everything-dev 1.53.2 → 2.0.0-rc.0

package/dist/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","names":[],"sources":["../src/types.ts"],"sourcesContent":["import * as z from \"zod\";\n\nexport type JsonPrimitive = string | number | boolean | null;\nexport interface JsonObject {\n  [key: string]: JsonValue;\n}\nexport type JsonValue = JsonPrimitive | JsonObject | JsonValue[];\n\nexport const JsonValueSchema: z.ZodType<JsonValue> = z.lazy(() =>\n  z.union([\n    z.string(),\n    z.number(),\n    z.boolean(),\n    z.null(),\n    z.array(JsonValueSchema),\n    z.record(z.string(), JsonValueSchema),\n  ]),\n);\nexport const JsonObjectSchema = z.record(z.string(), JsonValueSchema);\n\nexport const ExtendsSchema = z.union([\n  z.string(),\n  z.object({\n    development: z.string().optional(),\n    production: z.string().optional(),\n    staging: z.string().optional(),\n  }),\n]);\nexport type Extends = z.infer<typeof ExtendsSchema>;\nexport type ExtendsConfig = Extract<Extends, Record<string, string | undefined>>;\n\nexport const SourceModeSchema = z.enum([\"local\", \"remote\"]);\nexport type SourceMode = z.infer<typeof SourceModeSchema>;\n\nexport const SharedConfigSchema = z.object({\n  version: z.string(),\n  requiredVersion: z.string().optional(),\n  singleton: z.boolean().optional(),\n  eager: z.boolean().optional(),\n  strictVersion: z.boolean().optional(),\n  shareScope: z.string().optional(),\n});\nexport type SharedConfig = z.infer<typeof SharedConfigSchema>;\nexport type SharedDepConfig = SharedConfig;\nexport const SharedDepConfigSchema = SharedConfigSchema;\nexport const SharedDepMapSchema = z.record(z.string(), SharedConfigSchema);\n\nexport const FederationEntrySchema = z.object({\n  name: z.string(),\n  url: z.string(),\n  entry: z.string(),\n  source: SourceModeSchema,\n  integrity: z.string().optional(),\n});\nexport type FederationEntry = z.infer<typeof FederationEntrySchema>;\n\nexport const ComposableAppEntrySchema = z.object({\n  extends: ExtendsSchema.optional(),\n  name: z.string().optional(),\n  development: z.string().optional(),\n  production: z.string().optional(),\n  integrity: z.string().optional(),\n  proxy: z.string().optional(),\n  variables: JsonObjectSchema.optional(),\n  secrets: z.array(z.string()).optional(),\n  routes: z.array(z.string()).optional(),\n  shared: SharedDepMapSchema.optional(),\n  connectSrc: z.array(z.string()).optional(),\n});\nexport type ComposableAppEntry = z.infer<typeof ComposableAppEntrySchema>;\n\nexport const ApiPluginConfigSchema = ComposableAppEntrySchema.extend({\n  dependsOn: z.array(z.string()).optional(),\n});\nexport type ApiPluginConfig = z.infer<typeof ApiPluginConfigSchema>;\n\nexport const PluginUiConfigSchema = z.object({\n  name: z.string(),\n  development: z.string().optional(),\n  production: z.string().optional(),\n  integrity: z.string().optional(),\n});\nexport type PluginUiConfig = z.infer<typeof PluginUiConfigSchema>;\n\nexport const BosPluginRefSchema = ComposableAppEntrySchema.extend({\n  version: z.string().optional(),\n  app: z.record(z.string(), z.unknown()).optional(),\n  plugins: z.record(z.string(), z.unknown()).optional(),\n  dependsOn: z.array(z.string()).optional(),\n});\nexport type BosPluginRef = z.infer<typeof BosPluginRefSchema>;\nexport type PluginEntryValue = string | BosPluginRef;\nexport type PluginEntries = Record<string, PluginEntryValue>;\n\nconst PluginRuntimeUiSchema = z.object({\n  name: z.string(),\n  url: z.string(),\n  entry: z.string(),\n  source: SourceModeSchema,\n  localPath: z.string().optional(),\n  port: z.number().optional(),\n  integrity: z.string().optional(),\n});\nexport type PluginRuntimeUi = z.infer<typeof PluginRuntimeUiSchema>;\n\nexport const RuntimePluginConfigSchema = z.object({\n  name: z.string(),\n  url: z.string(),\n  entry: z.string(),\n  source: SourceModeSchema,\n  extendsRef: z.string().optional(),\n  localPath: z.string().optional(),\n  port: z.number().optional(),\n  proxy: z.string().optional(),\n  variables: JsonObjectSchema.optional(),\n  secrets: z.array(z.string()).optional(),\n  integrity: z.string().optional(),\n  shared: SharedDepMapSchema.optional(),\n  connectSrc: z.array(z.string()).optional(),\n  ui: PluginRuntimeUiSchema.optional(),\n  routes: z.array(z.string()).optional(),\n  dependsOn: z.array(z.string()).optional(),\n});\nexport type RuntimePluginConfig = z.infer<typeof RuntimePluginConfigSchema>;\n\nexport const DependencyNodeKindSchema = z.enum([\"api\", \"auth\", \"ui\", \"plugin\"]);\nexport type DependencyNodeKind = z.infer<typeof DependencyNodeKindSchema>;\n\nexport const RuntimeDependencyNodeSchema = z.object({\n  key: z.string(),\n  kind: DependencyNodeKindSchema,\n  name: z.string(),\n  url: z.string(),\n  entry: z.string(),\n  source: SourceModeSchema,\n  dependsOn: z.array(z.string()).optional(),\n  extendsRef: z.string().optional(),\n  localPath: z.string().optional(),\n  port: z.number().optional(),\n  proxy: z.string().optional(),\n  variables: JsonObjectSchema.optional(),\n  secrets: z.array(z.string()).optional(),\n  integrity: z.string().optional(),\n  shared: SharedDepMapSchema.optional(),\n  connectSrc: z.array(z.string()).optional(),\n  ui: PluginRuntimeUiSchema.optional(),\n  routes: z.array(z.string()).optional(),\n  sourceOrigin: z.enum([\"config\", \"manifest\"]).optional(),\n  singletonKey: z.string().optional(),\n});\nexport type RuntimeDependencyNode = z.infer<typeof RuntimeDependencyNodeSchema>;\n\nexport const UiConfigSchema = z\n  .object({\n    name: z.string().optional(),\n    development: z.string().optional(),\n    production: z.string().optional(),\n    integrity: z.string().optional(),\n    ssr: z.string().optional(),\n    ssrIntegrity: z.string().optional(),\n  })\n  .strict();\nexport type UiConfig = z.infer<typeof UiConfigSchema>;\n\nexport const HostConfigSchema = z.object({\n  development: z.string(),\n  production: z.string(),\n  integrity: z.string().optional(),\n  secrets: z.array(z.string()).optional(),\n});\nexport type HostConfig = z.infer<typeof HostConfigSchema>;\n\nexport const ClientRuntimeInfoSchema = z.object({\n  accountId: z.string(),\n  gatewayId: z.string(),\n  runtimeBasePath: z.string(),\n  title: z.string().nullable(),\n  description: z.string().nullable(),\n  hostUrl: z.string().nullable(),\n});\nexport type ClientRuntimeInfo = z.infer<typeof ClientRuntimeInfoSchema>;\n\nexport const RuntimeLineageSchema = z.object({\n  parent: z.string().nullable(),\n  root: z.string().nullable(),\n  depth: z.number().int().nonnegative(),\n  extendsChain: z.array(z.string()),\n});\nexport type RuntimeLineage = z.infer<typeof RuntimeLineageSchema>;\n\nexport const BosStagingSchema = z.object({\n  domain: z.string(),\n});\nexport type BosStaging = z.infer<typeof BosStagingSchema>;\n\nconst BosConfigInputAppEntrySchema = z.record(z.string(), z.unknown());\nexport type BosConfigInputAppEntry = z.infer<typeof BosConfigInputAppEntrySchema>;\n\nexport const BosConfigInputSchema: z.ZodType<BosConfigInput> = z.lazy(() =>\n  z.object({\n    extends: ExtendsSchema.optional(),\n    account: z.string().optional(),\n    domain: z.string().optional(),\n    status: z.enum([\"active\", \"suspended\", \"pending_deletion\"]).optional(),\n    testnet: z.string().optional(),\n    template: z.string().optional(),\n    gateway: z\n      .object({\n        development: z.string().optional(),\n        production: z.string().optional(),\n        account: z.string().optional(),\n      })\n      .optional(),\n    development: z.string().optional(),\n    production: z.string().optional(),\n    integrity: z.string().optional(),\n    name: z.string().optional(),\n    version: z.string().optional(),\n    proxy: z.string().optional(),\n    variables: JsonObjectSchema.optional(),\n    secrets: z.array(z.string()).optional(),\n    routes: z.array(z.string()).optional(),\n    app: z.record(z.string(), BosConfigInputAppEntrySchema).optional(),\n    plugins: z.record(z.string(), z.union([z.string(), BosConfigInputSchema])).optional(),\n    ci: CiConfigSchema.optional(),\n  }),\n);\n\nexport interface BosConfigInput {\n  extends?: string | ExtendsConfig;\n  account?: string;\n  domain?: string;\n  status?: \"active\" | \"suspended\" | \"pending_deletion\";\n  title?: string;\n  description?: string;\n  testnet?: string;\n  template?: string;\n  gateway?: {\n    development?: string;\n    production?: string;\n    account?: string;\n  };\n  development?: string;\n  production?: string;\n  integrity?: string;\n  name?: string;\n  version?: string;\n  proxy?: string;\n  variables?: JsonObject;\n  secrets?: string[];\n  routes?: string[];\n  app?: Record<string, BosConfigInputAppEntry>;\n  plugins?: Record<string, string | BosConfigInput>;\n  ci?: CiConfig;\n}\n\nexport const RailwayCiSchema = z.object({\n  service: z.string(),\n});\nexport type RailwayCi = z.infer<typeof RailwayCiSchema>;\n\nexport const CiConfigSchema = z.object({\n  railway: RailwayCiSchema.optional(),\n});\nexport type CiConfig = z.infer<typeof CiConfigSchema>;\n\nexport const BosConfigSchema = z.object({\n  account: z.string(),\n  extends: ExtendsSchema.optional(),\n  domain: z.string().optional(),\n  title: z.string().optional(),\n  description: z.string().optional(),\n  testnet: z.string().optional(),\n  staging: BosStagingSchema.optional(),\n  repository: z.string().optional(),\n  ci: CiConfigSchema.optional(),\n  plugins: z.record(z.string(), z.union([z.string(), BosPluginRefSchema])).optional(),\n  app: z.object({\n    host: HostConfigSchema,\n    ui: UiConfigSchema,\n    api: ApiPluginConfigSchema,\n    auth: ComposableAppEntrySchema.optional(),\n  }),\n});\nexport type BosConfig = z.infer<typeof BosConfigSchema>;\n\nexport const RuntimeConfigSchema = z.object({\n  env: z.enum([\"development\", \"production\", \"staging\"]),\n  account: z.string(),\n  domain: z.string().optional(),\n  networkId: z.enum([\"mainnet\", \"testnet\"]),\n  title: z.string().optional(),\n  description: z.string().optional(),\n  repository: z.string().optional(),\n  host: FederationEntrySchema.extend({\n    localPath: z.string().optional(),\n    port: z.number().optional(),\n    secrets: z.array(z.string()).optional(),\n    remoteUrl: z.string().optional(),\n  }),\n  ui: FederationEntrySchema.extend({\n    localPath: z.string().optional(),\n    port: z.number().optional(),\n    ssrUrl: z.string().optional(),\n    ssrIntegrity: z.string().optional(),\n    dependsOn: z.array(z.string()).optional(),\n  }),\n  api: FederationEntrySchema.extend({\n    localPath: z.string().optional(),\n    port: z.number().optional(),\n    proxy: z.string().optional(),\n    variables: JsonObjectSchema.optional(),\n    secrets: z.array(z.string()).optional(),\n    shared: SharedDepMapSchema.optional(),\n    dependsOn: z.array(z.string()).optional(),\n  }),\n  auth: FederationEntrySchema.extend({\n    extendsRef: z.string().optional(),\n    localPath: z.string().optional(),\n    port: z.number().optional(),\n    proxy: z.string().optional(),\n    variables: JsonObjectSchema.optional(),\n    secrets: z.array(z.string()).optional(),\n    shared: SharedDepMapSchema.optional(),\n    dependsOn: z.array(z.string()).optional(),\n  }).optional(),\n  plugins: z.record(z.string(), RuntimePluginConfigSchema).optional(),\n  nodes: z.record(z.string(), RuntimeDependencyNodeSchema).optional(),\n});\nexport type RuntimeConfig = z.infer<typeof RuntimeConfigSchema>;\n\nexport const ClientRuntimeConfigSchema = z.object({\n  env: z.enum([\"development\", \"production\", \"staging\"]),\n  account: z.string(),\n  networkId: z.enum([\"mainnet\", \"testnet\"]),\n  hostUrl: z.string().optional(),\n  assetsUrl: z.string(),\n  apiBase: z.string(),\n  rpcBase: z.string(),\n  repository: z.string().optional(),\n  authAvailable: z.boolean().optional(),\n  runtime: ClientRuntimeInfoSchema.optional(),\n  ui: z\n    .object({\n      name: z.string(),\n      url: z.string(),\n      entry: z.string(),\n      integrity: z.string().optional(),\n    })\n    .optional(),\n  api: z\n    .object({\n      name: z.string(),\n      url: z.string(),\n      entry: z.string(),\n      integrity: z.string().optional(),\n      variables: JsonObjectSchema.optional(),\n    })\n    .optional(),\n  auth: z\n    .object({\n      name: z.string(),\n      url: z.string(),\n      entry: z.string(),\n      integrity: z.string().optional(),\n      variables: JsonObjectSchema.optional(),\n    })\n    .optional(),\n  plugins: z\n    .record(\n      z.string(),\n      