theokit 0.1.0-alpha.5 → 0.1.0-alpha.8

package/dist/adapters/web-shim.d.ts

@@ -37,12 +37,31 @@ interface ShimContext {
     /** Resolves to a Web Standard Response once `res.end()` is called. */
     toResponse: () => Promise<Response>;
 }
+interface CreateWebShimOptions {
+    /**
+     * CR-018 fix: how to resolve the client IP from forwarded headers.
+     *
+     * - `'platform'` (default for `cf-connecting-ip`): trust runtime-injected
+     *   headers only (`cf-connecting-ip` on Cloudflare, `x-real-ip` on
+     *   Netlify/Vercel when the platform writes it). Ignores
+     *   `x-forwarded-for` because clients can spoof it.
+     * - `'trusted-proxy'`: read the **rightmost** entry of `x-forwarded-for`.
+     *   Only safe when the request literally went through a trusted proxy
+     *   that strips client-set headers and appends the real client IP last.
+     * - `'none'`: skip all forwarded-header lookups and report
+     *   `'0.0.0.0'`. Force this when the adapter has no reliable way to
+     *   identify the client (rate-limiters then must use a different key).
+     *
+     * Default: `'platform'`.
+     */
+    trustedProxy?: 'platform' | 'trusted-proxy' | 'none';
+}
 /**
  * Build Node-style req/res objects around a Web Standard Request.
  * `toResponse()` returns a Promise that resolves when `res.end()` has been
  * invoked, materializing a Web Standard Response with the accumulated body
  * + headers + status.
  */
-declare function createWebShim(request: Request): ShimContext;
+declare function createWebShim(request: Request, options?: CreateWebShimOptions): ShimContext;
 
-export { type ShimContext, type ShimRequest, type ShimResponse, createWebShim };
+export { type CreateWebShimOptions, type ShimContext, type ShimRequest, type ShimResponse, createWebShim };

package/dist/adapters/web-shim.js

@@ -1,40 +1,60 @@
+import "../chunk-DGUM43GV.js";
+
 // src/adapters/web-shim.ts
-function createWebShim(request) {
+function resolveRemoteAddress(headers, policy) {
+  if (policy === "none") return "0.0.0.0";
+  const cf = headers["cf-connecting-ip"];
+  if (cf) return cf;
+  if (policy === "trusted-proxy") {
+    const xff = headers["x-forwarded-for"];
+    if (xff) {
+      const parts = xff.split(",").map((p) => p.trim()).filter(Boolean);
+      if (parts.length > 0) return parts[parts.length - 1];
+    }
+    const xri = headers["x-real-ip"];
+    if (xri) return xri;
+  }
+  return "0.0.0.0";
+}
+function createWebShim(request, options) {
   const url = new URL(request.url);
   const headers = {};
   request.headers.forEach((value, key) => {
     headers[key] = value;
   });
-  const bodyChunks = [];
-  let bodyConsumed = false;
+  const pumpState = { consumed: false };
   const dataListeners = [];
   const endListeners = [];
   const errorListeners = [];
   async function pumpBody() {
-    if (bodyConsumed) return;
-    bodyConsumed = true;
+    if (pumpState.consumed) return;
+    pumpState.consumed = true;
     if (!request.body) {
       for (const cb of endListeners) cb();
       return;
     }
     try {
       const reader = request.body.getReader();
-      while (true) {
-        const { done, value } = await reader.read();
-        if (done) break;
-        if (value) for (const cb of dataListeners) cb(value);
+      let done = false;
+      while (!done) {
+        const chunk = await reader.read();
+        done = chunk.done;
+        if (!done && chunk.value) {
+          for (const cb of dataListeners) cb(chunk.value);
+        }
       }
       for (const cb of endListeners) cb();
     } catch (err) {
       for (const cb of errorListeners) cb(err);
     }
   }
+  const trustedProxy = options?.trustedProxy ?? "platform";
   const req = {
     method: request.method,
     url: url.pathname + url.search,
     headers,
     socket: {
-      remoteAddress: headers["cf-connecting-ip"] ?? headers["x-forwarded-for"] ?? headers["x-real-ip"] ?? "0.0.0.0"
+      remoteAddress: resolveRemoteAddress(headers, trustedProxy)
     },
     on(event, cb) {
       if (event === "data") dataListeners.push(cb);

