every-plugin 3.0.0-rc.14 → 3.0.0-rc.16

package/dist/build/artifact-names.cjs

@@ -1,5 +1,5 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
+const require_runtime = require("../_virtual/_rolldown/runtime.cjs");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 node_crypto = require_runtime.__toESM(node_crypto, 1);
@@ -34,13 +34,16 @@ function uiEntryFilename(input) {
 }
 const HASH_SEGMENT_PATTERN = /\.[a-f0-9]{8,}\./;
 /**
-* Serving classification for bundle objects: anything whose name carries a
-* content-hash segment (including hashed entrypoints like
-* `remoteEntry.8f3a….js`) is immutable by construction; fixed-name
-* entrypoints and non-hashed files a redeploy replaces in place must
-* revalidate.
+* Serving classification for bundle objects: anything under a version
+* directory (`versions/<dirId>/…`, #826) or a `versions/<id>.json` manifest
+* is immutable by construction — the directory name is content-addressed and
+* the upload service refuses conflicting writes under `versions/`; likewise
+* any name carrying a content-hash segment (including hashed entrypoints
+* like `remoteEntry.8f3a….js`). Fixed-name entrypoints and non-hashed files
+* a redeploy replaces in place must revalidate.
 */
 function isImmutableBundlePath(name) {
+	if (name === "versions" || name.startsWith("versions/")) return true;
 	const base = name.split("/").pop() ?? name;
 	return HASH_SEGMENT_PATTERN.test(base);
 }

package/dist/build/artifact-names.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-names.cjs","names":["crypto","z"],"sources":["../../src/build/artifact-names.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport { z } from \"zod\";\n\n/** Dev-mode entry names: the in-memory dev server serves these exact names,\n * and dev consumers (the host's html shell, the compose client payload, the\n * readiness probe) append them — dev has no build report to discover hashed\n * names from. */\nexport const DEV_ENTRY_FILENAME = \"remoteEntry.js\";\nexport const DEV_SERVER_ENTRY_FILENAME = \"remoteEntry.server.js\";\n/** Fixed-name build outputs that get additive immutable hashed copies. */\nexport const MF_MANIFEST_FILENAME = \"mf-manifest.json\";\nexport const STYLE_FILENAME = \"style.css\";\nexport const HASHED_ENTRY_PATTERN = \"remoteEntry.[contenthash].js\";\nexport const HASHED_SERVER_ENTRY_PATTERN = \"remoteEntry.server.[contenthash].js\";\n\n/** The dev-stack signal: everything a dev server spawns (watch or no-watch\n * one-shot builds) serves the fixed dev entry names, because every dev\n * consumer appends them and no build report exists to discover hashed names\n * from. Every other invocation — local builds, host-test production builds,\n * regression container builds, deploys — is a build and emits content-hashed\n * entries + build reports. NODE_ENV cannot carry this decision (vitest runs\n * as \"test\", bundler CLIs default \"production\" even for dev watches), and\n * DEPLOY=true only marks deploy builds — so the dev server stamps its own\n * children. */\nexport function isBuildInvocation(): boolean {\n  return process.env.BOS_DEV_SERVER !== \"1\";\n}\n\nexport function uiEntryFilename(input: { isBuild: boolean; server?: boolean }): string {\n  if (!input.isBuild) return input.server ? DEV_SERVER_ENTRY_FILENAME : DEV_ENTRY_FILENAME;\n  return input.server ? HASHED_SERVER_ENTRY_PATTERN : HASHED_ENTRY_PATTERN;\n}\n\nconst HASH_SEGMENT_PATTERN = /\\.[a-f0-9]{8,}\\./;\n\n/**\n * Serving classification for bundle objects: anything whose name carries a\n * content-hash segment (including hashed entrypoints like\n * `remoteEntry.8f3a….js`) is immutable by construction; fixed-name\n * entrypoints and non-hashed files a redeploy replaces in place must\n * revalidate.\n */\nexport function isImmutableBundlePath(name: string): boolean {\n  const base = name.split(\"/\").pop() ?? name;\n  return HASH_SEGMENT_PATTERN.test(base);\n}\n\nexport function cacheControlOf(name: string): string {\n  return isImmutableBundlePath(name)\n    ? \"public, max-age=31536000, immutable\"\n    : \"public, max-age=0, must-revalidate\";\n}\n\n/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */\nexport function contentHashOf(content: string | Uint8Array): string {\n  return crypto.createHash(\"sha256\").update(content).digest(\"hex\").slice(0, 16);\n}\n\nexport function hashedArtifactName(base: string, hash: string, ext: string): string {\n  return `${base}.${hash}.${ext.replace(/^\\./, \"\")}`;\n}\n\n/** Find the content-hashed entry asset for a base name (\"remoteEntry\", \"remoteEntry.server\"). */\nexport function findHashedEntry(assetNames: string[], base: string): string | null {\n  const hashed = assetNames.find((name) => {\n    const rest = name.startsWith(`${base}.`) ? name.slice(base.length + 1) : null;\n    if (rest === null) return false;\n    const hash = rest.slice(0, -3);\n    return name.endsWith(\".js\") && /^[a-f0-9]{8,}$/.test(hash);\n  });\n  return hashed ?? null;\n}\n\nexport const BuildEntryReportSchema = z.object({\n  entry: z.string().min(1),\n  browserManifest: z.string().min(1).optional(),\n  css: z.string().min(1).optional(),\n  /**\n   * Shared-singleton `name → version` this build embedded — resolved from the\n   * building workspace's node_modules at config time and stamped by both the\n   * rspack and rsbuild build paths. The deploy leg records it into the\n   * workspace's version manifest, so a slot's pin carries shared-dep\n   * semantics and consumers can detect a build skew before loading (#546).\n   */\n  shared: z.record(z.string(), z.string()).optional(),\n});\nexport type BuildEntryReport = z.infer<typeof BuildEntryReportSchema>;\n\nexport interface ArtifactCopy {\n  from: string;\n  to: string;\n}\n\n/**\n * The additive-copy plan for one compiled dist root: each supplied fixed-name\n * artifact gets an immutable hashed copy. The hashed entry itself needs no\n * copy — the build report carries its name to the deploy leg. Returns null\n * when the build predates hashed entry names (only fixed names emitted).\n */\nexport function planArtifactCopies(input: {\n  assetNames: string[];\n  entryBase: string;\n  contents?: Record<string, string | Uint8Array | undefined>;\n}): { copies: Array<ArtifactCopy>; report: BuildEntryReport } | null {\n  const entry = findHashedEntry(input.assetNames, input.entryBase);\n  if (!entry) return null;\n\n  const copies: Array<ArtifactCopy> = [];\n  const report: BuildEntryReport = { entry };\n\n  const hashedCopy = (fixedName: string, reportField: \"browserManifest\" | \"css\") => {\n    const content = input.contents?.[fixedName];\n    if (content === undefined) return;\n    const dot = fixedName.lastIndexOf(\".\");\n    const base = fixedName.slice(0, dot);\n    const ext = fixedName.slice(dot + 1);\n    const hashed = hashedArtifactName(base, contentHashOf(content), ext);\n    copies.push({ from: fixedName, to: hashed });\n    report[reportField] = hashed;\n  };\n  hashedCopy(MF_MANIFEST_FILENAME, \"browserManifest\");\n  hashedCopy(STYLE_FILENAME, \"css\");\n\n  return { copies, report };\n}\n"],"mappings":";;;;;;;;;;;AAOA,MAAa,qBAAqB;AAClC,MAAa,4BAA4B;;AAEzC,MAAa,uBAAuB;AACpC,MAAa,iBAAiB;AAC9B,MAAa,uBAAuB;AACpC,MAAa,8BAA8B;;;;;;;;;;AAW3C,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,mBAAmB;AACxC;AAEA,SAAgB,gBAAgB,OAAuD;CACrF,IAAI,CAAC,MAAM,SAAS,OAAO,MAAM,SAAS,4BAA4B;CACtE,OAAO,MAAM,SAAS,8BAA8B;AACtD;AAEA,MAAM,uBAAuB;;;;;;;;AAS7B,SAAgB,sBAAsB,MAAuB;CAC3D,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;CACtC,OAAO,qBAAqB,KAAK,IAAI;AACvC;AAEA,SAAgB,eAAe,MAAsB;CACnD,OAAO,sBAAsB,IAAI,IAC7B,wCACA;AACN;;AAGA,SAAgB,cAAc,SAAsC;CAClE,OAAOA,oBAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AAC9E;AAEA,SAAgB,mBAAmB,MAAc,MAAc,KAAqB;CAClF,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,QAAQ,OAAO,EAAE;AACjD;;AAGA,SAAgB,gBAAgB,YAAsB,MAA6B;CAOjF,OANe,WAAW,MAAM,SAAS;EACvC,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,EAAE,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,IAAI;EACzE,IAAI,SAAS,MAAM,OAAO;EAC1B,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE;EAC7B,OAAO,KAAK,SAAS,KAAK,KAAK,iBAAiB,KAAK,IAAI;CAC3D,CACY,KAAK;AACnB;AAEA,MAAa,yBAAyBC,MAAE,OAAO;CAC7C,OAAOA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,iBAAiBA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC5C,KAAKA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;;;;;;;;CAQhC,QAAQA,MAAE,OAAOA,MAAE,OAAO,GAAGA,MAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACpD,CAAC;;;;;;;AAcD,SAAgB,mBAAmB,OAIkC;CACnE,MAAM,QAAQ,gBAAgB,MAAM,YAAY,MAAM,SAAS;CAC/D,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,SAA8B,CAAC;CACrC,MAAM,SAA2B,EAAE,MAAM;CAEzC,MAAM,cAAc,WAAmB,gBAA2C;EAChF,MAAM,UAAU,MAAM,WAAW;EACjC,IAAI,YAAY,QAAW;EAC3B,MAAM,MAAM,UAAU,YAAY,GAAG;EACrC,MAAM,OAAO,UAAU,MAAM,GAAG,GAAG;EACnC,MAAM,MAAM,UAAU,MAAM,MAAM,CAAC;EACnC,MAAM,SAAS,mBAAmB,MAAM,cAAc,OAAO,GAAG,GAAG;EACnE,OAAO,KAAK;GAAE,MAAM;GAAW,IAAI;EAAO,CAAC;EAC3C,OAAO,eAAe;CACxB;CACA,WAAW,sBAAsB,iBAAiB;CAClD,WAAW,gBAAgB,KAAK;CAEhC,OAAO;EAAE;EAAQ;CAAO;AAC1B"}
+{"version":3,"file":"artifact-names.cjs","names":["crypto","z"],"sources":["../../src/build/artifact-names.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport { z } from \"zod\";\n\n/** Dev-mode entry names: the in-memory dev server serves these exact names,\n * and dev consumers (the host's html shell, the compose client payload, the\n * readiness probe) append them — dev has no build report to discover hashed\n * names from. */\nexport const DEV_ENTRY_FILENAME = \"remoteEntry.js\";\nexport const DEV_SERVER_ENTRY_FILENAME = \"remoteEntry.server.js\";\n/** Fixed-name build outputs that get additive immutable hashed copies. */\nexport const MF_MANIFEST_FILENAME = \"mf-manifest.json\";\nexport const STYLE_FILENAME = \"style.css\";\nexport const HASHED_ENTRY_PATTERN = \"remoteEntry.[contenthash].js\";\nexport const HASHED_SERVER_ENTRY_PATTERN = \"remoteEntry.server.[contenthash].js\";\n\n/** The dev-stack signal: everything a dev server spawns (watch or no-watch\n * one-shot builds) serves the fixed dev entry names, because every dev\n * consumer appends them and no build report exists to discover hashed names\n * from. Every other invocation — local builds, host-test production builds,\n * regression container builds, deploys — is a build and emits content-hashed\n * entries + build reports. NODE_ENV cannot carry this decision (vitest runs\n * as \"test\", bundler CLIs default \"production\" even for dev watches), and\n * DEPLOY=true only marks deploy builds — so the dev server stamps its own\n * children. */\nexport function isBuildInvocation(): boolean {\n  return process.env.BOS_DEV_SERVER !== \"1\";\n}\n\nexport function uiEntryFilename(input: { isBuild: boolean; server?: boolean }): string {\n  if (!input.isBuild) return input.server ? DEV_SERVER_ENTRY_FILENAME : DEV_ENTRY_FILENAME;\n  return input.server ? HASHED_SERVER_ENTRY_PATTERN : HASHED_ENTRY_PATTERN;\n}\n\nconst HASH_SEGMENT_PATTERN = /\\.[a-f0-9]{8,}\\./;\n\n/**\n * Serving classification for bundle objects: anything under a version\n * directory (`versions/<dirId>/…`, #826) or a `versions/<id>.json` manifest\n * is immutable by construction — the directory name is content-addressed and\n * the upload service refuses conflicting writes under `versions/`; likewise\n * any name carrying a content-hash segment (including hashed entrypoints\n * like `remoteEntry.8f3a….js`). Fixed-name entrypoints and non-hashed files\n * a redeploy replaces in place must revalidate.\n */\nexport function isImmutableBundlePath(name: string): boolean {\n  if (name === \"versions\" || name.startsWith(\"versions/\")) return true;\n  const base = name.split(\"/\").pop() ?? name;\n  return HASH_SEGMENT_PATTERN.test(base);\n}\n\nexport function cacheControlOf(name: string): string {\n  return isImmutableBundlePath(name)\n    ? \"public, max-age=31536000, immutable\"\n    : \"public, max-age=0, must-revalidate\";\n}\n\n/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */\nexport function contentHashOf(content: string | Uint8Array): string {\n  return crypto.createHash(\"sha256\").update(content).digest(\"hex\").slice(0, 16);\n}\n\nexport function hashedArtifactName(base: string, hash: string, ext: string): string {\n  return `${base}.${hash}.${ext.replace(/^\\./, \"\")}`;\n}\n\n/** Find the content-hashed entry asset for a base name (\"remoteEntry\", \"remoteEntry.server\"). */\nexport function findHashedEntry(assetNames: string[], base: string): string | null {\n  const hashed = assetNames.find((name) => {\n    const rest = name.startsWith(`${base}.`) ? name.slice(base.length + 1) : null;\n    if (rest === null) return false;\n    const hash = rest.slice(0, -3);\n    return name.endsWith(\".js\") && /^[a-f0-9]{8,}$/.test(hash);\n  });\n  return hashed ?? null;\n}\n\nexport const BuildEntryReportSchema = z.object({\n  entry: z.string().min(1),\n  browserManifest: z.string().min(1).optional(),\n  css: z.string().min(1).optional(),\n  /**\n   * Shared-singleton `name → version` this build embedded — resolved from the\n   * building workspace's node_modules at config time and stamped by both the\n   * rspack and rsbuild build paths. The deploy leg records it into the\n   * workspace's version manifest, so a slot's pin carries shared-dep\n   * semantics and consumers can detect a build skew before loading (#546).\n   */\n  shared: z.record(z.string(), z.string()).optional(),\n});\nexport type BuildEntryReport = z.infer<typeof BuildEntryReportSchema>;\n\nexport interface ArtifactCopy {\n  from: string;\n  to: string;\n}\n\n/**\n * The additive-copy plan for one compiled dist root: each supplied fixed-name\n * artifact gets an immutable hashed copy. The hashed entry itself needs no\n * copy — the build report carries its name to the deploy leg. Returns null\n * when the build predates hashed entry names (only fixed names emitted).\n */\nexport function planArtifactCopies(input: {\n  assetNames: string[];\n  entryBase: string;\n  contents?: Record<string, string | Uint8Array | undefined>;\n}): { copies: Array<ArtifactCopy>; report: BuildEntryReport } | null {\n  const entry = findHashedEntry(input.assetNames, input.entryBase);\n  if (!entry) return null;\n\n  const copies: Array<ArtifactCopy> = [];\n  const report: BuildEntryReport = { entry };\n\n  const hashedCopy = (fixedName: string, reportField: \"browserManifest\" | \"css\") => {\n    const content = input.contents?.[fixedName];\n    if (content === undefined) return;\n    const dot = fixedName.lastIndexOf(\".\");\n    const base = fixedName.slice(0, dot);\n    const ext = fixedName.slice(dot + 1);\n    const hashed = hashedArtifactName(base, contentHashOf(content), ext);\n    copies.push({ from: fixedName, to: hashed });\n    report[reportField] = hashed;\n  };\n  hashedCopy(MF_MANIFEST_FILENAME, \"browserManifest\");\n  hashedCopy(STYLE_FILENAME, \"css\");\n\n  return { copies, report };\n}\n"],"mappings":";;;;;;;;;;;AAOA,MAAa,qBAAqB;AAClC,MAAa,4BAA4B;;AAEzC,MAAa,uBAAuB;AACpC,MAAa,iBAAiB;AAC9B,MAAa,uBAAuB;AACpC,MAAa,8BAA8B;;;;;;;;;;AAW3C,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,mBAAmB;AACxC;AAEA,SAAgB,gBAAgB,OAAuD;CACrF,IAAI,CAAC,MAAM,SAAS,OAAO,MAAM,SAAS,4BAA4B;CACtE,OAAO,MAAM,SAAS,8BAA8B;AACtD;AAEA,MAAM,uBAAuB;;;;;;;;;;AAW7B,SAAgB,sBAAsB,MAAuB;CAC3D,IAAI,SAAS,cAAc,KAAK,WAAW,WAAW,GAAG,OAAO;CAChE,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;CACtC,OAAO,qBAAqB,KAAK,IAAI;AACvC;AAEA,SAAgB,eAAe,MAAsB;CACnD,OAAO,sBAAsB,IAAI,IAC7B,wCACA;AACN;;AAGA,SAAgB,cAAc,SAAsC;CAClE,OAAOA,oBAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AAC9E;AAEA,SAAgB,mBAAmB,MAAc,MAAc,KAAqB;CAClF,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,QAAQ,OAAO,EAAE;AACjD;;AAGA,SAAgB,gBAAgB,YAAsB,MAA6B;CAOjF,OANe,WAAW,MAAM,SAAS;EACvC,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,EAAE,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,IAAI;EACzE,IAAI,SAAS,MAAM,OAAO;EAC1B,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE;EAC7B,OAAO,KAAK,SAAS,KAAK,KAAK,iBAAiB,KAAK,IAAI;CAC3D,CACY,KAAK;AACnB;AAEA,MAAa,yBAAyBC,MAAE,OAAO;CAC7C,OAAOA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,iBAAiBA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC5C,KAAKA,MAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;;;;;;;;CAQhC,QAAQA,MAAE,OAAOA,MAAE,OAAO,GAAGA,MAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACpD,CAAC;;;;;;;AAcD,SAAgB,mBAAmB,OAIkC;CACnE,MAAM,QAAQ,gBAAgB,MAAM,YAAY,MAAM,SAAS;CAC/D,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,SAA8B,CAAC;CACrC,MAAM,SAA2B,EAAE,MAAM;CAEzC,MAAM,cAAc,WAAmB,gBAA2C;EAChF,MAAM,UAAU,MAAM,WAAW;EACjC,IAAI,YAAY,QAAW;EAC3B,MAAM,MAAM,UAAU,YAAY,GAAG;EACrC,MAAM,OAAO,UAAU,MAAM,GAAG,GAAG;EACnC,MAAM,MAAM,UAAU,MAAM,MAAM,CAAC;EACnC,MAAM,SAAS,mBAAmB,MAAM,cAAc,OAAO,GAAG,GAAG;EACnE,OAAO,KAAK;GAAE,MAAM;GAAW,IAAI;EAAO,CAAC;EAC3C,OAAO,eAAe;CACxB;CACA,WAAW,sBAAsB,iBAAiB;CAClD,WAAW,gBAAgB,KAAK;CAEhC,OAAO;EAAE;EAAQ;CAAO;AAC1B"}

