one 1.10.6 → 1.11.0

package/dist/esm/cli/buildPageWorker.native.js.map

@@ -1 +1 @@
-{"version":3,"names":["parentPort","workerImport","_instanceof","left","right","Symbol","hasInstance","console","error","process","exit","env","VXRN_REACT_19","VITE_ENVIRONMENT","NODE_ENV","buildPageFn","runWithAsyncLocalContextFn","loadUserOneOptionsFn","initialized","ensureImports","mod","import","meta","url","buildPage","mod1","runWithAsyncLocalContext","mod2","loadUserOneOptions","initializeWorker","oneOptions","globalThis","__vxrnPluginConfig__","on","msg","type","postMessage","id","result","args","serverEntry","path","relativeId","params","foundRoute","clientManifestEntry","staticDir","clientDir","builtMiddlewares","serverJsPath","preloads","allCSS","routePreloads","allCSSContents","criticalPreloads","deferredPreloads","useAfterLCP","useAfterLCPAggressive","err","Error","message","String","stack"],"sources":["../../../src/cli/buildPageWorker.ts"],"sourcesContent":[null],"mappings":"AAGA,SAASA,UAAA,QAAkB;AAC3B,SAASC,YAAA,QAAoB;AAExB,SAAAC,WACHA,CAAAC,IAAQ,EAAAC,KAAM;EAKhB,OAAQA,KAAI,mBAAgBC,MAAA,UAAAD,KAAA,CAAAC,MAAA,CAAAC,WAAA,MAAAF,KAAA,CAAAC,MAAA,CAAAC,WAAA,EAAAH,IAAA,IAAAA,IAAA,YAAAC,KAAA;AAC5B;AAEKJ,UAAQ,KAAIO,OAAA,CAAAC,KACf,iCAAuB,GAAAC,OAAA,CAAAC,IAAA;AAIzBD,OAAI,CAAAE,GAAA,CAAAC,aACA;AAOJH,OAAA,CAAAE,GAAA,CAAAE,gBAAe,GAAgB;AAC7BJ,OAAA,CAAAE,GAAK,CAAAG,QAAA,KAKHL,OAAA,CAAAE,GAAA,CAAAG,QAJY,GAAM;AAAA,IAChBC,WAAA;EAAAC,0BAAA;EAAAC,oBAAA;EAAAC,WAAA;AAAA,eACAC,aAAYA,CAAA;EACd,IACkB,CAAAJ,WAEf;IAED,IAAAK,GAAA,SAAAnB,YAAA,gBAAAoB,MAAA,CAAAC,IAAA,CAAAC,GAAA;IACAR,WAAA,GAAYK,GAAA,CAAAI,SAAA;EACd;EAIkB,IAChB,CAAAR,0BAAA;IACA,IAAAS,IAAA,SAAYxB,YAAA,4BAAAoB,MAAA,CAAAC,IAAA,CAAAC,GAAA;IACdP,0BAGK,GAAAS,IAAA,CAAAC,wBAAA;EAAA;EACM,IACX,CAAAT,oBAAA;IACA,IAAAU,IAAA,SAAA1B,YAAoB,uBAAAoB,MAAA,CAAAC,IAAA,CAAAC,GAAA;IACtBN,oBAAA,GAAAU,IAAA,CAAAC,kBAAA;EACF;EAEA;IACEJ,SAAI,EAAAT,WAAa;IAGjBW,wBAAQ,EAAmBV,0BACrB;IAENY,kBAAW,EAAAX;EAEb;AAEA;AACE,eAAQY,gBAAiBA,CAAA;EAEvB,KAAAX,WAAM;IAEN;QAAAU;MAAA,UAAAT,aAAA;MAAA;QAAAW;MAAA,UAAAF,kBAAA;IACFG,UAAA,CAAAC,oBAAA,GAAAF,UAAA,EAAAZ,WAAA;EAEA;AACE;AACElB,UAAA,CAAAiC,EAAM,CAAE,WAAW,gBAAAC,GAAA;EAGJ,IAAAA,GACX,CAAAC,IAAI,KAAK;IAAA,MACTN,gBAAS,IAAA7B,UAAA,CAAAoC,WAAA;MAAAD,IACT,EAAI,WAAK;MAAAE,EACT,EAAAH,GAAI,CAAAG;IAAK;IACA;EACA;EACA,IAAAH,GACT,CAAAC,IAAI,KAAK,aACT;IAAS,IACT;QAAIX,SAAK;QAAAE;MAAA,UAAAP,aAAA;MAAAmB,MAAA,SAAAZ,wBAAA;QACT,OAAI,MAAKF,SAAA,CAAAU,GAAA,CAAAK,IAAA,CAAAC,WAAA,EAAAN,GAAA,CAAAK,IAAA,CAAAE,IAAA,EAAAP,GAAA,CAAAK,IAAA,CAAAG,UAAA,EAAAR,GAAA,CAAAK,IAAA,CAAAI,MAAA,EAAAT,GAAA,CAAAK,IAAA,CAAAK,UAAA,EAAAV,GAAA,CAAAK,IAAA,CAAAM,mBAAA,EAAAX,GAAA,CAAAK,IAAA,CAAAO,SAAA,EAAAZ,GAAA,CAAAK,IAAA,CAAAQ,SAAA,EAAAb,GAAA,CAAAK,IAAA,CAAAS,gBAAA,EAAAd,GAAA,CAAAK,IAAA,CAAAU,YAAA,EAAAf,GAAA,CAAAK,IAAA,CAAAW,QAAA,EAAAhB,GAAA,CAAAK,IAAA,CAAAY,MAAA,EAAAjB,GAAA,CAAAK,IAAA,CAAAa,aAAA,EAAAlB,GAAA,CAAAK,IAAA,CAAAc,cAAA,EAAAnB,GAAA,CAAAK,IAAA,CAAAe,gBAAA,EAAApB,GAAA,CAAAK,IAAA,CAAAgB,gBAAA,EAAArB,GAAA,CAAAK,IAAA,CAAAiB,WAAA,EAAAtB,GAAA,CAAAK,IAAA,CAAAkB,qBAAA;MAAA,EACT;IAASzD,UACL,CAAKoC,WAAA;MACTD,IAAI,QAAK;MACTE,EAAA,EAAIH,GAAA,CAAAG,EAAK;MACTC;IAAS,EACT;EAAS,SACLoB,GAAA,EAAK;IACX1D,UACD,CAAAoC,WAAA;MACDD,IAAA,SAAY;MACdE,EAAA,EAAAH,GAAS,CAAAG,EAAK;MACZ7B,KAAA,EAAAN,WAAY,CAAAwD,GAAY,EAAAC,KAAA,IAAAD,GAAA,CAAAE,OAAA,GAAAC,MAAA,CAAAH,GAAA;MACtBI,KAAA,EAAM5D,WAAA,CAAAwD,GAAA,EAAAC,KAAA,IAAAD,GAAA,CAAAI,KAAA;IAAA,EACN;EAAQ;AAC8C;AACZ9D,UAC3C,CAAAoC,WAAA;EAAAD,IACH;AAEJ,CAAC","ignoreList":[]}
+{"version":3,"names":["parentPort","workerImport","_instanceof","left","right","Symbol","hasInstance","console","error","process","exit","env","VXRN_REACT_19","VITE_ENVIRONMENT","NODE_ENV","buildPageFn","runWithAsyncLocalContextFn","initialized","ensureImports","mod","import","meta","url","buildPage","mod1","runWithAsyncLocalContext","initializeWorker","oneOptions","Error","globalThis","__vxrnPluginConfig__","on","msg","type","postMessage","id","result","args","serverEntry","path","relativeId","params","foundRoute","clientManifestEntry","staticDir","clientDir","builtMiddlewares","serverJsPath","preloads","allCSS","layoutCSS","routePreloads","allCSSContents","criticalPreloads","deferredPreloads","useAfterLCP","useAfterLCPAggressive","err","message","String","stack"],"sources":["../../../src/cli/buildPageWorker.ts"],"sourcesContent":[null],"mappings":"AAGA,SAASA,UAAA,QAAkB;AAC3B,SAASC,YAAA,QAAoB;AAExB,SAAAC,WACHA,CAAAC,IAAQ,EAAAC,KAAM;EAKhB,OAAQA,KAAI,mBAAgBC,MAAA,UAAAD,KAAA,CAAAC,MAAA,CAAAC,WAAA,MAAAF,KAAA,CAAAC,MAAA,CAAAC,WAAA,EAAAH,IAAA,IAAAA,IAAA,YAAAC,KAAA;AAC5B;AAEKJ,UAAQ,KAAIO,OAAA,CAAAC,KACf,iCAAuB,GAAAC,OAAA,CAAAC,IAAA;AAIzBD,OAAI,CAAAE,GAAA,CAAAC,aACA;AAKJH,OAAA,CAAAE,GAAA,CAAAE,gBAAe,GAAgB;AAC7BJ,OAAA,CAAAE,GAAK,CAAAG,QAAA,KAKHL,OAAA,CAAAE,GAAA,CAAAG,QAJY,GAAM;AAAA,IAChBC,WAAA;EAAAC,0BAAA;EAAAC,WAAA;AAAA,eACAC,aAAYA,CAAA;EACd,IACkB,CAAAH,WAEf;IAED,IAAAI,GAAA,SAAAlB,YAAA,gBAAAmB,MAAA,CAAAC,IAAA,CAAAC,GAAA;IACAP,WAAA,GAAYI,GAAA,CAAAI,SAAA;EACd;EAGK,IACL,CAAAP,0BAAW;IACX,IAAAQ,IAAA,SAAAvB,YAA0B,4BAAAmB,MAAA,CAAAC,IAAA,CAAAC,GAAA;IAC5BN,0BAAA,GAAAQ,IAAA,CAAAC,wBAAA;EACF;EAEA;IACEF,SAAI,EAAAR,WACJ;IAAAU,wBAAK,EAAAT;EACH;AAEF;AACc,eAAAU,iBAAAC,UAAA;EAChB,KAAAV,WAAA;IAEA,KAAAU,UAAc,EACR,MAAI,IAAAC,KAAS,kDAAQ;IACvBC,UAAM,CAAAC,oBAAqB,GAAAH,UAC3B,EAAAV,WAAY;EACZ;AAAA;AAGFjB,UAAQ,CAAA+B,EAAA,UAAS,kBAAAC,GAAA;EACf,IAAAA,GAAI,CAAAC,IAAA;IACF,MAAAP,gBAAmB,CAAAM,GAAA,CAAAL,UAAA,GAAA3B,UAA6B,CAAAkC,WAAM;MAGvCD,IACX,EAAI,WAAK;MAAAE,EACT,EAAAH,GAAI,CAAAG;IAAK;IACA;EACA;EACA,IAAAH,GACT,CAAAC,IAAI,KAAK,aACT;IAAS,IACT;QAAIV,SAAK;QAAAE;MAAA,UAAAP,aAAA;MAAAkB,MAAA,SAAAX,wBAAA;QACT,OAAI,MAAKF,SAAA,CAAAS,GAAA,CAAAK,IAAA,CAAAC,WAAA,EAAAN,GAAA,CAAAK,IAAA,CAAAE,IAAA,EAAAP,GAAA,CAAAK,IAAA,CAAAG,UAAA,EAAAR,GAAA,CAAAK,IAAA,CAAAI,MAAA,EAAAT,GAAA,CAAAK,IAAA,CAAAK,UAAA,EAAAV,GAAA,CAAAK,IAAA,CAAAM,mBAAA,EAAAX,GAAA,CAAAK,IAAA,CAAAO,SAAA,EAAAZ,GAAA,CAAAK,IAAA,CAAAQ,SAAA,EAAAb,GAAA,CAAAK,IAAA,CAAAS,gBAAA,EAAAd,GAAA,CAAAK,IAAA,CAAAU,YAAA,EAAAf,GAAA,CAAAK,IAAA,CAAAW,QAAA,EAAAhB,GAAA,CAAAK,IAAA,CAAAY,MAAA,EAAAjB,GAAA,CAAAK,IAAA,CAAAa,SAAA,EAAAlB,GAAA,CAAAK,IAAA,CAAAc,aAAA,EAAAnB,GAAA,CAAAK,IAAA,CAAAe,cAAA,EAAApB,GAAA,CAAAK,IAAA,CAAAgB,gBAAA,EAAArB,GAAA,CAAAK,IAAA,CAAAiB,gBAAA,EAAAtB,GAAA,CAAAK,IAAA,CAAAkB,WAAA,EAAAvB,GAAA,CAAAK,IAAA,CAAAmB,qBAAA;MAAA,EACT;IAASxD,UACL,CAAKkC,WAAA;MACTD,IAAI,QAAK;MACTE,EAAA,EAAIH,GAAA,CAAAG,EAAK;MACTC;IAAS,EACT;EAAS,SACLqB,GAAA,EAAK;IAAAzD,UACL,CAAKkC,WAAA;MACTD,IAAI,SAAK;MACTE,EAAA,EAAIH,GAAA,CAAAG,EAAK;MAEZ3B,KAAA,EAAAN,WAAA,CAAAuD,GAAA,EAAA7B,KAAA,IAAA6B,GAAA,CAAAC,OAAA,GAAAC,MAAA,CAAAF,GAAA;MACDG,KAAA,EAAA1D,WAAY,CAAAuD,GAAY,EAAE7B,KAAM,IAAA6B,GAAA,CAAQG,KAAI,GAAI,KAAI;IACtD;EACE;AAAwB;AAChB5D,UACN,CAAAkC,WAAQ;EAAAD,IAAA,EACR;AAAsD","ignoreList":[]}

