everything-dev 1.6.0 → 1.7.0

package/dist/fastkv.d.cts

@@ -6,6 +6,50 @@ declare function buildRegistryConfigUrlForNetwork(network: NetworkId, accountId:
 declare function getRegistryNamespaceForAccount(accountId: string): string;
 declare function getRegistryNamespaceForNetwork(network: NetworkId): string;
 declare function fetchBosConfigFromFastKv<T>(bosUrl: string): Promise<T>;
+interface PluginManifest {
+  schemaVersion: number;
+  kind: string;
+  plugin: {
+    name: string;
+    version: string;
+  };
+  runtime: {
+    remoteEntry: string;
+  };
+  contract: {
+    kind: string;
+    types: {
+      path: string;
+      exportName: string;
+      typeName: string;
+      sha256: string;
+    };
+  };
+  additionalExports?: Array<{
+    path: string;
+    exports: string[];
+    sha256: string;
+  }>;
+}
+interface PluginMetadata {
+  title: string | null;
+  description: string | null;
+  repoUrl: string | null;
+  version: string;
+  publishedAt: string;
+  cdnUrl: string;
+  integrity: string | null;
+}
+interface PluginRegistryEntry {
+  manifest: PluginManifest;
+  metadata: PluginMetadata;
+}
+declare function parsePluginBosUrl(source: string): {
+  accountId: string;
+  pluginName: string;
+} | null;
+declare function fetchPluginFromRegistry(accountId: string, pluginName: string): Promise<PluginRegistryEntry | null>;
+declare function fetchRemotePluginManifest(cdnUrl: string): Promise<PluginManifest | null>;
 //#endregion
-export { NetworkId, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork };
+export { NetworkId, PluginManifest, PluginMetadata, PluginRegistryEntry, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, parsePluginBosUrl };
 //# sourceMappingURL=fastkv.d.cts.map

package/dist/fastkv.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"fastkv.d.cts","names":[],"sources":["../src/fastkv.ts"],"mappings":";KAAY,SAAA;AAAA,iBAgBI,0BAAA,CAA2B,OAAA,EAAS,SAAA;AAAA,iBAYpC,sBAAA,CAAuB,SAAA,UAAmB,SAAA;AAAA,iBAO1C,gCAAA,CACd,OAAA,EAAS,SAAA,EACT,SAAA,UACA,SAAA;AAAA,iBAQc,8BAAA,CAA+B,SAAA;AAAA,iBAM/B,8BAAA,CAA+B,OAAA,EAAS,SAAA;AAAA,iBAgDlC,wBAAA,GAAA,CAA4B,MAAA,WAAiB,OAAA,CAAQ,CAAA"}
+{"version":3,"file":"fastkv.d.cts","names":[],"sources":["../src/fastkv.ts"],"mappings":";KAAY,SAAA;AAAA,iBAgBI,0BAAA,CAA2B,OAAA,EAAS,SAAA;AAAA,iBAYpC,sBAAA,CAAuB,SAAA,UAAmB,SAAA;AAAA,iBAO1C,gCAAA,CACd,OAAA,EAAS,SAAA,EACT,SAAA,UACA,SAAA;AAAA,iBAQc,8BAAA,CAA+B,SAAA;AAAA,iBAM/B,8BAAA,CAA+B,OAAA,EAAS,SAAA;AAAA,iBAgDlC,wBAAA,GAAA,CAA4B,MAAA,WAAiB,OAAA,CAAQ,CAAA;AAAA,UA6B1D,cAAA;EACf,aAAA;EACA,IAAA;EACA,MAAA;IAAU,IAAA;IAAc,OAAA;EAAA;EACxB,OAAA;IAAW,WAAA;EAAA;EACX,QAAA;IACE,IAAA;IACA,KAAA;MAAS,IAAA;MAAc,UAAA;MAAoB,QAAA;MAAkB,MAAA;IAAA;EAAA;EAE/D,iBAAA,GAAoB,KAAA;IAAQ,IAAA;IAAc,OAAA;IAAmB,MAAA;EAAA;AAAA;AAAA,UAG9C,cAAA;EACf,KAAA;EACA,WAAA;EACA,OAAA;EACA,OAAA;EACA,WAAA;EACA,MAAA;EACA,SAAA;AAAA;AAAA,UAGe,mBAAA;EACf,QAAA,EAAU,cAAA;EACV,QAAA,EAAU,cAAA;AAAA;AAAA,iBAGI,iBAAA,CACd,MAAA;EACG,SAAA;EAAmB,UAAA;AAAA;AAAA,iBA2BF,uBAAA,CACpB,SAAA,UACA,UAAA,WACC,OAAA,CAAQ,mBAAA;AAAA,iBAyBW,yBAAA,CAA0B,MAAA,WAAiB,OAAA,CAAQ,cAAA"}

package/dist/fastkv.d.mts

@@ -6,6 +6,50 @@ declare function buildRegistryConfigUrlForNetwork(network: NetworkId, accountId:
 declare function getRegistryNamespaceForAccount(accountId: string): string;
 declare function getRegistryNamespaceForNetwork(network: NetworkId): string;
 declare function fetchBosConfigFromFastKv<T>(bosUrl: string): Promise<T>;
+interface PluginManifest {
+  schemaVersion: number;
+  kind: string;
+  plugin: {
+    name: string;
+    version: string;
+  };
+  runtime: {
+    remoteEntry: string;
+  };
+  contract: {
+    kind: string;
+    types: {
+      path: string;
+      exportName: string;
+      typeName: string;
+      sha256: string;
+    };
+  };
+  additionalExports?: Array<{
+    path: string;
+    exports: string[];
+    sha256: string;
+  }>;
+}
+interface PluginMetadata {
+  title: string | null;
+  description: string | null;
+  repoUrl: string | null;
+  version: string;
+  publishedAt: string;
+  cdnUrl: string;
+  integrity: string | null;
+}
+interface PluginRegistryEntry {
+  manifest: PluginManifest;
+  metadata: PluginMetadata;
+}
+declare function parsePluginBosUrl(source: string): {
+  accountId: string;
+  pluginName: string;
+} | null;
+declare function fetchPluginFromRegistry(accountId: string, pluginName: string): Promise<PluginRegistryEntry | null>;
+declare function fetchRemotePluginManifest(cdnUrl: string): Promise<PluginManifest | null>;
 //#endregion
-export { NetworkId, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork };
+export { NetworkId, PluginManifest, PluginMetadata, PluginRegistryEntry, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, parsePluginBosUrl };
 //# sourceMappingURL=fastkv.d.mts.map

package/dist/fastkv.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"fastkv.d.mts","names":[],"sources":["../src/fastkv.ts"],"mappings":";KAAY,SAAA;AAAA,iBAgBI,0BAAA,CAA2B,OAAA,EAAS,SAAA;AAAA,iBAYpC,sBAAA,CAAuB,SAAA,UAAmB,SAAA;AAAA,iBAO1C,gCAAA,CACd,OAAA,EAAS,SAAA,EACT,SAAA,UACA,SAAA;AAAA,iBAQc,8BAAA,CAA+B,SAAA;AAAA,iBAM/B,8BAAA,CAA+B,OAAA,EAAS,SAAA;AAAA,iBAgDlC,wBAAA,GAAA,CAA4B,MAAA,WAAiB,OAAA,CAAQ,CAAA"}
+{"version":3,"file":"fastkv.d.mts","names":[],"sources":["../src/fastkv.ts"],"mappings":";KAAY,SAAA;AAAA,iBAgBI,0BAAA,CAA2B,OAAA,EAAS,SAAA;AAAA,iBAYpC,sBAAA,CAAuB,SAAA,UAAmB,SAAA;AAAA,iBAO1C,gCAAA,CACd,OAAA,EAAS,SAAA,EACT,SAAA,UACA,SAAA;AAAA,iBAQc,8BAAA,CAA+B,SAAA;AAAA,iBAM/B,8BAAA,CAA+B,OAAA,EAAS,SAAA;AAAA,iBAgDlC,wBAAA,GAAA,CAA4B,MAAA,WAAiB,OAAA,CAAQ,CAAA;AAAA,UA6B1D,cAAA;EACf,aAAA;EACA,IAAA;EACA,MAAA;IAAU,IAAA;IAAc,OAAA;EAAA;EACxB,OAAA;IAAW,WAAA;EAAA;EACX,QAAA;IACE,IAAA;IACA,KAAA;MAAS,IAAA;MAAc,UAAA;MAAoB,QAAA;MAAkB,MAAA;IAAA;EAAA;EAE/D,iBAAA,GAAoB,KAAA;IAAQ,IAAA;IAAc,OAAA;IAAmB,MAAA;EAAA;AAAA;AAAA,UAG9C,cAAA;EACf,KAAA;EACA,WAAA;EACA,OAAA;EACA,OAAA;EACA,WAAA;EACA,MAAA;EACA,SAAA;AAAA;AAAA,UAGe,mBAAA;EACf,QAAA,EAAU,cAAA;EACV,QAAA,EAAU,cAAA;AAAA;AAAA,iBAGI,iBAAA,CACd,MAAA;EACG,SAAA;EAAmB,UAAA;AAAA;AAAA,iBA2BF,uBAAA,CACpB,SAAA,UACA,UAAA,WACC,OAAA,CAAQ,mBAAA;AAAA,iBAyBW,yBAAA,CAA0B,MAAA,WAAiB,OAAA,CAAQ,cAAA"}

package/dist/fastkv.mjs

@@ -57,6 +57,59 @@ async function fetchBosConfigFromFastKv(bosUrl) {
 	if (typeof value !== "object") throw new Error(`Invalid config value for ${bosUrl}`);
 	return value;
 }
+function parsePluginBosUrl(source) {
+	if (!source.startsWith("bos://")) return null;
+	const match = source.match(/^bos:\/\/([^/]+)\/plugins\/([^/]+)$/);
+	if (!match?.[1] || !match[2]) return null;
+	return {
+		accountId: match[1],
+		pluginName: match[2]
+	};
+}
+async function fetchKvValue(accountId, key) {
+	const value = (await fetchJson(`${getFastKvBaseUrlForAccount(accountId)}/v0/latest/${encodeURIComponent(getRegistryNamespaceForAccount(accountId))}/${encodeURIComponent(accountId)}`, {
+		method: "POST",
+		body: JSON.stringify({
+			key,
+			limit: 1
+		})
+	}))?.entries?.find(Boolean)?.value;
+	if (value == null) return null;
+	if (typeof value === "string") try {
+		return JSON.parse(value);
+	} catch {
+		return null;
+	}
+	return value;
+}
+async function fetchPluginFromRegistry(accountId, pluginName) {
+	const manifestKey = `plugins/${accountId}/${pluginName}/manifest.json`;
+	const metadataKey = `plugins/${accountId}/${pluginName}/metadata`;
+	const [rawManifest, rawMetadata] = await Promise.all([fetchKvValue(accountId, manifestKey), fetchKvValue(accountId, metadataKey)]);
+	if (!rawManifest || typeof rawManifest !== "object") return null;
+	return {
+		manifest: rawManifest,
+		metadata: rawMetadata ?? {
+			title: null,
+			description: null,
+			repoUrl: null,
+			version: "",
+			publishedAt: "",
+			cdnUrl: "",
+			integrity: null
+		}
+	};
+}
+async function fetchRemotePluginManifest(cdnUrl) {
+	try {
+		const baseUrl = cdnUrl.replace(/\/$/, "");
+		const response = await fetch(`${baseUrl}/plugin.manifest.json`);
+		if (!response.ok) return null;
+		return await response.json();
+	} catch {
+		return null;
+	}
+}
 async function fetchJson(url, init) {
 	const controller = new AbortController();
 	const timeout = setTimeout(() => controller.abort(), FASTKV_TIMEOUT_MS);
@@ -78,5 +131,5 @@ async function fetchJson(url, init) {
 }
 
 //#endregion
-export { buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork };
+export { buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, parsePluginBosUrl };
 //# sourceMappingURL=fastkv.mjs.map

