theokit 0.5.4 → 0.6.1

package/dist/chunk-CCVC6P6B.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/adapters-bridge/adapter-support.ts","../src/services/generators/caddy-generator.ts","../src/services/generators/compose-generator.ts","../src/services/generators/openapi-client-gen.ts","../src/services/adapters-bridge/manifest.ts","../src/services/schema.ts","../src/services/runtime/orchestrator.ts","../src/services/runtime/healthcheck-poller.ts","../src/services/runtime/log-merge.ts","../src/services/runtime/process-spawn-helpers.ts","../src/services/adapters-bridge/theo-cloud-adapter-stub.ts","../src/services/adapters-bridge/vite-proxy-builder.ts"],"sourcesContent":["/**\n * Adapter support gates (Wave 2 — TheoCloud-first focus).\n *\n * Wave 2 SUPPORTS polyglot `services: {}` on TWO targets ONLY:\n *   - `node` (local docker-compose harness — TheoCloud-shaped)\n *   - `theo-cloud` (the principal deploy target — Wave 3 adapter)\n *\n * All other in-tree deploy adapters (vercel, cloudflare, bun, deno-deploy,\n * aws-lambda, netlify, static) ARE STILL FIRST-CLASS DEPLOY TARGETS for\n * the TS app, but `services: {}` Wave 2 is NOT yet wired through them.\n * They reject loudly with an actionable message when the manifest has\n * non-empty services — pointing the user at `node` (local) or TheoCloud.\n *\n * Per owner decision 2026-05-27: TheoKit's polyglot services energy is\n * 100% TheoCloud; Vercel/Cloudflare/etc. polyglot-services wire-ups are\n * out of Wave 2 scope and deferred to fresh ADRs if demand emerges.\n */\nimport type { ServicesManifest } from './manifest.js'\n\nconst SUPPORTED_IN_WAVE_2 = ['node (local)', 'theo-cloud (Wave 3)'] as const\n\n/**\n * Reject if the adapter does not support polyglot services. Adapters\n * outside `node` + `theo-cloud` call this; the message points to the\n * supported alternatives.\n *\n * Throws when manifest has non-empty services. No-op when manifest is null\n * or empty (Wave 1 BC — the app still deploys, just without sidecars).\n */\nexport function assertServicesUnsupported(\n  adapterName: string,\n  manifest: ServicesManifest | null,\n): void {\n  if (!manifest || manifest.services.length === 0) return\n  const names = manifest.services.map((s) => s.name).join(', ')\n  throw new Error(\n    `Adapter '${adapterName}' does not support polyglot services in Wave 2.\\n` +\n      `Detected services in theo.config.ts: ${names}.\\n\\n` +\n      `Wave 2 supports: ${SUPPORTED_IN_WAVE_2.join(', ')}.\\n` +\n      `TheoCloud is the strategic deploy target — the adapter ships in Wave 3.\\n` +\n      `For local dev/prod-like validation today, use \\`theokit build --target node\\`\\n` +\n      `(emits docker-compose + Caddyfile — TheoCloud-shaped harness).\\n\\n` +\n      `See docs/concepts/services.md.`,\n  )\n}\n","/**\n * Caddyfile generator (T3.3).\n *\n * Emits a Caddyfile that fronts the TheoKit web app + declared services\n * with W3C trace context propagation enabled (Caddy 2.11+ `tracing` directive).\n *\n * Generated output sits at `<dist>/.theokit/node/Caddyfile`, consumed by the\n * docker-compose stack (T3.3 compose-generator).\n *\n * EC-23: `reverse_proxy` directives are ordered by prefix length DESC.\n * Caddy matches longest-prefix-first when written in order.\n */\nimport type { ServicesManifest } from '../adapters-bridge/manifest.js'\n\nexport interface CaddyfileOptions {\n  /** Port Caddy listens on (TheoKit web port; default 3000). */\n  port: number\n  /** TheoKit web container hostname (compose service name). Default 'web'. */\n  webHost: string\n}\n\nfunction reverseProxyLines(servicePath: string, target: string, cors: boolean): string[] {\n  const out = [`\\treverse_proxy ${servicePath}* ${target}`]\n  if (cors) {\n    out.push(\n      `\\theader ${servicePath}* Access-Control-Allow-Origin \"*\"`,\n      `\\theader ${servicePath}* Access-Control-Allow-Methods \"GET, POST, PUT, DELETE, OPTIONS\"`,\n      `\\theader ${servicePath}* Access-Control-Allow-Headers \"Content-Type, Authorization, traceparent, tracestate, baggage\"`,\n    )\n  }\n  return out\n}\n\nexport function generateCaddyfile(\n  manifest: ServicesManifest | null,\n  options: CaddyfileOptions,\n): string {\n  // EC-23: sort services by proxy prefix length DESC so longest matches first\n  const services = (manifest?.services ?? [])\n    .slice()\n    .sort((a, b) => b.proxy.length - a.proxy.length)\n\n  const serviceLines = services.flatMap((svc) =>\n    reverseProxyLines(svc.proxy, `${svc.name}:${String(svc.port)}`, svc.cors),\n  )\n\n  const lines: string[] = [\n    `:${String(options.port)} {`,\n    `\\t# W3C Trace Context propagation (Caddy 2.11+)`,\n    `\\ttracing`,\n    `\\theader -Server`,\n    ...serviceLines,\n    `\\treverse_proxy ${options.webHost}:${String(options.port)}`,\n    `}`,\n    '',\n  ]\n  return lines.join('\\n')\n}\n","/**\n * docker-compose.yml generator (T3.3).\n *\n * Emits the \"TheoCloud-shaped\" local harness — Caddy ingress in front of\n * web + declared services. Each service has a healthcheck and Caddy\n * `depends_on: service_healthy`.\n *\n * Used by the Node adapter: `theokit build --target node` writes the\n * compose stack to `.theokit/node/docker-compose.yml`.\n */\nimport type { ManifestServiceEntry, ServicesManifest } from '../adapters-bridge/manifest.js'\n\nexport interface ComposeOptions {\n  /** Port for the web container (TheoKit). Default 3000. */\n  webPort: number\n  /** Caddy listening port (default same as webPort — Caddy fronts everything). */\n  caddyPort?: number\n  /** Project name (compose file `name:` field). */\n  projectName?: string\n}\n\nfunction indent(level: number): string {\n  return '  '.repeat(level)\n}\n\nfunction healthcheckLines(svc: ManifestServiceEntry): string[] {\n  const checker =\n    svc.runtime === 'python'\n      ? `curl -f http://localhost:${String(svc.port)}${svc.healthcheck} || exit 1`\n      : `wget --spider -q http://localhost:${String(svc.port)}${svc.healthcheck} || exit 1`\n  return [\n    `${indent(2)}healthcheck:`,\n    `${indent(3)}test: [\"CMD-SHELL\", \"${checker}\"]`,\n    `${indent(3)}interval: 10s`,\n    `${indent(3)}timeout: 5s`,\n    `${indent(3)}retries: 3`,\n  ]\n}\n\nfunction envLines(env: Record<string, string>): string[] {\n  const lines: string[] = [`${indent(2)}environment:`]\n  for (const [k, v] of Object.entries(env)) {\n    lines.push(`${indent(3)}${k}: ${JSON.stringify(v)}`)\n  }\n  return lines\n}\n\nfunction serviceBlockLines(svc: ManifestServiceEntry): string[] {\n  // EC-8: auto-inject convention env vars in the container too\n  const env: Record<string, string> = {\n    THEOKIT_SERVICE_NAME: svc.name,\n    THEOKIT_SERVICE_PORT: String(svc.port),\n    ...(svc.env ?? {}),\n  }\n  return [\n    `${indent(1)}${svc.name}:`,\n    `${indent(2)}build:`,\n    `${indent(3)}context: ./services/${svc.name}`,\n    `${indent(2)}expose:`,\n    `${indent(3)}- \"${String(svc.port)}\"`,\n    ...envLines(env),\n    ...healthcheckLines(svc),\n  ]\n}\n\nfunction caddyBlockLines(caddyPort: number, services: ManifestServiceEntry[]): string[] {\n  const depends: string[] = [\n    `${indent(2)}depends_on:`,\n    `${indent(3)}web:`,\n    `${indent(4)}condition: service_healthy`,\n  ]\n  for (const svc of services) {\n    depends.push(`${indent(3)}${svc.name}:`, `${indent(4)}condition: service_healthy`)\n  }\n  return [\n    `${indent(1)}caddy:`,\n    `${indent(2)}image: caddy:2.11`,\n    `${indent(2)}ports:`,\n    `${indent(3)}- \"${String(caddyPort)}:${String(caddyPort)}\"`,\n    `${indent(2)}volumes:`,\n    `${indent(3)}- ./Caddyfile:/etc/caddy/Caddyfile:ro`,\n    ...depends,\n  ]\n}\n\nfunction webBlockLines(webPort: number): string[] {\n  return [\n    `${indent(1)}web:`,\n    `${indent(2)}build:`,\n    `${indent(3)}context: .`,\n    `${indent(3)}dockerfile: Dockerfile`,\n    `${indent(2)}expose:`,\n    `${indent(3)}- \"${String(webPort)}\"`,\n    `${indent(2)}healthcheck:`,\n    `${indent(3)}test: [\"CMD-SHELL\", \"wget --spider -q http://localhost:${String(webPort)}/api/health || exit 1\"]`,\n    `${indent(3)}interval: 10s`,\n    `${indent(3)}timeout: 5s`,\n    `${indent(3)}retries: 3`,\n  ]\n}\n\nexport function generateComposeYaml(\n  manifest: ServicesManifest | null,\n  options: ComposeOptions,\n): string {\n  const services = manifest?.services ?? []\n  const webPort = options.webPort\n  const caddyPort = options.caddyPort ?? webPort\n\n  const projectLines = options.projectName ? [`name: ${options.projectName}`] : []\n\n  const lines: string[] = [\n    ...projectLines,\n    `services:`,\n    ...caddyBlockLines(caddyPort, services),\n    ...webBlockLines(webPort),\n    ...services.flatMap(serviceBlockLines),\n    '',\n  ]\n  return lines.join('\\n')\n}\n","/**\n * OpenAPI → TypeScript client generation (T5.1).\n *\n * Thin wrapper around `@hey-api/openapi-ts` (the de facto 2026 generator\n * used by Vercel/OpenCode/PayPal). Called by the Vite plugin\n * `services-typed-client.ts` at dev startup and when an OpenAPI URL\n * changes.\n *\n * Production behavior:\n *  - For each service with a `openapi` URL, fetch the spec\n *  - Run Hey API generator to write `<cwd>/clients/<service-name>.ts`\n *  - On any failure: log warning, do NOT crash dev (best-effort)\n *\n * The actual `@hey-api/openapi-ts` invocation is dynamic-imported so\n * that consumers without the dep (TS-only Wave 1 apps) don't pay\n * the bundle cost.\n */\nimport type { ManifestServiceEntry } from '../adapters-bridge/manifest.js'\n\nexport interface GenerateClientOptions {\n  service: ManifestServiceEntry\n  /** Directory to write `<service-name>.ts` into. */\n  outputDir: string\n  /** Logger for warnings/info. */\n  log?: (level: 'info' | 'warn' | 'error', msg: string) => void\n  /** Test injection — replace fetch (so tests don't hit the network). */\n  customFetch?: typeof fetch\n}\n\nexport interface GenerateClientResult {\n  generated: boolean\n  outputFile?: string\n  skippedReason?: string\n}\n\n/**\n * Generate a typed client for one service. No-op (returns skipped=true)\n * if the service has no `openapi` URL.\n *\n * The generator runs the Hey API tool. If the tool import fails (not\n * installed), the function logs a warning and returns `{ generated: false }`.\n */\nexport async function generateTypedClient(\n  options: GenerateClientOptions,\n): Promise<GenerateClientResult> {\n  const log =\n    options.log ??\n    ((_level: 'info' | 'warn' | 'error', _msg: string) => {\n      // default: silent in production; tests inject their own\n    })\n  const { service, outputDir } = options\n\n  if (!service.openapi) {\n    return { generated: false, skippedReason: 'no openapi URL declared' }\n  }\n\n  const f = options.customFetch ?? fetch\n  let spec: unknown\n  try {\n    const res = await f(service.openapi)\n    if (!res.ok) {\n      log('warn', `[${service.name}] openapi fetch returned ${String(res.status)}; skipping`)\n      return { generated: false, skippedReason: `fetch returned ${String(res.status)}` }\n    }\n    spec = await res.json()\n  } catch (err) {\n    log(\n      'warn',\n      `[${service.name}] openapi fetch failed: ${err instanceof Error ? err.message : String(err)}`,\n    )\n    return { generated: false, skippedReason: 'fetch failed' }\n  }\n\n  // Dynamic import — soft dep. We pass through a variable so the typechecker\n  // doesn't resolve the literal at build time (the dep is optional;\n  // consumers without it get a graceful skip).\n  let createClient: unknown\n  try {\n    // Soft-dep resolution. We pass the module name through a String wrapper\n    // call site that the typechecker cannot statically resolve — so missing\n    // dep at typecheck time does not break the build. Runtime behavior is\n    // identical to `import('@hey-api/openapi-ts')`.\n    const segment1 = '@hey-api/'\n    const segment2 = 'openapi-ts'\n    const moduleName = `${segment1}${segment2}`\n    const dyn: Promise<unknown> = import(moduleName).catch(() => null)\n    const mod = (await dyn) as { createClient?: unknown } | null\n    createClient = mod?.createClient\n  } catch {\n    createClient = undefined\n  }\n\n  if (typeof createClient !== 'function') {\n    log(\n      'warn',\n      `[${service.name}] @hey-api/openapi-ts not installed; typed client not generated. ` +\n        `Run \\`pnpm add -D @hey-api/openapi-ts @hey-api/client-fetch\\` to enable.`,\n    )\n    return { generated: false, skippedReason: 'hey-api not installed' }\n  }\n\n  const outputFile = `${outputDir}/${service.name}.ts`\n  try {\n    await (createClient as (cfg: unknown) => Promise<unknown>)({\n      input: spec,\n      output: { path: outputDir, format: 'prettier' },\n      plugins: [{ name: '@hey-api/client-fetch' }],\n    })\n    log('info', `[${service.name}] typed client generated at ${outputFile}`)\n    return { generated: true, outputFile }\n  } catch (err) {\n    log(\n      'warn',\n      `[${service.name}] Hey API generation failed: ${err instanceof Error ? err.message : String(err)}`,\n    )\n    return { generated: false, skippedReason: 'generator threw' }\n  }\n}\n","/**\n * Neutral cross-product manifest (T1.4).\n *\n * Emitted by `theokit build` at `<cwd>/.theokit/services.json` (schemaVersion 1).\n * Consumed by EVERY deploy adapter (Vercel, Node, Cloudflare, future TheoCloud).\n *\n * Shape is INTENTIONALLY platform-neutral (ADR-0015 invariant + D5). No\n * `vercel`/`cloudflare`/`theoCloud` keys — platform-specific tuning lives in\n * `theo.config.ts` and is read by each adapter's own code, NOT serialized\n * into this manifest.\n *\n * Topological ordering enforced (dependsOn-resolved deps first) so adapters\n * that need boot order (docker-compose, K8s) can consume the array verbatim.\n */\n/* eslint-disable security/detect-non-literal-fs-filename --\n * Manifest read/write paths are derived from the trusted `cwd` plus a fixed\n * subpath (`.theokit/services.json`). No user input flows into the path.\n */\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs'\nimport { dirname, join } from 'node:path'\n\nimport type { ServiceDefinition, ServicesConfig } from '../schema.js'\n\n/**\n * Plan v1.2 T2.2 — service shape enum, mirrored from\n * `theo-cloud/api/internal/source/services.schema.json`. Optional in\n * services.json v2; TheoCloud Go-side defaults to `server` when absent.\n */\n// `frontend` removed in simplify-deploy-theokit-only v2.0 (D5) — TheoCloud\n// serves no static frontends; service shape is server | worker only.\nexport type ManifestServiceType = 'server' | 'worker'\n\nexport interface ManifestServiceEntry {\n  name: string\n  runtime: 'python' | 'node'\n  /** Plan v1.2 T2.2 — service shape. Omit to keep default `server`. */\n  type?: ManifestServiceType\n  port: number\n  proxy: string\n  dev: string\n  build?: string\n  start: string\n  openapi?: string\n  healthcheck: string\n  cors: boolean\n  env?: Record<string, string>\n  dependsOn?: string[]\n  passSetCookie: boolean\n}\n\n/**\n * Plan v1.2 T2.1 — services.json now ships in 2 shapes:\n *\n *   v1 (deprecated, sunset theokit 0.6.0): { version: 1, services: [...] }\n *   v2 (current):                          { version: 2, project: <name>, services: [...] }\n *\n * `buildManifest()` selects which version to emit based on whether a\n * project name is supplied. Consumers (TheoCloud Go-side validator)\n * accept both via the JSON Schema 7 `oneOf` block.\n */\nexport interface ServicesManifestV1 {\n  version: 1\n  services: ManifestServiceEntry[]\n}\n\nexport interface ServicesManifestV2 {\n  version: 2\n  project: string\n  services: ManifestServiceEntry[]\n}\n\nexport type ServicesManifest = ServicesManifestV1 | ServicesManifestV2\n\nconst MANIFEST_RELATIVE_PATH = ['.theokit', 'services.json'] as const\n\n/**\n * Topological sort using Kahn's algorithm.\n * Returns service names in dependency order (deps before dependants).\n * Schema validation guarantees no cycles, no self-deps, no missing references —\n * but we still defensively handle missing deps as no-op.\n */\nfunction topoSort(services: ServicesConfig): string[] {\n  const names = Object.keys(services)\n  const indeg: Record<string, number> = Object.fromEntries(names.map((n) => [n, 0]))\n  const adj: Record<string, string[]> = Object.fromEntries(names.map((n) => [n, []]))\n\n  const cmp = (a: string, b: string) => a.localeCompare(b)\n\n  for (const name of names) {\n    const deps = services[name].dependsOn ?? []\n    for (const dep of deps) {\n      if (!(dep in indeg)) continue\n      adj[dep].push(name)\n      indeg[name] = (indeg[name] ?? 0) + 1\n    }\n  }\n\n  // Sort initial roots for determinism\n  const queue: string[] = names.filter((n) => indeg[n] === 0).sort(cmp)\n  const result: string[] = []\n  while (queue.length > 0) {\n    const cur = queue.shift()\n    if (cur === undefined) break\n    result.push(cur)\n    const adjacent = (adj[cur] ?? []).slice().sort(cmp)\n    for (const next of adjacent) {\n      indeg[next] = (indeg[next] ?? 0) - 1\n      if (indeg[next] === 0) {\n        queue.push(next)\n      }\n    }\n  }\n  return result.length === names.length ? result : names // fallback (should not hit; schema rejects cycles)\n}\n\nfunction definitionToEntry(name: string, def: ServiceDefinition): ManifestServiceEntry {\n  const entry: ManifestServiceEntry = {\n    name,\n    runtime: def.runtime,\n    port: def.port,\n    proxy: def.proxy,\n    dev: def.dev,\n    start: def.start,\n    healthcheck: def.healthcheck,\n    cors: def.cors,\n    passSetCookie: def.passSetCookie,\n  }\n  // Plan v1.2 T2.2 — only emit `type` when explicitly set so v1 fixtures\n  // (no type field at all) stay byte-identical.\n  if (def.type !== undefined) entry.type = def.type\n  if (def.build !== undefined) entry.build = def.build\n  if (def.openapi !== undefined) entry.openapi = def.openapi\n  if (def.env !== undefined) entry.env = def.env\n  if (def.dependsOn !== undefined) entry.dependsOn = [...def.dependsOn]\n  return entry\n}\n\n/**\n * Build a services manifest. Plan v1.2 T2.1: pass a `project` name to emit\n * v2; omit it to emit v1 (deprecated, accepted by TheoCloud until 0.6.0\n * sunset).\n */\nexport function buildManifest(services: ServicesConfig, project?: string): ServicesManifest {\n  const ordered = topoSort(services)\n  const entries = ordered.map((name) => definitionToEntry(name, services[name]))\n  if (project !== undefined && project.length > 0) {\n    return { version: 2, project, services: entries }\n  }\n  return { version: 1, services: entries }\n}\n\nfunction manifestPath(cwd: string): string {\n  return join(cwd, ...MANIFEST_RELATIVE_PATH)\n}\n\n/**\n * Write the manifest to `<cwd>/.theokit/services.json`.\n *\n * EC-6 fix: creates `.theokit/` recursively if absent (fresh project on first\n * `pnpm build` would otherwise hit ENOENT).