@zhama/tego-plugin-sdk 1.36.1 → 1.37.0

package/dist/dev.cjs

@@ -0,0 +1,358 @@
+"use strict";var W=Object.defineProperty;var o=(e,t)=>W(e,"name",{value:t,configurable:!0});var chunkIMAVYQ4U_cjs=require("./chunk-IMAVYQ4U.cjs"),chunk4LKRXDYY_cjs=require("./chunk-4LKRXDYY.cjs");require("./chunk-HZ4YWRYX.cjs");var chunkMWMGJJ74_cjs=require("./chunk-MWMGJJ74.cjs");require("./chunk-SKNPNPJP.cjs"),require("./chunk-45Y4CR4R.cjs");var chunk2P6UEAPV_cjs=require("./chunk-2P6UEAPV.cjs");require("./chunk-N4SXZZPY.cjs"),require("./chunk-6HNG5OZI.cjs");var chunkBN6TGHSB_cjs=require("./chunk-BN6TGHSB.cjs");require("./chunk-AJY7ZHXK.cjs"),require("./chunk-OP64Y4IN.cjs");var crypto=require("crypto"),fs=require("fs"),promises=require("fs/promises"),http=require("http"),module$1=require("module"),path=require("path"),child_process=require("child_process"),net=require("net"),DEV_USER_HEADER="x-tego-dev-user-id",DEV_ROLES_HEADER="x-tego-dev-roles",DEV_TENANT_ID="dev-tenant",DEFAULT_DEV_USER_ID="00000000-0000-4000-8000-000000000001";function devCallerOf(e){const t=o(n=>(Array.isArray(n)?n[0]:n)?.trim()??"","single"),r=t(e[DEV_USER_HEADER])||DEFAULT_DEV_USER_ID;let a=[];try{const n=JSON.parse(t(e[DEV_ROLES_HEADER])||"[]");Array.isArray(n)&&(a=n.filter(i=>typeof i=="string"))}catch{}return{userId:r,roles:a}}o(devCallerOf,"devCallerOf");function gatewayHeaders(e,t,r,a=Date.now()){const n={};for(const[s,l]of Object.entries(e)){const d=s.toLowerCase();l===void 0||d.startsWith("x-tego-")||d==="cookie"||d==="authorization"||d==="host"||d==="connection"||(n[d]=Array.isArray(l)?l.join(", "):l)}const i=JSON.stringify(t.roles),u=String(a);return n[chunkBN6TGHSB_cjs.PLUGIN_CONTEXT_HEADERS.userId]=t.userId,n[chunkBN6TGHSB_cjs.PLUGIN_CONTEXT_HEADERS.tenantId]=DEV_TENANT_ID,n[chunkBN6TGHSB_cjs.PLUGIN_CONTEXT_HEADERS.roles]=i,n[chunkBN6TGHSB_cjs.PLUGIN_CONTEXT_HEADERS.issuedAt]=u,n[chunkBN6TGHSB_cjs.PLUGIN_CONTEXT_HEADERS.signature]=chunkIMAVYQ4U_cjs.signPluginContext({userId:t.userId,tenantId:DEV_TENANT_ID,rolesHeader:i,avatarId:"",issuedAt:u},r),n}o(gatewayHeaders,"gatewayHeaders");var DEV_MIGRATIONS_TABLE="tego_dev_migrations";function devSchemaName(e){return`tego_dev_${e.toLowerCase().replace(/[^a-z0-9_]/g,"_")}`.slice(0,63)}o(devSchemaName,"devSchemaName");function devDatabaseUrl(e,t){const r=new URL(e);r.searchParams.delete("options");const a=r.search.replace(/^\?/,"");return r.search=`?${a?`${a}&`:""}options=${encodeURIComponent(`-c search_path=${t}`)}`,r.toString()}o(devDatabaseUrl,"devDatabaseUrl");async function connect(e){let t;try{t=await import("pg")}catch(n){throw new Error(`The local backend needs the "pg" driver; add it to the plugin's dependencies.`,{cause:n})}const r=t.default?.Client??t.Client;if(!r)throw new Error('The "pg" module has no Client constructor.');const a=new r({connectionString:e});try{await a.connect()}catch(n){throw new Error(`Cannot connect to DATABASE_URL (${redactUrl(e)}): ${n instanceof Error?n.message:String(n)}`,{cause:n})}return a}o(connect,"connect");function redactUrl(e){try{const t=new URL(e);return t.password&&(t.password="***"),t.toString()}catch{return"<unparseable DATABASE_URL>"}}o(redactUrl,"redactUrl");var quote=o(e=>`"${e.replace(/"/g,'""')}"`,"quote");async function applyDevMigrations(e){const t=await promises.readdir(e.migrationsDir).then(i=>i.filter(u=>u.endsWith(".sql")).sort(),i=>{if(i.code==="ENOENT")return[];throw i}),r=await connect(e.databaseUrl),a=quote(e.schema),n=`${a}.${quote(DEV_MIGRATIONS_TABLE)}`;try{await r.query(`CREATE SCHEMA IF NOT EXISTS ${a}`),await r.query(`CREATE TABLE IF NOT EXISTS ${n} (name text PRIMARY KEY, applied_at timestamptz NOT NULL DEFAULT now())`);const i=new Set((await r.query(`SELECT name FROM ${n}`)).rows.map(s=>String(s.name))),u=[];for(const s of t){if(i.has(s))continue;const l=await promises.readFile(path.join(e.migrationsDir,s),"utf8");await r.query("BEGIN");try{await r.query(`SET LOCAL search_path TO ${a}`),await r.query("SELECT set_config('app.tenant_id', $1, true)",[e.tenantId]),await r.query(l),await r.query(`INSERT INTO ${n} (name) VALUES ($1)`,[s]),await r.query("COMMIT")}catch(d){throw await r.query("ROLLBACK").catch(()=>{}),new Error(`Migration ${s} failed: ${d instanceof Error?d.message:String(d)}`,{cause:d})}u.push(s)}return u}finally{await r.end().catch(()=>{})}}o(applyDevMigrations,"applyDevMigrations");var REBUILD_DEBOUNCE_MS=250,STOP_TIMEOUT_MS=5e3;function freePort(){return new Promise((e,t)=>{const r=net.createServer();r.once("error",t),r.listen(0,"127.0.0.1",()=>{const a=r.address(),n=typeof a=="object"&&a?a.port:0;r.close(()=>e(n))})})}o(freePort,"freePort");function stopChild(e){return!e||e.exitCode!==null||e.signalCode!