package/dist/fastkv.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"fastkv.mjs","names":[],"sources":["../src/fastkv.ts"],"sourcesContent":["export type NetworkId = \"mainnet\" | \"testnet\";\n\ninterface FastKvEntry {\n  value: unknown;\n}\n\ninterface FastKvListResponse {\n  entries?: Array<FastKvEntry | null>;\n}\n\nconst FASTKV_TIMEOUT_MS = 10_000;\n\nfunction getNetworkIdForAccount(accountId: string): NetworkId {\n  return accountId.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\";\n}\n\nexport function getFastKvBaseUrlForNetwork(network: NetworkId): string {\n  return network === \"testnet\"\n    ? process.env.REGISTRY_FASTKV_TESTNET_URL || \"https://kv.test.fastnear.com\"\n    : process.env.REGISTRY_FASTKV_MAINNET_URL || \"https://kv.main.fastnear.com\";\n}\n\nfunction getFastKvBaseUrlForAccount(accountId: string): string {\n  return getNetworkIdForAccount(accountId) === \"testnet\"\n    ? getFastKvBaseUrlForNetwork(\"testnet\")\n    : getFastKvBaseUrlForNetwork(\"mainnet\");\n}\n\nexport function buildRegistryConfigUrl(accountId: string, gatewayId: string): string {\n  const baseUrl = getFastKvBaseUrlForAccount(accountId);\n  const namespace = getRegistryNamespaceForAccount(accountId);\n  const key = encodeURIComponent(getRegistryConfigKey(accountId, gatewayId));\n  return `${baseUrl}/v0/latest/${encodeURIComponent(namespace)}/${encodeURIComponent(accountId)}/${key}`;\n}\n\nexport function buildRegistryConfigUrlForNetwork(\n  network: NetworkId,\n  accountId: string,\n  gatewayId: string,\n): string {\n  const baseUrl = getFastKvBaseUrlForNetwork(network);\n  const namespace = getRegistryNamespaceForNetwork(network);\n  const key = encodeURIComponent(getRegistryConfigKey(accountId, gatewayId));\n  return `${baseUrl}/v0/latest/${encodeURIComponent(namespace)}/${encodeURIComponent(accountId)}/${key}`;\n}\n\nexport function getRegistryNamespaceForAccount(accountId: string): string {\n  return accountId.endsWith(\".testnet\")\n    ? process.env.REGISTRY_FASTKV_TESTNET_NAMESPACE || \"dev.everything.near\"\n    : process.env.REGISTRY_FASTKV_MAINNET_NAMESPACE || accountId;\n}\n\nexport function getRegistryNamespaceForNetwork(network: NetworkId): string {\n  return network === \"testnet\"\n    ? process.env.REGISTRY_FASTKV_TESTNET_NAMESPACE || \"dev.everything.near\"\n    : process.env.REGISTRY_FASTKV_MAINNET_NAMESPACE || \"dev.everything.near\";\n}\n\nfunction getRegistryConfigKey(\n  accountId: string,\n  gatewayId: string,\n  pathSegments: string[] = [],\n): string {\n  const suffix =\n    pathSegments.length > 0\n      ? `/${pathSegments.map((segment) => encodeURIComponent(segment)).join(\"/\")}`\n      : \"\";\n  return `apps/${accountId}/${gatewayId}${suffix}/bos.config.json`;\n}\n\nfunction parseBosUrl(bosUrl: string): {\n  accountId: string;\n  gatewayId: string;\n  pathSegments: string[];\n} {\n  const match = bosUrl.match(/^bos:\\/\\/([^/]+)\\/(.+)$/);\n  if (!match?.[1] || !match[2]) {\n    throw new Error(`Invalid BOS URL: ${bosUrl}`);\n  }\n\n  const pathSegments = match[2]\n    .split(\"/\")\n    .filter(Boolean)\n    .map((segment) => decodeURIComponent(segment));\n  if (pathSegments.length === 0) {\n    throw new Error(`Invalid BOS URL: ${bosUrl}`);\n  }\n\n  const [gatewayId, ...pathSegmentsTail] = pathSegments;\n  if (!gatewayId) {\n    throw new Error(`Invalid BOS URL: ${bosUrl}`);\n  }\n\n  return {\n    accountId: match[1],\n    gatewayId,\n    pathSegments: pathSegmentsTail,\n  };\n}\n\nexport async function fetchBosConfigFromFastKv<T>(bosUrl: string): Promise<T> {\n  const { accountId, gatewayId, pathSegments } = parseBosUrl(bosUrl);\n  const payload = await fetchJson<FastKvListResponse>(\n    `${getFastKvBaseUrlForAccount(accountId)}/v0/latest/${encodeURIComponent(getRegistryNamespaceForAccount(accountId))}/${encodeURIComponent(accountId)}`,\n    {\n      method: \"POST\",\n      body: JSON.stringify({\n        key: getRegistryConfigKey(accountId, gatewayId, pathSegments),\n        limit: 1,\n      }),\n    },\n  );\n  const value = payload?.entries?.find(Boolean)?.value;\n\n  if (!value) {\n    throw new Error(`No config found for ${bosUrl}`);\n  }\n\n  if (typeof value === \"string\") {\n    return JSON.parse(value) as T;\n  }\n\n  if (typeof value !== \"object\") {\n    throw new Error(`Invalid config value for ${bosUrl}`);\n  }\n\n  return value as T;\n}\n\nasync function fetchJson<T>(url: string, init?: RequestInit): Promise<T | null> {\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), FASTKV_TIMEOUT_MS);\n\n  try {\n    const response = await fetch(url, {\n      ...init,\n      headers: {\n        accept: \"application/json\",\n        \"content-type\": \"application/json\",\n        ...(init?.headers ?? {}),\n      },\n      signal: controller.signal,\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    return (await response.json()) as T;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n"],"mappings":";AAUA,MAAM,oBAAoB;AAE1B,SAAS,uBAAuB,WAA8B;AAC5D,QAAO,UAAU,SAAS,WAAW,GAAG,YAAY;;AAGtD,SAAgB,2BAA2B,SAA4B;AACrE,QAAO,YAAY,YACf,QAAQ,IAAI,+BAA+B,iCAC3C,QAAQ,IAAI,+BAA+B;;AAGjD,SAAS,2BAA2B,WAA2B;AAC7D,QAAO,uBAAuB,UAAU,KAAK,YACzC,2BAA2B,UAAU,GACrC,2BAA2B,UAAU;;AAG3C,SAAgB,uBAAuB,WAAmB,WAA2B;CACnF,MAAM,UAAU,2BAA2B,UAAU;CACrD,MAAM,YAAY,+BAA+B,UAAU;CAC3D,MAAM,MAAM,mBAAmB,qBAAqB,WAAW,UAAU,CAAC;AAC1E,QAAO,GAAG,QAAQ,aAAa,mBAAmB,UAAU,CAAC,GAAG,mBAAmB,UAAU,CAAC,GAAG;;AAGnG,SAAgB,iCACd,SACA,WACA,WACQ;CACR,MAAM,UAAU,2BAA2B,QAAQ;CACnD,MAAM,YAAY,+BAA+B,QAAQ;CACzD,MAAM,MAAM,mBAAmB,qBAAqB,WAAW,UAAU,CAAC;AAC1E,QAAO,GAAG,QAAQ,aAAa,mBAAmB,UAAU,CAAC,GAAG,mBAAmB,UAAU,CAAC,GAAG;;AAGnG,SAAgB,+BAA+B,WAA2B;AACxE,QAAO,UAAU,SAAS,WAAW,GACjC,QAAQ,IAAI,qCAAqC,wBACjD,QAAQ,IAAI,qCAAqC;;AAGvD,SAAgB,+BAA+B,SAA4B;AACzE,QAAO,YAAY,YACf,QAAQ,IAAI,qCAAqC,wBACjD,QAAQ,IAAI,qCAAqC;;AAGvD,SAAS,qBACP,WACA,WACA,eAAyB,EAAE,EACnB;AAKR,QAAO,QAAQ,UAAU,GAAG,YAH1B,aAAa,SAAS,IAClB,IAAI,aAAa,KAAK,YAAY,mBAAmB,QAAQ,CAAC,CAAC,KAAK,IAAI,KACxE,GACyC;;AAGjD,SAAS,YAAY,QAInB;CACA,MAAM,QAAQ,OAAO,MAAM,0BAA0B;AACrD,KAAI,CAAC,QAAQ,MAAM,CAAC,MAAM,GACxB,OAAM,IAAI,MAAM,oBAAoB,SAAS;CAG/C,MAAM,eAAe,MAAM,GACxB,MAAM,IAAI,CACV,OAAO,QAAQ,CACf,KAAK,YAAY,mBAAmB,QAAQ,CAAC;AAChD,KAAI,aAAa,WAAW,EAC1B,OAAM,IAAI,MAAM,oBAAoB,SAAS;CAG/C,MAAM,CAAC,WAAW,GAAG,oBAAoB;AACzC,KAAI,CAAC,UACH,OAAM,IAAI,MAAM,oBAAoB,SAAS;AAG/C,QAAO;EACL,WAAW,MAAM;EACjB;EACA,cAAc;EACf;;AAGH,eAAsB,yBAA4B,QAA4B;CAC5E,MAAM,EAAE,WAAW,WAAW,iBAAiB,YAAY,OAAO;CAWlE,MAAM,SAVU,MAAM,UACpB,GAAG,2BAA2B,UAAU,CAAC,aAAa,mBAAmB,+BAA+B,UAAU,CAAC,CAAC,GAAG,mBAAmB,UAAU,IACpJ;EACE,QAAQ;EACR,MAAM,KAAK,UAAU;GACnB,KAAK,qBAAqB,WAAW,WAAW,aAAa;GAC7D,OAAO;GACR,CAAC;EACH,CACF,GACsB,SAAS,KAAK,QAAQ,EAAE;AAE/C,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,uBAAuB,SAAS;AAGlD,KAAI,OAAO,UAAU,SACnB,QAAO,KAAK,MAAM,MAAM;AAG1B,KAAI,OAAO,UAAU,SACnB,OAAM,IAAI,MAAM,4BAA4B,SAAS;AAGvD,QAAO;;AAGT,eAAe,UAAa,KAAa,MAAuC;CAC9E,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,UAAU,iBAAiB,WAAW,OAAO,EAAE,kBAAkB;AAEvE,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,KAAK;GAChC,GAAG;GACH,SAAS;IACP,QAAQ;IACR,gBAAgB;IAChB,GAAI,MAAM,WAAW,EAAE;IACxB;GACD,QAAQ,WAAW;GACpB,CAAC;AAEF,MAAI,CAAC,SAAS,GACZ,QAAO;AAGT,SAAQ,MAAM,SAAS,MAAM;WACrB;AACR,eAAa,QAAQ"}
+{"version":3,"file":"fastkv.mjs","names":[],"sources":["../src/fastkv.ts"],"sourcesContent":["export type NetworkId = \"mainnet\" | \"testnet\";\n\ninterface FastKvEntry {\n  value: unknown;\n}\n\ninterface FastKvListResponse {\n  entries?: Array<FastKvEntry | null>;\n}\n\nconst FASTKV_TIMEOUT_MS = 10_000;\n\nfunction getNetworkIdForAccount(accountId: string): NetworkId {\n  return accountId.endsWith(\".testnet\") ? \"testnet\" : \"mainnet\";\n}\n\nexport function getFastKvBaseUrlForNetwork(network: NetworkId): string {\n  return network === \"testnet\"\n    ? process.env.REGISTRY_FASTKV_TESTNET_URL || \"https://kv.test.fastnear.com\"\n    : process.env.REGISTRY_FASTKV_MAINNET_URL || \"https://kv.main.fastnear.com\";\n}\n\nfunction getFastKvBaseUrlForAccount(accountId: string): string {\n  return getNetworkIdForAccount(accountId) === \"testnet\"\n    ? getFastKvBaseUrlForNetwork(\"testnet\")\n    : getFastKvBaseUrlForNetwork(\"mainnet\");\n}\n\nexport function buildRegistryConfigUrl(accountId: string, gatewayId: string): string {\n  const baseUrl = getFastKvBaseUrlForAccount(accountId);\n  const namespace = getRegistryNamespaceForAccount(accountId);\n  const key = encodeURIComponent(getRegistryConfigKey(accountId, gatewayId));\n  return `${baseUrl}/v0/latest/${encodeURIComponent(namespace)}/${encodeURIComponent(accountId)}/${key}`;\n}\n\nexport function buildRegistryConfigUrlForNetwork(\n  network: NetworkId,\n  accountId: string,\n  gatewayId: string,\n): string {\n  const baseUrl = getFastKvBaseUrlForNetwork(network);\n  const namespace = getRegistryNamespaceForNetwork(network);\n  const key = encodeURIComponent(getRegistryConfigKey(accountId, gatewayId));\n  return `${baseUrl}/v0/latest/${encodeURIComponent(namespace)}/${encodeURIComponent(accountId)}/${key}`;\n}\n\nexport function getRegistryNamespaceForAccount(accountId: string): string {\n  return accountId.endsWith(\".testnet\")\n    ? process.env.REGISTRY_FASTKV_TESTNET_NAMESPACE || \"dev.everything.near\"\n    : process.env.REGISTRY_FASTKV_MAINNET_NAMESPACE || accountId;\n}\n\nexport function getRegistryNamespaceForNetwork(network: NetworkId): string {\n  return network === \"testnet\"\n    ? process.env.REGISTRY_FASTKV_TESTNET_NAMESPACE || \"dev.everything.near\"\n    : process.env.REGISTRY_FASTKV_MAINNET_NAMESPACE || \"dev.everything.near\";\n}\n\nfunction getRegistryConfigKey(\n  accountId: string,\n  gatewayId: string,\n  pathSegments: string[] = [],\n): string {\n  const suffix =\n    pathSegments.length > 0\n      ? `/${pathSegments.map((segment) => encodeURIComponent(segment)).join(\"/\")}`\n      : \"\";\n  return `apps/${accountId}/${gatewayId}${suffix}/bos.config.json`;\n}\n\nfunction parseBosUrl(bosUrl: string): {\n  accountId: string;\n  gatewayId: string;\n  pathSegments: string[];\n} {\n  const match = bosUrl.match(/^bos:\\/\\/([^/]+)\\/(.+)$/);\n  if (!match?.[1] || !match[2]) {\n    throw new Error(`Invalid BOS URL: ${bosUrl}`);\n  }\n\n  const pathSegments = match[2]\n    .split(\"/\")\n    .filter(Boolean)\n    .map((segment) => decodeURIComponent(segment));\n  if (pathSegments.length === 0) {\n    throw new Error(`Invalid BOS URL: ${bosUrl}`);\n  }\n\n  const [gatewayId, ...pathSegmentsTail] = pathSegments;\n  if (!gatewayId) {\n    throw new Error(`Invalid BOS URL: ${bosUrl}`);\n  }\n\n  return {\n    accountId: match[1],\n    gatewayId,\n    pathSegments: pathSegmentsTail,\n  };\n}\n\nexport async function fetchBosConfigFromFastKv<T>(bosUrl: string): Promise<T> {\n  const { accountId, gatewayId, pathSegments } = parseBosUrl(bosUrl);\n  const payload = await fetchJson<FastKvListResponse>(\n    `${getFastKvBaseUrlForAccount(accountId)}/v0/latest/${encodeURIComponent(getRegistryNamespaceForAccount(accountId))}/${encodeURIComponent(accountId)}`,\n    {\n      method: \"POST\",\n      body: JSON.stringify({\n        key: getRegistryConfigKey(accountId, gatewayId, pathSegments),\n        limit: 1,\n      }),\n    },\n  );\n  const value = payload?.entries?.find(Boolean)?.value;\n\n  if (!value) {\n    throw new Error(`No config found for ${bosUrl}`);\n  }\n\n  if (typeof value === \"string\") {\n    return JSON.parse(value) as T;\n  }\n\n  if (typeof value !== \"object\") {\n    throw new Error(`Invalid config value for ${bosUrl}`);\n  }\n\n  return value as T;\n}\n\nexport interface PluginManifest {\n  schemaVersion: number;\n  kind: string;\n  plugin: { name: string; version: string };\n  runtime: { remoteEntry: string };\n  contract: {\n    kind: string;\n    types: { path: string; exportName: string; typeName: string; sha256: string };\n  };\n  additionalExports?: Array<{ path: string; exports: string[]; sha256: string }>;\n}\n\nexport interface PluginMetadata {\n  title: string | null;\n  description: string | null;\n  repoUrl: string | null;\n  version: string;\n  publishedAt: string;\n  cdnUrl: string;\n  integrity: string | null;\n}\n\nexport interface PluginRegistryEntry {\n  manifest: PluginManifest;\n  metadata: PluginMetadata;\n}\n\nexport function parsePluginBosUrl(\n  source: string,\n): { accountId: string; pluginName: string } | null {\n  if (!source.startsWith(\"bos://\")) return null;\n  const match = source.match(/^bos:\\/\\/([^/]+)\\/plugins\\/([^/]+)$/);\n  if (!match?.[1] || !match[2]) return null;\n  return { accountId: match[1], pluginName: match[2] };\n}\n\nasync function fetchKvValue(accountId: string, key: string): Promise<unknown | null> {\n  const payload = await fetchJson<FastKvListResponse>(\n    `${getFastKvBaseUrlForAccount(accountId)}/v0/latest/${encodeURIComponent(getRegistryNamespaceForAccount(accountId))}/${encodeURIComponent(accountId)}`,\n    {\n      method: \"POST\",\n      body: JSON.stringify({ key, limit: 1 }),\n    },\n  );\n  const value = payload?.entries?.find(Boolean)?.value;\n  if (value == null) return null;\n  if (typeof value === \"string\") {\n    try {\n      return JSON.parse(value);\n    } catch {\n      return null;\n    }\n  }\n  return value;\n}\n\nexport async function fetchPluginFromRegistry(\n  accountId: string,\n  pluginName: string,\n): Promise<PluginRegistryEntry | null> {\n  const manifestKey = `plugins/${accountId}/${pluginName}/manifest.json`;\n  const metadataKey = `plugins/${accountId}/${pluginName}/metadata`;\n\n  const [rawManifest, rawMetadata] = await Promise.all([\n    fetchKvValue(accountId, manifestKey),\n    fetchKvValue(accountId, metadataKey),\n  ]);\n\n  if (!rawManifest || typeof rawManifest !== \"object\") return null;\n\n  return {\n    manifest: rawManifest as PluginManifest,\n    metadata: (rawMetadata ?? {\n      title: null,\n      description: null,\n      repoUrl: null,\n      version: \"\",\n      publishedAt: \"\",\n      cdnUrl: \"\",\n      integrity: null,\n    }) as PluginMetadata,\n  };\n}\n\nexport async function fetchRemotePluginManifest(cdnUrl: string): Promise<PluginManifest | null> {\n  try {\n    const baseUrl = cdnUrl.replace(/\\/$/, \"\");\n    const response = await fetch(`${baseUrl}/plugin.manifest.json`);\n    if (!response.ok) return null;\n    return (await response.json()) as PluginManifest;\n  } catch {\n    return null;\n  }\n}\n\nasync function fetchJson<T>(url: string, init?: RequestInit): Promise<T | null> {\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), FASTKV_TIMEOUT_MS);\n\n  try {\n    const response = await fetch(url, {\n      ...init,\n      headers: {\n        accept: \"application/json\",\n        \"content-type\": \"application/json\",\n        ...(init?.headers ?? {}),\n      },\n      signal: controller.signal,\n    });\n\n    if (!response.ok) {\n      return null;\n    }\n\n    return (await response.json()) as T;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n"],"mappings":";AAUA,MAAM,oBAAoB;AAE1B,SAAS,uBAAuB,WAA8B;AAC5D,QAAO,UAAU,SAAS,WAAW,GAAG,YAAY;;AAGtD,SAAgB,2BAA2B,SAA4B;AACrE,QAAO,YAAY,YACf,QAAQ,IAAI,+BAA+B,iCAC3C,QAAQ,IAAI,+BAA+B;;AAGjD,SAAS,2BAA2B,WAA2B;AAC7D,QAAO,uBAAuB,UAAU,KAAK,YACzC,2BAA2B,UAAU,GACrC,2BAA2B,UAAU;;AAG3C,SAAgB,uBAAuB,WAAmB,WAA2B;CACnF,MAAM,UAAU,2BAA2B,UAAU;CACrD,MAAM,YAAY,+BAA+B,UAAU;CAC3D,MAAM,MAAM,mBAAmB,qBAAqB,WAAW,UAAU,CAAC;AAC1E,QAAO,GAAG,QAAQ,aAAa,mBAAmB,UAAU,CAAC,GAAG,mBAAmB,UAAU,CAAC,GAAG;;AAGnG,SAAgB,iCACd,SACA,WACA,WACQ;CACR,MAAM,UAAU,2BAA2B,QAAQ;CACnD,MAAM,YAAY,+BAA+B,QAAQ;CACzD,MAAM,MAAM,mBAAmB,qBAAqB,WAAW,UAAU,CAAC;AAC1E,QAAO,GAAG,QAAQ,aAAa,mBAAmB,UAAU,CAAC,GAAG,mBAAmB,UAAU,CAAC,GAAG;;AAGnG,SAAgB,+BAA+B,WAA2B;AACxE,QAAO,UAAU,SAAS,WAAW,GACjC,QAAQ,IAAI,qCAAqC,wBACjD,QAAQ,IAAI,qCAAqC;;AAGvD,SAAgB,+BAA+B,SAA4B;AACzE,QAAO,YAAY,YACf,QAAQ,IAAI,qCAAqC,wBACjD,QAAQ,IAAI,qCAAqC;;AAGvD,SAAS,qBACP,WACA,WACA,eAAyB,EAAE,EACnB;AAKR,QAAO,QAAQ,UAAU,GAAG,YAH1B,aAAa,SAAS,IAClB,IAAI,aAAa,KAAK,YAAY,mBAAmB,QAAQ,CAAC,CAAC,KAAK,IAAI,KACxE,GACyC;;AAGjD,SAAS,YAAY,QAInB;CACA,MAAM,QAAQ,OAAO,MAAM,0BAA0B;AACrD,KAAI,CAAC,QAAQ,MAAM,CAAC,MAAM,GACxB,OAAM,IAAI,MAAM,oBAAoB,SAAS;CAG/C,MAAM,eAAe,MAAM,GACxB,MAAM,IAAI,CACV,OAAO,QAAQ,CACf,KAAK,YAAY,mBAAmB,QAAQ,CAAC;AAChD,KAAI,aAAa,WAAW,EAC1B,OAAM,IAAI,MAAM,oBAAoB,SAAS;CAG/C,MAAM,CAAC,WAAW,GAAG,oBAAoB;AACzC,KAAI,CAAC,UACH,OAAM,IAAI,MAAM,oBAAoB,SAAS;AAG/C,QAAO;EACL,WAAW,MAAM;EACjB;EACA,cAAc;EACf;;AAGH,eAAsB,yBAA4B,QAA4B;CAC5E,MAAM,EAAE,WAAW,WAAW,iBAAiB,YAAY,OAAO;CAWlE,MAAM,SAVU,MAAM,UACpB,GAAG,2BAA2B,UAAU,CAAC,aAAa,mBAAmB,+BAA+B,UAAU,CAAC,CAAC,GAAG,mBAAmB,UAAU,IACpJ;EACE,QAAQ;EACR,MAAM,KAAK,UAAU;GACnB,KAAK,qBAAqB,WAAW,WAAW,aAAa;GAC7D,OAAO;GACR,CAAC;EACH,CACF,GACsB,SAAS,KAAK,QAAQ,EAAE;AAE/C,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,uBAAuB,SAAS;AAGlD,KAAI,OAAO,UAAU,SACnB,QAAO,KAAK,MAAM,MAAM;AAG1B,KAAI,OAAO,UAAU,SACnB,OAAM,IAAI,MAAM,4BAA4B,SAAS;AAGvD,QAAO;;AA8BT,SAAgB,kBACd,QACkD;AAClD,KAAI,CAAC,OAAO,WAAW,SAAS,CAAE,QAAO;CACzC,MAAM,QAAQ,OAAO,MAAM,sCAAsC;AACjE,KAAI,CAAC,QAAQ,MAAM,CAAC,MAAM,GAAI,QAAO;AACrC,QAAO;EAAE,WAAW,MAAM;EAAI,YAAY,MAAM;EAAI;;AAGtD,eAAe,aAAa,WAAmB,KAAsC;CAQnF,MAAM,SAPU,MAAM,UACpB,GAAG,2BAA2B,UAAU,CAAC,aAAa,mBAAmB,+BAA+B,UAAU,CAAC,CAAC,GAAG,mBAAmB,UAAU,IACpJ;EACE,QAAQ;EACR,MAAM,KAAK,UAAU;GAAE;GAAK,OAAO;GAAG,CAAC;EACxC,CACF,GACsB,SAAS,KAAK,QAAQ,EAAE;AAC/C,KAAI,SAAS,KAAM,QAAO;AAC1B,KAAI,OAAO,UAAU,SACnB,KAAI;AACF,SAAO,KAAK,MAAM,MAAM;SAClB;AACN,SAAO;;AAGX,QAAO;;AAGT,eAAsB,wBACpB,WACA,YACqC;CACrC,MAAM,cAAc,WAAW,UAAU,GAAG,WAAW;CACvD,MAAM,cAAc,WAAW,UAAU,GAAG,WAAW;CAEvD,MAAM,CAAC,aAAa,eAAe,MAAM,QAAQ,IAAI,CACnD,aAAa,WAAW,YAAY,EACpC,aAAa,WAAW,YAAY,CACrC,CAAC;AAEF,KAAI,CAAC,eAAe,OAAO,gBAAgB,SAAU,QAAO;AAE5D,QAAO;EACL,UAAU;EACV,UAAW,eAAe;GACxB,OAAO;GACP,aAAa;GACb,SAAS;GACT,SAAS;GACT,aAAa;GACb,QAAQ;GACR,WAAW;GACZ;EACF;;AAGH,eAAsB,0BAA0B,QAAgD;AAC9F,KAAI;EACF,MAAM,UAAU,OAAO,QAAQ,OAAO,GAAG;EACzC,MAAM,WAAW,MAAM,MAAM,GAAG,QAAQ,uBAAuB;AAC/D,MAAI,CAAC,SAAS,GAAI,QAAO;AACzB,SAAQ,MAAM,SAAS,MAAM;SACvB;AACN,SAAO;;;AAIX,eAAe,UAAa,KAAa,MAAuC;CAC9E,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,UAAU,iBAAiB,WAAW,OAAO,EAAE,kBAAkB;AAEvE,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,KAAK;GAChC,GAAG;GACH,SAAS;IACP,QAAQ;IACR,gBAAgB;IAChB,GAAI,MAAM,WAAW,EAAE;IACxB;GACD,QAAQ,WAAW;GACpB,CAAC;AAEF,MAAI,CAAC,SAAS,GACZ,QAAO;AAGT,SAAQ,MAAM,SAAS,MAAM;WACrB;AACR,eAAa,QAAQ"}

package/dist/host.cjs

@@ -167,7 +167,7 @@ async function runHostServer(opts) {
 		origin: corsOrigins,
 		credentials: true
 	}));
-	app.use("*", (0, hono_secure_headers.secureHeaders)());
+	app.use("*", (0, hono_secure_headers.secureHeaders)({ crossOriginOpenerPolicy: "same-origin-allow-popups" }));
 	app.get("/health", (c) => c.text("OK"));
 	app.get("/ready", async (c) => {
 		const probe = async (url, timeoutMs = 400) => {