\n */\nexport function writeManifest(cwd: string, manifest: ServicesManifest): void {\n  const file = manifestPath(cwd)\n  mkdirSync(dirname(file), { recursive: true })\n  writeFileSync(file, JSON.stringify(manifest, null, 2), 'utf-8')\n}\n\n/**\n * Read the manifest from `<cwd>/.theokit/services.json`.\n *\n * Returns null if the file does not exist (adapter's job to handle).\n * Throws with an actionable message if the file is malformed JSON.\n */\nexport function readManifest(cwd: string): ServicesManifest | null {\n  const file = manifestPath(cwd)\n  if (!existsSync(file)) return null\n  const raw = readFileSync(file, 'utf-8')\n  try {\n    return JSON.parse(raw) as ServicesManifest\n  } catch (err) {\n    throw new Error(\n      `failed to parse services.json at ${file}: ${\n        err instanceof Error ? err.message : String(err)\n      }`,\n    )\n  }\n}\n","/**\n * Wave 2 — Polyglot Services Orchestration (T1.1).\n *\n * Declarative `services: {}` primitive for `theo.config.ts`. Each entry\n * declares an external sidecar process (Python FastAPI / Node Hono) that\n * boots alongside the TheoKit TS app. Empty `services: {}` is the default\n * and preserves Wave 1 behavior (no impact on TS-only apps).\n *\n * See ADRs 0012-0015 + plan: docs/plans/wave-2-polyglot-services-plan.md\n */\nimport { z } from 'zod'\n\n/** Wave 2 runtime kinds. Go/Rust/Java/Ruby/PHP archived; deferred per ADR-0012 invariant #2/#3. */\nconst ServiceRuntimeSchema = z.enum(['python', 'node'])\n\n/**\n * Service shape enum, mirrored from `services.schema.json`: server | worker.\n * Optional; emitters default to \"server\". `frontend` removed in\n * simplify-deploy-theokit-only v2.0 (D5) — TheoCloud serves no static frontends.\n */\nconst ServiceTypeSchema = z.enum(['server', 'worker'])\n\n/** EC-3 fix: names that conflict with generated docker-compose entries. */\nconst RESERVED_SERVICE_NAMES = ['web', 'caddy', 'postgres', 'redis'] as const\n\n/**\n * EC-12 fix: service names must be docker-compose-safe — lowercase,\n * start with a letter, contain only a-z 0-9 -. Reserved names rejected.\n */\nconst ServiceNameSchema = z\n  .string()\n  .min(1)\n  .regex(\n    /^[a-z][a-z0-9-]*$/,\n    'service name must be lowercase, start with letter, contain only a-z 0-9 -',\n  )\n  .refine((n) => !(RESERVED_SERVICE_NAMES as readonly string[]).includes(n), {\n    message: `service name conflicts with reserved name (${RESERVED_SERVICE_NAMES.join('/')})`,\n  })\n\n/**\n * Single service definition. All commands run from `services/<name>/` cwd.\n *\n * EC-4 fix: `proxy` regex requires NON-EMPTY path after `/` (the `+` quantifier)\n * to reject `/` which would catch-all and conflict with TheoKit's own routing.\n */\nconst ServiceDefinitionSchema = z.object({\n  runtime: ServiceRuntimeSchema,\n  type: ServiceTypeSchema.optional(),\n  port: z.number().int().min(1).max(65535),\n  proxy: z.string().regex(/^\\/[a-zA-Z0-9\\-_/]+$/, 'proxy must be a non-root path starting with /'),\n  dev: z.string().min(1),\n  build: z.string().optional(),\n  start: z.string().min(1),\n  openapi: z.url().optional(),\n  healthcheck: z.string().regex(/^\\//, 'healthcheck must start with /').default('/health'),\n  cors: z.boolean().default(false),\n  env: z.record(z.string(), z.string()).optional(),\n  dependsOn: z.array(z.string()).optional(),\n  /**\n   * EC-25 + ref doc §8: by default the proxy strips upstream Set-Cookie\n   * to prevent the polyglot service from issuing cookies that conflict\n   * with TheoKit's encrypted session. Set to true to opt-in.\n   */\n  passSetCookie: z.boolean().default(false),\n})\n\nexport type ServiceDefinition = z.infer<typeof ServiceDefinitionSchema>\nexport type ServicesConfig = Record<string, ServiceDefinition>\n\n/**\n * Topological-order helper used by `dependsOn` cycle detection refine.\n * Returns true iff `graph` is a DAG. Each node's deps must all reference\n * existing nodes; cycles return false.\n */\nfunction isDag(graph: Record<string, readonly string[]>): boolean {\n  const WHITE = 0\n  const GRAY = 1\n  const BLACK = 2\n  const colors: Record<string, 0 | 1 | 2> = {}\n  for (const node of Object.keys(graph)) colors[node] = WHITE\n\n  function visit(node: string): boolean {\n    if (colors[node] === GRAY) return false // cycle\n    if (colors[node] === BLACK) return true\n    colors[node] = GRAY\n    for (const dep of graph[node] ?? []) {\n      if (!(dep in graph)) return false // missing reference\n      if (!visit(dep)) return false\n    }\n    colors[node] = BLACK\n    return true\n  }\n\n  for (const node of Object.keys(graph)) {\n    if (colors[node] === WHITE && !visit(node)) return false\n  }\n  return true\n}\n\n/**\n * Full services config schema with cross-service refines.\n *\n * EC-1 fix: detect duplicate ports across services.\n * EC-13: empty `dependsOn: []` accepted as no-deps.\n * Self-dep, missing-ref, and cycles rejected via topological check.\n */\nexport const servicesConfigSchema = z\n  .record(ServiceNameSchema, ServiceDefinitionSchema)\n  .default({})\n  // EC-1: duplicate port detection across services\n  .refine(\n    (s) => {\n      const ports = Object.values(s).map((v) => v.port)\n      return new Set(ports).size === ports.length\n    },\n    {\n      message: 'duplicate port across services — each service must bind a unique port',\n    },\n  )\n  // duplicate proxy prefix detection\n  .refine(\n    (s) => {\n      const prefixes = Object.values(s).map((v) => v.proxy)\n      return new Set(prefixes).size === prefixes.length\n    },\n    { message: 'duplicate proxy prefix across services' },\n  )\n  // dependsOn correctness (self-dep, missing reference, cycle)\n  .refine(\n    (s) => {\n      // Build graph\n      const graph: Record<string, readonly string[]> = {}\n      for (const [name, def] of Object.entries(s)) {\n        graph[name] = def.dependsOn ?? []\n      }\n      // Self-dep: a service mentioning itself is rejected as part of cycle detection\n      for (const [name, deps] of Object.entries(graph)) {\n        if (deps.includes(name)) return false\n      }\n      return isDag(graph)\n    },\n    {\n      message: 'invalid dependsOn — must reference existing services, no self-deps, no cycles',\n    },\n  )\n\nexport type ServicesConfigInput = z.input<typeof servicesConfigSchema>\nexport type ServicesConfigOutput = z.output<typeof servicesConfigSchema>\n","/**\n * Dev orchestration entry point (T2.4).\n *\n * Spawns declared polyglot services, waits for all healthchecks to pass,\n * then signals readiness. The `theokit dev` CLI calls `orchestrateDev`\n * BEFORE starting Vite — Vite only boots after all services healthy.\n *\n * Empty `services: {}` → no-op (Wave 1 BC).\n *\n * Single composable entry that the CLI consumes. Spawn/healthcheck/log\n * primitives live in their own modules; this file ties them together.\n */\nimport type { ChildProcess, SpawnOptions } from 'node:child_process'\nimport { spawn } from 'node:child_process'\nimport { resolve } from 'node:path'\n\nimport type { ServiceDefinition, ServicesConfig } from '../schema.js'\n\nimport { pollHealthcheck } from './healthcheck-poller.js'\nimport { createLogMerger } from './log-merge.js'\nimport { buildSpawnEnv, installLifecycleHandlers } from './process-spawn-helpers.js'\n\nexport interface SpawnedService {\n  name: string\n  port: number\n  process: ChildProcess\n}\n\nexport interface OrchestrateDevOptions {\n  cwd: string\n  services: ServicesConfig\n  /** Defaults to `process.stdout.write.bind(process.stdout)`. */\n  write?: (s: string) => void\n  /** Test injection — replace child_process.spawn. */\n  spawnFn?: typeof spawn\n  /** Test injection — replace global fetch (for healthchecks). */\n  customFetch?: typeof fetch\n  /** Healthcheck timeout per service. Default 30_000. */\n  healthcheckTimeoutMs?: number\n  /** Whether to install parent lifecycle handlers (EC-7). Default true. */\n  installSignalHandlers?: boolean\n}\n\nexport interface OrchestrateDevResult {\n  spawned: SpawnedService[]\n  /** Whether ALL services passed healthcheck. */\n  allHealthy: boolean\n  /** Services that timed out (only populated when !allHealthy). */\n  unhealthy: string[]\n  /** Call to gracefully stop all spawned services. */\n  stop: () => Promise<void>\n}\n\nfunction spawnService(\n  name: string,\n  service: ServiceDefinition,\n  cwd: string,\n  options: {\n    spawnFn: typeof spawn\n    onLog: (s: string, stream: 'stdout' | 'stderr', line: string) => void\n  },\n): SpawnedService {\n  const env = buildSpawnEnv(name, service, process.env)\n  const spawnOpts: SpawnOptions = {\n    cwd,\n    shell: true,\n    env,\n    stdio: ['ignore', 'pipe', 'pipe'],\n  }\n  const child = options.spawnFn(service.dev, spawnOpts)\n  child.stdout?.setEncoding('utf-8')\n  child.stderr?.setEncoding('utf-8')\n  child.stdout?.on('data', (chunk: string) => {\n    options.onLog(name, 'stdout', chunk)\n  })\n  child.stderr?.on('data', (chunk: string) => {\n    options.onLog(name, 'stderr', chunk)\n  })\n  return { name, port: service.port, process: child }\n}\n\nasync function stopSpawned(s: SpawnedService): Promise<void> {\n  return new Promise<void>((resolve) => {\n    if (s.process.killed || s.process.exitCode !== null) {\n      resolve()\n      return\n    }\n    const timer = setTimeout(() => {\n      s.process.kill('SIGKILL')\n      resolve()\n    }, 5_000)\n    s.process.once('exit', () => {\n      clearTimeout(timer)\n      resolve()\n    })\n    s.process.kill('SIGTERM')\n  })\n}\n\nexport async function orchestrateDev(\n  options: OrchestrateDevOptions,\n): Promise<OrchestrateDevResult> {\n  const entries = Object.entries(options.services)\n  if (entries.length === 0) {\n    return {\n      spawned: [],\n      allHealthy: true,\n      unhealthy: [],\n      stop: () => Promise.resolve(),\n    }\n  }\n\n  const write =\n    options.write ??\n    ((s: string) => {\n      process.stdout.write(s)\n    })\n  const spawnFn = options.spawnFn ?? spawn\n  const merger = createLogMerger({ write })\n\n  const spawned: SpawnedService[] = entries.map(([name, def]) =>\n    spawnService(name, def, resolve(options.cwd, 'services', name), {\n      spawnFn,\n      onLog: merger.onLog,\n    }),\n  )\n\n  const stop = async (): Promise<void> => {\n    await Promise.all(spawned.map(stopSpawned))\n  }\n\n  if (options.installSignalHandlers !== false) {\n    installLifecycleHandlers(process, stop)\n  }\n\n  // Parallel healthcheck\n  const results = await Promise.all(\n    entries.map(([name, def]) =>\n      pollHealthcheck({\n        url: `http://localhost:${String(def.port)}${def.healthcheck}`,\n        timeoutMs: options.healthcheckTimeoutMs ?? 30_000,\n        intervalMs: 500,\n        customFetch: options.customFetch,\n      }).then((r) => ({ name, result: r })),\n    ),\n  )\n\n  const unhealthy = results.filter((r) => !r.result.healthy).map((r) => r.name)\n  return {\n    spawned,\n    allHealthy: unhealthy.length === 0,\n    unhealthy,\n    stop,\n  }\n}\n","/**\n * Healthcheck poller (T1.5).\n *\n * Polls `GET <url>` with backoff until 200 OR timeout. Used by `pnpm dev`\n * (T2.4) to gate readiness on declared services being healthy before\n * starting Vite.\n *\n * Invariants:\n *  - Returns within `timeoutMs + intervalMs` (no hang)\n *  - Never throws (returns `{ healthy: false }` on any error)\n *  - `attempts >= 1` always\n *  - Respects external AbortSignal (pre-aborted → immediate return, EC-18)\n */\n\nexport interface HealthcheckOptions {\n  /** Full URL to poll, e.g. 'http://localhost:8001/health' */\n  url: string\n  /** Total time budget in ms. Default 30_000. */\n  timeoutMs?: number\n  /** Sleep between attempts in ms. Default 500. */\n  intervalMs?: number\n  /** Optional external cancel. Aborted signal causes early return. */\n  signal?: AbortSignal\n  /** Test injection — replace global fetch. */\n  customFetch?: typeof fetch\n}\n\nexport interface HealthcheckResult {\n  healthy: boolean\n  attempts: number\n  durationMs: number\n  lastError?: string\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise<void>((resolve) => {\n    if (signal?.aborted) {\n      resolve()\n      return\n    }\n    const t = setTimeout(() => {\n      resolve()\n    }, ms)\n    signal?.addEventListener(\n      'abort',\n      () => {\n        clearTimeout(t)\n        resolve()\n      },\n      { once: true },\n    )\n  })\n}\n\nexport async function pollHealthcheck(options: HealthcheckOptions): Promise<HealthcheckResult> {\n  const timeoutMs = options.timeoutMs ?? 30_000\n  const intervalMs = options.intervalMs ?? 500\n  const f = options.customFetch ?? fetch\n  const start = Date.now()\n  let attempts = 0\n  let lastError: string | undefined\n\n  // EC-18: signal already aborted → return immediately with at least 1 attempt counted\n  if (options.signal?.aborted) {\n    return {\n      healthy: false,\n      attempts: 1,\n      durationMs: Date.now() - start,\n      lastError: 'aborted',\n    }\n  }\n\n  // Infinite poll loop terminated by status === 200 OR timeout OR abort.\n  for (;;) {\n    if (options.signal?.aborted) {\n      return {\n        healthy: false,\n        attempts: Math.max(attempts, 1),\n        durationMs: Date.now() - start,\n        lastError: 'aborted',\n      }\n    }\n    attempts++\n    try {\n      const res = await f(options.url, { method: 'GET', signal: options.signal })\n      if (res.status === 200) {\n        return { healthy: true, attempts, durationMs: Date.now() - start }\n      }\n      lastError = `status ${res.status}`\n    } catch (err) {\n      lastError = err instanceof Error ? err.message : String(err)\n    }\n\n    if (Date.now() - start >= timeoutMs) {\n      return {\n        healthy: false,\n        attempts,\n        durationMs: Date.now() - start,\n        lastError,\n      }\n    }\n    await sleep(intervalMs, options.signal)\n  }\n}\n","/**\n * Log merger (T2.3).\n *\n * Combines stdout/stderr from multiple polyglot services into TheoKit's\n * dev terminal, prefixed with `[service-name]`. Parses JSON-line logs\n * (ADR-0015 invariant #5) for pretty-printing; falls back to raw line on\n * non-JSON.\n *\n * Pure / synchronous. The Vite plugin (T2.1) wires this as the `onLog`\n * callback passed to spawnServices.\n */\n\ninterface LogEntry {\n  level?: string\n  message?: string\n  timestamp?: string\n  traceparent?: string\n  service?: string\n}\n\nexport interface LogMergerOptions {\n  write: (s: string) => void\n}\n\nexport interface LogMerger {\n  onLog: (service: string, stream: 'stdout' | 'stderr', chunk: string) => void\n}\n\n/**\n * Try to parse a log line as JSON. Returns parsed object on success,\n * undefined on failure (will fall back to raw rendering).\n */\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\n  return v !== null && typeof v === 'object' && !Array.isArray(v)\n}\n\nfunction tryParseJson(line: string): LogEntry | undefined {\n  const trimmed = line.trim()\n  if (!trimmed.startsWith('{')) return undefined\n  try {\n    const parsed: unknown = JSON.parse(trimmed)\n    if (!isPlainObject(parsed)) return undefined\n    const entry: LogEntry = {}\n    if (typeof parsed.level === 'string') entry.level = parsed.level\n    if (typeof parsed.message === 'string') entry.message = parsed.message\n    if (typeof parsed.timestamp === 'string') entry.timestamp = parsed.timestamp\n    if (typeof parsed.traceparent === 'string') entry.traceparent = parsed.traceparent\n    if (typeof parsed.service === 'string') entry.service = parsed.service\n    return entry\n  } catch {\n    return undefined\n  }\n}\n\nfunction renderLine(\n  service: string,\n  stream: 'stdout' | 'stderr',\n  line: string,\n  write: (s: string) => void,\n): void {\n  if (line.length === 0) return\n\n  const prefix = `[${service}]`\n  const streamMarker = stream === 'stderr' ? '!' : ' '\n\n  const parsed = tryParseJson(line)\n  if (parsed) {\n    const level = parsed.level ?? 'info'\n    const msg = parsed.message ?? line\n    write(`${prefix}${streamMarker}${level.toUpperCase()} ${msg}\\n`)\n    return\n  }\n\n  write(`${prefix}${streamMarker}${line}\\n`)\n}\n\nexport function createLogMerger(options: LogMergerOptions): LogMerger {\n  return {\n    onLog(service, stream, chunk) {\n      // Multi-line chunks: split by \\n and render each\n      const lines = chunk.split('\\n')\n      for (const line of lines) {\n        renderLine(service, stream, line, options.write)\n      }\n    },\n  }\n}\n","/**\n * Pure helpers extracted from process-spawn.ts (T2.2) for unit testability.\n *\n * The full spawn orchestration (child_process + healthcheck poll + log\n * merge) lives in process-spawn.ts; this file holds the parts that are\n * safe to test without mocking node:child_process.\n *\n * EC-7: lifecycle handlers prevent orphan children on parent exit/signal.\n * EC-8: auto-injected env vars (THEOKIT_SERVICE_NAME, THEOKIT_SERVICE_PORT).\n */\nimport type { ServiceDefinition } from '../schema.js'\n\n/**\n * Build the env passed to `child_process.spawn`.\n *\n * Precedence (low → high):\n *   1. process.env (the parent's environment)\n *   2. auto-injected THEOKIT_SERVICE_NAME + THEOKIT_SERVICE_PORT\n *   3. service.env (user-provided overrides win)\n */\nexport function buildSpawnEnv(\n  name: string,\n  service: ServiceDefinition,\n  parentEnv: Record<string, string | undefined>,\n): Record<string, string> {\n  const env: Record<string, string> = {}\n  for (const [k, v] of Object.entries(parentEnv)) {\n    if (typeof v === 'string') env[k] = v\n  }\n  env.THEOKIT_SERVICE_NAME = name\n  env.THEOKIT_SERVICE_PORT = String(service.port)\n  if (service.env) {\n    for (const [k, v] of Object.entries(service.env)) {\n      env[k] = v\n    }\n  }\n  return env\n}\n\n/**\n * Format a service name as a log prefix. Deterministic; ANSI codes added\n * by the log-merge layer (T2.3), not here.\n */\nexport function formatLogPrefix(name: string): string {\n  return `[${name}]`\n}\n\n/**\n * Install parent-process lifecycle handlers (EC-7).\n *\n * - `exit`: best-effort SIGKILL of all children (synchronous; we cannot await here)\n * - `SIGINT`: graceful stopAllServices then exit 130\n * - `SIGTERM`: graceful stopAllServices then exit 143\n *\n * SIGKILL on the parent is uncatchable (kernel-level); orphan children\n * are documented as a known limit on force-close (EC-27 doc).\n */\nexport function installLifecycleHandlers(proc: NodeJS.Process, stopAll: () => Promise<void>): void {\n  proc.on('exit', () => {\n    // Best-effort sync notify; cannot await\n  })\n  proc.on('SIGINT', () => {\n    void stopAll().finally(() => {\n      proc.exit(130)\n    })\n  })\n  proc.on('SIGTERM', () => {\n    void stopAll().finally(() => {\n      proc.exit(143)\n    })\n  })\n}\n","/**\n * TheoCloud adapter scaffolding (T3.5 — Wave 2 stub; full Wave 3).\n *\n * Wave 2 establishes the contract: the adapter CONSUMES `.theokit/services.json`\n * (manifest emitted by `theokit build`) and produces TheoCloud deployment\n * artifacts. The artifacts themselves (K8s manifests, Helm charts, etc.) are\n * Wave 3 deliverables — this module provides the read/validate gate so the\n * manifest format is locked NOW.