==null?Promise.resolve():new Promise(t=>{const r=setTimeout(()=>{e.kill("SIGKILL"),t()},STOP_TIMEOUT_MS);e.once("exit",()=>{clearTimeout(r),t()}),e.kill("SIGTERM")})}o(stopChild,"stopChild");async function startDevBackend(e){const{part:t,log:r}=e;if(t.runtime==="python")throw new Error("The local preview runs TypeScript backends only; a python backend runs through the platform.");const a=await freePort(),n=devSchemaName(e.pluginId),i=path.resolve(e.root,t.migrationsDirPath),u=path.join(e.outDir,t.entryPath),s={...process.env,NODE_ENV:"development",TEGO_PLUGIN_ID:e.pluginId,TEGO_PLUGIN_VERSION:e.version,TEGO_PLUGIN_INSTALL_ID:"dev-install",TEGO_TENANT_ID:DEV_TENANT_ID,TEGO_PLUGIN_PORT:String(a),TEGO_PLUGIN_HEALTH_PATH:t.healthPath,TEGO_PLUGIN_HOST_API_URL:e.hostApiUrl,TEGO_PLUGIN_HOST_API_TOKEN:e.hostApiToken,TEGO_PLUGIN_GATEWAY_KEY:e.gatewayKey,DATABASE_URL:devDatabaseUrl(e.databaseUrl,n)};let l=null,d=!1;async function f(){await promises.rm(e.outDir,{recursive:!0,force:!0}),await chunk4LKRXDYY_cjs.buildPluginBackend(t,{root:e.root,outDir:e.outDir});const g=await applyDevMigrations({databaseUrl:e.databaseUrl,schema:n,migrationsDir:i,tenantId:DEV_TENANT_ID});for(const E of g)r(`[backend] applied migration ${E}`)}o(f,"build");function v(){const g=child_process.spawn(process.execPath,[u],{env:s,stdio:["ignore","pipe","pipe"]});l=g,g.stdout?.on("data",E=>process.stdout.write(E)),g.stderr?.on("data",E=>process.stderr.write(E)),g.on("exit",E=>{l===g&&!d&&(l=null,r(`[backend] exited (code ${E??"null"}); it starts again on the next save`))})}o(v,"start"),await f(),v(),r(`[backend] ${e.pluginId} on 127.0.0.1:${a}, schema ${n} in ${redactUrl(e.databaseUrl)}`);let y=null,m=null,D=!1;const A=o(async()=>{if(m){D=!0;return}m=(async()=>{try{await f();const g=l;l=null,await stopChild(g),d||(v(),r("[backend] rebuilt and restarted"))}catch(g){r(`[backend] rebuild failed, the previous build keeps running: ${g instanceof Error?g.message:String(g)}`)}})(),await m,m=null,D&&!d&&(D=!1,await A())},"rebuild"),N=[];for(const g of[t.dir,"shared"]){const E=path.resolve(e.root,g);fs.existsSync(E)&&N.push(fs.watch(E,{recursive:!0},(_,k)=>{k&&/(^|[\\/])(node_modules|dist)([\\/]|$)/.test(String(k))||(y&&clearTimeout(y),y=setTimeout(()=>void A(),REBUILD_DEBOUNCE_MS))}))}return{port:a,schema:n,async close(){d=!0,y&&clearTimeout(y);for(const g of N)g.close();await m,await stopChild(l)}}}o(startDevBackend,"startDevBackend");var FAKE_HOST_PREFIX="/__tego/host",FAKE_FILES_PREFIX="/__tego/files",MAX_JSON_BYTES=1024*1024;async function readBody(e,t=1/0){const r=[];let a=0;for await(const n of e){if(a+=n.length,a>t)throw Object.assign(new Error("body too large"),{status:413});r.push(n)}return Buffer.concat(r)}o(readBody,"readBody");function send(e,t,r){if(r===void 0){e.writeHead(t),e.end();return}e.writeHead(t,{"content-type":"application/json"}),e.end(JSON.stringify(r))}o(send,"send");function storagePath(e,t){const r=path.resolve(e),a=path.resolve(r,t);if(!t||path.isAbsolute(t)||!a.startsWith(r+path.sep))throw Object.assign(new Error(`invalid storage key ${JSON.stringify(t)}`),{status:400});return a}o(storagePath,"storagePath");var metaOf=o(e=>`${e}.tego-meta.json`,"metaOf");async function head(e){const t=await promises.stat(e).catch(()=>null);if(!t?.isFile())return null;const r=await promises.readFile(metaOf(e),"utf8").then(a=>JSON.parse(a),()=>({}));return{size:t.size,contentType:r.contentType??null,versionTag:crypto.createHash("sha1").update(`${t.size}:${t.mtimeMs}`).digest("hex")}}o(head,"head");async function put(e,t,r){await promises.mkdir(path.dirname(e),{recursive:!0}),await promises.writeFile(e,t),await promises.writeFile(metaOf(e),JSON.stringify({contentType:r??null}))}o(put,"put");async function handleFakeHost(e,t,r){const a=new URL(e.url??"/","http://preview.local");try{if(a.pathname.startsWith(FAKE_FILES_PREFIX)){const s=storagePath(r.storageDir,a.searchParams.get("key")??""),l=await head(s);if(!l)return send(t,404);t.writeHead(200,{"content-type":l.contentType??"application/octet-stream"}),t.end(await promises.readFile(s));return}if(e.headers.authorization!==`Bearer ${r.token}`)return send(t,401,{error:"bad host API token"});const n=a.pathname.slice(FAKE_HOST_PREFIX.length)||"/",i=o(async()=>JSON.parse((await readBody(e,MAX_JSON_BYTES)).toString("utf8")||"{}"),"json"),u=o(s=>storagePath(r.storageDir,String(s??"")),"keyFile");switch(n){case"/config":return send(t,200,{data:{values:r.config()}});case"/log":{const{level:s,message:l,fields:d}=await i();return r.log(`[backend ${String(s??"info")}] ${String(l??"")}${d?` ${JSON.stringify(d)}`:""}`),send(t,200,{data:{}})}case"/events":{const{name:s,payload:l}=await i();return r.log(`[event] ${String(s)} ${JSON.stringify(l??null)}`),send(t,200,{data:{}})}case"/notifications":return r.log(`[notification] ${JSON.stringify(await i())}`),send(t,200,{data:{id:crypto.randomUUID()}});case"/directory/identity":{const{userId:s}=await i(),l=r.users().get(String(s));return send(t,200,{data:{active:!!l,roleNames:l??