frontmcp 0.12.2 → 1.0.0-beta.10

package/README.md

@@ -14,7 +14,7 @@
 [![License](https://img.shields.io/github/license/agentfront/frontmcp.svg?v=1)](https://github.com/agentfront/frontmcp/blob/main/LICENSE)
 [![Snyk](https://snyk.io/test/github/agentfront/frontmcp/badge.svg)](https://snyk.io/test/github/agentfront/frontmcp)
 
-[Docs][docs-home] • [Quickstart][docs-quickstart] • [API Reference][docs-sdk-ref] • [Discord](https://discord.gg/frontmcp)
+[Docs][docs-home] • [Quickstart][docs-quickstart] • [API Reference][docs-sdk-ref] • [Discord](https://discord.gg/53AHnJnmwR)
 
 </div>
 
@@ -39,14 +39,14 @@ export default class Server {}
 
 ## Installation
 
-**Node.js 22+** required (24 recommended).
+**Node.js 24+** required.
 
 ```bash
 # New project (recommended)
 npx frontmcp create my-app
 
 # Existing project
-npm i -D frontmcp @types/node@^22
+npm i -D frontmcp @types/node@^24
 npx frontmcp init
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "frontmcp",
-  "version": "0.12.2",
+  "version": "1.0.0-beta.10",
   "description": "FrontMCP command line interface",
   "author": "AgentFront <info@agentfront.dev>",
   "homepage": "https://docs.agentfront.dev",
@@ -23,24 +23,25 @@
   },
   "main": "./src/index.js",
   "bin": {
-    "frontmcp": "./src/cli.js"
+    "frontmcp": "./src/core/cli.js"
   },
   "engines": {
-    "node": ">=22.0.0"
+    "node": ">=24.0.0"
   },
   "dependencies": {
     "@clack/prompts": "^0.10.0",
-    "@frontmcp/utils": "0.12.2",
+    "@frontmcp/utils": "1.0.0-beta.10",
+    "commander": "^13.0.0",
     "tslib": "^2.3.0",
+    "vectoriadb": "^2.1.3",
     "@rspack/core": "^1.7.6",
     "esbuild": "^0.27.3"
   },
   "devDependencies": {
     "typescript": "^5.5.3",
     "tsx": "^4.20.6",
-    "@types/node": "^24.0.0",
-    "@modelcontextprotocol/inspector": "^0.20.0"
+    "@types/node": "^24.0.0"
   },
-  "types": "./src/index.d.ts",
+  "types": "./index.d.js",
   "type": "commonjs"
 }

package/src/commands/build/adapters/cloudflare.js

@@ -10,7 +10,7 @@ exports.cloudflareAdapter = void 0;
 exports.cloudflareAdapter = {
     moduleFormat: 'commonjs',
     getEntryTemplate: (mainModulePath) => `// Auto-generated Cloudflare Workers entry point
-// Generated by: frontmcp build --adapter cloudflare
+// Generated by: frontmcp build --target cloudflare
 process.env.FRONTMCP_SERVERLESS = '1';
 
 require('${mainModulePath}');

package/src/commands/build/adapters/cloudflare.js.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../../../../src/commands/build/adapters/cloudflare.ts"],"names":[],"mappings":";;;AAEA;;;;;GAKG;AACU,QAAA,iBAAiB,GAAoB;IAChD,YAAY,EAAE,UAAU;IAExB,gBAAgB,EAAE,CAAC,cAAsB,EAAE,EAAE,CAAC;;;;WAIrC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyDxB;IAEC,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC;;;CAG9B;IAEC,cAAc,EAAE,eAAe;CAChC,CAAC","sourcesContent":["import { AdapterTemplate } from '../types';\n\n/**\n * Cloudflare Workers adapter - edge deployment on Cloudflare.\n * Compiles to CommonJS and adapts the Express app to Cloudflare's fetch API.\n *\n * @see https://developers.cloudflare.com/workers/\n */\nexport const cloudflareAdapter: AdapterTemplate = {\n  moduleFormat: 'commonjs',\n\n  getEntryTemplate: (mainModulePath: string) => `// Auto-generated Cloudflare Workers entry point\n// Generated by: frontmcp build --adapter cloudflare\nprocess.env.FRONTMCP_SERVERLESS = '1';\n\nrequire('${mainModulePath}');\nconst { getServerlessHandlerAsync } = require('@frontmcp/sdk');\n\nlet app = null;\n\nasync function handleRequest(request) {\n  if (!app) {\n    app = await getServerlessHandlerAsync();\n  }\n\n  // Convert Cloudflare Request to Node.js format\n  const url = new URL(request.url);\n  const req = {\n    method: request.method,\n    url: url.pathname + url.search,\n    headers: Object.fromEntries(request.headers),\n    body: request.body,\n  };\n\n  return new Promise((resolve) => {\n    const res = {\n      statusCode: 200,\n      headers: {},\n      body: '',\n      status(code) { this.statusCode = code; return this; },\n      setHeader(key, value) { this.headers[key] = value; },\n      json(data) {\n        this.headers['Content-Type'] = 'application/json';\n        this.body = JSON.stringify(data);\n        resolve(new Response(this.body, {\n          status: this.statusCode,\n          headers: this.headers,\n        }));\n      },\n      send(data) {\n        this.body = data;\n        resolve(new Response(this.body, {\n          status: this.statusCode,\n          headers: this.headers,\n        }));\n      },\n      end() {\n        resolve(new Response(this.body, {\n          status: this.statusCode,\n          headers: this.headers,\n        }));\n      },\n    };\n    app(req, res);\n  });\n}\n\nmodule.exports = {\n  async fetch(request, env, ctx) {\n    return handleRequest(request);\n  }\n};\n`,\n\n  getConfig: (_cwd: string) => `name = \"frontmcp-worker\"\nmain = \"dist/index.js\"\ncompatibility_date = \"2024-01-01\"\n`,\n\n  configFileName: 'wrangler.toml',\n};\n"]}
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../../../../src/commands/build/adapters/cloudflare.ts"],"names":[],"mappings":";;;AAEA;;;;;GAKG;AACU,QAAA,iBAAiB,GAAoB;IAChD,YAAY,EAAE,UAAU;IAExB,gBAAgB,EAAE,CAAC,cAAsB,EAAE,EAAE,CAAC;;;;WAIrC,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyDxB;IAEC,SAAS,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC;;;CAG9B;IAEC,cAAc,EAAE,eAAe;CAChC,CAAC","sourcesContent":["import { AdapterTemplate } from '../types';\n\n/**\n * Cloudflare Workers adapter - edge deployment on Cloudflare.\n * Compiles to CommonJS and adapts the Express app to Cloudflare's fetch API.\n *\n * @see https://developers.cloudflare.com/workers/\n */\nexport const cloudflareAdapter: AdapterTemplate = {\n  moduleFormat: 'commonjs',\n\n  getEntryTemplate: (mainModulePath: string) => `// Auto-generated Cloudflare Workers entry point\n// Generated by: frontmcp build --target cloudflare\nprocess.env.FRONTMCP_SERVERLESS = '1';\n\nrequire('${mainModulePath}');\nconst { getServerlessHandlerAsync } = require('@frontmcp/sdk');\n\nlet app = null;\n\nasync function handleRequest(request) {\n  if (!app) {\n    app = await getServerlessHandlerAsync();\n  }\n\n  // Convert Cloudflare Request to Node.js format\n  const url = new URL(request.url);\n  const req = {\n    method: request.method,\n    url: url.pathname + url.search,\n    headers: Object.fromEntries(request.headers),\n    body: request.body,\n  };\n\n  return new Promise((resolve) => {\n    const res = {\n      statusCode: 200,\n      headers: {},\n      body: '',\n      status(code) { this.statusCode = code; return this; },\n      setHeader(key, value) { this.headers[key] = value; },\n      json(data) {\n        this.headers['Content-Type'] = 'application/json';\n        this.body = JSON.stringify(data);\n        resolve(new Response(this.body, {\n          status: this.statusCode,\n          headers: this.headers,\n        }));\n      },\n      send(data) {\n        this.body = data;\n        resolve(new Response(this.body, {\n          status: this.statusCode,\n          headers: this.headers,\n        }));\n      },\n      end() {\n        resolve(new Response(this.body, {\n          status: this.statusCode,\n          headers: this.headers,\n        }));\n      },\n    };\n    app(req, res);\n  });\n}\n\nmodule.exports = {\n  async fetch(request, env, ctx) {\n    return handleRequest(request);\n  }\n};\n`,\n\n  getConfig: (_cwd: string) => `name = \"frontmcp-worker\"\nmain = \"dist/index.js\"\ncompatibility_date = \"2024-01-01\"\n`,\n\n  configFileName: 'wrangler.toml',\n};\n"]}

package/src/commands/build/adapters/lambda.js

@@ -26,7 +26,7 @@ exports.lambdaAdapter = {
 process.env.FRONTMCP_SERVERLESS = '1';
 `,
     getEntryTemplate: (mainModulePath) => `// Auto-generated AWS Lambda entry point
-// Generated by: frontmcp build --adapter lambda
+// Generated by: frontmcp build --target lambda
 //
 // IMPORTANT: This adapter requires @codegenie/serverless-express
 // Install it with: npm install @codegenie/serverless-express

package/src/commands/build/adapters/lambda.js.map

@@ -1 +1 @@