\n *\n * Per ADR-0012 invariant #4, the same `.theokit/services.json` consumed by\n * the `node` adapter (docker-compose generator) is the same shape consumed\n * here. No platform-specific fields. The contract is global.\n */\nimport type { ServicesManifest } from './manifest.js'\n\nexport interface TheoCloudAdapterArtifacts {\n  /** Manifest schemaVersion the adapter consumed. */\n  manifestVersion: 1\n  /** Service names that will be deployed. */\n  services: string[]\n  /** Wave 3 will populate K8s manifests here. */\n  k8sManifests?: never\n  /** Wave 3 will populate Helm values here. */\n  helmValues?: never\n}\n\n/**\n * Wave 2 stub — validates the manifest is consumable. Throws if shape is\n * unexpected (forward-compat guard for Wave 3 development).\n *\n * Wave 3 will replace the body with real K8s manifest emission.\n */\nexport function prepareTheoCloudArtifacts(\n  manifest: ServicesManifest | null,\n): TheoCloudAdapterArtifacts {\n  if (manifest === null) {\n    return { manifestVersion: 1, services: [] }\n  }\n  // Forward-compat: when Wave 3 evolves the manifest schema, the adapter\n  // must bump version handling explicitly.\n\n  if (manifest.version !== 1) {\n    throw new Error(\n      `TheoCloud adapter: unsupported manifest version ${String(manifest.version)}. ` +\n        `Wave 2/3 expects schemaVersion 1. Update the adapter before bumping.`,\n    )\n  }\n  return {\n    manifestVersion: 1,\n    services: manifest.services.map((s) => s.name),\n  }\n}\n","/**\n * Builds a Vite `server.proxy` configuration from TheoKit's\n * declarative `services: {}` config (T2.1).\n *\n * Pure function — no Vite imports, just data shaping. The Vite plugin\n * (services-dev.ts) calls this and merges the result into `vite.config.server.proxy`.\n *\n * Pattern follows Vite proxy reference (referencias/vite/packages/vite/src/node/server/middlewares/proxy.ts):\n *  - Each path prefix becomes its own entry\n *  - `changeOrigin: true` set by default (matches Vite's string-shortcut behavior)\n *  - User-set entries take precedence on prefix collision (we never clobber)\n */\nimport type { ServicesConfig } from '../schema.js'\n\n/**\n * Shape compatible with Vite's `server.proxy` type. We intentionally don't\n * import Vite's `ProxyOptions` so this module stays platform-neutral and\n * unit-testable without Vite.\n */\nexport interface ViteProxyEntry {\n  target: string\n  changeOrigin: boolean\n  rewrite?: (path: string) => string\n}\n\nexport type ViteProxyConfig = Record<string, string | ViteProxyEntry>\n\nexport function buildServicesProxyConfig(\n  services: ServicesConfig,\n  userProxy: ViteProxyConfig = {},\n): ViteProxyConfig {\n  const fromServices: ViteProxyConfig = {}\n  for (const [, def] of Object.entries(services)) {\n    const prefix = def.proxy\n    fromServices[prefix] = {\n      target: `http://localhost:${String(def.port)}`,\n      changeOrigin: true,\n      // Strip the service's `proxy` prefix from the upstream URL so the\n      // sidecar receives its own native paths (e.g. `/api/agent/echo` →\n      // `/echo`). The sidecar declares routes against its own root path —\n      // it doesn't know about the TheoKit proxy prefix.\n      rewrite: (path: string) =>\n        path.startsWith(prefix) ? path.slice(prefix.length) || '/' : path,\n    }\n  }\n  // User proxy wins on collision (we add services first, then spread user on top)\n  return { ...fromServices, ...userProxy }\n}\n"],"mappings":";;;;AAmBA,IAAM,sBAAsB,CAAC,gBAAgB,qBAAqB;AAU3D,SAAS,0BACd,aACA,UACM;AACN,MAAI,CAAC,YAAY,SAAS,SAAS,WAAW,EAAG;AACjD,QAAM,QAAQ,SAAS,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI;AAC5D,QAAM,IAAI;AAAA,IACR,YAAY,WAAW;AAAA,uCACmB,KAAK;AAAA;AAAA,mBACzB,oBAAoB,KAAK,IAAI,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtD;AACF;;;ACvBA,SAAS,kBAAkB,aAAqB,QAAgB,MAAyB;AACvF,QAAM,MAAM,CAAC,kBAAmB,WAAW,KAAK,MAAM,EAAE;AACxD,MAAI,MAAM;AACR,QAAI;AAAA,MACF,WAAY,WAAW;AAAA,MACvB,WAAY,WAAW;AAAA,MACvB,WAAY,WAAW;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,kBACd,UACA,SACQ;AAER,QAAM,YAAY,UAAU,YAAY,CAAC,GACtC,MAAM,EACN,KAAK,CAAC,GAAG,MAAM,EAAE,MAAM,SAAS,EAAE,MAAM,MAAM;AAEjD,QAAM,eAAe,SAAS;AAAA,IAAQ,CAAC,QACrC,kBAAkB,IAAI,OAAO,GAAG,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI;AAAA,EAC1E;AAEA,QAAM,QAAkB;AAAA,IACtB,IAAI,OAAO,QAAQ,IAAI,CAAC;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH,kBAAmB,QAAQ,OAAO,IAAI,OAAO,QAAQ,IAAI,CAAC;AAAA,IAC1D;AAAA,IACA;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;;;ACpCA,SAAS,OAAO,OAAuB;AACrC,SAAO,KAAK,OAAO,KAAK;AAC1B;AAEA,SAAS,iBAAiB,KAAqC;AAC7D,QAAM,UACJ,IAAI,YAAY,WACZ,4BAA4B,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,WAAW,eAC9D,qCAAqC,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,WAAW;AAC7E,SAAO;AAAA,IACL,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC,wBAAwB,OAAO;AAAA,IAC3C,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,EACd;AACF;AAEA,SAAS,SAAS,KAAuC;AACvD,QAAM,QAAkB,CAAC,GAAG,OAAO,CAAC,CAAC,cAAc;AACnD,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,GAAG,GAAG;AACxC,UAAM,KAAK,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,EAAE;AAAA,EACrD;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,KAAqC;AAE9D,QAAM,MAA8B;AAAA,IAClC,sBAAsB,IAAI;AAAA,IAC1B,sBAAsB,OAAO,IAAI,IAAI;AAAA,IACrC,GAAI,IAAI,OAAO,CAAC;AAAA,EAClB;AACA,SAAO;AAAA,IACL,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,IAAI;AAAA,IACvB,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC,uBAAuB,IAAI,IAAI;AAAA,IAC3C,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC,MAAM,OAAO,IAAI,IAAI,CAAC;AAAA,IAClC,GAAG,SAAS,GAAG;AAAA,IACf,GAAG,iBAAiB,GAAG;AAAA,EACzB;AACF;AAEA,SAAS,gBAAgB,WAAmB,UAA4C;AACtF,QAAM,UAAoB;AAAA,IACxB,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,EACd;AACA,aAAW,OAAO,UAAU;AAC1B,YAAQ,KAAK,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,GAAG,OAAO,CAAC,CAAC,4BAA4B;AAAA,EACnF;AACA,SAAO;AAAA,IACL,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC,MAAM,OAAO,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC;AAAA,IACxD,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG;AAAA,EACL;AACF;AAEA,SAAS,cAAc,SAA2B;AAChD,SAAO;AAAA,IACL,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC,MAAM,OAAO,OAAO,CAAC;AAAA,IACjC,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC,0DAA0D,OAAO,OAAO,CAAC;AAAA,IACrF,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,IACZ,GAAG,OAAO,CAAC,CAAC;AAAA,EACd;AACF;AAEO,SAAS,oBACd,UACA,SACQ;AACR,QAAM,WAAW,UAAU,YAAY,CAAC;AACxC,QAAM,UAAU,QAAQ;AACxB,QAAM,YAAY,QAAQ,aAAa;AAEvC,QAAM,eAAe,QAAQ,cAAc,CAAC,SAAS,QAAQ,WAAW,EAAE,IAAI,CAAC;AAE/E,QAAM,QAAkB;AAAA,IACtB,GAAG;AAAA,IACH;AAAA,IACA,GAAG,gBAAgB,WAAW,QAAQ;AAAA,IACtC,GAAG,cAAc,OAAO;AAAA,IACxB,GAAG,SAAS,QAAQ,iBAAiB;AAAA,IACrC;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;;;AC9EA,eAAsB,oBACpB,SAC+B;AAC/B,QAAM,MACJ,QAAQ,QACP,CAAC,QAAmC,SAAiB;AAAA,EAEtD;AACF,QAAM,EAAE,SAAS,UAAU,IAAI;AAE/B,MAAI,CAAC,QAAQ,SAAS;AACpB,WAAO,EAAE,WAAW,OAAO,eAAe,0BAA0B;AAAA,EACtE;AAEA,QAAM,IAAI,QAAQ,eAAe;AACjC,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,MAAM,EAAE,QAAQ,OAAO;AACnC,QAAI,CAAC,IAAI,IAAI;AACX,UAAI,QAAQ,IAAI,QAAQ,IAAI,4BAA4B,OAAO,IAAI,MAAM,CAAC,YAAY;AACtF,aAAO,EAAE,WAAW,OAAO,eAAe,kBAAkB,OAAO,IAAI,MAAM,CAAC,GAAG;AAAA,IACnF;AACA,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,SAAS,KAAK;AACZ;AAAA,MACE;AAAA,MACA,IAAI,QAAQ,IAAI,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC7F;AACA,WAAO,EAAE,WAAW,OAAO,eAAe,eAAe;AAAA,EAC3D;AAKA,MAAI;AACJ,MAAI;AAKF,UAAM,WAAW;AACjB,UAAM,WAAW;AACjB,UAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ;AACzC,UAAM,MAAwB,OAAO,YAAY,MAAM,MAAM,IAAI;AACjE,UAAM,MAAO,MAAM;AACnB,mBAAe,KAAK;AAAA,EACtB,QAAQ;AACN,mBAAe;AAAA,EACjB;AAEA,MAAI,OAAO,iBAAiB,YAAY;AACtC;AAAA,MACE;AAAA,MACA,IAAI,QAAQ,IAAI;AAAA,IAElB;AACA,WAAO,EAAE,WAAW,OAAO,eAAe,wBAAwB;AAAA,EACpE;AAEA,QAAM,aAAa,GAAG,SAAS,IAAI,QAAQ,IAAI;AAC/C,MAAI;AACF,UAAO,aAAoD;AAAA,MACzD,OAAO;AAAA,MACP,QAAQ,EAAE,MAAM,WAAW,QAAQ,WAAW;AAAA,MAC9C,SAAS,CAAC,EAAE,MAAM,wBAAwB,CAAC;AAAA,IAC7C,CAAC;AACD,QAAI,QAAQ,IAAI,QAAQ,IAAI,+BAA+B,UAAU,EAAE;AACvE,WAAO,EAAE,WAAW,MAAM,WAAW;AAAA,EACvC,SAAS,KAAK;AACZ;AAAA,MACE;AAAA,MACA,IAAI,QAAQ,IAAI,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAClG;AACA,WAAO,EAAE,WAAW,OAAO,eAAe,kBAAkB;AAAA,EAC9D;AACF;;;ACnGA,SAAS,YAAY,WAAW,cAAc,qBAAqB;AACnE,SAAS,SAAS,YAAY;AAsD9B,IAAM,yBAAyB,CAAC,YAAY,eAAe;AAQ3D,SAAS,SAAS,UAAoC;AACpD,QAAM,QAAQ,OAAO,KAAK,QAAQ;AAClC,QAAM,QAAgC,OAAO,YAAY,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AACjF,QAAM,MAAgC,OAAO,YAAY,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAElF,QAAM,MAAM,CAAC,GAAW,MAAc,EAAE,cAAc,CAAC;AAEvD,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,SAAS,IAAI,EAAE,aAAa,CAAC;AAC1C,eAAW,OAAO,MAAM;AACtB,UAAI,EAAE,OAAO,OAAQ;AACrB,UAAI,GAAG,EAAE,KAAK,IAAI;AAClB,YAAM,IAAI,KAAK,MAAM,IAAI,KAAK,KAAK;AAAA,IACrC;AAAA,EACF;AAGA,QAAM,QAAkB,MAAM,OAAO,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,GAAG;AACpE,QAAM,SAAmB,CAAC;AAC1B,SAAO,MAAM,SAAS,GAAG;AACvB,UAAM,MAAM,MAAM,MAAM;AACxB,QAAI,QAAQ,OAAW;AACvB,WAAO,KAAK,GAAG;AACf,UAAM,YAAY,IAAI,GAAG,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,GAAG;AAClD,eAAW,QAAQ,UAAU;AAC3B,YAAM,IAAI,KAAK,MAAM,IAAI,KAAK,KAAK;AACnC,UAAI,MAAM,IAAI,MAAM,GAAG;AACrB,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,SAAO,OAAO,WAAW,MAAM,SAAS,SAAS;AACnD;AAEA,SAAS,kBAAkB,MAAc,KAA8C;AACrF,QAAM,QAA8B;AAAA,IAClC;AAAA,IACA,SAAS,IAAI;AAAA,IACb,MAAM,IAAI;AAAA,IACV,OAAO,IAAI;AAAA,IACX,KAAK,IAAI;AAAA,IACT,OAAO,IAAI;AAAA,IACX,aAAa,IAAI;AAAA,IACjB,MAAM,IAAI;AAAA,IACV,eAAe,IAAI;AAAA,EACrB;AAGA,MAAI,IAAI,SAAS,OAAW,OAAM,OAAO,IAAI;AAC7C,MAAI,IAAI,UAAU,OAAW,OAAM,QAAQ,IAAI;AAC/C,MAAI,IAAI,YAAY,OAAW,OAAM,UAAU,IAAI;AACnD,MAAI,IAAI,QAAQ,OAAW,OAAM,MAAM,IAAI;AAC3C,MAAI,IAAI,cAAc,OAAW,OAAM,YAAY,CAAC,GAAG,IAAI,SAAS;AACpE,SAAO;AACT;AAOO,SAAS,cAAc,UAA0B,SAAoC;AAC1F,QAAM,UAAU,SAAS,QAAQ;AACjC,QAAM,UAAU,QAAQ,IAAI,CAAC,SAAS,kBAAkB,MAAM,SAAS,IAAI,CAAC,CAAC;AAC7E,MAAI,YAAY,UAAa,QAAQ,SAAS,GAAG;AAC/C,WAAO,EAAE,SAAS,GAAG,SAAS,UAAU,QAAQ;AAAA,EAClD;AACA,SAAO,EAAE,SAAS,GAAG,UAAU,QAAQ;AACzC;AAEA,SAAS,aAAa,KAAqB;AACzC,SAAO,KAAK,KAAK,GAAG,sBAAsB;AAC5C;AAQO,SAAS,cAAc,KAAa,UAAkC;AAC3E,QAAM,OAAO,aAAa,GAAG;AAC7B,YAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,gBAAc,MAAM,KAAK,UAAU,UAAU,MAAM,CAAC,GAAG,OAAO;AAChE;AAQO,SAAS,aAAa,KAAsC;AACjE,QAAM,OAAO,aAAa,GAAG;AAC7B,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,QAAM,MAAM,aAAa,MAAM,OAAO;AACtC,MAAI;AACF,WAAO,KAAK,MAAM,GAAG;AAAA,EACvB,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,oCAAoC,IAAI,KACtC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CACjD;AAAA,IACF;AAAA,EACF;AACF;;;AChLA,SAAS,SAAS;AAGlB,IAAM,uBAAuB,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAOtD,IAAM,oBAAoB,EAAE,KAAK,CAAC,UAAU,QAAQ,CAAC;AAGrD,IAAM,yBAAyB,CAAC,OAAO,SAAS,YAAY,OAAO;AAMnE,IAAM,oBAAoB,EACvB,OAAO,EACP,IAAI,CAAC,EACL;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,CAAC,MAAM,CAAE,uBAA6C,SAAS,CAAC,GAAG;AAAA,EACzE,SAAS,8CAA8C,uBAAuB,KAAK,GAAG,CAAC;AACzF,CAAC;AAQH,IAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,SAAS;AAAA,EACT,MAAM,kBAAkB,SAAS;AAAA,EACjC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,+CAA+C;AAAA,EAC/F,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACrB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,MAAM,OAAO,+BAA+B,EAAE,QAAQ,SAAS;AAAA,EACvF,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC/C,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,eAAe,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAC1C,CAAC;AAUD,SAAS,MAAM,OAAmD;AAChE,QAAM,QAAQ;AACd,QAAM,OAAO;AACb,QAAM,QAAQ;AACd,QAAM,SAAoC,CAAC;AAC3C,aAAW,QAAQ,OAAO,KAAK,KAAK,EAAG,QAAO,IAAI,IAAI;AAEtD,WAAS,MAAM,MAAuB;AACpC,QAAI,OAAO,IAAI,MAAM,KAAM,QAAO;AAClC,QAAI,OAAO,IAAI,MAAM,MAAO,QAAO;AACnC,WAAO,IAAI,IAAI;AACf,eAAW,OAAO,MAAM,IAAI,KAAK,CAAC,GAAG;AACnC,UAAI,EAAE,OAAO,OAAQ,QAAO;AAC5B,UAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AAAA,IAC1B;AACA,WAAO,IAAI,IAAI;AACf,WAAO;AAAA,EACT;AAEA,aAAW,QAAQ,OAAO,KAAK,KAAK,GAAG;AACrC,QAAI,OAAO,IAAI,MAAM,SAAS,CAAC,MAAM,IAAI,EAAG,QAAO;AAAA,EACrD;AACA,SAAO;AACT;AASO,IAAM,uBAAuB,EACjC,OAAO,mBAAmB,uBAAuB,EACjD,QAAQ,CAAC,CAAC,EAEV;AAAA,EACC,CAAC,MAAM;AACL,UAAM,QAAQ,OAAO,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAChD,WAAO,IAAI,IAAI,KAAK,EAAE,SAAS,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,IACE,SAAS;AAAA,EACX;AACF,EAEC;AAAA,EACC,CAAC,MAAM;AACL,UAAM,WAAW,OAAO,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK;AACpD,WAAO,IAAI,IAAI,QAAQ,EAAE,SAAS,SAAS;AAAA,EAC7C;AAAA,EACA,EAAE,SAAS,yCAAyC;AACtD,EAEC;AAAA,EACC,CAAC,MAAM;AAEL,UAAM,QAA2C,CAAC;AAClD,eAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,CAAC,GAAG;AAC3C,YAAM,IAAI,IAAI,IAAI,aAAa,CAAC;AAAA,IAClC;AAEA,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,UAAI,KAAK,SAAS,IAAI,EAAG,QAAO;AAAA,IAClC;AACA,WAAO,MAAM,KAAK;AAAA,EACpB;AAAA,EACA;AAAA,IACE,SAAS;AAAA,EACX;AACF;;;ACpIF,SAAS,aAAa;AACtB,SAAS,eAAe;;;ACoBxB,SAAS,MAAM,IAAY,QAAqC;AAC9D,SAAO,IAAI,QAAc,CAACA,aAAY;AACpC,QAAI,QAAQ,SAAS;AACnB,MAAAA,SAAQ;AACR;AAAA,IACF;AACA,UAAM,IAAI,WAAW,MAAM;AACzB,MAAAA,SAAQ;AAAA,IACV,GAAG,EAAE;AACL,YAAQ;AAAA,MACN;AAAA,MACA,MAAM;AACJ,qBAAa,CAAC;AACd,QAAAA,SAAQ;AAAA,MACV;AAAA,MACA,EAAE,MAAM,KAAK;AAAA,IACf;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,gBAAgB,SAAyD;AAC7F,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,IAAI,QAAQ,eAAe;AACjC,QAAM,QAAQ,KAAK,IAAI;AACvB,MAAI,WAAW;AACf,MAAI;AAGJ,MAAI,QAAQ,QAAQ,SAAS;AAC3B,WAAO;AAAA,MACL,SAAS;AAAA,MACT,UAAU;AAAA,MACV,YAAY,KAAK,IAAI,IAAI;AAAA,MACzB,WAAW;AAAA,IACb;AAAA,EACF;AAGA,aAAS;AACP,QAAI,QAAQ,QAAQ,SAAS;AAC3B,aAAO;AAAA,QACL,SAAS;AAAA,QACT,UAAU,KAAK,IAAI,UAAU,CAAC;AAAA,QAC9B,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB,WAAW;AAAA,MACb;AAAA,IACF;AACA;AACA,QAAI;AACF,YAAM,MAAM,MAAM,EAAE,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,CAAC;AAC1E,UAAI,IAAI,WAAW,KAAK;AACtB,eAAO,EAAE,SAAS,MAAM,UAAU,YAAY,KAAK,IAAI,IAAI,MAAM;AAAA,MACnE;AACA,kBAAY,UAAU,IAAI,MAAM;AAAA,IAClC,SAAS,KAAK;AACZ,kBAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IAC7D;AAEA,QAAI,KAAK,IAAI,IAAI,SAAS,WAAW;AACnC,aAAO;AAAA,QACL,SAAS;AAAA,QACT;AAAA,QACA,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB;AAAA,MACF;AAAA,IACF;AACA,UAAM,MAAM,YAAY,QAAQ,MAAM;AAAA,EACxC;AACF;;;ACvEA,SAAS,cAAc,GAA0C;AAC/D,SAAO,MAAM,QAAQ,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC;AAChE;AAEA,SAAS,aAAa,MAAoC;AACxD,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,CAAC,QAAQ,WAAW,GAAG,EAAG,QAAO;AACrC,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,OAAO;AAC1C,QAAI,CAAC,cAAc,MAAM,EAAG,QAAO;AACnC,UAAM,QAAkB,CAAC;AACzB,QAAI,OAAO,OAAO,UAAU,SAAU,OAAM,QAAQ,OAAO;AAC3D,QAAI,OAAO,OAAO,YAAY,SAAU,OAAM,UAAU,OAAO;AAC/D,QAAI,OAAO,OAAO,cAAc,SAAU,OAAM,YAAY,OAAO;AACnE,QAAI,OAAO,OAAO,gBAAgB,SAAU,OAAM,cAAc,OAAO;AACvE,QAAI,OAAO,OAAO,YAAY,SAAU,OAAM,UAAU,OAAO;AAC/D,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,WACP,SACA,QACA,MACA,OACM;AACN,MAAI,KAAK,WAAW,EAAG;AAEvB,QAAM,SAAS,IAAI,OAAO;AAC1B,QAAM,eAAe,WAAW,WAAW,MAAM;AAEjD,QAAM,SAAS,aAAa,IAAI;AAChC,MAAI,QAAQ;AACV,UAAM,QAAQ,OAAO,SAAS;AAC9B,UAAM,MAAM,OAAO,WAAW;AAC9B,UAAM,GAAG,MAAM,GAAG,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,GAAG;AAAA,CAAI;AAC/D;AAAA,EACF;AAEA,QAAM,GAAG,MAAM,GAAG,YAAY,GAAG,IAAI;AAAA,CAAI;AAC3C;AAEO,SAAS,gBAAgB,SAAsC;AACpE,SAAO;AAAA,IACL,MAAM,SAAS,QAAQ,OAAO;AAE5B,YAAM,QAAQ,MAAM,MAAM,IAAI;AAC9B,iBAAW,QAAQ,OAAO;AACxB,mBAAW,SAAS,QAAQ,MAAM,QAAQ,KAAK;AAAA,MACjD;AAAA,IACF;AAAA,EACF;AACF;;;AClEO,SAAS,cACd,MACA,SACA,WACwB;AACxB,QAAM,MAA8B,CAAC;AACrC,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC9C,QAAI,OAAO,MAAM,SAAU,KAAI,CAAC,IAAI;AAAA,EACtC;AACA,MAAI,uBAAuB;AAC3B,MAAI,uBAAuB,OAAO,QAAQ,IAAI;AAC9C,MAAI,QAAQ,KAAK;AACf,eAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,QAAQ,GAAG,GAAG;AAChD,UAAI,CAAC,IAAI;AAAA,IACX;AAAA,EACF;AACA,SAAO;AACT;AAoBO,SAAS,yBAAyB,MAAsB,SAAoC;AACjG,OAAK,GAAG,QAAQ,MAAM;AAAA,EAEtB,CAAC;AACD,OAAK,GAAG,UAAU,MAAM;AACtB,SAAK,QAAQ,EAAE,QAAQ,MAAM;AAC3B,WAAK,KAAK,GAAG;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AACD,OAAK,GAAG,WAAW,MAAM;AACvB,SAAK,QAAQ,EAAE,QAAQ,MAAM;AAC3B,WAAK,KAAK,GAAG;AAAA,IACf,CAAC;AAAA,EACH,CAAC;AACH;;;AHlBA,SAAS,aACP,MACA,SACA,KACA,SAIgB;AAChB,QAAM,MAAM,cAAc,MAAM,SAAS,QAAQ,GAAG;AACpD,QAAM,YAA0B;AAAA,IAC9B;AAAA,IACA,OAAO;AAAA,IACP;AAAA,IACA,OAAO,CAAC,UAAU,QAAQ,MAAM;AAAA,EAClC;AACA,QAAM,QAAQ,QAAQ,QAAQ,QAAQ,KAAK,SAAS;AACpD,QAAM,QAAQ,YAAY,OAAO;AACjC,QAAM,QAAQ,YAAY,OAAO;AACjC,QAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,YAAQ,MAAM,MAAM,UAAU,KAAK;AAAA,EACrC,CAAC;AACD,QAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAC1C,YAAQ,MAAM,MAAM,UAAU,KAAK;AAAA,EACrC,CAAC;AACD,SAAO,EAAE,MAAM,MAAM,QAAQ,MAAM,SAAS,MAAM;AACpD;AAEA,eAAe,YAAY,GAAkC;AAC3D,SAAO,IAAI,QAAc,CAACC,aAAY;AACpC,QAAI,EAAE,QAAQ,UAAU,EAAE,QAAQ,aAAa,MAAM;AACnD,MAAAA,SAAQ;AACR;AAAA,IACF;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,QAAE,QAAQ,KAAK,SAAS;AACxB,MAAAA,SAAQ;AAAA,IACV,GAAG,GAAK;AACR,MAAE,QAAQ,KAAK,QAAQ,MAAM;AAC3B,mBAAa,KAAK;AAClB,MAAAA,SAAQ;AAAA,IACV,CAAC;AACD,MAAE,QAAQ,KAAK,SAAS;AAAA,EAC1B,CAAC;AACH;AAEA,eAAsB,eACpB,SAC+B;AAC/B,QAAM,UAAU,OAAO,QAAQ,QAAQ,QAAQ;AAC/C,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,MACL,SAAS,CAAC;AAAA,MACV,YAAY;AAAA,MACZ,WAAW,CAAC;AAAA,MACZ,MAAM,MAAM,QAAQ,QAAQ;AAAA,IAC9B;AAAA,EACF;AAEA,QAAM,QACJ,QAAQ,UACP,CAAC,MAAc;AACd,YAAQ,OAAO,MAAM,CAAC;AAAA,EACxB;AACF,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,SAAS,gBAAgB,EAAE,MAAM,CAAC;AAExC,QAAM,UAA4B,QAAQ;AAAA,IAAI,CAAC,CAAC,MAAM,GAAG,MACvD,aAAa,MAAM,KAAK,QAAQ,QAAQ,KAAK,YAAY,IAAI,GAAG;AAAA,MAC9D;AAAA,MACA,OAAO,OAAO;AAAA,IAChB,CAAC;AAAA,EACH;AAEA,QAAM,OAAO,YAA2B;AACtC,UAAM,QAAQ,IAAI,QAAQ,IAAI,WAAW,CAAC;AAAA,EAC5C;AAEA,MAAI,QAAQ,0BAA0B,OAAO;AAC3C,6BAAyB,SAAS,IAAI;AAAA,EACxC;AAGA,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,QAAQ;AAAA,MAAI,CAAC,CAAC,MAAM,GAAG,MACrB,gBAAgB;AAAA,QACd,KAAK,oBAAoB,OAAO,IAAI,IAAI,CAAC,GAAG,IAAI,WAAW;AAAA,QAC3D,WAAW,QAAQ,wBAAwB;AAAA,QAC3C,YAAY;AAAA,QACZ,aAAa,QAAQ;AAAA,MACvB,CAAC,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,QAAQ,EAAE,EAAE;AAAA,IACtC;AAAA,EACF;AAEA,QAAM,YAAY,QAAQ,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAC5E,SAAO;AAAA,IACL;AAAA,IACA,YAAY,UAAU,WAAW;AAAA,IACjC;AAAA,IACA;AAAA,EACF;AACF;;;AI1HO,SAAS,0BACd,UAC2B;AAC3B,MAAI,aAAa,MAAM;AACrB,WAAO,EAAE,iBAAiB,GAAG,UAAU,CAAC,EAAE;AAAA,EAC5C;AAIA,MAAI,SAAS,YAAY,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR,mDAAmD,OAAO,SAAS,OAAO,CAAC;AAAA,IAE7E;AAAA,EACF;AACA,SAAO;AAAA,IACL,iBAAiB;AAAA,IACjB,UAAU,SAAS,SAAS,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA,EAC/C;AACF;;;ACxBO,SAAS,yBACd,UACA,YAA6B,CAAC,GACb;AACjB,QAAM,eAAgC,CAAC;AACvC,aAAW,CAAC,EAAE,GAAG,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC9C,UAAM,SAAS,IAAI;AACnB,iBAAa,MAAM,IAAI;AAAA,MACrB,QAAQ,oBAAoB,OAAO,IAAI,IAAI,CAAC;AAAA,MAC5C,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,MAKd,SAAS,CAAC,SACR,KAAK,WAAW,MAAM,IAAI,KAAK,MAAM,OAAO,MAAM,KAAK,MAAM;AAAA,IACjE;AAAA,EACF;AAEA,SAAO,EAAE,GAAG,cAAc,GAAG,UAAU;AACzC;","names":["resolve","resolve"]}