package/dist/host.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"host.cjs","names":["createStitchedRouter","RPCHandler","BatchHandlerPlugin","OpenAPIHandler","OpenAPIReferencePlugin","ZodToJsonSchemaConverter","loadApiPluginsFromRuntimeConfig","loadRouterModule","Hono"],"sources":["../src/host.ts"],"sourcesContent":["import { serve } from \"@hono/node-server\";\nimport { OpenAPIHandler } from \"@orpc/openapi/fetch\";\nimport { OpenAPIReferencePlugin } from \"@orpc/openapi/plugins\";\nimport { RPCHandler } from \"@orpc/server/fetch\";\nimport { BatchHandlerPlugin } from \"@orpc/server/plugins\";\nimport { ZodToJsonSchemaConverter } from \"@orpc/zod/zod4\";\nimport { Hono } from \"hono\";\nimport { cors } from \"hono/cors\";\nimport { secureHeaders } from \"hono/secure-headers\";\nimport {\n  createStitchedRouter,\n  type LoadedPluginResult,\n  type LoadedPluginsResult,\n  loadApiPluginsFromRuntimeConfig,\n} from \"./api\";\nimport { loadRouterModule, type RouterModule } from \"./federation.server\";\nimport type { ClientRuntimeConfig, RuntimeConfig } from \"./types\";\n\nexport interface HostServerConfig {\n  runtimeConfig: RuntimeConfig;\n  configDir: string;\n  port?: number;\n}\n\nexport interface HostServerHandle {\n  ready: Promise<void>;\n  shutdown: () => Promise<void>;\n}\n\nfunction buildClientRuntimeConfig(runtimeConfig: RuntimeConfig): ClientRuntimeConfig {\n  return {\n    env: runtimeConfig.env,\n    account: runtimeConfig.account,\n    networkId: runtimeConfig.networkId,\n    hostUrl: runtimeConfig.hostUrl,\n    assetsUrl: runtimeConfig.ui.url,\n    apiBase: \"/api\",\n    rpcBase: \"/api/rpc\",\n    ui: runtimeConfig.ui\n      ? {\n          name: runtimeConfig.ui.name,\n          url: runtimeConfig.ui.url,\n          entry: runtimeConfig.ui.entry,\n          integrity: runtimeConfig.ui.integrity,\n        }\n      : undefined,\n    api: runtimeConfig.api\n      ? {\n          name: runtimeConfig.api.name,\n          url: runtimeConfig.api.url,\n          entry: runtimeConfig.api.entry,\n          integrity: runtimeConfig.api.integrity,\n        }\n      : undefined,\n    plugins: runtimeConfig.plugins\n      ? Object.fromEntries(\n          Object.entries(runtimeConfig.plugins).map(([key, plugin]) => [\n            key,\n            {\n              name: plugin.name,\n              url: plugin.url,\n              entry: plugin.entry,\n              integrity: plugin.integrity,\n            },\n          ]),\n        )\n      : undefined,\n  };\n}\n\nfunction renderLoadingShell(runtimeConfig: ClientRuntimeConfig, error?: string | null) {\n  const bootstrap = `window.__RUNTIME_CONFIG__ = ${JSON.stringify(runtimeConfig)};window.addEventListener('load', function handleEverythingDevHydrate() { window.__hydrate?.(); }, { once: true });`;\n  const errorMarkup = error\n    ? `<p style=\"color: #fca5a5;\">Error loading UI: ${escapeHtml(error)}</p>`\n    : \"<p>Loading UI...</p>\";\n\n  const uiIntegrity = runtimeConfig.ui?.integrity;\n  const sriAttr = uiIntegrity ? ` integrity=\"${uiIntegrity}\" crossorigin=\"anonymous\"` : \"\";\n\n  return `\n\t\t<!DOCTYPE html>\n\t\t<html lang=\"en\">\n\t\t\t<head>\n\t\t\t\t<meta charset=\"utf-8\" />\n\t\t\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n\t\t\t\t<title>Loading...</title>\n\t\t\t\t<style>\n\t\t\t\t\tbody { background: #171717; color: #fafafa; display: flex; align-items: center; justify-content: center; height: 100vh; font-family: system-ui; }\n\t\t\t\t\t.fade { animation: fadeIn 0.3s ease-in; text-align: center; padding: 2rem; }\n\t\t\t\t\t@keyframes fadeIn { from { opacity: 0; } to { opacity: 1; } }\n\t\t\t\t</style>\n\t\t\t\t${runtimeConfig.assetsUrl ? `<script src=\"${runtimeConfig.assetsUrl}/remoteEntry.js\"${sriAttr}></script>` : \"\"}\n\t\t\t\t<script>${bootstrap}</script>\n\t\t\t</head>\n\t\t\t<body>\n\t\t\t\t<div id=\"root\" class=\"fade\">${errorMarkup}</div>\n\t\t\t</body>\n\t\t</html>\n\t`;\n}\n\nfunction escapeHtml(value: string) {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"'\", \"&#39;\");\n}\n\nexport function createHostServer(config: HostServerConfig): HostServerHandle {\n  const port = config.port ?? 3000;\n  const { runtimeConfig } = config;\n\n  let shutdownImpl: (() => Promise<void>) | null = null;\n\n  const ready = (async () => {\n    const started = await runHostServer({ runtimeConfig, port });\n    shutdownImpl = started.shutdown;\n  })();\n\n  const shutdown = async () => {\n    console.log(\"[Host] Shutting down...\");\n    const timeout = setTimeout(() => {\n      console.log(\"[Host] Force exit\");\n      process.exit(0);\n    }, 5000);\n    await ready.catch(() => {});\n    if (shutdownImpl) {\n      await shutdownImpl().catch(() => {});\n    }\n    clearTimeout(timeout);\n    console.log(\"[Host] Shutdown complete\");\n  };\n\n  return { ready, shutdown };\n}\n\nasync function runHostServer(opts: {\n  runtimeConfig: RuntimeConfig;\n  port: number;\n}): Promise<{ shutdown: () => Promise<void> }> {\n  const { runtimeConfig, port } = opts;\n\n  let apiPlugins: LoadedPluginResult[] = [];\n  let baseApiPlugin: LoadedPluginResult | null = null;\n  let apiPluginError: string | null = null;\n  let apiPluginLoading: Promise<LoadedPluginsResult | null> | null = null;\n  let ssrRouterModule: RouterModule | null = null;\n  let ssrRouterError: string | null = null;\n  let ssrRouterLoading: Promise<RouterModule | null> | null = null;\n  let rpcHandler: RPCHandler<any> | null = null;\n  let openApiHandler: OpenAPIHandler<any> | null = null;\n\n  const clientRuntimeConfig = buildClientRuntimeConfig(runtimeConfig);\n\n  const initApiHandlers = () => {\n    const baseRouter = baseApiPlugin?.router ?? {};\n    const stitchedRouter = createStitchedRouter(\n      baseRouter,\n      apiPlugins.filter((plugin) => plugin.key !== \"api\"),\n    );\n\n    if (!baseApiPlugin) {\n      rpcHandler = null;\n      openApiHandler = null;\n      return;\n    }\n\n    rpcHandler = new RPCHandler(stitchedRouter as any, {\n      plugins: [new BatchHandlerPlugin()],\n    });\n    openApiHandler = new OpenAPIHandler(stitchedRouter as any, {\n      plugins: [\n        new OpenAPIReferencePlugin({\n          schemaConverters: [new ZodToJsonSchemaConverter()],\n        }),\n      ],\n    });\n  };\n\n  const ensureApiPluginLoaded = async (): Promise<LoadedPluginsResult | null> => {\n    if (apiPlugins.length > 0) return { base: baseApiPlugin, plugins: apiPlugins, errors: [] };\n    if (!runtimeConfig.api) return null;\n    if (apiPluginLoading) return apiPluginLoading;\n\n    apiPluginLoading = loadApiPluginsFromRuntimeConfig(runtimeConfig, process.env as any)\n      .then((loaded) => {\n        if (loaded) {\n          apiPlugins = loaded.plugins;\n          baseApiPlugin = loaded.base;\n          apiPluginError =\n            loaded.errors.length > 0 ? loaded.errors.map((item) => item.error).join(\"; \") : null;\n          initApiHandlers();\n        }\n        return loaded;\n      })\n      .catch((e) => {\n        apiPluginError = e instanceof Error ? e.message : String(e);\n        return null;\n      })\n      .finally(() => {\n        apiPluginLoading = null;\n      });\n\n    return apiPluginLoading;\n  };\n\n  const ensureRouterModuleLoaded = async (): Promise<RouterModule | null> => {\n    if (ssrRouterModule) {\n      return ssrRouterModule;\n    }\n\n    if (ssrRouterLoading) {\n      return ssrRouterLoading;\n    }\n\n    ssrRouterLoading = loadRouterModule(runtimeConfig)\n      .then((routerModule) => {\n        ssrRouterModule = routerModule;\n        ssrRouterError = null;\n        return routerModule;\n      })\n      .catch((error) => {\n        ssrRouterError = error instanceof Error ? error.message : String(error);\n        return null;\n      })\n      .finally(() => {\n        ssrRouterLoading = null;\n      });\n\n    return ssrRouterLoading;\n  };\n\n  // Kick off API plugin load in the background; host should still start even if\n  // the remote isn't ready yet.\n  void ensureApiPluginLoaded();\n  void ensureRouterModuleLoaded();\n\n  const app = new Hono();\n\n  const corsOrigins = process.env.CORS_ORIGIN?.split(\",\").map((o) => o.trim()) ?? [\n    runtimeConfig.hostUrl,\n    ...(runtimeConfig.ui?.url ? [runtimeConfig.ui.url] : []),\n  ];\n\n  if (!process.env.CORS_ORIGIN && runtimeConfig.env === \"production\") {\n    console.warn(\n      \"[Security] CORS_ORIGIN is not set in production. Using host and UI URLs as allowed origins.\",\n    );\n  }\n\n  app.use(\n    \"/*\",\n    cors({\n      origin: corsOrigins,\n      credentials: true,\n    }),\n  );\n\n  app.use(\"*\", secureHeaders());\n\n  app.get(\"/health\", (c) => c.text(\"OK\"));\n  app.get(\"/ready\", async (c) => {\n    type Check = {\n      name: string;\n      url: string;\n      required: boolean;\n      ok: boolean;\n      status?: number;\n      latencyMs?: number;\n      error?: string;\n    };\n\n    const probe = async (url: string, timeoutMs = 400): Promise<Check> => {\n      const started = Date.now();\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), timeoutMs);\n      try {\n        const res = await fetch(url, { signal: controller.signal });\n        return {\n          name: \"\",\n          url,\n          required: true,\n          ok: res.ok,\n          status: res.status,\n          latencyMs: Date.now() - started,\n        };\n      } catch (e) {\n        return {\n          name: \"\",\n          url,\n          required: true,\n          ok: false,\n          latencyMs: Date.now() - started,\n          error: e instanceof Error ? e.message : String(e),\n        };\n      } finally {\n        clearTimeout(timer);\n      }\n    };\n\n    const checks: Check[] = [];\n\n    if (runtimeConfig.ui?.url) {\n      const base = runtimeConfig.ui.url.replace(/\\/$/, \"\");\n      const manifest = await probe(`${base}/mf-manifest.json`);\n      manifest.name = \"ui\";\n      // mf-manifest.json is preferred but not always present; fall back to\n      // remoteEntry.js for readiness.\n      manifest.required = false;\n      checks.push(manifest);\n      if (!manifest.ok) {\n        const remoteEntry = await probe(`${base}/remoteEntry.js`);\n        remoteEntry.name = \"ui\";\n        remoteEntry.required = true;\n        checks.push(remoteEntry);\n      } else {\n        manifest.required = true;\n      }\n    }\n\n    if (runtimeConfig.ui?.ssrUrl) {\n      const base = runtimeConfig.ui.ssrUrl.replace(/\\/$/, \"\");\n      const ssr = await probe(`${base}/`);\n      ssr.name = \"ui-ssr\";\n      ssr.required = false;\n      checks.push(ssr);\n    }\n\n    if (runtimeConfig.api?.url) {\n      const base = runtimeConfig.api.url.replace(/\\/$/, \"\");\n      const api = await probe(`${base}/`);\n      api.name = \"api\";\n      api.required = true;\n      checks.push(api);\n    }\n\n    if (runtimeConfig.api) {\n      checks.push({\n        name: \"api-plugin\",\n        url: runtimeConfig.api.entry,\n        required: true,\n        ok: baseApiPlugin !== null,\n        status: baseApiPlugin !== null ? 200 : 503,\n        error:\n          baseApiPlugin !== null\n            ? undefined\n            : apiPluginLoading\n              ? \"loading\"\n              : (apiPluginError ?? \"not loaded\"),\n      });\n      if (!baseApiPlugin && !apiPluginLoading) {\n        void ensureApiPluginLoaded();\n      }\n    }\n\n    for (const [key, plugin] of Object.entries(runtimeConfig.plugins ?? {})) {\n      const loaded = apiPlugins.find((item) => item.key === key);\n      checks.push({\n        name: key,\n        url: plugin.entry,\n        required: true,\n        ok: Boolean(loaded),\n        status: loaded ? 200 : 503,\n        error: loaded ? undefined : (apiPluginError ?? \"not loaded\"),\n      });\n    }\n\n    const allRequiredOk = checks.filter((x) => x.required).every((x) => x.ok);\n\n    return c.json(\n      {\n        status: allRequiredOk ? \"ready\" : \"not_ready\",\n        host: {\n          url: runtimeConfig.hostUrl,\n          env: runtimeConfig.env,\n        },\n        checks,\n        timestamp: new Date().toISOString(),\n      },\n      allRequiredOk ? 200 : 503,\n    );\n  });\n  app.get(\"/api/_health\", (c) =>\n    c.json({\n      status: \"ready\",\n      mode: runtimeConfig.env,\n      ui: runtimeConfig.ui?.url ?? null,\n      uiSsr: runtimeConfig.ui?.ssrUrl ?? null,\n      ssrRouterLoaded: ssrRouterModule !== null,\n      ssrRouterLoading: ssrRouterLoading !== null,\n      ssrRouterError,\n      api: runtimeConfig.api?.url ?? null,\n      apiPluginLoaded: baseApiPlugin !== null,\n      apiPluginLoading: apiPluginLoading !== null,\n      apiPluginError,\n    }),\n  );\n\n  app.all(\"/api/rpc/*\", async (c) => {\n    if (!rpcHandler) {\n      await ensureApiPluginLoaded();\n    }\n    if (!rpcHandler) {\n      return c.json({ error: \"API plugin not loaded\", detail: apiPluginError }, 503);\n    }\n    const result = await rpcHandler.handle(c.req.raw, {\n      prefix: \"/api/rpc\",\n      context: {},\n    });\n    return result.response\n      ? c.newResponse(result.response.body, result.response)\n      : c.text(\"Not Found\", 404);\n  });\n\n  app.all(\"/api/*\", async (c) => {\n    if (!openApiHandler) {\n      await ensureApiPluginLoaded();\n    }\n    if (!openApiHandler) {\n      return c.json({ error: \"API plugin not loaded\", detail: apiPluginError }, 503);\n    }\n    const result = await openApiHandler.handle(c.req.raw, {\n      prefix: \"/api\",\n      context: {},\n    });\n    return result.response\n      ? c.newResponse(result.response.body, result.response)\n      : c.text(\"Not Found\", 404);\n  });\n\n  if (runtimeConfig.ui) {\n    app.all(\"/__mf/ui/*\", async (c) => {\n      const targetUrl = `${runtimeConfig.ui!.url}${c.req.path.replace(\"/__mf/ui\", \"\")}`;\n      const response = await fetch(targetUrl, {\n        method: c.req.method,\n        headers: c.req.header(),\n      });\n      return response;\n    });\n\n    if (runtimeConfig.ui.ssrUrl) {\n      app.all(\"/__mf/ui/ssr/*\", async (c) => {\n        const targetUrl = `${runtimeConfig.ui!.ssrUrl}${c.req.path.replace(\"/__mf/ui/ssr\", \"\")}`;\n        const response = await fetch(targetUrl, {\n          method: c.req.method,\n          headers: c.req.header(),\n        });\n        return response;\n      });\n    }\n  }\n\n  app.get(\"*\", async (c) => {\n    const routerModule = await ensureRouterModuleLoaded();\n\n    if (!routerModule) {\n      return c.html(renderLoadingShell(clientRuntimeConfig, ssrRouterError), 503);\n    }\n\n    try {\n      const apiClient = baseApiPlugin?.createClient();\n\n      const result = await routerModule.renderToStream(c.req.raw, {\n        assetsUrl: runtimeConfig.ui.url,\n        runtimeConfig: clientRuntimeConfig,\n        apiClient,\n      });\n\n      return new Response(result.stream, {\n        status: result.statusCode,\n        headers: result.headers,\n      });\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      return c.html(renderLoadingShell(clientRuntimeConfig, message), 500);\n    }\n  });\n\n  const hostname = process.env.HOST ?? \"0.0.0.0\";\n  let resolveReady: (() => void) | null = null;\n  const ready = new Promise<void>((resolve) => {\n    resolveReady = resolve;\n  });\n\n  const proxiedFetch = (req: Request): Response | Promise<Response> => {\n    const url = new URL(req.url);\n    const forwardedProto = req.headers.get(\"x-forwarded-proto\");\n    const forwardedHost = req.headers.get(\"x-forwarded-host\");\n\n    if (forwardedProto) {\n      url.protocol = forwardedProto;\n    }\n    if (forwardedHost) {\n      url.host = forwardedHost;\n    }\n\n    if (forwardedProto || forwardedHost) {\n      req = new Request(url, req);\n    }\n\n    return app.fetch(req);\n  };\n\n  const server = serve({ fetch: proxiedFetch, port, hostname }, (info) => {\n    console.log(`[Host] Server running at http://${hostname}:${info.port}`);\n    console.log(`[Host] API: http://${hostname}:${info.port}/api/rpc`);\n    resolveReady?.();\n  });\n\n  await ready;\n\n  return {\n    shutdown: () =>\n      new Promise<void>((resolve) => {\n        try {\n          server.close(() => resolve());\n        } catch {\n          resolve();\n        }\n      }),\n  };\n}\n\nexport { runHostServer };\n"],"mappings":";;;;;;;;;;;;;;;AA6BA,SAAS,yBAAyB,eAAmD;AACnF,QAAO;EACL,KAAK,cAAc;EACnB,SAAS,cAAc;EACvB,WAAW,cAAc;EACzB,SAAS,cAAc;EACvB,WAAW,cAAc,GAAG;EAC5B,SAAS;EACT,SAAS;EACT,IAAI,cAAc,KACd;GACE,MAAM,cAAc,GAAG;GACvB,KAAK,cAAc,GAAG;GACtB,OAAO,cAAc,GAAG;GACxB,WAAW,cAAc,GAAG;GAC7B,GACD;EACJ,KAAK,cAAc,MACf;GACE,MAAM,cAAc,IAAI;GACxB,KAAK,cAAc,IAAI;GACvB,OAAO,cAAc,IAAI;GACzB,WAAW,cAAc,IAAI;GAC9B,GACD;EACJ,SAAS,cAAc,UACnB,OAAO,YACL,OAAO,QAAQ,cAAc,QAAQ,CAAC,KAAK,CAAC,KAAK,YAAY,CAC3D,KACA;GACE,MAAM,OAAO;GACb,KAAK,OAAO;GACZ,OAAO,OAAO;GACd,WAAW,OAAO;GACnB,CACF,CAAC,CACH,GACD;EACL;;AAGH,SAAS,mBAAmB,eAAoC,OAAuB;CACrF,MAAM,YAAY,+BAA+B,KAAK,UAAU,cAAc,CAAC;CAC/E,MAAM,cAAc,QAChB,gDAAgD,WAAW,MAAM,CAAC,QAClE;CAEJ,MAAM,cAAc,cAAc,IAAI;CACtC,MAAM,UAAU,cAAc,eAAe,YAAY,6BAA6B;AAEtF,QAAO;;;;;;;;;;;;MAYH,cAAc,YAAY,gBAAgB,cAAc,UAAU,kBAAkB,QAAQ,eAAc,GAAG;cACrG,UAAU;;;kCAGU,YAAY;;;;;AAM9C,SAAS,WAAW,OAAe;AACjC,QAAO,MACJ,WAAW,KAAK,QAAQ,CACxB,WAAW,KAAK,OAAO,CACvB,WAAW,KAAK,OAAO,CACvB,WAAW,MAAK,SAAS,CACzB,WAAW,KAAK,QAAQ;;AAG7B,SAAgB,iBAAiB,QAA4C;CAC3E,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,EAAE,kBAAkB;CAE1B,IAAI,eAA6C;CAEjD,MAAM,SAAS,YAAY;AAEzB,kBADgB,MAAM,cAAc;GAAE;GAAe;GAAM,CAAC,EACrC;KACrB;CAEJ,MAAM,WAAW,YAAY;AAC3B,UAAQ,IAAI,0BAA0B;EACtC,MAAM,UAAU,iBAAiB;AAC/B,WAAQ,IAAI,oBAAoB;AAChC,WAAQ,KAAK,EAAE;KACd,IAAK;AACR,QAAM,MAAM,YAAY,GAAG;AAC3B,MAAI,aACF,OAAM,cAAc,CAAC,YAAY,GAAG;AAEtC,eAAa,QAAQ;AACrB,UAAQ,IAAI,2BAA2B;;AAGzC,QAAO;EAAE;EAAO;EAAU;;AAG5B,eAAe,cAAc,MAGkB;CAC7C,MAAM,EAAE,eAAe,SAAS;CAEhC,IAAI,aAAmC,EAAE;CACzC,IAAI,gBAA2C;CAC/C,IAAI,iBAAgC;CACpC,IAAI,mBAA+D;CACnE,IAAI,kBAAuC;CAC3C,IAAI,iBAAgC;CACpC,IAAI,mBAAwD;CAC5D,IAAI,aAAqC;CACzC,IAAI,iBAA6C;CAEjD,MAAM,sBAAsB,yBAAyB,cAAc;CAEnE,MAAM,wBAAwB;EAE5B,MAAM,iBAAiBA,iCADJ,eAAe,UAAU,EAAE,EAG5C,WAAW,QAAQ,WAAW,OAAO,QAAQ,MAAM,CACpD;AAED,MAAI,CAAC,eAAe;AAClB,gBAAa;AACb,oBAAiB;AACjB;;AAGF,eAAa,IAAIC,8BAAW,gBAAuB,EACjD,SAAS,CAAC,IAAIC,yCAAoB,CAAC,EACpC,CAAC;AACF,mBAAiB,IAAIC,mCAAe,gBAAuB,EACzD,SAAS,CACP,IAAIC,6CAAuB,EACzB,kBAAkB,CAAC,IAAIC,yCAA0B,CAAC,EACnD,CAAC,CACH,EACF,CAAC;;CAGJ,MAAM,wBAAwB,YAAiD;AAC7E,MAAI,WAAW,SAAS,EAAG,QAAO;GAAE,MAAM;GAAe,SAAS;GAAY,QAAQ,EAAE;GAAE;AAC1F,MAAI,CAAC,cAAc,IAAK,QAAO;AAC/B,MAAI,iBAAkB,QAAO;AAE7B,qBAAmBC,4CAAgC,eAAe,QAAQ,IAAW,CAClF,MAAM,WAAW;AAChB,OAAI,QAAQ;AACV,iBAAa,OAAO;AACpB,oBAAgB,OAAO;AACvB,qBACE,OAAO,OAAO,SAAS,IAAI,OAAO,OAAO,KAAK,SAAS,KAAK,MAAM,CAAC,KAAK,KAAK,GAAG;AAClF,qBAAiB;;AAEnB,UAAO;IACP,CACD,OAAO,MAAM;AACZ,oBAAiB,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC3D,UAAO;IACP,CACD,cAAc;AACb,sBAAmB;IACnB;AAEJ,SAAO;;CAGT,MAAM,2BAA2B,YAA0C;AACzE,MAAI,gBACF,QAAO;AAGT,MAAI,iBACF,QAAO;AAGT,qBAAmBC,2CAAiB,cAAc,CAC/C,MAAM,iBAAiB;AACtB,qBAAkB;AAClB,oBAAiB;AACjB,UAAO;IACP,CACD,OAAO,UAAU;AAChB,oBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACvE,UAAO;IACP,CACD,cAAc;AACb,sBAAmB;IACnB;AAEJ,SAAO;;AAKT,CAAK,uBAAuB;AAC5B,CAAK,0BAA0B;CAE/B,MAAM,MAAM,IAAIC,WAAM;CAEtB,MAAM,cAAc,QAAQ,IAAI,aAAa,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,IAAI,CAC9E,cAAc,SACd,GAAI,cAAc,IAAI,MAAM,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CACxD;AAED,KAAI,CAAC,QAAQ,IAAI,eAAe,cAAc,QAAQ,aACpD,SAAQ,KACN,8FACD;AAGH,KAAI,IACF,0BACK;EACH,QAAQ;EACR,aAAa;EACd,CAAC,CACH;AAED,KAAI,IAAI,6CAAoB,CAAC;AAE7B,KAAI,IAAI,YAAY,MAAM,EAAE,KAAK,KAAK,CAAC;AACvC,KAAI,IAAI,UAAU,OAAO,MAAM;EAW7B,MAAM,QAAQ,OAAO,KAAa,YAAY,QAAwB;GACpE,MAAM,UAAU,KAAK,KAAK;GAC1B,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;AAC7D,OAAI;IACF,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;AAC3D,WAAO;KACL,MAAM;KACN;KACA,UAAU;KACV,IAAI,IAAI;KACR,QAAQ,IAAI;KACZ,WAAW,KAAK,KAAK,GAAG;KACzB;YACM,GAAG;AACV,WAAO;KACL,MAAM;KACN;KACA,UAAU;KACV,IAAI;KACJ,WAAW,KAAK,KAAK,GAAG;KACxB,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;KAClD;aACO;AACR,iBAAa,MAAM;;;EAIvB,MAAM,SAAkB,EAAE;AAE1B,MAAI,cAAc,IAAI,KAAK;GACzB,MAAM,OAAO,cAAc,GAAG,IAAI,QAAQ,OAAO,GAAG;GACpD,MAAM,WAAW,MAAM,MAAM,GAAG,KAAK,mBAAmB;AACxD,YAAS,OAAO;AAGhB,YAAS,WAAW;AACpB,UAAO,KAAK,SAAS;AACrB,OAAI,CAAC,SAAS,IAAI;IAChB,MAAM,cAAc,MAAM,MAAM,GAAG,KAAK,iBAAiB;AACzD,gBAAY,OAAO;AACnB,gBAAY,WAAW;AACvB,WAAO,KAAK,YAAY;SAExB,UAAS,WAAW;;AAIxB,MAAI,cAAc,IAAI,QAAQ;GAE5B,MAAM,MAAM,MAAM,MAAM,GADX,cAAc,GAAG,OAAO,QAAQ,OAAO,GAAG,CACvB,GAAG;AACnC,OAAI,OAAO;AACX,OAAI,WAAW;AACf,UAAO,KAAK,IAAI;;AAGlB,MAAI,cAAc,KAAK,KAAK;GAE1B,MAAM,MAAM,MAAM,MAAM,GADX,cAAc,IAAI,IAAI,QAAQ,OAAO,GAAG,CACrB,GAAG;AACnC,OAAI,OAAO;AACX,OAAI,WAAW;AACf,UAAO,KAAK,IAAI;;AAGlB,MAAI,cAAc,KAAK;AACrB,UAAO,KAAK;IACV,MAAM;IACN,KAAK,cAAc,IAAI;IACvB,UAAU;IACV,IAAI,kBAAkB;IACtB,QAAQ,kBAAkB,OAAO,MAAM;IACvC,OACE,kBAAkB,OACd,SACA,mBACE,YACC,kBAAkB;IAC5B,CAAC;AACF,OAAI,CAAC,iBAAiB,CAAC,iBACrB,CAAK,uBAAuB;;AAIhC,OAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,WAAW,EAAE,CAAC,EAAE;GACvE,MAAM,SAAS,WAAW,MAAM,SAAS,KAAK,QAAQ,IAAI;AAC1D,UAAO,KAAK;IACV,MAAM;IACN,KAAK,OAAO;IACZ,UAAU;IACV,IAAI,QAAQ,OAAO;IACnB,QAAQ,SAAS,MAAM;IACvB,OAAO,SAAS,SAAa,kBAAkB;IAChD,CAAC;;EAGJ,MAAM,gBAAgB,OAAO,QAAQ,MAAM,EAAE,SAAS,CAAC,OAAO,MAAM,EAAE,GAAG;AAEzE,SAAO,EAAE,KACP;GACE,QAAQ,gBAAgB,UAAU;GAClC,MAAM;IACJ,KAAK,cAAc;IACnB,KAAK,cAAc;IACpB;GACD;GACA,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,EACD,gBAAgB,MAAM,IACvB;GACD;AACF,KAAI,IAAI,iBAAiB,MACvB,EAAE,KAAK;EACL,QAAQ;EACR,MAAM,cAAc;EACpB,IAAI,cAAc,IAAI,OAAO;EAC7B,OAAO,cAAc,IAAI,UAAU;EACnC,iBAAiB,oBAAoB;EACrC,kBAAkB,qBAAqB;EACvC;EACA,KAAK,cAAc,KAAK,OAAO;EAC/B,iBAAiB,kBAAkB;EACnC,kBAAkB,qBAAqB;EACvC;EACD,CAAC,CACH;AAED,KAAI,IAAI,cAAc,OAAO,MAAM;AACjC,MAAI,CAAC,WACH,OAAM,uBAAuB;AAE/B,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,OAAO;GAAyB,QAAQ;GAAgB,EAAE,IAAI;EAEhF,MAAM,SAAS,MAAM,WAAW,OAAO,EAAE,IAAI,KAAK;GAChD,QAAQ;GACR,SAAS,EAAE;GACZ,CAAC;AACF,SAAO,OAAO,WACV,EAAE,YAAY,OAAO,SAAS,MAAM,OAAO,SAAS,GACpD,EAAE,KAAK,aAAa,IAAI;GAC5B;AAEF,KAAI,IAAI,UAAU,OAAO,MAAM;AAC7B,MAAI,CAAC,eACH,OAAM,uBAAuB;AAE/B,MAAI,CAAC,eACH,QAAO,EAAE,KAAK;GAAE,OAAO;GAAyB,QAAQ;GAAgB,EAAE,IAAI;EAEhF,MAAM,SAAS,MAAM,eAAe,OAAO,EAAE,IAAI,KAAK;GACpD,QAAQ;GACR,SAAS,EAAE;GACZ,CAAC;AACF,SAAO,OAAO,WACV,EAAE,YAAY,OAAO,SAAS,MAAM,OAAO,SAAS,GACpD,EAAE,KAAK,aAAa,IAAI;GAC5B;AAEF,KAAI,cAAc,IAAI;AACpB,MAAI,IAAI,cAAc,OAAO,MAAM;GACjC,MAAM,YAAY,GAAG,cAAc,GAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,YAAY,GAAG;AAK/E,UAJiB,MAAM,MAAM,WAAW;IACtC,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI,QAAQ;IACxB,CAAC;IAEF;AAEF,MAAI,cAAc,GAAG,OACnB,KAAI,IAAI,kBAAkB,OAAO,MAAM;GACrC,MAAM,YAAY,GAAG,cAAc,GAAI,SAAS,EAAE,IAAI,KAAK,QAAQ,gBAAgB,GAAG;AAKtF,UAJiB,MAAM,MAAM,WAAW;IACtC,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI,QAAQ;IACxB,CAAC;IAEF;;AAIN,KAAI,IAAI,KAAK,OAAO,MAAM;EACxB,MAAM,eAAe,MAAM,0BAA0B;AAErD,MAAI,CAAC,aACH,QAAO,EAAE,KAAK,mBAAmB,qBAAqB,eAAe,EAAE,IAAI;AAG7E,MAAI;GACF,MAAM,YAAY,eAAe,cAAc;GAE/C,MAAM,SAAS,MAAM,aAAa,eAAe,EAAE,IAAI,KAAK;IAC1D,WAAW,cAAc,GAAG;IAC5B,eAAe;IACf;IACD,CAAC;AAEF,UAAO,IAAI,SAAS,OAAO,QAAQ;IACjC,QAAQ,OAAO;IACf,SAAS,OAAO;IACjB,CAAC;WACK,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAO,EAAE,KAAK,mBAAmB,qBAAqB,QAAQ,EAAE,IAAI;;GAEtE;CAEF,MAAM,WAAW,QAAQ,IAAI,QAAQ;CACrC,IAAI,eAAoC;CACxC,MAAM,QAAQ,IAAI,SAAe,YAAY;AAC3C,iBAAe;GACf;CAEF,MAAM,gBAAgB,QAA+C;EACnE,MAAM,MAAM,IAAI,IAAI,IAAI,IAAI;EAC5B,MAAM,iBAAiB,IAAI,QAAQ,IAAI,oBAAoB;EAC3D,MAAM,gBAAgB,IAAI,QAAQ,IAAI,mBAAmB;AAEzD,MAAI,eACF,KAAI,WAAW;AAEjB,MAAI,cACF,KAAI,OAAO;AAGb,MAAI,kBAAkB,cACpB,OAAM,IAAI,QAAQ,KAAK,IAAI;AAG7B,SAAO,IAAI,MAAM,IAAI;;CAGvB,MAAM,sCAAe;EAAE,OAAO;EAAc;EAAM;EAAU,GAAG,SAAS;AACtE,UAAQ,IAAI,mCAAmC,SAAS,GAAG,KAAK,OAAO;AACvE,UAAQ,IAAI,sBAAsB,SAAS,GAAG,KAAK,KAAK,UAAU;AAClE,kBAAgB;GAChB;AAEF,OAAM;AAEN,QAAO,EACL,gBACE,IAAI,SAAe,YAAY;AAC7B,MAAI;AACF,UAAO,YAAY,SAAS,CAAC;UACvB;AACN,YAAS;;GAEX,EACL"}
