jskelet 0.6.13 → 0.6.15

package/CHANGELOG.md

@@ -17,12 +17,18 @@ one is listed under a **Breaking** heading.
 
 ### Added
 
+- `asset(name, { origin: "document" })` skips `build.assets.prefix` and
+  returns the site-origin `/assets/…` path. `icon()` always resolves the
+  sprite this way so SVG `<use href>` keeps working when other assets are
+  on a CDN (the origin still serves `public/assets/`).
 - Dev overlay **API** tab (between Performance and Server): outbound
   `fetch` calls for the current page — browser and SSR — with host
-  rollup, duration, status, and a detail pane on click (URL, timing,
-  size, island, response body when captured). The live stats channel
-  now includes recent server API calls so the tab updates without a
-  refresh.
+  rollup, duration, status, and a detail pane on click (component,
+  URL, timing, size, response body when captured). Browser calls are
+  attributed to the island/module (mount, stack, or last interaction);
+  SSR calls to the first `lib/` / `routes/` / `controllers/` / `views/`
+  frame. The live stats channel includes recent server API calls so the
+  tab updates without a refresh.
 - Optional CDN asset publishing via `build.assets`: `prefix` rewrites
   `asset()` / optimised image URLs (manifest stays relative on disk);
   `upload.bucket` / `keyPrefix` / `region` / `endpoint` come from config only.

package/docs/07-yapilandirma.md

@@ -629,7 +629,7 @@ değişmez** — asset'ler origin'den servis edilir.
 
 | Alan | Tip | Varsayılan | Anlamı |
 | --- | --- | --- | --- |
-| `assets.prefix` | `string` | `""` | CDN origin; `asset()` URL öneki (sonunda `/` yok). Yalnızca config. Manifest diskte göreli kalır. |
+| `assets.prefix` | `string` | `""` | CDN origin; `asset()` URL öneki (sonunda `/` yok). Yalnızca config. Manifest diskte göreli kalır. `asset(name, { origin: "document" })` ve `icon()` sprite'ı öneksiz kalır. |
 | `assets.upload.enabled` | `boolean` | `false` | `true` veya config'te `bucket` doluysa açılır; açık `false` ezer. |
 | `assets.upload.bucket` | `string \| null` | `null` | **S3 bucket adı** (`static.ornek.com` gibi noktalı adlar geçerli; PutObject path-style kullanır) veya `bucket/key/prefix`. `https://…` şeması kabul edilmez — o `prefix`. |
 | `assets.upload.keyPrefix` | `string` | `""` | Nesne anahtarı öneki; bucket yolunda verilmişse o kazanır (`prefix` takma adı da kabul). |

package/docs/08-build.md

@@ -80,6 +80,10 @@ dosya adlarını okunur tutuyor. Hash'li olmaları sayesinde bu dosyalara
 - `asset(name)` manifest'te varsa hash'li URL'i, yoksa `/assets/<name>` döner.
   `build.assets.prefix` doluysa bu göreli yolun önüne CDN origin eklenir
   (manifest diskte göreli kalır).
+- `asset(name, { origin: "document" })` prefix'i atlar; site origin'indeki
+  `/assets/…` yolunu döner. SVG `<use href>` çapraz origin sprite
+  yüklemediği için `icon()` sprite'ı her zaman böyle çözer — origin hâlâ
+  `public/assets/` servis eder.
 - `hasAsset(name)` manifest'te olup olmadığını söyler.
 
 ### CDN prefix ve S3 upload
@@ -91,7 +95,8 @@ env → ECS task role → EC2 IMDS zincirinden. Açılınca:
    altındaki dosyaları S3'e PutObject ile kopyalar.
 2. Çalışma anında `asset()` / optimize görseller `build.assets.prefix` ile
    absolute CDN URL basar. Entry CDN'deyse esbuild chunk'ları göreli yolla aynı
-   host'a gider.
+   host'a gider. `icon()` sprite'ı ve `asset(name, { origin: "document" })`
+   site origin'inde kalır.
 
