every-plugin 2.10.0 → 3.0.0-rc.0

package/bin/every-plugin-serve.mjs

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+import { fileURLToPath } from "node:url";
+
+if (process.env.EVERY_PLUGIN_TSX !== "1") {
+  const { spawnSync } = await import("node:child_process");
+  const result = spawnSync(process.execPath, ["--import", "tsx", fileURLToPath(import.meta.url)], {
+    stdio: "inherit",
+    env: { ...process.env, EVERY_PLUGIN_TSX: "1" },
+  });
+  process.exit(result.status ?? 0);
+}
+await import("../src/dev/serve.ts");

package/bin/every-plugin.mjs

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+import { spawnSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+
+const [cmd, ...args] = process.argv.slice(2);
+
+const usage = () => console.log("Usage: every-plugin <dev|types|build|deploy|preview> [args…]");
+
+if (!cmd || cmd === "--help" || cmd === "-h" || cmd === "help") {
+  usage();
+  process.exit(cmd ? 0 : 1);
+}
+
+const binPath = fileURLToPath(import.meta.url);
+const distCli = new URL("../dist/cli.cjs", import.meta.url);
+
+// Dev always runs the TS source through tsx with the `development` export
+// condition (source-first framework resolution per ADR 0018). Everything
+// else runs the built dist when it exists; a fresh checkout has no dist yet,
+// so the bootstrap build falls back to tsx + src with the same condition —
+// the config chain's package-internal imports resolve source over a dist
+// that does not exist yet.
+if (cmd === "dev" && process.env.EVERY_PLUGIN_TSX !== "1") {
+  const result = spawnSync(
+    process.execPath,
+    ["--import", "tsx", "--conditions=development", binPath, ...process.argv.slice(2)],
+    { stdio: "inherit", env: { ...process.env, EVERY_PLUGIN_TSX: "1" } },
+  );
+  process.exit(result.status ?? 0);
+}
+
+if (cmd !== "dev" && existsSync(distCli)) {
+  const mod = await import(distCli.href);
+  const runCliCommand = mod.runCliCommand ?? mod.default?.runCliCommand;
+  await runCliCommand(cmd, args).catch((err) => {
+    console.error(String(err instanceof Error ? err.message : err));
+    process.exit(1);
+  });
+  process.exit(0);
+}
+
+if (process.env.EVERY_PLUGIN_TSX !== "1") {
+  const result = spawnSync(
+    process.execPath,
+    ["--import", "tsx", "--conditions=development", binPath, ...process.argv.slice(2)],
+    {
+      stdio: "inherit",
+      env: { ...process.env, EVERY_PLUGIN_TSX: "1" },
+    },
+  );
+  process.exit(result.status ?? 0);
+}
+
+const { runCliCommand } = await import("../src/cli.ts");
+await runCliCommand(cmd, args).catch((err) => {
+  console.error(String(err instanceof Error ? err.message : err));
+  process.exit(1);
+});

package/dist/_virtual/_rolldown/runtime.cjs

@@ -19,11 +19,10 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));
 
 //#endregion
-
 exports.__toESM = __toESM;

package/dist/build/artifact-names.cjs

@@ -0,0 +1,119 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
+let zod = require("zod");
+let node_crypto = require("node:crypto");
+node_crypto = require_runtime.__toESM(node_crypto, 1);
+
+//#region src/build/artifact-names.ts
+/** Dev-mode entry names: the in-memory dev server serves these exact names,
+* and dev consumers (the host's html shell, the compose client payload, the
+* readiness probe) append them — dev has no build report to discover hashed
+* names from. */
+const DEV_ENTRY_FILENAME = "remoteEntry.js";
+const DEV_SERVER_ENTRY_FILENAME = "remoteEntry.server.js";
+/** Fixed-name build outputs that get additive immutable hashed copies. */
+const MF_MANIFEST_FILENAME = "mf-manifest.json";
+const STYLE_FILENAME = "style.css";
+const HASHED_ENTRY_PATTERN = "remoteEntry.[contenthash].js";
+const HASHED_SERVER_ENTRY_PATTERN = "remoteEntry.server.[contenthash].js";
+/** The dev-stack signal: everything a dev server spawns (watch or no-watch
+* one-shot builds) serves the fixed dev entry names, because every dev
+* consumer appends them and no build report exists to discover hashed names
+* from. Every other invocation — local builds, host-test production builds,
+* regression container builds, deploys — is a build and emits content-hashed
+* entries + build reports. NODE_ENV cannot carry this decision (vitest runs
+* as "test", bundler CLIs default "production" even for dev watches), and
+* DEPLOY=true only marks deploy builds — so the dev server stamps its own
+* children. */
+function isBuildInvocation() {
+	return process.env.BOS_DEV_SERVER !== "1";
+}
+function uiEntryFilename(input) {
+	if (!input.isBuild) return input.server ? DEV_SERVER_ENTRY_FILENAME : DEV_ENTRY_FILENAME;
+	return input.server ? HASHED_SERVER_ENTRY_PATTERN : HASHED_ENTRY_PATTERN;
+}
+const HASH_SEGMENT_PATTERN = /\.[a-f0-9]{8,}\./;
+/**
+* Serving classification for bundle objects: anything whose name carries a
+* content-hash segment (including hashed entrypoints like
+* `remoteEntry.8f3a….js`) is immutable by construction; fixed-name
+* entrypoints and non-hashed files a redeploy replaces in place must
+* revalidate.
+*/
+function isImmutableBundlePath(name) {
+	const base = name.split("/").pop() ?? name;
+	return HASH_SEGMENT_PATTERN.test(base);
+}
+function cacheControlOf(name) {
+	return isImmutableBundlePath(name) ? "public, max-age=31536000, immutable" : "public, max-age=0, must-revalidate";
+}
+/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */
+function contentHashOf(content) {
+	return node_crypto.default.createHash("sha256").update(content).digest("hex").slice(0, 16);
+}
+function hashedArtifactName(base, hash, ext) {
+	return `${base}.${hash}.${ext.replace(/^\./, "")}`;
+}
+/** Find the content-hashed entry asset for a base name ("remoteEntry", "remoteEntry.server"). */
+function findHashedEntry(assetNames, base) {
+	return assetNames.find((name) => {
+		const rest = name.startsWith(`${base}.`) ? name.slice(base.length + 1) : null;
+		if (rest === null) return false;
+		const hash = rest.slice(0, -3);
+		return name.endsWith(".js") && /^[a-f0-9]{8,}$/.test(hash);
+	}) ?? null;
+}
+const BuildEntryReportSchema = zod.z.object({
+	entry: zod.z.string().min(1),
+	browserManifest: zod.z.string().min(1).optional(),
+	css: zod.z.string().min(1).optional()
+});
+/**
+* The additive-copy plan for one compiled dist root: each supplied fixed-name
+* artifact gets an immutable hashed copy. The hashed entry itself needs no
+* copy — the build report carries its name to the deploy leg. Returns null
+* when the build predates hashed entry names (only fixed names emitted).
+*/
+function planArtifactCopies(input) {
+	const entry = findHashedEntry(input.assetNames, input.entryBase);
+	if (!entry) return null;
+	const copies = [];
+	const report = { entry };
+	const hashedCopy = (fixedName, reportField) => {
+		const content = input.contents?.[fixedName];
+		if (content === void 0) return;
+		const dot = fixedName.lastIndexOf(".");
+		const base = fixedName.slice(0, dot);
+		const ext = fixedName.slice(dot + 1);
+		const hashed = hashedArtifactName(base, contentHashOf(content), ext);
+		copies.push({
+			from: fixedName,
+			to: hashed
+		});
+		report[reportField] = hashed;
+	};
+	hashedCopy(MF_MANIFEST_FILENAME, "browserManifest");
+	hashedCopy(STYLE_FILENAME, "css");
+	return {
+		copies,
+		report
+	};
+}
+
+//#endregion
+exports.BuildEntryReportSchema = BuildEntryReportSchema;
+exports.DEV_ENTRY_FILENAME = DEV_ENTRY_FILENAME;
+exports.DEV_SERVER_ENTRY_FILENAME = DEV_SERVER_ENTRY_FILENAME;
+exports.HASHED_ENTRY_PATTERN = HASHED_ENTRY_PATTERN;
+exports.HASHED_SERVER_ENTRY_PATTERN = HASHED_SERVER_ENTRY_PATTERN;
+exports.MF_MANIFEST_FILENAME = MF_MANIFEST_FILENAME;
+exports.STYLE_FILENAME = STYLE_FILENAME;
+exports.cacheControlOf = cacheControlOf;
+exports.contentHashOf = contentHashOf;
+exports.findHashedEntry = findHashedEntry;
+exports.hashedArtifactName = hashedArtifactName;
+exports.isBuildInvocation = isBuildInvocation;
+exports.isImmutableBundlePath = isImmutableBundlePath;
+exports.planArtifactCopies = planArtifactCopies;
+exports.uiEntryFilename = uiEntryFilename;
+//# sourceMappingURL=artifact-names.cjs.map