[],memberships:[],checkedAt:new Date().toISOString()}})}case"/directory/list":{const{kind:s,search:l,ids:d}=await i(),f=typeof l=="string"?l.toLowerCase():"",v=Array.isArray(d)?new Set(d.map(String)):void 0,y=s==="users"?[...r.users().keys()].filter(m=>(!v||v.has(m))&&m.toLowerCase().includes(f)).map(m=>({id:m,displayName:m,active:!0})):[];return send(t,200,{data:{items:y,hasMore:!1}})}case"/directory/match":{const{userId:s,principals:l}=await i(),d=Array.isArray(l)?l:[];return send(t,200,{data:{active:r.users().has(String(s)),matched:d.flatMap((f,v)=>f.kind==="user"&&f.id===s?[v]:[]),checkedAt:new Date().toISOString()}})}case"/directory/validate":{const{principals:s}=await i(),l=Array.isArray(s)?s:[],d=r.users();return send(t,200,{data:{invalid:l.flatMap((f,v)=>f.kind==="user"&&d.has(String(f.id))?[]:[v])}})}case"/storage/get":case"/storage/stream":{const s=u(a.searchParams.get("key"));if(e.method==="POST"&&n==="/storage/stream")return await put(s,await readBody(e),e.headers["content-type"]),send(t,200,{data:{}});const l=await head(s);if(!l)return send(t,404);let d=await promises.readFile(s);const f=Number(a.searchParams.get("bytes"));Number.isFinite(f)&&f>0&&(d=d.subarray(0,f)),t.writeHead(200,{"content-type":l.contentType??"application/octet-stream"}),t.end(d);return}case"/storage/put":return await put(u(a.searchParams.get("key")),await readBody(e),e.headers["content-type"]),send(t,200,{data:{}});case"/storage/head":{const s=await head(u((await i()).key));return s?send(t,200,{data:s}):send(t,404)}case"/storage/delete":{const s=u((await i()).key);return await promises.rm(s,{force:!0}),await promises.rm(metaOf(s),{force:!0}),send(t,200,{data:{}})}case"/storage/copy":{const{sourceKey:s,destinationKey:l}=await i(),d=u(s),f=u(l);return await head(d)?(await promises.mkdir(path.dirname(f),{recursive:!0}),await promises.copyFile(d,f),await promises.copyFile(metaOf(d),metaOf(f)).catch(()=>{}),send(t,200,{data:await head(f)})):send(t,404)}case"/storage/signed-url":{const{key:s}=await i();u(s);const l=`${FAKE_FILES_PREFIX}?key=${encodeURIComponent(String(s))}`;return send(t,200,{data:{url:`${r.origin()}${l}`,path:l}})}default:return r.log(`[host] ${n} is not available in local preview`),send(t,501,{error:{code:"not_available_in_preview",message:`${n} is not available in local preview`}})}}catch(n){const i=n.status??500;send(t,i,{error:{message:n instanceof Error?n.message:String(n)}})}}o(handleFakeHost,"handleFakeHost");var SDK_PACKAGE="@tego/plugin-sdk",SDK_IMPORT=JSON.stringify(SDK_PACKAGE),SDK_FRONTEND_IMPORT=JSON.stringify(`${SDK_PACKAGE}/frontend`);function shellFiles(e){return[{path:"index.html",contents:indexHtml(e)},{path:"main.tsx",contents:mainTsx(e)},{path:"shell.css",contents:SHELL_CSS},{path:"plugin-surface.tsx",contents:PLUGIN_SURFACE_STUB}]}o(shellFiles,"shellFiles");var escapeHtml=o(e=>e.replace(/[&<>"]/g,t=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;"})[t]),"escapeHtml");function indexHtml({displayName:e}){return`<!doctype html>
+<html lang="en" class="h-full">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>${escapeHtml(e)} \xB7 local preview</title>
+  </head>
+  <body class="h-full">
+    <div id="tego-dev-bar"></div>
+    <div id="tego-dev-plugin"></div>
+    <script type="module" src="/main.tsx"><\/script>
+  </body>
+</html>
+`}o(indexHtml,"indexHtml");var SHELL_CSS=`@tailwind base;
+@tailwind components;
+@tailwind utilities;
+
+html,
+body {
+  height: 100%;
+}
+
+body {
+  display: flex;
+  flex-direction: column;
+  @apply bg-background text-foreground antialiased;
+}
+
+#tego-dev-plugin {
+  flex: 1;
+  min-height: 0;
+  overflow: auto;
+}
+`,PLUGIN_SURFACE_STUB=`import type { ReactNode } from 'react';
+
+function Unavailable(): ReactNode {
+  return (
+    <div className='flex h-full items-center justify-center p-6 text-sm text-muted-foreground'>
+      Chat is not available in local preview.
+    </div>
+  );
+}
+
+export const ChatSurface = Unavailable;
+export const ChatPanel = Unavailable;
+export function useTopic() {
+  return { topic: undefined, topics: [], loading: false };
+}
+`;function mainTsx(e){const t=JSON.stringify({pluginId:e.pluginId,displayName:e.displayName,nav:e.nav.map(a=>({key:a.key,labelKey:a.labelKey,path:a.path??"/"})),config:e.config,locales:e.locales,defaultTarget:e.defaultTarget??"web",userHeader:DEV_USER_HEADER,rolesHeader:DEV_ROLES_HEADER,defaultUser:DEFAULT_DEV_USER_ID},null,2),r=e.entry?`import plugin from ${JSON.stringify(e.entry)};`:"const plugin = undefined;";return`// Generated by \`tego-plugin dev\` on every start; edits here are overwritten.