z.object({\n        name: z.string(),\n        url: z.string(),\n        entry: z.string(),\n        integrity: z.string().optional(),\n        variables: JsonObjectSchema.optional(),\n        ui: z\n          .object({\n            name: z.string(),\n            url: z.string(),\n            entry: z.string(),\n            source: SourceModeSchema,\n            integrity: z.string().optional(),\n          })\n          .optional(),\n      }),\n    )\n    .optional(),\n});\nexport type ClientRuntimeConfig = z.infer<typeof ClientRuntimeConfigSchema>;\n"],"mappings":";;;AAQA,MAAa,kBAAwC,EAAE,WACrD,EAAE,MAAM;CACN,EAAE,OAAO;CACT,EAAE,OAAO;CACT,EAAE,QAAQ;CACV,EAAE,KAAK;CACP,EAAE,MAAM,eAAe;CACvB,EAAE,OAAO,EAAE,OAAO,GAAG,eAAe;AACtC,CAAC,CACH;AACA,MAAa,mBAAmB,EAAE,OAAO,EAAE,OAAO,GAAG,eAAe;AAEpE,MAAa,gBAAgB,EAAE,MAAM,CACnC,EAAE,OAAO,GACT,EAAE,OAAO;CACP,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC,CACH,CAAC;AAID,MAAa,mBAAmB,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAG1D,MAAa,qBAAqB,EAAE,OAAO;CACzC,SAAS,EAAE,OAAO;CAClB,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;CACrC,WAAW,EAAE,QAAQ,CAAC,CAAC,SAAS;CAChC,OAAO,EAAE,QAAQ,CAAC,CAAC,SAAS;CAC5B,eAAe,EAAE,QAAQ,CAAC,CAAC,SAAS;CACpC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;AAGD,MAAa,wBAAwB;AACrC,MAAa,qBAAqB,EAAE,OAAO,EAAE,OAAO,GAAG,kBAAkB;AAEzE,MAAa,wBAAwB,EAAE,OAAO;CAC5C,MAAM,EAAE,OAAO;CACf,KAAK,EAAE,OAAO;CACd,OAAO,EAAE,OAAO;CAChB,QAAQ;CACR,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;AAGD,MAAa,2BAA2B,EAAE,OAAO;CAC/C,SAAS,cAAc,SAAS;CAChC,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,iBAAiB,SAAS;CACrC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrC,QAAQ,mBAAmB,SAAS;CACpC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AAC3C,CAAC;AAGD,MAAa,wBAAwB,yBAAyB,OAAO,EACnE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAC1C,CAAC;AAGD,MAAa,uBAAuB,EAAE,OAAO;CAC3C,MAAM,EAAE,OAAO;CACf,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;AAGD,MAAa,qBAAqB,yBAAyB,OAAO;CAChE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS;CAChD,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS;CACpD,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC;AAKD,MAAM,wBAAwB,EAAE,OAAO;CACrC,MAAM,EAAE,OAAO;CACf,KAAK,EAAE,OAAO;CACd,OAAO,EAAE,OAAO;CAChB,QAAQ;CACR,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;AAGD,MAAa,4BAA4B,EAAE,OAAO;CAChD,MAAM,EAAE,OAAO;CACf,KAAK,EAAE,OAAO;CACd,OAAO,EAAE,OAAO;CAChB,QAAQ;CACR,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,iBAAiB,SAAS;CACrC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,QAAQ,mBAAmB,SAAS;CACpC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACzC,IAAI,sBAAsB,SAAS;CACnC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC;AAGD,MAAa,2BAA2B,EAAE,KAAK;CAAC;CAAO;CAAQ;CAAM;AAAQ,CAAC;AAG9E,MAAa,8BAA8B,EAAE,OAAO;CAClD,KAAK,EAAE,OAAO;CACd,MAAM;CACN,MAAM,EAAE,OAAO;CACf,KAAK,EAAE,OAAO;CACd,OAAO,EAAE,OAAO;CAChB,QAAQ;CACR,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACxC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,iBAAiB,SAAS;CACrC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,QAAQ,mBAAmB,SAAS;CACpC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACzC,IAAI,sBAAsB,SAAS;CACnC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrC,cAAc,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,SAAS;CACtD,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;AACpC,CAAC;AAGD,MAAa,iBAAiB,EAC3B,OAAO;CACN,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS;CACzB,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;AACpC,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,mBAAmB,EAAE,OAAO;CACvC,aAAa,EAAE,OAAO;CACtB,YAAY,EAAE,OAAO;CACrB,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACxC,CAAC;AAGD,MAAa,0BAA0B,EAAE,OAAO;CAC9C,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,OAAO;CACpB,iBAAiB,EAAE,OAAO;CAC1B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC;AAGD,MAAa,uBAAuB,EAAE,OAAO;CAC3C,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CACpC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC;AAClC,CAAC;AAGD,MAAa,mBAAmB,EAAE,OAAO,EACvC,QAAQ,EAAE,OAAO,EACnB,CAAC;AAGD,MAAM,+BAA+B,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAGrE,MAAa,uBAAkD,EAAE,WAC/D,EAAE,OAAO;CACP,SAAS,cAAc,SAAS;CAChC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,QAAQ,EAAE,KAAK;EAAC;EAAU;EAAa;CAAkB,CAAC,CAAC,CAAC,SAAS;CACrE,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,UAAU,EAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,SAAS,EACN,OAAO;EACN,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;EACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAChC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,CAAC,CAAC,CACD,SAAS;CACZ,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,iBAAiB,SAAS;CACrC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,4BAA4B,CAAC,CAAC,SAAS;CACjE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;CACpF,IAAI,eAAe,SAAS;AAC9B,CAAC,CACH;AA8BA,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,EAAE,OAAO,EACpB,CAAC;AAGD,MAAa,iBAAiB,EAAE,OAAO,EACrC,SAAS,gBAAgB,SAAS,EACpC,CAAC;AAGD,MAAa,kBAAkB,EAAE,OAAO;CACtC,SAAS,EAAE,OAAO;CAClB,SAAS,cAAc,SAAS;CAChC,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,SAAS,iBAAiB,SAAS;CACnC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,IAAI,eAAe,SAAS;CAC5B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;CAClF,KAAK,EAAE,OAAO;EACZ,MAAM;EACN,IAAI;EACJ,KAAK;EACL,MAAM,yBAAyB,SAAS;CAC1C,CAAC;AACH,CAAC;AAGD,MAAa,sBAAsB,EAAE,OAAO;CAC1C,KAAK,EAAE,KAAK;EAAC;EAAe;EAAc;CAAS,CAAC;CACpD,SAAS,EAAE,OAAO;CAClB,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,WAAW,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC;CACxC,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,aAAa,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,MAAM,sBAAsB,OAAO;EACjC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;EACtC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,CAAC;CACD,IAAI,sBAAsB,OAAO;EAC/B,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;EAC5B,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;EAClC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC1C,CAAC;CACD,KAAK,sBAAsB,OAAO;EAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;EAC3B,WAAW,iBAAiB,SAAS;EACrC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;EACtC,QAAQ,mBAAmB,SAAS;EACpC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC1C,CAAC;CACD,MAAM,sBAAsB,OAAO;EACjC,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;EAChC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS;EAC3B,WAAW,iBAAiB,SAAS;EACrC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;EACtC,QAAQ,mBAAmB,SAAS;EACpC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC1C,CAAC,CAAC,CAAC,SAAS;CACZ,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,yBAAyB,CAAC,CAAC,SAAS;CAClE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,2BAA2B,CAAC,CAAC,SAAS;AACpE,CAAC;AAGD,MAAa,4BAA4B,EAAE,OAAO;CAChD,KAAK,EAAE,KAAK;EAAC;EAAe;EAAc;CAAS,CAAC;CACpD,SAAS,EAAE,OAAO;CAClB,WAAW,EAAE,KAAK,CAAC,WAAW,SAAS,CAAC;CACxC,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,WAAW,EAAE,OAAO;CACpB,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO;CAClB,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,eAAe,EAAE,QAAQ,CAAC,CAAC,SAAS;CACpC,SAAS,wBAAwB,SAAS;CAC1C,IAAI,EACD,OAAO;EACN,MAAM,EAAE,OAAO;EACf,KAAK,EAAE,OAAO;EACd,OAAO,EAAE,OAAO;EAChB,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;CACjC,CAAC,CAAC,CACD,SAAS;CACZ,KAAK,EACF,OAAO;EACN,MAAM,EAAE,OAAO;EACf,KAAK,EAAE,OAAO;EACd,OAAO,EAAE,OAAO;EAChB,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,WAAW,iBAAiB,SAAS;CACvC,CAAC,CAAC,CACD,SAAS;CACZ,MAAM,EACH,OAAO;EACN,MAAM,EAAE,OAAO;EACf,KAAK,EAAE,OAAO;EACd,OAAO,EAAE,OAAO;EAChB,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,WAAW,iBAAiB,SAAS;CACvC,CAAC,CAAC,CACD,SAAS;CACZ,SAAS,EACN,OACC,EAAE,OAAO,GACT,EAAE,OAAO;EACP,MAAM,EAAE,OAAO;EACf,KAAK,EAAE,OAAO;EACd,OAAO,EAAE,OAAO;EAChB,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,WAAW,iBAAiB,SAAS;EACrC,IAAI,EACD,OAAO;GACN,MAAM,EAAE,OAAO;GACf,KAAK,EAAE,OAAO;GACd,OAAO,EAAE,OAAO;GAChB,QAAQ;GACR,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS;EACjC,CAAC,CAAC,CACD,SAAS;CACd,CAAC,CACH,CAAC,CACA,SAAS;AACd,CAAC"}
+{"version":3,"file":"types.mjs","names":["z"],"sources":["../src/types.ts"],"sourcesContent":["import { ComposePayloadSchema } from \"every-plugin/ui/manifest\";\nimport * as z from \"zod\";\n\nexport type JsonPrimitive = string | number | boolean | null;\nexport interface JsonObject {\n  [key: string]: JsonValue;\n}\nexport type JsonValue = JsonPrimitive | JsonObject | JsonValue[];\n\nexport const JsonValueSchema: z.ZodType<JsonValue> = z.lazy(() =>\n  z.union([\n    z.string(),\n    z.number(),\n    z.boolean(),\n    z.null(),\n    z.array(JsonValueSchema),\n    z.record(z.string(), JsonValueSchema),\n  ]),\n);\nexport const JsonObjectSchema = z.record(z.string(), JsonValueSchema);\n\nexport const ExtendsSchema = z.union([\n  z.string(),\n  z.object({\n    development: z.string().optional(),\n    production: z.string().optional(),\n    staging: z.string().optional(),\n  }),\n]);\nexport type Extends = z.infer<typeof ExtendsSchema>;\nexport type ExtendsConfig = Extract<Extends, Record<string, string | undefined>>;\n\nexport const SourceModeSchema = z.enum([\"local\", \"remote\"]);\nexport type SourceMode = z.infer<typeof SourceModeSchema>;\n\nexport const SharedConfigSchema = z.object({\n  version: z.string(),\n  requiredVersion: z.string().optional(),\n  singleton: z.boolean().optional(),\n  eager: z.boolean().optional(),\n  strictVersion: z.boolean().optional(),\n  shareScope: z.string().optional(),\n});\nexport type SharedConfig = z.infer<typeof SharedConfigSchema>;\nexport type SharedDepConfig = SharedConfig;\nexport const SharedDepConfigSchema = SharedConfigSchema;\nexport const SharedDepMapSchema = z.record(z.string(), SharedConfigSchema);\n\nexport const FederationEntrySchema = z.object({\n  name: z.string(),\n  url: z.string(),\n  entry: z.string(),\n  /** the content-hashed container entry URL (derived from the version\n   * manifest when the slot pins one) — consumers load this instead of\n   * appending the legacy fixed name */\n  entryUrl: z.string().optional(),\n  source: SourceModeSchema,\n  integrity: z.string().optional(),\n});\nexport type FederationEntry = z.infer<typeof FederationEntrySchema>;\n\n/**\n * Slot pin (atomic-deploys): an explicit pointer to the slot's immutable\n * per-deploy WorkspaceVersionManifest — `manifest` is the versioned manifest\n * filename relative to the slot's production base, `integrity` is that\n * document's SRI. Resolving the pin derives the slot's entry-level fields\n * (`entryUrl`, entry integrity, ssr entry). A slot without a `pin` uses its\n * top-level `integrity` as a direct entry SRI (fixed-name slots only).