handoff-app 2.0.0-8 → 2.0.0

package/src/types/config.ts

@@ -115,6 +115,108 @@ export type RuntimeMode = 'workspace' | 'registry';
 /** Format used when synthesizing local workspace declarations. */
 export type DeclarationFormat = 'ts' | 'js' | 'cjs';
 
+/** How a connection's credential is supplied. Declared, never inferred from a missing key. */
+export type AiCredentialKind = 'service' | 'user' | 'none';
+
+/**
+ * An email option: a literal, baked into the build, or an environment reference, read by the deployed
+ * app at request time.
+ */
+export type HandoffEmailOption<T> = T | RuntimeEnvReference<T>;
+
+interface HandoffEmailBase {
+  /** Sender address, such as `Handoff <no-reply@example.com>`. Use a profile for per-environment values. */
+  from?: string;
+}
+
+/** Send through an SMTP server, such as Amazon SES, SendGrid, Postmark, Mailgun or Microsoft 365. */
+export interface HandoffSmtpEmail extends HandoffEmailBase {
+  provider: 'smtp';
+  options: {
+    host: HandoffEmailOption<string>;
+    /** @default 465, or 587 when `secure` is false */
+    port?: HandoffEmailOption<number>;
+    /**
+     * Use TLS from the start of the connection. When false, the connection upgrades with STARTTLS if
+     * the server offers it. @default true, or false when `port` is set to a port other than 465
+     */
+    secure?: HandoffEmailOption<boolean>;
+    user?: HandoffEmailOption<string>;
+    /** Environment reference to the SMTP password. */
+    password?: RuntimeEnvReference<string>;
+  };
+}
+
+/** Send through a server-only module that default-exports a `defineEmailProvider()` result. */
+export interface HandoffCustomEmail extends HandoffEmailBase {
+  provider: 'custom';
+  /** Server-only module path. It must be its own file so the build can trace it into the deployed registry. */
+  module: string;
+  /**
+   * Options passed to the provider factory. Literals are baked. Environment references are resolved
+   * at request time. `apiKey` and `password` must be environment references.
+   */
+  options?: Record<string, unknown>;
+}
+
+/** Registry email settings. `provider` selects the shape of `options`. */
+export type HandoffEmailConfig = HandoffSmtpEmail | HandoffCustomEmail;
+
+/**
+ * One AI connection the deployment declares. Connections are the whole surface: a reader can add a
+ * key for a declared connection and nothing else, so the server never calls a URL a reader chose.
+ *
+ * Every connection speaks the OpenAI-compatible `/chat/completions` API. A provider that fits
+ * nothing else names a server-only `module` instead of a `baseUrl`.
+ */
+export interface HandoffAiConnection {
+  /** Stable id. A model is addressed as `<id>/<model>`. */
+  id: string;
+  /** Name shown to a reader in the model picker and on the account page. */
+  label: string;
+  /** OpenAI-compatible base URL, such as `https://api.openai.com/v1`. Omit only when `module` is set. */
+  baseUrl?: string;
+  /**
+   * Server-only module path default-exporting a `defineAiProvider()` result, for a provider that is
+   * not OpenAI-compatible. It must be its own file so the build can trace it into the deployed
+   * registry.
+   */
+  module?: string;
+  /**
+   * Environment reference to the deployment's own key. Its presence makes the connection a service
+   * key: the deployment pays and every reader can use it. The name is baked; the value is read at
+   * request time and never leaves the server.
+   */
+  apiKey?: RuntimeEnvReference<string>;
+  /**
+   * Set to `'user'` when each reader supplies their own key. Without it, a connection that needs a
+   * reader's key looks like one that needs none, and the reader gets a raw 401 instead of an
+   * instruction.
+   */
+  credential?: 'user';
+  /** The models this connection offers. A reader cannot use a model that is not listed. */
+  models?: string[];
+  /**
+   * Options passed to a `module` provider factory. Literals are baked. Environment references are