package/dist/build/artifact-names.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-names.cjs","names":["crypto","z"],"sources":["../../src/build/artifact-names.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport { z } from \"zod\";\n\n/** Dev-mode entry names: the in-memory dev server serves these exact names,\n * and dev consumers (the host's html shell, the compose client payload, the\n * readiness probe) append them — dev has no build report to discover hashed\n * names from. */\nexport const DEV_ENTRY_FILENAME = \"remoteEntry.js\";\nexport const DEV_SERVER_ENTRY_FILENAME = \"remoteEntry.server.js\";\n/** Fixed-name build outputs that get additive immutable hashed copies. */\nexport const MF_MANIFEST_FILENAME = \"mf-manifest.json\";\nexport const STYLE_FILENAME = \"style.css\";\nexport const HASHED_ENTRY_PATTERN = \"remoteEntry.[contenthash].js\";\nexport const HASHED_SERVER_ENTRY_PATTERN = \"remoteEntry.server.[contenthash].js\";\n\n/** The dev-stack signal: everything a dev server spawns (watch or no-watch\n * one-shot builds) serves the fixed dev entry names, because every dev\n * consumer appends them and no build report exists to discover hashed names\n * from. Every other invocation — local builds, host-test production builds,\n * regression container builds, deploys — is a build and emits content-hashed\n * entries + build reports. NODE_ENV cannot carry this decision (vitest runs\n * as \"test\", bundler CLIs default \"production\" even for dev watches), and\n * DEPLOY=true only marks deploy builds — so the dev server stamps its own\n * children. */\nexport function isBuildInvocation(): boolean {\n  return process.env.BOS_DEV_SERVER !== \"1\";\n}\n\nexport function uiEntryFilename(input: { isBuild: boolean; server?: boolean }): string {\n  if (!input.isBuild) return input.server ? DEV_SERVER_ENTRY_FILENAME : DEV_ENTRY_FILENAME;\n  return input.server ? HASHED_SERVER_ENTRY_PATTERN : HASHED_ENTRY_PATTERN;\n}\n\nconst HASH_SEGMENT_PATTERN = /\\.[a-f0-9]{8,}\\./;\n\n/**\n * Serving classification for bundle objects: anything whose name carries a\n * content-hash segment (including hashed entrypoints like\n * `remoteEntry.8f3a….js`) is immutable by construction; fixed-name\n * entrypoints and non-hashed files a redeploy replaces in place must\n * revalidate.\n */\nexport function isImmutableBundlePath(name: string): boolean {\n  const base = name.split(\"/\").pop() ?? name;\n  return HASH_SEGMENT_PATTERN.test(base);\n}\n\nexport function cacheControlOf(name: string): string {\n  return isImmutableBundlePath(name)\n    ? \"public, max-age=31536000, immutable\"\n    : \"public, max-age=0, must-revalidate\";\n}\n\n/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */\nexport function contentHashOf(content: string | Uint8Array): string {\n  return crypto.createHash(\"sha256\").update(content).digest(\"hex\").slice(0, 16);\n}\n\nexport function hashedArtifactName(base: string, hash: string, ext: string): string {\n  return `${base}.${hash}.${ext.replace(/^\\./, \"\")}`;\n}\n\n/** Find the content-hashed entry asset for a base name (\"remoteEntry\", \"remoteEntry.server\"). */\nexport function findHashedEntry(assetNames: string[], base: string): string | null {\n  const hashed = assetNames.find((name) => {\n    const rest = name.startsWith(`${base}.`) ? name.slice(base.length + 1) : null;\n    if (rest === null) return false;\n    const hash = rest.slice(0, -3);\n    return name.endsWith(\".js\") && /^[a-f0-9]{8,}$/.test(hash);\n  });\n  return hashed ?? null;\n}\n\nexport const BuildEntryReportSchema = z.object({\n  entry: z.string().min(1),\n  browserManifest: z.string().min(1).optional(),\n  css: z.string().min(1).optional(),\n});\nexport type BuildEntryReport = z.infer<typeof BuildEntryReportSchema>;\n\nexport interface ArtifactCopy {\n  from: string;\n  to: string;\n}\n\n/**\n * The additive-copy plan for one compiled dist root: each supplied fixed-name\n * artifact gets an immutable hashed copy. The hashed entry itself needs no\n * copy — the build report carries its name to the deploy leg. Returns null\n * when the build predates hashed entry names (only fixed names emitted).\n */\nexport function planArtifactCopies(input: {\n  assetNames: string[];\n  entryBase: string;\n  contents?: Record<string, string | Uint8Array | undefined>;\n}): { copies: Array<ArtifactCopy>; report: BuildEntryReport } | null {\n  const entry = findHashedEntry(input.assetNames, input.entryBase);\n  if (!entry) return null;\n\n  const copies: Array<ArtifactCopy> = [];\n  const report: BuildEntryReport = { entry };\n\n  const hashedCopy = (fixedName: string, reportField: \"browserManifest\" | \"css\") => {\n    const content = input.contents?.[fixedName];\n    if (content === undefined) return;\n    const dot = fixedName.lastIndexOf(\".\");\n    const base = fixedName.slice(0, dot);\n    const ext = fixedName.slice(dot + 1);\n    const hashed = hashedArtifactName(base, contentHashOf(content), ext);\n    copies.push({ from: fixedName, to: hashed });\n    report[reportField] = hashed;\n  };\n  hashedCopy(MF_MANIFEST_FILENAME, \"browserManifest\");\n  hashedCopy(STYLE_FILENAME, \"css\");\n\n  return { copies, report };\n}\n"],"mappings":";;;;;;;;;;;AAOA,MAAa,qBAAqB;AAClC,MAAa,4BAA4B;;AAEzC,MAAa,uBAAuB;AACpC,MAAa,iBAAiB;AAC9B,MAAa,uBAAuB;AACpC,MAAa,8BAA8B;;;;;;;;;;AAW3C,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,mBAAmB;AACxC;AAEA,SAAgB,gBAAgB,OAAuD;CACrF,IAAI,CAAC,MAAM,SAAS,OAAO,MAAM,SAAS,4BAA4B;CACtE,OAAO,MAAM,SAAS,8BAA8B;AACtD;AAEA,MAAM,uBAAuB;;;;;;;;AAS7B,SAAgB,sBAAsB,MAAuB;CAC3D,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;CACtC,OAAO,qBAAqB,KAAK,IAAI;AACvC;AAEA,SAAgB,eAAe,MAAsB;CACnD,OAAO,sBAAsB,IAAI,IAC7B,wCACA;AACN;;AAGA,SAAgB,cAAc,SAAsC;CAClE,OAAOA,oBAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AAC9E;AAEA,SAAgB,mBAAmB,MAAc,MAAc,KAAqB;CAClF,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,QAAQ,OAAO,EAAE;AACjD;;AAGA,SAAgB,gBAAgB,YAAsB,MAA6B;CAOjF,OANe,WAAW,MAAM,SAAS;EACvC,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,EAAE,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,IAAI;EACzE,IAAI,SAAS,MAAM,OAAO;EAC1B,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE;EAC7B,OAAO,KAAK,SAAS,KAAK,KAAK,iBAAiB,KAAK,IAAI;CAC3D,CACY,KAAK;AACnB;AAEA,MAAa,yBAAyBC,MAAE,OAAO;CAC7C,OAAOA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,iBAAiBA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC5C,KAAKA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAClC,CAAC;;;;;;;AAcD,SAAgB,mBAAmB,OAIkC;CACnE,MAAM,QAAQ,gBAAgB,MAAM,YAAY,MAAM,SAAS;CAC/D,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,SAA8B,CAAC;CACrC,MAAM,SAA2B,EAAE,MAAM;CAEzC,MAAM,cAAc,WAAmB,gBAA2C;EAChF,MAAM,UAAU,MAAM,WAAW;EACjC,IAAI,YAAY,QAAW;EAC3B,MAAM,MAAM,UAAU,YAAY,GAAG;EACrC,MAAM,OAAO,UAAU,MAAM,GAAG,GAAG;EACnC,MAAM,MAAM,UAAU,MAAM,MAAM,CAAC;EACnC,MAAM,SAAS,mBAAmB,MAAM,cAAc,OAAO,GAAG,GAAG;EACnE,OAAO,KAAK;GAAE,MAAM;GAAW,IAAI;EAAO,CAAC;EAC3C,OAAO,eAAe;CACxB;CACA,WAAW,sBAAsB,iBAAiB;CAClD,WAAW,gBAAgB,KAAK;CAEhC,OAAO;EAAE;EAAQ;CAAO;AAC1B"}