\n */\nexport const SlotPinSchema = z.object({\n  manifest: z.string().min(1),\n  integrity: z.string().min(1),\n});\nexport type SlotPin = z.infer<typeof SlotPinSchema>;\n\nexport const PluginUiConfigSchema = z.object({\n  name: z.string(),\n  development: z.string().optional(),\n  production: z.string().optional(),\n  /** browser-facing base overriding `production` when server-side loading\n   * must stay container-local (image-native runtimes, ADR 0011) — may be\n   * same-origin relative (/bundles/<account>/<gateway>/<slot>) */\n  publicUrl: z.string().optional(),\n  integrity: z.string().optional(),\n  ssr: z.string().optional(),\n  ssrIntegrity: z.string().optional(),\n  pin: SlotPinSchema.optional(),\n});\nexport type PluginUiConfig = z.infer<typeof PluginUiConfigSchema>;\n\nexport const ComposableAppEntrySchema = z.object({\n  extends: ExtendsSchema.optional(),\n  name: z.string().optional(),\n  development: z.string().optional(),\n  production: z.string().optional(),\n  integrity: z.string().optional(),\n  proxy: z.string().optional(),\n  variables: JsonObjectSchema.optional(),\n  secrets: z.array(z.string()).optional(),\n  routes: z.array(z.string()).optional(),\n  shared: SharedDepMapSchema.optional(),\n  connectSrc: z.array(z.string()).optional(),\n  ui: PluginUiConfigSchema.optional(),\n  pin: SlotPinSchema.optional(),\n});\nexport type ComposableAppEntry = z.infer<typeof ComposableAppEntrySchema>;\n\nexport const ApiPluginConfigSchema = ComposableAppEntrySchema.extend({\n  dependsOn: z.array(z.string()).optional(),\n});\nexport type ApiPluginConfig = z.infer<typeof ApiPluginConfigSchema>;\n\nexport const BosPluginRefSchema = ComposableAppEntrySchema.extend({\n  version: z.string().optional(),\n  app: z.record(z.string(), z.unknown()).optional(),\n  plugins: z.record(z.string(), z.unknown()).optional(),\n  dependsOn: z.array(z.string()).optional(),\n});\nexport type BosPluginRef = z.infer<typeof BosPluginRefSchema>;\nexport type PluginEntryValue = string | BosPluginRef;\nexport type PluginEntries = Record<string, PluginEntryValue>;\n\nconst PluginRuntimeUiSchema = z.object({\n  name: z.string(),\n  url: z.string(),\n  entry: z.string(),\n  source: SourceModeSchema,\n  /** browser-facing base; when set the client config serves this instead of\n   * `url` (server-side loading keeps `url`) */\n  publicUrl: z.string().optional(),\n  localPath: z.string().optional(),\n  port: z.number().optional(),\n  integrity: z.string().optional(),\n  ssrUrl: z.string().optional(),\n  ssrIntegrity: z.string().optional(),\n  entryUrl: z.string().optional(),\n  ssrEntryUrl: z.string().optional(),\n  /** pin-derived hashed browser manifest (mf-manifest) — absent for local\n   * slots; registration reads this instead of the overloaded `entry` */\n  browserManifestUrl: z.string().optional(),\n  dependsOn: z.array(z.string()).optional(),\n});\nexport type PluginRuntimeUi = z.infer<typeof PluginRuntimeUiSchema>;\n\nexport const RuntimePluginConfigSchema = z.object({\n  name: z.string(),\n  url: z.string(),\n  entry: z.string(),\n  source: SourceModeSchema,\n  extendsRef: z.string().optional(),\n  localPath: z.string().optional(),\n  port: z.number().optional(),\n  proxy: z.string().optional(),\n  variables: JsonObjectSchema.optional(),\n  secrets: z.array(z.string()).optional(),\n  integrity: z.string().optional(),\n  entryUrl: z.string().optional(),\n  shared: SharedDepMapSchema.optional(),\n  connectSrc: z.array(z.string()).optional(),\n  ui: PluginRuntimeUiSchema.optional(),\n  routes: z.array(z.string()).optional(),\n  dependsOn: z.array(z.string()).optional(),\n});\nexport type RuntimePluginConfig = z.infer<typeof RuntimePluginConfigSchema>;\n\nexport const DependencyNodeKindSchema = z.enum([\"api\", \"auth\", \"ui\", \"plugin\"]);\nexport type DependencyNodeKind = z.infer<typeof DependencyNodeKindSchema>;\n\nexport const RuntimeDependencyNodeSchema = z.object({\n  key: z.string(),\n  kind: DependencyNodeKindSchema,\n  name: z.string(),\n  url: z.string(),\n  entry: z.string(),\n  source: SourceModeSchema,\n  dependsOn: z.array(z.string()).optional(),\n  extendsRef: z.string().optional(),\n  localPath: z.string().optional(),\n  port: z.number().optional(),\n  proxy: z.string().optional(),\n  variables: JsonObjectSchema.optional(),\n  secrets: z.array(z.string()).optional(),\n  integrity: z.string().optional(),\n  shared: SharedDepMapSchema.optional(),\n  connectSrc: z.array(z.string()).optional(),\n  ui: PluginRuntimeUiSchema.optional(),\n  routes: z.array(z.string()).optional(),\n  sourceOrigin: z.enum([\"config\", \"manifest\"]).optional(),\n  singletonKey: z.string().optional(),\n});\nexport type RuntimeDependencyNode = z.infer<typeof RuntimeDependencyNodeSchema>;\n\nexport const UiConfigSchema = z\n  .object({\n    name: z.string().optional(),\n    development: z.string().optional(),\n    production: z.string().optional(),\n    /** browser-facing base overriding `production` (see PluginUiConfigSchema) */\n    publicUrl: z.string().optional(),\n    /** direct entry SRI — only for slots without a `pin` */\n    integrity: z.string().optional(),\n    ssr: z.string().optional(),\n    ssrIntegrity: z.string().optional(),\n    pin: SlotPinSchema.optional(),\n  })\n  .strict();\nexport type UiConfig = z.infer<typeof UiConfigSchema>;\n\nexport const HostConfigSchema = z.object({\n  development: z.string(),\n  /** Deploy state (ADR 0005) — absent until the first publish writes it. */\n  production: z.string().optional(),\n  /** direct entry SRI — only for slots without a `pin` */\n  integrity: z.string().optional(),\n  secrets: z.array(z.string()).optional(),\n  pin: SlotPinSchema.optional(),\n});\nexport type HostConfig = z.infer<typeof HostConfigSchema>;\n\nexport const ClientRuntimeInfoSchema = z.object({\n  accountId: z.string(),\n  gatewayId: z.string(),\n  runtimeBasePath: z.string(),\n  title: z.string().nullable(),\n  description: z.string().nullable(),\n  hostUrl: z.string().nullable(),\n});\nexport type ClientRuntimeInfo = z.infer<typeof ClientRuntimeInfoSchema>;\n\nexport const RuntimeLineageSchema = z.object({\n  parent: z.string().nullable(),\n  root: z.string().nullable(),\n  depth: z.number().int().nonnegative(),\n  extendsChain: z.array(z.string()),\n});\nexport type RuntimeLineage = z.infer<typeof RuntimeLineageSchema>;\n\nexport const BosStagingSchema = z.object({\n  domain: z.string(),\n  account: z.string().optional(),\n});\nexport type BosStaging = z.infer<typeof BosStagingSchema>;\n\nconst BosConfigInputAppEntrySchema = z.record(z.string(), z.unknown());\nexport type BosConfigInputAppEntry = z.infer<typeof BosConfigInputAppEntrySchema>;\n\nexport const BosConfigInputSchema: z.ZodType<BosConfigInput> = z.lazy(() =>\n  z.object({\n    extends: ExtendsSchema.optional(),\n    account: z.string().optional(),\n    domain: z.string().optional(),\n    status: z.enum([\"active\", \"suspended\", \"pending_deletion\"]).optional(),\n    testnet: z.string().optional(),\n    staging: BosStagingSchema.optional(),\n    template: z.string().optional(),\n    gateway: z\n      .object({\n        development: z.string().optional(),\n        production: z.string().optional(),\n        account: z.string().optional(),\n      })\n      .optional(),\n    development: z.string().optional(),\n    production: z.string().optional(),\n    integrity: z.string().optional(),\n    name: z.string().optional(),\n    version: z.string().optional(),\n    proxy: z.string().optional(),\n    variables: JsonObjectSchema.optional(),\n    secrets: z.array(z.string()).optional(),\n    routes: z.array(z.string()).optional(),\n    app: z.record(z.string(), BosConfigInputAppEntrySchema).optional(),\n    plugins: z.record(z.string(), z.union([z.string(), BosConfigInputSchema])).optional(),\n    publish: z\n      .object({\n        auth: z.enum([\"session\", \"key\", \"custody\"]).optional(),\n      })\n      .optional(),\n    ci: CiConfigSchema.optional(),\n    cdn: CdnConfigSchema.optional(),\n  }),\n);\n\nexport type StarterLevel = \"simple\" | \"advanced\";\n\nexport const StarterLevelSchema = z.enum([\"simple\", \"advanced\"]);\n\nexport interface StarterLevelConfig {\n  include?: string[];\n  exclude?: string[];\n}\n\nexport const StarterLevelConfigSchema = z.object({\n  include: z.array(z.string()).optional(),\n  exclude: z.array(z.string()).optional(),\n});\n\n/** Authoring metadata a parent publishes so `bos init` can prune its starter. */\nexport interface ParentStarterConfig {\n  levels?: Record<string, StarterLevelConfig>;\n  exclude?: string[];\n}\n\nexport const ParentStarterConfigSchema = z.object({\n  levels: z.record(z.string(), StarterLevelConfigSchema).optional(),\n  exclude: z.array(z.string()).optional(),\n});\n\nexport interface BosConfigInput {\n  extends?: string | ExtendsConfig;\n  account?: string;\n  domain?: string;\n  status?: \"active\" | \"suspended\" | \"pending_deletion\";\n  title?: string;\n  description?: string;\n  testnet?: string;\n  template?: string;\n  gateway?: {\n    development?: string;\n    production?: string;\n    account?: string;\n  };\n  staging?: BosStaging;\n  development?: string;\n  production?: string;\n  integrity?: string;\n  name?: string;\n  version?: string;\n  proxy?: string;\n  variables?: JsonObject;\n  secrets?: string[];\n  routes?: string[];\n  app?: Record<string, BosConfigInputAppEntry>;\n  plugins?: Record<string, string | BosConfigInput>;\n  publish?: PublishConfig;\n  ci?: CiConfig;\n  cdn?: CdnConfig;\n  rolledBackFrom?: string;\n  starter?: ParentStarterConfig;\n}\n\nexport const RailwayCiSchema = z.object({\n  service: z.string(),\n});\nexport type RailwayCi = z.infer<typeof RailwayCiSchema>;\n\nexport const CiConfigSchema = z.object({\n  image: z.string().optional(),\n  railway: RailwayCiSchema.optional(),\n});\nexport type CiConfig = z.infer<typeof CiConfigSchema>;\n\n/** Where this runtime's built bundles are served from. Inherited via extends. */\nexport const CdnConfigSchema = z.object({\n  origin: z.string().optional(),\n});\nexport type CdnConfig = z.infer<typeof CdnConfigSchema>;\n\nexport const PublishAuthSchema = z.enum([\"session\", \"key\", \"custody\"]);\nexport type PublishAuth = z.infer<typeof PublishAuthSchema>;\n\nexport const PublishConfigSchema = z.object({\n  auth: PublishAuthSchema.optional(),\n});\nexport type PublishConfig = z.infer<typeof PublishConfigSchema>;\n\nconst PluginKeySchema = z\n  .string()\n  .regex(\n    /^[a-zA-Z0-9._-]+$/,\n    \"plugin key must match [a-zA-Z0-9._-] — keys from remote/extended configs are interpolated into shells and generated code\",\n  );\n\nexport const BosConfigSchema = z.object({\n  account: z.string(),\n  extends: ExtendsSchema.optional(),\n  domain: z.string().optional(),\n  title: z.string().optional(),\n  description: z.string().optional(),\n  testnet: z.string().optional(),\n  staging: BosStagingSchema.optional(),\n  repository: z.string().optional(),\n  publish: PublishConfigSchema.optional(),\n  ci: CiConfigSchema.optional(),\n  cdn: CdnConfigSchema.optional(),\n  rolledBackFrom: z.string().optional(),\n  starter: ParentStarterConfigSchema.optional(),\n  plugins: z.record(PluginKeySchema, z.union([z.string(), BosPluginRefSchema])).optional(),\n  app: z.object({\n    host: HostConfigSchema,\n    ui: UiConfigSchema,\n    api: ApiPluginConfigSchema,\n    auth: ComposableAppEntrySchema.optional(),\n  }),\n});\nexport type BosConfig = z.infer<typeof BosConfigSchema>;\n\nexport const RuntimeConfigSchema = z.object({\n  env: z.enum([\"development\", \"production\", \"staging\"]),\n  account: z.string(),\n  domain: z.string().optional(),\n  networkId: z.enum([\"mainnet\", \"testnet\"]),\n  /** the deploy fingerprint of the snapshot this config came from\n   * (atomic-deploys 10) — rides the client config for the soft-refresh signal */\n  deploymentFingerprint: z.string().optional(),\n  title: z.string().optional(),\n  description: z.string().optional(),\n  repository: z.string().optional(),\n  host: FederationEntrySchema.extend({\n    localPath: z.string().optional(),\n    port: z.number().optional(),\n    secrets: z.array(z.string()).optional(),\n    remoteUrl: z.string().optional(),\n  }),\n  ui: FederationEntrySchema.extend({\n    localPath: z.string().optional(),\n    port: z.number().optional(),\n    /** browser-facing base; when set the client config serves this instead\n     * of `url` (server-side loading keeps `url`) */\n    publicUrl: z.string().optional(),\n    ssrUrl: z.string().optional(),\n    ssrIntegrity: z.string().optional(),\n    ssrEntryUrl: z.string().optional(),\n    /** pin-derived hashed browser manifest (mf-manifest) */\n    browserManifestUrl: z.string().optional(),\n    dependsOn: z.array(z.string()).optional(),\n  }),\n  api: FederationEntrySchema.extend({\n    localPath: z.string().optional(),\n    port: z.number().optional(),\n    proxy: z.string().optional(),\n    variables: JsonObjectSchema.optional(),\n    secrets: z.array(z.string()).optional(),\n    shared: SharedDepMapSchema.optional(),\n    dependsOn: z.array(z.string()).optional(),\n  }),\n  auth: FederationEntrySchema.extend({\n    extendsRef: z.string().optional(),\n    localPath: z.string().optional(),\n    port: z.number().optional(),\n    proxy: z.string().optional(),\n    variables: JsonObjectSchema.optional(),\n    secrets: z.array(z.string()).optional(),\n    shared: SharedDepMapSchema.optional(),\n    dependsOn: z.array(z.string()).optional(),\n    ui: PluginRuntimeUiSchema.optional(),\n  }).optional(),\n  plugins: z.record(PluginKeySchema, RuntimePluginConfigSchema).optional(),\n  nodes: z.record(z.string(), RuntimeDependencyNodeSchema).optional(),\n});\nexport type RuntimeConfig = z.infer<typeof RuntimeConfigSchema>;\n\nexport const ClientRuntimeConfigSchema = z.object({\n  env: z.enum([\"development\", \"production\", \"staging\"]),\n  account: z.string(),\n  networkId: z.enum([\"mainnet\", \"testnet\"]),\n  /** the deploy fingerprint this document was rendered from (soft refresh) */\n  deploymentFingerprint: z.string().optional(),\n  hostUrl: z.string().optional(),\n  assetsUrl: z.string(),\n  apiBase: z.string(),\n  rpcBase: z.templateLiteral([z.literal(\"/\"), z.string()]),\n  repository: z.string().optional(),\n  