+   * resolved at request time, so secrets must be environment references.
+   */
+  options?: Record<string, unknown>;
+}
+
+/**
+ * The AI assistant block. Presence of the block opts the build in, and `enabled: false` turns it
+ * off. Like `mcp`, `enabled` is config-only and baked at build time, so a build without it leaves
+ * out both the chat route and the header control rather than showing a control that fails.
+ */
+export interface HandoffAiConfig {
+  /** @default true when the `ai` block is present */
+  enabled?: boolean;
+  /** Declared connections. Merged by `id` with any supplied through `HANDOFF_AI_CONNECTIONS`. */
+  connections?: HandoffAiConnection[];
+  /** The `<connectionId>/<model>` used when a reader has not picked one. */
+  defaultModel?: string;
+}
+
 /**
  * User-facing `runtime` configuration block. A single optional block that selects the runtime
  * mode and carries mode-specific host/connection settings.
@@ -135,6 +237,8 @@ export interface HandoffRuntimeConfig {
    * @default true
    */
   mcp?: boolean;
+  /** The docs AI assistant. Omit the block to leave it out of the build. See {@link HandoffAiConfig}. */
+  ai?: HandoffAiConfig;
   /** Workspace-mode settings. */
   workspace?: {
     entries?: ConfigEntries;
@@ -142,9 +246,9 @@ export interface HandoffRuntimeConfig {
   };
   /** Registry-mode host settings. Env-var values are stored as names, never as secrets. */
   registry?: {
-    /** Environment reference to the database URL. @default fromEnv('DATABASE_URL') */
-    databaseUrl?: RuntimeEnvReference<string>;
     database?: {
+      /** Environment reference to the database URL. @default fromEnv('DATABASE_URL') */
+      url?: RuntimeEnvReference<string>;
       /**
        * PostgreSQL is the supported database. `driver` selects the built-in connection driver — how
        * to connect, not which engine — over the same package-owned Postgres schema and migrations.
@@ -159,20 +263,26 @@ export interface HandoffRuntimeConfig {
      */
     assetStorage?: {
       /**
-       * Active storage provider for new uploads. `database` keeps bytes inline in Postgres; use the
-       * pre-packaged `vercel-blob` adapter or a `custom` module for object storage.
+       * Active storage provider for new uploads. `database` keeps bytes inline in Postgres; use a
+       * `custom` module for object storage.
        * @default "database"
        */
-      adapter?: 'database' | 'vercel-blob' | 'custom';
-      /** For `adapter: "custom"` - server-only module path default-exporting a `defineAssetStorage` adapter. */
+      provider?: 'database' | 'custom';
+      /** For `provider: "custom"` - server-only module path default-exporting a `defineStorageProvider()` result. */
       module?: string;
-      /** For `adapter: "vercel-blob"` - environment reference to the Blob read/write token. @default fromEnv('BLOB_READ_WRITE_TOKEN') */
-      token?: RuntimeEnvReference<string>;
       /** Max bytes kept inline in the database `bytea` column (larger uploads are rejected). @default 4194304 */
       maxInlineBytes?: number;
-      /** Non-secret options, JSON-encoded into the bundle. Environment references are rejected. Pass variable names instead. */
+      /**
+       * Options passed to the provider factory. Literals are baked. Environment references are resolved
+       * at request time, so secrets must be environment references.
+       */
       options?: Record<string, unknown>;
     };
+    /**
+     * Invitation and password-reset email. Email stays off until `from` is set and the required
+     * options of the provider have values. Until then, invitation links are shown to an administrator.
+     */
+    email?: HandoffEmailConfig;
   };
   /**
    * Connected-workspace settings pointing at a remote registry. A connected workspace is
@@ -186,11 +296,19 @@ export interface HandoffRuntimeConfig {
   };
 }
 