package/dist/build/artifact-names.d.cts

@@ -0,0 +1,68 @@
+import { z } from "zod";
+//#region src/build/artifact-names.d.ts
+/** Dev-mode entry names: the in-memory dev server serves these exact names,
+ * and dev consumers (the host's html shell, the compose client payload, the
+ * readiness probe) append them — dev has no build report to discover hashed
+ * names from. */
+declare const DEV_ENTRY_FILENAME = "remoteEntry.js";
+declare const DEV_SERVER_ENTRY_FILENAME = "remoteEntry.server.js";
+/** Fixed-name build outputs that get additive immutable hashed copies. */
+declare const MF_MANIFEST_FILENAME = "mf-manifest.json";
+declare const STYLE_FILENAME = "style.css";
+declare const HASHED_ENTRY_PATTERN = "remoteEntry.[contenthash].js";
+declare const HASHED_SERVER_ENTRY_PATTERN = "remoteEntry.server.[contenthash].js";
+/** The dev-stack signal: everything a dev server spawns (watch or no-watch
+ * one-shot builds) serves the fixed dev entry names, because every dev
+ * consumer appends them and no build report exists to discover hashed names
+ * from. Every other invocation — local builds, host-test production builds,
+ * regression container builds, deploys — is a build and emits content-hashed
+ * entries + build reports. NODE_ENV cannot carry this decision (vitest runs
+ * as "test", bundler CLIs default "production" even for dev watches), and
+ * DEPLOY=true only marks deploy builds — so the dev server stamps its own
+ * children. */
+declare function isBuildInvocation(): boolean;
+declare function uiEntryFilename(input: {
+  isBuild: boolean;
+  server?: boolean;
+}): string;
+/**
+ * Serving classification for bundle objects: anything whose name carries a
+ * content-hash segment (including hashed entrypoints like
+ * `remoteEntry.8f3a….js`) is immutable by construction; fixed-name
+ * entrypoints and non-hashed files a redeploy replaces in place must
+ * revalidate.
+ */
+declare function isImmutableBundlePath(name: string): boolean;
+declare function cacheControlOf(name: string): string;
+/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */
+declare function contentHashOf(content: string | Uint8Array): string;
+declare function hashedArtifactName(base: string, hash: string, ext: string): string;
+/** Find the content-hashed entry asset for a base name ("remoteEntry", "remoteEntry.server"). */
+declare function findHashedEntry(assetNames: string[], base: string): string | null;
+declare const BuildEntryReportSchema: z.ZodObject<{
+  entry: z.ZodString;
+  browserManifest: z.ZodOptional<z.ZodString>;
+  css: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type BuildEntryReport = z.infer<typeof BuildEntryReportSchema>;
+interface ArtifactCopy {
+  from: string;
+  to: string;
+}
+/**
+ * The additive-copy plan for one compiled dist root: each supplied fixed-name
+ * artifact gets an immutable hashed copy. The hashed entry itself needs no
+ * copy — the build report carries its name to the deploy leg. Returns null
+ * when the build predates hashed entry names (only fixed names emitted).
+ */
+declare function planArtifactCopies(input: {
+  assetNames: string[];
+  entryBase: string;
+  contents?: Record<string, string | Uint8Array | undefined>;
+}): {
+  copies: Array<ArtifactCopy>;
+  report: BuildEntryReport;
+} | null;
+//#endregion
+export { ArtifactCopy, BuildEntryReport, BuildEntryReportSchema, DEV_ENTRY_FILENAME, DEV_SERVER_ENTRY_FILENAME, HASHED_ENTRY_PATTERN, HASHED_SERVER_ENTRY_PATTERN, MF_MANIFEST_FILENAME, STYLE_FILENAME, cacheControlOf, contentHashOf, findHashedEntry, hashedArtifactName, isBuildInvocation, isImmutableBundlePath, planArtifactCopies, uiEntryFilename };
+//# sourceMappingURL=artifact-names.d.cts.map

