EAAE,aAAa,kBAAkB,MAAM,OAAO;GACpD,MAAM,EAAE,QAAQ,MAAM,OAAO;GAE7B,IAAI,YAAY,oBAAoB,eAAe;IACjD,IAAI,KACF,YACA,YACA,kEACF;IACA;GACF;GAEA,MAAM,WAAW,uBAAuB,OAAO;GAC/C,MAAM,YAAY,gBAAgB,QAAQ;GAE1C,MAAM,aAAa,KAAK,iBAAiB,oBAAoB,WAAW,QAAQ,CAAC;GACjF,MAAM,aAAa,KAAK,eAAe,kBAAkB,SAAS,CAAC;GACnE,MAAM,aAAa,KAAK,eAAe,kBAAkB,SAAS,CAAC;GACnE,MAAM,aAAa,KAAK,cAAc,iBAAiB,SAAS,CAAC;GACjE,MAAM,aAAa,KAAK,aAAa,gBAAgB,SAAS,CAAC;GAE/D,MAAM,EAAE,wBAAwB,2CAAM;GAEtC,oBAAoB,cAAc,GAAG;IACnC;IACA,SAAS;IACT,qBAAqB,YAAY,oBAAoB;IACrD,UAAU,UAAU,aAAa,KAAK;IACtC,kBAAkB,WAAW;IAC7B,0BAA0B,mBAAmB;GAC/C,CAAC;GAKD,UAAU,KACR,UAAU,WAAW,UAAU;IAC7B,IAAI,MAAM,SAAS,aAAa,MAAM,KAAK,iBAAiB,GAAG;IAE/D,KAAK,MAAM,WAAW,UAAU,WAAW,MAAM,KAAK,EAAE,CAAC,EAAE,YAAY,CAAC,GAAG;KACzE,MAAM,QAAQ,QAAQ,SAAS,MAAM,QAAQ,OAAO,KAAK,GAAG,QAAQ,OAAO,SAAS;KAEpF,IAAI,KACF,YACA,OACA,GAAG,QAAQ,UAAU,MAAM,IAAI,MAAM,KAAK,OAAO,GAAG,MAAM,KAAK,KAAK,EACtE;IACF;GACF,CAAC,CACH;GAEA,SAAS;GAET,IAAI,KAAK,YAAY,SAAS,qBAAqB,SAAS,MAAM;EACpE;EACA,MAAM,QAAQ,CAAC;EACf,MAAM,UAAU;GACd,MAAM,UAAU,SAAS;GACzB,MAAM,UAAU,MAAM;EACxB;EACA,MAAM,WAAW;GACf,KAAK,MAAM,WAAW,UAAU,OAAO,CAAC,GAAG,QAAQ;GACnD,SAAS;EACX;EACA,qBAAqB;CACvB;;CAGA,eAAe,aACb,QACA,MACA,QACe;EACf,IAAI;GACF,UAAU,KAAK,MAAM,OAAO,CAAC;EAC/B,SAAS,OAAO;GACd,OAAO,KACL,YACA,iBACA,aAAa,KAAK,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACrG;EACF;CACF;CAEA,OAAO;AACT;;AAGA,eAAe,aAAa,OAAwC;CAClE,MAAM,EAAE,uBAAuB,MAAM,OAAO;CAE5C,MAAM,EAAE,SAAS,MADE,mBAAmB,IAAI,MAAM,UAChB,CAAC,CAAC,IAAI,yBAAyB,MAAM,OAAO,MAAM,QAAQ;CAE1F,OAAO;AACT;;AAGA,eAAe,aAA0C;CACvD,MAAM,EAAE,WAAW,MAAM,OAAO;CAEhC,OAAO,OAAO,KAAK,CAAC,CAAC,KAAK,WAAW;EACnC,QAAQ,MAAM,OAAO,YAAY;EACjC,MAAM,MAAM;EACZ,MAAM,MAAM;EACZ,YAAY,MAAM,YAAY,KAAK,eAAe,WAAW,QAAQ,WAAW;CAClF,EAAE;AACJ;;;;;;AAOA,eAAe,qBAAsC;CACnD,MAAM,EAAE,kCAAkC,MAAM,OAAO;CACvD,MAAM,EAAE,aAAa,MAAM,8BAA8B;CAEzD,OAAO;AACT"}
+{"version":3,"file":"index.cjs","names":["requestContext","LogChannel","log"],"sources":["../../../../../../devtools/src/n-plus-one.ts","../../../../../../devtools/src/query-shape.ts","../../../../../../devtools/src/collector.ts","../../../../../../devtools/src/options.ts","../../../../../../devtools/src/current-request-id.ts","../../../../../../devtools/src/sources/cache-source.ts","../../../../../../devtools/src/safe-value.ts","../../../../../../devtools/src/sources/log-source.ts","../../../../../../devtools/src/sources/mail-source.ts","../../../../../../devtools/src/caller-location.ts","../../../../../../devtools/src/sources/query-source.ts","../../../../../../devtools/src/sources/tracing-source.ts","../../../../../../devtools/src/devtools-connector.ts"],"sourcesContent":["import type { DevtoolsCallerLocation, DevtoolsQuery, DevtoolsWarning } from \"./types\";\n\n/** Finds repeated query shapes whose occurrence count reaches the supplied threshold. */\nexport function detectNPlusOne(queries: DevtoolsQuery[], threshold: number): DevtoolsWarning[] {\n  const groups = new Map<string, DevtoolsQuery[]>();\n  for (const query of queries) groups.set(query.shape, [...(groups.get(query.shape) ?? []), query]);\n\n  return [...groups.entries()]\n    .filter(([, grouped]) => grouped.length >= threshold)\n    .sort(([, left], [, right]) => right.length - left.length)\n    .map(([shape, grouped]) => ({\n      type: \"n+1\" as const,\n      shape,\n      count: grouped.length,\n      message: `N+1: ${grouped.length}× \"${truncate(shape, 120)}\"`,\n      ...(mostFrequentCaller(grouped) ? { caller: mostFrequentCaller(grouped) } : {}),\n    }));\n}\n\nfunction truncate(value: string, maximum: number): string {\n  return value.length > maximum ? `${value.slice(0, maximum - 1)}…` : value;\n}\n\nfunction mostFrequentCaller(queries: DevtoolsQuery[]): DevtoolsCallerLocation | undefined {\n  const callers = new Map<string, { caller: DevtoolsCallerLocation; count: number }>();\n  for (const query of queries) {\n    if (!query.caller) continue;\n    const key = `${query.caller.file}:${query.caller.line}`;\n    const found = callers.get(key);\n    callers.set(\n      key,\n      found ? { ...found, count: found.count + 1 } : { caller: query.caller, count: 1 },\n    );\n  }\n  return [...callers.values()].sort((left, right) => right.count - left.count)[0]?.caller;\n}\n","import type { DevtoolsQuery } from \"./types\";\n\ntype QueryShapeInput = Pick<\n  DevtoolsQuery,\n  \"driver\" | \"sql\" | \"collection\" | \"command\" | \"pipeline\"\n>;\n\nconst numericLiteral = /(?<![\\w$])[-+]?(?:\\d+(?:\\.\\d+)?|\\.\\d+)(?![\\w$])/g;\nconst quotedLiteral = /'(?:''|[^'])*'/g;\n\n/** Returns a binding-independent shape for a database query. */\nexport function queryShape(query: QueryShapeInput): string {\n  if (query.driver === \"postgres\") {\n    return (query.sql ?? \"\")\n      .replace(quotedLiteral, \"?\")\n      .replace(numericLiteral, \"?\")\n      .replace(/\\s+/g, \" \")\n      .trim();\n  }\n\n  return `${query.collection ?? \"\"}.${query.command ?? \"\"} ${JSON.stringify(normalizeMongoValue(query.pipeline))}`;\n}\n\nfunction normalizeMongoValue(value: unknown): unknown {\n  if (isMongoLeaf(value)) return \"?\";\n\n  if (Array.isArray(value)) {\n    if (value.every(isMongoLeaf)) return [\"?\"];\n    return value.map(normalizeMongoValue);\n  }\n\n  const record = value as Record<string, unknown>;\n  return Object.fromEntries(\n    Object.keys(record).map((key) => [key, normalizeMongoValue(record[key])]),\n  );\n}\n\nfunction isMongoLeaf(value: unknown): boolean {\n  if (value === null || typeof value !== \"object\") return true;\n  if (value instanceof Date) return true;\n  const record = value as Record<string, unknown>;\n  return typeof record.toHexString === \"function\" || typeof record.$oid === \"string\";\n}\n","import type {\n  DevtoolsBackground,\n  DevtoolsCacheOperation,\n  DevtoolsCollector,\n  DevtoolsDisposer,\n  DevtoolsLogEntry,\n  DevtoolsMail,\n  DevtoolsMailSummary,\n  DevtoolsPhase,\n  DevtoolsQuery,\n  DevtoolsRequest,\n  DevtoolsRequestSummary,\n  DevtoolsStreamEvent,\n  ResolvedDevtoolsOptions,\n} from \"./types\";\nimport { detectNPlusOne } from \"./n-plus-one\";\nimport { queryShape } from \"./query-shape\";\n\nconst mailLimit = 100;\nconst logLimit = 1000;\nconst backgroundLimit = 500;\n\n/**\n * Creates the in-memory devtools store.\n *\n * Read methods return shallow structural copies, including copied arrays, so consumers\n * cannot mutate collector-owned arrays. The individual nested entries are retained.\n */\nexport function createCollector(options: ResolvedDevtoolsOptions): DevtoolsCollector {\n  const requests = new Map<string, DevtoolsRequest>();\n  const mails = new Map<string, DevtoolsMail>();\n  const logs: DevtoolsLogEntry[] = [];\n  const background: DevtoolsBackground = { queries: [], cache: [], logs: [] };\n  const listeners = new Set<(event: DevtoolsStreamEvent) => void>();\n  let querySequence = 0;\n\n  const emit = (event: DevtoolsStreamEvent) => {\n    for (const listener of listeners) {\n      try {\n        listener(event);\n      } catch {\n        /* Subscribers must not affect collection. */\n      }\n    }\n  };\n\n  const addBackground = <T>(list: T[], value: T) => {\n    list.push(value);\n    if (list.length > backgroundLimit) list.shift();\n  };\n\n  return {\n    startRequest(request) {\n      requests.delete(request.id);\n      requests.set(request.id, {\n        ...request,\n        phases: [],\n        queries: [],\n        cache: [],\n        logs: [],\n        mails: [],\n        warnings: [],\n      });\n      while (requests.size > options.maxRequests)\n        requests.delete(requests.keys().next().value as string);\n    },\n    endRequest(id, result) {\n      const request = requests.get(id);\n      if (!request) return;\n      request.status = result.status;\n      request.durationMs = result.durationMs;\n      request.error = result.error;\n      if (result.route !== undefined) request.route = result.route;\n      request.warnings = detectNPlusOne(request.queries, options.nPlusOneThreshold);\n      emit({ type: \"request\", data: summary(request) });\n    },\n    addPhase(requestId, phase) {\n      requests.get(requestId)?.phases.push(phase);\n    },\n    addQuery(requestId, query) {\n      const stored: DevtoolsQuery = {\n        ...query,\n        id: `q${++querySequence}`,\n        shape: queryShape(query),\n      };\n      const request = requestId ? requests.get(requestId) : undefined;\n      if (request) request.queries.push(stored);\n      else addBackground(background.queries, stored);\n      return stored;\n    },\n    addCacheOperation(requestId, operation) {\n      const request = requestId ? requests.get(requestId) : undefined;\n      if (request) request.cache.push(operation);\n      else addBackground(background.cache, operation);\n    },\n    addLog(requestId, entry) {\n      const request = requestId ? requests.get(requestId) : undefined;\n      if (request) request.logs.push(entry);\n      else addBackground(background.logs, entry);\n      logs.unshift(entry);\n      if (logs.length > logLimit) logs.pop();\n      emit({ type: \"log\", data: entry });\n    },\n    addMail(mail) {\n      mails.delete(mail.id);\n      mails.set(mail.id, mail);\n      while (mails.size > mailLimit) mails.delete(mails.keys().next().value as string);\n      if (mail.requestId) requests.get(mail.requestId)?.mails.push(mail.id);\n      emit({ type: \"mail\", data: mailSummary(mail) });\n    },\n    listRequests() {\n      return [...requests.values()].reverse().map(summary);\n    },\n    getRequest(id) {\n      const request = requests.get(id);\n      return request && copyRequest(request);\n    },\n    listMails() {\n      return [...mails.values()].reverse().map(mailSummary);\n    },\n    getMail(id) {\n      const mail = mails.get(id);\n      return (\n        mail && {\n          ...mail,\n          to: [...mail.to],\n          cc: [...mail.cc],\n          bcc: [...mail.bcc],\n          headers: { ...mail.headers },\n          attachments: [...mail.attachments],\n        }\n      );\n    },\n    listLogs(filter = {}) {\n      const module = filter.module?.toLowerCase();\n      return logs\n        .filter(\n          (entry) =>\n            (!filter.level || entry.level === filter.level) &&\n            (!module || entry.module.toLowerCase().includes(module)),\n        )\n        .map((entry) => ({ ...entry }));\n    },\n    getBackground() {\n      return {\n        queries: [...background.queries],\n        cache: [...background.cache],\n        logs: [...background.logs],\n      };\n    },\n    subscribe(listener): DevtoolsDisposer {\n      listeners.add(listener);\n      return () => listeners.delete(listener);\n    },\n    clear() {\n      requests.clear();\n      mails.clear();\n      logs.length = 0;\n      background.queries.length = 0;\n      background.cache.length = 0;\n      background.logs.length = 0;\n    },\n  };\n}\n\nfunction summary(request: DevtoolsRequest): DevtoolsRequestSummary {\n  const { id, method, path, route, status, startedAt, durationMs } = request;\n  return {\n    id,\n    method,\n    path,\n    route,\n    status,\n    startedAt,\n    durationMs,\n    queryCount: request.queries.length,\n    warningCount: request.warnings.length,\n  };\n}\n\nfunction mailSummary(mail: DevtoolsMail): DevtoolsMailSummary {\n  const { id, requestId, capturedAt, to, subject } = mail;\n  return { id, requestId, capturedAt, to: [...to], subject };\n}\n\nfunction copyRequest(request: DevtoolsRequest): DevtoolsRequest {\n  return {\n    ...request,\n    phases: [...request.phases],\n    queries: [...request.queries],\n    cache: [...request.cache],\n    logs: [...request.logs],\n    mails: [...request.mails],\n    warnings: [...request.warnings],\n  };\n}\n","import type { DevtoolsOptions, ResolvedDevtoolsOptions } from \"./types\";\n\n/** Resolves dashboard options and rejects invalid capacity or URL-prefix values. */\nexport function resolveDevtoolsOptions(options: DevtoolsOptions = {}): ResolvedDevtoolsOptions {\n  const path = (options.path ?? \"/__warlock\").replace(/\\/+$/, \"\");\n  const maxRequests = options.maxRequests ?? 200;\n  const nPlusOneThreshold = options.nPlusOneThreshold ?? 