package/dist/adapters/web-shim.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/adapters/web-shim.ts"],"sourcesContent":["/**\n * Web-to-Node bridge used by adapters whose runtimes provide a `Request`\n * (Web Standard) but where TheoKit's `executeRoute` expects a Node-style\n * IncomingMessage/ServerResponse pair.\n *\n * Used by adapters that target Node-compatible runtimes (Bun, Netlify\n * Functions, AWS Lambda Node). Cloudflare uses an inline version of the same\n * pattern — long-term it should consolidate here too.\n *\n * NOT used by Deno Deploy: Deno's stdlib does not have `Buffer`/`node:http`\n * by default and forcing the shim there bloats the bundle. Deno wiring is\n * tracked separately and will likely require executeRoute to accept Web\n * Standard Request directly.\n */\n\nexport interface ShimRequest {\n  method: string\n  url: string\n  headers: Record<string, string>\n  socket: { remoteAddress: string }\n  on: (event: 'data' | 'end' | 'error', cb: (chunk?: unknown) => void) => unknown\n}\n\nexport interface ShimResponse {\n  statusCode: number\n  headersSent: boolean\n  writableEnded: boolean\n  writeHead: (status: number, headers?: Record<string, string>) => void\n  setHeader: (key: string, value: string) => void\n  getHeader: (key: string) => string | undefined\n  write: (chunk: Uint8Array | string) => boolean\n  end: (body?: Uint8Array | string) => void\n}\n\nexport interface ShimContext {\n  req: ShimRequest\n  res: ShimResponse\n  /** Resolves to a Web Standard Response once `res.end()` is called. */\n  toResponse: () => Promise<Response>\n}\n\n/**\n * Build Node-style req/res objects around a Web Standard Request.\n * `toResponse()` returns a Promise that resolves when `res.end()` has been\n * invoked, materializing a Web Standard Response with the accumulated body\n * + headers + status.\n */\nexport function createWebShim(request: Request): ShimContext {\n  const url = new URL(request.url)\n  const headers: Record<string, string> = {}\n  request.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const bodyChunks: Uint8Array[] = []\n  let bodyConsumed = false\n\n  // Consume the request body once, then dispatch data/end events to whatever\n  // listener attaches later (executeRoute's body parser).\n  const dataListeners: Array<(chunk: Uint8Array) => void> = []\n  const endListeners: Array<() => void> = []\n  const errorListeners: Array<(err: unknown) => void> = []\n\n  async function pumpBody(): Promise<void> {\n    if (bodyConsumed) return\n    bodyConsumed = true\n    if (!request.body) {\n      for (const cb of endListeners) cb()\n      return\n    }\n    try {\n      const reader = request.body.getReader()\n      while (true) {\n        const { done, value } = await reader.read()\n        if (done) break\n        if (value) for (const cb of dataListeners) cb(value)\n      }\n      for (const cb of endListeners) cb()\n    } catch (err) {\n      for (const cb of errorListeners) cb(err)\n    }\n  }\n\n  const req: ShimRequest = {\n    method: request.method,\n    url: url.pathname + url.search,\n    headers,\n    socket: {\n      remoteAddress:\n        headers['cf-connecting-ip'] ??\n        headers['x-forwarded-for'] ??\n        headers['x-real-ip'] ??\n        '0.0.0.0',\n    },\n    on(event, cb) {\n      if (event === 'data') dataListeners.push(cb as (c: Uint8Array) => void)\n      if (event === 'end') endListeners.push(cb as () => void)\n      if (event === 'error') errorListeners.push(cb)\n      // Lazily start pumping when end is registered (executeRoute always\n      // listens for end before doing anything with the body).\n      if (event === 'end') void pumpBody()\n      return req\n    },\n  }\n\n  const responseChunks: Uint8Array[] = []\n  const responseHeaders: Record<string, string> = {}\n  let responseStatus = 200\n  let resolveResponse!: (r: Response) => void\n  const responsePromise = new Promise<Response>((resolve) => {\n    resolveResponse = resolve\n  })\n\n  function chunkToBytes(chunk: Uint8Array | string): Uint8Array {\n    if (typeof chunk === 'string') return new TextEncoder().encode(chunk)\n    return chunk\n  }\n\n  const res: ShimResponse = {\n    statusCode: 200,\n    headersSent: false,\n    writableEnded: false,\n    writeHead(status, headers) {\n      responseStatus = status\n      this.statusCode = status\n      if (headers) {\n        for (const [k, v] of Object.entries(headers)) {\n          responseHeaders[k.toLowerCase()] = v\n        }\n      }\n      this.headersSent = true\n    },\n    setHeader(key, value) {\n      responseHeaders[key.toLowerCase()] = value\n    },\n    getHeader(key) {\n      return responseHeaders[key.toLowerCase()]\n    },\n    write(chunk) {\n      responseChunks.push(chunkToBytes(chunk))\n      return true\n    },\n    end(body) {\n      if (body !== undefined) responseChunks.push(chunkToBytes(body))\n      this.writableEnded = true\n      const totalLength = responseChunks.reduce((n, c) => n + c.length, 0)\n      const concat = new Uint8Array(totalLength)\n      let offset = 0\n      for (const c of responseChunks) {\n        concat.set(c, offset)\n        offset += c.length\n      }\n      resolveResponse(\n        new Response(concat, {\n          status: responseStatus,\n          headers: responseHeaders,\n        }),\n      )\n    },\n  }\n\n  return {\n    req,\n    res,\n    toResponse: () => responsePromise,\n  }\n}\n"],"mappings":";AA+CO,SAAS,cAAc,SAA+B;AAC3D,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,UAAkC,CAAC;AACzC,UAAQ,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACtC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,aAA2B,CAAC;AAClC,MAAI,eAAe;AAInB,QAAM,gBAAoD,CAAC;AAC3D,QAAM,eAAkC,CAAC;AACzC,QAAM,iBAAgD,CAAC;AAEvD,iBAAe,WAA0B;AACvC,QAAI,aAAc;AAClB,mBAAe;AACf,QAAI,CAAC,QAAQ,MAAM;AACjB,iBAAW,MAAM,aAAc,IAAG;AAClC;AAAA,IACF;AACA,QAAI;AACF,YAAM,SAAS,QAAQ,KAAK,UAAU;AACtC,aAAO,MAAM;AACX,cAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,YAAI,KAAM;AACV,YAAI,MAAO,YAAW,MAAM,cAAe,IAAG,KAAK;AAAA,MACrD;AACA,iBAAW,MAAM,aAAc,IAAG;AAAA,IACpC,SAAS,KAAK;AACZ,iBAAW,MAAM,eAAgB,IAAG,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,MAAmB;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,KAAK,IAAI,WAAW,IAAI;AAAA,IACxB;AAAA,IACA,QAAQ;AAAA,MACN,eACE,QAAQ,kBAAkB,KAC1B,QAAQ,iBAAiB,KACzB,QAAQ,WAAW,KACnB;AAAA,IACJ;AAAA,IACA,GAAG,OAAO,IAAI;AACZ,UAAI,UAAU,OAAQ,eAAc,KAAK,EAA6B;AACtE,UAAI,UAAU,MAAO,cAAa,KAAK,EAAgB;AACvD,UAAI,UAAU,QAAS,gBAAe,KAAK,EAAE;AAG7C,UAAI,UAAU,MAAO,MAAK,SAAS;AACnC,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,iBAA+B,CAAC;AACtC,QAAM,kBAA0C,CAAC;AACjD,MAAI,iBAAiB;AACrB,MAAI;AACJ,QAAM,kBAAkB,IAAI,QAAkB,CAAC,YAAY;AACzD,sBAAkB;AAAA,EACpB,CAAC;AAED,WAAS,aAAa,OAAwC;AAC5D,QAAI,OAAO,UAAU,SAAU,QAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AACpE,WAAO;AAAA,EACT;AAEA,QAAM,MAAoB;AAAA,IACxB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,eAAe;AAAA,IACf,UAAU,QAAQA,UAAS;AACzB,uBAAiB;AACjB,WAAK,aAAa;AAClB,UAAIA,UAAS;AACX,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQA,QAAO,GAAG;AAC5C,0BAAgB,EAAE,YAAY,CAAC,IAAI;AAAA,QACrC;AAAA,MACF;AACA,WAAK,cAAc;AAAA,IACrB;AAAA,IACA,UAAU,KAAK,OAAO;AACpB,sBAAgB,IAAI,YAAY,CAAC,IAAI;AAAA,IACvC;AAAA,IACA,UAAU,KAAK;AACb,aAAO,gBAAgB,IAAI,YAAY,CAAC;AAAA,IAC1C;AAAA,IACA,MAAM,OAAO;AACX,qBAAe,KAAK,aAAa,KAAK,CAAC;AACvC,aAAO;AAAA,IACT;AAAA,IACA,IAAI,MAAM;AACR,UAAI,SAAS,OAAW,gBAAe,KAAK,aAAa,IAAI,CAAC;AAC9D,WAAK,gBAAgB;AACrB,YAAM,cAAc,eAAe,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC;AACnE,YAAM,SAAS,IAAI,WAAW,WAAW;AACzC,UAAI,SAAS;AACb,iBAAW,KAAK,gBAAgB;AAC9B,eAAO,IAAI,GAAG,MAAM;AACpB,kBAAU,EAAE;AAAA,MACd;AACA;AAAA,QACE,IAAI,SAAS,QAAQ;AAAA,UACnB,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY,MAAM;AAAA,EACpB;AACF;","names":["headers"]}
+{"version":3,"sources":["../../src/adapters/web-shim.ts"],"sourcesContent":["/**\n * Web-to-Node bridge used by adapters whose runtimes provide a `Request`\n * (Web Standard) but where TheoKit's `executeRoute` expects a Node-style\n * IncomingMessage/ServerResponse pair.\n *\n * Used by adapters that target Node-compatible runtimes (Bun, Netlify\n * Functions, AWS Lambda Node). Cloudflare uses an inline version of the same\n * pattern — long-term it should consolidate here too.\n *\n * NOT used by Deno Deploy: Deno's stdlib does not have `Buffer`/`node:http`\n * by default and forcing the shim there bloats the bundle. Deno wiring is\n * tracked separately and will likely require executeRoute to accept Web\n * Standard Request directly.\n */\n\nexport interface ShimRequest {\n  method: string\n  url: string\n  headers: Record<string, string>\n  socket: { remoteAddress: string }\n  on: (event: 'data' | 'end' | 'error', cb: (chunk?: unknown) => void) => unknown\n}\n\nexport interface ShimResponse {\n  statusCode: number\n  headersSent: boolean\n  writableEnded: boolean\n  writeHead: (status: number, headers?: Record<string, string>) => void\n  setHeader: (key: string, value: string) => void\n  getHeader: (key: string) => string | undefined\n  write: (chunk: Uint8Array | string) => boolean\n  end: (body?: Uint8Array | string) => void\n}\n\nexport interface ShimContext {\n  req: ShimRequest\n  res: ShimResponse\n  /** Resolves to a Web Standard Response once `res.end()` is called. */\n  toResponse: () => Promise<Response>\n}\n\nexport interface CreateWebShimOptions {\n  /**\n   * CR-018 fix: how to resolve the client IP from forwarded headers.\n   *\n   * - `'platform'` (default for `cf-connecting-ip`): trust runtime-injected\n   *   headers only (`cf-connecting-ip` on Cloudflare, `x-real-ip` on\n   *   Netlify/Vercel when the platform writes it). Ignores\n   *   `x-forwarded-for` because clients can spoof it.\n   * - `'trusted-proxy'`: read the **rightmost** entry of `x-forwarded-for`.\n   *   Only safe when the request literally went through a trusted proxy\n   *   that strips client-set headers and appends the real client IP last.\n   * - `'none'`: skip all forwarded-header lookups and report\n   *   `'0.0.0.0'`. Force this when the adapter has no reliable way to\n   *   identify the client (rate-limiters then must use a different key).\n   *\n   * Default: `'platform'`.\n   */\n  trustedProxy?: 'platform' | 'trusted-proxy' | 'none'\n}\n\nfunction resolveRemoteAddress(\n  headers: Record<string, string>,\n  policy: NonNullable<CreateWebShimOptions['trustedProxy']>,\n): string {\n  if (policy === 'none') return '0.0.0.0'\n\n  // Runtime-injected headers — these come from the platform itself and\n  // cannot be set by the client.\n  const cf = headers['cf-connecting-ip']\n  if (cf) return cf\n\n  if (policy === 'trusted-proxy') {\n    // Take the RIGHTMOST entry of x-forwarded-for. The rightmost is the\n    // hop nearest the application, which a trusted proxy appended; entries\n    // to the left may have been forged by the client.\n    const xff = headers['x-forwarded-for']\n    if (xff) {\n      const parts = xff\n        .split(',')\n        .map((p) => p.trim())\n        .filter(Boolean)\n      if (parts.length > 0) return parts[parts.length - 1]\n    }\n    // x-real-ip is typically platform-set (NGINX/Netlify/Vercel).\n    const xri = headers['x-real-ip']\n    if (xri) return xri\n  }\n\n  return '0.0.0.0'\n}\n\n/**\n * Build Node-style req/res objects around a Web Standard Request.\n * `toResponse()` returns a Promise that resolves when `res.end()` has been\n * invoked, materializing a Web Standard Response with the accumulated body\n * + headers + status.\n */\nexport function createWebShim(request: Request, options?: CreateWebShimOptions): ShimContext {\n  const url = new URL(request.url)\n  const headers: Record<string, string> = {}\n  request.headers.forEach((value, key) => {\n    headers[key] = value\n  })\n\n  const pumpState = { consumed: false }\n\n  // Consume the request body once, then dispatch data/end events to whatever\n  // listener attaches later (executeRoute's body parser).\n  const dataListeners: ((chunk: Uint8Array) => void)[] = []\n  const endListeners: (() => void)[] = []\n  const errorListeners: ((err: unknown) => void)[] = []\n\n  async function pumpBody(): Promise<void> {\n    if (pumpState.consumed) return\n    pumpState.consumed = true\n    if (!request.body) {\n      for (const cb of endListeners) cb()\n      return\n    }\n    try {\n      const reader = request.body.getReader()\n      let done = false\n      while (!done) {\n        const chunk = await reader.read()\n        done = chunk.done\n        if (!done && chunk.value) {\n          for (const cb of dataListeners) cb(chunk.value)\n        }\n      }\n      for (const cb of endListeners) cb()\n    } catch (err) {\n      for (const cb of errorListeners) cb(err)\n    }\n  }\n\n  const trustedProxy = options?.trustedProxy ?? 'platform'\n\n  const req: ShimRequest = {\n    method: request.method,\n    url: url.pathname + url.search,\n    headers,\n    socket: {\n      remoteAddress: resolveRemoteAddress(headers, trustedProxy),\n    },\n    on(event, cb) {\n      if (event === 'data') dataListeners.push(cb)\n      if (event === 'end') endListeners.push(cb)\n      if (event === 'error') errorListeners.push(cb)\n      // Lazily start pumping when end is registered (executeRoute always\n      // listens for end before doing anything with the body).\n      if (event === 'end') void pumpBody()\n      return req\n    },\n  }\n\n  const responseChunks: Uint8Array[] = []\n  const responseHeaders: Record<string, string> = {}\n  let responseStatus = 200\n  let resolveResponse!: (r: Response) => void\n  const responsePromise = new Promise<Response>((resolve) => {\n    resolveResponse = resolve\n  })\n\n  function chunkToBytes(chunk: Uint8Array | string): Uint8Array {\n    if (typeof chunk === 'string') return new TextEncoder().encode(chunk)\n    return chunk\n  }\n\n  const res: ShimResponse = {\n    statusCode: 200,\n    headersSent: false,\n    writableEnded: false,\n    writeHead(status, headers) {\n      responseStatus = status\n      this.statusCode = status\n      if (headers) {\n        for (const [k, v] of Object.entries(headers)) {\n          responseHeaders[k.toLowerCase()] = v\n        }\n      }\n      this.headersSent = true\n    },\n    setHeader(key, value) {\n      responseHeaders[key.toLowerCase()] = value\n    },\n    getHeader(key) {\n      return responseHeaders[key.toLowerCase()]\n    },\n    write(chunk) {\n      responseChunks.push(chunkToBytes(chunk))\n      return true\n    },\n    end(body) {\n      if (body !== undefined) responseChunks.push(chunkToBytes(body))\n      this.writableEnded = true\n      const totalLength = responseChunks.reduce((n, c) => n + c.length, 0)\n      const concat = new Uint8Array(totalLength)\n      let offset = 0\n      for (const c of responseChunks) {\n        concat.set(c, offset)\n        offset += c.length\n      }\n      resolveResponse(\n        new Response(concat, {\n          status: responseStatus,\n          headers: responseHeaders,\n        }),\n      )\n    },\n  }\n\n  return {\n    req,\n    res,\n    toResponse: () => responsePromise,\n  }\n}\n"],"mappings":";;;AA6DA,SAAS,qBACP,SACA,QACQ;AACR,MAAI,WAAW,OAAQ,QAAO;AAI9B,QAAM,KAAK,QAAQ,kBAAkB;AACrC,MAAI,GAAI,QAAO;AAEf,MAAI,WAAW,iBAAiB;AAI9B,UAAM,MAAM,QAAQ,iBAAiB;AACrC,QAAI,KAAK;AACP,YAAM,QAAQ,IACX,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AACjB,UAAI,MAAM,SAAS,EAAG,QAAO,MAAM,MAAM,SAAS,CAAC;AAAA,IACrD;AAEA,UAAM,MAAM,QAAQ,WAAW;AAC/B,QAAI,IAAK,QAAO;AAAA,EAClB;AAEA,SAAO;AACT;AAQO,SAAS,cAAc,SAAkB,SAA6C;AAC3F,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,UAAkC,CAAC;AACzC,UAAQ,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACtC,YAAQ,GAAG,IAAI;AAAA,EACjB,CAAC;AAED,QAAM,YAAY,EAAE,UAAU,MAAM;AAIpC,QAAM,gBAAiD,CAAC;AACxD,QAAM,eAA+B,CAAC;AACtC,QAAM,iBAA6C,CAAC;AAEpD,iBAAe,WAA0B;AACvC,QAAI,UAAU,SAAU;AACxB,cAAU,WAAW;AACrB,QAAI,CAAC,QAAQ,MAAM;AACjB,iBAAW,MAAM,aAAc,IAAG;AAClC;AAAA,IACF;AACA,QAAI;AACF,YAAM,SAAS,QAAQ,KAAK,UAAU;AACtC,UAAI,OAAO;AACX,aAAO,CAAC,MAAM;AACZ,cAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,eAAO,MAAM;AACb,YAAI,CAAC,QAAQ,MAAM,OAAO;AACxB,qBAAW,MAAM,cAAe,IAAG,MAAM,KAAK;AAAA,QAChD;AAAA,MACF;AACA,iBAAW,MAAM,aAAc,IAAG;AAAA,IACpC,SAAS,KAAK;AACZ,iBAAW,MAAM,eAAgB,IAAG,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,eAAe,SAAS,gBAAgB;AAE9C,QAAM,MAAmB;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,KAAK,IAAI,WAAW,IAAI;AAAA,IACxB;AAAA,IACA,QAAQ;AAAA,MACN,eAAe,qBAAqB,SAAS,YAAY;AAAA,IAC3D;AAAA,IACA,GAAG,OAAO,IAAI;AACZ,UAAI,UAAU,OAAQ,eAAc,KAAK,EAAE;AAC3C,UAAI,UAAU,MAAO,cAAa,KAAK,EAAE;AACzC,UAAI,UAAU,QAAS,gBAAe,KAAK,EAAE;AAG7C,UAAI,UAAU,MAAO,MAAK,SAAS;AACnC,aAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,iBAA+B,CAAC;AACtC,QAAM,kBAA0C,CAAC;AACjD,MAAI,iBAAiB;AACrB,MAAI;AACJ,QAAM,kBAAkB,IAAI,QAAkB,CAAC,YAAY;AACzD,sBAAkB;AAAA,EACpB,CAAC;AAED,WAAS,aAAa,OAAwC;AAC5D,QAAI,OAAO,UAAU,SAAU,QAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AACpE,WAAO;AAAA,EACT;AAEA,QAAM,MAAoB;AAAA,IACxB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,eAAe;AAAA,IACf,UAAU,QAAQA,UAAS;AACzB,uBAAiB;AACjB,WAAK,aAAa;AAClB,UAAIA,UAAS;AACX,mBAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQA,QAAO,GAAG;AAC5C,0BAAgB,EAAE,YAAY,CAAC,IAAI;AAAA,QACrC;AAAA,MACF;AACA,WAAK,cAAc;AAAA,IACrB;AAAA,IACA,UAAU,KAAK,OAAO;AACpB,sBAAgB,IAAI,YAAY,CAAC,IAAI;AAAA,IACvC;AAAA,IACA,UAAU,KAAK;AACb,aAAO,gBAAgB,IAAI,YAAY,CAAC;AAAA,IAC1C;AAAA,IACA,MAAM,OAAO;AACX,qBAAe,KAAK,aAAa,KAAK,CAAC;AACvC,aAAO;AAAA,IACT;AAAA,IACA,IAAI,MAAM;AACR,UAAI,SAAS,OAAW,gBAAe,KAAK,aAAa,IAAI,CAAC;AAC9D,WAAK,gBAAgB;AACrB,YAAM,cAAc,eAAe,OAAO,CAAC,GAAG,MAAM,IAAI,EAAE,QAAQ,CAAC;AACnE,YAAM,SAAS,IAAI,WAAW,WAAW;AACzC,UAAI,SAAS;AACb,iBAAW,KAAK,gBAAgB;AAC9B,eAAO,IAAI,GAAG,MAAM;AACpB,kBAAU,EAAE;AAAA,MACd;AACA;AAAA,QACE,IAAI,SAAS,QAAQ;AAAA,UACnB,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY,MAAM;AAAA,EACpB;AACF;","names":["headers"]}