package/dist/esm/cli/patch.js

@@ -1,10 +1,10 @@
 import { loadUserOneOptions } from "../vite/loadConfig";
 async function run(args) {
   process.env.IS_VXRN_CLI = "true";
-  const { patch } = await import("vxrn"), deps = (await loadUserOneOptions("build")).oneOptions.deps;
-  process.env.DEBUG && console.info("User deps:", Object.keys(deps || {})), await patch({
+  const { patch } = await import("vxrn"), patches = (await loadUserOneOptions("build")).oneOptions.patches;
+  process.env.DEBUG && console.info("User patches:", Object.keys(patches || {})), await patch({
     root: process.cwd(),
-    deps,
+    deps: patches,
     force: args.force
   });
 }

package/dist/esm/cli/patch.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../src/cli/patch.ts"],
-  "mappings": "AACA,SAAS,0BAA0B;AAEnC,eAAsB,IAAI,MAA2B;AACnD,UAAQ,IAAI,cAAc;AAC1B,QAAM,EAAE,MAAM,IAAI,MAAM,OAAO,MAAM,GAG/B,QADU,MAAM,mBAAmB,OAAO,GAC3B,WAAW;AAEhC,EAAI,QAAQ,IAAI,SACd,QAAQ,KAAK,cAAc,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAGpD,MAAM,MAAM;AAAA,IACV,MAAM,QAAQ,IAAI;AAAA,IAClB;AAAA,IACA,OAAO,KAAK;AAAA,EACd,CAAwB;AAC1B;",
+  "mappings": "AACA,SAAS,0BAA0B;AAEnC,eAAsB,IAAI,MAA2B;AACnD,UAAQ,IAAI,cAAc;AAC1B,QAAM,EAAE,MAAM,IAAI,MAAM,OAAO,MAAM,GAG/B,WADU,MAAM,mBAAmB,OAAO,GACxB,WAAW;AAEnC,EAAI,QAAQ,IAAI,SACd,QAAQ,KAAK,iBAAiB,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,GAG1D,MAAM,MAAM;AAAA,IACV,MAAM,QAAQ,IAAI;AAAA,IAClB,MAAM;AAAA,IACN,OAAO,KAAK;AAAA,EACd,CAAwB;AAC1B;",
   "names": []
 }

package/dist/esm/cli/patch.mjs

@@ -4,10 +4,10 @@ async function run(args) {
   const {
       patch
     } = await import("vxrn"),
-    deps = (await loadUserOneOptions("build")).oneOptions.deps;
-  process.env.DEBUG && console.info("User deps:", Object.keys(deps || {})), await patch({
+    patches = (await loadUserOneOptions("build")).oneOptions.patches;
+  process.env.DEBUG && console.info("User patches:", Object.keys(patches || {})), await patch({
     root: process.cwd(),
-    deps,
+    deps: patches,
     force: args.force
   });
 }

package/dist/esm/cli/patch.mjs.map

@@ -1 +1 @@
-{"version":3,"names":["loadUserOneOptions","run","args","process","env","IS_VXRN_CLI","patch","deps","oneOptions","DEBUG","console","info","Object","keys","root","cwd","force"],"sources":["../../../src/cli/patch.ts"],"sourcesContent":[null],"mappings":"AACA,SAASA,kBAAA,QAA0B;AAEnC,eAAsBC,IAAIC,IAAA,EAA2B;EACnDC,OAAA,CAAQC,GAAA,CAAIC,WAAA,GAAc;EAC1B,MAAM;MAAEC;IAAM,IAAI,MAAM,OAAO,MAAM;IAG/BC,IAAA,IADU,MAAMP,kBAAA,CAAmB,OAAO,GAC3BQ,UAAA,CAAWD,IAAA;EAE5BJ,OAAA,CAAQC,GAAA,CAAIK,KAAA,IACdC,OAAA,CAAQC,IAAA,CAAK,cAAcC,MAAA,CAAOC,IAAA,CAAKN,IAAA,IAAQ,CAAC,CAAC,CAAC,GAGpD,MAAMD,KAAA,CAAM;IACVQ,IAAA,EAAMX,OAAA,CAAQY,GAAA,CAAI;IAClBR,IAAA;IACAS,KAAA,EAAOd,IAAA,CAAKc;EACd,CAAwB;AAC1B","ignoreList":[]}
+{"version":3,"names":["loadUserOneOptions","run","args","process","env","IS_VXRN_CLI","patch","patches","oneOptions","DEBUG","console","info","Object","keys","root","cwd","deps","force"],"sources":["../../../src/cli/patch.ts"],"sourcesContent":[null],"mappings":"AACA,SAASA,kBAAA,QAA0B;AAEnC,eAAsBC,IAAIC,IAAA,EAA2B;EACnDC,OAAA,CAAQC,GAAA,CAAIC,WAAA,GAAc;EAC1B,MAAM;MAAEC;IAAM,IAAI,MAAM,OAAO,MAAM;IAG/BC,OAAA,IADU,MAAMP,kBAAA,CAAmB,OAAO,GACxBQ,UAAA,CAAWD,OAAA;EAE/BJ,OAAA,CAAQC,GAAA,CAAIK,KAAA,IACdC,OAAA,CAAQC,IAAA,CAAK,iBAAiBC,MAAA,CAAOC,IAAA,CAAKN,OAAA,IAAW,CAAC,CAAC,CAAC,GAG1D,MAAMD,KAAA,CAAM;IACVQ,IAAA,EAAMX,OAAA,CAAQY,GAAA,CAAI;IAClBC,IAAA,EAAMT,OAAA;IACNU,KAAA,EAAOf,IAAA,CAAKe;EACd,CAAwB;AAC1B","ignoreList":[]}

package/dist/esm/cli/patch.native.js

@@ -5,10 +5,10 @@ async function run(args) {
       patch
     } = await import("vxrn"),
     options = await loadUserOneOptions("build"),
-    deps = options.oneOptions.deps;
-  process.env.DEBUG && console.info("User deps:", Object.keys(deps || {})), await patch({
+    patches = options.oneOptions.patches;
+  process.env.DEBUG && console.info("User patches:", Object.keys(patches || {})), await patch({
     root: process.cwd(),
-    deps,
+    deps: patches,
     force: args.force
   });
 }

package/dist/esm/cli/patch.native.js.map

@@ -1 +1 @@
-{"version":3,"names":["loadUserOneOptions","run","args","process","env","IS_VXRN_CLI","patch","options","deps","oneOptions","DEBUG","console","info","Object","keys","root","cwd","force"],"sources":["../../../src/cli/patch.ts"],"sourcesContent":[null],"mappings":"AACA,SAASA,kBAAA,QAA0B;AAEnC,eAAsBC,IAAIC,IAAA,EAA2B;EACnDC,OAAA,CAAQC,GAAA,CAAIC,WAAA,GAAc;EAC1B;MAAMC;IAAE,IAAM,MAAI,MAAM,OAAO;IAAMC,OAG/B,GADU,MAAMP,kBAAA,CAAmB,OAAO;IAC3BQ,IAAA,GAAAD,OAAW,CAAAE,UAAA,CAAAD,IAAA;EAE5BL,OAAA,CAAQC,GAAA,CAAIM,KAAA,IACdC,OAAA,CAAQC,IAAA,CAAK,cAAcC,MAAA,CAAOC,IAAA,CAAKN,IAAA,IAAQ,CAAC,CAAC,CAAC,GAGpD,MAAMF,KAAA,CAAM;IACVS,IAAA,EAAMZ,OAAA,CAAQa,GAAA,CAAI;IAClBR,IAAA;IACAS,KAAA,EAAOf,IAAA,CAAKe;EACd,CAAwB;AAC1B","ignoreList":[]}
+{"version":3,"names":["loadUserOneOptions","run","args","process","env","IS_VXRN_CLI","patch","options","patches","oneOptions","DEBUG","console","info","Object","keys","root","cwd","deps","force"],"sources":["../../../src/cli/patch.ts"],"sourcesContent":[null],"mappings":"AACA,SAASA,kBAAA,QAA0B;AAEnC,eAAsBC,IAAIC,IAAA,EAA2B;EACnDC,OAAA,CAAQC,GAAA,CAAIC,WAAA,GAAc;EAC1B;MAAMC;IAAE,IAAM,MAAI,MAAM,OAAO;IAAMC,OAG/B,SADUP,kBAAM,QAAmB;IAAOQ,OACxB,GAAAD,OAAW,CAAAE,UAAA,CAAAD,OAAA;EAE/BL,OAAA,CAAQC,GAAA,CAAIM,KAAA,IACdC,OAAA,CAAQC,IAAA,CAAK,iBAAiBC,MAAA,CAAOC,IAAA,CAAKN,OAAA,IAAW,CAAC,CAAC,CAAC,GAG1D,MAAMF,KAAA,CAAM;IACVS,IAAA,EAAMZ,OAAA,CAAQa,GAAA,CAAI;IAClBC,IAAA,EAAMT,OAAA;IACNU,KAAA,EAAOhB,IAAA,CAAKgB;EACd,CAAwB;AAC1B","ignoreList":[]}

