theokit 0.2.4 → 0.4.0-beta.0

package/dist/server/index.js

@@ -2,7 +2,7 @@ import {
   generateManifest,
   loadManifest,
   writeManifest
-} from "../chunk-YWWHK7R6.js";
+} from "../chunk-2VQKDRVF.js";
 import {
   _resetKeyCacheForTests,
   assertProductionSecret,
@@ -137,7 +137,7 @@ import {
   matchRoute,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "../chunk-2BQYEBCK.js";
+} from "../chunk-B6RP57M3.js";
 import {
   ActionScanError,
   scanServerActions,

package/dist/server-routes-hmr-GZJGPWMS.js

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+import "tsx/esm";
+import "./chunk-KT3MWNZG.js";
+
+// src/vite-plugin/server-routes-hmr.ts
+import { sep } from "path";
+function serverRoutesHmrPlugin(opts) {
+  const routesDir = `${opts.serverDir}${sep}routes${sep}`;
+  const routesDirPosix = routesDir.replace(/\\/g, "/");
+  const debounceMs = opts.debounceMs ?? 50;
+  const isUnderRoutes = (filePath) => {
+    const normalized = filePath.replace(/\\/g, "/");
+    return normalized.startsWith(routesDirPosix);
+  };
+  return {
+    name: "theokit:server-routes-hmr",
+    configureServer(server) {
+      const srv = server;
+      let timer = null;
+      const fireInvalidation = () => {
+        timer = null;
+        for (const mod of srv.moduleGraph.idToModuleMap.values()) {
+          const normalizedId = mod.id.replace(/\\/g, "/");
+          if (normalizedId.startsWith(routesDirPosix)) {
+            srv.moduleGraph.invalidateModule(mod);
+          }
+        }
+        srv.ws.send({ type: "full-reload" });
+      };
+      const scheduleInvalidation = (filePath) => {
+        if (!isUnderRoutes(filePath)) return;
+        if (timer !== null) clearTimeout(timer);
+        timer = setTimeout(fireInvalidation, debounceMs);
+      };
+      srv.watcher.on("add", scheduleInvalidation);
+      srv.watcher.on("change", scheduleInvalidation);
+      srv.watcher.on("unlink", scheduleInvalidation);
+    }
+  };
+}
+export {
+  serverRoutesHmrPlugin
+};
+//# sourceMappingURL=server-routes-hmr-GZJGPWMS.js.map