package/dist/build/artifact-names.d.cts

@@ -26,11 +26,13 @@ declare function uiEntryFilename(input: {
   server?: boolean;
 }): string;
 /**
- * Serving classification for bundle objects: anything whose name carries a
- * content-hash segment (including hashed entrypoints like
- * `remoteEntry.8f3a….js`) is immutable by construction; fixed-name
- * entrypoints and non-hashed files a redeploy replaces in place must
- * revalidate.
+ * Serving classification for bundle objects: anything under a version
+ * directory (`versions/<dirId>/…`, #826) or a `versions/<id>.json` manifest
+ * is immutable by construction — the directory name is content-addressed and
+ * the upload service refuses conflicting writes under `versions/`; likewise
+ * any name carrying a content-hash segment (including hashed entrypoints
+ * like `remoteEntry.8f3a….js`). Fixed-name entrypoints and non-hashed files
+ * a redeploy replaces in place must revalidate.
  */
 declare function isImmutableBundlePath(name: string): boolean;
 declare function cacheControlOf(name: string): string;

package/dist/build/artifact-names.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-names.d.cts","names":[],"sources":["../../src/build/artifact-names.ts"],"mappings":";;;;;;cAOa;cACA;;cAEA;cACA;cACA;cACA;;;;;;;;;;iBAWG;iBAIA,gBAAgB;EAAS;EAAkB;;;;;;;;;iBAc3C,sBAAsB;iBAKtB,eAAe;;iBAOf,cAAc,kBAAkB;iBAIhC,mBAAmB,cAAc,cAAc;;iBAK/C,gBAAgB,sBAAsB;cAUzC,wBAAsB,EAAA;;;;;GAYjC,EAAA,KAAA;KACU,mBAAmB,EAAE,aAAa;UAE7B;EACf;EACA;;;;;;;;iBASc,mBAAmB;EACjC;EACA;EACA,WAAW,wBAAwB;;EAC/B,QAAQ,MAAM;EAAe,QAAQ"}
+{"version":3,"file":"artifact-names.d.cts","names":[],"sources":["../../src/build/artifact-names.ts"],"mappings":";;;;;;cAOa;cACA;;cAEA;cACA;cACA;cACA;;;;;;;;;;iBAWG;iBAIA,gBAAgB;EAAS;EAAkB;;;;;;;;;;;iBAgB3C,sBAAsB;iBAMtB,eAAe;;iBAOf,cAAc,kBAAkB;iBAIhC,mBAAmB,cAAc,cAAc;;iBAK/C,gBAAgB,sBAAsB;cAUzC,wBAAsB,EAAA;;;;;GAYjC,EAAA,KAAA;KACU,mBAAmB,EAAE,aAAa;UAE7B;EACf;EACA;;;;;;;;iBASc,mBAAmB;EACjC;EACA;EACA,WAAW,wBAAwB;;EAC/B,QAAQ,MAAM;EAAe,QAAQ"}

package/dist/build/artifact-names.d.mts

@@ -26,11 +26,13 @@ declare function uiEntryFilename(input: {
   server?: boolean;
 }): string;
 /**
- * Serving classification for bundle objects: anything whose name carries a
- * content-hash segment (including hashed entrypoints like
- * `remoteEntry.8f3a….js`) is immutable by construction; fixed-name
- * entrypoints and non-hashed files a redeploy replaces in place must
- * revalidate.
+ * Serving classification for bundle objects: anything under a version
+ * directory (`versions/<dirId>/…`, #826) or a `versions/<id>.json` manifest
+ * is immutable by construction — the directory name is content-addressed and
+ * the upload service refuses conflicting writes under `versions/`; likewise
+ * any name carrying a content-hash segment (including hashed entrypoints
+ * like `remoteEntry.8f3a….js`). Fixed-name entrypoints and non-hashed files
+ * a redeploy replaces in place must revalidate.
  */
 declare function isImmutableBundlePath(name: string): boolean;
 declare function cacheControlOf(name: string): string;