-{"version":3,"file":"lambda.js","sourceRoot":"","sources":["../../../../../src/commands/build/adapters/lambda.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;GAcG;AACU,QAAA,aAAa,GAAoB;IAC5C,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,IAAI;IAClB,YAAY,EAAE,aAAa;IAE3B,gBAAgB,EAAE,GAAG,EAAE,CAAC;;;;CAIzB;IAEC,gBAAgB,EAAE,CAAC,cAAsB,EAAE,EAAE,CAAC;;;;;;;UAOtC,cAAc;;;;;;;;;;;;;;;;;CAiBvB;IAEC,qEAAqE;CACtE,CAAC","sourcesContent":["import { AdapterTemplate } from '../types';\n\n/**\n * AWS Lambda adapter - serverless deployment on AWS Lambda.\n * Compiles to ESM, bundles with rspack to CJS for maximum compatibility.\n *\n * Prerequisites:\n *   npm install @codegenie/serverless-express\n *\n * The build process:\n * 1. TypeScript compiles to ESM in dist/\n * 2. serverless-setup.js is generated (sets FRONTMCP_SERVERLESS=1)\n * 3. index.js imports setup first, then main module\n * 4. rspack bundles everything into handler.cjs\n *\n * @see https://github.com/codegenie/serverless-express\n */\nexport const lambdaAdapter: AdapterTemplate = {\n  moduleFormat: 'esnext',\n  shouldBundle: true,\n  bundleOutput: 'handler.cjs',\n\n  getSetupTemplate: () => `// Serverless environment setup - MUST be imported first\n// This sets FRONTMCP_SERVERLESS before any decorators run\n// Required because ESM hoists imports before other statements\nprocess.env.FRONTMCP_SERVERLESS = '1';\n`,\n\n  getEntryTemplate: (mainModulePath: string) => `// Auto-generated AWS Lambda entry point\n// Generated by: frontmcp build --adapter lambda\n//\n// IMPORTANT: This adapter requires @codegenie/serverless-express\n// Install it with: npm install @codegenie/serverless-express\n//\nimport './serverless-setup.js';\nimport '${mainModulePath}';\nimport { getServerlessHandlerAsync } from '@frontmcp/sdk';\nimport serverlessExpress from '@codegenie/serverless-express';\n\nlet serverlessExpressInstance = null;\n\nasync function setup() {\n  const app = await getServerlessHandlerAsync();\n  serverlessExpressInstance = serverlessExpress({ app });\n}\n\nexport const handler = async (event, context) => {\n  if (!serverlessExpressInstance) {\n    await setup();\n  }\n  return serverlessExpressInstance(event, context);\n};\n`,\n\n  // No config file - user manages serverless.yml, SAM template, or CDK\n};\n"]}
+{"version":3,"file":"lambda.js","sourceRoot":"","sources":["../../../../../src/commands/build/adapters/lambda.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;GAcG;AACU,QAAA,aAAa,GAAoB;IAC5C,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,IAAI;IAClB,YAAY,EAAE,aAAa;IAE3B,gBAAgB,EAAE,GAAG,EAAE,CAAC;;;;CAIzB;IAEC,gBAAgB,EAAE,CAAC,cAAsB,EAAE,EAAE,CAAC;;;;;;;UAOtC,cAAc;;;;;;;;;;;;;;;;;CAiBvB;IAEC,qEAAqE;CACtE,CAAC","sourcesContent":["import { AdapterTemplate } from '../types';\n\n/**\n * AWS Lambda adapter - serverless deployment on AWS Lambda.\n * Compiles to ESM, bundles with rspack to CJS for maximum compatibility.\n *\n * Prerequisites:\n *   npm install @codegenie/serverless-express\n *\n * The build process:\n * 1. TypeScript compiles to ESM in dist/\n * 2. serverless-setup.js is generated (sets FRONTMCP_SERVERLESS=1)\n * 3. index.js imports setup first, then main module\n * 4. rspack bundles everything into handler.cjs\n *\n * @see https://github.com/codegenie/serverless-express\n */\nexport const lambdaAdapter: AdapterTemplate = {\n  moduleFormat: 'esnext',\n  shouldBundle: true,\n  bundleOutput: 'handler.cjs',\n\n  getSetupTemplate: () => `// Serverless environment setup - MUST be imported first\n// This sets FRONTMCP_SERVERLESS before any decorators run\n// Required because ESM hoists imports before other statements\nprocess.env.FRONTMCP_SERVERLESS = '1';\n`,\n\n  getEntryTemplate: (mainModulePath: string) => `// Auto-generated AWS Lambda entry point\n// Generated by: frontmcp build --target lambda\n//\n// IMPORTANT: This adapter requires @codegenie/serverless-express\n// Install it with: npm install @codegenie/serverless-express\n//\nimport './serverless-setup.js';\nimport '${mainModulePath}';\nimport { getServerlessHandlerAsync } from '@frontmcp/sdk';\nimport serverlessExpress from '@codegenie/serverless-express';\n\nlet serverlessExpressInstance = null;\n\nasync function setup() {\n  const app = await getServerlessHandlerAsync();\n  serverlessExpressInstance = serverlessExpress({ app });\n}\n\nexport const handler = async (event, context) => {\n  if (!serverlessExpressInstance) {\n    await setup();\n  }\n  return serverlessExpressInstance(event, context);\n};\n`,\n\n  // No config file - user manages serverless.yml, SAM template, or CDK\n};\n"]}

package/src/commands/build/adapters/vercel.js

@@ -57,7 +57,7 @@ exports.vercelAdapter = {
 process.env.FRONTMCP_SERVERLESS = '1';
 `,
     getEntryTemplate: (mainModulePath) => `// Auto-generated Vercel entry point
-// Generated by: frontmcp build --adapter vercel
+// Generated by: frontmcp build --target vercel
 import './serverless-setup.js';
 import '${mainModulePath}';
 import { getServerlessHandlerAsync } from '@frontmcp/sdk';
@@ -150,7 +150,7 @@ export default async function handler(req, res) {
         }
         // Create function config (.vc-config.json)
         const vcConfig = {
-            runtime: 'nodejs22.x',
+            runtime: 'nodejs24.x',
             handler: bundleOutput,
             launcherType: 'Nodejs',
         };

package/src/commands/build/adapters/vercel.js.map

@@ -1 +1 @@
-{"version":3,"file":"vercel.js","sourceRoot":"","sources":["../../../../../src/commands/build/adapters/vercel.ts"],"names":[],"mappings":";;;;AAAA,mDAA6B;AAC7B,2BAAgC;AAChC,iDAAyC;AACzC,2CAA0F;AAU1F,MAAM,gBAAgB,GAAiD;IACrE,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE;IACrD,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE;IACxD,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,YAAY,EAAE;IACpD,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE;CACtD,CAAC;AAEF,MAAM,cAAc,GAAmC;IACrD,WAAW,EAAE,KAAK;IAClB,gBAAgB,EAAE,MAAM;IACxB,WAAW,EAAE,MAAM;IACnB,mBAAmB,EAAE,KAAK;CAC3B,CAAC;AAEF;;;GAGG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,mBAAmB;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,aAAa,GAAoB;IAC5C,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,IAAI;IAClB,YAAY,EAAE,aAAa;IAE3B,gBAAgB,EAAE,GAAG,EAAE,CAAC;;;;CAIzB;IAEC,gBAAgB,EAAE,CAAC,cAAsB,EAAE,EAAE,CAAC;;;UAGtC,cAAc;;;;;;;;;;;;CAYvB;IAEC,8DAA8D;IAC9D,SAAS,EAAE,CAAC,GAAW,EAAE,EAAE;QACzB,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,MAAM,CAAC,GAAG;YACxB,cAAc,EAAE,MAAM,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IAED,cAAc,EAAE,aAAa;IAE7B;;;;;;;;;;;;OAYG;IACH,UAAU,EAAE,KAAK,EAAE,MAAc,EAAE,GAAW,EAAE,YAAoB,EAAE,EAAE;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAEhE,qBAAqB;QACrB,MAAM,IAAA,aAAK,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,qDAAqD;QACrD,gEAAgE;QAChE,MAAM,SAAS,GAAG,MAAM,IAAA,eAAO,EAAC,MAAM,CAAC,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,IAAA,YAAI,EAAC,OAAO,CAAC,CAAC;YAErC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3B,+BAA+B;gBAC/B,MAAM,IAAA,UAAE,EAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,aAAa;gBACb,MAAM,IAAA,gBAAQ,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,qFAAqF;QACrF,mFAAmF;QACnF,MAAM,WAAW,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAE3D,8CAA8C;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,gBAAQ,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QAExE,mCAAmC;QACnC,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,OAAO,EAAE,CAAC;gBACZ,aAAa,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,4CAA4C;YAC5C,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YAC5E,MAAM,IAAA,iBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAE1F,0DAA0D;YAC1D,IAAI,CAAC;gBACH,IAAA,wBAAQ,EAAC,eAAe,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE;oBAC5D,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,MAAM;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,YAAY;YACrB,YAAY,EAAE,QAAQ;SACvB,CAAC;QACF,MAAM,IAAA,iBAAS,EACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAClC,CAAC;QAEF,kDAAkD;QAClD,MAAM,YAAY,GAAG;YACnB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC3C,CAAC;QACF,MAAM,IAAA,iBAAS,EACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CACtC,CAAC;IACJ,CAAC;CACF,CAAC","sourcesContent":["import * as path from 'path';\nimport { existsSync } from 'fs';\nimport { execSync } from 'child_process';\nimport { mkdir, readdir, stat, cp, copyFile, readFile, writeFile } from '@frontmcp/utils';\nimport { AdapterTemplate } from '../types';\n\ntype PackageManager = 'npm' | 'yarn' | 'pnpm' | 'bun';\n\ninterface PackageManagerConfig {\n  install: string;\n  run: string;\n}\n\nconst PACKAGE_MANAGERS: Record<PackageManager, PackageManagerConfig> = {\n  bun: { install: 'bun install', run: 'bun run build' },\n  pnpm: { install: 'pnpm install', run: 'pnpm run build' },\n  yarn: { install: 'yarn install', run: 'yarn build' },\n  npm: { install: 'npm install', run: 'npm run build' },\n};\n\nconst LOCKFILE_TO_PM: Record<string, PackageManager> = {\n  'bun.lockb': 'bun',\n  'pnpm-lock.yaml': 'pnpm',\n  'yarn.lock': 'yarn',\n  'package-lock.json': 'npm',\n};\n\n/**\n * Detect package manager based on lockfile presence.