package/dist/server-routes-hmr-GZJGPWMS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vite-plugin/server-routes-hmr.ts"],"sourcesContent":["/**\n * G6 T1.2 — Vite plugin: watch `server/routes/**` and invalidate SSR module\n * cache on add/change/unlink with a 50 ms debounce window.\n *\n * Plan: .claude/knowledge-base/plans/g6-router-convention-plan.md v1.1\n *\n * Pattern reference: SvelteKit `exports/vite/dev/index.js:335-398`.\n *\n * Why this exists: in dev, `scanServerRoutes` runs per-request (fresh disk\n * read), so adding/removing routes already takes effect on next request.\n * But the SSR dynamic-import cache holds stale code for EDITED routes — Vite\n * needs an explicit `invalidateModule` call to bust it. We also send a\n * `full-reload` so any browser code that imported a route module\n * (rare, but the typed client G1 does this for ts-only type resolution)\n * picks up the change.\n *\n * EC-6: 50 ms debounce collapses bursty file events (e.g., codemod-driven\n * 21-rename storm in T2.1) into a single invalidation cycle — without it,\n * 21 invalidations + 21 full-reloads in 5 s would hang the dev server.\n */\nimport { sep } from 'node:path'\n\nimport type { Plugin, ViteDevServer } from 'vite'\n\nexport interface ServerRoutesHmrPluginOptions {\n  /** Absolute path of the consumer's `server/` directory. */\n  serverDir: string\n  /** Debounce window in milliseconds (default 50 ms per EC-6). */\n  debounceMs?: number\n}\n\ninterface ModuleGraphLike {\n  getModuleById: (id: string) => unknown\n  invalidateModule: (mod: unknown) => void\n  idToModuleMap: Map<string, { id: string }>\n}\n\ninterface ViteDevServerLike {\n  watcher: { on: (event: string, listener: (path: string) => void) => void }\n  moduleGraph: ModuleGraphLike\n  ws: { send: (payload: { type: string }) => void }\n}\n\nexport function serverRoutesHmrPlugin(opts: ServerRoutesHmrPluginOptions): Plugin {\n  const routesDir = `${opts.serverDir}${sep}routes${sep}`\n  // Cross-platform: on Windows the watcher MAY emit forward slashes even on NTFS.\n  const routesDirPosix = routesDir.replace(/\\\\/g, '/')\n  const debounceMs = opts.debounceMs ?? 50\n\n  const isUnderRoutes = (filePath: string): boolean => {\n    const normalized = filePath.replace(/\\\\/g, '/')\n    return normalized.startsWith(routesDirPosix)\n  }\n\n  return {\n    name: 'theokit:server-routes-hmr',\n\n    configureServer(server: ViteDevServer) {\n      const srv = server as unknown as ViteDevServerLike\n      let timer: ReturnType<typeof setTimeout> | null = null\n\n      const fireInvalidation = (): void => {\n        timer = null\n        for (const mod of srv.moduleGraph.idToModuleMap.values()) {\n          const normalizedId = mod.id.replace(/\\\\/g, '/')\n          if (normalizedId.startsWith(routesDirPosix)) {\n            srv.moduleGraph.invalidateModule(mod)\n          }\n        }\n        srv.ws.send({ type: 'full-reload' })\n      }\n\n      const scheduleInvalidation = (filePath: string): void => {\n        if (!isUnderRoutes(filePath)) return\n        if (timer !== null) clearTimeout(timer)\n        timer = setTimeout(fireInvalidation, debounceMs)\n      }\n\n      srv.watcher.on('add', scheduleInvalidation)\n      srv.watcher.on('change', scheduleInvalidation)\n      srv.watcher.on('unlink', scheduleInvalidation)\n    },\n  }\n}\n"],"mappings":";;;;;AAoBA,SAAS,WAAW;AAuBb,SAAS,sBAAsB,MAA4C;AAChF,QAAM,YAAY,GAAG,KAAK,SAAS,GAAG,GAAG,SAAS,GAAG;AAErD,QAAM,iBAAiB,UAAU,QAAQ,OAAO,GAAG;AACnD,QAAM,aAAa,KAAK,cAAc;AAEtC,QAAM,gBAAgB,CAAC,aAA8B;AACnD,UAAM,aAAa,SAAS,QAAQ,OAAO,GAAG;AAC9C,WAAO,WAAW,WAAW,cAAc;AAAA,EAC7C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,gBAAgB,QAAuB;AACrC,YAAM,MAAM;AACZ,UAAI,QAA8C;AAElD,YAAM,mBAAmB,MAAY;AACnC,gBAAQ;AACR,mBAAW,OAAO,IAAI,YAAY,cAAc,OAAO,GAAG;AACxD,gBAAM,eAAe,IAAI,GAAG,QAAQ,OAAO,GAAG;AAC9C,cAAI,aAAa,WAAW,cAAc,GAAG;AAC3C,gBAAI,YAAY,iBAAiB,GAAG;AAAA,UACtC;AAAA,QACF;AACA,YAAI,GAAG,KAAK,EAAE,MAAM,cAAc,CAAC;AAAA,MACrC;AAEA,YAAM,uBAAuB,CAAC,aAA2B;AACvD,YAAI,CAAC,cAAc,QAAQ,EAAG;AAC9B,YAAI,UAAU,KAAM,cAAa,KAAK;AACtC,gBAAQ,WAAW,kBAAkB,UAAU;AAAA,MACjD;AAEA,UAAI,QAAQ,GAAG,OAAO,oBAAoB;AAC1C,UAAI,QAAQ,GAAG,UAAU,oBAAoB;AAC7C,UAAI,QAAQ,GAAG,UAAU,oBAAoB;AAAA,IAC/C;AAAA,EACF;AACF;","names":[]}

package/dist/server-routes-hmr-PBHSKCQJ.js

@@ -0,0 +1,42 @@
+import "./chunk-DGUM43GV.js";
+
+// src/vite-plugin/server-routes-hmr.ts
+import { sep } from "path";
+function serverRoutesHmrPlugin(opts) {
+  const routesDir = `${opts.serverDir}${sep}routes${sep}`;
+  const routesDirPosix = routesDir.replace(/\\/g, "/");
+  const debounceMs = opts.debounceMs ?? 50;
+  const isUnderRoutes = (filePath) => {
+    const normalized = filePath.replace(/\\/g, "/");
+    return normalized.startsWith(routesDirPosix);
+  };
+  return {
+    name: "theokit:server-routes-hmr",
+    configureServer(server) {
+      const srv = server;
+      let timer = null;
+      const fireInvalidation = () => {
+        timer = null;
+        for (const mod of srv.moduleGraph.idToModuleMap.values()) {
+          const normalizedId = mod.id.replace(/\\/g, "/");
+          if (normalizedId.startsWith(routesDirPosix)) {
+            srv.moduleGraph.invalidateModule(mod);
+          }
+        }
+        srv.ws.send({ type: "full-reload" });
+      };
+      const scheduleInvalidation = (filePath) => {
+        if (!isUnderRoutes(filePath)) return;
+        if (timer !== null) clearTimeout(timer);
+        timer = setTimeout(fireInvalidation, debounceMs);
+      };
+      srv.watcher.on("add", scheduleInvalidation);
+      srv.watcher.on("change", scheduleInvalidation);
+      srv.watcher.on("unlink", scheduleInvalidation);
+    }
+  };
+}
+export {
+  serverRoutesHmrPlugin
+};
+//# sourceMappingURL=server-routes-hmr-PBHSKCQJ.js.map