package/dist/build/artifact-names.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-names.d.mts","names":[],"sources":["../../src/build/artifact-names.ts"],"mappings":";;;;;;cAOa;cACA;;cAEA;cACA;cACA;cACA;;;;;;;;;;iBAWG;iBAIA,gBAAgB;EAAS;EAAkB;;;;;;;;;iBAc3C,sBAAsB;iBAKtB,eAAe;;iBAOf,cAAc,kBAAkB;iBAIhC,mBAAmB,cAAc,cAAc;;iBAK/C,gBAAgB,sBAAsB;cAUzC,wBAAsB,EAAA;;;;;GAYjC,EAAA,KAAA;KACU,mBAAmB,EAAE,aAAa;UAE7B;EACf;EACA;;;;;;;;iBASc,mBAAmB;EACjC;EACA;EACA,WAAW,wBAAwB;;EAC/B,QAAQ,MAAM;EAAe,QAAQ"}
+{"version":3,"file":"artifact-names.d.mts","names":[],"sources":["../../src/build/artifact-names.ts"],"mappings":";;;;;;cAOa;cACA;;cAEA;cACA;cACA;cACA;;;;;;;;;;iBAWG;iBAIA,gBAAgB;EAAS;EAAkB;;;;;;;;;;;iBAgB3C,sBAAsB;iBAMtB,eAAe;;iBAOf,cAAc,kBAAkB;iBAIhC,mBAAmB,cAAc,cAAc;;iBAK/C,gBAAgB,sBAAsB;cAUzC,wBAAsB,EAAA;;;;;GAYjC,EAAA,KAAA;KACU,mBAAmB,EAAE,aAAa;UAE7B;EACf;EACA;;;;;;;;iBASc,mBAAmB;EACjC;EACA;EACA,WAAW,wBAAwB;;EAC/B,QAAQ,MAAM;EAAe,QAAQ"}

package/dist/build/artifact-names.mjs

@@ -31,13 +31,16 @@ function uiEntryFilename(input) {
 }
 const HASH_SEGMENT_PATTERN = /\.[a-f0-9]{8,}\./;
 /**
-* Serving classification for bundle objects: anything whose name carries a
-* content-hash segment (including hashed entrypoints like
-* `remoteEntry.8f3a….js`) is immutable by construction; fixed-name
-* entrypoints and non-hashed files a redeploy replaces in place must
-* revalidate.
+* Serving classification for bundle objects: anything under a version
+* directory (`versions/<dirId>/…`, #826) or a `versions/<id>.json` manifest
+* is immutable by construction — the directory name is content-addressed and
+* the upload service refuses conflicting writes under `versions/`; likewise
+* any name carrying a content-hash segment (including hashed entrypoints
+* like `remoteEntry.8f3a….js`). Fixed-name entrypoints and non-hashed files
+* a redeploy replaces in place must revalidate.
 */
 function isImmutableBundlePath(name) {
+	if (name === "versions" || name.startsWith("versions/")) return true;
 	const base = name.split("/").pop() ?? name;
 	return HASH_SEGMENT_PATTERN.test(base);
 }