+{"version":3,"file":"host.cjs","names":["createStitchedRouter","RPCHandler","BatchHandlerPlugin","OpenAPIHandler","OpenAPIReferencePlugin","ZodToJsonSchemaConverter","loadApiPluginsFromRuntimeConfig","loadRouterModule","Hono"],"sources":["../src/host.ts"],"sourcesContent":["import { serve } from \"@hono/node-server\";\nimport { OpenAPIHandler } from \"@orpc/openapi/fetch\";\nimport { OpenAPIReferencePlugin } from \"@orpc/openapi/plugins\";\nimport { RPCHandler } from \"@orpc/server/fetch\";\nimport { BatchHandlerPlugin } from \"@orpc/server/plugins\";\nimport { ZodToJsonSchemaConverter } from \"@orpc/zod/zod4\";\nimport { Hono } from \"hono\";\nimport { cors } from \"hono/cors\";\nimport { secureHeaders } from \"hono/secure-headers\";\nimport {\n  createStitchedRouter,\n  type LoadedPluginResult,\n  type LoadedPluginsResult,\n  loadApiPluginsFromRuntimeConfig,\n} from \"./api\";\nimport { loadRouterModule, type RouterModule } from \"./federation.server\";\nimport type { ClientRuntimeConfig, RuntimeConfig } from \"./types\";\n\nexport interface HostServerConfig {\n  runtimeConfig: RuntimeConfig;\n  configDir: string;\n  port?: number;\n}\n\nexport interface HostServerHandle {\n  ready: Promise<void>;\n  shutdown: () => Promise<void>;\n}\n\nfunction buildClientRuntimeConfig(runtimeConfig: RuntimeConfig): ClientRuntimeConfig {\n  return {\n    env: runtimeConfig.env,\n    account: runtimeConfig.account,\n    networkId: runtimeConfig.networkId,\n    hostUrl: runtimeConfig.hostUrl,\n    assetsUrl: runtimeConfig.ui.url,\n    apiBase: \"/api\",\n    rpcBase: \"/api/rpc\",\n    ui: runtimeConfig.ui\n      ? {\n          name: runtimeConfig.ui.name,\n          url: runtimeConfig.ui.url,\n          entry: runtimeConfig.ui.entry,\n          integrity: runtimeConfig.ui.integrity,\n        }\n      : undefined,\n    api: runtimeConfig.api\n      ? {\n          name: runtimeConfig.api.name,\n          url: runtimeConfig.api.url,\n          entry: runtimeConfig.api.entry,\n          integrity: runtimeConfig.api.integrity,\n        }\n      : undefined,\n    plugins: runtimeConfig.plugins\n      ? Object.fromEntries(\n          Object.entries(runtimeConfig.plugins).map(([key, plugin]) => [\n            key,\n            {\n              name: plugin.name,\n              url: plugin.url,\n              entry: plugin.entry,\n              integrity: plugin.integrity,\n            },\n          ]),\n        )\n      : undefined,\n  };\n}\n\nfunction renderLoadingShell(runtimeConfig: ClientRuntimeConfig, error?: string | null) {\n  const bootstrap = `window.__RUNTIME_CONFIG__ = ${JSON.stringify(runtimeConfig)};window.addEventListener('load', function handleEverythingDevHydrate() { window.__hydrate?.(); }, { once: true });`;\n  const errorMarkup = error\n    ? `<p style=\"color: #fca5a5;\">Error loading UI: ${escapeHtml(error)}</p>`\n    : \"<p>Loading UI...</p>\";\n\n  const uiIntegrity = runtimeConfig.ui?.integrity;\n  const sriAttr = uiIntegrity ? ` integrity=\"${uiIntegrity}\" crossorigin=\"anonymous\"` : \"\";\n\n  return `\n\t\t<!DOCTYPE html>\n\t\t<html lang=\"en\">\n\t\t\t<head>\n\t\t\t\t<meta charset=\"utf-8\" />\n\t\t\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n\t\t\t\t<title>Loading...</title>\n\t\t\t\t<style>\n\t\t\t\t\tbody { background: #171717; color: #fafafa; display: flex; align-items: center; justify-content: center; height: 100vh; font-family: system-ui; }\n\t\t\t\t\t.fade { animation: fadeIn 0.3s ease-in; text-align: center; padding: 2rem; }\n\t\t\t\t\t@keyframes fadeIn { from { opacity: 0; } to { opacity: 1; } }\n\t\t\t\t</style>\n\t\t\t\t${runtimeConfig.assetsUrl ? `<script src=\"${runtimeConfig.assetsUrl}/remoteEntry.js\"${sriAttr}></script>` : \"\"}\n\t\t\t\t<script>${bootstrap}</script>\n\t\t\t</head>\n\t\t\t<body>\n\t\t\t\t<div id=\"root\" class=\"fade\">${errorMarkup}</div>\n\t\t\t</body>\n\t\t</html>\n\t`;\n}\n\nfunction escapeHtml(value: string) {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"'\", \"&#39;\");\n}\n\nexport function createHostServer(config: HostServerConfig): HostServerHandle {\n  const port = config.port ?? 3000;\n  const { runtimeConfig } = config;\n\n  let shutdownImpl: (() => Promise<void>) | null = null;\n\n  const ready = (async () => {\n    const started = await runHostServer({ runtimeConfig, port });\n    shutdownImpl = started.shutdown;\n  })();\n\n  const shutdown = async () => {\n    console.log(\"[Host] Shutting down...\");\n    const timeout = setTimeout(() => {\n      console.log(\"[Host] Force exit\");\n      process.exit(0);\n    }, 5000);\n    await ready.catch(() => {});\n    if (shutdownImpl) {\n      await shutdownImpl().catch(() => {});\n    }\n    clearTimeout(timeout);\n    console.log(\"[Host] Shutdown complete\");\n  };\n\n  return { ready, shutdown };\n}\n\nasync function runHostServer(opts: {\n  runtimeConfig: RuntimeConfig;\n  port: number;\n}): Promise<{ shutdown: () => Promise<void> }> {\n  const { runtimeConfig, port } = opts;\n\n  let apiPlugins: LoadedPluginResult[] = [];\n  let baseApiPlugin: LoadedPluginResult | null = null;\n  let apiPluginError: string | null = null;\n  let apiPluginLoading: Promise<LoadedPluginsResult | null> | null = null;\n  let ssrRouterModule: RouterModule | null = null;\n  let ssrRouterError: string | null = null;\n  let ssrRouterLoading: Promise<RouterModule | null> | null = null;\n  let rpcHandler: RPCHandler<any> | null = null;\n  let openApiHandler: OpenAPIHandler<any> | null = null;\n\n  const clientRuntimeConfig = buildClientRuntimeConfig(runtimeConfig);\n\n  const initApiHandlers = () => {\n    const baseRouter = baseApiPlugin?.router ?? {};\n    const stitchedRouter = createStitchedRouter(\n      baseRouter,\n      apiPlugins.filter((plugin) => plugin.key !== \"api\"),\n    );\n\n    if (!baseApiPlugin) {\n      rpcHandler = null;\n      openApiHandler = null;\n      return;\n    }\n\n    rpcHandler = new RPCHandler(stitchedRouter as any, {\n      plugins: [new BatchHandlerPlugin()],\n    });\n    openApiHandler = new OpenAPIHandler(stitchedRouter as any, {\n      plugins: [\n        new OpenAPIReferencePlugin({\n          schemaConverters: [new ZodToJsonSchemaConverter()],\n        }),\n      ],\n    });\n  };\n\n  const ensureApiPluginLoaded = async (): Promise<LoadedPluginsResult | null> => {\n    if (apiPlugins.length > 0) return { base: baseApiPlugin, plugins: apiPlugins, errors: [] };\n    if (!runtimeConfig.api) return null;\n    if (apiPluginLoading) return apiPluginLoading;\n\n    apiPluginLoading = loadApiPluginsFromRuntimeConfig(runtimeConfig, process.env as any)\n      .then((loaded) => {\n        if (loaded) {\n          apiPlugins = loaded.plugins;\n          baseApiPlugin = loaded.base;\n          apiPluginError =\n            loaded.errors.length > 0 ? loaded.errors.map((item) => item.error).join(\"; \") : null;\n          initApiHandlers();\n        }\n        return loaded;\n      })\n      .catch((e) => {\n        apiPluginError = e instanceof Error ? e.message : String(e);\n        return null;\n      })\n      .finally(() => {\n        apiPluginLoading = null;\n      });\n\n    return apiPluginLoading;\n  };\n\n  const ensureRouterModuleLoaded = async (): Promise<RouterModule | null> => {\n    if (ssrRouterModule) {\n      return ssrRouterModule;\n    }\n\n    if (ssrRouterLoading) {\n      return ssrRouterLoading;\n    }\n\n    ssrRouterLoading = loadRouterModule(runtimeConfig)\n      .then((routerModule) => {\n        ssrRouterModule = routerModule;\n        ssrRouterError = null;\n        return routerModule;\n      })\n      .catch((error) => {\n        ssrRouterError = error instanceof Error ? error.message : String(error);\n        return null;\n      })\n      .finally(() => {\n        ssrRouterLoading = null;\n      });\n\n    return ssrRouterLoading;\n  };\n\n  // Kick off API plugin load in the background; host should still start even if\n  // the remote isn't ready yet.\n  void ensureApiPluginLoaded();\n  void ensureRouterModuleLoaded();\n\n  const app = new Hono();\n\n  const corsOrigins = process.env.CORS_ORIGIN?.split(\",\").map((o) => o.trim()) ?? [\n    runtimeConfig.hostUrl,\n    ...(runtimeConfig.ui?.url ? [runtimeConfig.ui.url] : []),\n  ];\n\n  if (!process.env.CORS_ORIGIN && runtimeConfig.env === \"production\") {\n    console.warn(\n      \"[Security] CORS_ORIGIN is not set in production. Using host and UI URLs as allowed origins.\",\n    );\n  }\n\n  app.use(\n    \"/*\",\n    cors({\n      origin: corsOrigins,\n      credentials: true,\n    }),\n  );\n\n  app.use(\"*\", secureHeaders({ crossOriginOpenerPolicy: \"same-origin-allow-popups\" }));\n\n  app.get(\"/health\", (c) => c.text(\"OK\"));\n  app.get(\"/ready\", async (c) => {\n    type Check = {\n      name: string;\n      url: string;\n      required: boolean;\n      ok: boolean;\n      status?: number;\n      latencyMs?: number;\n      error?: string;\n    };\n\n    const probe = async (url: string, timeoutMs = 400): Promise<Check> => {\n      const started = Date.now();\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), timeoutMs);\n      try {\n        const res = await fetch(url, { signal: controller.signal });\n        return {\n          name: \"\",\n          url,\n          required: true,\n          ok: res.ok,\n          status: res.status,\n          latencyMs: Date.now() - started,\n        };\n      } catch (e) {\n        return {\n          name: \"\",\n          url,\n          required: true,\n          ok: false,\n          latencyMs: Date.now() - started,\n          error: e instanceof Error ? e.message : String(e),\n        };\n      } finally {\n        clearTimeout(timer);\n      }\n    };\n\n    const checks: Check[] = [];\n\n    if (runtimeConfig.ui?.url) {\n      const base = runtimeConfig.ui.url.replace(/\\/$/, \"\");\n      const manifest = await probe(`${base}/mf-manifest.json`);\n      manifest.name = \"ui\";\n      // mf-manifest.json is preferred but not always present; fall back to\n      // remoteEntry.js for readiness.\n      manifest.required = false;\n      checks.push(manifest);\n      if (!manifest.ok) {\n        const remoteEntry = await probe(`${base}/remoteEntry.js`);\n        remoteEntry.name = \"ui\";\n        remoteEntry.required = true;\n        checks.push(remoteEntry);\n      } else {\n        manifest.required = true;\n      }\n    }\n\n    if (runtimeConfig.ui?.ssrUrl) {\n      const base = runtimeConfig.ui.ssrUrl.replace(/\\/$/, \"\");\n      const ssr = await probe(`${base}/`);\n      ssr.name = \"ui-ssr\";\n      ssr.required = false;\n      checks.push(ssr);\n    }\n\n    if (runtimeConfig.api?.url) {\n      const base = runtimeConfig.api.url.replace(/\\/$/, \"\");\n      const api = await probe(`${base}/`);\n      api.name = \"api\";\n      api.required = true;\n      checks.push(api);\n    }\n\n    if (runtimeConfig.api) {\n      checks.push({\n        name: \"api-plugin\",\n        url: runtimeConfig.api.entry,\n        required: true,\n        ok: baseApiPlugin !== null,\n        status: baseApiPlugin !== null ? 200 : 503,\n        error:\n          baseApiPlugin !== null\n            ? undefined\n            : apiPluginLoading\n              ? \"loading\"\n              : (apiPluginError ?? \"not loaded\"),\n      });\n      if (!baseApiPlugin && !apiPluginLoading) {\n        void ensureApiPluginLoaded();\n      }\n    }\n\n    for (const [key, plugin] of Object.entries(runtimeConfig.plugins ?? {})) {\n      const loaded = apiPlugins.find((item) => item.key === key);\n      checks.push({\n        name: key,\n        url: plugin.entry,\n        required: true,\n        ok: Boolean(loaded),\n        status: loaded ? 200 : 503,\n        error: loaded ? undefined : (apiPluginError ?? \"not loaded\"),\n      });\n    }\n\n    const allRequiredOk = checks.filter((x) => x.required).every((x) => x.ok);\n\n    return c.json(\n      {\n        status: allRequiredOk ? \"ready\" : \"not_ready\",\n        host: {\n          url: runtimeConfig.hostUrl,\n          env: runtimeConfig.env,\n        },\n        checks,\n        timestamp: new Date().toISOString(),\n      },\n      allRequiredOk ? 200 : 503,\n    );\n  });\n  app.get(\"/api/_health\", (c) =>\n    c.json({\n      status: \"ready\",\n      mode: runtimeConfig.env,\n      ui: runtimeConfig.ui?.url ?? null,\n      uiSsr: runtimeConfig.ui?.ssrUrl ?? null,\n      ssrRouterLoaded: ssrRouterModule !== null,\n      ssrRouterLoading: ssrRouterLoading !== null,\n      ssrRouterError,\n      api: runtimeConfig.api?.url ?? null,\n      apiPluginLoaded: baseApiPlugin !== null,\n      apiPluginLoading: apiPluginLoading !== null,\n      apiPluginError,\n    }),\n  );\n\n  app.all(\"/api/rpc/*\", async (c) => {\n    if (!rpcHandler) {\n      await ensureApiPluginLoaded();\n    }\n    if (!rpcHandler) {\n      return c.json({ error: \"API plugin not loaded\", detail: apiPluginError }, 503);\n    }\n    const result = await rpcHandler.handle(c.req.raw, {\n      prefix: \"/api/rpc\",\n      context: {},\n    });\n    return result.response\n      ? c.newResponse(result.response.body, result.response)\n      : c.text(\"Not Found\", 404);\n  });\n\n  app.all(\"/api/*\", async (c) => {\n    if (!openApiHandler) {\n      await ensureApiPluginLoaded();\n    }\n    if (!openApiHandler) {\n      return c.json({ error: \"API plugin not loaded\", detail: apiPluginError }, 503);\n    }\n    const result = await openApiHandler.handle(c.req.raw, {\n      prefix: \"/api\",\n      context: {},\n    });\n    return result.response\n      ? c.newResponse(result.response.body, result.response)\n      : c.text(\"Not Found\", 404);\n  });\n\n  if (runtimeConfig.ui) {\n    app.all(\"/__mf/ui/*\", async (c) => {\n      const targetUrl = `${runtimeConfig.ui!.url}${c.req.path.replace(\"/__mf/ui\", \"\")}`;\n      const response = await fetch(targetUrl, {\n        method: c.req.method,\n        headers: c.req.header(),\n      });\n      return response;\n    });\n\n    if (runtimeConfig.ui.ssrUrl) {\n      app.all(\"/__mf/ui/ssr/*\", async (c) => {\n        const targetUrl = `${runtimeConfig.ui!.ssrUrl}${c.req.path.replace(\"/__mf/ui/ssr\", \"\")}`;\n        const response = await fetch(targetUrl, {\n          method: c.req.method,\n          headers: c.req.header(),\n        });\n        return response;\n      });\n    }\n  }\n\n  app.get(\"*\", async (c) => {\n    const routerModule = await ensureRouterModuleLoaded();\n\n    if (!routerModule) {\n      return c.html(renderLoadingShell(clientRuntimeConfig, ssrRouterError), 503);\n    }\n\n    try {\n      const apiClient = baseApiPlugin?.createClient();\n\n      const result = await routerModule.renderToStream(c.req.raw, {\n        assetsUrl: runtimeConfig.ui.url,\n        runtimeConfig: clientRuntimeConfig,\n        apiClient,\n      });\n\n      return new Response(result.stream, {\n        status: result.statusCode,\n        headers: result.headers,\n      });\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      return c.html(renderLoadingShell(clientRuntimeConfig, message), 500);\n    }\n  });\n\n  const hostname = process.env.HOST ?? \"0.0.0.0\";\n  let resolveReady: (() => void) | null = null;\n  const ready = new Promise<void>((resolve) => {\n    resolveReady = resolve;\n  });\n\n  const proxiedFetch = (req: Request): Response | Promise<Response> => {\n    const url = new URL(req.url);\n    const forwardedProto = req.headers.get(\"x-forwarded-proto\");\n    const forwardedHost = req.headers.get(\"x-forwarded-host\");\n\n    if (forwardedProto) {\n      url.protocol = forwardedProto;\n    }\n    if (forwardedHost) {\n      url.host = forwardedHost;\n    }\n\n    if (forwardedProto || forwardedHost) {\n      req = new Request(url, req);\n    }\n\n    return app.fetch(req);\n  };\n\n  const server = serve({ fetch: proxiedFetch, port, hostname }, (info) => {\n    console.log(`[Host] Server running at http://${hostname}:${info.port}`);\n    console.log(`[Host] API: http://${hostname}:${info.port}/api/rpc`);\n    resolveReady?.();\n  });\n\n  await ready;\n\n  return {\n    shutdown: () =>\n      new Promise<void>((resolve) => {\n        try {\n          server.close(() => resolve());\n        } catch {\n          resolve();\n        }\n      }),\n  };\n}\n\nexport { runHostServer };\n"],"mappings":";;;;;;;;;;;;;;;AA6BA,SAAS,yBAAyB,eAAmD;AACnF,QAAO;EACL,KAAK,cAAc;EACnB,SAAS,cAAc;EACvB,WAAW,cAAc;EACzB,SAAS,cAAc;EACvB,WAAW,cAAc,GAAG;EAC5B,SAAS;EACT,SAAS;EACT,IAAI,cAAc,KACd;GACE,MAAM,cAAc,GAAG;GACvB,KAAK,cAAc,GAAG;GACtB,OAAO,cAAc,GAAG;GACxB,WAAW,cAAc,GAAG;GAC7B,GACD;EACJ,KAAK,cAAc,MACf;GACE,MAAM,cAAc,IAAI;GACxB,KAAK,cAAc,IAAI;GACvB,OAAO,cAAc,IAAI;GACzB,WAAW,cAAc,IAAI;GAC9B,GACD;EACJ,SAAS,cAAc,UACnB,OAAO,YACL,OAAO,QAAQ,cAAc,QAAQ,CAAC,KAAK,CAAC,KAAK,YAAY,CAC3D,KACA;GACE,MAAM,OAAO;GACb,KAAK,OAAO;GACZ,OAAO,OAAO;GACd,WAAW,OAAO;GACnB,CACF,CAAC,CACH,GACD;EACL;;AAGH,SAAS,mBAAmB,eAAoC,OAAuB;CACrF,MAAM,YAAY,+BAA+B,KAAK,UAAU,cAAc,CAAC;CAC/E,MAAM,cAAc,QAChB,gDAAgD,WAAW,MAAM,CAAC,QAClE;CAEJ,MAAM,cAAc,cAAc,IAAI;CACtC,MAAM,UAAU,cAAc,eAAe,YAAY,6BAA6B;AAEtF,QAAO;;;;;;;;;;;;MAYH,cAAc,YAAY,gBAAgB,cAAc,UAAU,kBAAkB,QAAQ,eAAc,GAAG;cACrG,UAAU;;;kCAGU,YAAY;;;;;AAM9C,SAAS,WAAW,OAAe;AACjC,QAAO,MACJ,WAAW,KAAK,QAAQ,CACxB,WAAW,KAAK,OAAO,CACvB,WAAW,KAAK,OAAO,CACvB,WAAW,MAAK,SAAS,CACzB,WAAW,KAAK,QAAQ;;AAG7B,SAAgB,iBAAiB,QAA4C;CAC3E,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,EAAE,kBAAkB;CAE1B,IAAI,eAA6C;CAEjD,MAAM,SAAS,YAAY;AAEzB,kBADgB,MAAM,cAAc;GAAE;GAAe;GAAM,CAAC,EACrC;KACrB;CAEJ,MAAM,WAAW,YAAY;AAC3B,UAAQ,IAAI,0BAA0B;EACtC,MAAM,UAAU,iBAAiB;AAC/B,WAAQ,IAAI,oBAAoB;AAChC,WAAQ,KAAK,EAAE;KACd,IAAK;AACR,QAAM,MAAM,YAAY,GAAG;AAC3B,MAAI,aACF,OAAM,cAAc,CAAC,YAAY,GAAG;AAEtC,eAAa,QAAQ;AACrB,UAAQ,IAAI,2BAA2B;;AAGzC,QAAO;EAAE;EAAO;EAAU;;AAG5B,eAAe,cAAc,MAGkB;CAC7C,MAAM,EAAE,eAAe,SAAS;CAEhC,IAAI,aAAmC,EAAE;CACzC,IAAI,gBAA2C;CAC/C,IAAI,iBAAgC;CACpC,IAAI,mBAA+D;CACnE,IAAI,kBAAuC;CAC3C,IAAI,iBAAgC;CACpC,IAAI,mBAAwD;CAC5D,IAAI,aAAqC;CACzC,IAAI,iBAA6C;CAEjD,MAAM,sBAAsB,yBAAyB,cAAc;CAEnE,MAAM,wBAAwB;EAE5B,MAAM,iBAAiBA,iCADJ,eAAe,UAAU,EAAE,EAG5C,WAAW,QAAQ,WAAW,OAAO,QAAQ,MAAM,CACpD;AAED,MAAI,CAAC,eAAe;AAClB,gBAAa;AACb,oBAAiB;AACjB;;AAGF,eAAa,IAAIC,8BAAW,gBAAuB,EACjD,SAAS,CAAC,IAAIC,yCAAoB,CAAC,EACpC,CAAC;AACF,mBAAiB,IAAIC,mCAAe,gBAAuB,EACzD,SAAS,CACP,IAAIC,6CAAuB,EACzB,kBAAkB,CAAC,IAAIC,yCAA0B,CAAC,EACnD,CAAC,CACH,EACF,CAAC;;CAGJ,MAAM,wBAAwB,YAAiD;AAC7E,MAAI,WAAW,SAAS,EAAG,QAAO;GAAE,MAAM;GAAe,SAAS;GAAY,QAAQ,EAAE;GAAE;AAC1F,MAAI,CAAC,cAAc,IAAK,QAAO;AAC/B,MAAI,iBAAkB,QAAO;AAE7B,qBAAmBC,4CAAgC,eAAe,QAAQ,IAAW,CAClF,MAAM,WAAW;AAChB,OAAI,QAAQ;AACV,iBAAa,OAAO;AACpB,oBAAgB,OAAO;AACvB,qBACE,OAAO,OAAO,SAAS,IAAI,OAAO,OAAO,KAAK,SAAS,KAAK,MAAM,CAAC,KAAK,KAAK,GAAG;AAClF,qBAAiB;;AAEnB,UAAO;IACP,CACD,OAAO,MAAM;AACZ,oBAAiB,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC3D,UAAO;IACP,CACD,cAAc;AACb,sBAAmB;IACnB;AAEJ,SAAO;;CAGT,MAAM,2BAA2B,YAA0C;AACzE,MAAI,gBACF,QAAO;AAGT,MAAI,iBACF,QAAO;AAGT,qBAAmBC,2CAAiB,cAAc,CAC/C,MAAM,iBAAiB;AACtB,qBAAkB;AAClB,oBAAiB;AACjB,UAAO;IACP,CACD,OAAO,UAAU;AAChB,oBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACvE,UAAO;IACP,CACD,cAAc;AACb,sBAAmB;IACnB;AAEJ,SAAO;;AAKT,CAAK,uBAAuB;AAC5B,CAAK,0BAA0B;CAE/B,MAAM,MAAM,IAAIC,WAAM;CAEtB,MAAM,cAAc,QAAQ,IAAI,aAAa,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,IAAI,CAC9E,cAAc,SACd,GAAI,cAAc,IAAI,MAAM,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CACxD;AAED,KAAI,CAAC,QAAQ,IAAI,eAAe,cAAc,QAAQ,aACpD,SAAQ,KACN,8FACD;AAGH,KAAI,IACF,0BACK;EACH,QAAQ;EACR,aAAa;EACd,CAAC,CACH;AAED,KAAI,IAAI,4CAAmB,EAAE,yBAAyB,4BAA4B,CAAC,CAAC;AAEpF,KAAI,IAAI,YAAY,MAAM,EAAE,KAAK,KAAK,CAAC;AACvC,KAAI,IAAI,UAAU,OAAO,MAAM;EAW7B,MAAM,QAAQ,OAAO,KAAa,YAAY,QAAwB;GACpE,MAAM,UAAU,KAAK,KAAK;GAC1B,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;AAC7D,OAAI;IACF,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;AAC3D,WAAO;KACL,MAAM;KACN;KACA,UAAU;KACV,IAAI,IAAI;KACR,QAAQ,IAAI;KACZ,WAAW,KAAK,KAAK,GAAG;KACzB;YACM,GAAG;AACV,WAAO;KACL,MAAM;KACN;KACA,UAAU;KACV,IAAI;KACJ,WAAW,KAAK,KAAK,GAAG;KACxB,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;KAClD;aACO;AACR,iBAAa,MAAM;;;EAIvB,MAAM,SAAkB,EAAE;AAE1B,MAAI,cAAc,IAAI,KAAK;GACzB,MAAM,OAAO,cAAc,GAAG,IAAI,QAAQ,OAAO,GAAG;GACpD,MAAM,WAAW,MAAM,MAAM,GAAG,KAAK,mBAAmB;AACxD,YAAS,OAAO;AAGhB,YAAS,WAAW;AACpB,UAAO,KAAK,SAAS;AACrB,OAAI,CAAC,SAAS,IAAI;IAChB,MAAM,cAAc,MAAM,MAAM,GAAG,KAAK,iBAAiB;AACzD,gBAAY,OAAO;AACnB,gBAAY,WAAW;AACvB,WAAO,KAAK,YAAY;SAExB,UAAS,WAAW;;AAIxB,MAAI,cAAc,IAAI,QAAQ;GAE5B,MAAM,MAAM,MAAM,MAAM,GADX,cAAc,GAAG,OAAO,QAAQ,OAAO,GAAG,CACvB,GAAG;AACnC,OAAI,OAAO;AACX,OAAI,WAAW;AACf,UAAO,KAAK,IAAI;;AAGlB,MAAI,cAAc,KAAK,KAAK;GAE1B,MAAM,MAAM,MAAM,MAAM,GADX,cAAc,IAAI,IAAI,QAAQ,OAAO,GAAG,CACrB,GAAG;AACnC,OAAI,OAAO;AACX,OAAI,WAAW;AACf,UAAO,KAAK,IAAI;;AAGlB,MAAI,cAAc,KAAK;AACrB,UAAO,KAAK;IACV,MAAM;IACN,KAAK,cAAc,IAAI;IACvB,UAAU;IACV,IAAI,kBAAkB;IACtB,QAAQ,kBAAkB,OAAO,MAAM;IACvC,OACE,kBAAkB,OACd,SACA,mBACE,YACC,kBAAkB;IAC5B,CAAC;AACF,OAAI,CAAC,iBAAiB,CAAC,iBACrB,CAAK,uBAAuB;;AAIhC,OAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,WAAW,EAAE,CAAC,EAAE;GACvE,MAAM,SAAS,WAAW,MAAM,SAAS,KAAK,QAAQ,IAAI;AAC1D,UAAO,KAAK;IACV,MAAM;IACN,KAAK,OAAO;IACZ,UAAU;IACV,IAAI,QAAQ,OAAO;IACnB,QAAQ,SAAS,MAAM;IACvB,OAAO,SAAS,SAAa,kBAAkB;IAChD,CAAC;;EAGJ,MAAM,gBAAgB,OAAO,QAAQ,MAAM,EAAE,SAAS,CAAC,OAAO,MAAM,EAAE,GAAG;AAEzE,SAAO,EAAE,KACP;GACE,QAAQ,gBAAgB,UAAU;GAClC,MAAM;IACJ,KAAK,cAAc;IACnB,KAAK,cAAc;IACpB;GACD;GACA,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,EACD,gBAAgB,MAAM,IACvB;GACD;AACF,KAAI,IAAI,iBAAiB,MACvB,EAAE,KAAK;EACL,QAAQ;EACR,MAAM,cAAc;EACpB,IAAI,cAAc,IAAI,OAAO;EAC7B,OAAO,cAAc,IAAI,UAAU;EACnC,iBAAiB,oBAAoB;EACrC,kBAAkB,qBAAqB;EACvC;EACA,KAAK,cAAc,KAAK,OAAO;EAC/B,iBAAiB,kBAAkB;EACnC,kBAAkB,qBAAqB;EACvC;EACD,CAAC,CACH;AAED,KAAI,IAAI,cAAc,OAAO,MAAM;AACjC,MAAI,CAAC,WACH,OAAM,uBAAuB;AAE/B,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,OAAO;GAAyB,QAAQ;GAAgB,EAAE,IAAI;EAEhF,MAAM,SAAS,MAAM,WAAW,OAAO,EAAE,IAAI,KAAK;GAChD,QAAQ;GACR,SAAS,EAAE;GACZ,CAAC;AACF,SAAO,OAAO,WACV,EAAE,YAAY,OAAO,SAAS,MAAM,OAAO,SAAS,GACpD,EAAE,KAAK,aAAa,IAAI;GAC5B;AAEF,KAAI,IAAI,UAAU,OAAO,MAAM;AAC7B,MAAI,CAAC,eACH,OAAM,uBAAuB;AAE/B,MAAI,CAAC,eACH,QAAO,EAAE,KAAK;GAAE,OAAO;GAAyB,QAAQ;GAAgB,EAAE,IAAI;EAEhF,MAAM,SAAS,MAAM,eAAe,OAAO,EAAE,IAAI,KAAK;GACpD,QAAQ;GACR,SAAS,EAAE;GACZ,CAAC;AACF,SAAO,OAAO,WACV,EAAE,YAAY,OAAO,SAAS,MAAM,OAAO,SAAS,GACpD,EAAE,KAAK,aAAa,IAAI;GAC5B;AAEF,KAAI,cAAc,IAAI;AACpB,MAAI,IAAI,cAAc,OAAO,MAAM;GACjC,MAAM,YAAY,GAAG,cAAc,GAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,YAAY,GAAG;AAK/E,UAJiB,MAAM,MAAM,WAAW;IACtC,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI,QAAQ;IACxB,CAAC;IAEF;AAEF,MAAI,cAAc,GAAG,OACnB,KAAI,IAAI,kBAAkB,OAAO,MAAM;GACrC,MAAM,YAAY,GAAG,cAAc,GAAI,SAAS,EAAE,IAAI,KAAK,QAAQ,gBAAgB,GAAG;AAKtF,UAJiB,MAAM,MAAM,WAAW;IACtC,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI,QAAQ;IACxB,CAAC;IAEF;;AAIN,KAAI,IAAI,KAAK,OAAO,MAAM;EACxB,MAAM,eAAe,MAAM,0BAA0B;AAErD,MAAI,CAAC,aACH,QAAO,EAAE,KAAK,mBAAmB,qBAAqB,eAAe,EAAE,IAAI;AAG7E,MAAI;GACF,MAAM,YAAY,eAAe,cAAc;GAE/C,MAAM,SAAS,MAAM,aAAa,eAAe,EAAE,IAAI,KAAK;IAC1D,WAAW,cAAc,GAAG;IAC5B,eAAe;IACf;IACD,CAAC;AAEF,UAAO,IAAI,SAAS,OAAO,QAAQ;IACjC,QAAQ,OAAO;IACf,SAAS,OAAO;IACjB,CAAC;WACK,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAO,EAAE,KAAK,mBAAmB,qBAAqB,QAAQ,EAAE,IAAI;;GAEtE;CAEF,MAAM,WAAW,QAAQ,IAAI,QAAQ;CACrC,IAAI,eAAoC;CACxC,MAAM,QAAQ,IAAI,SAAe,YAAY;AAC3C,iBAAe;GACf;CAEF,MAAM,gBAAgB,QAA+C;EACnE,MAAM,MAAM,IAAI,IAAI,IAAI,IAAI;EAC5B,MAAM,iBAAiB,IAAI,QAAQ,IAAI,oBAAoB;EAC3D,MAAM,gBAAgB,IAAI,QAAQ,IAAI,mBAAmB;AAEzD,MAAI,eACF,KAAI,WAAW;AAEjB,MAAI,cACF,KAAI,OAAO;AAGb,MAAI,kBAAkB,cACpB,OAAM,IAAI,QAAQ,KAAK,IAAI;AAG7B,SAAO,IAAI,MAAM,IAAI;;CAGvB,MAAM,sCAAe;EAAE,OAAO;EAAc;EAAM;EAAU,GAAG,SAAS;AACtE,UAAQ,IAAI,mCAAmC,SAAS,GAAG,KAAK,OAAO;AACvE,UAAQ,IAAI,sBAAsB,SAAS,GAAG,KAAK,KAAK,UAAU;AAClE,kBAAgB;GAChB;AAEF,OAAM;AAEN,QAAO,EACL,gBACE,IAAI,SAAe,YAAY;AAC7B,MAAI;AACF,UAAO,YAAY,SAAS,CAAC;UACvB;AACN,YAAS;;GAEX,EACL"}