package/dist/esm/cli/securityScan.js

@@ -0,0 +1,119 @@
+import { readdir, readFile } from "node:fs/promises";
+import { join } from "node:path";
+const SECRET_PATTERNS = [
+  // api tokens / keys with known prefixes
+  ["Anthropic API key", /sk-ant-[A-Za-z0-9_-]{20,}/g],
+  ["OpenAI API key", /sk-proj-[A-Za-z0-9_-]{20,}/g],
+  ["Stripe secret key", /sk_live_[A-Za-z0-9]{20,}/g],
+  ["Stripe webhook secret", /whsec_[A-Za-z0-9]{20,}/g],
+  ["GitHub token", /gh[ps]_[A-Za-z0-9]{36,}/g],
+  ["GitHub PAT", /github_pat_[A-Za-z0-9_]{20,}/g],
+  ["AWS access key", /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g],
+  [
+    "Postmark server token",
+    /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/g
+  ],
+  ["Bearer token assignment", /["']Bearer\s+[A-Za-z0-9_.-]{20,}["']/g],
+  [
+    "Generic secret assignment",
+    /(?:secret|password|api_key|apikey)\s*[:=]\s*["'][A-Za-z0-9_-]{16,}["']/gi
+  ],
+  // known env var names that should never be inlined
+  ["BETTER_AUTH_SECRET value", /BETTER_AUTH_SECRET["']\s*[:=]\s*["'][^"']+["']/g],
+  ["POSTMARK_SERVER_TOKEN value", /POSTMARK_SERVER_TOKEN["']\s*[:=]\s*["'][^"']+["']/g],
+  ["ANTHROPIC_API_KEY value", /ANTHROPIC_API_KEY["']\s*[:=]\s*["'][^"']+["']/g]
+], SAFE_UUIDS = /* @__PURE__ */ new Set([
+  "00000000-0000-0000-0000-000000000000",
+  "09259e3b-7be8-46f6-9801-106bf1866e1c",
+  // WebRTC SDP
+  "4ad15a19-80e2-4105-bf43-48039fd2963e"
+  // WebRTC SDP
+]), BUILTIN_SAFE_PATTERNS = [
+  /sk_live_your_/,
+  /sk_live_your_key/,
+  /rk_\w+_\w+/,
+  // tamagui theme tokens
+  /sk_all_element/,
+  // DOM property names
+  /sk_personal_data/
+  // analytics property names
+];
+function createSafeMatcher(userPatterns) {
+  const safeStrings = new Set(SAFE_UUIDS), safeRegexes = [...BUILTIN_SAFE_PATTERNS];
+  if (userPatterns)
+    for (const p of userPatterns)
+      typeof p == "string" ? safeStrings.add(p) : safeRegexes.push(p);
+  return (match) => safeStrings.has(match) ? !0 : safeRegexes.some((p) => p.test(match));
+}
+async function collectJSFiles(dir) {
+  const files = [];
+  async function walk(currentDir) {
+    let entries;
+    try {
+      entries = await readdir(currentDir, { withFileTypes: !0 });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const fullPath = join(currentDir, entry.name);
+      entry.isDirectory() ? await walk(fullPath) : entry.name.endsWith(".js") && files.push(fullPath);
+    }
+  }
+  return await walk(dir), files;
+}
+async function scanBundleForSecrets(distDir, userSafePatterns) {
+  const isSafe = createSafeMatcher(userSafePatterns), files = await collectJSFiles(distDir), findings = [];
+  for (const fullPath of files) {
+    const relativePath = fullPath.slice(distDir.length + 1);
+    let content;
+    try {
+      content = await readFile(fullPath, "utf-8");
+    } catch {
+      continue;
+    }
+    for (const [label, pattern] of SECRET_PATTERNS) {
+      pattern.lastIndex = 0;
+      let match;
+      for (; (match = pattern.exec(content)) !== null; ) {
+        const matched = match[0];
+        if (isSafe(matched)) continue;
+        const line = (content.slice(0, match.index).match(/\n/g)?.length ?? 0) + 1;
+        findings.push({
+          file: relativePath,
+          label,
+          match: matched.length > 40 ? `${matched.slice(0, 20)}...${matched.slice(-10)}` : matched,
+          line
+        });
+      }
+    }
+  }
+  return { clean: findings.length === 0, findings };
+}
+async function runSecurityScan(clientDir, level, safePatterns) {
+  console.info(`
+ \u{1F512} scanning client bundles for leaked secrets...
+`);
+  const { clean, findings } = await scanBundleForSecrets(clientDir, safePatterns);
+  if (clean)
+    return console.info(` \u{1F512} security scan passed \u2014 no secrets found
+`), !0;
+  const icon = level === "error" ? "\u{1F6A8}" : "\u26A0\uFE0F", header = level === "error" ? `${icon} ${findings.length} secret(s) leaked into client bundle:` : `${icon} ${findings.length} potential secret(s) found in client bundle:`;
+  console.error(`
+ ${header}
+`);
+  for (const f of findings)
+    console.error(`   ${f.label}`), console.error(`     file: ${f.file}:${f.line}`), console.error(`     match: ${f.match}
+`);
+  return level === "error" ? (console.error(
+    ` Set build.securityScan to 'warn' to continue building despite findings.
+`
+  ), !1) : (console.warn(
+    ` Set build.securityScan to 'error' to fail builds when secrets are detected.
+`
+  ), !0);
+}
+export {
+  runSecurityScan,
+  scanBundleForSecrets
+};
+//# sourceMappingURL=securityScan.js.map

package/dist/esm/cli/securityScan.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../src/cli/securityScan.ts"],
+  "mappings": "AAAA,SAAS,SAAS,gBAAgB;AAClC,SAAS,YAAY;AAGrB,MAAM,kBAA2C;AAAA;AAAA,EAE/C,CAAC,qBAAqB,4BAA4B;AAAA,EAClD,CAAC,kBAAkB,6BAA6B;AAAA,EAChD,CAAC,qBAAqB,2BAA2B;AAAA,EACjD,CAAC,yBAAyB,yBAAyB;AAAA,EACnD,CAAC,gBAAgB,0BAA0B;AAAA,EAC3C,CAAC,cAAc,+BAA+B;AAAA,EAC9C,CAAC,kBAAkB,kDAAkD;AAAA,EACrE;AAAA,IACE;AAAA,IACA;AAAA,EACF;AAAA,EACA,CAAC,2BAA2B,uCAAuC;AAAA,EACnE;AAAA,IACE;AAAA,IACA;AAAA,EACF;AAAA;AAAA,EAEA,CAAC,4BAA4B,iDAAiD;AAAA,EAC9E,CAAC,+BAA+B,oDAAoD;AAAA,EACpF,CAAC,2BAA2B,gDAAgD;AAC9E,GAGM,aAAa,oBAAI,IAAI;AAAA,EACzB;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF,CAAC,GAGK,wBAAkC;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF;AAEA,SAAS,kBAAkB,cAAoC;AAC7D,QAAM,cAAc,IAAI,IAAI,UAAU,GAChC,cAAc,CAAC,GAAG,qBAAqB;AAE7C,MAAI;AACF,eAAW,KAAK;AACd,MAAI,OAAO,KAAM,WACf,YAAY,IAAI,CAAC,IAEjB,YAAY,KAAK,CAAC;AAKxB,SAAO,CAAC,UACF,YAAY,IAAI,KAAK,IAAU,KAC5B,YAAY,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,CAAC;AAEhD;AAUA,eAAe,eAAe,KAAgC;AAC5D,QAAM,QAAkB,CAAC;AAEzB,iBAAe,KAAK,YAAoB;AACtC,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,QAAQ,YAAY,EAAE,eAAe,GAAK,CAAC;AAAA,IAC7D,QAAQ;AACN;AAAA,IACF;AACA,eAAW,SAAS,SAAS;AAC3B,YAAM,WAAW,KAAK,YAAY,MAAM,IAAI;AAC5C,MAAI,MAAM,YAAY,IACpB,MAAM,KAAK,QAAQ,IACV,MAAM,KAAK,SAAS,KAAK,KAClC,MAAM,KAAK,QAAQ;AAAA,IAEvB;AAAA,EACF;AAEA,eAAM,KAAK,GAAG,GACP;AACT;AAEA,eAAsB,qBACpB,SACA,kBAIC;AACD,QAAM,SAAS,kBAAkB,gBAAgB,GAC3C,QAAQ,MAAM,eAAe,OAAO,GACpC,WAA8B,CAAC;AAErC,aAAW,YAAY,OAAO;AAC5B,UAAM,eAAe,SAAS,MAAM,QAAQ,SAAS,CAAC;AACtD,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,SAAS,UAAU,OAAO;AAAA,IAC5C,QAAQ;AACN;AAAA,IACF;AAEA,eAAW,CAAC,OAAO,OAAO,KAAK,iBAAiB;AAE9C,cAAQ,YAAY;AACpB,UAAI;AAEJ,cAAQ,QAAQ,QAAQ,KAAK,OAAO,OAAO,QAAM;AAC/C,cAAM,UAAU,MAAM,CAAC;AACvB,YAAI,OAAO,OAAO,EAAG;AAIrB,cAAM,QADc,QAAQ,MAAM,GAAG,MAAM,KAAK,EACtB,MAAM,KAAK,GAAG,UAAU,KAAK;AAEvD,iBAAS,KAAK;AAAA,UACZ,MAAM;AAAA,UACN;AAAA,UACA,OACE,QAAQ,SAAS,KACb,GAAG,QAAQ,MAAM,GAAG,EAAE,CAAC,MAAM,QAAQ,MAAM,GAAG,CAAC,KAC/C;AAAA,UACN;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,OAAO,SAAS,WAAW,GAAG,SAAS;AAClD;AAMA,eAAsB,gBACpB,WACA,OACA,cACkB;AAClB,UAAQ,KAAK;AAAA;AAAA,CAAuD;AAEpE,QAAM,EAAE,OAAO,SAAS,IAAI,MAAM,qBAAqB,WAAW,YAAY;AAE9E,MAAI;AACF,mBAAQ,KAAK;AAAA,CAA+C,GACrD;AAGT,QAAM,OAAO,UAAU,UAAU,cAAO,gBAClC,SACJ,UAAU,UACN,GAAG,IAAI,IAAI,SAAS,MAAM,0CAC1B,GAAG,IAAI,IAAI,SAAS,MAAM;AAEhC,UAAQ,MAAM;AAAA,GAAM,MAAM;AAAA,CAAI;AAE9B,aAAW,KAAK;AACd,YAAQ,MAAM,MAAM,EAAE,KAAK,EAAE,GAC7B,QAAQ,MAAM,cAAc,EAAE,IAAI,IAAI,EAAE,IAAI,EAAE,GAC9C,QAAQ,MAAM,eAAe,EAAE,KAAK;AAAA,CAAI;AAG1C,SAAI,UAAU,WACZ,QAAQ;AAAA,IACN;AAAA;AAAA,EACF,GACO,OAGT,QAAQ;AAAA,IACN;AAAA;AAAA,EACF,GACO;AACT;",
+  "names": []
+}