package/dist/build/artifact-names.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-names.mjs","names":[],"sources":["../../src/build/artifact-names.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport { z } from \"zod\";\n\n/** Dev-mode entry names: the in-memory dev server serves these exact names,\n * and dev consumers (the host's html shell, the compose client payload, the\n * readiness probe) append them — dev has no build report to discover hashed\n * names from. */\nexport const DEV_ENTRY_FILENAME = \"remoteEntry.js\";\nexport const DEV_SERVER_ENTRY_FILENAME = \"remoteEntry.server.js\";\n/** Fixed-name build outputs that get additive immutable hashed copies. */\nexport const MF_MANIFEST_FILENAME = \"mf-manifest.json\";\nexport const STYLE_FILENAME = \"style.css\";\nexport const HASHED_ENTRY_PATTERN = \"remoteEntry.[contenthash].js\";\nexport const HASHED_SERVER_ENTRY_PATTERN = \"remoteEntry.server.[contenthash].js\";\n\n/** The dev-stack signal: everything a dev server spawns (watch or no-watch\n * one-shot builds) serves the fixed dev entry names, because every dev\n * consumer appends them and no build report exists to discover hashed names\n * from. Every other invocation — local builds, host-test production builds,\n * regression container builds, deploys — is a build and emits content-hashed\n * entries + build reports. NODE_ENV cannot carry this decision (vitest runs\n * as \"test\", bundler CLIs default \"production\" even for dev watches), and\n * DEPLOY=true only marks deploy builds — so the dev server stamps its own\n * children. */\nexport function isBuildInvocation(): boolean {\n  return process.env.BOS_DEV_SERVER !== \"1\";\n}\n\nexport function uiEntryFilename(input: { isBuild: boolean; server?: boolean }): string {\n  if (!input.isBuild) return input.server ? DEV_SERVER_ENTRY_FILENAME : DEV_ENTRY_FILENAME;\n  return input.server ? HASHED_SERVER_ENTRY_PATTERN : HASHED_ENTRY_PATTERN;\n}\n\nconst HASH_SEGMENT_PATTERN = /\\.[a-f0-9]{8,}\\./;\n\n/**\n * Serving classification for bundle objects: anything whose name carries a\n * content-hash segment (including hashed entrypoints like\n * `remoteEntry.8f3a….js`) is immutable by construction; fixed-name\n * entrypoints and non-hashed files a redeploy replaces in place must\n * revalidate.\n */\nexport function isImmutableBundlePath(name: string): boolean {\n  const base = name.split(\"/\").pop() ?? name;\n  return HASH_SEGMENT_PATTERN.test(base);\n}\n\nexport function cacheControlOf(name: string): string {\n  return isImmutableBundlePath(name)\n    ? \"public, max-age=31536000, immutable\"\n    : \"public, max-age=0, must-revalidate\";\n}\n\n/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */\nexport function contentHashOf(content: string | Uint8Array): string {\n  return crypto.createHash(\"sha256\").update(content).digest(\"hex\").slice(0, 16);\n}\n\nexport function hashedArtifactName(base: string, hash: string, ext: string): string {\n  return `${base}.${hash}.${ext.replace(/^\\./, \"\")}`;\n}\n\n/** Find the content-hashed entry asset for a base name (\"remoteEntry\", \"remoteEntry.server\"). */\nexport function findHashedEntry(assetNames: string[], base: string): string | null {\n  const hashed = assetNames.find((name) => {\n    const rest = name.startsWith(`${base}.`) ? name.slice(base.length + 1) : null;\n    if (rest === null) return false;\n    const hash = rest.slice(0, -3);\n    return name.endsWith(\".js\") && /^[a-f0-9]{8,}$/.test(hash);\n  });\n  return hashed ?? null;\n}\n\nexport const BuildEntryReportSchema = z.object({\n  entry: z.string().min(1),\n  browserManifest: z.string().min(1).optional(),\n  css: z.string().min(1).optional(),\n  /**\n   * Shared-singleton `name → version` this build embedded — resolved from the\n   * building workspace's node_modules at config time and stamped by both the\n   * rspack and rsbuild build paths. The deploy leg records it into the\n   * workspace's version manifest, so a slot's pin carries shared-dep\n   * semantics and consumers can detect a build skew before loading (#546).\n   */\n  shared: z.record(z.string(), z.string()).optional(),\n});\nexport type BuildEntryReport = z.infer<typeof BuildEntryReportSchema>;\n\nexport interface ArtifactCopy {\n  from: string;\n  to: string;\n}\n\n/**\n * The additive-copy plan for one compiled dist root: each supplied fixed-name\n * artifact gets an immutable hashed copy. The hashed entry itself needs no\n * copy — the build report carries its name to the deploy leg. Returns null\n * when the build predates hashed entry names (only fixed names emitted).\n */\nexport function planArtifactCopies(input: {\n  assetNames: string[];\n  entryBase: string;\n  contents?: Record<string, string | Uint8Array | undefined>;\n}): { copies: Array<ArtifactCopy>; report: BuildEntryReport } | null {\n  const entry = findHashedEntry(input.assetNames, input.entryBase);\n  if (!entry) return null;\n\n  const copies: Array<ArtifactCopy> = [];\n  const report: BuildEntryReport = { entry };\n\n  const hashedCopy = (fixedName: string, reportField: \"browserManifest\" | \"css\") => {\n    const content = input.contents?.[fixedName];\n    if (content === undefined) return;\n    const dot = fixedName.lastIndexOf(\".\");\n    const base = fixedName.slice(0, dot);\n    const ext = fixedName.slice(dot + 1);\n    const hashed = hashedArtifactName(base, contentHashOf(content), ext);\n    copies.push({ from: fixedName, to: hashed });\n    report[reportField] = hashed;\n  };\n  hashedCopy(MF_MANIFEST_FILENAME, \"browserManifest\");\n  hashedCopy(STYLE_FILENAME, \"css\");\n\n  return { copies, report };\n}\n"],"mappings":";;;;;;;;AAOA,MAAa,qBAAqB;AAClC,MAAa,4BAA4B;;AAEzC,MAAa,uBAAuB;AACpC,MAAa,iBAAiB;AAC9B,MAAa,uBAAuB;AACpC,MAAa,8BAA8B;;;;;;;;;;AAW3C,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,mBAAmB;AACxC;AAEA,SAAgB,gBAAgB,OAAuD;CACrF,IAAI,CAAC,MAAM,SAAS,OAAO,MAAM,SAAS,4BAA4B;CACtE,OAAO,MAAM,SAAS,8BAA8B;AACtD;AAEA,MAAM,uBAAuB;;;;;;;;AAS7B,SAAgB,sBAAsB,MAAuB;CAC3D,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;CACtC,OAAO,qBAAqB,KAAK,IAAI;AACvC;AAEA,SAAgB,eAAe,MAAsB;CACnD,OAAO,sBAAsB,IAAI,IAC7B,wCACA;AACN;;AAGA,SAAgB,cAAc,SAAsC;CAClE,OAAO,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AAC9E;AAEA,SAAgB,mBAAmB,MAAc,MAAc,KAAqB;CAClF,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,QAAQ,OAAO,EAAE;AACjD;;AAGA,SAAgB,gBAAgB,YAAsB,MAA6B;CAOjF,OANe,WAAW,MAAM,SAAS;EACvC,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,EAAE,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,IAAI;EACzE,IAAI,SAAS,MAAM,OAAO;EAC1B,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE;EAC7B,OAAO,KAAK,SAAS,KAAK,KAAK,iBAAiB,KAAK,IAAI;CAC3D,CACY,KAAK;AACnB;AAEA,MAAa,yBAAyB,EAAE,OAAO;CAC7C,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC5C,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;;;;;;;;CAQhC,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACpD,CAAC;;;;;;;AAcD,SAAgB,mBAAmB,OAIkC;CACnE,MAAM,QAAQ,gBAAgB,MAAM,YAAY,MAAM,SAAS;CAC/D,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,SAA8B,CAAC;CACrC,MAAM,SAA2B,EAAE,MAAM;CAEzC,MAAM,cAAc,WAAmB,gBAA2C;EAChF,MAAM,UAAU,MAAM,WAAW;EACjC,IAAI,YAAY,QAAW;EAC3B,MAAM,MAAM,UAAU,YAAY,GAAG;EACrC,MAAM,OAAO,UAAU,MAAM,GAAG,GAAG;EACnC,MAAM,MAAM,UAAU,MAAM,MAAM,CAAC;EACnC,MAAM,SAAS,mBAAmB,MAAM,cAAc,OAAO,GAAG,GAAG;EACnE,OAAO,KAAK;GAAE,MAAM;GAAW,IAAI;EAAO,CAAC;EAC3C,OAAO,eAAe;CACxB;CACA,WAAW,sBAAsB,iBAAiB;CAClD,WAAW,gBAAgB,KAAK;CAEhC,OAAO;EAAE;EAAQ;CAAO;AAC1B"}
+{"version":3,"file":"artifact-names.mjs","names":[],"sources":["../../src/build/artifact-names.ts"],"sourcesContent":["import crypto from \"node:crypto\";\nimport { z } from \"zod\";\n\n/** Dev-mode entry names: the in-memory dev server serves these exact names,\n * and dev consumers (the host's html shell, the compose client payload, the\n * readiness probe) append them — dev has no build report to discover hashed\n * names from. */\nexport const DEV_ENTRY_FILENAME = \"remoteEntry.js\";\nexport const DEV_SERVER_ENTRY_FILENAME = \"remoteEntry.server.js\";\n/** Fixed-name build outputs that get additive immutable hashed copies. */\nexport const MF_MANIFEST_FILENAME = \"mf-manifest.json\";\nexport const STYLE_FILENAME = \"style.css\";\nexport const HASHED_ENTRY_PATTERN = \"remoteEntry.[contenthash].js\";\nexport const HASHED_SERVER_ENTRY_PATTERN = \"remoteEntry.server.[contenthash].js\";\n\n/** The dev-stack signal: everything a dev server spawns (watch or no-watch\n * one-shot builds) serves the fixed dev entry names, because every dev\n * consumer appends them and no build report exists to discover hashed names\n * from. Every other invocation — local builds, host-test production builds,\n * regression container builds, deploys — is a build and emits content-hashed\n * entries + build reports. NODE_ENV cannot carry this decision (vitest runs\n * as \"test\", bundler CLIs default \"production\" even for dev watches), and\n * DEPLOY=true only marks deploy builds — so the dev server stamps its own\n * children. */\nexport function isBuildInvocation(): boolean {\n  return process.env.BOS_DEV_SERVER !== \"1\";\n}\n\nexport function uiEntryFilename(input: { isBuild: boolean; server?: boolean }): string {\n  if (!input.isBuild) return input.server ? DEV_SERVER_ENTRY_FILENAME : DEV_ENTRY_FILENAME;\n  return input.server ? HASHED_SERVER_ENTRY_PATTERN : HASHED_ENTRY_PATTERN;\n}\n\nconst HASH_SEGMENT_PATTERN = /\\.[a-f0-9]{8,}\\./;\n\n/**\n * Serving classification for bundle objects: anything under a version\n * directory (`versions/<dirId>/…`, #826) or a `versions/<id>.json` manifest\n * is immutable by construction — the directory name is content-addressed and\n * the upload service refuses conflicting writes under `versions/`; likewise\n * any name carrying a content-hash segment (including hashed entrypoints\n * like `remoteEntry.8f3a….js`). Fixed-name entrypoints and non-hashed files\n * a redeploy replaces in place must revalidate.\n */\nexport function isImmutableBundlePath(name: string): boolean {\n  if (name === \"versions\" || name.startsWith(\"versions/\")) return true;\n  const base = name.split(\"/\").pop() ?? name;\n  return HASH_SEGMENT_PATTERN.test(base);\n}\n\nexport function cacheControlOf(name: string): string {\n  return isImmutableBundlePath(name)\n    ? \"public, max-age=31536000, immutable\"\n    : \"public, max-age=0, must-revalidate\";\n}\n\n/** Short content hash used to mint additive hashed copies of fixed-name artifacts. */\nexport function contentHashOf(content: string | Uint8Array): string {\n  return crypto.createHash(\"sha256\").update(content).digest(\"hex\").slice(0, 16);\n}\n\nexport function hashedArtifactName(base: string, hash: string, ext: string): string {\n  return `${base}.${hash}.${ext.replace(/^\\./, \"\")}`;\n}\n\n/** Find the content-hashed entry asset for a base name (\"remoteEntry\", \"remoteEntry.server\"). */\nexport function findHashedEntry(assetNames: string[], base: string): string | null {\n  const hashed = assetNames.find((name) => {\n    const rest = name.startsWith(`${base}.`) ? name.slice(base.length + 1) : null;\n    if (rest === null) return false;\n    const hash = rest.slice(0, -3);\n    return name.endsWith(\".js\") && /^[a-f0-9]{8,}$/.test(hash);\n  });\n  return hashed ?? null;\n}\n\nexport const BuildEntryReportSchema = z.object({\n  entry: z.string().min(1),\n  browserManifest: z.string().min(1).optional(),\n  css: z.string().min(1).optional(),\n  /**\n   * Shared-singleton `name → version` this build embedded — resolved from the\n   * building workspace's node_modules at config time and stamped by both the\n   * rspack and rsbuild build paths. The deploy leg records it into the\n   * workspace's version manifest, so a slot's pin carries shared-dep\n   * semantics and consumers can detect a build skew before loading (#546).\n   */\n  shared: z.record(z.string(), z.string()).optional(),\n});\nexport type BuildEntryReport = z.infer<typeof BuildEntryReportSchema>;\n\nexport interface ArtifactCopy {\n  from: string;\n  to: string;\n}\n\n/**\n * The additive-copy plan for one compiled dist root: each supplied fixed-name\n * artifact gets an immutable hashed copy. The hashed entry itself needs no\n * copy — the build report carries its name to the deploy leg. Returns null\n * when the build predates hashed entry names (only fixed names emitted).\n */\nexport function planArtifactCopies(input: {\n  assetNames: string[];\n  entryBase: string;\n  contents?: Record<string, string | Uint8Array | undefined>;\n}): { copies: Array<ArtifactCopy>; report: BuildEntryReport } | null {\n  const entry = findHashedEntry(input.assetNames, input.entryBase);\n  if (!entry) return null;\n\n  const copies: Array<ArtifactCopy> = [];\n  const report: BuildEntryReport = { entry };\n\n  const hashedCopy = (fixedName: string, reportField: \"browserManifest\" | \"css\") => {\n    const content = input.contents?.[fixedName];\n    if (content === undefined) return;\n    const dot = fixedName.lastIndexOf(\".\");\n    const base = fixedName.slice(0, dot);\n    const ext = fixedName.slice(dot + 1);\n    const hashed = hashedArtifactName(base, contentHashOf(content), ext);\n    copies.push({ from: fixedName, to: hashed });\n    report[reportField] = hashed;\n  };\n  hashedCopy(MF_MANIFEST_FILENAME, \"browserManifest\");\n  hashedCopy(STYLE_FILENAME, \"css\");\n\n  return { copies, report };\n}\n"],"mappings":";;;;;;;;AAOA,MAAa,qBAAqB;AAClC,MAAa,4BAA4B;;AAEzC,MAAa,uBAAuB;AACpC,MAAa,iBAAiB;AAC9B,MAAa,uBAAuB;AACpC,MAAa,8BAA8B;;;;;;;;;;AAW3C,SAAgB,oBAA6B;CAC3C,OAAO,QAAQ,IAAI,mBAAmB;AACxC;AAEA,SAAgB,gBAAgB,OAAuD;CACrF,IAAI,CAAC,MAAM,SAAS,OAAO,MAAM,SAAS,4BAA4B;CACtE,OAAO,MAAM,SAAS,8BAA8B;AACtD;AAEA,MAAM,uBAAuB;;;;;;;;;;AAW7B,SAAgB,sBAAsB,MAAuB;CAC3D,IAAI,SAAS,cAAc,KAAK,WAAW,WAAW,GAAG,OAAO;CAChE,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK;CACtC,OAAO,qBAAqB,KAAK,IAAI;AACvC;AAEA,SAAgB,eAAe,MAAsB;CACnD,OAAO,sBAAsB,IAAI,IAC7B,wCACA;AACN;;AAGA,SAAgB,cAAc,SAAsC;CAClE,OAAO,OAAO,WAAW,QAAQ,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;AAC9E;AAEA,SAAgB,mBAAmB,MAAc,MAAc,KAAqB;CAClF,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,IAAI,QAAQ,OAAO,EAAE;AACjD;;AAGA,SAAgB,gBAAgB,YAAsB,MAA6B;CAOjF,OANe,WAAW,MAAM,SAAS;EACvC,MAAM,OAAO,KAAK,WAAW,GAAG,KAAK,EAAE,IAAI,KAAK,MAAM,KAAK,SAAS,CAAC,IAAI;EACzE,IAAI,SAAS,MAAM,OAAO;EAC1B,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE;EAC7B,OAAO,KAAK,SAAS,KAAK,KAAK,iBAAiB,KAAK,IAAI;CAC3D,CACY,KAAK;AACnB;AAEA,MAAa,yBAAyB,EAAE,OAAO;CAC7C,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CACvB,iBAAiB,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;CAC5C,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;;;;;;;;CAQhC,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACpD,CAAC;;;;;;;AAcD,SAAgB,mBAAmB,OAIkC;CACnE,MAAM,QAAQ,gBAAgB,MAAM,YAAY,MAAM,SAAS;CAC/D,IAAI,CAAC,OAAO,OAAO;CAEnB,MAAM,SAA8B,CAAC;CACrC,MAAM,SAA2B,EAAE,MAAM;CAEzC,MAAM,cAAc,WAAmB,gBAA2C;EAChF,MAAM,UAAU,MAAM,WAAW;EACjC,IAAI,YAAY,QAAW;EAC3B,MAAM,MAAM,UAAU,YAAY,GAAG;EACrC,MAAM,OAAO,UAAU,MAAM,GAAG,GAAG;EACnC,MAAM,MAAM,UAAU,MAAM,MAAM,CAAC;EACnC,MAAM,SAAS,mBAAmB,MAAM,cAAc,OAAO,GAAG,GAAG;EACnE,OAAO,KAAK;GAAE,MAAM;GAAW,IAAI;EAAO,CAAC;EAC3C,OAAO,eAAe;CACxB;CACA,WAAW,sBAAsB,iBAAiB;CAClD,WAAW,gBAAgB,KAAK;CAEhC,OAAO;EAAE;EAAQ;CAAO;AAC1B"}

package/dist/build/contract-types.cjs

@@ -1,4 +1,4 @@
-const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
+const require_runtime = require("../_virtual/_rolldown/runtime.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
 let node_module = require("node:module");

package/dist/build/rspack/build-report-plugin.cjs

@@ -1,4 +1,4 @@
-const require_build_artifact_names = require('../artifact-names.cjs');
+const require_build_artifact_names = require("../artifact-names.cjs");
 
 //#region src/build/rspack/build-report-plugin.ts
 /**

package/dist/build/rspack/chunk-completeness-plugin.cjs

@@ -1,4 +1,4 @@
-const require_build_artifact_names = require('../artifact-names.cjs');
+const require_build_artifact_names = require("../artifact-names.cjs");
 