5;\n\n  if (!path || !path.startsWith(\"/\")) {\n    throw new Error('Devtools option \"path\" must be a non-root path starting with \"/\".');\n  }\n\n  if (maxRequests < 1) {\n    throw new Error('Devtools option \"maxRequests\" must be at least 1.');\n  }\n\n  if (nPlusOneThreshold < 2) {\n    throw new Error('Devtools option \"nPlusOneThreshold\" must be at least 2.');\n  }\n\n  return { path, maxRequests, nPlusOneThreshold };\n}\n","import { requestContext } from \"@warlock.js/core\";\n\n/**\n * The current request's id (core's `request.id`, threaded through\n * `AsyncLocalStorage`), or `undefined` outside a request — sources feed\n * devtools' background bucket in that case.\n *\n * Only ever reached through `./sources/*`, which the connector imports\n * dynamically inside `boot()` — by then core is already running, so this\n * static import never drags core's runtime graph into config-load time (see\n * `devtools-connector.ts`).\n */\nexport function currentRequestId(): string | undefined {\n  try {\n    return requestContext.getRequest()?.id;\n  } catch {\n    return undefined;\n  }\n}\n","import { currentRequestId } from \"../current-request-id\";\nimport type { DevtoolsCacheOperation, DevtoolsCollector, DevtoolsDisposer } from \"../types\";\n\n/** Cache events the dashboard's waterfall and background bucket care about. */\nconst EVENT_TYPES = [\"hit\", \"miss\", \"set\", \"removed\", \"invalidated\", \"flushed\"] as const;\n\n/** The shape `cache.on(event, handler)` hands the handler. */\ntype CacheEventData = {\n  key?: string;\n  driver: string;\n  tags?: string[];\n  keys?: string[];\n  durationMs?: number;\n};\n\n/**\n * Feeds cache hits, misses and mutations, from `@warlock.js/cache`, into the\n * collector. A no-op when `@warlock.js/cache` isn't installed — it is an\n * optional peer.\n */\nexport async function attachCacheSource(collector: DevtoolsCollector): Promise<DevtoolsDisposer> {\n  let cache: {\n    on(event: (typeof EVENT_TYPES)[number], handler: (data: CacheEventData) => void): unknown;\n    off(event: (typeof EVENT_TYPES)[number], handler: (data: CacheEventData) => void): unknown;\n  };\n\n  try {\n    ({ cache } = await import(\"@warlock.js/cache\"));\n  } catch {\n    return () => {};\n  }\n\n  const handlers = EVENT_TYPES.map((type) => {\n    const handler = (data: CacheEventData) => {\n      const operation: DevtoolsCacheOperation = {\n        type,\n        driver: data.driver,\n        key: data.key,\n        tags: data.tags,\n        keys: data.keys,\n        at: Date.now(),\n        durationMs: data.durationMs,\n      };\n\n      collector.addCacheOperation(currentRequestId(), operation);\n    };\n\n    cache.on(type, handler);\n\n    return { type, handler };\n  });\n\n  return () => {\n    for (const { type, handler } of handlers) cache.off(type, handler);\n  };\n}\n","const MAX_DEPTH = 6;\n\n/**\n * A JSON-safe snapshot of a value devtools keeps for later display.\n *\n * Log contexts and phase attributes are app data: they can hold live objects\n * (a request, its socket) whose graphs are circular and which must not be kept\n * alive by the collector anyway. Plain objects and arrays are copied; anything\n * with a `toJSON()` is serialized through it; other class instances collapse\n * to `[ClassName]`, cycles to `[Circular]`, and nesting past a fixed depth to\n * `[Object]` / `[Array]`.\n */\nexport function toSafeValue(value: unknown): unknown {\n  return snapshot(value, 0, new WeakSet());\n}\n\nfunction snapshot(value: unknown, depth: number, seen: WeakSet<object>): unknown {\n  if (value === null || value === undefined) return value;\n\n  switch (typeof value) {\n    case \"string\":\n    case \"number\":\n    case \"boolean\":\n      return value;\n    case \"bigint\":\n      return value.toString();\n    case \"symbol\":\n      return value.toString();\n    case \"function\":\n      return undefined;\n  }\n\n  const object = value as object;\n\n  if (seen.has(object)) return \"[Circular]\";\n  if (value instanceof Date) return Number.isNaN(value.getTime()) ? \"Invalid Date\" : value.toISOString();\n  if (value instanceof Error) return { name: value.name, message: value.message };\n\n  if (depth >= MAX_DEPTH) return Array.isArray(value) ? \"[Array]\" : \"[Object]\";\n\n  seen.add(object);\n\n  try {\n    if (Array.isArray(value)) return value.map((item) => snapshot(item, depth + 1, seen));\n\n    const prototype = Object.getPrototypeOf(object);\n\n    if (prototype !== Object.prototype && prototype !== null) {\n      const toJSON = (object as { toJSON?: unknown }).toJSON;\n\n      if (typeof toJSON === \"function\") {\n        try {\n          return snapshot(toJSON.call(object), depth + 1, seen);\n        } catch {\n          return `[${constructorName(object)}]`;\n        }\n      }\n\n      return `[${constructorName(object)}]`;\n    }\n\n    const copy: Record<string, unknown> = {};\n\n    for (const [key, entry] of Object.entries(object)) {\n      const safe = snapshot(entry, depth + 1, seen);\n      if (safe !== undefined) copy[key] = safe;\n    }\n\n    return copy;\n  } finally {\n    seen.delete(object);\n  }\n}\n\nfunction constructorName(object: object): string {\n  return (object as { constructor?: { name?: string } }).constructor?.name || \"Object\";\n}\n","import { LogChannel, log, type LoggingData } from \"@warlock.js/logger\";\nimport { currentRequestId } from \"../current-request-id\";\nimport { toSafeValue } from \"../safe-value\";\nimport type { DevtoolsCollector, DevtoolsDisposer, DevtoolsLogEntry } from \"../types\";\n\n/** `LoggingData.type` includes `fatal`, which devtools folds into `error`. */\nfunction toDevtoolsLevel(type: LoggingData[\"type\"]): DevtoolsLogEntry[\"level\"] {\n  return type === \"fatal\" ? \"error\" : type;\n}\n\nclass DevtoolsLogChannel extends LogChannel {\n  public override name = \"devtools\";\n  public active = true;\n\n  public constructor(private readonly collector: DevtoolsCollector) {\n    super();\n  }\n\n  public log(data: LoggingData): void {\n    if (!this.active) return;\n\n    // Already passed through the logger's redaction floor (`Logger.log`\n    // applies it before invoking any channel). It is still app data, and can\n    // hold live objects (a request, its socket), so a JSON-safe snapshot is\n    // kept instead of the object itself.\n    const entry: DevtoolsLogEntry = {\n      level: toDevtoolsLevel(data.type),\n      module: data.module,\n      action: data.action,\n      message: data.message,\n      at: Date.now(),\n      context: toSafeValue(data.context),\n    };\n\n    this.collector.addLog(currentRequestId(), entry);\n  }\n}\n\n/**\n * Feeds every log entry, from `@warlock.js/logger`, into the collector by\n * registering an additional channel. `Logger` has no way to remove a\n * channel, so the disposer flag-ignores further entries instead — the\n * channel stays registered for the process's lifetime.\n */\nexport async function attachLogSource(collector: DevtoolsCollector): Promise<DevtoolsDisposer> {\n  const channel = new DevtoolsLogChannel(collector);\n\n  log.addChannel(channel);\n\n  return () => {\n    channel.active = false;\n  };\n}\n","import type { CapturedMail, MailAddress, MailAttachment } from \"@warlock.js/core\";\nimport { currentRequestId } from \"../current-request-id\";\nimport type { DevtoolsCollector, DevtoolsDisposer, DevtoolsMailAttachment } from \"../types\";\n\nfunction addressToString(address: MailAddress | undefined): string | undefined {\n  if (!address) return undefined;\n\n  return typeof address === \"string\" ? address : `${address.name} <${address.address}>`;\n}\n\nfunction attachmentSize(attachment: MailAttachment): number | undefined {\n  if (typeof attachment.content === \"string\") return Buffer.byteLength(attachment.content);\n  if (Buffer.isBuffer(attachment.content)) return attachment.content.length;\n\n  return undefined;\n}\n\nfunction toDevtoolsAttachment(attachment: MailAttachment): DevtoolsMailAttachment {\n  return {\n    filename: attachment.filename,\n    contentType: attachment.contentType,\n    size: attachmentSize(attachment),\n  };\n}\n\n/**\n * Feeds mails captured in development mode, from core's `mailEvents`, into\n * the collector. The captured attachments carry their content, but only\n * metadata is stored — the bytes are never kept.\n */\nexport async function attachMailSource(collector: DevtoolsCollector): Promise<DevtoolsDisposer> {\n  const { mailEvents } = await import(\"@warlock.js/core\");\n\n  const subscription = mailEvents.onCaptured((mail: CapturedMail) => {\n    const { normalized } = mail;\n\n    collector.addMail({\n      id: mail.id,\n      requestId: currentRequestId(),\n      capturedAt: mail.timestamp.getTime(),\n      from: addressToString(normalized.from),\n      to: normalized.to,\n      cc: normalized.cc,\n      bcc: normalized.bcc,\n      subject: normalized.subject,\n      html: normalized.html,\n      text: normalized.text,\n      headers: normalized.headers,\n      attachments: normalized.attachments.map(toDevtoolsAttachment),\n    });\n  });\n\n  return () => subscription.unsubscribe();\n}\n","import { fileURLToPath } from \"node:url\";\n\nimport type { DevtoolsCallerLocation } from \"./types\";\n\nconst packageDirectory = normalizePath(fileURLToPath(new URL(\"../\", import.meta.url)));\n\n/** Returns the first non-runtime, non-devtools frame in a V8 stack trace. */\nexport function captureCallerLocation(\n  stack: string = new Error().stack ?? \"\",\n): DevtoolsCallerLocation | undefined {\n  for (const line of stack.split(\"\\n\")) {\n    const frame = parseFrame(line);\n    if (!frame || shouldSkip(frame.file)) continue;\n    return frame;\n  }\n  return undefined;\n}\n\nfunction parseFrame(frame: string): DevtoolsCallerLocation | undefined {\n  const match = frame.match(/\\bat\\s+(?:.*?\\s+\\()?(.+?):(\\d+):(\\d+)\\)?\\s*$/);\n  const [, rawFile, line, column] = match ?? [];\n  if (!rawFile || !line || !column) return undefined;\n  const file = normalizePath(rawFile);\n  return { file, line: Number(line), column: Number(column) };\n}\n\n/** A drive-letter file URL names a Windows path on whichever host decodes it. */\nconst WINDOWS_DRIVE_FILE_URL = /^file:\\/\\/\\/[A-Za-z]:/;\n\nfunction normalizePath(path: string): string {\n  const decoded = !path.startsWith(\"file:\")\n    ? path\n    : WINDOWS_DRIVE_FILE_URL.test(path)\n      ? fileURLToPath(path, { windows: true })\n      : fileURLToPath(path);\n  return decoded.replace(/\\\\/g, \"/\");\n}\n\nfunction shouldSkip(file: string): boolean {\n  return (\n    file.startsWith(\"node:\") ||\n    file.includes(\"/node_modules/\") ||\n    // Node's own frames (`node:internal/…`, or bare `internal/…` on older\n    // runtimes); an app folder named `internal` is still an app frame.\n    file.startsWith(\"internal/\") ||\n    file.startsWith(packageDirectory)\n  );\n}\n","import { applyRedact, log } from \"@warlock.js/logger\";\nimport { captureCallerLocation } from \"../caller-location\";\nimport { currentRequestId } from \"../current-request-id\";\nimport { toSafeValue } from \"../safe-value\";\nimport type { DevtoolsCollector, DevtoolsDisposer } from \"../types\";\n\n/** The shape of the event `dataSourceRegistry` emits for `\"query\"`. */\ntype QueryEvent = {\n  connection: string;\n  driver: \"postgres\" | \"mongodb\";\n  sql?: string;\n  bindings?: unknown[];\n  collection?: string;\n  command?: string;\n  pipeline?: unknown;\n  durationMs: number;\n  startedAt: number;\n  rowCount?: number;\n  error?: unknown;\n};\n\n/** Redacts query bindings through the logger's redaction rules. */\nfunction redactBindings(bindings: unknown[] | undefined): unknown[] | undefined {\n  if (!bindings) return bindings;\n\n  const redacted = applyRedact(\n    {\n      type: \"debug\",\n      module: \"devtools\",\n      action: \"query\",\n      message: undefined,\n      context: { bindings },\n    },\n    log.getRedact(),\n  );\n\n  return (redacted.context as { bindings: unknown[] }).bindings;\n}\n\n/**\n * Feeds every settled database query, from cascade's data source registry,\n * into the collector. A no-op when `@warlock.js/cascade` isn't installed —\n * it is an optional peer.