authAvailable: z.boolean().optional(),\n  runtime: ClientRuntimeInfoSchema.optional(),\n  ui: z\n    .object({\n      name: z.string(),\n      url: z.string(),\n      entry: z.string(),\n      integrity: z.string().optional(),\n      /** the content-hashed container entry URL when the slot pins a version manifest */\n      entryUrl: z.string().optional(),\n      /** composition payload — the server sets it; the client reconstructs the same tree from it before hydrate */\n      compose: ComposePayloadSchema.optional(),\n    })\n    .optional(),\n  api: z\n    .object({\n      name: z.string(),\n      url: z.string(),\n      entry: z.string(),\n      integrity: z.string().optional(),\n      variables: JsonObjectSchema.optional(),\n    })\n    .optional(),\n  auth: z\n    .object({\n      name: z.string(),\n      url: z.string(),\n      entry: z.string(),\n      integrity: z.string().optional(),\n      variables: JsonObjectSchema.optional(),\n    })\n    .optional(),\n  plugins: z\n    .record(\n      z.string(),\n      z.object({\n        name: z.string(),\n        url: z.string(),\n        entry: z.string(),\n        integrity: z.string().optional(),\n        variables: JsonObjectSchema.optional(),\n        ui: z\n          .object({\n            name: z.string(),\n            url: z.string(),\n            entry: z.string(),\n            source: SourceModeSchema,\n            integrity: z.string().optional(),\n            ssrUrl: z.string().optional(),\n            ssrIntegrity: z.string().optional(),\n            entryUrl: z.string().optional(),\n          })\n          .optional(),\n      }),\n    )\n    .optional(),\n});\nexport type ClientRuntimeConfig = z.infer<typeof ClientRuntimeConfigSchema>;\n"],"mappings":";;;;AASA,MAAa,kBAAwCA,IAAE,WACrDA,IAAE,MAAM;CACNA,IAAE,OAAO;CACTA,IAAE,OAAO;CACTA,IAAE,QAAQ;CACVA,IAAE,KAAK;CACPA,IAAE,MAAM,eAAe;CACvBA,IAAE,OAAOA,IAAE,OAAO,GAAG,eAAe;AACtC,CAAC,CACH;AACA,MAAa,mBAAmBA,IAAE,OAAOA,IAAE,OAAO,GAAG,eAAe;AAEpE,MAAa,gBAAgBA,IAAE,MAAM,CACnCA,IAAE,OAAO,GACTA,IAAE,OAAO;CACP,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;CAChC,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC,CACH,CAAC;AAID,MAAa,mBAAmBA,IAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAG1D,MAAa,qBAAqBA,IAAE,OAAO;CACzC,SAASA,IAAE,OAAO;CAClB,iBAAiBA,IAAE,OAAO,CAAC,CAAC,SAAS;CACrC,WAAWA,IAAE,QAAQ,CAAC,CAAC,SAAS;CAChC,OAAOA,IAAE,QAAQ,CAAC,CAAC,SAAS;CAC5B,eAAeA,IAAE,QAAQ,CAAC,CAAC,SAAS;CACpC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;AAClC,CAAC;AAGD,MAAa,wBAAwB;AACrC,MAAa,qBAAqBA,IAAE,OAAOA,IAAE,OAAO,GAAG,kBAAkB;AAEzE,MAAa,wBAAwBA,IAAE,OAAO;CAC5C,MAAMA,IAAE,OAAO;CACf,KAAKA,IAAE,OAAO;CACd,OAAOA,IAAE,OAAO;;;;CAIhB,UAAUA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ;CACR,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;AACjC,CAAC;;;;;;;;;AAWD,MAAa,gBAAgBA,IAAE,OAAO;CACpC,UAAUA,IAAE,OAAO,CAAC,CAAC,IAAI,CAAC;CAC1B,WAAWA,IAAE,OAAO,CAAC,CAAC,IAAI,CAAC;AAC7B,CAAC;AAGD,MAAa,uBAAuBA,IAAE,OAAO;CAC3C,MAAMA,IAAE,OAAO;CACf,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;;;;CAIhC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,KAAKA,IAAE,OAAO,CAAC,CAAC,SAAS;CACzB,cAAcA,IAAE,OAAO,CAAC,CAAC,SAAS;CAClC,KAAK,cAAc,SAAS;AAC9B,CAAC;AAGD,MAAa,2BAA2BA,IAAE,OAAO;CAC/C,SAAS,cAAc,SAAS;CAChC,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,iBAAiB,SAAS;CACrC,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,QAAQA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrC,QAAQ,mBAAmB,SAAS;CACpC,YAAYA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACzC,IAAI,qBAAqB,SAAS;CAClC,KAAK,cAAc,SAAS;AAC9B,CAAC;AAGD,MAAa,wBAAwB,yBAAyB,OAAO,EACnE,WAAWA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS,EAC1C,CAAC;AAGD,MAAa,qBAAqB,yBAAyB,OAAO;CAChE,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,KAAKA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,QAAQ,CAAC,CAAC,CAAC,SAAS;CAChD,SAASA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,QAAQ,CAAC,CAAC,CAAC,SAAS;CACpD,WAAWA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC;AAKD,MAAM,wBAAwBA,IAAE,OAAO;CACrC,MAAMA,IAAE,OAAO;CACf,KAAKA,IAAE,OAAO;CACd,OAAOA,IAAE,OAAO;CAChB,QAAQ;;;CAGR,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,cAAcA,IAAE,OAAO,CAAC,CAAC,SAAS;CAClC,UAAUA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;;;CAGjC,oBAAoBA,IAAE,OAAO,CAAC,CAAC,SAAS;CACxC,WAAWA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC;AAGD,MAAa,4BAA4BA,IAAE,OAAO;CAChD,MAAMA,IAAE,OAAO;CACf,KAAKA,IAAE,OAAO;CACd,OAAOA,IAAE,OAAO;CAChB,QAAQ;CACR,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,iBAAiB,SAAS;CACrC,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,UAAUA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,QAAQ,mBAAmB,SAAS;CACpC,YAAYA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACzC,IAAI,sBAAsB,SAAS;CACnC,QAAQA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrC,WAAWA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC;AAGD,MAAa,2BAA2BA,IAAE,KAAK;CAAC;CAAO;CAAQ;CAAM;AAAQ,CAAC;AAG9E,MAAa,8BAA8BA,IAAE,OAAO;CAClD,KAAKA,IAAE,OAAO;CACd,MAAM;CACN,MAAMA,IAAE,OAAO;CACf,KAAKA,IAAE,OAAO;CACd,OAAOA,IAAE,OAAO;CAChB,QAAQ;CACR,WAAWA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACxC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,iBAAiB,SAAS;CACrC,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,QAAQ,mBAAmB,SAAS;CACpC,YAAYA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACzC,IAAI,sBAAsB,SAAS;CACnC,QAAQA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrC,cAAcA,IAAE,KAAK,CAAC,UAAU,UAAU,CAAC,CAAC,CAAC,SAAS;CACtD,cAAcA,IAAE,OAAO,CAAC,CAAC,SAAS;AACpC,CAAC;AAGD,MAAa,iBAAiBA,IAC3B,OAAO;CACN,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;;CAEhC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;;CAE/B,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,KAAKA,IAAE,OAAO,CAAC,CAAC,SAAS;CACzB,cAAcA,IAAE,OAAO,CAAC,CAAC,SAAS;CAClC,KAAK,cAAc,SAAS;AAC9B,CAAC,CAAC,CACD,OAAO;AAGV,MAAa,mBAAmBA,IAAE,OAAO;CACvC,aAAaA,IAAE,OAAO;;CAEtB,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;;CAEhC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,KAAK,cAAc,SAAS;AAC9B,CAAC;AAGD,MAAa,0BAA0BA,IAAE,OAAO;CAC9C,WAAWA,IAAE,OAAO;CACpB,WAAWA,IAAE,OAAO;CACpB,iBAAiBA,IAAE,OAAO;CAC1B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC;AAGD,MAAa,uBAAuBA,IAAE,OAAO;CAC3C,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,OAAOA,IAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY;CACpC,cAAcA,IAAE,MAAMA,IAAE,OAAO,CAAC;AAClC,CAAC;AAGD,MAAa,mBAAmBA,IAAE,OAAO;CACvC,QAAQA,IAAE,OAAO;CACjB,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC;AAGD,MAAM,+BAA+BA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,QAAQ,CAAC;AAGrE,MAAa,uBAAkDA,IAAE,WAC/DA,IAAE,OAAO;CACP,SAAS,cAAc,SAAS;CAChC,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,QAAQA,IAAE,KAAK;EAAC;EAAU;EAAa;CAAkB,CAAC,CAAC,CAAC,SAAS;CACrE,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,SAAS,iBAAiB,SAAS;CACnC,UAAUA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC9B,SAASA,IACN,OAAO;EACN,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;EACjC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;EAChC,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,CAAC,CAAC,CACD,SAAS;CACZ,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;CAChC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC/B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC1B,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,WAAW,iBAAiB,SAAS;CACrC,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,QAAQA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrC,KAAKA,IAAE,OAAOA,IAAE,OAAO,GAAG,4BAA4B,CAAC,CAAC,SAAS;CACjE,SAASA,IAAE,OAAOA,IAAE,OAAO,GAAGA,IAAE,MAAM,CAACA,IAAE,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC,SAAS;CACpF,SAASA,IACN,OAAO,EACN,MAAMA,IAAE,KAAK;EAAC;EAAW;EAAO;CAAS,CAAC,CAAC,CAAC,SAAS,EACvD,CAAC,CAAC,CACD,SAAS;CACZ,IAAI,eAAe,SAAS;CAC5B,KAAK,gBAAgB,SAAS;AAChC,CAAC,CACH;AAIA,MAAa,qBAAqBA,IAAE,KAAK,CAAC,UAAU,UAAU,CAAC;AAO/D,MAAa,2BAA2BA,IAAE,OAAO;CAC/C,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACtC,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACxC,CAAC;AAQD,MAAa,4BAA4BA,IAAE,OAAO;CAChD,QAAQA,IAAE,OAAOA,IAAE,OAAO,GAAG,wBAAwB,CAAC,CAAC,SAAS;CAChE,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AACxC,CAAC;AAmCD,MAAa,kBAAkBA,IAAE,OAAO,EACtC,SAASA,IAAE,OAAO,EACpB,CAAC;AAGD,MAAa,iBAAiBA,IAAE,OAAO;CACrC,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,SAAS,gBAAgB,SAAS;AACpC,CAAC;;AAID,MAAa,kBAAkBA,IAAE,OAAO,EACtC,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS,EAC9B,CAAC;AAGD,MAAa,oBAAoBA,IAAE,KAAK;CAAC;CAAW;CAAO;AAAS,CAAC;AAGrE,MAAa,sBAAsBA,IAAE,OAAO,EAC1C,MAAM,kBAAkB,SAAS,EACnC,CAAC;AAGD,MAAM,kBAAkBA,IACrB,OAAO,CAAC,CACR,MACC,qBACA,0HACF;AAEF,MAAa,kBAAkBA,IAAE,OAAO;CACtC,SAASA,IAAE,OAAO;CAClB,SAAS,cAAc,SAAS;CAChC,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,SAAS,iBAAiB,SAAS;CACnC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;CAChC,SAAS,oBAAoB,SAAS;CACtC,IAAI,eAAe,SAAS;CAC5B,KAAK,gBAAgB,SAAS;CAC9B,gBAAgBA,IAAE,OAAO,CAAC,CAAC,SAAS;CACpC,SAAS,0BAA0B,SAAS;CAC5C,SAASA,IAAE,OAAO,iBAAiBA,IAAE,MAAM,CAACA,IAAE,OAAO,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;CACvF,KAAKA,IAAE,OAAO;EACZ,MAAM;EACN,IAAI;EACJ,KAAK;EACL,MAAM,yBAAyB,SAAS;CAC1C,CAAC;AACH,CAAC;AAGD,MAAa,sBAAsBA,IAAE,OAAO;CAC1C,KAAKA,IAAE,KAAK;EAAC;EAAe;EAAc;CAAS,CAAC;CACpD,SAASA,IAAE,OAAO;CAClB,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC5B,WAAWA,IAAE,KAAK,CAAC,WAAW,SAAS,CAAC;;;CAGxC,uBAAuBA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3C,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3B,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;CAChC,MAAM,sBAAsB,OAAO;EACjC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;EACtC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;CACjC,CAAC;CACD,IAAI,sBAAsB,OAAO;EAC/B,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;;;EAG1B,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC5B,cAAcA,IAAE,OAAO,CAAC,CAAC,SAAS;EAClC,aAAaA,IAAE,OAAO,CAAC,CAAC,SAAS;;EAEjC,oBAAoBA,IAAE,OAAO,CAAC,CAAC,SAAS;EACxC,WAAWA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC1C,CAAC;CACD,KAAK,sBAAsB,OAAO;EAChC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC3B,WAAW,iBAAiB,SAAS;EACrC,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;EACtC,QAAQ,mBAAmB,SAAS;EACpC,WAAWA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC1C,CAAC;CACD,MAAM,sBAAsB,OAAO;EACjC,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;EAChC,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,MAAMA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC1B,OAAOA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC3B,WAAW,iBAAiB,SAAS;EACrC,SAASA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;EACtC,QAAQ,mBAAmB,SAAS;EACpC,WAAWA,IAAE,MAAMA,IAAE,OAAO,CAAC,CAAC,CAAC,SAAS;EACxC,IAAI,sBAAsB,SAAS;CACrC,CAAC,CAAC,CAAC,SAAS;CACZ,SAASA,IAAE,OAAO,iBAAiB,yBAAyB,CAAC,CAAC,SAAS;CACvE,OAAOA,IAAE,OAAOA,IAAE,OAAO,GAAG,2BAA2B,CAAC,CAAC,SAAS;AACpE,CAAC;AAGD,MAAa,4BAA4BA,IAAE,OAAO;CAChD,KAAKA,IAAE,KAAK;EAAC;EAAe;EAAc;CAAS,CAAC;CACpD,SAASA,IAAE,OAAO;CAClB,WAAWA,IAAE,KAAK,CAAC,WAAW,SAAS,CAAC;;CAExC,uBAAuBA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC3C,SAASA,IAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,WAAWA,IAAE,OAAO;CACpB,SAASA,IAAE,OAAO;CAClB,SAASA,IAAE,gBAAgB,CAACA,IAAE,QAAQ,GAAG,GAAGA,IAAE,OAAO,CAAC,CAAC;CACvD,YAAYA,IAAE,OAAO,CAAC,CAAC,SAAS;CAChC,eAAeA,IAAE,QAAQ,CAAC,CAAC,SAAS;CACpC,SAAS,wBAAwB,SAAS;CAC1C,IAAIA,IACD,OAAO;EACN,MAAMA,IAAE,OAAO;EACf,KAAKA,IAAE,OAAO;EACd,OAAOA,IAAE,OAAO;EAChB,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;;EAE/B,UAAUA,IAAE,OAAO,CAAC,CAAC,SAAS;;EAE9B,SAAS,qBAAqB,SAAS;CACzC,CAAC,CAAC,CACD,SAAS;CACZ,KAAKA,IACF,OAAO;EACN,MAAMA,IAAE,OAAO;EACf,KAAKA,IAAE,OAAO;EACd,OAAOA,IAAE,OAAO;EAChB,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,WAAW,iBAAiB,SAAS;CACvC,CAAC,CAAC,CACD,SAAS;CACZ,MAAMA,IACH,OAAO;EACN,MAAMA,IAAE,OAAO;EACf,KAAKA,IAAE,OAAO;EACd,OAAOA,IAAE,OAAO;EAChB,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,WAAW,iBAAiB,SAAS;CACvC,CAAC,CAAC,CACD,SAAS;CACZ,SAASA,IACN,OACCA,IAAE,OAAO,GACTA,IAAE,OAAO;EACP,MAAMA,IAAE,OAAO;EACf,KAAKA,IAAE,OAAO;EACd,OAAOA,IAAE,OAAO;EAChB,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;EAC/B,WAAW,iBAAiB,SAAS;EACrC,IAAIA,IACD,OAAO;GACN,MAAMA,IAAE,OAAO;GACf,KAAKA,IAAE,OAAO;GACd,OAAOA,IAAE,OAAO;GAChB,QAAQ;GACR,WAAWA,IAAE,OAAO,CAAC,CAAC,SAAS;GAC/B,QAAQA,IAAE,OAAO,CAAC,CAAC,SAAS;GAC5B,cAAcA,IAAE,OAAO,CAAC,CAAC,SAAS;GAClC,UAAUA,IAAE,OAAO,CAAC,CAAC,SAAS;EAChC,CAAC,CAAC,CACD,SAAS;CACd,CAAC,CACH,CAAC,CACA,SAAS;AACd,CAAC"}