 //#region src/build/rspack/chunk-completeness-plugin.ts
 /**

package/dist/build/rspack/compose.cjs

@@ -1,6 +1,6 @@
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_fix_mf_data_uri_plugin = require('./fix-mf-data-uri-plugin.cjs');
-const require_plugin = require('./plugin.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_fix_mf_data_uri_plugin = require("./fix-mf-data-uri-plugin.cjs");
+const require_plugin = require("./plugin.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
 let node_module = require("node:module");

package/dist/build/rspack/generated-config.cjs

@@ -1,5 +1,5 @@
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_compose = require('./compose.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_compose = require("./compose.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
 let node_path = require("node:path");

package/dist/build/rspack/index.cjs

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_shared_deps_spec = require('../../shared-deps-spec.cjs');
-const require_build_report_plugin = require('./build-report-plugin.cjs');
-const require_fix_mf_data_uri_plugin = require('./fix-mf-data-uri-plugin.cjs');
-const require_plugin = require('./plugin.cjs');
-const require_compose = require('./compose.cjs');
+const require_shared_deps_spec = require("../../shared-deps-spec.cjs");
+const require_build_report_plugin = require("./build-report-plugin.cjs");
+const require_fix_mf_data_uri_plugin = require("./fix-mf-data-uri-plugin.cjs");
+const require_plugin = require("./plugin.cjs");
+const require_compose = require("./compose.cjs");
 
 exports.BuildReportPlugin = require_build_report_plugin.BuildReportPlugin;
 exports.EmitPluginManifest = require_plugin.EmitPluginManifest;

package/dist/build/rspack/module-federation.cjs

@@ -1,4 +1,4 @@
-const require_shared_deps_spec = require('../../shared-deps-spec.cjs');
+const require_shared_deps_spec = require("../../shared-deps-spec.cjs");
 
 //#region src/build/rspack/module-federation.ts
 function buildSharedDependencies(_pluginInfo) {

package/dist/build/rspack/plugin.cjs

@@ -1,11 +1,11 @@
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_build_artifact_names = require('../artifact-names.cjs');
-const require_shared_deps_spec = require('../../shared-deps-spec.cjs');
-const require_build_report_plugin = require('./build-report-plugin.cjs');
-const require_contract_types = require('../contract-types.cjs');
-const require_chunk_completeness_plugin = require('./chunk-completeness-plugin.cjs');
-const require_module_federation = require('./module-federation.cjs');
-const require_utils = require('./utils.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_build_artifact_names = require("../artifact-names.cjs");
+const require_shared_deps_spec = require("../../shared-deps-spec.cjs");
+const require_build_report_plugin = require("./build-report-plugin.cjs");
+const require_contract_types = require("../contract-types.cjs");
+const require_chunk_completeness_plugin = require("./chunk-completeness-plugin.cjs");
+const require_module_federation = require("./module-federation.cjs");
+const require_utils = require("./utils.cjs");
 let node_crypto = require("node:crypto");
 node_crypto = require_runtime.__toESM(node_crypto, 1);
 let node_fs = require("node:fs");

package/dist/build/rspack/utils.cjs

@@ -1,5 +1,5 @@
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_identity = require('../../identity.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_identity = require("../../identity.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
 let node_module = require("node:module");

package/dist/build/ui/factory.cjs

@@ -1,6 +1,6 @@
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_ui_manifest_contract = require('../../ui/manifest/contract.cjs');
-const require_rsbuild_config = require('./rsbuild-config.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_ui_manifest_contract = require("../../ui/manifest/contract.cjs");
+const require_rsbuild_config = require("./rsbuild-config.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
 let node_path = require("node:path");

package/dist/build/ui/generated-config.cjs

@@ -1,5 +1,5 @@
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_compose = require('../rspack/compose.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_compose = require("../rspack/compose.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
 let node_path = require("node:path");

package/dist/build/ui/hash-artifacts-plugin.cjs

@@ -1,5 +1,5 @@
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_build_artifact_names = require('../artifact-names.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_build_artifact_names = require("../artifact-names.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
 let node_path = require("node:path");

package/dist/build/ui/index.cjs

@@ -1,13 +1,13 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_identity = require('../../identity.cjs');
-const require_ui_manifest_contract = require('../../ui/manifest/contract.cjs');
-const require_manifest_plugin = require('./manifest-plugin.cjs');
-const require_hash_artifacts_plugin = require('./hash-artifacts-plugin.cjs');
-const require_rsbuild_config = require('./rsbuild-config.cjs');
-const require_factory = require('./factory.cjs');
-const require_generated_config = require('./generated-config.cjs');
-const require_stubs = require('./stubs.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_identity = require("../../identity.cjs");
+const require_ui_manifest_contract = require("../../ui/manifest/contract.cjs");
+const require_manifest_plugin = require("./manifest-plugin.cjs");
+const require_hash_artifacts_plugin = require("./hash-artifacts-plugin.cjs");
+const require_rsbuild_config = require("./rsbuild-config.cjs");
+const require_factory = require("./factory.cjs");
+const require_generated_config = require("./generated-config.cjs");
+const require_stubs = require("./stubs.cjs");
 let node_fs = require("node:fs");
 node_fs = require_runtime.__toESM(node_fs, 1);
 let node_path = require("node:path");

package/dist/build/ui/manifest-plugin.cjs

@@ -1,4 +1,4 @@
-const require_ui_manifest_generator = require('../../ui/manifest/generator.cjs');
+const require_ui_manifest_generator = require("../../ui/manifest/generator.cjs");
 
 //#region src/build/ui/manifest-plugin.ts
 const inFlight = /* @__PURE__ */ new Map();

package/dist/build/ui/rsbuild-config.cjs

@@ -1,13 +1,13 @@
-const require_runtime = require('../../_virtual/_rolldown/runtime.cjs');
-const require_build_artifact_names = require('../artifact-names.cjs');
-const require_shared_deps_spec = require('../../shared-deps-spec.cjs');
-const require_identity = require('../../identity.cjs');
-const require_fix_mf_data_uri_plugin = require('../rspack/fix-mf-data-uri-plugin.cjs');
-require('../rspack/index.cjs');
-const require_ui_manifest_contract = require('../../ui/manifest/contract.cjs');
-const require_manifest_plugin = require('./manifest-plugin.cjs');
-const require_hash_artifacts_plugin = require('./hash-artifacts-plugin.cjs');
-const require_build_ui_index = require('./index.cjs');
+const require_runtime = require("../../_virtual/_rolldown/runtime.cjs");
+const require_build_artifact_names = require("../artifact-names.cjs");
+const require_shared_deps_spec = require("../../shared-deps-spec.cjs");
+const require_identity = require("../../identity.cjs");
+const require_fix_mf_data_uri_plugin = require("../rspack/fix-mf-data-uri-plugin.cjs");
+require("../rspack/index.cjs");
+const require_ui_manifest_contract = require("../../ui/manifest/contract.cjs");
+const require_manifest_plugin = require("./manifest-plugin.cjs");
+const require_hash_artifacts_plugin = require("./hash-artifacts-plugin.cjs");
+const require_build_ui_index = require("./index.cjs");
 let node_path = require("node:path");
 node_path = require_runtime.__toESM(node_path, 1);
 let _module_federation_rsbuild_plugin = require("@module-federation/rsbuild-plugin");

package/dist/build/ui/stubs.cjs

@@ -65,19 +65,14 @@ export type {
   ConstructedTree,
   ConstructInput,
   ConstructPluginRef,
-  GateUser,
-  HostContext,
   NavManifest,
   PluginManifest,
   ResolvedPlugin,
   RouteConfigModule,
   RouteOptionsBundle,
 } from "everything-dev/ui/manifest";
-export {
-  CORE_UI_PLUGIN_KEY,
-  ComposePayloadSchema,
-  constructTree,
-} from "everything-dev/ui/manifest";
+export { CORE_UI_PLUGIN_KEY, ComposePayloadSchema } from "everything-dev/ui/manifest";
+export { constructTree } from "everything-dev/ui/compose";
 `,
 	"src/globals.gen.ts": `// GENERATED FILE — do not edit. Regenerated from the installed framework version
 // by \`bos dev\` / \`bos build\` / \`bos typecheck\` (gitignored).

