everything-dev 0.3.2 → 1.3.2

package/README.md

@@ -0,0 +1,64 @@
+# everything-dev
+
+A consolidated product package for building Module Federation apps with oRPC APIs.
+
+## Subpath Exports
+
+- `everything-dev/types` - Zod schemas and TypeScript types
+- `everything-dev/config` - Config loading and resolution
+- `everything-dev/shared` - Shared dependency policy generation
+- `everything-dev/mf` - Module Federation runtime utilities
+- `everything-dev/plugin` - Plugin authoring (re-exports from every-plugin)
+- `everything-dev/api` - API plugin loading and router stitching
+- `everything-dev/host` - Host server orchestration
+- `everything-dev/cli` - CLI entry point and plugin workspace commands
+
+### Plugin commands
+
+- `bos plugin add <source>` - attach local or remote plugins
+- `bos plugin remove <key>` - detach a plugin
+- `bos plugin list` - list configured plugins
+- `bos plugin publish <key>` - publish one plugin package
+
+## Demo
+
+See `demo-next/docs-book/` for a minimal example that demonstrates:
+- Host server loading UI and API remotes via MF manifest
+- API plugin with oRPC contract
+- UI with TanStack Router
+- E2E tests with Playwright
+
+## Quick Start
+
+```bash
+# Build the package
+cd packages/everything-dev
+npm run build
+
+# Run the demo
+cd ../../demo-next/docs-book/host
+npm run dev
+```
+
+## Architecture
+
+```
+bos.config.json
+  ↓
+everything-dev/config (load + resolve)
+  ↓
+everything-dev/shared (generate shared deps policy)
+  ↓
+everything-dev/host (orchestrate)
+  ├── everything-dev/api (load API plugins via MF)
+  └── everything-dev/mf (load UI remote via MF)
+```
+
+## MF Manifest Standard
+
+All remotes (UI + API) use `mf-manifest.json` as the standard entry point:
+
+- `ui.entry = <uiBaseUrl>/mf-manifest.json`
+- `api.entry = <apiBaseUrl>/mf-manifest.json`
+
+This ensures consistent remote loading across Node SSR and browser environments.

package/cli.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env bun
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const distEntry = join(__dirname, "dist", "cli.js");
+const srcEntry = join(__dirname, "src", "cli.ts");
+
+await import(existsSync(distEntry) ? distEntry : srcEntry);

package/dist/_virtual/_rolldown/runtime.cjs

@@ -0,0 +1,29 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") {
+		for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+			key = keys[i];
+			if (!__hasOwnProp.call(to, key) && key !== except) {
+				__defProp(to, key, {
+					get: ((k) => from[k]).bind(null, key),
+					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+				});
+			}
+		}
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+
+//#endregion
+
+exports.__toESM = __toESM;

package/dist/api-contract.cjs

@@ -0,0 +1,172 @@
+const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+let node_crypto = require("node:crypto");
+
+//#region src/api-contract.ts
+function sha256(input) {
+	return (0, node_crypto.createHash)("sha256").update(input).digest("hex");
+}
+function trimTrailingSlash(input) {
+	return input.replace(/\/$/, "");
+}
+function sanitizeIdentifier(input) {
+	return input.replace(/[^A-Za-z0-9_]/g, "_").replace(/^[^A-Za-z_]+/, "_");
+}
+function toImportPath(fromFile, targetFile) {
+	const rel = (0, node_path.relative)((0, node_path.dirname)(fromFile), targetFile).replace(/\\/g, "/");
+	return rel.startsWith(".") ? rel : `./${rel}`;
+}
+function writeFileIfChanged(filePath, content) {
+	try {
+		if ((0, node_fs.readFileSync)(filePath, "utf8") === content) return false;
+	} catch {}
+	(0, node_fs.writeFileSync)(filePath, content);
+	return true;
+}
+function getApiPluginManifestUrl(apiBaseUrl) {
+	return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;
+}
+async function fetchApiPluginManifest(apiBaseUrl) {
+	const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));
+	if (!response.ok) throw new Error(`Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`);
+	const manifest = await response.json();
+	if (manifest.schemaVersion !== 1 || manifest.kind !== "every-plugin/manifest") throw new Error("Unsupported API plugin manifest format");
+	return manifest;
+}
+function localApiContractSource(configDir) {
+	return {
+		key: "api",
+		importName: "BaseApiContract",
+		sourceFilePath: (0, node_path.join)(configDir, "api", "src", "contract.ts")
+	};
+}
+async function remoteContractSource(opts) {
+	const manifest = await fetchApiPluginManifest(opts.baseUrl);
+	if (!manifest.contract) throw new Error(`Plugin manifest for ${manifest.plugin.name} does not advertise contract types`);
+	const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\.\//, "")}`;
+	const contractResponse = await fetch(contractUrl);
+	if (!contractResponse.ok) throw new Error(`Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`);
+	const contractTypes = await contractResponse.text();
+	if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) throw new Error("Fetched contract types failed checksum verification");
+	const generatedPath = (0, node_path.join)(opts.runtimeDir, opts.generatedSubdir, "contract.d.ts");
+	(0, node_fs.mkdirSync)((0, node_path.dirname)(generatedPath), { recursive: true });
+	writeFileIfChanged(generatedPath, contractTypes);
+	return {
+		key: opts.name,
+		importName: `${sanitizeIdentifier(opts.name)}Contract`,
+		sourceFilePath: generatedPath,
+		generatedPath
+	};
+}
+async function resolveContractSource(opts) {
+	if (opts.key === "api" && (!opts.source || !("localPath" in opts.source) || opts.source.localPath)) {
+		const localPath = opts.source && "localPath" in opts.source ? opts.source.localPath : void 0;
+		if (localPath) return {
+			key: opts.key,
+			importName: "BaseApiContract",
+			sourceFilePath: (0, node_path.join)(localPath, "src", "contract.ts")
+		};
+		if (!opts.baseUrl) return localApiContractSource(opts.configDir);
+	}
+	if (opts.source && "localPath" in opts.source && opts.source.localPath) return {
+		key: opts.key,
+		importName: `${sanitizeIdentifier(opts.key)}Contract`,
+		sourceFilePath: (0, node_path.join)(opts.source.localPath, "src", "contract.ts")
+	};
+	return remoteContractSource({
+		configDir: opts.configDir,
+		runtimeDir: opts.runtimeDir,
+		name: opts.key,
+		baseUrl: opts.baseUrl,
+		generatedSubdir: opts.generatedSubdir
+	});
+}
+function writeAggregateContractFile(opts) {
+	const baseSource = opts.sources.find((source) => source.key === "api");
+	const pluginSources = opts.pluginKeys.map((key) => opts.sources.find((entry) => entry.key === key)).filter((source) => Boolean(source));
+	if (!baseSource) throw new Error("API contract source is required to generate the aggregate contract");
+	const uiContractPath = (0, node_path.join)(opts.configDir, "ui", "src", "api-contract.gen.ts");
+	const uiLines = [];
+	for (const source of opts.sources) {
+		const importPath = toImportPath(uiContractPath, source.sourceFilePath);
+		uiLines.push(`import type { ContractType as ${source.importName} } from "${importPath}";`);
