stitchkit 0.122.2 → 0.123.0

package/dist/entrypoints/files/packaging.js

@@ -1,32 +1,199 @@
+import"../../index-0ndz5r8z.js";
+import"../../index-gdqawggb.js";
 import {
   NATIVE_NOT_PACKAGED
-} from "../../index-1h2zv8rx.js";
+} from "../../index-sqc6ezrb.js";
+import {
+  runNativeCommand2
+} from "../../index-7q05ag0z.js";
+import {
+  safeJsonParse
+} from "../../index-zsarb5xp.js";
 
-// src/files/native-packaging-layout.ts
+// src/files/client-artifact.ts
 import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { basename, dirname, join, resolve } from "node:path";
 import { z } from "zod";
-var RelativePathSchema = z.string().min(1).refine((value) => !value.startsWith("/") && !/^[a-z]:/i.test(value) && !value.includes("\\") && value.split("/").every((part) => part !== ".." && part !== "." && part.length > 0), "Expected a relative path without traversal");
-var NativeLayoutSchema = z.strictObject({
+class ForbiddenModuleError extends Error {
+  module;
+  importedBy;
+  constructor(module, importedBy) {
+    super(`Client artifact contains forbidden module "${module}"` + (importedBy === undefined ? "" : ` (imported by "${importedBy}")`));
+    this.module = module;
+    this.importedBy = importedBy;
+    this.name = "ForbiddenModuleError";
+  }
+}
+var MetafileSchema = z.object({
+  inputs: z.record(z.string(), z.object({
+    imports: z.array(z.object({ path: z.string(), original: z.string().optional() })).default([])
+  }))
+});
+function matches(rule, modulePath) {
+  if (rule instanceof RegExp)
+    return rule.test(modulePath);
+  if (rule.startsWith("@") || !rule.includes("/")) {
+    return modulePath.includes(`/node_modules/${rule}/`);
+  }
+  return modulePath.includes(rule.startsWith("/") ? rule : `/${rule}`);
+}
+function absoluteModules(metafile, root) {
+  const absolute = (path) => resolve(root, path).replaceAll("\\", "/");
+  return {
+    inputs: Object.fromEntries(Object.entries(metafile.inputs).map(([path, input]) => [
+      absolute(path),
+      {
+        imports: input.imports.map((imported) => ({
+          path: absolute(imported.path),
+          original: imported.original
+        }))
+      }
+    ]))
+  };
+}
+function namesPackage(specifier, rule) {
+  return typeof rule === "string" && specifier !== undefined && (specifier === rule || specifier.startsWith(`${rule}/`));
+}
+function refuseForbidden(metafile, forbidden) {
+  for (const [importer, input] of Object.entries(metafile.inputs)) {
+    const named = input.imports.find((imported) => forbidden.some((rule) => namesPackage(imported.original, rule)));
+    if (named)
+      throw new ForbiddenModuleError(named.path, importer);
+  }
+  for (const modulePath of Object.keys(metafile.inputs)) {
+    if (!forbidden.some((rule) => matches(rule, modulePath)))
+      continue;
+    const importer = Object.entries(metafile.inputs).find(([, input]) => input.imports.some((imported) => imported.path === modulePath));
+    throw new ForbiddenModuleError(modulePath, importer?.[0]);
+  }
+}
+async function bun(step, args, cwd, what) {
+  const result = await runNativeCommand2({
+    executable: step.bun,
+    args,
+    cwd,
+    envPolicy: "ambient",
+    capture: true,
+    maxOutputBytes: 4 * 1024 * 1024,
+    timeoutMs: step.timeoutMs,
+    signal: step.signal
+  });
+  const decoder = new TextDecoder;
+  if (result.exitCode !== 0) {
+    throw new Error(`Client artifact ${what} failed (exit ${result.exitCode ?? result.signal}): ` + `${decoder.decode(result.stderr)}${decoder.decode(result.stdout)}`.trim());
+  }
+  return decoder.decode(result.stdout);
+}
+async function buildClientArtifact(options) {
+  const step = {
+    bun: options.executable ?? "bun",
+    timeoutMs: options.timeoutMs ?? 120000,
+    signal: options.signal
+  };
+  const file = resolve(options.outFile);
+  const sha256File = `${file}.sha256`;
+  const work = await mkdtemp(join(tmpdir(), "stitchkit-client-artifact-"));
+  try {
+    await rm(file, { force: true });
+    await rm(sha256File, { force: true });
+    const root = dirname(resolve(options.entry));
+    const built = join(work, "client.js");
+    const metafilePath = join(work, "meta.json");
+    await bun(step, [
+      "build",
+      resolve(options.entry),
+      `--target=${options.runtime ?? "node"}`,
+      "--format=esm",
+      `--outfile=${built}`,
+      `--metafile=${metafilePath}`
+    ], root, "build");
+    const metafile = absoluteModules(MetafileSchema.parse(safeJsonParse(await readFile(metafilePath, "utf8"))), root);