package/dist/esm/cli/securityScan.mjs

@@ -0,0 +1,99 @@
+import { readdir, readFile } from "node:fs/promises";
+import { join } from "node:path";
+const SECRET_PATTERNS = [
+  // api tokens / keys with known prefixes
+  ["Anthropic API key", /sk-ant-[A-Za-z0-9_-]{20,}/g], ["OpenAI API key", /sk-proj-[A-Za-z0-9_-]{20,}/g], ["Stripe secret key", /sk_live_[A-Za-z0-9]{20,}/g], ["Stripe webhook secret", /whsec_[A-Za-z0-9]{20,}/g], ["GitHub token", /gh[ps]_[A-Za-z0-9]{36,}/g], ["GitHub PAT", /github_pat_[A-Za-z0-9_]{20,}/g], ["AWS access key", /(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])/g], ["Postmark server token", /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/g], ["Bearer token assignment", /["']Bearer\s+[A-Za-z0-9_.-]{20,}["']/g], ["Generic secret assignment", /(?:secret|password|api_key|apikey)\s*[:=]\s*["'][A-Za-z0-9_-]{16,}["']/gi],
+  // known env var names that should never be inlined
+  ["BETTER_AUTH_SECRET value", /BETTER_AUTH_SECRET["']\s*[:=]\s*["'][^"']+["']/g], ["POSTMARK_SERVER_TOKEN value", /POSTMARK_SERVER_TOKEN["']\s*[:=]\s*["'][^"']+["']/g], ["ANTHROPIC_API_KEY value", /ANTHROPIC_API_KEY["']\s*[:=]\s*["'][^"']+["']/g]],
+  SAFE_UUIDS = /* @__PURE__ */new Set(["00000000-0000-0000-0000-000000000000", "09259e3b-7be8-46f6-9801-106bf1866e1c",
+  // WebRTC SDP
+  "4ad15a19-80e2-4105-bf43-48039fd2963e"
+  // WebRTC SDP
+  ]),
+  BUILTIN_SAFE_PATTERNS = [/sk_live_your_/, /sk_live_your_key/, /rk_\w+_\w+/,
+  // tamagui theme tokens
+  /sk_all_element/,
+  // DOM property names
+  /sk_personal_data/
+  // analytics property names
+  ];
+function createSafeMatcher(userPatterns) {
+  const safeStrings = new Set(SAFE_UUIDS),
+    safeRegexes = [...BUILTIN_SAFE_PATTERNS];
+  if (userPatterns) for (const p of userPatterns) typeof p == "string" ? safeStrings.add(p) : safeRegexes.push(p);
+  return match => safeStrings.has(match) ? !0 : safeRegexes.some(p => p.test(match));
+}
+async function collectJSFiles(dir) {
+  const files = [];
+  async function walk(currentDir) {
+    let entries;
+    try {
+      entries = await readdir(currentDir, {
+        withFileTypes: !0
+      });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const fullPath = join(currentDir, entry.name);
+      entry.isDirectory() ? await walk(fullPath) : entry.name.endsWith(".js") && files.push(fullPath);
+    }
+  }
+  return await walk(dir), files;
+}
+async function scanBundleForSecrets(distDir, userSafePatterns) {
+  const isSafe = createSafeMatcher(userSafePatterns),
+    files = await collectJSFiles(distDir),
+    findings = [];
+  for (const fullPath of files) {
+    const relativePath = fullPath.slice(distDir.length + 1);
+    let content;
+    try {
+      content = await readFile(fullPath, "utf-8");
+    } catch {
+      continue;
+    }
+    for (const [label, pattern] of SECRET_PATTERNS) {
+      pattern.lastIndex = 0;
+      let match;
+      for (; (match = pattern.exec(content)) !== null;) {
+        const matched = match[0];
+        if (isSafe(matched)) continue;
+        const line = (content.slice(0, match.index).match(/\n/g)?.length ?? 0) + 1;
+        findings.push({
+          file: relativePath,
+          label,
+          match: matched.length > 40 ? `${matched.slice(0, 20)}...${matched.slice(-10)}` : matched,
+          line
+        });
+      }
+    }
+  }
+  return {
+    clean: findings.length === 0,
+    findings
+  };
+}
+async function runSecurityScan(clientDir, level, safePatterns) {
+  console.info(`
+ \u{1F512} scanning client bundles for leaked secrets...
+`);
+  const {
+    clean,
+    findings
+  } = await scanBundleForSecrets(clientDir, safePatterns);
+  if (clean) return console.info(` \u{1F512} security scan passed \u2014 no secrets found
+`), !0;
+  const icon = level === "error" ? "\u{1F6A8}" : "\u26A0\uFE0F",
+    header = level === "error" ? `${icon} ${findings.length} secret(s) leaked into client bundle:` : `${icon} ${findings.length} potential secret(s) found in client bundle:`;
+  console.error(`
+ ${header}
+`);
+  for (const f of findings) console.error(`   ${f.label}`), console.error(`     file: ${f.file}:${f.line}`), console.error(`     match: ${f.match}
+`);
+  return level === "error" ? (console.error(` Set build.securityScan to 'warn' to continue building despite findings.
+`), !1) : (console.warn(` Set build.securityScan to 'error' to fail builds when secrets are detected.
+`), !0);
+}
+export { runSecurityScan, scanBundleForSecrets };
+//# sourceMappingURL=securityScan.mjs.map

package/dist/esm/cli/securityScan.mjs.map

@@ -0,0 +1 @@
+{"version":3,"names":["readdir","readFile","join","SECRET_PATTERNS","SAFE_UUIDS","Set","BUILTIN_SAFE_PATTERNS","createSafeMatcher","userPatterns","safeStrings","safeRegexes","p","add","push","match","has","some","test","collectJSFiles","dir","files","walk","currentDir","entries","withFileTypes","entry","fullPath","name","isDirectory","endsWith","scanBundleForSecrets","distDir","userSafePatterns","isSafe","findings","relativePath","slice","length","content","label","pattern","lastIndex","exec","matched","line","index","file","clean","runSecurityScan","clientDir","level","safePatterns","console","info","icon","header","error","f","warn"],"sources":["../../../src/cli/securityScan.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,OAAA,EAASC,QAAA,QAAgB;AAClC,SAASC,IAAA,QAAY;AAGrB,MAAMC,eAAA,GAA2C;EAAA;EAE/C,CAAC,qBAAqB,4BAA4B,GAClD,CAAC,kBAAkB,6BAA6B,GAChD,CAAC,qBAAqB,2BAA2B,GACjD,CAAC,yBAAyB,yBAAyB,GACnD,CAAC,gBAAgB,0BAA0B,GAC3C,CAAC,cAAc,+BAA+B,GAC9C,CAAC,kBAAkB,kDAAkD,GACrE,CACE,yBACA,gEACF,EACA,CAAC,2BAA2B,uCAAuC,GACnE,CACE,6BACA,2EACF;EAAA;EAEA,CAAC,4BAA4B,iDAAiD,GAC9E,CAAC,+BAA+B,oDAAoD,GACpF,CAAC,2BAA2B,gDAAgD,EAC9E;EAGMC,UAAA,GAAa,mBAAIC,GAAA,CAAI,CACzB,wCACA;EAAA;EACA;EAAA;EAAA,CACD;EAGKC,qBAAA,GAAkC,CACtC,iBACA,oBACA;EAAA;EACA;EAAA;EACA;EAAA;EAAA,CACF;AAEA,SAASC,kBAAkBC,YAAA,EAAoC;EAC7D,MAAMC,WAAA,GAAc,IAAIJ,GAAA,CAAID,UAAU;IAChCM,WAAA,GAAc,CAAC,GAAGJ,qBAAqB;EAE7C,IAAIE,YAAA,EACF,WAAWG,CAAA,IAAKH,YAAA,EACV,OAAOG,CAAA,IAAM,WACfF,WAAA,CAAYG,GAAA,CAAID,CAAC,IAEjBD,WAAA,CAAYG,IAAA,CAAKF,CAAC;EAKxB,OAAQG,KAAA,IACFL,WAAA,CAAYM,GAAA,CAAID,KAAK,IAAU,KAC5BJ,WAAA,CAAYM,IAAA,CAAML,CAAA,IAAMA,CAAA,CAAEM,IAAA,CAAKH,KAAK,CAAC;AAEhD;AAUA,eAAeI,eAAeC,GAAA,EAAgC;EAC5D,MAAMC,KAAA,GAAkB,EAAC;EAEzB,eAAeC,KAAKC,UAAA,EAAoB;IACtC,IAAIC,OAAA;IACJ,IAAI;MACFA,OAAA,GAAU,MAAMvB,OAAA,CAAQsB,UAAA,EAAY;QAAEE,aAAA,EAAe;MAAK,CAAC;IAC7D,QAAQ;MACN;IACF;IACA,WAAWC,KAAA,IAASF,OAAA,EAAS;MAC3B,MAAMG,QAAA,GAAWxB,IAAA,CAAKoB,UAAA,EAAYG,KAAA,CAAME,IAAI;MACxCF,KAAA,CAAMG,WAAA,CAAY,IACpB,MAAMP,IAAA,CAAKK,QAAQ,IACVD,KAAA,CAAME,IAAA,CAAKE,QAAA,CAAS,KAAK,KAClCT,KAAA,CAAMP,IAAA,CAAKa,QAAQ;IAEvB;EACF;EAEA,aAAML,IAAA,CAAKF,GAAG,GACPC,KAAA;AACT;AAEA,eAAsBU,qBACpBC,OAAA,EACAC,gBAAA,EAIC;EACD,MAAMC,MAAA,GAAS1B,iBAAA,CAAkByB,gBAAgB;IAC3CZ,KAAA,GAAQ,MAAMF,cAAA,CAAea,OAAO;IACpCG,QAAA,GAA8B,EAAC;EAErC,WAAWR,QAAA,IAAYN,KAAA,EAAO;IAC5B,MAAMe,YAAA,GAAeT,QAAA,CAASU,KAAA,CAAML,OAAA,CAAQM,MAAA,GAAS,CAAC;IACtD,IAAIC,OAAA;IACJ,IAAI;MACFA,OAAA,GAAU,MAAMrC,QAAA,CAASyB,QAAA,EAAU,OAAO;IAC5C,QAAQ;MACN;IACF;IAEA,WAAW,CAACa,KAAA,EAAOC,OAAO,KAAKrC,eAAA,EAAiB;MAE9CqC,OAAA,CAAQC,SAAA,GAAY;MACpB,IAAI3B,KAAA;MAEJ,QAAQA,KAAA,GAAQ0B,OAAA,CAAQE,IAAA,CAAKJ,OAAO,OAAO,OAAM;QAC/C,MAAMK,OAAA,GAAU7B,KAAA,CAAM,CAAC;QACvB,IAAImB,MAAA,CAAOU,OAAO,GAAG;QAIrB,MAAMC,IAAA,IADcN,OAAA,CAAQF,KAAA,CAAM,GAAGtB,KAAA,CAAM+B,KAAK,EACtB/B,KAAA,CAAM,KAAK,GAAGuB,MAAA,IAAU,KAAK;QAEvDH,QAAA,CAASrB,IAAA,CAAK;UACZiC,IAAA,EAAMX,YAAA;UACNI,KAAA;UACAzB,KAAA,EACE6B,OAAA,CAAQN,MAAA,GAAS,KACb,GAAGM,OAAA,CAAQP,KAAA,CAAM,GAAG,EAAE,CAAC,MAAMO,OAAA,CAAQP,KAAA,CAAM,GAAG,CAAC,KAC/CO,OAAA;UACNC;QACF,CAAC;MACH;IACF;EACF;EAEA,OAAO;IAAEG,KAAA,EAAOb,QAAA,CAASG,MAAA,KAAW;IAAGH;EAAS;AAClD;AAMA,eAAsBc,gBACpBC,SAAA,EACAC,KAAA,EACAC,YAAA,EACkB;EAClBC,OAAA,CAAQC,IAAA,CAAK;AAAA;AAAA,CAAuD;EAEpE,MAAM;IAAEN,KAAA;IAAOb;EAAS,IAAI,MAAMJ,oBAAA,CAAqBmB,SAAA,EAAWE,YAAY;EAE9E,IAAIJ,KAAA,EACF,OAAAK,OAAA,CAAQC,IAAA,CAAK;AAAA,CAA+C,GACrD;EAGT,MAAMC,IAAA,GAAOJ,KAAA,KAAU,UAAU,cAAO;IAClCK,MAAA,GACJL,KAAA,KAAU,UACN,GAAGI,IAAI,IAAIpB,QAAA,CAASG,MAAM,0CAC1B,GAAGiB,IAAI,IAAIpB,QAAA,CAASG,MAAM;EAEhCe,OAAA,CAAQI,KAAA,CAAM;AAAA,GAAMD,MAAM;AAAA,CAAI;EAE9B,WAAWE,CAAA,IAAKvB,QAAA,EACdkB,OAAA,CAAQI,KAAA,CAAM,MAAMC,CAAA,CAAElB,KAAK,EAAE,GAC7Ba,OAAA,CAAQI,KAAA,CAAM,cAAcC,CAAA,CAAEX,IAAI,IAAIW,CAAA,CAAEb,IAAI,EAAE,GAC9CQ,OAAA,CAAQI,KAAA,CAAM,eAAeC,CAAA,CAAE3C,KAAK;AAAA,CAAI;EAG1C,OAAIoC,KAAA,KAAU,WACZE,OAAA,CAAQI,KAAA,CACN;AAAA,CACF,GACO,OAGTJ,OAAA,CAAQM,IAAA,CACN;AAAA,CACF,GACO;AACT","ignoreList":[]}