\n * Priority: bun > pnpm > yarn > npm (fastest to slowest install times)\n */\nfunction detectPackageManager(cwd: string): PackageManager {\n  for (const [lockfile, pm] of Object.entries(LOCKFILE_TO_PM)) {\n    if (existsSync(path.join(cwd, lockfile))) {\n      return pm;\n    }\n  }\n  return 'npm'; // Default fallback\n}\n\n/**\n * Vercel adapter - serverless deployment on Vercel.\n * Compiles to ESM, bundles with rspack to CJS for maximum compatibility.\n *\n * Uses Vercel Build Output API for deployment:\n * - Creates .vercel/output/config.json with routing\n * - Creates .vercel/output/functions/index.func/ with handler\n *\n * The build process:\n * 1. TypeScript compiles to ESM in dist/\n * 2. serverless-setup.js is generated (sets FRONTMCP_SERVERLESS=1)\n * 3. index.js imports setup first, then main module\n * 4. rspack bundles everything into handler.cjs\n * 5. Build Output API structure is created in .vercel/output/\n *\n * @see https://vercel.com/docs/build-output-api/v3\n */\nexport const vercelAdapter: AdapterTemplate = {\n  moduleFormat: 'esnext',\n  shouldBundle: true,\n  bundleOutput: 'handler.cjs',\n\n  getSetupTemplate: () => `// Serverless environment setup - MUST be imported first\n// This sets FRONTMCP_SERVERLESS before any decorators run\n// Required because ESM hoists imports before other statements\nprocess.env.FRONTMCP_SERVERLESS = '1';\n`,\n\n  getEntryTemplate: (mainModulePath: string) => `// Auto-generated Vercel entry point\n// Generated by: frontmcp build --adapter vercel\nimport './serverless-setup.js';\nimport '${mainModulePath}';\nimport { getServerlessHandlerAsync } from '@frontmcp/sdk';\n\nlet handlerPromise = null;\n\nexport default async function handler(req, res) {\n  if (!handlerPromise) {\n    handlerPromise = getServerlessHandlerAsync();\n  }\n  const app = await handlerPromise;\n  return app(req, res);\n}\n`,\n\n  // Detect package manager and generate appropriate vercel.json\n  getConfig: (cwd: string) => {\n    const pm = detectPackageManager(cwd);\n    const config = PACKAGE_MANAGERS[pm];\n    return {\n      version: 2,\n      buildCommand: config.run,\n      installCommand: config.install,\n    };\n  },\n\n  configFileName: 'vercel.json',\n\n  /**\n   * Create Vercel Build Output API structure after bundling.\n   * This allows Vercel to deploy the function without needing an /api folder.\n   *\n   * Structure created:\n   * .vercel/output/\n   * ├── config.json          (routes all requests to index function)\n   * └── functions/\n   *     └── index.func/\n   *         ├── .vc-config.json  (Node.js 22 runtime config)\n   *         ├── handler.cjs      (bundled handler + chunks)\n   *         └── node_modules/    (runtime dependencies that can't be bundled)\n   */\n  postBundle: async (outDir: string, cwd: string, bundleOutput: string) => {\n    const outputDir = path.join(cwd, '.vercel', 'output');\n    const funcDir = path.join(outputDir, 'functions', 'index.func');\n\n    // Create directories\n    await mkdir(funcDir, { recursive: true });\n\n    // Copy all files from dist to the function directory\n    // This includes handler.cjs and any chunk files (*.handler.cjs)\n    const distFiles = await readdir(outDir);\n    for (const file of distFiles) {\n      const srcPath = path.join(outDir, file);\n      const destPath = path.join(funcDir, file);\n      const fileStat = await stat(srcPath);\n\n      if (fileStat.isDirectory()) {\n        // Recursively copy directories\n        await cp(srcPath, destPath, { recursive: true });\n      } else {\n        // Copy files\n        await copyFile(srcPath, destPath);\n      }\n    }\n\n    // Install runtime dependencies that can't be statically bundled (dynamic requires)\n    // These are packages loaded via require() inside functions that rspack can't analyze\n    // We install them fresh to ensure correct platform binaries (linux-x64 for Vercel)\n    const runtimeDeps = ['@vercel/kv', 'esbuild', '@swc/core'];\n\n    // Read package.json to get the exact versions\n    const pkgJsonPath = path.join(cwd, 'package.json');\n    const pkgJson = JSON.parse(await readFile(pkgJsonPath, 'utf-8'));\n    const allDeps = { ...pkgJson.dependencies, ...pkgJson.devDependencies };\n\n    // Build list of deps with versions\n    const depsToInstall: string[] = [];\n    for (const dep of runtimeDeps) {\n      const version = allDeps[dep];\n      if (version) {\n        depsToInstall.push(`${dep}@${version}`);\n      }\n    }\n\n    if (depsToInstall.length > 0) {\n      // Create package.json in function directory\n      const funcPkgJson = { name: 'index.func', private: true, dependencies: {} };\n      await writeFile(path.join(funcDir, 'package.json'), JSON.stringify(funcPkgJson, null, 2));\n\n      // Install dependencies using npm (works on all platforms)\n      try {\n        execSync(`npm install ${depsToInstall.join(' ')} --omit=dev`, {\n          cwd: funcDir,\n          stdio: 'pipe',\n        });\n      } catch {\n        // Silently continue if install fails - the dep might not be needed\n      }\n    }\n\n    // Create function config (.vc-config.json)\n    const vcConfig = {\n      runtime: 'nodejs22.x',\n      handler: bundleOutput,\n      launcherType: 'Nodejs',\n    };\n    await writeFile(\n      path.join(funcDir, '.vc-config.json'),\n      JSON.stringify(vcConfig, null, 2),\n    );\n\n    // Create output config (config.json) with routing\n    const outputConfig = {\n      version: 3,\n      routes: [{ src: '/(.*)', dest: '/index' }],\n    };\n    await writeFile(\n      path.join(outputDir, 'config.json'),\n      JSON.stringify(outputConfig, null, 2),\n    );\n  },\n};\n"]}
+{"version":3,"file":"vercel.js","sourceRoot":"","sources":["../../../../../src/commands/build/adapters/vercel.ts"],"names":[],"mappings":";;;;AAAA,mDAA6B;AAC7B,2BAAgC;AAChC,iDAAyC;AACzC,2CAA0F;AAU1F,MAAM,gBAAgB,GAAiD;IACrE,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE;IACrD,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,gBAAgB,EAAE;IACxD,IAAI,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,YAAY,EAAE;IACpD,GAAG,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,eAAe,EAAE;CACtD,CAAC;AAEF,MAAM,cAAc,GAAmC;IACrD,WAAW,EAAE,KAAK;IAClB,gBAAgB,EAAE,MAAM;IACxB,WAAW,EAAE,MAAM;IACnB,mBAAmB,EAAE,KAAK;CAC3B,CAAC;AAEF;;;GAGG;AACH,SAAS,oBAAoB,CAAC,GAAW;IACvC,KAAK,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,mBAAmB;AACnC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACU,QAAA,aAAa,GAAoB;IAC5C,YAAY,EAAE,QAAQ;IACtB,YAAY,EAAE,IAAI;IAClB,YAAY,EAAE,aAAa;IAE3B,gBAAgB,EAAE,GAAG,EAAE,CAAC;;;;CAIzB;IAEC,gBAAgB,EAAE,CAAC,cAAsB,EAAE,EAAE,CAAC;;;UAGtC,cAAc;;;;;;;;;;;;CAYvB;IAEC,8DAA8D;IAC9D,SAAS,EAAE,CAAC,GAAW,EAAE,EAAE;QACzB,MAAM,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACpC,OAAO;YACL,OAAO,EAAE,CAAC;YACV,YAAY,EAAE,MAAM,CAAC,GAAG;YACxB,cAAc,EAAE,MAAM,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IAED,cAAc,EAAE,aAAa;IAE7B;;;;;;;;;;;;OAYG;IACH,UAAU,EAAE,KAAK,EAAE,MAAc,EAAE,GAAW,EAAE,YAAoB,EAAE,EAAE;QACtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAEhE,qBAAqB;QACrB,MAAM,IAAA,aAAK,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE1C,qDAAqD;QACrD,gEAAgE;QAChE,MAAM,SAAS,GAAG,MAAM,IAAA,eAAO,EAAC,MAAM,CAAC,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,IAAA,YAAI,EAAC,OAAO,CAAC,CAAC;YAErC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3B,+BAA+B;gBAC/B,MAAM,IAAA,UAAE,EAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,aAAa;gBACb,MAAM,IAAA,gBAAQ,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,mFAAmF;QACnF,qFAAqF;QACrF,mFAAmF;QACnF,MAAM,WAAW,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QAE3D,8CAA8C;QAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAA,gBAAQ,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QAExE,mCAAmC;QACnC,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC7B,IAAI,OAAO,EAAE,CAAC;gBACZ,aAAa,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,4CAA4C;YAC5C,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YAC5E,MAAM,IAAA,iBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAE1F,0DAA0D;YAC1D,IAAI,CAAC;gBACH,IAAA,wBAAQ,EAAC,eAAe,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE;oBAC5D,GAAG,EAAE,OAAO;oBACZ,KAAK,EAAE,MAAM;iBACd,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QAED,2CAA2C;QAC3C,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,YAAY;YACrB,OAAO,EAAE,YAAY;YACrB,YAAY,EAAE,QAAQ;SACvB,CAAC;QACF,MAAM,IAAA,iBAAS,EACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,EACrC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAClC,CAAC;QAEF,kDAAkD;QAClD,MAAM,YAAY,GAAG;YACnB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC3C,CAAC;QACF,MAAM,IAAA,iBAAS,EACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CACtC,CAAC;IACJ,CAAC;CACF,CAAC","sourcesContent":["import * as path from 'path';\nimport { existsSync } from 'fs';\nimport { execSync } from 'child_process';\nimport { mkdir, readdir, stat, cp, copyFile, readFile, writeFile } from '@frontmcp/utils';\nimport { AdapterTemplate } from '../types';\n\ntype PackageManager = 'npm' | 'yarn' | 'pnpm' | 'bun';\n\ninterface PackageManagerConfig {\n  install: string;\n  run: string;\n}\n\nconst PACKAGE_MANAGERS: Record<PackageManager, PackageManagerConfig> = {\n  bun: { install: 'bun install', run: 'bun run build' },\n  pnpm: { install: 'pnpm install', run: 'pnpm run build' },\n  yarn: { install: 'yarn install', run: 'yarn build' },\n  npm: { install: 'npm install', run: 'npm run build' },\n};\n\nconst LOCKFILE_TO_PM: Record<string, PackageManager> = {\n  'bun.lockb': 'bun',\n  'pnpm-lock.yaml': 'pnpm',\n  'yarn.lock': 'yarn',\n  'package-lock.json': 'npm',\n};\n\n/**\n * Detect package manager based on lockfile presence.\n * Priority: bun > pnpm > yarn > npm (fastest to slowest install times)\n */\nfunction detectPackageManager(cwd: string): PackageManager {\n  for (const [lockfile, pm] of Object.entries(LOCKFILE_TO_PM)) {\n    if (existsSync(path.join(cwd, lockfile))) {\n      return pm;\n    }\n  }\n  return 'npm'; // Default fallback\n}\n\n/**\n * Vercel adapter - serverless deployment on Vercel.\n * Compiles to ESM, bundles with rspack to CJS for maximum compatibility.\n *\n * Uses Vercel Build Output API for deployment:\n * - Creates .vercel/output/config.json with routing\n * - Creates .vercel/output/functions/index.func/ with handler\n *\n * The build process:\n * 1. TypeScript compiles to ESM in dist/\n * 2. serverless-setup.js is generated (sets FRONTMCP_SERVERLESS=1)\n * 3. index.js imports setup first, then main module\n * 4. rspack bundles everything into handler.cjs\n * 5. Build Output API structure is created in .vercel/output/\n *\n * @see https://vercel.com/docs/build-output-api/v3\n */\nexport const vercelAdapter: AdapterTemplate = {\n  moduleFormat: 'esnext',\n  shouldBundle: true,\n  bundleOutput: 'handler.cjs',\n\n  getSetupTemplate: () => `// Serverless environment setup - MUST be imported first\n// This sets FRONTMCP_SERVERLESS before any decorators run\n// Required because ESM hoists imports before other statements\nprocess.env.FRONTMCP_SERVERLESS = '1';\n`,\n\n  getEntryTemplate: (mainModulePath: string) => `// Auto-generated Vercel entry point\n// Generated by: frontmcp build --target vercel\nimport './serverless-setup.js';\nimport '${mainModulePath}';\nimport { getServerlessHandlerAsync } from '@frontmcp/sdk';\n\nlet handlerPromise = null;\n\nexport default async function handler(req, res) {\n  if (!handlerPromise) {\n    handlerPromise = getServerlessHandlerAsync();\n  }\n  const app = await handlerPromise;\n  return app(req, res);\n}\n`,\n\n  // Detect package manager and generate appropriate vercel.json\n  getConfig: (cwd: string) => {\n    const pm = detectPackageManager(cwd);\n    const config = PACKAGE_MANAGERS[pm];\n    return {\n      version: 2,\n      buildCommand: config.run,\n      installCommand: config.install,\n    };\n  },\n\n  configFileName: 'vercel.json',\n\n  /**\n   * Create Vercel Build Output API structure after bundling.\n   * This allows Vercel to deploy the function without needing an /api folder.\n   *\n   * Structure created:\n   * .vercel/output/\n   * ├── config.json          (routes all requests to index function)\n   * └── functions/\n   *     └── index.func/\n   *         ├── .vc-config.json  (Node.js 22 runtime config)\n   *         ├── handler.cjs      (bundled handler + chunks)\n   *         └── node_modules/    (runtime dependencies that can't be bundled)\n   */\n  postBundle: async (outDir: string, cwd: string, bundleOutput: string) => {\n    const outputDir = path.join(cwd, '.vercel', 'output');\n    const funcDir = path.join(outputDir, 'functions', 'index.func');\n\n    // Create directories\n    await mkdir(funcDir, { recursive: true });\n\n    // Copy all files from dist to the function directory\n    // This includes handler.cjs and any chunk files (*.handler.cjs)\n    const distFiles = await readdir(outDir);\n    for (const file of distFiles) {\n      const srcPath = path.join(outDir, file);\n      const destPath = path.join(funcDir, file);\n      const fileStat = await stat(srcPath);\n\n      if (fileStat.isDirectory()) {\n        // Recursively copy directories\n        await cp(srcPath, destPath, { recursive: true });\n      } else {\n        // Copy files\n        await copyFile(srcPath, destPath);\n      }\n    }\n\n    // Install runtime dependencies that can't be statically bundled (dynamic requires)\n    // These are packages loaded via require() inside functions that rspack can't analyze\n    // We install them fresh to ensure correct platform binaries (linux-x64 for Vercel)\n    const runtimeDeps = ['@vercel/kv', 'esbuild', '@swc/core'];\n\n    // Read package.json to get the exact versions\n    const pkgJsonPath = path.join(cwd, 'package.json');\n    const pkgJson = JSON.parse(await readFile(pkgJsonPath, 'utf-8'));\n    const allDeps = { ...pkgJson.dependencies, ...pkgJson.devDependencies };\n\n    // Build list of deps with versions\n    const depsToInstall: string[] = [];\n    for (const dep of runtimeDeps) {\n      const version = allDeps[dep];\n      if (version) {\n        depsToInstall.push(`${dep}@${version}`);\n      }\n    }\n\n    if (depsToInstall.length > 0) {\n      // Create package.json in function directory\n      const funcPkgJson = { name: 'index.func', private: true, dependencies: {} };\n      await writeFile(path.join(funcDir, 'package.json'), JSON.stringify(funcPkgJson, null, 2));\n\n      // Install dependencies using npm (works on all platforms)\n      try {\n        execSync(`npm install ${depsToInstall.join(' ')} --omit=dev`, {\n          cwd: funcDir,\n          stdio: 'pipe',\n        });\n      } catch {\n        // Silently continue if install fails - the dep might not be needed\n      }\n    }\n\n    // Create function config (.vc-config.json)\n    const vcConfig = {\n      runtime: 'nodejs24.x',\n      handler: bundleOutput,\n      launcherType: 'Nodejs',\n    };\n    await writeFile(\n      path.join(funcDir, '.vc-config.json'),\n      JSON.stringify(vcConfig, null, 2),\n    );\n\n    // Create output config (config.json) with routing\n    const outputConfig = {\n      version: 3,\n      routes: [{ src: '/(.*)', dest: '/index' }],\n    };\n    await writeFile(\n      path.join(outputDir, 'config.json'),\n      JSON.stringify(outputConfig, null, 2),\n    );\n  },\n};\n"]}

package/src/commands/build/browser/index.d.ts

@@ -0,0 +1,17 @@
+import { ParsedArgs } from '../../../core/args';
+/**
+ * Build a browser-compatible ESM bundle.
+ *
+ * Uses esbuild with `platform: 'browser'` which resolves conditional imports
+ * (`#imports` in package.json) to browser implementations automatically:
+ * - Crypto → @noble/hashes + @noble/ciphers (no node:crypto)
+ * - AsyncLocalStorage → stack-based polyfill
+ * - EventEmitter → Map-based polyfill
+ * - SSE/Express/Stdio → stubs that throw on instantiation
+ *
+ * @example
+ * ```bash
+ * frontmcp build --target browser
+ * ```
+ */
+export declare function buildBrowser(opts: ParsedArgs): Promise<void>;

package/src/commands/build/browser/index.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildBrowser = buildBrowser;
+const tslib_1 = require("tslib");
+const path = tslib_1.__importStar(require("path"));
+const colors_1 = require("../../../core/colors");
+const utils_1 = require("@frontmcp/utils");
+const fs_1 = require("../../../shared/fs");
+/**
+ * Build a browser-compatible ESM bundle.