package/dist/adapters/ws-shim.js

@@ -1,19 +1,22 @@
+import "../chunk-DGUM43GV.js";
+
 // src/adapters/ws-shim.ts
 function createNodeWsBridge(handler) {
   return {
     attach(nativeWs) {
       const wsLike = {
-        send: (data) => nativeWs.send(data),
-        close: (code, reason) => nativeWs.close(code, reason),
+        send: (data) => {
+          nativeWs.send(data);
+        },
+        close: (code, reason) => {
+          nativeWs.close(code, reason);
+        },
         on: (event, cb) => {
           nativeWs.on(event, cb);
         }
       };
       nativeWs.on("open", () => handler.onOpen?.(wsLike));
-      nativeWs.on(
-        "message",
-        (data) => handler.onMessage?.(wsLike, data)
-      );
+      nativeWs.on("message", (data) => handler.onMessage?.(wsLike, data));
       nativeWs.on("close", (codeMaybe) => {
         const code = typeof codeMaybe === "number" ? codeMaybe : void 0;
         handler.onClose?.(wsLike, code);
@@ -25,8 +28,12 @@ function createNodeWsBridge(handler) {
 }
 function bunCtxToWsLike(bunWs) {
   return {
-    send: (data) => bunWs.send(data),
-    close: (code, reason) => bunWs.close(code, reason),
+    send: (data) => {
+      bunWs.send(data);
+    },
+    close: (code, reason) => {
+      bunWs.close(code, reason);
+    },
     on: () => {
     }
   };
@@ -49,8 +56,12 @@ function createDenoWsBridge(handler, denoNs) {
     handle(request) {
       const { response, socket } = denoNs.upgradeWebSocket(request);
       const wsLike = {
-        send: (data) => socket.send(data),
-        close: (code, reason) => socket.close(code, reason),
+        send: (data) => {
+          socket.send(data);
+        },
+        close: (code, reason) => {
+          socket.close(code, reason);
+        },
         on: () => {
         }
       };
@@ -63,10 +74,7 @@ function createDenoWsBridge(handler, denoNs) {
         const ev = e;
         handler.onClose?.(wsLike, ev.code, ev.reason);
       });
-      socket.addEventListener(
-        "error",
-        (err) => handler.onError?.(wsLike, err)
-      );
+      socket.addEventListener("error", (err) => handler.onError?.(wsLike, err));
       return response;
     }
   };
@@ -76,17 +84,24 @@ function createCloudflareWsBridge(handler) {
     handle(_request) {
       const g = globalThis;
       if (!g.WebSocketPair) {
-        throw new Error(
-          "WebSocketPair is not available \u2014 Cloudflare Workers runtime expected."
-        );
+        throw new Error("WebSocketPair is not available \u2014 Cloudflare Workers runtime expected.");
       }
       const pair = new g.WebSocketPair();
       const client = pair[0];
       const server = pair[1];
       server.accept();
       const wsLike = {
-        send: (data) => server.send(data),
-        close: (code, reason) => server.close(code, reason),
+        send: (data) => {
+          server.send(data);
+        },
+        close: (code, reason) => {
+          server.close(code, reason);
+        },
+        // Cloudflare's WebSocketPair exposes events via addEventListener;
+        // the WebSocketLike `on` contract is for Node-style ws. We leave
+        // it as a no-op so user handlers that expect Node-style `on(...)`
+        // do not crash — but the events flow through addEventListener
+        // below, not through this method.
         on: () => {
         }
       };
@@ -99,10 +114,7 @@ function createCloudflareWsBridge(handler) {
         const ev = e;
         handler.onClose?.(wsLike, ev.code, ev.reason);
       });
-      server.addEventListener(
-        "error",
-        (err) => handler.onError?.(wsLike, err)
-      );
+      server.addEventListener("error", (err) => handler.onError?.(wsLike, err));
       try {
         return new Response(null, {
           status: 101,