package/dist/ui/api.cjs

@@ -0,0 +1,105 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+let _orpc_client = require("@orpc/client");
+let _orpc_client_fetch = require("@orpc/client/fetch");
+let _orpc_tanstack_query = require("@orpc/tanstack-query");
+let _tanstack_react_router = require("@tanstack/react-router");
+
+//#region src/ui/api.ts
+function createRpcLink(config, url, headers) {
+	return new _orpc_client_fetch.RPCLink({
+		origin: config.hostUrl,
+		url,
+		interceptors: [(0, _orpc_client.onError)((error) => {
+			if (typeof window === "undefined") return;
+			if (error && typeof error === "object" && "message" in error) {
+				const message = String(error.message).toLowerCase();
+				if (message.includes("fetch") || message.includes("network") || message.includes("failed to fetch")) import("sonner").then(({ toast }) => {
+					const message = config.connectionError?.() ?? {
+						title: "Unable to connect to API",
+						description: "The API is currently unavailable. Please try again later."
+					};
+					toast.error(message.title, {
+						id: "api-connection-error",
+						description: message.description
+					});
+				}).catch(() => {});
+			}
+		})],
+		fetch(fetchUrl, options) {
+			return fetchWithRateLimitRetry(fetchUrl, {
+				...options,
+				credentials: "include",
+				headers: headers ? {
+					...Object.fromEntries(headers),
+					...options?.headers
+				} : options?.headers
+			});
+		}
+	});
+}
+const RATE_LIMIT_MAX_RETRIES = 3;
+const RATE_LIMIT_RETRY_CAP_MS = 2e3;
+/**
+* A 429 from the host's edge limiter is transient saturation, not an
+* application failure — retry within the server's `Retry-After` (capped) so
+* queries and the session check self-heal instead of surfacing errors.
+*/
+async function fetchWithRateLimitRetry(fetchUrl, options) {
+	let response = await fetch(fetchUrl, options);
+	for (let attempt = 1; attempt <= RATE_LIMIT_MAX_RETRIES && response.status === 429; attempt++) {
+		const retryAfterSeconds = Number(response.headers.get("retry-after"));
+		const delay = Number.isFinite(retryAfterSeconds) && retryAfterSeconds > 0 ? Math.min(retryAfterSeconds * 1e3, RATE_LIMIT_RETRY_CAP_MS) : 100 * attempt;
+		await new Promise((resolve) => setTimeout(resolve, delay));
+		response = await fetch(fetchUrl, options);
+	}
+	return response;
+}
+function buildClient(config, url, headers) {
+	if (!config.hostUrl) throw new Error("Missing runtime host URL");
+	return (0, _orpc_client.createORPCClient)(createRpcLink(config, url, headers));
+}
+const browserClients = /* @__PURE__ */ new Map();
+function memoizedClient(config, url, headers) {
+	if (typeof window !== "undefined" && !headers) {
+		const key = `${config.hostUrl}${url}`;
+		const memoized = browserClients.get(key);
+		if (memoized) return memoized;
+		const client = buildClient(config, url, headers);
+		browserClients.set(key, client);
+		return client;
+	}
+	return buildClient(config, url, headers);
+}
+function createApiClient(config, headers) {
+	return memoizedClient(config, config.rpcBase, headers);
+}
+function createPluginApiClient(pluginKey, config, headers) {
+	return memoizedClient(config, `${config.rpcBase}/${pluginKey}`, headers);
+}
+function createServiceClients(config, keys, headers) {
+	const clients = {};
+	for (const key of keys) if (key === "api") clients[key] = createApiClient(config, headers);
+	else clients[key] = createPluginApiClient(key, config, headers);
+	return clients;
+}
+function useClientContext() {
+	return (0, _tanstack_react_router.useRouter)().options.context;
+}
+function useApiClient() {
+	return useClientContext().apiClient;
+}
+function useOrpc() {
+	return (0, _orpc_tanstack_query.createTanstackQueryUtils)(useApiClient());
+}
+function usePluginClients() {
+	return useClientContext().pluginClients ?? {};
+}
+
+//#endregion
+exports.createApiClient = createApiClient;
+exports.createPluginApiClient = createPluginApiClient;
+exports.createServiceClients = createServiceClients;
+exports.useApiClient = useApiClient;
+exports.useOrpc = useOrpc;
+exports.usePluginClients = usePluginClients;
+//# sourceMappingURL=api.cjs.map

package/dist/ui/api.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.cjs","names":["RPCLink","onError","createORPCClient","useRouter","createTanstackQueryUtils"],"sources":["../../src/ui/api.ts"],"sourcesContent":["import { createORPCClient, onError } from \"@orpc/client\";\nimport { RPCLink } from \"@orpc/client/fetch\";\nimport type { ContractRouterClient, RouterContract } from \"@orpc/contract\";\nimport { createTanstackQueryUtils } from \"@orpc/tanstack-query\";\nimport { useRouter } from \"@tanstack/react-router\";\n\nexport type { RouterContract };\n\n/**\n * Localized copy for the API connection-failure toast — the app's authored\n * override seam (ADR 0023). Called at error time, so the implementation may\n * resolve the active locale itself.\n */\nexport type ApiConnectionErrorCopy = () => { title: string; description: string };\n\n/** typed client for the app's default router contract (router-context default) */\nexport type ApiClient<T extends RouterContract = RouterContract> = ContractRouterClient<T>;\n\nexport interface ClientServiceConfig {\n  hostUrl: string;\n  rpcBase: `/${string}`;\n  connectionError?: ApiConnectionErrorCopy;\n}\n\ntype ClientRouterContext = {\n  apiClient?: unknown;\n  pluginClients?: Record<string, unknown>;\n};\n\nexport type { ClientRouterContext };\n\nfunction createRpcLink(config: ClientServiceConfig, url: `/${string}`, headers?: Headers) {\n  return new RPCLink({\n    origin: config.hostUrl,\n    url,\n    interceptors: [\n      onError((error: unknown) => {\n        if (typeof window === \"undefined\") {\n          return;\n        }\n\n        if (error && typeof error === \"object\" && \"message\" in error) {\n          const message = String(error.message).toLowerCase();\n          if (\n            message.includes(\"fetch\") ||\n            message.includes(\"network\") ||\n            message.includes(\"failed to fetch\")\n          ) {\n            void import(\"sonner\")\n              .then(({ toast }) => {\n                const message = config.connectionError?.() ?? {\n                  title: \"Unable to connect to API\",\n                  description: \"The API is currently unavailable. Please try again later.\",\n                };\n                toast.error(message.title, {\n                  id: \"api-connection-error\",\n                  description: message.description,\n                });\n              })\n              .catch(() => {});\n          }\n        }\n      }),\n    ],\n    fetch(fetchUrl: RequestInfo | URL, options?: RequestInit) {\n      return fetchWithRateLimitRetry(fetchUrl, {\n        ...options,\n        credentials: \"include\",\n        headers: headers\n          ? { ...Object.fromEntries(headers), ...(options?.headers as Record<string, string>) }\n          : options?.headers,\n      });\n    },\n  });\n}\n\nconst RATE_LIMIT_MAX_RETRIES = 3;\nconst RATE_LIMIT_RETRY_CAP_MS = 2_000;\n\n/**\n * A 429 from the host's edge limiter is transient saturation, not an\n * application failure — retry within the server's `Retry-After` (capped) so\n * queries and the session check self-heal instead of surfacing errors.\n */\nasync function fetchWithRateLimitRetry(\n  fetchUrl: RequestInfo | URL,\n  options?: RequestInit,\n): Promise<Response> {\n  let response = await fetch(fetchUrl, options);\n  for (let attempt = 1; attempt <= RATE_LIMIT_MAX_RETRIES && response.status === 429; attempt++) {\n    const retryAfterSeconds = Number(response.headers.get(\"retry-after\"));\n    const delay =\n      Number.isFinite(retryAfterSeconds) && retryAfterSeconds > 0\n        ? Math.min(retryAfterSeconds * 1000, RATE_LIMIT_RETRY_CAP_MS)\n        : 100 * attempt;\n    await new Promise((resolve) => setTimeout(resolve, delay));\n    response = await fetch(fetchUrl, options);\n  }\n  return response;\n}\n\nfunction buildClient<T extends RouterContract>(\n  config: ClientServiceConfig,\n  url: `/${string}`,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  if (!config.hostUrl) {\n    throw new Error(\"Missing runtime host URL\");\n  }\n  return createORPCClient(createRpcLink(config, url, headers)) as ContractRouterClient<T>;\n}\n\nconst browserClients = new Map<string, unknown>();\n\nfunction memoizedClient<T extends RouterContract>(\n  config: ClientServiceConfig,\n  url: `/${string}`,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  if (typeof window !== \"undefined\" && !headers) {\n    const key = `${config.hostUrl}${url}`;\n    const memoized = browserClients.get(key);\n    if (memoized) {\n      return memoized as ContractRouterClient<T>;\n    }\n    const client = buildClient<T>(config, url, headers);\n    browserClients.set(key, client);\n    return client;\n  }\n\n  return buildClient<T>(config, url, headers);\n}\n\nexport function createApiClient<T extends RouterContract = RouterContract>(\n  config: ClientServiceConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  return memoizedClient<T>(config, config.rpcBase, headers);\n}\n\nexport function createPluginApiClient<T extends RouterContract = RouterContract>(\n  pluginKey: string,\n  config: ClientServiceConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  return memoizedClient<T>(config, `${config.rpcBase}/${pluginKey}`, headers);\n}\n\nexport function createServiceClients<\n  C extends Record<string, RouterContract>,\n  K extends keyof C & string = keyof C & string,\n>(\n  config: ClientServiceConfig,\n  keys: readonly K[],\n  headers?: Headers,\n): Pick<{ [P in keyof C]: ContractRouterClient<C[P]> }, K> {\n  const clients: Record<string, unknown> = {};\n  for (const key of keys) {\n    if (key === \"api\") {\n      clients[key] = createApiClient<C[typeof key]>(config, headers);\n    } else {\n      clients[key] = createPluginApiClient<C[typeof key]>(key, config, headers);\n    }\n  }\n  return clients as Pick<{ [P in keyof C]: ContractRouterClient<C[P]> }, K>;\n}\n\nfunction useClientContext(): ClientRouterContext {\n  return useRouter().options.context as ClientRouterContext;\n}\n\nexport function useApiClient<T extends RouterContract = RouterContract>(): ContractRouterClient<T> {\n  return useClientContext().apiClient as ContractRouterClient<T>;\n}\n\nexport function useOrpc<T extends RouterContract = RouterContract>() {\n  return createTanstackQueryUtils(useApiClient<T>());\n}\n\nexport function usePluginClients<C extends Record<string, unknown> = Record<string, unknown>>(): C {\n  return (useClientContext().pluginClients ?? {}) as C;\n}\n"],"mappings":";;;;;;;AA+BA,SAAS,cAAc,QAA6B,KAAmB,SAAmB;CACxF,OAAO,IAAIA,2BAAQ;EACjB,QAAQ,OAAO;EACf;EACA,cAAc,KACZC,uBAAS,UAAmB;GAC1B,IAAI,OAAO,WAAW,aACpB;GAGF,IAAI,SAAS,OAAO,UAAU,YAAY,aAAa,OAAO;IAC5D,MAAM,UAAU,OAAO,MAAM,OAAO,CAAC,CAAC,YAAY;IAClD,IACE,QAAQ,SAAS,OAAO,KACxB,QAAQ,SAAS,SAAS,KAC1B,QAAQ,SAAS,iBAAiB,GAElC,AAAK,OAAO,SAAS,CAClB,MAAM,EAAE,YAAY;KACnB,MAAM,UAAU,OAAO,kBAAkB,KAAK;MAC5C,OAAO;MACP,aAAa;KACf;KACA,MAAM,MAAM,QAAQ,OAAO;MACzB,IAAI;MACJ,aAAa,QAAQ;KACvB,CAAC;IACH,CAAC,CAAC,CACD,YAAY,CAAC,CAAC;GAErB;EACF,CAAC,CACH;EACA,MAAM,UAA6B,SAAuB;GACxD,OAAO,wBAAwB,UAAU;IACvC,GAAG;IACH,aAAa;IACb,SAAS,UACL;KAAE,GAAG,OAAO,YAAY,OAAO;KAAG,GAAI,SAAS;IAAmC,IAClF,SAAS;GACf,CAAC;EACH;CACF,CAAC;AACH;AAEA,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;;;;;;AAOhC,eAAe,wBACb,UACA,SACmB;CACnB,IAAI,WAAW,MAAM,MAAM,UAAU,OAAO;CAC5C,KAAK,IAAI,UAAU,GAAG,WAAW,0BAA0B,SAAS,WAAW,KAAK,WAAW;EAC7F,MAAM,oBAAoB,OAAO,SAAS,QAAQ,IAAI,aAAa,CAAC;EACpE,MAAM,QACJ,OAAO,SAAS,iBAAiB,KAAK,oBAAoB,IACtD,KAAK,IAAI,oBAAoB,KAAM,uBAAuB,IAC1D,MAAM;EACZ,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,KAAK,CAAC;EACzD,WAAW,MAAM,MAAM,UAAU,OAAO;CAC1C;CACA,OAAO;AACT;AAEA,SAAS,YACP,QACA,KACA,SACyB;CACzB,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,0BAA0B;CAE5C,WAAOC,+BAAiB,cAAc,QAAQ,KAAK,OAAO,CAAC;AAC7D;AAEA,MAAM,iCAAiB,IAAI,IAAqB;AAEhD,SAAS,eACP,QACA,KACA,SACyB;CACzB,IAAI,OAAO,WAAW,eAAe,CAAC,SAAS;EAC7C,MAAM,MAAM,GAAG,OAAO,UAAU;EAChC,MAAM,WAAW,eAAe,IAAI,GAAG;EACvC,IAAI,UACF,OAAO;EAET,MAAM,SAAS,YAAe,QAAQ,KAAK,OAAO;EAClD,eAAe,IAAI,KAAK,MAAM;EAC9B,OAAO;CACT;CAEA,OAAO,YAAe,QAAQ,KAAK,OAAO;AAC5C;AAEA,SAAgB,gBACd,QACA,SACyB;CACzB,OAAO,eAAkB,QAAQ,OAAO,SAAS,OAAO;AAC1D;AAEA,SAAgB,sBACd,WACA,QACA,SACyB;CACzB,OAAO,eAAkB,QAAQ,GAAG,OAAO,QAAQ,GAAG,aAAa,OAAO;AAC5E;AAEA,SAAgB,qBAId,QACA,MACA,SACyD;CACzD,MAAM,UAAmC,CAAC;CAC1C,KAAK,MAAM,OAAO,MAChB,IAAI,QAAQ,OACV,QAAQ,OAAO,gBAA+B,QAAQ,OAAO;MAE7D,QAAQ,OAAO,sBAAqC,KAAK,QAAQ,OAAO;CAG5E,OAAO;AACT;AAEA,SAAS,mBAAwC;CAC/C,WAAOC,kCAAU,CAAC,CAAC,QAAQ;AAC7B;AAEA,SAAgB,eAAmF;CACjG,OAAO,iBAAiB,CAAC,CAAC;AAC5B;AAEA,SAAgB,UAAqD;CACnE,WAAOC,+CAAyB,aAAgB,CAAC;AACnD;AAEA,SAAgB,mBAAmF;CACjG,OAAQ,iBAAiB,CAAC,CAAC,iBAAiB,CAAC;AAC/C"}