package/dist/build/artifact-names.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-names.d.cts","names":[],"sources":["../../src/build/artifact-names.ts"],"mappings":";;;;;;cAOa;cACA;;cAEA;cACA;cACA;cACA;;;;;;;;;;iBAWG;iBAIA,gBAAgB;EAAS;EAAkB;;;;;;;;;iBAc3C,sBAAsB;iBAKtB,eAAe;;iBAOf,cAAc,kBAAkB;iBAIhC,mBAAmB,cAAc,cAAc;;iBAK/C,gBAAgB,sBAAsB;cAUzC,wBAAsB,EAAA;;;;GAIjC,EAAA,KAAA;KACU,mBAAmB,EAAE,aAAa;UAE7B;EACf;EACA;;;;;;;;iBASc,mBAAmB;EACjC;EACA;EACA,WAAW,wBAAwB;;EAC/B,QAAQ,MAAM;EAAe,QAAQ"}

package/dist/build/artifact-names.d.mts

@@ -0,0 +1,68 @@
+import { z } from "zod";
+//#region src/build/artifact-names.d.ts
+/** Dev-mode entry names: the in-memory dev server serves these exact names,
+ * and dev consumers (the host's html shell, the compose client payload, the
+ * readiness probe) append them — dev has no build report to discover hashed
+ * names from. */
+declare const DEV_ENTRY_FILENAME = "remoteEntry.js";
+declare const DEV_SERVER_ENTRY_FILENAME = "remoteEntry.server.js";
+/** Fixed-name build outputs that get additive immutable hashed copies. */
+declare const MF_MANIFEST_FILENAME = "mf-manifest.json";
+declare const STYLE_FILENAME = "style.css";
+declare const HASHED_ENTRY_PATTERN = "remoteEntry.[contenthash].js";
+declare const HASHED_SERVER_ENTRY_PATTERN = "remoteEntry.server.[contenthash].js";
+/** The dev-stack signal: everything a dev server spawns (watch or no-watch
+ * one-shot builds) serves the fixed dev entry names, because every dev
+ * consumer appends them and no build report exists to discover hashed names
+ * from. Every other invocation — local builds, host-test production builds,
+ * regression container builds, deploys — is a build and emits content-hashed
+ * entries + build reports. NODE_ENV cannot carry this decision (vitest runs
+ * as "test", bundler CLIs default "production" even for dev watches), and
+ * DEPLOY=true only marks deploy builds — so the dev server stamps its own
+ * children. */
+declare function isBuildInvocation(): boolean;
+declare function uiEntryFilename(input: {
+  isBuild: boolean;
+  server?: boolean;
+}): string;
+/**
+ * Serving classification for bundle objects: anything whose name carries a
+ * content-hash segment (including hashed entrypoints like
+ * `remoteEntry.8f3a….js`) is immutable by construction; fixed-name
+ * entrypoints and non-hashed files a redeploy replaces in place must
+ * revalidate.
+ */
+declare function isImmutableBundlePath(name: string): boolean;
+declare function cacheControlOf(name: string): string;
+/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */
+declare function contentHashOf(content: string | Uint8Array): string;
+declare function hashedArtifactName(base: string, hash: string, ext: string): string;
+/** Find the content-hashed entry asset for a base name ("remoteEntry", "remoteEntry.server"). */
+declare function findHashedEntry(assetNames: string[], base: string): string | null;
+declare const BuildEntryReportSchema: z.ZodObject<{
+  entry: z.ZodString;
+  browserManifest: z.ZodOptional<z.ZodString>;
+  css: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type BuildEntryReport = z.infer<typeof BuildEntryReportSchema>;
+interface ArtifactCopy {
+  from: string;
+  to: string;
+}
+/**
+ * The additive-copy plan for one compiled dist root: each supplied fixed-name
+ * artifact gets an immutable hashed copy. The hashed entry itself needs no
+ * copy — the build report carries its name to the deploy leg. Returns null
+ * when the build predates hashed entry names (only fixed names emitted).
+ */
+declare function planArtifactCopies(input: {
+  assetNames: string[];
+  entryBase: string;
+  contents?: Record<string, string | Uint8Array | undefined>;
+}): {
+  copies: Array<ArtifactCopy>;
+  report: BuildEntryReport;
+} | null;
+//#endregion
+export { ArtifactCopy, BuildEntryReport, BuildEntryReportSchema, DEV_ENTRY_FILENAME, DEV_SERVER_ENTRY_FILENAME, HASHED_ENTRY_PATTERN, HASHED_SERVER_ENTRY_PATTERN, MF_MANIFEST_FILENAME, STYLE_FILENAME, cacheControlOf, contentHashOf, findHashedEntry, hashedArtifactName, isBuildInvocation, isImmutableBundlePath, planArtifactCopies, uiEntryFilename };
+//# sourceMappingURL=artifact-names.d.mts.map