package/dist/esm/cli/securityScan.native.js

@@ -0,0 +1,178 @@
+import { readdir, readFile } from "fs/promises";
+import { join } from "path";
+var SECRET_PATTERNS = [
+  // api tokens / keys with known prefixes
+  ["Anthropic API key", /sk-ant-[A-Za-z0-9_-]{20,}/g], ["OpenAI API key", /sk-proj-[A-Za-z0-9_-]{20,}/g], ["Stripe secret key", /sk_live_[A-Za-z0-9]{20,}/g], ["Stripe webhook secret", /whsec_[A-Za-z0-9]{20,}/g], ["GitHub token", /gh[ps]_[A-Za-z0-9]{36,}/g], ["GitHub PAT", /github_pat_[A-Za-z0-9_]{20,}/g], ["AWS access key", RegExp("(?<![A-Za-z0-9])AKIA[0-9A-Z]{16}(?![A-Za-z0-9])", "g")], ["Postmark server token", /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/g], ["Bearer token assignment", /["']Bearer\s+[A-Za-z0-9_.-]{20,}["']/g], ["Generic secret assignment", /(?:secret|password|api_key|apikey)\s*[:=]\s*["'][A-Za-z0-9_-]{16,}["']/gi],
+  // known env var names that should never be inlined
+  ["BETTER_AUTH_SECRET value", /BETTER_AUTH_SECRET["']\s*[:=]\s*["'][^"']+["']/g], ["POSTMARK_SERVER_TOKEN value", /POSTMARK_SERVER_TOKEN["']\s*[:=]\s*["'][^"']+["']/g], ["ANTHROPIC_API_KEY value", /ANTHROPIC_API_KEY["']\s*[:=]\s*["'][^"']+["']/g]],
+  SAFE_UUIDS = /* @__PURE__ */new Set(["00000000-0000-0000-0000-000000000000", "09259e3b-7be8-46f6-9801-106bf1866e1c",
+  // WebRTC SDP
+  "4ad15a19-80e2-4105-bf43-48039fd2963e"]),
+  BUILTIN_SAFE_PATTERNS = [/sk_live_your_/, /sk_live_your_key/, /rk_\w+_\w+/,
+  // tamagui theme tokens
+  /sk_all_element/,
+  // DOM property names
+  /sk_personal_data/];
+function createSafeMatcher(userPatterns) {
+  var safeStrings = new Set(SAFE_UUIDS),
+    safeRegexes = [...BUILTIN_SAFE_PATTERNS];
+  if (userPatterns) {
+    var _iteratorNormalCompletion = !0,
+      _didIteratorError = !1,
+      _iteratorError = void 0;
+    try {
+      for (var _iterator = userPatterns[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = !0) {
+        var p = _step.value;
+        typeof p == "string" ? safeStrings.add(p) : safeRegexes.push(p);
+      }
+    } catch (err) {
+      _didIteratorError = !0, _iteratorError = err;
+    } finally {
+      try {
+        !_iteratorNormalCompletion && _iterator.return != null && _iterator.return();
+      } finally {
+        if (_didIteratorError) throw _iteratorError;
+      }
+    }
+  }
+  return function (match) {
+    return safeStrings.has(match) ? !0 : safeRegexes.some(function (p2) {
+      return p2.test(match);
+    });
+  };
+}
+async function collectJSFiles(dir) {
+  var files = [];
+  async function walk(currentDir) {
+    var entries;
+    try {
+      entries = await readdir(currentDir, {
+        withFileTypes: !0
+      });
+    } catch {
+      return;
+    }
+    var _iteratorNormalCompletion = !0,
+      _didIteratorError = !1,
+      _iteratorError = void 0;
+    try {
+      for (var _iterator = entries[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = !0) {
+        var entry = _step.value,
+          fullPath = join(currentDir, entry.name);
+        entry.isDirectory() ? await walk(fullPath) : entry.name.endsWith(".js") && files.push(fullPath);
+      }
+    } catch (err) {
+      _didIteratorError = !0, _iteratorError = err;
+    } finally {
+      try {
+        !_iteratorNormalCompletion && _iterator.return != null && _iterator.return();
+      } finally {
+        if (_didIteratorError) throw _iteratorError;
+      }
+    }
+  }
+  return await walk(dir), files;
+}
+async function scanBundleForSecrets(distDir, userSafePatterns) {
+  var isSafe = createSafeMatcher(userSafePatterns),
+    files = await collectJSFiles(distDir),
+    findings = [],
+    _iteratorNormalCompletion = !0,
+    _didIteratorError = !1,
+    _iteratorError = void 0;
+  try {
+    for (var _iterator = files[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = !0) {
+      var fullPath = _step.value,
+        relativePath = fullPath.slice(distDir.length + 1),
+        content = void 0;
+      try {
+        content = await readFile(fullPath, "utf-8");
+      } catch {
+        continue;
+      }
+      var _iteratorNormalCompletion1 = !0,
+        _didIteratorError1 = !1,
+        _iteratorError1 = void 0;
+      try {
+        for (var _iterator1 = SECRET_PATTERNS[Symbol.iterator](), _step1; !(_iteratorNormalCompletion1 = (_step1 = _iterator1.next()).done); _iteratorNormalCompletion1 = !0) {
+          var [label, pattern] = _step1.value;
+          pattern.lastIndex = 0;
+          for (var match = void 0; (match = pattern.exec(content)) !== null;) {
+            var _ref,
+              _beforeMatch_match,
+              matched = match[0];
+            if (!isSafe(matched)) {
+              var beforeMatch = content.slice(0, match.index),
+                line = ((_ref = (_beforeMatch_match = beforeMatch.match(/\n/g)) === null || _beforeMatch_match === void 0 ? void 0 : _beforeMatch_match.length) !== null && _ref !== void 0 ? _ref : 0) + 1;
+              findings.push({
+                file: relativePath,
+                label,
+                match: matched.length > 40 ? `${matched.slice(0, 20)}...${matched.slice(-10)}` : matched,
+                line
+              });
+            }
+          }
+        }
+      } catch (err) {
+        _didIteratorError1 = !0, _iteratorError1 = err;
+      } finally {
+        try {
+          !_iteratorNormalCompletion1 && _iterator1.return != null && _iterator1.return();
+        } finally {
+          if (_didIteratorError1) throw _iteratorError1;
+        }
+      }
+    }
+  } catch (err) {
+    _didIteratorError = !0, _iteratorError = err;
+  } finally {
+    try {
+      !_iteratorNormalCompletion && _iterator.return != null && _iterator.return();
+    } finally {
+      if (_didIteratorError) throw _iteratorError;
+    }
+  }
+  return {
+    clean: findings.length === 0,
+    findings
+  };
+}
+async function runSecurityScan(clientDir, level, safePatterns) {
+  console.info(`
+ \u{1F512} scanning client bundles for leaked secrets...
+`);
+  var {
+    clean,
+    findings
+  } = await scanBundleForSecrets(clientDir, safePatterns);
+  if (clean) return console.info(` \u{1F512} security scan passed \u2014 no secrets found
+`), !0;
+  var icon = level === "error" ? "\u{1F6A8}" : "\u26A0\uFE0F",
+    header = level === "error" ? `${icon} ${findings.length} secret(s) leaked into client bundle:` : `${icon} ${findings.length} potential secret(s) found in client bundle:`;
+  console.error(`
+ ${header}
+`);
+  var _iteratorNormalCompletion = !0,
+    _didIteratorError = !1,
+    _iteratorError = void 0;
+  try {
+    for (var _iterator = findings[Symbol.iterator](), _step; !(_iteratorNormalCompletion = (_step = _iterator.next()).done); _iteratorNormalCompletion = !0) {
+      var f = _step.value;
+      console.error(`   ${f.label}`), console.error(`     file: ${f.file}:${f.line}`), console.error(`     match: ${f.match}
+`);
+    }
+  } catch (err) {
+    _didIteratorError = !0, _iteratorError = err;
+  } finally {
+    try {
+      !_iteratorNormalCompletion && _iterator.return != null && _iterator.return();
+    } finally {
+      if (_didIteratorError) throw _iteratorError;
+    }
+  }
+  return level === "error" ? (console.error(` Set build.securityScan to 'warn' to continue building despite findings.
+`), !1) : (console.warn(` Set build.securityScan to 'error' to fail builds when secrets are detected.
+`), !0);
+}
+export { runSecurityScan, scanBundleForSecrets };
+//# sourceMappingURL=securityScan.native.js.map