package/dist/server-routes-hmr-PBHSKCQJ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vite-plugin/server-routes-hmr.ts"],"sourcesContent":["/**\n * G6 T1.2 — Vite plugin: watch `server/routes/**` and invalidate SSR module\n * cache on add/change/unlink with a 50 ms debounce window.\n *\n * Plan: .claude/knowledge-base/plans/g6-router-convention-plan.md v1.1\n *\n * Pattern reference: SvelteKit `exports/vite/dev/index.js:335-398`.\n *\n * Why this exists: in dev, `scanServerRoutes` runs per-request (fresh disk\n * read), so adding/removing routes already takes effect on next request.\n * But the SSR dynamic-import cache holds stale code for EDITED routes — Vite\n * needs an explicit `invalidateModule` call to bust it. We also send a\n * `full-reload` so any browser code that imported a route module\n * (rare, but the typed client G1 does this for ts-only type resolution)\n * picks up the change.\n *\n * EC-6: 50 ms debounce collapses bursty file events (e.g., codemod-driven\n * 21-rename storm in T2.1) into a single invalidation cycle — without it,\n * 21 invalidations + 21 full-reloads in 5 s would hang the dev server.\n */\nimport { sep } from 'node:path'\n\nimport type { Plugin, ViteDevServer } from 'vite'\n\nexport interface ServerRoutesHmrPluginOptions {\n  /** Absolute path of the consumer's `server/` directory. */\n  serverDir: string\n  /** Debounce window in milliseconds (default 50 ms per EC-6). */\n  debounceMs?: number\n}\n\ninterface ModuleGraphLike {\n  getModuleById: (id: string) => unknown\n  invalidateModule: (mod: unknown) => void\n  idToModuleMap: Map<string, { id: string }>\n}\n\ninterface ViteDevServerLike {\n  watcher: { on: (event: string, listener: (path: string) => void) => void }\n  moduleGraph: ModuleGraphLike\n  ws: { send: (payload: { type: string }) => void }\n}\n\nexport function serverRoutesHmrPlugin(opts: ServerRoutesHmrPluginOptions): Plugin {\n  const routesDir = `${opts.serverDir}${sep}routes${sep}`\n  // Cross-platform: on Windows the watcher MAY emit forward slashes even on NTFS.\n  const routesDirPosix = routesDir.replace(/\\\\/g, '/')\n  const debounceMs = opts.debounceMs ?? 50\n\n  const isUnderRoutes = (filePath: string): boolean => {\n    const normalized = filePath.replace(/\\\\/g, '/')\n    return normalized.startsWith(routesDirPosix)\n  }\n\n  return {\n    name: 'theokit:server-routes-hmr',\n\n    configureServer(server: ViteDevServer) {\n      const srv = server as unknown as ViteDevServerLike\n      let timer: ReturnType<typeof setTimeout> | null = null\n\n      const fireInvalidation = (): void => {\n        timer = null\n        for (const mod of srv.moduleGraph.idToModuleMap.values()) {\n          const normalizedId = mod.id.replace(/\\\\/g, '/')\n          if (normalizedId.startsWith(routesDirPosix)) {\n            srv.moduleGraph.invalidateModule(mod)\n          }\n        }\n        srv.ws.send({ type: 'full-reload' })\n      }\n\n      const scheduleInvalidation = (filePath: string): void => {\n        if (!isUnderRoutes(filePath)) return\n        if (timer !== null) clearTimeout(timer)\n        timer = setTimeout(fireInvalidation, debounceMs)\n      }\n\n      srv.watcher.on('add', scheduleInvalidation)\n      srv.watcher.on('change', scheduleInvalidation)\n      srv.watcher.on('unlink', scheduleInvalidation)\n    },\n  }\n}\n"],"mappings":";;;AAoBA,SAAS,WAAW;AAuBb,SAAS,sBAAsB,MAA4C;AAChF,QAAM,YAAY,GAAG,KAAK,SAAS,GAAG,GAAG,SAAS,GAAG;AAErD,QAAM,iBAAiB,UAAU,QAAQ,OAAO,GAAG;AACnD,QAAM,aAAa,KAAK,cAAc;AAEtC,QAAM,gBAAgB,CAAC,aAA8B;AACnD,UAAM,aAAa,SAAS,QAAQ,OAAO,GAAG;AAC9C,WAAO,WAAW,WAAW,cAAc;AAAA,EAC7C;AAEA,SAAO;AAAA,IACL,MAAM;AAAA,IAEN,gBAAgB,QAAuB;AACrC,YAAM,MAAM;AACZ,UAAI,QAA8C;AAElD,YAAM,mBAAmB,MAAY;AACnC,gBAAQ;AACR,mBAAW,OAAO,IAAI,YAAY,cAAc,OAAO,GAAG;AACxD,gBAAM,eAAe,IAAI,GAAG,QAAQ,OAAO,GAAG;AAC9C,cAAI,aAAa,WAAW,cAAc,GAAG;AAC3C,gBAAI,YAAY,iBAAiB,GAAG;AAAA,UACtC;AAAA,QACF;AACA,YAAI,GAAG,KAAK,EAAE,MAAM,cAAc,CAAC;AAAA,MACrC;AAEA,YAAM,uBAAuB,CAAC,aAA2B;AACvD,YAAI,CAAC,cAAc,QAAQ,EAAG;AAC9B,YAAI,UAAU,KAAM,cAAa,KAAK;AACtC,gBAAQ,WAAW,kBAAkB,UAAU;AAAA,MACjD;AAEA,UAAI,QAAQ,GAAG,OAAO,oBAAoB;AAC1C,UAAI,QAAQ,GAAG,UAAU,oBAAoB;AAC7C,UAAI,QAAQ,GAAG,UAAU,oBAAoB;AAAA,IAC/C;AAAA,EACF;AACF;","names":[]}