+/** Connections to external services. */
+export interface ConfigIntegrations {
+  /** The Figma file that `fetch` reads foundations from. In a terminal, `fetch` asks for an empty value. */
+  figma?: {
+    /** The Figma file ID. @default fromEnv('HANDOFF_FIGMA_PROJECT_ID', { default: null }) */
+    projectId?: EnvValue<string | null>;
+    /** A Figma personal access token. Accepts only an environment reference. @default fromEnv('HANDOFF_DEV_ACCESS_TOKEN', { default: null }) */
+    accessToken?: EnvSecret<string | null>;
+  };
+}
+
 export interface Config {
-  dev_access_token?: EnvSecret<string | null>;
-  devAccessToken?: EnvSecret<string | null>;
-  figma_project_id?: EnvValue<string | null>;
-  figmaProjectId?: EnvValue<string | null>;
+  integrations?: ConfigIntegrations;
   exportsOutputDirectory?: EnvValue<string>;
   sitesOutputDirectory?: EnvValue<string>;
   useVariables?: EnvValue<boolean>;
@@ -275,6 +393,9 @@ export interface Config {
 
     /**
      * Optional hook to override the SSR build configuration used in the ssrRenderPlugin
+     *
+     * Stylesheet loaders are re-applied after this hook, so a `.css`/`.scss`/`.sass` import stays out
+     * of the JavaScript graph whatever the hook returns.
      * @param config - The default esbuild configuration
      * @returns Modified esbuild configuration
      * @example
@@ -289,6 +410,9 @@ export interface Config {
 
     /**
      * Optional hook to override the client-side build configuration used in the ssrRenderPlugin
+     *
+     * Stylesheet loaders are re-applied after this hook, so a `.css`/`.scss`/`.sass` import stays out
+     * of the JavaScript graph whatever the hook returns.
      * @param config - The default esbuild configuration
      * @returns Modified esbuild configuration
      * @example
@@ -396,13 +520,14 @@ export interface ClientRuntimeConfig {
 /** Values available after config loading. Deferred references retain their names. */
 export type ResolvedConfig = Omit<
   Config,
-  'dev_access_token' | 'devAccessToken' | 'figma_project_id' | 'figmaProjectId' |
-  'exportsOutputDirectory' | 'sitesOutputDirectory' | 'useVariables' | 'app' | 'runtime'
+  | 'integrations'
+  | 'exportsOutputDirectory'
+  | 'sitesOutputDirectory'
+  | 'useVariables'
+  | 'app'
+  | 'runtime'
 > & {
-  dev_access_token?: string | null;
-  devAccessToken?: string | null;
-  figma_project_id?: string | null;
-  figmaProjectId?: string | null;
+  integrations?: { figma?: { projectId?: string | null; accessToken?: string | null } };
   exportsOutputDirectory?: string;
   sitesOutputDirectory?: string;
   useVariables?: boolean;
@@ -412,7 +537,10 @@ export type ResolvedConfig = Omit<
   };
 };
 
-export type ClientConfig = Pick<ResolvedConfig, 'app' | 'exportsOutputDirectory' | 'sitesOutputDirectory' | 'assets_zip_links' | 'useVariables'> & {
+export type ClientConfig = Pick<
+  ResolvedConfig,
+  'app' | 'exportsOutputDirectory' | 'sitesOutputDirectory' | 'assets_zip_links' | 'useVariables'
+> & {
   runtime: ClientRuntimeConfig;
 };
 

package/src/utils/README.md

@@ -8,7 +8,7 @@ Shared utility functions used across the codebase.
 |------|---------|
 | `logger.ts` | `Logger` class — timestamped, color-coded console logging |
 | `filter.ts` | `evaluateFilter()`, `filterAndSort()` — generic object filtering with logical operators |
-| `path.ts` | `generateFilesystemSafeId()` — creates safe directory names from paths |
+| `path.ts` | `generateFilesystemSafeId()` — creates short, safe directory names (base name + path hash) from paths |
 | `fs.ts` | `findFilesByExtension()` — recursive file search by extension |
 | `markdown.ts` | `parseMarkdown()` — frontmatter parse without gray-matter's unbounded module cache |
 | `index.ts` | `filterOutNull()` type guard |

package/src/utils/path.ts

@@ -1,35 +1,12 @@
+import { createHash } from 'crypto';
 import path from 'path';
 
-/**
- * Generates a filesystem-safe directory name from an absolute path
- * @param workingPath - The absolute working path to transform
- * @returns A filesystem-safe string suitable for use as a directory name
- */
+/** `<base name>-<path hash>`; the hash keeps directories with the same base name apart. */
 export function generateFilesystemSafeId(workingPath: string): string {
-  // Normalize path separators to forward slashes for consistent processing
-  let safeId = workingPath.replace(/\\/g, '/');
-
-  // Replace forward slashes with dashes
-  safeId = safeId.replace(/\//g, '-');
-
-  // Remove or replace invalid filesystem characters
-  safeId = safeId.replace(/[<>:"|?*\x00]/g, '-');
-
-  // Remove leading/trailing dashes and spaces
-  safeId = safeId.replace(/^[\s-]+|[\s-]+$/g, '');
-
-  // Handle Windows reserved names (case-insensitive)
-  const reservedNames = /^(CON|PRN|AUX|NUL|COM[1-9]|LPT[1-9])(\.|$)/i;
-  if (reservedNames.test(safeId)) {
-    safeId = `project-${safeId}`;
-  }
-
-  // Ensure we have at least one character
-  if (!safeId) {
-    safeId = 'default-project';
-  }
-
-  return safeId;
+  const baseName = path.basename(path.resolve(workingPath));
+  const name = baseName.replace(/[^A-Za-z0-9._-]/g, '-').replace(/^[.-]+|[.-]+$/g, '') || 'project';
+  const hash = createHash('sha256').update(normalizePathForCompare(workingPath)).digest('hex').slice(0, 8);
+  return `${name}-${hash}`;
 }
 