 Bucket adı noktalı olabilir (`static.ornek.com`); `https://…` şeması
 `prefix`'e yazılır. Config sözlüğü: [07-yapilandirma.md](./07-yapilandirma.md#build).
@@ -457,7 +462,9 @@ karşılaşmaması.
 - **Bazı Tailwind sınıfları çalışmıyor.** `@source` direktifi eksik olan bir
   dizinde yazılmışlar.
 - **İkon boş görünüyor.** Sprite'ta o sembol yok; dev'de `[icon] missing from sprite`
-  uyarısına bakın.
+  uyarısına bakın. CDN prefix açıkken sprite bilerek site origin'inde kalır
+  (`asset("sprite.svg", { origin: "document" })`); origin `public/assets/`
+  servis etmiyorsa `<use>` boş kalır.
 - **Island'lar hiç açılmıyor.** `main.js` manifest'te yok (entry dizini boş ya
   da build atlanmış) veya bir build hatası var.
 - **Dev'de sayfa aniden stilsiz kaldı.** Manifest ile diskteki dosya

package/docs/09-dev-araclari.md

@@ -199,9 +199,9 @@ Gösterdikleri:
 - **API:** açık sayfanın dışarı giden `fetch` çağrıları — tarayıcıdaki
   island/veri istekleri ve SSR sırasında yapılan upstream çağrıları.
   Host kırılımı, toplam/ortalama süre, durum kodu; satıra tıklanınca
-  yöntem, tam URL, boyut, island ve (başarısızsa) yanıt gövdesi. Canlı
-  kanal `serverApi` listesini de taşır, böylece SSR çağrıları yenileme
-  olmadan görünür.
+  **component** (island adı veya `lib/` / `routes/` dosyası), yöntem,
+  tam URL, boyut ve (başarısızsa) yanıt gövdesi. Canlı kanal `serverApi`
+  listesini de taşır, böylece SSR çağrıları yenileme olmadan görünür.
 - **İstekler:** her HTML isteğinin metodu, yolu, durumu, süresi ve
   `X-JSkelet-Cache` değeri. Aynı satırlar terminale de basılır.
 - **Web Vitals:** TTFB, FCP, LCP, CLS, INP, DCL, load, uzun task sayısı ve

package/docs/en/07-configuration.md

@@ -642,7 +642,7 @@ changes** — assets stay on the origin.
 
 | Field | Type | Default | Meaning |
 | --- | --- | --- | --- |
-| `assets.prefix` | `string` | `""` | CDN origin; prefix for `asset()` URLs (no trailing `/`). Config only. The on-disk manifest stays relative. |
+| `assets.prefix` | `string` | `""` | CDN origin; prefix for `asset()` URLs (no trailing `/`). Config only. The on-disk manifest stays relative. `asset(name, { origin: "document" })` and the `icon()` sprite stay unprefixed. |
 | `assets.upload.enabled` | `boolean` | `false` | Turns on when `true` or when `bucket` is set in config; explicit `false` wins. |
 | `assets.upload.bucket` | `string \| null` | `null` | **S3 bucket name** (dotted names like `static.example.com` are fine; PutObject uses path-style) or `bucket/key/prefix`. A `https://…` scheme is rejected — that belongs in `prefix`. |
 | `assets.upload.keyPrefix` | `string` | `""` | Object key prefix; a path on the bucket wins (`prefix` is accepted as an alias). |

package/docs/en/08-build.md

@@ -83,6 +83,10 @@ They are passed to templates automatically; in server code,
 - `asset(name)` returns the hashed URL if it is in the manifest, otherwise
   `/assets/<name>`. When `build.assets.prefix` is set, that relative path is
   prefixed with the CDN origin (the on-disk manifest stays relative).
+- `asset(name, { origin: "document" })` skips the prefix and returns the
+  site-origin `/assets/…` path. SVG `<use href>` cannot load a cross-origin
+  sprite, so `icon()` always resolves the sprite this way — the origin still
+  serves `public/assets/`.
 - `hasAsset(name)` tells you whether it is in the manifest.
 
 ### CDN prefix and S3 upload
@@ -94,7 +98,8 @@ resolve from env → ECS task role → EC2 IMDS. When enabled:
    directories in `include`) to S3.
 2. At runtime `asset()` / optimised images emit absolute CDN URLs via
    `build.assets.prefix`. When the entry script is on the CDN, esbuild chunks
-   resolve relatively on the same host.
+   resolve relatively on the same host. The `icon()` sprite and
+   `asset(name, { origin: "document" })` stay on the document origin.
 