+    refuseForbidden(metafile, options.forbiddenModules ?? []);
+    const bytes = await readFile(built);
+    const digest = createHash("sha256").update(bytes).digest("hex");
+    await mkdir(dirname(file), { recursive: true });
+    await writeFile(file, bytes);
+    await writeFile(sha256File, `${digest}  ${basename(file)}
+`);
+    const artifact = {
+      file,
+      sha256: digest,
+      bytes: bytes.byteLength,
+      sha256File,
+      modules: Object.keys(metafile.inputs).sort()
+    };
+    if (options.package === undefined)
+      return artifact;
+    try {
+      return { ...artifact, package: await packAndVerify(step, work, bytes, options.package) };
+    } catch (error) {
+      await rm(file, { force: true });
+      await rm(sha256File, { force: true });
+      throw error;
+    }
+  } finally {
+    await rm(work, { recursive: true, force: true });
+  }
+}
+async function packAndVerify(step, work, bytes, target) {
+  const source = join(work, "package");
+  await mkdir(source);
+  await writeFile(join(source, "index.js"), bytes);
+  await writeFile(join(source, "package.json"), `${JSON.stringify({
+    name: target.name,
+    version: target.version,
+    type: "module",
+    main: "./index.js",
+    exports: { ".": "./index.js" },
+    files: ["index.js"]
+  }, null, 2)}
+`);
+  const outDir = resolve(target.outDir);
+  await mkdir(outDir, { recursive: true });
+  const tarball = join(outDir, `${target.name.replace(/^@/, "").replaceAll("/", "-")}-${target.version}.tgz`);
+  await bun(step, ["pm", "pack", "--filename", tarball, "--quiet"], source, "pack");
+  const consumer = join(work, "consumer");
+  await mkdir(consumer);
+  await writeFile(join(consumer, "package.json"), `{"name":"client-artifact-consumer","private":true,"type":"module"}
+`);
+  await bun(step, ["add", tarball], consumer, "install");
+  await writeFile(join(consumer, "verify.mjs"), `const client = await import(${JSON.stringify(target.name)});
+` + `const missing = ${JSON.stringify(target.exports ?? [])}.filter((name) => !(name in client));
+` + `if (missing.length > 0) { console.error('missing exports: ' + missing.join(', ')); process.exit(1); }
+`);
+  await bun(step, ["verify.mjs"], consumer, "import verification");
+  return {
+    tarball,
+    sha256: createHash("sha256").update(await readFile(tarball)).digest("hex")
+  };
+}
+// src/files/native-packaging-layout.ts
+import { createHash as createHash2 } from "node:crypto";
+import { z as z2 } from "zod";
+var RelativePathSchema = z2.string().min(1).refine((value) => !value.startsWith("/") && !/^[a-z]:/i.test(value) && !value.includes("\\") && value.split("/").every((part) => part !== ".." && part !== "." && part.length > 0), "Expected a relative path without traversal");
+var NativeLayoutSchema = z2.strictObject({
   loader: RelativePathSchema,
-  assets: z.strictObject({ arm64: RelativePathSchema, x64: RelativePathSchema })
+  assets: z2.strictObject({ arm64: RelativePathSchema, x64: RelativePathSchema })
 });
-var NativeAssetEntrySchema = z.strictObject({
+var NativeAssetEntrySchema = z2.strictObject({
   path: RelativePathSchema,
-  size: z.int().nonnegative(),
-  sha256: z.string().regex(/^[a-f0-9]{64}$/)
+  size: z2.int().nonnegative(),
+  sha256: z2.string().regex(/^[a-f0-9]{64}$/)
 });
-var NativeAssetManifestSchema = z.strictObject({
-  formatVersion: z.literal(2, {
+var NativeAssetManifestSchema = z2.strictObject({
+  formatVersion: z2.literal(2, {
     error: "Native asset manifest formatVersion must be 2 for this Stitchkit"
   }),
   loader: RelativePathSchema,
-  assets: z.strictObject({
+  assets: z2.strictObject({
     arm64: NativeAssetEntrySchema.optional(),
     x64: NativeAssetEntrySchema.optional()
   })
 });
 function nativeAssetDigest(bytes) {
-  return { size: bytes.byteLength, sha256: createHash("sha256").update(bytes).digest("hex") };
+  return { size: bytes.byteLength, sha256: createHash2("sha256").update(bytes).digest("hex") };
 }
 var LOADER_MARK = ["stitchkit", "native", "loader"].join("-");
 function nativeLoaderMarker(state) {
@@ -86,13 +253,13 @@ function inspectNativeArtifact(bytes) {
 }
 // src/files/native-packaging.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "node:fs";
-import { dirname, relative, resolve } from "node:path";
+import { dirname as dirname2, relative, resolve as resolve2 } from "node:path";
 import { fileURLToPath } from "node:url";
-import { z as z2 } from "zod";
+import { z as z3 } from "zod";
 