 /**

package/templates/default/handoff.config.js.tpl

@@ -46,6 +46,15 @@ const config = {
   // subdirectories are each an item.
   // catalog: { include: ["components", "patterns"] },
 
+  // Figma: `fetch` reads the file ID and token from these variables. Defaults shown. If a value is
+  // empty, `fetch` asks for it. The token accepts only an environment reference.
+  // integrations: {
+  //   figma: {
+  //     projectId: fromEnv("HANDOFF_FIGMA_PROJECT_ID", { default: null }),
+  //     accessToken: fromEnv("HANDOFF_DEV_ACCESS_TOKEN", { default: null }),
+  //   },
+  // },
+
   // `mode` selects the runtime: "workspace" (no database) or "registry" (Postgres). The registry
   // block is read only by `build --target registry` and `db:migrate`, and secrets are referenced by
   // env var name. A named profile (`handoff.config.registry.*`, `--profile registry`) is a good home
@@ -54,8 +63,7 @@ const config = {
     mode: "workspace",
     // mcp: false,
     // registry: {
-    //   databaseUrl: fromEnv("DATABASE_URL"),
-    //   database: { driver: "pg" }, // 'pg' | 'neon'
+    //   database: { url: fromEnv("DATABASE_URL"), driver: "pg" }, // driver: 'pg' | 'neon'
     // },
   },
 

package/templates/default/handoff.config.ts.tpl

@@ -44,6 +44,15 @@ export default defineConfig({
   // subdirectories are each an item.
   // catalog: { include: ["components", "patterns"] },
 
+  // Figma: `fetch` reads the file ID and token from these variables. Defaults shown. If a value is
+  // empty, `fetch` asks for it. The token accepts only an environment reference.
+  // integrations: {
+  //   figma: {
+  //     projectId: fromEnv("HANDOFF_FIGMA_PROJECT_ID", { default: null }),
+  //     accessToken: fromEnv("HANDOFF_DEV_ACCESS_TOKEN", { default: null }),
+  //   },
+  // },
+
   // `mode` selects the runtime: "workspace" (no database) or "registry" (Postgres). The registry
   // block is read only by `build --target registry` and `db:migrate`, and secrets are referenced by
   // env var name. A named profile (`handoff.config.registry.*`, `--profile registry`) is a good home
@@ -52,8 +61,7 @@ export default defineConfig({
     mode: "workspace",
     // mcp: false,
     // registry: {
-    //   databaseUrl: fromEnv("DATABASE_URL"),
-    //   database: { driver: "pg" }, // 'pg' | 'neon'
+    //   database: { url: fromEnv("DATABASE_URL"), driver: "pg" }, // driver: 'pg' | 'neon'
     // },
   },
 

package/templates/default/handoff.config.with-examples.js.tpl

@@ -48,6 +48,15 @@ const config = {
     include: ["components/button"],
   },
 
+  // Figma: `fetch` reads the file ID and token from these variables. Defaults shown. If a value is
+  // empty, `fetch` asks for it. The token accepts only an environment reference.
+  // integrations: {
+  //   figma: {
+  //     projectId: fromEnv("HANDOFF_FIGMA_PROJECT_ID", { default: null }),
+  //     accessToken: fromEnv("HANDOFF_DEV_ACCESS_TOKEN", { default: null }),
+  //   },
+  // },
+
   // `mode` selects the runtime: "workspace" (no database) or "registry" (Postgres). The registry
   // block is read only by `build --target registry` and `db:migrate`, and secrets are referenced by
   // env var name. A named profile (`handoff.config.registry.*`, `--profile registry`) is a good home
@@ -56,8 +65,7 @@ const config = {
     mode: "workspace",
     // mcp: false,
     // registry: {
-    //   databaseUrl: fromEnv("DATABASE_URL"),
-    //   database: { driver: "pg" }, // 'pg' | 'neon'
+    //   database: { url: fromEnv("DATABASE_URL"), driver: "pg" }, // driver: 'pg' | 'neon'
     // },
   },
 

package/templates/default/handoff.config.with-examples.ts.tpl

@@ -46,6 +46,15 @@ export default defineConfig({
     include: ["components/button"],
   },
 