+import '@tego/ui/styles/tokens.css';
+import './shell.css';
+
+import { pluginI18nNamespace } from ${SDK_IMPORT};
+import type { PluginFrontendModule, PluginHostContext, PluginRoute } from ${SDK_FRONTEND_IMPORT};
+import {
+  Button,
+  Input,
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+  Toaster,
+  TooltipProvider,
+} from '@tego/ui';
+import i18next from 'i18next';
+import { useState, useSyncExternalStore } from 'react';
+import { createRoot } from 'react-dom/client';
+import { initReactI18next } from 'react-i18next';
+
+${r}
+
+const DEV = ${t};
+const TARGET: 'web' | 'desktop' = /(?:^|;\\s*)tego-dev-target=desktop(?:;|$)/.test(document.cookie)
+  ? 'desktop'
+  : /(?:^|;\\s*)tego-dev-target=web(?:;|$)/.test(document.cookie)
+    ? 'web'
+    : DEV.defaultTarget;
+const BASE = '/p/' + DEV.pluginId;
+const NAMESPACE = pluginI18nNamespace(DEV.pluginId);
+
+function stored(key: string, fallback: string): string {
+  try {
+    return localStorage.getItem('tegoDev.' + key) ?? fallback;
+  } catch {
+    return fallback;
+  }
+}
+function store(key: string, value: string): void {
+  try {
+    localStorage.setItem('tegoDev.' + key, value);
+  } catch {
+    // storage blocked: the choice lasts until the next reload
+  }
+}
+
+const user = {
+  userId: stored('userId', DEV.defaultUser),
+  roles: stored('roles', '').split(',').map(role => role.trim()).filter(Boolean),
+};
+const language = DEV.locales.includes(stored('lang', 'zh-CN')) ? stored('lang', 'zh-CN') : (DEV.locales[0] ?? 'en');
+if (stored('theme', 'light') === 'dark') document.documentElement.classList.add('dark');
+
+async function loadLocale(tag: string): Promise<void> {
+  if (i18next.hasResourceBundle(tag, NAMESPACE)) return;
+  const response = await fetch('/i18n/' + tag + '.json');
+  if (response.ok) i18next.addResourceBundle(tag, NAMESPACE, await response.json(), true, true);
+}
+await i18next.use(initReactI18next).init({
+  lng: language,
+  fallbackLng: false,
+  ns: [NAMESPACE],
+  defaultNS: NAMESPACE,
+  resources: {},
+  interpolation: { escapeValue: false },
+});
+await loadLocale(language);
+
+const listeners = new Set<() => void>();
+function readRoute(): PluginRoute {
+  const path = location.pathname.slice(BASE.length) || '/';
+  return { path: path.startsWith('/') ? path : '/' + path, search: location.search };
+}
+let route = readRoute();
+function routeChanged(): void {
+  const next = readRoute();
+  if (next.path === route.path && next.search === route.search) return;
+  route = next;
+  for (const listener of listeners) listener();
+}
+addEventListener('popstate', routeChanged);
+if (!location.pathname.startsWith(BASE)) history.replaceState(null, '', BASE + '/');
+
+function navigate(to: string): void {
+  history.pushState(null, '', to.startsWith('/p/') ? to : BASE + (to.startsWith('/') ? to : '/' + to));
+  routeChanged();
+}
+
+const api: PluginHostContext['api'] = {
+  request: (path, init = {}) =>
+    fetch('/api/v1/tego-os/plugin-api/' + DEV.pluginId + (path.startsWith('/') ? path : '/' + path), {
+      ...init,
+      headers: {
+        ...(init.headers as Record<string, string> | undefined),
+        [DEV.userHeader]: user.userId,
+        [DEV.rolesHeader]: JSON.stringify(user.roles),
+      },
+    }),
+  async json<T>(path: string, init?: RequestInit): Promise<T> {
+    const response = await api.request(path, init);
+    if (!response.ok) throw new Error((init?.method ?? 'GET') + ' ' + path + ': ' + response.status);
+    return (await response.json()) as T;
+  },
+};
+
+const navKeys = DEV.nav.map(entry => entry.key);
+const context: PluginHostContext = {
+  pluginId: DEV.pluginId,
+  layout: { collapseSidebar: () => () => {} },
+  basePath: BASE,
+  publicPagesUrl: location.origin + '/public/' + DEV.pluginId + '/',
+  hostUrl: path => new URL(path, location.origin).toString(),
+  user: { userId: user.userId, tenantId: 'dev-tenant', roles: user.roles, displayName: user.userId },
+  api,
+  route: {
+    current: () => route,
+    subscribe: listener => {
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+  },
+  events: { subscribe: () => () => {}, connected: () => false, subscribeStatus: () => () => {} },
+  config: DEV.config,
+  navigate,
+  can: navKey => navKeys.includes(navKey),
+  // Host API 1.37, as the shells provide it: the preview prints what a plugin
+  // asked for, then does the browser equivalent.
+  platform: TARGET,
+  openExternal: async url => {
+    if (!/^https?:\\/\\//i.test(url)) throw new Error('openExternal takes an http(s) URL');
+    console.info('[preview] openExternal', url);
+    window.open(url, '_blank', 'noopener');
+  },
+  download: async request => {
+    const anchor = document.createElement('a');
+    let revoke: string | undefined;
+    if ('blob' in request) {
+      revoke = URL.createObjectURL(request.blob);
+      anchor.href = revoke;
+      anchor.download = request.fileName;
+    } else {
+      if (!request.path.startsWith('/')) throw new Error('download takes a root-relative host path');
+      anchor.href = context.hostUrl(request.path);
+      if (request.fileName) anchor.download = request.fileName;
+    }
+    console.info('[preview] download', 'blob' in request ? request.fileName : request.path);
+    document.body.append(anchor);
+    anchor.click();
+    anchor.remove();
+    if (revoke) setTimeout(() => URL.revokeObjectURL(revoke), 30_000);
+  },
+  copyText: async text => {
+    try {
+      await navigator.clipboard.writeText(text);
+      return true;
+    } catch {
+      return false;
+    }
+  },
+};
+
+// What the imitated shell's CSP refused on this page (the server prints them too).