 // src/files/native-packaging-plugin.ts
 import { existsSync, readFileSync, realpathSync } from "node:fs";
-import { basename, join } from "node:path";
+import { basename as basename2, join as join2 } from "node:path";
 var realpath = (path) => {
   try {
     return realpathSync(path);
@@ -105,7 +272,7 @@ function loaderInstallation(path, loaderName) {
   if (!path.endsWith(suffix))
     return;
   const root = path.slice(0, -suffix.length);
-  const manifest = join(root, "package.json");
+  const manifest = join2(root, "package.json");
   if (!existsSync(manifest))
     return;
   try {
@@ -125,7 +292,7 @@ function nativePlugin(owner, specifiers, embedded, companionEntry) {
   const contents = nativeLoaderSource(specifiers, "static");
   const external = new Set(Object.values(specifiers));
   const ownLoader = realpath(owner.loaderPath);
-  const loaderFile = basename(owner.loaderName);
+  const loaderFile = basename2(owner.loaderName);
   return {
     name: "stitchkit-native-packaging",
     setup(build) {
@@ -142,7 +309,7 @@ function nativePlugin(owner, specifiers, embedded, companionEntry) {
       build.onLoad({ filter: /\.[cm]?js$/ }, (args) => {
         if (args.path === owner.loaderPath)
           return { contents, loader: "js" };
-        if (basename(args.path) !== loaderFile)
+        if (basename2(args.path) !== loaderFile)
           return;
         if (realpath(args.path) === ownLoader)
           return { contents, loader: "js" };
@@ -163,12 +330,12 @@ function nativePlugin(owner, specifiers, embedded, companionEntry) {
 }
 