 Bucket names may include dots (`static.example.com`); put `https://…` in
 `prefix`. Config reference: [07-configuration.md](./07-configuration.md#build).
@@ -473,7 +478,9 @@ directly does not end up facing an unstyled page.
 - **Some Tailwind classes do not work.** They were written in a directory whose
   `@source` directive is missing.
 - **An icon looks empty.** That symbol is not in the sprite; in dev, look for the
-  `[icon] missing from sprite` warning.
+  `[icon] missing from sprite` warning. With a CDN prefix the sprite stays on
+  the document origin on purpose (`asset("sprite.svg", { origin: "document" })`);
+  if the origin does not serve `public/assets/`, `<use>` stays blank.
 - **The islands never open.** `main.js` is not in the manifest (the entry
   directory is empty or the build was skipped) or there is a build error.
 - **The page suddenly went unstyled in dev.** The manifest and the file on disk

package/docs/en/09-dev-tools.md

@@ -203,9 +203,10 @@ What it shows:
   part of the production bundle.
 - **API:** outbound `fetch` calls for the open page — browser island/data
   requests and upstream calls made during SSR. Host rollup, total/average
-  duration, status codes; click a row for method, full URL, size, island
-  and (on failure) the response body. The live channel also carries the
-  `serverApi` list so SSR calls appear without a refresh.
+  duration, status codes; click a row for the **component** (island name
+  or `lib/` / `routes/` file), method, full URL, size and (on failure)
+  the response body. The live channel also carries the `serverApi` list
+  so SSR calls appear without a refresh.
 - **Requests:** the method, path, status, duration and `X-JSkelet-Cache` value
   of every HTML request. The same lines are printed to the terminal too.
 - **Web Vitals:** TTFB, FCP, LCP, CLS, INP, DCL, load, long task count and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jskelet",
-  "version": "0.6.13",
+  "version": "0.6.15",
   "description": "A framework that feels like no framework: Express 5 + build-time .jsk SSR (optional EJS peer), vanilla JS islands, Tailwind v4 and an in-process HTML TTL cache.",
   "type": "module",
   "license": "MIT",

package/src/client/devtools/overlay.js

@@ -337,6 +337,7 @@ const islandSummary = cached(() => ({
  *   contentType: string | null,
  *   initiator: string,
  *   island: string | null,
+ *   component: string | null,
  *   page: string,
  *   at: number,
  *   error: string | null,
@@ -348,6 +349,25 @@ const islandSummary = cached(() => ({
 const clientApi = [];
 let nextApiId = 1;
 
+/**
+ * Son etkileşilen island. Mount bittikten sonra event handler içindeki
+ * `fetch` yığında dosya adı her zaman görünmeyebiliyor; tıklanan island
+ * köke bakmak o boşluğu doldurur.
+ */
+function trackIslandInteraction() {
+  /** @param {Event} event */
+  const mark = (event) => {
+    const target = /** @type {Element | null} */ (event.target);
+    const host = target?.closest?.("[data-island]");
+    const name = host?.getAttribute?.("data-island");
+    if (name) globalThis.__JSKELET_LAST_ISLAND = name;
+  };
+
+  for (const type of ["pointerdown", "click", "keydown", "submit", "change"]) {
+    document.addEventListener(type, mark, true);
+  }
+}
+
 /**
  * Tarayıcıdaki veri çağrıları. Panelin kendi uçları ve statik varlıklar
  * sayılmaz; amaç sayfanın hangi API'lere kaç ms harcadığını görmek.
@@ -406,6 +426,7 @@ function captureFetch() {
    * @returns {ClientApiCall}
    */
   function record(url, method, ms, status, response) {
+    const component = inferComponent();
     /** @type {ClientApiCall} */
     const entry = {
       id: nextApiId++,
@@ -416,7 +437,8 @@ function captureFetch() {
       bytes: Number(response?.headers.get("content-length") ?? 0),
       contentType: response?.headers.get("content-type") ?? null,
       initiator: "client",
-      island: inferIsland(),
+      island: component,
+      component,
       page: location.pathname + location.search,
       at: Date.now(),
       error: status === 0 || (status >= 400) ? `HTTP ${status || "network"}` : null,
@@ -519,18 +541,59 @@ function shortUrl(url) {
 }
 