package/dist/host.mjs

@@ -165,7 +165,7 @@ async function runHostServer(opts) {
 		origin: corsOrigins,
 		credentials: true
 	}));
-	app.use("*", secureHeaders());
+	app.use("*", secureHeaders({ crossOriginOpenerPolicy: "same-origin-allow-popups" }));
 	app.get("/health", (c) => c.text("OK"));
 	app.get("/ready", async (c) => {
 		const probe = async (url, timeoutMs = 400) => {

package/dist/host.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"host.mjs","names":[],"sources":["../src/host.ts"],"sourcesContent":["import { serve } from \"@hono/node-server\";\nimport { OpenAPIHandler } from \"@orpc/openapi/fetch\";\nimport { OpenAPIReferencePlugin } from \"@orpc/openapi/plugins\";\nimport { RPCHandler } from \"@orpc/server/fetch\";\nimport { BatchHandlerPlugin } from \"@orpc/server/plugins\";\nimport { ZodToJsonSchemaConverter } from \"@orpc/zod/zod4\";\nimport { Hono } from \"hono\";\nimport { cors } from \"hono/cors\";\nimport { secureHeaders } from \"hono/secure-headers\";\nimport {\n  createStitchedRouter,\n  type LoadedPluginResult,\n  type LoadedPluginsResult,\n  loadApiPluginsFromRuntimeConfig,\n} from \"./api\";\nimport { loadRouterModule, type RouterModule } from \"./federation.server\";\nimport type { ClientRuntimeConfig, RuntimeConfig } from \"./types\";\n\nexport interface HostServerConfig {\n  runtimeConfig: RuntimeConfig;\n  configDir: string;\n  port?: number;\n}\n\nexport interface HostServerHandle {\n  ready: Promise<void>;\n  shutdown: () => Promise<void>;\n}\n\nfunction buildClientRuntimeConfig(runtimeConfig: RuntimeConfig): ClientRuntimeConfig {\n  return {\n    env: runtimeConfig.env,\n    account: runtimeConfig.account,\n    networkId: runtimeConfig.networkId,\n    hostUrl: runtimeConfig.hostUrl,\n    assetsUrl: runtimeConfig.ui.url,\n    apiBase: \"/api\",\n    rpcBase: \"/api/rpc\",\n    ui: runtimeConfig.ui\n      ? {\n          name: runtimeConfig.ui.name,\n          url: runtimeConfig.ui.url,\n          entry: runtimeConfig.ui.entry,\n          integrity: runtimeConfig.ui.integrity,\n        }\n      : undefined,\n    api: runtimeConfig.api\n      ? {\n          name: runtimeConfig.api.name,\n          url: runtimeConfig.api.url,\n          entry: runtimeConfig.api.entry,\n          integrity: runtimeConfig.api.integrity,\n        }\n      : undefined,\n    plugins: runtimeConfig.plugins\n      ? Object.fromEntries(\n          Object.entries(runtimeConfig.plugins).map(([key, plugin]) => [\n            key,\n            {\n              name: plugin.name,\n              url: plugin.url,\n              entry: plugin.entry,\n              integrity: plugin.integrity,\n            },\n          ]),\n        )\n      : undefined,\n  };\n}\n\nfunction renderLoadingShell(runtimeConfig: ClientRuntimeConfig, error?: string | null) {\n  const bootstrap = `window.__RUNTIME_CONFIG__ = ${JSON.stringify(runtimeConfig)};window.addEventListener('load', function handleEverythingDevHydrate() { window.__hydrate?.(); }, { once: true });`;\n  const errorMarkup = error\n    ? `<p style=\"color: #fca5a5;\">Error loading UI: ${escapeHtml(error)}</p>`\n    : \"<p>Loading UI...</p>\";\n\n  const uiIntegrity = runtimeConfig.ui?.integrity;\n  const sriAttr = uiIntegrity ? ` integrity=\"${uiIntegrity}\" crossorigin=\"anonymous\"` : \"\";\n\n  return `\n\t\t<!DOCTYPE html>\n\t\t<html lang=\"en\">\n\t\t\t<head>\n\t\t\t\t<meta charset=\"utf-8\" />\n\t\t\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n\t\t\t\t<title>Loading...</title>\n\t\t\t\t<style>\n\t\t\t\t\tbody { background: #171717; color: #fafafa; display: flex; align-items: center; justify-content: center; height: 100vh; font-family: system-ui; }\n\t\t\t\t\t.fade { animation: fadeIn 0.3s ease-in; text-align: center; padding: 2rem; }\n\t\t\t\t\t@keyframes fadeIn { from { opacity: 0; } to { opacity: 1; } }\n\t\t\t\t</style>\n\t\t\t\t${runtimeConfig.assetsUrl ? `<script src=\"${runtimeConfig.assetsUrl}/remoteEntry.js\"${sriAttr}></script>` : \"\"}\n\t\t\t\t<script>${bootstrap}</script>\n\t\t\t</head>\n\t\t\t<body>\n\t\t\t\t<div id=\"root\" class=\"fade\">${errorMarkup}</div>\n\t\t\t</body>\n\t\t</html>\n\t`;\n}\n\nfunction escapeHtml(value: string) {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"'\", \"&#39;\");\n}\n\nexport function createHostServer(config: HostServerConfig): HostServerHandle {\n  const port = config.port ?? 3000;\n  const { runtimeConfig } = config;\n\n  let shutdownImpl: (() => Promise<void>) | null = null;\n\n  const ready = (async () => {\n    const started = await runHostServer({ runtimeConfig, port });\n    shutdownImpl = started.shutdown;\n  })();\n\n  const shutdown = async () => {\n    console.log(\"[Host] Shutting down...\");\n    const timeout = setTimeout(() => {\n      console.log(\"[Host] Force exit\");\n      process.exit(0);\n    }, 5000);\n    await ready.catch(() => {});\n    if (shutdownImpl) {\n      await shutdownImpl().catch(() => {});\n    }\n    clearTimeout(timeout);\n    console.log(\"[Host] Shutdown complete\");\n  };\n\n  return { ready, shutdown };\n}\n\nasync function runHostServer(opts: {\n  runtimeConfig: RuntimeConfig;\n  port: number;\n}): Promise<{ shutdown: () => Promise<void> }> {\n  const { runtimeConfig, port } = opts;\n\n  let apiPlugins: LoadedPluginResult[] = [];\n  let baseApiPlugin: LoadedPluginResult | null = null;\n  let apiPluginError: string | null = null;\n  let apiPluginLoading: Promise<LoadedPluginsResult | null> | null = null;\n  let ssrRouterModule: RouterModule | null = null;\n  let ssrRouterError: string | null = null;\n  let ssrRouterLoading: Promise<RouterModule | null> | null = null;\n  let rpcHandler: RPCHandler<any> | null = null;\n  let openApiHandler: OpenAPIHandler<any> | null = null;\n\n  const clientRuntimeConfig = buildClientRuntimeConfig(runtimeConfig);\n\n  const initApiHandlers = () => {\n    const baseRouter = baseApiPlugin?.router ?? {};\n    const stitchedRouter = createStitchedRouter(\n      baseRouter,\n      apiPlugins.filter((plugin) => plugin.key !== \"api\"),\n    );\n\n    if (!baseApiPlugin) {\n      rpcHandler = null;\n      openApiHandler = null;\n      return;\n    }\n\n    rpcHandler = new RPCHandler(stitchedRouter as any, {\n      plugins: [new BatchHandlerPlugin()],\n    });\n    openApiHandler = new OpenAPIHandler(stitchedRouter as any, {\n      plugins: [\n        new OpenAPIReferencePlugin({\n          schemaConverters: [new ZodToJsonSchemaConverter()],\n        }),\n      ],\n    });\n  };\n\n  const ensureApiPluginLoaded = async (): Promise<LoadedPluginsResult | null> => {\n    if (apiPlugins.length > 0) return { base: baseApiPlugin, plugins: apiPlugins, errors: [] };\n    if (!runtimeConfig.api) return null;\n    if (apiPluginLoading) return apiPluginLoading;\n\n    apiPluginLoading = loadApiPluginsFromRuntimeConfig(runtimeConfig, process.env as any)\n      .then((loaded) => {\n        if (loaded) {\n          apiPlugins = loaded.plugins;\n          baseApiPlugin = loaded.base;\n          apiPluginError =\n            loaded.errors.length > 0 ? loaded.errors.map((item) => item.error).join(\"; \") : null;\n          initApiHandlers();\n        }\n        return loaded;\n      })\n      .catch((e) => {\n        apiPluginError = e instanceof Error ? e.message : String(e);\n        return null;\n      })\n      .finally(() => {\n        apiPluginLoading = null;\n      });\n\n    return apiPluginLoading;\n  };\n\n  const ensureRouterModuleLoaded = async (): Promise<RouterModule | null> => {\n    if (ssrRouterModule) {\n      return ssrRouterModule;\n    }\n\n    if (ssrRouterLoading) {\n      return ssrRouterLoading;\n    }\n\n    ssrRouterLoading = loadRouterModule(runtimeConfig)\n      .then((routerModule) => {\n        ssrRouterModule = routerModule;\n        ssrRouterError = null;\n        return routerModule;\n      })\n      .catch((error) => {\n        ssrRouterError = error instanceof Error ? error.message : String(error);\n        return null;\n      })\n      .finally(() => {\n        ssrRouterLoading = null;\n      });\n\n    return ssrRouterLoading;\n  };\n\n  // Kick off API plugin load in the background; host should still start even if\n  // the remote isn't ready yet.\n  void ensureApiPluginLoaded();\n  void ensureRouterModuleLoaded();\n\n  const app = new Hono();\n\n  const corsOrigins = process.env.CORS_ORIGIN?.split(\",\").map((o) => o.trim()) ?? [\n    runtimeConfig.hostUrl,\n    ...(runtimeConfig.ui?.url ? [runtimeConfig.ui.url] : []),\n  ];\n\n  if (!process.env.CORS_ORIGIN && runtimeConfig.env === \"production\") {\n    console.warn(\n      \"[Security] CORS_ORIGIN is not set in production. Using host and UI URLs as allowed origins.\",\n    );\n  }\n\n  app.use(\n    \"/*\",\n    cors({\n      origin: corsOrigins,\n      credentials: true,\n    }),\n  );\n\n  app.use(\"*\", secureHeaders());\n\n  app.get(\"/health\", (c) => c.text(\"OK\"));\n  app.get(\"/ready\", async (c) => {\n    type Check = {\n      name: string;\n      url: string;\n      required: boolean;\n      ok: boolean;\n      status?: number;\n      latencyMs?: number;\n      error?: string;\n    };\n\n    const probe = async (url: string, timeoutMs = 400): Promise<Check> => {\n      const started = Date.now();\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), timeoutMs);\n      try {\n        const res = await fetch(url, { signal: controller.signal });\n        return {\n          name: \"\",\n          url,\n          required: true,\n          ok: res.ok,\n          status: res.status,\n          latencyMs: Date.now() - started,\n        };\n      } catch (e) {\n        return {\n          name: \"\",\n          url,\n          required: true,\n          ok: false,\n          latencyMs: Date.now() - started,\n          error: e instanceof Error ? e.message : String(e),\n        };\n      } finally {\n        clearTimeout(timer);\n      }\n    };\n\n    const checks: Check[] = [];\n\n    if (runtimeConfig.ui?.url) {\n      const base = runtimeConfig.ui.url.replace(/\\/$/, \"\");\n      const manifest = await probe(`${base}/mf-manifest.json`);\n      manifest.name = \"ui\";\n      // mf-manifest.json is preferred but not always present; fall back to\n      // remoteEntry.js for readiness.\n      manifest.required = false;\n      checks.push(manifest);\n      if (!manifest.ok) {\n        const remoteEntry = await probe(`${base}/remoteEntry.js`);\n        remoteEntry.name = \"ui\";\n        remoteEntry.required = true;\n        checks.push(remoteEntry);\n      } else {\n        manifest.required = true;\n      }\n    }\n\n    if (runtimeConfig.ui?.ssrUrl) {\n      const base = runtimeConfig.ui.ssrUrl.replace(/\\/$/, \"\");\n      const ssr = await probe(`${base}/`);\n      ssr.name = \"ui-ssr\";\n      ssr.required = false;\n      checks.push(ssr);\n    }\n\n    if (runtimeConfig.api?.url) {\n      const base = runtimeConfig.api.url.replace(/\\/$/, \"\");\n      const api = await probe(`${base}/`);\n      api.name = \"api\";\n      api.required = true;\n      checks.push(api);\n    }\n\n    if (runtimeConfig.api) {\n      checks.push({\n        name: \"api-plugin\",\n        url: runtimeConfig.api.entry,\n        required: true,\n        ok: baseApiPlugin !== null,\n        status: baseApiPlugin !== null ? 200 : 503,\n        error:\n          baseApiPlugin !== null\n            ? undefined\n            : apiPluginLoading\n              ? \"loading\"\n              : (apiPluginError ?? \"not loaded\"),\n      });\n      if (!baseApiPlugin && !apiPluginLoading) {\n        void ensureApiPluginLoaded();\n      }\n    }\n\n    for (const [key, plugin] of Object.entries(runtimeConfig.plugins ?? {})) {\n      const loaded = apiPlugins.find((item) => item.key === key);\n      checks.push({\n        name: key,\n        url: plugin.entry,\n        required: true,\n        ok: Boolean(loaded),\n        status: loaded ? 200 : 503,\n        error: loaded ? undefined : (apiPluginError ?? \"not loaded\"),\n      });\n    }\n\n    const allRequiredOk = checks.filter((x) => x.required).every((x) => x.ok);\n\n    return c.json(\n      {\n        status: allRequiredOk ? \"ready\" : \"not_ready\",\n        host: {\n          url: runtimeConfig.hostUrl,\n          env: runtimeConfig.env,\n        },\n        checks,\n        timestamp: new Date().toISOString(),\n      },\n      allRequiredOk ? 200 : 503,\n    );\n  });\n  app.get(\"/api/_health\", (c) =>\n    c.json({\n      status: \"ready\",\n      mode: runtimeConfig.env,\n      ui: runtimeConfig.ui?.url ?? null,\n      uiSsr: runtimeConfig.ui?.ssrUrl ?? null,\n      ssrRouterLoaded: ssrRouterModule !== null,\n      ssrRouterLoading: ssrRouterLoading !== null,\n      ssrRouterError,\n      api: runtimeConfig.api?.url ?? null,\n      apiPluginLoaded: baseApiPlugin !== null,\n      apiPluginLoading: apiPluginLoading !== null,\n      apiPluginError,\n    }),\n  );\n\n  app.all(\"/api/rpc/*\", async (c) => {\n    if (!rpcHandler) {\n      await ensureApiPluginLoaded();\n    }\n    if (!rpcHandler) {\n      return c.json({ error: \"API plugin not loaded\", detail: apiPluginError }, 503);\n    }\n    const result = await rpcHandler.handle(c.req.raw, {\n      prefix: \"/api/rpc\",\n      context: {},\n    });\n    return result.response\n      ? c.newResponse(result.response.body, result.response)\n      : c.text(\"Not Found\", 404);\n  });\n\n  app.all(\"/api/*\", async (c) => {\n    if (!openApiHandler) {\n      await ensureApiPluginLoaded();\n    }\n    if (!openApiHandler) {\n      return c.json({ error: \"API plugin not loaded\", detail: apiPluginError }, 503);\n    }\n    const result = await openApiHandler.handle(c.req.raw, {\n      prefix: \"/api\",\n      context: {},\n    });\n    return result.response\n      ? c.newResponse(result.response.body, result.response)\n      : c.text(\"Not Found\", 404);\n  });\n\n  if (runtimeConfig.ui) {\n    app.all(\"/__mf/ui/*\", async (c) => {\n      const targetUrl = `${runtimeConfig.ui!.url}${c.req.path.replace(\"/__mf/ui\", \"\")}`;\n      const response = await fetch(targetUrl, {\n        method: c.req.method,\n        headers: c.req.header(),\n      });\n      return response;\n    });\n\n    if (runtimeConfig.ui.ssrUrl) {\n      app.all(\"/__mf/ui/ssr/*\", async (c) => {\n        const targetUrl = `${runtimeConfig.ui!.ssrUrl}${c.req.path.replace(\"/__mf/ui/ssr\", \"\")}`;\n        const response = await fetch(targetUrl, {\n          method: c.req.method,\n          headers: c.req.header(),\n        });\n        return response;\n      });\n    }\n  }\n\n  app.get(\"*\", async (c) => {\n    const routerModule = await ensureRouterModuleLoaded();\n\n    if (!routerModule) {\n      return c.html(renderLoadingShell(clientRuntimeConfig, ssrRouterError), 503);\n    }\n\n    try {\n      const apiClient = baseApiPlugin?.createClient();\n\n      const result = await routerModule.renderToStream(c.req.raw, {\n        assetsUrl: runtimeConfig.ui.url,\n        runtimeConfig: clientRuntimeConfig,\n        apiClient,\n      });\n\n      return new Response(result.stream, {\n        status: result.statusCode,\n        headers: result.headers,\n      });\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      return c.html(renderLoadingShell(clientRuntimeConfig, message), 500);\n    }\n  });\n\n  const hostname = process.env.HOST ?? \"0.0.0.0\";\n  let resolveReady: (() => void) | null = null;\n  const ready = new Promise<void>((resolve) => {\n    resolveReady = resolve;\n  });\n\n  const proxiedFetch = (req: Request): Response | Promise<Response> => {\n    const url = new URL(req.url);\n    const forwardedProto = req.headers.get(\"x-forwarded-proto\");\n    const forwardedHost = req.headers.get(\"x-forwarded-host\");\n\n    if (forwardedProto) {\n      url.protocol = forwardedProto;\n    }\n    if (forwardedHost) {\n      url.host = forwardedHost;\n    }\n\n    if (forwardedProto || forwardedHost) {\n      req = new Request(url, req);\n    }\n\n    return app.fetch(req);\n  };\n\n  const server = serve({ fetch: proxiedFetch, port, hostname }, (info) => {\n    console.log(`[Host] Server running at http://${hostname}:${info.port}`);\n    console.log(`[Host] API: http://${hostname}:${info.port}/api/rpc`);\n    resolveReady?.();\n  });\n\n  await ready;\n\n  return {\n    shutdown: () =>\n      new Promise<void>((resolve) => {\n        try {\n          server.close(() => resolve());\n        } catch {\n          resolve();\n        }\n      }),\n  };\n}\n\nexport { runHostServer };\n"],"mappings":";;;;;;;;;;;;;AA6BA,SAAS,yBAAyB,eAAmD;AACnF,QAAO;EACL,KAAK,cAAc;EACnB,SAAS,cAAc;EACvB,WAAW,cAAc;EACzB,SAAS,cAAc;EACvB,WAAW,cAAc,GAAG;EAC5B,SAAS;EACT,SAAS;EACT,IAAI,cAAc,KACd;GACE,MAAM,cAAc,GAAG;GACvB,KAAK,cAAc,GAAG;GACtB,OAAO,cAAc,GAAG;GACxB,WAAW,cAAc,GAAG;GAC7B,GACD;EACJ,KAAK,cAAc,MACf;GACE,MAAM,cAAc,IAAI;GACxB,KAAK,cAAc,IAAI;GACvB,OAAO,cAAc,IAAI;GACzB,WAAW,cAAc,IAAI;GAC9B,GACD;EACJ,SAAS,cAAc,UACnB,OAAO,YACL,OAAO,QAAQ,cAAc,QAAQ,CAAC,KAAK,CAAC,KAAK,YAAY,CAC3D,KACA;GACE,MAAM,OAAO;GACb,KAAK,OAAO;GACZ,OAAO,OAAO;GACd,WAAW,OAAO;GACnB,CACF,CAAC,CACH,GACD;EACL;;AAGH,SAAS,mBAAmB,eAAoC,OAAuB;CACrF,MAAM,YAAY,+BAA+B,KAAK,UAAU,cAAc,CAAC;CAC/E,MAAM,cAAc,QAChB,gDAAgD,WAAW,MAAM,CAAC,QAClE;CAEJ,MAAM,cAAc,cAAc,IAAI;CACtC,MAAM,UAAU,cAAc,eAAe,YAAY,6BAA6B;AAEtF,QAAO;;;;;;;;;;;;MAYH,cAAc,YAAY,gBAAgB,cAAc,UAAU,kBAAkB,QAAQ,eAAc,GAAG;cACrG,UAAU;;;kCAGU,YAAY;;;;;AAM9C,SAAS,WAAW,OAAe;AACjC,QAAO,MACJ,WAAW,KAAK,QAAQ,CACxB,WAAW,KAAK,OAAO,CACvB,WAAW,KAAK,OAAO,CACvB,WAAW,MAAK,SAAS,CACzB,WAAW,KAAK,QAAQ;;AAG7B,SAAgB,iBAAiB,QAA4C;CAC3E,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,EAAE,kBAAkB;CAE1B,IAAI,eAA6C;CAEjD,MAAM,SAAS,YAAY;AAEzB,kBADgB,MAAM,cAAc;GAAE;GAAe;GAAM,CAAC,EACrC;KACrB;CAEJ,MAAM,WAAW,YAAY;AAC3B,UAAQ,IAAI,0BAA0B;EACtC,MAAM,UAAU,iBAAiB;AAC/B,WAAQ,IAAI,oBAAoB;AAChC,WAAQ,KAAK,EAAE;KACd,IAAK;AACR,QAAM,MAAM,YAAY,GAAG;AAC3B,MAAI,aACF,OAAM,cAAc,CAAC,YAAY,GAAG;AAEtC,eAAa,QAAQ;AACrB,UAAQ,IAAI,2BAA2B;;AAGzC,QAAO;EAAE;EAAO;EAAU;;AAG5B,eAAe,cAAc,MAGkB;CAC7C,MAAM,EAAE,eAAe,SAAS;CAEhC,IAAI,aAAmC,EAAE;CACzC,IAAI,gBAA2C;CAC/C,IAAI,iBAAgC;CACpC,IAAI,mBAA+D;CACnE,IAAI,kBAAuC;CAC3C,IAAI,iBAAgC;CACpC,IAAI,mBAAwD;CAC5D,IAAI,aAAqC;CACzC,IAAI,iBAA6C;CAEjD,MAAM,sBAAsB,yBAAyB,cAAc;CAEnE,MAAM,wBAAwB;EAE5B,MAAM,iBAAiB,qBADJ,eAAe,UAAU,EAAE,EAG5C,WAAW,QAAQ,WAAW,OAAO,QAAQ,MAAM,CACpD;AAED,MAAI,CAAC,eAAe;AAClB,gBAAa;AACb,oBAAiB;AACjB;;AAGF,eAAa,IAAI,WAAW,gBAAuB,EACjD,SAAS,CAAC,IAAI,oBAAoB,CAAC,EACpC,CAAC;AACF,mBAAiB,IAAI,eAAe,gBAAuB,EACzD,SAAS,CACP,IAAI,uBAAuB,EACzB,kBAAkB,CAAC,IAAI,0BAA0B,CAAC,EACnD,CAAC,CACH,EACF,CAAC;;CAGJ,MAAM,wBAAwB,YAAiD;AAC7E,MAAI,WAAW,SAAS,EAAG,QAAO;GAAE,MAAM;GAAe,SAAS;GAAY,QAAQ,EAAE;GAAE;AAC1F,MAAI,CAAC,cAAc,IAAK,QAAO;AAC/B,MAAI,iBAAkB,QAAO;AAE7B,qBAAmB,gCAAgC,eAAe,QAAQ,IAAW,CAClF,MAAM,WAAW;AAChB,OAAI,QAAQ;AACV,iBAAa,OAAO;AACpB,oBAAgB,OAAO;AACvB,qBACE,OAAO,OAAO,SAAS,IAAI,OAAO,OAAO,KAAK,SAAS,KAAK,MAAM,CAAC,KAAK,KAAK,GAAG;AAClF,qBAAiB;;AAEnB,UAAO;IACP,CACD,OAAO,MAAM;AACZ,oBAAiB,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC3D,UAAO;IACP,CACD,cAAc;AACb,sBAAmB;IACnB;AAEJ,SAAO;;CAGT,MAAM,2BAA2B,YAA0C;AACzE,MAAI,gBACF,QAAO;AAGT,MAAI,iBACF,QAAO;AAGT,qBAAmB,iBAAiB,cAAc,CAC/C,MAAM,iBAAiB;AACtB,qBAAkB;AAClB,oBAAiB;AACjB,UAAO;IACP,CACD,OAAO,UAAU;AAChB,oBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACvE,UAAO;IACP,CACD,cAAc;AACb,sBAAmB;IACnB;AAEJ,SAAO;;AAKT,CAAK,uBAAuB;AAC5B,CAAK,0BAA0B;CAE/B,MAAM,MAAM,IAAI,MAAM;CAEtB,MAAM,cAAc,QAAQ,IAAI,aAAa,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,IAAI,CAC9E,cAAc,SACd,GAAI,cAAc,IAAI,MAAM,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CACxD;AAED,KAAI,CAAC,QAAQ,IAAI,eAAe,cAAc,QAAQ,aACpD,SAAQ,KACN,8FACD;AAGH,KAAI,IACF,MACA,KAAK;EACH,QAAQ;EACR,aAAa;EACd,CAAC,CACH;AAED,KAAI,IAAI,KAAK,eAAe,CAAC;AAE7B,KAAI,IAAI,YAAY,MAAM,EAAE,KAAK,KAAK,CAAC;AACvC,KAAI,IAAI,UAAU,OAAO,MAAM;EAW7B,MAAM,QAAQ,OAAO,KAAa,YAAY,QAAwB;GACpE,MAAM,UAAU,KAAK,KAAK;GAC1B,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;AAC7D,OAAI;IACF,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;AAC3D,WAAO;KACL,MAAM;KACN;KACA,UAAU;KACV,IAAI,IAAI;KACR,QAAQ,IAAI;KACZ,WAAW,KAAK,KAAK,GAAG;KACzB;YACM,GAAG;AACV,WAAO;KACL,MAAM;KACN;KACA,UAAU;KACV,IAAI;KACJ,WAAW,KAAK,KAAK,GAAG;KACxB,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;KAClD;aACO;AACR,iBAAa,MAAM;;;EAIvB,MAAM,SAAkB,EAAE;AAE1B,MAAI,cAAc,IAAI,KAAK;GACzB,MAAM,OAAO,cAAc,GAAG,IAAI,QAAQ,OAAO,GAAG;GACpD,MAAM,WAAW,MAAM,MAAM,GAAG,KAAK,mBAAmB;AACxD,YAAS,OAAO;AAGhB,YAAS,WAAW;AACpB,UAAO,KAAK,SAAS;AACrB,OAAI,CAAC,SAAS,IAAI;IAChB,MAAM,cAAc,MAAM,MAAM,GAAG,KAAK,iBAAiB;AACzD,gBAAY,OAAO;AACnB,gBAAY,WAAW;AACvB,WAAO,KAAK,YAAY;SAExB,UAAS,WAAW;;AAIxB,MAAI,cAAc,IAAI,QAAQ;GAE5B,MAAM,MAAM,MAAM,MAAM,GADX,cAAc,GAAG,OAAO,QAAQ,OAAO,GAAG,CACvB,GAAG;AACnC,OAAI,OAAO;AACX,OAAI,WAAW;AACf,UAAO,KAAK,IAAI;;AAGlB,MAAI,cAAc,KAAK,KAAK;GAE1B,MAAM,MAAM,MAAM,MAAM,GADX,cAAc,IAAI,IAAI,QAAQ,OAAO,GAAG,CACrB,GAAG;AACnC,OAAI,OAAO;AACX,OAAI,WAAW;AACf,UAAO,KAAK,IAAI;;AAGlB,MAAI,cAAc,KAAK;AACrB,UAAO,KAAK;IACV,MAAM;IACN,KAAK,cAAc,IAAI;IACvB,UAAU;IACV,IAAI,kBAAkB;IACtB,QAAQ,kBAAkB,OAAO,MAAM;IACvC,OACE,kBAAkB,OACd,SACA,mBACE,YACC,kBAAkB;IAC5B,CAAC;AACF,OAAI,CAAC,iBAAiB,CAAC,iBACrB,CAAK,uBAAuB;;AAIhC,OAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,WAAW,EAAE,CAAC,EAAE;GACvE,MAAM,SAAS,WAAW,MAAM,SAAS,KAAK,QAAQ,IAAI;AAC1D,UAAO,KAAK;IACV,MAAM;IACN,KAAK,OAAO;IACZ,UAAU;IACV,IAAI,QAAQ,OAAO;IACnB,QAAQ,SAAS,MAAM;IACvB,OAAO,SAAS,SAAa,kBAAkB;IAChD,CAAC;;EAGJ,MAAM,gBAAgB,OAAO,QAAQ,MAAM,EAAE,SAAS,CAAC,OAAO,MAAM,EAAE,GAAG;AAEzE,SAAO,EAAE,KACP;GACE,QAAQ,gBAAgB,UAAU;GAClC,MAAM;IACJ,KAAK,cAAc;IACnB,KAAK,cAAc;IACpB;GACD;GACA,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,EACD,gBAAgB,MAAM,IACvB;GACD;AACF,KAAI,IAAI,iBAAiB,MACvB,EAAE,KAAK;EACL,QAAQ;EACR,MAAM,cAAc;EACpB,IAAI,cAAc,IAAI,OAAO;EAC7B,OAAO,cAAc,IAAI,UAAU;EACnC,iBAAiB,oBAAoB;EACrC,kBAAkB,qBAAqB;EACvC;EACA,KAAK,cAAc,KAAK,OAAO;EAC/B,iBAAiB,kBAAkB;EACnC,kBAAkB,qBAAqB;EACvC;EACD,CAAC,CACH;AAED,KAAI,IAAI,cAAc,OAAO,MAAM;AACjC,MAAI,CAAC,WACH,OAAM,uBAAuB;AAE/B,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,OAAO;GAAyB,QAAQ;GAAgB,EAAE,IAAI;EAEhF,MAAM,SAAS,MAAM,WAAW,OAAO,EAAE,IAAI,KAAK;GAChD,QAAQ;GACR,SAAS,EAAE;GACZ,CAAC;AACF,SAAO,OAAO,WACV,EAAE,YAAY,OAAO,SAAS,MAAM,OAAO,SAAS,GACpD,EAAE,KAAK,aAAa,IAAI;GAC5B;AAEF,KAAI,IAAI,UAAU,OAAO,MAAM;AAC7B,MAAI,CAAC,eACH,OAAM,uBAAuB;AAE/B,MAAI,CAAC,eACH,QAAO,EAAE,KAAK;GAAE,OAAO;GAAyB,QAAQ;GAAgB,EAAE,IAAI;EAEhF,MAAM,SAAS,MAAM,eAAe,OAAO,EAAE,IAAI,KAAK;GACpD,QAAQ;GACR,SAAS,EAAE;GACZ,CAAC;AACF,SAAO,OAAO,WACV,EAAE,YAAY,OAAO,SAAS,MAAM,OAAO,SAAS,GACpD,EAAE,KAAK,aAAa,IAAI;GAC5B;AAEF,KAAI,cAAc,IAAI;AACpB,MAAI,IAAI,cAAc,OAAO,MAAM;GACjC,MAAM,YAAY,GAAG,cAAc,GAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,YAAY,GAAG;AAK/E,UAJiB,MAAM,MAAM,WAAW;IACtC,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI,QAAQ;IACxB,CAAC;IAEF;AAEF,MAAI,cAAc,GAAG,OACnB,KAAI,IAAI,kBAAkB,OAAO,MAAM;GACrC,MAAM,YAAY,GAAG,cAAc,GAAI,SAAS,EAAE,IAAI,KAAK,QAAQ,gBAAgB,GAAG;AAKtF,UAJiB,MAAM,MAAM,WAAW;IACtC,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI,QAAQ;IACxB,CAAC;IAEF;;AAIN,KAAI,IAAI,KAAK,OAAO,MAAM;EACxB,MAAM,eAAe,MAAM,0BAA0B;AAErD,MAAI,CAAC,aACH,QAAO,EAAE,KAAK,mBAAmB,qBAAqB,eAAe,EAAE,IAAI;AAG7E,MAAI;GACF,MAAM,YAAY,eAAe,cAAc;GAE/C,MAAM,SAAS,MAAM,aAAa,eAAe,EAAE,IAAI,KAAK;IAC1D,WAAW,cAAc,GAAG;IAC5B,eAAe;IACf;IACD,CAAC;AAEF,UAAO,IAAI,SAAS,OAAO,QAAQ;IACjC,QAAQ,OAAO;IACf,SAAS,OAAO;IACjB,CAAC;WACK,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAO,EAAE,KAAK,mBAAmB,qBAAqB,QAAQ,EAAE,IAAI;;GAEtE;CAEF,MAAM,WAAW,QAAQ,IAAI,QAAQ;CACrC,IAAI,eAAoC;CACxC,MAAM,QAAQ,IAAI,SAAe,YAAY;AAC3C,iBAAe;GACf;CAEF,MAAM,gBAAgB,QAA+C;EACnE,MAAM,MAAM,IAAI,IAAI,IAAI,IAAI;EAC5B,MAAM,iBAAiB,IAAI,QAAQ,IAAI,oBAAoB;EAC3D,MAAM,gBAAgB,IAAI,QAAQ,IAAI,mBAAmB;AAEzD,MAAI,eACF,KAAI,WAAW;AAEjB,MAAI,cACF,KAAI,OAAO;AAGb,MAAI,kBAAkB,cACpB,OAAM,IAAI,QAAQ,KAAK,IAAI;AAG7B,SAAO,IAAI,MAAM,IAAI;;CAGvB,MAAM,SAAS,MAAM;EAAE,OAAO;EAAc;EAAM;EAAU,GAAG,SAAS;AACtE,UAAQ,IAAI,mCAAmC,SAAS,GAAG,KAAK,OAAO;AACvE,UAAQ,IAAI,sBAAsB,SAAS,GAAG,KAAK,KAAK,UAAU;AAClE,kBAAgB;GAChB;AAEF,OAAM;AAEN,QAAO,EACL,gBACE,IAAI,SAAe,YAAY;AAC7B,MAAI;AACF,UAAO,YAAY,SAAS,CAAC;UACvB;AACN,YAAS;;GAEX,EACL"}