package/dist/build/artifact-names.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-names.d.mts","names":[],"sources":["../../src/build/artifact-names.ts"],"mappings":";;;;;;cAOa;cACA;;cAEA;cACA;cACA;cACA;;;;;;;;;;iBAWG;iBAIA,gBAAgB;EAAS;EAAkB;;;;;;;;;iBAc3C,sBAAsB;iBAKtB,eAAe;;iBAOf,cAAc,kBAAkB;iBAIhC,mBAAmB,cAAc,cAAc;;iBAK/C,gBAAgB,sBAAsB;cAUzC,wBAAsB,EAAA;;;;GAIjC,EAAA,KAAA;KACU,mBAAmB,EAAE,aAAa;UAE7B;EACf;EACA;;;;;;;;iBASc,mBAAmB;EACjC;EACA;EACA,WAAW,wBAAwB;;EAC/B,QAAQ,MAAM;EAAe,QAAQ"}

package/dist/build/artifact-names.mjs

@@ -0,0 +1,102 @@
+import { z } from "zod";
+import crypto from "node:crypto";
+
+//#region src/build/artifact-names.ts
+/** Dev-mode entry names: the in-memory dev server serves these exact names,
+* and dev consumers (the host's html shell, the compose client payload, the
+* readiness probe) append them — dev has no build report to discover hashed
+* names from. */
+const DEV_ENTRY_FILENAME = "remoteEntry.js";
+const DEV_SERVER_ENTRY_FILENAME = "remoteEntry.server.js";
+/** Fixed-name build outputs that get additive immutable hashed copies. */
+const MF_MANIFEST_FILENAME = "mf-manifest.json";
+const STYLE_FILENAME = "style.css";
+const HASHED_ENTRY_PATTERN = "remoteEntry.[contenthash].js";
+const HASHED_SERVER_ENTRY_PATTERN = "remoteEntry.server.[contenthash].js";
+/** The dev-stack signal: everything a dev server spawns (watch or no-watch
+* one-shot builds) serves the fixed dev entry names, because every dev
+* consumer appends them and no build report exists to discover hashed names
+* from. Every other invocation — local builds, host-test production builds,
+* regression container builds, deploys — is a build and emits content-hashed
+* entries + build reports. NODE_ENV cannot carry this decision (vitest runs
+* as "test", bundler CLIs default "production" even for dev watches), and
+* DEPLOY=true only marks deploy builds — so the dev server stamps its own
+* children. */
+function isBuildInvocation() {
+	return process.env.BOS_DEV_SERVER !== "1";
+}
+function uiEntryFilename(input) {
+	if (!input.isBuild) return input.server ? DEV_SERVER_ENTRY_FILENAME : DEV_ENTRY_FILENAME;
+	return input.server ? HASHED_SERVER_ENTRY_PATTERN : HASHED_ENTRY_PATTERN;
+}
+const HASH_SEGMENT_PATTERN = /\.[a-f0-9]{8,}\./;
+/**
+* Serving classification for bundle objects: anything whose name carries a
+* content-hash segment (including hashed entrypoints like
+* `remoteEntry.8f3a….js`) is immutable by construction; fixed-name
+* entrypoints and non-hashed files a redeploy replaces in place must
+* revalidate.
+*/
+function isImmutableBundlePath(name) {
+	const base = name.split("/").pop() ?? name;
+	return HASH_SEGMENT_PATTERN.test(base);
+}
+function cacheControlOf(name) {
+	return isImmutableBundlePath(name) ? "public, max-age=31536000, immutable" : "public, max-age=0, must-revalidate";
+}
+/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */
+function contentHashOf(content) {
+	return crypto.createHash("sha256").update(content).digest("hex").slice(0, 16);
+}
+function hashedArtifactName(base, hash, ext) {
+	return `${base}.${hash}.${ext.replace(/^\./, "")}`;
+}
+/** Find the content-hashed entry asset for a base name ("remoteEntry", "remoteEntry.server"). */
+function findHashedEntry(assetNames, base) {
+	return assetNames.find((name) => {
+		const rest = name.startsWith(`${base}.`) ? name.slice(base.length + 1) : null;
+		if (rest === null) return false;
+		const hash = rest.slice(0, -3);
+		return name.endsWith(".js") && /^[a-f0-9]{8,}$/.test(hash);
+	}) ?? null;
+}
+const BuildEntryReportSchema = z.object({
+	entry: z.string().min(1),
+	browserManifest: z.string().min(1).optional(),
+	css: z.string().min(1).optional()
+});
+/**
+* The additive-copy plan for one compiled dist root: each supplied fixed-name
+* artifact gets an immutable hashed copy. The hashed entry itself needs no
+* copy — the build report carries its name to the deploy leg. Returns null
+* when the build predates hashed entry names (only fixed names emitted).
+*/
+function planArtifactCopies(input) {
+	const entry = findHashedEntry(input.assetNames, input.entryBase);
+	if (!entry) return null;
+	const copies = [];
+	const report = { entry };
+	const hashedCopy = (fixedName, reportField) => {
+		const content = input.contents?.[fixedName];
+		if (content === void 0) return;
+		const dot = fixedName.lastIndexOf(".");
+		const base = fixedName.slice(0, dot);
+		const ext = fixedName.slice(dot + 1);
+		const hashed = hashedArtifactName(base, contentHashOf(content), ext);
+		copies.push({
+			from: fixedName,
+			to: hashed
+		});
+		report[reportField] = hashed;
+	};
+	hashedCopy(MF_MANIFEST_FILENAME, "browserManifest");
+	hashedCopy(STYLE_FILENAME, "css");
+	return {
+		copies,
+		report
+	};
+}
+
+//#endregion
+export { BuildEntryReportSchema, DEV_ENTRY_FILENAME, DEV_SERVER_ENTRY_FILENAME, HASHED_ENTRY_PATTERN, HASHED_SERVER_ENTRY_PATTERN, MF_MANIFEST_FILENAME, STYLE_FILENAME, cacheControlOf, contentHashOf, findHashedEntry, hashedArtifactName, isBuildInvocation, isImmutableBundlePath, planArtifactCopies, uiEntryFilename };
+//# sourceMappingURL=artifact-names.mjs.map