 /**
- * Çağrı yığınında `islands/ad` izi varsa ya da bir island mount edilirken
- * yakalanmışsa ada bağlar.
+ * Çağrıyı hangi island / client modülünden geldiğine bağlar.
+ * Sıra: mount işareti → yığın izi → son etkileşilen island.
  *
  * @returns {string | null}
  */
-function inferIsland() {
+function inferComponent() {
   const mounting = globalThis.__JSKELET_MOUNTING_ISLAND;
   if (typeof mounting === "string" && mounting) return mounting;
 
-  const stack = new Error().stack ?? "";
-  const match = stack.match(/islands[/\\]([A-Za-z0-9_-]+)/);
-  return match?.[1] ?? null;
+  const fromStack = componentFromClientStack(new Error().stack ?? "");
+  if (fromStack) return fromStack;
+
+  const last = globalThis.__JSKELET_LAST_ISLAND;
+  if (typeof last === "string" && last) return last;
+
+  return null;
+}
+
+/** @deprecated {@link inferComponent} */
+function inferIsland() {
+  return inferComponent();
+}
+
+/**
+ * @param {string} stack
+ * @returns {string | null}
+ */
+function componentFromClientStack(stack) {
+  const islandPath = stack.match(/islands[/\\]([A-Za-z0-9_-]+)/);
+  if (islandPath) return islandPath[1];
+
+  // Build çıktısı: /assets/islands/counter-a1b2c3.js
+  const assetIsland = stack.match(/[/\\]islands[/\\]([A-Za-z0-9_-]+?)(?:-[a-z0-9]+)?\.(?:js|mjs|ts|tsx)/i);
+  if (assetIsland) return assetIsland[1];
+
+  const clientPath = stack.match(/client[/\\]([A-Za-z0-9_./\\-]+\.[A-Za-z0-9]+)/);
+  if (clientPath) return `client/${clientPath[1].replace(/\\/g, "/")}`;
+
+  // Kayıtlı island adları yığında (hash'li chunk URL'sinde) geçiyorsa.
+  for (const node of document.querySelectorAll("[data-island]")) {
+    const name = node.getAttribute("data-island");
+    if (!name || name.length < 2) continue;
+    if (
+      stack.includes(`/${name}.`) ||
+      stack.includes(`/${name}-`) ||
+      stack.includes(`islands/${name}`) ||
+      stack.includes(`islands%2F${name}`)
+    ) {
+      return name;
+    }
+  }
+
+  return null;
 }
 
 /**
@@ -1661,7 +1724,7 @@ function versionNotice() {
  *   ms: number,
  *   bytes: number,
  *   contentType: string | null,
- *   island: string | null,
+ *   component: string | null,
  *   page: string | null,
  *   at: number,
  *   error: string | null,
@@ -1688,7 +1751,7 @@ function pageApiCalls() {
       ms: call.ms,
       bytes: call.bytes,
       contentType: call.contentType,
-      island: call.island,
+      component: call.component ?? call.island,
       page: call.page,
       at: call.at,
       error: call.error,
@@ -1711,7 +1774,7 @@ function pageApiCalls() {
       ms: Math.round(call.ms),
       bytes: call.bytes ?? 0,
       contentType: null,
-      island: null,
+      component: call.component ?? null,
       page: call.page,
       at: call.at,
       error: call.error,
@@ -1743,7 +1806,7 @@ function apiTab() {
     calls
       .map(
         (call) =>
-          `${new Date(call.at).toISOString()} [${call.side}] ${call.method} ${call.url} ${call.status} ${call.ms}ms${
+          `${new Date(call.at).toISOString()} [${call.side}] ${call.component ?? "—"} ${call.method} ${call.url} ${call.status} ${call.ms}ms${
             call.error ? ` ${call.error}` : ""
           }`,
       )
@@ -1770,7 +1833,7 @@ function apiTab() {
           `(${clientApi.length} in the browser, ${calls.length - clientApi.length} during SSR), ` +
           `taking <strong>${ms(totalMs)}</strong> in total` +
           `${failed.length ? ` · <strong>${failed.length} failed</strong>` : ""}. ` +
-          `Click a row for method, host, timing and response details.`
+          `Click a row for the component, host, timing and response details.`
         : "No outbound API calls recorded for this page yet. Browser <code>fetch</code> and SSR upstream calls show up here as they happen.",
     )}
     ${
@@ -1821,7 +1884,11 @@ function apiTab() {
                 <span class="status ${bad ? "bad" : warn ? "warn" : ""}">${call.status || "—"}</span>
                 <span class="method">${escapeHtml(call.method)}</span>
                 <span class="path" title="${escapeHtml(call.url)}">${escapeHtml(shortUrl(call.url))}</span>
-                <span class="hint">${escapeHtml(call.side)}${call.island ? ` · ${escapeHtml(call.island)}` : ""}</span>
+                <span class="hint" title="${escapeHtml(call.component ?? call.side)}">${
+                  call.component
+                    ? escapeHtml(shortComponent(call.component))
+                    : escapeHtml(call.side)
+                }</span>
                 <span class="${grade(call.ms, [150, 500])}">${call.ms} ms</span>
               </div>`;
             })
@@ -1831,6 +1898,12 @@ function apiTab() {
   `;
 }
 