+	}
+	uiLines.push("");
+	if (pluginSources.length === 0) uiLines.push(`export type ApiContract = ${baseSource.importName};`);
+	else {
+		uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);
+		for (const source of pluginSources) {
+			const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);
+			uiLines.push(`  ${key}: ${source.importName};`);
+		}
+		uiLines.push("};");
+	}
+	(0, node_fs.mkdirSync)((0, node_path.dirname)(uiContractPath), { recursive: true });
+	writeFileIfChanged(uiContractPath, `${uiLines.join("\n")}\n`);
+	const pluginsClientPath = (0, node_path.join)(opts.configDir, "api", "src", "plugins-client.gen.ts");
+	const pluginsClientLines = [];
+	for (const source of pluginSources) {
+		const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);
+		pluginsClientLines.push(`import type { ContractType as ${source.importName} } from "${importPath}";`);
+	}
+	pluginsClientLines.push("import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";");
+	pluginsClientLines.push("type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;");
+	pluginsClientLines.push("");
+	if (pluginSources.length === 0) pluginsClientLines.push("export type PluginsClient = Record<string, never>;");
+	else {
+		pluginsClientLines.push("export type PluginsClient = {");
+		for (const source of pluginSources) {
+			const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);
+			pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);
+		}
+		pluginsClientLines.push("};");
+	}
+	(0, node_fs.mkdirSync)((0, node_path.dirname)(pluginsClientPath), { recursive: true });
+	writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join("\n")}\n`);
+	return uiContractPath;
+}
+async function syncApiContractBridge(opts) {
+	const runtimeDir = (0, node_path.join)(opts.configDir, ".bos", "generated");
+	const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) => a.localeCompare(b));
+	const sources = [];
+	let manifest = null;
+	let generatedPath = null;
+	const baseSource = await resolveContractSource({
+		configDir: opts.configDir,
+		runtimeDir,
+		key: "api",
+		source: opts.runtimeConfig.api,
+		baseUrl: opts.apiBaseUrl,
+		generatedSubdir: "api"
+	});
+	sources.push(baseSource);
+	for (const [key, plugin] of pluginEntries) {
+		const source = await resolveContractSource({
+			configDir: opts.configDir,
+			runtimeDir,
+			key,
+			source: plugin,
+			baseUrl: plugin.url,
+			generatedSubdir: `plugins/${key}`
+		});
+		sources.push(source);
+		if (source.generatedPath) generatedPath = source.generatedPath;
+	}
+	writeAggregateContractFile({
+		configDir: opts.configDir,
+		sources,
+		pluginKeys: pluginEntries.map(([key]) => key)
+	});
+	if (opts.runtimeConfig.api.source !== "local") manifest = await fetchApiPluginManifest(opts.apiBaseUrl);
+	return {
+		bridgePath: (0, node_path.join)(opts.configDir, "ui", "src", "api-contract.gen.ts"),
+		generatedPath,
+		manifest,
+		source: opts.runtimeConfig.api.source
+	};
+}
+
+//#endregion
+exports.syncApiContractBridge = syncApiContractBridge;
+//# sourceMappingURL=api-contract.cjs.map

package/dist/api-contract.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-contract.cjs","names":[],"sources":["../src/api-contract.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative } from \"node:path\";\nimport type { RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nexport interface ApiPluginManifest {\n  schemaVersion: 1;\n  kind: \"every-plugin/manifest\";\n  plugin: {\n    name: string;\n    version: string;\n  };\n  runtime: {\n    remoteEntry: string;\n  };\n  contract?: {\n    kind: \"orpc\";\n    types: {\n      path: string;\n      exportName: string;\n      typeName: string;\n      sha256?: string;\n    };\n  };\n}\n\ninterface ContractSource {\n  key: string;\n  importName: string;\n  sourceFilePath: string;\n  generatedPath?: string;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction trimTrailingSlash(input: string): string {\n  return input.replace(/\\/$/, \"\");\n}\n\nfunction sanitizeIdentifier(input: string): string {\n  return input.replace(/[^A-Za-z0-9_]/g, \"_\").replace(/^[^A-Za-z_]+/, \"_\");\n}\n\nfunction toImportPath(fromFile: string, targetFile: string): string {\n  const rel = relative(dirname(fromFile), targetFile).replace(/\\\\/g, \"/\");\n  return rel.startsWith(\".\") ? rel : `./${rel}`;\n}\n\nfunction writeFileIfChanged(filePath: string, content: string) {\n  try {\n    if (readFileSync(filePath, \"utf8\") === content) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, content);\n  return true;\n}\n\nfunction getApiPluginManifestUrl(apiBaseUrl: string): string {\n  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;\n}\n\nasync function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {\n  const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`,\n    );\n  }\n\n  const manifest = (await response.json()) as ApiPluginManifest;\n  if (manifest.schemaVersion !== 1 || manifest.kind !== \"every-plugin/manifest\") {\n    throw new Error(\"Unsupported API plugin manifest format\");\n  }\n\n  return manifest;\n}\n\nfunction localApiContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"api\", \"src\", \"contract.ts\");\n  return {\n    key: \"api\",\n    importName: \"BaseApiContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nasync function remoteContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  name: string;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  const manifest = await fetchApiPluginManifest(opts.baseUrl);\n  if (!manifest.contract) {\n    throw new Error(\n      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,\n    );\n  }\n\n  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\\.\\//, \"\")}`;\n  const contractResponse = await fetch(contractUrl);\n  if (!contractResponse.ok) {\n    throw new Error(\n      `Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`,\n    );\n  }\n\n  const contractTypes = await contractResponse.text();\n  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {\n    throw new Error(\"Fetched contract types failed checksum verification\");\n  }\n\n  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, \"contract.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, contractTypes);\n\n  return {\n    key: opts.name,\n    importName: `${sanitizeIdentifier(opts.name)}Contract`,\n    sourceFilePath: generatedPath,\n    generatedPath,\n  };\n}\n\nasync function resolveContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  key: string;\n  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  if (\n    opts.key === \"api\" &&\n    (!opts.source || !