package/dist/esm/cli/securityScan.native.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["readdir","readFile","join","SECRET_PATTERNS","RegExp","SAFE_UUIDS","Set","BUILTIN_SAFE_PATTERNS","createSafeMatcher","userPatterns","safeStrings","safeRegexes","_iteratorNormalCompletion","_didIteratorError","_iteratorError","_iterator","Symbol","iterator","_step","next","done","p","value","add","push","err","return","match","has","some","p2","test","collectJSFiles","dir","files","walk","currentDir","entries","withFileTypes","entry","fullPath","name"],"sources":["../../../src/cli/securityScan.ts"],"sourcesContent":[null],"mappings":"AAAA,SAASA,OAAA,EAASC,QAAA,QAAgB;AAClC,SAASC,IAAA,QAAY;AAGrB,IAAAC,eAAM;EAA2C;EAE/C,CACC,mBAAkB,EAClB,4BAAqB,CACrB,EACD,CACC,gBAAc,EACd,6BAAkB,CACnB,GAEE,qBACF,4BACC,EACD,CACE,yBACA,0BACF,GAEC,gBACA,2BACA,EACH,CAIE,cACA,kCACA,mBAIIC,MAAA,kDAAkC,OACtC,EACA,CACA,yFACA,GACA,mEACF,EAEA,CACE,2BAA4B,EAG5B,0EAAI,CACF;EACE;EAQJ,CAIF,4BAUA,iDAA8D,CAC5D,EAEA,CACE,6BAAI,EACJ,oDAAI,CACF,EAA2D,CAE3D,2BACF,iDACA,CACE;EAAAC,UAAM,kBAAgB,IAAAC,GAAA,CAAY,CAClC,sCACa,EAEQ,sCAEvB;EACF;EAEA,sCACO,CACT;EAAAC,qBAAA,IAEA,eAAsB,EAOpB,kBAAe,EAIf,YAAW;EACT;EACA,gBAAI;EACJ;EACE,kBAAU,CAAgC;AAE1C,SAAAC,kBAAAC,YAAA;EAAA,IACFC,WAAA,OAAAJ,GAAA,CAAAD,UAAA;IAAAM,WAAA,IAEA,GAAAJ,qBAAmB,CAEjB;EACA,IAAAE,YAAI;IAEJ,IAAAG,yBAAwB,GAAK;MAAAC,iBAAoB;MAAAC,cAAA;IAC/C;MACA,SAAIC,SAAO,GAAON,YAAG,CAAAO,MAAA,CAAAC,QAAA,KAAAC,KAAA,IAAAN,yBAAA,IAAAM,KAAA,GAAAH,SAAA,CAAAI,IAAA,IAAAC,IAAA,GAAAR,yBAAA;QAIrB,IAAAS,CAAA,GAAMH,KAAA,CADcI,KAAA;QAGpB,OAAAD,CAAA,IAAS,QAAK,GAAAX,WAAA,CAAAa,GAAA,CAAAF,CAAA,IAAAV,WAAA,CAAAa,IAAA,CAAAH,CAAA;MAAA;IACN,SACNI,GAAA;MAAAZ,iBAEE,GAAQ,IAAAC,cACD,GAAAW,GAAQ;IACX,UACN;MAAA,IACD;QACH,CAAAb,yBAAA,IAAAG,SAAA,CAAAW,MAAA,YAAAX,SAAA,CAAAW,MAAA;MACF;QACF,IAAAb,iBAAA,EAEO,MAAEC,cAAgB;MAC3B;IAMA;EAKE;EAAa,iBAAAa,KAAA;IAAuD,OAAAjB,WAAA,CAAAkB,GAAA,CAAAD,KAAA,SAAAhB,WAAA,CAAAkB,IAAA,WAAAC,EAAA;MAEpE,OAAQA,EAAA,CAAAC,IAAO,CAAAJ,KAAS;IAExB,EAAI;EACF;AAAa;AAIf,eAAaK,cAAUA,CAAAC,GAAA,EAAU;EAMjC,IAAAC,KAAQ,KAAM;EAAA,eAAYC,KAAAC,UAAA;IAAI,IAAAC,OAAA;IAE9B;MACEA,OAAQ,SAAMrC,OAAQ,CAAAoC,UACtB;QACwCE,aAAA;MAG1C;IAEI;MAAA;IACF;IAKA,IAAA1B,yBAAA;MAAAC,iBAAA;MAAAC,cAAA;IAAA;MAEK,SAAAC,SAAA,GAAAsB,OAAA,CAAArB,MAAA,CAAAC,QAAA,KAAAC,KAAA,IAAAN,yBAAA,IAAAM,KAAA,GAAAH,SAAA,CAAAI,IAAA,IAAAC,IAAA,GAAAR,yBAAA;QACT,IAAA2B,KAAA,GAAArB,KAAA,CAAAI,KAAA;UAAAkB,QAAA,GAAAtC,IAAA,CAAAkC,UAAA,EAAAG,KAAA,CAAAE,IAAA","ignoreList":[]}

package/dist/esm/cli/workerPool.js

@@ -42,11 +42,11 @@ class BuildWorkerPool {
   get size() {
     return this.workers.length;
   }
-  // initialize all workers - they load config themselves from vite.config
-  async initialize() {
+  // initialize all workers with pre-loaded config from main thread
+  async initialize(oneOptions) {
     await this._ready;
     for (const worker of this.workers)
-      worker.postMessage({ type: "init", id: this.nextId++ });
+      worker.postMessage({ type: "init", id: this.nextId++, oneOptions });
     await this._initialized;
   }
   dispatch() {

package/dist/esm/cli/workerPool.js.map

@@ -1,6 +1,6 @@
 {
   "version": 3,
   "sources": ["../../../src/cli/workerPool.ts"],
-  "mappings": "AAGA,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,qBAAqB;AAC9B,SAAS,SAAS,YAAY;AAE9B,MAAM,aAAa,cAAc,YAAY,GAAG,GAC1C,YAAY,QAAQ,UAAU;AAQ7B,MAAM,gBAAgB;AAAA,EACnB,UAAoB,CAAC;AAAA,EACrB,YAAsB,CAAC;AAAA,EACvB,YAAuD,CAAC;AAAA,EACxD,cAAc,oBAAI,IAAyB;AAAA,EAC3C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EAEtB,YAAY,OAAO,KAAK,IAAI,GAAG,KAAK,EAAE,SAAS,CAAC,GAAG;AACjD,SAAK,SAAS,IAAI,QAAQ,CAAC,YAAY;AACrC,WAAK,gBAAgB;AAAA,IACvB,CAAC,GACD,KAAK,eAAe,IAAI,QAAQ,CAAC,YAAY;AAC3C,WAAK,sBAAsB;AAAA,IAC7B,CAAC;AAGD,UAAM,aAAa,KAAK,WAAW,qBAAqB;AAExD,aAAS,IAAI,GAAG,IAAI,MAAM,KAAK;AAC7B,YAAM,SAAS,IAAI,OAAO,UAAU;AAEpC,aAAO,GAAG,WAAW,CAAC,QAAa;AACjC,YAAI,IAAI,SAAS;AACf,eAAK,cACL,KAAK,UAAU,KAAK,MAAM,GACtB,KAAK,eAAe,QACtB,KAAK,cAAc;AAAA,iBAEZ,IAAI,SAAS;AACtB,eAAK,aACD,KAAK,cAAc,QACrB,KAAK,oBAAoB,GAE3B,KAAK,SAAS;AAAA,iBACL,IAAI,SAAS,UAAU,IAAI,SAAS,SAAS;AACtD,gBAAM,UAAU,KAAK,YAAY,IAAI,IAAI,EAAE;AAC3C,UAAI,YACF,KAAK,YAAY,OAAO,IAAI,EAAE,GAC1B,IAAI,SAAS,SACf,QAAQ,QAAQ,IAAI,MAAM,IAE1B,QAAQ,OAAO,IAAI,MAAM,IAAI,KAAK,CAAC,IAGvC,KAAK,UAAU,KAAK,MAAM,GAC1B,KAAK,SAAS;AAAA,QAChB;AAAA,MACF,CAAC,GAED,OAAO,GAAG,SAAS,CAAC,QAAQ;AAC1B,gBAAQ,MAAM,mCAAmC,GAAG;AAAA,MACtD,CAAC,GAED,KAAK,QAAQ,KAAK,MAAM;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,IAAI,OAAO;AACT,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA;AAAA,EAGA,MAAM,aAAa;AACjB,UAAM,KAAK;AAGX,eAAW,UAAU,KAAK;AACxB,aAAO,YAAY,EAAE,MAAM,QAAQ,IAAI,KAAK,SAAS,CAAC;AAGxD,UAAM,KAAK;AAAA,EACb;AAAA,EAEQ,WAAW;AACjB,WAAO,KAAK,UAAU,SAAS,KAAK,KAAK,UAAU,SAAS,KAAG;AAC7D,YAAM,SAAS,KAAK,UAAU,MAAM,GAC9B,EAAE,KAAK,QAAQ,IAAI,KAAK,UAAU,MAAM;AAC9C,WAAK,YAAY,IAAI,QAAQ,IAAI,OAAO,GACxC,OAAO,YAAY,GAAG;AAAA,IACxB;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,MAmBC;AACf,QAAI,KAAK;AACP,YAAM,IAAI,MAAM,iCAAiC;AAKnD,UAAM,kBAAkB;AAAA,MACtB,MAAM,KAAK,WAAW;AAAA,MACtB,MAAM,KAAK,WAAW;AAAA;AAAA,MAEtB,SAAS,KAAK,WAAW,SAAS,IAAI,CAAC,YAAiB;AAAA,QACtD,YAAY,OAAO;AAAA,QACnB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,MAC3B,EAAE;AAAA;AAAA,MAEF,aAAa,KAAK,WAAW,aAAa,IAAI,CAAC,QAAa;AAAA,QAC1D,YAAY,GAAG;AAAA,MACjB,EAAE;AAAA,IACJ,GAEM,KAAK,KAAK,UACV,MAAM;AAAA,MACV,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,QACJ,GAAG;AAAA,QACH,YAAY;AAAA,MACd;AAAA,IACF;AAEA,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAuB,EAAE,IAAI,SAAS,OAAO;AACnD,WAAK,UAAU,KAAK,EAAE,KAAK,QAAQ,CAAC,GACpC,KAAK,SAAS;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,YAAY;AAChB,SAAK,cAAc,IACnB,MAAM,QAAQ,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GACxD,KAAK,UAAU,CAAC,GAChB,KAAK,YAAY,CAAC;AAAA,EACpB;AACF;AAGA,IAAI,OAA+B;AAE5B,SAAS,cAAc,MAAgC;AAC5D,SAAK,SACH,OAAO,IAAI,gBAAgB,IAAI,IAE1B;AACT;AAEA,eAAsB,sBAAsB;AAC1C,EAAI,SACF,MAAM,KAAK,UAAU,GACrB,OAAO;AAEX;",
+  "mappings": "AAGA,SAAS,cAAc;AACvB,SAAS,YAAY;AACrB,SAAS,qBAAqB;AAC9B,SAAS,SAAS,YAAY;AAE9B,MAAM,aAAa,cAAc,YAAY,GAAG,GAC1C,YAAY,QAAQ,UAAU;AAQ7B,MAAM,gBAAgB;AAAA,EACnB,UAAoB,CAAC;AAAA,EACrB,YAAsB,CAAC;AAAA,EACvB,YAAuD,CAAC;AAAA,EACxD,cAAc,oBAAI,IAAyB;AAAA,EAC3C,SAAS;AAAA,EACT,aAAa;AAAA,EACb,YAAY;AAAA,EACZ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,cAAc;AAAA,EAEtB,YAAY,OAAO,KAAK,IAAI,GAAG,KAAK,EAAE,SAAS,CAAC,GAAG;AACjD,SAAK,SAAS,IAAI,QAAQ,CAAC,YAAY;AACrC,WAAK,gBAAgB;AAAA,IACvB,CAAC,GACD,KAAK,eAAe,IAAI,QAAQ,CAAC,YAAY;AAC3C,WAAK,sBAAsB;AAAA,IAC7B,CAAC;AAGD,UAAM,aAAa,KAAK,WAAW,qBAAqB;AAExD,aAAS,IAAI,GAAG,IAAI,MAAM,KAAK;AAC7B,YAAM,SAAS,IAAI,OAAO,UAAU;AAEpC,aAAO,GAAG,WAAW,CAAC,QAAa;AACjC,YAAI,IAAI,SAAS;AACf,eAAK,cACL,KAAK,UAAU,KAAK,MAAM,GACtB,KAAK,eAAe,QACtB,KAAK,cAAc;AAAA,iBAEZ,IAAI,SAAS;AACtB,eAAK,aACD,KAAK,cAAc,QACrB,KAAK,oBAAoB,GAE3B,KAAK,SAAS;AAAA,iBACL,IAAI,SAAS,UAAU,IAAI,SAAS,SAAS;AACtD,gBAAM,UAAU,KAAK,YAAY,IAAI,IAAI,EAAE;AAC3C,UAAI,YACF,KAAK,YAAY,OAAO,IAAI,EAAE,GAC1B,IAAI,SAAS,SACf,QAAQ,QAAQ,IAAI,MAAM,IAE1B,QAAQ,OAAO,IAAI,MAAM,IAAI,KAAK,CAAC,IAGvC,KAAK,UAAU,KAAK,MAAM,GAC1B,KAAK,SAAS;AAAA,QAChB;AAAA,MACF,CAAC,GAED,OAAO,GAAG,SAAS,CAAC,QAAQ;AAC1B,gBAAQ,MAAM,mCAAmC,GAAG;AAAA,MACtD,CAAC,GAED,KAAK,QAAQ,KAAK,MAAM;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,IAAI,OAAO;AACT,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA;AAAA,EAGA,MAAM,WAAW,YAAkB;AACjC,UAAM,KAAK;AAEX,eAAW,UAAU,KAAK;AACxB,aAAO,YAAY,EAAE,MAAM,QAAQ,IAAI,KAAK,UAAU,WAAW,CAAC;AAGpE,UAAM,KAAK;AAAA,EACb;AAAA,EAEQ,WAAW;AACjB,WAAO,KAAK,UAAU,SAAS,KAAK,KAAK,UAAU,SAAS,KAAG;AAC7D,YAAM,SAAS,KAAK,UAAU,MAAM,GAC9B,EAAE,KAAK,QAAQ,IAAI,KAAK,UAAU,MAAM;AAC9C,WAAK,YAAY,IAAI,QAAQ,IAAI,OAAO,GACxC,OAAO,YAAY,GAAG;AAAA,IACxB;AAAA,EACF;AAAA,EAEA,MAAM,UAAU,MAoBC;AACf,QAAI,KAAK;AACP,YAAM,IAAI,MAAM,iCAAiC;AAKnD,UAAM,kBAAkB;AAAA,MACtB,MAAM,KAAK,WAAW;AAAA,MACtB,MAAM,KAAK,WAAW;AAAA;AAAA,MAEtB,SAAS,KAAK,WAAW,SAAS,IAAI,CAAC,YAAiB;AAAA,QACtD,YAAY,OAAO;AAAA,QACnB,kBAAkB,OAAO;AAAA,QACzB,kBAAkB,OAAO;AAAA,MAC3B,EAAE;AAAA;AAAA,MAEF,aAAa,KAAK,WAAW,aAAa,IAAI,CAAC,QAAa;AAAA,QAC1D,YAAY,GAAG;AAAA,MACjB,EAAE;AAAA,IACJ,GAEM,KAAK,KAAK,UACV,MAAM;AAAA,MACV,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,QACJ,GAAG;AAAA,QACH,YAAY;AAAA,MACd;AAAA,IACF;AAEA,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,UAAuB,EAAE,IAAI,SAAS,OAAO;AACnD,WAAK,UAAU,KAAK,EAAE,KAAK,QAAQ,CAAC,GACpC,KAAK,SAAS;AAAA,IAChB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,YAAY;AAChB,SAAK,cAAc,IACnB,MAAM,QAAQ,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,GACxD,KAAK,UAAU,CAAC,GAChB,KAAK,YAAY,CAAC;AAAA,EACpB;AACF;AAGA,IAAI,OAA+B;AAE5B,SAAS,cAAc,MAAgC;AAC5D,SAAK,SACH,OAAO,IAAI,gBAAgB,IAAI,IAE1B;AACT;AAEA,eAAsB,sBAAsB;AAC1C,EAAI,SACF,MAAM,KAAK,UAAU,GACrB,OAAO;AAEX;",
   "names": []
 }