+/** @param {string} value */
+function shortComponent(value) {
+  const parts = value.replace(/\\/g, "/").split("/");
+  return parts.length > 2 ? parts.slice(-2).join("/") : value;
+}
+
 /**
  * @param {ReturnType<typeof pageApiCalls>[number]} call
  */
@@ -1844,9 +1917,9 @@ function apiDetailPanel(call) {
       `ms: ${call.ms}`,
       `bytes: ${call.bytes}`,
       `side: ${call.side}`,
+      call.component ? `component: ${call.component}` : "",
       call.host ? `host: ${call.host}` : "",
       call.page ? `page: ${call.page}` : "",
-      call.island ? `island: ${call.island}` : "",
       call.contentType ? `content-type: ${call.contentType}` : "",
       call.error ? `error: ${call.error}` : "",
       call.details == null
@@ -1864,12 +1937,22 @@ function apiDetailPanel(call) {
   return `<div class="api-detail">
     <div class="meta" style="display:flex;align-items:center;gap:8px;margin-bottom:10px;color:var(--muted);font-size:10.5px">
       <span class="tag">${escapeHtml(call.side)}</span>
+      ${
+        call.component
+          ? `<span class="tag island" title="Component">${escapeHtml(call.component)}</span>`
+          : ""
+      }
       <span>${new Date(call.at).toLocaleTimeString()}</span>
       <span class="spacer"></span>
       ${copyButton(detailKey, "copy")}
       <button class="link" data-action="api-select" data-key="${escapeHtml(call.key)}" style="margin:0">close</button>
     </div>
     <dl class="kv">
+      <dt>Component</dt><dd>${
+        call.component
+          ? escapeHtml(call.component)
+          : `<span class="hint">unknown</span>`
+      }</dd>
       <dt>Method</dt><dd>${escapeHtml(call.method)}</dd>
       <dt>URL</dt><dd>${escapeHtml(call.url)}</dd>
       <dt>Host</dt><dd>${escapeHtml(call.host)}</dd>
@@ -1878,7 +1961,6 @@ function apiDetailPanel(call) {
       <dt>Size</dt><dd>${call.bytes ? kb(call.bytes) : "—"}</dd>
       ${call.contentType ? `<dt>Type</dt><dd>${escapeHtml(call.contentType)}</dd>` : ""}
       ${call.page ? `<dt>Page</dt><dd>${pathLink(call.page)}</dd>` : ""}
-      ${call.island ? `<dt>Island</dt><dd>${escapeHtml(call.island)}</dd>` : ""}
       ${call.error ? `<dt>Error</dt><dd class="bad">${escapeHtml(call.error)}</dd>` : ""}
     </dl>
     ${
@@ -2660,6 +2742,7 @@ function start() {
   captureErrors();
   captureMetrics();
   captureFetch();
+  trackIslandInteraction();
   bind(ensureRoot());
   refreshSeo();
   render();