(\"localPath\" in opts.source) || opts.source.localPath)\n  ) {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath) {\n      return {\n        key: opts.key,\n        importName: \"BaseApiContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return localApiContractSource(opts.configDir);\n    }\n  }\n\n  if (opts.source && \"localPath\" in opts.source && opts.source.localPath) {\n    return {\n      key: opts.key,\n      importName: `${sanitizeIdentifier(opts.key)}Contract`,\n      sourceFilePath: join(opts.source.localPath, \"src\", \"contract.ts\"),\n    };\n  }\n\n  return remoteContractSource({\n    configDir: opts.configDir,\n    runtimeDir: opts.runtimeDir,\n    name: opts.key,\n    baseUrl: opts.baseUrl,\n    generatedSubdir: opts.generatedSubdir,\n  });\n}\n\nfunction writeAggregateContractFile(opts: {\n  configDir: string;\n  sources: ContractSource[];\n  pluginKeys: string[];\n}) {\n  const baseSource = opts.sources.find((source) => source.key === \"api\");\n  const pluginSources = opts.pluginKeys\n    .map((key) => opts.sources.find((entry) => entry.key === key))\n    .filter((source): source is ContractSource => Boolean(source));\n\n  if (!baseSource) {\n    throw new Error(\"API contract source is required to generate the aggregate contract\");\n  }\n\n  // --- Generate ui/src/api-contract.gen.ts ---\n  const uiContractPath = join(opts.configDir, \"ui\", \"src\", \"api-contract.gen.ts\");\n  const uiLines: string[] = [];\n\n  for (const source of opts.sources) {\n    const importPath = toImportPath(uiContractPath, source.sourceFilePath);\n    uiLines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  uiLines.push(\"\");\n  if (pluginSources.length === 0) {\n    uiLines.push(`export type ApiContract = ${baseSource.importName};`);\n  } else {\n    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);\n    for (const source of pluginSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      uiLines.push(`  ${key}: ${source.importName};`);\n    }\n    uiLines.push(\"};\");\n  }\n  mkdirSync(dirname(uiContractPath), { recursive: true });\n  writeFileIfChanged(uiContractPath, `${uiLines.join(\"\\n\")}\\n`);\n\n  // --- Generate api/src/plugins-client.gen.ts ---\n  const pluginsClientPath = join(opts.configDir, \"api\", \"src\", \"plugins-client.gen.ts\");\n  const pluginsClientLines: string[] = [];\n\n  for (const source of pluginSources) {\n    const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${source.importName} } from \"${importPath}\";`,\n    );\n  }\n\n  pluginsClientLines.push(\n    'import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";',\n  );\n  pluginsClientLines.push(\n    \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n  );\n  pluginsClientLines.push(\"\");\n\n  if (pluginSources.length === 0) {\n    pluginsClientLines.push(\"export type PluginsClient = Record<string, never>;\");\n  } else {\n    pluginsClientLines.push(\"export type PluginsClient = {\");\n    for (const source of pluginSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n    }\n    pluginsClientLines.push(\"};\");\n  }\n\n  mkdirSync(dirname(pluginsClientPath), { recursive: true });\n  writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join(\"\\n\")}\\n`);\n\n  return uiContractPath;\n}\n\nexport async function syncApiContractBridge(opts: {\n  configDir: string;\n  runtimeConfig: RuntimeConfig;\n  apiBaseUrl: string;\n}): Promise<{\n  bridgePath: string;\n  generatedPath: string | null;\n  manifest: ApiPluginManifest | null;\n  source: \"local\" | \"remote\";\n}> {\n  const runtimeDir = join(opts.configDir, \".bos\", \"generated\");\n  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>\n    a.localeCompare(b),\n  );\n  const sources: ContractSource[] = [];\n  let manifest: ApiPluginManifest | null = null;\n  let generatedPath: string | null = null;\n\n  const baseSource = await resolveContractSource({\n    configDir: opts.configDir,\n    runtimeDir,\n    key: \"api\",\n    source: opts.runtimeConfig.api,\n    baseUrl: opts.apiBaseUrl,\n    generatedSubdir: \"api\",\n  });\n  sources.push(baseSource);\n\n  for (const [key, plugin] of pluginEntries) {\n    const source = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key,\n      source: plugin,\n      baseUrl: plugin.url,\n      generatedSubdir: `plugins/${key}`,\n    });\n    sources.push(source);\n    if (source.generatedPath) {\n      generatedPath = source.generatedPath;\n    }\n  }\n\n  writeAggregateContractFile({\n    configDir: opts.configDir,\n    sources,\n    pluginKeys: pluginEntries.map(([key]) => key),\n  });\n\n  if (opts.runtimeConfig.api.source !== \"local\") {\n    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);\n  }\n\n  return {\n    bridgePath: join(opts.configDir, \"ui\", \"src\", \"api-contract.gen.ts\"),\n    generatedPath,\n    manifest,\n    source: opts.runtimeConfig.api.source,\n  };\n}\n"],"mappings":";;;;;;AAiCA,SAAS,OAAO,OAAuB;AACrC,oCAAkB,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAGzD,SAAS,kBAAkB,OAAuB;AAChD,QAAO,MAAM,QAAQ,OAAO,GAAG;;AAGjC,SAAS,mBAAmB,OAAuB;AACjD,QAAO,MAAM,QAAQ,kBAAkB,IAAI,CAAC,QAAQ,gBAAgB,IAAI;;AAG1E,SAAS,aAAa,UAAkB,YAA4B;CAClE,MAAM,qDAAuB,SAAS,EAAE,WAAW,CAAC,QAAQ,OAAO,IAAI;AACvE,QAAO,IAAI,WAAW,IAAI,GAAG,MAAM,KAAK;;AAG1C,SAAS,mBAAmB,UAAkB,SAAiB;AAC7D,KAAI;AACF,gCAAiB,UAAU,OAAO,KAAK,QAAS,QAAO;SACjD;AAIR,4BAAc,UAAU,QAAQ;AAChC,QAAO;;AAGT,SAAS,wBAAwB,YAA4B;AAC3D,QAAO,GAAG,kBAAkB,WAAW,CAAC;;AAG1C,eAAe,uBAAuB,YAAgD;CACpF,MAAM,WAAW,MAAM,MAAM,wBAAwB,WAAW,CAAC;AACjE,KAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MACR,wCAAwC,SAAS,OAAO,GAAG,SAAS,aACrE;CAGH,MAAM,WAAY,MAAM,SAAS,MAAM;AACvC,KAAI,SAAS,kBAAkB,KAAK,SAAS,SAAS,wBACpD,OAAM,IAAI,MAAM,yCAAyC;AAG3D,QAAO;;AAGT,SAAS,uBAAuB,WAAmC;AAEjE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,oCAJsB,WAAW,OAAO,OAAO,cAAc;EAK9D;;AAGH,eAAe,qBAAqB,MAMR;CAC1B,MAAM,WAAW,MAAM,uBAAuB,KAAK,QAAQ;AAC3D,KAAI,CAAC,SAAS,SACZ,OAAM,IAAI,MACR,uBAAuB,SAAS,OAAO,KAAK,oCAC7C;CAGH,MAAM,cAAc,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,SAAS,SAAS,MAAM,KAAK,QAAQ,SAAS,GAAG;CAC3G,MAAM,mBAAmB,MAAM,MAAM,YAAY;AACjD,KAAI,CAAC,iBAAiB,GACpB,OAAM,IAAI,MACR,mCAAmC,iBAAiB,OAAO,GAAG,iBAAiB,aAChF;CAGH,MAAM,gBAAgB,MAAM,iBAAiB,MAAM;AACnD,KAAI,SAAS,SAAS,MAAM,UAAU,SAAS,SAAS,MAAM,WAAW,OAAO,cAAc,CAC5F,OAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,oCAAqB,KAAK,YAAY,KAAK,iBAAiB,gBAAgB;AAClF,+CAAkB,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,cAAc;AAEhD,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,KAAK,CAAC;EAC7C,gBAAgB;EAChB;EACD;;AAGH,eAAe,sBAAsB,MAOT;AAC1B,KACE,KAAK,QAAQ,UACZ,CAAC,KAAK,UAAU,EAAE,eAAe,KAAK,WAAW,KAAK,OAAO,YAC9D;EACA,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,UACF,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,oCAAqB,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,uBAAuB,KAAK,UAAU;;AAIjD,KAAI,KAAK,UAAU,eAAe,KAAK,UAAU,KAAK,OAAO,UAC3D,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,IAAI,CAAC;EAC5C,oCAAqB,KAAK,OAAO,WAAW,OAAO,cAAc;EAClE;AAGH,QAAO,qBAAqB;EAC1B,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,SAAS,KAAK;EACd,iBAAiB,KAAK;EACvB,CAAC;;AAGJ,SAAS,2BAA2B,MAIjC;CACD,MAAM,aAAa,KAAK,QAAQ,MAAM,WAAW,OAAO,QAAQ,MAAM;CACtE,MAAM,gBAAgB,KAAK,WACxB,KAAK,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAM,QAAQ,IAAI,CAAC,CAC7D,QAAQ,WAAqC,QAAQ,OAAO,CAAC;AAEhE,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,qEAAqE;CAIvF,MAAM,qCAAsB,KAAK,WAAW,MAAM,OAAO,sBAAsB;CAC/E,MAAM,UAAoB,EAAE;AAE5B,MAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,aAAa,aAAa,gBAAgB,OAAO,eAAe;AACtE,UAAQ,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAAI;;AAG5F,SAAQ,KAAK,GAAG;AAChB,KAAI,cAAc,WAAW,EAC3B,SAAQ,KAAK,6BAA6B,WAAW,WAAW,GAAG;MAC9D;AACL,UAAQ,KAAK,6BAA6B,WAAW,WAAW,MAAM;AACtE,OAAK,MAAM,UAAU,eAAe;GAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAChD,OAAO,MACP,KAAK,UAAU,OAAO,IAAI;AAC9B,WAAQ,KAAK,KAAK,IAAI,IAAI,OAAO,WAAW,GAAG;;AAEjD,UAAQ,KAAK,KAAK;;AAEpB,+CAAkB,eAAe,EAAE,EAAE,WAAW,MAAM,CAAC;AACvD,oBAAmB,gBAAgB,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI;CAG7D,MAAM,wCAAyB,KAAK,WAAW,OAAO,OAAO,wBAAwB;CACrF,MAAM,qBAA+B,EAAE;AAEvC,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,aAAa,aAAa,mBAAmB,OAAO,eAAe;AACzE,qBAAmB,KACjB,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAC1E;;AAGH,oBAAmB,KACjB,mFACD;AACD,oBAAmB,KACjB,oHACD;AACD,oBAAmB,KAAK,GAAG;AAE3B,KAAI,cAAc,WAAW,EAC3B,oBAAmB,KAAK,qDAAqD;MACxE;AACL,qBAAmB,KAAK,gCAAgC;AACxD,OAAK,MAAM,UAAU,eAAe;GAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAChD,OAAO,MACP,KAAK,UAAU,OAAO,IAAI;AAC9B,sBAAmB,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,IAAI;;AAE3E,qBAAmB,KAAK,KAAK;;AAG/B,+CAAkB,kBAAkB,EAAE,EAAE,WAAW,MAAM,CAAC;AAC1D,oBAAmB,mBAAmB,GAAG,mBAAmB,KAAK,KAAK,CAAC,IAAI;AAE3E,QAAO;;AAGT,eAAsB,sBAAsB,MASzC;CACD,MAAM,iCAAkB,KAAK,WAAW,QAAQ,YAAY;CAC5D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,cAAc,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OACjF,EAAE,cAAc,EAAE,CACnB;CACD,MAAM,UAA4B,EAAE;CACpC,IAAI,WAAqC;CACzC,IAAI,gBAA+B;CAEnC,MAAM,aAAa,MAAM,sBAAsB;EAC7C,WAAW,KAAK;EAChB;EACA,KAAK;EACL,QAAQ,KAAK,cAAc;EAC3B,SAAS,KAAK;EACd,iBAAiB;EAClB,CAAC;AACF,SAAQ,KAAK,WAAW;AAExB,MAAK,MAAM,CAAC,KAAK,WAAW,eAAe;EACzC,MAAM,SAAS,MAAM,sBAAsB;GACzC,WAAW,KAAK;GAChB;GACA;GACA,QAAQ;GACR,SAAS,OAAO;GAChB,iBAAiB,WAAW;GAC7B,CAAC;AACF,UAAQ,KAAK,OAAO;AACpB,MAAI,OAAO,cACT,iBAAgB,OAAO;;AAI3B,4BAA2B;EACzB,WAAW,KAAK;EAChB;EACA,YAAY,cAAc,KAAK,CAAC,SAAS,IAAI;EAC9C,CAAC;AAEF,KAAI,KAAK,cAAc,IAAI,WAAW,QACpC,YAAW,MAAM,uBAAuB,KAAK,WAAW;AAG1D,QAAO;EACL,gCAAiB,KAAK,WAAW,MAAM,OAAO,sBAAsB;EACpE;EACA;EACA,QAAQ,KAAK,cAAc,IAAI;EAChC"}

package/dist/api-contract.mjs

@@ -0,0 +1,171 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join, relative } from "node:path";
+import { createHash } from "node:crypto";
+
+//#region src/api-contract.ts
+function sha256(input) {
+	return createHash("sha256").update(input).digest("hex");
+}
+function trimTrailingSlash(input) {
+	return input.replace(/\/$/, "");
+}
+function sanitizeIdentifier(input) {
+	return input.replace(/[^A-Za-z0-9_]/g, "_").replace(/^[^A-Za-z_]+/, "_");
+}
+function toImportPath(fromFile, targetFile) {
+	const rel = relative(dirname(fromFile), targetFile).replace(/\\/g, "/");
+	return rel.startsWith(".") ? rel : `./${rel}`;
+}
+function writeFileIfChanged(filePath, content) {
+	try {
+		if (readFileSync(filePath, "utf8") === content) return false;
+	} catch {}
+	writeFileSync(filePath, content);
+	return true;
+}
+function getApiPluginManifestUrl(apiBaseUrl) {
+	return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;
+}
+async function fetchApiPluginManifest(apiBaseUrl) {
+	const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));
+	if (!response.ok) throw new Error(`Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`);
+	const manifest = await response.json();
+	if (manifest.schemaVersion !== 1 || manifest.kind !== "every-plugin/manifest") throw new Error("Unsupported API plugin manifest format");
+	return manifest;
+}
+function localApiContractSource(configDir) {
+	return {
+		key: "api",
+		importName: "BaseApiContract",
+		sourceFilePath: join(configDir, "api", "src", "contract.ts")
+	};
+}
+async function remoteContractSource(opts) {
+	const manifest = await fetchApiPluginManifest(opts.baseUrl);
+	if (!manifest.contract) throw new Error(`Plugin manifest for ${manifest.plugin.name} does not advertise contract types`);
+	const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\.\//, "")}`;
+	const contractResponse = await fetch(contractUrl);
+	if (!contractResponse.ok) throw new Error(`Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`);
+	const contractTypes = await contractResponse.text();
+	if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) throw new Error("Fetched contract types failed checksum verification");
+	const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, "contract.d.ts");
+	mkdirSync(dirname(generatedPath), { recursive: true });
+	writeFileIfChanged(generatedPath, contractTypes);
+	return {
+		key: opts.name,
+		importName: `${sanitizeIdentifier(opts.name)}Contract`,
+		sourceFilePath: generatedPath,
+		generatedPath
+	};
+}
+async function resolveContractSource(opts) {
+	if (opts.key === "api" && (!opts.source || !("localPath" in opts.source) || opts.source.localPath)) {
+		const localPath = opts.source && "localPath" in opts.source ? opts.source.localPath : void 0;
+		if (localPath) return {
+			key: opts.key,
+			importName: "BaseApiContract",
+			sourceFilePath: join(localPath, "src", "contract.ts")
+		};
+		if (!opts.baseUrl) return localApiContractSource(opts.configDir);
+	}
+	if (opts.source && "localPath" in opts.source && opts.source.localPath) return {
+		key: opts.key,
+		importName: `${sanitizeIdentifier(opts.key)}Contract`,
+		sourceFilePath: join(opts.source.localPath, "src", "contract.ts")
+	};
+	return remoteContractSource({
+		configDir: opts.configDir,
+		runtimeDir: opts.runtimeDir,
+		name: opts.key,
+		baseUrl: opts.baseUrl,
+		generatedSubdir: opts.generatedSubdir
+	});
+}
+function writeAggregateContractFile(opts) {
+	const baseSource = opts.sources.find((source) => source.key === "api");
+	const pluginSources = opts.pluginKeys.map((key) => opts.sources.find((entry) => entry.key === key)).filter((source) => Boolean(source));
+	if (!baseSource) throw new Error("API contract source is required to generate the aggregate contract");
+	const uiContractPath = join(opts.configDir, "ui", "src", "api-contract.gen.ts");
+	const uiLines = [];
+	for (const source of opts.sources) {
+		const importPath = toImportPath(uiContractPath, source.sourceFilePath);
+		uiLines.push(`import type { ContractType as ${source.importName} } from "${importPath}";`);
+	}
+	uiLines.push("");
+	if (pluginSources.length === 0) uiLines.push(`export type ApiContract = ${baseSource.importName};`);
+	else {
+		uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);
+		for (const source of pluginSources) {
+			const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);
+			uiLines.push(`  ${key}: ${source.importName};`);
+		}
+		uiLines.push("};");
+	}
+	mkdirSync(dirname(uiContractPath), { recursive: true });
+	writeFileIfChanged(uiContractPath, `${uiLines.join("\n")}\n`);