package/dist/esm/cli/workerPool.mjs

@@ -39,12 +39,13 @@ class BuildWorkerPool {
   get size() {
     return this.workers.length;
   }
-  // initialize all workers - they load config themselves from vite.config
-  async initialize() {
+  // initialize all workers with pre-loaded config from main thread
+  async initialize(oneOptions) {
     await this._ready;
     for (const worker of this.workers) worker.postMessage({
       type: "init",
-      id: this.nextId++
+      id: this.nextId++,
+      oneOptions
     });
     await this._initialized;
   }

package/dist/esm/cli/workerPool.mjs.map

@@ -1 +1 @@
-{"version":3,"names":["Worker","cpus","fileURLToPath","dirname","join","__filename","import","meta","url","__dirname","BuildWorkerPool","workers","available","taskQueue","pendingById","Map","nextId","readyCount","initCount","_ready","_resolveReady","_initialized","_resolveInitialized","_terminated","constructor","size","Math","max","length","Promise","resolve","workerPath","i","worker","on","msg","type","push","dispatch","pending","get","id","delete","result","reject","Error","error","err","console","initialize","postMessage","shift","set","buildPage","args","serializedRoute","foundRoute","file","layouts","map","layout","contextKey","loaderServerPath","layoutRenderMode","middlewares","mw","terminate","all","w","pool","getWorkerPool","terminateWorkerPool"],"sources":["../../../src/cli/workerPool.ts"],"sourcesContent":[null],"mappings":"AAGA,SAASA,MAAA,QAAc;AACvB,SAASC,IAAA,QAAY;AACrB,SAASC,aAAA,QAAqB;AAC9B,SAASC,OAAA,EAASC,IAAA,QAAY;AAE9B,MAAMC,UAAA,GAAaH,aAAA,CAAcI,MAAA,CAAAC,IAAA,CAAYC,GAAG;EAC1CC,SAAA,GAAYN,OAAA,CAAQE,UAAU;AAQ7B,MAAMK,eAAA,CAAgB;EACnBC,OAAA,GAAoB,EAAC;EACrBC,SAAA,GAAsB,EAAC;EACvBC,SAAA,GAAuD,EAAC;EACxDC,WAAA,GAAc,mBAAIC,GAAA,CAAyB;EAC3CC,MAAA,GAAS;EACTC,UAAA,GAAa;EACbC,SAAA,GAAY;EACZC,MAAA;EACAC,aAAA;EACAC,YAAA;EACAC,mBAAA;EACAC,WAAA,GAAc;EAEtBC,YAAYC,IAAA,GAAOC,IAAA,CAAKC,GAAA,CAAI,GAAG1B,IAAA,CAAK,EAAE2B,MAAA,GAAS,CAAC,GAAG;IACjD,KAAKT,MAAA,GAAS,IAAIU,OAAA,CAASC,OAAA,IAAY;MACrC,KAAKV,aAAA,GAAgBU,OAAA;IACvB,CAAC,GACD,KAAKT,YAAA,GAAe,IAAIQ,OAAA,CAASC,OAAA,IAAY;MAC3C,KAAKR,mBAAA,GAAsBQ,OAAA;IAC7B,CAAC;IAGD,MAAMC,UAAA,GAAa3B,IAAA,CAAKK,SAAA,EAAW,qBAAqB;IAExD,SAASuB,CAAA,GAAI,GAAGA,CAAA,GAAIP,IAAA,EAAMO,CAAA,IAAK;MAC7B,MAAMC,MAAA,GAAS,IAAIjC,MAAA,CAAO+B,UAAU;MAEpCE,MAAA,CAAOC,EAAA,CAAG,WAAYC,GAAA,IAAa;QACjC,IAAIA,GAAA,CAAIC,IAAA,KAAS,SACf,KAAKnB,UAAA,IACL,KAAKL,SAAA,CAAUyB,IAAA,CAAKJ,MAAM,GACtB,KAAKhB,UAAA,KAAeQ,IAAA,IACtB,KAAKL,aAAA,CAAc,WAEZe,GAAA,CAAIC,IAAA,KAAS,aACtB,KAAKlB,SAAA,IACD,KAAKA,SAAA,KAAcO,IAAA,IACrB,KAAKH,mBAAA,CAAoB,GAE3B,KAAKgB,QAAA,CAAS,WACLH,GAAA,CAAIC,IAAA,KAAS,UAAUD,GAAA,CAAIC,IAAA,KAAS,SAAS;UACtD,MAAMG,OAAA,GAAU,KAAKzB,WAAA,CAAY0B,GAAA,CAAIL,GAAA,CAAIM,EAAE;UACvCF,OAAA,KACF,KAAKzB,WAAA,CAAY4B,MAAA,CAAOP,GAAA,CAAIM,EAAE,GAC1BN,GAAA,CAAIC,IAAA,KAAS,SACfG,OAAA,CAAQT,OAAA,CAAQK,GAAA,CAAIQ,MAAM,IAE1BJ,OAAA,CAAQK,MAAA,CAAO,IAAIC,KAAA,CAAMV,GAAA,CAAIW,KAAK,CAAC,IAGvC,KAAKlC,SAAA,CAAUyB,IAAA,CAAKJ,MAAM,GAC1B,KAAKK,QAAA,CAAS;QAChB;MACF,CAAC,GAEDL,MAAA,CAAOC,EAAA,CAAG,SAAUa,GAAA,IAAQ;QAC1BC,OAAA,CAAQF,KAAA,CAAM,mCAAmCC,GAAG;MACtD,CAAC,GAED,KAAKpC,OAAA,CAAQ0B,IAAA,CAAKJ,MAAM;IAC1B;EACF;EAEA,IAAIR,KAAA,EAAO;IACT,OAAO,KAAKd,OAAA,CAAQiB,MAAA;EACtB;EAAA;EAGA,MAAMqB,WAAA,EAAa;IACjB,MAAM,KAAK9B,MAAA;IAGX,WAAWc,MAAA,IAAU,KAAKtB,OAAA,EACxBsB,MAAA,CAAOiB,WAAA,CAAY;MAAEd,IAAA,EAAM;MAAQK,EAAA,EAAI,KAAKzB,MAAA;IAAS,CAAC;IAGxD,MAAM,KAAKK,YAAA;EACb;EAEQiB,SAAA,EAAW;IACjB,OAAO,KAAK1B,SAAA,CAAUgB,MAAA,GAAS,KAAK,KAAKf,SAAA,CAAUe,MAAA,GAAS,IAAG;MAC7D,MAAMK,MAAA,GAAS,KAAKrB,SAAA,CAAUuC,KAAA,CAAM;QAC9B;UAAEhB,GAAA;UAAKI;QAAQ,IAAI,KAAK1B,SAAA,CAAUsC,KAAA,CAAM;MAC9C,KAAKrC,WAAA,CAAYsC,GAAA,CAAIb,OAAA,CAAQE,EAAA,EAAIF,OAAO,GACxCN,MAAA,CAAOiB,WAAA,CAAYf,GAAG;IACxB;EACF;EAEA,MAAMkB,UAAUC,IAAA,EAmBC;IACf,IAAI,KAAK/B,WAAA,EACP,MAAM,IAAIsB,KAAA,CAAM,iCAAiC;IAKnD,MAAMU,eAAA,GAAkB;QACtBnB,IAAA,EAAMkB,IAAA,CAAKE,UAAA,CAAWpB,IAAA;QACtBqB,IAAA,EAAMH,IAAA,CAAKE,UAAA,CAAWC,IAAA;QAAA;QAEtBC,OAAA,EAASJ,IAAA,CAAKE,UAAA,CAAWE,OAAA,EAASC,GAAA,CAAKC,MAAA,KAAiB;UACtDC,UAAA,EAAYD,MAAA,CAAOC,UAAA;UACnBC,gBAAA,EAAkBF,MAAA,CAAOE,gBAAA;UACzBC,gBAAA,EAAkBH,MAAA,CAAOG;QAC3B,EAAE;QAAA;QAEFC,WAAA,EAAaV,IAAA,CAAKE,UAAA,CAAWQ,WAAA,EAAaL,GAAA,CAAKM,EAAA,KAAa;UAC1DJ,UAAA,EAAYI,EAAA,CAAGJ;QACjB,EAAE;MACJ;MAEMpB,EAAA,GAAK,KAAKzB,MAAA;MACVmB,GAAA,GAAM;QACVC,IAAA,EAAM;QACNK,EAAA;QACAa,IAAA,EAAM;UACJ,GAAGA,IAAA;UACHE,UAAA,EAAYD;QACd;MACF;IAEA,OAAO,IAAI1B,OAAA,CAAQ,CAACC,OAAA,EAASc,MAAA,KAAW;MACtC,MAAML,OAAA,GAAuB;QAAEE,EAAA;QAAIX,OAAA;QAASc;MAAO;MACnD,KAAK/B,SAAA,CAAUwB,IAAA,CAAK;QAAEF,GAAA;QAAKI;MAAQ,CAAC,GACpC,KAAKD,QAAA,CAAS;IAChB,CAAC;EACH;EAEA,MAAM4B,UAAA,EAAY;IAChB,KAAK3C,WAAA,GAAc,IACnB,MAAMM,OAAA,CAAQsC,GAAA,CAAI,KAAKxD,OAAA,CAAQgD,GAAA,CAAKS,CAAA,IAAMA,CAAA,CAAEF,SAAA,CAAU,CAAC,CAAC,GACxD,KAAKvD,OAAA,GAAU,EAAC,EAChB,KAAKC,SAAA,GAAY,EAAC;EACpB;AACF;AAGA,IAAIyD,IAAA,GAA+B;AAE5B,SAASC,cAAc7C,IAAA,EAAgC;EAC5D,OAAK4C,IAAA,KACHA,IAAA,GAAO,IAAI3D,eAAA,CAAgBe,IAAI,IAE1B4C,IAAA;AACT;AAEA,eAAsBE,oBAAA,EAAsB;EACtCF,IAAA,KACF,MAAMA,IAAA,CAAKH,SAAA,CAAU,GACrBG,IAAA,GAAO;AAEX","ignoreList":[]}