package/src/server/assets.js

@@ -9,6 +9,11 @@
  * `build.assets.prefix` doluysa HTML'e basılan URL'lere CDN origin eklenir;
  * manifest diskte göreli kalır. Dosya sistemi okumaları (`getSpriteIds`)
  * göreli yolu kullanır.
+ *
+ * Bazı varlıklar bilinçli olarak site origin'inde kalır: SVG `<use href>`
+ * çapraz origin sprite yüklemez. `asset(name, { origin: "document" })`
+ * prefix'i atlar; `icon()` sprite için bunu kullanır. Origin hâlâ
+ * `public/assets/` servis eder.
  */
 import fs from "node:fs";
 import path from "node:path";
@@ -17,7 +22,7 @@ import { getConfig } from "../config/index.js";
 
 const isDev = process.env.NODE_ENV === "development";
 
-/** @type {{ manifest: Record<string, string> } | null} */
+/** @type {{ manifest: Record<string, string>, generated: string } | null} */
 let cached = null;
 let warned = false;
 
@@ -38,13 +43,15 @@ function load() {
     }
   }
 
-  return { manifest };
+  return { manifest, generated };
 }
 
 function state() {
   // Dev'de her istekte yeniden okunur (watch build hash'leri değiştirir);
-  // prod'da bir kez.
-  if (isDev || !cached) cached = load();
+  // prod'da bir kez. `generated` yolu değiştiyse (test / başka kök) de
+  // yenilenir — aksi hâlde eski manifest takılı kalır.
+  const generated = getConfig().dirs.generated;
+  if (isDev || !cached || cached.generated !== generated) cached = load();
   return cached;
 }
 
@@ -82,11 +89,22 @@ function assetPath(name) {
 }
 
 /**
+ * @typedef {{ origin?: "cdn" | "document" }} AssetOptions
+ */
+
+/**
+ * Manifest'teki hash'li (veya yedek) URL.
+ *
  * @param {string} name Örn. "app.css", "main.js", "sprite.svg"
+ * @param {AssetOptions} [options]
+ *   `origin: "document"` → `build.assets.prefix` uygulanmaz; site
+ *   origin'indeki `/assets/…` yolu döner (varsayılan `"cdn"`).
  * @returns {string}
  */
-export function asset(name) {
-  return applyAssetPrefix(assetPrefix(), assetPath(name));
+export function asset(name, options = {}) {
+  const relative = assetPath(name);
+  if (options.origin === "document") return relative;
+  return applyAssetPrefix(assetPrefix(), relative);
 }
 
 /**

package/src/server/dev/report.js

@@ -89,6 +89,7 @@ export function clearPageReports() {
  *   at: number,
  *   error: string | null,
  *   page: string | null,
+ *   component: string | null,
  *   details: unknown,
  * }} ServerApiCall
  */
@@ -109,6 +110,7 @@ const DETAILS_MAX = 4_000;
  *   bytes: number,
  *   error: string | null,
  *   page: string | null,
+ *   component: string | null,
  *   details: unknown,
  * }} ApiFailure
  */
@@ -141,6 +143,8 @@ export function trackServerFetch(options = {}) {
     const method = String(init?.method ?? "GET").toUpperCase();
     const started = Date.now();
     const page = currentPage();
+    // Yığını çağrı anında al: await sonrası stack sarmalayıcıda kalır.
+    const component = inferServerComponent();
 
     // Kendi sunucumuza yapılan istekler (ısıtma, sağlık kontrolü) API sayılmaz.
     const isSelf = /^https?:\/\/(127\.0\.0\.1|\[::1\]|localhost)(:|\/|$)/i.test(url);
@@ -160,6 +164,7 @@ export function trackServerFetch(options = {}) {
           bytes: Number(response.headers.get("content-length") ?? 0),
           error,
           page,
+          component,
           details,
         };
         push(call);
@@ -178,6 +183,7 @@ export function trackServerFetch(options = {}) {
           bytes: 0,
           error: message,
           page,
+          component,
           details: null,
         };
         push(call);
@@ -207,6 +213,28 @@ function currentPage() {
   return getRequestContext()?.pathname ?? null;
 }
 