package/dist/adapters/ws-shim.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/adapters/ws-shim.ts"],"sourcesContent":["/**\n * T3.1 — WebSocket cross-runtime bridges.\n *\n * Exports 4 bridges (Node `ws` package, Bun.serve, Deno.upgradeWebSocket,\n * Cloudflare WebSocketPair) that adapt each runtime's native WebSocket API\n * to a common `WebSocketLike` interface that user handlers (`defineWebSocket`)\n * can consume uniformly.\n */\n\nexport interface WebSocketLike {\n  send(data: string | Uint8Array | ArrayBuffer): void\n  close(code?: number, reason?: string): void\n  on(\n    event: 'message' | 'close' | 'error',\n    cb: (data?: unknown) => void,\n  ): void\n}\n\nexport interface WsHandler {\n  onOpen?: (ws: WebSocketLike) => void\n  onMessage?: (ws: WebSocketLike, data: unknown) => void\n  onClose?: (ws: WebSocketLike, code?: number, reason?: string) => void\n  onError?: (ws: WebSocketLike, err: unknown) => void\n}\n\n// ============================================================\n// Node bridge — wraps `ws` package WebSocket\n// ============================================================\n\ninterface NodeWsLike {\n  on(event: string, cb: (arg?: unknown) => void): unknown\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport function createNodeWsBridge(handler: WsHandler): {\n  attach(nativeWs: NodeWsLike): WebSocketLike\n} {\n  return {\n    attach(nativeWs: NodeWsLike): WebSocketLike {\n      const wsLike: WebSocketLike = {\n        send: (data) => nativeWs.send(data),\n        close: (code, reason) => nativeWs.close(code, reason),\n        on: (event, cb) => {\n          nativeWs.on(event, cb)\n        },\n      }\n      nativeWs.on('open', () => handler.onOpen?.(wsLike))\n      nativeWs.on('message', (data) =>\n        handler.onMessage?.(wsLike, data),\n      )\n      nativeWs.on('close', (codeMaybe) => {\n        const code = typeof codeMaybe === 'number' ? codeMaybe : undefined\n        handler.onClose?.(wsLike, code)\n      })\n      nativeWs.on('error', (err) => handler.onError?.(wsLike, err))\n      return wsLike\n    },\n  }\n}\n\n// ============================================================\n// Bun bridge — returns config for Bun.serve({ websocket })\n// ============================================================\n\ninterface BunWsContext {\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport interface BunWebSocketConfig {\n  open: (ws: BunWsContext) => void\n  message: (ws: BunWsContext, message: unknown) => void\n  close: (ws: BunWsContext, code?: number, reason?: string) => void\n}\n\nfunction bunCtxToWsLike(bunWs: BunWsContext): WebSocketLike {\n  return {\n    send: (data) => bunWs.send(data),\n    close: (code, reason) => bunWs.close(code, reason),\n    on: () => {\n      // Bun pushes events via the config handlers — no per-instance on()\n    },\n  }\n}\n\nexport function createBunWsBridge(handler: WsHandler): BunWebSocketConfig {\n  return {\n    open(bunWs) {\n      handler.onOpen?.(bunCtxToWsLike(bunWs))\n    },\n    message(bunWs, msg) {\n      handler.onMessage?.(bunCtxToWsLike(bunWs), msg)\n    },\n    close(bunWs, code, reason) {\n      handler.onClose?.(bunCtxToWsLike(bunWs), code, reason)\n    },\n  }\n}\n\n// ============================================================\n// Deno bridge — uses Deno.upgradeWebSocket(request)\n// ============================================================\n\ninterface DenoLike {\n  upgradeWebSocket(req: Request): {\n    response: Response\n    socket: {\n      send(data: unknown): void\n      close(code?: number, reason?: string): void\n      addEventListener(event: string, cb: (e: unknown) => void): void\n    }\n  }\n}\n\nexport function createDenoWsBridge(\n  handler: WsHandler,\n  denoNs: DenoLike,\n): { handle(request: Request): Response } {\n  return {\n    handle(request: Request): Response {\n      const { response, socket } = denoNs.upgradeWebSocket(request)\n      const wsLike: WebSocketLike = {\n        send: (data) => socket.send(data),\n        close: (code, reason) => socket.close(code, reason),\n        on: () => {\n          // Deno uses addEventListener — adapter dispatches below\n        },\n      }\n      socket.addEventListener('open', () => handler.onOpen?.(wsLike))\n      socket.addEventListener('message', (e) => {\n        const data = (e as { data?: unknown }).data\n        handler.onMessage?.(wsLike, data)\n      })\n      socket.addEventListener('close', (e) => {\n        const ev = e as { code?: number; reason?: string }\n        handler.onClose?.(wsLike, ev.code, ev.reason)\n      })\n      socket.addEventListener('error', (err) =>\n        handler.onError?.(wsLike, err),\n      )\n      return response\n    },\n  }\n}\n\n// ============================================================\n// Cloudflare bridge — uses globalThis.WebSocketPair\n// ============================================================\n\ninterface CfServerWs {\n  accept(): void\n  addEventListener(event: string, cb: (e: unknown) => void): void\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport function createCloudflareWsBridge(handler: WsHandler): {\n  handle(request: Request): Response\n} {\n  return {\n    handle(_request: Request): Response {\n      const g = globalThis as {\n        WebSocketPair?: new () => { 0: unknown; 1: CfServerWs }\n      }\n      if (!g.WebSocketPair) {\n        throw new Error(\n          'WebSocketPair is not available — Cloudflare Workers runtime expected.',\n        )\n      }\n      const pair = new g.WebSocketPair()\n      const client = pair[0]\n      const server = pair[1]\n      server.accept()\n      const wsLike: WebSocketLike = {\n        send: (data) => server.send(data),\n        close: (code, reason) => server.close(code, reason),\n        on: () => {},\n      }\n      server.addEventListener('open', () => handler.onOpen?.(wsLike))\n      server.addEventListener('message', (e) => {\n        const data = (e as { data?: unknown }).data\n        handler.onMessage?.(wsLike, data)\n      })\n      server.addEventListener('close', (e) => {\n        const ev = e as { code?: number; reason?: string }\n        handler.onClose?.(wsLike, ev.code, ev.reason)\n      })\n      server.addEventListener('error', (err) =>\n        handler.onError?.(wsLike, err),\n      )\n      // CF requires returning Response with status 101 and webSocket pair.\n      // Node's Response throws on 101; fall back to a plain object that\n      // satisfies the CF runtime's protocol but matches our test shape.\n      try {\n        return new Response(null, {\n          status: 101,\n          webSocket: client,\n        } as ResponseInit & { webSocket: unknown })\n      } catch {\n        return { status: 101, webSocket: client } as unknown as Response\n      }\n    },\n  }\n}\n"],"mappings":";AAmCO,SAAS,mBAAmB,SAEjC;AACA,SAAO;AAAA,IACL,OAAO,UAAqC;AAC1C,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS,SAAS,KAAK,IAAI;AAAA,QAClC,OAAO,CAAC,MAAM,WAAW,SAAS,MAAM,MAAM,MAAM;AAAA,QACpD,IAAI,CAAC,OAAO,OAAO;AACjB,mBAAS,GAAG,OAAO,EAAE;AAAA,QACvB;AAAA,MACF;AACA,eAAS,GAAG,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAClD,eAAS;AAAA,QAAG;AAAA,QAAW,CAAC,SACtB,QAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC;AACA,eAAS,GAAG,SAAS,CAAC,cAAc;AAClC,cAAM,OAAO,OAAO,cAAc,WAAW,YAAY;AACzD,gBAAQ,UAAU,QAAQ,IAAI;AAAA,MAChC,CAAC;AACD,eAAS,GAAG,SAAS,CAAC,QAAQ,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAC5D,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAiBA,SAAS,eAAe,OAAoC;AAC1D,SAAO;AAAA,IACL,MAAM,CAAC,SAAS,MAAM,KAAK,IAAI;AAAA,IAC/B,OAAO,CAAC,MAAM,WAAW,MAAM,MAAM,MAAM,MAAM;AAAA,IACjD,IAAI,MAAM;AAAA,IAEV;AAAA,EACF;AACF;AAEO,SAAS,kBAAkB,SAAwC;AACxE,SAAO;AAAA,IACL,KAAK,OAAO;AACV,cAAQ,SAAS,eAAe,KAAK,CAAC;AAAA,IACxC;AAAA,IACA,QAAQ,OAAO,KAAK;AAClB,cAAQ,YAAY,eAAe,KAAK,GAAG,GAAG;AAAA,IAChD;AAAA,IACA,MAAM,OAAO,MAAM,QAAQ;AACzB,cAAQ,UAAU,eAAe,KAAK,GAAG,MAAM,MAAM;AAAA,IACvD;AAAA,EACF;AACF;AAiBO,SAAS,mBACd,SACA,QACwC;AACxC,SAAO;AAAA,IACL,OAAO,SAA4B;AACjC,YAAM,EAAE,UAAU,OAAO,IAAI,OAAO,iBAAiB,OAAO;AAC5D,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS,OAAO,KAAK,IAAI;AAAA,QAChC,OAAO,CAAC,MAAM,WAAW,OAAO,MAAM,MAAM,MAAM;AAAA,QAClD,IAAI,MAAM;AAAA,QAEV;AAAA,MACF;AACA,aAAO,iBAAiB,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAC9D,aAAO,iBAAiB,WAAW,CAAC,MAAM;AACxC,cAAM,OAAQ,EAAyB;AACvC,gBAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,MAAM;AACtC,cAAM,KAAK;AACX,gBAAQ,UAAU,QAAQ,GAAG,MAAM,GAAG,MAAM;AAAA,MAC9C,CAAC;AACD,aAAO;AAAA,QAAiB;AAAA,QAAS,CAAC,QAChC,QAAQ,UAAU,QAAQ,GAAG;AAAA,MAC/B;AACA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAaO,SAAS,yBAAyB,SAEvC;AACA,SAAO;AAAA,IACL,OAAO,UAA6B;AAClC,YAAM,IAAI;AAGV,UAAI,CAAC,EAAE,eAAe;AACpB,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,YAAM,OAAO,IAAI,EAAE,cAAc;AACjC,YAAM,SAAS,KAAK,CAAC;AACrB,YAAM,SAAS,KAAK,CAAC;AACrB,aAAO,OAAO;AACd,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS,OAAO,KAAK,IAAI;AAAA,QAChC,OAAO,CAAC,MAAM,WAAW,OAAO,MAAM,MAAM,MAAM;AAAA,QAClD,IAAI,MAAM;AAAA,QAAC;AAAA,MACb;AACA,aAAO,iBAAiB,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAC9D,aAAO,iBAAiB,WAAW,CAAC,MAAM;AACxC,cAAM,OAAQ,EAAyB;AACvC,gBAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,MAAM;AACtC,cAAM,KAAK;AACX,gBAAQ,UAAU,QAAQ,GAAG,MAAM,GAAG,MAAM;AAAA,MAC9C,CAAC;AACD,aAAO;AAAA,QAAiB;AAAA,QAAS,CAAC,QAChC,QAAQ,UAAU,QAAQ,GAAG;AAAA,MAC/B;AAIA,UAAI;AACF,eAAO,IAAI,SAAS,MAAM;AAAA,UACxB,QAAQ;AAAA,UACR,WAAW;AAAA,QACb,CAA0C;AAAA,MAC5C,QAAQ;AACN,eAAO,EAAE,QAAQ,KAAK,WAAW,OAAO;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/adapters/ws-shim.ts"],"sourcesContent":["/**\n * T3.1 — WebSocket cross-runtime bridges.\n *\n * Exports 4 bridges (Node `ws` package, Bun.serve, Deno.upgradeWebSocket,\n * Cloudflare WebSocketPair) that adapt each runtime's native WebSocket API\n * to a common `WebSocketLike` interface that user handlers (`defineWebSocket`)\n * can consume uniformly.\n */\n\nexport interface WebSocketLike {\n  send(data: string | Uint8Array | ArrayBuffer): void\n  close(code?: number, reason?: string): void\n  on(event: 'message' | 'close' | 'error', cb: (data?: unknown) => void): void\n}\n\nexport interface WsHandler {\n  onOpen?: (ws: WebSocketLike) => void\n  onMessage?: (ws: WebSocketLike, data: unknown) => void\n  onClose?: (ws: WebSocketLike, code?: number, reason?: string) => void\n  onError?: (ws: WebSocketLike, err: unknown) => void\n}\n\n// ============================================================\n// Node bridge — wraps `ws` package WebSocket\n// ============================================================\n\ninterface NodeWsLike {\n  on(event: string, cb: (arg?: unknown) => void): unknown\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport function createNodeWsBridge(handler: WsHandler): {\n  attach(nativeWs: NodeWsLike): WebSocketLike\n} {\n  return {\n    attach(nativeWs: NodeWsLike): WebSocketLike {\n      const wsLike: WebSocketLike = {\n        send: (data) => {\n          nativeWs.send(data)\n        },\n        close: (code, reason) => {\n          nativeWs.close(code, reason)\n        },\n        on: (event, cb) => {\n          nativeWs.on(event, cb)\n        },\n      }\n      nativeWs.on('open', () => handler.onOpen?.(wsLike))\n      nativeWs.on('message', (data) => handler.onMessage?.(wsLike, data))\n      nativeWs.on('close', (codeMaybe) => {\n        const code = typeof codeMaybe === 'number' ? codeMaybe : undefined\n        handler.onClose?.(wsLike, code)\n      })\n      nativeWs.on('error', (err) => handler.onError?.(wsLike, err))\n      return wsLike\n    },\n  }\n}\n\n// ============================================================\n// Bun bridge — returns config for Bun.serve({ websocket })\n// ============================================================\n\ninterface BunWsContext {\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport interface BunWebSocketConfig {\n  open: (ws: BunWsContext) => void\n  message: (ws: BunWsContext, message: unknown) => void\n  close: (ws: BunWsContext, code?: number, reason?: string) => void\n}\n\nfunction bunCtxToWsLike(bunWs: BunWsContext): WebSocketLike {\n  return {\n    send: (data) => {\n      bunWs.send(data)\n    },\n    close: (code, reason) => {\n      bunWs.close(code, reason)\n    },\n    on: () => {\n      // Bun pushes events via the config handlers — no per-instance on()\n    },\n  }\n}\n\nexport function createBunWsBridge(handler: WsHandler): BunWebSocketConfig {\n  return {\n    open(bunWs) {\n      handler.onOpen?.(bunCtxToWsLike(bunWs))\n    },\n    message(bunWs, msg) {\n      handler.onMessage?.(bunCtxToWsLike(bunWs), msg)\n    },\n    close(bunWs, code, reason) {\n      handler.onClose?.(bunCtxToWsLike(bunWs), code, reason)\n    },\n  }\n}\n\n// ============================================================\n// Deno bridge — uses Deno.upgradeWebSocket(request)\n// ============================================================\n\ninterface DenoLike {\n  upgradeWebSocket(req: Request): {\n    response: Response\n    socket: {\n      send(data: unknown): void\n      close(code?: number, reason?: string): void\n      addEventListener(event: string, cb: (e: unknown) => void): void\n    }\n  }\n}\n\nexport function createDenoWsBridge(\n  handler: WsHandler,\n  denoNs: DenoLike,\n): { handle(request: Request): Response } {\n  return {\n    handle(request: Request): Response {\n      const { response, socket } = denoNs.upgradeWebSocket(request)\n      const wsLike: WebSocketLike = {\n        send: (data) => {\n          socket.send(data)\n        },\n        close: (code, reason) => {\n          socket.close(code, reason)\n        },\n        on: () => {\n          // Deno uses addEventListener — adapter dispatches below\n        },\n      }\n      socket.addEventListener('open', () => handler.onOpen?.(wsLike))\n      socket.addEventListener('message', (e) => {\n        const data = (e as { data?: unknown }).data\n        handler.onMessage?.(wsLike, data)\n      })\n      socket.addEventListener('close', (e) => {\n        const ev = e as { code?: number; reason?: string }\n        handler.onClose?.(wsLike, ev.code, ev.reason)\n      })\n      socket.addEventListener('error', (err) => handler.onError?.(wsLike, err))\n      return response\n    },\n  }\n}\n\n// ============================================================\n// Cloudflare bridge — uses globalThis.WebSocketPair\n// ============================================================\n\ninterface CfServerWs {\n  accept(): void\n  addEventListener(event: string, cb: (e: unknown) => void): void\n  send(data: unknown): void\n  close(code?: number, reason?: string): void\n}\n\nexport function createCloudflareWsBridge(handler: WsHandler): {\n  handle(request: Request): Response\n} {\n  return {\n    handle(_request: Request): Response {\n      const g = globalThis as {\n        WebSocketPair?: new () => { 0: unknown; 1: CfServerWs }\n      }\n      if (!g.WebSocketPair) {\n        throw new Error('WebSocketPair is not available — Cloudflare Workers runtime expected.')\n      }\n      const pair = new g.WebSocketPair()\n      const client = pair[0]\n      const server = pair[1]\n      server.accept()\n      const wsLike: WebSocketLike = {\n        send: (data) => {\n          server.send(data)\n        },\n        close: (code, reason) => {\n          server.close(code, reason)\n        },\n        // Cloudflare's WebSocketPair exposes events via addEventListener;\n        // the WebSocketLike `on` contract is for Node-style ws. We leave\n        // it as a no-op so user handlers that expect Node-style `on(...)`\n        // do not crash — but the events flow through addEventListener\n        // below, not through this method.\n        on: (): void => {\n          /* intentional no-op on Cloudflare; see comment above */\n        },\n      }\n      server.addEventListener('open', () => handler.onOpen?.(wsLike))\n      server.addEventListener('message', (e) => {\n        const data = (e as { data?: unknown }).data\n        handler.onMessage?.(wsLike, data)\n      })\n      server.addEventListener('close', (e) => {\n        const ev = e as { code?: number; reason?: string }\n        handler.onClose?.(wsLike, ev.code, ev.reason)\n      })\n      server.addEventListener('error', (err) => handler.onError?.(wsLike, err))\n      // CF requires returning Response with status 101 and webSocket pair.\n      // Node's Response throws on 101; fall back to a plain object that\n      // satisfies the CF runtime's protocol but matches our test shape.\n      try {\n        return new Response(null, {\n          status: 101,\n          webSocket: client,\n        } as ResponseInit & { webSocket: unknown })\n      } catch {\n        return { status: 101, webSocket: client } as unknown as Response\n      }\n    },\n  }\n}\n"],"mappings":";;;AAgCO,SAAS,mBAAmB,SAEjC;AACA,SAAO;AAAA,IACL,OAAO,UAAqC;AAC1C,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS;AACd,mBAAS,KAAK,IAAI;AAAA,QACpB;AAAA,QACA,OAAO,CAAC,MAAM,WAAW;AACvB,mBAAS,MAAM,MAAM,MAAM;AAAA,QAC7B;AAAA,QACA,IAAI,CAAC,OAAO,OAAO;AACjB,mBAAS,GAAG,OAAO,EAAE;AAAA,QACvB;AAAA,MACF;AACA,eAAS,GAAG,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAClD,eAAS,GAAG,WAAW,CAAC,SAAS,QAAQ,YAAY,QAAQ,IAAI,CAAC;AAClE,eAAS,GAAG,SAAS,CAAC,cAAc;AAClC,cAAM,OAAO,OAAO,cAAc,WAAW,YAAY;AACzD,gBAAQ,UAAU,QAAQ,IAAI;AAAA,MAChC,CAAC;AACD,eAAS,GAAG,SAAS,CAAC,QAAQ,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAC5D,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAiBA,SAAS,eAAe,OAAoC;AAC1D,SAAO;AAAA,IACL,MAAM,CAAC,SAAS;AACd,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,IACA,OAAO,CAAC,MAAM,WAAW;AACvB,YAAM,MAAM,MAAM,MAAM;AAAA,IAC1B;AAAA,IACA,IAAI,MAAM;AAAA,IAEV;AAAA,EACF;AACF;AAEO,SAAS,kBAAkB,SAAwC;AACxE,SAAO;AAAA,IACL,KAAK,OAAO;AACV,cAAQ,SAAS,eAAe,KAAK,CAAC;AAAA,IACxC;AAAA,IACA,QAAQ,OAAO,KAAK;AAClB,cAAQ,YAAY,eAAe,KAAK,GAAG,GAAG;AAAA,IAChD;AAAA,IACA,MAAM,OAAO,MAAM,QAAQ;AACzB,cAAQ,UAAU,eAAe,KAAK,GAAG,MAAM,MAAM;AAAA,IACvD;AAAA,EACF;AACF;AAiBO,SAAS,mBACd,SACA,QACwC;AACxC,SAAO;AAAA,IACL,OAAO,SAA4B;AACjC,YAAM,EAAE,UAAU,OAAO,IAAI,OAAO,iBAAiB,OAAO;AAC5D,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS;AACd,iBAAO,KAAK,IAAI;AAAA,QAClB;AAAA,QACA,OAAO,CAAC,MAAM,WAAW;AACvB,iBAAO,MAAM,MAAM,MAAM;AAAA,QAC3B;AAAA,QACA,IAAI,MAAM;AAAA,QAEV;AAAA,MACF;AACA,aAAO,iBAAiB,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAC9D,aAAO,iBAAiB,WAAW,CAAC,MAAM;AACxC,cAAM,OAAQ,EAAyB;AACvC,gBAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,MAAM;AACtC,cAAM,KAAK;AACX,gBAAQ,UAAU,QAAQ,GAAG,MAAM,GAAG,MAAM;AAAA,MAC9C,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,QAAQ,QAAQ,UAAU,QAAQ,GAAG,CAAC;AACxE,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAaO,SAAS,yBAAyB,SAEvC;AACA,SAAO;AAAA,IACL,OAAO,UAA6B;AAClC,YAAM,IAAI;AAGV,UAAI,CAAC,EAAE,eAAe;AACpB,cAAM,IAAI,MAAM,4EAAuE;AAAA,MACzF;AACA,YAAM,OAAO,IAAI,EAAE,cAAc;AACjC,YAAM,SAAS,KAAK,CAAC;AACrB,YAAM,SAAS,KAAK,CAAC;AACrB,aAAO,OAAO;AACd,YAAM,SAAwB;AAAA,QAC5B,MAAM,CAAC,SAAS;AACd,iBAAO,KAAK,IAAI;AAAA,QAClB;AAAA,QACA,OAAO,CAAC,MAAM,WAAW;AACvB,iBAAO,MAAM,MAAM,MAAM;AAAA,QAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAMA,IAAI,MAAY;AAAA,QAEhB;AAAA,MACF;AACA,aAAO,iBAAiB,QAAQ,MAAM,QAAQ,SAAS,MAAM,CAAC;AAC9D,aAAO,iBAAiB,WAAW,CAAC,MAAM;AACxC,cAAM,OAAQ,EAAyB;AACvC,gBAAQ,YAAY,QAAQ,IAAI;AAAA,MAClC,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,MAAM;AACtC,cAAM,KAAK;AACX,gBAAQ,UAAU,QAAQ,GAAG,MAAM,GAAG,MAAM;AAAA,MAC9C,CAAC;AACD,aAAO,iBAAiB,SAAS,CAAC,QAAQ,QAAQ,UAAU,QAAQ,GAAG,CAAC;AAIxE,UAAI;AACF,eAAO,IAAI,SAAS,MAAM;AAAA,UACxB,QAAQ;AAAA,UACR,WAAW;AAAA,QACb,CAA0C;AAAA,MAC5C,QAAQ;AACN,eAAO,EAAE,QAAQ,KAAK,WAAW,OAAO;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/{add-WM3ED75L.js → add-2ZFFGGE4.js}