package/dist/build/artifact-names.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-names.mjs","names":[],"sources":["../../src/build/artifact-names.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport { z } from \"zod\";\n\n/** Dev-mode entry names: the in-memory dev server serves these exact names,\n * and dev consumers (the host's html shell, the compose client payload, the\n * readiness probe) append them — dev has no build report to discover hashed\n * names from. */\nexport const DEV_ENTRY_FILENAME = \"remoteEntry.js\";\nexport const DEV_SERVER_ENTRY_FILENAME = \"remoteEntry.server.js\";\n/** Fixed-name build outputs that get additive immutable hashed copies. */\nexport const MF_MANIFEST_FILENAME = \"mf-manifest.json\";\nexport const STYLE_FILENAME = \"style.css\";\nexport const HASHED_ENTRY_PATTERN = \"remoteEntry.[contenthash].js\";\nexport const HASHED_SERVER_ENTRY_PATTERN = \"remoteEntry.server.[contenthash].js\";\n\n/** The dev-stack signal: everything a dev server spawns (watch or no-watch\n * one-shot builds) serves the fixed dev entry names, because every dev\n * consumer appends them and no build report exists to discover hashed names\n * from. Every other invocation — local builds, host-test production builds,\n * regression container builds, deploys — is a build and emits content-hashed\n * entries + build reports. NODE_ENV cannot carry this decision (vitest runs\n * as \"test\", bundler CLIs default \"production\" even for dev watches), and\n * DEPLOY=true only marks deploy builds — so the dev server stamps its own\n * children. */\nexport function isBuildInvocation(): boolean {\n  return process.env.BOS_DEV_SERVER !== \"1\";\n}\n\nexport function uiEntryFilename(input: { isBuild: boolean; server?: boolean }): string {\n  if (!input.isBuild) return input.server ? DEV_SERVER_ENTRY_FILENAME : DEV_ENTRY_FILENAME;\n  return input.server ? HASHED_SERVER_ENTRY_PATTERN : HASHED_ENTRY_PATTERN;\n}\n\nconst HASH_SEGMENT_PATTERN = /\\.[a-f0-9]{8,}\\./;\n\n/**\n * Serving classification for bundle objects: anything whose name carries a\n * content-hash segment (including hashed entrypoints like\n * `remoteEntry.8f3a….js`) is immutable by construction; fixed-name\n * entrypoints and non-hashed files a redeploy replaces in place must\n * revalidate.\n */\nexport function isImmutableBundlePath(name: string): boolean {\n  const base = name.split(\"/\").pop() ?? name;\n  return HASH_SEGMENT_PATTERN.test(base);\n}\n\nexport function cacheControlOf(name: string): string {\n  return isImmutableBundlePath(name)\n    ? \"public, max-age=31536000, immutable\"\n    : \"public, max-age=0, must-revalidate\";\n}\n\n/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */\nexport function contentHashOf(content: string | Uint8Array): string {\n  return crypto.createHash(\"sha256\").update(content).digest(\"hex\").slice(0, 16);\n}\n\nexport function hashedArtifactName(base: string, hash: string, ext: string): string {\n  return `${base}.${hash}.${ext.replace(/^\\./, \"\")}`;\n}\n\n/** Find the content-hashed entry asset for a base name (\"remoteEntry\", \"remoteEntry.server\"). */\nexport function findHashedEntry(assetNames: string[], base: string): string | null {\n  const hashed = assetNames.find((name) => {\n    const rest = name.startsWith(`${base}.`) ? name.slice(base.length + 1) : null;\n    if (rest === null) return false;\n    const hash = rest.slice(0, -3);\n    return name.endsWith(\".js\") && /^[a-f0-9]{8,}$/.test(hash);\n  });\n  return hashed ?? null;\n}\n\nexport const BuildEntryReportSchema = z.object({\n  entry: z.string().min(1),\n  browserManifest: z.string().min(1).optional(),\n  css: z.string().min(1).optional(),\n});\nexport type BuildEntryReport = z.infer<typeof BuildEntryReportSchema>;\n\nexport interface ArtifactCopy {\n  from: string;\n  to: string;\n}\n\n/**\n * The additive-copy plan for one compiled dist root: each supplied fixed-name\n * artifact gets an immutable hashed copy. The hashed entry itself needs no\n * copy — the build report carries its name to the deploy leg. Returns null\n * when the build predates hashed entry names (only fixed names emitted).\n */\nexport function planArtifactCopies(input: {\n  assetNames: string[];\n  entryBase: string;\n  contents?: Record<string, string | Uint8Array | undefined>;\n}): { copies: Array<ArtifactCopy>; report: BuildEntryReport } | null {\n  const entry = findHashedEntry(input.assetNames, input.entryBase);\n  if (!entry) return null;\n\n  const copies: Array<ArtifactCopy> = [];\n  const report: BuildEntryReport = { entry };\n\n  const hashedCopy = (fixedName: string, reportField: \"browserManifest\" | \"css\") => {\n    const content = input.contents?.[fixedName];\n    if (content === undefined) return;\n    const dot = fixedName.lastIndexOf(\".\");\n    const base = fixedName.slice(0, dot);\n    const ext = fixedName.slice(dot + 1);\n    const hashed = hashedArtifactName(base, contentHashOf(content), ext);\n    copies.push({ from: fixedName, to: hashed });\n    report[reportField] = hashed;\n  };\n  hashedCopy(MF_MANIFEST_FILENAME, \"browserManifest\");\n  hashedCopy(STYLE_FILENAME, \"css\");\n\n  return { copies, report };\n}\n"],"mappings":";;;;;;;;AAOA,MAAa,qBAAqB;AAClC,MAAa,4BAA4B;;AAEzC,MAAa,uBAAuB;AACpC,MAAa,iBAAiB;AAC9B,MAAa,uBAAuB;AACpC,MAAa,8BAA8B;;;;;;;;;;AAW3C,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,mBAAmB;AACxC;AAEA,SAAgB,gBAAgB,OAAuD;CACrF,IAAI,CAAC,MAAM,SAAS,OAAO,MAAM,SAAS,4BAA4B;CACtE,OAAO,MAAM,SAAS,8BAA8B;AACtD;AAEA,MAAM,uBAAuB;;;;;;;;AAS7B,SAAgB,sBAAsB,MAAuB;CAC3D,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;CACtC,OAAO,qBAAqB,KAAK,IAAI;AACvC;AAEA,SAAgB,eAAe,MAAsB;CACnD,OAAO,sBAAsB,IAAI,IAC7B,wCACA;AACN;;AAGA,SAAgB,cAAc,SAAsC;CAClE,OAAO,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AAC9E;AAEA,SAAgB,mBAAmB,MAAc,MAAc,KAAqB;CAClF,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,QAAQ,OAAO,EAAE;AACjD;;AAGA,SAAgB,gBAAgB,YAAsB,MAA6B;CAOjF,OANe,WAAW,MAAM,SAAS;EACvC,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,EAAE,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,IAAI;EACzE,IAAI,SAAS,MAAM,OAAO;EAC1B,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE;EAC7B,OAAO,KAAK,SAAS,KAAK,KAAK,iBAAiB,KAAK,IAAI;CAC3D,CACY,KAAK;AACnB;AAEA,MAAa,yBAAyB,EAAE,OAAO;CAC7C,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC5C,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;AAClC,CAAC;;;;;;;AAcD,SAAgB,mBAAmB,OAIkC;CACnE,MAAM,QAAQ,gBAAgB,MAAM,YAAY,MAAM,SAAS;CAC/D,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,SAA8B,CAAC;CACrC,MAAM,SAA2B,EAAE,MAAM;CAEzC,MAAM,cAAc,WAAmB,gBAA2C;EAChF,MAAM,UAAU,MAAM,WAAW;EACjC,IAAI,YAAY,QAAW;EAC3B,MAAM,MAAM,UAAU,YAAY,GAAG;EACrC,MAAM,OAAO,UAAU,MAAM,GAAG,GAAG;EACnC,MAAM,MAAM,UAAU,MAAM,MAAM,CAAC;EACnC,MAAM,SAAS,mBAAmB,MAAM,cAAc,OAAO,GAAG,GAAG;EACnE,OAAO,KAAK;GAAE,MAAM;GAAW,IAAI;EAAO,CAAC;EAC3C,OAAO,eAAe;CACxB;CACA,WAAW,sBAAsB,iBAAiB;CAClD,WAAW,gBAAgB,KAAK;CAEhC,OAAO;EAAE;EAAQ;CAAO;AAC1B"}