 // src/files/native-packaging.ts
-var PackageManifestSchema = z2.object({
-  name: z2.literal("stitchkit"),
-  version: z2.string().min(1)
+var PackageManifestSchema = z3.object({
+  name: z3.literal("stitchkit"),
+  version: z3.string().min(1)
 });
-var ArchitectureSchema = z2.enum(["arm64", "x64"]);
-var PlatformSchema = z2.enum(["darwin"]);
+var ArchitectureSchema = z3.enum(["arm64", "x64"]);
+var PlatformSchema = z3.enum(["darwin"]);
 var CommonOptions = {
   platform: PlatformSchema,
   entryPath: RelativePathSchema.refine((value) => !value.includes("[") && !value.includes("]"), "Expected a fixed entry path without Bun naming templates")
@@ -176,24 +343,24 @@ var CommonOptions = {
 var ASSET_HASH_TOKEN = "[hash]";
 var ASSET_HASH_LENGTH = 16;
 var AssetPathSchema = RelativePathSchema.refine((value) => !/[[\]]/.test(value.replaceAll(ASSET_HASH_TOKEN, "")), "Expected an addon path whose only template is [hash]");
-var SingleOptionsSchema = z2.object({
+var SingleOptionsSchema = z3.object({
   ...CommonOptions,
-  architecture: z2.string().min(1),
-  delivery: z2.literal("companion"),
+  architecture: z3.string().min(1),
+  delivery: z3.literal("companion"),
   assetPath: AssetPathSchema
 });
-var EmbeddedOptionsSchema = z2.strictObject({
+var EmbeddedOptionsSchema = z3.strictObject({
   platform: PlatformSchema,
-  architecture: z2.string().min(1),
-  delivery: z2.literal("embedded")
+  architecture: z3.string().min(1),
+  delivery: z3.literal("embedded")
 });
-var MultipleOptionsSchema = z2.object({
+var MultipleOptionsSchema = z3.object({
   ...CommonOptions,
-  architecture: z2.array(z2.string().min(1)).refine((targets) => targets.length > 0),
-  delivery: z2.literal("companion"),
-  assetPath: z2.record(z2.string().min(1), AssetPathSchema)
+  architecture: z3.array(z3.string().min(1)).refine((targets) => targets.length > 0),
+  delivery: z3.literal("companion"),
+  assetPath: z3.record(z3.string().min(1), AssetPathSchema)
 });
-var CompanionOptionsSchema = z2.union([SingleOptionsSchema, MultipleOptionsSchema]).check((ctx) => {
+var CompanionOptionsSchema = z3.union([SingleOptionsSchema, MultipleOptionsSchema]).check((ctx) => {
   const input = ctx.value;
   const targets = typeof input.architecture === "string" ? [input.architecture] : input.architecture;
   if (new Set(targets).size !== targets.length)
@@ -225,35 +392,35 @@ var CompanionOptionsSchema = z2.union([SingleOptionsSchema, MultipleOptionsSchem
     }
   }
 });
-var EmbeddedAssetSchema = z2.object({
-  size: z2.int().nonnegative(),
-  sha256: z2.string().regex(/^[a-f0-9]{64}$/),
-  bytes: z2.custom((value) => value instanceof Uint8Array)
+var EmbeddedAssetSchema = z3.object({
+  size: z3.int().nonnegative(),
+  sha256: z3.string().regex(/^[a-f0-9]{64}$/),
+  bytes: z3.custom((value) => value instanceof Uint8Array)
 });
-var AssetSchema = EmbeddedAssetSchema.extend({ outputPath: z2.string() });
+var AssetSchema = EmbeddedAssetSchema.extend({ outputPath: z3.string() });
 var TargetAssetSchema = AssetSchema.extend({ architecture: ArchitectureSchema });
-var DigestSchema = z2.object({
-  size: z2.int().nonnegative(),
-  sha256: z2.string().regex(/^[a-f0-9]{64}$/)
+var DigestSchema = z3.object({
+  size: z3.int().nonnegative(),
+  sha256: z3.string().regex(/^[a-f0-9]{64}$/)
 });
-var RefusalSchema = z2.discriminatedUnion("state", [
-  z2.object({
-    state: z2.literal("unsupported"),
+var RefusalSchema = z3.discriminatedUnion("state", [
+  z3.object({
+    state: z3.literal("unsupported"),
     platform: PlatformSchema,
-    architecture: z2.string(),
-    code: z2.literal("NATIVE_TARGET_UNSUPPORTED")
+    architecture: z3.string(),
+    code: z3.literal("NATIVE_TARGET_UNSUPPORTED")
   }),
-  z2.object({
-    state: z2.literal("missing"),
+  z3.object({
+    state: z3.literal("missing"),
     platform: PlatformSchema,
     architecture: ArchitectureSchema,
-    code: z2.literal("NATIVE_ASSET_MISSING")
+    code: z3.literal("NATIVE_ASSET_MISSING")
   }),
-  z2.object({
-    state: z2.literal("mismatch"),
+  z3.object({
+    state: z3.literal("mismatch"),
     platform: PlatformSchema,
     architecture: ArchitectureSchema,
-    code: z2.literal("NATIVE_ASSET_DIGEST_MISMATCH"),
+    code: z3.literal("NATIVE_ASSET_DIGEST_MISMATCH"),
     expected: DigestSchema,
     actual: DigestSchema
   })
@@ -281,11 +448,11 @@ function resolveTargets(platform, declared) {
   return { targets };
 }
 function installedPackageRoot() {
-  let directory = dirname(fileURLToPath(import.meta.url));
+  let directory = dirname2(fileURLToPath(import.meta.url));
   for (let depth = 0;depth < 64; depth++) {
-    if (existsSync2(resolve(directory, "native-assets.json")))
+    if (existsSync2(resolve2(directory, "native-assets.json")))
       return directory;
-    const parent = dirname(directory);
+    const parent = dirname2(directory);
     if (parent === directory)
       break;
     directory = parent;
@@ -298,7 +465,7 @@ function readVerifiedAsset(root, published, platform, architecture) {
   };
   if (!published)
     return missing;
-  const sourcePath = resolve(root, published.path);
+  const sourcePath = resolve2(root, published.path);
   let bytes;
   try {
     bytes = readFileSync2(sourcePath);
@@ -323,13 +490,13 @@ function readVerifiedAsset(root, published, platform, architecture) {
 }
 function installedPackage() {
   const root = installedPackageRoot();
-  const published = NativeAssetManifestSchema.parse(JSON.parse(readFileSync2(resolve(root, "native-assets.json"), "utf8")));
-  const manifest = PackageManifestSchema.parse(JSON.parse(readFileSync2(resolve(root, "package.json"), "utf8")));
+  const published = NativeAssetManifestSchema.parse(JSON.parse(readFileSync2(resolve2(root, "native-assets.json"), "utf8")));
+  const manifest = PackageManifestSchema.parse(JSON.parse(readFileSync2(resolve2(root, "package.json"), "utf8")));
   return {
     root,
     published,
     version: manifest.version,
-    loaderPath: resolve(root, published.loader),
+    loaderPath: resolve2(root, published.loader),
     loaderName: published.loader
   };
 }
@@ -372,7 +539,7 @@ function packageCompanion(input) {
     const outputPath = template.replaceAll(ASSET_HASH_TOKEN, sha256.slice(0, ASSET_HASH_LENGTH));
     if (assets.some((asset) => asset.outputPath === outputPath))
       throw new Error("Addons must have distinct output paths");
-    const specifier = relative(dirname(input.entryPath), outputPath).split("\\").join("/");
+    const specifier = relative(dirname2(input.entryPath), outputPath).split("\\").join("/");
     specifiers[architecture] = specifier.startsWith(".") ? specifier : `./${specifier}`;
     const asset = { outputPath, size, sha256, bytes };
     assets.push(typeof input.architecture === "string" ? asset : { ...asset, architecture });
@@ -390,6 +557,8 @@ function createNativePackaging(options) {
   return options.delivery === "embedded" ? embedNative(EmbeddedOptionsSchema.parse(options)) : packageCompanion(CompanionOptionsSchema.parse(options));
 }
 export {
+  ForbiddenModuleError,
+  buildClientArtifact,
   createNativePackaging,
   inspectNativeArtifact
 };

