everything-dev 1.16.1 → 1.16.3

package/dist/api-contract.cjs

@@ -4,6 +4,7 @@ let node_path = require("node:path");
 let node_crypto = require("node:crypto");
 
 //#region src/api-contract.ts
+const REMOTE_FETCH_TIMEOUT_MS = 1e4;
 function sha256(input) {
 	return (0, node_crypto.createHash)("sha256").update(input).digest("hex");
 }
@@ -27,8 +28,20 @@ function writeFileIfChanged(filePath, content) {
 function getApiPluginManifestUrl(apiBaseUrl) {
 	return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;
 }
+async function fetchWithTimeout(url) {
+	const controller = new AbortController();
+	const timeout = setTimeout(() => controller.abort(), REMOTE_FETCH_TIMEOUT_MS);
+	try {
+		return await fetch(url, { signal: controller.signal });
+	} catch (error) {
+		if (error instanceof Error && error.name === "AbortError") throw new Error(`Timed out fetching ${url} after ${REMOTE_FETCH_TIMEOUT_MS}ms`);
+		throw error;
+	} finally {
+		clearTimeout(timeout);
+	}
+}
 async function fetchApiPluginManifest(apiBaseUrl) {
-	const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));
+	const response = await fetchWithTimeout(getApiPluginManifestUrl(apiBaseUrl));
 	if (!response.ok) throw new Error(`Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`);
 	const manifest = await response.json();
 	if (manifest.schemaVersion !== 1 || manifest.kind !== "every-plugin/manifest") throw new Error("Unsupported API plugin manifest format");
@@ -51,8 +64,7 @@ function localAuthContractSource(configDir) {
 async function remoteContractSource(opts) {
 	const manifest = await fetchApiPluginManifest(opts.baseUrl);
 	if (!manifest.contract) throw new Error(`Plugin manifest for ${manifest.plugin.name} does not advertise contract types`);
-	const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\.\//, "")}`;
-	const contractResponse = await fetch(contractUrl);
+	const contractResponse = await fetchWithTimeout(`${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\.\//, "")}`);
 	if (!contractResponse.ok) throw new Error(`Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`);
 	const contractTypes = await contractResponse.text();
 	if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) throw new Error("Fetched contract types failed checksum verification");
@@ -70,8 +82,7 @@ async function fetchAuthExportTypes(opts) {
 	if (!opts.manifest.additionalExports || opts.manifest.additionalExports.length === 0) return null;
 	const authExportEntry = opts.manifest.additionalExports.find((entry) => entry.path.includes("auth-export") || entry.path.endsWith("auth-export.d.ts"));
 	if (!authExportEntry) return null;
-	const exportUrl = `${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\.\//, "")}`;
-	const response = await fetch(exportUrl);
+	const response = await fetchWithTimeout(`${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\.\//, "")}`);
 	if (!response.ok) {
 		console.warn(`[API Contract] Failed to fetch auth export types: ${response.status}`);
 		return null;

package/dist/api-contract.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"api-contract.cjs","names":[],"sources":["../src/api-contract.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative } from \"node:path\";\nimport type { RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nexport interface ApiPluginManifest {\n  schemaVersion: 1;\n  kind: \"every-plugin/manifest\";\n  plugin: {\n    name: string;\n    version: string;\n  };\n  runtime: {\n    remoteEntry: string;\n  };\n  contract?: {\n    kind: \"orpc\";\n    types: {\n      path: string;\n      exportName: string;\n      typeName: string;\n      sha256?: string;\n    };\n  };\n  additionalExports?: Array<{\n    path: string;\n    exports: string[];\n    sha256?: string;\n  }>;\n}\n\ninterface ContractSource {\n  key: string;\n  importName: string;\n  sourceFilePath: string;\n  generatedPath?: string;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction trimTrailingSlash(input: string): string {\n  return input.replace(/\\/$/, \"\");\n}\n\nfunction sanitizeIdentifier(input: string): string {\n  return input.replace(/[^A-Za-z0-9_]/g, \"_\").replace(/^[^A-Za-z_]+/, \"_\");\n}\n\nfunction toImportPath(fromFile: string, targetFile: string): string {\n  const rel = relative(dirname(fromFile), targetFile).replace(/\\\\/g, \"/\");\n  return rel.startsWith(\".\") ? rel : `./${rel}`;\n}\n\nfunction writeFileIfChanged(filePath: string, content: string) {\n  try {\n    if (readFileSync(filePath, \"utf8\") === content) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, content);\n  return true;\n}\n\nfunction getApiPluginManifestUrl(apiBaseUrl: string): string {\n  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;\n}\n\nasync function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {\n  const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`,\n    );\n  }\n\n  const manifest = (await response.json()) as ApiPluginManifest;\n  if (manifest.schemaVersion !== 1 || manifest.kind !== \"every-plugin/manifest\") {\n    throw new Error(\"Unsupported API plugin manifest format\");\n  }\n\n  return manifest;\n}\n\nfunction localApiContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"api\", \"src\", \"contract.ts\");\n  return {\n    key: \"api\",\n    importName: \"BaseApiContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nfunction localAuthContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"plugins\", \"auth\", \"src\", \"contract.ts\");\n  return {\n    key: \"auth\",\n    importName: \"authContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nasync function remoteContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  name: string;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  const manifest = await fetchApiPluginManifest(opts.baseUrl);\n  if (!manifest.contract) {\n    throw new Error(\n      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,\n    );\n  }\n\n  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\\.\\//, \"\")}`;\n  const contractResponse = await fetch(contractUrl);\n  if (!contractResponse.ok) {\n    throw new Error(\n      `Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`,\n    );\n  }\n\n  const contractTypes = await contractResponse.text();\n  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {\n    throw new Error(\"Fetched contract types failed checksum verification\");\n  }\n\n  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, \"contract.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, contractTypes);\n\n  return {\n    key: opts.name,\n    importName: `${sanitizeIdentifier(opts.name)}Contract`,\n    sourceFilePath: generatedPath,\n    generatedPath,\n  };\n}\n\nasync function fetchAuthExportTypes(opts: {\n  baseUrl: string;\n  runtimeDir: string;\n  manifest: ApiPluginManifest;\n}): Promise<string | null> {\n  if (!opts.manifest.additionalExports || opts.manifest.additionalExports.length === 0) {\n    return null;\n  }\n\n  const authExportEntry = opts.manifest.additionalExports.find(\n    (entry) => entry.path.includes(\"auth-export\") || entry.path.endsWith(\"auth-export.d.ts\"),\n  );\n\n  if (!authExportEntry) {\n    return null;\n  }\n\n  const exportUrl = `${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\\.\\//, \"\")}`;\n  const response = await fetch(exportUrl);\n  if (!response.ok) {\n    console.warn(`[API Contract] Failed to fetch auth export types: ${response.status}`);\n    return null;\n  }\n\n  const content = await response.text();\n  if (authExportEntry.sha256 && authExportEntry.sha256 !== sha256(content)) {\n    console.warn(\"[API Contract] Auth export types checksum mismatch\");\n    return null;\n  }\n\n  const generatedPath = join(opts.runtimeDir, \"auth\", \"auth-export.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, content);\n\n  return generatedPath;\n}\n\nfunction writeAuthTypesGen(targetPath: string, authExportPath: string) {\n  const exportImportPath = toImportPath(targetPath, authExportPath);\n  const content = [\n    `export type {`,\n    `  Auth,`,\n    `  AuthOrganizationContext,`,\n    `  AuthOrganization,`,\n    `  AuthOrganizationSummary,`,\n    `  AuthOrganizationMember,`,\n    `  AuthApiKey,`,\n    `  AuthInvitation,`,\n    `  GetActiveMemberInput,`,\n    `  GetOrganizationInput,`,\n    `  ListMembersInput,`,\n    `  ListInvitationsInput,`,\n    `  ListApiKeysInput,`,\n    `  AuthServices,`,\n    `  createAuthInstance,`,\n    `} from \"${exportImportPath}\";`,\n    `import type { InferOutput, ContractType as AuthContract } from \"${toImportPath(targetPath, join(dirname(authExportPath), \"contract.d.ts\"))}\";`,\n    `import type { Auth as BaseAuth } from \"${exportImportPath}\";`,\n    \"\",\n    'type RawAuthSession = InferOutput<\"getSession\">;',\n    'type RawAuthRequestContext = InferOutput<\"getContext\">;',\n    'type RawAuthActiveMember = InferOutput<\"getActiveMember\">;',\n    \"\",\n    'export type AuthSessionUser = NonNullable<RawAuthSession[\"user\"]> & {',\n    \"  role?: string | null;\",\n    \"  isAnonymous?: boolean | null;\",\n    \"  walletAddress?: string | null;\",\n    \"  banned?: boolean | null;\",\n    \"};\",\n    'export type AuthSessionData = NonNullable<RawAuthSession[\"session\"]> & {',\n    \"  activeOrganizationId?: string | null;\",\n    \"};\",\n    \"export type AuthSession = {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  session: AuthSessionData | null;\",\n    \"};\",\n    \"export type AuthRequestContext = RawAuthRequestContext;\",\n    \"export type AuthActiveMember = RawAuthActiveMember;\",\n    'export type AuthBaseSession = BaseAuth[\"$Infer\"][\"Session\"];',\n    \"export type AuthContractType = AuthContract;\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nfunction writeFallbackAuthTypesGen(targetPath: string) {\n  const content = [\n    'import type { Auth } from \"better-auth\";',\n    'export type { Auth } from \"better-auth\";',\n    'export type AuthSession = Auth[\"$Infer\"][\"Session\"];',\n    \"export type AuthSessionData = AuthSession;\",\n    'export type AuthSessionUser = NonNullable<AuthSession[\"user\"]>;',\n    \"export interface AuthOrganizationContext {\",\n    \"  activeOrganizationId: string | null;\",\n    \"  organization: { id: string; name: string; slug: string; logo?: string | null; metadata?: Record<string, unknown> } | null;\",\n    \"  member: { id: string; role: string } | null;\",\n    \"  isPersonal: boolean;\",\n    \"  hasOrganization: boolean;\",\n    \"}\",\n    \"export interface AuthRequestContext {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  userId: string | null;\",\n    \"  isAuthenticated: boolean;\",\n    '  authMethod: \"session\" | \"apiKey\" | \"anonymous\" | \"none\";',\n    \"  near: {\",\n    \"    primaryAccountId: string | null;\",\n    \"    linkedAccounts: Array<{ accountId: string; network: string; publicKey: string; isPrimary: boolean }>;\",\n    \"    hasNearAccount: boolean;\",\n    \"  };\",\n    \"  organization: AuthOrganizationContext;\",\n    \"  organizations?: Array<{ id: string; role: string; name?: string; slug?: string }>;\",\n    \"}\",\n    \"export type AuthActiveMember = { id: string | null; role: string | null; organizationId: string | null };\",\n    \"export type AuthOrganization = {\",\n    \"  id: string;\",\n    \"  name: string;\",\n    \"  slug: string;\",\n    \"  logo?: string | null;\",\n    \"  metadata?: Record<string, unknown> | null;\",\n    \"  createdAt: Date;\",\n    \"};\",\n    'export type AuthOrganizationSummary = NonNullable<AuthOrganizationContext[\"organization\"]>;',\n    'export type AuthOrganizationMember = NonNullable<AuthOrganizationContext[\"member\"]>;',\n    \"export type AuthApiKey = {\",\n    \"  id: string;\",\n    \"  name: string | null;\",\n    \"  prefix: string | null;\",\n    \"  start: string | null;\",\n    \"  expiresAt: Date | null;\",\n    \"  createdAt: Date;\",\n    \"  updatedAt: Date;\",\n    \"  metadata: unknown | null;\",\n    \"  permissions: Record<string, string[]> | null;\",\n    \"};\",\n    \"export type AuthInvitation = {\",\n    \"  id: string;\",\n    \"  organizationId: string;\",\n    \"  email: string;\",\n    \"  role: string | null;\",\n    \"  status: string;\",\n    \"  expiresAt: Date;\",\n    \"  inviterId: string;\",\n    \"};\",\n    \"export type GetActiveMemberInput = { organizationId?: string };\",\n    \"export type GetOrganizationInput = { id: string };\",\n    \"export type ListMembersInput = { organizationId: string };\",\n    \"export type ListInvitationsInput = { organizationId: string };\",\n    \"export type ListApiKeysInput = { organizationId?: string };\",\n    \"export type createAuthInstance = never;\",\n    \"export interface AuthServices {\",\n    \"  auth: Auth;\",\n    \"  db: unknown;\",\n    \"  driver: { close(): Promise<void> };\",\n    \"  handler: (req: Request) => Promise<Response>;\",\n    \"}\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nasync function resolveContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  key: string;\n  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;\n  baseUrl: string;\n  generatedSubdir: string;\n  localSourceFactory?: (configDir: string) => ContractSource;\n}): Promise<ContractSource> {\n  if (opts.key === \"api\") {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"BaseApiContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return localApiContractSource(opts.configDir);\n    }\n  }\n\n  if (opts.key === \"auth\" && opts.localSourceFactory) {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"authContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return opts.localSourceFactory(opts.configDir);\n    }\n  }\n\n  if (\n    opts.source &&\n    \"localPath\" in opts.source &&\n    opts.source.localPath != null &&\n    opts.source.localPath !== \"\"\n  ) {\n    return {\n      key: opts.key,\n      importName: `${sanitizeIdentifier(opts.key)}Contract`,\n      sourceFilePath: join(opts.source.localPath, \"src\", \"contract.ts\"),\n    };\n  }\n\n  return remoteContractSource({\n    configDir: opts.configDir,\n    runtimeDir: opts.runtimeDir,\n    name: opts.key,\n    baseUrl: opts.baseUrl,\n    generatedSubdir: opts.generatedSubdir,\n  });\n}\n\nfunction writeGeneratedFiles(opts: {\n  configDir: string;\n  sources: ContractSource[];\n  pluginKeys: string[];\n  authSource: ContractSource | null;\n  authExportPath?: string | null;\n}) {\n  const baseSource = opts.sources.find((source) => source.key === \"api\");\n  const pluginSources = opts.pluginKeys\n    .map((key) => opts.sources.find((entry) => entry.key === key))\n    .filter((source): source is ContractSource => Boolean(source));\n\n  if (!baseSource) {\n    throw new Error(\"API contract source is required to generate the aggregate contract\");\n  }\n\n  // --- Generate ui/src/lib/api-types.gen.ts ---\n  const uiContractPath = join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\");\n  const uiLines: string[] = [];\n\n  for (const source of opts.sources) {\n    const importPath = toImportPath(uiContractPath, source.sourceFilePath);\n    uiLines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  uiLines.push(\"\");\n\n  const compositeParts: string[] = [];\n  if (opts.authSource) {\n    compositeParts.push(`auth: ${opts.authSource.importName}`);\n  }\n  for (const source of pluginSources) {\n    const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);\n    compositeParts.push(`${key}: ${source.importName}`);\n  }\n\n  if (compositeParts.length === 0) {\n    uiLines.push(`export type ApiContract = ${baseSource.importName};`);\n  } else {\n    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);\n    for (const part of compositeParts) {\n      uiLines.push(`  ${part};`);\n    }\n    uiLines.push(\"};\");\n  }\n  mkdirSync(dirname(uiContractPath), { recursive: true });\n  writeFileIfChanged(uiContractPath, `${uiLines.join(\"\\n\")}\\n`);\n\n  // --- Generate api/src/lib/plugins-types.gen.ts ---\n  // Includes both plugin contracts AND auth as a unified PluginsClient type\n  const pluginsClientPath = join(opts.configDir, \"api\", \"src\", \"lib\", \"plugins-types.gen.ts\");\n  const pluginsClientLines: string[] = [];\n\n  for (const source of pluginSources) {\n    const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${source.importName} } from \"${importPath}\";`,\n    );\n  }\n\n  if (opts.authSource) {\n    const authImportPath = toImportPath(pluginsClientPath, opts.authSource.