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 import "tsx/esm";
+import "./chunk-KT3MWNZG.js";
 
 // src/cli/commands/add.ts
+import { spawn } from "child_process";
 import { existsSync } from "fs";
 import { resolve } from "path";
-import { spawn } from "child_process";
 var InvalidPackageNameError = class extends Error {
   constructor(input, reason) {
     super(`Invalid package name "${input}": ${reason}`);
@@ -25,10 +26,7 @@ function validatePackageInput(input) {
     throw new InvalidPackageNameError(input, "must be a non-empty string");
   }
   if (!PACKAGE_NAME_REGEX.test(input)) {
-    throw new InvalidPackageNameError(
-      input,
-      "allowed: lowercase letters, digits, hyphens only"
-    );
+    throw new InvalidPackageNameError(input, "allowed: lowercase letters, digits, hyphens only");
   }
   return true;
 }
@@ -66,7 +64,10 @@ function levenshtein(a, b) {
   const n = b.length;
   if (m === 0) return n;
   if (n === 0) return m;
-  const dp = Array.from({ length: m + 1 }, () => new Array(n + 1).fill(0));
+  const dp = Array.from(
+    { length: m + 1 },
+    () => Array.from({ length: n + 1 }).fill(0)
+  );
   for (let i = 0; i <= m; i++) dp[i][0] = i;
   for (let j = 0; j <= n; j++) dp[0][j] = j;
   for (let i = 1; i <= m; i++) {
@@ -89,11 +90,11 @@ function findSuggestion(input, candidates) {
 async function runAdd(deps) {
   validatePackageInput(deps.input);
   const registry = deps.registry ?? KNOWN_PACKAGES;
-  const entry = registry[deps.input];
-  if (!entry) {
+  if (!Object.hasOwn(registry, deps.input)) {
     const suggestion = findSuggestion(deps.input, Object.keys(registry));
     throw new UnknownPackageError(deps.input, suggestion);
   }
+  const entry = registry[deps.input];
   if (entry.kind === "bundled") {
     return {
       packageInstalled: `${deps.input} (bundled inside theokit)`,
@@ -127,10 +128,14 @@ async function runAdd(deps) {
   };
 }
 function defaultSpawnPm(cmd, args, opts) {
-  return new Promise((resolveProm) => {
+  return new Promise((resolve2) => {
     const proc = spawn(cmd, args, { cwd: opts.cwd, shell: opts.shell, stdio: "inherit" });
-    proc.on("close", (code) => resolveProm({ ok: code === 0, code: code ?? 1 }));
-    proc.on("error", () => resolveProm({ ok: false, code: 1 }));
+    proc.on("close", (code) => {
+      resolve2({ ok: code === 0, code: code ?? 1 });
+    });
+    proc.on("error", () => {
+      resolve2({ ok: false, code: 1 });
+    });
   });
 }
 async function addCommand(input) {
@@ -157,4 +162,4 @@ export {
   runAdd,
   validatePackageInput
 };
-//# sourceMappingURL=add-WM3ED75L.js.map
+//# sourceMappingURL=add-2ZFFGGE4.js.map