package/dist/entrypoints/files.js

@@ -2,13 +2,13 @@ import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2
 } from "../index-xqhede6x.js";
-import"../index-m5m9rmvt.js";
-import"../index-gq3fnq3f.js";
-import"../index-gtx3eknx.js";
+import"../index-sqc6ezrb.js";
+import"../index-n90tkkcv.js";
+import"../index-dv7pa9w6.js";
 import {
   ExclusiveLockError2,
   withExclusiveLock2
-} from "../index-nwm3ww60.js";
+} from "../index-64b2dxqz.js";
 import {
   ManagedFileError2,
   createManagedFileBoundary2
@@ -30,7 +30,7 @@ import {
 } from "../index-jj9228tt.js";
 import {
   AppError2
-} from "../index-qcn84byh.js";
+} from "../index-0w0hxp7n.js";
 // src/files/chunk-spool.ts
 import { createHash } from "node:crypto";
 import {

package/dist/entrypoints/geo.js

@@ -4,13 +4,13 @@ import {
 } from "../index-d3xdyjt6.js";
 import {
   messageOf
-} from "../index-g149e9pk.js";
+} from "../index-3bzk2645.js";
 import {
   isPublicIp2
-} from "../index-kw1ws0cs.js";
+} from "../index-w3nv6kr8.js";
 import {
   isRecord
-} from "../index-9jfdm5tg.js";
+} from "../index-hkxgennw.js";
 