+ *
+ * Uses esbuild with `platform: 'browser'` which resolves conditional imports
+ * (`#imports` in package.json) to browser implementations automatically:
+ * - Crypto → @noble/hashes + @noble/ciphers (no node:crypto)
+ * - AsyncLocalStorage → stack-based polyfill
+ * - EventEmitter → Map-based polyfill
+ * - SSE/Express/Stdio → stubs that throw on instantiation
+ *
+ * @example
+ * ```bash
+ * frontmcp build --target browser
+ * ```
+ */
+async function buildBrowser(opts) {
+    const cwd = process.cwd();
+    const entry = await (0, fs_1.resolveEntry)(cwd, opts.entry);
+    const outDir = path.resolve(cwd, opts.outDir || 'dist');
+    await (0, utils_1.ensureDir)(outDir);
+    const pkg = require(path.join(cwd, 'package.json'));
+    const appName = pkg.name || path.basename(cwd);
+    console.log(`${(0, colors_1.c)('cyan', '[build:browser]')} entry: ${path.relative(cwd, entry)}`);
+    console.log(`${(0, colors_1.c)('cyan', '[build:browser]')} outDir: ${path.relative(cwd, outDir)}`);
+    const esbuild = await import('esbuild');
+    // Build ESM bundle for browsers
+    console.log((0, colors_1.c)('cyan', '[build:browser] Bundling ESM for browser...'));
+    await esbuild.build({
+        entryPoints: [entry],
+        bundle: true,
+        platform: 'browser',
+        format: 'esm',
+        target: 'es2022',
+        outfile: path.join(outDir, `${appName}.browser.mjs`),
+        keepNames: true,
+        treeShaking: true,
+        sourcemap: true,
+        // Browser-safe: keep React and peer deps external (user's bundler handles them)
+        external: [
+            'react', 'react-dom', 'react-router', 'react-router-dom',
+            // Keep @frontmcp/* external — user installs them
+            '@frontmcp/sdk', '@frontmcp/di', '@frontmcp/utils',
+            '@frontmcp/auth', '@frontmcp/react',
+            'reflect-metadata',
+            // Node.js-only — these should be tree-shaken by platform: 'browser'
+            // but list explicitly to avoid accidental bundling
+            'better-sqlite3', 'fsevents', 'ioredis',
+            ...Object.keys(pkg.peerDependencies || {}),
+        ],
+        // Resolve conditional imports to browser variants
+        conditions: ['browser', 'import', 'default'],
+        define: {
+            'process.env.NODE_ENV': '"production"',
+        },
+    });
+    console.log((0, colors_1.c)('green', `\n  Browser build complete:`));
+    console.log((0, colors_1.c)('gray', `  ESM: ${appName}.browser.mjs`));
+    console.log((0, colors_1.c)('gray', `  Source map: ${appName}.browser.mjs.map`));
+}
+//# sourceMappingURL=index.js.map

package/src/commands/build/browser/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/commands/build/browser/index.ts"],"names":[],"mappings":";;AAqBA,oCAgDC;;AArED,mDAA6B;AAE7B,iDAAyC;AACzC,2CAA4C;AAC5C,2CAAkD;AAElD;;;;;;;;;;;;;;GAcG;AACI,KAAK,UAAU,YAAY,CAAC,IAAgB;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,IAAA,iBAAY,EAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;IACxD,MAAM,IAAA,iBAAS,EAAC,MAAM,CAAC,CAAC;IAExB,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE/C,OAAO,CAAC,GAAG,CAAC,GAAG,IAAA,UAAC,EAAC,MAAM,EAAE,iBAAiB,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,GAAG,IAAA,UAAC,EAAC,MAAM,EAAE,iBAAiB,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAErF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAExC,gCAAgC;IAChC,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,CAAC,KAAK,CAAC;QAClB,WAAW,EAAE,CAAC,KAAK,CAAC;QACpB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,cAAc,CAAC;QACpD,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,SAAS,EAAE,IAAI;QACf,gFAAgF;QAChF,QAAQ,EAAE;YACR,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB;YACxD,iDAAiD;YACjD,eAAe,EAAE,cAAc,EAAE,iBAAiB;YAClD,gBAAgB,EAAE,iBAAiB;YACnC,kBAAkB;YAClB,oEAAoE;YACpE,mDAAmD;YACnD,gBAAgB,EAAE,UAAU,EAAE,SAAS;YACvC,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;SAC3C;QACD,kDAAkD;QAClD,UAAU,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;QAC5C,MAAM,EAAE;YACN,sBAAsB,EAAE,cAAc;SACvC;KACF,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,MAAM,EAAE,UAAU,OAAO,cAAc,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,MAAM,EAAE,iBAAiB,OAAO,kBAAkB,CAAC,CAAC,CAAC;AACrE,CAAC","sourcesContent":["import * as path from 'path';\nimport { ParsedArgs } from '../../../core/args';\nimport { c } from '../../../core/colors';\nimport { ensureDir } from '@frontmcp/utils';\nimport { resolveEntry } from '../../../shared/fs';\n\n/**\n * Build a browser-compatible ESM bundle.\n *\n * Uses esbuild with `platform: 'browser'` which resolves conditional imports\n * (`#imports` in package.json) to browser implementations automatically:\n * - Crypto → @noble/hashes + @noble/ciphers (no node:crypto)\n * - AsyncLocalStorage → stack-based polyfill\n * - EventEmitter → Map-based polyfill\n * - SSE/Express/Stdio → stubs that throw on instantiation\n *\n * @example\n * ```bash\n * frontmcp build --target browser\n * ```\n */\nexport async function buildBrowser(opts: ParsedArgs): Promise<void> {\n  const cwd = process.cwd();\n  const entry = await resolveEntry(cwd, opts.entry);\n  const outDir = path.resolve(cwd, opts.outDir || 'dist');\n  await ensureDir(outDir);\n\n  const pkg = require(path.join(cwd, 'package.json'));\n  const appName = pkg.name || path.basename(cwd);\n\n  console.log(`${c('cyan', '[build:browser]')} entry: ${path.relative(cwd, entry)}`);\n  console.log(`${c('cyan', '[build:browser]')} outDir: ${path.relative(cwd, outDir)}`);\n\n  const esbuild = await import('esbuild');\n\n  // Build ESM bundle for browsers\n  console.log(c('cyan', '[build:browser] Bundling ESM for browser...'));\n  await esbuild.build({\n    entryPoints: [entry],\n    bundle: true,\n    platform: 'browser',\n    format: 'esm',\n    target: 'es2022',\n    outfile: path.join(outDir, `${appName}.browser.mjs`),\n    keepNames: true,\n    treeShaking: true,\n    sourcemap: true,\n    // Browser-safe: keep React and peer deps external (user's bundler handles them)\n    external: [\n      'react', 'react-dom', 'react-router', 'react-router-dom',\n      // Keep @frontmcp/* external — user installs them\n      '@frontmcp/sdk', '@frontmcp/di', '@frontmcp/utils',\n      '@frontmcp/auth', '@frontmcp/react',\n      'reflect-metadata',\n      // Node.js-only — these should be tree-shaken by platform: 'browser'\n      // but list explicitly to avoid accidental bundling\n      'better-sqlite3', 'fsevents', 'ioredis',\n      ...Object.keys(pkg.peerDependencies || {}),\n    ],\n    // Resolve conditional imports to browser variants\n    conditions: ['browser', 'import', 'default'],\n    define: {\n      'process.env.NODE_ENV': '\"production\"',\n    },\n  });\n\n  console.log(c('green', `\\n  Browser build complete:`));\n  console.log(c('gray', `  ESM: ${appName}.browser.mjs`));\n  console.log(c('gray', `  Source map: ${appName}.browser.mjs.map`));\n}\n"]}

package/src/commands/build/bundler.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.bundleForServerless = bundleForServerless;
 const core_1 = require("@rspack/core");
-const colors_1 = require("../../colors");
+const colors_1 = require("../../core/colors");
 /**
  * Bundle the serverless entry point into a single CJS file using rspack.
  * This resolves ESM/CJS compatibility issues and dynamic import problems.