+	const pluginsClientPath = join(opts.configDir, "api", "src", "plugins-client.gen.ts");
+	const pluginsClientLines = [];
+	for (const source of pluginSources) {
+		const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);
+		pluginsClientLines.push(`import type { ContractType as ${source.importName} } from "${importPath}";`);
+	}
+	pluginsClientLines.push("import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";");
+	pluginsClientLines.push("type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;");
+	pluginsClientLines.push("");
+	if (pluginSources.length === 0) pluginsClientLines.push("export type PluginsClient = Record<string, never>;");
+	else {
+		pluginsClientLines.push("export type PluginsClient = {");
+		for (const source of pluginSources) {
+			const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);
+			pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);
+		}
+		pluginsClientLines.push("};");
+	}
+	mkdirSync(dirname(pluginsClientPath), { recursive: true });
+	writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join("\n")}\n`);
+	return uiContractPath;
+}
+async function syncApiContractBridge(opts) {
+	const runtimeDir = join(opts.configDir, ".bos", "generated");
+	const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) => a.localeCompare(b));
+	const sources = [];
+	let manifest = null;
+	let generatedPath = null;
+	const baseSource = await resolveContractSource({
+		configDir: opts.configDir,
+		runtimeDir,
+		key: "api",
+		source: opts.runtimeConfig.api,
+		baseUrl: opts.apiBaseUrl,
+		generatedSubdir: "api"
+	});
+	sources.push(baseSource);
+	for (const [key, plugin] of pluginEntries) {
+		const source = await resolveContractSource({
+			configDir: opts.configDir,
+			runtimeDir,
+			key,
+			source: plugin,
+			baseUrl: plugin.url,
+			generatedSubdir: `plugins/${key}`
+		});
+		sources.push(source);
+		if (source.generatedPath) generatedPath = source.generatedPath;
+	}
+	writeAggregateContractFile({
+		configDir: opts.configDir,
+		sources,
+		pluginKeys: pluginEntries.map(([key]) => key)
+	});
+	if (opts.runtimeConfig.api.source !== "local") manifest = await fetchApiPluginManifest(opts.apiBaseUrl);
+	return {
+		bridgePath: join(opts.configDir, "ui", "src", "api-contract.gen.ts"),
+		generatedPath,
+		manifest,
+		source: opts.runtimeConfig.api.source
+	};
+}
+
+//#endregion
+export { syncApiContractBridge };
+//# sourceMappingURL=api-contract.mjs.map

package/dist/api-contract.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-contract.mjs","names":[],"sources":["../src/api-contract.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative } from \"node:path\";\nimport type { RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nexport interface ApiPluginManifest {\n  schemaVersion: 1;\n  kind: \"every-plugin/manifest\";\n  plugin: {\n    name: string;\n    version: string;\n  };\n  runtime: {\n    remoteEntry: string;\n  };\n  contract?: {\n    kind: \"orpc\";\n    types: {\n      path: string;\n      exportName: string;\n      typeName: string;\n      sha256?: string;\n    };\n  };\n}\n\ninterface ContractSource {\n  key: string;\n  importName: string;\n  sourceFilePath: string;\n  generatedPath?: string;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction trimTrailingSlash(input: string): string {\n  return input.replace(/\\/$/, \"\");\n}\n\nfunction sanitizeIdentifier(input: string): string {\n  return input.replace(/[^A-Za-z0-9_]/g, \"_\").replace(/^[^A-Za-z_]+/, \"_\");\n}\n\nfunction toImportPath(fromFile: string, targetFile: string): string {\n  const rel = relative(dirname(fromFile), targetFile).replace(/\\\\/g, \"/\");\n  return rel.startsWith(\".\") ? rel : `./${rel}`;\n}\n\nfunction writeFileIfChanged(filePath: string, content: string) {\n  try {\n    if (readFileSync(filePath, \"utf8\") === content) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, content);\n  return true;\n}\n\nfunction getApiPluginManifestUrl(apiBaseUrl: string): string {\n  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;\n}\n\nasync function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {\n  const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`,\n    );\n  }\n\n  const manifest = (await response.json()) as ApiPluginManifest;\n  if (manifest.schemaVersion !== 1 || manifest.kind !== \"every-plugin/manifest\") {\n    throw new Error(\"Unsupported API plugin manifest format\");\n  }\n\n  return manifest;\n}\n\nfunction localApiContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"api\", \"src\", \"contract.ts\");\n  return {\n    key: \"api\",\n    importName: \"BaseApiContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nasync function remoteContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  name: string;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  const manifest = await fetchApiPluginManifest(opts.baseUrl);\n  if (!manifest.contract) {\n    throw new Error(\n      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,\n    );\n  }\n\n  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\\.\\//, \"\")}`;\n  const contractResponse = await fetch(contractUrl);\n  if (!contractResponse.ok) {\n    throw new Error(\n      `Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`,\n    );\n  }\n\n  const contractTypes = await contractResponse.text();\n  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {\n    throw new Error(\"Fetched contract types failed checksum verification\");\n  }\n\n  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, \"contract.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, contractTypes);\n\n  return {\n    key: opts.name,\n    importName: `${sanitizeIdentifier(opts.name)}Contract`,\n    sourceFilePath: generatedPath,\n    generatedPath,\n  };\n}\n\nasync function resolveContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  key: string;\n  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  if (\n    opts.key === \"api\" &&\n    (!opts.source || !