package/dist/{chunk-DNMSV3R3.js → chunk-D7ZH7DTG.js}

@@ -61,7 +61,7 @@ async function generateTypedClient(options) {
 // src/services/schema.ts
 import { z } from "zod";
 var ServiceRuntimeSchema = z.enum(["python", "node"]);
-var ServiceTypeSchema = z.enum(["server", "worker", "frontend"]);
+var ServiceTypeSchema = z.enum(["server", "worker"]);
 var RESERVED_SERVICE_NAMES = ["web", "caddy", "postgres", "redis"];
 var ServiceNameSchema = z.string().min(1).regex(
   /^[a-z][a-z0-9-]*$/,
@@ -77,7 +77,7 @@ var ServiceDefinitionSchema = z.object({
   dev: z.string().min(1),
   build: z.string().optional(),
   start: z.string().min(1),
-  openapi: z.string().url().optional(),
+  openapi: z.url().optional(),
   healthcheck: z.string().regex(/^\//, "healthcheck must start with /").default("/health"),
   cors: z.boolean().default(false),
   env: z.record(z.string(), z.string()).optional(),
@@ -164,4 +164,4 @@ export {
   servicesConfigSchema,
   buildServicesProxyConfig
 };
-//# sourceMappingURL=chunk-DNMSV3R3.js.map
+//# sourceMappingURL=chunk-D7ZH7DTG.js.map