\n */\nexport async function attachQuerySource(collector: DevtoolsCollector): Promise<DevtoolsDisposer> {\n  let dataSourceRegistry: {\n    on(event: \"query\", listener: (event: QueryEvent) => void): void;\n    off(event: \"query\", listener: (event: QueryEvent) => void): void;\n  };\n\n  try {\n    ({ dataSourceRegistry } = await import(\"@warlock.js/cascade\"));\n  } catch {\n    return () => {};\n  }\n\n  const listener = (event: QueryEvent) => {\n    collector.addQuery(currentRequestId(), {\n      connection: event.connection,\n      driver: event.driver,\n      sql: event.sql,\n      bindings: toSafeValue(redactBindings(event.bindings)) as unknown[] | undefined,\n      collection: event.collection,\n      command: event.command,\n      pipeline: event.pipeline,\n      startedAt: event.startedAt,\n      durationMs: event.durationMs,\n      rowCount: event.rowCount,\n      error:\n        event.error === undefined\n          ? undefined\n          : event.error instanceof Error\n            ? event.error.message\n            : String(event.error),\n      caller: captureCallerLocation(),\n    });\n  };\n\n  dataSourceRegistry.on(\"query\", listener);\n\n  return () => dataSourceRegistry.off(\"query\", listener);\n}\n","import type { TracingContext, TracingPhaseInfo, TracingRequestEndInfo } from \"@warlock.js/core\";\nimport { toSafeValue } from \"../safe-value\";\nimport type { DevtoolsCollector, DevtoolsDisposer, ResolvedDevtoolsOptions } from \"../types\";\n\n/**\n * Feeds request timelines from core's tracing hooks into the collector: one\n * `startRequest`/`endRequest` pair per HTTP request, with every named phase\n * in between. Requests to the dashboard's own path are never recorded, so\n * the dashboard never watches itself.\n */\nexport async function attachTracingSource(\n  collector: DevtoolsCollector,\n  options: ResolvedDevtoolsOptions,\n): Promise<DevtoolsDisposer> {\n  const { registerTracingHooks } = await import(\"@warlock.js/core\");\n\n  const isDashboardPath = (path: string): boolean => path.startsWith(options.path);\n\n  return registerTracingHooks({\n    onRequestStart(ctx: TracingContext) {\n      if (isDashboardPath(ctx.path)) return;\n\n      collector.startRequest({\n        id: ctx.requestId,\n        method: ctx.method,\n        path: ctx.path,\n        route: ctx.route,\n        startedAt: performance.timeOrigin + performance.now(),\n      });\n    },\n    onPhase(ctx: TracingContext, phase: TracingPhaseInfo) {\n      if (isDashboardPath(ctx.path)) return;\n\n      collector.addPhase(ctx.requestId, {\n        name: phase.name,\n        durationMs: phase.durationMs,\n        startedAt: phase.startedAt ?? performance.timeOrigin + performance.now() - phase.durationMs,\n        attrs: phase.attrs === undefined ? undefined : (toSafeValue(phase.attrs) as Record<string, unknown>),\n      });\n    },\n    onRequestEnd(ctx: TracingContext, result: TracingRequestEndInfo) {\n      if (isDashboardPath(ctx.path)) return;\n\n      collector.endRequest(ctx.requestId, {\n        status: result.status,\n        durationMs: result.durationMs,\n        error:\n          result.error === undefined\n            ? undefined\n            : result.error instanceof Error\n              ? result.error.message\n              : String(result.error),\n        route: ctx.route,\n      });\n    },\n  });\n}\n","/**\n * The devtools connector for `warlock.config.ts > connectors`.\n *\n * Deliberately a plain object with TYPE-ONLY imports from core: the config\n * file that constructs it must not drag core's runtime graph in at\n * config-load time. Core is imported lazily inside `boot()`, where the app\n * has already loaded it — see `queue/src/queue-connector.ts`, the pattern\n * this mirrors.\n */\nimport type { Connector, ConnectorLifecyclePhase } from \"@warlock.js/core\";\nimport { createCollector } from \"./collector\";\nimport { resolveDevtoolsOptions } from \"./options\";\nimport type { DevtoolsRouteRow } from \"./server\";\nimport { attachCacheSource } from \"./sources/cache-source\";\nimport { attachLogSource } from \"./sources/log-source\";\nimport { attachMailSource } from \"./sources/mail-source\";\nimport { attachQuerySource } from \"./sources/query-source\";\nimport { attachTracingSource } from \"./sources/tracing-source\";\nimport type { DevtoolsDisposer, DevtoolsOptions, DevtoolsQuery } from \"./types\";\n\n/**\n * Boots after the queue connector (priority 11), which is the last\n * built-in/framework connector to claim a priority; devtools has nothing\n * that depends on it, so it simply goes last.\n */\nexport const DEVTOOLS_CONNECTOR_PRIORITY = 12;\n\n/** Options accepted by `devtoolsConnector()`. */\nexport type DevtoolsConnectorOptions = DevtoolsOptions;\n\n/**\n * Construct the devtools connector.\n *\n * Refuses to run outside development: `boot()` checks\n * `Application.runtimeStrategy` and, when it isn't `\"development\"`, logs one\n * warning and returns without mounting a route or subscribing to anything.\n * In development it attaches every source (tracing, queries, cache, mail,\n * logs), then mounts the dashboard's routes on the HTTP server — before it\n * starts listening, the only point in the boot sequence where mounting is\n * possible (see `queue/src/dashboard-boot.ts` for the same constraint).\n *\n * Apps don't call this: `warlock dev` registers it automatically when the\n * package is installed (`warlock add devtools`). Keep it OUT of\n * `warlock.config.ts` — devtools is a dev dependency, so a production\n * install doesn't have it and a config import of it would fail there.\n */\nexport function devtoolsConnector(options: DevtoolsConnectorOptions = {}): Connector {\n  let active = false;\n  const disposers: DevtoolsDisposer[] = [];\n\n  const connector: Connector = {\n    name: \"devtools\",\n    priority: DEVTOOLS_CONNECTOR_PRIORITY,\n    // Core's `ConnectorLifecyclePhase.Late`; spelled out so this module stays\n    // free of a runtime import of core.\n    lifecyclePhase: \"late\" as ConnectorLifecyclePhase,\n    isActive: () => active,\n    async boot() {\n      const { Application, getHttpServer } = await import(\"@warlock.js/core\");\n      const { log } = await import(\"@warlock.js/logger\");\n\n      if (Application.runtimeStrategy !== \"development\") {\n        log.warn(\n          \"devtools\",\n          \"disabled\",\n          \"@warlock.js/devtools only runs in development; it is not mounted\",\n        );\n        return;\n      }\n\n      const resolved = resolveDevtoolsOptions(options);\n      const collector = createCollector(resolved);\n\n      await attachSource(log, \"tracing\", () => attachTracingSource(collector, resolved));\n      await attachSource(log, \"query\", () => attachQuerySource(collector));\n      await attachSource(log, \"cache\", () => attachCacheSource(collector));\n      await attachSource(log, \"mail\", () => attachMailSource(collector));\n      await attachSource(log, \"log\", () => attachLogSource(collector));\n\n      const { mountDevtoolsRoutes } = await import(\"./server\");\n      const postmanBuilder = await findPostmanBuilder();\n\n      mountDevtoolsRoutes(getHttpServer(), {\n        collector,\n        options: resolved,\n        isDevelopment: () => Application.runtimeStrategy === \"development\",\n        explain: (query) => explainQuery(query),\n        listRoutes: () => listRoutes(),\n        getOpenApiDocument: () => getOpenApiDocument(),\n        getPostmanCollection: postmanBuilder\n          ? async () => unwrapCollection(await postmanBuilder())\n          : undefined,\n      });\n\n      // An N+1 is worth a terminal line, not just a badge the developer has\n      // to go looking for: one warning per offending query shape, with the\n      // line that issued it.\n      disposers.push(\n        collector.subscribe((event) => {\n          if (event.type !== \"request\" || event.data.warningCount === 0) return;\n\n          for (const warning of collector.getRequest(event.data.id)?.warnings ?? []) {\n            const where = warning.caller ? ` — ${warning.caller.file}:${warning.caller.line}` : \"\";\n\n            log.warn(\n              \"devtools\",\n              \"n+1\",\n              `${warning.message}${where} (${event.data.method} ${event.data.path})`,\n            );\n          }\n        }),\n      );\n\n      active = true;\n\n      log.info(\"devtools\", \"ready\", `devtools ready at ${resolved.path}`);\n    },\n    async start() {},\n    async restart() {\n      await connector.shutdown();\n      await connector.start();\n    },\n    async shutdown() {\n      for (const dispose of disposers.splice(0)) dispose();\n      active = false;\n    },\n    shouldRestart: () => false,\n  };\n\n  /** Attaches one source, logging and continuing when it fails to attach. */\n  async function attachSource(\n    logger: { warn: (module: string, action: string, message: string) => unknown },\n    name: string,\n    attach: () => Promise<DevtoolsDisposer>,\n  ): Promise<void> {\n    try {\n      disposers.push(await attach());\n    } catch (error) {\n      logger.warn(\n        \"devtools\",\n        \"source-failed\",\n        `devtools' ${name} source failed to attach: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n\n  return connector;\n}\n\n/** Runs `EXPLAIN (FORMAT JSON)` for a stored Postgres query on its own connection. */\nasync function explainQuery(query: DevtoolsQuery): Promise<unknown> {\n  const { dataSourceRegistry } = await import(\"@warlock.js/cascade\");\n  const dataSource = dataSourceRegistry.get(query.connection);\n  const { rows } = await dataSource.raw(`EXPLAIN (FORMAT JSON) ${query.sql}`, query.bindings);\n\n  return rows;\n}\n\n/** Lists every registered HTTP route — the same source `warlock routes --json` reads. */\nasync function listRoutes(): Promise<DevtoolsRouteRow[]> {\n  const { router } = await import(\"@warlock.js/core\");\n\n  return router.list().map((route) => ({\n    method: route.method.toUpperCase(),\n    path: route.path,\n    name: route.name,\n    middleware: route.middleware?.map((middleware) => middleware.name || \"anonymous\"),\n  }));\n}\n\n/**\n * Builds the OpenAPI 3.1 document from the routes registered in this process —\n * the same generator behind `warlock generate.openapi`. Core is imported\n * lazily so this module stays free of a load-time dependency on it.\n */\nasync function getOpenApiDocument(): Promise<object> {\n  const { getDevelopmentOpenApiDocument } = await import(\"@warlock.js/core\");\n  const { document } = await getDevelopmentOpenApiDocument();\n\n  return document;\n}\n\ntype PostmanBuilder = () => Promise<unknown>;\n\n/**\n * Looks up core's Postman collection builder, `getDevelopmentPostmanCollection`.\n * Older cores do not export it; the route then answers 503. The lookup is\n * guarded because a namespace without the export may throw on access. Core is\n * imported lazily, like the OpenAPI document above.\n */\nasync function findPostmanBuilder(): Promise<PostmanBuilder | undefined> {\n  try {\n    const core: Record<string, unknown> = await import(\"@warlock.js/core\");\n    const build = core.getDevelopmentPostmanCollection;\n\n    return typeof build === \"function\" ? (build as PostmanBuilder) : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Core may return the collection itself or wrap it in `{ collection, warnings }`,\n * like the OpenAPI generator's `{ document, warnings }`.