package/dist/build/ui/stubs.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"stubs.cjs","names":["join","existsSync","readFileSync","dirname"],"sources":["../../../src/build/ui/stubs.ts"],"sourcesContent":["/**\n * The core ui's generated bootstrap stubs — the mechanical files an app must\n * never author or edit (ADR 0023): the web MF entry, the `./Hydrate`\n * bootstrap, the SSR router module, the `./compose` expose, and the ambient\n * globals. Emitted into the ui source root by the framework's code-artifact\n * generation pass, regenerated from the installed package version, and\n * gitignored (`*.gen.*`) — never synced, never hand-maintained.\n *\n * The generated hydrate/SSR stubs wire the app's AUTHORED seams into the\n * framework machinery: the router policy factory (`src/router.tsx`) and the\n * app override exports from `src/app.ts` (`apiConnectionError`, `appLocale`).\n * The seam files are scaffolded once by `bos init` and owned by the app; the\n * stubs themselves carry zero app-specific content.\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport const CORE_UI_STUBS: Record<string, string> = {\n  \"src/entry.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport \"./styles.css\";\nimport { runEntry } from \"everything-dev/ui/entry\";\n\nrunEntry(() => import(\"./hydrate.gen\"));\n`,\n  \"src/hydrate.gen.tsx\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport \"./styles.css\";\nimport { hydrate as coreHydrate } from \"everything-dev/ui/hydrate\";\nimport { apiConnectionError } from \"./app\";\nimport { createQueryClient, createRouter } from \"./router\";\n\nexport function hydrate() {\n  return coreHydrate({\n    routeConfig: () => import(\"./routeConfig.gen\"),\n    manifest: () => import(\"./manifest.gen.json\"),\n    createRouter,\n    createQueryClient,\n    apiConnectionError,\n  });\n}\n\nexport default hydrate;\n`,\n  \"src/router.server.gen.tsx\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport { createServerRouterModule } from \"everything-dev/ui/router-server\";\nimport { appLocale } from \"./app\";\nimport { createQueryClient, createRouter } from \"./router\";\nimport { routeTree } from \"./routeTree.gen\";\n\nconst routerModule = createServerRouterModule({\n  defaultRouteTree: routeTree,\n  createRouter,\n  createQueryClient,\n  locale: appLocale,\n});\n\nexport default routerModule;\n`,\n  \"src/compose.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nexport type {\n  ConstructedTree,\n  ConstructInput,\n  ConstructPluginRef,\n  GateUser,\n  HostContext,\n  NavManifest,\n  PluginManifest,\n  ResolvedPlugin,\n  RouteConfigModule,\n  RouteOptionsBundle,\n} from \"everything-dev/ui/manifest\";\nexport {\n  CORE_UI_PLUGIN_KEY,\n  ComposePayloadSchema,\n  constructTree,\n} from \"everything-dev/ui/manifest\";\n`,\n  \"src/globals.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\n/// <reference types=\"@rsbuild/core/types\" />\n`,\n};\n\n/**\n * Emits the stub set into the ui source root. Returns the stub paths whose\n * content actually changed (empty when everything is already current) — the\n * same-content suppression keeps dev watchers from regen loops.\n */\nexport function emitCoreUiStubs(uiRoot: string): string[] {\n  const written: string[] = [];\n  for (const [relPath, content] of Object.entries(CORE_UI_STUBS)) {\n    const fullPath = join(uiRoot, relPath);\n    if (existsSync(fullPath) && readFileSync(fullPath, \"utf-8\") === content) continue;\n    mkdirSync(dirname(fullPath), { recursive: true });\n    writeFileSync(fullPath, content);\n    written.push(relPath);\n  }\n  return written;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAa,gBAAwC;CACnD,oBAAoB;;;;;;;CAOpB,uBAAuB;;;;;;;;;;;;;;;;;;;CAmBvB,6BAA6B;;;;;;;;;;;;;;;;CAgB7B,sBAAsB;;;;;;;;;;;;;;;;;;;;CAoBtB,sBAAsB;;;;AAIxB;;;;;;AAOA,SAAgB,gBAAgB,QAA0B;CACxD,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,SAAS,YAAY,OAAO,QAAQ,aAAa,GAAG;EAC9D,MAAM,eAAWA,gBAAK,QAAQ,OAAO;EACrC,QAAIC,oBAAW,QAAQ,SAAKC,sBAAa,UAAU,OAAO,MAAM,SAAS;EACzE,2BAAUC,mBAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAChD,2BAAc,UAAU,OAAO;EAC/B,QAAQ,KAAK,OAAO;CACtB;CACA,OAAO;AACT"}
+{"version":3,"file":"stubs.cjs","names":["join","existsSync","readFileSync","dirname"],"sources":["../../../src/build/ui/stubs.ts"],"sourcesContent":["/**\n * The core ui's generated bootstrap stubs — the mechanical files an app must\n * never author or edit (ADR 0023): the web MF entry, the `./Hydrate`\n * bootstrap, the SSR router module, the `./compose` expose, and the ambient\n * globals. Emitted into the ui source root by the framework's code-artifact\n * generation pass, regenerated from the installed package version, and\n * gitignored (`*.gen.*`) — never synced, never hand-maintained.\n *\n * The generated hydrate/SSR stubs wire the app's AUTHORED seams into the\n * framework machinery: the router policy factory (`src/router.tsx`) and the\n * app override exports from `src/app.ts` (`apiConnectionError`, `appLocale`).\n * The seam files are scaffolded once by `bos init` and owned by the app; the\n * stubs themselves carry zero app-specific content.\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport const CORE_UI_STUBS: Record<string, string> = {\n  \"src/entry.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport \"./styles.css\";\nimport { runEntry } from \"everything-dev/ui/entry\";\n\nrunEntry(() => import(\"./hydrate.gen\"));\n`,\n  \"src/hydrate.gen.tsx\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport \"./styles.css\";\nimport { hydrate as coreHydrate } from \"everything-dev/ui/hydrate\";\nimport { apiConnectionError } from \"./app\";\nimport { createQueryClient, createRouter } from \"./router\";\n\nexport function hydrate() {\n  return coreHydrate({\n    routeConfig: () => import(\"./routeConfig.gen\"),\n    manifest: () => import(\"./manifest.gen.json\"),\n    createRouter,\n    createQueryClient,\n    apiConnectionError,\n  });\n}\n\nexport default hydrate;\n`,\n  \"src/router.server.gen.tsx\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport { createServerRouterModule } from \"everything-dev/ui/router-server\";\nimport { appLocale } from \"./app\";\nimport { createQueryClient, createRouter } from \"./router\";\nimport { routeTree } from \"./routeTree.gen\";\n\nconst routerModule = createServerRouterModule({\n  defaultRouteTree: routeTree,\n  createRouter,\n  createQueryClient,\n  locale: appLocale,\n});\n\nexport default routerModule;\n`,\n  \"src/compose.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nexport type {\n  ConstructedTree,\n  ConstructInput,\n  ConstructPluginRef,\n  NavManifest,\n  PluginManifest,\n  ResolvedPlugin,\n  RouteConfigModule,\n  RouteOptionsBundle,\n} from \"everything-dev/ui/manifest\";\nexport { CORE_UI_PLUGIN_KEY, ComposePayloadSchema } from \"everything-dev/ui/manifest\";\nexport { constructTree } from \"everything-dev/ui/compose\";\n`,\n  \"src/globals.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\n/// <reference types=\"@rsbuild/core/types\" />\n`,\n};\n\n/**\n * Emits the stub set into the ui source root. Returns the stub paths whose\n * content actually changed (empty when everything is already current) — the\n * same-content suppression keeps dev watchers from regen loops.\n */\nexport function emitCoreUiStubs(uiRoot: string): string[] {\n  const written: string[] = [];\n  for (const [relPath, content] of Object.entries(CORE_UI_STUBS)) {\n    const fullPath = join(uiRoot, relPath);\n    if (existsSync(fullPath) && readFileSync(fullPath, \"utf-8\") === content) continue;\n    mkdirSync(dirname(fullPath), { recursive: true });\n    writeFileSync(fullPath, content);\n    written.push(relPath);\n  }\n  return written;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAa,gBAAwC;CACnD,oBAAoB;;;;;;;CAOpB,uBAAuB;;;;;;;;;;;;;;;;;;;CAmBvB,6BAA6B;;;;;;;;;;;;;;;;CAgB7B,sBAAsB;;;;;;;;;;;;;;;CAetB,sBAAsB;;;;AAIxB;;;;;;AAOA,SAAgB,gBAAgB,QAA0B;CACxD,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,SAAS,YAAY,OAAO,QAAQ,aAAa,GAAG;EAC9D,MAAM,eAAWA,gBAAK,QAAQ,OAAO;EACrC,QAAIC,oBAAW,QAAQ,SAAKC,sBAAa,UAAU,OAAO,MAAM,SAAS;EACzE,2BAAUC,mBAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAChD,2BAAc,UAAU,OAAO;EAC/B,QAAQ,KAAK,OAAO;CACtB;CACA,OAAO;AACT"}

package/dist/build/ui/stubs.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"stubs.d.cts","names":[],"sources":["../../../src/build/ui/stubs.ts"],"mappings":";;;;;;;;;;;;;;;cAkBa,eAAe;;;;;;iBA0EZ,gBAAgB"}
+{"version":3,"file":"stubs.d.cts","names":[],"sources":["../../../src/build/ui/stubs.ts"],"mappings":";;;;;;;;;;;;;;;cAkBa,eAAe;;;;;;iBAqEZ,gBAAgB"}

package/dist/build/ui/stubs.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"stubs.d.mts","names":[],"sources":["../../../src/build/ui/stubs.ts"],"mappings":";;;;;;;;;;;;;;;cAkBa,eAAe;;;;;;iBA0EZ,gBAAgB"}
+{"version":3,"file":"stubs.d.mts","names":[],"sources":["../../../src/build/ui/stubs.ts"],"mappings":";;;;;;;;;;;;;;;cAkBa,eAAe;;;;;;iBAqEZ,gBAAgB"}

package/dist/build/ui/stubs.mjs

@@ -65,19 +65,14 @@ export type {
   ConstructedTree,
   ConstructInput,
   ConstructPluginRef,
-  GateUser,
-  HostContext,
   NavManifest,
   PluginManifest,
   ResolvedPlugin,
   RouteConfigModule,
   RouteOptionsBundle,
 } from "everything-dev/ui/manifest";
-export {
-  CORE_UI_PLUGIN_KEY,
-  ComposePayloadSchema,
-  constructTree,
-} from "everything-dev/ui/manifest";
+export { CORE_UI_PLUGIN_KEY, ComposePayloadSchema } from "everything-dev/ui/manifest";
+export { constructTree } from "everything-dev/ui/compose";
 `,
 	"src/globals.gen.ts": `// GENERATED FILE — do not edit. Regenerated from the installed framework version
 // by \`bos dev\` / \`bos build\` / \`bos typecheck\` (gitignored).

package/dist/build/ui/stubs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"stubs.mjs","names":[],"sources":["../../../src/build/ui/stubs.ts"],"sourcesContent":["/**\n * The core ui's generated bootstrap stubs — the mechanical files an app must\n * never author or edit (ADR 0023): the web MF entry, the `./Hydrate`\n * bootstrap, the SSR router module, the `./compose` expose, and the ambient\n * globals. Emitted into the ui source root by the framework's code-artifact\n * generation pass, regenerated from the installed package version, and\n * gitignored (`*.gen.*`) — never synced, never hand-maintained.\n *\n * The generated hydrate/SSR stubs wire the app's AUTHORED seams into the\n * framework machinery: the router policy factory (`src/router.tsx`) and the\n * app override exports from `src/app.ts` (`apiConnectionError`, `appLocale`).\n * The seam files are scaffolded once by `bos init` and owned by the app; the\n * stubs themselves carry zero app-specific content.\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport const CORE_UI_STUBS: Record<string, string> = {\n  \"src/entry.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport \"./styles.css\";\nimport { runEntry } from \"everything-dev/ui/entry\";\n\nrunEntry(() => import(\"./hydrate.gen\"));\n`,\n  \"src/hydrate.gen.tsx\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport \"./styles.css\";\nimport { hydrate as coreHydrate } from \"everything-dev/ui/hydrate\";\nimport { apiConnectionError } from \"./app\";\nimport { createQueryClient, createRouter } from \"./router\";\n\nexport function hydrate() {\n  return coreHydrate({\n    routeConfig: () => import(\"./routeConfig.gen\"),\n    manifest: () => import(\"./manifest.gen.json\"),\n    createRouter,\n    createQueryClient,\n    apiConnectionError,\n  });\n}\n\nexport default hydrate;\n`,\n  \"src/router.server.gen.tsx\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport { createServerRouterModule } from \"everything-dev/ui/router-server\";\nimport { appLocale } from \"./app\";\nimport { createQueryClient, createRouter } from \"./router\";\nimport { routeTree } from \"./routeTree.gen\";\n\nconst routerModule = createServerRouterModule({\n  defaultRouteTree: routeTree,\n  createRouter,\n  createQueryClient,\n  locale: appLocale,\n});\n\nexport default routerModule;\n`,\n  \"src/compose.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nexport type {\n  ConstructedTree,\n  ConstructInput,\n  ConstructPluginRef,\n  GateUser,\n  HostContext,\n  NavManifest,\n  PluginManifest,\n  ResolvedPlugin,\n  RouteConfigModule,\n  RouteOptionsBundle,\n} from \"everything-dev/ui/manifest\";\nexport {\n  CORE_UI_PLUGIN_KEY,\n  ComposePayloadSchema,\n  constructTree,\n} from \"everything-dev/ui/manifest\";\n`,\n  \"src/globals.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\n/// <reference types=\"@rsbuild/core/types\" />\n`,\n};\n\n/**\n * Emits the stub set into the ui source root. Returns the stub paths whose\n * content actually changed (empty when everything is already current) — the\n * same-content suppression keeps dev watchers from regen loops.\n */\nexport function emitCoreUiStubs(uiRoot: string): string[] {\n  const written: string[] = [];\n  for (const [relPath, content] of Object.entries(CORE_UI_STUBS)) {\n    const fullPath = join(uiRoot, relPath);\n    if (existsSync(fullPath) && readFileSync(fullPath, \"utf-8\") === content) continue;\n    mkdirSync(dirname(fullPath), { recursive: true });\n    writeFileSync(fullPath, content);\n    written.push(relPath);\n  }\n  return written;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAa,gBAAwC;CACnD,oBAAoB;;;;;;;CAOpB,uBAAuB;;;;;;;;;;;;;;;;;;;CAmBvB,6BAA6B;;;;;;;;;;;;;;;;CAgB7B,sBAAsB;;;;;;;;;;;;;;;;;;;;CAoBtB,sBAAsB;;;;AAIxB;;;;;;AAOA,SAAgB,gBAAgB,QAA0B;CACxD,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,SAAS,YAAY,OAAO,QAAQ,aAAa,GAAG;EAC9D,MAAM,WAAW,KAAK,QAAQ,OAAO;EACrC,IAAI,WAAW,QAAQ,KAAK,aAAa,UAAU,OAAO,MAAM,SAAS;EACzE,UAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAChD,cAAc,UAAU,OAAO;EAC/B,QAAQ,KAAK,OAAO;CACtB;CACA,OAAO;AACT"}
+{"version":3,"file":"stubs.mjs","names":[],"sources":["../../../src/build/ui/stubs.ts"],"sourcesContent":["/**\n * The core ui's generated bootstrap stubs — the mechanical files an app must\n * never author or edit (ADR 0023): the web MF entry, the `./Hydrate`\n * bootstrap, the SSR router module, the `./compose` expose, and the ambient\n * globals. Emitted into the ui source root by the framework's code-artifact\n * generation pass, regenerated from the installed package version, and\n * gitignored (`*.gen.*`) — never synced, never hand-maintained.\n *\n * The generated hydrate/SSR stubs wire the app's AUTHORED seams into the\n * framework machinery: the router policy factory (`src/router.tsx`) and the\n * app override exports from `src/app.ts` (`apiConnectionError`, `appLocale`).\n * The seam files are scaffolded once by `bos init` and owned by the app; the\n * stubs themselves carry zero app-specific content.\n */\n\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\n\nexport const CORE_UI_STUBS: Record<string, string> = {\n  \"src/entry.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport \"./styles.css\";\nimport { runEntry } from \"everything-dev/ui/entry\";\n\nrunEntry(() => import(\"./hydrate.gen\"));\n`,\n  \"src/hydrate.gen.tsx\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport \"./styles.css\";\nimport { hydrate as coreHydrate } from \"everything-dev/ui/hydrate\";\nimport { apiConnectionError } from \"./app\";\nimport { createQueryClient, createRouter } from \"./router\";\n\nexport function hydrate() {\n  return coreHydrate({\n    routeConfig: () => import(\"./routeConfig.gen\"),\n    manifest: () => import(\"./manifest.gen.json\"),\n    createRouter,\n    createQueryClient,\n    apiConnectionError,\n  });\n}\n\nexport default hydrate;\n`,\n  \"src/router.server.gen.tsx\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nimport { createServerRouterModule } from \"everything-dev/ui/router-server\";\nimport { appLocale } from \"./app\";\nimport { createQueryClient, createRouter } from \"./router\";\nimport { routeTree } from \"./routeTree.gen\";\n\nconst routerModule = createServerRouterModule({\n  defaultRouteTree: routeTree,\n  createRouter,\n  createQueryClient,\n  locale: appLocale,\n});\n\nexport default routerModule;\n`,\n  \"src/compose.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\nexport type {\n  ConstructedTree,\n  ConstructInput,\n  ConstructPluginRef,\n  NavManifest,\n  PluginManifest,\n  ResolvedPlugin,\n  RouteConfigModule,\n  RouteOptionsBundle,\n} from \"everything-dev/ui/manifest\";\nexport { CORE_UI_PLUGIN_KEY, ComposePayloadSchema } from \"everything-dev/ui/manifest\";\nexport { constructTree } from \"everything-dev/ui/compose\";\n`,\n  \"src/globals.gen.ts\": `// GENERATED FILE — do not edit. Regenerated from the installed framework version\n// by \\`bos dev\\` / \\`bos build\\` / \\`bos typecheck\\` (gitignored).\n/// <reference types=\"@rsbuild/core/types\" />\n`,\n};\n\n/**\n * Emits the stub set into the ui source root. Returns the stub paths whose\n * content actually changed (empty when everything is already current) — the\n * same-content suppression keeps dev watchers from regen loops.\n */\nexport function emitCoreUiStubs(uiRoot: string): string[] {\n  const written: string[] = [];\n  for (const [relPath, content] of Object.entries(CORE_UI_STUBS)) {\n    const fullPath = join(uiRoot, relPath);\n    if (existsSync(fullPath) && readFileSync(fullPath, \"utf-8\") === content) continue;\n    mkdirSync(dirname(fullPath), { recursive: true });\n    writeFileSync(fullPath, content);\n    written.push(relPath);\n  }\n  return written;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAkBA,MAAa,gBAAwC;CACnD,oBAAoB;;;;;;;CAOpB,uBAAuB;;;;;;;;;;;;;;;;;;;CAmBvB,6BAA6B;;;;;;;;;;;;;;;;CAgB7B,sBAAsB;;;;;;;;;;;;;;;CAetB,sBAAsB;;;;AAIxB;;;;;;AAOA,SAAgB,gBAAgB,QAA0B;CACxD,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,CAAC,SAAS,YAAY,OAAO,QAAQ,aAAa,GAAG;EAC9D,MAAM,WAAW,KAAK,QAAQ,OAAO;EACrC,IAAI,WAAW,QAAQ,KAAK,aAAa,UAAU,OAAO,MAAM,SAAS;EACzE,UAAU,QAAQ,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EAChD,cAAc,UAAU,OAAO;EAC/B,QAAQ,KAAK,OAAO;CACtB;CACA,OAAO;AACT"}