package/dist/{start-R7XSQL5L.js → start-HX3QUSOS.js}

@@ -25,12 +25,12 @@ import "./chunk-X4JAX2U3.js";
 import "./chunk-WZ7CPVQB.js";
 import {
   loadManifest
-} from "./chunk-BE2LKDI7.js";
+} from "./chunk-TRH2L3FI.js";
 import {
   matchRoute,
   scanServerRoutes,
   scanWebSocketRoutes
-} from "./chunk-SNDZQ64K.js";
+} from "./chunk-OXIQI2XZ.js";
 import {
   scanServerActions
 } from "./chunk-5OFPQK6N.js";
@@ -47,7 +47,7 @@ import { resolve } from "path";
 async function configureAgentRegistryFromConfig(registryConfig) {
   if (registryConfig === void 0) return;
   try {
-    const sdk = await import("./dist-E6BL4ZVY.js").catch(() => null);
+    const sdk = await import("./dist-5V77Z223.js").catch(() => null);
     const sdkConfigure = sdk?.Agent?.registry?.configure;
     if (sdkConfigure === void 0) return;
     const { configureAgentRegistryOnce } = await import("./configure-agent-registry-6YGTJYBC.js");
@@ -101,7 +101,7 @@ function installGracefulShutdown(server) {
   [theokit] ${signal} received \u2014 evicting agents`);
     void (async () => {
       try {
-        const sdk = await import("./dist-E6BL4ZVY.js").catch(() => null);
+        const sdk = await import("./dist-5V77Z223.js").catch(() => null);
         if (sdk?.Agent?.registry?.evictAll !== void 0) {
           await sdk.Agent.registry.evictAll();
         }
@@ -612,4 +612,4 @@ export {
   resolveSsrEntry,
   startCommand
 };
-//# sourceMappingURL=start-R7XSQL5L.js.map
+//# sourceMappingURL=start-HX3QUSOS.js.map

package/dist/vite-plugin/index.js

@@ -5,11 +5,11 @@ import {
   defineTheoIntegration,
   theoPlugin,
   theoPluginAsync
-} from "../chunk-5OKZY2VL.js";
+} from "../chunk-BIGBFZSU.js";
 import "../chunk-7BIM27LV.js";
 import "../chunk-O4BLVPML.js";
 import "../chunk-CZM6WWWS.js";
-import "../chunk-2BQYEBCK.js";
+import "../chunk-B6RP57M3.js";
 import "../chunk-7TOMTMHT.js";
 import "../chunk-PB4GR7EP.js";
 import "../chunk-GY5Q27BJ.js";

package/dist/{vite-plugin-6MPHTKIW.js → vite-plugin-IK3NOWXS.js}

@@ -7,14 +7,14 @@ import {
   defineTheoIntegration,
   theoPlugin,
   theoPluginAsync
-} from "./chunk-X2OLD264.js";
+} from "./chunk-JAAHOGKI.js";
 import "./chunk-TPCT3MXV.js";
 import "./chunk-XP7YXRHO.js";
 import "./chunk-X4JAX2U3.js";
 import "./chunk-5ODOE6EF.js";
 import "./chunk-O7335ZGH.js";
 import "./chunk-WZ7CPVQB.js";
-import "./chunk-SNDZQ64K.js";
+import "./chunk-OXIQI2XZ.js";
 import "./chunk-5OFPQK6N.js";
 import "./chunk-KT3MWNZG.js";
 export {
@@ -25,4 +25,4 @@ export {
   theoPlugin,
   theoPluginAsync
 };
-//# sourceMappingURL=vite-plugin-6MPHTKIW.js.map
+//# sourceMappingURL=vite-plugin-IK3NOWXS.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "theokit",
-  "version": "0.2.4",
+  "version": "0.4.0-beta.0",
   "type": "module",
   "license": "Apache-2.0",
   "bin": {
@@ -104,7 +104,7 @@
     "pg": "^8.21.0",
     "pg-mem": "^3.0.14",
     "unstorage": "^1.10.0",
-    "@theokit/sdk": "1.5.0"
+    "@theokit/sdk": "1.6.2"
   },
   "scripts": {
     "build": "tsup"