+  // Figma: `fetch` reads the file ID and token from these variables. Defaults shown. If a value is
+  // empty, `fetch` asks for it. The token accepts only an environment reference.
+  // integrations: {
+  //   figma: {
+  //     projectId: fromEnv("HANDOFF_FIGMA_PROJECT_ID", { default: null }),
+  //     accessToken: fromEnv("HANDOFF_DEV_ACCESS_TOKEN", { default: null }),
+  //   },
+  // },
+
   // `mode` selects the runtime: "workspace" (no database) or "registry" (Postgres). The registry
   // block is read only by `build --target registry` and `db:migrate`, and secrets are referenced by
   // env var name. A named profile (`handoff.config.registry.*`, `--profile registry`) is a good home
@@ -54,8 +63,7 @@ export default defineConfig({
     mode: "workspace",
     // mcp: false,
     // registry: {
-    //   databaseUrl: fromEnv("DATABASE_URL"),
-    //   database: { driver: "pg" }, // 'pg' | 'neon'
+    //   database: { url: fromEnv("DATABASE_URL"), driver: "pg" }, // driver: 'pg' | 'neon'
     // },
   },
 

package/templates/default/package.json.tpl

@@ -17,7 +17,7 @@
   "dependencies": {},
   "devDependencies": {},
   "engines": {
-    "node": ">=16.0.0",
-    "npm": ">=8.0.0"
+    "node": ">=22",
+    "npm": ">=10"
   }
 }

package/.editorconfig

@@ -1,19 +0,0 @@
-# EditorConfig is awesome: https://EditorConfig.org
-
-# top-most EditorConfig file
-root = true
-
-[*.{css,scss,sass}]
-charset = utf-8
-indent_style = tab
-indent_size = unset
-end_of_line = lf
-trim_trailing_whitespace = true
-insert_final_newline = true
-
-[*.{js,ts,jsx,tsx}]
-charset = utf-8
-indent_style = space
-end_of_line = lf
-trim_trailing_whitespace = true
-insert_final_newline = true

package/.eslintrc.json

@@ -1,4 +0,0 @@
-{
-  "extends": ["next", "prettier"],
-  "ignorePatterns": ["./src/app/out/**/*", "**/*.js"]
-}

package/.prettierrc.json

@@ -1,8 +0,0 @@
-{
-    "trailingComma": "es5",
-    "semi": true,
-    "tabWidth": 2,
-    "singleQuote": true,
-    "jsxSingleQuote": true,
-    "plugins": ["prettier-plugin-tailwindcss"]
-  }

package/.vscode/settings.json

@@ -1,17 +0,0 @@
-{
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
-  "[javascript]": { "editor.defaultFormatter": "esbenp.prettier-vscode" },
-  "editor.formatOnSave": true,
-  "editor.codeActionsOnSave": {
-    "source.organizeImports": "explicit"
-  },
-  "[xml]": {
-    "editor.defaultFormatter": "redhat.vscode-xml"
-  },
-  "[typescriptreact]": {
-    "editor.defaultFormatter": "vscode.typescript-language-features"
-  },
-  "[markdown]": {
-    "editor.defaultFormatter": "unifiedjs.vscode-remark"
-  }
-}

package/dist/config/validator.d.ts

@@ -1,9 +0,0 @@
-import { ResolvedConfig } from '../types/config';
-/**
- * Validates that the configuration has the required Figma credentials.
- *
- * @param config - The config to validate.
- * @returns The validated config (same reference).
- * @throws {Error} If required Figma credentials are missing.
- */
-export declare const validateConfig: (config: ResolvedConfig) => ResolvedConfig;