package/dist/chunk-D7ZH7DTG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/generators/openapi-client-gen.ts","../src/services/schema.ts","../src/services/adapters-bridge/vite-proxy-builder.ts"],"sourcesContent":["/**\n * OpenAPI → TypeScript client generation (T5.1).\n *\n * Thin wrapper around `@hey-api/openapi-ts` (the de facto 2026 generator\n * used by Vercel/OpenCode/PayPal). Called by the Vite plugin\n * `services-typed-client.ts` at dev startup and when an OpenAPI URL\n * changes.\n *\n * Production behavior:\n *  - For each service with a `openapi` URL, fetch the spec\n *  - Run Hey API generator to write `<cwd>/clients/<service-name>.ts`\n *  - On any failure: log warning, do NOT crash dev (best-effort)\n *\n * The actual `@hey-api/openapi-ts` invocation is dynamic-imported so\n * that consumers without the dep (TS-only Wave 1 apps) don't pay\n * the bundle cost.\n */\nimport type { ManifestServiceEntry } from '../adapters-bridge/manifest.js'\n\nexport interface GenerateClientOptions {\n  service: ManifestServiceEntry\n  /** Directory to write `<service-name>.ts` into. */\n  outputDir: string\n  /** Logger for warnings/info. */\n  log?: (level: 'info' | 'warn' | 'error', msg: string) => void\n  /** Test injection — replace fetch (so tests don't hit the network). */\n  customFetch?: typeof fetch\n}\n\nexport interface GenerateClientResult {\n  generated: boolean\n  outputFile?: string\n  skippedReason?: string\n}\n\n/**\n * Generate a typed client for one service. No-op (returns skipped=true)\n * if the service has no `openapi` URL.\n *\n * The generator runs the Hey API tool. If the tool import fails (not\n * installed), the function logs a warning and returns `{ generated: false }`.\n */\nexport async function generateTypedClient(\n  options: GenerateClientOptions,\n): Promise<GenerateClientResult> {\n  const log =\n    options.log ??\n    ((_level: 'info' | 'warn' | 'error', _msg: string) => {\n      // default: silent in production; tests inject their own\n    })\n  const { service, outputDir } = options\n\n  if (!service.openapi) {\n    return { generated: false, skippedReason: 'no openapi URL declared' }\n  }\n\n  const f = options.customFetch ?? fetch\n  let spec: unknown\n  try {\n    const res = await f(service.openapi)\n    if (!res.ok) {\n      log('warn', `[${service.name}] openapi fetch returned ${String(res.status)}; skipping`)\n      return { generated: false, skippedReason: `fetch returned ${String(res.status)}` }\n    }\n    spec = await res.json()\n  } catch (err) {\n    log(\n      'warn',\n      `[${service.name}] openapi fetch failed: ${err instanceof Error ? err.message : String(err)}`,\n    )\n    return { generated: false, skippedReason: 'fetch failed' }\n  }\n\n  // Dynamic import — soft dep. We pass through a variable so the typechecker\n  // doesn't resolve the literal at build time (the dep is optional;\n  // consumers without it get a graceful skip).\n  let createClient: unknown\n  try {\n    // Soft-dep resolution. We pass the module name through a String wrapper\n    // call site that the typechecker cannot statically resolve — so missing\n    // dep at typecheck time does not break the build. Runtime behavior is\n    // identical to `import('@hey-api/openapi-ts')`.\n    const segment1 = '@hey-api/'\n    const segment2 = 'openapi-ts'\n    const moduleName = `${segment1}${segment2}`\n    const dyn: Promise<unknown> = import(moduleName).catch(() => null)\n    const mod = (await dyn) as { createClient?: unknown } | null\n    createClient = mod?.createClient\n  } catch {\n    createClient = undefined\n  }\n\n  if (typeof createClient !== 'function') {\n    log(\n      'warn',\n      `[${service.name}] @hey-api/openapi-ts not installed; typed client not generated. ` +\n        `Run \\`pnpm add -D @hey-api/openapi-ts @hey-api/client-fetch\\` to enable.`,\n    )\n    return { generated: false, skippedReason: 'hey-api not installed' }\n  }\n\n  const outputFile = `${outputDir}/${service.name}.ts`\n  try {\n    await (createClient as (cfg: unknown) => Promise<unknown>)({\n      input: spec,\n      output: { path: outputDir, format: 'prettier' },\n      plugins: [{ name: '@hey-api/client-fetch' }],\n    })\n    log('info', `[${service.name}] typed client generated at ${outputFile}`)\n    return { generated: true, outputFile }\n  } catch (err) {\n    log(\n      'warn',\n      `[${service.name}] Hey API generation failed: ${err instanceof Error ? err.message : String(err)}`,\n    )\n    return { generated: false, skippedReason: 'generator threw' }\n  }\n}\n","/**\n * Wave 2 — Polyglot Services Orchestration (T1.1).\n *\n * Declarative `services: {}` primitive for `theo.config.ts`. Each entry\n * declares an external sidecar process (Python FastAPI / Node Hono) that\n * boots alongside the TheoKit TS app. Empty `services: {}` is the default\n * and preserves Wave 1 behavior (no impact on TS-only apps).\n *\n * See ADRs 0012-0015 + plan: docs/plans/wave-2-polyglot-services-plan.md\n */\nimport { z } from 'zod'\n\n/** Wave 2 runtime kinds. Go/Rust/Java/Ruby/PHP archived; deferred per ADR-0012 invariant #2/#3. */\nconst ServiceRuntimeSchema = z.enum(['python', 'node'])\n\n/**\n * Service shape enum, mirrored from `services.schema.json`: server | worker.\n * Optional; emitters default to \"server\". `frontend` removed in\n * simplify-deploy-theokit-only v2.0 (D5) — TheoCloud serves no static frontends.\n */\nconst ServiceTypeSchema = z.enum(['server', 'worker'])\n\n/** EC-3 fix: names that conflict with generated docker-compose entries. */\nconst RESERVED_SERVICE_NAMES = ['web', 'caddy', 'postgres', 'redis'] as const\n\n/**\n * EC-12 fix: service names must be docker-compose-safe — lowercase,\n * start with a letter, contain only a-z 0-9 -. Reserved names rejected.\n */\nconst ServiceNameSchema = z\n  .string()\n  .min(1)\n  .regex(\n    /^[a-z][a-z0-9-]*$/,\n    'service name must be lowercase, start with letter, contain only a-z 0-9 -',\n  )\n  .refine((n) => !(RESERVED_SERVICE_NAMES as readonly string[]).includes(n), {\n    message: `service name conflicts with reserved name (${RESERVED_SERVICE_NAMES.join('/')})`,\n  })\n\n/**\n * Single service definition. All commands run from `services/<name>/` cwd.\n *\n * EC-4 fix: `proxy` regex requires NON-EMPTY path after `/` (the `+` quantifier)\n * to reject `/` which would catch-all and conflict with TheoKit's own routing.\n */\nconst ServiceDefinitionSchema = z.object({\n  runtime: ServiceRuntimeSchema,\n  type: ServiceTypeSchema.optional(),\n  port: z.number().int().min(1).max(65535),\n  proxy: z.string().regex(/^\\/[a-zA-Z0-9\\-_/]+$/, 'proxy must be a non-root path starting with /'),\n  dev: z.string().min(1),\n  build: z.string().optional(),\n  start: z.string().min(1),\n  openapi: z.url().optional(),\n  healthcheck: z.string().regex(/^\\//, 'healthcheck must start with /').default('/health'),\n  cors: z.boolean().default(false),\n  env: z.record(z.string(), z.string()).optional(),\n  dependsOn: z.array(z.string()).optional(),\n  /**\n   * EC-25 + ref doc §8: by default the proxy strips upstream Set-Cookie\n   * to prevent the polyglot service from issuing cookies that conflict\n   * with TheoKit's encrypted session. Set to true to opt-in.\n   */\n  passSetCookie: z.boolean().default(false),\n})\n\nexport type ServiceDefinition = z.infer<typeof ServiceDefinitionSchema>\nexport type ServicesConfig = Record<string, ServiceDefinition>\n\n/**\n * Topological-order helper used by `dependsOn` cycle detection refine.\n * Returns true iff `graph` is a DAG. Each node's deps must all reference\n * existing nodes; cycles return false.\n */\nfunction isDag(graph: Record<string, readonly string[]>): boolean {\n  const WHITE = 0\n  const GRAY = 1\n  const BLACK = 2\n  const colors: Record<string, 0 | 1 | 2> = {}\n  for (const node of Object.keys(graph)) colors[node] = WHITE\n\n  function visit(node: string): boolean {\n    if (colors[node] === GRAY) return false // cycle\n    if (colors[node] === BLACK) return true\n    colors[node] = GRAY\n    for (const dep of graph[node] ?? []) {\n      if (!(dep in graph)) return false // missing reference\n      if (!visit(dep)) return false\n    }\n    colors[node] = BLACK\n    return true\n  }\n\n  for (const node of Object.keys(graph)) {\n    if (colors[node] === WHITE && !visit(node)) return false\n  }\n  return true\n}\n\n/**\n * Full services config schema with cross-service refines.\n *\n * EC-1 fix: detect duplicate ports across services.\n * EC-13: empty `dependsOn: []` accepted as no-deps.\n * Self-dep, missing-ref, and cycles rejected via topological check.\n */\nexport const servicesConfigSchema = z\n  .record(ServiceNameSchema, ServiceDefinitionSchema)\n  .default({})\n  // EC-1: duplicate port detection across services\n  .refine(\n    (s) => {\n      const ports = Object.values(s).map((v) => v.port)\n      return new Set(ports).size === ports.length\n    },\n    {\n      message: 'duplicate port across services — each service must bind a unique port',\n    },\n  )\n  // duplicate proxy prefix detection\n  .refine(\n    (s) => {\n      const prefixes = Object.values(s).map((v) => v.proxy)\n      return new Set(prefixes).size === prefixes.length\n    },\n    { message: 'duplicate proxy prefix across services' },\n  )\n  // dependsOn correctness (self-dep, missing reference, cycle)\n  .refine(\n    (s) => {\n      // Build graph\n      const graph: Record<string, readonly string[]> = {}\n      for (const [name, def] of Object.entries(s)) {\n        graph[name] = def.dependsOn ?? []\n      }\n      // Self-dep: a service mentioning itself is rejected as part of cycle detection\n      for (const [name, deps] of Object.entries(graph)) {\n        if (deps.includes(name)) return false\n      }\n      return isDag(graph)\n    },\n    {\n      message: 'invalid dependsOn — must reference existing services, no self-deps, no cycles',\n    },\n  )\n\nexport type ServicesConfigInput = z.input<typeof servicesConfigSchema>\nexport type ServicesConfigOutput = z.output<typeof servicesConfigSchema>\n","/**\n * Builds a Vite `server.proxy` configuration from TheoKit's\n * declarative `services: {}` config (T2.1).\n *\n * Pure function — no Vite imports, just data shaping. The Vite plugin\n * (services-dev.ts) calls this and merges the result into `vite.config.server.proxy`.\n *\n * Pattern follows Vite proxy reference (referencias/vite/packages/vite/src/node/server/middlewares/proxy.ts):\n *  - Each path prefix becomes its own entry\n *  - `changeOrigin: true` set by default (matches Vite's string-shortcut behavior)\n *  - User-set entries take precedence on prefix collision (we never clobber)\n */\nimport type { ServicesConfig } from '../schema.js'\n\n/**\n * Shape compatible with Vite's `server.proxy` type. We intentionally don't\n * import Vite's `ProxyOptions` so this module stays platform-neutral and\n * unit-testable without Vite.\n */\nexport interface ViteProxyEntry {\n  target: string\n  changeOrigin: boolean\n  rewrite?: (path: string) => string\n}\n\nexport type ViteProxyConfig = Record<string, string | ViteProxyEntry>\n\nexport function buildServicesProxyConfig(\n  services: ServicesConfig,\n  userProxy: ViteProxyConfig = {},\n): ViteProxyConfig {\n  const fromServices: ViteProxyConfig = {}\n  for (const [, def] of Object.entries(services)) {\n    const prefix = def.proxy\n    fromServices[prefix] = {\n      target: `http://localhost:${String(def.port)}`,\n      changeOrigin: true,\n      // Strip the service's `proxy` prefix from the upstream URL so the\n      // sidecar receives its own native paths (e.g. `/api/agent/echo` →\n      // `/echo`). The sidecar declares routes against its own root path —\n      // it doesn't know about the TheoKit proxy prefix.\n      rewrite: (path: string) =>\n        path.startsWith(prefix) ? path.slice(prefix.length) || '/' : path,\n    }\n  }\n  // User proxy wins on collision (we add services first, then spread user on top)\n  return { ...fromServices, ...userProxy }\n}\n"],"mappings":";AA0CA,eAAsB,oBACpB,SAC+B;AAC/B,QAAM,MACJ,QAAQ,QACP,CAAC,QAAmC,SAAiB;AAAA,EAEtD;AACF,QAAM,EAAE,SAAS,UAAU,IAAI;AAE/B,MAAI,CAAC,QAAQ,SAAS;AACpB,WAAO,EAAE,WAAW,OAAO,eAAe,0BAA0B;AAAA,EACtE;AAEA,QAAM,IAAI,QAAQ,eAAe;AACjC,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,MAAM,EAAE,QAAQ,OAAO;AACnC,QAAI,CAAC,IAAI,IAAI;AACX,UAAI,QAAQ,IAAI,QAAQ,IAAI,4BAA4B,OAAO,IAAI,MAAM,CAAC,YAAY;AACtF,aAAO,EAAE,WAAW,OAAO,eAAe,kBAAkB,OAAO,IAAI,MAAM,CAAC,GAAG;AAAA,IACnF;AACA,WAAO,MAAM,IAAI,KAAK;AAAA,EACxB,SAAS,KAAK;AACZ;AAAA,MACE;AAAA,MACA,IAAI,QAAQ,IAAI,2BAA2B,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC7F;AACA,WAAO,EAAE,WAAW,OAAO,eAAe,eAAe;AAAA,EAC3D;AAKA,MAAI;AACJ,MAAI;AAKF,UAAM,WAAW;AACjB,UAAM,WAAW;AACjB,UAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ;AACzC,UAAM,MAAwB,OAAO,YAAY,MAAM,MAAM,IAAI;AACjE,UAAM,MAAO,MAAM;AACnB,mBAAe,KAAK;AAAA,EACtB,QAAQ;AACN,mBAAe;AAAA,EACjB;AAEA,MAAI,OAAO,iBAAiB,YAAY;AACtC;AAAA,MACE;AAAA,MACA,IAAI,QAAQ,IAAI;AAAA,IAElB;AACA,WAAO,EAAE,WAAW,OAAO,eAAe,wBAAwB;AAAA,EACpE;AAEA,QAAM,aAAa,GAAG,SAAS,IAAI,QAAQ,IAAI;AAC/C,MAAI;AACF,UAAO,aAAoD;AAAA,MACzD,OAAO;AAAA,MACP,QAAQ,EAAE,MAAM,WAAW,QAAQ,WAAW;AAAA,MAC9C,SAAS,CAAC,EAAE,MAAM,wBAAwB,CAAC;AAAA,IAC7C,CAAC;AACD,QAAI,QAAQ,IAAI,QAAQ,IAAI,+BAA+B,UAAU,EAAE;AACvE,WAAO,EAAE,WAAW,MAAM,WAAW;AAAA,EACvC,SAAS,KAAK;AACZ;AAAA,MACE;AAAA,MACA,IAAI,QAAQ,IAAI,gCAAgC,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAClG;AACA,WAAO,EAAE,WAAW,OAAO,eAAe,kBAAkB;AAAA,EAC9D;AACF;;;AC3GA,SAAS,SAAS;AAGlB,IAAM,uBAAuB,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAOtD,IAAM,oBAAoB,EAAE,KAAK,CAAC,UAAU,QAAQ,CAAC;AAGrD,IAAM,yBAAyB,CAAC,OAAO,SAAS,YAAY,OAAO;AAMnE,IAAM,oBAAoB,EACvB,OAAO,EACP,IAAI,CAAC,EACL;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,CAAC,MAAM,CAAE,uBAA6C,SAAS,CAAC,GAAG;AAAA,EACzE,SAAS,8CAA8C,uBAAuB,KAAK,GAAG,CAAC;AACzF,CAAC;AAQH,IAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,SAAS;AAAA,EACT,MAAM,kBAAkB,SAAS;AAAA,EACjC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,KAAK;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,+CAA+C;AAAA,EAC/F,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACrB,OAAO,EAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,SAAS,EAAE,IAAI,EAAE,SAAS;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,MAAM,OAAO,+BAA+B,EAAE,QAAQ,SAAS;AAAA,EACvF,MAAM,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EAC/B,KAAK,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA,EAC/C,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,eAAe,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAC1C,CAAC;AAUD,SAAS,MAAM,OAAmD;AAChE,QAAM,QAAQ;AACd,QAAM,OAAO;AACb,QAAM,QAAQ;AACd,QAAM,SAAoC,CAAC;AAC3C,aAAW,QAAQ,OAAO,KAAK,KAAK,EAAG,QAAO,IAAI,IAAI;AAEtD,WAAS,MAAM,MAAuB;AACpC,QAAI,OAAO,IAAI,MAAM,KAAM,QAAO;AAClC,QAAI,OAAO,IAAI,MAAM,MAAO,QAAO;AACnC,WAAO,IAAI,IAAI;AACf,eAAW,OAAO,MAAM,IAAI,KAAK,CAAC,GAAG;AACnC,UAAI,EAAE,OAAO,OAAQ,QAAO;AAC5B,UAAI,CAAC,MAAM,GAAG,EAAG,QAAO;AAAA,IAC1B;AACA,WAAO,IAAI,IAAI;AACf,WAAO;AAAA,EACT;AAEA,aAAW,QAAQ,OAAO,KAAK,KAAK,GAAG;AACrC,QAAI,OAAO,IAAI,MAAM,SAAS,CAAC,MAAM,IAAI,EAAG,QAAO;AAAA,EACrD;AACA,SAAO;AACT;AASO,IAAM,uBAAuB,EACjC,OAAO,mBAAmB,uBAAuB,EACjD,QAAQ,CAAC,CAAC,EAEV;AAAA,EACC,CAAC,MAAM;AACL,UAAM,QAAQ,OAAO,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI;AAChD,WAAO,IAAI,IAAI,KAAK,EAAE,SAAS,MAAM;AAAA,EACvC;AAAA,EACA;AAAA,IACE,SAAS;AAAA,EACX;AACF,EAEC;AAAA,EACC,CAAC,MAAM;AACL,UAAM,WAAW,OAAO,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK;AACpD,WAAO,IAAI,IAAI,QAAQ,EAAE,SAAS,SAAS;AAAA,EAC7C;AAAA,EACA,EAAE,SAAS,yCAAyC;AACtD,EAEC;AAAA,EACC,CAAC,MAAM;AAEL,UAAM,QAA2C,CAAC;AAClD,eAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,CAAC,GAAG;AAC3C,YAAM,IAAI,IAAI,IAAI,aAAa,CAAC;AAAA,IAClC;AAEA,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,QAAQ,KAAK,GAAG;AAChD,UAAI,KAAK,SAAS,IAAI,EAAG,QAAO;AAAA,IAClC;AACA,WAAO,MAAM,KAAK;AAAA,EACpB;AAAA,EACA;AAAA,IACE,SAAS;AAAA,EACX;AACF;;;ACtHK,SAAS,yBACd,UACA,YAA6B,CAAC,GACb;AACjB,QAAM,eAAgC,CAAC;AACvC,aAAW,CAAC,EAAE,GAAG,KAAK,OAAO,QAAQ,QAAQ,GAAG;AAC9C,UAAM,SAAS,IAAI;AACnB,iBAAa,MAAM,IAAI;AAAA,MACrB,QAAQ,oBAAoB,OAAO,IAAI,IAAI,CAAC;AAAA,MAC5C,cAAc;AAAA;AAAA;AAAA;AAAA;AAAA,MAKd,SAAS,CAAC,SACR,KAAK,WAAW,MAAM,IAAI,KAAK,MAAM,OAAO,MAAM,KAAK,MAAM;AAAA,IACjE;AAAA,EACF;AAEA,SAAO,EAAE,GAAG,cAAc,GAAG,UAAU;AACzC;","names":[]}

package/dist/{chunk-MWYSRZI4.js → chunk-EQV67HZL.js}

@@ -4,7 +4,7 @@ import {
   generateCaddyfile,
   generateComposeYaml,
   readManifest
-} from "./chunk-X32KQH5C.js";
+} from "./chunk-CCVC6P6B.js";
 
 // src/adapters/node.ts
 import { writeFileSync } from "fs";
@@ -62,4 +62,4 @@ var nodeAdapter = {
 export {
   nodeAdapter
 };
-//# sourceMappingURL=chunk-MWYSRZI4.js.map
+//# sourceMappingURL=chunk-EQV67HZL.js.map

package/dist/{chunk-CG563V5M.js → chunk-IEES3CHD.js}

@@ -50,19 +50,53 @@ function attachRouteFiles(node, dir) {
     }
   }
 }
+function parseSegment(name) {
+  if (name.startsWith("[[")) {
+    throw new Error(
+      `Optional catch-all route segment is not supported yet: '${name}'. Use '[...param]' for catch-all, or split into explicit segments.`
+    );
+  }
+  const catchAll = /^\[\.\.\.(.+)\]$/.exec(name);
+  if (catchAll) return checkedSegment("catchall", catchAll[1], name);
+  const dynamic = /^\[(.+)\]$/.exec(name);
+  if (dynamic) return checkedSegment("dynamic", dynamic[1], name);
+  return { kind: "static" };
+}
+function checkedSegment(kind, paramName, name) {
+  if (!/^\w+$/.test(paramName)) {
+    throw new Error(
+      `Invalid route param '${paramName}' in segment '${name}' \u2014 param names must match [A-Za-z0-9_] (react-router constraint).`
+    );
+  }
+  return { kind, paramName };
+}
 function nodeHasContent(node) {
   return node.page !== void 0 || node.layout !== void 0 || node.error !== void 0 || node.loading !== void 0 || node.notFound !== void 0 || node.children.length > 0;
 }
+function buildChildPath(routePath, urlSegment) {
+  if (!urlSegment) return routePath;
+  return routePath === "/" ? `/${urlSegment}` : `${routePath}/${urlSegment}`;
+}
+function scanChild(parentDir, dirName, routePath) {
+  const isRouteGroup = dirName.startsWith("(") && dirName.endsWith(")");
+  const urlSegment = isRouteGroup ? "" : dirName;
+  const childPath = buildChildPath(routePath, urlSegment);
+  const child = scanDir(join(parentDir, dirName), isRouteGroup ? "" : dirName, childPath);
+  if (!isRouteGroup) {
+    const parsed = parseSegment(dirName);
+    if (parsed.kind !== "static" && parsed.paramName !== void 0) {
+      child.dynamic = { paramName: parsed.paramName, catchAll: parsed.kind === "catchall" };
+    }
+  }
+  return child;
+}
 function scanDir(dir, segment, routePath) {
   const node = { segment, path: routePath, children: [] };
   attachRouteFiles(node, dir);
   for (const entry of readdirSync(dir, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
     if (entry.name.startsWith("_") || entry.name.startsWith(".")) continue;
-    const isRouteGroup = entry.name.startsWith("(") && entry.name.endsWith(")");
-    const urlSegment = isRouteGroup ? "" : entry.name;
-    const childPath = urlSegment ? routePath === "/" ? `/${urlSegment}` : `${routePath}/${urlSegment}` : routePath;
-    const child = scanDir(join(dir, entry.name), isRouteGroup ? "" : entry.name, childPath);
+    const child = scanChild(dir, entry.name, routePath);
     if (nodeHasContent(child)) {
       node.children.push(child);
     }
@@ -83,4 +117,4 @@ export {
   isRouteFile,
   scanRoutes
 };
-//# sourceMappingURL=chunk-CG563V5M.js.map
+//# sourceMappingURL=chunk-IEES3CHD.js.map