package/dist/chunk-2BQYEBCK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/server/scan/match.ts","../src/server/scan/scan.ts","../src/server/scan/detect-http-methods.ts","../src/server/scan/ws-scan.ts"],"sourcesContent":["export interface ServerRouteNode {\n  filePath: string\n  routePath: string\n  paramNames: string[]\n  pattern: RegExp\n  /** HTTP methods (uppercase) the route file exports. Optional for backward\n   * compatibility with manifests generated before G1. Empty array means the\n   * file has no HTTP exports (util-only); undefined means \"not detected\". */\n  methods?: string[]\n}\n\nexport function compilePattern(routePath: string): {\n  pattern: RegExp\n  paramNames: string[]\n} {\n  const paramNames: string[] = []\n  // Single pass: handle both catch-all (:...name) and regular (:name) params\n  const regexStr = routePath.replace(/:(?:\\.\\.\\.)?([^/]+)/g, (match: string, name: string) => {\n    paramNames.push(name)\n    // Catch-all matches across slashes, regular matches single segment\n    return match.startsWith(':...') ? '(.+)' : '([^/]+)'\n  })\n  // `regexStr` is derived from a developer-authored route path (build-time\n  // input, not HTTP-controlled). The `security/detect-non-literal-regexp`\n  // rule cannot see this constraint — disable narrowly.\n  // eslint-disable-next-line security/detect-non-literal-regexp -- route pattern from build-time scan, never HTTP input\n  return { pattern: new RegExp(`^${regexStr}$`), paramNames }\n}\n\nexport function matchRoute(\n  url: string,\n  routes: ServerRouteNode[],\n): { route: ServerRouteNode; params: Record<string, string> } | null {\n  // Strip query string and trailing slash\n  let path = url.split('?')[0]\n  if (path.length > 1 && path.endsWith('/')) {\n    path = path.slice(0, -1)\n  }\n\n  for (const route of routes) {\n    const match = route.pattern.exec(path)\n    if (match) {\n      const params: Record<string, string> = {}\n      route.paramNames.forEach((name, i) => {\n        params[name] = match[i + 1]\n      })\n      return { route, params }\n    }\n  }\n  return null\n}\n","/* eslint-disable security/detect-non-literal-fs-filename --\n * Build-time scanner: walks `serverDir/routes/` derived from cwd.\n * No HTTP input ever reaches these fs calls.\n */\nimport { existsSync, statSync } from 'node:fs'\nimport { extname, join, relative } from 'node:path'\n\nimport { walkSourceFiles } from '../_internal/scan-walker.js'\n\nimport { detectExportedHttpMethods } from './detect-http-methods.js'\nimport { compilePattern, type ServerRouteNode } from './match.js'\n\nconst ROUTE_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx'])\n\nfunction fileToRoutePath(filePath: string, routesDir: string): string {\n  let rel = relative(routesDir, filePath)\n  // Strip extension\n  const ext = extname(rel)\n  rel = rel.slice(0, -ext.length)\n  // Normalize separators\n  rel = rel.replace(/\\\\/g, '/')\n  // Strip index suffix\n  if (rel.endsWith('/index')) {\n    rel = rel.slice(0, -6)\n  } else if (rel === 'index') {\n    rel = ''\n  }\n  // Replace [...param] with :...param (catch-all, before regular params).\n  // Replace [param] with :param. Inputs are file paths bounded by the\n  // OS filename limit; the bracket capture is bounded by `]`.\n  rel = rel.replace(/\\[\\.\\.\\.([^\\]]+)\\]/g, ':...