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${opts.authSource.importName} } from \"${authImportPath}\";`,\n    );\n  }\n\n  pluginsClientLines.push(\n    'import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";',\n  );\n  pluginsClientLines.push(\n    \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n  );\n  pluginsClientLines.push(\"\");\n\n  const allPluginSources = [...pluginSources];\n  if (opts.authSource) {\n    allPluginSources.push({ ...opts.authSource, key: \"auth\" });\n  }\n\n  if (allPluginSources.length === 0) {\n    pluginsClientLines.push(\"export type PluginsClient = Record<string, never>;\");\n  } else {\n    pluginsClientLines.push(\"export type PluginsClient = {\");\n    for (const source of allPluginSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n    }\n    pluginsClientLines.push(\"};\");\n  }\n\n  mkdirSync(dirname(pluginsClientPath), { recursive: true });\n  writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join(\"\\n\")}\\n`);\n\n  // --- Generate */src/lib/auth-types.gen.ts ---\n  const authTypeTargets = [join(opts.configDir, \"ui\", \"src\", \"lib\", \"auth-types.gen.ts\")];\n  const apiLibDir = join(opts.configDir, \"api\", \"src\", \"lib\");\n  if (existsSync(apiLibDir)) {\n    authTypeTargets.push(join(apiLibDir, \"auth-types.gen.ts\"));\n  }\n  const hostLibDir = join(opts.configDir, \"host\", \"src\", \"lib\");\n  if (existsSync(join(opts.configDir, \"host\", \"src\"))) {\n    authTypeTargets.push(join(hostLibDir, \"auth-types.gen.ts\"));\n  }\n\n  if (opts.authExportPath) {\n    for (const authTypesPath of authTypeTargets) {\n      writeAuthTypesGen(authTypesPath, opts.authExportPath);\n    }\n  } else if (opts.authSource) {\n    for (const authTypesPath of authTypeTargets) {\n      writeFallbackAuthTypesGen(authTypesPath);\n    }\n  }\n\n  return uiContractPath;\n}\n\nexport async function syncApiContractBridge(opts: {\n  configDir: string;\n  runtimeConfig: RuntimeConfig;\n  apiBaseUrl: string;\n}): Promise<{\n  bridgePath: string;\n  generatedPath: string | null;\n  manifest: ApiPluginManifest | null;\n  source: \"local\" | \"remote\";\n}> {\n  const runtimeDir = join(opts.configDir, \".bos\", \"generated\");\n  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>\n    a.localeCompare(b),\n  );\n  const sources: ContractSource[] = [];\n  let manifest: ApiPluginManifest | null = null;\n  let generatedPath: string | null = null;\n  let authSource: ContractSource | null = null;\n  let authExportPath: string | null = null;\n\n  const baseSource = await resolveContractSource({\n    configDir: opts.configDir,\n    runtimeDir,\n    key: \"api\",\n    source: opts.runtimeConfig.api,\n    baseUrl: opts.apiBaseUrl,\n    generatedSubdir: \"api\",\n  });\n  sources.push(baseSource);\n\n  if (opts.runtimeConfig.auth) {\n    authSource = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key: \"auth\",\n      source: opts.runtimeConfig.auth,\n      baseUrl: opts.runtimeConfig.auth.url,\n      generatedSubdir: \"auth\",\n      localSourceFactory: localAuthContractSource,\n    });\n    sources.push(authSource);\n    if (authSource.generatedPath) {\n      generatedPath = authSource.generatedPath;\n    }\n\n    // Fetch auth additional exports (auth-export.d.ts) for remote auth\n    if (opts.runtimeConfig.auth.url && opts.runtimeConfig.auth.source !== \"local\") {\n      try {\n        const authManifest = await fetchApiPluginManifest(opts.runtimeConfig.auth.url);\n        const fetchedAuthExportPath = await fetchAuthExportTypes({\n          baseUrl: opts.runtimeConfig.auth.url,\n          runtimeDir,\n          manifest: authManifest,\n        });\n        if (fetchedAuthExportPath) {\n          authExportPath = fetchedAuthExportPath;\n        }\n      } catch (error) {\n        console.warn(\n          `[API Contract] Failed to fetch auth additional exports: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    }\n\n    if (!authExportPath) {\n      const localAuthExport = join(opts.configDir, \"plugins\", \"auth\", \"src\", \"auth-export.ts\");\n      if (existsSync(localAuthExport)) {\n        authExportPath = localAuthExport;\n      } else {\n        const generatedAuthExport = join(runtimeDir, \"auth\", \"auth-export.d.ts\");\n        if (existsSync(generatedAuthExport)) {\n          authExportPath = generatedAuthExport;\n        }\n      }\n    }\n  }\n\n  for (const [key, plugin] of pluginEntries) {\n    if (!plugin.url && !plugin.localPath) {\n      console.warn(\n        `[API Contract] Skipping plugin \"${key}\" — no URL resolved (local path missing and no production URL configured)`,\n      );\n      continue;\n    }\n    const source = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key,\n      source: plugin,\n      baseUrl: plugin.url,\n      generatedSubdir: `plugins/${key}`,\n    });\n    sources.push(source);\n    if (source.generatedPath) {\n      generatedPath = source.generatedPath;\n    }\n  }\n\n  const allPluginKeys = pluginEntries.map(([key]) => key);\n\n  writeGeneratedFiles({\n    configDir: opts.configDir,\n    sources,\n    pluginKeys: allPluginKeys,\n    authSource,\n    authExportPath,\n  });\n\n  if (opts.runtimeConfig.api.source !== \"local\") {\n    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);\n  }\n\n  return {\n    bridgePath: join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\"),\n    generatedPath,\n    manifest,\n    source: opts.runtimeConfig.api.source,\n  };\n}\n"],"mappings":";;;;;;AAsCA,SAAS,OAAO,OAAuB;AACrC,oCAAkB,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAGzD,SAAS,kBAAkB,OAAuB;AAChD,QAAO,MAAM,QAAQ,OAAO,GAAG;;AAGjC,SAAS,mBAAmB,OAAuB;AACjD,QAAO,MAAM,QAAQ,kBAAkB,IAAI,CAAC,QAAQ,gBAAgB,IAAI;;AAG1E,SAAS,aAAa,UAAkB,YAA4B;CAClE,MAAM,qDAAuB,SAAS,EAAE,WAAW,CAAC,QAAQ,OAAO,IAAI;AACvE,QAAO,IAAI,WAAW,IAAI,GAAG,MAAM,KAAK;;AAG1C,SAAS,mBAAmB,UAAkB,SAAiB;AAC7D,KAAI;AACF,gCAAiB,UAAU,OAAO,KAAK,QAAS,QAAO;SACjD;AAIR,4BAAc,UAAU,QAAQ;AAChC,QAAO;;AAGT,SAAS,wBAAwB,YAA4B;AAC3D,QAAO,GAAG,kBAAkB,WAAW,CAAC;;AAG1C,eAAe,uBAAuB,YAAgD;CACpF,MAAM,WAAW,MAAM,MAAM,wBAAwB,WAAW,CAAC;AACjE,KAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MACR,wCAAwC,SAAS,OAAO,GAAG,SAAS,aACrE;CAGH,MAAM,WAAY,MAAM,SAAS,MAAM;AACvC,KAAI,SAAS,kBAAkB,KAAK,SAAS,SAAS,wBACpD,OAAM,IAAI,MAAM,yCAAyC;AAG3D,QAAO;;AAGT,SAAS,uBAAuB,WAAmC;AAEjE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,oCAJsB,WAAW,OAAO,OAAO,cAAc;EAK9D;;AAGH,SAAS,wBAAwB,WAAmC;AAElE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,oCAJsB,WAAW,WAAW,QAAQ,OAAO,cAAc;EAK1E;;AAGH,eAAe,qBAAqB,MAMR;CAC1B,MAAM,WAAW,MAAM,uBAAuB,KAAK,QAAQ;AAC3D,KAAI,CAAC,SAAS,SACZ,OAAM,IAAI,MACR,uBAAuB,SAAS,OAAO,KAAK,oCAC7C;CAGH,MAAM,cAAc,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,SAAS,SAAS,MAAM,KAAK,QAAQ,SAAS,GAAG;CAC3G,MAAM,mBAAmB,MAAM,MAAM,YAAY;AACjD,KAAI,CAAC,iBAAiB,GACpB,OAAM,IAAI,MACR,mCAAmC,iBAAiB,OAAO,GAAG,iBAAiB,aAChF;CAGH,MAAM,gBAAgB,MAAM,iBAAiB,MAAM;AACnD,KAAI,SAAS,SAAS,MAAM,UAAU,SAAS,SAAS,MAAM,WAAW,OAAO,cAAc,CAC5F,OAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,oCAAqB,KAAK,YAAY,KAAK,iBAAiB,gBAAgB;AAClF,+CAAkB,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,cAAc;AAEhD,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,KAAK,CAAC;EAC7C,gBAAgB;EAChB;EACD;;AAGH,eAAe,qBAAqB,MAIT;AACzB,KAAI,CAAC,KAAK,SAAS,qBAAqB,KAAK,SAAS,kBAAkB,WAAW,EACjF,QAAO;CAGT,MAAM,kBAAkB,KAAK,SAAS,kBAAkB,MACrD,UAAU,MAAM,KAAK,SAAS,cAAc,IAAI,MAAM,KAAK,SAAS,mBAAmB,CACzF;AAED,KAAI,CAAC,gBACH,QAAO;CAGT,MAAM,YAAY,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,gBAAgB,KAAK,QAAQ,SAAS,GAAG;CACjG,MAAM,WAAW,MAAM,MAAM,UAAU;AACvC,KAAI,CAAC,SAAS,IAAI;AAChB,UAAQ,KAAK,qDAAqD,SAAS,SAAS;AACpF,SAAO;;CAGT,MAAM,UAAU,MAAM,SAAS,MAAM;AACrC,KAAI,gBAAgB,UAAU,gBAAgB,WAAW,OAAO,QAAQ,EAAE;AACxE,UAAQ,KAAK,qDAAqD;AAClE,SAAO;;CAGT,MAAM,oCAAqB,KAAK,YAAY,QAAQ,mBAAmB;AACvE,+CAAkB,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,QAAQ;AAE1C,QAAO;;AAGT,SAAS,kBAAkB,YAAoB,gBAAwB;CACrE,MAAM,mBAAmB,aAAa,YAAY,eAAe;CACjE,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,iBAAiB;EAC5B,mEAAmE,aAAa,uDAAyB,eAAe,EAAE,gBAAgB,CAAC,CAAC;EAC5I,0CAA0C,iBAAiB;EAC3D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;AACZ,+CAAkB,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,oBAAmB,YAAY,QAAQ;;AAGzC,SAAS,0BAA0B,YAAoB;CACrD,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;AACZ,+CAAkB,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,oBAAmB,YAAY,QAAQ;;AAGzC,eAAe,sBAAsB,MAQT;AAC1B,KAAI,KAAK,QAAQ,OAAO;EACtB,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,aAAa,QAAQ,cAAc,GACrC,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,oCAAqB,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,uBAAuB,KAAK,UAAU;;AAIjD,KAAI,KAAK,QAAQ,UAAU,KAAK,oBAAoB;EAClD,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,aAAa,QAAQ,cAAc,GACrC,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,oCAAqB,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,KAAK,mBAAmB,KAAK,UAAU;;AAIlD,KACE,KAAK,UACL,eAAe,KAAK,UACpB,KAAK,OAAO,aAAa,QACzB,KAAK,OAAO,cAAc,GAE1B,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,IAAI,CAAC;EAC5C,oCAAqB,KAAK,OAAO,WAAW,OAAO,cAAc;EAClE;AAGH,QAAO,qBAAqB;EAC1B,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,SAAS,KAAK;EACd,iBAAiB,KAAK;EACvB,CAAC;;AAGJ,SAAS,oBAAoB,MAM1B;CACD,MAAM,aAAa,KAAK,QAAQ,MAAM,WAAW,OAAO,QAAQ,MAAM;CACtE,MAAM,gBAAgB,KAAK,WACxB,KAAK,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAM,QAAQ,IAAI,CAAC,CAC7D,QAAQ,WAAqC,QAAQ,OAAO,CAAC;AAEhE,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,qEAAqE;CAIvF,MAAM,qCAAsB,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB;CACnF,MAAM,UAAoB,EAAE;AAE5B,MAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,aAAa,aAAa,gBAAgB,OAAO,eAAe;AACtE,UAAQ,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAAI;;AAG5F,SAAQ,KAAK,GAAG;CAEhB,MAAM,iBAA2B,EAAE;AACnC,KAAI,KAAK,WACP,gBAAe,KAAK,SAAS,KAAK,WAAW,aAAa;AAE5D,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAAG,OAAO,MAAM,KAAK,UAAU,OAAO,IAAI;AAC9F,iBAAe,KAAK,GAAG,IAAI,IAAI,OAAO,aAAa;;AAGrD,KAAI,eAAe,WAAW,EAC5B,SAAQ,KAAK,6BAA6B,WAAW,WAAW,GAAG;MAC9D;AACL,UAAQ,KAAK,6BAA6B,WAAW,WAAW,MAAM;AACtE,OAAK,MAAM,QAAQ,eACjB,SAAQ,KAAK,KAAK,KAAK,GAAG;AAE5B,UAAQ,KAAK,KAAK;;AAEpB,+CAAkB,eAAe,EAAE,EAAE,WAAW,MAAM,CAAC;AACvD,oBAAmB,gBAAgB,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI;CAI7D,MAAM,wCAAyB,KAAK,WAAW,OAAO,OAAO,OAAO,uBAAuB;CAC3F,MAAM,qBAA+B,EAAE;AAEvC,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,aAAa,aAAa,mBAAmB,OAAO,eAAe;AACzE,qBAAmB,KACjB,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAC1E;;AAGH,KAAI,KAAK,YAAY;EACnB,MAAM,iBAAiB,aAAa,mBAAmB,KAAK,WAAW,eAAe;AACtF,qBAAmB,KACjB,iCAAiC,KAAK,WAAW,WAAW,WAAW,eAAe,IACvF;;AAGH,oBAAmB,KACjB,mFACD;AACD,oBAAmB,KACjB,oHACD;AACD,oBAAmB,KAAK,GAAG;CAE3B,MAAM,mBAAmB,CAAC,GAAG,cAAc;AAC3C,KAAI,KAAK,WACP,kBAAiB,KAAK;EAAE,GAAG,KAAK;EAAY,KAAK;EAAQ,CAAC;AAG5D,KAAI,iBAAiB,WAAW,EAC9B,oBAAmB,KAAK,qDAAqD;MACxE;AACL,qBAAmB,KAAK,gCAAgC;AACxD,OAAK,MAAM,UAAU,kBAAkB;GACrC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAChD,OAAO,MACP,KAAK,UAAU,OAAO,IAAI;AAC9B,sBAAmB,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,IAAI;;AAE3E,qBAAmB,KAAK,KAAK;;AAG/B,+CAAkB,kBAAkB,EAAE,EAAE,WAAW,MAAM,CAAC;AAC1D,oBAAmB,mBAAmB,GAAG,mBAAmB,KAAK,KAAK,CAAC,IAAI;CAG3E,MAAM,kBAAkB,qBAAM,KAAK,WAAW,MAAM,OAAO,OAAO,oBAAoB,CAAC;CACvF,MAAM,gCAAiB,KAAK,WAAW,OAAO,OAAO,MAAM;AAC3D,6BAAe,UAAU,CACvB,iBAAgB,yBAAU,WAAW,oBAAoB,CAAC;CAE5D,MAAM,iCAAkB,KAAK,WAAW,QAAQ,OAAO,MAAM;AAC7D,iDAAoB,KAAK,WAAW,QAAQ,MAAM,CAAC,CACjD,iBAAgB,yBAAU,YAAY,oBAAoB,CAAC;AAG7D,KAAI,KAAK,eACP,MAAK,MAAM,iBAAiB,gBAC1B,mBAAkB,eAAe,KAAK,eAAe;UAE9C,KAAK,WACd,MAAK,MAAM,iBAAiB,gBAC1B,2BAA0B,cAAc;AAI5C,QAAO;;AAGT,eAAsB,sBAAsB,MASzC;CACD,MAAM,iCAAkB,KAAK,WAAW,QAAQ,YAAY;CAC5D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,cAAc,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OACjF,EAAE,cAAc,EAAE,CACnB;CACD,MAAM,UAA4B,EAAE;CACpC,IAAI,WAAqC;CACzC,IAAI,gBAA+B;CACnC,IAAI,aAAoC;CACxC,IAAI,iBAAgC;CAEpC,MAAM,aAAa,MAAM,sBAAsB;EAC7C,WAAW,KAAK;EAChB;EACA,KAAK;EACL,QAAQ,KAAK,cAAc;EAC3B,SAAS,KAAK;EACd,iBAAiB;EAClB,CAAC;AACF,SAAQ,KAAK,WAAW;AAExB,KAAI,KAAK,cAAc,MAAM;AAC3B,eAAa,MAAM,sBAAsB;GACvC,WAAW,KAAK;GAChB;GACA,KAAK;GACL,QAAQ,KAAK,cAAc;GAC3B,SAAS,KAAK,cAAc,KAAK;GACjC,iBAAiB;GACjB,oBAAoB;GACrB,CAAC;AACF,UAAQ,KAAK,WAAW;AACxB,MAAI,WAAW,cACb,iBAAgB,WAAW;AAI7B,MAAI,KAAK,cAAc,KAAK,OAAO,KAAK,cAAc,KAAK,WAAW,QACpE,KAAI;GACF,MAAM,eAAe,MAAM,uBAAuB,KAAK,cAAc,KAAK,IAAI;GAC9E,MAAM,wBAAwB,MAAM,qBAAqB;IACvD,SAAS,KAAK,cAAc,KAAK;IACjC;IACA,UAAU;IACX,CAAC;AACF,OAAI,sBACF,kBAAiB;WAEZ,OAAO;AACd,WAAQ,KACN,2DAA2D,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAClH;;AAIL,MAAI,CAAC,gBAAgB;GACnB,MAAM,sCAAuB,KAAK,WAAW,WAAW,QAAQ,OAAO,iBAAiB;AACxF,+BAAe,gBAAgB,CAC7B,kBAAiB;QACZ;IACL,MAAM,0CAA2B,YAAY,QAAQ,mBAAmB;AACxE,gCAAe,oBAAoB,CACjC,kBAAiB;;;;AAMzB,MAAK,MAAM,CAAC,KAAK,WAAW,eAAe;AACzC,MAAI,CAAC,OAAO,OAAO,CAAC,OAAO,WAAW;AACpC,WAAQ,KACN,mCAAmC,IAAI,2EACxC;AACD;;EAEF,MAAM,SAAS,MAAM,sBAAsB;GACzC,WAAW,KAAK;GAChB;GACA;GACA,QAAQ;GACR,SAAS,OAAO;GAChB,iBAAiB,WAAW;GAC7B,CAAC;AACF,UAAQ,KAAK,OAAO;AACpB,MAAI,OAAO,cACT,iBAAgB,OAAO;;CAI3B,MAAM,gBAAgB,cAAc,KAAK,CAAC,SAAS,IAAI;AAEvD,qBAAoB;EAClB,WAAW,KAAK;EAChB;EACA,YAAY;EACZ;EACA;EACD,CAAC;AAEF,KAAI,KAAK,cAAc,IAAI,WAAW,QACpC,YAAW,MAAM,uBAAuB,KAAK,WAAW;AAG1D,QAAO;EACL,gCAAiB,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB;EACxE;EACA;EACA,QAAQ,KAAK,cAAc,IAAI;EAChC"}
+{"version":3,"file":"api-contract.cjs","names":[],"sources":["../src/api-contract.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative } from \"node:path\";\nimport type { RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nconst REMOTE_FETCH_TIMEOUT_MS = 10_000;\n\nexport interface ApiPluginManifest {\n  schemaVersion: 1;\n  kind: \"every-plugin/manifest\";\n  plugin: {\n    name: string;\n    version: string;\n  };\n  runtime: {\n    remoteEntry: string;\n  };\n  contract?: {\n    kind: \"orpc\";\n    types: {\n      path: string;\n      exportName: string;\n      typeName: string;\n      sha256?: string;\n    };\n  };\n  additionalExports?: Array<{\n    path: string;\n    exports: string[];\n    sha256?: string;\n  }>;\n}\n\ninterface ContractSource {\n  key: string;\n  importName: string;\n  sourceFilePath: string;\n  generatedPath?: string;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction trimTrailingSlash(input: string): string {\n  return input.replace(/\\/$/, \"\");\n}\n\nfunction sanitizeIdentifier(input: string): string {\n  return input.replace(/[^A-Za-z0-9_]/g, \"_\").replace(/^[^A-Za-z_]+/, \"_\");\n}\n\nfunction toImportPath(fromFile: string, targetFile: string): string {\n  const rel = relative(dirname(fromFile), targetFile).replace(/\\\\/g, \"/\");\n  return rel.startsWith(\".\") ? rel : `./${rel}`;\n}\n\nfunction writeFileIfChanged(filePath: string, content: string) {\n  try {\n    if (readFileSync(filePath, \"utf8\") === content) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, content);\n  return true;\n}\n\nfunction getApiPluginManifestUrl(apiBaseUrl: string): string {\n  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;\n}\n\nasync function fetchWithTimeout(url: string): Promise<Response> {\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), REMOTE_FETCH_TIMEOUT_MS);\n\n  try {\n    return await fetch(url, { signal: controller.signal });\n  } catch (error) {\n    if (error instanceof Error && error.name === \"AbortError\") {\n      throw new Error(`Timed out fetching ${url} after ${REMOTE_FETCH_TIMEOUT_MS}ms`);\n    }\n    throw error;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\nasync function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {\n  const response = await fetchWithTimeout(getApiPluginManifestUrl(apiBaseUrl));\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`,\n    );\n  }\n\n  const manifest = (await response.json()) as ApiPluginManifest;\n  if (manifest.schemaVersion !== 1 || manifest.kind !