\n */\nfunction unwrapCollection(result: unknown): object {\n  if (result && typeof result === \"object\" && \"collection\" in result) {\n    return (result as { collection: object }).collection;\n  }\n\n  return result as object;\n}\n"],"mappings":";;;;;;;AAGA,SAAgB,eAAe,SAA0B,WAAsC;CAC7F,MAAM,yBAAS,IAAI,IAA6B;CAChD,KAAK,MAAM,SAAS,SAAS,OAAO,IAAI,MAAM,OAAO,CAAC,GAAI,OAAO,IAAI,MAAM,KAAK,KAAK,CAAC,GAAI,KAAK,CAAC;CAEhG,OAAO,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC,CACzB,QAAQ,GAAG,aAAa,QAAQ,UAAU,SAAS,CAAC,CACpD,MAAM,GAAG,OAAO,GAAG,WAAW,MAAM,SAAS,KAAK,MAAM,CAAC,CACzD,KAAK,CAAC,OAAO,cAAc;EAC1B,MAAM;EACN;EACA,OAAO,QAAQ;EACf,SAAS,QAAQ,QAAQ,OAAO,KAAK,SAAS,OAAO,GAAG,EAAE;EAC1D,GAAI,mBAAmB,OAAO,IAAI,EAAE,QAAQ,mBAAmB,OAAO,EAAE,IAAI,CAAC;CAC/E,EAAE;AACN;AAEA,SAAS,SAAS,OAAe,SAAyB;CACxD,OAAO,MAAM,SAAS,UAAU,GAAG,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,KAAK;AACtE;AAEA,SAAS,mBAAmB,SAA8D;CACxF,MAAM,0BAAU,IAAI,IAA+D;CACnF,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,CAAC,MAAM,QAAQ;EACnB,MAAM,MAAM,GAAG,MAAM,OAAO,KAAK,GAAG,MAAM,OAAO;EACjD,MAAM,QAAQ,QAAQ,IAAI,GAAG;EAC7B,QAAQ,IACN,KACA,QAAQ;GAAE,GAAG;GAAO,OAAO,MAAM,QAAQ;EAAE,IAAI;GAAE,QAAQ,MAAM;GAAQ,OAAO;EAAE,CAClF;CACF;CACA,OAAO,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,CAAC,CAAC,EAAE,EAAE;AACnF;;;;AC5BA,MAAM,iBAAiB;AACvB,MAAM,gBAAgB;;AAGtB,SAAgB,WAAW,OAAgC;CACzD,IAAI,MAAM,WAAW,YACnB,QAAQ,MAAM,OAAO,GAAE,CACpB,QAAQ,eAAe,GAAG,CAAC,CAC3B,QAAQ,gBAAgB,GAAG,CAAC,CAC5B,QAAQ,QAAQ,GAAG,CAAC,CACpB,KAAK;CAGV,OAAO,GAAG,MAAM,cAAc,GAAG,GAAG,MAAM,WAAW,GAAG,GAAG,KAAK,UAAU,oBAAoB,MAAM,QAAQ,CAAC;AAC/G;AAEA,SAAS,oBAAoB,OAAyB;CACpD,IAAI,YAAY,KAAK,GAAG,OAAO;CAE/B,IAAI,MAAM,QAAQ,KAAK,GAAG;EACxB,IAAI,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG;EACzC,OAAO,MAAM,IAAI,mBAAmB;CACtC;CAEA,MAAM,SAAS;CACf,OAAO,OAAO,YACZ,OAAO,KAAK,MAAM,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,oBAAoB,OAAO,IAAI,CAAC,CAAC,CAC1E;AACF;AAEA,SAAS,YAAY,OAAyB;CAC5C,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,OAAO;CACxD,IAAI,iBAAiB,MAAM,OAAO;CAClC,MAAM,SAAS;CACf,OAAO,OAAO,OAAO,gBAAgB,cAAc,OAAO,OAAO,SAAS;AAC5E;;;;ACxBA,MAAM,YAAY;AAClB,MAAM,WAAW;AACjB,MAAM,kBAAkB;;;;;;;AAQxB,SAAgB,gBAAgB,SAAqD;CACnF,MAAM,2BAAW,IAAI,IAA6B;CAClD,MAAM,wBAAQ,IAAI,IAA0B;CAC5C,MAAM,OAA2B,CAAC;CAClC,MAAM,aAAiC;EAAE,SAAS,CAAC;EAAG,OAAO,CAAC;EAAG,MAAM,CAAC;CAAE;CAC1E,MAAM,4BAAY,IAAI,IAA0C;CAChE,IAAI,gBAAgB;CAEpB,MAAM,QAAQ,UAA+B;EAC3C,KAAK,MAAM,YAAY,WACrB,IAAI;GACF,SAAS,KAAK;EAChB,QAAQ,CAER;CAEJ;CAEA,MAAM,iBAAoB,MAAW,UAAa;EAChD,KAAK,KAAK,KAAK;EACf,IAAI,KAAK,SAAS,iBAAiB,KAAK,MAAM;CAChD;CAEA,OAAO;EACL,aAAa,SAAS;GACpB,SAAS,OAAO,QAAQ,EAAE;GAC1B,SAAS,IAAI,QAAQ,IAAI;IACvB,GAAG;IACH,QAAQ,CAAC;IACT,SAAS,CAAC;IACV,OAAO,CAAC;IACR,MAAM,CAAC;IACP,OAAO,CAAC;IACR,UAAU,CAAC;GACb,CAAC;GACD,OAAO,SAAS,OAAO,QAAQ,aAC7B,SAAS,OAAO,SAAS,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAe;EAC1D;EACA,WAAW,IAAI,QAAQ;GACrB,MAAM,UAAU,SAAS,IAAI,EAAE;GAC/B,IAAI,CAAC,SAAS;GACd,QAAQ,SAAS,OAAO;GACxB,QAAQ,aAAa,OAAO;GAC5B,QAAQ,QAAQ,OAAO;GACvB,IAAI,OAAO,UAAU,QAAW,QAAQ,QAAQ,OAAO;GACvD,QAAQ,WAAW,eAAe,QAAQ,SAAS,QAAQ,iBAAiB;GAC5E,KAAK;IAAE,MAAM;IAAW,MAAM,QAAQ,OAAO;GAAE,CAAC;EAClD;EACA,SAAS,WAAW,OAAO;GACzB,SAAS,IAAI,SAAS,CAAC,EAAE,OAAO,KAAK,KAAK;EAC5C;EACA,SAAS,WAAW,OAAO;GACzB,MAAM,SAAwB;IAC5B,GAAG;IACH,IAAI,IAAI,EAAE;IACV,OAAO,WAAW,KAAK;GACzB;GACA,MAAM,UAAU,YAAY,SAAS,IAAI,SAAS,IAAI;GACtD,IAAI,SAAS,QAAQ,QAAQ,KAAK,MAAM;QACnC,cAAc,WAAW,SAAS,MAAM;GAC7C,OAAO;EACT;EACA,kBAAkB,WAAW,WAAW;GACtC,MAAM,UAAU,YAAY,SAAS,IAAI,SAAS,IAAI;GACtD,IAAI,SAAS,QAAQ,MAAM,KAAK,SAAS;QACpC,cAAc,WAAW,OAAO,SAAS;EAChD;EACA,OAAO,WAAW,OAAO;GACvB,MAAM,UAAU,YAAY,SAAS,IAAI,SAAS,IAAI;GACtD,IAAI,SAAS,QAAQ,KAAK,KAAK,KAAK;QAC/B,cAAc,WAAW,MAAM,KAAK;GACzC,KAAK,QAAQ,KAAK;GAClB,IAAI,KAAK,SAAS,UAAU,KAAK,IAAI;GACrC,KAAK;IAAE,MAAM;IAAO,MAAM;GAAM,CAAC;EACnC;EACA,QAAQ,MAAM;GACZ,MAAM,OAAO,KAAK,EAAE;GACpB,MAAM,IAAI,KAAK,IAAI,IAAI;GACvB,OAAO,MAAM,OAAO,WAAW,MAAM,OAAO,MAAM,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAe;GAC/E,IAAI,KAAK,WAAW,SAAS,IAAI,KAAK,SAAS,CAAC,EAAE,MAAM,KAAK,KAAK,EAAE;GACpE,KAAK;IAAE,MAAM;IAAQ,MAAM,YAAY,IAAI;GAAE,CAAC;EAChD;EACA,eAAe;GACb,OAAO,CAAC,GAAG,SAAS,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,OAAO;EACrD;EACA,WAAW,IAAI;GACb,MAAM,UAAU,SAAS,IAAI,EAAE;GAC/B,OAAO,WAAW,YAAY,OAAO;EACvC;EACA,YAAY;GACV,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,WAAW;EACtD;EACA,QAAQ,IAAI;GACV,MAAM,OAAO,MAAM,IAAI,EAAE;GACzB,OACE,QAAQ;IACN,GAAG;IACH,IAAI,CAAC,GAAG,KAAK,EAAE;IACf,IAAI,CAAC,GAAG,KAAK,EAAE;IACf,KAAK,CAAC,GAAG,KAAK,GAAG;IACjB,SAAS,EAAE,GAAG,KAAK,QAAQ;IAC3B,aAAa,CAAC,GAAG,KAAK,WAAW;GACnC;EAEJ;EACA,SAAS,SAAS,CAAC,GAAG;GACpB,MAAM,SAAS,OAAO,QAAQ,YAAY;GAC1C,OAAO,KACJ,QACE,WACE,CAAC,OAAO,SAAS,MAAM,UAAU,OAAO,WACxC,CAAC,UAAU,MAAM,OAAO,YAAY,CAAC,CAAC,SAAS,MAAM,EAC1D,CAAC,CACA,KAAK,WAAW,EAAE,GAAG,MAAM,EAAE;EAClC;EACA,gBAAgB;GACd,OAAO;IACL,SAAS,CAAC,GAAG,WAAW,OAAO;IAC/B,OAAO,CAAC,GAAG,WAAW,KAAK;IAC3B,MAAM,CAAC,GAAG,WAAW,IAAI;GAC3B;EACF;EACA,UAAU,UAA4B;GACpC,UAAU,IAAI,QAAQ;GACtB,aAAa,UAAU,OAAO,QAAQ;EACxC;EACA,QAAQ;GACN,SAAS,MAAM;GACf,MAAM,MAAM;GACZ,KAAK,SAAS;GACd,WAAW,QAAQ,SAAS;GAC5B,WAAW,MAAM,SAAS;GAC1B,WAAW,KAAK,SAAS;EAC3B;CACF;AACF;AAEA,SAAS,QAAQ,SAAkD;CACjE,MAAM,EAAE,IAAI,QAAQ,MAAM,OAAO,QAAQ,WAAW,eAAe;CACnE,OAAO;EACL;EACA;EACA;EACA;EACA;EACA;EACA;EACA,YAAY,QAAQ,QAAQ;EAC5B,cAAc,QAAQ,SAAS;CACjC;AACF;AAEA,SAAS,YAAY,MAAyC;CAC5D,MAAM,EAAE,IAAI,WAAW,YAAY,IAAI,YAAY;CACnD,OAAO;EAAE;EAAI;EAAW;EAAY,IAAI,CAAC,GAAG,EAAE;EAAG;CAAQ;AAC3D;AAEA,SAAS,YAAY,SAA2C;CAC9D,OAAO;EACL,GAAG;EACH,QAAQ,CAAC,GAAG,QAAQ,MAAM;EAC1B,SAAS,CAAC,GAAG,QAAQ,OAAO;EAC5B,OAAO,CAAC,GAAG,QAAQ,KAAK;EACxB,MAAM,CAAC,GAAG,QAAQ,IAAI;EACtB,OAAO,CAAC,GAAG,QAAQ,KAAK;EACxB,UAAU,CAAC,GAAG,QAAQ,QAAQ;CAChC;AACF;;;;;AChMA,SAAgB,uBAAuB,UAA2B,CAAC,GAA4B;CAC7F,MAAM,QAAQ,QAAQ,QAAQ,aAAY,CAAE,QAAQ,QAAQ,EAAE;CAC9D,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,oBAAoB,QAAQ,qBAAqB;CAEvD,IAAI,CAAC,QAAQ,CAAC,KAAK,WAAW,GAAG,GAC/B,MAAM,IAAI,MAAM,uEAAmE;CAGrF,IAAI,cAAc,GAChB,MAAM,IAAI,MAAM,qDAAmD;CAGrE,IAAI,oBAAoB,GACtB,MAAM,IAAI,MAAM,2DAAyD;CAG3E,OAAO;EAAE;EAAM;EAAa;CAAkB;AAChD;;;;;;;;;;;;;;ACTA,SAAgB,mBAAuC;CACrD,IAAI;EACF,OAAOA,gCAAe,WAAW,CAAC,EAAE;CACtC,QAAQ;EACN;CACF;AACF;;;;;ACdA,MAAM,cAAc;CAAC;CAAO;CAAQ;CAAO;CAAW;CAAe;AAAS;;;;;;AAgB9E,eAAsB,kBAAkB,WAAyD;CAC/F,IAAI;CAKJ,IAAI;EACF,CAAC,CAAE,SAAU,MAAM,OAAO;CAC5B,QAAQ;EACN,aAAa,CAAC;CAChB;CAEA,MAAM,WAAW,YAAY,KAAK,SAAS;EACzC,MAAM,WAAW,SAAyB;GACxC,MAAM,YAAoC;IACxC;IACA,QAAQ,KAAK;IACb,KAAK,KAAK;IACV,MAAM,KAAK;IACX,MAAM,KAAK;IACX,IAAI,KAAK,IAAI;IACb,YAAY,KAAK;GACnB;GAEA,UAAU,kBAAkB,iBAAiB,GAAG,SAAS;EAC3D;EAEA,MAAM,GAAG,MAAM,OAAO;EAEtB,OAAO;GAAE;GAAM;EAAQ;CACzB,CAAC;CAED,aAAa;EACX,KAAK,MAAM,EAAE,MAAM,aAAa,UAAU,MAAM,IAAI,MAAM,OAAO;CACnE;AACF;;;;ACvDA,MAAM,YAAY;;;;;;;;;;;AAYlB,SAAgB,YAAY,OAAyB;CACnD,OAAO,SAAS,OAAO,mBAAG,IAAI,QAAQ,CAAC;AACzC;AAEA,SAAS,SAAS,OAAgB,OAAe,MAAgC;CAC/E,IAAI,UAAU,QAAQ,UAAU,QAAW,OAAO;CAElD,QAAQ,OAAO,OAAf;EACE,KAAK;EACL,KAAK;EACL,KAAK,WACH,OAAO;EACT,KAAK,UACH,OAAO,MAAM,SAAS;EACxB,KAAK,UACH,OAAO,MAAM,SAAS;EACxB,KAAK,YACH;CACJ;CAEA,MAAM,SAAS;CAEf,IAAI,KAAK,IAAI,MAAM,GAAG,OAAO;CAC7B,IAAI,iBAAiB,MAAM,OAAO,OAAO,MAAM,MAAM,QAAQ,CAAC,IAAI,iBAAiB,MAAM,YAAY;CACrG,IAAI,iBAAiB,OAAO,OAAO;EAAE,MAAM,MAAM;EAAM,SAAS,MAAM;CAAQ;CAE9E,IAAI,SAAS,WAAW,OAAO,MAAM,QAAQ,KAAK,IAAI,YAAY;CAElE,KAAK,IAAI,MAAM;CAEf,IAAI;EACF,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,KAAK,SAAS,SAAS,MAAM,QAAQ,GAAG,IAAI,CAAC;EAEpF,MAAM,YAAY,OAAO,eAAe,MAAM;EAE9C,IAAI,cAAc,OAAO,aAAa,cAAc,MAAM;GACxD,MAAM,SAAU,OAAgC;GAEhD,IAAI,OAAO,WAAW,YACpB,IAAI;IACF,OAAO,SAAS,OAAO,KAAK,MAAM,GAAG,QAAQ,GAAG,IAAI;GACtD,QAAQ;IACN,OAAO,IAAI,gBAAgB,MAAM,EAAE;GACrC;GAGF,OAAO,IAAI,gBAAgB,MAAM,EAAE;EACrC;EAEA,MAAM,OAAgC,CAAC;EAEvC,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,MAAM,GAAG;GACjD,MAAM,OAAO,SAAS,OAAO,QAAQ,GAAG,IAAI;GAC5C,IAAI,SAAS,QAAW,KAAK,OAAO;EACtC;EAEA,OAAO;CACT,UAAU;EACR,KAAK,OAAO,MAAM;CACpB;AACF;AAEA,SAAS,gBAAgB,QAAwB;CAC/C,OAAQ,OAA+C,aAAa,QAAQ;AAC9E;;;;;ACtEA,SAAS,gBAAgB,MAAsD;CAC7E,OAAO,SAAS,UAAU,UAAU;AACtC;AAEA,IAAM,qBAAN,cAAiCC,8BAAW;CAI1C,AAAO,YAAY,AAAiB,WAA8B;EAChE,MAAM;EAD4B;cAHb;gBACP;CAIhB;CAEA,AAAO,IAAI,MAAyB;EAClC,IAAI,CAAC,KAAK,QAAQ;EAMlB,MAAM,QAA0B;GAC9B,OAAO,gBAAgB,KAAK,IAAI;GAChC,QAAQ,KAAK;GACb,QAAQ,KAAK;GACb,SAAS,KAAK;GACd,IAAI,KAAK,IAAI;GACb,SAAS,YAAY,KAAK,OAAO;EACnC;EAEA,KAAK,UAAU,OAAO,iBAAiB,GAAG,KAAK;CACjD;AACF;;;;;;;AAQA,eAAsB,gBAAgB,WAAyD;CAC7F,MAAM,UAAU,IAAI,mBAAmB,SAAS;CAEhD,uBAAI,WAAW,OAAO;CAEtB,aAAa;EACX,QAAQ,SAAS;CACnB;AACF;;;;AChDA,SAAS,gBAAgB,SAAsD;CAC7E,IAAI,CAAC,SAAS,OAAO;CAErB,OAAO,OAAO,YAAY,WAAW,UAAU,GAAG,QAAQ,KAAK,IAAI,QAAQ,QAAQ;AACrF;AAEA,SAAS,eAAe,YAAgD;CACtE,IAAI,OAAO,WAAW,YAAY,UAAU,OAAO,OAAO,WAAW,WAAW,OAAO;CACvF,IAAI,OAAO,SAAS,WAAW,OAAO,GAAG,OAAO,WAAW,QAAQ;AAGrE;AAEA,SAAS,qBAAqB,YAAoD;CAChF,OAAO;EACL,UAAU,WAAW;EACrB,aAAa,WAAW;EACxB,MAAM,eAAe,UAAU;CACjC;AACF;;;;;;AAOA,eAAsB,iBAAiB,WAAyD;CAC9F,MAAM,EAAE,eAAe,MAAM,OAAO;CAEpC,MAAM,eAAe,WAAW,YAAY,SAAuB;EACjE,MAAM,EAAE,eAAe;EAEvB,UAAU,QAAQ;GAChB,IAAI,KAAK;GACT,WAAW,iBAAiB;GAC5B,YAAY,KAAK,UAAU,QAAQ;GACnC,MAAM,gBAAgB,WAAW,IAAI;GACrC,IAAI,WAAW;GACf,IAAI,WAAW;GACf,KAAK,WAAW;GAChB,SAAS,WAAW;GACpB,MAAM,WAAW;GACjB,MAAM,WAAW;GACjB,SAAS,WAAW;GACpB,aAAa,WAAW,YAAY,IAAI,oBAAoB;EAC9D,CAAC;CACH,CAAC;CAED,aAAa,aAAa,YAAY;AACxC;;;;ACjDA,MAAM,mBAAmB,0CAA4B,IAAI,IAAI,oDAAsB,CAAC,CAAC;;AAGrF,SAAgB,sBACd,yBAAgB,IAAI,MAAM,EAAC,CAAC,SAAS,IACD;CACpC,KAAK,MAAM,QAAQ,MAAM,MAAM,IAAI,GAAG;EACpC,MAAM,QAAQ,WAAW,IAAI;EAC7B,IAAI,CAAC,SAAS,WAAW,MAAM,IAAI,GAAG;EACtC,OAAO;CACT;AAEF;AAEA,SAAS,WAAW,OAAmD;CAErE,MAAM,GAAG,SAAS,MAAM,UADV,MAAM,MAAM,8CACY,KAAK,CAAC;CAC5C,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,OAAO;CAEzC,OAAO;EAAE,MADI,cAAc,OACf;EAAG,MAAM,OAAO,IAAI;EAAG,QAAQ,OAAO,MAAM;CAAE;AAC5D;;AAGA,MAAM,yBAAyB;AAE/B,SAAS,cAAc,MAAsB;CAM3C,QALgB,CAAC,KAAK,WAAW,OAAO,IACpC,OACA,uBAAuB,KAAK,IAAI,gCAChB,MAAM,EAAE,SAAS,KAAK,CAAC,gCACvB,IAAI,EACV,CAAC,QAAQ,OAAO,GAAG;AACnC;AAEA,SAAS,WAAW,MAAuB;CACzC,OACE,KAAK,WAAW,OAAO,KACvB,KAAK,SAAS,gBAAgB,KAG9B,KAAK,WAAW,WAAW,KAC3B,KAAK,WAAW,gBAAgB;AAEpC;;;;;ACzBA,SAAS,eAAe,UAAwD;CAC9E,IAAI,CAAC,UAAU,OAAO;CAatB,2CAVE;EACE,MAAM;EACN,QAAQ;EACR,QAAQ;EACR,SAAS;EACT,SAAS,EAAE,SAAS;CACtB,GACAC,uBAAI,UAAU,CAGD,CAAC,CAAC,QAAoC;AACvD;;;;;;AAOA,eAAsB,kBAAkB,WAAyD;CAC/F,IAAI;CAKJ,IAAI;EACF,CAAC,CAAE,sBAAuB,MAAM,OAAO;CACzC,QAAQ;EACN,aAAa,CAAC;CAChB;CAEA,MAAM,YAAY,UAAsB;EACtC,UAAU,SAAS,iBAAiB,GAAG;GACrC,YAAY,MAAM;GAClB,QAAQ,MAAM;GACd,KAAK,MAAM;GACX,UAAU,YAAY,eAAe,MAAM,QAAQ,CAAC;GACpD,YAAY,MAAM;GAClB,SAAS,MAAM;GACf,UAAU,MAAM;GAChB,WAAW,MAAM;GACjB,YAAY,MAAM;GAClB,UAAU,MAAM;GAChB,OACE,MAAM,UAAU,SACZ,SACA,MAAM,iBAAiB,QACrB,MAAM,MAAM,UACZ,OAAO,MAAM,KAAK;GAC1B,QAAQ,sBAAsB;EAChC,CAAC;CACH;CAEA,mBAAmB,GAAG,SAAS,QAAQ;CAEvC,aAAa,mBAAmB,IAAI,SAAS,QAAQ;AACvD;;;;;;;;;;ACvEA,eAAsB,oBACpB,WACA,SAC2B;CAC3B,MAAM,EAAE,yBAAyB,MAAM,OAAO;CAE9C,MAAM,mBAAmB,SAA0B,KAAK,WAAW,QAAQ,IAAI;CAE/E,OAAO,qBAAqB;EAC1B,eAAe,KAAqB;GAClC,IAAI,gBAAgB,IAAI,IAAI,GAAG;GAE/B,UAAU,aAAa;IACrB,IAAI,IAAI;IACR,QAAQ,IAAI;IACZ,MAAM,IAAI;IACV,OAAO,IAAI;IACX,WAAW,YAAY,aAAa,YAAY,IAAI;GACtD,CAAC;EACH;EACA,QAAQ,KAAqB,OAAyB;GACpD,IAAI,gBAAgB,IAAI,IAAI,GAAG;GAE/B,UAAU,SAAS,IAAI,WAAW;IAChC,MAAM,MAAM;IACZ,YAAY,MAAM;IAClB,WAAW,MAAM,aAAa,YAAY,aAAa,YAAY,IAAI,IAAI,MAAM;IACjF,OAAO,MAAM,UAAU,SAAY,SAAa,YAAY,MAAM,KAAK;GACzE,CAAC;EACH;EACA,aAAa,KAAqB,QAA+B;GAC/D,IAAI,gBAAgB,IAAI,IAAI,GAAG;GAE/B,UAAU,WAAW,IAAI,WAAW;IAClC,QAAQ,OAAO;IACf,YAAY,OAAO;IACnB,OACE,OAAO,UAAU,SACb,SACA,OAAO,iBAAiB,QACtB,OAAO,MAAM,UACb,OAAO,OAAO,KAAK;IAC3B,OAAO,IAAI;GACb,CAAC;EACH;CACF,CAAC;AACH;;;;;;;;;AC/BA,MAAa,8BAA8B;;;;;;;;;;;;;;;;;AAqB3C,SAAgB,kBAAkB,UAAoC,CAAC,GAAc;CACnF,IAAI,SAAS;CACb,MAAM,YAAgC,CAAC;CAEvC,MAAM,YAAuB;EAC3B,MAAM;EACN;EAGA,gBAAgB;EAChB,gBAAgB;EAChB,MAAM,OAAO;GACX,MAAM,EAAE,aAAa,kBAAkB,MAAM,OAAO;GACpD,MAAM,EAAE,QAAQ,MAAM,OAAO;GAE7B,IAAI,YAAY,oBAAoB,eAAe;IACjD,IAAI,KACF,YACA,YACA,kEACF;IACA;GACF;GAEA,MAAM,WAAW,uBAAuB,OAAO;GAC/C,MAAM,YAAY,gBAAgB,QAAQ;GAE1C,MAAM,aAAa,KAAK,iBAAiB,oBAAoB,WAAW,QAAQ,CAAC;GACjF,MAAM,aAAa,KAAK,eAAe,kBAAkB,SAAS,CAAC;GACnE,MAAM,aAAa,KAAK,eAAe,kBAAkB,SAAS,CAAC;GACnE,MAAM,aAAa,KAAK,cAAc,iBAAiB,SAAS,CAAC;GACjE,MAAM,aAAa,KAAK,aAAa,gBAAgB,SAAS,CAAC;GAE/D,MAAM,EAAE,wBAAwB,2CAAM;GACtC,MAAM,iBAAiB,MAAM,mBAAmB;GAEhD,oBAAoB,cAAc,GAAG;IACnC;IACA,SAAS;IACT,qBAAqB,YAAY,oBAAoB;IACrD,UAAU,UAAU,aAAa,KAAK;IACtC,kBAAkB,WAAW;IAC7B,0BAA0B,mBAAmB;IAC7C,sBAAsB,iBAClB,YAAY,iBAAiB,MAAM,eAAe,CAAC,IACnD;GACN,CAAC;GAKD,UAAU,KACR,UAAU,WAAW,UAAU;IAC7B,IAAI,MAAM,SAAS,aAAa,MAAM,KAAK,iBAAiB,GAAG;IAE/D,KAAK,MAAM,WAAW,UAAU,WAAW,MAAM,KAAK,EAAE,CAAC,EAAE,YAAY,CAAC,GAAG;KACzE,MAAM,QAAQ,QAAQ,SAAS,MAAM,QAAQ,OAAO,KAAK,GAAG,QAAQ,OAAO,SAAS;KAEpF,IAAI,KACF,YACA,OACA,GAAG,QAAQ,UAAU,MAAM,IAAI,MAAM,KAAK,OAAO,GAAG,MAAM,KAAK,KAAK,EACtE;IACF;GACF,CAAC,CACH;GAEA,SAAS;GAET,IAAI,KAAK,YAAY,SAAS,qBAAqB,SAAS,MAAM;EACpE;EACA,MAAM,QAAQ,CAAC;EACf,MAAM,UAAU;GACd,MAAM,UAAU,SAAS;GACzB,MAAM,UAAU,MAAM;EACxB;EACA,MAAM,WAAW;GACf,KAAK,MAAM,WAAW,UAAU,OAAO,CAAC,GAAG,QAAQ;GACnD,SAAS;EACX;EACA,qBAAqB;CACvB;;CAGA,eAAe,aACb,QACA,MACA,QACe;EACf,IAAI;GACF,UAAU,KAAK,MAAM,OAAO,CAAC;EAC/B,SAAS,OAAO;GACd,OAAO,KACL,YACA,iBACA,aAAa,KAAK,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACrG;EACF;CACF;CAEA,OAAO;AACT;;AAGA,eAAe,aAAa,OAAwC;CAClE,MAAM,EAAE,uBAAuB,MAAM,OAAO;CAE5C,MAAM,EAAE,SAAS,MADE,mBAAmB,IAAI,MAAM,UAChB,CAAC,CAAC,IAAI,yBAAyB,MAAM,OAAO,MAAM,QAAQ;CAE1F,OAAO;AACT;;AAGA,eAAe,aAA0C;CACvD,MAAM,EAAE,WAAW,MAAM,OAAO;CAEhC,OAAO,OAAO,KAAK,CAAC,CAAC,KAAK,WAAW;EACnC,QAAQ,MAAM,OAAO,YAAY;EACjC,MAAM,MAAM;EACZ,MAAM,MAAM;EACZ,YAAY,MAAM,YAAY,KAAK,eAAe,WAAW,QAAQ,WAAW;CAClF,EAAE;AACJ;;;;;;AAOA,eAAe,qBAAsC;CACnD,MAAM,EAAE,kCAAkC,MAAM,OAAO;CACvD,MAAM,EAAE,aAAa,MAAM,8BAA8B;CAEzD,OAAO;AACT;;;;;;;AAUA,eAAe,qBAA0D;CACvE,IAAI;EAEF,MAAM,SAAQ,MAD8B,OAAO,oBACjC,CAAC;EAEnB,OAAO,OAAO,UAAU,aAAc,QAA2B;CACnE,QAAQ;EACN;CACF;AACF;;;;;AAMA,SAAS,iBAAiB,QAAyB;CACjD,IAAI,UAAU,OAAO,WAAW,YAAY,gBAAgB,QAC1D,OAAQ,OAAkC;CAG5C,OAAO;AACT"}