$1')\n  // eslint-disable-next-line sonarjs/slow-regex -- bounded by `]`; input is a single filename\n  rel = rel.replace(/\\[([^\\]]+)\\]/g, ':$1')\n  return `/api/${rel}`\n}\n\nexport function scanServerRoutes(serverDir: string): ServerRouteNode[] {\n  const routesDir = join(serverDir, 'routes')\n  if (!existsSync(routesDir) || !statSync(routesDir).isDirectory()) {\n    return []\n  }\n\n  const results: ServerRouteNode[] = []\n  walkSourceFiles(routesDir, { extensions: ROUTE_EXTENSIONS }, (absPath) => {\n    const routePath = fileToRoutePath(absPath, routesDir)\n    const { pattern, paramNames } = compilePattern(routePath)\n    const methods = detectExportedHttpMethods(absPath)\n    results.push({\n      filePath: absPath,\n      routePath,\n      paramNames,\n      pattern,\n      methods,\n    })\n  })\n\n  // T1.4 / EC-2 — refuse to scan if a user route collides with the reserved\n  // batch endpoint path. User must rename or disable batching.\n  const conflicting = results.find((r) => r.routePath === '/api/__theo_batch__')\n  if (conflicting) {\n    throw new Error(\n      `Server route ${conflicting.filePath} resolves to '/api/__theo_batch__' which is reserved for the batch endpoint. Rename the route or disable batching in theo.config.ts.`,\n    )\n  }\n\n  // Sort: static first, then dynamic, then catch-all last\n  const isCatchAll = (route: ServerRouteNode) => route.routePath.includes(':...')\n  results.sort((a, b) => {\n    const aStatic = a.paramNames.length === 0\n    const bStatic = b.paramNames.length === 0\n    const aCatchAll = isCatchAll(a)\n    const bCatchAll = isCatchAll(b)\n\n    // Static routes first\n    if (aStatic && !bStatic) return -1\n    if (!aStatic && bStatic) return 1\n    // Catch-all routes last\n    if (aCatchAll && !bCatchAll) return 1\n    if (!aCatchAll && bCatchAll) return -1\n    return a.routePath.localeCompare(b.routePath)\n  })\n\n  return results\n}\n","/**\n * Detect which HTTP-method named exports a route file declares.\n *\n * Uses the TypeScript compiler API (not regex) per G1 edge-case review EC-4:\n * regex over file content emits false positives for `// export const GET = ...`\n * in comments and `` `export const GET = ...` `` in template literals. AST\n * walking avoids both classes of bug.\n *\n * `typescript` ships as CommonJS with internal dynamic `require('fs')`.\n * When loaded via ESM `import`, the dynamic requires fail at module-bootstrap.\n * We use `createRequire(import.meta.url)` to keep the package on its native\n * CJS path. The type-only namespace import gives us the AST helpers shape.\n *\n * Returns the set of HTTP methods (uppercase) the file exports. Empty array\n * means the file has no HTTP exports (the route file is util-only).\n */\n\nimport { readFileSync } from 'node:fs'\nimport { createRequire } from 'node:module'\n\nimport type * as TS from 'typescript'\n\nimport { HTTP_METHODS, type HttpMethod } from '../../core/contracts/http-methods.js'\n\nconst require_ = createRequire(import.meta.url)\n// eslint-disable-next-line @typescript-eslint/no-require-imports\nconst ts = require_('typescript') as typeof TS\n\nconst HTTP_METHOD_NAMES = new Set<string>(HTTP_METHODS)\n\nfunction hasExportModifier(modifiers: readonly TS.Modifier[] | undefined): boolean {\n  if (!modifiers) return false\n  for (const m of modifiers) {\n    if (m.kind === ts.SyntaxKind.ExportKeyword) return true\n  }\n  return false\n}\n\nfunction collectFromStatement(stmt: TS.Statement, found: Set<HttpMethod>): void {\n  // `export const GET = ...` / `export function GET ...