== \"every-plugin/manifest\") {\n    throw new Error(\"Unsupported API plugin manifest format\");\n  }\n\n  return manifest;\n}\n\nfunction localApiContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"api\", \"src\", \"contract.ts\");\n  return {\n    key: \"api\",\n    importName: \"BaseApiContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nfunction localAuthContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"plugins\", \"auth\", \"src\", \"contract.ts\");\n  return {\n    key: \"auth\",\n    importName: \"authContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nasync function remoteContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  name: string;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  const manifest = await fetchApiPluginManifest(opts.baseUrl);\n  if (!manifest.contract) {\n    throw new Error(\n      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,\n    );\n  }\n\n  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\\.\\//, \"\")}`;\n  const contractResponse = await fetchWithTimeout(contractUrl);\n  if (!contractResponse.ok) {\n    throw new Error(\n      `Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`,\n    );\n  }\n\n  const contractTypes = await contractResponse.text();\n  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {\n    throw new Error(\"Fetched contract types failed checksum verification\");\n  }\n\n  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, \"contract.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, contractTypes);\n\n  return {\n    key: opts.name,\n    importName: `${sanitizeIdentifier(opts.name)}Contract`,\n    sourceFilePath: generatedPath,\n    generatedPath,\n  };\n}\n\nasync function fetchAuthExportTypes(opts: {\n  baseUrl: string;\n  runtimeDir: string;\n  manifest: ApiPluginManifest;\n}): Promise<string | null> {\n  if (!opts.manifest.additionalExports || opts.manifest.additionalExports.length === 0) {\n    return null;\n  }\n\n  const authExportEntry = opts.manifest.additionalExports.find(\n    (entry) => entry.path.includes(\"auth-export\") || entry.path.endsWith(\"auth-export.d.ts\"),\n  );\n\n  if (!authExportEntry) {\n    return null;\n  }\n\n  const exportUrl = `${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\\.\\//, \"\")}`;\n  const response = await fetchWithTimeout(exportUrl);\n  if (!response.ok) {\n    console.warn(`[API Contract] Failed to fetch auth export types: ${response.status}`);\n    return null;\n  }\n\n  const content = await response.text();\n  if (authExportEntry.sha256 && authExportEntry.sha256 !== sha256(content)) {\n    console.warn(\"[API Contract] Auth export types checksum mismatch\");\n    return null;\n  }\n\n  const generatedPath = join(opts.runtimeDir, \"auth\", \"auth-export.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, content);\n\n  return generatedPath;\n}\n\nfunction writeAuthTypesGen(targetPath: string, authExportPath: string) {\n  const exportImportPath = toImportPath(targetPath, authExportPath);\n  const content = [\n    `export type {`,\n    `  Auth,`,\n    `  AuthOrganizationContext,`,\n    `  AuthOrganization,`,\n    `  AuthOrganizationSummary,`,\n    `  AuthOrganizationMember,`,\n    `  AuthApiKey,`,\n    `  AuthInvitation,`,\n    `  GetActiveMemberInput,`,\n    `  GetOrganizationInput,`,\n    `  ListMembersInput,`,\n    `  ListInvitationsInput,`,\n    `  ListApiKeysInput,`,\n    `  AuthServices,`,\n    `  createAuthInstance,`,\n    `} from \"${exportImportPath}\";`,\n    `import type { InferOutput, ContractType as AuthContract } from \"${toImportPath(targetPath, join(dirname(authExportPath), \"contract.d.ts\"))}\";`,\n    `import type { Auth as BaseAuth } from \"${exportImportPath}\";`,\n    \"\",\n    'type RawAuthSession = InferOutput<\"getSession\">;',\n    'type RawAuthRequestContext = InferOutput<\"getContext\">;',\n    'type RawAuthActiveMember = InferOutput<\"getActiveMember\">;',\n    \"\",\n    'export type AuthSessionUser = NonNullable<RawAuthSession[\"user\"]> & {',\n    \"  role?: string | null;\",\n    \"  isAnonymous?: boolean | null;\",\n    \"  walletAddress?: string | null;\",\n    \"  banned?: boolean | null;\",\n    \"};\",\n    'export type AuthSessionData = NonNullable<RawAuthSession[\"session\"]> & {',\n    \"  activeOrganizationId?: string | null;\",\n    \"};\",\n    \"export type AuthSession = {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  session: AuthSessionData | null;\",\n    \"};\",\n    \"export type AuthRequestContext = RawAuthRequestContext;\",\n    \"export type AuthActiveMember = RawAuthActiveMember;\",\n    'export type AuthBaseSession = BaseAuth[\"$Infer\"][\"Session\"];',\n    \"export type AuthContractType = AuthContract;\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nfunction writeFallbackAuthTypesGen(targetPath: string) {\n  const content = [\n    'import type { Auth } from \"better-auth\";',\n    'export type { Auth } from \"better-auth\";',\n    'export type AuthSession = Auth[\"$Infer\"][\"Session\"];',\n    \"export type AuthSessionData = AuthSession;\",\n    'export type AuthSessionUser = NonNullable<AuthSession[\"user\"]>;',\n    \"export interface AuthOrganizationContext {\",\n    \"  activeOrganizationId: string | null;\",\n    \"  organization: { id: string; name: string; slug: string; logo?: string | null; metadata?: Record<string, unknown> } | null;\",\n    \"  member: { id: string; role: string } | null;\",\n    \"  isPersonal: boolean;\",\n    \"  hasOrganization: boolean;\",\n    \"}\",\n    \"export interface AuthRequestContext {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  userId: string | null;\",\n    \"  isAuthenticated: boolean;\",\n    '  authMethod: \"session\" | \"apiKey\" | \"anonymous\" | \"none\";',\n    \"  near: {\",\n    \"    primaryAccountId: string | null;\",\n    \"    linkedAccounts: Array<{ accountId: string; network: string; publicKey: string; isPrimary: boolean }>;\",\n    \"    hasNearAccount: boolean;\",\n    \"  };\",\n    \"  organization: AuthOrganizationContext;\",\n    \"  organizations?: Array<{ id: string; role: string; name?: string; slug?: string }>;\",\n    \"}\",\n    \"export type AuthActiveMember = { id: string | null; role: string | null; organizationId: string | null };\",\n    \"export type AuthOrganization = {\",\n    \"  id: string;\",\n    \"  name: string;\",\n    \"  slug: string;\",\n    \"  logo?: string | null;\",\n    \"  metadata?: Record<string, unknown> | null;\",\n    \"  createdAt: Date;\",\n    \"};\",\n    'export type AuthOrganizationSummary = NonNullable<AuthOrganizationContext[\"organization\"]>;',\n    'export type AuthOrganizationMember = NonNullable<AuthOrganizationContext[\"member\"]>;',\n    \"export type AuthApiKey = {\",\n    \"  id: string;\",\n    \"  name: string | null;\",\n    \"  prefix: string | null;\",\n    \"  start: string | null;\",\n    \"  expiresAt: Date | null;\",\n    \"  createdAt: Date;\",\n    \"  updatedAt: Date;\",\n    \"  metadata: unknown | null;\",\n    \"  permissions: Record<string, string[]> | null;\",\n    \"};\",\n    \"export type AuthInvitation = {\",\n    \"  id: string;\",\n    \"  organizationId: string;\",\n    \"  email: string;\",\n    \"  role: string | null;\",\n    \"  status: string;\",\n    \"  expiresAt: Date;\",\n    \"  inviterId: string;\",\n    \"};\",\n    \"export type GetActiveMemberInput = { organizationId?: string };\",\n    \"export type GetOrganizationInput = { id: string };\",\n    \"export type ListMembersInput = { organizationId: string };\",\n    \"export type ListInvitationsInput = { organizationId: string };\",\n    \"export type ListApiKeysInput = { organizationId?: string };\",\n    \"export type createAuthInstance = never;\",\n    \"export interface AuthServices {\",\n    \"  auth: Auth;\",\n    \"  db: unknown;\",\n    \"  driver: { close(): Promise<void> };\",\n    \"  handler: (req: Request) => Promise<Response>;\",\n    \"}\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nasync function resolveContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  key: string;\n  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;\n  baseUrl: string;\n  generatedSubdir: string;\n  localSourceFactory?: (configDir: string) => ContractSource;\n}): Promise<ContractSource> {\n  if (opts.key === \"api\") {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"BaseApiContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return localApiContractSource(opts.configDir);\n    }\n  }\n\n  if (opts.key === \"auth\" && opts.localSourceFactory) {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"authContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return opts.localSourceFactory(opts.configDir);\n    }\n  }\n\n  if (\n    opts.source &&\n    \"localPath\" in opts.source &&\n    opts.source.localPath != null &&\n    opts.source.localPath !== \"\"\n  ) {\n    return {\n      key: opts.key,\n      importName: `${sanitizeIdentifier(opts.key)}Contract`,\n      sourceFilePath: join(opts.source.localPath, \"src\", \"contract.ts\"),\n    };\n  }\n\n  return remoteContractSource({\n    configDir: opts.configDir,\n    runtimeDir: opts.runtimeDir,\n    name: opts.key,\n    baseUrl: opts.baseUrl,\n    generatedSubdir: opts.generatedSubdir,\n  });\n}\n\nfunction writeGeneratedFiles(opts: {\n  configDir: string;\n  sources: ContractSource[];\n  pluginKeys: string[];\n  authSource: ContractSource | null;\n  authExportPath?: string | null;\n}) {\n  const baseSource = opts.sources.find((source) => source.key === \"api\");\n  const pluginSources = opts.pluginKeys\n    .map((key) => opts.sources.find((entry) => entry.key === key))\n    .filter((source): source is ContractSource => Boolean(source));\n\n  if (!baseSource) {\n    throw new Error(\"API contract source is required to generate the aggregate contract\");\n  }\n\n  // --- Generate ui/src/lib/api-types.gen.ts ---\n  const uiContractPath = join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\");\n  const uiLines: string[] = [];\n\n  for (const source of opts.sources) {\n    const importPath = toImportPath(uiContractPath, source.sourceFilePath);\n    uiLines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  uiLines.push(\"\");\n\n  const compositeParts: string[] = [];\n  if (opts.authSource) {\n    compositeParts.push(`auth: ${opts.authSource.importName}`);\n  }\n  for (const source of pluginSources) {\n    const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);\n    compositeParts.push(`${key}: ${source.importName}`);\n  }\n\n  if (compositeParts.length === 0) {\n    uiLines.push(`export type ApiContract = ${baseSource.importName};`);\n  } else {\n    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);\n    for (const part of compositeParts) {\n      uiLines.push(`  ${part};`);\n    }\n    uiLines.push(\"};\");\n  }\n  mkdirSync(dirname(uiContractPath), { recursive: true });\n  writeFileIfChanged(uiContractPath, `${uiLines.join(\"\\n\")}\\n`);\n\n  // --- Generate api/src/lib/plugins-types.gen.ts ---\n  // Includes both plugin contracts AND auth as a unified PluginsClient type\n  const pluginsClientPath = join(opts.configDir, \"api\", \"src\", \"lib\", \"plugins-types.gen.ts\");\n  const pluginsClientLines: string[] = [];\n\n  for (const source of pluginSources) {\n    const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${source.importName} } from \"${importPath}\";`,\n    );\n  }\n\n  if (opts.authSource) {\n    const authImportPath = toImportPath(pluginsClientPath, opts.authSource.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${opts.authSource.importName} } from \"${authImportPath}\";`,\n    );\n  }\n\n  pluginsClientLines.push(\n    'import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";',\n  );\n  pluginsClientLines.push(\n    \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n  );\n  pluginsClientLines.push(\"\");\n\n  const allPluginSources = [...pluginSources];\n  if (opts.authSource) {\n    allPluginSources.push({ ...opts.authSource, key: \"auth\" });\n  }\n\n  if (allPluginSources.length === 0) {\n    pluginsClientLines.push(\"export type PluginsClient = Record<string, never>;\");\n  } else {\n    pluginsClientLines.push(\"export type PluginsClient = {\");\n    for (const source of allPluginSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n    }\n    pluginsClientLines.push(\"};\");\n  }\n\n  mkdirSync(dirname(pluginsClientPath), { recursive: true });\n  writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join(\"\\n\")}\\n`);\n\n  // --- Generate */src/lib/auth-types.gen.ts ---\n  const authTypeTargets = [join(opts.configDir, \"ui\", \"src\", \"lib\", \"auth-types.gen.ts\")];\n  const apiLibDir = join(opts.configDir, \"api\", \"src\", \"lib\");\n  if (existsSync(apiLibDir)) {\n    authTypeTargets.push(join(apiLibDir, \"auth-types.gen.ts\"));\n  }\n  const hostLibDir = join(opts.configDir, \"host\", \"src\", \"lib\");\n  if (existsSync(join(opts.configDir, \"host\", \"src\"))) {\n    authTypeTargets.push(join(hostLibDir, \"auth-types.gen.ts\"));\n  }\n\n  if (opts.authExportPath) {\n    for (const authTypesPath of authTypeTargets) {\n      writeAuthTypesGen(authTypesPath, opts.authExportPath);\n    }\n  } else if (opts.authSource) {\n    for (const authTypesPath of authTypeTargets) {\n      writeFallbackAuthTypesGen(authTypesPath);\n    }\n  }\n\n  return uiContractPath;\n}\n\nexport async function syncApiContractBridge(opts: {\n  configDir: string;\n  runtimeConfig: RuntimeConfig;\n  apiBaseUrl: string;\n}): Promise<{\n  bridgePath: string;\n  generatedPath: string | null;\n  manifest: ApiPluginManifest | null;\n  source: \"local\" | \"remote\";\n}> {\n  const runtimeDir = join(opts.configDir, \".bos\", \"generated\");\n  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>\n    a.localeCompare(b),\n  );\n  const sources: ContractSource[] = [];\n  let manifest: ApiPluginManifest | null = null;\n  let generatedPath: string | null = null;\n  let authSource: ContractSource | null = null;\n  let authExportPath: string | null = null;\n\n  const baseSource = await resolveContractSource({\n    configDir: opts.configDir,\n    runtimeDir,\n    key: \"api\",\n    source: opts.runtimeConfig.api,\n    baseUrl: opts.apiBaseUrl,\n    generatedSubdir: \"api\",\n  });\n  sources.push(baseSource);\n\n  if (opts.runtimeConfig.auth) {\n    authSource = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key: \"auth\",\n      source: opts.runtimeConfig.auth,\n      baseUrl: opts.runtimeConfig.auth.url,\n      generatedSubdir: \"auth\",\n      localSourceFactory: localAuthContractSource,\n    });\n    sources.push(authSource);\n    if (authSource.generatedPath) {\n      generatedPath = authSource.generatedPath;\n    }\n\n    // Fetch auth additional exports (auth-export.d.ts) for remote auth\n    if (opts.runtimeConfig.auth.url && opts.runtimeConfig.auth.source !== \"local\") {\n      try {\n        const authManifest = await fetchApiPluginManifest(opts.runtimeConfig.auth.url);\n        const fetchedAuthExportPath = await fetchAuthExportTypes({\n          baseUrl: opts.runtimeConfig.auth.url,\n          runtimeDir,\n          manifest: authManifest,\n        });\n        if (fetchedAuthExportPath) {\n          authExportPath = fetchedAuthExportPath;\n        }\n      } catch (error) {\n        console.warn(\n          `[API Contract] Failed to fetch auth additional exports: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    }\n\n    if (!authExportPath) {\n      const localAuthExport = join(opts.configDir, \"plugins\", \"auth\", \"src\", \"auth-export.ts\");\n      if (existsSync(localAuthExport)) {\n        authExportPath = localAuthExport;\n      } else {\n        const generatedAuthExport = join(runtimeDir, \"auth\", \"auth-export.d.ts\");\n        if (existsSync(generatedAuthExport)) {\n          authExportPath = generatedAuthExport;\n        }\n      }\n    }\n  }\n\n  for (const [key, plugin] of pluginEntries) {\n    if (!plugin.url && !plugin.localPath) {\n      console.warn(\n        `[API Contract] Skipping plugin \"${key}\" — no URL resolved (local path missing and no production URL configured)`,\n      );\n      continue;\n    }\n    const source = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key,\n      source: plugin,\n      baseUrl: plugin.url,\n      generatedSubdir: `plugins/${key}`,\n    });\n    sources.push(source);\n    if (source.generatedPath) {\n      generatedPath = source.generatedPath;\n    }\n  }\n\n  const allPluginKeys = pluginEntries.map(([key]) => key);\n\n  writeGeneratedFiles({\n    configDir: opts.configDir,\n    sources,\n    pluginKeys: allPluginKeys,\n    authSource,\n    authExportPath,\n  });\n\n  if (opts.runtimeConfig.api.source !