package/cjs/{server-CwK7n3-3.cjs → server-6mVWfWkG.cjs}

@@ -187,6 +187,18 @@ const UI_ASSETS = {
 	"scalar.js": {
 		contentType: "text/javascript; charset=utf-8",
 		file: uiFile("vendor/scalar/standalone.js")
+	},
+	"swagger-ui-bundle.js": {
+		contentType: "text/javascript; charset=utf-8",
+		file: uiFile("vendor/swagger-ui/swagger-ui-bundle.js")
+	},
+	"swagger-ui.css": {
+		contentType: "text/css; charset=utf-8",
+		file: uiFile("vendor/swagger-ui/swagger-ui.css")
+	},
+	"docs-swagger.js": {
+		contentType: "text/javascript; charset=utf-8",
+		file: uiFile("docs-swagger.js")
 	}
 };
 /** Sends `file` with `contentType` and no caching. */
@@ -195,8 +207,8 @@ function sendFile(reply, file, contentType) {
 }
 /**
 * Serves the static dashboard: `index.html` at the dashboard root and the
-* whitelisted assets (`app.js`, `app.css`, and the vendored Scalar bundle
-* as `scalar.js`). The asset name is matched against a fixed whitelist — never
+* whitelisted assets (`app.js`, `app.css`, the vendored Scalar bundle as
+* `scalar.js`, and the vendored Swagger UI files plus their init script). The asset name is matched against a fixed whitelist — never
 * joined into a filesystem path — so no request can traverse outside it.
 */
 function registerUiAssets(server) {
@@ -219,8 +231,10 @@ function registerUiAssets(server) {
 /**
 * Registers the API docs: `GET /api/openapi.json` returns the document core
 * builds from the registered routes (`deps.getOpenApiDocument`), and
-* `GET /docs` serves the page that renders it with Scalar. The page uses
-* relative URLs, so it works under whatever base path the dashboard is
+* `GET /docs` serves the page that renders it with Scalar and
+* `GET /docs/swagger` the same document in Swagger UI;
+* `GET /api/postman.json` returns the Postman collection core builds
+* (`deps.getPostmanCollection`). The pages use relative URLs, so it works under whatever base path the dashboard is
 * mounted on.
 */
 function registerOpenApiRoutes(server, deps) {
@@ -229,9 +243,17 @@ function registerOpenApiRoutes(server, deps) {
 		reply.header("Cache-Control", "no-store");
 		return deps.getOpenApiDocument();
 	});
+	server.get("/api/postman.json", async (_request, reply) => {
+		if (!deps.getPostmanCollection) return reply.code(503).header("Cache-Control", "no-store").send({ error: "The Postman collection is not available: the host did not provide a generator." });
+		reply.header("Cache-Control", "no-store");
+		return deps.getPostmanCollection();
+	});
 	server.get("/docs", (_request, reply) => {
 		sendFile(reply, node_path.default.join(resolveUiRoot(), "docs.html"), "text/html; charset=utf-8");
 	});
+	server.get("/docs/swagger", (_request, reply) => {
+		sendFile(reply, node_path.default.join(resolveUiRoot(), "docs-swagger.html"), "text/html; charset=utf-8");
+	});
 }
 
 //#endregion
@@ -318,4 +340,4 @@ function mountDevtoolsRoutes(server, deps) {
 
 //#endregion
 exports.mountDevtoolsRoutes = mountDevtoolsRoutes;
-//# sourceMappingURL=server-CwK7n3-3.cjs.map
+//# sourceMappingURL=server-6mVWfWkG.cjs.map