` / `export async function GET ...`\n  if (ts.isVariableStatement(stmt) && hasExportModifier(ts.getModifiers(stmt))) {\n    for (const decl of stmt.declarationList.declarations) {\n      if (ts.isIdentifier(decl.name) && HTTP_METHOD_NAMES.has(decl.name.text)) {\n        found.add(decl.name.text as HttpMethod)\n      }\n    }\n    return\n  }\n\n  if (\n    (ts.isFunctionDeclaration(stmt) || ts.isClassDeclaration(stmt)) &&\n    hasExportModifier(ts.getModifiers(stmt))\n  ) {\n    if (stmt.name && HTTP_METHOD_NAMES.has(stmt.name.text)) {\n      found.add(stmt.name.text as HttpMethod)\n    }\n    return\n  }\n\n  // `export { GET }` / `export { handler as GET } from './shared'` (EC-5)\n  if (ts.isExportDeclaration(stmt) && stmt.exportClause && ts.isNamedExports(stmt.exportClause)) {\n    for (const spec of stmt.exportClause.elements) {\n      // spec.name is the exported (re-)name; spec.propertyName is the original (when renamed)\n      if (HTTP_METHOD_NAMES.has(spec.name.text)) {\n        found.add(spec.name.text as HttpMethod)\n      }\n    }\n  }\n}\n\nexport function detectExportedHttpMethods(filePath: string, content?: string): HttpMethod[] {\n  const src = content ?? readFileSync(filePath, 'utf-8')\n  const sourceFile = ts.createSourceFile(\n    filePath,\n    src,\n    ts.ScriptTarget.Latest,\n    /* setParentNodes */ false,\n    ts.ScriptKind.TS,\n  )\n  const found = new Set<HttpMethod>()\n  for (const stmt of sourceFile.statements) {\n    collectFromStatement(stmt, found)\n  }\n  return [...found].sort()\n}\n","/* eslint-disable security/detect-non-literal-fs-filename --\n * Build-time scanner: walks `serverDir/ws/` derived from cwd.\n * No HTTP input ever reaches these fs calls.\n */\nimport { existsSync, statSync } from 'node:fs'\nimport { extname, join, relative } from 'node:path'\n\nimport { walkSourceFiles } from '../_internal/scan-walker.js'\n\nconst WS_EXTENSIONS = new Set(['.ts', '.tsx', '.js', '.jsx'])\n\nexport interface WebSocketRouteNode {\n  filePath: string\n  wsPath: string\n}\n\nexport function scanWebSocketRoutes(serverDir: string): WebSocketRouteNode[] {\n  const wsDir = join(serverDir, 'ws')\n  if (!existsSync(wsDir) || !statSync(wsDir).isDirectory()) {\n    return []\n  }\n\n  const results: WebSocketRouteNode[] = []\n  walkSourceFiles(wsDir, { extensions: WS_EXTENSIONS }, (absPath) => {\n    let rel = relative(wsDir, absPath)\n    rel = rel.replace(/\\\\/g, '/')\n    rel = rel.slice(0, -extname(rel).length)\n    if (rel.endsWith('/index')) rel = rel.slice(0, -6)\n    else if (rel === 'index') rel = ''\n    results.push({\n      filePath: absPath,\n      wsPath: `/ws/${rel}`,\n    })\n  })\n  return results\n}\n"],"mappings":";;;;;;;;AAWO,SAAS,eAAe,WAG7B;AACA,QAAM,aAAuB,CAAC;AAE9B,QAAM,WAAW,UAAU,QAAQ,wBAAwB,CAAC,OAAe,SAAiB;AAC1F,eAAW,KAAK,IAAI;AAEpB,WAAO,MAAM,WAAW,MAAM,IAAI,SAAS;AAAA,EAC7C,CAAC;AAKD,SAAO,EAAE,SAAS,IAAI,OAAO,IAAI,QAAQ,GAAG,GAAG,WAAW;AAC5D;AAEO,SAAS,WACd,KACA,QACmE;AAEnE,MAAI,OAAO,IAAI,MAAM,GAAG,EAAE,CAAC;AAC3B,MAAI,KAAK,SAAS,KAAK,KAAK,SAAS,GAAG,GAAG;AACzC,WAAO,KAAK,MAAM,GAAG,EAAE;AAAA,EACzB;AAEA,aAAW,SAAS,QAAQ;AAC1B,UAAM,QAAQ,MAAM,QAAQ,KAAK,IAAI;AACrC,QAAI,OAAO;AACT,YAAM,SAAiC,CAAC;AACxC,YAAM,WAAW,QAAQ,CAAC,MAAM,MAAM;AACpC,eAAO,IAAI,IAAI,MAAM,IAAI,CAAC;AAAA,MAC5B,CAAC;AACD,aAAO,EAAE,OAAO,OAAO;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AACT;;;AC9CA,SAAS,YAAY,gBAAgB;AACrC,SAAS,SAAS,MAAM,gBAAgB;;;ACYxC,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAM9B