+/**
+ * SSR `fetch` çağrısını uygulamanın hangi dosyasından geldiğine bağlar.
+ * Framework ve `node_modules` kareleri atlanır; `lib/`, `routes/`,
+ * `controllers/` veya `views/` altındaki ilk kare alınır.
+ *
+ * @returns {string | null}
+ */
+function inferServerComponent() {
+  const stack = new Error().stack ?? "";
+  for (const line of stack.split("\n")) {
+    if (/node_modules|server[/\\]dev[/\\]|node:internal/i.test(line)) continue;
+
+    const match = line.match(
+      /((?:lib|routes|controllers|views)[/\\][A-Za-z0-9_./\\-]+\.[A-Za-z0-9]+)/i,
+    );
+    if (!match) continue;
+
+    return match[1].replace(/\\/g, "/");
+  }
+  return null;
+}
+
 /**
  * @param {Response} response
  * @returns {Promise<unknown>}

package/src/views/helpers/tags.js

@@ -195,6 +195,11 @@ export function preloadImage({ href, imagesrcset, imagesizes }) {
 /**
  * Phosphor ikonları — build zamanı üretilen SVG sprite'tan `<use>`.
  * `weight` sprite id'sine dahildir (regular/bold/fill).
+ *
+ * Sprite URL'si her zaman site origin'indedir (`asset(..., { origin:
+ * "document" })`). `<use href>` çapraz origin SVG yüklemez; CDN prefix
+ * açıkken bile `public/assets/sprite.<hash>.svg` aynı host'tan gelir.
+ *
  * @param {{ name: string, size?: number | string, weight?: string,
  *   class?: string, attrs?: Record<string, unknown> }} props
  * @returns {string}
@@ -208,7 +213,7 @@ export function icon(props) {
     attrs: extra = {},
   } = props;
 
-  const spritePath = asset("sprite.svg");
+  const spritePath = asset("sprite.svg", { origin: "document" });
   const id = `${toKebab(name)}-${weight}`;
 
   if (isDev && !warnedIcons.has(id)) {

package/types/server/assets.d.ts

@@ -6,11 +6,22 @@
  * @returns {string}
  */
 export declare function applyAssetPrefix(prefix: string, url: string): string;
+export type AssetOptions = {
+    origin?: "cdn" | "document";
+};
+/**
+ * @typedef {{ origin?: "cdn" | "document" }} AssetOptions
+ */
 /**
+ * Manifest'teki hash'li (veya yedek) URL.
+ *
  * @param {string} name Örn. "app.css", "main.js", "sprite.svg"
+ * @param {AssetOptions} [options]
+ *   `origin: "document"` → `build.assets.prefix` uygulanmaz; site
+ *   origin'indeki `/assets/…` yolu döner (varsayılan `"cdn"`).
  * @returns {string}
  */
-export declare function asset(name: string): string;
+export declare function asset(name: string, options?: AssetOptions): string;
 /**
  * @param {string} name
  * @returns {boolean}

package/types/server/dev/report.d.ts

@@ -44,6 +44,7 @@ export type ServerApiCall = {
     at: number;
     error: string | null;
     page: string | null;
+    component: string | null;
     details: unknown;
 };
 export type ApiFailure = {
@@ -54,6 +55,7 @@ export type ApiFailure = {
     bytes: number;
     error: string | null;
     page: string | null;
+    component: string | null;
     details: unknown;
 };
 /**
@@ -65,6 +67,7 @@ export type ApiFailure = {
  *   bytes: number,
  *   error: string | null,
  *   page: string | null,
+ *   component: string | null,
  *   details: unknown,
  * }} ApiFailure
  */

package/types/views/helpers/tags.d.ts

@@ -60,6 +60,11 @@ export declare function preloadImage({ href, imagesrcset, imagesizes }: {
 /**
  * Phosphor ikonları — build zamanı üretilen SVG sprite'tan `<use>`.
  * `weight` sprite id'sine dahildir (regular/bold/fill).
+ *
+ * Sprite URL'si her zaman site origin'indedir (`asset(..., { origin:
+ * "document" })`). `<use href>` çapraz origin SVG yüklemez; CDN prefix
+ * açıkken bile `public/assets/sprite.<hash>.svg` aynı host'tan gelir.
+ *
  * @param {{ name: string, size?: number | string, weight?: string,
  *   class?: string, attrs?: Record<string, unknown> }} props
  * @returns {string}