package/cjs/server-6mVWfWkG.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-6mVWfWkG.cjs","names":["path","path","path"],"sources":["../../../../../../devtools/src/server/background-routes.ts","../../../../../../devtools/src/server/explain-route.ts","../../../../../../devtools/src/server/guard.ts","../../../../../../devtools/src/server/log-routes.ts","../../../../../../devtools/src/server/mail-routes.ts","../../../../../../devtools/src/ui-root.ts","../../../../../../devtools/src/server/ui-assets.ts","../../../../../../devtools/src/server/openapi-routes.ts","../../../../../../devtools/src/server/requests-routes.ts","../../../../../../devtools/src/server/route-routes.ts","../../../../../../devtools/src/server/stream-route.ts","../../../../../../devtools/src/server/index.ts"],"sourcesContent":["import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\n/** Registers the route that returns work recorded outside any request. */\nexport function registerBackgroundRoutes(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.get(\"/api/background\", async () => deps.collector.getBackground());\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\n/**\n * The value the logger's redaction substitutes for a censored leaf\n * (`logger/src/redact/redact.ts`, `DEFAULT_CENSOR`). Not exported from\n * `@warlock.js/logger`, so matched by literal here.\n */\nconst REDACTED_PLACEHOLDER = \"[REDACTED]\";\n\nfunction isExplainableSql(sql: string | undefined): boolean {\n  return /^\\s*(select|with)\\b/i.test(sql ?? \"\");\n}\n\n/** Registers the EXPLAIN route: Postgres `SELECT`/`WITH` queries only. */\nexport function registerExplainRoute(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.post<{ Params: { requestId: string; queryId: string } }>(\n    \"/api/requests/:requestId/queries/:queryId/explain\",\n    async (request, reply) => {\n      const found = deps.collector.getRequest(request.params.requestId);\n      const query = found?.queries.find((item) => item.id === request.params.queryId);\n\n      if (!query) {\n        reply.code(404).send();\n        return;\n      }\n\n      if (query.driver !== \"postgres\" || !isExplainableSql(query.sql) || !deps.explain) {\n        reply.code(400).send({ error: \"Only Postgres SELECT or WITH queries can be explained\" });\n        return;\n      }\n\n      if (query.bindings?.some((binding) => binding === REDACTED_PLACEHOLDER)) {\n        reply.code(400).send({ error: \"bindings redacted\" });\n        return;\n      }\n\n      try {\n        const plan = await deps.explain(query);\n        return { plan };\n      } catch (error) {\n        reply.code(500).send({ error: error instanceof Error ? error.message : String(error) });\n      }\n    },\n  );\n}\n","import type { FastifyInstance, FastifyReply, FastifyRequest } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\nconst LOOPBACK_ADDRESSES = new Set([\"127.0.0.1\", \"::1\", \"::ffff:127.0.0.1\"]);\n\n/**\n * Whether `address` is a loopback address. Deliberately reads\n * `request.socket.remoteAddress` rather than `request.ip`, which honours\n * `X-Forwarded-For` when the app trusts a proxy — a header any client can\n * set.\n */\nfunction isLoopbackAddress(address: string | undefined): boolean {\n  return address !== undefined && LOOPBACK_ADDRESSES.has(address);\n}\n\n/**\n * Registers the dev-only, loopback-only guard as an `onRequest` hook on\n * `server`. Callers must register this inside an encapsulated Fastify\n * context (a plugin/prefix) so the hook never reaches routes outside the\n * dashboard.\n */\nexport function registerDevtoolsGuard(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.addHook(\"onRequest\", async (request: FastifyRequest, reply: FastifyReply) => {\n    if (!deps.isDevelopment() || !isLoopbackAddress(request.socket.remoteAddress)) {\n      // Returning the reply is what stops the lifecycle in an async hook;\n      // without it Fastify still runs the handler after the 404 is sent.\n      return reply.code(404).send();\n    }\n  });\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { DevtoolsLogEntry } from \"../types\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\ntype LogsQuery = { level?: DevtoolsLogEntry[\"level\"]; module?: string };\n\n/** Registers the log listing route, filterable by `level` and `module`. */\nexport function registerLogRoutes(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.get<{ Querystring: LogsQuery }>(\"/api/logs\", async (request) =>\n    deps.collector.listLogs({ level: request.query.level, module: request.query.module }),\n  );\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\nconst MAIL_HTML_CSP =\n  \"sandbox; default-src 'none'; img-src data: https: http:; style-src 'unsafe-inline'\";\n\n/** Registers the mailbox list, single-mail detail, and mail HTML routes. */\nexport function registerMailRoutes(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.get(\"/api/mails\", async () => deps.collector.listMails());\n\n  server.get<{ Params: { id: string } }>(\"/api/mails/:id\", async (request, reply) => {\n    const mail = deps.collector.getMail(request.params.id);\n\n    if (!mail) {\n      reply.code(404).send();\n      return;\n    }\n\n    const { html, ...rest } = mail;\n    return rest;\n  });\n\n  server.get<{ Params: { id: string } }>(\"/api/mails/:id/html\", async (request, reply) => {\n    const mail = deps.collector.getMail(request.params.id);\n\n    if (!mail || !mail.html) {\n      reply.code(404).send();\n      return;\n    }\n\n    reply\n      .header(\"Content-Security-Policy\", MAIL_HTML_CSP)\n      .header(\"X-Content-Type-Options\", \"nosniff\")\n      .header(\"Content-Type\", \"text/html; charset=utf-8\")\n      .send(mail.html);\n  });\n}\n","import { existsSync, readFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\n\nlet cachedUiRoot: string | undefined;\n\n/** Whether `dir` is this package's root: it has `ui/index.html` beside a `package.json` named `@warlock.js/devtools`. */\nfunction isPackageRoot(dir: string): boolean {\n  const indexHtml = path.join(dir, \"ui\", \"index.html\");\n  const packageJson = path.join(dir, \"package.json\");\n\n  if (!existsSync(indexHtml) || !existsSync(packageJson)) {\n    return false;\n  }\n\n  try {\n    const parsed = JSON.parse(readFileSync(packageJson, \"utf8\")) as { name?: string };\n    return parsed.name === \"@warlock.js/devtools\";\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Locate this package's `ui/` directory by walking up from the current\n * module's directory. Works from `src/` in development and from the built\n * `esm/`/`cjs/` output, since both sit beside `ui/` and `package.json` at\n * the package root.\n */\nexport function resolveUiRoot(): string {\n  if (cachedUiRoot) {\n    return cachedUiRoot;\n  }\n\n  let dir = path.dirname(fileURLToPath(import.meta.url));\n\n  while (true) {\n    if (isPackageRoot(dir)) {\n      cachedUiRoot = path.join(dir, \"ui\");\n      return cachedUiRoot;\n    }\n\n    const parent = path.dirname(dir);\n    if (parent === dir) {\n      throw new Error(\n        \"Could not locate the devtools UI directory: no ancestor of \" +\n          \"this module has a ui/index.html beside a package.json named \" +\n          \"@warlock.js/devtools.\",\n      );\n    }\n\n    dir = parent;\n  }\n}\n","import { readFileSync } from \"node:fs\";\nimport path from \"node:path\";\nimport type { FastifyInstance, FastifyReply } from \"fastify\";\nimport { resolveUiRoot } from \"../ui-root\";\n\n/**\n * Where an asset's bytes come from: a file in this package's `ui/` folder.\n */\ntype UiAsset = {\n  contentType: string;\n  file: () => string;\n};\n\nconst uiFile = (name: string) => () => path.join(resolveUiRoot(), name);\n\n/**\n * The only assets that can be requested. The request's asset name is looked\n * up here and never joined into a filesystem path.\n */\nconst UI_ASSETS: Record<string, UiAsset> = {\n  \"app.js\": { contentType: \"text/javascript; charset=utf-8\", file: uiFile(\"app.js\") },\n  \"app.css\": { contentType: \"text/css; charset=utf-8\", file: uiFile(\"app.css\") },\n  \"scalar.js\": {\n    contentType: \"text/javascript; charset=utf-8\",\n    file: uiFile(\"vendor/scalar/standalone.js\"),\n  },\n  \"swagger-ui-bundle.js\": {\n    contentType: \"text/javascript; charset=utf-8\",\n    file: uiFile(\"vendor/swagger-ui/swagger-ui-bundle.js\"),\n  },\n  \"swagger-ui.css\": {\n    contentType: \"text/css; charset=utf-8\",\n    file: uiFile(\"vendor/swagger-ui/swagger-ui.css\"),\n  },\n  \"docs-swagger.js\": {\n    contentType: \"text/javascript; charset=utf-8\",\n    file: uiFile(\"docs-swagger.js\"),\n  },\n};\n\n/** Sends `file` with `contentType` and no caching. */\nexport function sendFile(reply: FastifyReply, file: string, contentType: string): void {\n  reply\n    .header(\"Cache-Control\", \"no-store\")\n    .header(\"Content-Type\", contentType)\n    .send(readFileSync(file));\n}\n\n/**\n * Serves the static dashboard: `index.html` at the dashboard root and the\n * whitelisted assets (`app.js`, `app.css`, the vendored Scalar bundle as\n * `scalar.js`, and the vendored Swagger UI files plus their init script). The asset name is matched against a fixed whitelist — never\n * joined into a filesystem path — so no request can traverse outside it.\n */\nexport function registerUiAssets(server: FastifyInstance): void {\n  const serveIndex = (_request: unknown, reply: FastifyReply): void => {\n    sendFile(reply, path.join(resolveUiRoot(), \"index.html\"), \"text/html; charset=utf-8\");\n  };\n\n  server.get(\"/\", serveIndex);\n\n  server.get<{ Params: { name: string } }>(\"/assets/:name\", (request, reply) => {\n    const asset = Object.hasOwn(UI_ASSETS, request.params.name)\n      ? UI_ASSETS[request.params.name]\n      : undefined;\n\n    if (!asset) {\n      reply.code(404).header(\"Cache-Control\", \"no-store\").send();\n      return;\n    }\n\n    sendFile(reply, asset.file(), asset.contentType);\n  });\n}\n","import path from \"node:path\";\nimport type { FastifyInstance } from \"fastify\";\nimport { resolveUiRoot } from \"../ui-root\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\nimport { sendFile } from \"./ui-assets\";\n\n/**\n * Registers the API docs: `GET /api/openapi.json` returns the document core\n * builds from the registered routes (`deps.getOpenApiDocument`), and\n * `GET /docs` serves the page that renders it with Scalar and\n * `GET /docs/swagger` the same document in Swagger UI;\n * `GET /api/postman.json` returns the Postman collection core builds\n * (`deps.getPostmanCollection`). The pages use relative URLs, so it works under whatever base path the dashboard is\n * mounted on.\n */\nexport function registerOpenApiRoutes(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.get(\"/api/openapi.json\", async (_request, reply) => {\n    if (!deps.getOpenApiDocument) {\n      return reply.code(503).header(\"Cache-Control\", \"no-store\").send({\n        error: \"The OpenAPI document is not available: the host did not provide a generator.\",\n      });\n    }\n\n    reply.header(\"Cache-Control\", \"no-store\");\n\n    return deps.getOpenApiDocument();\n  });\n\n  server.get(\"/api/postman.json\", async (_request, reply) => {\n    if (!deps.getPostmanCollection) {\n      return reply.code(503).header(\"Cache-Control\", \"no-store\").send({\n        error: \"The Postman collection is not available: the host did not provide a generator.\",\n      });\n    }\n\n    reply.header(\"Cache-Control\", \"no-store\");\n\n    return deps.getPostmanCollection();\n  });\n\n  server.get(\"/docs\", (_request, reply) => {\n    sendFile(reply, path.join(resolveUiRoot(), \"docs.html\"), \"text/html; charset=utf-8\");\n  });\n\n  server.get(\"/docs/swagger\", (_request, reply) => {\n    sendFile(reply, path.join(resolveUiRoot(), \"docs-swagger.html\"), \"text/html; charset=utf-8\");\n  });\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\n/** Registers the request list, single-request detail, and clear routes. */\nexport function registerRequestsRoutes(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.get(\"/api/requests\", async () => deps.collector.listRequests());\n\n  server.get<{ Params: { id: string } }>(\"/api/requests/:id\", async (request, reply) => {\n    const found = deps.collector.getRequest(request.params.id);\n\n    if (!found) {\n      reply.code(404).send();\n      return;\n    }\n\n    return found;\n  });\n\n  server.delete(\"/api/requests\", async (_request, reply) => {\n    deps.collector.clear();\n    reply.code(204).send();\n  });\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\n/** Registers the route map, sourced from core's router via `deps.listRoutes`. */\nexport function registerRouteRoutes(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.get(\"/api/routes\", async () => (deps.listRoutes ? deps.listRoutes() : []));\n}\n","import type { FastifyInstance } from \"fastify\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\n\nconst PING_INTERVAL_MS = 15_000;\n\n/**\n * Registers the SSE stream: one `event: <type>\\ndata: <json>\\n\\n` frame per\n * collector event, plus a `: ping` comment every 15s to keep intermediaries\n * from closing an idle connection. The reply is hijacked so Fastify never\n * tries to serialize or close the response itself.\n */\nexport function registerStreamRoute(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.get(\"/api/stream\", async (request, reply) => {\n    reply.hijack();\n    const res = reply.raw;\n\n    res.writeHead(200, {\n      \"Content-Type\": \"text/event-stream\",\n      \"Cache-Control\": \"no-store\",\n      Connection: \"keep-alive\",\n    });\n\n    const dispose = deps.collector.subscribe((event) => {\n      res.write(`event: ${event.type}\\ndata: ${JSON.stringify(event.data)}\\n\\n`);\n    });\n\n    const pingTimer = setInterval(() => res.write(\": ping\\n\\n\"), PING_INTERVAL_MS);\n    pingTimer.unref();\n\n    request.raw.on(\"close\", () => {\n      clearInterval(pingTimer);\n      dispose();\n    });\n  });\n}\n","import type { FastifyError, FastifyInstance } from \"fastify\";\nimport { registerBackgroundRoutes } from \"./background-routes\";\nimport { registerExplainRoute } from \"./explain-route\";\nimport { registerDevtoolsGuard } from \"./guard\";\nimport { registerLogRoutes } from \"./log-routes\";\nimport { registerMailRoutes } from \"./mail-routes\";\nimport { registerOpenApiRoutes } from \"./openapi-routes\";\nimport { registerRequestsRoutes } from \"./requests-routes\";\nimport { registerRouteRoutes } from \"./route-routes\";\nimport { registerStreamRoute } from \"./stream-route\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\nimport { registerUiAssets } from \"./ui-assets\";\n\nexport type { DevtoolsRouteRow, MountDevtoolsRoutesDeps } from \"./types\";\n\n/**\n * Mounts the devtools dashboard and its API under `deps.options.path` on\n * `server`. Every route is registered inside a single encapsulated Fastify\n * context so the dev-only, loopback-only guard never reaches the app's\n * other routes.\n */\nexport function mountDevtoolsRoutes(server: FastifyInstance, deps: MountDevtoolsRoutesDeps): void {\n  server.register(\n    async (instance) => {\n      registerDevtoolsGuard(instance, deps);\n\n      instance.setErrorHandler((error: FastifyError, _request, reply) => {\n        reply.code(error.statusCode ?? 500).send({ error: error.message });\n      });\n\n      registerUiAssets(instance);\n      registerRequestsRoutes(instance, deps);\n      registerBackgroundRoutes(instance, deps);\n      registerMailRoutes(instance, deps);\n      registerLogRoutes(instance, deps);\n      registerRouteRoutes(instance, deps);\n      registerOpenApiRoutes(instance, deps);\n      registerExplainRoute(instance, deps);\n      registerStreamRoute(instance, deps);\n    },\n    { prefix: deps.options.path },\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,SAAgB,yBACd,QACA,MACM;CACN,OAAO,IAAI,mBAAmB,YAAY,KAAK,UAAU,cAAc,CAAC;AAC1E;;;;;;;;;ACDA,MAAM,uBAAuB;AAE7B,SAAS,iBAAiB,KAAkC;CAC1D,OAAO,uBAAuB,KAAK,OAAO,EAAE;AAC9C;;AAGA,SAAgB,qBAAqB,QAAyB,MAAqC;CACjG,OAAO,KACL,qDACA,OAAO,SAAS,UAAU;EAExB,MAAM,QADQ,KAAK,UAAU,WAAW,QAAQ,OAAO,SACrC,CAAC,EAAE,QAAQ,MAAM,SAAS,KAAK,OAAO,QAAQ,OAAO,OAAO;EAE9E,IAAI,CAAC,OAAO;GACV,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GACrB;EACF;EAEA,IAAI,MAAM,WAAW,cAAc,CAAC,iBAAiB,MAAM,GAAG,KAAK,CAAC,KAAK,SAAS;GAChF,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,wDAAwD,CAAC;GACvF;EACF;EAEA,IAAI,MAAM,UAAU,MAAM,YAAY,YAAY,oBAAoB,GAAG;GACvE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,oBAAoB,CAAC;GACnD;EACF;EAEA,IAAI;GAEF,OAAO,EAAE,YADU,KAAK,QAAQ,KAAK,EACvB;EAChB,SAAS,OAAO;GACd,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;EACxF;CACF,CACF;AACF;;;;AC1CA,MAAM,qBAAqB,IAAI,IAAI;CAAC;CAAa;CAAO;AAAkB,CAAC;;;;;;;AAQ3E,SAAS,kBAAkB,SAAsC;CAC/D,OAAO,YAAY,UAAa,mBAAmB,IAAI,OAAO;AAChE;;;;;;;AAQA,SAAgB,sBACd,QACA,MACM;CACN,OAAO,QAAQ,aAAa,OAAO,SAAyB,UAAwB;EAClF,IAAI,CAAC,KAAK,cAAc,KAAK,CAAC,kBAAkB,QAAQ,OAAO,aAAa,GAG1E,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;CAEhC,CAAC;AACH;;;;;ACzBA,SAAgB,kBAAkB,QAAyB,MAAqC;CAC9F,OAAO,IAAgC,aAAa,OAAO,YACzD,KAAK,UAAU,SAAS;EAAE,OAAO,QAAQ,MAAM;EAAO,QAAQ,QAAQ,MAAM;CAAO,CAAC,CACtF;AACF;;;;ACRA,MAAM,gBACJ;;AAGF,SAAgB,mBAAmB,QAAyB,MAAqC;CAC/F,OAAO,IAAI,cAAc,YAAY,KAAK,UAAU,UAAU,CAAC;CAE/D,OAAO,IAAgC,kBAAkB,OAAO,SAAS,UAAU;EACjF,MAAM,OAAO,KAAK,UAAU,QAAQ,QAAQ,OAAO,EAAE;EAErD,IAAI,CAAC,MAAM;GACT,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GACrB;EACF;EAEA,MAAM,EAAE,MAAM,GAAG,SAAS;EAC1B,OAAO;CACT,CAAC;CAED,OAAO,IAAgC,uBAAuB,OAAO,SAAS,UAAU;EACtF,MAAM,OAAO,KAAK,UAAU,QAAQ,QAAQ,OAAO,EAAE;EAErD,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAM;GACvB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GACrB;EACF;EAEA,MACG,OAAO,2BAA2B,aAAa,CAAC,CAChD,OAAO,0BAA0B,SAAS,CAAC,CAC3C,OAAO,gBAAgB,0BAA0B,CAAC,CAClD,KAAK,KAAK,IAAI;CACnB,CAAC;AACH;;;;AChCA,IAAI;;AAGJ,SAAS,cAAc,KAAsB;CAC3C,MAAM,YAAYA,kBAAK,KAAK,KAAK,MAAM,YAAY;CACnD,MAAM,cAAcA,kBAAK,KAAK,KAAK,cAAc;CAEjD,IAAI,yBAAY,SAAS,KAAK,yBAAY,WAAW,GACnD,OAAO;CAGT,IAAI;EAEF,OADe,KAAK,gCAAmB,aAAa,MAAM,CAC9C,CAAC,CAAC,SAAS;CACzB,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;AAQA,SAAgB,gBAAwB;CACtC,IAAI,cACF,OAAO;CAGT,IAAI,MAAMA,kBAAK,iFAAqC,CAAC;CAErD,OAAO,MAAM;EACX,IAAI,cAAc,GAAG,GAAG;GACtB,eAAeA,kBAAK,KAAK,KAAK,IAAI;GAClC,OAAO;EACT;EAEA,MAAM,SAASA,kBAAK,QAAQ,GAAG;EAC/B,IAAI,WAAW,KACb,MAAM,IAAI,MACR,8IAGF;EAGF,MAAM;CACR;AACF;;;;ACxCA,MAAM,UAAU,eAAuBC,kBAAK,KAAK,cAAc,GAAG,IAAI;;;;;AAMtE,MAAM,YAAqC;CACzC,UAAU;EAAE,aAAa;EAAkC,MAAM,OAAO,QAAQ;CAAE;CAClF,WAAW;EAAE,aAAa;EAA2B,MAAM,OAAO,SAAS;CAAE;CAC7E,aAAa;EACX,aAAa;EACb,MAAM,OAAO,6BAA6B;CAC5C;CACA,wBAAwB;EACtB,aAAa;EACb,MAAM,OAAO,wCAAwC;CACvD;CACA,kBAAkB;EAChB,aAAa;EACb,MAAM,OAAO,kCAAkC;CACjD;CACA,mBAAmB;EACjB,aAAa;EACb,MAAM,OAAO,iBAAiB;CAChC;AACF;;AAGA,SAAgB,SAAS,OAAqB,MAAc,aAA2B;CACrF,MACG,OAAO,iBAAiB,UAAU,CAAC,CACnC,OAAO,gBAAgB,WAAW,CAAC,CACnC,+BAAkB,IAAI,CAAC;AAC5B;;;;;;;AAQA,SAAgB,iBAAiB,QAA+B;CAC9D,MAAM,cAAc,UAAmB,UAA8B;EACnE,SAAS,OAAOA,kBAAK,KAAK,cAAc,GAAG,YAAY,GAAG,0BAA0B;CACtF;CAEA,OAAO,IAAI,KAAK,UAAU;CAE1B,OAAO,IAAkC,kBAAkB,SAAS,UAAU;EAC5E,MAAM,QAAQ,OAAO,OAAO,WAAW,QAAQ,OAAO,IAAI,IACtD,UAAU,QAAQ,OAAO,QACzB;EAEJ,IAAI,CAAC,OAAO;GACV,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,iBAAiB,UAAU,CAAC,CAAC,KAAK;GACzD;EACF;EAEA,SAAS,OAAO,MAAM,KAAK,GAAG,MAAM,WAAW;CACjD,CAAC;AACH;;;;;;;;;;;;;AC1DA,SAAgB,sBACd,QACA,MACM;CACN,OAAO,IAAI,qBAAqB,OAAO,UAAU,UAAU;EACzD,IAAI,CAAC,KAAK,oBACR,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,iBAAiB,UAAU,CAAC,CAAC,KAAK,EAC9D,OAAO,+EACT,CAAC;EAGH,MAAM,OAAO,iBAAiB,UAAU;EAExC,OAAO,KAAK,mBAAmB;CACjC,CAAC;CAED,OAAO,IAAI,qBAAqB,OAAO,UAAU,UAAU;EACzD,IAAI,CAAC,KAAK,sBACR,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,iBAAiB,UAAU,CAAC,CAAC,KAAK,EAC9D,OAAO,iFACT,CAAC;EAGH,MAAM,OAAO,iBAAiB,UAAU;EAExC,OAAO,KAAK,qBAAqB;CACnC,CAAC;CAED,OAAO,IAAI,UAAU,UAAU,UAAU;EACvC,SAAS,OAAOC,kBAAK,KAAK,cAAc,GAAG,WAAW,GAAG,0BAA0B;CACrF,CAAC;CAED,OAAO,IAAI,kBAAkB,UAAU,UAAU;EAC/C,SAAS,OAAOA,kBAAK,KAAK,cAAc,GAAG,mBAAmB,GAAG,0BAA0B;CAC7F,CAAC;AACH;;;;;AC9CA,SAAgB,uBACd,QACA,MACM;CACN,OAAO,IAAI,iBAAiB,YAAY,KAAK,UAAU,aAAa,CAAC;CAErE,OAAO,IAAgC,qBAAqB,OAAO,SAAS,UAAU;EACpF,MAAM,QAAQ,KAAK,UAAU,WAAW,QAAQ,OAAO,EAAE;EAEzD,IAAI,CAAC,OAAO;GACV,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;GACrB;EACF;EAEA,OAAO;CACT,CAAC;CAED,OAAO,OAAO,iBAAiB,OAAO,UAAU,UAAU;EACxD,KAAK,UAAU,MAAM;EACrB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK;CACvB,CAAC;AACH;;;;;ACrBA,SAAgB,oBAAoB,QAAyB,MAAqC;CAChG,OAAO,IAAI,eAAe,YAAa,KAAK,aAAa,KAAK,WAAW,IAAI,CAAC,CAAE;AAClF;;;;ACHA,MAAM,mBAAmB;;;;;;;AAQzB,SAAgB,oBAAoB,QAAyB,MAAqC;CAChG,OAAO,IAAI,eAAe,OAAO,SAAS,UAAU;EAClD,MAAM,OAAO;EACb,MAAM,MAAM,MAAM;EAElB,IAAI,UAAU,KAAK;GACjB,gBAAgB;GAChB,iBAAiB;GACjB,YAAY;EACd,CAAC;EAED,MAAM,UAAU,KAAK,UAAU,WAAW,UAAU;GAClD,IAAI,MAAM,UAAU,MAAM,KAAK,UAAU,KAAK,UAAU,MAAM,IAAI,EAAE,KAAK;EAC3E,CAAC;EAED,MAAM,YAAY,kBAAkB,IAAI,MAAM,YAAY,GAAG,gBAAgB;EAC7E,UAAU,MAAM;EAEhB,QAAQ,IAAI,GAAG,eAAe;GAC5B,cAAc,SAAS;GACvB,QAAQ;EACV,CAAC;CACH,CAAC;AACH;;;;;;;;;;ACbA,SAAgB,oBAAoB,QAAyB,MAAqC;CAChG,OAAO,SACL,OAAO,aAAa;EAClB,sBAAsB,UAAU,IAAI;EAEpC,SAAS,iBAAiB,OAAqB,UAAU,UAAU;GACjE,MAAM,KAAK,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,MAAM,QAAQ,CAAC;EACnE,CAAC;EAED,iBAAiB,QAAQ;EACzB,uBAAuB,UAAU,IAAI;EACrC,yBAAyB,UAAU,IAAI;EACvC,mBAAmB,UAAU,IAAI;EACjC,kBAAkB,UAAU,IAAI;EAChC,oBAAoB,UAAU,IAAI;EAClC,sBAAsB,UAAU,IAAI;EACpC,qBAAqB,UAAU,IAAI;EACnC,oBAAoB,UAAU,IAAI;CACpC,GACA,EAAE,QAAQ,KAAK,QAAQ,KAAK,CAC9B;AACF"}

package/esm/devtools-connector.mjs

@@ -52,13 +52,15 @@ function devtoolsConnector(options = {}) {
 			await attachSource(log, "mail", () => attachMailSource(collector));
 			await attachSource(log, "log", () => attachLogSource(collector));
 			const { mountDevtoolsRoutes } = await import("./server/index.mjs");
+			const postmanBuilder = await findPostmanBuilder();
 			mountDevtoolsRoutes(getHttpServer(), {
 				collector,
 				options: resolved,
 				isDevelopment: () => Application.runtimeStrategy === "development",
 				explain: (query) => explainQuery(query),
 				listRoutes: () => listRoutes(),
-				getOpenApiDocument: () => getOpenApiDocument()
+				getOpenApiDocument: () => getOpenApiDocument(),
+				getPostmanCollection: postmanBuilder ? async () => unwrapCollection(await postmanBuilder()) : void 0
 			});
 			disposers.push(collector.subscribe((event) => {
 				if (event.type !== "request" || event.data.warningCount === 0) return;
@@ -117,6 +119,28 @@ async function getOpenApiDocument() {
 	const { document } = await getDevelopmentOpenApiDocument();
 	return document;
 }
+/**
+* Looks up core's Postman collection builder, `getDevelopmentPostmanCollection`.
+* Older cores do not export it; the route then answers 503. The lookup is
+* guarded because a namespace without the export may throw on access. Core is
+* imported lazily, like the OpenAPI document above.
+*/
+async function findPostmanBuilder() {
+	try {
+		const build = (await import("@warlock.js/core")).getDevelopmentPostmanCollection;
+		return typeof build === "function" ? build : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* Core may return the collection itself or wrap it in `{ collection, warnings }`,
+* like the OpenAPI generator's `{ document, warnings }`.
+*/
+function unwrapCollection(result) {
+	if (result && typeof result === "object" && "collection" in result) return result.collection;
+	return result;
+}
 