package/dist/config/validator.js

@@ -1,24 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.validateConfig = void 0;
-const logger_1 = require("../utils/logger");
-/**
- * Validates that the configuration has the required Figma credentials.
- *
- * @param config - The config to validate.
- * @returns The validated config (same reference).
- * @throws {Error} If required Figma credentials are missing.
- */
-const validateConfig = (config) => {
-    // TODO: Check to see if the exported folder exists before we run start
-    if (!config.figma_project_id) {
-        logger_1.Logger.error('Figma Project ID missing. Please set HANDOFF_FIGMA_PROJECT_ID or run "handoff-app fetch".');
-        throw new Error('Cannot initialize configuration');
-    }
-    if (!config.dev_access_token) {
-        logger_1.Logger.error('Figma Access Token missing. Please set HANDOFF_DEV_ACCESS_TOKEN or run "handoff-app fetch".');
-        throw new Error('Cannot initialize configuration');
-    }
-    return config;
-};
-exports.validateConfig = validateConfig;

package/dist/registry/asset-storage/adapters/vercel-blob.d.ts

@@ -1,17 +0,0 @@
-/**
- * Pre-packaged Vercel Blob asset storage adapter.
- *
- * Ships with Handoff and is selected via `runtime.registry.assetStorage.adapter: "vercel-blob"`. The
- * read/write token is read from `process.env[tokenEnv]` at request time (never persisted in config).
- * Blobs are stored public and content-addressed by hash, so reads resolve to a direct provider URL
- * (a `redirect` result), keeping large payloads out of the serverless function body/response.
- *
- * The `@vercel/blob` SDK is loaded lazily so it is only pulled into memory (and traced into the
- * registry bundle) when this adapter is actually used.
- */
-import type { AssetStorage } from '../types';
-/** Build a Vercel Blob storage adapter bound to a token env-var name + non-secret options. */
-export declare const createVercelBlobStorage: (params: {
-    tokenEnv: string;
-    options: Record<string, unknown>;
-}) => AssetStorage;

package/dist/registry/asset-storage/adapters/vercel-blob.js

@@ -1,87 +0,0 @@
-"use strict";
-/**
- * Pre-packaged Vercel Blob asset storage adapter.
- *
- * Ships with Handoff and is selected via `runtime.registry.assetStorage.adapter: "vercel-blob"`. The
- * read/write token is read from `process.env[tokenEnv]` at request time (never persisted in config).
- * Blobs are stored public and content-addressed by hash, so reads resolve to a direct provider URL
- * (a `redirect` result), keeping large payloads out of the serverless function body/response.
- *
- * The `@vercel/blob` SDK is loaded lazily so it is only pulled into memory (and traced into the
- * registry bundle) when this adapter is actually used.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createVercelBlobStorage = void 0;
-/** Build a Vercel Blob storage adapter bound to a token env-var name + non-secret options. */
-const createVercelBlobStorage = (params) => {
-    const prefix = typeof params.options.prefix === 'string' && params.options.prefix.trim() ? params.options.prefix.trim() : 'handoff/assets';
-    const resolveToken = () => {
-        var _a;
-        const token = (_a = process.env[params.tokenEnv]) === null || _a === void 0 ? void 0 : _a.trim();
-        if (!token) {
-            throw new Error(`Vercel Blob storage is configured but the token env var "${params.tokenEnv}" is not set. ` +
-                'Set it to a Blob read/write token, or change runtime.registry.assetStorage.token.');
-        }
-        return token;
-    };
-    return {
-        put(_a) {
-            return __awaiter(this, arguments, void 0, function* ({ hash, bytes, contentType }) {
-                const { put } = yield Promise.resolve().then(() => __importStar(require('@vercel/blob')));
-                // Content-addressed pathname + no random suffix so the same bytes map to a stable, dedupable key.
-                const result = yield put(`${prefix}/${hash}`, bytes, {
-                    access: 'public',
-                    token: resolveToken(),
-                    contentType,
-                    addRandomSuffix: false,
-                });
-                return { storageRef: result.url };
-            });
-        },
-        get(storageRef) {
-            return __awaiter(this, void 0, void 0, function* () {
-                // Public blob URLs are directly fetchable; redirect the client to avoid proxying bytes.
-                return { kind: 'redirect', url: storageRef };
-            });
-        },
-        delete(storageRef) {
-            return __awaiter(this, void 0, void 0, function* () {
-                const { del } = yield Promise.resolve().then(() => __importStar(require('@vercel/blob')));
-                yield del(storageRef, { token: resolveToken() });
-            });
-        },
-    };
-};
-exports.createVercelBlobStorage = createVercelBlobStorage;