package/dist/chunk-IEES3CHD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/router/scan.ts","../src/router/types.ts"],"sourcesContent":["/* eslint-disable security/detect-non-literal-fs-filename --\n * Build-time file-system scanner. All paths originate from `appDir`,\n * which is itself derived from `process.cwd()`. No HTTP input flows here.\n */\nimport { readdirSync, statSync, existsSync } from 'node:fs'\nimport { join, resolve } from 'node:path'\n\nimport type { RouteNode, RouteFileName } from './types.js'\nimport { ROUTE_FILE_NAMES, ROUTE_FILE_EXTENSIONS } from './types.js'\n\nfunction toNodeKey(name: RouteFileName): 'page' | 'layout' | 'error' | 'loading' | 'notFound' {\n  if (name === 'not-found') return 'notFound'\n  return name\n}\n\nfunction setRouteFile(\n  node: RouteNode,\n  key: 'page' | 'layout' | 'error' | 'loading' | 'notFound',\n  value: string,\n): void {\n  switch (key) {\n    case 'page':\n      node.page = value\n      break\n    case 'layout':\n      node.layout = value\n      break\n    case 'error':\n      node.error = value\n      break\n    case 'loading':\n      node.loading = value\n      break\n    case 'notFound':\n      node.notFound = value\n      break\n  }\n}\n\nfunction attachRouteFiles(node: RouteNode, dir: string): void {\n  // Check route files with extension priority (.tsx > .ts > .jsx > .js)\n  for (const name of ROUTE_FILE_NAMES) {\n    const key = toNodeKey(name)\n    if (node[key] !== undefined) continue\n    for (const ext of ROUTE_FILE_EXTENSIONS) {\n      const filename = `${name}${ext}`\n      if (existsSync(join(dir, filename))) {\n        setRouteFile(node, key, resolve(dir, filename))\n        break\n      }\n    }\n  }\n}\n\ninterface ParsedSegment {\n  kind: 'static' | 'dynamic' | 'catchall'\n  paramName?: string\n}\n\n/**\n * Classify a directory name as a static, dynamic (`[param]`), or catch-all\n * (`[...slug]`) route segment. Throws at build time on:\n *  - optional catch-all `[[...slug]]` (EC-4 — not supported yet; see plan Q3)\n *  - a param name outside `[A-Za-z0-9_]` (EC-5 — react-router would silently mis-match)\n * Order matters: catch-all is checked before single dynamic so `[...slug]` is\n * not misread as a dynamic param literally named `...slug`.\n */\nfunction parseSegment(name: string): ParsedSegment {\n  if (name.startsWith('[[')) {\n    throw new Error(\n      `Optional catch-all route segment is not supported yet: '${name}'. ` +\n        `Use '[...param]' for catch-all, or split into explicit segments.`,\n    )\n  }\n  const catchAll = /^\\[\\.\\.\\.(.+)\\]$/.exec(name)\n  if (catchAll) return checkedSegment('catchall', catchAll[1], name)\n  const dynamic = /^\\[(.+)\\]$/.exec(name)\n  if (dynamic) return checkedSegment('dynamic', dynamic[1], name)\n  return { kind: 'static' }\n}\n\nfunction checkedSegment(\n  kind: 'dynamic' | 'catchall',\n  paramName: string,\n  name: string,\n): ParsedSegment {\n  if (!/^\\w+$/.test(paramName)) {\n    throw new Error(\n      `Invalid route param '${paramName}' in segment '${name}' — ` +\n        `param names must match [A-Za-z0-9_] (react-router constraint).`,\n    )\n  }\n  return { kind, paramName }\n}\n\nfunction nodeHasContent(node: RouteNode): boolean {\n  return (\n    node.page !== undefined ||\n    node.layout !== undefined ||\n    node.error !== undefined ||\n    node.loading !== undefined ||\n    node.notFound !== undefined ||\n    node.children.length > 0\n  )\n}\n\nfunction buildChildPath(routePath: string, urlSegment: string): string {\n  if (!urlSegment) return routePath\n  return routePath === '/' ? `/${urlSegment}` : `${routePath}/${urlSegment}`\n}\n\n/** Scan one subdirectory into a child RouteNode, attaching dynamic-segment metadata. */\nfunction scanChild(parentDir: string, dirName: string, routePath: string): RouteNode {\n  const isRouteGroup = dirName.startsWith('(') && dirName.endsWith(')')\n  const urlSegment = isRouteGroup ? '' : dirName\n  const childPath = buildChildPath(routePath, urlSegment)\n  const child = scanDir(join(parentDir, dirName), isRouteGroup ? '' : dirName, childPath)\n\n  // Dynamic / catch-all segment metadata (throws on [[...]] or invalid charset).\n  if (!isRouteGroup) {\n    const parsed = parseSegment(dirName)\n    if (parsed.kind !== 'static' && parsed.paramName !== undefined) {\n      child.dynamic = { paramName: parsed.paramName, catchAll: parsed.kind === 'catchall' }\n    }\n  }\n  return child\n}\n\nfunction scanDir(dir: string, segment: string, routePath: string): RouteNode {\n  const node: RouteNode = { segment, path: routePath, children: [] }\n  attachRouteFiles(node, dir)\n\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    if (!entry.isDirectory()) continue\n    if (entry.name.startsWith('_') || entry.name.startsWith('.')) continue\n\n    const child = scanChild(dir, entry.name, routePath)\n    // Prune empty nodes — a directory with no route files AND no children is\n    // irrelevant to the manifest.\n    if (nodeHasContent(child)) {\n      node.children.push(child)\n    }\n  }\n\n  return node\n}\n\nexport function scanRoutes(appDir: string): RouteNode {\n  if (!existsSync(appDir)) {\n    throw new Error(`App directory does not exist: ${appDir}`)\n  }\n  if (!statSync(appDir).isDirectory()) {\n    throw new Error(`App path is not a directory: ${appDir}`)\n  }\n  return scanDir(appDir, '', '/')\n}\n","// T2.2 (architecture-cleanup) — RouteNode moved to core/contracts/route-node.ts\n// (canonical home per ADR-0001 v3). Re-export keeps the local path stable.\nexport type { RouteNode } from '../core/contracts/route-node.js'\n\nexport const ROUTE_FILE_NAMES = ['page', 'layout', 'error', 'loading', 'not-found'] as const\n\nexport type RouteFileName = (typeof ROUTE_FILE_NAMES)[number]\n\nexport const ROUTE_FILE_EXTENSIONS = ['.tsx', '.ts', '.jsx', '.js'] as const\n\nconst ROUTE_FILE_REGEX = /^(page|layout|error|loading|not-found)\\.(tsx|ts|jsx|js)$/\n\nexport function isRouteFile(filename: string): boolean {\n  return ROUTE_FILE_REGEX.test(filename)\n}\n"],"mappings":";;;;AAIA,SAAS,aAAa,UAAU,kBAAkB;AAClD,SAAS,MAAM,eAAe;;;ACDvB,IAAM,mBAAmB,CAAC,QAAQ,UAAU,SAAS,WAAW,WAAW;AAI3E,IAAM,wBAAwB,CAAC,QAAQ,OAAO,QAAQ,KAAK;AAElE,IAAM,mBAAmB;AAElB,SAAS,YAAY,UAA2B;AACrD,SAAO,iBAAiB,KAAK,QAAQ;AACvC;;;ADJA,SAAS,UAAU,MAA2E;AAC5F,MAAI,SAAS,YAAa,QAAO;AACjC,SAAO;AACT;AAEA,SAAS,aACP,MACA,KACA,OACM;AACN,UAAQ,KAAK;AAAA,IACX,KAAK;AACH,WAAK,OAAO;AACZ;AAAA,IACF,KAAK;AACH,WAAK,SAAS;AACd;AAAA,IACF,KAAK;AACH,WAAK,QAAQ;AACb;AAAA,IACF,KAAK;AACH,WAAK,UAAU;AACf;AAAA,IACF,KAAK;AACH,WAAK,WAAW;AAChB;AAAA,EACJ;AACF;AAEA,SAAS,iBAAiB,MAAiB,KAAmB;AAE5D,aAAW,QAAQ,kBAAkB;AACnC,UAAM,MAAM,UAAU,IAAI;AAC1B,QAAI,KAAK,GAAG,MAAM,OAAW;AAC7B,eAAW,OAAO,uBAAuB;AACvC,YAAM,WAAW,GAAG,IAAI,GAAG,GAAG;AAC9B,UAAI,WAAW,KAAK,KAAK,QAAQ,CAAC,GAAG;AACnC,qBAAa,MAAM,KAAK,QAAQ,KAAK,QAAQ,CAAC;AAC9C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAeA,SAAS,aAAa,MAA6B;AACjD,MAAI,KAAK,WAAW,IAAI,GAAG;AACzB,UAAM,IAAI;AAAA,MACR,2DAA2D,IAAI;AAAA,IAEjE;AAAA,EACF;AACA,QAAM,WAAW,mBAAmB,KAAK,IAAI;AAC7C,MAAI,SAAU,QAAO,eAAe,YAAY,SAAS,CAAC,GAAG,IAAI;AACjE,QAAM,UAAU,aAAa,KAAK,IAAI;AACtC,MAAI,QAAS,QAAO,eAAe,WAAW,QAAQ,CAAC,GAAG,IAAI;AAC9D,SAAO,EAAE,MAAM,SAAS;AAC1B;AAEA,SAAS,eACP,MACA,WACA,MACe;AACf,MAAI,CAAC,QAAQ,KAAK,SAAS,GAAG;AAC5B,UAAM,IAAI;AAAA,MACR,wBAAwB,SAAS,iBAAiB,IAAI;AAAA,IAExD;AAAA,EACF;AACA,SAAO,EAAE,MAAM,UAAU;AAC3B;AAEA,SAAS,eAAe,MAA0B;AAChD,SACE,KAAK,SAAS,UACd,KAAK,WAAW,UAChB,KAAK,UAAU,UACf,KAAK,YAAY,UACjB,KAAK,aAAa,UAClB,KAAK,SAAS,SAAS;AAE3B;AAEA,SAAS,eAAe,WAAmB,YAA4B;AACrE,MAAI,CAAC,WAAY,QAAO;AACxB,SAAO,cAAc,MAAM,IAAI,UAAU,KAAK,GAAG,SAAS,IAAI,UAAU;AAC1E;AAGA,SAAS,UAAU,WAAmB,SAAiB,WAA8B;AACnF,QAAM,eAAe,QAAQ,WAAW,GAAG,KAAK,QAAQ,SAAS,GAAG;AACpE,QAAM,aAAa,eAAe,KAAK;AACvC,QAAM,YAAY,eAAe,WAAW,UAAU;AACtD,QAAM,QAAQ,QAAQ,KAAK,WAAW,OAAO,GAAG,eAAe,KAAK,SAAS,SAAS;AAGtF,MAAI,CAAC,cAAc;AACjB,UAAM,SAAS,aAAa,OAAO;AACnC,QAAI,OAAO,SAAS,YAAY,OAAO,cAAc,QAAW;AAC9D,YAAM,UAAU,EAAE,WAAW,OAAO,WAAW,UAAU,OAAO,SAAS,WAAW;AAAA,IACtF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,QAAQ,KAAa,SAAiB,WAA8B;AAC3E,QAAM,OAAkB,EAAE,SAAS,MAAM,WAAW,UAAU,CAAC,EAAE;AACjE,mBAAiB,MAAM,GAAG;AAE1B,aAAW,SAAS,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC,GAAG;AAC7D,QAAI,CAAC,MAAM,YAAY,EAAG;AAC1B,QAAI,MAAM,KAAK,WAAW,GAAG,KAAK,MAAM,KAAK,WAAW,GAAG,EAAG;AAE9D,UAAM,QAAQ,UAAU,KAAK,MAAM,MAAM,SAAS;AAGlD,QAAI,eAAe,KAAK,GAAG;AACzB,WAAK,SAAS,KAAK,KAAK;AAAA,IAC1B;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,WAAW,QAA2B;AACpD,MAAI,CAAC,WAAW,MAAM,GAAG;AACvB,UAAM,IAAI,MAAM,iCAAiC,MAAM,EAAE;AAAA,EAC3D;AACA,MAAI,CAAC,SAAS,MAAM,EAAE,YAAY,GAAG;AACnC,UAAM,IAAI,MAAM,gCAAgC,MAAM,EAAE;AAAA,EAC1D;AACA,SAAO,QAAQ,QAAQ,IAAI,GAAG;AAChC;","names":[]}

package/dist/{chunk-DUKXQNM7.js → chunk-IHMJV2OK.js}

@@ -2,7 +2,7 @@
 import "tsx/esm";
 import {
   theoConfigSchema
-} from "./chunk-FGOX37NB.js";
+} from "./chunk-BNGBG2SQ.js";
 
 // src/config/load-env.ts
 import { lstatSync, readFileSync, realpathSync, statSync } from "fs";
@@ -231,4 +231,4 @@ export {
   loadEnv,
   loadConfig
 };
-//# sourceMappingURL=chunk-DUKXQNM7.js.map
+//# sourceMappingURL=chunk-IHMJV2OK.js.map

package/dist/{chunk-WGHJD6I7.js → chunk-JAIKGP3Q.js}

@@ -7,6 +7,12 @@ import { join } from "path";
 
 // src/vite-plugin/openapi-emit/zod-to-openapi.ts
 import { z } from "zod";
+var ZodToOpenApiError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ZodToOpenApiError";
+  }
+};
 function zodToOpenApiSchema(schema, options = {}) {
   const ctx = options.ctx ?? { seen: /* @__PURE__ */ new Map(), components: {} };
   const name = options.name;
@@ -22,42 +28,92 @@ function zodToOpenApiSchema(schema, options = {}) {
   }
   return convertSchema(schema, ctx);
 }
+function zodDef(schema) {
+  return schema.def;
+}
 function convertSchema(schema, ctx) {
   const existing = ctx.seen.get(schema);
   if (existing !== void 0) {
     return { $ref: `#/components/schemas/${existing}` };
   }
+  const def = zodDef(schema);
+  if (def?.type === "function") {
+    throw new ZodToOpenApiError(
+      "z.function() cannot be represented in an OpenAPI schema (functions are not serializable)."
+    );
+  }
+  if (def?.type === "pipe" && def.in !== void 0) {
+    return convertSchema(def.in, ctx);
+  }
   try {
     const jsonSchema = z.toJSONSchema(schema);
-    return toOpenApi3(jsonSchema);
-  } catch {
+    const out = toOpenApi3(jsonSchema);
+    if (def?.type === "union" && def.discriminator !== void 0 && out.oneOf !== void 0) {
+      out.discriminator = { propertyName: def.discriminator };
+    }
+    return out;
+  } catch (err) {
+    if (err instanceof ZodToOpenApiError) throw err;
     return {};
   }
 }
+var SAFE_INT_MIN = Number.MIN_SAFE_INTEGER;
+var SAFE_INT_MAX = Number.MAX_SAFE_INTEGER;
+function isRecord(v) {
+  return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+function isNoiseKey(key, value, isInteger, hasFormat) {
+  if (key === "pattern" && hasFormat) return true;
+  if (isInteger && key === "minimum" && value === SAFE_INT_MIN) return true;
+  if (isInteger && key === "maximum" && value === SAFE_INT_MAX) return true;
+  return false;
+}
+function normalizeValue(key, value) {
+  if (key === "properties" && isRecord(value)) {
+    const props = {};
+    for (const [pk, pv] of Object.entries(value)) props[pk] = isRecord(pv) ? toOpenApi3(pv) : pv;
+    return props;
+  }
+  if (key === "items" && isRecord(value)) return toOpenApi3(value);
+  if ((key === "anyOf" || key === "oneOf" || key === "allOf") && Array.isArray(value)) {
+    const arr = value;
+    return arr.map((v) => isRecord(v) ? toOpenApi3(v) : v);
+  }
+  if (key === "additionalProperties" && isRecord(value)) return toOpenApi3(value);
+  return value;
+}
+function convertAnyOf(branches, rest) {
+  const records = branches.filter(isRecord);
+  const hasNull = records.some((b) => b.type === "null");
+  const nonNull = records.filter((b) => b.type !== "null");
+  if (hasNull && nonNull.length === 1) {
+    return { ...toOpenApi3(nonNull[0]), nullable: true };
+  }
+  const result = { oneOf: nonNull.map((b) => toOpenApi3(b)) };
+  if (hasNull) result.nullable = true;
+  for (const [k, v] of Object.entries(rest))
+    if (k !== "anyOf") result[k] = v;
+  return result;
+}
 function toOpenApi3(js) {
   const { $schema: _, $defs: _defs, ...rest } = js;
+  if (Array.isArray(rest.anyOf)) return convertAnyOf(rest.anyOf, rest);
+  const isInteger = rest.type === "integer";
+  const hasFormat = typeof rest.format === "string";
   const out = {};
   for (const [key, value] of Object.entries(rest)) {
+    if (isNoiseKey(key, value, isInteger, hasFormat)) continue;
+    if (key === "const") {
+      out.enum = [value];
+      continue;
+    }
     if (key === "type" && Array.isArray(value)) {
-      const types = value;
-      const hasNull = types.includes("null");
+      const types = value.filter((t) => typeof t === "string");
       const nonNull = types.filter((t) => t !== "null");
       out.type = nonNull.length === 1 ? nonNull[0] : nonNull;
-      if (hasNull) out.nullable = true;
-    } else if (key === "properties" && value && typeof value === "object") {
-      const props = {};
-      for (const [pk, pv] of Object.entries(value)) {
-        props[pk] = pv && typeof pv === "object" ? toOpenApi3(pv) : pv;
-      }
-      out.properties = props;
-    } else if (key === "items" && value && typeof value === "object") {
-      out.items = toOpenApi3(value);
-    } else if ((key === "anyOf" || key === "oneOf" || key === "allOf") && Array.isArray(value)) {
-      out[key] = value.map((v) => toOpenApi3(v));
-    } else if (key === "additionalProperties" && value && typeof value === "object") {
-      out.additionalProperties = toOpenApi3(value);
+      if (types.includes("null")) out.nullable = true;
     } else {
-      out[key] = value;
+      out[key] = normalizeValue(key, value);
     }
   }
   return out;
@@ -90,8 +146,7 @@ function appendObjectAsParameters(schema, location, out, ctx) {
   const shape = schema.shape;
   if (shape === void 0) return;
   for (const [name, child] of Object.entries(shape)) {
-    const childDef = child._def;
-    const optional = childDef.typeName === "ZodOptional" || childDef.typeName === "ZodDefault";
+    const optional = child.safeParse(void 0).success;
     out.push({
       name,
       in: location,
@@ -252,4 +307,4 @@ export {
   emitOpenApi,
   loadRoutesForOpenApi
 };
-//# sourceMappingURL=chunk-WGHJD6I7.js.map
+//# sourceMappingURL=chunk-JAIKGP3Q.js.map