== \"local\") {\n    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);\n  }\n\n  return {\n    bridgePath: join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\"),\n    generatedPath,\n    manifest,\n    source: opts.runtimeConfig.api.source,\n  };\n}\n"],"mappings":";;;;;;AAKA,MAAM,0BAA0B;AAmChC,SAAS,OAAO,OAAuB;AACrC,oCAAkB,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAGzD,SAAS,kBAAkB,OAAuB;AAChD,QAAO,MAAM,QAAQ,OAAO,GAAG;;AAGjC,SAAS,mBAAmB,OAAuB;AACjD,QAAO,MAAM,QAAQ,kBAAkB,IAAI,CAAC,QAAQ,gBAAgB,IAAI;;AAG1E,SAAS,aAAa,UAAkB,YAA4B;CAClE,MAAM,qDAAuB,SAAS,EAAE,WAAW,CAAC,QAAQ,OAAO,IAAI;AACvE,QAAO,IAAI,WAAW,IAAI,GAAG,MAAM,KAAK;;AAG1C,SAAS,mBAAmB,UAAkB,SAAiB;AAC7D,KAAI;AACF,gCAAiB,UAAU,OAAO,KAAK,QAAS,QAAO;SACjD;AAIR,4BAAc,UAAU,QAAQ;AAChC,QAAO;;AAGT,SAAS,wBAAwB,YAA4B;AAC3D,QAAO,GAAG,kBAAkB,WAAW,CAAC;;AAG1C,eAAe,iBAAiB,KAAgC;CAC9D,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,UAAU,iBAAiB,WAAW,OAAO,EAAE,wBAAwB;AAE7E,KAAI;AACF,SAAO,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;UAC/C,OAAO;AACd,MAAI,iBAAiB,SAAS,MAAM,SAAS,aAC3C,OAAM,IAAI,MAAM,sBAAsB,IAAI,SAAS,wBAAwB,IAAI;AAEjF,QAAM;WACE;AACR,eAAa,QAAQ;;;AAIzB,eAAe,uBAAuB,YAAgD;CACpF,MAAM,WAAW,MAAM,iBAAiB,wBAAwB,WAAW,CAAC;AAC5E,KAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MACR,wCAAwC,SAAS,OAAO,GAAG,SAAS,aACrE;CAGH,MAAM,WAAY,MAAM,SAAS,MAAM;AACvC,KAAI,SAAS,kBAAkB,KAAK,SAAS,SAAS,wBACpD,OAAM,IAAI,MAAM,yCAAyC;AAG3D,QAAO;;AAGT,SAAS,uBAAuB,WAAmC;AAEjE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,oCAJsB,WAAW,OAAO,OAAO,cAAc;EAK9D;;AAGH,SAAS,wBAAwB,WAAmC;AAElE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,oCAJsB,WAAW,WAAW,QAAQ,OAAO,cAAc;EAK1E;;AAGH,eAAe,qBAAqB,MAMR;CAC1B,MAAM,WAAW,MAAM,uBAAuB,KAAK,QAAQ;AAC3D,KAAI,CAAC,SAAS,SACZ,OAAM,IAAI,MACR,uBAAuB,SAAS,OAAO,KAAK,oCAC7C;CAIH,MAAM,mBAAmB,MAAM,iBADX,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,SAAS,SAAS,MAAM,KAAK,QAAQ,SAAS,GAAG,GAC/C;AAC5D,KAAI,CAAC,iBAAiB,GACpB,OAAM,IAAI,MACR,mCAAmC,iBAAiB,OAAO,GAAG,iBAAiB,aAChF;CAGH,MAAM,gBAAgB,MAAM,iBAAiB,MAAM;AACnD,KAAI,SAAS,SAAS,MAAM,UAAU,SAAS,SAAS,MAAM,WAAW,OAAO,cAAc,CAC5F,OAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,oCAAqB,KAAK,YAAY,KAAK,iBAAiB,gBAAgB;AAClF,+CAAkB,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,cAAc;AAEhD,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,KAAK,CAAC;EAC7C,gBAAgB;EAChB;EACD;;AAGH,eAAe,qBAAqB,MAIT;AACzB,KAAI,CAAC,KAAK,SAAS,qBAAqB,KAAK,SAAS,kBAAkB,WAAW,EACjF,QAAO;CAGT,MAAM,kBAAkB,KAAK,SAAS,kBAAkB,MACrD,UAAU,MAAM,KAAK,SAAS,cAAc,IAAI,MAAM,KAAK,SAAS,mBAAmB,CACzF;AAED,KAAI,CAAC,gBACH,QAAO;CAIT,MAAM,WAAW,MAAM,iBADL,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,gBAAgB,KAAK,QAAQ,SAAS,GAAG,GAC/C;AAClD,KAAI,CAAC,SAAS,IAAI;AAChB,UAAQ,KAAK,qDAAqD,SAAS,SAAS;AACpF,SAAO;;CAGT,MAAM,UAAU,MAAM,SAAS,MAAM;AACrC,KAAI,gBAAgB,UAAU,gBAAgB,WAAW,OAAO,QAAQ,EAAE;AACxE,UAAQ,KAAK,qDAAqD;AAClE,SAAO;;CAGT,MAAM,oCAAqB,KAAK,YAAY,QAAQ,mBAAmB;AACvE,+CAAkB,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,QAAQ;AAE1C,QAAO;;AAGT,SAAS,kBAAkB,YAAoB,gBAAwB;CACrE,MAAM,mBAAmB,aAAa,YAAY,eAAe;CACjE,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,iBAAiB;EAC5B,mEAAmE,aAAa,uDAAyB,eAAe,EAAE,gBAAgB,CAAC,CAAC;EAC5I,0CAA0C,iBAAiB;EAC3D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;AACZ,+CAAkB,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,oBAAmB,YAAY,QAAQ;;AAGzC,SAAS,0BAA0B,YAAoB;CACrD,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;AACZ,+CAAkB,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,oBAAmB,YAAY,QAAQ;;AAGzC,eAAe,sBAAsB,MAQT;AAC1B,KAAI,KAAK,QAAQ,OAAO;EACtB,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,aAAa,QAAQ,cAAc,GACrC,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,oCAAqB,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,uBAAuB,KAAK,UAAU;;AAIjD,KAAI,KAAK,QAAQ,UAAU,KAAK,oBAAoB;EAClD,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,aAAa,QAAQ,cAAc,GACrC,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,oCAAqB,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,KAAK,mBAAmB,KAAK,UAAU;;AAIlD,KACE,KAAK,UACL,eAAe,KAAK,UACpB,KAAK,OAAO,aAAa,QACzB,KAAK,OAAO,cAAc,GAE1B,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,IAAI,CAAC;EAC5C,oCAAqB,KAAK,OAAO,WAAW,OAAO,cAAc;EAClE;AAGH,QAAO,qBAAqB;EAC1B,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,SAAS,KAAK;EACd,iBAAiB,KAAK;EACvB,CAAC;;AAGJ,SAAS,oBAAoB,MAM1B;CACD,MAAM,aAAa,KAAK,QAAQ,MAAM,WAAW,OAAO,QAAQ,MAAM;CACtE,MAAM,gBAAgB,KAAK,WACxB,KAAK,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAM,QAAQ,IAAI,CAAC,CAC7D,QAAQ,WAAqC,QAAQ,OAAO,CAAC;AAEhE,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,qEAAqE;CAIvF,MAAM,qCAAsB,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB;CACnF,MAAM,UAAoB,EAAE;AAE5B,MAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,aAAa,aAAa,gBAAgB,OAAO,eAAe;AACtE,UAAQ,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAAI;;AAG5F,SAAQ,KAAK,GAAG;CAEhB,MAAM,iBAA2B,EAAE;AACnC,KAAI,KAAK,WACP,gBAAe,KAAK,SAAS,KAAK,WAAW,aAAa;AAE5D,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAAG,OAAO,MAAM,KAAK,UAAU,OAAO,IAAI;AAC9F,iBAAe,KAAK,GAAG,IAAI,IAAI,OAAO,aAAa;;AAGrD,KAAI,eAAe,WAAW,EAC5B,SAAQ,KAAK,6BAA6B,WAAW,WAAW,GAAG;MAC9D;AACL,UAAQ,KAAK,6BAA6B,WAAW,WAAW,MAAM;AACtE,OAAK,MAAM,QAAQ,eACjB,SAAQ,KAAK,KAAK,KAAK,GAAG;AAE5B,UAAQ,KAAK,KAAK;;AAEpB,+CAAkB,eAAe,EAAE,EAAE,WAAW,MAAM,CAAC;AACvD,oBAAmB,gBAAgB,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI;CAI7D,MAAM,wCAAyB,KAAK,WAAW,OAAO,OAAO,OAAO,uBAAuB;CAC3F,MAAM,qBAA+B,EAAE;AAEvC,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,aAAa,aAAa,mBAAmB,OAAO,eAAe;AACzE,qBAAmB,KACjB,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAC1E;;AAGH,KAAI,KAAK,YAAY;EACnB,MAAM,iBAAiB,aAAa,mBAAmB,KAAK,WAAW,eAAe;AACtF,qBAAmB,KACjB,iCAAiC,KAAK,WAAW,WAAW,WAAW,eAAe,IACvF;;AAGH,oBAAmB,KACjB,mFACD;AACD,oBAAmB,KACjB,oHACD;AACD,oBAAmB,KAAK,GAAG;CAE3B,MAAM,mBAAmB,CAAC,GAAG,cAAc;AAC3C,KAAI,KAAK,WACP,kBAAiB,KAAK;EAAE,GAAG,KAAK;EAAY,KAAK;EAAQ,CAAC;AAG5D,KAAI,iBAAiB,WAAW,EAC9B,oBAAmB,KAAK,qDAAqD;MACxE;AACL,qBAAmB,KAAK,gCAAgC;AACxD,OAAK,MAAM,UAAU,kBAAkB;GACrC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAChD,OAAO,MACP,KAAK,UAAU,OAAO,IAAI;AAC9B,sBAAmB,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,IAAI;;AAE3E,qBAAmB,KAAK,KAAK;;AAG/B,+CAAkB,kBAAkB,EAAE,EAAE,WAAW,MAAM,CAAC;AAC1D,oBAAmB,mBAAmB,GAAG,mBAAmB,KAAK,KAAK,CAAC,IAAI;CAG3E,MAAM,kBAAkB,qBAAM,KAAK,WAAW,MAAM,OAAO,OAAO,oBAAoB,CAAC;CACvF,MAAM,gCAAiB,KAAK,WAAW,OAAO,OAAO,MAAM;AAC3D,6BAAe,UAAU,CACvB,iBAAgB,yBAAU,WAAW,oBAAoB,CAAC;CAE5D,MAAM,iCAAkB,KAAK,WAAW,QAAQ,OAAO,MAAM;AAC7D,iDAAoB,KAAK,WAAW,QAAQ,MAAM,CAAC,CACjD,iBAAgB,yBAAU,YAAY,oBAAoB,CAAC;AAG7D,KAAI,KAAK,eACP,MAAK,MAAM,iBAAiB,gBAC1B,mBAAkB,eAAe,KAAK,eAAe;UAE9C,KAAK,WACd,MAAK,MAAM,iBAAiB,gBAC1B,2BAA0B,cAAc;AAI5C,QAAO;;AAGT,eAAsB,sBAAsB,MASzC;CACD,MAAM,iCAAkB,KAAK,WAAW,QAAQ,YAAY;CAC5D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,cAAc,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OACjF,EAAE,cAAc,EAAE,CACnB;CACD,MAAM,UAA4B,EAAE;CACpC,IAAI,WAAqC;CACzC,IAAI,gBAA+B;CACnC,IAAI,aAAoC;CACxC,IAAI,iBAAgC;CAEpC,MAAM,aAAa,MAAM,sBAAsB;EAC7C,WAAW,KAAK;EAChB;EACA,KAAK;EACL,QAAQ,KAAK,cAAc;EAC3B,SAAS,KAAK;EACd,iBAAiB;EAClB,CAAC;AACF,SAAQ,KAAK,WAAW;AAExB,KAAI,KAAK,cAAc,MAAM;AAC3B,eAAa,MAAM,sBAAsB;GACvC,WAAW,KAAK;GAChB;GACA,KAAK;GACL,QAAQ,KAAK,cAAc;GAC3B,SAAS,KAAK,cAAc,KAAK;GACjC,iBAAiB;GACjB,oBAAoB;GACrB,CAAC;AACF,UAAQ,KAAK,WAAW;AACxB,MAAI,WAAW,cACb,iBAAgB,WAAW;AAI7B,MAAI,KAAK,cAAc,KAAK,OAAO,KAAK,cAAc,KAAK,WAAW,QACpE,KAAI;GACF,MAAM,eAAe,MAAM,uBAAuB,KAAK,cAAc,KAAK,IAAI;GAC9E,MAAM,wBAAwB,MAAM,qBAAqB;IACvD,SAAS,KAAK,cAAc,KAAK;IACjC;IACA,UAAU;IACX,CAAC;AACF,OAAI,sBACF,kBAAiB;WAEZ,OAAO;AACd,WAAQ,KACN,2DAA2D,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAClH;;AAIL,MAAI,CAAC,gBAAgB;GACnB,MAAM,sCAAuB,KAAK,WAAW,WAAW,QAAQ,OAAO,iBAAiB;AACxF,+BAAe,gBAAgB,CAC7B,kBAAiB;QACZ;IACL,MAAM,0CAA2B,YAAY,QAAQ,mBAAmB;AACxE,gCAAe,oBAAoB,CACjC,kBAAiB;;;;AAMzB,MAAK,MAAM,CAAC,KAAK,WAAW,eAAe;AACzC,MAAI,CAAC,OAAO,OAAO,CAAC,OAAO,WAAW;AACpC,WAAQ,KACN,mCAAmC,IAAI,2EACxC;AACD;;EAEF,MAAM,SAAS,MAAM,sBAAsB;GACzC,WAAW,KAAK;GAChB;GACA;GACA,QAAQ;GACR,SAAS,OAAO;GAChB,iBAAiB,WAAW;GAC7B,CAAC;AACF,UAAQ,KAAK,OAAO;AACpB,MAAI,OAAO,cACT,iBAAgB,OAAO;;CAI3B,MAAM,gBAAgB,cAAc,KAAK,CAAC,SAAS,IAAI;AAEvD,qBAAoB;EAClB,WAAW,KAAK;EAChB;EACA,YAAY;EACZ;EACA;EACD,CAAC;AAEF,KAAI,KAAK,cAAc,IAAI,WAAW,QACpC,YAAW,MAAM,uBAAuB,KAAK,WAAW;AAG1D,QAAO;EACL,gCAAiB,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB;EACxE;EACA;EACA,QAAQ,KAAK,cAAc,IAAI;EAChC"}

package/dist/api-contract.mjs

@@ -3,6 +3,7 @@ import { dirname, join, relative } from "node:path";
 import { createHash } from "node:crypto";
 
 //#region src/api-contract.ts
+const REMOTE_FETCH_TIMEOUT_MS = 1e4;
 function sha256(input) {
 	return createHash("sha256").update(input).digest("hex");
 }
@@ -26,8 +27,20 @@ function writeFileIfChanged(filePath, content) {
 function getApiPluginManifestUrl(apiBaseUrl) {
 	return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;
 }
+async function fetchWithTimeout(url) {
+	const controller = new AbortController();
+	const timeout = setTimeout(() => controller.abort(), REMOTE_FETCH_TIMEOUT_MS);
+	try {
+		return await fetch(url, { signal: controller.signal });
+	} catch (error) {
+		if (error instanceof Error && error.name === "AbortError") throw new Error(`Timed out fetching ${url} after ${REMOTE_FETCH_TIMEOUT_MS}ms`);
+		throw error;
+	} finally {
+		clearTimeout(timeout);
+	}
+}
 async function fetchApiPluginManifest(apiBaseUrl) {
-	const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));
+	const response = await fetchWithTimeout(getApiPluginManifestUrl(apiBaseUrl));
 	if (!response.ok) throw new Error(`Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`);
 	const manifest = await response.json();
 	if (manifest.schemaVersion !== 1 || manifest.kind !== "every-plugin/manifest") throw new Error("Unsupported API plugin manifest format");
@@ -50,8 +63,7 @@ function localAuthContractSource(configDir) {
 async function remoteContractSource(opts) {
 	const manifest = await fetchApiPluginManifest(opts.baseUrl);
 	if (!manifest.contract) throw new Error(`Plugin manifest for ${manifest.plugin.name} does not advertise contract types`);
-	const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\.\//, "")}`;
-	const contractResponse = await fetch(contractUrl);
+	const contractResponse = await fetchWithTimeout(`${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\.\//, "")}`);
 	if (!contractResponse.ok) throw new Error(`Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`);
 	const contractTypes = await contractResponse.text();
 	if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) throw new Error("Fetched contract types failed checksum verification");
@@ -69,8 +81,7 @@ async function fetchAuthExportTypes(opts) {
 	if (!opts.manifest.additionalExports || opts.manifest.additionalExports.length === 0) return null;
 	const authExportEntry = opts.manifest.additionalExports.find((entry) => entry.path.includes("auth-export") || entry.path.endsWith("auth-export.d.ts"));
 	if (!authExportEntry) return null;
-	const exportUrl = `${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\.\//, "")}`;
-	const response = await fetch(exportUrl);
+	const response = await fetchWithTimeout(`${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\.\//, "")}`);
 	if (!response.ok) {
 		console.warn(`[API Contract] Failed to fetch auth export types: ${response.status}`);
 		return null;

package/dist/api-contract.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"api-contract.mjs","names":[],"sources":["../src/api-contract.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative } from \"node:path\";\nimport type { RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nexport interface ApiPluginManifest {\n  schemaVersion: 1;\n  kind: \"every-plugin/manifest\";\n  plugin: {\n    name: string;\n    version: string;\n  };\n  runtime: {\n    remoteEntry: string;\n  };\n  contract?: {\n    kind: \"orpc\";\n    types: {\n      path: string;\n      exportName: string;\n      typeName: string;\n      sha256?: string;\n    };\n  };\n  additionalExports?: Array<{\n    path: string;\n    exports: string[];\n    sha256?: string;\n  }>;\n}\n\ninterface ContractSource {\n  key: string;\n  importName: string;\n  sourceFilePath: string;\n  generatedPath?: string;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction trimTrailingSlash(input: string): string {\n  return input.replace(/\\/$/, \"\");\n}\n\nfunction sanitizeIdentifier(input: string): string {\n  return input.replace(/[^A-Za-z0-9_]/g, \"_\").replace(/^[^A-Za-z_]+/, \"_\");\n}\n\nfunction toImportPath(fromFile: string, targetFile: string): string {\n  const rel = relative(dirname(fromFile), targetFile).replace(/\\\\/g, \"/\");\n  return rel.startsWith(\".\") ? rel : `./${rel}`;\n}\n\nfunction writeFileIfChanged(filePath: string, content: string) {\n  try {\n    if (readFileSync(filePath, \"utf8\") === content) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, content);\n  return true;\n}\n\nfunction getApiPluginManifestUrl(apiBaseUrl: string): string {\n  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;\n}\n\nasync function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {\n  const response = await fetch(getApiPluginManifestUrl(apiBaseUrl));\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`,\n    );\n  }\n\n  const manifest = (await response.json()) as ApiPluginManifest;\n  if (manifest.schemaVersion !== 1 || manifest.kind !== \"every-plugin/manifest\") {\n    throw new Error(\"Unsupported API plugin manifest format\");\n  }\n\n  return manifest;\n}\n\nfunction localApiContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"api\", \"src\", \"contract.ts\");\n  return {\n    key: \"api\",\n    importName: \"BaseApiContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nfunction localAuthContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"plugins\", \"auth\", \"src\", \"contract.ts\");\n  return {\n    key: \"auth\",\n    importName: \"authContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nasync function remoteContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  name: string;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  const manifest = await fetchApiPluginManifest(opts.baseUrl);\n  if (!manifest.contract) {\n    throw new Error(\n      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,\n    );\n  }\n\n  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\\.\\//, \"\")}`;\n  const contractResponse = await fetch(contractUrl);\n  if (!contractResponse.ok) {\n    throw new Error(\n      `Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`,\n    );\n  }\n\n  const contractTypes = await contractResponse.text();\n  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {\n    throw new Error(\"Fetched contract types failed checksum verification\");\n  }\n\n  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, \"contract.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, contractTypes);\n\n  return {\n    key: opts.name,\n    importName: `${sanitizeIdentifier(opts.name)}Contract`,\n    sourceFilePath: generatedPath,\n    generatedPath,\n  };\n}\n\nasync function fetchAuthExportTypes(opts: {\n  baseUrl: string;\n  runtimeDir: string;\n  manifest: ApiPluginManifest;\n}): Promise<string | null> {\n  if (!opts.manifest.additionalExports || opts.manifest.additionalExports.length === 0) {\n    return null;\n  }\n\n  const authExportEntry = opts.manifest.additionalExports.find(\n    (entry) => entry.path.includes(\"auth-export\") || entry.path.endsWith(\"auth-export.d.ts\"),\n  );\n\n  if (!authExportEntry) {\n    return null;\n  }\n\n  const exportUrl = `${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\\.\\//, \"\")}`;\n  const response = await fetch(exportUrl);\n  if (!response.ok) {\n    console.warn(`[API Contract] Failed to fetch auth export types: ${response.status}`);\n    return null;\n  }\n\n  const content = await response.text();\n  if (authExportEntry.sha256 && authExportEntry.sha256 !