,IAAM,WAAW,cAAc,YAAY,GAAG;AAE9C,IAAM,KAAK,SAAS,YAAY;AAEhC,IAAM,oBAAoB,IAAI,IAAY,YAAY;AAEtD,SAAS,kBAAkB,WAAwD;AACjF,MAAI,CAAC,UAAW,QAAO;AACvB,aAAW,KAAK,WAAW;AACzB,QAAI,EAAE,SAAS,GAAG,WAAW,cAAe,QAAO;AAAA,EACrD;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,MAAoB,OAA8B;AAE9E,MAAI,GAAG,oBAAoB,IAAI,KAAK,kBAAkB,GAAG,aAAa,IAAI,CAAC,GAAG;AAC5E,eAAW,QAAQ,KAAK,gBAAgB,cAAc;AACpD,UAAI,GAAG,aAAa,KAAK,IAAI,KAAK,kBAAkB,IAAI,KAAK,KAAK,IAAI,GAAG;AACvE,cAAM,IAAI,KAAK,KAAK,IAAkB;AAAA,MACxC;AAAA,IACF;AACA;AAAA,EACF;AAEA,OACG,GAAG,sBAAsB,IAAI,KAAK,GAAG,mBAAmB,IAAI,MAC7D,kBAAkB,GAAG,aAAa,IAAI,CAAC,GACvC;AACA,QAAI,KAAK,QAAQ,kBAAkB,IAAI,KAAK,KAAK,IAAI,GAAG;AACtD,YAAM,IAAI,KAAK,KAAK,IAAkB;AAAA,IACxC;AACA;AAAA,EACF;AAGA,MAAI,GAAG,oBAAoB,IAAI,KAAK,KAAK,gBAAgB,GAAG,eAAe,KAAK,YAAY,GAAG;AAC7F,eAAW,QAAQ,KAAK,aAAa,UAAU;AAE7C,UAAI,kBAAkB,IAAI,KAAK,KAAK,IAAI,GAAG;AACzC,cAAM,IAAI,KAAK,KAAK,IAAkB;AAAA,MACxC;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,0BAA0B,UAAkB,SAAgC;AAC1F,QAAM,MAAM,WAAW,aAAa,UAAU,OAAO;AACrD,QAAM,aAAa,GAAG;AAAA,IACpB;AAAA,IACA;AAAA,IACA,GAAG,aAAa;AAAA;AAAA,IACK;AAAA,IACrB,GAAG,WAAW;AAAA,EAChB;AACA,QAAM,QAAQ,oBAAI,IAAgB;AAClC,aAAW,QAAQ,WAAW,YAAY;AACxC,yBAAqB,MAAM,KAAK;AAAA,EAClC;AACA,SAAO,CAAC,GAAG,KAAK,EAAE,KAAK;AACzB;;;ADxEA,IAAM,mBAAmB,oBAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,MAAM,CAAC;AAE/D,SAAS,gBAAgB,UAAkB,WAA2B;AACpE,MAAI,MAAM,SAAS,WAAW,QAAQ;AAEtC,QAAM,MAAM,QAAQ,GAAG;AACvB,QAAM,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM;AAE9B,QAAM,IAAI,QAAQ,OAAO,GAAG;AAE5B,MAAI,IAAI,SAAS,QAAQ,GAAG;AAC1B,UAAM,IAAI,MAAM,GAAG,EAAE;AAAA,EACvB,WAAW,QAAQ,SAAS;AAC1B,UAAM;AAAA,EACR;AAIA,QAAM,IAAI,QAAQ,uBAAuB,QAAQ;AAEjD,QAAM,IAAI,QAAQ,iBAAiB,KAAK;AACxC,SAAO,QAAQ,GAAG;AACpB;AAEO,SAAS,iBAAiB,WAAsC;AACrE,QAAM,YAAY,KAAK,WAAW,QAAQ;AAC1C,MAAI,CAAC,WAAW,SAAS,KAAK,CAAC,SAAS,SAAS,EAAE,YAAY,GAAG;AAChE,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,UAA6B,CAAC;AACpC,kBAAgB,WAAW,EAAE,YAAY,iBAAiB,GAAG,CAAC,YAAY;AACxE,UAAM,YAAY,gBAAgB,SAAS,SAAS;AACpD,UAAM,EAAE,SAAS,WAAW,IAAI,eAAe,SAAS;AACxD,UAAM,UAAU,0BAA0B,OAAO;AACjD,YAAQ,KAAK;AAAA,MACX,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAID,QAAM,cAAc,QAAQ,KAAK,CAAC,MAAM,EAAE,cAAc,qBAAqB;AAC7E,MAAI,aAAa;AACf,UAAM,IAAI;AAAA,MACR,gBAAgB,YAAY,QAAQ;AAAA,IACtC;AAAA,EACF;AAGA,QAAM,aAAa,CAAC,UAA2B,MAAM,UAAU,SAAS,MAAM;AAC9E,UAAQ,KAAK,CAAC,GAAG,MAAM;AACrB,UAAM,UAAU,EAAE,WAAW,WAAW;AACxC,UAAM,UAAU,EAAE,WAAW,WAAW;AACxC,UAAM,YAAY,WAAW,CAAC;AAC9B,UAAM,YAAY,WAAW,CAAC;AAG9B,QAAI,WAAW,CAAC,QAAS,QAAO;AAChC,QAAI,CAAC,WAAW,QAAS,QAAO;AAEhC,QAAI,aAAa,CAAC,UAAW,QAAO;AACpC,QAAI,CAAC,aAAa,UAAW,QAAO;AACpC,WAAO,EAAE,UAAU,cAAc,EAAE,SAAS;AAAA,EAC9C,CAAC;AAED,SAAO;AACT;;;AE/EA,SAAS,cAAAA,aAAY,YAAAC,iBAAgB;AACrC,SAAS,WAAAC,UAAS,QAAAC,OAAM,YAAAC,iBAAgB;AAIxC,IAAM,gBAAgB,oBAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,MAAM,CAAC;AAOrD,SAAS,oBAAoB,WAAyC;AAC3E,QAAM,QAAQC,MAAK,WAAW,IAAI;AAClC,MAAI,CAACC,YAAW,KAAK,KAAK,CAACC,UAAS,KAAK,EAAE,YAAY,GAAG;AACxD,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,UAAgC,CAAC;AACvC,kBAAgB,OAAO,EAAE,YAAY,cAAc,GAAG,CAAC,YAAY;AACjE,QAAI,MAAMC,UAAS,OAAO,OAAO;AACjC,UAAM,IAAI,QAAQ,OAAO,GAAG;AAC5B,UAAM,IAAI,MAAM,GAAG,CAACC,SAAQ,GAAG,EAAE,MAAM;AACvC,QAAI,IAAI,SAAS,QAAQ,EAAG,OAAM,IAAI,MAAM,GAAG,EAAE;AAAA,aACxC,QAAQ,QAAS,OAAM;AAChC,YAAQ,KAAK;AAAA,MACX,UAAU;AAAA,MACV,QAAQ,OAAO,GAAG;AAAA,IACpB,CAAC;AAAA,EACH,CAAC;AACD,SAAO;AACT;","names":["existsSync","statSync","extname","join","relative","join","existsSync","statSync","relative","extname"]}