package/src/commands/build/bundler.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundler.js","sourceRoot":"","sources":["../../../../src/commands/build/bundler.ts"],"names":[],"mappings":";;AAWA,kDAoFC;AA/FD,uCAAsC;AACtC,yCAAiC;AAEjC;;;;;;;GAOG;AACI,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,MAAc,EACd,cAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAA,aAAM,EAAC;QACtB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC9B,KAAK,EAAE,KAAK;SACb;QACD,iDAAiD;QACjD,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAChC,oFAAoF;QACpF,SAAS,EAAE;YACT,WAAW,EAAE,WAAW;YACxB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,SAAS;YAClB,wDAAwD;YACxD,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,WAAW;YACxB,kBAAkB,EAAE,kBAAkB;YACtC,mBAAmB,EAAE,mBAAmB;SACzC;QACD,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;YAC5C,gGAAgG;YAChG,cAAc,EAAE,KAAK;SACtB;QACD,MAAM,EAAE;YACN,KAAK,EAAE,EAAE;YACT,MAAM,EAAE;gBACN,UAAU,EAAE;oBACV,sEAAsE;oBACtE,iDAAiD;oBACjD,iBAAiB,EAAE,OAAO;oBAC1B,mBAAmB,EAAE,KAAK;oBAC1B,sBAAsB,EAAE,KAAK;iBAC9B;aACF;SACF;QACD,uDAAuD;QACvD,YAAY,EAAE;YACZ,QAAQ,EAAE,KAAK;SAChB;QACD,wEAAwE;QACxE,cAAc,EAAE;YACd,+EAA+E;YAC/E,mEAAmE;YACnE,8EAA8E;YAC9E,gDAAgD;SACjD;QACD,0BAA0B;QAC1B,KAAK,EAAE,iBAAiB;KACzB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC1B,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;gBACvF,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3B,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAC1B,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,QAAQ,EAAE,+BAA+B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { rspack } from '@rspack/core';\nimport { c } from '../../colors';\n\n/**\n * Bundle the serverless entry point into a single CJS file using rspack.\n * This resolves ESM/CJS compatibility issues and dynamic import problems.\n *\n * @param entryPath - Absolute path to the entry file (e.g., dist/index.js)\n * @param outDir - Output directory for the bundled file\n * @param outputFilename - Name of the output bundle (e.g., 'handler.cjs')\n */\nexport async function bundleForServerless(\n  entryPath: string,\n  outDir: string,\n  outputFilename: string,\n): Promise<void> {\n  const compiler = rspack({\n    mode: 'production',\n    target: 'node',\n    entry: entryPath,\n    output: {\n      path: outDir,\n      filename: outputFilename,\n      library: { type: 'commonjs2' },\n      clean: false,\n    },\n    // Use node externals preset for built-in modules\n    externalsPresets: { node: true },\n    // Exclude problematic optional dependencies (native binaries that can't be bundled)\n    externals: {\n      '@swc/core': '@swc/core',\n      fsevents: 'fsevents',\n      esbuild: 'esbuild',\n      // React is optional - only needed for MDX/JSX rendering\n      react: 'react',\n      'react-dom': 'react-dom',\n      'react-dom/server': 'react-dom/server',\n      'react/jsx-runtime': 'react/jsx-runtime',\n    },\n    resolve: {\n      extensions: ['.js', '.mjs', '.cjs', '.json'],\n      // Allow imports without file extensions (TypeScript compiles without .js but ESM requires them)\n      fullySpecified: false,\n    },\n    module: {\n      rules: [],\n      parser: {\n        javascript: {\n          // Handle dynamic requires like require('@vercel/kv') inside functions\n          // by wrapping them instead of externalizing them\n          dynamicImportMode: 'eager',\n          exprContextCritical: false,\n          unknownContextCritical: false,\n        },\n      },\n    },\n    // Don't minimize to preserve readability for debugging\n    optimization: {\n      minimize: false,\n    },\n    // Suppress known third-party library warnings that don't affect runtime\n    ignoreWarnings: [\n      // Express view engine dynamic require - expected behavior, harmless at runtime\n      /Critical dependency: the request of a dependency is an expression/,\n      // Handlebars require.extensions - deprecated Node.js API but works at runtime\n      /require\\.extensions is not supported by Rspack/,\n    ],\n    // Suppress verbose output\n    stats: 'errors-warnings',\n  });\n\n  return new Promise((resolve, reject) => {\n    compiler.run((err, stats) => {\n      if (err) {\n        return reject(err);\n      }\n      if (stats?.hasErrors()) {\n        const info = stats.toJson();\n        const errorMessages = info.errors?.map((e) => e.message).join('\\n') || 'Unknown error';\n        return reject(new Error(`Bundle failed:\\n${errorMessages}`));\n      }\n      if (stats?.hasWarnings()) {\n        const info = stats.toJson();\n        info.warnings?.forEach((w) => {\n          console.log(c('yellow', `  Warning: ${w.message}`));\n        });\n      }\n      compiler.close((closeErr) => {\n        if (closeErr) {\n          console.log(c('yellow', `  Warning closing compiler: ${closeErr.message}`));\n        }\n        resolve();\n      });\n    });\n  });\n}\n"]}
+{"version":3,"file":"bundler.js","sourceRoot":"","sources":["../../../../src/commands/build/bundler.ts"],"names":[],"mappings":";;AAWA,kDAoFC;AA/FD,uCAAsC;AACtC,8CAAsC;AAEtC;;;;;;;GAOG;AACI,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,MAAc,EACd,cAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAA,aAAM,EAAC;QACtB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,MAAM;QACd,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE;YACN,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,cAAc;YACxB,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;YAC9B,KAAK,EAAE,KAAK;SACb;QACD,iDAAiD;QACjD,gBAAgB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QAChC,oFAAoF;QACpF,SAAS,EAAE;YACT,WAAW,EAAE,WAAW;YACxB,QAAQ,EAAE,UAAU;YACpB,OAAO,EAAE,SAAS;YAClB,wDAAwD;YACxD,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,WAAW;YACxB,kBAAkB,EAAE,kBAAkB;YACtC,mBAAmB,EAAE,mBAAmB;SACzC;QACD,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC;YAC5C,gGAAgG;YAChG,cAAc,EAAE,KAAK;SACtB;QACD,MAAM,EAAE;YACN,KAAK,EAAE,EAAE;YACT,MAAM,EAAE;gBACN,UAAU,EAAE;oBACV,sEAAsE;oBACtE,iDAAiD;oBACjD,iBAAiB,EAAE,OAAO;oBAC1B,mBAAmB,EAAE,KAAK;oBAC1B,sBAAsB,EAAE,KAAK;iBAC9B;aACF;SACF;QACD,uDAAuD;QACvD,YAAY,EAAE;YACZ,QAAQ,EAAE,KAAK;SAChB;QACD,wEAAwE;QACxE,cAAc,EAAE;YACd,+EAA+E;YAC/E,mEAAmE;YACnE,8EAA8E;YAC9E,gDAAgD;SACjD;QACD,0BAA0B;QAC1B,KAAK,EAAE,iBAAiB;KACzB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC1B,IAAI,GAAG,EAAE,CAAC;gBACR,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC;gBACvF,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC3B,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACtD,CAAC,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAC1B,IAAI,QAAQ,EAAE,CAAC;oBACb,OAAO,CAAC,GAAG,CAAC,IAAA,UAAC,EAAC,QAAQ,EAAE,+BAA+B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC9E,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { rspack } from '@rspack/core';\nimport { c } from '../../core/colors';\n\n/**\n * Bundle the serverless entry point into a single CJS file using rspack.\n * This resolves ESM/CJS compatibility issues and dynamic import problems.\n *\n * @param entryPath - Absolute path to the entry file (e.g., dist/index.js)\n * @param outDir - Output directory for the bundled file\n * @param outputFilename - Name of the output bundle (e.g., 'handler.cjs')\n */\nexport async function bundleForServerless(\n  entryPath: string,\n  outDir: string,\n  outputFilename: string,\n): Promise<void> {\n  const compiler = rspack({\n    mode: 'production',\n    target: 'node',\n    entry: entryPath,\n    output: {\n      path: outDir,\n      filename: outputFilename,\n      library: { type: 'commonjs2' },\n      clean: false,\n    },\n    // Use node externals preset for built-in modules\n    externalsPresets: { node: true },\n    // Exclude problematic optional dependencies (native binaries that can't be bundled)\n    externals: {\n      '@swc/core': '@swc/core',\n      fsevents: 'fsevents',\n      esbuild: 'esbuild',\n      // React is optional - only needed for MDX/JSX rendering\n      react: 'react',\n      'react-dom': 'react-dom',\n      'react-dom/server': 'react-dom/server',\n      'react/jsx-runtime': 'react/jsx-runtime',\n    },\n    resolve: {\n      extensions: ['.js', '.mjs', '.cjs', '.json'],\n      // Allow imports without file extensions (TypeScript compiles without .js but ESM requires them)\n      fullySpecified: false,\n    },\n    module: {\n      rules: [],\n      parser: {\n        javascript: {\n          // Handle dynamic requires like require('@vercel/kv') inside functions\n          // by wrapping them instead of externalizing them\n          dynamicImportMode: 'eager',\n          exprContextCritical: false,\n          unknownContextCritical: false,\n        },\n      },\n    },\n    // Don't minimize to preserve readability for debugging\n    optimization: {\n      minimize: false,\n    },\n    // Suppress known third-party library warnings that don't affect runtime\n    ignoreWarnings: [\n      // Express view engine dynamic require - expected behavior, harmless at runtime\n      /Critical dependency: the request of a dependency is an expression/,\n      // Handlebars require.extensions - deprecated Node.js API but works at runtime\n      /require\\.extensions is not supported by Rspack/,\n    ],\n    // Suppress verbose output\n    stats: 'errors-warnings',\n  });\n\n  return new Promise((resolve, reject) => {\n    compiler.run((err, stats) => {\n      if (err) {\n        return reject(err);\n      }\n      if (stats?.hasErrors()) {\n        const info = stats.toJson();\n        const errorMessages = info.errors?.map((e) => e.message).join('\\n') || 'Unknown error';\n        return reject(new Error(`Bundle failed:\\n${errorMessages}`));\n      }\n      if (stats?.hasWarnings()) {\n        const info = stats.toJson();\n        info.warnings?.forEach((w) => {\n          console.log(c('yellow', `  Warning: ${w.message}`));\n        });\n      }\n      compiler.close((closeErr) => {\n        if (closeErr) {\n          console.log(c('yellow', `  Warning closing compiler: ${closeErr.message}`));\n        }\n        resolve();\n      });\n    });\n  });\n}\n"]}

package/src/commands/build/exec/cli-runtime/cli-bundler.d.ts

@@ -0,0 +1,17 @@
+/**
+ * esbuild configuration for the CLI bundle.
+ * Bundles the generated CLI entry point with commander.js inlined.
+ */
+import { FrontmcpExecConfig } from '../config';
+export interface CliBundleResult {
+    bundlePath: string;
+    bundleSize: number;
+}
+/**
+ * Bundle the generated CLI entry with esbuild.
+ * Commander.js and runtime modules are inlined; the server bundle is external
+ * unless selfContained mode is enabled (for SEA builds).
+ */
+export declare function bundleCliWithEsbuild(cliEntryPath: string, outDir: string, config: FrontmcpExecConfig, options?: {
+    selfContained?: boolean;
+}): Promise<CliBundleResult>;

package/src/commands/build/exec/cli-runtime/cli-bundler.js

@@ -0,0 +1,75 @@
+"use strict";
+/**
+ * esbuild configuration for the CLI bundle.