 // src/geo/maxmind.ts
 import { realpath, stat } from "node:fs/promises";

package/dist/entrypoints/http.js

@@ -1,8 +1,8 @@
 import"../index-m38ej7e5.js";
-import"../index-h2fhjqy7.js";
+import"../index-0v9xb8pz.js";
 import {
   createHttpClient2
-} from "../index-9frf01t9.js";
+} from "../index-r0xr7y4m.js";
 import {
   uploadInChunks2
 } from "../index-hqsbtvta.js";
@@ -14,7 +14,7 @@ import {
   createUrlBuilder2,
   createUrlBuilders2,
   createScopedUrlBuilders2
-} from "../index-2fc1k9k2.js";
+} from "../index-mdyhr36s.js";
 import {
   ApiError2
 } from "../index-kfjkb396.js";

package/dist/entrypoints/index.d.ts

@@ -1,6 +1,7 @@
 export { ApiError } from '../browser/api-error.js';
 export { type ChunkedUploadConfig, type ChunkedUploadPart, type ChunkedUploadProgress, type ChunkedUploadStart, type ChunkSource, uploadInChunks, } from '../browser/chunked-upload.js';
 export { type ClientConfig, type ClientContract, type ClientFetch, type ClientRegistryValue, type ContractClientConfig, contractEndpointMatchers, createClient, createClients, createScopedClients, createScopedUrlBuilders, createUrlBuilder, createUrlBuilders, type PathPrefixArgs, type RegistryScope, type ScopeClientConfigs, type ScopedClientRegistry, type ScopedUrlBuilderRegistry, type UrlBuilderConfig, } from '../browser/client.js';
+export { type ContractIdentity, readContractIdentity } from '../browser/contract-identity.js';
 export { type ApiEvent, type ApiEventListener, type ConfiguredHttpClient, createHttpClient, type HeaderProvider, type HttpClient, type HttpClientConfig, type RequestOptions, type UnauthorizedMatcher, } from '../browser/http.js';
 export { createLiveStateController, type LiveStateController, type LiveStateControllerConfig, type LiveStateControllerError, type LiveStateControllerSnapshot, type LiveStateControllerStatus, LiveStateControllerStatusSchema, type LiveStateEventDecision, type LiveStatePhase, LiveStatePhaseSchema, type LiveStateSource, type LiveStateSourceOpenInput, type LiveStateSourceOpenResult, type LiveStateStopReason, LiveStateStopReasonSchema, type LiveStateSubscriberError, } from '../browser/live-state.js';
 export type { BindRealtimeClientOptions, BoundRealtimeClient, RealtimeClientTransport, } from '../browser/realtime-client.js';

package/dist/entrypoints/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/entrypoints/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,GAC9B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,WAAW,EACX,QAAQ,EACR,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,mBAAmB,EACnB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,kBAAkB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACpF,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKvD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,wBAAwB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/entrypoints/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,cAAc,GACf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,KAAK,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAC3F,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,yBAAyB,EACzB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,+BAA+B,EAC/B,KAAK,sBAAsB,EAC3B,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wBAAwB,EACxB,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,GAC9B,MAAM,gCAAgC,CAAC;AACxC,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EACL,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,WAAW,EACX,QAAQ,EACR,KAAK,gBAAgB,EACrB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,mBAAmB,EACnB,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,kBAAkB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACpF,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAKvD,OAAO,EAAE,cAAc,EAAE,KAAK,eAAe,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGzF,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,wBAAwB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/entrypoints/index.js