(\"localPath\" in opts.source) || opts.source.localPath)\n  ) {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath) {\n      return {\n        key: opts.key,\n        importName: \"BaseApiContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return localApiContractSource(opts.configDir);\n    }\n  }\n\n  if (opts.source && \"localPath\" in opts.source && opts.source.localPath) {\n    return {\n      key: opts.key,\n      importName: `${sanitizeIdentifier(opts.key)}Contract`,\n      sourceFilePath: join(opts.source.localPath, \"src\", \"contract.ts\"),\n    };\n  }\n\n  return remoteContractSource({\n    configDir: opts.configDir,\n    runtimeDir: opts.runtimeDir,\n    name: opts.key,\n    baseUrl: opts.baseUrl,\n    generatedSubdir: opts.generatedSubdir,\n  });\n}\n\nfunction writeAggregateContractFile(opts: {\n  configDir: string;\n  sources: ContractSource[];\n  pluginKeys: string[];\n}) {\n  const baseSource = opts.sources.find((source) => source.key === \"api\");\n  const pluginSources = opts.pluginKeys\n    .map((key) => opts.sources.find((entry) => entry.key === key))\n    .filter((source): source is ContractSource => Boolean(source));\n\n  if (!baseSource) {\n    throw new Error(\"API contract source is required to generate the aggregate contract\");\n  }\n\n  // --- Generate ui/src/api-contract.gen.ts ---\n  const uiContractPath = join(opts.configDir, \"ui\", \"src\", \"api-contract.gen.ts\");\n  const uiLines: string[] = [];\n\n  for (const source of opts.sources) {\n    const importPath = toImportPath(uiContractPath, source.sourceFilePath);\n    uiLines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  uiLines.push(\"\");\n  if (pluginSources.length === 0) {\n    uiLines.push(`export type ApiContract = ${baseSource.importName};`);\n  } else {\n    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);\n    for (const source of pluginSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      uiLines.push(`  ${key}: ${source.importName};`);\n    }\n    uiLines.push(\"};\");\n  }\n  mkdirSync(dirname(uiContractPath), { recursive: true });\n  writeFileIfChanged(uiContractPath, `${uiLines.join(\"\\n\")}\\n`);\n\n  // --- Generate api/src/plugins-client.gen.ts ---\n  const pluginsClientPath = join(opts.configDir, \"api\", \"src\", \"plugins-client.gen.ts\");\n  const pluginsClientLines: string[] = [];\n\n  for (const source of pluginSources) {\n    const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${source.importName} } from \"${importPath}\";`,\n    );\n  }\n\n  pluginsClientLines.push(\n    'import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";',\n  );\n  pluginsClientLines.push(\n    \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n  );\n  pluginsClientLines.push(\"\");\n\n  if (pluginSources.length === 0) {\n    pluginsClientLines.push(\"export type PluginsClient = Record<string, never>;\");\n  } else {\n    pluginsClientLines.push(\"export type PluginsClient = {\");\n    for (const source of pluginSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n    }\n    pluginsClientLines.push(\"};\");\n  }\n\n  mkdirSync(dirname(pluginsClientPath), { recursive: true });\n  writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join(\"\\n\")}\\n`);\n\n  return uiContractPath;\n}\n\nexport async function syncApiContractBridge(opts: {\n  configDir: string;\n  runtimeConfig: RuntimeConfig;\n  apiBaseUrl: string;\n}): Promise<{\n  bridgePath: string;\n  generatedPath: string | null;\n  manifest: ApiPluginManifest | null;\n  source: \"local\" | \"remote\";\n}> {\n  const runtimeDir = join(opts.configDir, \".bos\", \"generated\");\n  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>\n    a.localeCompare(b),\n  );\n  const sources: ContractSource[] = [];\n  let manifest: ApiPluginManifest | null = null;\n  let generatedPath: string | null = null;\n\n  const baseSource = await resolveContractSource({\n    configDir: opts.configDir,\n    runtimeDir,\n    key: \"api\",\n    source: opts.runtimeConfig.api,\n    baseUrl: opts.apiBaseUrl,\n    generatedSubdir: \"api\",\n  });\n  sources.push(baseSource);\n\n  for (const [key, plugin] of pluginEntries) {\n    const source = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key,\n      source: plugin,\n      baseUrl: plugin.url,\n      generatedSubdir: `plugins/${key}`,\n    });\n    sources.push(source);\n    if (source.generatedPath) {\n      generatedPath = source.generatedPath;\n    }\n  }\n\n  writeAggregateContractFile({\n    configDir: opts.configDir,\n    sources,\n    pluginKeys: pluginEntries.map(([key]) => key),\n  });\n\n  if (opts.runtimeConfig.api.source !== \"local\") {\n    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);\n  }\n\n  return {\n    bridgePath: join(opts.configDir, \"ui\", \"src\", \"api-contract.gen.ts\"),\n    generatedPath,\n    manifest,\n    source: opts.runtimeConfig.api.source,\n  };\n}\n"],"mappings":";;;;;AAiCA,SAAS,OAAO,OAAuB;AACrC,QAAO,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAGzD,SAAS,kBAAkB,OAAuB;AAChD,QAAO,MAAM,QAAQ,OAAO,GAAG;;AAGjC,SAAS,mBAAmB,OAAuB;AACjD,QAAO,MAAM,QAAQ,kBAAkB,IAAI,CAAC,QAAQ,gBAAgB,IAAI;;AAG1E,SAAS,aAAa,UAAkB,YAA4B;CAClE,MAAM,MAAM,SAAS,QAAQ,SAAS,EAAE,WAAW,CAAC,QAAQ,OAAO,IAAI;AACvE,QAAO,IAAI,WAAW,IAAI,GAAG,MAAM,KAAK;;AAG1C,SAAS,mBAAmB,UAAkB,SAAiB;AAC7D,KAAI;AACF,MAAI,aAAa,UAAU,OAAO,KAAK,QAAS,QAAO;SACjD;AAIR,eAAc,UAAU,QAAQ;AAChC,QAAO;;AAGT,SAAS,wBAAwB,YAA4B;AAC3D,QAAO,GAAG,kBAAkB,WAAW,CAAC;;AAG1C,eAAe,uBAAuB,YAAgD;CACpF,MAAM,WAAW,MAAM,MAAM,wBAAwB,WAAW,CAAC;AACjE,KAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MACR,wCAAwC,SAAS,OAAO,GAAG,SAAS,aACrE;CAGH,MAAM,WAAY,MAAM,SAAS,MAAM;AACvC,KAAI,SAAS,kBAAkB,KAAK,SAAS,SAAS,wBACpD,OAAM,IAAI,MAAM,yCAAyC;AAG3D,QAAO;;AAGT,SAAS,uBAAuB,WAAmC;AAEjE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,OAAO,OAAO,cAAc;EAK9D;;AAGH,eAAe,qBAAqB,MAMR;CAC1B,MAAM,WAAW,MAAM,uBAAuB,KAAK,QAAQ;AAC3D,KAAI,CAAC,SAAS,SACZ,OAAM,IAAI,MACR,uBAAuB,SAAS,OAAO,KAAK,oCAC7C;CAGH,MAAM,cAAc,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,SAAS,SAAS,MAAM,KAAK,QAAQ,SAAS,GAAG;CAC3G,MAAM,mBAAmB,MAAM,MAAM,YAAY;AACjD,KAAI,CAAC,iBAAiB,GACpB,OAAM,IAAI,MACR,mCAAmC,iBAAiB,OAAO,GAAG,iBAAiB,aAChF;CAGH,MAAM,gBAAgB,MAAM,iBAAiB,MAAM;AACnD,KAAI,SAAS,SAAS,MAAM,UAAU,SAAS,SAAS,MAAM,WAAW,OAAO,cAAc,CAC5F,OAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,gBAAgB,KAAK,KAAK,YAAY,KAAK,iBAAiB,gBAAgB;AAClF,WAAU,QAAQ,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,cAAc;AAEhD,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,KAAK,CAAC;EAC7C,gBAAgB;EAChB;EACD;;AAGH,eAAe,sBAAsB,MAOT;AAC1B,KACE,KAAK,QAAQ,UACZ,CAAC,KAAK,UAAU,EAAE,eAAe,KAAK,WAAW,KAAK,OAAO,YAC9D;EACA,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,UACF,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,uBAAuB,KAAK,UAAU;;AAIjD,KAAI,KAAK,UAAU,eAAe,KAAK,UAAU,KAAK,OAAO,UAC3D,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,IAAI,CAAC;EAC5C,gBAAgB,KAAK,KAAK,OAAO,WAAW,OAAO,cAAc;EAClE;AAGH,QAAO,qBAAqB;EAC1B,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,SAAS,KAAK;EACd,iBAAiB,KAAK;EACvB,CAAC;;AAGJ,SAAS,2BAA2B,MAIjC;CACD,MAAM,aAAa,KAAK,QAAQ,MAAM,WAAW,OAAO,QAAQ,MAAM;CACtE,MAAM,gBAAgB,KAAK,WACxB,KAAK,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAM,QAAQ,IAAI,CAAC,CAC7D,QAAQ,WAAqC,QAAQ,OAAO,CAAC;AAEhE,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,qEAAqE;CAIvF,MAAM,iBAAiB,KAAK,KAAK,WAAW,MAAM,OAAO,sBAAsB;CAC/E,MAAM,UAAoB,EAAE;AAE5B,MAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,aAAa,aAAa,gBAAgB,OAAO,eAAe;AACtE,UAAQ,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAAI;;AAG5F,SAAQ,KAAK,GAAG;AAChB,KAAI,cAAc,WAAW,EAC3B,SAAQ,KAAK,6BAA6B,WAAW,WAAW,GAAG;MAC9D;AACL,UAAQ,KAAK,6BAA6B,WAAW,WAAW,MAAM;AACtE,OAAK,MAAM,UAAU,eAAe;GAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAChD,OAAO,MACP,KAAK,UAAU,OAAO,IAAI;AAC9B,WAAQ,KAAK,KAAK,IAAI,IAAI,OAAO,WAAW,GAAG;;AAEjD,UAAQ,KAAK,KAAK;;AAEpB,WAAU,QAAQ,eAAe,EAAE,EAAE,WAAW,MAAM,CAAC;AACvD,oBAAmB,gBAAgB,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI;CAG7D,MAAM,oBAAoB,KAAK,KAAK,WAAW,OAAO,OAAO,wBAAwB;CACrF,MAAM,qBAA+B,EAAE;AAEvC,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,aAAa,aAAa,mBAAmB,OAAO,eAAe;AACzE,qBAAmB,KACjB,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAC1E;;AAGH,oBAAmB,KACjB,mFACD;AACD,oBAAmB,KACjB,oHACD;AACD,oBAAmB,KAAK,GAAG;AAE3B,KAAI,cAAc,WAAW,EAC3B,oBAAmB,KAAK,qDAAqD;MACxE;AACL,qBAAmB,KAAK,gCAAgC;AACxD,OAAK,MAAM,UAAU,eAAe;GAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAChD,OAAO,MACP,KAAK,UAAU,OAAO,IAAI;AAC9B,sBAAmB,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,IAAI;;AAE3E,qBAAmB,KAAK,KAAK;;AAG/B,WAAU,QAAQ,kBAAkB,EAAE,EAAE,WAAW,MAAM,CAAC;AAC1D,oBAAmB,mBAAmB,GAAG,mBAAmB,KAAK,KAAK,CAAC,IAAI;AAE3E,QAAO;;AAGT,eAAsB,sBAAsB,MASzC;CACD,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,YAAY;CAC5D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,cAAc,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OACjF,EAAE,cAAc,EAAE,CACnB;CACD,MAAM,UAA4B,EAAE;CACpC,IAAI,WAAqC;CACzC,IAAI,gBAA+B;CAEnC,MAAM,aAAa,MAAM,sBAAsB;EAC7C,WAAW,KAAK;EAChB;EACA,KAAK;EACL,QAAQ,KAAK,cAAc;EAC3B,SAAS,KAAK;EACd,iBAAiB;EAClB,CAAC;AACF,SAAQ,KAAK,WAAW;AAExB,MAAK,MAAM,CAAC,KAAK,WAAW,eAAe;EACzC,MAAM,SAAS,MAAM,sBAAsB;GACzC,WAAW,KAAK;GAChB;GACA;GACA,QAAQ;GACR,SAAS,OAAO;GAChB,iBAAiB,WAAW;GAC7B,CAAC;AACF,UAAQ,KAAK,OAAO;AACpB,MAAI,OAAO,cACT,iBAAgB,OAAO;;AAI3B,4BAA2B;EACzB,WAAW,KAAK;EAChB;EACA,YAAY,cAAc,KAAK,CAAC,SAAS,IAAI;EAC9C,CAAC;AAEF,KAAI,KAAK,cAAc,IAAI,WAAW,QACpC,YAAW,MAAM,uBAAuB,KAAK,WAAW;AAG1D,QAAO;EACL,YAAY,KAAK,KAAK,WAAW,MAAM,OAAO,sBAAsB;EACpE;EACA;EACA,QAAQ,KAAK,cAAc,IAAI;EAChC"}

package/dist/api.cjs

@@ -0,0 +1,124 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
+require('./sdk.cjs');
+const require_mf = require('./mf.cjs');
+const require_integrity = require('./integrity.cjs');
+let every_plugin = require("every-plugin");
+
+//#region src/api.ts
+async function loadApiPlugin(opts) {
+	const remoteEntryUrl = (() => {
+		if (opts.entry.endsWith("/remoteEntry.js")) return opts.entry;
+		if (opts.entry.endsWith("/mf-manifest.json")) return `${opts.entry.replace(/\/mf-manifest\.json$/, "")}/remoteEntry.js`;
+		if (opts.entry.endsWith(".js")) return opts.entry;
+		return `${opts.entry.replace(/\/$/, "")}/remoteEntry.js`;
+	})();
+	if (opts.integrity) await require_integrity.verifySriForUrl(remoteEntryUrl, opts.integrity);
+	await require_mf.ensureNodeRuntimePlugin();
+	await require_mf.registerRemote({
+		name: opts.runtimeId,
+		entry: remoteEntryUrl
+	});
+	const plugin = await (0, every_plugin.createPluginRuntime)({
+		registry: { [opts.runtimeId]: { remote: remoteEntryUrl } },
+		secrets: opts.secrets ?? {}
+	}).usePlugin(opts.runtimeId, {
+		variables: opts.variables ?? {},
+		secrets: opts.secrets ?? {}
+	}, opts.plugins);
+	return {
+		key: opts.key,
+		name: opts.name,
+		router: plugin.router,
+		createClient: plugin.createClient,
+		metadata: {
+			remoteUrl: remoteEntryUrl,
+			version: plugin.metadata.version
+		}
+	};
+}
+function collectSecrets(config, envSecrets) {
+	const secrets = {};
+	for (const key of config.secrets ?? []) {
+		const value = envSecrets?.[key] ?? process.env[key];
+		if (value) secrets[key] = value;
+	}
+	return secrets;
+}
+async function loadApiPluginsFromRuntimeConfig(runtimeConfig, envSecrets) {
+	const entries = [];
+	if (runtimeConfig.api?.url) entries.push(["api", runtimeConfig.api]);
+	for (const [key, plugin] of Object.entries(runtimeConfig.plugins ?? {})) if (plugin.url) entries.push([key, plugin]);
+	if (entries.length === 0) {
+		console.log("[API] No plugins configured");
+		return {
+			base: null,
+			plugins: [],
+			errors: []
+		};
+	}
+	const pluginEntries = entries.filter(([key]) => key !== "api");
+	const apiEntry = entries.find(([key]) => key === "api");
+	const pluginResults = await Promise.allSettled(pluginEntries.map(async ([key, pluginConfig]) => {
+		console.log(`[API] Loading plugin: ${pluginConfig.name} from ${pluginConfig.entry}`);
+		return loadApiPlugin({
+			key,
+			runtimeId: pluginConfig.name,
+			name: pluginConfig.name,
+			entry: pluginConfig.entry,
+			variables: pluginConfig.variables,
+			secrets: collectSecrets(pluginConfig, envSecrets),
+			integrity: pluginConfig.integrity
+		});
+	}));
+	const plugins = [];
+	const errors = [];
+	const pluginsClient = {};
+	pluginResults.forEach((result, index) => {
+		const [key] = pluginEntries[index] ?? ["unknown"];
+		if (result.status === "fulfilled") {
+			plugins.push(result.value);
+			pluginsClient[key] = result.value.createClient;
+		} else errors.push({
+			key,
+			error: result.reason instanceof Error ? result.reason.message : String(result.reason)
+		});
+	});
+	let base = null;
+	if (apiEntry) {
+		const [key, apiConfig] = apiEntry;
+		try {
+			console.log(`[API] Loading API plugin: ${apiConfig.name} from ${apiConfig.entry}`);
+			base = await loadApiPlugin({
+				key,
+				runtimeId: apiConfig.name,
+				name: apiConfig.name,
+				entry: apiConfig.entry,
+				variables: apiConfig.variables,
+				secrets: collectSecrets(apiConfig, envSecrets),
+				integrity: apiConfig.integrity,
+				plugins: pluginsClient
+			});
+		} catch (error) {
+			errors.push({
+				key,
+				error: error instanceof Error ? error.message : String(error)
+			});
+		}
+	}
+	return {
+		base,
+		plugins,
+		errors
+	};
+}
+function createStitchedRouter(baseRouter, plugins) {
+	if (!plugins || plugins.length === 0) return baseRouter;
+	return plugins.reduce((router, plugin) => Object.assign(router, plugin.router), baseRouter);
+}
+
+//#endregion
+exports.createStitchedRouter = createStitchedRouter;
+exports.loadApiPlugin = loadApiPlugin;
+exports.loadApiPluginsFromRuntimeConfig = loadApiPluginsFromRuntimeConfig;
+//# sourceMappingURL=api.cjs.map

package/dist/api.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.cjs","names":["verifySriForUrl","ensureNodeRuntimePlugin","registerRemote"],"sources":["../src/api.ts"],"sourcesContent":["import { verifySriForUrl } from \"./integrity\";\nimport { ensureNodeRuntimePlugin, registerRemote } from \"./mf\";\nimport { createPluginRuntime } from \"./sdk\";\nimport type { RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nexport interface LoadedPluginResult {\n  key: string;\n  name: string;\n  router: any;\n  createClient: (context?: unknown) => any;\n  metadata: {\n    remoteUrl: string;\n    version?: string;\n  };\n}\n\nexport interface LoadedPluginsResult {\n  base: LoadedPluginResult | null;\n  plugins: LoadedPluginResult[];\n  errors: Array<{ key: string; error: string }>;\n}\n\nexport async function loadApiPlugin(opts: {\n  key: string;\n  runtimeId: string;\n  name: string;\n  entry: string;\n  variables?: Record<string, string>;\n  secrets?: Record<string, string>;\n  integrity?: string;\n  plugins?: Record<string, unknown>;\n}): Promise<LoadedPluginResult> {\n  const remoteEntryUrl = (() => {\n    if (opts.entry.endsWith(\"/remoteEntry.js\")) return