+ * Bundles the generated CLI entry point with commander.js inlined.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bundleCliWithEsbuild = bundleCliWithEsbuild;
+const tslib_1 = require("tslib");
+const path = tslib_1.__importStar(require("path"));
+/**
+ * Bundle the generated CLI entry with esbuild.
+ * Commander.js and runtime modules are inlined; the server bundle is external
+ * unless selfContained mode is enabled (for SEA builds).
+ */
+async function bundleCliWithEsbuild(cliEntryPath, outDir, config, options) {
+    let esbuild;
+    try {
+        esbuild = require('esbuild');
+    }
+    catch {
+        throw new Error('esbuild is required for CLI builds. Install it: npm install -D esbuild');
+    }
+    const cliBundleName = `${config.name}-cli.bundle.js`;
+    const bundlePath = path.join(outDir, cliBundleName);
+    const selfContained = options?.selfContained ?? false;
+    // The server bundle is loaded via require() at runtime — keep external
+    // unless selfContained mode where everything is inlined for SEA
+    const serverBundleName = `${config.name}.bundle.js`;
+    const external = selfContained
+        ? [
+            // Only true native addons and optional peer deps stay external in self-contained mode
+            'better-sqlite3',
+            'fsevents',
+            '@vercel/kv',
+            '@frontmcp/storage-sqlite',
+            '@enclave-vm/core',
+            ...(config.dependencies?.nativeAddons || []),
+        ]
+        : [
+            `./${serverBundleName}`,
+            '@frontmcp/sdk',
+            'better-sqlite3',
+            'fsevents',
+            '@vercel/kv',
+            '@frontmcp/storage-sqlite',
+            '@enclave-vm/core',
+            ...(config.dependencies?.nativeAddons || []),
+            ...(config.esbuild?.external || []),
+        ];
+    await esbuild.build({
+        entryPoints: [cliEntryPath],
+        bundle: true,
+        platform: 'node',
+        format: 'cjs',
+        target: config.esbuild?.target || 'node22',
+        outfile: bundlePath,
+        external,
+        keepNames: true,
+        treeShaking: true,
+        minify: config.esbuild?.minify ?? false,
+        banner: {
+            js: '#!/usr/bin/env node',
+        },
+        define: config.esbuild?.define,
+        sourcemap: false,
+        logLevel: 'warning',
+    });
+    const fs = require('fs');
+    const stat = fs.statSync(bundlePath);
+    return {
+        bundlePath,
+        bundleSize: stat.size,
+    };
+}
+//# sourceMappingURL=cli-bundler.js.map

package/src/commands/build/exec/cli-runtime/cli-bundler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-bundler.js","sourceRoot":"","sources":["../../../../../../src/commands/build/exec/cli-runtime/cli-bundler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAeH,oDAuEC;;AApFD,mDAA6B;AAQ7B;;;;GAIG;AACI,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,MAAc,EACd,MAA0B,EAC1B,OAAqC;IAErC,IAAI,OAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,MAAM,CAAC,IAAI,gBAAgB,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,KAAK,CAAC;IAEtD,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,gBAAgB,GAAG,GAAG,MAAM,CAAC,IAAI,YAAY,CAAC;IAEpD,MAAM,QAAQ,GAAG,aAAa;QAC5B,CAAC,CAAC;YACE,sFAAsF;YACtF,gBAAgB;YAChB,UAAU;YACV,YAAY;YACZ,0BAA0B;YAC1B,kBAAkB;YAClB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;SAC7C;QACH,CAAC,CAAC;YACE,KAAK,gBAAgB,EAAE;YACvB,eAAe;YACf,gBAAgB;YAChB,UAAU;YACV,YAAY;YACZ,0BAA0B;YAC1B,kBAAkB;YAClB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,IAAI,EAAE,CAAC;YAC5C,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;SACpC,CAAC;IAEN,MAAM,OAAO,CAAC,KAAK,CAAC;QAClB,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,QAAQ;QAC1C,OAAO,EAAE,UAAU;QACnB,QAAQ;QACR,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,IAAI,KAAK;QACvC,MAAM,EAAE;YACN,EAAE,EAAE,qBAAqB;SAC1B;QACD,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM;QAC9B,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAErC,OAAO;QACL,UAAU;QACV,UAAU,EAAE,IAAI,CAAC,IAAI;KACtB,CAAC;AACJ,CAAC","sourcesContent":["/**\n * esbuild configuration for the CLI bundle.\n * Bundles the generated CLI entry point with commander.js inlined.\n */\n\nimport * as path from 'path';\nimport { FrontmcpExecConfig } from '../config';\n\nexport interface CliBundleResult {\n  bundlePath: string;\n  bundleSize: number;\n}\n\n/**\n * Bundle the generated CLI entry with esbuild.\n * Commander.js and runtime modules are inlined; the server bundle is external\n * unless selfContained mode is enabled (for SEA builds).\n */\nexport async function bundleCliWithEsbuild(\n  cliEntryPath: string,\n  outDir: string,\n  config: FrontmcpExecConfig,\n  options?: { selfContained?: boolean },\n): Promise<CliBundleResult> {\n  let esbuild: typeof import('esbuild');\n  try {\n    esbuild = require('esbuild');\n  } catch {\n    throw new Error(\n      'esbuild is required for CLI builds. Install it: npm install -D esbuild',\n    );\n  }\n\n  const cliBundleName = `${config.name}-cli.bundle.js`;\n  const bundlePath = path.join(outDir, cliBundleName);\n  const selfContained = options?.selfContained ?? false;\n\n  // The server bundle is loaded via require() at runtime — keep external\n  // unless selfContained mode where everything is inlined for SEA\n  const serverBundleName = `${config.name}.bundle.js`;\n\n  const external = selfContained\n    ? [\n        // Only true native addons and optional peer deps stay external in self-contained mode\n        'better-sqlite3',\n        'fsevents',\n        '@vercel/kv',\n        '@frontmcp/storage-sqlite',\n        '@enclave-vm/core',\n        ...(config.dependencies?.nativeAddons || []),\n      ]\n    : [\n        `./${serverBundleName}`,\n        '@frontmcp/sdk',\n        'better-sqlite3',\n        'fsevents',\n        '@vercel/kv',\n        '@frontmcp/storage-sqlite',\n        '@enclave-vm/core',\n        ...(config.dependencies?.nativeAddons || []),\n        ...(config.esbuild?.external || []),\n      ];\n\n  await esbuild.build({\n    entryPoints: [cliEntryPath],\n    bundle: true,\n    platform: 'node',\n    format: 'cjs',\n    target: config.esbuild?.target || 'node22',\n    outfile: bundlePath,\n    external,\n    keepNames: true,\n    treeShaking: true,\n    minify: config.esbuild?.minify ?? false,\n    banner: {\n      js: '#!/usr/bin/env node',\n    },\n    define: config.esbuild?.define,\n    sourcemap: false,\n    logLevel: 'warning',\n  });\n\n  const fs = require('fs');\n  const stat = fs.statSync(bundlePath);\n\n  return {\n    bundlePath,\n    bundleSize: stat.size,\n  };\n}\n"]}

package/src/commands/build/exec/cli-runtime/credential-store.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Credential store for CLI executables.
+ * Generates runtime module code for secure credential storage with
+ * platform-aware backends: macOS Keychain, Linux secret-tool, encrypted file fallback.
+ */
+export interface CredentialBlob {
+    token: string;
+    refreshToken?: string;
+    expiresAt?: string;
+    user?: string;
+    metadata?: Record<string, unknown>;
+}
+export interface CredentialStore {
+    get(session: string): Promise<CredentialBlob | null>;
+    set(session: string, blob: CredentialBlob): Promise<void>;
+    delete(session: string): Promise<boolean>;
+    list(): Promise<string[]>;
+}
+/**
+ * Generate the credential-store runtime module source for embedding in CLI bundle.
+ */
+export declare function generateCredentialStoreSource(appName: string): string;

package/src/commands/build/exec/cli-runtime/credential-store.js

@@ -0,0 +1,140 @@
+"use strict";
+/**
+ * Credential store for CLI executables.
+ * Generates runtime module code for secure credential storage with
+ * platform-aware backends: macOS Keychain, Linux secret-tool, encrypted file fallback.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateCredentialStoreSource = generateCredentialStoreSource;
+/**
+ * Generate the credential-store runtime module source for embedding in CLI bundle.