+{"version":3,"names":["Worker","cpus","fileURLToPath","dirname","join","__filename","import","meta","url","__dirname","BuildWorkerPool","workers","available","taskQueue","pendingById","Map","nextId","readyCount","initCount","_ready","_resolveReady","_initialized","_resolveInitialized","_terminated","constructor","size","Math","max","length","Promise","resolve","workerPath","i","worker","on","msg","type","push","dispatch","pending","get","id","delete","result","reject","Error","error","err","console","initialize","oneOptions","postMessage","shift","set","buildPage","args","serializedRoute","foundRoute","file","layouts","map","layout","contextKey","loaderServerPath","layoutRenderMode","middlewares","mw","terminate","all","w","pool","getWorkerPool","terminateWorkerPool"],"sources":["../../../src/cli/workerPool.ts"],"sourcesContent":[null],"mappings":"AAGA,SAASA,MAAA,QAAc;AACvB,SAASC,IAAA,QAAY;AACrB,SAASC,aAAA,QAAqB;AAC9B,SAASC,OAAA,EAASC,IAAA,QAAY;AAE9B,MAAMC,UAAA,GAAaH,aAAA,CAAcI,MAAA,CAAAC,IAAA,CAAYC,GAAG;EAC1CC,SAAA,GAAYN,OAAA,CAAQE,UAAU;AAQ7B,MAAMK,eAAA,CAAgB;EACnBC,OAAA,GAAoB,EAAC;EACrBC,SAAA,GAAsB,EAAC;EACvBC,SAAA,GAAuD,EAAC;EACxDC,WAAA,GAAc,mBAAIC,GAAA,CAAyB;EAC3CC,MAAA,GAAS;EACTC,UAAA,GAAa;EACbC,SAAA,GAAY;EACZC,MAAA;EACAC,aAAA;EACAC,YAAA;EACAC,mBAAA;EACAC,WAAA,GAAc;EAEtBC,YAAYC,IAAA,GAAOC,IAAA,CAAKC,GAAA,CAAI,GAAG1B,IAAA,CAAK,EAAE2B,MAAA,GAAS,CAAC,GAAG;IACjD,KAAKT,MAAA,GAAS,IAAIU,OAAA,CAASC,OAAA,IAAY;MACrC,KAAKV,aAAA,GAAgBU,OAAA;IACvB,CAAC,GACD,KAAKT,YAAA,GAAe,IAAIQ,OAAA,CAASC,OAAA,IAAY;MAC3C,KAAKR,mBAAA,GAAsBQ,OAAA;IAC7B,CAAC;IAGD,MAAMC,UAAA,GAAa3B,IAAA,CAAKK,SAAA,EAAW,qBAAqB;IAExD,SAASuB,CAAA,GAAI,GAAGA,CAAA,GAAIP,IAAA,EAAMO,CAAA,IAAK;MAC7B,MAAMC,MAAA,GAAS,IAAIjC,MAAA,CAAO+B,UAAU;MAEpCE,MAAA,CAAOC,EAAA,CAAG,WAAYC,GAAA,IAAa;QACjC,IAAIA,GAAA,CAAIC,IAAA,KAAS,SACf,KAAKnB,UAAA,IACL,KAAKL,SAAA,CAAUyB,IAAA,CAAKJ,MAAM,GACtB,KAAKhB,UAAA,KAAeQ,IAAA,IACtB,KAAKL,aAAA,CAAc,WAEZe,GAAA,CAAIC,IAAA,KAAS,aACtB,KAAKlB,SAAA,IACD,KAAKA,SAAA,KAAcO,IAAA,IACrB,KAAKH,mBAAA,CAAoB,GAE3B,KAAKgB,QAAA,CAAS,WACLH,GAAA,CAAIC,IAAA,KAAS,UAAUD,GAAA,CAAIC,IAAA,KAAS,SAAS;UACtD,MAAMG,OAAA,GAAU,KAAKzB,WAAA,CAAY0B,GAAA,CAAIL,GAAA,CAAIM,EAAE;UACvCF,OAAA,KACF,KAAKzB,WAAA,CAAY4B,MAAA,CAAOP,GAAA,CAAIM,EAAE,GAC1BN,GAAA,CAAIC,IAAA,KAAS,SACfG,OAAA,CAAQT,OAAA,CAAQK,GAAA,CAAIQ,MAAM,IAE1BJ,OAAA,CAAQK,MAAA,CAAO,IAAIC,KAAA,CAAMV,GAAA,CAAIW,KAAK,CAAC,IAGvC,KAAKlC,SAAA,CAAUyB,IAAA,CAAKJ,MAAM,GAC1B,KAAKK,QAAA,CAAS;QAChB;MACF,CAAC,GAEDL,MAAA,CAAOC,EAAA,CAAG,SAAUa,GAAA,IAAQ;QAC1BC,OAAA,CAAQF,KAAA,CAAM,mCAAmCC,GAAG;MACtD,CAAC,GAED,KAAKpC,OAAA,CAAQ0B,IAAA,CAAKJ,MAAM;IAC1B;EACF;EAEA,IAAIR,KAAA,EAAO;IACT,OAAO,KAAKd,OAAA,CAAQiB,MAAA;EACtB;EAAA;EAGA,MAAMqB,WAAWC,UAAA,EAAkB;IACjC,MAAM,KAAK/B,MAAA;IAEX,WAAWc,MAAA,IAAU,KAAKtB,OAAA,EACxBsB,MAAA,CAAOkB,WAAA,CAAY;MAAEf,IAAA,EAAM;MAAQK,EAAA,EAAI,KAAKzB,MAAA;MAAUkC;IAAW,CAAC;IAGpE,MAAM,KAAK7B,YAAA;EACb;EAEQiB,SAAA,EAAW;IACjB,OAAO,KAAK1B,SAAA,CAAUgB,MAAA,GAAS,KAAK,KAAKf,SAAA,CAAUe,MAAA,GAAS,IAAG;MAC7D,MAAMK,MAAA,GAAS,KAAKrB,SAAA,CAAUwC,KAAA,CAAM;QAC9B;UAAEjB,GAAA;UAAKI;QAAQ,IAAI,KAAK1B,SAAA,CAAUuC,KAAA,CAAM;MAC9C,KAAKtC,WAAA,CAAYuC,GAAA,CAAId,OAAA,CAAQE,EAAA,EAAIF,OAAO,GACxCN,MAAA,CAAOkB,WAAA,CAAYhB,GAAG;IACxB;EACF;EAEA,MAAMmB,UAAUC,IAAA,EAoBC;IACf,IAAI,KAAKhC,WAAA,EACP,MAAM,IAAIsB,KAAA,CAAM,iCAAiC;IAKnD,MAAMW,eAAA,GAAkB;QACtBpB,IAAA,EAAMmB,IAAA,CAAKE,UAAA,CAAWrB,IAAA;QACtBsB,IAAA,EAAMH,IAAA,CAAKE,UAAA,CAAWC,IAAA;QAAA;QAEtBC,OAAA,EAASJ,IAAA,CAAKE,UAAA,CAAWE,OAAA,EAASC,GAAA,CAAKC,MAAA,KAAiB;UACtDC,UAAA,EAAYD,MAAA,CAAOC,UAAA;UACnBC,gBAAA,EAAkBF,MAAA,CAAOE,gBAAA;UACzBC,gBAAA,EAAkBH,MAAA,CAAOG;QAC3B,EAAE;QAAA;QAEFC,WAAA,EAAaV,IAAA,CAAKE,UAAA,CAAWQ,WAAA,EAAaL,GAAA,CAAKM,EAAA,KAAa;UAC1DJ,UAAA,EAAYI,EAAA,CAAGJ;QACjB,EAAE;MACJ;MAEMrB,EAAA,GAAK,KAAKzB,MAAA;MACVmB,GAAA,GAAM;QACVC,IAAA,EAAM;QACNK,EAAA;QACAc,IAAA,EAAM;UACJ,GAAGA,IAAA;UACHE,UAAA,EAAYD;QACd;MACF;IAEA,OAAO,IAAI3B,OAAA,CAAQ,CAACC,OAAA,EAASc,MAAA,KAAW;MACtC,MAAML,OAAA,GAAuB;QAAEE,EAAA;QAAIX,OAAA;QAASc;MAAO;MACnD,KAAK/B,SAAA,CAAUwB,IAAA,CAAK;QAAEF,GAAA;QAAKI;MAAQ,CAAC,GACpC,KAAKD,QAAA,CAAS;IAChB,CAAC;EACH;EAEA,MAAM6B,UAAA,EAAY;IAChB,KAAK5C,WAAA,GAAc,IACnB,MAAMM,OAAA,CAAQuC,GAAA,CAAI,KAAKzD,OAAA,CAAQiD,GAAA,CAAKS,CAAA,IAAMA,CAAA,CAAEF,SAAA,CAAU,CAAC,CAAC,GACxD,KAAKxD,OAAA,GAAU,EAAC,EAChB,KAAKC,SAAA,GAAY,EAAC;EACpB;AACF;AAGA,IAAI0D,IAAA,GAA+B;AAE5B,SAASC,cAAc9C,IAAA,EAAgC;EAC5D,OAAK6C,IAAA,KACHA,IAAA,GAAO,IAAI5D,eAAA,CAAgBe,IAAI,IAE1B6C,IAAA;AACT;AAEA,eAAsBE,oBAAA,EAAsB;EACtCF,IAAA,KACF,MAAMA,IAAA,CAAKH,SAAA,CAAU,GACrBG,IAAA,GAAO;AAEX","ignoreList":[]}

package/dist/esm/cli/workerPool.native.js

@@ -57,8 +57,8 @@ var __filename = fileURLToPath(import.meta.url),
     }, {
       key: "initialize",
       value:
-      // initialize all workers - they load config themselves from vite.config
-      async function () {
+      // initialize all workers with pre-loaded config from main thread
+      async function (oneOptions) {
         await this._ready;
         var _iteratorNormalCompletion = !0,
           _didIteratorError = !1,
@@ -68,7 +68,8 @@ var __filename = fileURLToPath(import.meta.url),
             var worker = _step.value;
             worker.postMessage({
               type: "init",
-              id: this.nextId++
+              id: this.nextId++,
+              oneOptions
             });
           }
         } catch (err) {