package/dist/ui/api.d.cts

@@ -0,0 +1,31 @@
+import { ContractRouterClient, RouterContract } from "@orpc/contract";
+//#region src/ui/api.d.ts
+/**
+ * Localized copy for the API connection-failure toast — the app's authored
+ * override seam (ADR 0023). Called at error time, so the implementation may
+ * resolve the active locale itself.
+ */
+type ApiConnectionErrorCopy = () => {
+  title: string;
+  description: string;
+};
+/** typed client for the app's default router contract (router-context default) */
+type ApiClient<T extends RouterContract = RouterContract> = ContractRouterClient<T>;
+interface ClientServiceConfig {
+  hostUrl: string;
+  rpcBase: `/${string}`;
+  connectionError?: ApiConnectionErrorCopy;
+}
+type ClientRouterContext = {
+  apiClient?: unknown;
+  pluginClients?: Record<string, unknown>;
+};
+declare function createApiClient<T extends RouterContract = RouterContract>(config: ClientServiceConfig, headers?: Headers): ContractRouterClient<T>;
+declare function createPluginApiClient<T extends RouterContract = RouterContract>(pluginKey: string, config: ClientServiceConfig, headers?: Headers): ContractRouterClient<T>;
+declare function createServiceClients<C extends Record<string, RouterContract>, K extends keyof C & string = keyof C & string>(config: ClientServiceConfig, keys: readonly K[], headers?: Headers): Pick<{ [P in keyof C]: ContractRouterClient<C[P]>; }, K>;
+declare function useApiClient<T extends RouterContract = RouterContract>(): ContractRouterClient<T>;
+declare function useOrpc<T extends RouterContract = RouterContract>(): import("@orpc/tanstack-query").RouterUtils<ContractRouterClient<T, object>>;
+declare function usePluginClients<C extends Record<string, unknown> = Record<string, unknown>>(): C;
+//#endregion
+export { ApiClient, ApiConnectionErrorCopy, type ClientRouterContext, ClientServiceConfig, type RouterContract, createApiClient, createPluginApiClient, createServiceClients, useApiClient, useOrpc, usePluginClients };
+//# sourceMappingURL=api.d.cts.map

package/dist/ui/api.d.mts

@@ -0,0 +1,31 @@
+import { ContractRouterClient, RouterContract } from "@orpc/contract";
+//#region src/ui/api.d.ts
+/**
+ * Localized copy for the API connection-failure toast — the app's authored
+ * override seam (ADR 0023). Called at error time, so the implementation may
+ * resolve the active locale itself.
+ */
+type ApiConnectionErrorCopy = () => {
+  title: string;
+  description: string;
+};
+/** typed client for the app's default router contract (router-context default) */
+type ApiClient<T extends RouterContract = RouterContract> = ContractRouterClient<T>;
+interface ClientServiceConfig {
+  hostUrl: string;
+  rpcBase: `/${string}`;
+  connectionError?: ApiConnectionErrorCopy;
+}
+type ClientRouterContext = {
+  apiClient?: unknown;
+  pluginClients?: Record<string, unknown>;
+};
+declare function createApiClient<T extends RouterContract = RouterContract>(config: ClientServiceConfig, headers?: Headers): ContractRouterClient<T>;
+declare function createPluginApiClient<T extends RouterContract = RouterContract>(pluginKey: string, config: ClientServiceConfig, headers?: Headers): ContractRouterClient<T>;
+declare function createServiceClients<C extends Record<string, RouterContract>, K extends keyof C & string = keyof C & string>(config: ClientServiceConfig, keys: readonly K[], headers?: Headers): Pick<{ [P in keyof C]: ContractRouterClient<C[P]>; }, K>;
+declare function useApiClient<T extends RouterContract = RouterContract>(): ContractRouterClient<T>;
+declare function useOrpc<T extends RouterContract = RouterContract>(): import("@orpc/tanstack-query").RouterUtils<ContractRouterClient<T, object>>;
+declare function usePluginClients<C extends Record<string, unknown> = Record<string, unknown>>(): C;
+//#endregion
+export { ApiClient, ApiConnectionErrorCopy, type ClientRouterContext, ClientServiceConfig, type RouterContract, createApiClient, createPluginApiClient, createServiceClients, useApiClient, useOrpc, usePluginClients };
+//# sourceMappingURL=api.d.mts.map

package/dist/ui/api.mjs

@@ -0,0 +1,99 @@
+import { createORPCClient, onError } from "@orpc/client";
+import { RPCLink } from "@orpc/client/fetch";
+import { createTanstackQueryUtils } from "@orpc/tanstack-query";
+import { useRouter } from "@tanstack/react-router";
+
+//#region src/ui/api.ts
+function createRpcLink(config, url, headers) {
+	return new RPCLink({
+		origin: config.hostUrl,
+		url,
+		interceptors: [onError((error) => {
+			if (typeof window === "undefined") return;
+			if (error && typeof error === "object" && "message" in error) {
+				const message = String(error.message).toLowerCase();
+				if (message.includes("fetch") || message.includes("network") || message.includes("failed to fetch")) import("sonner").then(({ toast }) => {
+					const message = config.connectionError?.() ?? {
+						title: "Unable to connect to API",
+						description: "The API is currently unavailable. Please try again later."
+					};
+					toast.error(message.title, {
+						id: "api-connection-error",
+						description: message.description
+					});
+				}).catch(() => {});
+			}
+		})],
+		fetch(fetchUrl, options) {
+			return fetchWithRateLimitRetry(fetchUrl, {
+				...options,
+				credentials: "include",
+				headers: headers ? {
+					...Object.fromEntries(headers),
+					...options?.headers
+				} : options?.headers
+			});
+		}
+	});
+}
+const RATE_LIMIT_MAX_RETRIES = 3;
+const RATE_LIMIT_RETRY_CAP_MS = 2e3;
+/**
+* A 429 from the host's edge limiter is transient saturation, not an
+* application failure — retry within the server's `Retry-After` (capped) so
+* queries and the session check self-heal instead of surfacing errors.
+*/
+async function fetchWithRateLimitRetry(fetchUrl, options) {
+	let response = await fetch(fetchUrl, options);
+	for (let attempt = 1; attempt <= RATE_LIMIT_MAX_RETRIES && response.status === 429; attempt++) {
+		const retryAfterSeconds = Number(response.headers.get("retry-after"));
+		const delay = Number.isFinite(retryAfterSeconds) && retryAfterSeconds > 0 ? Math.min(retryAfterSeconds * 1e3, RATE_LIMIT_RETRY_CAP_MS) : 100 * attempt;
+		await new Promise((resolve) => setTimeout(resolve, delay));
+		response = await fetch(fetchUrl, options);
+	}
+	return response;
+}
+function buildClient(config, url, headers) {
+	if (!config.hostUrl) throw new Error("Missing runtime host URL");
+	return createORPCClient(createRpcLink(config, url, headers));
+}
+const browserClients = /* @__PURE__ */ new Map();
+function memoizedClient(config, url, headers) {
+	if (typeof window !== "undefined" && !headers) {
+		const key = `${config.hostUrl}${url}`;
+		const memoized = browserClients.get(key);
+		if (memoized) return memoized;
+		const client = buildClient(config, url, headers);
+		browserClients.set(key, client);
+		return client;
+	}
+	return buildClient(config, url, headers);
+}
+function createApiClient(config, headers) {
+	return memoizedClient(config, config.rpcBase, headers);
+}
+function createPluginApiClient(pluginKey, config, headers) {
+	return memoizedClient(config, `${config.rpcBase}/${pluginKey}`, headers);
+}
+function createServiceClients(config, keys, headers) {
+	const clients = {};
+	for (const key of keys) if (key === "api") clients[key] = createApiClient(config, headers);
+	else clients[key] = createPluginApiClient(key, config, headers);
+	return clients;
+}
+function useClientContext() {
+	return useRouter().options.context;
+}
+function useApiClient() {
+	return useClientContext().apiClient;
+}
+function useOrpc() {
+	return createTanstackQueryUtils(useApiClient());
+}
+function usePluginClients() {
+	return useClientContext().pluginClients ?? {};
+}
+
+//#endregion
+export { createApiClient, createPluginApiClient, createServiceClients, useApiClient, useOrpc, usePluginClients };
+//# sourceMappingURL=api.mjs.map