package/dist/add-2ZFFGGE4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/cli/commands/add.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-fs-filename --\n * CLI `theo add` — detects pkg manager + writes manifests under user `cwd`.\n * Build-time tool. No HTTP input.\n */\nimport { spawn } from 'node:child_process'\nimport { existsSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nexport class InvalidPackageNameError extends Error {\n  constructor(input: string, reason: string) {\n    super(`Invalid package name \"${input}\": ${reason}`)\n    this.name = 'InvalidPackageNameError'\n  }\n}\n\nexport class UnknownPackageError extends Error {\n  constructor(input: string, suggestion?: string) {\n    super(\n      suggestion\n        ? `Unknown package: ${input}. Did you mean: ${suggestion}?`\n        : `Unknown package: ${input}.`,\n    )\n    this.name = 'UnknownPackageError'\n  }\n}\n\n/**\n * EC-4 — strict whitelist of characters allowed in package input.\n * Lowercase ASCII letters, digits, hyphens. Must start with letter/digit.\n * Rejects: shell metacharacters, path traversal, scope syntax, uppercase.\n */\nconst PACKAGE_NAME_REGEX = /^[a-z0-9][a-z0-9-]*$/\n\nexport function validatePackageInput(input: string): true {\n  if (typeof input !== 'string' || input.length === 0) {\n    throw new InvalidPackageNameError(input, 'must be a non-empty string')\n  }\n  if (!PACKAGE_NAME_REGEX.test(input)) {\n    throw new InvalidPackageNameError(input, 'allowed: lowercase letters, digits, hyphens only')\n  }\n  return true\n}\n\nexport type PackageManager = 'pnpm' | 'bun' | 'yarn' | 'npm'\n\nexport function detectPackageManager(lockfiles: Record<string, boolean>): PackageManager {\n  if (lockfiles['pnpm-lock.yaml']) return 'pnpm'\n  if (lockfiles['bun.lockb']) return 'bun'\n  if (lockfiles['yarn.lock']) return 'yarn'\n  if (lockfiles['package-lock.json']) return 'npm'\n  return 'npm'\n}\n\nexport interface PackageRegistryEntry {\n  /** 'bundled' = adapter already shipped inside theokit; no npm install needed.\n   *  'external' = adapter/plugin lives as a separate npm package. */\n  kind: 'bundled' | 'external'\n  /** Required when kind === 'external'. */\n  npm?: string\n  /** Usage hint printed to the user (e.g. `theokit build --target=bun`). */\n  usage: string\n}\n\nexport const KNOWN_PACKAGES: Record<string, PackageRegistryEntry> = {\n  bun: {\n    kind: 'bundled',\n    usage: 'theokit build --target=bun',\n  },\n  deno: {\n    kind: 'bundled',\n    usage: 'theokit build --target=deno-deploy',\n  },\n  netlify: {\n    kind: 'bundled',\n    usage: 'theokit build --target=netlify',\n  },\n  'aws-lambda': {\n    kind: 'bundled',\n    usage: 'theokit build --target=aws-lambda',\n  },\n  static: {\n    kind: 'bundled',\n    usage: 'theokit build --target=static',\n  },\n}\n\nfunction levenshtein(a: string, b: string): number {\n  const m = a.length\n  const n = b.length\n  if (m === 0) return n\n  if (n === 0) return m\n  const dp: number[][] = Array.from({ length: m + 1 }, () =>\n    Array.from<number>({ length: n + 1 }).fill(0),\n  )\n  for (let i = 0; i <= m; i++) dp[i][0] = i\n  for (let j = 0; j <= n; j++) dp[0][j] = j\n  for (let i = 1; i <= m; i++) {\n    for (let j = 1; j <= n; j++) {\n      const cost = a[i - 1] === b[j - 1] ? 0 : 1\n      dp[i][j] = Math.min(dp[i - 1][j] + 1, dp[i][j - 1] + 1, dp[i - 1][j - 1] + cost)\n    }\n  }\n  return dp[m][n]\n}\n\nfunction findSuggestion(input: string, candidates: string[]): string | undefined {\n  let best: { name: string; d: number } | null = null\n  for (const c of candidates) {\n    const d = levenshtein(input, c)\n    if (best === null || d < best.d) best = { name: c, d }\n  }\n  if (best && best.d <= 3) return best.name\n  return undefined\n}\n\nexport interface RunAddDeps {\n  input: string\n  cwd: string\n  existsSync?: (path: string) => boolean\n  spawnPm?: (\n    cmd: string,\n    args: string[],\n    opts: { cwd: string; shell: boolean },\n  ) => Promise<{ ok: boolean; code: number }>\n  registry?: Record<string, PackageRegistryEntry>\n}\n\nexport interface AddResult {\n  packageInstalled: string\n  packageManager: PackageManager | 'bundled'\n  usage: string\n  exitCode: 0\n}\n\nexport async function runAdd(deps: RunAddDeps): Promise<AddResult> {\n  validatePackageInput(deps.input)\n\n  const registry = deps.registry ?? KNOWN_PACKAGES\n  if (!Object.hasOwn(registry, deps.input)) {\n    const suggestion = findSuggestion(deps.input, Object.keys(registry))\n    throw new UnknownPackageError(deps.input, suggestion)\n  }\n  const entry = registry[deps.input]\n\n  // T6.1 — bundled adapters need no install\n  if (entry.kind === 'bundled') {\n    return {\n      packageInstalled: `${deps.input} (bundled inside theokit)`,\n      packageManager: 'bundled',\n      usage: entry.usage,\n      exitCode: 0,\n    }\n  }\n\n  if (!entry.npm) {\n    throw new Error(`External package \"${deps.input}\" missing npm field in registry`)\n  }\n\n  const existsFn = deps.existsSync ?? ((p: string) => existsSync(p))\n  const lockfiles = {\n    'pnpm-lock.yaml': existsFn(resolve(deps.cwd, 'pnpm-lock.yaml')),\n    'bun.lockb': existsFn(resolve(deps.cwd, 'bun.lockb')),\n    'yarn.lock': existsFn(resolve(deps.cwd, 'yarn.lock')),\n    'package-lock.json': existsFn(resolve(deps.cwd, 'package-lock.json')),\n  }\n  const pm = detectPackageManager(lockfiles)\n\n  const args = pm === 'npm' ? ['install', entry.npm] : ['add', entry.npm]\n  const spawnFn = deps.spawnPm ?? defaultSpawnPm\n  const result = await spawnFn(pm, args, { cwd: deps.cwd, shell: false })\n\n  if (!result.ok) {\n    throw new Error(`Package manager exited with non-zero exit code ${result.code}`)\n  }\n\n  return {\n    packageInstalled: entry.npm,\n    packageManager: pm,\n    usage: entry.usage,\n    exitCode: 0,\n  }\n}\n\nfunction defaultSpawnPm(\n  cmd: string,\n  args: string[],\n  opts: { cwd: string; shell: boolean },\n): Promise<{ ok: boolean; code: number }> {\n  return new Promise((resolve) => {\n    const proc = spawn(cmd, args, { cwd: opts.cwd, shell: opts.shell, stdio: 'inherit' })\n    proc.on('close', (code) => {\n      resolve({ ok: code === 0, code: code ?? 1 })\n    })\n    proc.on('error', () => {\n      resolve({ ok: false, code: 1 })\n    })\n  })\n}\n\nexport async function addCommand(input: string): Promise<void> {\n  try {\n    const result = await runAdd({ input, cwd: process.cwd() })\n    console.log(`\\n  ✓ Installed ${result.packageInstalled} via ${result.packageManager}\\n`)\n    console.log(`  Next: import { /* ... */ } from '${result.packageInstalled}'\\n`)\n  } catch (err) {\n    console.error(`\\n  ✗ ${(err as Error).message}\\n`)\n    process.exit(1)\n  }\n}\n"],"mappings":";;;;;AAIA,SAAS,aAAa;AACtB,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AAEjB,IAAM,0BAAN,cAAsC,MAAM;AAAA,EACjD,YAAY,OAAe,QAAgB;AACzC,UAAM,yBAAyB,KAAK,MAAM,MAAM,EAAE;AAClD,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,OAAe,YAAqB;AAC9C;AAAA,MACE,aACI,oBAAoB,KAAK,mBAAmB,UAAU,MACtD,oBAAoB,KAAK;AAAA,IAC/B;AACA,SAAK,OAAO;AAAA,EACd;AACF;AAOA,IAAM,qBAAqB;AAEpB,SAAS,qBAAqB,OAAqB;AACxD,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,UAAM,IAAI,wBAAwB,OAAO,4BAA4B;AAAA,EACvE;AACA,MAAI,CAAC,mBAAmB,KAAK,KAAK,GAAG;AACnC,UAAM,IAAI,wBAAwB,OAAO,kDAAkD;AAAA,EAC7F;AACA,SAAO;AACT;AAIO,SAAS,qBAAqB,WAAoD;AACvF,MAAI,UAAU,gBAAgB,EAAG,QAAO;AACxC,MAAI,UAAU,WAAW,EAAG,QAAO;AACnC,MAAI,UAAU,WAAW,EAAG,QAAO;AACnC,MAAI,UAAU,mBAAmB,EAAG,QAAO;AAC3C,SAAO;AACT;AAYO,IAAM,iBAAuD;AAAA,EAClE,KAAK;AAAA,IACH,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,MAAM;AAAA,IACJ,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,SAAS;AAAA,IACP,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,cAAc;AAAA,IACZ,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,OAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAY,GAAW,GAAmB;AACjD,QAAM,IAAI,EAAE;AACZ,QAAM,IAAI,EAAE;AACZ,MAAI,MAAM,EAAG,QAAO;AACpB,MAAI,MAAM,EAAG,QAAO;AACpB,QAAM,KAAiB,MAAM;AAAA,IAAK,EAAE,QAAQ,IAAI,EAAE;AAAA,IAAG,MACnD,MAAM,KAAa,EAAE,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC;AAAA,EAC9C;AACA,WAAS,IAAI,GAAG,KAAK,GAAG,IAAK,IAAG,CAAC,EAAE,CAAC,IAAI;AACxC,WAAS,IAAI,GAAG,KAAK,GAAG,IAAK,IAAG,CAAC,EAAE,CAAC,IAAI;AACxC,WAAS,IAAI,GAAG,KAAK,GAAG,KAAK;AAC3B,aAAS,IAAI,GAAG,KAAK,GAAG,KAAK;AAC3B,YAAM,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI;AACzC,SAAG,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI;AAAA,IACjF;AAAA,EACF;AACA,SAAO,GAAG,CAAC,EAAE,CAAC;AAChB;AAEA,SAAS,eAAe,OAAe,YAA0C;AAC/E,MAAI,OAA2C;AAC/C,aAAW,KAAK,YAAY;AAC1B,UAAM,IAAI,YAAY,OAAO,CAAC;AAC9B,QAAI,SAAS,QAAQ,IAAI,KAAK,EAAG,QAAO,EAAE,MAAM,GAAG,EAAE;AAAA,EACvD;AACA,MAAI,QAAQ,KAAK,KAAK,EAAG,QAAO,KAAK;AACrC,SAAO;AACT;AAqBA,eAAsB,OAAO,MAAsC;AACjE,uBAAqB,KAAK,KAAK;AAE/B,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,CAAC,OAAO,OAAO,UAAU,KAAK,KAAK,GAAG;AACxC,UAAM,aAAa,eAAe,KAAK,OAAO,OAAO,KAAK,QAAQ,CAAC;AACnE,UAAM,IAAI,oBAAoB,KAAK,OAAO,UAAU;AAAA,EACtD;AACA,QAAM,QAAQ,SAAS,KAAK,KAAK;AAGjC,MAAI,MAAM,SAAS,WAAW;AAC5B,WAAO;AAAA,MACL,kBAAkB,GAAG,KAAK,KAAK;AAAA,MAC/B,gBAAgB;AAAA,MAChB,OAAO,MAAM;AAAA,MACb,UAAU;AAAA,IACZ;AAAA,EACF;AAEA,MAAI,CAAC,MAAM,KAAK;AACd,UAAM,IAAI,MAAM,qBAAqB,KAAK,KAAK,iCAAiC;AAAA,EAClF;AAEA,QAAM,WAAW,KAAK,eAAe,CAAC,MAAc,WAAW,CAAC;AAChE,QAAM,YAAY;AAAA,IAChB,kBAAkB,SAAS,QAAQ,KAAK,KAAK,gBAAgB,CAAC;AAAA,IAC9D,aAAa,SAAS,QAAQ,KAAK,KAAK,WAAW,CAAC;AAAA,IACpD,aAAa,SAAS,QAAQ,KAAK,KAAK,WAAW,CAAC;AAAA,IACpD,qBAAqB,SAAS,QAAQ,KAAK,KAAK,mBAAmB,CAAC;AAAA,EACtE;AACA,QAAM,KAAK,qBAAqB,SAAS;AAEzC,QAAM,OAAO,OAAO,QAAQ,CAAC,WAAW,MAAM,GAAG,IAAI,CAAC,OAAO,MAAM,GAAG;AACtE,QAAM,UAAU,KAAK,WAAW;AAChC,QAAM,SAAS,MAAM,QAAQ,IAAI,MAAM,EAAE,KAAK,KAAK,KAAK,OAAO,MAAM,CAAC;AAEtE,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI,MAAM,kDAAkD,OAAO,IAAI,EAAE;AAAA,EACjF;AAEA,SAAO;AAAA,IACL,kBAAkB,MAAM;AAAA,IACxB,gBAAgB;AAAA,IAChB,OAAO,MAAM;AAAA,IACb,UAAU;AAAA,EACZ;AACF;AAEA,SAAS,eACP,KACA,MACA,MACwC;AACxC,SAAO,IAAI,QAAQ,CAACA,aAAY;AAC9B,UAAM,OAAO,MAAM,KAAK,MAAM,EAAE,KAAK,KAAK,KAAK,OAAO,KAAK,OAAO,OAAO,UAAU,CAAC;AACpF,SAAK,GAAG,SAAS,CAAC,SAAS;AACzB,MAAAA,SAAQ,EAAE,IAAI,SAAS,GAAG,MAAM,QAAQ,EAAE,CAAC;AAAA,IAC7C,CAAC;AACD,SAAK,GAAG,SAAS,MAAM;AACrB,MAAAA,SAAQ,EAAE,IAAI,OAAO,MAAM,EAAE,CAAC;AAAA,IAChC,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,WAAW,OAA8B;AAC7D,MAAI;AACF,UAAM,SAAS,MAAM,OAAO,EAAE,OAAO,KAAK,QAAQ,IAAI,EAAE,CAAC;AACzD,YAAQ,IAAI;AAAA,qBAAmB,OAAO,gBAAgB,QAAQ,OAAO,cAAc;AAAA,CAAI;AACvF,YAAQ,IAAI,sCAAsC,OAAO,gBAAgB;AAAA,CAAK;AAAA,EAChF,SAAS,KAAK;AACZ,YAAQ,MAAM;AAAA,WAAU,IAAc,OAAO;AAAA,CAAI;AACjD,YAAQ,KAAK,CAAC;AAAA,EAChB;AACF;","names":["resolve"]}