package/dist/build/contract-types.cjs

@@ -0,0 +1,89 @@
+const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
+let node_fs = require("node:fs");
+node_fs = require_runtime.__toESM(node_fs, 1);
+let node_module = require("node:module");
+let node_path = require("node:path");
+node_path = require_runtime.__toESM(node_path, 1);
+let node_child_process = require("node:child_process");
+let node_util = require("node:util");
+
+//#region src/build/contract-types.ts
+const execFileAsync = (0, node_util.promisify)(node_child_process.execFile);
+const CONTRACT_ENTRY = node_path.default.join("src", "contract.ts");
+const CONTRACT_TYPES_DIR = "types";
+const CONTRACT_TYPES_FILE = node_path.default.join("types", "contract.d.ts");
+function contractTypesUpToDate(cwd) {
+	const entry = node_path.default.join(cwd, CONTRACT_ENTRY);
+	const outFile = node_path.default.join(cwd, CONTRACT_TYPES_FILE);
+	if (!node_fs.default.existsSync(entry) || !node_fs.default.existsSync(outFile)) return false;
+	return node_fs.default.statSync(outFile).mtimeMs >= node_fs.default.statSync(entry).mtimeMs;
+}
+function resolveTscBinary(cwd) {
+	for (const from of [node_path.default.join(cwd, "package.json"), node_path.default.join(__dirname, "..", "..", "..", "package.json")]) try {
+		const pkgJsonPath = (0, node_module.createRequire)(node_path.default.resolve(from)).resolve("typescript/package.json");
+		return node_path.default.join(node_path.default.dirname(pkgJsonPath), "bin", "tsc");
+	} catch {}
+	return "tsc";
+}
+/**
+* Regenerates types/contract.d.ts for a plugin workspace by invoking the
+* workspace's TypeScript 7 binary with explicit flags — no tsconfig file
+* involved, so emit layout is deterministic and there is nothing to sync.
+*
+* - "skipped": the workspace has no src/contract.ts
+* - "up-to-date": types/contract.d.ts is newer than src/contract.ts
+* - "generated": declarations were re-emitted (types/ is cleaned first, so
+*   stale nested layouts never survive)
+*/
+async function generateContractTypes(cwd = process.cwd()) {
+	const entry = node_path.default.join(cwd, CONTRACT_ENTRY);
+	if (!node_fs.default.existsSync(entry)) return "skipped";
+	if (contractTypesUpToDate(cwd)) return "up-to-date";
+	const outDir = node_path.default.join(cwd, CONTRACT_TYPES_DIR);
+	node_fs.default.rmSync(outDir, {
+		recursive: true,
+		force: true
+	});
+	node_fs.default.mkdirSync(outDir, { recursive: true });
+	const tsc = resolveTscBinary(cwd);
+	const args = [
+		"--ignoreConfig",
+		"--emitDeclarationOnly",
+		"--declaration",
+		"--rootDir",
+		"src",
+		"--outDir",
+		CONTRACT_TYPES_DIR,
+		"--target",
+		"esnext",
+		"--module",
+		"esnext",
+		"--moduleResolution",
+		"bundler",
+		"--strict",
+		"--skipLibCheck",
+		CONTRACT_ENTRY
+	];
+	try {
+		await execFileAsync(process.execPath, [tsc, ...args], { cwd });
+	} catch (error) {
+		const err = error;
+		const detail = [
+			err.stderr,
+			err.stdout,
+			err.message
+		].filter(Boolean).join("\n").trim();
+		throw new Error(`Contract type generation failed for ${node_path.default.basename(cwd)} — tsc exited non-zero:\n${detail}`);
+	}
+	if (!node_fs.default.existsSync(node_path.default.join(cwd, CONTRACT_TYPES_FILE))) throw new Error(`Contract type generation produced no output — expected ${node_path.default.join(cwd, CONTRACT_TYPES_FILE)}`);
+	return "generated";
+}
+
+//#endregion
+exports.CONTRACT_ENTRY = CONTRACT_ENTRY;
+exports.CONTRACT_TYPES_DIR = CONTRACT_TYPES_DIR;
+exports.CONTRACT_TYPES_FILE = CONTRACT_TYPES_FILE;
+exports.contractTypesUpToDate = contractTypesUpToDate;
+exports.generateContractTypes = generateContractTypes;
+exports.resolveTscBinary = resolveTscBinary;
+//# sourceMappingURL=contract-types.cjs.map