 //#endregion
 export { devtoolsConnector };

package/esm/devtools-connector.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"devtools-connector.mjs","names":[],"sources":["../../../../../../devtools/src/devtools-connector.ts"],"sourcesContent":["/**\n * The devtools connector for `warlock.config.ts > connectors`.\n *\n * Deliberately a plain object with TYPE-ONLY imports from core: the config\n * file that constructs it must not drag core's runtime graph in at\n * config-load time. Core is imported lazily inside `boot()`, where the app\n * has already loaded it — see `queue/src/queue-connector.ts`, the pattern\n * this mirrors.\n */\nimport type { Connector, ConnectorLifecyclePhase } from \"@warlock.js/core\";\nimport { createCollector } from \"./collector\";\nimport { resolveDevtoolsOptions } from \"./options\";\nimport type { DevtoolsRouteRow } from \"./server\";\nimport { attachCacheSource } from \"./sources/cache-source\";\nimport { attachLogSource } from \"./sources/log-source\";\nimport { attachMailSource } from \"./sources/mail-source\";\nimport { attachQuerySource } from \"./sources/query-source\";\nimport { attachTracingSource } from \"./sources/tracing-source\";\nimport type { DevtoolsDisposer, DevtoolsOptions, DevtoolsQuery } from \"./types\";\n\n/**\n * Boots after the queue connector (priority 11), which is the last\n * built-in/framework connector to claim a priority; devtools has nothing\n * that depends on it, so it simply goes last.\n */\nexport const DEVTOOLS_CONNECTOR_PRIORITY = 12;\n\n/** Options accepted by `devtoolsConnector()`. */\nexport type DevtoolsConnectorOptions = DevtoolsOptions;\n\n/**\n * Construct the devtools connector.\n *\n * Refuses to run outside development: `boot()` checks\n * `Application.runtimeStrategy` and, when it isn't `\"development\"`, logs one\n * warning and returns without mounting a route or subscribing to anything.\n * In development it attaches every source (tracing, queries, cache, mail,\n * logs), then mounts the dashboard's routes on the HTTP server — before it\n * starts listening, the only point in the boot sequence where mounting is\n * possible (see `queue/src/dashboard-boot.ts` for the same constraint).\n *\n * Apps don't call this: `warlock dev` registers it automatically when the\n * package is installed (`warlock add devtools`). Keep it OUT of\n * `warlock.config.ts` — devtools is a dev dependency, so a production\n * install doesn't have it and a config import of it would fail there.\n */\nexport function devtoolsConnector(options: DevtoolsConnectorOptions = {}): Connector {\n  let active = false;\n  const disposers: DevtoolsDisposer[] = [];\n\n  const connector: Connector = {\n    name: \"devtools\",\n    priority: DEVTOOLS_CONNECTOR_PRIORITY,\n    // Core's `ConnectorLifecyclePhase.Late`; spelled out so this module stays\n    // free of a runtime import of core.\n    lifecyclePhase: \"late\" as ConnectorLifecyclePhase,\n    isActive: () => active,\n    async boot() {\n      const { Application, getHttpServer } = await import(\"@warlock.js/core\");\n      const { log } = await import(\"@warlock.js/logger\");\n\n      if (Application.runtimeStrategy !== \"development\") {\n        log.warn(\n          \"devtools\",\n          \"disabled\",\n          \"@warlock.js/devtools only runs in development; it is not mounted\",\n        );\n        return;\n      }\n\n      const resolved = resolveDevtoolsOptions(options);\n      const collector = createCollector(resolved);\n\n      await attachSource(log, \"tracing\", () => attachTracingSource(collector, resolved));\n      await attachSource(log, \"query\", () => attachQuerySource(collector));\n      await attachSource(log, \"cache\", () => attachCacheSource(collector));\n      await attachSource(log, \"mail\", () => attachMailSource(collector));\n      await attachSource(log, \"log\", () => attachLogSource(collector));\n\n      const { mountDevtoolsRoutes } = await import(\"./server\");\n\n      mountDevtoolsRoutes(getHttpServer(), {\n        collector,\n        options: resolved,\n        isDevelopment: () => Application.runtimeStrategy === \"development\",\n        explain: (query) => explainQuery(query),\n        listRoutes: () => listRoutes(),\n        getOpenApiDocument: () => getOpenApiDocument(),\n      });\n\n      // An N+1 is worth a terminal line, not just a badge the developer has\n      // to go looking for: one warning per offending query shape, with the\n      // line that issued it.\n      disposers.push(\n        collector.subscribe((event) => {\n          if (event.type !== \"request\" || event.data.warningCount === 0) return;\n\n          for (const warning of collector.getRequest(event.data.id)?.warnings ?? []) {\n            const where = warning.caller ? ` — ${warning.caller.file}:${warning.caller.line}` : \"\";\n\n            log.warn(\n              \"devtools\",\n              \"n+1\",\n              `${warning.message}${where} (${event.data.method} ${event.data.path})`,\n            );\n          }\n        }),\n      );\n\n      active = true;\n\n      log.info(\"devtools\", \"ready\", `devtools ready at ${resolved.path}`);\n    },\n    async start() {},\n    async restart() {\n      await connector.shutdown();\n      await connector.start();\n    },\n    async shutdown() {\n      for (const dispose of disposers.splice(0)) dispose();\n      active = false;\n    },\n    shouldRestart: () => false,\n  };\n\n  /** Attaches one source, logging and continuing when it fails to attach. */\n  async function attachSource(\n    logger: { warn: (module: string, action: string, message: string) => unknown },\n    name: string,\n    attach: () => Promise<DevtoolsDisposer>,\n  ): Promise<void> {\n    try {\n      disposers.push(await attach());\n    } catch (error) {\n      logger.warn(\n        \"devtools\",\n        \"source-failed\",\n        `devtools' ${name} source failed to attach: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n\n  return connector;\n}\n\n/** Runs `EXPLAIN (FORMAT JSON)` for a stored Postgres query on its own connection. */\nasync function explainQuery(query: DevtoolsQuery): Promise<unknown> {\n  const { dataSourceRegistry } = await import(\"@warlock.js/cascade\");\n  const dataSource = dataSourceRegistry.get(query.connection);\n  const { rows } = await dataSource.raw(`EXPLAIN (FORMAT JSON) ${query.sql}`, query.bindings);\n\n  return rows;\n}\n\n/** Lists every registered HTTP route — the same source `warlock routes --json` reads. */\nasync function listRoutes(): Promise<DevtoolsRouteRow[]> {\n  const { router } = await import(\"@warlock.js/core\");\n\n  return router.list().map((route) => ({\n    method: route.method.toUpperCase(),\n    path: route.path,\n    name: route.name,\n    middleware: route.middleware?.map((middleware) => middleware.name || \"anonymous\"),\n  }));\n}\n\n/**\n * Builds the OpenAPI 3.1 document from the routes registered in this process —\n * the same generator behind `warlock generate.openapi`. Core is imported\n * lazily so this module stays free of a load-time dependency on it.\n */\nasync function getOpenApiDocument(): Promise<object> {\n  const { getDevelopmentOpenApiDocument } = await import(\"@warlock.js/core\");\n  const { document } = await getDevelopmentOpenApiDocument();\n\n  return document;\n}\n"],"mappings":";;;;;;;;;;;;;;AAyBA,MAAa,8BAA8B;;;;;;;;;;;;;;;;;AAqB3C,SAAgB,kBAAkB,UAAoC,CAAC,GAAc;CACnF,IAAI,SAAS;CACb,MAAM,YAAgC,CAAC;CAEvC,MAAM,YAAuB;EAC3B,MAAM;EACN;EAGA,gBAAgB;EAChB,gBAAgB;EAChB,MAAM,OAAO;GACX,MAAM,EAAE,aAAa,kBAAkB,MAAM,OAAO;GACpD,MAAM,EAAE,QAAQ,MAAM,OAAO;GAE7B,IAAI,YAAY,oBAAoB,eAAe;IACjD,IAAI,KACF,YACA,YACA,kEACF;IACA;GACF;GAEA,MAAM,WAAW,uBAAuB,OAAO;GAC/C,MAAM,YAAY,gBAAgB,QAAQ;GAE1C,MAAM,aAAa,KAAK,iBAAiB,oBAAoB,WAAW,QAAQ,CAAC;GACjF,MAAM,aAAa,KAAK,eAAe,kBAAkB,SAAS,CAAC;GACnE,MAAM,aAAa,KAAK,eAAe,kBAAkB,SAAS,CAAC;GACnE,MAAM,aAAa,KAAK,cAAc,iBAAiB,SAAS,CAAC;GACjE,MAAM,aAAa,KAAK,aAAa,gBAAgB,SAAS,CAAC;GAE/D,MAAM,EAAE,wBAAwB,MAAM,OAAO;GAE7C,oBAAoB,cAAc,GAAG;IACnC;IACA,SAAS;IACT,qBAAqB,YAAY,oBAAoB;IACrD,UAAU,UAAU,aAAa,KAAK;IACtC,kBAAkB,WAAW;IAC7B,0BAA0B,mBAAmB;GAC/C,CAAC;GAKD,UAAU,KACR,UAAU,WAAW,UAAU;IAC7B,IAAI,MAAM,SAAS,aAAa,MAAM,KAAK,iBAAiB,GAAG;IAE/D,KAAK,MAAM,WAAW,UAAU,WAAW,MAAM,KAAK,EAAE,CAAC,EAAE,YAAY,CAAC,GAAG;KACzE,MAAM,QAAQ,QAAQ,SAAS,MAAM,QAAQ,OAAO,KAAK,GAAG,QAAQ,OAAO,SAAS;KAEpF,IAAI,KACF,YACA,OACA,GAAG,QAAQ,UAAU,MAAM,IAAI,MAAM,KAAK,OAAO,GAAG,MAAM,KAAK,KAAK,EACtE;IACF;GACF,CAAC,CACH;GAEA,SAAS;GAET,IAAI,KAAK,YAAY,SAAS,qBAAqB,SAAS,MAAM;EACpE;EACA,MAAM,QAAQ,CAAC;EACf,MAAM,UAAU;GACd,MAAM,UAAU,SAAS;GACzB,MAAM,UAAU,MAAM;EACxB;EACA,MAAM,WAAW;GACf,KAAK,MAAM,WAAW,UAAU,OAAO,CAAC,GAAG,QAAQ;GACnD,SAAS;EACX;EACA,qBAAqB;CACvB;;CAGA,eAAe,aACb,QACA,MACA,QACe;EACf,IAAI;GACF,UAAU,KAAK,MAAM,OAAO,CAAC;EAC/B,SAAS,OAAO;GACd,OAAO,KACL,YACA,iBACA,aAAa,KAAK,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACrG;EACF;CACF;CAEA,OAAO;AACT;;AAGA,eAAe,aAAa,OAAwC;CAClE,MAAM,EAAE,uBAAuB,MAAM,OAAO;CAE5C,MAAM,EAAE,SAAS,MADE,mBAAmB,IAAI,MAAM,UAChB,CAAC,CAAC,IAAI,yBAAyB,MAAM,OAAO,MAAM,QAAQ;CAE1F,OAAO;AACT;;AAGA,eAAe,aAA0C;CACvD,MAAM,EAAE,WAAW,MAAM,OAAO;CAEhC,OAAO,OAAO,KAAK,CAAC,CAAC,KAAK,WAAW;EACnC,QAAQ,MAAM,OAAO,YAAY;EACjC,MAAM,MAAM;EACZ,MAAM,MAAM;EACZ,YAAY,MAAM,YAAY,KAAK,eAAe,WAAW,QAAQ,WAAW;CAClF,EAAE;AACJ;;;;;;AAOA,eAAe,qBAAsC;CACnD,MAAM,EAAE,kCAAkC,MAAM,OAAO;CACvD,MAAM,EAAE,aAAa,MAAM,8BAA8B;CAEzD,OAAO;AACT"}
+{"version":3,"file":"devtools-connector.mjs","names":[],"sources":["../../../../../../devtools/src/devtools-connector.ts"],"sourcesContent":["/**\n * The devtools connector for `warlock.config.ts > connectors`.\n *\n * Deliberately a plain object with TYPE-ONLY imports from core: the config\n * file that constructs it must not drag core's runtime graph in at\n * config-load time. Core is imported lazily inside `boot()`, where the app\n * has already loaded it — see `queue/src/queue-connector.ts`, the pattern\n * this mirrors.\n */\nimport type { Connector, ConnectorLifecyclePhase } from \"@warlock.js/core\";\nimport { createCollector } from \"./collector\";\nimport { resolveDevtoolsOptions } from \"./options\";\nimport type { DevtoolsRouteRow } from \"./server\";\nimport { attachCacheSource } from \"./sources/cache-source\";\nimport { attachLogSource } from \"./sources/log-source\";\nimport { attachMailSource } from \"./sources/mail-source\";\nimport { attachQuerySource } from \"./sources/query-source\";\nimport { attachTracingSource } from \"./sources/tracing-source\";\nimport type { DevtoolsDisposer, DevtoolsOptions, DevtoolsQuery } from \"./types\";\n\n/**\n * Boots after the queue connector (priority 11), which is the last\n * built-in/framework connector to claim a priority; devtools has nothing\n * that depends on it, so it simply goes last.\n */\nexport const DEVTOOLS_CONNECTOR_PRIORITY = 12;\n\n/** Options accepted by `devtoolsConnector()`. */\nexport type DevtoolsConnectorOptions = DevtoolsOptions;\n\n/**\n * Construct the devtools connector.\n *\n * Refuses to run outside development: `boot()` checks\n * `Application.runtimeStrategy` and, when it isn't `\"development\"`, logs one\n * warning and returns without mounting a route or subscribing to anything.\n * In development it attaches every source (tracing, queries, cache, mail,\n * logs), then mounts the dashboard's routes on the HTTP server — before it\n * starts listening, the only point in the boot sequence where mounting is\n * possible (see `queue/src/dashboard-boot.ts` for the same constraint).\n *\n * Apps don't call this: `warlock dev` registers it automatically when the\n * package is installed (`warlock add devtools`). Keep it OUT of\n * `warlock.config.ts` — devtools is a dev dependency, so a production\n * install doesn't have it and a config import of it would fail there.\n */\nexport function devtoolsConnector(options: DevtoolsConnectorOptions = {}): Connector {\n  let active = false;\n  const disposers: DevtoolsDisposer[] = [];\n\n  const connector: Connector = {\n    name: \"devtools\",\n    priority: DEVTOOLS_CONNECTOR_PRIORITY,\n    // Core's `ConnectorLifecyclePhase.Late`; spelled out so this module stays\n    // free of a runtime import of core.\n    lifecyclePhase: \"late\" as ConnectorLifecyclePhase,\n    isActive: () => active,\n    async boot() {\n      const { Application, getHttpServer } = await import(\"@warlock.js/core\");\n      const { log } = await import(\"@warlock.js/logger\");\n\n      if (Application.runtimeStrategy !== \"development\") {\n        log.warn(\n          \"devtools\",\n          \"disabled\",\n          \"@warlock.js/devtools only runs in development; it is not mounted\",\n        );\n        return;\n      }\n\n      const resolved = resolveDevtoolsOptions(options);\n      const collector = createCollector(resolved);\n\n      await attachSource(log, \"tracing\", () => attachTracingSource(collector, resolved));\n      await attachSource(log, \"query\", () => attachQuerySource(collector));\n      await attachSource(log, \"cache\", () => attachCacheSource(collector));\n      await attachSource(log, \"mail\", () => attachMailSource(collector));\n      await attachSource(log, \"log\", () => attachLogSource(collector));\n\n      const { mountDevtoolsRoutes } = await import(\"./server\");\n      const postmanBuilder = await findPostmanBuilder();\n\n      mountDevtoolsRoutes(getHttpServer(), {\n        collector,\n        options: resolved,\n        isDevelopment: () => Application.runtimeStrategy === \"development\",\n        explain: (query) => explainQuery(query),\n        listRoutes: () => listRoutes(),\n        getOpenApiDocument: () => getOpenApiDocument(),\n        getPostmanCollection: postmanBuilder\n          ? async () => unwrapCollection(await postmanBuilder())\n          : undefined,\n      });\n\n      // An N+1 is worth a terminal line, not just a badge the developer has\n      // to go looking for: one warning per offending query shape, with the\n      // line that issued it.\n      disposers.push(\n        collector.subscribe((event) => {\n          if (event.type !== \"request\" || event.data.warningCount === 0) return;\n\n          for (const warning of collector.getRequest(event.data.id)?.warnings ?? []) {\n            const where = warning.caller ? ` — ${warning.caller.file}:${warning.caller.line}` : \"\";\n\n            log.warn(\n              \"devtools\",\n              \"n+1\",\n              `${warning.message}${where} (${event.data.method} ${event.data.path})`,\n            );\n          }\n        }),\n      );\n\n      active = true;\n\n      log.info(\"devtools\", \"ready\", `devtools ready at ${resolved.path}`);\n    },\n    async start() {},\n    async restart() {\n      await connector.shutdown();\n      await connector.start();\n    },\n    async shutdown() {\n      for (const dispose of disposers.splice(0)) dispose();\n      active = false;\n    },\n    shouldRestart: () => false,\n  };\n\n  /** Attaches one source, logging and continuing when it fails to attach. */\n  async function attachSource(\n    logger: { warn: (module: string, action: string, message: string) => unknown },\n    name: string,\n    attach: () => Promise<DevtoolsDisposer>,\n  ): Promise<void> {\n    try {\n      disposers.push(await attach());\n    } catch (error) {\n      logger.warn(\n        \"devtools\",\n        \"source-failed\",\n        `devtools' ${name} source failed to attach: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n  }\n\n  return connector;\n}\n\n/** Runs `EXPLAIN (FORMAT JSON)` for a stored Postgres query on its own connection. */\nasync function explainQuery(query: DevtoolsQuery): Promise<unknown> {\n  const { dataSourceRegistry } = await import(\"@warlock.js/cascade\");\n  const dataSource = dataSourceRegistry.get(query.connection);\n  const { rows } = await dataSource.raw(`EXPLAIN (FORMAT JSON) ${query.sql}`, query.bindings);\n\n  return rows;\n}\n\n/** Lists every registered HTTP route — the same source `warlock routes --json` reads. */\nasync function listRoutes(): Promise<DevtoolsRouteRow[]> {\n  const { router } = await import(\"@warlock.js/core\");\n\n  return router.list().map((route) => ({\n    method: route.method.toUpperCase(),\n    path: route.path,\n    name: route.name,\n    middleware: route.middleware?.map((middleware) => middleware.name || \"anonymous\"),\n  }));\n}\n\n/**\n * Builds the OpenAPI 3.1 document from the routes registered in this process —\n * the same generator behind `warlock generate.openapi`. Core is imported\n * lazily so this module stays free of a load-time dependency on it.\n */\nasync function getOpenApiDocument(): Promise<object> {\n  const { getDevelopmentOpenApiDocument } = await import(\"@warlock.js/core\");\n  const { document } = await getDevelopmentOpenApiDocument();\n\n  return document;\n}\n\ntype PostmanBuilder = () => Promise<unknown>;\n\n/**\n * Looks up core's Postman collection builder, `getDevelopmentPostmanCollection`.\n * Older cores do not export it; the route then answers 503. The lookup is\n * guarded because a namespace without the export may throw on access. Core is\n * imported lazily, like the OpenAPI document above.\n */\nasync function findPostmanBuilder(): Promise<PostmanBuilder | undefined> {\n  try {\n    const core: Record<string, unknown> = await import(\"@warlock.js/core\");\n    const build = core.getDevelopmentPostmanCollection;\n\n    return typeof build === \"function\" ? (build as PostmanBuilder) : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Core may return the collection itself or wrap it in `{ collection, warnings }`,\n * like the OpenAPI generator's `{ document, warnings }`.\n */\nfunction unwrapCollection(result: unknown): object {\n  if (result && typeof result === \"object\" && \"collection\" in result) {\n    return (result as { collection: object }).collection;\n  }\n\n  return result as object;\n}\n"],"mappings":";;;;;;;;;;;;;;AAyBA,MAAa,8BAA8B;;;;;;;;;;;;;;;;;AAqB3C,SAAgB,kBAAkB,UAAoC,CAAC,GAAc;CACnF,IAAI,SAAS;CACb,MAAM,YAAgC,CAAC;CAEvC,MAAM,YAAuB;EAC3B,MAAM;EACN;EAGA,gBAAgB;EAChB,gBAAgB;EAChB,MAAM,OAAO;GACX,MAAM,EAAE,aAAa,kBAAkB,MAAM,OAAO;GACpD,MAAM,EAAE,QAAQ,MAAM,OAAO;GAE7B,IAAI,YAAY,oBAAoB,eAAe;IACjD,IAAI,KACF,YACA,YACA,kEACF;IACA;GACF;GAEA,MAAM,WAAW,uBAAuB,OAAO;GAC/C,MAAM,YAAY,gBAAgB,QAAQ;GAE1C,MAAM,aAAa,KAAK,iBAAiB,oBAAoB,WAAW,QAAQ,CAAC;GACjF,MAAM,aAAa,KAAK,eAAe,kBAAkB,SAAS,CAAC;GACnE,MAAM,aAAa,KAAK,eAAe,kBAAkB,SAAS,CAAC;GACnE,MAAM,aAAa,KAAK,cAAc,iBAAiB,SAAS,CAAC;GACjE,MAAM,aAAa,KAAK,aAAa,gBAAgB,SAAS,CAAC;GAE/D,MAAM,EAAE,wBAAwB,MAAM,OAAO;GAC7C,MAAM,iBAAiB,MAAM,mBAAmB;GAEhD,oBAAoB,cAAc,GAAG;IACnC;IACA,SAAS;IACT,qBAAqB,YAAY,oBAAoB;IACrD,UAAU,UAAU,aAAa,KAAK;IACtC,kBAAkB,WAAW;IAC7B,0BAA0B,mBAAmB;IAC7C,sBAAsB,iBAClB,YAAY,iBAAiB,MAAM,eAAe,CAAC,IACnD;GACN,CAAC;GAKD,UAAU,KACR,UAAU,WAAW,UAAU;IAC7B,IAAI,MAAM,SAAS,aAAa,MAAM,KAAK,iBAAiB,GAAG;IAE/D,KAAK,MAAM,WAAW,UAAU,WAAW,MAAM,KAAK,EAAE,CAAC,EAAE,YAAY,CAAC,GAAG;KACzE,MAAM,QAAQ,QAAQ,SAAS,MAAM,QAAQ,OAAO,KAAK,GAAG,QAAQ,OAAO,SAAS;KAEpF,IAAI,KACF,YACA,OACA,GAAG,QAAQ,UAAU,MAAM,IAAI,MAAM,KAAK,OAAO,GAAG,MAAM,KAAK,KAAK,EACtE;IACF;GACF,CAAC,CACH;GAEA,SAAS;GAET,IAAI,KAAK,YAAY,SAAS,qBAAqB,SAAS,MAAM;EACpE;EACA,MAAM,QAAQ,CAAC;EACf,MAAM,UAAU;GACd,MAAM,UAAU,SAAS;GACzB,MAAM,UAAU,MAAM;EACxB;EACA,MAAM,WAAW;GACf,KAAK,MAAM,WAAW,UAAU,OAAO,CAAC,GAAG,QAAQ;GACnD,SAAS;EACX;EACA,qBAAqB;CACvB;;CAGA,eAAe,aACb,QACA,MACA,QACe;EACf,IAAI;GACF,UAAU,KAAK,MAAM,OAAO,CAAC;EAC/B,SAAS,OAAO;GACd,OAAO,KACL,YACA,iBACA,aAAa,KAAK,4BAA4B,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,GACrG;EACF;CACF;CAEA,OAAO;AACT;;AAGA,eAAe,aAAa,OAAwC;CAClE,MAAM,EAAE,uBAAuB,MAAM,OAAO;CAE5C,MAAM,EAAE,SAAS,MADE,mBAAmB,IAAI,MAAM,UAChB,CAAC,CAAC,IAAI,yBAAyB,MAAM,OAAO,MAAM,QAAQ;CAE1F,OAAO;AACT;;AAGA,eAAe,aAA0C;CACvD,MAAM,EAAE,WAAW,MAAM,OAAO;CAEhC,OAAO,OAAO,KAAK,CAAC,CAAC,KAAK,WAAW;EACnC,QAAQ,MAAM,OAAO,YAAY;EACjC,MAAM,MAAM;EACZ,MAAM,MAAM;EACZ,YAAY,MAAM,YAAY,KAAK,eAAe,WAAW,QAAQ,WAAW;CAClF,EAAE;AACJ;;;;;;AAOA,eAAe,qBAAsC;CACnD,MAAM,EAAE,kCAAkC,MAAM,OAAO;CACvD,MAAM,EAAE,aAAa,MAAM,8BAA8B;CAEzD,OAAO;AACT;;;;;;;AAUA,eAAe,qBAA0D;CACvE,IAAI;EAEF,MAAM,SAAQ,MAD8B,OAAO,oBACjC,CAAC;EAEnB,OAAO,OAAO,UAAU,aAAc,QAA2B;CACnE,QAAQ;EACN;CACF;AACF;;;;;AAMA,SAAS,iBAAiB,QAAyB;CACjD,IAAI,UAAU,OAAO,WAAW,YAAY,gBAAgB,QAC1D,OAAQ,OAAkC;CAG5C,OAAO;AACT"}