package/dist/agent-events-lSIS9uYs.d.ts

@@ -0,0 +1,76 @@
+/**
+ * core/contracts/agent-events.ts
+ *
+ * Canonical home for the AgentEvent wire-format contract (T2.2 of
+ * architecture-cleanup plan; ADR-0001 v3 invariant #3 exception).
+ *
+ * Server emits via SSE; client consumes. Discriminated union by `type`.
+ * Both `server/agent/*` and `client/*` import from here.
+ *
+ * Per ADR-0001 v3: `cache → core/contracts`, `client → core/contracts`,
+ * `devtools → core/contracts` are LEGAL direct imports (this is the
+ * documented exception to the `no-cross-module-deep-import` rule).
+ */
+/**
+ * Discriminated union for AgentRunError codes (Phase 1 — Production-Readiness #3).
+ *
+ * Mirrors `@usetheo/sdk`'s `AgentRunErrorCode` without hard-importing the SDK
+ * type (D2 decoupling). EC-7 forward-compat: `(string & {})` fallback preserves
+ * autocompletion for the known codes while accepting future codes the SDK may
+ * introduce — autocomplete works AND TS doesn't reject unknown codes.
+ */
+type AgentRunErrorCode = 'auth' | 'rate_limit' | 'quota_exceeded' | 'invalid_model' | 'invalid_request' | 'invalid_input' | 'context_too_large' | 'safety_blocked' | 'provider_unreachable' | 'tool_runtime_error' | 'aborted' | 'unknown' | (string & {});
+interface AgentMessageEvent {
+    type: 'message';
+    content: string;
+    /** Optional id for client-side dedup / animation keys. */
+    id?: string;
+}
+interface AgentToolCallEvent {
+    type: 'tool_call';
+    name: string;
+    args: Record<string, unknown>;
+    id?: string;
+}
+interface AgentToolResultEvent {
+    type: 'tool_result';
+    name: string;
+    data: unknown;
+    id?: string;
+}
+/**
+ * Error event emitted via SSE.
+ *
+ * Phase 1 — Production-Readiness #3:
+ *   New optional fields `code/provider/retriable/retryAfterMs` discriminate
+ *   error classes for client-side handling (auth → sign-in CTA; rate_limit →
+ *   countdown; quota_exceeded → upsell; etc.).
+ *
+ * Backward compat (D4): all new fields are optional. Existing clients that
+ * read only `event.message` keep working unchanged. New clients can safely
+ * `switch (event.code)` — `undefined` (legacy server) is a valid case.
+ *
+ * EC-15 (DOCUMENT): `message` is *trusted* to not contain secrets. SDK's
+ * `AgentRunError.message` is propagated verbatim. The SDK's `providerError`
+ * is NEVER serialized into this event — quarantined to prevent leakage.
+ */
+interface AgentErrorEvent {
+    type: 'error';
+    message: string;
+    id?: string;
+    /** Discriminated error class — see AgentRunErrorCode. */
+    code?: AgentRunErrorCode;
+    /** Provider id (e.g., 'openai', 'anthropic', 'openrouter'). */
+    provider?: string;
+    /** Whether the SAME request can be retried as-is. */
+    retriable?: boolean;
+    /** Hint from provider's Retry-After header (milliseconds). Zero is valid (immediate retry). */
+    retryAfterMs?: number;
+}
+/**
+ * Runtime AgentEvent — discriminated union of the 4 variants emitted by
+ * agent endpoints. Server produces; client consumes.
+ */
+type AgentEvent = AgentMessageEvent | AgentToolCallEvent | AgentToolResultEvent | AgentErrorEvent;
+
+export type { AgentEvent as A, AgentErrorEvent as a, AgentMessageEvent as b, AgentToolCallEvent as c, AgentToolResultEvent as d, AgentRunErrorCode as e };

package/dist/{aws-lambda-ZO4GOYP2.js → aws-lambda-PONVF3UX.js}

@@ -2,12 +2,12 @@
 import "tsx/esm";
 import {
   nodeAdapter
-} from "./chunk-YEPCVSSU.js";
-import "./chunk-RTLNG5GW.js";
-import "./chunk-RSUGZCW3.js";
-import "./chunk-UB6YKEU6.js";
-import "./chunk-NXAFLRZX.js";
-import "./chunk-IM6C5SOI.js";
+} from "./chunk-Y5KE6YFP.js";
+import {
+  assertServicesUnsupported,
+  readManifest
+} from "./chunk-WZ7CPVQB.js";
+import "./chunk-KT3MWNZG.js";
 
 // src/adapters/aws-lambda.ts
 import { mkdirSync, writeFileSync } from "fs";
@@ -137,27 +137,30 @@ function renderAwsLambdaEntry() {
     `  const { req, res, toResponse } = createWebShim(request)`,
     `  const requestId = randomUUID()`,
     `  const method = request.method.toUpperCase()`,
-    `  await executeRoute(match.route, method, match.params, req, res, loaderCache, serverDir, requestId)`,
+    `  await executeRoute({ route: match.route, method, params: match.params, req, res, loadModule: loaderCache, serverDir, requestId })`,
     `  const response = await toResponse()`,
     `  return responseToV2Result(response)`,
     `}`
   ].join("\n");
 }
-async function buildAwsLambda(config, cwd, deps = {}) {
+async function buildAwsLambda(config, cwd, deps = {}, ctx) {
+  assertServicesUnsupported("aws-lambda", readManifest(cwd));
   const runNodeBuild = deps.runNodeBuild ?? nodeAdapter.build.bind(nodeAdapter);
-  await runNodeBuild(config, cwd);
+  await runNodeBuild(config, cwd, ctx);
   const outputDir = resolve(cwd, ".theo/aws");
   const ensureDir = deps.ensureDir ?? ((p) => mkdirSync(p, { recursive: true }));
   ensureDir(outputDir);
   const entry = renderAwsLambdaEntry();
-  const write = deps.writeEntry ?? ((p, c) => writeFileSync(p, c));
+  const write = deps.writeEntry ?? ((p, c) => {
+    writeFileSync(p, c);
+  });
   write(resolve(outputDir, "handler.mjs"), entry);
   console.log("\n  \u2713 AWS Lambda output \u2192 .theo/aws/handler.mjs\n");
 }
 var awsLambdaAdapter = {
   name: "aws-lambda",
-  build(config, cwd) {
-    return buildAwsLambda(config, cwd);
+  build(config, cwd, ctx) {
+    return buildAwsLambda(config, cwd, {}, ctx);
   }
 };
 export {
@@ -167,4 +170,4 @@ export {
   renderAwsLambdaEntry,
   responseToLambdaResultV2
 };
-//# sourceMappingURL=aws-lambda-ZO4GOYP2.js.map
+//# sourceMappingURL=aws-lambda-PONVF3UX.js.map