== sha256(content)) {\n    console.warn(\"[API Contract] Auth export types checksum mismatch\");\n    return null;\n  }\n\n  const generatedPath = join(opts.runtimeDir, \"auth\", \"auth-export.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, content);\n\n  return generatedPath;\n}\n\nfunction writeAuthTypesGen(targetPath: string, authExportPath: string) {\n  const exportImportPath = toImportPath(targetPath, authExportPath);\n  const content = [\n    `export type {`,\n    `  Auth,`,\n    `  AuthOrganizationContext,`,\n    `  AuthOrganization,`,\n    `  AuthOrganizationSummary,`,\n    `  AuthOrganizationMember,`,\n    `  AuthApiKey,`,\n    `  AuthInvitation,`,\n    `  GetActiveMemberInput,`,\n    `  GetOrganizationInput,`,\n    `  ListMembersInput,`,\n    `  ListInvitationsInput,`,\n    `  ListApiKeysInput,`,\n    `  AuthServices,`,\n    `  createAuthInstance,`,\n    `} from \"${exportImportPath}\";`,\n    `import type { InferOutput, ContractType as AuthContract } from \"${toImportPath(targetPath, join(dirname(authExportPath), \"contract.d.ts\"))}\";`,\n    `import type { Auth as BaseAuth } from \"${exportImportPath}\";`,\n    \"\",\n    'type RawAuthSession = InferOutput<\"getSession\">;',\n    'type RawAuthRequestContext = InferOutput<\"getContext\">;',\n    'type RawAuthActiveMember = InferOutput<\"getActiveMember\">;',\n    \"\",\n    'export type AuthSessionUser = NonNullable<RawAuthSession[\"user\"]> & {',\n    \"  role?: string | null;\",\n    \"  isAnonymous?: boolean | null;\",\n    \"  walletAddress?: string | null;\",\n    \"  banned?: boolean | null;\",\n    \"};\",\n    'export type AuthSessionData = NonNullable<RawAuthSession[\"session\"]> & {',\n    \"  activeOrganizationId?: string | null;\",\n    \"};\",\n    \"export type AuthSession = {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  session: AuthSessionData | null;\",\n    \"};\",\n    \"export type AuthRequestContext = RawAuthRequestContext;\",\n    \"export type AuthActiveMember = RawAuthActiveMember;\",\n    'export type AuthBaseSession = BaseAuth[\"$Infer\"][\"Session\"];',\n    \"export type AuthContractType = AuthContract;\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nfunction writeFallbackAuthTypesGen(targetPath: string) {\n  const content = [\n    'import type { Auth } from \"better-auth\";',\n    'export type { Auth } from \"better-auth\";',\n    'export type AuthSession = Auth[\"$Infer\"][\"Session\"];',\n    \"export type AuthSessionData = AuthSession;\",\n    'export type AuthSessionUser = NonNullable<AuthSession[\"user\"]>;',\n    \"export interface AuthOrganizationContext {\",\n    \"  activeOrganizationId: string | null;\",\n    \"  organization: { id: string; name: string; slug: string; logo?: string | null; metadata?: Record<string, unknown> } | null;\",\n    \"  member: { id: string; role: string } | null;\",\n    \"  isPersonal: boolean;\",\n    \"  hasOrganization: boolean;\",\n    \"}\",\n    \"export interface AuthRequestContext {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  userId: string | null;\",\n    \"  isAuthenticated: boolean;\",\n    '  authMethod: \"session\" | \"apiKey\" | \"anonymous\" | \"none\";',\n    \"  near: {\",\n    \"    primaryAccountId: string | null;\",\n    \"    linkedAccounts: Array<{ accountId: string; network: string; publicKey: string; isPrimary: boolean }>;\",\n    \"    hasNearAccount: boolean;\",\n    \"  };\",\n    \"  organization: AuthOrganizationContext;\",\n    \"  organizations?: Array<{ id: string; role: string; name?: string; slug?: string }>;\",\n    \"}\",\n    \"export type AuthActiveMember = { id: string | null; role: string | null; organizationId: string | null };\",\n    \"export type AuthOrganization = {\",\n    \"  id: string;\",\n    \"  name: string;\",\n    \"  slug: string;\",\n    \"  logo?: string | null;\",\n    \"  metadata?: Record<string, unknown> | null;\",\n    \"  createdAt: Date;\",\n    \"};\",\n    'export type AuthOrganizationSummary = NonNullable<AuthOrganizationContext[\"organization\"]>;',\n    'export type AuthOrganizationMember = NonNullable<AuthOrganizationContext[\"member\"]>;',\n    \"export type AuthApiKey = {\",\n    \"  id: string;\",\n    \"  name: string | null;\",\n    \"  prefix: string | null;\",\n    \"  start: string | null;\",\n    \"  expiresAt: Date | null;\",\n    \"  createdAt: Date;\",\n    \"  updatedAt: Date;\",\n    \"  metadata: unknown | null;\",\n    \"  permissions: Record<string, string[]> | null;\",\n    \"};\",\n    \"export type AuthInvitation = {\",\n    \"  id: string;\",\n    \"  organizationId: string;\",\n    \"  email: string;\",\n    \"  role: string | null;\",\n    \"  status: string;\",\n    \"  expiresAt: Date;\",\n    \"  inviterId: string;\",\n    \"};\",\n    \"export type GetActiveMemberInput = { organizationId?: string };\",\n    \"export type GetOrganizationInput = { id: string };\",\n    \"export type ListMembersInput = { organizationId: string };\",\n    \"export type ListInvitationsInput = { organizationId: string };\",\n    \"export type ListApiKeysInput = { organizationId?: string };\",\n    \"export type createAuthInstance = never;\",\n    \"export interface AuthServices {\",\n    \"  auth: Auth;\",\n    \"  db: unknown;\",\n    \"  driver: { close(): Promise<void> };\",\n    \"  handler: (req: Request) => Promise<Response>;\",\n    \"}\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nasync function resolveContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  key: string;\n  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;\n  baseUrl: string;\n  generatedSubdir: string;\n  localSourceFactory?: (configDir: string) => ContractSource;\n}): Promise<ContractSource> {\n  if (opts.key === \"api\") {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"BaseApiContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return localApiContractSource(opts.configDir);\n    }\n  }\n\n  if (opts.key === \"auth\" && opts.localSourceFactory) {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"authContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return opts.localSourceFactory(opts.configDir);\n    }\n  }\n\n  if (\n    opts.source &&\n    \"localPath\" in opts.source &&\n    opts.source.localPath != null &&\n    opts.source.localPath !== \"\"\n  ) {\n    return {\n      key: opts.key,\n      importName: `${sanitizeIdentifier(opts.key)}Contract`,\n      sourceFilePath: join(opts.source.localPath, \"src\", \"contract.ts\"),\n    };\n  }\n\n  return remoteContractSource({\n    configDir: opts.configDir,\n    runtimeDir: opts.runtimeDir,\n    name: opts.key,\n    baseUrl: opts.baseUrl,\n    generatedSubdir: opts.generatedSubdir,\n  });\n}\n\nfunction writeGeneratedFiles(opts: {\n  configDir: string;\n  sources: ContractSource[];\n  pluginKeys: string[];\n  authSource: ContractSource | null;\n  authExportPath?: string | null;\n}) {\n  const baseSource = opts.sources.find((source) => source.key === \"api\");\n  const pluginSources = opts.pluginKeys\n    .map((key) => opts.sources.find((entry) => entry.key === key))\n    .filter((source): source is ContractSource => Boolean(source));\n\n  if (!baseSource) {\n    throw new Error(\"API contract source is required to generate the aggregate contract\");\n  }\n\n  // --- Generate ui/src/lib/api-types.gen.ts ---\n  const uiContractPath = join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\");\n  const uiLines: string[] = [];\n\n  for (const source of opts.sources) {\n    const importPath = toImportPath(uiContractPath, source.sourceFilePath);\n    uiLines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  uiLines.push(\"\");\n\n  const compositeParts: string[] = [];\n  if (opts.authSource) {\n    compositeParts.push(`auth: ${opts.authSource.importName}`);\n  }\n  for (const source of pluginSources) {\n    const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);\n    compositeParts.push(`${key}: ${source.importName}`);\n  }\n\n  if (compositeParts.length === 0) {\n    uiLines.push(`export type ApiContract = ${baseSource.importName};`);\n  } else {\n    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);\n    for (const part of compositeParts) {\n      uiLines.push(`  ${part};`);\n    }\n    uiLines.push(\"};\");\n  }\n  mkdirSync(dirname(uiContractPath), { recursive: true });\n  writeFileIfChanged(uiContractPath, `${uiLines.join(\"\\n\")}\\n`);\n\n  // --- Generate api/src/lib/plugins-types.gen.ts ---\n  // Includes both plugin contracts AND auth as a unified PluginsClient type\n  const pluginsClientPath = join(opts.configDir, \"api\", \"src\", \"lib\", \"plugins-types.gen.ts\");\n  const pluginsClientLines: string[] = [];\n\n  for (const source of pluginSources) {\n    const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${source.importName} } from \"${importPath}\";`,\n    );\n  }\n\n  if (opts.authSource) {\n    const authImportPath = toImportPath(pluginsClientPath, opts.authSource.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${opts.authSource.importName} } from \"${authImportPath}\";`,\n    );\n  }\n\n  pluginsClientLines.push(\n    'import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";',\n  );\n  pluginsClientLines.push(\n    \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n  );\n  pluginsClientLines.push(\"\");\n\n  const allPluginSources = [...pluginSources];\n  if (opts.authSource) {\n    allPluginSources.push({ ...opts.authSource, key: \"auth\" });\n  }\n\n  if (allPluginSources.length === 0) {\n    pluginsClientLines.push(\"export type PluginsClient = Record<string, never>;\");\n  } else {\n    pluginsClientLines.push(\"export type PluginsClient = {\");\n    for (const source of allPluginSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n    }\n    pluginsClientLines.push(\"};\");\n  }\n\n  mkdirSync(dirname(pluginsClientPath), { recursive: true });\n  writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join(\"\\n\")}\\n`);\n\n  // --- Generate */src/lib/auth-types.gen.ts ---\n  const authTypeTargets = [join(opts.configDir, \"ui\", \"src\", \"lib\", \"auth-types.gen.ts\")];\n  const apiLibDir = join(opts.configDir, \"api\", \"src\", \"lib\");\n  if (existsSync(apiLibDir)) {\n    authTypeTargets.push(join(apiLibDir, \"auth-types.gen.ts\"));\n  }\n  const hostLibDir = join(opts.configDir, \"host\", \"src\", \"lib\");\n  if (existsSync(join(opts.configDir, \"host\", \"src\"))) {\n    authTypeTargets.push(join(hostLibDir, \"auth-types.gen.ts\"));\n  }\n\n  if (opts.authExportPath) {\n    for (const authTypesPath of authTypeTargets) {\n      writeAuthTypesGen(authTypesPath, opts.authExportPath);\n    }\n  } else if (opts.authSource) {\n    for (const authTypesPath of authTypeTargets) {\n      writeFallbackAuthTypesGen(authTypesPath);\n    }\n  }\n\n  return uiContractPath;\n}\n\nexport async function syncApiContractBridge(opts: {\n  configDir: string;\n  runtimeConfig: RuntimeConfig;\n  apiBaseUrl: string;\n}): Promise<{\n  bridgePath: string;\n  generatedPath: string | null;\n  manifest: ApiPluginManifest | null;\n  source: \"local\" | \"remote\";\n}> {\n  const runtimeDir = join(opts.configDir, \".bos\", \"generated\");\n  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>\n    a.localeCompare(b),\n  );\n  const sources: ContractSource[] = [];\n  let manifest: ApiPluginManifest | null = null;\n  let generatedPath: string | null = null;\n  let authSource: ContractSource | null = null;\n  let authExportPath: string | null = null;\n\n  const baseSource = await resolveContractSource({\n    configDir: opts.configDir,\n    runtimeDir,\n    key: \"api\",\n    source: opts.runtimeConfig.api,\n    baseUrl: opts.apiBaseUrl,\n    generatedSubdir: \"api\",\n  });\n  sources.push(baseSource);\n\n  if (opts.runtimeConfig.auth) {\n    authSource = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key: \"auth\",\n      source: opts.runtimeConfig.auth,\n      baseUrl: opts.runtimeConfig.auth.url,\n      generatedSubdir: \"auth\",\n      localSourceFactory: localAuthContractSource,\n    });\n    sources.push(authSource);\n    if (authSource.generatedPath) {\n      generatedPath = authSource.generatedPath;\n    }\n\n    // Fetch auth additional exports (auth-export.d.ts) for remote auth\n    if (opts.runtimeConfig.auth.url && opts.runtimeConfig.auth.source !== \"local\") {\n      try {\n        const authManifest = await fetchApiPluginManifest(opts.runtimeConfig.auth.url);\n        const fetchedAuthExportPath = await fetchAuthExportTypes({\n          baseUrl: opts.runtimeConfig.auth.url,\n          runtimeDir,\n          manifest: authManifest,\n        });\n        if (fetchedAuthExportPath) {\n          authExportPath = fetchedAuthExportPath;\n        }\n      } catch (error) {\n        console.warn(\n          `[API Contract] Failed to fetch auth additional exports: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    }\n\n    if (!authExportPath) {\n      const localAuthExport = join(opts.configDir, \"plugins\", \"auth\", \"src\", \"auth-export.ts\");\n      if (existsSync(localAuthExport)) {\n        authExportPath = localAuthExport;\n      } else {\n        const generatedAuthExport = join(runtimeDir, \"auth\", \"auth-export.d.ts\");\n        if (existsSync(generatedAuthExport)) {\n          authExportPath = generatedAuthExport;\n        }\n      }\n    }\n  }\n\n  for (const [key, plugin] of pluginEntries) {\n    if (!plugin.url && !plugin.localPath) {\n      console.warn(\n        `[API Contract] Skipping plugin \"${key}\" — no URL resolved (local path missing and no production URL configured)`,\n      );\n      continue;\n    }\n    const source = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key,\n      source: plugin,\n      baseUrl: plugin.url,\n      generatedSubdir: `plugins/${key}`,\n    });\n    sources.push(source);\n    if (source.generatedPath) {\n      generatedPath = source.generatedPath;\n    }\n  }\n\n  const allPluginKeys = pluginEntries.map(([key]) => key);\n\n  writeGeneratedFiles({\n    configDir: opts.configDir,\n    sources,\n    pluginKeys: allPluginKeys,\n    authSource,\n    authExportPath,\n  });\n\n  if (opts.runtimeConfig.api.source !