package/dist/cli.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_contract_types = require('./build/contract-types.cjs');
-const require_generated_config = require('./build/ui/generated-config.cjs');
-const require_generated_config$1 = require('./build/rspack/generated-config.cjs');
+const require_contract_types = require("./build/contract-types.cjs");
+const require_generated_config = require("./build/ui/generated-config.cjs");
+const require_generated_config$1 = require("./build/rspack/generated-config.cjs");
 let node_child_process = require("node:child_process");
 
 //#region src/cli.ts

package/dist/client.cjs

@@ -16,6 +16,13 @@ async function fetchWithRateLimitRetry(fetchUrl, options) {
 	}
 	return response;
 }
+function mergeHeaders(base, overrides) {
+	const merged = new Headers(base);
+	new Headers(overrides).forEach((value, key) => {
+		merged.set(key, value);
+	});
+	return merged;
+}
 function createRpcLink(config, headers) {
 	return new _orpc_client_fetch.RPCLink({
 		origin: config.hostUrl,
@@ -40,10 +47,7 @@ function createRpcLink(config, headers) {
 			return fetchWithRateLimitRetry(fetchUrl, {
 				...options,
 				credentials: "include",
-				headers: headers ? {
-					...Object.fromEntries(headers),
-					...options?.headers
-				} : options?.headers
+				headers: headers ? mergeHeaders(headers, options?.headers) : options?.headers
 			});
 		}
 	});