opts.entry;\n    if (opts.entry.endsWith(\"/mf-manifest.json\")) {\n      return `${opts.entry.replace(/\\/mf-manifest\\.json$/, \"\")}/remoteEntry.js`;\n    }\n    if (opts.entry.endsWith(\".js\")) return opts.entry;\n    return `${opts.entry.replace(/\\/$/, \"\")}/remoteEntry.js`;\n  })();\n\n  if (opts.integrity) {\n    await verifySriForUrl(remoteEntryUrl, opts.integrity);\n  }\n\n  await ensureNodeRuntimePlugin();\n  await registerRemote({ name: opts.runtimeId, entry: remoteEntryUrl });\n\n  const runtime: any = createPluginRuntime({\n    registry: {\n      [opts.runtimeId]: { remote: remoteEntryUrl },\n    },\n    secrets: opts.secrets ?? {},\n  });\n\n  // biome-ignore lint/correctness/useHookAtTopLevel: usePlugin is not a React hook\n  const plugin = await runtime.usePlugin(\n    opts.runtimeId,\n    {\n      variables: opts.variables ?? {},\n      secrets: opts.secrets ?? {},\n    },\n    opts.plugins,\n  );\n\n  return {\n    key: opts.key,\n    name: opts.name,\n    router: plugin.router,\n    createClient: plugin.createClient as (context?: unknown) => any,\n    metadata: {\n      remoteUrl: remoteEntryUrl,\n      version: plugin.metadata.version,\n    },\n  };\n}\n\nfunction collectSecrets(config: RuntimePluginConfig, envSecrets?: Record<string, string>) {\n  const secrets: Record<string, string> = {};\n  for (const key of config.secrets ?? []) {\n    const value = envSecrets?.[key] ?? process.env[key];\n    if (value) {\n      secrets[key] = value;\n    }\n  }\n  return secrets;\n}\n\nexport async function loadApiPluginsFromRuntimeConfig(\n  runtimeConfig: RuntimeConfig,\n  envSecrets?: Record<string, string>,\n): Promise<LoadedPluginsResult> {\n  const entries: Array<[string, RuntimePluginConfig]> = [];\n\n  if (runtimeConfig.api?.url) {\n    entries.push([\"api\", runtimeConfig.api]);\n  }\n\n  for (const [key, plugin] of Object.entries(runtimeConfig.plugins ?? {})) {\n    if (plugin.url) {\n      entries.push([key, plugin]);\n    }\n  }\n\n  if (entries.length === 0) {\n    console.log(\"[API] No plugins configured\");\n    return { base: null, plugins: [], errors: [] };\n  }\n\n  // Phase 1: Load non-API plugins first\n  const pluginEntries = entries.filter(([key]) => key !== \"api\");\n  const apiEntry = entries.find(([key]) => key === \"api\");\n\n  const pluginResults = await Promise.allSettled(\n    pluginEntries.map(async ([key, pluginConfig]) => {\n      console.log(`[API] Loading plugin: ${pluginConfig.name} from ${pluginConfig.entry}`);\n      return loadApiPlugin({\n        key,\n        runtimeId: pluginConfig.name,\n        name: pluginConfig.name,\n        entry: pluginConfig.entry,\n        variables: pluginConfig.variables,\n        secrets: collectSecrets(pluginConfig, envSecrets),\n        integrity: pluginConfig.integrity,\n      });\n    }),\n  );\n\n  const plugins: LoadedPluginResult[] = [];\n  const errors: Array<{ key: string; error: string }> = [];\n\n  const pluginsClient: Record<string, unknown> = {};\n\n  pluginResults.forEach((result, index) => {\n    const [key] = pluginEntries[index] ?? [\"unknown\"];\n    if (result.status === \"fulfilled\") {\n      plugins.push(result.value);\n      pluginsClient[key] = result.value.createClient;\n    } else {\n      errors.push({\n        key,\n        error: result.reason instanceof Error ? result.reason.message : String(result.reason),\n      });\n    }\n  });\n\n  // Phase 2: Load API plugin with injected plugins client\n  let base: LoadedPluginResult | null = null;\n\n  if (apiEntry) {\n    const [key, apiConfig] = apiEntry;\n    try {\n      console.log(`[API] Loading API plugin: ${apiConfig.name} from ${apiConfig.entry}`);\n      base = await loadApiPlugin({\n        key,\n        runtimeId: apiConfig.name,\n        name: apiConfig.name,\n        entry: apiConfig.entry,\n        variables: apiConfig.variables,\n        secrets: collectSecrets(apiConfig, envSecrets),\n        integrity: apiConfig.integrity,\n        plugins: pluginsClient,\n      });\n    } catch (error) {\n      errors.push({\n        key,\n        error: error instanceof Error ? error.message : String(error),\n      });\n    }\n  }\n\n  return { base, plugins, errors };\n}\n\nexport function createStitchedRouter(baseRouter: any, plugins: LoadedPluginResult[] | null): any {\n  if (!plugins || plugins.length === 0) {\n    return baseRouter;\n  }\n\n  return plugins.reduce((router, plugin) => Object.assign(router, plugin.router), baseRouter);\n}\n"],"mappings":";;;;;;;;AAsBA,eAAsB,cAAc,MASJ;CAC9B,MAAM,wBAAwB;AAC5B,MAAI,KAAK,MAAM,SAAS,kBAAkB,CAAE,QAAO,KAAK;AACxD,MAAI,KAAK,MAAM,SAAS,oBAAoB,CAC1C,QAAO,GAAG,KAAK,MAAM,QAAQ,wBAAwB,GAAG,CAAC;AAE3D,MAAI,KAAK,MAAM,SAAS,MAAM,CAAE,QAAO,KAAK;AAC5C,SAAO,GAAG,KAAK,MAAM,QAAQ,OAAO,GAAG,CAAC;KACtC;AAEJ,KAAI,KAAK,UACP,OAAMA,kCAAgB,gBAAgB,KAAK,UAAU;AAGvD,OAAMC,oCAAyB;AAC/B,OAAMC,0BAAe;EAAE,MAAM,KAAK;EAAW,OAAO;EAAgB,CAAC;CAUrE,MAAM,SAAS,4CAR0B;EACvC,UAAU,GACP,KAAK,YAAY,EAAE,QAAQ,gBAAgB,EAC7C;EACD,SAAS,KAAK,WAAW,EAAE;EAC5B,CAAC,CAG2B,UAC3B,KAAK,WACL;EACE,WAAW,KAAK,aAAa,EAAE;EAC/B,SAAS,KAAK,WAAW,EAAE;EAC5B,EACD,KAAK,QACN;AAED,QAAO;EACL,KAAK,KAAK;EACV,MAAM,KAAK;EACX,QAAQ,OAAO;EACf,cAAc,OAAO;EACrB,UAAU;GACR,WAAW;GACX,SAAS,OAAO,SAAS;GAC1B;EACF;;AAGH,SAAS,eAAe,QAA6B,YAAqC;CACxF,MAAM,UAAkC,EAAE;AAC1C,MAAK,MAAM,OAAO,OAAO,WAAW,EAAE,EAAE;EACtC,MAAM,QAAQ,aAAa,QAAQ,QAAQ,IAAI;AAC/C,MAAI,MACF,SAAQ,OAAO;;AAGnB,QAAO;;AAGT,eAAsB,gCACpB,eACA,YAC8B;CAC9B,MAAM,UAAgD,EAAE;AAExD,KAAI,cAAc,KAAK,IACrB,SAAQ,KAAK,CAAC,OAAO,cAAc,IAAI,CAAC;AAG1C,MAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,WAAW,EAAE,CAAC,CACrE,KAAI,OAAO,IACT,SAAQ,KAAK,CAAC,KAAK,OAAO,CAAC;AAI/B,KAAI,QAAQ,WAAW,GAAG;AACxB,UAAQ,IAAI,8BAA8B;AAC1C,SAAO;GAAE,MAAM;GAAM,SAAS,EAAE;GAAE,QAAQ,EAAE;GAAE;;CAIhD,MAAM,gBAAgB,QAAQ,QAAQ,CAAC,SAAS,QAAQ,MAAM;CAC9D,MAAM,WAAW,QAAQ,MAAM,CAAC,SAAS,QAAQ,MAAM;CAEvD,MAAM,gBAAgB,MAAM,QAAQ,WAClC,cAAc,IAAI,OAAO,CAAC,KAAK,kBAAkB;AAC/C,UAAQ,IAAI,yBAAyB,aAAa,KAAK,QAAQ,aAAa,QAAQ;AACpF,SAAO,cAAc;GACnB;GACA,WAAW,aAAa;GACxB,MAAM,aAAa;GACnB,OAAO,aAAa;GACpB,WAAW,aAAa;GACxB,SAAS,eAAe,cAAc,WAAW;GACjD,WAAW,aAAa;GACzB,CAAC;GACF,CACH;CAED,MAAM,UAAgC,EAAE;CACxC,MAAM,SAAgD,EAAE;CAExD,MAAM,gBAAyC,EAAE;AAEjD,eAAc,SAAS,QAAQ,UAAU;EACvC,MAAM,CAAC,OAAO,cAAc,UAAU,CAAC,UAAU;AACjD,MAAI,OAAO,WAAW,aAAa;AACjC,WAAQ,KAAK,OAAO,MAAM;AAC1B,iBAAc,OAAO,OAAO,MAAM;QAElC,QAAO,KAAK;GACV;GACA,OAAO,OAAO,kBAAkB,QAAQ,OAAO,OAAO,UAAU,OAAO,OAAO,OAAO;GACtF,CAAC;GAEJ;CAGF,IAAI,OAAkC;AAEtC,KAAI,UAAU;EACZ,MAAM,CAAC,KAAK,aAAa;AACzB,MAAI;AACF,WAAQ,IAAI,6BAA6B,UAAU,KAAK,QAAQ,UAAU,QAAQ;AAClF,UAAO,MAAM,cAAc;IACzB;IACA,WAAW,UAAU;IACrB,MAAM,UAAU;IAChB,OAAO,UAAU;IACjB,WAAW,UAAU;IACrB,SAAS,eAAe,WAAW,WAAW;IAC9C,WAAW,UAAU;IACrB,SAAS;IACV,CAAC;WACK,OAAO;AACd,UAAO,KAAK;IACV;IACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC9D,CAAC;;;AAIN,QAAO;EAAE;EAAM;EAAS;EAAQ;;AAGlC,SAAgB,qBAAqB,YAAiB,SAA2C;AAC/F,KAAI,CAAC,WAAW,QAAQ,WAAW,EACjC,QAAO;AAGT,QAAO,QAAQ,QAAQ,QAAQ,WAAW,OAAO,OAAO,QAAQ,OAAO,OAAO,EAAE,WAAW"}