package/dist/ui/api.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.mjs","names":[],"sources":["../../src/ui/api.ts"],"sourcesContent":["import { createORPCClient, onError } from \"@orpc/client\";\nimport { RPCLink } from \"@orpc/client/fetch\";\nimport type { ContractRouterClient, RouterContract } from \"@orpc/contract\";\nimport { createTanstackQueryUtils } from \"@orpc/tanstack-query\";\nimport { useRouter } from \"@tanstack/react-router\";\n\nexport type { RouterContract };\n\n/**\n * Localized copy for the API connection-failure toast — the app's authored\n * override seam (ADR 0023). Called at error time, so the implementation may\n * resolve the active locale itself.\n */\nexport type ApiConnectionErrorCopy = () => { title: string; description: string };\n\n/** typed client for the app's default router contract (router-context default) */\nexport type ApiClient<T extends RouterContract = RouterContract> = ContractRouterClient<T>;\n\nexport interface ClientServiceConfig {\n  hostUrl: string;\n  rpcBase: `/${string}`;\n  connectionError?: ApiConnectionErrorCopy;\n}\n\ntype ClientRouterContext = {\n  apiClient?: unknown;\n  pluginClients?: Record<string, unknown>;\n};\n\nexport type { ClientRouterContext };\n\nfunction createRpcLink(config: ClientServiceConfig, url: `/${string}`, headers?: Headers) {\n  return new RPCLink({\n    origin: config.hostUrl,\n    url,\n    interceptors: [\n      onError((error: unknown) => {\n        if (typeof window === \"undefined\") {\n          return;\n        }\n\n        if (error && typeof error === \"object\" && \"message\" in error) {\n          const message = String(error.message).toLowerCase();\n          if (\n            message.includes(\"fetch\") ||\n            message.includes(\"network\") ||\n            message.includes(\"failed to fetch\")\n          ) {\n            void import(\"sonner\")\n              .then(({ toast }) => {\n                const message = config.connectionError?.() ?? {\n                  title: \"Unable to connect to API\",\n                  description: \"The API is currently unavailable. Please try again later.\",\n                };\n                toast.error(message.title, {\n                  id: \"api-connection-error\",\n                  description: message.description,\n                });\n              })\n              .catch(() => {});\n          }\n        }\n      }),\n    ],\n    fetch(fetchUrl: RequestInfo | URL, options?: RequestInit) {\n      return fetchWithRateLimitRetry(fetchUrl, {\n        ...options,\n        credentials: \"include\",\n        headers: headers\n          ? { ...Object.fromEntries(headers), ...(options?.headers as Record<string, string>) }\n          : options?.headers,\n      });\n    },\n  });\n}\n\nconst RATE_LIMIT_MAX_RETRIES = 3;\nconst RATE_LIMIT_RETRY_CAP_MS = 2_000;\n\n/**\n * A 429 from the host's edge limiter is transient saturation, not an\n * application failure — retry within the server's `Retry-After` (capped) so\n * queries and the session check self-heal instead of surfacing errors.\n */\nasync function fetchWithRateLimitRetry(\n  fetchUrl: RequestInfo | URL,\n  options?: RequestInit,\n): Promise<Response> {\n  let response = await fetch(fetchUrl, options);\n  for (let attempt = 1; attempt <= RATE_LIMIT_MAX_RETRIES && response.status === 429; attempt++) {\n    const retryAfterSeconds = Number(response.headers.get(\"retry-after\"));\n    const delay =\n      Number.isFinite(retryAfterSeconds) && retryAfterSeconds > 0\n        ? Math.min(retryAfterSeconds * 1000, RATE_LIMIT_RETRY_CAP_MS)\n        : 100 * attempt;\n    await new Promise((resolve) => setTimeout(resolve, delay));\n    response = await fetch(fetchUrl, options);\n  }\n  return response;\n}\n\nfunction buildClient<T extends RouterContract>(\n  config: ClientServiceConfig,\n  url: `/${string}`,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  if (!config.hostUrl) {\n    throw new Error(\"Missing runtime host URL\");\n  }\n  return createORPCClient(createRpcLink(config, url, headers)) as ContractRouterClient<T>;\n}\n\nconst browserClients = new Map<string, unknown>();\n\nfunction memoizedClient<T extends RouterContract>(\n  config: ClientServiceConfig,\n  url: `/${string}`,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  if (typeof window !== \"undefined\" && !headers) {\n    const key = `${config.hostUrl}${url}`;\n    const memoized = browserClients.get(key);\n    if (memoized) {\n      return memoized as ContractRouterClient<T>;\n    }\n    const client = buildClient<T>(config, url, headers);\n    browserClients.set(key, client);\n    return client;\n  }\n\n  return buildClient<T>(config, url, headers);\n}\n\nexport function createApiClient<T extends RouterContract = RouterContract>(\n  config: ClientServiceConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  return memoizedClient<T>(config, config.rpcBase, headers);\n}\n\nexport function createPluginApiClient<T extends RouterContract = RouterContract>(\n  pluginKey: string,\n  config: ClientServiceConfig,\n  headers?: Headers,\n): ContractRouterClient<T> {\n  return memoizedClient<T>(config, `${config.rpcBase}/${pluginKey}`, headers);\n}\n\nexport function createServiceClients<\n  C extends Record<string, RouterContract>,\n  K extends keyof C & string = keyof C & string,\n>(\n  config: ClientServiceConfig,\n  keys: readonly K[],\n  headers?: Headers,\n): Pick<{ [P in keyof C]: ContractRouterClient<C[P]> }, K> {\n  const clients: Record<string, unknown> = {};\n  for (const key of keys) {\n    if (key === \"api\") {\n      clients[key] = createApiClient<C[typeof key]>(config, headers);\n    } else {\n      clients[key] = createPluginApiClient<C[typeof key]>(key, config, headers);\n    }\n  }\n  return clients as Pick<{ [P in keyof C]: ContractRouterClient<C[P]> }, K>;\n}\n\nfunction useClientContext(): ClientRouterContext {\n  return useRouter().options.context as ClientRouterContext;\n}\n\nexport function useApiClient<T extends RouterContract = RouterContract>(): ContractRouterClient<T> {\n  return useClientContext().apiClient as ContractRouterClient<T>;\n}\n\nexport function useOrpc<T extends RouterContract = RouterContract>() {\n  return createTanstackQueryUtils(useApiClient<T>());\n}\n\nexport function usePluginClients<C extends Record<string, unknown> = Record<string, unknown>>(): C {\n  return (useClientContext().pluginClients ?? {}) as C;\n}\n"],"mappings":";;;;;;AA+BA,SAAS,cAAc,QAA6B,KAAmB,SAAmB;CACxF,OAAO,IAAI,QAAQ;EACjB,QAAQ,OAAO;EACf;EACA,cAAc,CACZ,SAAS,UAAmB;GAC1B,IAAI,OAAO,WAAW,aACpB;GAGF,IAAI,SAAS,OAAO,UAAU,YAAY,aAAa,OAAO;IAC5D,MAAM,UAAU,OAAO,MAAM,OAAO,CAAC,CAAC,YAAY;IAClD,IACE,QAAQ,SAAS,OAAO,KACxB,QAAQ,SAAS,SAAS,KAC1B,QAAQ,SAAS,iBAAiB,GAElC,AAAK,OAAO,SAAS,CAClB,MAAM,EAAE,YAAY;KACnB,MAAM,UAAU,OAAO,kBAAkB,KAAK;MAC5C,OAAO;MACP,aAAa;KACf;KACA,MAAM,MAAM,QAAQ,OAAO;MACzB,IAAI;MACJ,aAAa,QAAQ;KACvB,CAAC;IACH,CAAC,CAAC,CACD,YAAY,CAAC,CAAC;GAErB;EACF,CAAC,CACH;EACA,MAAM,UAA6B,SAAuB;GACxD,OAAO,wBAAwB,UAAU;IACvC,GAAG;IACH,aAAa;IACb,SAAS,UACL;KAAE,GAAG,OAAO,YAAY,OAAO;KAAG,GAAI,SAAS;IAAmC,IAClF,SAAS;GACf,CAAC;EACH;CACF,CAAC;AACH;AAEA,MAAM,yBAAyB;AAC/B,MAAM,0BAA0B;;;;;;AAOhC,eAAe,wBACb,UACA,SACmB;CACnB,IAAI,WAAW,MAAM,MAAM,UAAU,OAAO;CAC5C,KAAK,IAAI,UAAU,GAAG,WAAW,0BAA0B,SAAS,WAAW,KAAK,WAAW;EAC7F,MAAM,oBAAoB,OAAO,SAAS,QAAQ,IAAI,aAAa,CAAC;EACpE,MAAM,QACJ,OAAO,SAAS,iBAAiB,KAAK,oBAAoB,IACtD,KAAK,IAAI,oBAAoB,KAAM,uBAAuB,IAC1D,MAAM;EACZ,MAAM,IAAI,SAAS,YAAY,WAAW,SAAS,KAAK,CAAC;EACzD,WAAW,MAAM,MAAM,UAAU,OAAO;CAC1C;CACA,OAAO;AACT;AAEA,SAAS,YACP,QACA,KACA,SACyB;CACzB,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,0BAA0B;CAE5C,OAAO,iBAAiB,cAAc,QAAQ,KAAK,OAAO,CAAC;AAC7D;AAEA,MAAM,iCAAiB,IAAI,IAAqB;AAEhD,SAAS,eACP,QACA,KACA,SACyB;CACzB,IAAI,OAAO,WAAW,eAAe,CAAC,SAAS;EAC7C,MAAM,MAAM,GAAG,OAAO,UAAU;EAChC,MAAM,WAAW,eAAe,IAAI,GAAG;EACvC,IAAI,UACF,OAAO;EAET,MAAM,SAAS,YAAe,QAAQ,KAAK,OAAO;EAClD,eAAe,IAAI,KAAK,MAAM;EAC9B,OAAO;CACT;CAEA,OAAO,YAAe,QAAQ,KAAK,OAAO;AAC5C;AAEA,SAAgB,gBACd,QACA,SACyB;CACzB,OAAO,eAAkB,QAAQ,OAAO,SAAS,OAAO;AAC1D;AAEA,SAAgB,sBACd,WACA,QACA,SACyB;CACzB,OAAO,eAAkB,QAAQ,GAAG,OAAO,QAAQ,GAAG,aAAa,OAAO;AAC5E;AAEA,SAAgB,qBAId,QACA,MACA,SACyD;CACzD,MAAM,UAAmC,CAAC;CAC1C,KAAK,MAAM,OAAO,MAChB,IAAI,QAAQ,OACV,QAAQ,OAAO,gBAA+B,QAAQ,OAAO;MAE7D,QAAQ,OAAO,sBAAqC,KAAK,QAAQ,OAAO;CAG5E,OAAO;AACT;AAEA,SAAS,mBAAwC;CAC/C,OAAO,UAAU,CAAC,CAAC,QAAQ;AAC7B;AAEA,SAAgB,eAAmF;CACjG,OAAO,iBAAiB,CAAC,CAAC;AAC5B;AAEA,SAAgB,UAAqD;CACnE,OAAO,yBAAyB,aAAgB,CAAC;AACnD;AAEA,SAAgB,mBAAmF;CACjG,OAAQ,iBAAiB,CAAC,CAAC,iBAAiB,CAAC;AAC/C"}

package/dist/ui/auth-guards.cjs

@@ -0,0 +1,50 @@
+const require_plugin_path = require('./plugin-path.cjs');
+const require_ui_auth = require('./auth.cjs');
+let _tanstack_react_router = require("@tanstack/react-router");
+
+//#region src/ui/auth-guards.ts
+async function ensureSession(context) {
+	const { queryClient, authClient } = context;
+	return queryClient.query(require_ui_auth.sessionQueryOptions(authClient));
+}
+function buildAuthContext(session) {
+	return {
+		isAuthenticated: !!session?.user,
+		user: session?.user ?? null,
+		session: session?.session ?? null,
+		activeOrganizationId: session?.session?.activeOrganizationId ?? null,
+		isAnonymous: session?.user?.isAnonymous ?? false,
+		isAdmin: session?.user?.role === "admin",
+		isBanned: session?.user?.banned ?? false
+	};
+}
+async function requireSession({ context, location }) {
+	const session = await ensureSession(context);
+	if (!session?.user) throw (0, _tanstack_react_router.redirect)({ href: require_plugin_path.pluginHref("/login", { redirect: location.href }) });
+	if (session.user.banned) throw (0, _tanstack_react_router.redirect)({ href: require_plugin_path.pluginPath("/login#banned") });
+	return {
+		auth: buildAuthContext(session),
+		session
+	};
+}
+async function requireAdmin(args) {
+	const result = await requireSession(args);
+	if (result.session.user?.role !== "admin") throw (0, _tanstack_react_router.redirect)({ to: "/dashboard" });
+	return result;
+}
+/**
+* Clears private and public query data on sign-out while leaving an explicit
+* signed-out session entry — the cache must remember "signed out" so a late
+* router-context session cannot resurrect stale authed state.
+*/
+async function clearAuthenticatedQueries(queryClient) {
+	await queryClient.cancelQueries();
+	queryClient.clear();
+	queryClient.setQueryData(require_ui_auth.sessionQueryKey, null);
+}
+
+//#endregion
+exports.clearAuthenticatedQueries = clearAuthenticatedQueries;
+exports.requireAdmin = requireAdmin;
+exports.requireSession = requireSession;
+//# sourceMappingURL=auth-guards.cjs.map