+const violations: string[] = [];
+const violationListeners = new Set<() => void>();
+document.addEventListener('securitypolicyviolation', event => {
+  violations.push(event.effectiveDirective + ': ' + (event.blockedURI || 'inline'));
+  for (const listener of violationListeners) listener();
+});
+function useViolations(): number {
+  return useSyncExternalStore(
+    listener => {
+      violationListeners.add(listener);
+      return () => violationListeners.delete(listener);
+    },
+    () => violations.length
+  );
+}
+
+function useRoute(): PluginRoute {
+  return useSyncExternalStore(context.route.subscribe, context.route.current);
+}
+
+function DevBar() {
+  const current = useRoute();
+  const [lang, setLang] = useState(language);
+  const [dark, setDark] = useState(document.documentElement.classList.contains('dark'));
+  const [userId, setUserId] = useState(user.userId);
+  const [roles, setRoles] = useState(user.roles.join(', '));
+  const blocked = useViolations();
+  const switchTarget = (next: 'web' | 'desktop') => {
+    const url = new URL(location.href);
+    url.searchParams.set('target', next);
+    location.assign(url.toString());
+  };
+  const switchUser = () => {
+    store('userId', userId.trim() || DEV.defaultUser);
+    store('roles', roles);
+    location.reload();
+  };
+  return (
+    <div className='flex shrink-0 items-center gap-2 border-b border-border bg-card px-3 py-2 text-sm'>
+      <span className='shrink-0 font-medium'>{DEV.displayName}</span>
+      <span className='shrink-0 rounded-control bg-sunken px-1.5 py-0.5 font-mono text-xs text-muted-foreground'>preview</span>
+      <nav className='flex min-w-0 flex-1 items-center gap-1 overflow-x-auto'>
+        {DEV.nav.map(entry => (
+          <Button
+            key={entry.key}
+            size='sm'
+            variant={current.path === entry.path ? 'secondary' : 'ghost'}
+            onClick={() => navigate(entry.path)}
+          >
+            {i18next.t(entry.labelKey, { ns: NAMESPACE, lng: lang })}
+          </Button>
+        ))}
+      </nav>
+      <Select
+        value={lang}
+        onValueChange={async next => {
+          await loadLocale(next);
+          await i18next.changeLanguage(next);
+          store('lang', next);
+          setLang(next);
+        }}
+      >
+        <SelectTrigger className='h-8 w-28' aria-label='Language'>
+          <SelectValue />
+        </SelectTrigger>
+        <SelectContent>
+          {DEV.locales.map(tag => (
+            <SelectItem key={tag} value={tag}>
+              {tag}
+            </SelectItem>
+          ))}
+        </SelectContent>
+      </Select>
+      <div className='flex shrink-0 items-center rounded-control border border-border p-0.5' role='group' aria-label='Shell'>
+        {(['web', 'desktop'] as const).map(target => (
+          <Button
+            key={target}
+            size='sm'
+            variant={TARGET === target ? 'secondary' : 'ghost'}
+            aria-pressed={TARGET === target}
+            onClick={() => TARGET !== target && switchTarget(target)}
+          >
+            {target === 'web' ? 'Web' : 'Desktop'}
+          </Button>
+        ))}
+      </div>
+      {blocked > 0 && (
+        <span
+          className='shrink-0 rounded-control bg-destructive-soft px-1.5 py-0.5 text-xs text-destructive'
+          title={violations.join('\\n')}
+        >
+          CSP blocked {blocked}
+        </span>
+      )}
+      <Button
+        size='sm'
+        variant='ghost'
+        onClick={() => {
+          document.documentElement.classList.toggle('dark', !dark);
+          store('theme', dark ? 'light' : 'dark');
+          setDark(!dark);
+        }}
+      >
+        {dark ? 'Light' : 'Dark'}
+      </Button>
+      <form
+        className='flex shrink-0 items-center gap-1'
+        onSubmit={event => {
+          event.preventDefault();
+          switchUser();
+        }}
+      >
+        <Input className='h-8 w-32' aria-label='User id' value={userId} onChange={event => setUserId(event.target.value)} />
+        <Input
+          className='h-8 w-36'
+          aria-label='Roles, comma-separated'
+          placeholder='roles'
+          value={roles}
+          onChange={event => setRoles(event.target.value)}
+        />
+        <Button size='sm' variant='outline' type='submit'>
+          Sign in as
+        </Button>
+      </form>
+    </div>
+  );
+}
+
+createRoot(document.getElementById('tego-dev-bar')!).render(
+  <TooltipProvider>
+    <DevBar />
+    <Toaster />
+  </TooltipProvider>
+);
+
+const mountPoint = document.getElementById('tego-dev-plugin')!;
+const frontend = plugin as PluginFrontendModule | undefined;
+if (frontend) {
+  frontend.mount(mountPoint, context);
+} else {
+  mountPoint.innerHTML =
+    '<p style="padding:24px">This plugin has no frontend part; its API is served at /api/v1/tego-os/plugin-api/' +
+    DEV.pluginId +
+    '/</p>';
+}