package/dist/chunk-JAIKGP3Q.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/vite-plugin/openapi-emit/emit.ts","../src/vite-plugin/openapi-emit/zod-to-openapi.ts","../src/vite-plugin/openapi-emit/load-routes.ts"],"sourcesContent":["/**\n * In-house `emitOpenApi()` orchestrator (build-time only).\n *\n * Pure transformation: takes a route manifest (already hydrated with Zod\n * schemas extracted from `defineRoute()` config) + the openapi config\n * block, builds an OpenAPI 3.x document, writes `<outDir>/openapi.json`,\n * returns the document for downstream callers (CLI logs, tests).\n *\n * Per G2 plan v1.1 T2.1. Modelled on trpc-openapi's\n * `generateOpenApiDocument` + encore's `Generator.Generate()`.\n *\n * NEVER ship to runtime — devDep-shaped artifact.\n *\n * Path templating: TheoKit's `:param` syntax is converted to OpenAPI's\n * `{param}` per the spec. Env-var override: `THEOKIT_OPENAPI_SERVER_URL`\n * overrides `servers[0].url` without rebuilding the config.\n */\n/* eslint-disable security/detect-non-literal-fs-filename --\n * Build-time emit. outDir is a config-controlled relative path. The\n * caller already refused absolute paths via theoConfigSchema.distDir\n * pattern; the openapi.outDir field follows the same convention.\n */\nimport { mkdirSync, writeFileSync } from 'node:fs'\nimport { join } from 'node:path'\n\nimport type { z } from 'zod'\n\nimport { zodToOpenApiSchema, type ConvertCtx, type OpenApiSchema } from './zod-to-openapi.js'\n\nexport interface OpenApiManifestRoute {\n  /** TheoKit-style path with `:param` placeholders (`/users/:id`). */\n  routePath: string\n  /** Uppercase HTTP methods the route exports (`['GET','POST']`). */\n  methods: string[]\n  /** Optional `defineRoute({body})` schema. */\n  body?: z.ZodType\n  /** Optional `defineRoute({query})` schema. */\n  query?: z.ZodType\n  /** Optional `defineRoute({params})` schema. */\n  params?: z.ZodType\n  /** Optional `defineRoute({response})` schema. */\n  response?: z.ZodType\n}\n\nexport interface OpenApiEmitConfig {\n  servers: { url: string; description?: string }[]\n  specVersion: '3.1.0' | '3.0.3'\n  title: string\n  version: string\n  outDir: string\n}\n\nexport interface OpenApiOperation {\n  operationId?: string\n  parameters?: OpenApiParameter[]\n  requestBody?: {\n    required?: boolean\n    content: Record<string, { schema: OpenApiSchema }>\n  }\n  responses: Record<\n    string,\n    { description: string; content?: Record<string, { schema: OpenApiSchema }> }\n  >\n}\n\nexport interface OpenApiParameter {\n  name: string\n  in: 'path' | 'query' | 'header' | 'cookie'\n  required: boolean\n  schema: OpenApiSchema\n  description?: string\n}\n\nexport type OpenApiPathItem = Partial<\n  Record<'get' | 'post' | 'put' | 'patch' | 'delete' | 'head' | 'options', OpenApiOperation>\n>\n\nexport interface OpenApiDocument {\n  openapi: '3.1.0' | '3.0.3'\n  info: { title: string; version: string }\n  servers: { url: string; description?: string }[]\n  paths: Record<string, OpenApiPathItem>\n  components?: { schemas?: Record<string, OpenApiSchema> }\n}\n\nexport interface EmitOpenApiInput {\n  manifest: OpenApiManifestRoute[]\n  config: OpenApiEmitConfig\n}\n\nexport interface EmitOpenApiResult {\n  document: OpenApiDocument\n  path: string\n}\n\nconst METHOD_TO_KEY: Record<string, keyof OpenApiPathItem> = {\n  GET: 'get',\n  POST: 'post',\n  PUT: 'put',\n  PATCH: 'patch',\n  DELETE: 'delete',\n  HEAD: 'head',\n  OPTIONS: 'options',\n}\n\n/** Convert `/users/:id/posts/:postId?` → `/users/{id}/posts/{postId}`. */\nexport function templatePath(routePath: string): string {\n  // Bounded quantifier (\\w{0,64}) is OSS-safe — TheoKit route param names\n  // never exceed 64 chars in practice; cap prevents super-linear backtracking.\n  return routePath.replace(/:([A-Za-z_]\\w{0,64})\\??/g, '{$1}')\n}\n\nfunction buildParameters(\n  paramsSchema: z.ZodType | undefined,\n  querySchema: z.ZodType | undefined,\n  ctx: ConvertCtx,\n): OpenApiParameter[] {\n  const out: OpenApiParameter[] = []\n  if (paramsSchema !== undefined) {\n    appendObjectAsParameters(paramsSchema, 'path', out, ctx)\n  }\n  if (querySchema !== undefined) {\n    appendObjectAsParameters(querySchema, 'query', out, ctx)\n  }\n  return out\n}\n\nfunction appendObjectAsParameters(\n  schema: z.ZodType,\n  location: 'path' | 'query',\n  out: OpenApiParameter[],\n  ctx: ConvertCtx,\n): void {\n  // We expect an object schema; if it's not, skip silently (caller already\n  // validated upstream when scanning defineRoute()).\n  const shape = (schema as unknown as { shape?: Record<string, z.ZodType> }).shape\n  if (shape === undefined) return\n  for (const [name, child] of Object.entries(shape)) {\n    // A field is optional iff the schema accepts `undefined` (covers\n    // `.optional()` + `.default()`). Runtime check via safeParse — robust\n    // across zod versions, unlike reading the changed `_def.typeName` internal\n    // (zod 3) / `def.type` (zod 4).\n    const optional = child.safeParse(undefined).success\n    out.push({\n      name,\n      in: location,\n      required: location === 'path' ? true : !optional,\n      schema: zodToOpenApiSchema(child, { ctx }),\n    })\n  }\n}\n\nfunction buildOperation(\n  route: OpenApiManifestRoute,\n  ctx: ConvertCtx,\n  method: string,\n): OpenApiOperation {\n  // Bounded sanitizer: two single-pass replacements (no nested quantifiers).\n  const sanitized = route.routePath.replace(/[/:\\-{}]/g, '_').replace(/_+/g, '_')\n  const operationId = `${method.toLowerCase()}_${sanitized.replace(/^_|_$/g, '')}`\n  const op: OpenApiOperation = {\n    operationId,\n    responses: {\n      '200': { description: 'OK' },\n    },\n  }\n\n  const parameters = buildParameters(route.params, route.query, ctx)\n  if (parameters.length > 0) op.parameters = parameters\n\n  // Body only meaningful for write methods; we still attach if defined so\n  // the document is honest about the contract.\n  if (route.body !== undefined) {\n    op.requestBody = {\n      required: true,\n      content: {\n        'application/json': { schema: zodToOpenApiSchema(route.body, { ctx }) },\n      },\n    }\n  }\n\n  if (route.response !== undefined) {\n    op.responses['200'] = {\n      description: 'OK',\n      content: {\n        'application/json': { schema: zodToOpenApiSchema(route.response, { ctx }) },\n      },\n    }\n  }\n\n  return op\n}\n\nexport function emitOpenApi(input: EmitOpenApiInput): EmitOpenApiResult {\n  const { manifest, config } = input\n\n  const ctx: ConvertCtx = { seen: new Map(), components: {} }\n\n  const paths: Record<string, OpenApiPathItem> = {}\n  for (const route of manifest) {\n    const templatedPath = templatePath(route.routePath)\n    const item: OpenApiPathItem = paths[templatedPath] ?? {}\n    for (const method of route.methods) {\n      // Defensive: manifest emitter normalizes to uppercase, but if a\n      // future scanner produces a non-HTTP verb the key lookup yields\n      // undefined and we skip silently. TS narrows the indexed type to\n      // keyof OpenApiPathItem; the runtime undefined check is honest.\n      const key = METHOD_TO_KEY[method.toUpperCase()] as keyof OpenApiPathItem | undefined\n      if (key === undefined) continue\n      item[key] = buildOperation(route, ctx, method)\n    }\n    paths[templatedPath] = item\n  }\n\n  const servers = applyServerOverride(config.servers)\n\n  const document: OpenApiDocument = {\n    openapi: config.specVersion,\n    info: { title: config.title, version: config.version },\n    servers,\n    paths,\n  }\n\n  if (Object.keys(ctx.components).length > 0) {\n    document.components = { schemas: ctx.components }\n  }\n\n  mkdirSync(config.outDir, { recursive: true })\n  const outPath = join(config.outDir, 'openapi.json')\n  writeFileSync(outPath, `${JSON.stringify(document, null, 2)}\\n`, 'utf8')\n\n  return { document, path: outPath }\n}\n\nfunction applyServerOverride(\n  servers: { url: string; description?: string }[],\n): { url: string; description?: string }[] {\n  const override = process.env.THEOKIT_OPENAPI_SERVER_URL\n  if (override === undefined || override === '') return servers\n  if (servers.length === 0) return [{ url: override }]\n  const [first, ...rest] = servers\n  return [\n    {\n      url: override,\n      ...(first.description !== undefined ? { description: first.description } : {}),\n    },\n    ...rest,\n  ]\n}\n","/**\n * Zod → OpenAPI 3.0 Schema converter (build-time only).\n *\n * Uses Zod v4's native `z.toJSONSchema()` and post-processes\n * the JSON Schema output into OpenAPI 3.0 format:\n *   - Removes `$schema` (invalid in OpenAPI 3.0)\n *   - Converts `type: [\"string\", \"null\"]` → `{ type: \"string\", nullable: true }`\n *   - Recursively normalizes nested schemas\n *\n * NEVER ship to runtime — devDep-shaped artifact.\n */\nimport { z } from 'zod'\n\nexport interface OpenApiSchema {\n  type?: 'string' | 'number' | 'integer' | 'boolean' | 'array' | 'object' | 'null'\n  format?: string\n  items?: OpenApiSchema\n  properties?: Record<string, OpenApiSchema>\n  required?: string[]\n  additionalProperties?: boolean | OpenApiSchema\n  oneOf?: OpenApiSchema[]\n  anyOf?: OpenApiSchema[]\n  allOf?: OpenApiSchema[]\n  discriminator?: { propertyName: string; mapping?: Record<string, string> }\n  enum?: unknown[]\n  nullable?: boolean\n  description?: string\n  default?: unknown\n  $ref?: string\n}\n\nexport interface ConvertCtx {\n  seen: Map<z.ZodType, string>\n  components: Record<string, OpenApiSchema>\n}\n\nexport interface ConvertOptions {\n  ctx?: ConvertCtx\n  name?: string\n}\n\nexport class ZodToOpenApiError extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'ZodToOpenApiError'\n  }\n}\n\nexport function zodToOpenApiSchema(schema: z.ZodType, options: ConvertOptions = {}): OpenApiSchema {\n  const ctx: ConvertCtx = options.ctx ?? { seen: new Map(), components: {} }\n\n  const name = options.name\n  if (name !== undefined) {\n    if (Object.prototype.hasOwnProperty.call(ctx.components, name)) {\n      return { $ref: `#/components/schemas/${name}` }\n    }\n    ctx.seen.set(schema, name)\n    ctx.components[name] = {}\n    const body = convertSchema(schema, ctx)\n    ctx.components[name] = body\n    return { $ref: `#/components/schemas/${name}` }\n  }\n\n  return convertSchema(schema, ctx)\n}\n\ninterface ZodInternalDef {\n  type?: string\n  discriminator?: string\n  in?: z.ZodType\n}\n\n/** Read zod v4's internal schema def (the `.def` getter) without a hard `any`. */\nfunction zodDef(schema: z.ZodType): ZodInternalDef | undefined {\n  return (schema as unknown as { def?: ZodInternalDef }).def\n}\n\nfunction convertSchema(schema: z.ZodType, ctx: ConvertCtx): OpenApiSchema {\n  const existing = ctx.seen.get(schema)\n  if (existing !== undefined) {\n    return { $ref: `#/components/schemas/${existing}` }\n  }\n\n  const def = zodDef(schema)\n  // Fail loud on schema kinds that have no OpenAPI representation (rather than\n  // swallowing the zod throw into `{}`). z.function() is the canonical case.\n  if (def?.type === 'function') {\n    throw new ZodToOpenApiError(\n      'z.function() cannot be represented in an OpenAPI schema (functions are not serializable).',\n    )\n  }\n\n  // A transform / pipe (`z.string().transform(...)`) has no JSON-Schema of its\n  // own — zod throws. The wire shape is the INPUT (transforms run post-parse),\n  // so emit the input schema. This avoids the global `io: 'input'` mode, which\n  // would also flip object `additionalProperties` semantics.\n  if (def?.type === 'pipe' && def.in !== undefined) {\n    return convertSchema(def.in, ctx)\n  }\n\n  try {\n    const jsonSchema = z.toJSONSchema(schema) as Record<string, unknown>\n    const out = toOpenApi3(jsonSchema)\n    // zod v4 emits a discriminated union as `oneOf` but drops the discriminator\n    // key; re-attach it from the zod def so OpenAPI consumers can branch.\n    if (def?.type === 'union' && def.discriminator !== undefined && out.oneOf !== undefined) {\n      out.discriminator = { propertyName: def.discriminator }\n    }\n    return out\n  } catch (err) {\n    if (err instanceof ZodToOpenApiError) throw err\n    return {}\n  }\n}\n\n/** JS safe-integer bounds zod v4 attaches to `.int()` — noise for OpenAPI, stripped. */\nconst SAFE_INT_MIN = Number.MIN_SAFE_INTEGER\nconst SAFE_INT_MAX = Number.MAX_SAFE_INTEGER\n\nfunction isRecord(v: unknown): v is Record<string, unknown> {\n  return v !== null && typeof v === 'object' && !Array.isArray(v)\n}\n\n/** Drop zod-v4 noise keys: redundant `pattern` when `format` is set; JS safe-integer sentinel bounds. */\nfunction isNoiseKey(key: string, value: unknown, isInteger: boolean, hasFormat: boolean): boolean {\n  if (key === 'pattern' && hasFormat) return true\n  if (isInteger && key === 'minimum' && value === SAFE_INT_MIN) return true\n  if (isInteger && key === 'maximum' && value === SAFE_INT_MAX) return true\n  return false\n}\n\n/** Recursively normalize one JSON-Schema value (properties/items/*Of/additionalProperties). */\nfunction normalizeValue(key: string, value: unknown): unknown {\n  if (key === 'properties' && isRecord(value)) {\n    const props: Record<string, unknown> = {}\n    for (const [pk, pv] of Object.entries(value)) props[pk] = isRecord(pv) ? toOpenApi3(pv) : pv\n    return props\n  }\n  if (key === 'items' && isRecord(value)) return toOpenApi3(value)\n  if ((key === 'anyOf' || key === 'oneOf' || key === 'allOf') && Array.isArray(value)) {\n    const arr: unknown[] = value\n    return arr.map((v) => (isRecord(v) ? toOpenApi3(v) : v))\n  }\n  if (key === 'additionalProperties' && isRecord(value)) return toOpenApi3(value)\n  return value\n}\n\n/** Convert zod v4's `anyOf` (used for `.nullable()` + `z.union()`) to OpenAPI 3.0 shape. */\nfunction convertAnyOf(branches: unknown[], rest: Record<string, unknown>): OpenApiSchema {\n  const records = branches.filter(isRecord)\n  const hasNull = records.some((b) => b.type === 'null')\n  const nonNull = records.filter((b) => b.type !== 'null')\n  if (hasNull && nonNull.length === 1) {\n    return { ...toOpenApi3(nonNull[0]), nullable: true }\n  }\n  const result: OpenApiSchema = { oneOf: nonNull.map((b) => toOpenApi3(b)) }\n  if (hasNull) result.nullable = true\n  for (const [k, v] of Object.entries(rest))\n    if (k !