== \"local\") {\n    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);\n  }\n\n  return {\n    bridgePath: join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\"),\n    generatedPath,\n    manifest,\n    source: opts.runtimeConfig.api.source,\n  };\n}\n"],"mappings":";;;;;AAsCA,SAAS,OAAO,OAAuB;AACrC,QAAO,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAGzD,SAAS,kBAAkB,OAAuB;AAChD,QAAO,MAAM,QAAQ,OAAO,GAAG;;AAGjC,SAAS,mBAAmB,OAAuB;AACjD,QAAO,MAAM,QAAQ,kBAAkB,IAAI,CAAC,QAAQ,gBAAgB,IAAI;;AAG1E,SAAS,aAAa,UAAkB,YAA4B;CAClE,MAAM,MAAM,SAAS,QAAQ,SAAS,EAAE,WAAW,CAAC,QAAQ,OAAO,IAAI;AACvE,QAAO,IAAI,WAAW,IAAI,GAAG,MAAM,KAAK;;AAG1C,SAAS,mBAAmB,UAAkB,SAAiB;AAC7D,KAAI;AACF,MAAI,aAAa,UAAU,OAAO,KAAK,QAAS,QAAO;SACjD;AAIR,eAAc,UAAU,QAAQ;AAChC,QAAO;;AAGT,SAAS,wBAAwB,YAA4B;AAC3D,QAAO,GAAG,kBAAkB,WAAW,CAAC;;AAG1C,eAAe,uBAAuB,YAAgD;CACpF,MAAM,WAAW,MAAM,MAAM,wBAAwB,WAAW,CAAC;AACjE,KAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MACR,wCAAwC,SAAS,OAAO,GAAG,SAAS,aACrE;CAGH,MAAM,WAAY,MAAM,SAAS,MAAM;AACvC,KAAI,SAAS,kBAAkB,KAAK,SAAS,SAAS,wBACpD,OAAM,IAAI,MAAM,yCAAyC;AAG3D,QAAO;;AAGT,SAAS,uBAAuB,WAAmC;AAEjE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,OAAO,OAAO,cAAc;EAK9D;;AAGH,SAAS,wBAAwB,WAAmC;AAElE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,WAAW,QAAQ,OAAO,cAAc;EAK1E;;AAGH,eAAe,qBAAqB,MAMR;CAC1B,MAAM,WAAW,MAAM,uBAAuB,KAAK,QAAQ;AAC3D,KAAI,CAAC,SAAS,SACZ,OAAM,IAAI,MACR,uBAAuB,SAAS,OAAO,KAAK,oCAC7C;CAGH,MAAM,cAAc,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,SAAS,SAAS,MAAM,KAAK,QAAQ,SAAS,GAAG;CAC3G,MAAM,mBAAmB,MAAM,MAAM,YAAY;AACjD,KAAI,CAAC,iBAAiB,GACpB,OAAM,IAAI,MACR,mCAAmC,iBAAiB,OAAO,GAAG,iBAAiB,aAChF;CAGH,MAAM,gBAAgB,MAAM,iBAAiB,MAAM;AACnD,KAAI,SAAS,SAAS,MAAM,UAAU,SAAS,SAAS,MAAM,WAAW,OAAO,cAAc,CAC5F,OAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,gBAAgB,KAAK,KAAK,YAAY,KAAK,iBAAiB,gBAAgB;AAClF,WAAU,QAAQ,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,cAAc;AAEhD,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,KAAK,CAAC;EAC7C,gBAAgB;EAChB;EACD;;AAGH,eAAe,qBAAqB,MAIT;AACzB,KAAI,CAAC,KAAK,SAAS,qBAAqB,KAAK,SAAS,kBAAkB,WAAW,EACjF,QAAO;CAGT,MAAM,kBAAkB,KAAK,SAAS,kBAAkB,MACrD,UAAU,MAAM,KAAK,SAAS,cAAc,IAAI,MAAM,KAAK,SAAS,mBAAmB,CACzF;AAED,KAAI,CAAC,gBACH,QAAO;CAGT,MAAM,YAAY,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,gBAAgB,KAAK,QAAQ,SAAS,GAAG;CACjG,MAAM,WAAW,MAAM,MAAM,UAAU;AACvC,KAAI,CAAC,SAAS,IAAI;AAChB,UAAQ,KAAK,qDAAqD,SAAS,SAAS;AACpF,SAAO;;CAGT,MAAM,UAAU,MAAM,SAAS,MAAM;AACrC,KAAI,gBAAgB,UAAU,gBAAgB,WAAW,OAAO,QAAQ,EAAE;AACxE,UAAQ,KAAK,qDAAqD;AAClE,SAAO;;CAGT,MAAM,gBAAgB,KAAK,KAAK,YAAY,QAAQ,mBAAmB;AACvE,WAAU,QAAQ,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,QAAQ;AAE1C,QAAO;;AAGT,SAAS,kBAAkB,YAAoB,gBAAwB;CACrE,MAAM,mBAAmB,aAAa,YAAY,eAAe;CACjE,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,iBAAiB;EAC5B,mEAAmE,aAAa,YAAY,KAAK,QAAQ,eAAe,EAAE,gBAAgB,CAAC,CAAC;EAC5I,0CAA0C,iBAAiB;EAC3D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;AACZ,WAAU,QAAQ,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,oBAAmB,YAAY,QAAQ;;AAGzC,SAAS,0BAA0B,YAAoB;CACrD,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;AACZ,WAAU,QAAQ,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,oBAAmB,YAAY,QAAQ;;AAGzC,eAAe,sBAAsB,MAQT;AAC1B,KAAI,KAAK,QAAQ,OAAO;EACtB,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,aAAa,QAAQ,cAAc,GACrC,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,uBAAuB,KAAK,UAAU;;AAIjD,KAAI,KAAK,QAAQ,UAAU,KAAK,oBAAoB;EAClD,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,aAAa,QAAQ,cAAc,GACrC,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,KAAK,mBAAmB,KAAK,UAAU;;AAIlD,KACE,KAAK,UACL,eAAe,KAAK,UACpB,KAAK,OAAO,aAAa,QACzB,KAAK,OAAO,cAAc,GAE1B,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,IAAI,CAAC;EAC5C,gBAAgB,KAAK,KAAK,OAAO,WAAW,OAAO,cAAc;EAClE;AAGH,QAAO,qBAAqB;EAC1B,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,SAAS,KAAK;EACd,iBAAiB,KAAK;EACvB,CAAC;;AAGJ,SAAS,oBAAoB,MAM1B;CACD,MAAM,aAAa,KAAK,QAAQ,MAAM,WAAW,OAAO,QAAQ,MAAM;CACtE,MAAM,gBAAgB,KAAK,WACxB,KAAK,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAM,QAAQ,IAAI,CAAC,CAC7D,QAAQ,WAAqC,QAAQ,OAAO,CAAC;AAEhE,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,qEAAqE;CAIvF,MAAM,iBAAiB,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB;CACnF,MAAM,UAAoB,EAAE;AAE5B,MAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,aAAa,aAAa,gBAAgB,OAAO,eAAe;AACtE,UAAQ,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAAI;;AAG5F,SAAQ,KAAK,GAAG;CAEhB,MAAM,iBAA2B,EAAE;AACnC,KAAI,KAAK,WACP,gBAAe,KAAK,SAAS,KAAK,WAAW,aAAa;AAE5D,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAAG,OAAO,MAAM,KAAK,UAAU,OAAO,IAAI;AAC9F,iBAAe,KAAK,GAAG,IAAI,IAAI,OAAO,aAAa;;AAGrD,KAAI,eAAe,WAAW,EAC5B,SAAQ,KAAK,6BAA6B,WAAW,WAAW,GAAG;MAC9D;AACL,UAAQ,KAAK,6BAA6B,WAAW,WAAW,MAAM;AACtE,OAAK,MAAM,QAAQ,eACjB,SAAQ,KAAK,KAAK,KAAK,GAAG;AAE5B,UAAQ,KAAK,KAAK;;AAEpB,WAAU,QAAQ,eAAe,EAAE,EAAE,WAAW,MAAM,CAAC;AACvD,oBAAmB,gBAAgB,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI;CAI7D,MAAM,oBAAoB,KAAK,KAAK,WAAW,OAAO,OAAO,OAAO,uBAAuB;CAC3F,MAAM,qBAA+B,EAAE;AAEvC,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,aAAa,aAAa,mBAAmB,OAAO,eAAe;AACzE,qBAAmB,KACjB,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAC1E;;AAGH,KAAI,KAAK,YAAY;EACnB,MAAM,iBAAiB,aAAa,mBAAmB,KAAK,WAAW,eAAe;AACtF,qBAAmB,KACjB,iCAAiC,KAAK,WAAW,WAAW,WAAW,eAAe,IACvF;;AAGH,oBAAmB,KACjB,mFACD;AACD,oBAAmB,KACjB,oHACD;AACD,oBAAmB,KAAK,GAAG;CAE3B,MAAM,mBAAmB,CAAC,GAAG,cAAc;AAC3C,KAAI,KAAK,WACP,kBAAiB,KAAK;EAAE,GAAG,KAAK;EAAY,KAAK;EAAQ,CAAC;AAG5D,KAAI,iBAAiB,WAAW,EAC9B,oBAAmB,KAAK,qDAAqD;MACxE;AACL,qBAAmB,KAAK,gCAAgC;AACxD,OAAK,MAAM,UAAU,kBAAkB;GACrC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAChD,OAAO,MACP,KAAK,UAAU,OAAO,IAAI;AAC9B,sBAAmB,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,IAAI;;AAE3E,qBAAmB,KAAK,KAAK;;AAG/B,WAAU,QAAQ,kBAAkB,EAAE,EAAE,WAAW,MAAM,CAAC;AAC1D,oBAAmB,mBAAmB,GAAG,mBAAmB,KAAK,KAAK,CAAC,IAAI;CAG3E,MAAM,kBAAkB,CAAC,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,oBAAoB,CAAC;CACvF,MAAM,YAAY,KAAK,KAAK,WAAW,OAAO,OAAO,MAAM;AAC3D,KAAI,WAAW,UAAU,CACvB,iBAAgB,KAAK,KAAK,WAAW,oBAAoB,CAAC;CAE5D,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,OAAO,MAAM;AAC7D,KAAI,WAAW,KAAK,KAAK,WAAW,QAAQ,MAAM,CAAC,CACjD,iBAAgB,KAAK,KAAK,YAAY,oBAAoB,CAAC;AAG7D,KAAI,KAAK,eACP,MAAK,MAAM,iBAAiB,gBAC1B,mBAAkB,eAAe,KAAK,eAAe;UAE9C,KAAK,WACd,MAAK,MAAM,iBAAiB,gBAC1B,2BAA0B,cAAc;AAI5C,QAAO;;AAGT,eAAsB,sBAAsB,MASzC;CACD,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,YAAY;CAC5D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,cAAc,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OACjF,EAAE,cAAc,EAAE,CACnB;CACD,MAAM,UAA4B,EAAE;CACpC,IAAI,WAAqC;CACzC,IAAI,gBAA+B;CACnC,IAAI,aAAoC;CACxC,IAAI,iBAAgC;CAEpC,MAAM,aAAa,MAAM,sBAAsB;EAC7C,WAAW,KAAK;EAChB;EACA,KAAK;EACL,QAAQ,KAAK,cAAc;EAC3B,SAAS,KAAK;EACd,iBAAiB;EAClB,CAAC;AACF,SAAQ,KAAK,WAAW;AAExB,KAAI,KAAK,cAAc,MAAM;AAC3B,eAAa,MAAM,sBAAsB;GACvC,WAAW,KAAK;GAChB;GACA,KAAK;GACL,QAAQ,KAAK,cAAc;GAC3B,SAAS,KAAK,cAAc,KAAK;GACjC,iBAAiB;GACjB,oBAAoB;GACrB,CAAC;AACF,UAAQ,KAAK,WAAW;AACxB,MAAI,WAAW,cACb,iBAAgB,WAAW;AAI7B,MAAI,KAAK,cAAc,KAAK,OAAO,KAAK,cAAc,KAAK,WAAW,QACpE,KAAI;GACF,MAAM,eAAe,MAAM,uBAAuB,KAAK,cAAc,KAAK,IAAI;GAC9E,MAAM,wBAAwB,MAAM,qBAAqB;IACvD,SAAS,KAAK,cAAc,KAAK;IACjC;IACA,UAAU;IACX,CAAC;AACF,OAAI,sBACF,kBAAiB;WAEZ,OAAO;AACd,WAAQ,KACN,2DAA2D,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAClH;;AAIL,MAAI,CAAC,gBAAgB;GACnB,MAAM,kBAAkB,KAAK,KAAK,WAAW,WAAW,QAAQ,OAAO,iBAAiB;AACxF,OAAI,WAAW,gBAAgB,CAC7B,kBAAiB;QACZ;IACL,MAAM,sBAAsB,KAAK,YAAY,QAAQ,mBAAmB;AACxE,QAAI,WAAW,oBAAoB,CACjC,kBAAiB;;;;AAMzB,MAAK,MAAM,CAAC,KAAK,WAAW,eAAe;AACzC,MAAI,CAAC,OAAO,OAAO,CAAC,OAAO,WAAW;AACpC,WAAQ,KACN,mCAAmC,IAAI,2EACxC;AACD;;EAEF,MAAM,SAAS,MAAM,sBAAsB;GACzC,WAAW,KAAK;GAChB;GACA;GACA,QAAQ;GACR,SAAS,OAAO;GAChB,iBAAiB,WAAW;GAC7B,CAAC;AACF,UAAQ,KAAK,OAAO;AACpB,MAAI,OAAO,cACT,iBAAgB,OAAO;;CAI3B,MAAM,gBAAgB,cAAc,KAAK,CAAC,SAAS,IAAI;AAEvD,qBAAoB;EAClB,WAAW,KAAK;EAChB;EACA,YAAY;EACZ;EACA;EACD,CAAC;AAEF,KAAI,KAAK,cAAc,IAAI,WAAW,QACpC,YAAW,MAAM,uBAAuB,KAAK,WAAW;AAG1D,QAAO;EACL,YAAY,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB;EACxE;EACA;EACA,QAAQ,KAAK,cAAc,IAAI;EAChC"}
+{"version":3,"file":"api-contract.mjs","names":[],"sources":["../src/api-contract.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join, relative } from \"node:path\";\nimport type { RuntimeConfig, RuntimePluginConfig } from \"./types\";\n\nconst REMOTE_FETCH_TIMEOUT_MS = 10_000;\n\nexport interface ApiPluginManifest {\n  schemaVersion: 1;\n  kind: \"every-plugin/manifest\";\n  plugin: {\n    name: string;\n    version: string;\n  };\n  runtime: {\n    remoteEntry: string;\n  };\n  contract?: {\n    kind: \"orpc\";\n    types: {\n      path: string;\n      exportName: string;\n      typeName: string;\n      sha256?: string;\n    };\n  };\n  additionalExports?: Array<{\n    path: string;\n    exports: string[];\n    sha256?: string;\n  }>;\n}\n\ninterface ContractSource {\n  key: string;\n  importName: string;\n  sourceFilePath: string;\n  generatedPath?: string;\n}\n\nfunction sha256(input: string): string {\n  return createHash(\"sha256\").update(input).digest(\"hex\");\n}\n\nfunction trimTrailingSlash(input: string): string {\n  return input.replace(/\\/$/, \"\");\n}\n\nfunction sanitizeIdentifier(input: string): string {\n  return input.replace(/[^A-Za-z0-9_]/g, \"_\").replace(/^[^A-Za-z_]+/, \"_\");\n}\n\nfunction toImportPath(fromFile: string, targetFile: string): string {\n  const rel = relative(dirname(fromFile), targetFile).replace(/\\\\/g, \"/\");\n  return rel.startsWith(\".\") ? rel : `./${rel}`;\n}\n\nfunction writeFileIfChanged(filePath: string, content: string) {\n  try {\n    if (readFileSync(filePath, \"utf8\") === content) return false;\n  } catch {\n    // file does not exist yet\n  }\n\n  writeFileSync(filePath, content);\n  return true;\n}\n\nfunction getApiPluginManifestUrl(apiBaseUrl: string): string {\n  return `${trimTrailingSlash(apiBaseUrl)}/plugin.manifest.json`;\n}\n\nasync function fetchWithTimeout(url: string): Promise<Response> {\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), REMOTE_FETCH_TIMEOUT_MS);\n\n  try {\n    return await fetch(url, { signal: controller.signal });\n  } catch (error) {\n    if (error instanceof Error && error.name === \"AbortError\") {\n      throw new Error(`Timed out fetching ${url} after ${REMOTE_FETCH_TIMEOUT_MS}ms`);\n    }\n    throw error;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\nasync function fetchApiPluginManifest(apiBaseUrl: string): Promise<ApiPluginManifest> {\n  const response = await fetchWithTimeout(getApiPluginManifestUrl(apiBaseUrl));\n  if (!response.ok) {\n    throw new Error(\n      `Failed to fetch API plugin manifest: ${response.status} ${response.statusText}`,\n    );\n  }\n\n  const manifest = (await response.json()) as ApiPluginManifest;\n  if (manifest.schemaVersion !== 1 || manifest.kind !== \"every-plugin/manifest\") {\n    throw new Error(\"Unsupported API plugin manifest format\");\n  }\n\n  return manifest;\n}\n\nfunction localApiContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"api\", \"src\", \"contract.ts\");\n  return {\n    key: \"api\",\n    importName: \"BaseApiContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nfunction localAuthContractSource(configDir: string): ContractSource {\n  const sourcePath = join(configDir, \"plugins\", \"auth\", \"src\", \"contract.ts\");\n  return {\n    key: \"auth\",\n    importName: \"authContract\",\n    sourceFilePath: sourcePath,\n  };\n}\n\nasync function remoteContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  name: string;\n  baseUrl: string;\n  generatedSubdir: string;\n}): Promise<ContractSource> {\n  const manifest = await fetchApiPluginManifest(opts.baseUrl);\n  if (!manifest.contract) {\n    throw new Error(\n      `Plugin manifest for ${manifest.plugin.name} does not advertise contract types`,\n    );\n  }\n\n  const contractUrl = `${trimTrailingSlash(opts.baseUrl)}/${manifest.contract.types.path.replace(/^\\.\\//, \"\")}`;\n  const contractResponse = await fetchWithTimeout(contractUrl);\n  if (!contractResponse.ok) {\n    throw new Error(\n      `Failed to fetch contract types: ${contractResponse.status} ${contractResponse.statusText}`,\n    );\n  }\n\n  const contractTypes = await contractResponse.text();\n  if (manifest.contract.types.sha256 && manifest.contract.types.sha256 !== sha256(contractTypes)) {\n    throw new Error(\"Fetched contract types failed checksum verification\");\n  }\n\n  const generatedPath = join(opts.runtimeDir, opts.generatedSubdir, \"contract.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, contractTypes);\n\n  return {\n    key: opts.name,\n    importName: `${sanitizeIdentifier(opts.name)}Contract`,\n    sourceFilePath: generatedPath,\n    generatedPath,\n  };\n}\n\nasync function fetchAuthExportTypes(opts: {\n  baseUrl: string;\n  runtimeDir: string;\n  manifest: ApiPluginManifest;\n}): Promise<string | null> {\n  if (!opts.manifest.additionalExports || opts.manifest.additionalExports.length === 0) {\n    return null;\n  }\n\n  const authExportEntry = opts.manifest.additionalExports.find(\n    (entry) => entry.path.includes(\"auth-export\") || entry.path.endsWith(\"auth-export.d.ts\"),\n  );\n\n  if (!authExportEntry) {\n    return null;\n  }\n\n  const exportUrl = `${trimTrailingSlash(opts.baseUrl)}/${authExportEntry.path.replace(/^\\.\\//, \"\")}`;\n  const response = await fetchWithTimeout(exportUrl);\n  if (!response.ok) {\n    console.warn(`[API Contract] Failed to fetch auth export types: ${response.status}`);\n    return null;\n  }\n\n  const content = await response.text();\n  if (authExportEntry.sha256 && authExportEntry.sha256 !== sha256(content)) {\n    console.warn(\"[API Contract] Auth export types checksum mismatch\");\n    return null;\n  }\n\n  const generatedPath = join(opts.runtimeDir, \"auth\", \"auth-export.d.ts\");\n  mkdirSync(dirname(generatedPath), { recursive: true });\n  writeFileIfChanged(generatedPath, content);\n\n  return generatedPath;\n}\n\nfunction writeAuthTypesGen(targetPath: string, authExportPath: string) {\n  const exportImportPath = toImportPath(targetPath, authExportPath);\n  const content = [\n    `export type {`,\n    `  Auth,`,\n    `  AuthOrganizationContext,`,\n    `  AuthOrganization,`,\n    `  AuthOrganizationSummary,`,\n    `  AuthOrganizationMember,`,\n    `  AuthApiKey,`,\n    `  AuthInvitation,`,\n    `  GetActiveMemberInput,`,\n    `  GetOrganizationInput,`,\n    `  ListMembersInput,`,\n    `  ListInvitationsInput,`,\n    `  ListApiKeysInput,`,\n    `  AuthServices,`,\n    `  createAuthInstance,`,\n    `} from \"${exportImportPath}\";`,\n    `import type { InferOutput, ContractType as AuthContract } from \"${toImportPath(targetPath, join(dirname(authExportPath), \"contract.d.ts\"))}\";`,\n    `import type { Auth as BaseAuth } from \"${exportImportPath}\";`,\n    \"\",\n    'type RawAuthSession = InferOutput<\"getSession\">;',\n    'type RawAuthRequestContext = InferOutput<\"getContext\">;',\n    'type RawAuthActiveMember = InferOutput<\"getActiveMember\">;',\n    \"\",\n    'export type AuthSessionUser = NonNullable<RawAuthSession[\"user\"]> & {',\n    \"  role?: string | null;\",\n    \"  isAnonymous?: boolean | null;\",\n    \"  walletAddress?: string | null;\",\n    \"  banned?: boolean | null;\",\n    \"};\",\n    'export type AuthSessionData = NonNullable<RawAuthSession[\"session\"]> & {',\n    \"  activeOrganizationId?: string | null;\",\n    \"};\",\n    \"export type AuthSession = {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  session: AuthSessionData | null;\",\n    \"};\",\n    \"export type AuthRequestContext = RawAuthRequestContext;\",\n    \"export type AuthActiveMember = RawAuthActiveMember;\",\n    'export type AuthBaseSession = BaseAuth[\"$Infer\"][\"Session\"];',\n    \"export type AuthContractType = AuthContract;\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nfunction writeFallbackAuthTypesGen(targetPath: string) {\n  const content = [\n    'import type { Auth } from \"better-auth\";',\n    'export type { Auth } from \"better-auth\";',\n    'export type AuthSession = Auth[\"$Infer\"][\"Session\"];',\n    \"export type AuthSessionData = AuthSession;\",\n    'export type AuthSessionUser = NonNullable<AuthSession[\"user\"]>;',\n    \"export interface AuthOrganizationContext {\",\n    \"  activeOrganizationId: string | null;\",\n    \"  organization: { id: string; name: string; slug: string; logo?: string | null; metadata?: Record<string, unknown> } | null;\",\n    \"  member: { id: string; role: string } | null;\",\n    \"  isPersonal: boolean;\",\n    \"  hasOrganization: boolean;\",\n    \"}\",\n    \"export interface AuthRequestContext {\",\n    \"  user: AuthSessionUser | null;\",\n    \"  userId: string | null;\",\n    \"  isAuthenticated: boolean;\",\n    '  authMethod: \"session\" | \"apiKey\" | \"anonymous\" | \"none\";',\n    \"  near: {\",\n    \"    primaryAccountId: string | null;\",\n    \"    linkedAccounts: Array<{ accountId: string; network: string; publicKey: string; isPrimary: boolean }>;\",\n    \"    hasNearAccount: boolean;\",\n    \"  };\",\n    \"  organization: AuthOrganizationContext;\",\n    \"  organizations?: Array<{ id: string; role: string; name?: string; slug?: string }>;\",\n    \"}\",\n    \"export type AuthActiveMember = { id: string | null; role: string | null; organizationId: string | null };\",\n    \"export type AuthOrganization = {\",\n    \"  id: string;\",\n    \"  name: string;\",\n    \"  slug: string;\",\n    \"  logo?: string | null;\",\n    \"  metadata?: Record<string, unknown> | null;\",\n    \"  createdAt: Date;\",\n    \"};\",\n    'export type AuthOrganizationSummary = NonNullable<AuthOrganizationContext[\"organization\"]>;',\n    'export type AuthOrganizationMember = NonNullable<AuthOrganizationContext[\"member\"]>;',\n    \"export type AuthApiKey = {\",\n    \"  id: string;\",\n    \"  name: string | null;\",\n    \"  prefix: string | null;\",\n    \"  start: string | null;\",\n    \"  expiresAt: Date | null;\",\n    \"  createdAt: Date;\",\n    \"  updatedAt: Date;\",\n    \"  metadata: unknown | null;\",\n    \"  permissions: Record<string, string[]> | null;\",\n    \"};\",\n    \"export type AuthInvitation = {\",\n    \"  id: string;\",\n    \"  organizationId: string;\",\n    \"  email: string;\",\n    \"  role: string | null;\",\n    \"  status: string;\",\n    \"  expiresAt: Date;\",\n    \"  inviterId: string;\",\n    \"};\",\n    \"export type GetActiveMemberInput = { organizationId?: string };\",\n    \"export type GetOrganizationInput = { id: string };\",\n    \"export type ListMembersInput = { organizationId: string };\",\n    \"export type ListInvitationsInput = { organizationId: string };\",\n    \"export type ListApiKeysInput = { organizationId?: string };\",\n    \"export type createAuthInstance = never;\",\n    \"export interface AuthServices {\",\n    \"  auth: Auth;\",\n    \"  db: unknown;\",\n    \"  driver: { close(): Promise<void> };\",\n    \"  handler: (req: Request) => Promise<Response>;\",\n    \"}\",\n    \"\",\n  ].join(\"\\n\");\n  mkdirSync(dirname(targetPath), { recursive: true });\n  writeFileIfChanged(targetPath, content);\n}\n\nasync function resolveContractSource(opts: {\n  configDir: string;\n  runtimeDir: string;\n  key: string;\n  source: RuntimePluginConfig | { url: string; localPath?: string; name: string } | null;\n  baseUrl: string;\n  generatedSubdir: string;\n  localSourceFactory?: (configDir: string) => ContractSource;\n}): Promise<ContractSource> {\n  if (opts.key === \"api\") {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"BaseApiContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return localApiContractSource(opts.configDir);\n    }\n  }\n\n  if (opts.key === \"auth\" && opts.localSourceFactory) {\n    const localPath = opts.source && \"localPath\" in opts.source ? opts.source.localPath : undefined;\n    if (localPath != null && localPath !