+`}o(mainTsx,"mainTsx");var CSP_REPORT_PATH="/__tego/csp-report",CSP_REPORT_PREFIX="TEGO_DEV_CSP ",TARGET_COOKIE="tego-dev-target",DESKTOP_MAX_RESPONSE_BYTES=100*1024*1024,SHARED=["default-src 'self'","object-src 'none'","base-uri 'self'"],PREVIEW_CSP={web:[...SHARED,"script-src 'self' 'wasm-unsafe-eval'","style-src 'self' 'unsafe-inline'","img-src 'self' data: blob: https:","font-src 'self' data:","connect-src 'self' wss: ws:","frame-src 'self'","worker-src 'self' blob:"].join("; "),desktop:[...SHARED,"script-src 'self' 'wasm-unsafe-eval'","style-src 'self' 'unsafe-inline' https:","img-src 'self' data: blob: http: https:","font-src 'self' data: blob: https:","media-src 'self' data: blob:","worker-src 'self' blob:","connect-src 'self' http: https: ws: wss:","frame-src 'self'"].join("; ")};function isPreviewTarget(e){return e==="web"||e==="desktop"}o(isPreviewTarget,"isPreviewTarget");function targetOf(e,t){const r=new URL(e.url??"/","http://preview.local").searchParams.get("target");if(isPreviewTarget(r))return r;const a=/(?:^|;\s*)tego-dev-target=(web|desktop)(?:;|$)/.exec(String(e.headers.cookie??""))?.[1];return isPreviewTarget(a)?a:t}o(targetOf,"targetOf");function parseCspReport(e){try{const t=JSON.parse(e)["csp-report"];if(!t)return;const r=String(t["effective-directive"]??t["violated-directive"]??""),a=String(t["blocked-uri"]??"");if(!r)return;const n=typeof t["source-file"]=="string"?t["source-file"]:void 0,i=typeof t["line-number"]=="number"?t["line-number"]:void 0;return{directive:r,blocked:a,...n?{source:n}:{},...i?{line:i}:{}}}catch{return}}o(parseCspReport,"parseCspReport");var DEFAULT_DEV_PORT=5280,PORT_ATTEMPTS=20,DEV_READY_PREFIX="TEGO_DEV_READY ",DEV_DIR=".tego-dev",PLUGIN_API_PREFIX="/api/v1/tego-os/plugin-api/";function displayNameOf(e){const{displayName:t}=e;return typeof t=="string"?t:t.en??t["zh-CN"]??Object.values(t)[0]??e.id}o(displayNameOf,"displayNameOf");function packageDir(e,t){for(let r=path.resolve(e);;r=path.dirname(r)){const a=path.join(r,"node_modules",...t.split("/"));if(fs.existsSync(path.join(a,"package.json")))return fs.realpathSync(a);if(path.dirname(r)===r)return}}o(packageDir,"packageDir");function sendJson(e,t,r){e.writeHead(t,{"content-type":"application/json"}),e.end(JSON.stringify(r))}o(sendJson,"sendJson");function listen(e,t,r){return new Promise((a,n)=>{const i=o(s=>{e.off("listening",u),n(s)},"onError"),u=o(()=>{e.off("error",i);const s=e.address();a(typeof s=="object"&&s?s.port:t)},"onListening");e.once("error",i),e.once("listening",u),e.listen(t,r)})}o(listen,"listen");async function shellTailwind(e,t){const r=module$1.createRequire(path.join(e,"vite.config.ts"));let a,n;try{a=r("@tego/ui/tailwind-preset"),n=path.dirname(r.resolve("@tego/ui"))}catch(u){throw new Error(`The preview cannot load @tego/ui's Tailwind preset from ${e}: ${u instanceof Error?u.message:String(u)}. Install the plugin's dependencies.`,{cause:u})}const i=(await import("tailwindcss")).default;return i({presets:[a],content:[path.join(n,"**/*.{js,cjs}"),path.join(t,"*.tsx")]})}o(shellTailwind,"shellTailwind");function perStylesheet(e,t,r){return{postcssPlugin:"tego-dev-stylesheets",async Once(a,n){const i=a.source?.input.file,u=i&&path.resolve(i)===e?[t]:r;if(u.length===0)return;const s=await n.postcss(u).process(a,{from:i});n.result.messages.push(...s.messages)}}}o(perStylesheet,"perStylesheet");function servePlugins(e){return Array.isArray(e)?e.flat(1/0).map(t=>{if(!t||typeof t!="object")return t;const{buildStart:r}=t;return typeof r!="function"?t:{...t,buildStart(...a){const n=new Proxy(this,{get(i,u){if(u==="emitFile")return()=>"";const s=Reflect.get(i,u);return typeof s=="function"?s.bind(i):s}});return r.apply(n,a)}}}):e}o(servePlugins,"servePlugins");async function startDevServer(e){const t=path.resolve(e.root),r=e.log??(c=>console.log(c)),a=await chunk4LKRXDYY_cjs.readManifest(t),n=chunk2P6UEAPV_cjs.resolvePluginParts(a),i=path.join(t,DEV_DIR),u=path.join(i,"shell"),s=crypto.randomBytes(32).toString("hex"),l=crypto.randomBytes(24).toString("hex");let d="";const f=new Map;let v,y={};const m=n.frontend?path.resolve(t,n.frontend.dir):t,{loadConfigFromFile:D,createServer:A,mergeConfig:N}=await import("vite");if(n.frontend){const c=path.join(m,"vite.config.ts");fs.existsSync(c)&&(y=(await D({command:"serve",mode:"development"},c,t))?.config??{});const p=y.build?.rollupOptions?.input,w=path.resolve(t,typeof p=="string"?p:`${n.frontend.dir}/src/index.tsx`);if(!fs.existsSync(w))throw new Error(`The frontend entry ${path.relative(t,w)} does not exist.`);v=path.relative(u,w).split(path.sep).join("/"),v.startsWith(".")||(v=`./${v}`)}const g=o(()=>n.frontend?chunk4LKRXDYY_cjs.readPluginLocales(t,a,n.frontend.i18nDirPath):Promise.resolve(new Map),"localeFiles"),E=[...(await g()).keys()].map(c=>c.replace(/\.json$/,""));await promises.mkdir(u,{recursive:!0});for(const c of shellFiles({pluginId:a.id,displayName:displayNameOf(a),nav:n.frontend?.nav??[],config:n.frontend?.config?chunkMWMGJJ74_cjs.applyConfigDefaults(n.frontend.config.schema,{}):{},entry:v,locales:E,defaultTarget:e.target??"web"}))await promises.writeFile(path.join(u,c.path),c.contents);let _,k;const F=o(()=>n.backend?.config?chunkMWMGJJ74_cjs.applyConfigDefaults(n.backend.config.schema,{}):{},"backendConfig"),R=http.createServer((c,p)=>void M(c,p));async function M(c,p){const w=(c.url??"/").split("?")[0],T=targetOf(c,e.target??"web");try{if(w==="/favicon.ico"){p.writeHead(204),p.end();return}if(w===CSP_REPORT_PATH){const h=await new Promise(L=>{let P="";c.setEncoding("utf8"),c.on("data",x=>P+=x),c.on("end",()=>L(P))}),b=parseCspReport(h);b&&(r(`[csp:${T}] blocked ${b.blocked||"(inline)"} by ${b.directive}${b.source?` in ${b.source}${b.line?