== 'anyOf') (result as Record<string, unknown>)[k] = v\n  return result\n}\n\n/**\n * Post-process JSON Schema (draft-2020-12) → OpenAPI 3.0:\n *   - strip `$schema`/`$defs`\n *   - `.nullable()`/union `anyOf` → `nullable: true` / `oneOf`\n *   - `type: [\"string\",\"null\"]` → `{ type: \"string\", nullable: true }`\n *   - drop zod-v4 noise (redundant pattern, safe-integer bounds)\n *   - recurse into nested schemas\n */\nfunction toOpenApi3(js: Record<string, unknown>): OpenApiSchema {\n  const { $schema: _, $defs: _defs, ...rest } = js\n  if (Array.isArray(rest.anyOf)) return convertAnyOf(rest.anyOf, rest)\n\n  const isInteger = rest.type === 'integer'\n  const hasFormat = typeof rest.format === 'string'\n  const out: Record<string, unknown> = {}\n\n  for (const [key, value] of Object.entries(rest)) {\n    if (isNoiseKey(key, value, isInteger, hasFormat)) continue\n    // `const` is JSON-Schema / OpenAPI-3.1 only; `enum: [x]` is the 3.0-and-3.1\n    // compatible spelling. zod v4 emits `const` for literals (discriminator tags).\n    if (key === 'const') {\n      out.enum = [value]\n      continue\n    }\n    if (key === 'type' && Array.isArray(value)) {\n      const types = value.filter((t): t is string => typeof t === 'string')\n      const nonNull = types.filter((t) => t !== 'null')\n      out.type = nonNull.length === 1 ? nonNull[0] : nonNull\n      if (types.includes('null')) out.nullable = true\n    } else {\n      out[key] = normalizeValue(key, value)\n    }\n  }\n\n  return out\n}\n","/**\n * Build-time route loader for OpenAPI emit.\n *\n * Takes the G1 manifest (filePath + routePath + methods) and hydrates each\n * route's Zod schemas by dynamically importing the module. `defineRoute`\n * is an identity function, so the imported config exposes `body/query/\n * params/response` directly without any AST gymnastics.\n *\n * Supports both export shapes:\n *   1. `export const POST = defineRoute({...})` (per-method named exports)\n *   2. `export default defineRoute({...})` (single-export legacy shape)\n *\n * Per G2 plan v1.1 T2.2. Uses Vite's `ssrLoadModule` because route files\n * are TS at build time — Node's native loader doesn't transpile.\n */\nimport { resolve } from 'node:path'\n\nimport type { z } from 'zod'\n\nimport type { ManifestRoute } from '../../server/scan/manifest.js'\n\nimport type { OpenApiManifestRoute } from './emit.js'\n\ninterface RouteConfigShape {\n  body?: z.ZodType\n  query?: z.ZodType\n  params?: z.ZodType\n  response?: z.ZodType\n}\n\ninterface ViteLikeServer {\n  ssrLoadModule: (id: string) => Promise<Record<string, unknown>>\n  close: () => Promise<void>\n}\n\ninterface DefaultLoader {\n  load: (absPath: string) => Promise<Record<string, unknown>>\n  dispose: () => Promise<void>\n}\n\n/** Method names recognized as per-route named exports (UPPERCASE). */\nconst HTTP_METHOD_KEYS = ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', 'OPTIONS'] as const\n\nexport interface LoadRoutesOptions {\n  serverDir: string\n  routes: ManifestRoute[]\n  /** Injectable for tests; defaults to a fresh Vite SSR dev server. */\n  loadModule?: (absPath: string) => Promise<Record<string, unknown>>\n}\n\n/**\n * Hydrate manifest routes with Zod schemas extracted from their modules.\n *\n * Returns one `OpenApiManifestRoute` per (file × method) tuple. If a route\n * file declares multiple methods (`GET` + `POST`), each method gets its\n * own entry with the schemas from that method's `defineRoute()` call.\n *\n * Routes that fail to load are skipped with a console warning — the emit\n * should be best-effort, not a hard build failure.\n *\n * The default Vite loader is created once per call and disposed in the\n * `finally` block so the underlying server is released even when route\n * loading throws.\n */\nexport async function loadRoutesForOpenApi(\n  options: LoadRoutesOptions,\n): Promise<OpenApiManifestRoute[]> {\n  const { serverDir, routes } = options\n  let loadModule = options.loadModule\n  let dispose: (() => Promise<void>) | undefined\n  if (loadModule === undefined) {\n    const created = await createDefaultLoader(serverDir)\n    loadModule = created.load\n    dispose = created.dispose\n  }\n\n  const out: OpenApiManifestRoute[] = []\n  try {\n    for (const r of routes) {\n      const abs = resolve(serverDir, r.filePath)\n      let mod: Record<string, unknown>\n      try {\n        mod = await loadModule(abs)\n      } catch (err) {\n        console.warn(\n          `[openapi-emit] Skipping ${r.filePath}: load failed (${(err as Error).message})`,\n        )\n        continue\n      }\n\n      const methods = r.methods ?? HTTP_METHOD_KEYS.filter((m) => mod[m] !== undefined)\n      if (methods.length === 0) {\n        // Fall back to default export when no method-named exports detected.\n        const def = mod.default\n        if (def !== undefined && def !== null) {\n          out.push({ routePath: r.routePath, methods: ['GET'], ...extractSchemas(def) })\n        }\n        continue\n      }\n\n      for (const method of methods) {\n        const handler = mod[method] ?? mod.default\n        if (handler === undefined || handler === null) continue\n        out.push({ routePath: r.routePath, methods: [method], ...extractSchemas(handler) })\n      }\n    }\n  } finally {\n    if (dispose !== undefined) {\n      await dispose()\n    }\n  }\n  return out\n}\n\nfunction extractSchemas(handlerExport: unknown): RouteConfigShape {\n  if (typeof handlerExport !== 'object' || handlerExport === null) return {}\n  const cfg = handlerExport as RouteConfigShape\n  const out: RouteConfigShape = {}\n  if (cfg.body !== undefined) out.body = cfg.body\n  if (cfg.query !== undefined) out.query = cfg.query\n  if (cfg.params !== undefined) out.params = cfg.params\n  if (cfg.response !== undefined) out.response = cfg.response\n  return out\n}\n\n/**\n * Default loader: spin up a minimal Vite SSR dev server (no HMR, no\n * middlewares) just to use its `ssrLoadModule`. Vite handles TS, ESM, and\n * import resolution for free.\n *\n * Returns `{load, dispose}` — the caller owns the lifecycle and MUST\n * call `dispose()` (typically in a `finally`) so the server is closed.\n */\nasync function createDefaultLoader(serverDir: string): Promise<DefaultLoader> {\n  // Vite is a peerDep in build flows; import dynamically.\n  const { createServer } = await import('vite')\n  const server = (await createServer({\n    root: serverDir,\n    configFile: false,\n    server: { middlewareMode: true },\n    appType: 'custom',\n    logLevel: 'silent',\n  })) as unknown as ViteLikeServer\n\n  const swallow = (): void => {\n    /* eat close errors — best-effort cleanup */\n  }\n  return {\n    load: async (absPath) => server.ssrLoadModule(absPath),\n    dispose: async () => {\n      await server.close().catch(swallow)\n    },\n  }\n}\n"],"mappings":";;;;AAsBA,SAAS,WAAW,qBAAqB;AACzC,SAAS,YAAY;;;ACZrB,SAAS,SAAS;AA8BX,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAC3C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,mBAAmB,QAAmB,UAA0B,CAAC,GAAkB;AACjG,QAAM,MAAkB,QAAQ,OAAO,EAAE,MAAM,oBAAI,IAAI,GAAG,YAAY,CAAC,EAAE;AAEzE,QAAM,OAAO,QAAQ;AACrB,MAAI,SAAS,QAAW;AACtB,QAAI,OAAO,UAAU,eAAe,KAAK,IAAI,YAAY,IAAI,GAAG;AAC9D,aAAO,EAAE,MAAM,wBAAwB,IAAI,GAAG;AAAA,IAChD;AACA,QAAI,KAAK,IAAI,QAAQ,IAAI;AACzB,QAAI,WAAW,IAAI,IAAI,CAAC;AACxB,UAAM,OAAO,cAAc,QAAQ,GAAG;AACtC,QAAI,WAAW,IAAI,IAAI;AACvB,WAAO,EAAE,MAAM,wBAAwB,IAAI,GAAG;AAAA,EAChD;AAEA,SAAO,cAAc,QAAQ,GAAG;AAClC;AASA,SAAS,OAAO,QAA+C;AAC7D,SAAQ,OAA+C;AACzD;AAEA,SAAS,cAAc,QAAmB,KAAgC;AACxE,QAAM,WAAW,IAAI,KAAK,IAAI,MAAM;AACpC,MAAI,aAAa,QAAW;AAC1B,WAAO,EAAE,MAAM,wBAAwB,QAAQ,GAAG;AAAA,EACpD;AAEA,QAAM,MAAM,OAAO,MAAM;AAGzB,MAAI,KAAK,SAAS,YAAY;AAC5B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAMA,MAAI,KAAK,SAAS,UAAU,IAAI,OAAO,QAAW;AAChD,WAAO,cAAc,IAAI,IAAI,GAAG;AAAA,EAClC;AAEA,MAAI;AACF,UAAM,aAAa,EAAE,aAAa,MAAM;AACxC,UAAM,MAAM,WAAW,UAAU;AAGjC,QAAI,KAAK,SAAS,WAAW,IAAI,kBAAkB,UAAa,IAAI,UAAU,QAAW;AACvF,UAAI,gBAAgB,EAAE,cAAc,IAAI,cAAc;AAAA,IACxD;AACA,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,QAAI,eAAe,kBAAmB,OAAM;AAC5C,WAAO,CAAC;AAAA,EACV;AACF;AAGA,IAAM,eAAe,OAAO;AAC5B,IAAM,eAAe,OAAO;AAE5B,SAAS,SAAS,GAA0C;AAC1D,SAAO,MAAM,QAAQ,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC;AAChE;AAGA,SAAS,WAAW,KAAa,OAAgB,WAAoB,WAA6B;AAChG,MAAI,QAAQ,aAAa,UAAW,QAAO;AAC3C,MAAI,aAAa,QAAQ,aAAa,UAAU,aAAc,QAAO;AACrE,MAAI,aAAa,QAAQ,aAAa,UAAU,aAAc,QAAO;AACrE,SAAO;AACT;AAGA,SAAS,eAAe,KAAa,OAAyB;AAC5D,MAAI,QAAQ,gBAAgB,SAAS,KAAK,GAAG;AAC3C,UAAM,QAAiC,CAAC;AACxC,eAAW,CAAC,IAAI,EAAE,KAAK,OAAO,QAAQ,KAAK,EAAG,OAAM,EAAE,IAAI,SAAS,EAAE,IAAI,WAAW,EAAE,IAAI;AAC1F,WAAO;AAAA,EACT;AACA,MAAI,QAAQ,WAAW,SAAS,KAAK,EAAG,QAAO,WAAW,KAAK;AAC/D,OAAK,QAAQ,WAAW,QAAQ,WAAW,QAAQ,YAAY,MAAM,QAAQ,KAAK,GAAG;AACnF,UAAM,MAAiB;AACvB,WAAO,IAAI,IAAI,CAAC,MAAO,SAAS,CAAC,IAAI,WAAW,CAAC,IAAI,CAAE;AAAA,EACzD;AACA,MAAI,QAAQ,0BAA0B,SAAS,KAAK,EAAG,QAAO,WAAW,KAAK;AAC9E,SAAO;AACT;AAGA,SAAS,aAAa,UAAqB,MAA8C;AACvF,QAAM,UAAU,SAAS,OAAO,QAAQ;AACxC,QAAM,UAAU,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,MAAM;AACrD,QAAM,UAAU,QAAQ,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM;AACvD,MAAI,WAAW,QAAQ,WAAW,GAAG;AACnC,WAAO,EAAE,GAAG,WAAW,QAAQ,CAAC,CAAC,GAAG,UAAU,KAAK;AAAA,EACrD;AACA,QAAM,SAAwB,EAAE,OAAO,QAAQ,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC,EAAE;AACzE,MAAI,QAAS,QAAO,WAAW;AAC/B,aAAW,CAAC,GAAG,CAAC,KAAK,OAAO,QAAQ,IAAI;AACtC,QAAI,MAAM,QAAS,CAAC,OAAmC,CAAC,IAAI;AAC9D,SAAO;AACT;AAUA,SAAS,WAAW,IAA4C;AAC9D,QAAM,EAAE,SAAS,GAAG,OAAO,OAAO,GAAG,KAAK,IAAI;AAC9C,MAAI,MAAM,QAAQ,KAAK,KAAK,EAAG,QAAO,aAAa,KAAK,OAAO,IAAI;AAEnE,QAAM,YAAY,KAAK,SAAS;AAChC,QAAM,YAAY,OAAO,KAAK,WAAW;AACzC,QAAM,MAA+B,CAAC;AAEtC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC/C,QAAI,WAAW,KAAK,OAAO,WAAW,SAAS,EAAG;AAGlD,QAAI,QAAQ,SAAS;AACnB,UAAI,OAAO,CAAC,KAAK;AACjB;AAAA,IACF;AACA,QAAI,QAAQ,UAAU,MAAM,QAAQ,KAAK,GAAG;AAC1C,YAAM,QAAQ,MAAM,OAAO,CAAC,MAAmB,OAAO,MAAM,QAAQ;AACpE,YAAM,UAAU,MAAM,OAAO,CAAC,MAAM,MAAM,MAAM;AAChD,UAAI,OAAO,QAAQ,WAAW,IAAI,QAAQ,CAAC,IAAI;AAC/C,UAAI,MAAM,SAAS,MAAM,EAAG,KAAI,WAAW;AAAA,IAC7C,OAAO;AACL,UAAI,GAAG,IAAI,eAAe,KAAK,KAAK;AAAA,IACtC;AAAA,EACF;AAEA,SAAO;AACT;;;ADtGA,IAAM,gBAAuD;AAAA,EAC3D,KAAK;AAAA,EACL,MAAM;AAAA,EACN,KAAK;AAAA,EACL,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,SAAS;AACX;AAGO,SAAS,aAAa,WAA2B;AAGtD,SAAO,UAAU,QAAQ,4BAA4B,MAAM;AAC7D;AAEA,SAAS,gBACP,cACA,aACA,KACoB;AACpB,QAAM,MAA0B,CAAC;AACjC,MAAI,iBAAiB,QAAW;AAC9B,6BAAyB,cAAc,QAAQ,KAAK,GAAG;AAAA,EACzD;AACA,MAAI,gBAAgB,QAAW;AAC7B,6BAAyB,aAAa,SAAS,KAAK,GAAG;AAAA,EACzD;AACA,SAAO;AACT;AAEA,SAAS,yBACP,QACA,UACA,KACA,KACM;AAGN,QAAM,QAAS,OAA4D;AAC3E,MAAI,UAAU,OAAW;AACzB,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AAKjD,UAAM,WAAW,MAAM,UAAU,MAAS,EAAE;AAC5C,QAAI,KAAK;AAAA,MACP;AAAA,MACA,IAAI;AAAA,MACJ,UAAU,aAAa,SAAS,OAAO,CAAC;AAAA,MACxC,QAAQ,mBAAmB,OAAO,EAAE,IAAI,CAAC;AAAA,IAC3C,CAAC;AAAA,EACH;AACF;AAEA,SAAS,eACP,OACA,KACA,QACkB;AAElB,QAAM,YAAY,MAAM,UAAU,QAAQ,aAAa,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9E,QAAM,cAAc,GAAG,OAAO,YAAY,CAAC,IAAI,UAAU,QAAQ,UAAU,EAAE,CAAC;AAC9E,QAAM,KAAuB;AAAA,IAC3B;AAAA,IACA,WAAW;AAAA,MACT,OAAO,EAAE,aAAa,KAAK;AAAA,IAC7B;AAAA,EACF;AAEA,QAAM,aAAa,gBAAgB,MAAM,QAAQ,MAAM,OAAO,GAAG;AACjE,MAAI,WAAW,SAAS,EAAG,IAAG,aAAa;AAI3C,MAAI,MAAM,SAAS,QAAW;AAC5B,OAAG,cAAc;AAAA,MACf,UAAU;AAAA,MACV,SAAS;AAAA,QACP,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,MAAM,EAAE,IAAI,CAAC,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAEA,MAAI,MAAM,aAAa,QAAW;AAChC,OAAG,UAAU,KAAK,IAAI;AAAA,MACpB,aAAa;AAAA,MACb,SAAS;AAAA,QACP,oBAAoB,EAAE,QAAQ,mBAAmB,MAAM,UAAU,EAAE,IAAI,CAAC,EAAE;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,YAAY,OAA4C;AACtE,QAAM,EAAE,UAAU,OAAO,IAAI;AAE7B,QAAM,MAAkB,EAAE,MAAM,oBAAI,IAAI,GAAG,YAAY,CAAC,EAAE;AAE1D,QAAM,QAAyC,CAAC;AAChD,aAAW,SAAS,UAAU;AAC5B,UAAM,gBAAgB,aAAa,MAAM,SAAS;AAClD,UAAM,OAAwB,MAAM,aAAa,KAAK,CAAC;AACvD,eAAW,UAAU,MAAM,SAAS;AAKlC,YAAM,MAAM,cAAc,OAAO,YAAY,CAAC;AAC9C,UAAI,QAAQ,OAAW;AACvB,WAAK,GAAG,IAAI,eAAe,OAAO,KAAK,MAAM;AAAA,IAC/C;AACA,UAAM,aAAa,IAAI;AAAA,EACzB;AAEA,QAAM,UAAU,oBAAoB,OAAO,OAAO;AAElD,QAAM,WAA4B;AAAA,IAChC,SAAS,OAAO;AAAA,IAChB,MAAM,EAAE,OAAO,OAAO,OAAO,SAAS,OAAO,QAAQ;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,IAAI,UAAU,EAAE,SAAS,GAAG;AAC1C,aAAS,aAAa,EAAE,SAAS,IAAI,WAAW;AAAA,EAClD;AAEA,YAAU,OAAO,QAAQ,EAAE,WAAW,KAAK,CAAC;AAC5C,QAAM,UAAU,KAAK,OAAO,QAAQ,cAAc;AAClD,gBAAc,SAAS,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AAEvE,SAAO,EAAE,UAAU,MAAM,QAAQ;AACnC;AAEA,SAAS,oBACP,SACyC;AACzC,QAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,aAAa,UAAa,aAAa,GAAI,QAAO;AACtD,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC,EAAE,KAAK,SAAS,CAAC;AACnD,QAAM,CAAC,OAAO,GAAG,IAAI,IAAI;AACzB,SAAO;AAAA,IACL;AAAA,MACE,KAAK;AAAA,MACL,GAAI,MAAM,gBAAgB,SAAY,EAAE,aAAa,MAAM,YAAY,IAAI,CAAC;AAAA,IAC9E;AAAA,IACA,GAAG;AAAA,EACL;AACF;;;AEzOA,SAAS,eAAe;AA0BxB,IAAM,mBAAmB,CAAC,OAAO,QAAQ,OAAO,SAAS,UAAU,QAAQ,SAAS;AAuBpF,eAAsB,qBACpB,SACiC;AACjC,QAAM,EAAE,WAAW,OAAO,IAAI;AAC9B,MAAI,aAAa,QAAQ;AACzB,MAAI;AACJ,MAAI,eAAe,QAAW;AAC5B,UAAM,UAAU,MAAM,oBAAoB,SAAS;AACnD,iBAAa,QAAQ;AACrB,cAAU,QAAQ;AAAA,EACpB;AAEA,QAAM,MAA8B,CAAC;AACrC,MAAI;AACF,eAAW,KAAK,QAAQ;AACtB,YAAM,MAAM,QAAQ,WAAW,EAAE,QAAQ;AACzC,UAAI;AACJ,UAAI;AACF,cAAM,MAAM,WAAW,GAAG;AAAA,MAC5B,SAAS,KAAK;AACZ,gBAAQ;AAAA,UACN,2BAA2B,EAAE,QAAQ,kBAAmB,IAAc,OAAO;AAAA,QAC/E;AACA;AAAA,MACF;AAEA,YAAM,UAAU,EAAE,WAAW,iBAAiB,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,MAAS;AAChF,UAAI,QAAQ,WAAW,GAAG;AAExB,cAAM,MAAM,IAAI;AAChB,YAAI,QAAQ,UAAa,QAAQ,MAAM;AACrC,cAAI,KAAK,EAAE,WAAW,EAAE,WAAW,SAAS,CAAC,KAAK,GAAG,GAAG,eAAe,GAAG,EAAE,CAAC;AAAA,QAC/E;AACA;AAAA,MACF;AAEA,iBAAW,UAAU,SAAS;AAC5B,cAAM,UAAU,IAAI,MAAM,KAAK,IAAI;AACnC,YAAI,YAAY,UAAa,YAAY,KAAM;AAC/C,YAAI,KAAK,EAAE,WAAW,EAAE,WAAW,SAAS,CAAC,MAAM,GAAG,GAAG,eAAe,OAAO,EAAE,CAAC;AAAA,MACpF;AAAA,IACF;AAAA,EACF,UAAE;AACA,QAAI,YAAY,QAAW;AACzB,YAAM,QAAQ;AAAA,IAChB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,eAAe,eAA0C;AAChE,MAAI,OAAO,kBAAkB,YAAY,kBAAkB,KAAM,QAAO,CAAC;AACzE,QAAM,MAAM;AACZ,QAAM,MAAwB,CAAC;AAC/B,MAAI,IAAI,SAAS,OAAW,KAAI,OAAO,IAAI;AAC3C,MAAI,IAAI,UAAU,OAAW,KAAI,QAAQ,IAAI;AAC7C,MAAI,IAAI,WAAW,OAAW,KAAI,SAAS,IAAI;AAC/C,MAAI,IAAI,aAAa,OAAW,KAAI,WAAW,IAAI;AACnD,SAAO;AACT;AAUA,eAAe,oBAAoB,WAA2C;AAE5E,QAAM,EAAE,aAAa,IAAI,MAAM,OAAO,MAAM;AAC5C,QAAM,SAAU,MAAM,aAAa;AAAA,IACjC,MAAM;AAAA,IACN,YAAY;AAAA,IACZ,QAAQ,EAAE,gBAAgB,KAAK;AAAA,IAC/B,SAAS;AAAA,IACT,UAAU;AAAA,EACZ,CAAC;AAED,QAAM,UAAU,MAAY;AAAA,EAE5B;AACA,SAAO;AAAA,IACL,MAAM,OAAO,YAAY,OAAO,cAAc,OAAO;AAAA,IACrD,SAAS,YAAY;AACnB,YAAM,OAAO,MAAM,EAAE,MAAM,OAAO;AAAA,IACpC;AAAA,EACF;AACF;","names":[]}