== \"\") {\n      return {\n        key: opts.key,\n        importName: \"authContract\",\n        sourceFilePath: join(localPath, \"src\", \"contract.ts\"),\n      };\n    }\n\n    if (!opts.baseUrl) {\n      return opts.localSourceFactory(opts.configDir);\n    }\n  }\n\n  if (\n    opts.source &&\n    \"localPath\" in opts.source &&\n    opts.source.localPath != null &&\n    opts.source.localPath !== \"\"\n  ) {\n    return {\n      key: opts.key,\n      importName: `${sanitizeIdentifier(opts.key)}Contract`,\n      sourceFilePath: join(opts.source.localPath, \"src\", \"contract.ts\"),\n    };\n  }\n\n  return remoteContractSource({\n    configDir: opts.configDir,\n    runtimeDir: opts.runtimeDir,\n    name: opts.key,\n    baseUrl: opts.baseUrl,\n    generatedSubdir: opts.generatedSubdir,\n  });\n}\n\nfunction writeGeneratedFiles(opts: {\n  configDir: string;\n  sources: ContractSource[];\n  pluginKeys: string[];\n  authSource: ContractSource | null;\n  authExportPath?: string | null;\n}) {\n  const baseSource = opts.sources.find((source) => source.key === \"api\");\n  const pluginSources = opts.pluginKeys\n    .map((key) => opts.sources.find((entry) => entry.key === key))\n    .filter((source): source is ContractSource => Boolean(source));\n\n  if (!baseSource) {\n    throw new Error(\"API contract source is required to generate the aggregate contract\");\n  }\n\n  // --- Generate ui/src/lib/api-types.gen.ts ---\n  const uiContractPath = join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\");\n  const uiLines: string[] = [];\n\n  for (const source of opts.sources) {\n    const importPath = toImportPath(uiContractPath, source.sourceFilePath);\n    uiLines.push(`import type { ContractType as ${source.importName} } from \"${importPath}\";`);\n  }\n\n  uiLines.push(\"\");\n\n  const compositeParts: string[] = [];\n  if (opts.authSource) {\n    compositeParts.push(`auth: ${opts.authSource.importName}`);\n  }\n  for (const source of pluginSources) {\n    const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key) ? source.key : JSON.stringify(source.key);\n    compositeParts.push(`${key}: ${source.importName}`);\n  }\n\n  if (compositeParts.length === 0) {\n    uiLines.push(`export type ApiContract = ${baseSource.importName};`);\n  } else {\n    uiLines.push(`export type ApiContract = ${baseSource.importName} & {`);\n    for (const part of compositeParts) {\n      uiLines.push(`  ${part};`);\n    }\n    uiLines.push(\"};\");\n  }\n  mkdirSync(dirname(uiContractPath), { recursive: true });\n  writeFileIfChanged(uiContractPath, `${uiLines.join(\"\\n\")}\\n`);\n\n  // --- Generate api/src/lib/plugins-types.gen.ts ---\n  // Includes both plugin contracts AND auth as a unified PluginsClient type\n  const pluginsClientPath = join(opts.configDir, \"api\", \"src\", \"lib\", \"plugins-types.gen.ts\");\n  const pluginsClientLines: string[] = [];\n\n  for (const source of pluginSources) {\n    const importPath = toImportPath(pluginsClientPath, source.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${source.importName} } from \"${importPath}\";`,\n    );\n  }\n\n  if (opts.authSource) {\n    const authImportPath = toImportPath(pluginsClientPath, opts.authSource.sourceFilePath);\n    pluginsClientLines.push(\n      `import type { ContractType as ${opts.authSource.importName} } from \"${authImportPath}\";`,\n    );\n  }\n\n  pluginsClientLines.push(\n    'import type { ContractRouterClient, AnyContractRouter } from \"@orpc/contract\";',\n  );\n  pluginsClientLines.push(\n    \"type ClientFactory<C extends AnyContractRouter> = (context?: Record<string, unknown>) => ContractRouterClient<C>;\",\n  );\n  pluginsClientLines.push(\"\");\n\n  const allPluginSources = [...pluginSources];\n  if (opts.authSource) {\n    allPluginSources.push({ ...opts.authSource, key: \"auth\" });\n  }\n\n  if (allPluginSources.length === 0) {\n    pluginsClientLines.push(\"export type PluginsClient = Record<string, never>;\");\n  } else {\n    pluginsClientLines.push(\"export type PluginsClient = {\");\n    for (const source of allPluginSources) {\n      const key = /^[$A-Z_][0-9A-Z_$]*$/i.test(source.key)\n        ? source.key\n        : JSON.stringify(source.key);\n      pluginsClientLines.push(`  ${key}: ClientFactory<${source.importName}>;`);\n    }\n    pluginsClientLines.push(\"};\");\n  }\n\n  mkdirSync(dirname(pluginsClientPath), { recursive: true });\n  writeFileIfChanged(pluginsClientPath, `${pluginsClientLines.join(\"\\n\")}\\n`);\n\n  // --- Generate */src/lib/auth-types.gen.ts ---\n  const authTypeTargets = [join(opts.configDir, \"ui\", \"src\", \"lib\", \"auth-types.gen.ts\")];\n  const apiLibDir = join(opts.configDir, \"api\", \"src\", \"lib\");\n  if (existsSync(apiLibDir)) {\n    authTypeTargets.push(join(apiLibDir, \"auth-types.gen.ts\"));\n  }\n  const hostLibDir = join(opts.configDir, \"host\", \"src\", \"lib\");\n  if (existsSync(join(opts.configDir, \"host\", \"src\"))) {\n    authTypeTargets.push(join(hostLibDir, \"auth-types.gen.ts\"));\n  }\n\n  if (opts.authExportPath) {\n    for (const authTypesPath of authTypeTargets) {\n      writeAuthTypesGen(authTypesPath, opts.authExportPath);\n    }\n  } else if (opts.authSource) {\n    for (const authTypesPath of authTypeTargets) {\n      writeFallbackAuthTypesGen(authTypesPath);\n    }\n  }\n\n  return uiContractPath;\n}\n\nexport async function syncApiContractBridge(opts: {\n  configDir: string;\n  runtimeConfig: RuntimeConfig;\n  apiBaseUrl: string;\n}): Promise<{\n  bridgePath: string;\n  generatedPath: string | null;\n  manifest: ApiPluginManifest | null;\n  source: \"local\" | \"remote\";\n}> {\n  const runtimeDir = join(opts.configDir, \".bos\", \"generated\");\n  const pluginEntries = Object.entries(opts.runtimeConfig.plugins ?? {}).sort(([a], [b]) =>\n    a.localeCompare(b),\n  );\n  const sources: ContractSource[] = [];\n  let manifest: ApiPluginManifest | null = null;\n  let generatedPath: string | null = null;\n  let authSource: ContractSource | null = null;\n  let authExportPath: string | null = null;\n\n  const baseSource = await resolveContractSource({\n    configDir: opts.configDir,\n    runtimeDir,\n    key: \"api\",\n    source: opts.runtimeConfig.api,\n    baseUrl: opts.apiBaseUrl,\n    generatedSubdir: \"api\",\n  });\n  sources.push(baseSource);\n\n  if (opts.runtimeConfig.auth) {\n    authSource = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key: \"auth\",\n      source: opts.runtimeConfig.auth,\n      baseUrl: opts.runtimeConfig.auth.url,\n      generatedSubdir: \"auth\",\n      localSourceFactory: localAuthContractSource,\n    });\n    sources.push(authSource);\n    if (authSource.generatedPath) {\n      generatedPath = authSource.generatedPath;\n    }\n\n    // Fetch auth additional exports (auth-export.d.ts) for remote auth\n    if (opts.runtimeConfig.auth.url && opts.runtimeConfig.auth.source !== \"local\") {\n      try {\n        const authManifest = await fetchApiPluginManifest(opts.runtimeConfig.auth.url);\n        const fetchedAuthExportPath = await fetchAuthExportTypes({\n          baseUrl: opts.runtimeConfig.auth.url,\n          runtimeDir,\n          manifest: authManifest,\n        });\n        if (fetchedAuthExportPath) {\n          authExportPath = fetchedAuthExportPath;\n        }\n      } catch (error) {\n        console.warn(\n          `[API Contract] Failed to fetch auth additional exports: ${error instanceof Error ? error.message : String(error)}`,\n        );\n      }\n    }\n\n    if (!authExportPath) {\n      const localAuthExport = join(opts.configDir, \"plugins\", \"auth\", \"src\", \"auth-export.ts\");\n      if (existsSync(localAuthExport)) {\n        authExportPath = localAuthExport;\n      } else {\n        const generatedAuthExport = join(runtimeDir, \"auth\", \"auth-export.d.ts\");\n        if (existsSync(generatedAuthExport)) {\n          authExportPath = generatedAuthExport;\n        }\n      }\n    }\n  }\n\n  for (const [key, plugin] of pluginEntries) {\n    if (!plugin.url && !plugin.localPath) {\n      console.warn(\n        `[API Contract] Skipping plugin \"${key}\" — no URL resolved (local path missing and no production URL configured)`,\n      );\n      continue;\n    }\n    const source = await resolveContractSource({\n      configDir: opts.configDir,\n      runtimeDir,\n      key,\n      source: plugin,\n      baseUrl: plugin.url,\n      generatedSubdir: `plugins/${key}`,\n    });\n    sources.push(source);\n    if (source.generatedPath) {\n      generatedPath = source.generatedPath;\n    }\n  }\n\n  const allPluginKeys = pluginEntries.map(([key]) => key);\n\n  writeGeneratedFiles({\n    configDir: opts.configDir,\n    sources,\n    pluginKeys: allPluginKeys,\n    authSource,\n    authExportPath,\n  });\n\n  if (opts.runtimeConfig.api.source !== \"local\") {\n    manifest = await fetchApiPluginManifest(opts.apiBaseUrl);\n  }\n\n  return {\n    bridgePath: join(opts.configDir, \"ui\", \"src\", \"lib\", \"api-types.gen.ts\"),\n    generatedPath,\n    manifest,\n    source: opts.runtimeConfig.api.source,\n  };\n}\n"],"mappings":";;;;;AAKA,MAAM,0BAA0B;AAmChC,SAAS,OAAO,OAAuB;AACrC,QAAO,WAAW,SAAS,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM;;AAGzD,SAAS,kBAAkB,OAAuB;AAChD,QAAO,MAAM,QAAQ,OAAO,GAAG;;AAGjC,SAAS,mBAAmB,OAAuB;AACjD,QAAO,MAAM,QAAQ,kBAAkB,IAAI,CAAC,QAAQ,gBAAgB,IAAI;;AAG1E,SAAS,aAAa,UAAkB,YAA4B;CAClE,MAAM,MAAM,SAAS,QAAQ,SAAS,EAAE,WAAW,CAAC,QAAQ,OAAO,IAAI;AACvE,QAAO,IAAI,WAAW,IAAI,GAAG,MAAM,KAAK;;AAG1C,SAAS,mBAAmB,UAAkB,SAAiB;AAC7D,KAAI;AACF,MAAI,aAAa,UAAU,OAAO,KAAK,QAAS,QAAO;SACjD;AAIR,eAAc,UAAU,QAAQ;AAChC,QAAO;;AAGT,SAAS,wBAAwB,YAA4B;AAC3D,QAAO,GAAG,kBAAkB,WAAW,CAAC;;AAG1C,eAAe,iBAAiB,KAAgC;CAC9D,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,UAAU,iBAAiB,WAAW,OAAO,EAAE,wBAAwB;AAE7E,KAAI;AACF,SAAO,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;UAC/C,OAAO;AACd,MAAI,iBAAiB,SAAS,MAAM,SAAS,aAC3C,OAAM,IAAI,MAAM,sBAAsB,IAAI,SAAS,wBAAwB,IAAI;AAEjF,QAAM;WACE;AACR,eAAa,QAAQ;;;AAIzB,eAAe,uBAAuB,YAAgD;CACpF,MAAM,WAAW,MAAM,iBAAiB,wBAAwB,WAAW,CAAC;AAC5E,KAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MACR,wCAAwC,SAAS,OAAO,GAAG,SAAS,aACrE;CAGH,MAAM,WAAY,MAAM,SAAS,MAAM;AACvC,KAAI,SAAS,kBAAkB,KAAK,SAAS,SAAS,wBACpD,OAAM,IAAI,MAAM,yCAAyC;AAG3D,QAAO;;AAGT,SAAS,uBAAuB,WAAmC;AAEjE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,OAAO,OAAO,cAAc;EAK9D;;AAGH,SAAS,wBAAwB,WAAmC;AAElE,QAAO;EACL,KAAK;EACL,YAAY;EACZ,gBAJiB,KAAK,WAAW,WAAW,QAAQ,OAAO,cAAc;EAK1E;;AAGH,eAAe,qBAAqB,MAMR;CAC1B,MAAM,WAAW,MAAM,uBAAuB,KAAK,QAAQ;AAC3D,KAAI,CAAC,SAAS,SACZ,OAAM,IAAI,MACR,uBAAuB,SAAS,OAAO,KAAK,oCAC7C;CAIH,MAAM,mBAAmB,MAAM,iBADX,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,SAAS,SAAS,MAAM,KAAK,QAAQ,SAAS,GAAG,GAC/C;AAC5D,KAAI,CAAC,iBAAiB,GACpB,OAAM,IAAI,MACR,mCAAmC,iBAAiB,OAAO,GAAG,iBAAiB,aAChF;CAGH,MAAM,gBAAgB,MAAM,iBAAiB,MAAM;AACnD,KAAI,SAAS,SAAS,MAAM,UAAU,SAAS,SAAS,MAAM,WAAW,OAAO,cAAc,CAC5F,OAAM,IAAI,MAAM,sDAAsD;CAGxE,MAAM,gBAAgB,KAAK,KAAK,YAAY,KAAK,iBAAiB,gBAAgB;AAClF,WAAU,QAAQ,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,cAAc;AAEhD,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,KAAK,CAAC;EAC7C,gBAAgB;EAChB;EACD;;AAGH,eAAe,qBAAqB,MAIT;AACzB,KAAI,CAAC,KAAK,SAAS,qBAAqB,KAAK,SAAS,kBAAkB,WAAW,EACjF,QAAO;CAGT,MAAM,kBAAkB,KAAK,SAAS,kBAAkB,MACrD,UAAU,MAAM,KAAK,SAAS,cAAc,IAAI,MAAM,KAAK,SAAS,mBAAmB,CACzF;AAED,KAAI,CAAC,gBACH,QAAO;CAIT,MAAM,WAAW,MAAM,iBADL,GAAG,kBAAkB,KAAK,QAAQ,CAAC,GAAG,gBAAgB,KAAK,QAAQ,SAAS,GAAG,GAC/C;AAClD,KAAI,CAAC,SAAS,IAAI;AAChB,UAAQ,KAAK,qDAAqD,SAAS,SAAS;AACpF,SAAO;;CAGT,MAAM,UAAU,MAAM,SAAS,MAAM;AACrC,KAAI,gBAAgB,UAAU,gBAAgB,WAAW,OAAO,QAAQ,EAAE;AACxE,UAAQ,KAAK,qDAAqD;AAClE,SAAO;;CAGT,MAAM,gBAAgB,KAAK,KAAK,YAAY,QAAQ,mBAAmB;AACvE,WAAU,QAAQ,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AACtD,oBAAmB,eAAe,QAAQ;AAE1C,QAAO;;AAGT,SAAS,kBAAkB,YAAoB,gBAAwB;CACrE,MAAM,mBAAmB,aAAa,YAAY,eAAe;CACjE,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,iBAAiB;EAC5B,mEAAmE,aAAa,YAAY,KAAK,QAAQ,eAAe,EAAE,gBAAgB,CAAC,CAAC;EAC5I,0CAA0C,iBAAiB;EAC3D;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;AACZ,WAAU,QAAQ,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,oBAAmB,YAAY,QAAQ;;AAGzC,SAAS,0BAA0B,YAAoB;CACrD,MAAM,UAAU;EACd;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC,KAAK,KAAK;AACZ,WAAU,QAAQ,WAAW,EAAE,EAAE,WAAW,MAAM,CAAC;AACnD,oBAAmB,YAAY,QAAQ;;AAGzC,eAAe,sBAAsB,MAQT;AAC1B,KAAI,KAAK,QAAQ,OAAO;EACtB,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,aAAa,QAAQ,cAAc,GACrC,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,uBAAuB,KAAK,UAAU;;AAIjD,KAAI,KAAK,QAAQ,UAAU,KAAK,oBAAoB;EAClD,MAAM,YAAY,KAAK,UAAU,eAAe,KAAK,SAAS,KAAK,OAAO,YAAY;AACtF,MAAI,aAAa,QAAQ,cAAc,GACrC,QAAO;GACL,KAAK,KAAK;GACV,YAAY;GACZ,gBAAgB,KAAK,WAAW,OAAO,cAAc;GACtD;AAGH,MAAI,CAAC,KAAK,QACR,QAAO,KAAK,mBAAmB,KAAK,UAAU;;AAIlD,KACE,KAAK,UACL,eAAe,KAAK,UACpB,KAAK,OAAO,aAAa,QACzB,KAAK,OAAO,cAAc,GAE1B,QAAO;EACL,KAAK,KAAK;EACV,YAAY,GAAG,mBAAmB,KAAK,IAAI,CAAC;EAC5C,gBAAgB,KAAK,KAAK,OAAO,WAAW,OAAO,cAAc;EAClE;AAGH,QAAO,qBAAqB;EAC1B,WAAW,KAAK;EAChB,YAAY,KAAK;EACjB,MAAM,KAAK;EACX,SAAS,KAAK;EACd,iBAAiB,KAAK;EACvB,CAAC;;AAGJ,SAAS,oBAAoB,MAM1B;CACD,MAAM,aAAa,KAAK,QAAQ,MAAM,WAAW,OAAO,QAAQ,MAAM;CACtE,MAAM,gBAAgB,KAAK,WACxB,KAAK,QAAQ,KAAK,QAAQ,MAAM,UAAU,MAAM,QAAQ,IAAI,CAAC,CAC7D,QAAQ,WAAqC,QAAQ,OAAO,CAAC;AAEhE,KAAI,CAAC,WACH,OAAM,IAAI,MAAM,qEAAqE;CAIvF,MAAM,iBAAiB,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB;CACnF,MAAM,UAAoB,EAAE;AAE5B,MAAK,MAAM,UAAU,KAAK,SAAS;EACjC,MAAM,aAAa,aAAa,gBAAgB,OAAO,eAAe;AACtE,UAAQ,KAAK,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAAI;;AAG5F,SAAQ,KAAK,GAAG;CAEhB,MAAM,iBAA2B,EAAE;AACnC,KAAI,KAAK,WACP,gBAAe,KAAK,SAAS,KAAK,WAAW,aAAa;AAE5D,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAAG,OAAO,MAAM,KAAK,UAAU,OAAO,IAAI;AAC9F,iBAAe,KAAK,GAAG,IAAI,IAAI,OAAO,aAAa;;AAGrD,KAAI,eAAe,WAAW,EAC5B,SAAQ,KAAK,6BAA6B,WAAW,WAAW,GAAG;MAC9D;AACL,UAAQ,KAAK,6BAA6B,WAAW,WAAW,MAAM;AACtE,OAAK,MAAM,QAAQ,eACjB,SAAQ,KAAK,KAAK,KAAK,GAAG;AAE5B,UAAQ,KAAK,KAAK;;AAEpB,WAAU,QAAQ,eAAe,EAAE,EAAE,WAAW,MAAM,CAAC;AACvD,oBAAmB,gBAAgB,GAAG,QAAQ,KAAK,KAAK,CAAC,IAAI;CAI7D,MAAM,oBAAoB,KAAK,KAAK,WAAW,OAAO,OAAO,OAAO,uBAAuB;CAC3F,MAAM,qBAA+B,EAAE;AAEvC,MAAK,MAAM,UAAU,eAAe;EAClC,MAAM,aAAa,aAAa,mBAAmB,OAAO,eAAe;AACzE,qBAAmB,KACjB,iCAAiC,OAAO,WAAW,WAAW,WAAW,IAC1E;;AAGH,KAAI,KAAK,YAAY;EACnB,MAAM,iBAAiB,aAAa,mBAAmB,KAAK,WAAW,eAAe;AACtF,qBAAmB,KACjB,iCAAiC,KAAK,WAAW,WAAW,WAAW,eAAe,IACvF;;AAGH,oBAAmB,KACjB,mFACD;AACD,oBAAmB,KACjB,oHACD;AACD,oBAAmB,KAAK,GAAG;CAE3B,MAAM,mBAAmB,CAAC,GAAG,cAAc;AAC3C,KAAI,KAAK,WACP,kBAAiB,KAAK;EAAE,GAAG,KAAK;EAAY,KAAK;EAAQ,CAAC;AAG5D,KAAI,iBAAiB,WAAW,EAC9B,oBAAmB,KAAK,qDAAqD;MACxE;AACL,qBAAmB,KAAK,gCAAgC;AACxD,OAAK,MAAM,UAAU,kBAAkB;GACrC,MAAM,MAAM,wBAAwB,KAAK,OAAO,IAAI,GAChD,OAAO,MACP,KAAK,UAAU,OAAO,IAAI;AAC9B,sBAAmB,KAAK,KAAK,IAAI,kBAAkB,OAAO,WAAW,IAAI;;AAE3E,qBAAmB,KAAK,KAAK;;AAG/B,WAAU,QAAQ,kBAAkB,EAAE,EAAE,WAAW,MAAM,CAAC;AAC1D,oBAAmB,mBAAmB,GAAG,mBAAmB,KAAK,KAAK,CAAC,IAAI;CAG3E,MAAM,kBAAkB,CAAC,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,oBAAoB,CAAC;CACvF,MAAM,YAAY,KAAK,KAAK,WAAW,OAAO,OAAO,MAAM;AAC3D,KAAI,WAAW,UAAU,CACvB,iBAAgB,KAAK,KAAK,WAAW,oBAAoB,CAAC;CAE5D,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,OAAO,MAAM;AAC7D,KAAI,WAAW,KAAK,KAAK,WAAW,QAAQ,MAAM,CAAC,CACjD,iBAAgB,KAAK,KAAK,YAAY,oBAAoB,CAAC;AAG7D,KAAI,KAAK,eACP,MAAK,MAAM,iBAAiB,gBAC1B,mBAAkB,eAAe,KAAK,eAAe;UAE9C,KAAK,WACd,MAAK,MAAM,iBAAiB,gBAC1B,2BAA0B,cAAc;AAI5C,QAAO;;AAGT,eAAsB,sBAAsB,MASzC;CACD,MAAM,aAAa,KAAK,KAAK,WAAW,QAAQ,YAAY;CAC5D,MAAM,gBAAgB,OAAO,QAAQ,KAAK,cAAc,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OACjF,EAAE,cAAc,EAAE,CACnB;CACD,MAAM,UAA4B,EAAE;CACpC,IAAI,WAAqC;CACzC,IAAI,gBAA+B;CACnC,IAAI,aAAoC;CACxC,IAAI,iBAAgC;CAEpC,MAAM,aAAa,MAAM,sBAAsB;EAC7C,WAAW,KAAK;EAChB;EACA,KAAK;EACL,QAAQ,KAAK,cAAc;EAC3B,SAAS,KAAK;EACd,iBAAiB;EAClB,CAAC;AACF,SAAQ,KAAK,WAAW;AAExB,KAAI,KAAK,cAAc,MAAM;AAC3B,eAAa,MAAM,sBAAsB;GACvC,WAAW,KAAK;GAChB;GACA,KAAK;GACL,QAAQ,KAAK,cAAc;GAC3B,SAAS,KAAK,cAAc,KAAK;GACjC,iBAAiB;GACjB,oBAAoB;GACrB,CAAC;AACF,UAAQ,KAAK,WAAW;AACxB,MAAI,WAAW,cACb,iBAAgB,WAAW;AAI7B,MAAI,KAAK,cAAc,KAAK,OAAO,KAAK,cAAc,KAAK,WAAW,QACpE,KAAI;GACF,MAAM,eAAe,MAAM,uBAAuB,KAAK,cAAc,KAAK,IAAI;GAC9E,MAAM,wBAAwB,MAAM,qBAAqB;IACvD,SAAS,KAAK,cAAc,KAAK;IACjC;IACA,UAAU;IACX,CAAC;AACF,OAAI,sBACF,kBAAiB;WAEZ,OAAO;AACd,WAAQ,KACN,2DAA2D,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GAClH;;AAIL,MAAI,CAAC,gBAAgB;GACnB,MAAM,kBAAkB,KAAK,KAAK,WAAW,WAAW,QAAQ,OAAO,iBAAiB;AACxF,OAAI,WAAW,gBAAgB,CAC7B,kBAAiB;QACZ;IACL,MAAM,sBAAsB,KAAK,YAAY,QAAQ,mBAAmB;AACxE,QAAI,WAAW,oBAAoB,CACjC,kBAAiB;;;;AAMzB,MAAK,MAAM,CAAC,KAAK,WAAW,eAAe;AACzC,MAAI,CAAC,OAAO,OAAO,CAAC,OAAO,WAAW;AACpC,WAAQ,KACN,mCAAmC,IAAI,2EACxC;AACD;;EAEF,MAAM,SAAS,MAAM,sBAAsB;GACzC,WAAW,KAAK;GAChB;GACA;GACA,QAAQ;GACR,SAAS,OAAO;GAChB,iBAAiB,WAAW;GAC7B,CAAC;AACF,UAAQ,KAAK,OAAO;AACpB,MAAI,OAAO,cACT,iBAAgB,OAAO;;CAI3B,MAAM,gBAAgB,cAAc,KAAK,CAAC,SAAS,IAAI;AAEvD,qBAAoB;EAClB,WAAW,KAAK;EAChB;EACA,YAAY;EACZ;EACA;EACD,CAAC;AAEF,KAAI,KAAK,cAAc,IAAI,WAAW,QACpC,YAAW,MAAM,uBAAuB,KAAK,WAAW;AAG1D,QAAO;EACL,YAAY,KAAK,KAAK,WAAW,MAAM,OAAO,OAAO,mBAAmB;EACxE;EACA;EACA,QAAQ,KAAK,cAAc,IAAI;EAChC"}