@@ -2,10 +2,28 @@ import"../index-m38ej7e5.js";
 import {
   DEFAULT_CONTRACT_STREAM_FRAME_BYTES2,
   ContractStreamFrameSchema2
-} from "../index-h2fhjqy7.js";
+} from "../index-0v9xb8pz.js";
 import {
   createHttpClient2
-} from "../index-9frf01t9.js";
+} from "../index-r0xr7y4m.js";
+import {
+  ContractFingerprintSchema2,
+  contractFingerprint2,
+  contractIdentityContract2,
+  defineErrors2,
+  createContractFactory2,
+  paginatedSchema2,
+  encodeCursor2,
+  decodeCursor2
+} from "../index-bz9cmnqq.js";
+import {
+  ALL_TRANSPORTS2,
+  TOOL_TRANSPORTS2
+} from "../index-yt1gg11x.js";
+import {
+  withToolView2,
+  defineContract2
+} from "../index-99nnsz39.js";
 import"../index-w0eqdhyd.js";
 import {
   LiveStatePhaseSchema2,
@@ -16,7 +34,7 @@ import {
 import {
   REALTIME_REJECTION_KEY2,
   asRealtimeRejection2
-} from "../index-3za04re9.js";
+} from "../index-1c945ten.js";
 import {
   RealtimeRequestPhaseSchema2,
   RealtimeRequestPhaseEventSchema2,
@@ -32,21 +50,6 @@ import {
 import {
   defineRealtimeContract2
 } from "../index-814xpr6d.js";
-import {
-  ALL_TRANSPORTS2,
-  TOOL_TRANSPORTS2
-} from "../index-69t14s4a.js";
-import {
-  withToolView2,
-  defineContract2
-} from "../index-4jpykzvw.js";
-import {
-  defineErrors2,
-  createContractFactory2,
-  paginatedSchema2,
-  encodeCursor2,
-  decodeCursor2
-} from "../index-yj6saztf.js";
 import {
   ManagedFilePathSchema2,
   ManagedFileRefSchema2
@@ -61,8 +64,6 @@ import {
   uploadInChunks2
 } from "../index-hqsbtvta.js";
 import {
-  StreamLineLimitError2,
-  StreamTruncatedLineError2,
   parseNDJSON2,
   createNDJSONDecoder2,
   parseSSE2,
@@ -73,15 +74,19 @@ import {
   createUrlBuilder2,
   createUrlBuilders2,
   createScopedUrlBuilders2
-} from "../index-2fc1k9k2.js";
+} from "../index-mdyhr36s.js";
+import {
+  StreamLineLimitError2,
+  StreamTruncatedLineError2
+} from "../index-45dyex0j.js";
 import {
   createRetainedTopics2,
   createRealtimeClientWithPeer,
   createSocketIOClientWithPeer
-} from "../index-m8a44e64.js";
+} from "../index-ftk3838x.js";
 import {
   bindRealtimeClient2
-} from "../index-jk29rwkr.js";
+} from "../index-zfncctjp.js";
 import {
   ApiError2
 } from "../index-kfjkb396.js";
@@ -107,13 +112,25 @@ import {
   isRetryableStatus2,
   isStitchErrorCode2,
   appError2
-} from "../index-qcn84byh.js";
+} from "../index-0w0hxp7n.js";
 import {
   createTraceContext2,
   parseTraceparent2,
   formatTraceparent2,
   childSpan2
 } from "../index-yex7eg1v.js";
+// src/browser/contract-identity.ts
+async function readContractIdentity(contracts, configOrClient) {
+  const client = contractFingerprint2(contracts);
+  const api = createClient2(contractIdentityContract2, configOrClient);
+  try {
+    return { client, server: await api.read() };
+  } catch (error) {
+    if (error instanceof ApiError2 && error.status === 404)
+      return { client, server: undefined };
+    throw error;
+  }
+}
 // src/browser/resumable.ts
 var DEFAULT_RETRY = { minDelayMs: 100, maxDelayMs: 30000, jitter: 0.5 };
 async function* resumableIterator(config) {
@@ -365,6 +382,7 @@ export {
   ApiError2 as ApiError,
   AppError2 as AppError,
   BackoffPolicySchema2 as BackoffPolicySchema,
+  ContractFingerprintSchema2 as ContractFingerprintSchema,
   ContractStreamFrameSchema2 as ContractStreamFrameSchema,
   DEFAULT_CONTRACT_STREAM_FRAME_BYTES2 as DEFAULT_CONTRACT_STREAM_FRAME_BYTES,
   LiveStateControllerStatusSchema2 as LiveStateControllerStatusSchema,
@@ -391,6 +409,8 @@ export {
   childSpan2 as childSpan,
   conflict2 as conflict,
   contractEndpointMatchers2 as contractEndpointMatchers,
+  contractFingerprint2 as contractFingerprint,
+  contractIdentityContract2 as contractIdentityContract,
   createBackoff2 as createBackoff,
   createClient2 as createClient,
   createClients2 as createClients,
@@ -425,6 +445,7 @@ export {
   parseTraceparent2 as parseTraceparent,
   rateLimited2 as rateLimited,
   readBoundedBody2 as readBoundedBody,
+  readContractIdentity,
   resumableIterator,
   unauthorized2 as unauthorized,
   uploadInChunks2 as uploadInChunks,

package/dist/entrypoints/live.js

@@ -16,10 +16,10 @@ import {
   WATCH_STATE2,
   watchContract2,
   watchKeyString2
-} from "../index-qch1vcaa.js";
+} from "../index-a7ebd769.js";
 import {
   argumentsDigest
-} from "../index-r7a7r7ha.js";
+} from "../index-mfntvj58.js";
 
 // src/live/events.ts
 import { z } from "zod";