package/dist/client.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"client.cjs","names":["RPCLink","onError","createORPCClient"],"sources":["../src/client.ts"],"sourcesContent":["import { createORPCClient, onError } from \"@orpc/client\";\nimport { RPCLink } from \"@orpc/client/fetch\";\nimport type { ContractRouterClient, RouterContract } from \"@orpc/contract\";\n\nexport type RpcConnectionErrorCopy = () => { title: string; description: string };\n\nexport interface RpcClientConfig {\n  hostUrl: string;\n  path: `/${string}`;\n  connectionError?: RpcConnectionErrorCopy;\n}\n\nconst RATE_LIMIT_MAX_RETRIES = 3;\nconst RATE_LIMIT_RETRY_CAP_MS = 2_000;\nconst browserClients = new Map<string, unknown>();\ntype FetchInput = Parameters<typeof fetch>[0];\n\nasync function fetchWithRateLimitRetry(\n  fetchUrl: FetchInput,\n  options?: RequestInit,\n): Promise<Response> {\n  let response = await fetch(fetchUrl, options);\n  for (let attempt = 1; attempt <= RATE_LIMIT_MAX_RETRIES && response.status === 429; attempt++) {\n    const retryAfterSeconds = Number(response.headers.get(\"retry-after\"));\n    const delay =\n      Number.isFinite(retryAfterSeconds) && retryAfterSeconds > 0\n        ? Math.min(retryAfterSeconds * 1000, RATE_LIMIT_RETRY_CAP_MS)\n        : 100 * attempt;\n    await new Promise((resolve) => setTimeout(resolve, delay));\n    response = await fetch(fetchUrl, options);\n  }\n\n  return response;\n}\n\nfunction createRpcLink(config: RpcClientConfig, headers?: Headers) {\n  return new RPCLink({\n    origin: config.hostUrl,\n    url: config.path,\n    interceptors: [\n      onError((error: unknown) => {\n        const browserWindow = (globalThis as { window?: unknown }).window;\n        if (typeof browserWindow === \"undefined\") {\n          return;\n        }\n\n        if (error && typeof error === \"object\" && \"message\" in error) {\n          const message = String(error.message).toLowerCase();\n          if (\n            message.includes(\"fetch\") ||\n            message.includes(\"network\") ||\n            message.includes(\"failed to fetch\")\n          ) {\n            void import(\"sonner\")\n              .then(({ toast }) => {\n                const message = config.connectionError?.() ?? {\n                  title: \"Unable to connect to API\",\n                  description: \"The API is currently unavailable. Please try again later.\",\n                };\n                toast.error(message.title, {\n                  id: \"api-connection-error\",\n                  description: message.description,\n                });\n              })\n              .catch(() => {});\n          }\n        }\n      }),\n    ],\n    fetch(fetchUrl: FetchInput, options?: RequestInit) {\n      return fetchWithRateLimitRetry(fetchUrl, {\n        ...options,\n        credentials: \"include\",\n        headers: headers\n          ? { ...Object.fromEntries(headers), ...(options?.headers as Record<string, string>) }\n          : options?.headers,\n      });\n    },\n  });\n}\n\nfunction buildRpcClient<T extends RouterContract>(\n  config: RpcClientConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  if (!config.hostUrl) {\n    throw new Error(\"Missing runtime host URL\");\n  }\n\n  return createORPCClient(createRpcLink(config, headers)) as ContractRouterClient<T>;\n}\n\nexport function createRpcClient<T extends RouterContract = RouterContract>(\n  config: RpcClientConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  const browserWindow = (globalThis as { window?: unknown }).window;\n  if (typeof browserWindow !== \"undefined\" && !headers) {\n    const key = `${config.hostUrl}${config.path}`;\n    const memoized = browserClients.get(key);\n    if (memoized) {\n      return memoized as ContractRouterClient<T>;\n    }\n\n    const client = buildRpcClient<T>(config, headers);\n    browserClients.set(key, client);\n    return client;\n  }\n\n  return buildRpcClient<T>(config, headers);\n}\n"],"mappings":";;;;;AAYA,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,iCAAiB,IAAI,IAAqB;AAGhD,eAAe,wBACb,UACA,SACmB;CACnB,IAAI,WAAW,MAAM,MAAM,UAAU,OAAO;CAC5C,KAAK,IAAI,UAAU,GAAG,WAAW,0BAA0B,SAAS,WAAW,KAAK,WAAW;EAC7F,MAAM,oBAAoB,OAAO,SAAS,QAAQ,IAAI,aAAa,CAAC;EACpE,MAAM,QACJ,OAAO,SAAS,iBAAiB,KAAK,oBAAoB,IACtD,KAAK,IAAI,oBAAoB,KAAM,uBAAuB,IAC1D,MAAM;EACZ,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,KAAK,CAAC;EACzD,WAAW,MAAM,MAAM,UAAU,OAAO;CAC1C;CAEA,OAAO;AACT;AAEA,SAAS,cAAc,QAAyB,SAAmB;CACjE,OAAO,IAAIA,2BAAQ;EACjB,QAAQ,OAAO;EACf,KAAK,OAAO;EACZ,cAAc,KACZC,uBAAS,UAAmB;GAE1B,IAAI,OADmB,WAAoC,WAC9B,aAC3B;GAGF,IAAI,SAAS,OAAO,UAAU,YAAY,aAAa,OAAO;IAC5D,MAAM,UAAU,OAAO,MAAM,OAAO,CAAC,CAAC,YAAY;IAClD,IACE,QAAQ,SAAS,OAAO,KACxB,QAAQ,SAAS,SAAS,KAC1B,QAAQ,SAAS,iBAAiB,GAElC,AAAK,OAAO,SAAS,CAClB,MAAM,EAAE,YAAY;KACnB,MAAM,UAAU,OAAO,kBAAkB,KAAK;MAC5C,OAAO;MACP,aAAa;KACf;KACA,MAAM,MAAM,QAAQ,OAAO;MACzB,IAAI;MACJ,aAAa,QAAQ;KACvB,CAAC;IACH,CAAC,CAAC,CACD,YAAY,CAAC,CAAC;GAErB;EACF,CAAC,CACH;EACA,MAAM,UAAsB,SAAuB;GACjD,OAAO,wBAAwB,UAAU;IACvC,GAAG;IACH,aAAa;IACb,SAAS,UACL;KAAE,GAAG,OAAO,YAAY,OAAO;KAAG,GAAI,SAAS;IAAmC,IAClF,SAAS;GACf,CAAC;EACH;CACF,CAAC;AACH;AAEA,SAAS,eACP,QACA,SACyB;CACzB,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,0BAA0B;CAG5C,WAAOC,+BAAiB,cAAc,QAAQ,OAAO,CAAC;AACxD;AAEA,SAAgB,gBACd,QACA,SACyB;CAEzB,IAAI,OADmB,WAAoC,WAC9B,eAAe,CAAC,SAAS;EACpD,MAAM,MAAM,GAAG,OAAO,UAAU,OAAO;EACvC,MAAM,WAAW,eAAe,IAAI,GAAG;EACvC,IAAI,UACF,OAAO;EAGT,MAAM,SAAS,eAAkB,QAAQ,OAAO;EAChD,eAAe,IAAI,KAAK,MAAM;EAC9B,OAAO;CACT;CAEA,OAAO,eAAkB,QAAQ,OAAO;AAC1C"}
+{"version":3,"file":"client.cjs","names":["RPCLink","onError","createORPCClient"],"sources":["../src/client.ts"],"sourcesContent":["import { createORPCClient, onError } from \"@orpc/client\";\nimport { RPCLink } from \"@orpc/client/fetch\";\nimport type { ContractRouterClient, RouterContract } from \"@orpc/contract\";\n\nexport type RpcConnectionErrorCopy = () => { title: string; description: string };\n\nexport interface RpcClientConfig {\n  hostUrl: string;\n  path: `/${string}`;\n  connectionError?: RpcConnectionErrorCopy;\n}\n\nconst RATE_LIMIT_MAX_RETRIES = 3;\nconst RATE_LIMIT_RETRY_CAP_MS = 2_000;\nconst browserClients = new Map<string, unknown>();\ntype FetchInput = Parameters<typeof fetch>[0];\n\nasync function fetchWithRateLimitRetry(\n  fetchUrl: FetchInput,\n  options?: RequestInit,\n): Promise<Response> {\n  let response = await fetch(fetchUrl, options);\n  for (let attempt = 1; attempt <= RATE_LIMIT_MAX_RETRIES && response.status === 429; attempt++) {\n    const retryAfterSeconds = Number(response.headers.get(\"retry-after\"));\n    const delay =\n      Number.isFinite(retryAfterSeconds) && retryAfterSeconds > 0\n        ? Math.min(retryAfterSeconds * 1000, RATE_LIMIT_RETRY_CAP_MS)\n        : 100 * attempt;\n    await new Promise((resolve) => setTimeout(resolve, delay));\n    response = await fetch(fetchUrl, options);\n  }\n\n  return response;\n}\n\nfunction mergeHeaders(base: Headers, overrides?: RequestInit[\"headers\"]): Headers {\n  const merged = new Headers(base);\n  new Headers(overrides).forEach((value, key) => {\n    merged.set(key, value);\n  });\n  return merged;\n}\n\nfunction createRpcLink(config: RpcClientConfig, headers?: Headers) {\n  return new RPCLink({\n    origin: config.hostUrl,\n    url: config.path,\n    interceptors: [\n      onError((error: unknown) => {\n        const browserWindow = (globalThis as { window?: unknown }).window;\n        if (typeof browserWindow === \"undefined\") {\n          return;\n        }\n\n        if (error && typeof error === \"object\" && \"message\" in error) {\n          const message = String(error.message).toLowerCase();\n          if (\n            message.includes(\"fetch\") ||\n            message.includes(\"network\") ||\n            message.includes(\"failed to fetch\")\n          ) {\n            void import(\"sonner\")\n              .then(({ toast }) => {\n                const message = config.connectionError?.() ?? {\n                  title: \"Unable to connect to API\",\n                  description: \"The API is currently unavailable. Please try again later.\",\n                };\n                toast.error(message.title, {\n                  id: \"api-connection-error\",\n                  description: message.description,\n                });\n              })\n              .catch(() => {});\n          }\n        }\n      }),\n    ],\n    fetch(fetchUrl: FetchInput, options?: RequestInit) {\n      return fetchWithRateLimitRetry(fetchUrl, {\n        ...options,\n        credentials: \"include\",\n        headers: headers ? mergeHeaders(headers, options?.headers) : options?.headers,\n      });\n    },\n  });\n}\n\nfunction buildRpcClient<T extends RouterContract>(\n  config: RpcClientConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  if (!config.hostUrl) {\n    throw new Error(\"Missing runtime host URL\");\n  }\n\n  return createORPCClient(createRpcLink(config, headers)) as ContractRouterClient<T>;\n}\n\nexport function createRpcClient<T extends RouterContract = RouterContract>(\n  config: RpcClientConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  const browserWindow = (globalThis as { window?: unknown }).window;\n  if (typeof browserWindow !== \"undefined\" && !headers) {\n    const key = `${config.hostUrl}${config.path}`;\n    const memoized = browserClients.get(key);\n    if (memoized) {\n      return memoized as ContractRouterClient<T>;\n    }\n\n    const client = buildRpcClient<T>(config, headers);\n    browserClients.set(key, client);\n    return client;\n  }\n\n  return buildRpcClient<T>(config, headers);\n}\n"],"mappings":";;;;;AAYA,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;AAChC,MAAM,iCAAiB,IAAI,IAAqB;AAGhD,eAAe,wBACb,UACA,SACmB;CACnB,IAAI,WAAW,MAAM,MAAM,UAAU,OAAO;CAC5C,KAAK,IAAI,UAAU,GAAG,WAAW,0BAA0B,SAAS,WAAW,KAAK,WAAW;EAC7F,MAAM,oBAAoB,OAAO,SAAS,QAAQ,IAAI,aAAa,CAAC;EACpE,MAAM,QACJ,OAAO,SAAS,iBAAiB,KAAK,oBAAoB,IACtD,KAAK,IAAI,oBAAoB,KAAM,uBAAuB,IAC1D,MAAM;EACZ,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,KAAK,CAAC;EACzD,WAAW,MAAM,MAAM,UAAU,OAAO;CAC1C;CAEA,OAAO;AACT;AAEA,SAAS,aAAa,MAAe,WAA6C;CAChF,MAAM,SAAS,IAAI,QAAQ,IAAI;CAC/B,IAAI,QAAQ,SAAS,CAAC,CAAC,SAAS,OAAO,QAAQ;EAC7C,OAAO,IAAI,KAAK,KAAK;CACvB,CAAC;CACD,OAAO;AACT;AAEA,SAAS,cAAc,QAAyB,SAAmB;CACjE,OAAO,IAAIA,2BAAQ;EACjB,QAAQ,OAAO;EACf,KAAK,OAAO;EACZ,cAAc,KACZC,uBAAS,UAAmB;GAE1B,IAAI,OADmB,WAAoC,WAC9B,aAC3B;GAGF,IAAI,SAAS,OAAO,UAAU,YAAY,aAAa,OAAO;IAC5D,MAAM,UAAU,OAAO,MAAM,OAAO,CAAC,CAAC,YAAY;IAClD,IACE,QAAQ,SAAS,OAAO,KACxB,QAAQ,SAAS,SAAS,KAC1B,QAAQ,SAAS,iBAAiB,GAElC,AAAK,OAAO,SAAS,CAClB,MAAM,EAAE,YAAY;KACnB,MAAM,UAAU,OAAO,kBAAkB,KAAK;MAC5C,OAAO;MACP,aAAa;KACf;KACA,MAAM,MAAM,QAAQ,OAAO;MACzB,IAAI;MACJ,aAAa,QAAQ;KACvB,CAAC;IACH,CAAC,CAAC,CACD,YAAY,CAAC,CAAC;GAErB;EACF,CAAC,CACH;EACA,MAAM,UAAsB,SAAuB;GACjD,OAAO,wBAAwB,UAAU;IACvC,GAAG;IACH,aAAa;IACb,SAAS,UAAU,aAAa,SAAS,SAAS,OAAO,IAAI,SAAS;GACxE,CAAC;EACH;CACF,CAAC;AACH;AAEA,SAAS,eACP,QACA,SACyB;CACzB,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,0BAA0B;CAG5C,WAAOC,+BAAiB,cAAc,QAAQ,OAAO,CAAC;AACxD;AAEA,SAAgB,gBACd,QACA,SACyB;CAEzB,IAAI,OADmB,WAAoC,WAC9B,eAAe,CAAC,SAAS;EACpD,MAAM,MAAM,GAAG,OAAO,UAAU,OAAO;EACvC,MAAM,WAAW,eAAe,IAAI,GAAG;EACvC,IAAI,UACF,OAAO;EAGT,MAAM,SAAS,eAAkB,QAAQ,OAAO;EAChD,eAAe,IAAI,KAAK,MAAM;EAC9B,OAAO;CACT;CAEA,OAAO,eAAkB,QAAQ,OAAO;AAC1C"}

package/dist/client.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.cts","names":[],"sources":["../src/client.ts"],"mappings":";;KAIY;EAAiC;EAAe;;UAE3C;EACf;EACA;EACA,kBAAkB;;iBAmFJ,gBAAgB,UAAU,iBAAiB,gBACzD,QAAQ,iBACR,UAAU,UACT,qBAAqB"}
+{"version":3,"file":"client.d.cts","names":[],"sources":["../src/client.ts"],"mappings":";;KAIY;EAAiC;EAAe;;UAE3C;EACf;EACA;EACA,kBAAkB;;iBAyFJ,gBAAgB,UAAU,iBAAiB,gBACzD,QAAQ,iBACR,UAAU,UACT,qBAAqB"}

package/dist/client.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.mts","names":[],"sources":["../src/client.ts"],"mappings":";;KAIY;EAAiC;EAAe;;UAE3C;EACf;EACA;EACA,kBAAkB;;iBAmFJ,gBAAgB,UAAU,iBAAiB,gBACzD,QAAQ,iBACR,UAAU,UACT,qBAAqB"}
+{"version":3,"file":"client.d.mts","names":[],"sources":["../src/client.ts"],"mappings":";;KAIY;EAAiC;EAAe;;UAE3C;EACf;EACA;EACA,kBAAkB;;iBAyFJ,gBAAgB,UAAU,iBAAiB,gBACzD,QAAQ,iBACR,UAAU,UACT,qBAAqB"}

package/dist/client.mjs

@@ -15,6 +15,13 @@ async function fetchWithRateLimitRetry(fetchUrl, options) {
 	}
 	return response;
 }
+function mergeHeaders(base, overrides) {
+	const merged = new Headers(base);
+	new Headers(overrides).forEach((value, key) => {
+		merged.set(key, value);
+	});
+	return merged;
+}
 function createRpcLink(config, headers) {
 	return new RPCLink({
 		origin: config.hostUrl,
@@ -39,10 +46,7 @@ function createRpcLink(config, headers) {
 			return fetchWithRateLimitRetry(fetchUrl, {
 				...options,
 				credentials: "include",
-				headers: headers ? {
-					...Object.fromEntries(headers),
-					...options?.headers
-				} : options?.headers
+				headers: headers ? mergeHeaders(headers, options?.headers) : options?.headers
 			});
 		}
 	});