+ */
+function generateCredentialStoreSource(appName) {
+    return `
+'use strict';
+
+var crypto = require('crypto');
+var os = require('os');
+var path = require('path');
+var fs = require('fs');
+var childProcess = require('child_process');
+
+var APP_NAME = ${JSON.stringify(appName)};
+var CRED_DIR = path.join(os.homedir(), '.frontmcp', 'apps', APP_NAME, 'credentials');
+
+function ensureCredDir() {
+  fs.mkdirSync(CRED_DIR, { recursive: true });
+}
+
+function runCmd(cmd, args, input) {
+  return new Promise(function(resolve, reject) {
+    var proc = childProcess.spawn(cmd, args, { stdio: ['pipe', 'pipe', 'pipe'] });
+    var stdout = '';
+    var stderr = '';
+    proc.stdout.on('data', function(d) { stdout += d; });
+    proc.stderr.on('data', function(d) { stderr += d; });
+    if (input) { proc.stdin.write(input); proc.stdin.end(); }
+    proc.on('close', function(code) {
+      if (code === 0) resolve(stdout.trim());
+      else reject(new Error(stderr.trim() || 'Command failed: ' + cmd + ' ' + args.join(' ')));
+    });
+  });
+}
+
+function deriveKey() {
+  var hostname = os.hostname();
+  var salt = APP_NAME + ':' + hostname;
+  return crypto.createHash('sha256').update(salt).digest();
+}
+
+function encryptBlob(data) {
+  var key = deriveKey();
+  var iv = crypto.randomBytes(12);
+  var cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+  var encrypted = Buffer.concat([cipher.update(JSON.stringify(data), 'utf8'), cipher.final()]);
+  var tag = cipher.getAuthTag();
+  return Buffer.concat([iv, tag, encrypted]).toString('base64');
+}
+
+function decryptBlob(encoded) {
+  var key = deriveKey();
+  var buf = Buffer.from(encoded, 'base64');
+  var iv = buf.subarray(0, 12);
+  var tag = buf.subarray(12, 28);
+  var encrypted = buf.subarray(28);
+  var decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
+  decipher.setAuthTag(tag);
+  var decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+  return JSON.parse(decrypted.toString('utf8'));
+}
+
+// macOS Keychain backend
+var KeychainStore = {
+  get: async function(session) {
+    try {
+      var encoded = await runCmd('security', ['find-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session, '-w']);
+      return decryptBlob(encoded);
+    } catch (_) { return null; }
+  },
+  set: async function(session, blob) {
+    var encoded = encryptBlob(blob);
+    try { await runCmd('security', ['delete-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session]); } catch (_) { /* ok */ }
+    await runCmd('security', ['add-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session, '-w', encoded, '-U']);
+  },
+  delete: async function(session) {
+    try {
+      await runCmd('security', ['delete-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session]);
+      return true;
+    } catch (_) { return false; }
+  },
+  list: async function() {
+    try {
+      var out = await runCmd('security', ['dump-keychain']);
+      var matches = [];
+      var re = new RegExp('"svce"<blob>="frontmcp\\\\.' + APP_NAME.replace(/[.*+?^\${}()|[\\]\\\\]/g, '\\\\$&') + '"[\\\\s\\\\S]*?"acct"<blob>="([^"]*)"', 'g');
+      var m; while ((m = re.exec(out)) !== null) { matches.push(m[1]); }
+      return [...new Set(matches)];
+    } catch (_) { return []; }
+  }
+};
+
+// Encrypted file backend (fallback)
+var FileStore = {
+  get: async function(session) {
+    var filePath = path.join(CRED_DIR, session + '.enc');
+    try {
+      var encoded = fs.readFileSync(filePath, 'utf8');
+      return decryptBlob(encoded);
+    } catch (_) { return null; }
+  },
+  set: async function(session, blob) {
+    ensureCredDir();
+    var encoded = encryptBlob(blob);
+    var filePath = path.join(CRED_DIR, session + '.enc');
+    fs.writeFileSync(filePath, encoded, { mode: 0o600 });
+  },
+  delete: async function(session) {
+    var filePath = path.join(CRED_DIR, session + '.enc');
+    try { fs.unlinkSync(filePath); return true; } catch (_) { return false; }
+  },
+  list: async function() {
+    ensureCredDir();
+    try {
+      return fs.readdirSync(CRED_DIR)
+        .filter(function(f) { return f.endsWith('.enc'); })
+        .map(function(f) { return f.replace(/\\.enc$/, ''); });
+    } catch (_) { return []; }
+  }
+};
+
+function createCredentialStore() {
+  if (process.platform === 'darwin') {
+    return KeychainStore;
+  }
+  return FileStore;
+}
+
+module.exports = { createCredentialStore, encryptBlob, decryptBlob };
+`.trim();
+}
+//# sourceMappingURL=credential-store.js.map

package/src/commands/build/exec/cli-runtime/credential-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-store.js","sourceRoot":"","sources":["../../../../../../src/commands/build/exec/cli-runtime/credential-store.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AAoBH,sEA+HC;AAlID;;GAEG;AACH,SAAgB,6BAA6B,CAAC,OAAe;IAC3D,OAAO;;;;;;;;;iBASQ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoHvC,CAAC,IAAI,EAAE,CAAC;AACT,CAAC","sourcesContent":["/**\n * Credential store for CLI executables.\n * Generates runtime module code for secure credential storage with\n * platform-aware backends: macOS Keychain, Linux secret-tool, encrypted file fallback.\n */\n\nexport interface CredentialBlob {\n  token: string;\n  refreshToken?: string;\n  expiresAt?: string;\n  user?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport interface CredentialStore {\n  get(session: string): Promise<CredentialBlob | null>;\n  set(session: string, blob: CredentialBlob): Promise<void>;\n  delete(session: string): Promise<boolean>;\n  list(): Promise<string[]>;\n}\n\n/**\n * Generate the credential-store runtime module source for embedding in CLI bundle.\n */\nexport function generateCredentialStoreSource(appName: string): string {\n  return `\n'use strict';\n\nvar crypto = require('crypto');\nvar os = require('os');\nvar path = require('path');\nvar fs = require('fs');\nvar childProcess = require('child_process');\n\nvar APP_NAME = ${JSON.stringify(appName)};\nvar CRED_DIR = path.join(os.homedir(), '.frontmcp', 'apps', APP_NAME, 'credentials');\n\nfunction ensureCredDir() {\n  fs.mkdirSync(CRED_DIR, { recursive: true });\n}\n\nfunction runCmd(cmd, args, input) {\n  return new Promise(function(resolve, reject) {\n    var proc = childProcess.spawn(cmd, args, { stdio: ['pipe', 'pipe', 'pipe'] });\n    var stdout = '';\n    var stderr = '';\n    proc.stdout.on('data', function(d) { stdout += d; });\n    proc.stderr.on('data', function(d) { stderr += d; });\n    if (input) { proc.stdin.write(input); proc.stdin.end(); }\n    proc.on('close', function(code) {\n      if (code === 0) resolve(stdout.trim());\n      else reject(new Error(stderr.trim() || 'Command failed: ' + cmd + ' ' + args.join(' ')));\n    });\n  });\n}\n\nfunction deriveKey() {\n  var hostname = os.hostname();\n  var salt = APP_NAME + ':' + hostname;\n  return crypto.createHash('sha256').update(salt).digest();\n}\n\nfunction encryptBlob(data) {\n  var key = deriveKey();\n  var iv = crypto.randomBytes(12);\n  var cipher = crypto.createCipheriv('aes-256-gcm', key, iv);\n  var encrypted = Buffer.concat([cipher.update(JSON.stringify(data), 'utf8'), cipher.final()]);\n  var tag = cipher.getAuthTag();\n  return Buffer.concat([iv, tag, encrypted]).toString('base64');\n}\n\nfunction decryptBlob(encoded) {\n  var key = deriveKey();\n  var buf = Buffer.from(encoded, 'base64');\n  var iv = buf.subarray(0, 12);\n  var tag = buf.subarray(12, 28);\n  var encrypted = buf.subarray(28);\n  var decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);\n  decipher.setAuthTag(tag);\n  var decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]);\n  return JSON.parse(decrypted.toString('utf8'));\n}\n\n// macOS Keychain backend\nvar KeychainStore = {\n  get: async function(session) {\n    try {\n      var encoded = await runCmd('security', ['find-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session, '-w']);\n      return decryptBlob(encoded);\n    } catch (_) { return null; }\n  },\n  set: async function(session, blob) {\n    var encoded = encryptBlob(blob);\n    try { await runCmd('security', ['delete-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session]); } catch (_) { /* ok */ }\n    await runCmd('security', ['add-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session, '-w', encoded, '-U']);\n  },\n  delete: async function(session) {\n    try {\n      await runCmd('security', ['delete-generic-password', '-s', 'frontmcp.' + APP_NAME, '-a', session]);\n      return true;\n    } catch (_) { return false; }\n  },\n  list: async function() {\n    try {\n      var out = await runCmd('security', ['dump-keychain']);\n      var matches = [];\n      var re = new RegExp('\"svce\"<blob>=\"frontmcp\\\\\\\\.' + APP_NAME.replace(/[.*+?^\\${}()|[\\\\]\\\\\\\\]/g, '\\\\\\\\$&') + '\"[\\\\\\\\s\\\\\\\\S]*?\"acct\"<blob>=\"([^\"]*)\"', 'g');\n      var m; while ((m = re.exec(out)) !== null) { matches.push(m[1]); }\n      return [...new Set(matches)];\n    } catch (_) { return []; }\n  }\n};\n\n// Encrypted file backend (fallback)\nvar FileStore = {\n  get: async function(session) {\n    var filePath = path.join(CRED_DIR, session + '.enc');\n    try {\n      var encoded = fs.readFileSync(filePath, 'utf8');\n      return decryptBlob(encoded);\n    } catch (_) { return null; }\n  },\n  set: async function(session, blob) {\n    ensureCredDir();\n    var encoded = encryptBlob(blob);\n    var filePath = path.join(CRED_DIR, session + '.enc');\n    fs.writeFileSync(filePath, encoded, { mode: 0o600 });\n  },\n  delete: async function(session) {\n    var filePath = path.join(CRED_DIR, session + '.enc');\n    try { fs.unlinkSync(filePath); return true; } catch (_) { return false; }\n  },\n  list: async function() {\n    ensureCredDir();\n    try {\n      return fs.readdirSync(CRED_DIR)\n        .filter(function(f) { return f.endsWith('.enc'); })\n        .map(function(f) { return f.replace(/\\\\.enc$/, ''); });\n    } catch (_) { return []; }\n  }\n};\n\nfunction createCredentialStore() {\n  if (process.platform === 'darwin') {\n    return KeychainStore;\n  }\n  return FileStore;\n}\n\nmodule.exports = { createCredentialStore, encryptBlob, decryptBlob };\n`.trim();\n}\n"]}