package/dist/ui/auth-guards.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-guards.cjs","names":["sessionQueryOptions","redirect","pluginHref","pluginPath","sessionQueryKey"],"sources":["../../src/ui/auth-guards.ts"],"sourcesContent":["/**\n * The auth redirect policy — the single owner of the guard pair that decides\n * every session-driven redirect in the composed tree. The login route\n * (`_public/login` in the auth plugin ui) and the authenticated mounts read\n * through this module so both sides of the ping-pong loop live in one place,\n * tested as a pair.\n */\n\nimport type { QueryClient } from \"@tanstack/react-query\";\nimport { redirect } from \"@tanstack/react-router\";\nimport type { AuthClient, SessionData } from \"./auth\";\nimport { sessionQueryKey, sessionQueryOptions } from \"./auth\";\nimport { pluginHref, pluginPath } from \"./plugin-path\";\n\nexport interface AuthContext {\n  isAuthenticated: boolean;\n  user: SessionData[\"user\"] | null;\n  session: SessionData[\"session\"] | null;\n  activeOrganizationId: string | null;\n  isAnonymous: boolean;\n  isAdmin: boolean;\n  isBanned: boolean;\n}\n\ninterface AuthGuardContext {\n  queryClient: QueryClient;\n  authClient: AuthClient;\n}\n\nexport interface AuthGuardArgs {\n  context: AuthGuardContext;\n  location: { href: string };\n}\n\nasync function ensureSession(context: AuthGuardContext): Promise<SessionData | null> {\n  const { queryClient, authClient } = context;\n  return queryClient.query(sessionQueryOptions(authClient));\n}\n\nfunction buildAuthContext(session: SessionData | null | undefined): AuthContext {\n  return {\n    isAuthenticated: !!session?.user,\n    user: session?.user ?? null,\n    session: session?.session ?? null,\n    activeOrganizationId: session?.session?.activeOrganizationId ?? null,\n    isAnonymous: session?.user?.isAnonymous ?? false,\n    isAdmin: session?.user?.role === \"admin\",\n    isBanned: session?.user?.banned ?? false,\n  };\n}\n\nexport async function requireSession({ context, location }: AuthGuardArgs) {\n  const session = await ensureSession(context);\n  if (!session?.user) {\n    throw redirect({ href: pluginHref(\"/login\", { redirect: location.href }) });\n  }\n  if (session.user.banned) {\n    throw redirect({ href: pluginPath(\"/login#banned\") });\n  }\n  return { auth: buildAuthContext(session), session };\n}\n\nexport async function requireAdmin(args: AuthGuardArgs) {\n  const result = await requireSession(args);\n  if (result.session.user?.role !== \"admin\") {\n    throw redirect({ to: \"/dashboard\" });\n  }\n  return result;\n}\n\n/**\n * Clears private and public query data on sign-out while leaving an explicit\n * signed-out session entry — the cache must remember \"signed out\" so a late\n * router-context session cannot resurrect stale authed state.\n */\nexport async function clearAuthenticatedQueries(queryClient: QueryClient) {\n  await queryClient.cancelQueries();\n  queryClient.clear();\n  queryClient.setQueryData(sessionQueryKey, null);\n}\n"],"mappings":";;;;;AAkCA,eAAe,cAAc,SAAwD;CACnF,MAAM,EAAE,aAAa,eAAe;CACpC,OAAO,YAAY,MAAMA,oCAAoB,UAAU,CAAC;AAC1D;AAEA,SAAS,iBAAiB,SAAsD;CAC9E,OAAO;EACL,iBAAiB,CAAC,CAAC,SAAS;EAC5B,MAAM,SAAS,QAAQ;EACvB,SAAS,SAAS,WAAW;EAC7B,sBAAsB,SAAS,SAAS,wBAAwB;EAChE,aAAa,SAAS,MAAM,eAAe;EAC3C,SAAS,SAAS,MAAM,SAAS;EACjC,UAAU,SAAS,MAAM,UAAU;CACrC;AACF;AAEA,eAAsB,eAAe,EAAE,SAAS,YAA2B;CACzE,MAAM,UAAU,MAAM,cAAc,OAAO;CAC3C,IAAI,CAAC,SAAS,MACZ,UAAMC,iCAAS,EAAE,MAAMC,+BAAW,UAAU,EAAE,UAAU,SAAS,KAAK,CAAC,EAAE,CAAC;CAE5E,IAAI,QAAQ,KAAK,QACf,UAAMD,iCAAS,EAAE,MAAME,+BAAW,eAAe,EAAE,CAAC;CAEtD,OAAO;EAAE,MAAM,iBAAiB,OAAO;EAAG;CAAQ;AACpD;AAEA,eAAsB,aAAa,MAAqB;CACtD,MAAM,SAAS,MAAM,eAAe,IAAI;CACxC,IAAI,OAAO,QAAQ,MAAM,SAAS,SAChC,UAAMF,iCAAS,EAAE,IAAI,aAAa,CAAC;CAErC,OAAO;AACT;;;;;;AAOA,eAAsB,0BAA0B,aAA0B;CACxE,MAAM,YAAY,cAAc;CAChC,YAAY,MAAM;CAClB,YAAY,aAAaG,iCAAiB,IAAI;AAChD"}

package/dist/ui/auth-guards.d.cts

@@ -0,0 +1,39 @@
+import { AuthClient, SessionData } from "./auth.cjs";
+import { QueryClient } from "@tanstack/react-query";
+//#region src/ui/auth-guards.d.ts
+interface AuthContext {
+  isAuthenticated: boolean;
+  user: SessionData["user"] | null;
+  session: SessionData["session"] | null;
+  activeOrganizationId: string | null;
+  isAnonymous: boolean;
+  isAdmin: boolean;
+  isBanned: boolean;
+}
+interface AuthGuardContext {
+  queryClient: QueryClient;
+  authClient: AuthClient;
+}
+interface AuthGuardArgs {
+  context: AuthGuardContext;
+  location: {
+    href: string;
+  };
+}
+declare function requireSession({ context, location }: AuthGuardArgs): Promise<{
+  auth: AuthContext;
+  session: any;
+}>;
+declare function requireAdmin(args: AuthGuardArgs): Promise<{
+  auth: AuthContext;
+  session: any;
+}>;
+/**
+ * Clears private and public query data on sign-out while leaving an explicit
+ * signed-out session entry — the cache must remember "signed out" so a late
+ * router-context session cannot resurrect stale authed state.
+ */
+declare function clearAuthenticatedQueries(queryClient: QueryClient): Promise<void>;
+//#endregion
+export { AuthContext, AuthGuardArgs, clearAuthenticatedQueries, requireAdmin, requireSession };
+//# sourceMappingURL=auth-guards.d.cts.map

package/dist/ui/auth-guards.d.mts

@@ -0,0 +1,39 @@
+import { AuthClient, SessionData } from "./auth.mjs";
+import { QueryClient } from "@tanstack/react-query";
+//#region src/ui/auth-guards.d.ts
+interface AuthContext {
+  isAuthenticated: boolean;
+  user: SessionData["user"] | null;
+  session: SessionData["session"] | null;
+  activeOrganizationId: string | null;
+  isAnonymous: boolean;
+  isAdmin: boolean;
+  isBanned: boolean;
+}
+interface AuthGuardContext {
+  queryClient: QueryClient;
+  authClient: AuthClient;
+}
+interface AuthGuardArgs {
+  context: AuthGuardContext;
+  location: {
+    href: string;
+  };
+}
+declare function requireSession({ context, location }: AuthGuardArgs): Promise<{
+  auth: AuthContext;
+  session: any;
+}>;
+declare function requireAdmin(args: AuthGuardArgs): Promise<{
+  auth: AuthContext;
+  session: any;
+}>;
+/**
+ * Clears private and public query data on sign-out while leaving an explicit
+ * signed-out session entry — the cache must remember "signed out" so a late
+ * router-context session cannot resurrect stale authed state.
+ */
+declare function clearAuthenticatedQueries(queryClient: QueryClient): Promise<void>;
+//#endregion
+export { AuthContext, AuthGuardArgs, clearAuthenticatedQueries, requireAdmin, requireSession };
+//# sourceMappingURL=auth-guards.d.mts.map

package/dist/ui/auth-guards.mjs

@@ -0,0 +1,48 @@
+import { pluginHref, pluginPath } from "./plugin-path.mjs";
+import { sessionQueryKey, sessionQueryOptions } from "./auth.mjs";
+import { redirect } from "@tanstack/react-router";
+
+//#region src/ui/auth-guards.ts
+async function ensureSession(context) {
+	const { queryClient, authClient } = context;
+	return queryClient.query(sessionQueryOptions(authClient));
+}
+function buildAuthContext(session) {
+	return {
+		isAuthenticated: !!session?.user,
+		user: session?.user ?? null,
+		session: session?.session ?? null,
+		activeOrganizationId: session?.session?.activeOrganizationId ?? null,
+		isAnonymous: session?.user?.isAnonymous ?? false,
+		isAdmin: session?.user?.role === "admin",
+		isBanned: session?.user?.banned ?? false
+	};
+}
+async function requireSession({ context, location }) {
+	const session = await ensureSession(context);
+	if (!session?.user) throw redirect({ href: pluginHref("/login", { redirect: location.href }) });
+	if (session.user.banned) throw redirect({ href: pluginPath("/login#banned") });
+	return {
+		auth: buildAuthContext(session),
+		session
+	};
+}
+async function requireAdmin(args) {
+	const result = await requireSession(args);
+	if (result.session.user?.role !== "admin") throw redirect({ to: "/dashboard" });
+	return result;
+}
+/**
+* Clears private and public query data on sign-out while leaving an explicit
+* signed-out session entry — the cache must remember "signed out" so a late
+* router-context session cannot resurrect stale authed state.
+*/
+async function clearAuthenticatedQueries(queryClient) {
+	await queryClient.cancelQueries();
+	queryClient.clear();
+	queryClient.setQueryData(sessionQueryKey, null);
+}
+
+//#endregion
+export { clearAuthenticatedQueries, requireAdmin, requireSession };
+//# sourceMappingURL=auth-guards.mjs.map

package/dist/ui/auth-guards.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-guards.mjs","names":[],"sources":["../../src/ui/auth-guards.ts"],"sourcesContent":["/**\n * The auth redirect policy — the single owner of the guard pair that decides\n * every session-driven redirect in the composed tree. The login route\n * (`_public/login` in the auth plugin ui) and the authenticated mounts read\n * through this module so both sides of the ping-pong loop live in one place,\n * tested as a pair.\n */\n\nimport type { QueryClient } from \"@tanstack/react-query\";\nimport { redirect } from \"@tanstack/react-router\";\nimport type { AuthClient, SessionData } from \"./auth\";\nimport { sessionQueryKey, sessionQueryOptions } from \"./auth\";\nimport { pluginHref, pluginPath } from \"./plugin-path\";\n\nexport interface AuthContext {\n  isAuthenticated: boolean;\n  user: SessionData[\"user\"] | null;\n  session: SessionData[\"session\"] | null;\n  activeOrganizationId: string | null;\n  isAnonymous: boolean;\n  isAdmin: boolean;\n  isBanned: boolean;\n}\n\ninterface AuthGuardContext {\n  queryClient: QueryClient;\n  authClient: AuthClient;\n}\n\nexport interface AuthGuardArgs {\n  context: AuthGuardContext;\n  location: { href: string };\n}\n\nasync function ensureSession(context: AuthGuardContext): Promise<SessionData | null> {\n  const { queryClient, authClient } = context;\n  return queryClient.query(sessionQueryOptions(authClient));\n}\n\nfunction buildAuthContext(session: SessionData | null | undefined): AuthContext {\n  return {\n    isAuthenticated: !!session?.user,\n    user: session?.user ?? null,\n    session: session?.session ?? null,\n    activeOrganizationId: session?.session?.activeOrganizationId ?? null,\n    isAnonymous: session?.user?.isAnonymous ?? false,\n    isAdmin: session?.user?.role === \"admin\",\n    isBanned: session?.user?.banned ?? false,\n  };\n}\n\nexport async function requireSession({ context, location }: AuthGuardArgs) {\n  const session = await ensureSession(context);\n  if (!session?.user) {\n    throw redirect({ href: pluginHref(\"/login\", { redirect: location.href }) });\n  }\n  if (session.user.banned) {\n    throw redirect({ href: pluginPath(\"/login#banned\") });\n  }\n  return { auth: buildAuthContext(session), session };\n}\n\nexport async function requireAdmin(args: AuthGuardArgs) {\n  const result = await requireSession(args);\n  if (result.session.user?.role !== \"admin\") {\n    throw redirect({ to: \"/dashboard\" });\n  }\n  return result;\n}\n\n/**\n * Clears private and public query data on sign-out while leaving an explicit\n * signed-out session entry — the cache must remember \"signed out\" so a late\n * router-context session cannot resurrect stale authed state.\n */\nexport async function clearAuthenticatedQueries(queryClient: QueryClient) {\n  await queryClient.cancelQueries();\n  queryClient.clear();\n  queryClient.setQueryData(sessionQueryKey, null);\n}\n"],"mappings":";;;;;AAkCA,eAAe,cAAc,SAAwD;CACnF,MAAM,EAAE,aAAa,eAAe;CACpC,OAAO,YAAY,MAAM,oBAAoB,UAAU,CAAC;AAC1D;AAEA,SAAS,iBAAiB,SAAsD;CAC9E,OAAO;EACL,iBAAiB,CAAC,CAAC,SAAS;EAC5B,MAAM,SAAS,QAAQ;EACvB,SAAS,SAAS,WAAW;EAC7B,sBAAsB,SAAS,SAAS,wBAAwB;EAChE,aAAa,SAAS,MAAM,eAAe;EAC3C,SAAS,SAAS,MAAM,SAAS;EACjC,UAAU,SAAS,MAAM,UAAU;CACrC;AACF;AAEA,eAAsB,eAAe,EAAE,SAAS,YAA2B;CACzE,MAAM,UAAU,MAAM,cAAc,OAAO;CAC3C,IAAI,CAAC,SAAS,MACZ,MAAM,SAAS,EAAE,MAAM,WAAW,UAAU,EAAE,UAAU,SAAS,KAAK,CAAC,EAAE,CAAC;CAE5E,IAAI,QAAQ,KAAK,QACf,MAAM,SAAS,EAAE,MAAM,WAAW,eAAe,EAAE,CAAC;CAEtD,OAAO;EAAE,MAAM,iBAAiB,OAAO;EAAG;CAAQ;AACpD;AAEA,eAAsB,aAAa,MAAqB;CACtD,MAAM,SAAS,MAAM,eAAe,IAAI;CACxC,IAAI,OAAO,QAAQ,MAAM,SAAS,SAChC,MAAM,SAAS,EAAE,IAAI,aAAa,CAAC;CAErC,OAAO;AACT;;;;;;AAOA,eAAsB,0BAA0B,aAA0B;CACxE,MAAM,YAAY,cAAc;CAChC,YAAY,MAAM;CAClB,YAAY,aAAa,iBAAiB,IAAI;AAChD"}