`:${b.line}`:""}`:""}`),r(`${CSP_REPORT_PREFIX}${JSON.stringify({target:T,...b})}`)),p.writeHead(204),p.end();return}if(w.startsWith(FAKE_HOST_PREFIX)||w.startsWith(FAKE_FILES_PREFIX)){await handleFakeHost(c,p,{token:l,storageDir:path.join(i,"storage"),config:F,origin:o(()=>d,"origin"),users:o(()=>f,"users"),log:r});return}const S=/^\/i18n\/([A-Za-z-]+)\.json$/.exec(w);if(S){const h=(await g()).get(`${S[1]}.json`);if(h===void 0)return sendJson(p,404,{error:`no ${S[1]}.json`});p.writeHead(200,{"content-type":"application/json"}),p.end(h);return}const I=`${PLUGIN_API_PREFIX}${a.id}`;if(w===I||w.startsWith(`${I}/`)){q(c,p,(c.url??"/").slice(I.length)||"/",T);return}if(String(c.headers.accept??"").includes("text/html")){p.setHeader("Content-Security-Policy",`${PREVIEW_CSP[T]}; report-uri ${CSP_REPORT_PATH}`);const h=new URL(c.url??"/","http://preview.local").searchParams.get("target");isPreviewTarget(h)&&p.setHeader("Set-Cookie",`${TARGET_COOKIE}=${h}; Path=/; SameSite=Lax`)}C.middlewares(c,p,()=>sendJson(p,404,{error:`${w} not found`}))}catch(S){sendJson(p,500,{error:S instanceof Error?S.message:String(S)})}}o(M,"route");function q(c,p,w,T){if(!_){sendJson(p,503,{error:k??"The plugin has no backend part."});return}const S=devCallerOf(c.headers);f.set(S.userId,S.roles);const I=http.request({host:"127.0.0.1",port:_.port,method:c.method,path:w,headers:{...gatewayHeaders(c.headers,S,s),...T==="desktop"?{"accept-encoding":"identity"}:{}}},h=>{if(T!=="desktop"){p.writeHead(h.statusCode??502,h.headers),h.pipe(p);return}const b=[];let L=0,P=!1;h.on("data",x=>{if(!P){if(L+=x.length,L>DESKTOP_MAX_RESPONSE_BYTES){P=!0,h.destroy(),r(`[desktop] ${c.method} ${w}: response over 100 MB refused (413)`),sendJson(p,413,{error:"Response over 100 MB: the desktop app refuses it. Serve large files through storage paths."});return}b.push(x)}}),h.on("end",()=>{if(P)return;const x=Buffer.concat(b),G={...h.headers};delete G["transfer-encoding"],G["content-length"]=String(x.length),p.writeHead(h.statusCode??502,G),p.end(x)})});I.on("error",h=>{p.headersSent?p.destroy():sendJson(p,502,{error:`The backend is not answering (${h.message}); see the terminal.`})}),c.pipe(I)}o(q,"proxy");const K=path.join(u,"shell.css"),J=(()=>{const c=y.css?.postcss;return c&&typeof c=="object"?c.plugins??[]:[]})(),$=(()=>{const c=packageDir(m,"react-i18next");return(c&&packageDir(c,"i18next"))??packageDir(m,"i18next")})(),{css:X,mode:Y,build:z,...U}=y;U.plugins=servePlugins(U.plugins);const C=await A(N(U,{configFile:!1,root:u,mode:"development",appType:"spa",clearScreen:!1,logLevel:"info",esbuild:{jsx:"automatic",jsxDev:!1},css:{postcss:{plugins:[perStylesheet(K,await shellTailwind(m,u),J)]}},resolve:{alias:[{find:"@tego/chat/plugin-surface",replacement:path.join(u,"plugin-surface.tsx")},...$?[{find:/^i18next$/,replacement:$}]:[]]},server:{middlewareMode:!0,hmr:{server:R},fs:{allow:[t,u,...$?[$]:[]]}},optimizeDeps:{entries:[path.join(u,"index.html")]}})),O=e.host??"127.0.0.1";let j;const H=e.port??DEFAULT_DEV_PORT;for(let c=0;j===void 0;c++)try{j=await listen(R,H===0?0:H+c,O)}catch(p){if(p.code!=="EADDRINUSE"||H===0||c>=PORT_ATTEMPTS)throw await C.close(),p}const V=O==="0.0.0.0"||O==="::"?"127.0.0.1":O;if(d=`http://${V.includes(":")?`[${V}]`:V}:${j}`,!n.backend)k="The plugin has no backend part.";else if(e.backend===!1)k="The backend is off (--no-backend).";else if(!e.databaseUrl)k="The backend needs a PostgreSQL: start the preview with DATABASE_URL=postgres://\u2026 (each plugin gets its own schema).";else try{_=await startDevBackend({root:t,pluginId:a.id,version:a.version,part:n.backend,databaseUrl:e.databaseUrl,outDir:path.join(i,"backend"),hostApiUrl:`${d}${FAKE_HOST_PREFIX}`,hostApiToken:l,gatewayKey:s,log:r})}catch(c){k=`The backend did not start: ${c instanceof Error?c.message:String(c)}`}k&&n.backend&&r(`[backend] ${k}`);const B=`${d}/p/${a.id}/`;return r(`${a.id} ${a.version}: local preview at ${B}`),e.databaseUrl&&_&&r(`  database ${redactUrl(e.databaseUrl)}, schema ${_.schema}`),r(`${DEV_READY_PREFIX}${JSON.stringify({url:B})}`),{url:B,async close(){await _?.close(),await C.close(),R.closeAllConnections(),await new Promise(c=>R.close(()=>c()))}}}o(startDevServer,"startDevServer"),exports.CSP_REPORT_PREFIX=CSP_REPORT_PREFIX,exports.DEFAULT_DEV_PORT=DEFAULT_DEV_PORT,exports.DEV_DIR=DEV_DIR,exports.DEV_READY_PREFIX=DEV_READY_PREFIX,exports.DEV_ROLES_HEADER=DEV_ROLES_HEADER,exports.DEV_TENANT_ID=DEV_TENANT_ID,exports.DEV_USER_HEADER=DEV_USER_HEADER,exports.PREVIEW_CSP=PREVIEW_CSP,exports.applyDevMigrations=applyDevMigrations,exports.devCallerOf=devCallerOf,exports.devDatabaseUrl=devDatabaseUrl,exports.devSchemaName=devSchemaName,exports.gatewayHeaders=gatewayHeaders,exports.handleFakeHost=handleFakeHost,exports.parseCspReport=parseCspReport,exports.shellFiles=shellFiles,exports.startDevServer=startDevServer,exports.storagePath=storagePath,exports.targetOf=targetOf;

package/dist/dev.d.cts

@@ -0,0 +1,144 @@
+import { IncomingMessage, ServerResponse } from 'node:http';
+import { P as PluginNavEntry } from './manifest-types-CUTNfJTa.cjs';
+
+/**
+ * The two shells a plugin page runs in, as the local preview imitates them.
+ *
+ * - `web`: the platform's nginx CSP (`docker/ai-studio/nginx.conf`) — the page
+ *   may connect to the platform only. Its per-request nonce is left out: Vite's
+ *   dev scripts cannot carry one, and what the nonce guards (injected inline
+ *   scripts, `eval`) is refused here the same way.
+ * - `desktop`: the Tauri app's CSP (`apps/ai-studio/src-tauri/tauri.conf.json`)
+ *   — no `eval`/`new Function`, no `blob:` scripts — and its protocol proxy,
+ *   which buffers every `ctx.api` response whole, refuses one over 100 MB, and
+ *   strips `accept-encoding`.