package/dist/cli/infra.cjs

@@ -0,0 +1,127 @@
+const require_runtime = require('../_virtual/_rolldown/runtime.cjs');
+let node_fs = require("node:fs");
+let node_path = require("node:path");
+let _clack_prompts = require("@clack/prompts");
+_clack_prompts = require_runtime.__toESM(_clack_prompts, 1);
+let node_crypto = require("node:crypto");
+
+//#region src/cli/infra.ts
+const POSTGRES_USER = "everythingdev";
+const POSTGRES_PASSWORD = "everythingdev";
+const API_DATABASE_SECRET = "API_DATABASE_URL";
+const AUTH_DATABASE_SECRET = "AUTH_DATABASE_URL";
+const BASE_DATABASE_PORT = 5434;
+function uniqueSecrets(values) {
+	const secrets = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const value of values) {
+		if (!value || seen.has(value)) continue;
+		seen.add(value);
+		secrets.push(value);
+	}
+	return secrets;
+}
+function getRuntimeSecrets(runtimeConfig) {
+	const pluginSecrets = Object.values(runtimeConfig.plugins ?? {}).flatMap((plugin) => plugin.secrets ?? []);
+	return uniqueSecrets([
+		API_DATABASE_SECRET,
+		AUTH_DATABASE_SECRET,
+		...runtimeConfig.api.secrets ?? [],
+		...runtimeConfig.auth?.secrets ?? [],
+		...pluginSecrets
+	]);
+}
+function normalizeDatabaseSlug(secret) {
+	return secret.replace(/_DATABASE_URL$/, "").toLowerCase();
+}
+function buildDatabaseConfigs(secrets) {
+	return [
+		API_DATABASE_SECRET,
+		AUTH_DATABASE_SECRET,
+		...uniqueSecrets(secrets.filter((secret) => secret.endsWith("_DATABASE_URL"))).filter((secret) => secret !== API_DATABASE_SECRET && secret !== AUTH_DATABASE_SECRET).sort((a, b) => a.localeCompare(b))
+	].map((secret, index) => {
+		const slug = normalizeDatabaseSlug(secret);
+		const port = secret === API_DATABASE_SECRET ? 5432 : secret === AUTH_DATABASE_SECRET ? 5433 : BASE_DATABASE_PORT + index - 2;
+		return {
+			secret,
+			slug,
+			port,
+			serviceName: `postgres-${slug.replace(/_/g, "-")}`,
+			databaseName: `${slug}_db`,
+			volumeName: `postgres_${slug}_data`,
+			url: `postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@localhost:${port}/${slug}_db`
+		};
+	});
+}
+function defaultSecretValue(secret, databases, options) {
+	if (secret === "BETTER_AUTH_SECRET") return options.forExample ? "" : (0, node_crypto.randomBytes)(32).toString("base64url");
+	if (secret === "CORS_ORIGIN") return "http://localhost:3000";
+	return databases.get(secret)?.url ?? "";
+}
+function renderEnvFile(secrets, databases, options) {
+	const databaseMap = new Map(databases.map((entry) => [entry.secret, entry]));
+	const lines = [
+		"# Generated from configured bos secrets",
+		"# Update values as needed for your local environment",
+		""
+	];
+	for (const secret of secrets) lines.push(`${secret}=${defaultSecretValue(secret, databaseMap, options)}`);
+	return `${lines.join("\n")}\n`;
+}
+function renderDockerCompose(databases) {
+	const lines = [
+		"x-pg-common: &pg-common",
+		"  image: postgres:17-alpine",
+		"  environment: &pg-env",
+		`    POSTGRES_USER: ${POSTGRES_USER}`,
+		`    POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}`,
+		"  healthcheck:",
+		"    test: [\"CMD-SHELL\", \"pg_isready -U everythingdev\"]",
+		"    interval: 3s",
+		"    timeout: 3s",
+		"    retries: 5",
+		"",
+		"services:"
+	];
+	for (const database of databases) {
+		lines.push(`  ${database.serviceName}:`);
+		lines.push("    <<: *pg-common");
+		lines.push("    environment:");
+		lines.push("      <<: *pg-env");
+		lines.push(`      POSTGRES_DB: ${database.databaseName}`);
+		lines.push("    ports:");
+		lines.push(`      - "${database.port}:5432"`);
+		lines.push("    volumes:");
+		lines.push(`      - ${database.volumeName}:/var/lib/postgresql/data`);
+		lines.push("");
+	}
+	lines.push("volumes:");
+	for (const database of databases) lines.push(`  ${database.volumeName}:`);
+	return `${lines.join("\n")}\n`;
+}
+function writeGeneratedInfra(configDir, runtimeConfig) {
+	const secrets = getRuntimeSecrets(runtimeConfig);
+	const databases = buildDatabaseConfigs(secrets);
+	const envExamplePath = (0, node_path.join)(configDir, ".env.example");
+	const dockerComposePath = (0, node_path.join)(configDir, "docker-compose.yml");
+	(0, node_fs.writeFileSync)(envExamplePath, renderEnvFile(secrets, databases, { forExample: true }));
+	(0, node_fs.writeFileSync)(dockerComposePath, renderDockerCompose(databases));
+	return secrets;
+}
+function ensureEnvFile(configDir) {
+	const envPath = (0, node_path.join)(configDir, ".env");
+	const examplePath = (0, node_path.join)(configDir, ".env.example");
+	if ((0, node_fs.existsSync)(envPath) || !(0, node_fs.existsSync)(examplePath)) return;
+	const lines = (0, node_fs.readFileSync)(examplePath, "utf-8").split("\n");
+	const secret = (0, node_crypto.randomBytes)(32).toString("base64url");
+	(0, node_fs.writeFileSync)(envPath, lines.map((line) => {
+		if (/^BETTER_AUTH_SECRET=/.test(line)) return `BETTER_AUTH_SECRET=${secret}`;
+		return line;
+	}).join("\n"));
+	_clack_prompts.log.info("Created .env from generated .env.example with generated BETTER_AUTH_SECRET");
+}
+
+//#endregion
+exports.ensureEnvFile = ensureEnvFile;
+exports.writeGeneratedInfra = writeGeneratedInfra;
+//# sourceMappingURL=infra.cjs.map

package/dist/cli/infra.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"infra.cjs","names":[],"sources":["../../src/cli/infra.ts"],"sourcesContent":["import { randomBytes } from \"node:crypto\";\nimport { existsSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport * as p from \"@clack/prompts\";\nimport type { RuntimeConfig } from \"../types\";\n\nconst POSTGRES_USER = \"everythingdev\";\nconst POSTGRES_PASSWORD = \"everythingdev\";\nconst API_DATABASE_SECRET = \"API_DATABASE_URL\";\nconst AUTH_DATABASE_SECRET = \"AUTH_DATABASE_URL\";\nconst BASE_DATABASE_PORT = 5434;\n\ninterface DatabaseSecretConfig {\n  secret: string;\n  slug: string;\n  port: number;\n  serviceName: string;\n  databaseName: string;\n  volumeName: string;\n  url: string;\n}\n\nfunction uniqueSecrets(values: Array<string | undefined>): string[] {\n  const secrets: string[] = [];\n  const seen = new Set<string>();\n\n  for (const value of values) {\n    if (!value || seen.has(value)) continue;\n    seen.add(value);\n    secrets.push(value);\n  }\n\n  return secrets;\n}\n\nfunction getRuntimeSecrets(runtimeConfig: RuntimeConfig): string[] {\n  const pluginSecrets = Object.values(runtimeConfig.plugins ?? {}).flatMap(\n    (plugin) => plugin.secrets ?? [],\n  );\n\n  return uniqueSecrets([\n    API_DATABASE_SECRET,\n    AUTH_DATABASE_SECRET,\n    ...(runtimeConfig.api.secrets ?? []),\n    ...(runtimeConfig.auth?.secrets ?? []),\n    ...pluginSecrets,\n  ]);\n}\n\nfunction normalizeDatabaseSlug(secret: string): string {\n  return secret.replace(/_DATABASE_URL$/, \"\").toLowerCase();\n}\n\nfunction buildDatabaseConfigs(secrets: string[]): DatabaseSecretConfig[] {\n  const databaseSecrets = uniqueSecrets(\n    secrets.filter((secret) => secret.endsWith(\"_DATABASE_URL\")),\n  );\n\n  const additionalSecrets = databaseSecrets\n    .filter((secret) => secret !== API_DATABASE_SECRET && secret !== AUTH_DATABASE_SECRET)\n    .sort((a, b) => a.localeCompare(b));\n\n  const orderedSecrets = [API_DATABASE_SECRET, AUTH_DATABASE_SECRET, ...additionalSecrets];\n\n  return orderedSecrets.map((secret, index) => {\n    const slug = normalizeDatabaseSlug(secret);\n    const port =\n      secret === API_DATABASE_SECRET\n        ? 5432\n        : secret === AUTH_DATABASE_SECRET\n          ? 5433\n          : BASE_DATABASE_PORT + index - 2;\n\n    return {\n      secret,\n      slug,\n      port,\n      serviceName: `postgres-${slug.replace(/_/g, \"-\")}`,\n      databaseName: `${slug}_db`,\n      volumeName: `postgres_${slug}_data`,\n      url: `postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@localhost:${port}/${slug}_db`,\n    };\n  });\n}\n\nfunction defaultSecretValue(\n  secret: string,\n  databases: Map<string, DatabaseSecretConfig>,\n  options: { forExample: boolean },\n): string {\n  if (secret === \"BETTER_AUTH_SECRET\") {\n    return options.forExample ? \"\" : randomBytes(32).toString(\"base64url\");\n  }\n\n  if (secret === \"CORS_ORIGIN\") {\n    return \"http://localhost:3000\";\n  }\n\n  return databases.get(secret)?.url ?? \"\";\n}\n\nfunction renderEnvFile(\n  secrets: string[],\n  databases: DatabaseSecretConfig[],\n  options: { forExample: boolean },\n): string {\n  const databaseMap = new Map(databases.map((entry) => [entry.secret, entry]));\n  const lines = [\n    \"# Generated from configured bos secrets\",\n    \"# Update values as needed for your local environment\",\n    \"\",\n  ];\n\n  for (const secret of secrets) {\n    lines.push(`${secret}=${defaultSecretValue(secret, databaseMap, options)}`);\n  }\n\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nfunction renderDockerCompose(databases: DatabaseSecretConfig[]): string {\n  const lines = [\n    \"x-pg-common: &pg-common\",\n    \"  image: postgres:17-alpine\",\n    \"  environment: &pg-env\",\n    `    POSTGRES_USER: ${POSTGRES_USER}`,\n    `    POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}`,\n    \"  healthcheck:\",\n    '    test: [\"CMD-SHELL\", \"pg_isready -U everythingdev\"]',\n    \"    interval: 3s\",\n    \"    timeout: 3s\",\n    \"    retries: 5\",\n    \"\",\n    \"services:\",\n  ];\n\n  for (const database of databases) {\n    lines.push(`  ${database.serviceName}:`);\n    lines.push(\"    <<: *pg-common\");\n    lines.push(\"    environment:\");\n    lines.push(\"      <<: *pg-env\");\n    lines.push(`      POSTGRES_DB: ${database.databaseName}`);\n    lines.push(\"    ports:\");\n    lines.push(`      - \"${database.port}:5432\"`);\n    lines.push(\"    volumes:\");\n    lines.push(`      - ${database.volumeName}:/var/lib/postgresql/data`);\n    lines.push(\"\");\n  }\n\n  lines.push(\"volumes:\");\n  for (const database of databases) {\n    lines.push(`  ${database.volumeName}:`);\n  }\n\n  return `${lines.join(\"\\n\")}\\n`;\n}\n\nexport function writeGeneratedInfra(configDir: string, runtimeConfig: RuntimeConfig): string[] {\n  const secrets = getRuntimeSecrets(runtimeConfig);\n  const databases = buildDatabaseConfigs(secrets);\n  const envExamplePath = join(configDir, \".env.example\");\n  const dockerComposePath = join(configDir, \"docker-compose.yml\");\n\n  writeFileSync(envExamplePath, renderEnvFile(secrets, databases, { forExample: true }));\n  writeFileSync(dockerComposePath, renderDockerCompose(databases));\n\n  return secrets;\n}\n\nexport function ensureEnvFile(configDir: string): void {\n  const envPath = join(configDir, \".env\");\n  const examplePath = join(configDir, \".env.example\");\n\n  if (existsSync(envPath) || !existsSync(examplePath)) return;\n\n  const content = readFileSync(examplePath, \"utf-8\");\n  const lines = content.split(\"\\n\");\n  const secret = randomBytes(32).toString(\"base64url\");\n  const updated = lines\n    .map((line) => {\n      if (/^BETTER_AUTH_SECRET=/.test(line)) {\n        return `BETTER_AUTH_SECRET=${secret}`;\n      }\n      return line;\n    })\n    .join(\"\\n\");\n\n  writeFileSync(envPath, updated);\n  p.log.info(\"Created .env from generated .env.example with generated BETTER_AUTH_SECRET\");\n}\n"],"mappings":";;;;;;;;AAMA,MAAM,gBAAgB;AACtB,MAAM,oBAAoB;AAC1B,MAAM,sBAAsB;AAC5B,MAAM,uBAAuB;AAC7B,MAAM,qBAAqB;AAY3B,SAAS,cAAc,QAA6C;CAClE,MAAM,UAAoB,EAAE;CAC5B,MAAM,uBAAO,IAAI,KAAa;AAE9B,MAAK,MAAM,SAAS,QAAQ;AAC1B,MAAI,CAAC,SAAS,KAAK,IAAI,MAAM,CAAE;AAC/B,OAAK,IAAI,MAAM;AACf,UAAQ,KAAK,MAAM;;AAGrB,QAAO;;AAGT,SAAS,kBAAkB,eAAwC;CACjE,MAAM,gBAAgB,OAAO,OAAO,cAAc,WAAW,EAAE,CAAC,CAAC,SAC9D,WAAW,OAAO,WAAW,EAAE,CACjC;AAED,QAAO,cAAc;EACnB;EACA;EACA,GAAI,cAAc,IAAI,WAAW,EAAE;EACnC,GAAI,cAAc,MAAM,WAAW,EAAE;EACrC,GAAG;EACJ,CAAC;;AAGJ,SAAS,sBAAsB,QAAwB;AACrD,QAAO,OAAO,QAAQ,kBAAkB,GAAG,CAAC,aAAa;;AAG3D,SAAS,qBAAqB,SAA2C;AAWvE,QAFuB;EAAC;EAAqB;EAAsB,GAR3C,cACtB,QAAQ,QAAQ,WAAW,OAAO,SAAS,gBAAgB,CAAC,CAC7D,CAGE,QAAQ,WAAW,WAAW,uBAAuB,WAAW,qBAAqB,CACrF,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;EAEmD,CAElE,KAAK,QAAQ,UAAU;EAC3C,MAAM,OAAO,sBAAsB,OAAO;EAC1C,MAAM,OACJ,WAAW,sBACP,OACA,WAAW,uBACT,OACA,qBAAqB,QAAQ;AAErC,SAAO;GACL;GACA;GACA;GACA,aAAa,YAAY,KAAK,QAAQ,MAAM,IAAI;GAChD,cAAc,GAAG,KAAK;GACtB,YAAY,YAAY,KAAK;GAC7B,KAAK,cAAc,cAAc,GAAG,kBAAkB,aAAa,KAAK,GAAG,KAAK;GACjF;GACD;;AAGJ,SAAS,mBACP,QACA,WACA,SACQ;AACR,KAAI,WAAW,qBACb,QAAO,QAAQ,aAAa,kCAAiB,GAAG,CAAC,SAAS,YAAY;AAGxE,KAAI,WAAW,cACb,QAAO;AAGT,QAAO,UAAU,IAAI,OAAO,EAAE,OAAO;;AAGvC,SAAS,cACP,SACA,WACA,SACQ;CACR,MAAM,cAAc,IAAI,IAAI,UAAU,KAAK,UAAU,CAAC,MAAM,QAAQ,MAAM,CAAC,CAAC;CAC5E,MAAM,QAAQ;EACZ;EACA;EACA;EACD;AAED,MAAK,MAAM,UAAU,QACnB,OAAM,KAAK,GAAG,OAAO,GAAG,mBAAmB,QAAQ,aAAa,QAAQ,GAAG;AAG7E,QAAO,GAAG,MAAM,KAAK,KAAK,CAAC;;AAG7B,SAAS,oBAAoB,WAA2C;CACtE,MAAM,QAAQ;EACZ;EACA;EACA;EACA,sBAAsB;EACtB,0BAA0B;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;EACD;AAED,MAAK,MAAM,YAAY,WAAW;AAChC,QAAM,KAAK,KAAK,SAAS,YAAY,GAAG;AACxC,QAAM,KAAK,qBAAqB;AAChC,QAAM,KAAK,mBAAmB;AAC9B,QAAM,KAAK,oBAAoB;AAC/B,QAAM,KAAK,sBAAsB,SAAS,eAAe;AACzD,QAAM,KAAK,aAAa;AACxB,QAAM,KAAK,YAAY,SAAS,KAAK,QAAQ;AAC7C,QAAM,KAAK,eAAe;AAC1B,QAAM,KAAK,WAAW,SAAS,WAAW,2BAA2B;AACrE,QAAM,KAAK,GAAG;;AAGhB,OAAM,KAAK,WAAW;AACtB,MAAK,MAAM,YAAY,UACrB,OAAM,KAAK,KAAK,SAAS,WAAW,GAAG;AAGzC,QAAO,GAAG,MAAM,KAAK,KAAK,CAAC;;AAG7B,SAAgB,oBAAoB,WAAmB,eAAwC;CAC7F,MAAM,UAAU,kBAAkB,cAAc;CAChD,MAAM,YAAY,qBAAqB,QAAQ;CAC/C,MAAM,qCAAsB,WAAW,eAAe;CACtD,MAAM,wCAAyB,WAAW,qBAAqB;AAE/D,4BAAc,gBAAgB,cAAc,SAAS,WAAW,EAAE,YAAY,MAAM,CAAC,CAAC;AACtF,4BAAc,mBAAmB,oBAAoB,UAAU,CAAC;AAEhE,QAAO;;AAGT,SAAgB,cAAc,WAAyB;CACrD,MAAM,8BAAe,WAAW,OAAO;CACvC,MAAM,kCAAmB,WAAW,eAAe;AAEnD,6BAAe,QAAQ,IAAI,yBAAY,YAAY,CAAE;CAGrD,MAAM,kCADuB,aAAa,QAAQ,CAC5B,MAAM,KAAK;CACjC,MAAM,sCAAqB,GAAG,CAAC,SAAS,YAAY;AAUpD,4BAAc,SATE,MACb,KAAK,SAAS;AACb,MAAI,uBAAuB,KAAK,KAAK,CACnC,QAAO,sBAAsB;AAE/B,SAAO;GACP,CACD,KAAK,KAAK,CAEkB;AAC/B,gBAAE,IAAI,KAAK,6EAA6E"}