+{"version":3,"file":"host.mjs","names":[],"sources":["../src/host.ts"],"sourcesContent":["import { serve } from \"@hono/node-server\";\nimport { OpenAPIHandler } from \"@orpc/openapi/fetch\";\nimport { OpenAPIReferencePlugin } from \"@orpc/openapi/plugins\";\nimport { RPCHandler } from \"@orpc/server/fetch\";\nimport { BatchHandlerPlugin } from \"@orpc/server/plugins\";\nimport { ZodToJsonSchemaConverter } from \"@orpc/zod/zod4\";\nimport { Hono } from \"hono\";\nimport { cors } from \"hono/cors\";\nimport { secureHeaders } from \"hono/secure-headers\";\nimport {\n  createStitchedRouter,\n  type LoadedPluginResult,\n  type LoadedPluginsResult,\n  loadApiPluginsFromRuntimeConfig,\n} from \"./api\";\nimport { loadRouterModule, type RouterModule } from \"./federation.server\";\nimport type { ClientRuntimeConfig, RuntimeConfig } from \"./types\";\n\nexport interface HostServerConfig {\n  runtimeConfig: RuntimeConfig;\n  configDir: string;\n  port?: number;\n}\n\nexport interface HostServerHandle {\n  ready: Promise<void>;\n  shutdown: () => Promise<void>;\n}\n\nfunction buildClientRuntimeConfig(runtimeConfig: RuntimeConfig): ClientRuntimeConfig {\n  return {\n    env: runtimeConfig.env,\n    account: runtimeConfig.account,\n    networkId: runtimeConfig.networkId,\n    hostUrl: runtimeConfig.hostUrl,\n    assetsUrl: runtimeConfig.ui.url,\n    apiBase: \"/api\",\n    rpcBase: \"/api/rpc\",\n    ui: runtimeConfig.ui\n      ? {\n          name: runtimeConfig.ui.name,\n          url: runtimeConfig.ui.url,\n          entry: runtimeConfig.ui.entry,\n          integrity: runtimeConfig.ui.integrity,\n        }\n      : undefined,\n    api: runtimeConfig.api\n      ? {\n          name: runtimeConfig.api.name,\n          url: runtimeConfig.api.url,\n          entry: runtimeConfig.api.entry,\n          integrity: runtimeConfig.api.integrity,\n        }\n      : undefined,\n    plugins: runtimeConfig.plugins\n      ? Object.fromEntries(\n          Object.entries(runtimeConfig.plugins).map(([key, plugin]) => [\n            key,\n            {\n              name: plugin.name,\n              url: plugin.url,\n              entry: plugin.entry,\n              integrity: plugin.integrity,\n            },\n          ]),\n        )\n      : undefined,\n  };\n}\n\nfunction renderLoadingShell(runtimeConfig: ClientRuntimeConfig, error?: string | null) {\n  const bootstrap = `window.__RUNTIME_CONFIG__ = ${JSON.stringify(runtimeConfig)};window.addEventListener('load', function handleEverythingDevHydrate() { window.__hydrate?.(); }, { once: true });`;\n  const errorMarkup = error\n    ? `<p style=\"color: #fca5a5;\">Error loading UI: ${escapeHtml(error)}</p>`\n    : \"<p>Loading UI...</p>\";\n\n  const uiIntegrity = runtimeConfig.ui?.integrity;\n  const sriAttr = uiIntegrity ? ` integrity=\"${uiIntegrity}\" crossorigin=\"anonymous\"` : \"\";\n\n  return `\n\t\t<!DOCTYPE html>\n\t\t<html lang=\"en\">\n\t\t\t<head>\n\t\t\t\t<meta charset=\"utf-8\" />\n\t\t\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n\t\t\t\t<title>Loading...</title>\n\t\t\t\t<style>\n\t\t\t\t\tbody { background: #171717; color: #fafafa; display: flex; align-items: center; justify-content: center; height: 100vh; font-family: system-ui; }\n\t\t\t\t\t.fade { animation: fadeIn 0.3s ease-in; text-align: center; padding: 2rem; }\n\t\t\t\t\t@keyframes fadeIn { from { opacity: 0; } to { opacity: 1; } }\n\t\t\t\t</style>\n\t\t\t\t${runtimeConfig.assetsUrl ? `<script src=\"${runtimeConfig.assetsUrl}/remoteEntry.js\"${sriAttr}></script>` : \"\"}\n\t\t\t\t<script>${bootstrap}</script>\n\t\t\t</head>\n\t\t\t<body>\n\t\t\t\t<div id=\"root\" class=\"fade\">${errorMarkup}</div>\n\t\t\t</body>\n\t\t</html>\n\t`;\n}\n\nfunction escapeHtml(value: string) {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n    .replaceAll(\"'\", \"&#39;\");\n}\n\nexport function createHostServer(config: HostServerConfig): HostServerHandle {\n  const port = config.port ?? 3000;\n  const { runtimeConfig } = config;\n\n  let shutdownImpl: (() => Promise<void>) | null = null;\n\n  const ready = (async () => {\n    const started = await runHostServer({ runtimeConfig, port });\n    shutdownImpl = started.shutdown;\n  })();\n\n  const shutdown = async () => {\n    console.log(\"[Host] Shutting down...\");\n    const timeout = setTimeout(() => {\n      console.log(\"[Host] Force exit\");\n      process.exit(0);\n    }, 5000);\n    await ready.catch(() => {});\n    if (shutdownImpl) {\n      await shutdownImpl().catch(() => {});\n    }\n    clearTimeout(timeout);\n    console.log(\"[Host] Shutdown complete\");\n  };\n\n  return { ready, shutdown };\n}\n\nasync function runHostServer(opts: {\n  runtimeConfig: RuntimeConfig;\n  port: number;\n}): Promise<{ shutdown: () => Promise<void> }> {\n  const { runtimeConfig, port } = opts;\n\n  let apiPlugins: LoadedPluginResult[] = [];\n  let baseApiPlugin: LoadedPluginResult | null = null;\n  let apiPluginError: string | null = null;\n  let apiPluginLoading: Promise<LoadedPluginsResult | null> | null = null;\n  let ssrRouterModule: RouterModule | null = null;\n  let ssrRouterError: string | null = null;\n  let ssrRouterLoading: Promise<RouterModule | null> | null = null;\n  let rpcHandler: RPCHandler<any> | null = null;\n  let openApiHandler: OpenAPIHandler<any> | null = null;\n\n  const clientRuntimeConfig = buildClientRuntimeConfig(runtimeConfig);\n\n  const initApiHandlers = () => {\n    const baseRouter = baseApiPlugin?.router ?? {};\n    const stitchedRouter = createStitchedRouter(\n      baseRouter,\n      apiPlugins.filter((plugin) => plugin.key !== \"api\"),\n    );\n\n    if (!baseApiPlugin) {\n      rpcHandler = null;\n      openApiHandler = null;\n      return;\n    }\n\n    rpcHandler = new RPCHandler(stitchedRouter as any, {\n      plugins: [new BatchHandlerPlugin()],\n    });\n    openApiHandler = new OpenAPIHandler(stitchedRouter as any, {\n      plugins: [\n        new OpenAPIReferencePlugin({\n          schemaConverters: [new ZodToJsonSchemaConverter()],\n        }),\n      ],\n    });\n  };\n\n  const ensureApiPluginLoaded = async (): Promise<LoadedPluginsResult | null> => {\n    if (apiPlugins.length > 0) return { base: baseApiPlugin, plugins: apiPlugins, errors: [] };\n    if (!runtimeConfig.api) return null;\n    if (apiPluginLoading) return apiPluginLoading;\n\n    apiPluginLoading = loadApiPluginsFromRuntimeConfig(runtimeConfig, process.env as any)\n      .then((loaded) => {\n        if (loaded) {\n          apiPlugins = loaded.plugins;\n          baseApiPlugin = loaded.base;\n          apiPluginError =\n            loaded.errors.length > 0 ? loaded.errors.map((item) => item.error).join(\"; \") : null;\n          initApiHandlers();\n        }\n        return loaded;\n      })\n      .catch((e) => {\n        apiPluginError = e instanceof Error ? e.message : String(e);\n        return null;\n      })\n      .finally(() => {\n        apiPluginLoading = null;\n      });\n\n    return apiPluginLoading;\n  };\n\n  const ensureRouterModuleLoaded = async (): Promise<RouterModule | null> => {\n    if (ssrRouterModule) {\n      return ssrRouterModule;\n    }\n\n    if (ssrRouterLoading) {\n      return ssrRouterLoading;\n    }\n\n    ssrRouterLoading = loadRouterModule(runtimeConfig)\n      .then((routerModule) => {\n        ssrRouterModule = routerModule;\n        ssrRouterError = null;\n        return routerModule;\n      })\n      .catch((error) => {\n        ssrRouterError = error instanceof Error ? error.message : String(error);\n        return null;\n      })\n      .finally(() => {\n        ssrRouterLoading = null;\n      });\n\n    return ssrRouterLoading;\n  };\n\n  // Kick off API plugin load in the background; host should still start even if\n  // the remote isn't ready yet.\n  void ensureApiPluginLoaded();\n  void ensureRouterModuleLoaded();\n\n  const app = new Hono();\n\n  const corsOrigins = process.env.CORS_ORIGIN?.split(\",\").map((o) => o.trim()) ?? [\n    runtimeConfig.hostUrl,\n    ...(runtimeConfig.ui?.url ? [runtimeConfig.ui.url] : []),\n  ];\n\n  if (!process.env.CORS_ORIGIN && runtimeConfig.env === \"production\") {\n    console.warn(\n      \"[Security] CORS_ORIGIN is not set in production. Using host and UI URLs as allowed origins.\",\n    );\n  }\n\n  app.use(\n    \"/*\",\n    cors({\n      origin: corsOrigins,\n      credentials: true,\n    }),\n  );\n\n  app.use(\"*\", secureHeaders({ crossOriginOpenerPolicy: \"same-origin-allow-popups\" }));\n\n  app.get(\"/health\", (c) => c.text(\"OK\"));\n  app.get(\"/ready\", async (c) => {\n    type Check = {\n      name: string;\n      url: string;\n      required: boolean;\n      ok: boolean;\n      status?: number;\n      latencyMs?: number;\n      error?: string;\n    };\n\n    const probe = async (url: string, timeoutMs = 400): Promise<Check> => {\n      const started = Date.now();\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), timeoutMs);\n      try {\n        const res = await fetch(url, { signal: controller.signal });\n        return {\n          name: \"\",\n          url,\n          required: true,\n          ok: res.ok,\n          status: res.status,\n          latencyMs: Date.now() - started,\n        };\n      } catch (e) {\n        return {\n          name: \"\",\n          url,\n          required: true,\n          ok: false,\n          latencyMs: Date.now() - started,\n          error: e instanceof Error ? e.message : String(e),\n        };\n      } finally {\n        clearTimeout(timer);\n      }\n    };\n\n    const checks: Check[] = [];\n\n    if (runtimeConfig.ui?.url) {\n      const base = runtimeConfig.ui.url.replace(/\\/$/, \"\");\n      const manifest = await probe(`${base}/mf-manifest.json`);\n      manifest.name = \"ui\";\n      // mf-manifest.json is preferred but not always present; fall back to\n      // remoteEntry.js for readiness.\n      manifest.required = false;\n      checks.push(manifest);\n      if (!manifest.ok) {\n        const remoteEntry = await probe(`${base}/remoteEntry.js`);\n        remoteEntry.name = \"ui\";\n        remoteEntry.required = true;\n        checks.push(remoteEntry);\n      } else {\n        manifest.required = true;\n      }\n    }\n\n    if (runtimeConfig.ui?.ssrUrl) {\n      const base = runtimeConfig.ui.ssrUrl.replace(/\\/$/, \"\");\n      const ssr = await probe(`${base}/`);\n      ssr.name = \"ui-ssr\";\n      ssr.required = false;\n      checks.push(ssr);\n    }\n\n    if (runtimeConfig.api?.url) {\n      const base = runtimeConfig.api.url.replace(/\\/$/, \"\");\n      const api = await probe(`${base}/`);\n      api.name = \"api\";\n      api.required = true;\n      checks.push(api);\n    }\n\n    if (runtimeConfig.api) {\n      checks.push({\n        name: \"api-plugin\",\n        url: runtimeConfig.api.entry,\n        required: true,\n        ok: baseApiPlugin !== null,\n        status: baseApiPlugin !== null ? 200 : 503,\n        error:\n          baseApiPlugin !== null\n            ? undefined\n            : apiPluginLoading\n              ? \"loading\"\n              : (apiPluginError ?? \"not loaded\"),\n      });\n      if (!baseApiPlugin && !apiPluginLoading) {\n        void ensureApiPluginLoaded();\n      }\n    }\n\n    for (const [key, plugin] of Object.entries(runtimeConfig.plugins ?? {})) {\n      const loaded = apiPlugins.find((item) => item.key === key);\n      checks.push({\n        name: key,\n        url: plugin.entry,\n        required: true,\n        ok: Boolean(loaded),\n        status: loaded ? 200 : 503,\n        error: loaded ? undefined : (apiPluginError ?? \"not loaded\"),\n      });\n    }\n\n    const allRequiredOk = checks.filter((x) => x.required).every((x) => x.ok);\n\n    return c.json(\n      {\n        status: allRequiredOk ? \"ready\" : \"not_ready\",\n        host: {\n          url: runtimeConfig.hostUrl,\n          env: runtimeConfig.env,\n        },\n        checks,\n        timestamp: new Date().toISOString(),\n      },\n      allRequiredOk ? 200 : 503,\n    );\n  });\n  app.get(\"/api/_health\", (c) =>\n    c.json({\n      status: \"ready\",\n      mode: runtimeConfig.env,\n      ui: runtimeConfig.ui?.url ?? null,\n      uiSsr: runtimeConfig.ui?.ssrUrl ?? null,\n      ssrRouterLoaded: ssrRouterModule !== null,\n      ssrRouterLoading: ssrRouterLoading !== null,\n      ssrRouterError,\n      api: runtimeConfig.api?.url ?? null,\n      apiPluginLoaded: baseApiPlugin !== null,\n      apiPluginLoading: apiPluginLoading !== null,\n      apiPluginError,\n    }),\n  );\n\n  app.all(\"/api/rpc/*\", async (c) => {\n    if (!rpcHandler) {\n      await ensureApiPluginLoaded();\n    }\n    if (!rpcHandler) {\n      return c.json({ error: \"API plugin not loaded\", detail: apiPluginError }, 503);\n    }\n    const result = await rpcHandler.handle(c.req.raw, {\n      prefix: \"/api/rpc\",\n      context: {},\n    });\n    return result.response\n      ? c.newResponse(result.response.body, result.response)\n      : c.text(\"Not Found\", 404);\n  });\n\n  app.all(\"/api/*\", async (c) => {\n    if (!openApiHandler) {\n      await ensureApiPluginLoaded();\n    }\n    if (!openApiHandler) {\n      return c.json({ error: \"API plugin not loaded\", detail: apiPluginError }, 503);\n    }\n    const result = await openApiHandler.handle(c.req.raw, {\n      prefix: \"/api\",\n      context: {},\n    });\n    return result.response\n      ? c.newResponse(result.response.body, result.response)\n      : c.text(\"Not Found\", 404);\n  });\n\n  if (runtimeConfig.ui) {\n    app.all(\"/__mf/ui/*\", async (c) => {\n      const targetUrl = `${runtimeConfig.ui!.url}${c.req.path.replace(\"/__mf/ui\", \"\")}`;\n      const response = await fetch(targetUrl, {\n        method: c.req.method,\n        headers: c.req.header(),\n      });\n      return response;\n    });\n\n    if (runtimeConfig.ui.ssrUrl) {\n      app.all(\"/__mf/ui/ssr/*\", async (c) => {\n        const targetUrl = `${runtimeConfig.ui!.ssrUrl}${c.req.path.replace(\"/__mf/ui/ssr\", \"\")}`;\n        const response = await fetch(targetUrl, {\n          method: c.req.method,\n          headers: c.req.header(),\n        });\n        return response;\n      });\n    }\n  }\n\n  app.get(\"*\", async (c) => {\n    const routerModule = await ensureRouterModuleLoaded();\n\n    if (!routerModule) {\n      return c.html(renderLoadingShell(clientRuntimeConfig, ssrRouterError), 503);\n    }\n\n    try {\n      const apiClient = baseApiPlugin?.createClient();\n\n      const result = await routerModule.renderToStream(c.req.raw, {\n        assetsUrl: runtimeConfig.ui.url,\n        runtimeConfig: clientRuntimeConfig,\n        apiClient,\n      });\n\n      return new Response(result.stream, {\n        status: result.statusCode,\n        headers: result.headers,\n      });\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      return c.html(renderLoadingShell(clientRuntimeConfig, message), 500);\n    }\n  });\n\n  const hostname = process.env.HOST ?? \"0.0.0.0\";\n  let resolveReady: (() => void) | null = null;\n  const ready = new Promise<void>((resolve) => {\n    resolveReady = resolve;\n  });\n\n  const proxiedFetch = (req: Request): Response | Promise<Response> => {\n    const url = new URL(req.url);\n    const forwardedProto = req.headers.get(\"x-forwarded-proto\");\n    const forwardedHost = req.headers.get(\"x-forwarded-host\");\n\n    if (forwardedProto) {\n      url.protocol = forwardedProto;\n    }\n    if (forwardedHost) {\n      url.host = forwardedHost;\n    }\n\n    if (forwardedProto || forwardedHost) {\n      req = new Request(url, req);\n    }\n\n    return app.fetch(req);\n  };\n\n  const server = serve({ fetch: proxiedFetch, port, hostname }, (info) => {\n    console.log(`[Host] Server running at http://${hostname}:${info.port}`);\n    console.log(`[Host] API: http://${hostname}:${info.port}/api/rpc`);\n    resolveReady?.();\n  });\n\n  await ready;\n\n  return {\n    shutdown: () =>\n      new Promise<void>((resolve) => {\n        try {\n          server.close(() => resolve());\n        } catch {\n          resolve();\n        }\n      }),\n  };\n}\n\nexport { runHostServer };\n"],"mappings":";;;;;;;;;;;;;AA6BA,SAAS,yBAAyB,eAAmD;AACnF,QAAO;EACL,KAAK,cAAc;EACnB,SAAS,cAAc;EACvB,WAAW,cAAc;EACzB,SAAS,cAAc;EACvB,WAAW,cAAc,GAAG;EAC5B,SAAS;EACT,SAAS;EACT,IAAI,cAAc,KACd;GACE,MAAM,cAAc,GAAG;GACvB,KAAK,cAAc,GAAG;GACtB,OAAO,cAAc,GAAG;GACxB,WAAW,cAAc,GAAG;GAC7B,GACD;EACJ,KAAK,cAAc,MACf;GACE,MAAM,cAAc,IAAI;GACxB,KAAK,cAAc,IAAI;GACvB,OAAO,cAAc,IAAI;GACzB,WAAW,cAAc,IAAI;GAC9B,GACD;EACJ,SAAS,cAAc,UACnB,OAAO,YACL,OAAO,QAAQ,cAAc,QAAQ,CAAC,KAAK,CAAC,KAAK,YAAY,CAC3D,KACA;GACE,MAAM,OAAO;GACb,KAAK,OAAO;GACZ,OAAO,OAAO;GACd,WAAW,OAAO;GACnB,CACF,CAAC,CACH,GACD;EACL;;AAGH,SAAS,mBAAmB,eAAoC,OAAuB;CACrF,MAAM,YAAY,+BAA+B,KAAK,UAAU,cAAc,CAAC;CAC/E,MAAM,cAAc,QAChB,gDAAgD,WAAW,MAAM,CAAC,QAClE;CAEJ,MAAM,cAAc,cAAc,IAAI;CACtC,MAAM,UAAU,cAAc,eAAe,YAAY,6BAA6B;AAEtF,QAAO;;;;;;;;;;;;MAYH,cAAc,YAAY,gBAAgB,cAAc,UAAU,kBAAkB,QAAQ,eAAc,GAAG;cACrG,UAAU;;;kCAGU,YAAY;;;;;AAM9C,SAAS,WAAW,OAAe;AACjC,QAAO,MACJ,WAAW,KAAK,QAAQ,CACxB,WAAW,KAAK,OAAO,CACvB,WAAW,KAAK,OAAO,CACvB,WAAW,MAAK,SAAS,CACzB,WAAW,KAAK,QAAQ;;AAG7B,SAAgB,iBAAiB,QAA4C;CAC3E,MAAM,OAAO,OAAO,QAAQ;CAC5B,MAAM,EAAE,kBAAkB;CAE1B,IAAI,eAA6C;CAEjD,MAAM,SAAS,YAAY;AAEzB,kBADgB,MAAM,cAAc;GAAE;GAAe;GAAM,CAAC,EACrC;KACrB;CAEJ,MAAM,WAAW,YAAY;AAC3B,UAAQ,IAAI,0BAA0B;EACtC,MAAM,UAAU,iBAAiB;AAC/B,WAAQ,IAAI,oBAAoB;AAChC,WAAQ,KAAK,EAAE;KACd,IAAK;AACR,QAAM,MAAM,YAAY,GAAG;AAC3B,MAAI,aACF,OAAM,cAAc,CAAC,YAAY,GAAG;AAEtC,eAAa,QAAQ;AACrB,UAAQ,IAAI,2BAA2B;;AAGzC,QAAO;EAAE;EAAO;EAAU;;AAG5B,eAAe,cAAc,MAGkB;CAC7C,MAAM,EAAE,eAAe,SAAS;CAEhC,IAAI,aAAmC,EAAE;CACzC,IAAI,gBAA2C;CAC/C,IAAI,iBAAgC;CACpC,IAAI,mBAA+D;CACnE,IAAI,kBAAuC;CAC3C,IAAI,iBAAgC;CACpC,IAAI,mBAAwD;CAC5D,IAAI,aAAqC;CACzC,IAAI,iBAA6C;CAEjD,MAAM,sBAAsB,yBAAyB,cAAc;CAEnE,MAAM,wBAAwB;EAE5B,MAAM,iBAAiB,qBADJ,eAAe,UAAU,EAAE,EAG5C,WAAW,QAAQ,WAAW,OAAO,QAAQ,MAAM,CACpD;AAED,MAAI,CAAC,eAAe;AAClB,gBAAa;AACb,oBAAiB;AACjB;;AAGF,eAAa,IAAI,WAAW,gBAAuB,EACjD,SAAS,CAAC,IAAI,oBAAoB,CAAC,EACpC,CAAC;AACF,mBAAiB,IAAI,eAAe,gBAAuB,EACzD,SAAS,CACP,IAAI,uBAAuB,EACzB,kBAAkB,CAAC,IAAI,0BAA0B,CAAC,EACnD,CAAC,CACH,EACF,CAAC;;CAGJ,MAAM,wBAAwB,YAAiD;AAC7E,MAAI,WAAW,SAAS,EAAG,QAAO;GAAE,MAAM;GAAe,SAAS;GAAY,QAAQ,EAAE;GAAE;AAC1F,MAAI,CAAC,cAAc,IAAK,QAAO;AAC/B,MAAI,iBAAkB,QAAO;AAE7B,qBAAmB,gCAAgC,eAAe,QAAQ,IAAW,CAClF,MAAM,WAAW;AAChB,OAAI,QAAQ;AACV,iBAAa,OAAO;AACpB,oBAAgB,OAAO;AACvB,qBACE,OAAO,OAAO,SAAS,IAAI,OAAO,OAAO,KAAK,SAAS,KAAK,MAAM,CAAC,KAAK,KAAK,GAAG;AAClF,qBAAiB;;AAEnB,UAAO;IACP,CACD,OAAO,MAAM;AACZ,oBAAiB,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC3D,UAAO;IACP,CACD,cAAc;AACb,sBAAmB;IACnB;AAEJ,SAAO;;CAGT,MAAM,2BAA2B,YAA0C;AACzE,MAAI,gBACF,QAAO;AAGT,MAAI,iBACF,QAAO;AAGT,qBAAmB,iBAAiB,cAAc,CAC/C,MAAM,iBAAiB;AACtB,qBAAkB;AAClB,oBAAiB;AACjB,UAAO;IACP,CACD,OAAO,UAAU;AAChB,oBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACvE,UAAO;IACP,CACD,cAAc;AACb,sBAAmB;IACnB;AAEJ,SAAO;;AAKT,CAAK,uBAAuB;AAC5B,CAAK,0BAA0B;CAE/B,MAAM,MAAM,IAAI,MAAM;CAEtB,MAAM,cAAc,QAAQ,IAAI,aAAa,MAAM,IAAI,CAAC,KAAK,MAAM,EAAE,MAAM,CAAC,IAAI,CAC9E,cAAc,SACd,GAAI,cAAc,IAAI,MAAM,CAAC,cAAc,GAAG,IAAI,GAAG,EAAE,CACxD;AAED,KAAI,CAAC,QAAQ,IAAI,eAAe,cAAc,QAAQ,aACpD,SAAQ,KACN,8FACD;AAGH,KAAI,IACF,MACA,KAAK;EACH,QAAQ;EACR,aAAa;EACd,CAAC,CACH;AAED,KAAI,IAAI,KAAK,cAAc,EAAE,yBAAyB,4BAA4B,CAAC,CAAC;AAEpF,KAAI,IAAI,YAAY,MAAM,EAAE,KAAK,KAAK,CAAC;AACvC,KAAI,IAAI,UAAU,OAAO,MAAM;EAW7B,MAAM,QAAQ,OAAO,KAAa,YAAY,QAAwB;GACpE,MAAM,UAAU,KAAK,KAAK;GAC1B,MAAM,aAAa,IAAI,iBAAiB;GACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;AAC7D,OAAI;IACF,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;AAC3D,WAAO;KACL,MAAM;KACN;KACA,UAAU;KACV,IAAI,IAAI;KACR,QAAQ,IAAI;KACZ,WAAW,KAAK,KAAK,GAAG;KACzB;YACM,GAAG;AACV,WAAO;KACL,MAAM;KACN;KACA,UAAU;KACV,IAAI;KACJ,WAAW,KAAK,KAAK,GAAG;KACxB,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;KAClD;aACO;AACR,iBAAa,MAAM;;;EAIvB,MAAM,SAAkB,EAAE;AAE1B,MAAI,cAAc,IAAI,KAAK;GACzB,MAAM,OAAO,cAAc,GAAG,IAAI,QAAQ,OAAO,GAAG;GACpD,MAAM,WAAW,MAAM,MAAM,GAAG,KAAK,mBAAmB;AACxD,YAAS,OAAO;AAGhB,YAAS,WAAW;AACpB,UAAO,KAAK,SAAS;AACrB,OAAI,CAAC,SAAS,IAAI;IAChB,MAAM,cAAc,MAAM,MAAM,GAAG,KAAK,iBAAiB;AACzD,gBAAY,OAAO;AACnB,gBAAY,WAAW;AACvB,WAAO,KAAK,YAAY;SAExB,UAAS,WAAW;;AAIxB,MAAI,cAAc,IAAI,QAAQ;GAE5B,MAAM,MAAM,MAAM,MAAM,GADX,cAAc,GAAG,OAAO,QAAQ,OAAO,GAAG,CACvB,GAAG;AACnC,OAAI,OAAO;AACX,OAAI,WAAW;AACf,UAAO,KAAK,IAAI;;AAGlB,MAAI,cAAc,KAAK,KAAK;GAE1B,MAAM,MAAM,MAAM,MAAM,GADX,cAAc,IAAI,IAAI,QAAQ,OAAO,GAAG,CACrB,GAAG;AACnC,OAAI,OAAO;AACX,OAAI,WAAW;AACf,UAAO,KAAK,IAAI;;AAGlB,MAAI,cAAc,KAAK;AACrB,UAAO,KAAK;IACV,MAAM;IACN,KAAK,cAAc,IAAI;IACvB,UAAU;IACV,IAAI,kBAAkB;IACtB,QAAQ,kBAAkB,OAAO,MAAM;IACvC,OACE,kBAAkB,OACd,SACA,mBACE,YACC,kBAAkB;IAC5B,CAAC;AACF,OAAI,CAAC,iBAAiB,CAAC,iBACrB,CAAK,uBAAuB;;AAIhC,OAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,cAAc,WAAW,EAAE,CAAC,EAAE;GACvE,MAAM,SAAS,WAAW,MAAM,SAAS,KAAK,QAAQ,IAAI;AAC1D,UAAO,KAAK;IACV,MAAM;IACN,KAAK,OAAO;IACZ,UAAU;IACV,IAAI,QAAQ,OAAO;IACnB,QAAQ,SAAS,MAAM;IACvB,OAAO,SAAS,SAAa,kBAAkB;IAChD,CAAC;;EAGJ,MAAM,gBAAgB,OAAO,QAAQ,MAAM,EAAE,SAAS,CAAC,OAAO,MAAM,EAAE,GAAG;AAEzE,SAAO,EAAE,KACP;GACE,QAAQ,gBAAgB,UAAU;GAClC,MAAM;IACJ,KAAK,cAAc;IACnB,KAAK,cAAc;IACpB;GACD;GACA,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,EACD,gBAAgB,MAAM,IACvB;GACD;AACF,KAAI,IAAI,iBAAiB,MACvB,EAAE,KAAK;EACL,QAAQ;EACR,MAAM,cAAc;EACpB,IAAI,cAAc,IAAI,OAAO;EAC7B,OAAO,cAAc,IAAI,UAAU;EACnC,iBAAiB,oBAAoB;EACrC,kBAAkB,qBAAqB;EACvC;EACA,KAAK,cAAc,KAAK,OAAO;EAC/B,iBAAiB,kBAAkB;EACnC,kBAAkB,qBAAqB;EACvC;EACD,CAAC,CACH;AAED,KAAI,IAAI,cAAc,OAAO,MAAM;AACjC,MAAI,CAAC,WACH,OAAM,uBAAuB;AAE/B,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,OAAO;GAAyB,QAAQ;GAAgB,EAAE,IAAI;EAEhF,MAAM,SAAS,MAAM,WAAW,OAAO,EAAE,IAAI,KAAK;GAChD,QAAQ;GACR,SAAS,EAAE;GACZ,CAAC;AACF,SAAO,OAAO,WACV,EAAE,YAAY,OAAO,SAAS,MAAM,OAAO,SAAS,GACpD,EAAE,KAAK,aAAa,IAAI;GAC5B;AAEF,KAAI,IAAI,UAAU,OAAO,MAAM;AAC7B,MAAI,CAAC,eACH,OAAM,uBAAuB;AAE/B,MAAI,CAAC,eACH,QAAO,EAAE,KAAK;GAAE,OAAO;GAAyB,QAAQ;GAAgB,EAAE,IAAI;EAEhF,MAAM,SAAS,MAAM,eAAe,OAAO,EAAE,IAAI,KAAK;GACpD,QAAQ;GACR,SAAS,EAAE;GACZ,CAAC;AACF,SAAO,OAAO,WACV,EAAE,YAAY,OAAO,SAAS,MAAM,OAAO,SAAS,GACpD,EAAE,KAAK,aAAa,IAAI;GAC5B;AAEF,KAAI,cAAc,IAAI;AACpB,MAAI,IAAI,cAAc,OAAO,MAAM;GACjC,MAAM,YAAY,GAAG,cAAc,GAAI,MAAM,EAAE,IAAI,KAAK,QAAQ,YAAY,GAAG;AAK/E,UAJiB,MAAM,MAAM,WAAW;IACtC,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI,QAAQ;IACxB,CAAC;IAEF;AAEF,MAAI,cAAc,GAAG,OACnB,KAAI,IAAI,kBAAkB,OAAO,MAAM;GACrC,MAAM,YAAY,GAAG,cAAc,GAAI,SAAS,EAAE,IAAI,KAAK,QAAQ,gBAAgB,GAAG;AAKtF,UAJiB,MAAM,MAAM,WAAW;IACtC,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,IAAI,QAAQ;IACxB,CAAC;IAEF;;AAIN,KAAI,IAAI,KAAK,OAAO,MAAM;EACxB,MAAM,eAAe,MAAM,0BAA0B;AAErD,MAAI,CAAC,aACH,QAAO,EAAE,KAAK,mBAAmB,qBAAqB,eAAe,EAAE,IAAI;AAG7E,MAAI;GACF,MAAM,YAAY,eAAe,cAAc;GAE/C,MAAM,SAAS,MAAM,aAAa,eAAe,EAAE,IAAI,KAAK;IAC1D,WAAW,cAAc,GAAG;IAC5B,eAAe;IACf;IACD,CAAC;AAEF,UAAO,IAAI,SAAS,OAAO,QAAQ;IACjC,QAAQ,OAAO;IACf,SAAS,OAAO;IACjB,CAAC;WACK,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAO,EAAE,KAAK,mBAAmB,qBAAqB,QAAQ,EAAE,IAAI;;GAEtE;CAEF,MAAM,WAAW,QAAQ,IAAI,QAAQ;CACrC,IAAI,eAAoC;CACxC,MAAM,QAAQ,IAAI,SAAe,YAAY;AAC3C,iBAAe;GACf;CAEF,MAAM,gBAAgB,QAA+C;EACnE,MAAM,MAAM,IAAI,IAAI,IAAI,IAAI;EAC5B,MAAM,iBAAiB,IAAI,QAAQ,IAAI,oBAAoB;EAC3D,MAAM,gBAAgB,IAAI,QAAQ,IAAI,mBAAmB;AAEzD,MAAI,eACF,KAAI,WAAW;AAEjB,MAAI,cACF,KAAI,OAAO;AAGb,MAAI,kBAAkB,cACpB,OAAM,IAAI,QAAQ,KAAK,IAAI;AAG7B,SAAO,IAAI,MAAM,IAAI;;CAGvB,MAAM,SAAS,MAAM;EAAE,OAAO;EAAc;EAAM;EAAU,GAAG,SAAS;AACtE,UAAQ,IAAI,mCAAmC,SAAS,GAAG,KAAK,OAAO;AACvE,UAAQ,IAAI,sBAAsB,SAAS,GAAG,KAAK,KAAK,UAAU;AAClE,kBAAgB;GAChB;AAEF,OAAM;AAEN,QAAO,EACL,gBACE,IAAI,SAAe,YAAY;AAC7B,MAAI;AACF,UAAO,YAAY,SAAS,CAAC;UACvB;AACN,YAAS;;GAEX,EACL"}