package/dist/build/contract-types.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-types.cjs","names":["promisify","execFile","path","fs","createRequire"],"sources":["../../src/build/contract-types.ts"],"sourcesContent":["import { execFile } from \"node:child_process\";\nimport fs from \"node:fs\";\nimport { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport { promisify } from \"node:util\";\n\nconst execFileAsync = promisify(execFile);\n\nexport type ContractTypesStatus = \"generated\" | \"up-to-date\" | \"skipped\";\n\nexport const CONTRACT_ENTRY = path.join(\"src\", \"contract.ts\");\nexport const CONTRACT_TYPES_DIR = \"types\";\nexport const CONTRACT_TYPES_FILE = path.join(\"types\", \"contract.d.ts\");\n\nexport function contractTypesUpToDate(cwd: string): boolean {\n  const entry = path.join(cwd, CONTRACT_ENTRY);\n  const outFile = path.join(cwd, CONTRACT_TYPES_FILE);\n  if (!fs.existsSync(entry) || !fs.existsSync(outFile)) return false;\n  return fs.statSync(outFile).mtimeMs >= fs.statSync(entry).mtimeMs;\n}\n\nexport function resolveTscBinary(cwd: string): string {\n  for (const from of [\n    path.join(cwd, \"package.json\"),\n    path.join(import.meta.dirname, \"..\", \"..\", \"..\", \"package.json\"),\n  ]) {\n    try {\n      const req = createRequire(path.resolve(from));\n      const pkgJsonPath = req.resolve(\"typescript/package.json\");\n      return path.join(path.dirname(pkgJsonPath), \"bin\", \"tsc\");\n    } catch {\n      // try the next resolution root\n    }\n  }\n  return \"tsc\";\n}\n\n/**\n * Regenerates types/contract.d.ts for a plugin workspace by invoking the\n * workspace's TypeScript 7 binary with explicit flags — no tsconfig file\n * involved, so emit layout is deterministic and there is nothing to sync.\n *\n * - \"skipped\": the workspace has no src/contract.ts\n * - \"up-to-date\": types/contract.d.ts is newer than src/contract.ts\n * - \"generated\": declarations were re-emitted (types/ is cleaned first, so\n *   stale nested layouts never survive)\n */\nexport async function generateContractTypes(\n  cwd: string = process.cwd(),\n): Promise<ContractTypesStatus> {\n  const entry = path.join(cwd, CONTRACT_ENTRY);\n  if (!fs.existsSync(entry)) {\n    return \"skipped\";\n  }\n\n  if (contractTypesUpToDate(cwd)) {\n    return \"up-to-date\";\n  }\n\n  const outDir = path.join(cwd, CONTRACT_TYPES_DIR);\n  fs.rmSync(outDir, { recursive: true, force: true });\n  fs.mkdirSync(outDir, { recursive: true });\n\n  const tsc = resolveTscBinary(cwd);\n  const args = [\n    \"--ignoreConfig\",\n    \"--emitDeclarationOnly\",\n    \"--declaration\",\n    \"--rootDir\",\n    \"src\",\n    \"--outDir\",\n    CONTRACT_TYPES_DIR,\n    \"--target\",\n    \"esnext\",\n    \"--module\",\n    \"esnext\",\n    \"--moduleResolution\",\n    \"bundler\",\n    \"--strict\",\n    \"--skipLibCheck\",\n    CONTRACT_ENTRY,\n  ];\n\n  try {\n    await execFileAsync(process.execPath, [tsc, ...args], { cwd });\n  } catch (error) {\n    const err = error as { message?: string; stdout?: string; stderr?: string };\n    const detail = [err.stderr, err.stdout, err.message].filter(Boolean).join(\"\\n\").trim();\n    throw new Error(\n      `Contract type generation failed for ${path.basename(cwd)} — tsc exited non-zero:\\n${detail}`,\n    );\n  }\n\n  if (!fs.existsSync(path.join(cwd, CONTRACT_TYPES_FILE))) {\n    throw new Error(\n      `Contract type generation produced no output — expected ${path.join(cwd, CONTRACT_TYPES_FILE)}`,\n    );\n  }\n\n  return \"generated\";\n}\n"],"mappings":";;;;;;;;;;AAMA,MAAM,oBAAgBA,qBAAUC,2BAAQ;AAIxC,MAAa,iBAAiBC,kBAAK,KAAK,OAAO,aAAa;AAC5D,MAAa,qBAAqB;AAClC,MAAa,sBAAsBA,kBAAK,KAAK,SAAS,eAAe;AAErE,SAAgB,sBAAsB,KAAsB;CAC1D,MAAM,QAAQA,kBAAK,KAAK,KAAK,cAAc;CAC3C,MAAM,UAAUA,kBAAK,KAAK,KAAK,mBAAmB;CAClD,IAAI,CAACC,gBAAG,WAAW,KAAK,KAAK,CAACA,gBAAG,WAAW,OAAO,GAAG,OAAO;CAC7D,OAAOA,gBAAG,SAAS,OAAO,CAAC,CAAC,WAAWA,gBAAG,SAAS,KAAK,CAAC,CAAC;AAC5D;AAEA,SAAgB,iBAAiB,KAAqB;CACpD,KAAK,MAAM,QAAQ,CACjBD,kBAAK,KAAK,KAAK,cAAc,GAC7BA,kBAAK,gBAA0B,MAAM,MAAM,MAAM,cAAc,CACjE,GACE,IAAI;EAEF,MAAM,kBADME,2BAAcF,kBAAK,QAAQ,IAAI,CACrB,CAAC,CAAC,QAAQ,yBAAyB;EACzD,OAAOA,kBAAK,KAAKA,kBAAK,QAAQ,WAAW,GAAG,OAAO,KAAK;CAC1D,QAAQ,CAER;CAEF,OAAO;AACT;;;;;;;;;;;AAYA,eAAsB,sBACpB,MAAc,QAAQ,IAAI,GACI;CAC9B,MAAM,QAAQA,kBAAK,KAAK,KAAK,cAAc;CAC3C,IAAI,CAACC,gBAAG,WAAW,KAAK,GACtB,OAAO;CAGT,IAAI,sBAAsB,GAAG,GAC3B,OAAO;CAGT,MAAM,SAASD,kBAAK,KAAK,KAAK,kBAAkB;CAChD,gBAAG,OAAO,QAAQ;EAAE,WAAW;EAAM,OAAO;CAAK,CAAC;CAClD,gBAAG,UAAU,QAAQ,EAAE,WAAW,KAAK,CAAC;CAExC,MAAM,MAAM,iBAAiB,GAAG;CAChC,MAAM,OAAO;EACX;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACF;CAEA,IAAI;EACF,MAAM,cAAc,QAAQ,UAAU,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,IAAI,CAAC;CAC/D,SAAS,OAAO;EACd,MAAM,MAAM;EACZ,MAAM,SAAS;GAAC,IAAI;GAAQ,IAAI;GAAQ,IAAI;EAAO,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK;EACrF,MAAM,IAAI,MACR,uCAAuCA,kBAAK,SAAS,GAAG,EAAE,2BAA2B,QACvF;CACF;CAEA,IAAI,CAACC,gBAAG,WAAWD,kBAAK,KAAK,KAAK,mBAAmB,CAAC,GACpD,MAAM,IAAI,MACR,0DAA0DA,kBAAK,KAAK,KAAK,mBAAmB,GAC9F;CAGF,OAAO;AACT"}