package/esm/server/openapi-routes.mjs

@@ -6,8 +6,10 @@ import path from "node:path";
 /**
 * Registers the API docs: `GET /api/openapi.json` returns the document core
 * builds from the registered routes (`deps.getOpenApiDocument`), and
-* `GET /docs` serves the page that renders it with Scalar. The page uses
-* relative URLs, so it works under whatever base path the dashboard is
+* `GET /docs` serves the page that renders it with Scalar and
+* `GET /docs/swagger` the same document in Swagger UI;
+* `GET /api/postman.json` returns the Postman collection core builds
+* (`deps.getPostmanCollection`). The pages use relative URLs, so it works under whatever base path the dashboard is
 * mounted on.
 */
 function registerOpenApiRoutes(server, deps) {
@@ -16,9 +18,17 @@ function registerOpenApiRoutes(server, deps) {
 		reply.header("Cache-Control", "no-store");
 		return deps.getOpenApiDocument();
 	});
+	server.get("/api/postman.json", async (_request, reply) => {
+		if (!deps.getPostmanCollection) return reply.code(503).header("Cache-Control", "no-store").send({ error: "The Postman collection is not available: the host did not provide a generator." });
+		reply.header("Cache-Control", "no-store");
+		return deps.getPostmanCollection();
+	});
 	server.get("/docs", (_request, reply) => {
 		sendFile(reply, path.join(resolveUiRoot(), "docs.html"), "text/html; charset=utf-8");
 	});
+	server.get("/docs/swagger", (_request, reply) => {
+		sendFile(reply, path.join(resolveUiRoot(), "docs-swagger.html"), "text/html; charset=utf-8");
+	});
 }
 
 //#endregion

package/esm/server/openapi-routes.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"openapi-routes.mjs","names":[],"sources":["../../../../../../../devtools/src/server/openapi-routes.ts"],"sourcesContent":["import path from \"node:path\";\nimport type { FastifyInstance } from \"fastify\";\nimport { resolveUiRoot } from \"../ui-root\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\nimport { sendFile } from \"./ui-assets\";\n\n/**\n * Registers the API docs: `GET /api/openapi.json` returns the document core\n * builds from the registered routes (`deps.getOpenApiDocument`), and\n * `GET /docs` serves the page that renders it with Scalar. The page uses\n * relative URLs, so it works under whatever base path the dashboard is\n * mounted on.\n */\nexport function registerOpenApiRoutes(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.get(\"/api/openapi.json\", async (_request, reply) => {\n    if (!deps.getOpenApiDocument) {\n      return reply.code(503).header(\"Cache-Control\", \"no-store\").send({\n        error: \"The OpenAPI document is not available: the host did not provide a generator.\",\n      });\n    }\n\n    reply.header(\"Cache-Control\", \"no-store\");\n\n    return deps.getOpenApiDocument();\n  });\n\n  server.get(\"/docs\", (_request, reply) => {\n    sendFile(reply, path.join(resolveUiRoot(), \"docs.html\"), \"text/html; charset=utf-8\");\n  });\n}\n"],"mappings":";;;;;;;;;;;;AAaA,SAAgB,sBACd,QACA,MACM;CACN,OAAO,IAAI,qBAAqB,OAAO,UAAU,UAAU;EACzD,IAAI,CAAC,KAAK,oBACR,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,iBAAiB,UAAU,CAAC,CAAC,KAAK,EAC9D,OAAO,+EACT,CAAC;EAGH,MAAM,OAAO,iBAAiB,UAAU;EAExC,OAAO,KAAK,mBAAmB;CACjC,CAAC;CAED,OAAO,IAAI,UAAU,UAAU,UAAU;EACvC,SAAS,OAAO,KAAK,KAAK,cAAc,GAAG,WAAW,GAAG,0BAA0B;CACrF,CAAC;AACH"}
+{"version":3,"file":"openapi-routes.mjs","names":[],"sources":["../../../../../../../devtools/src/server/openapi-routes.ts"],"sourcesContent":["import path from \"node:path\";\nimport type { FastifyInstance } from \"fastify\";\nimport { resolveUiRoot } from \"../ui-root\";\nimport type { MountDevtoolsRoutesDeps } from \"./types\";\nimport { sendFile } from \"./ui-assets\";\n\n/**\n * Registers the API docs: `GET /api/openapi.json` returns the document core\n * builds from the registered routes (`deps.getOpenApiDocument`), and\n * `GET /docs` serves the page that renders it with Scalar and\n * `GET /docs/swagger` the same document in Swagger UI;\n * `GET /api/postman.json` returns the Postman collection core builds\n * (`deps.getPostmanCollection`). The pages use relative URLs, so it works under whatever base path the dashboard is\n * mounted on.\n */\nexport function registerOpenApiRoutes(\n  server: FastifyInstance,\n  deps: MountDevtoolsRoutesDeps,\n): void {\n  server.get(\"/api/openapi.json\", async (_request, reply) => {\n    if (!deps.getOpenApiDocument) {\n      return reply.code(503).header(\"Cache-Control\", \"no-store\").send({\n        error: \"The OpenAPI document is not available: the host did not provide a generator.\",\n      });\n    }\n\n    reply.header(\"Cache-Control\", \"no-store\");\n\n    return deps.getOpenApiDocument();\n  });\n\n  server.get(\"/api/postman.json\", async (_request, reply) => {\n    if (!deps.getPostmanCollection) {\n      return reply.code(503).header(\"Cache-Control\", \"no-store\").send({\n        error: \"The Postman collection is not available: the host did not provide a generator.\",\n      });\n    }\n\n    reply.header(\"Cache-Control\", \"no-store\");\n\n    return deps.getPostmanCollection();\n  });\n\n  server.get(\"/docs\", (_request, reply) => {\n    sendFile(reply, path.join(resolveUiRoot(), \"docs.html\"), \"text/html; charset=utf-8\");\n  });\n\n  server.get(\"/docs/swagger\", (_request, reply) => {\n    sendFile(reply, path.join(resolveUiRoot(), \"docs-swagger.html\"), \"text/html; charset=utf-8\");\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;AAeA,SAAgB,sBACd,QACA,MACM;CACN,OAAO,IAAI,qBAAqB,OAAO,UAAU,UAAU;EACzD,IAAI,CAAC,KAAK,oBACR,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,iBAAiB,UAAU,CAAC,CAAC,KAAK,EAC9D,OAAO,+EACT,CAAC;EAGH,MAAM,OAAO,iBAAiB,UAAU;EAExC,OAAO,KAAK,mBAAmB;CACjC,CAAC;CAED,OAAO,IAAI,qBAAqB,OAAO,UAAU,UAAU;EACzD,IAAI,CAAC,KAAK,sBACR,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,iBAAiB,UAAU,CAAC,CAAC,KAAK,EAC9D,OAAO,iFACT,CAAC;EAGH,MAAM,OAAO,iBAAiB,UAAU;EAExC,OAAO,KAAK,qBAAqB;CACnC,CAAC;CAED,OAAO,IAAI,UAAU,UAAU,UAAU;EACvC,SAAS,OAAO,KAAK,KAAK,cAAc,GAAG,WAAW,GAAG,0BAA0B;CACrF,CAAC;CAED,OAAO,IAAI,kBAAkB,UAAU,UAAU;EAC/C,SAAS,OAAO,KAAK,KAAK,cAAc,GAAG,mBAAmB,GAAG,0BAA0B;CAC7F,CAAC;AACH"}

package/esm/server/ui-assets.mjs

@@ -20,6 +20,18 @@ const UI_ASSETS = {
 	"scalar.js": {
 		contentType: "text/javascript; charset=utf-8",
 		file: uiFile("vendor/scalar/standalone.js")
+	},
+	"swagger-ui-bundle.js": {
+		contentType: "text/javascript; charset=utf-8",
+		file: uiFile("vendor/swagger-ui/swagger-ui-bundle.js")
+	},
+	"swagger-ui.css": {
+		contentType: "text/css; charset=utf-8",
+		file: uiFile("vendor/swagger-ui/swagger-ui.css")
+	},
+	"docs-swagger.js": {
+		contentType: "text/javascript; charset=utf-8",
+		file: uiFile("docs-swagger.js")
 	}
 };
 /** Sends `file` with `contentType` and no caching. */
@@ -28,8 +40,8 @@ function sendFile(reply, file, contentType) {
 }
 /**
 * Serves the static dashboard: `index.html` at the dashboard root and the
-* whitelisted assets (`app.js`, `app.css`, and the vendored Scalar bundle
-* as `scalar.js`). The asset name is matched against a fixed whitelist — never
+* whitelisted assets (`app.js`, `app.css`, the vendored Scalar bundle as
+* `scalar.js`, and the vendored Swagger UI files plus their init script). The asset name is matched against a fixed whitelist — never
 * joined into a filesystem path — so no request can traverse outside it.
 */
 function registerUiAssets(server) {