package/dist/index.cjs

@@ -100,6 +100,8 @@ Object.defineProperty(exports, 'createPluginRuntime', {
   }
 });
 exports.fetchBosConfigFromFastKv = require_fastkv.fetchBosConfigFromFastKv;
+exports.fetchPluginFromRegistry = require_fastkv.fetchPluginFromRegistry;
+exports.fetchRemotePluginManifest = require_fastkv.fetchRemotePluginManifest;
 exports.findConfigPath = require_config.findConfigPath;
 exports.getConfig = require_config.getConfig;
 exports.getFastKvBaseUrlForNetwork = require_fastkv.getFastKvBaseUrlForNetwork;
@@ -116,9 +118,11 @@ Object.defineProperty(exports, 'oc', {
     return every_plugin_orpc.oc;
   }
 });
+exports.parsePluginBosUrl = require_fastkv.parsePluginBosUrl;
 exports.parsePort = require_config.parsePort;
 exports.resolveDevelopmentHostUrl = require_config.resolveDevelopmentHostUrl;
 exports.resolveLocalDevelopmentPath = require_config.resolveLocalDevelopmentPath;
+exports.resolvePluginRuntimeName = require_config.resolvePluginRuntimeName;
 Object.defineProperty(exports, 'z', {
   enumerable: true,
   get: function () {