+ *
+ * Both report violations to the preview, which prints them, so a dependency
+ * that compiles strings or a call to a third-party URL shows up while
+ * developing instead of after release.
+ */
+
+type PreviewTarget = 'web' | 'desktop';
+/** The machine-readable line tools watch for (`TEGO_DEV_CSP {"target",…}`). */
+declare const CSP_REPORT_PREFIX = "TEGO_DEV_CSP ";
+declare const PREVIEW_CSP: Record<PreviewTarget, string>;
+/** `?target=` wins, then the cookie the shell's switch sets, then the default. */
+declare function targetOf(req: Pick<IncomingMessage, 'url' | 'headers'>, fallback: PreviewTarget): PreviewTarget;
+interface CspViolation {
+    directive: string;
+    blocked: string;
+    source?: string;
+    line?: number;
+}
+/** A browser's `application/csp-report` body; `undefined` when it is not one. */
+declare function parseCspReport(body: string): CspViolation | undefined;
+
+/** `tego_dev_<id>` with every character Postgres would need quoted folded to `_`. */
+declare function devSchemaName(pluginId: string): string;
+/**
+ * The database URL the backend gets: the developer's, with the schema pinned
+ * as the only `search_path` entry (percent-encoded by hand, as the host does:
+ * libpq reads a `+` literally).
+ */
+declare function devDatabaseUrl(databaseUrl: string, schema: string): string;
+/** Applies the files not yet in the ledger, in name order; returns their names. */
+declare function applyDevMigrations(options: {
+    databaseUrl: string;
+    schema: string;
+    migrationsDir: string;
+    tenantId: string;
+}): Promise<string[]>;
+
+/** Who the preview shell says is calling; sent by the shell on every API request. */
+declare const DEV_USER_HEADER = "x-tego-dev-user-id";
+declare const DEV_ROLES_HEADER = "x-tego-dev-roles";
+declare const DEV_TENANT_ID = "dev-tenant";
+interface DevCaller {
+    userId: string;
+    roles: string[];
+}
+/** The caller the shell named, falling back to the default dev user; never throws. */
+declare function devCallerOf(headers: Record<string, string | string[] | undefined>): DevCaller;
+/**
+ * Request headers for the backend: the browser's, minus anything that could
+ * pass for identity (cookies, authorization, every `x-tego-*`), plus the
+ * signed context `serveBackend` verifies.
+ */
+declare function gatewayHeaders(incoming: Record<string, string | string[] | undefined>, caller: DevCaller, key: string, nowMs?: number): Record<string, string>;
+
+interface FakeHostOptions {
+    token: string;
+    storageDir: string;
+    /** Backend config values, defaults applied. */
+    config: () => Record<string, unknown>;
+    /** The preview's origin, for signed URLs. */
+    origin: () => string;
+    /** Users the preview has made calls as, with the roles they had. */
+    users: () => ReadonlyMap<string, string[]>;
+    log(line: string): void;
+}
+/** A storage key as a file below the storage dir; refuses `..` and absolute keys. */
+declare function storagePath(storageDir: string, key: string): string;
+/** Handles a request below {@link FAKE_HOST_PREFIX} or {@link FAKE_FILES_PREFIX}. */
+declare function handleFakeHost(req: IncomingMessage, res: ServerResponse, options: FakeHostOptions): Promise<void>;
+
+/**
+ * The page the local preview serves: a small stand-in for the shell's plugin
+ * page, written into the plugin's `.tego-dev/shell/` on every start.
+ *
+ * Written into the plugin rather than served from this package so that its
+ * imports (`react`, `@tego/ui`, `react-i18next`) resolve to the plugin's own
+ * installed copies — the same single instances the plugin's code imports, as
+ * in the shell, where they are shared rather than bundled twice.
+ *
+ * It mounts the plugin's source entry with a `PluginHostContext` built the
+ * way the shell builds one: `basePath` `/p/<id>`, history-backed routing,
+ * `ctx.api` at `/api/v1/tego-os/plugin-api/<id>/*`, the frontend config's
+ * defaults. What only the platform has (`ai`, `office`, live events) is
+ * absent or inert. The top bar switches page, language, theme and the user
+ * the API calls are made as.
+ */
+
+interface ShellOptions {
+    pluginId: string;
+    displayName: string;
+    nav: PluginNavEntry[];
+    config: Record<string, unknown>;
+    /** Import specifier of the plugin's source entry, relative to the shell dir; none without a frontend. */
+    entry?: string | undefined;
+    /** Locales the plugin ships (`en.json` → `en`). */
+    locales: string[];
+    /** The shell imitated when the page has not chosen one. */
+    defaultTarget?: 'web' | 'desktop';
+}
+interface ShellFile {
+    path: string;
+    contents: string;
+}
+declare function shellFiles(options: ShellOptions): ShellFile[];
+
+/** First port tried; the next free one is taken when it is busy. */
+declare const DEFAULT_DEV_PORT = 5280;
+/** The line tools (Tego Studio) wait for; the JSON after it is `{ "url" }`. */
+declare const DEV_READY_PREFIX = "TEGO_DEV_READY ";
+declare const DEV_DIR = ".tego-dev";
+interface DevServerOptions {
+    /** The plugin folder (holding tego.plugin.json). */
+    root: string;
+    /** 0 for any free port; defaults to {@link DEFAULT_DEV_PORT} or the next free one. */
+    port?: number;
+    host?: string;
+    /** Run the backend part (needs `databaseUrl`); default true. */
+    backend?: boolean;
+    /** Which shell to imitate by default (CSP, network proxy); the page can switch. Default `web`. */
+    target?: PreviewTarget;
+    databaseUrl?: string;
+    log?(line: string): void;
+}
+interface DevServer {
+    url: string;
+    close(): Promise<void>;
+}
+declare function startDevServer(options: DevServerOptions): Promise<DevServer>;
+
+export { CSP_REPORT_PREFIX, type CspViolation, DEFAULT_DEV_PORT, DEV_DIR, DEV_READY_PREFIX, DEV_ROLES_HEADER, DEV_TENANT_ID, DEV_USER_HEADER, type DevServer, type DevServerOptions, PREVIEW_CSP, type PreviewTarget, applyDevMigrations, devCallerOf, devDatabaseUrl, devSchemaName, gatewayHeaders, handleFakeHost, parseCspReport, shellFiles, startDevServer, storagePath, targetOf };