package/dist/aws-lambda-PONVF3UX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/aws-lambda.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-fs-filename --\n * AWS Lambda adapter. Writes to `cwd/.theo/lambda/`. Build-time tool.\n */\nimport { mkdirSync, writeFileSync } from 'node:fs'\nimport { resolve } from 'node:path'\n\nimport type { TheoConfig } from '../config/schema.js'\nimport { assertServicesUnsupported, readManifest } from '../services/index.js'\n\nimport { nodeAdapter } from './node.js'\nimport type { AdapterBuildContext, DeployAdapter } from './types.js'\n\nexport interface AwsLambdaBuildDeps {\n  runNodeBuild?: (config: TheoConfig, cwd: string, ctx?: AdapterBuildContext) => Promise<void>\n  writeEntry?: (path: string, content: string) => void\n  ensureDir?: (path: string) => void\n}\n\nexport interface RequestShape {\n  method: string\n  path: string\n  headers: Record<string, string>\n  body?: string\n}\n\nexport interface LambdaResultV2 {\n  statusCode: number\n  headers: Record<string, string>\n  body: string\n  isBase64Encoded: boolean\n}\n\nconst BINARY_CONTENT_TYPES = [\n  'application/octet-stream',\n  'application/pdf',\n  'application/zip',\n  'image/',\n  'audio/',\n  'video/',\n]\n\nfunction isBinaryContentType(contentType: string | undefined): boolean {\n  if (!contentType) return false\n  const ct = contentType.toLowerCase()\n  return BINARY_CONTENT_TYPES.some((prefix) => ct.startsWith(prefix))\n}\n\ninterface APIGatewayProxyEventV2 {\n  version: string\n  requestContext: {\n    http: { method: string; path: string }\n  }\n  headers?: Record<string, string | undefined>\n  body?: string\n  isBase64Encoded?: boolean\n}\n\nexport function eventV2ToRequestShape(event: APIGatewayProxyEventV2): RequestShape {\n  const headers: Record<string, string> = {}\n  for (const [k, v] of Object.entries(event.headers ?? {})) {\n    if (v !== undefined) headers[k] = v\n  }\n  let body: string | undefined = event.body\n  if (body !== undefined && event.isBase64Encoded) {\n    body = Buffer.from(body, 'base64').toString('utf-8')\n  }\n  return {\n    method: event.requestContext.http.method,\n    path: event.requestContext.http.path,\n    headers,\n    body,\n  }\n}\n\nexport function responseToLambdaResultV2(\n  statusCode: number,\n  headers: Record<string, string>,\n  body: string,\n): LambdaResultV2 {\n  const isBinary = isBinaryContentType(headers['content-type'])\n  return {\n    statusCode,\n    headers,\n    body: isBinary ? Buffer.from(body, 'binary').toString('base64') : body,\n    isBase64Encoded: isBinary,\n  }\n}\n\nexport function renderAwsLambdaEntry(): string {\n  return [\n    `// Generated by Theo — AWS Lambda Adapter`,\n    `// Use with API Gateway HTTP API v2 (default).`,\n    ``,\n    `import { resolve } from 'node:path'`,\n    `import { randomUUID } from 'node:crypto'`,\n    `import { scanServerRoutes, matchRoute, executeRoute, createProductionLoader } from 'theokit/server'`,\n    `import { createWebShim } from 'theokit/adapters/web-shim'`,\n    ``,\n    `const cwd = process.cwd()`,\n    `const serverDir = resolve(cwd, 'server')`,\n    `let routesCache = null`,\n    `let loaderCache = null`,\n    ``,\n    `function eventV2ToRequest(event) {`,\n    `  const method = event.requestContext?.http?.method ?? 'GET'`,\n    `  const path = event.requestContext?.http?.path ?? '/'`,\n    `  const host = event.headers?.host ?? 'lambda'`,\n    `  const qs = event.rawQueryString ? '?' + event.rawQueryString : ''`,\n    `  const url = 'https://' + host + path + qs`,\n    `  const headers = new Headers()`,\n    `  for (const [k, v] of Object.entries(event.headers ?? {})) {`,\n    `    if (v !== undefined) headers.set(k, String(v))`,\n    `  }`,\n    `  let body = event.body`,\n    `  if (body && event.isBase64Encoded) {`,\n    `    body = Buffer.from(body, 'base64')`,\n    `  }`,\n    `  return new Request(url, {`,\n    `    method,`,\n    `    headers,`,\n    `    body: method === 'GET' || method === 'HEAD' ? undefined : body,`,\n    `  })`,\n    `}`,\n    ``,\n    `async function responseToV2Result(response) {`,\n    `  const headers = {}`,\n    `  response.headers.forEach((v, k) => { headers[k] = v })`,\n    `  const ct = headers['content-type'] ?? ''`,\n    `  const isBinary = /^application\\\\/(octet-stream|pdf|zip)|^(image|audio|video)\\\\//.test(ct)`,\n    `  if (isBinary) {`,\n    `    const buf = Buffer.from(await response.arrayBuffer())`,\n    `    return {`,\n    `      statusCode: response.status,`,\n    `      headers,`,\n    `      body: buf.toString('base64'),`,\n    `      isBase64Encoded: true,`,\n    `    }`,\n    `  }`,\n    `  return {`,\n    `    statusCode: response.status,`,\n    `    headers,`,\n    `    body: await response.text(),`,\n    `    isBase64Encoded: false,`,\n    `  }`,\n    `}`,\n    ``,\n    `export const handler = async (event) => {`,\n    `  const path = event.requestContext?.http?.path ?? '/'`,\n    ``,\n    `  if (!path.startsWith('/api/')) {`,\n    `    return {`,\n    `      statusCode: 404,`,\n    `      headers: { 'content-type': 'text/plain' },`,\n    `      body: 'Static assets must be served from CloudFront or a separate static host.',`,\n    `      isBase64Encoded: false,`,\n    `    }`,\n    `  }`,\n    ``,\n    `  if (!routesCache) routesCache = scanServerRoutes(serverDir)`,\n    `  if (!loaderCache) loaderCache = createProductionLoader()`,\n    ``,\n    `  const match = matchRoute(path, routesCache)`,\n    `  if (!match) {`,\n    `    return {`,\n    `      statusCode: 404,`,\n    `      headers: { 'content-type': 'application/json' },`,\n    `      body: JSON.stringify({ error: { code: 'NOT_FOUND' } }),`,\n    `      isBase64Encoded: false,`,\n    `    }`,\n    `  }`,\n    ``,\n    `  const request = eventV2ToRequest(event)`,\n    `  const { req, res, toResponse } = createWebShim(request)`,\n    `  const requestId = randomUUID()`,\n    `  const method = request.method.toUpperCase()`,\n    `  await executeRoute({ route: match.route, method, params: match.params, req, res, loadModule: loaderCache, serverDir, requestId })`,\n    `  const response = await toResponse()`,\n    `  return responseToV2Result(response)`,\n    `}`,\n  ].join('\\n')\n}\n\nexport async function buildAwsLambda(\n  config: TheoConfig,\n  cwd: string,\n  deps: AwsLambdaBuildDeps = {},\n  ctx?: AdapterBuildContext,\n): Promise<void> {\n  // Wave 2 (T2.2) — reject polyglot services on this adapter.\n  assertServicesUnsupported('aws-lambda', readManifest(cwd))\n\n  const runNodeBuild = deps.runNodeBuild ?? nodeAdapter.build.bind(nodeAdapter)\n  await runNodeBuild(config, cwd, ctx)\n\n  const outputDir = resolve(cwd, '.theo/aws')\n  const ensureDir = deps.ensureDir ?? ((p: string) => mkdirSync(p, { recursive: true }))\n  ensureDir(outputDir)\n\n  const entry = renderAwsLambdaEntry()\n  const write =\n    deps.writeEntry ??\n    ((p, c) => {\n      writeFileSync(p, c)\n    })\n  write(resolve(outputDir, 'handler.mjs'), entry)\n\n  // eslint-disable-next-line no-console -- CLI build progress\n  console.log('\\n  ✓ AWS Lambda output → .theo/aws/handler.mjs\\n')\n}\n\nexport const awsLambdaAdapter: DeployAdapter = {\n  name: 'aws-lambda',\n  build(config, cwd, ctx) {\n    return buildAwsLambda(config, cwd, {}, ctx)\n  },\n}\n"],"mappings":";;;;;;;;;;;;AAGA,SAAS,WAAW,qBAAqB;AACzC,SAAS,eAAe;AA4BxB,IAAM,uBAAuB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,SAAS,oBAAoB,aAA0C;AACrE,MAAI,CAAC,YAAa,QAAO;AACzB,QAAM,KAAK,YAAY,YAAY;AACnC,SAAO,qBAAqB,KAAK,CAAC,WAAW,GAAG,WAAW,MAAM,CAAC;AACpE;AAYO,SAAS,sBAAsB,OAA6C;AACjF,QAAM,UAAkC,CAAC;AACzC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,MAAM,WAAW,CAAC,CAAC,GAAG;AACxD,QAAI,MAAM,OAAW,SAAQ,CAAC,IAAI;AAAA,EACpC;AACA,MAAI,OAA2B,MAAM;AACrC,MAAI,SAAS,UAAa,MAAM,iBAAiB;AAC/C,WAAO,OAAO,KAAK,MAAM,QAAQ,EAAE,SAAS,OAAO;AAAA,EACrD;AACA,SAAO;AAAA,IACL,QAAQ,MAAM,eAAe,KAAK;AAAA,IAClC,MAAM,MAAM,eAAe,KAAK;AAAA,IAChC;AAAA,IACA;AAAA,EACF;AACF;AAEO,SAAS,yBACd,YACA,SACA,MACgB;AAChB,QAAM,WAAW,oBAAoB,QAAQ,cAAc,CAAC;AAC5D,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,MAAM,WAAW,OAAO,KAAK,MAAM,QAAQ,EAAE,SAAS,QAAQ,IAAI;AAAA,IAClE,iBAAiB;AAAA,EACnB;AACF;AAEO,SAAS,uBAA+B;AAC7C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,EAAE,KAAK,IAAI;AACb;AAEA,eAAsB,eACpB,QACA,KACA,OAA2B,CAAC,GAC5B,KACe;AAEf,4BAA0B,cAAc,aAAa,GAAG,CAAC;AAEzD,QAAM,eAAe,KAAK,gBAAgB,YAAY,MAAM,KAAK,WAAW;AAC5E,QAAM,aAAa,QAAQ,KAAK,GAAG;AAEnC,QAAM,YAAY,QAAQ,KAAK,WAAW;AAC1C,QAAM,YAAY,KAAK,cAAc,CAAC,MAAc,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACpF,YAAU,SAAS;AAEnB,QAAM,QAAQ,qBAAqB;AACnC,QAAM,QACJ,KAAK,eACJ,CAAC,GAAG,MAAM;AACT,kBAAc,GAAG,CAAC;AAAA,EACpB;AACF,QAAM,QAAQ,WAAW,aAAa,GAAG,KAAK;AAG9C,UAAQ,IAAI,6DAAmD;AACjE;AAEO,IAAM,mBAAkC;AAAA,EAC7C,MAAM;AAAA,EACN,MAAM,QAAQ,KAAK,KAAK;AACtB,WAAO,eAAe,QAAQ,KAAK,CAAC,GAAG,GAAG;AAAA,EAC5C;AACF;","names":[]}

package/dist/broadcast-4SX7R5XE.js

@@ -0,0 +1,14 @@
+import {
+  broadcastCsrfWarn,
+  broadcastError,
+  broadcastRequest,
+  broadcastToDevtools
+} from "./chunk-7BIM27LV.js";
+import "./chunk-DGUM43GV.js";
+export {
+  broadcastCsrfWarn,
+  broadcastError,
+  broadcastRequest,
+  broadcastToDevtools
+};
+//# sourceMappingURL=broadcast-4SX7R5XE.js.map

package/dist/broadcast-QOQGUNNK.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import {
+  broadcastCsrfWarn,
+  broadcastError,
+  broadcastRequest,
+  broadcastToDevtools
+} from "./chunk-5ODOE6EF.js";
+import "./chunk-KT3MWNZG.js";
+export {
+  broadcastCsrfWarn,
+  broadcastError,
+  broadcastRequest,
+  broadcastToDevtools
+};
+//# sourceMappingURL=broadcast-QOQGUNNK.js.map

package/dist/broadcast-QOQGUNNK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}