package/dist/index.d.cts

@@ -1,7 +1,7 @@
 import { AnyContractRouter, AnySchema, Context, Effect, Layer, LoadedPluginWithBinding, Plugin, PluginRuntime, Scope, createPlugin, createPluginRuntime, oc, z } from "./sdk.cjs";
-import { ApiPluginConfig, ApiPluginConfigSchema, BosConfig, BosConfigSchema, BosPluginRef, BosPluginRefSchema, BosStaging, BosStagingSchema, ClientRuntimeConfig, ClientRuntimeConfigSchema, ClientRuntimeInfo, ClientRuntimeInfoSchema, FederationEntry, FederationEntrySchema, HostConfig, HostConfigSchema, RuntimeConfig, RuntimeConfigSchema, RuntimePluginConfig, RuntimePluginConfigSchema, SharedConfig, SharedConfigSchema, SharedDepConfig, SharedDepConfigSchema, SourceMode, SourceModeSchema, UiConfig, UiConfigSchema } from "./types.cjs";
-import { ConfigResult, buildRuntimePluginsForConfig, clearConfigCache, findConfigPath, getConfig, getHostDevelopmentPort, getProjectRoot, isLocalDevelopmentTarget, loadBosConfig, loadConfig, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath } from "./config.cjs";
+import { ApiPluginConfig, ApiPluginConfigSchema, BosConfig, BosConfigInput, BosConfigSchema, BosPluginRef, BosPluginRefSchema, BosStaging, BosStagingSchema, ClientRuntimeConfig, ClientRuntimeConfigSchema, ClientRuntimeInfo, ClientRuntimeInfoSchema, FederationEntry, FederationEntrySchema, HostConfig, HostConfigSchema, RuntimeConfig, RuntimeConfigSchema, RuntimePluginConfig, RuntimePluginConfigSchema, SharedConfig, SharedConfigSchema, SharedDepConfig, SharedDepConfigSchema, SourceMode, SourceModeSchema, UiConfig, UiConfigSchema } from "./types.cjs";
+import { ConfigResult, buildRuntimePluginsForConfig, clearConfigCache, findConfigPath, getConfig, getHostDevelopmentPort, getProjectRoot, isLocalDevelopmentTarget, loadBosConfig, loadConfig, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, resolvePluginRuntimeName } from "./config.cjs";
 import { CliCommandMeta, cliCommandMeta } from "./contract.meta.cjs";
-import { NetworkId, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork } from "./fastkv.cjs";
+import { NetworkId, PluginManifest, PluginMetadata, PluginRegistryEntry, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, parsePluginBosUrl } from "./fastkv.cjs";
 import { BosConfigResult, BuildOptions, BuildOptionsSchema, BuildResultSchema, ConfigResultSchema, DevOptions, DevOptionsSchema, DevResultSchema, InitOptions, InitOptionsSchema, InitResult, InitResultSchema, KeyPublishOptions, KeyPublishOptionsSchema, KeyPublishResult, KeyPublishResultSchema, PluginAddOptions, PluginAddOptionsSchema, PluginAddResult, PluginAddResultSchema, PluginListResult, PluginListResultSchema, PluginPublishOptions, PluginPublishOptionsSchema, PluginPublishResult, PluginPublishResultSchema, PluginRemoveOptions, PluginRemoveOptionsSchema, PluginRemoveResult, PluginRemoveResultSchema, PublishOptions, PublishOptionsSchema, PublishResultSchema, StartOptions, StartOptionsSchema, StartResultSchema, StatusResult, StatusResultSchema, SyncOptions, SyncOptionsSchema, SyncResult, SyncResultSchema, UpgradeOptions, UpgradeOptionsSchema, UpgradeResult, UpgradeResultSchema, bosContract } from "./contract.cjs";
-export { AnyContractRouter, AnySchema, ApiPluginConfig, ApiPluginConfigSchema, BosConfig, BosConfigResult, BosConfigSchema, BosPluginRef, BosPluginRefSchema, BosStaging, BosStagingSchema, BuildOptions, BuildOptionsSchema, BuildResultSchema, CliCommandMeta, ClientRuntimeConfig, ClientRuntimeConfigSchema, ClientRuntimeInfo, ClientRuntimeInfoSchema, ConfigResult, ConfigResultSchema, Context, DevOptions, DevOptionsSchema, DevResultSchema, Effect, FederationEntry, FederationEntrySchema, HostConfig, HostConfigSchema, InitOptions, InitOptionsSchema, InitResult, InitResultSchema, KeyPublishOptions, KeyPublishOptionsSchema, KeyPublishResult, KeyPublishResultSchema, Layer, LoadedPluginWithBinding, NetworkId, Plugin, PluginAddOptions, PluginAddOptionsSchema, PluginAddResult, PluginAddResultSchema, PluginListResult, PluginListResultSchema, PluginPublishOptions, PluginPublishOptionsSchema, PluginPublishResult, PluginPublishResultSchema, PluginRemoveOptions, PluginRemoveOptionsSchema, PluginRemoveResult, PluginRemoveResultSchema, PluginRuntime, PublishOptions, PublishOptionsSchema, PublishResultSchema, RuntimeConfig, RuntimeConfigSchema, RuntimePluginConfig, RuntimePluginConfigSchema, Scope, SharedConfig, SharedConfigSchema, SharedDepConfig, SharedDepConfigSchema, SourceMode, SourceModeSchema, StartOptions, StartOptionsSchema, StartResultSchema, StatusResult, StatusResultSchema, SyncOptions, SyncOptionsSchema, SyncResult, SyncResultSchema, UiConfig, UiConfigSchema, UpgradeOptions, UpgradeOptionsSchema, UpgradeResult, UpgradeResultSchema, bosContract, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, buildRuntimePluginsForConfig, clearConfigCache, cliCommandMeta, createPlugin, createPluginRuntime, fetchBosConfigFromFastKv, findConfigPath, getConfig, getFastKvBaseUrlForNetwork, getHostDevelopmentPort, getProjectRoot, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, isLocalDevelopmentTarget, loadBosConfig, loadConfig, oc, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, z };
+export { AnyContractRouter, AnySchema, ApiPluginConfig, ApiPluginConfigSchema, BosConfig, BosConfigInput, BosConfigResult, BosConfigSchema, BosPluginRef, BosPluginRefSchema, BosStaging, BosStagingSchema, BuildOptions, BuildOptionsSchema, BuildResultSchema, CliCommandMeta, ClientRuntimeConfig, ClientRuntimeConfigSchema, ClientRuntimeInfo, ClientRuntimeInfoSchema, ConfigResult, ConfigResultSchema, Context, DevOptions, DevOptionsSchema, DevResultSchema, Effect, FederationEntry, FederationEntrySchema, HostConfig, HostConfigSchema, InitOptions, InitOptionsSchema, InitResult, InitResultSchema, KeyPublishOptions, KeyPublishOptionsSchema, KeyPublishResult, KeyPublishResultSchema, Layer, LoadedPluginWithBinding, NetworkId, Plugin, PluginAddOptions, PluginAddOptionsSchema, PluginAddResult, PluginAddResultSchema, PluginListResult, PluginListResultSchema, PluginManifest, PluginMetadata, PluginPublishOptions, PluginPublishOptionsSchema, PluginPublishResult, PluginPublishResultSchema, PluginRegistryEntry, PluginRemoveOptions, PluginRemoveOptionsSchema, PluginRemoveResult, PluginRemoveResultSchema, PluginRuntime, PublishOptions, PublishOptionsSchema, PublishResultSchema, RuntimeConfig, RuntimeConfigSchema, RuntimePluginConfig, RuntimePluginConfigSchema, Scope, SharedConfig, SharedConfigSchema, SharedDepConfig, SharedDepConfigSchema, SourceMode, SourceModeSchema, StartOptions, StartOptionsSchema, StartResultSchema, StatusResult, StatusResultSchema, SyncOptions, SyncOptionsSchema, SyncResult, SyncResultSchema, UiConfig, UiConfigSchema, UpgradeOptions, UpgradeOptionsSchema, UpgradeResult, UpgradeResultSchema, bosContract, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, buildRuntimePluginsForConfig, clearConfigCache, cliCommandMeta, createPlugin, createPluginRuntime, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, findConfigPath, getConfig, getFastKvBaseUrlForNetwork, getHostDevelopmentPort, getProjectRoot, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, isLocalDevelopmentTarget, loadBosConfig, loadConfig, oc, parsePluginBosUrl, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, resolvePluginRuntimeName, z };

package/dist/index.d.mts

@@ -1,7 +1,7 @@
 import { AnyContractRouter, AnySchema, Context, Effect, Layer, LoadedPluginWithBinding, Plugin, PluginRuntime, Scope, createPlugin, createPluginRuntime, oc, z } from "./sdk.mjs";
-import { ApiPluginConfig, ApiPluginConfigSchema, BosConfig, BosConfigSchema, BosPluginRef, BosPluginRefSchema, BosStaging, BosStagingSchema, ClientRuntimeConfig, ClientRuntimeConfigSchema, ClientRuntimeInfo, ClientRuntimeInfoSchema, FederationEntry, FederationEntrySchema, HostConfig, HostConfigSchema, RuntimeConfig, RuntimeConfigSchema, RuntimePluginConfig, RuntimePluginConfigSchema, SharedConfig, SharedConfigSchema, SharedDepConfig, SharedDepConfigSchema, SourceMode, SourceModeSchema, UiConfig, UiConfigSchema } from "./types.mjs";
-import { ConfigResult, buildRuntimePluginsForConfig, clearConfigCache, findConfigPath, getConfig, getHostDevelopmentPort, getProjectRoot, isLocalDevelopmentTarget, loadBosConfig, loadConfig, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath } from "./config.mjs";
+import { ApiPluginConfig, ApiPluginConfigSchema, BosConfig, BosConfigInput, BosConfigSchema, BosPluginRef, BosPluginRefSchema, BosStaging, BosStagingSchema, ClientRuntimeConfig, ClientRuntimeConfigSchema, ClientRuntimeInfo, ClientRuntimeInfoSchema, FederationEntry, FederationEntrySchema, HostConfig, HostConfigSchema, RuntimeConfig, RuntimeConfigSchema, RuntimePluginConfig, RuntimePluginConfigSchema, SharedConfig, SharedConfigSchema, SharedDepConfig, SharedDepConfigSchema, SourceMode, SourceModeSchema, UiConfig, UiConfigSchema } from "./types.mjs";
+import { ConfigResult, buildRuntimePluginsForConfig, clearConfigCache, findConfigPath, getConfig, getHostDevelopmentPort, getProjectRoot, isLocalDevelopmentTarget, loadBosConfig, loadConfig, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, resolvePluginRuntimeName } from "./config.mjs";
 import { CliCommandMeta, cliCommandMeta } from "./contract.meta.mjs";
-import { NetworkId, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork } from "./fastkv.mjs";
+import { NetworkId, PluginManifest, PluginMetadata, PluginRegistryEntry, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, parsePluginBosUrl } from "./fastkv.mjs";
 import { BosConfigResult, BuildOptions, BuildOptionsSchema, BuildResultSchema, ConfigResultSchema, DevOptions, DevOptionsSchema, DevResultSchema, InitOptions, InitOptionsSchema, InitResult, InitResultSchema, KeyPublishOptions, KeyPublishOptionsSchema, KeyPublishResult, KeyPublishResultSchema, PluginAddOptions, PluginAddOptionsSchema, PluginAddResult, PluginAddResultSchema, PluginListResult, PluginListResultSchema, PluginPublishOptions, PluginPublishOptionsSchema, PluginPublishResult, PluginPublishResultSchema, PluginRemoveOptions, PluginRemoveOptionsSchema, PluginRemoveResult, PluginRemoveResultSchema, PublishOptions, PublishOptionsSchema, PublishResultSchema, StartOptions, StartOptionsSchema, StartResultSchema, StatusResult, StatusResultSchema, SyncOptions, SyncOptionsSchema, SyncResult, SyncResultSchema, UpgradeOptions, UpgradeOptionsSchema, UpgradeResult, UpgradeResultSchema, bosContract } from "./contract.mjs";
-export { AnyContractRouter, AnySchema, ApiPluginConfig, ApiPluginConfigSchema, BosConfig, BosConfigResult, BosConfigSchema, BosPluginRef, BosPluginRefSchema, BosStaging, BosStagingSchema, BuildOptions, BuildOptionsSchema, BuildResultSchema, CliCommandMeta, ClientRuntimeConfig, ClientRuntimeConfigSchema, ClientRuntimeInfo, ClientRuntimeInfoSchema, ConfigResult, ConfigResultSchema, Context, DevOptions, DevOptionsSchema, DevResultSchema, Effect, FederationEntry, FederationEntrySchema, HostConfig, HostConfigSchema, InitOptions, InitOptionsSchema, InitResult, InitResultSchema, KeyPublishOptions, KeyPublishOptionsSchema, KeyPublishResult, KeyPublishResultSchema, Layer, LoadedPluginWithBinding, NetworkId, Plugin, PluginAddOptions, PluginAddOptionsSchema, PluginAddResult, PluginAddResultSchema, PluginListResult, PluginListResultSchema, PluginPublishOptions, PluginPublishOptionsSchema, PluginPublishResult, PluginPublishResultSchema, PluginRemoveOptions, PluginRemoveOptionsSchema, PluginRemoveResult, PluginRemoveResultSchema, PluginRuntime, PublishOptions, PublishOptionsSchema, PublishResultSchema, RuntimeConfig, RuntimeConfigSchema, RuntimePluginConfig, RuntimePluginConfigSchema, Scope, SharedConfig, SharedConfigSchema, SharedDepConfig, SharedDepConfigSchema, SourceMode, SourceModeSchema, StartOptions, StartOptionsSchema, StartResultSchema, StatusResult, StatusResultSchema, SyncOptions, SyncOptionsSchema, SyncResult, SyncResultSchema, UiConfig, UiConfigSchema, UpgradeOptions, UpgradeOptionsSchema, UpgradeResult, UpgradeResultSchema, bosContract, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, buildRuntimePluginsForConfig, clearConfigCache, cliCommandMeta, createPlugin, createPluginRuntime, fetchBosConfigFromFastKv, findConfigPath, getConfig, getFastKvBaseUrlForNetwork, getHostDevelopmentPort, getProjectRoot, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, isLocalDevelopmentTarget, loadBosConfig, loadConfig, oc, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, z };
+export { AnyContractRouter, AnySchema, ApiPluginConfig, ApiPluginConfigSchema, BosConfig, BosConfigInput, BosConfigResult, BosConfigSchema, BosPluginRef, BosPluginRefSchema, BosStaging, BosStagingSchema, BuildOptions, BuildOptionsSchema, BuildResultSchema, CliCommandMeta, ClientRuntimeConfig, ClientRuntimeConfigSchema, ClientRuntimeInfo, ClientRuntimeInfoSchema, ConfigResult, ConfigResultSchema, Context, DevOptions, DevOptionsSchema, DevResultSchema, Effect, FederationEntry, FederationEntrySchema, HostConfig, HostConfigSchema, InitOptions, InitOptionsSchema, InitResult, InitResultSchema, KeyPublishOptions, KeyPublishOptionsSchema, KeyPublishResult, KeyPublishResultSchema, Layer, LoadedPluginWithBinding, NetworkId, Plugin, PluginAddOptions, PluginAddOptionsSchema, PluginAddResult, PluginAddResultSchema, PluginListResult, PluginListResultSchema, PluginManifest, PluginMetadata, PluginPublishOptions, PluginPublishOptionsSchema, PluginPublishResult, PluginPublishResultSchema, PluginRegistryEntry, PluginRemoveOptions, PluginRemoveOptionsSchema, PluginRemoveResult, PluginRemoveResultSchema, PluginRuntime, PublishOptions, PublishOptionsSchema, PublishResultSchema, RuntimeConfig, RuntimeConfigSchema, RuntimePluginConfig, RuntimePluginConfigSchema, Scope, SharedConfig, SharedConfigSchema, SharedDepConfig, SharedDepConfigSchema, SourceMode, SourceModeSchema, StartOptions, StartOptionsSchema, StartResultSchema, StatusResult, StatusResultSchema, SyncOptions, SyncOptionsSchema, SyncResult, SyncResultSchema, UiConfig, UiConfigSchema, UpgradeOptions, UpgradeOptionsSchema, UpgradeResult, UpgradeResultSchema, bosContract, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, buildRuntimePluginsForConfig, clearConfigCache, cliCommandMeta, createPlugin, createPluginRuntime, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, findConfigPath, getConfig, getFastKvBaseUrlForNetwork, getHostDevelopmentPort, getProjectRoot, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, isLocalDevelopmentTarget, loadBosConfig, loadConfig, oc, parsePluginBosUrl, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, resolvePluginRuntimeName, z };

package/dist/index.mjs

@@ -1,9 +1,9 @@
-import { buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork } from "./fastkv.mjs";
+import { buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, getFastKvBaseUrlForNetwork, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, parsePluginBosUrl } from "./fastkv.mjs";
 import { Context, Effect, Layer, PluginRuntime, Scope, createPlugin, createPluginRuntime, oc, z } from "./sdk.mjs";
 import { ApiPluginConfigSchema, BosConfigSchema, BosPluginRefSchema, BosStagingSchema, ClientRuntimeConfigSchema, ClientRuntimeInfoSchema, FederationEntrySchema, HostConfigSchema, RuntimeConfigSchema, RuntimePluginConfigSchema, SharedConfigSchema, SharedDepConfigSchema, SourceModeSchema, UiConfigSchema } from "./types.mjs";
-import { buildRuntimePluginsForConfig, clearConfigCache, findConfigPath, getConfig, getHostDevelopmentPort, getProjectRoot, isLocalDevelopmentTarget, loadBosConfig, loadConfig, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath } from "./config.mjs";
+import { buildRuntimePluginsForConfig, clearConfigCache, findConfigPath, getConfig, getHostDevelopmentPort, getProjectRoot, isLocalDevelopmentTarget, loadBosConfig, loadConfig, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, resolvePluginRuntimeName } from "./config.mjs";
 import { BuildOptionsSchema, BuildResultSchema, ConfigResultSchema, DevOptionsSchema, DevResultSchema, InitOptionsSchema, InitResultSchema, KeyPublishOptionsSchema, KeyPublishResultSchema, PluginAddOptionsSchema, PluginAddResultSchema, PluginListResultSchema, PluginPublishOptionsSchema, PluginPublishResultSchema, PluginRemoveOptionsSchema, PluginRemoveResultSchema, PublishOptionsSchema, PublishResultSchema, StartOptionsSchema, StartResultSchema, StatusResultSchema, SyncOptionsSchema, SyncResultSchema, UpgradeOptionsSchema, UpgradeResultSchema, bosContract } from "./contract.mjs";
 import { cliCommandMeta } from "./contract.meta.mjs";
 import "./plugin.mjs";
 
-export { ApiPluginConfigSchema, BosConfigSchema, BosPluginRefSchema, BosStagingSchema, BuildOptionsSchema, BuildResultSchema, ClientRuntimeConfigSchema, ClientRuntimeInfoSchema, ConfigResultSchema, Context, DevOptionsSchema, DevResultSchema, Effect, FederationEntrySchema, HostConfigSchema, InitOptionsSchema, InitResultSchema, KeyPublishOptionsSchema, KeyPublishResultSchema, Layer, PluginAddOptionsSchema, PluginAddResultSchema, PluginListResultSchema, PluginPublishOptionsSchema, PluginPublishResultSchema, PluginRemoveOptionsSchema, PluginRemoveResultSchema, PluginRuntime, PublishOptionsSchema, PublishResultSchema, RuntimeConfigSchema, RuntimePluginConfigSchema, Scope, SharedConfigSchema, SharedDepConfigSchema, SourceModeSchema, StartOptionsSchema, StartResultSchema, StatusResultSchema, SyncOptionsSchema, SyncResultSchema, UiConfigSchema, UpgradeOptionsSchema, UpgradeResultSchema, bosContract, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, buildRuntimePluginsForConfig, clearConfigCache, cliCommandMeta, createPlugin, createPluginRuntime, fetchBosConfigFromFastKv, findConfigPath, getConfig, getFastKvBaseUrlForNetwork, getHostDevelopmentPort, getProjectRoot, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, isLocalDevelopmentTarget, loadBosConfig, loadConfig, oc, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, z };
+export { ApiPluginConfigSchema, BosConfigSchema, BosPluginRefSchema, BosStagingSchema, BuildOptionsSchema, BuildResultSchema, ClientRuntimeConfigSchema, ClientRuntimeInfoSchema, ConfigResultSchema, Context, DevOptionsSchema, DevResultSchema, Effect, FederationEntrySchema, HostConfigSchema, InitOptionsSchema, InitResultSchema, KeyPublishOptionsSchema, KeyPublishResultSchema, Layer, PluginAddOptionsSchema, PluginAddResultSchema, PluginListResultSchema, PluginPublishOptionsSchema, PluginPublishResultSchema, PluginRemoveOptionsSchema, PluginRemoveResultSchema, PluginRuntime, PublishOptionsSchema, PublishResultSchema, RuntimeConfigSchema, RuntimePluginConfigSchema, Scope, SharedConfigSchema, SharedDepConfigSchema, SourceModeSchema, StartOptionsSchema, StartResultSchema, StatusResultSchema, SyncOptionsSchema, SyncResultSchema, UiConfigSchema, UpgradeOptionsSchema, UpgradeResultSchema, bosContract, buildRegistryConfigUrl, buildRegistryConfigUrlForNetwork, buildRuntimePluginsForConfig, clearConfigCache, cliCommandMeta, createPlugin, createPluginRuntime, fetchBosConfigFromFastKv, fetchPluginFromRegistry, fetchRemotePluginManifest, findConfigPath, getConfig, getFastKvBaseUrlForNetwork, getHostDevelopmentPort, getProjectRoot, getRegistryNamespaceForAccount, getRegistryNamespaceForNetwork, isLocalDevelopmentTarget, loadBosConfig, loadConfig, oc, parsePluginBosUrl, parsePort, resolveDevelopmentHostUrl, resolveLocalDevelopmentPath, resolvePluginRuntimeName, z };

package/dist/near-cli.cjs

@@ -1,6 +1,6 @@
 const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
-let effect = require("effect");
 let node_crypto = require("node:crypto");
+let effect = require("effect");
 let node_child_process = require("node:child_process");
 
 //#region src/near-cli.ts

package/dist/near-cli.mjs

@@ -1,5 +1,5 @@
-import { Effect } from "effect";
 import { generateKeyPairSync } from "node:crypto";
+import { Effect } from "effect";
 import { spawn } from "node:child_process";
 
 //#region src/near-cli.ts