tidewave 0.6.0 → 0.7.0

package/dist/next-js/handler.js

@@ -4,25 +4,43 @@ var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toESMCache_node;
+var __toESMCache_esm;
 var __toESM = (mod, isNodeMode, target) => {
+  var canCache = mod != null && typeof mod === "object";
+  if (canCache) {
+    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
+    var cached = cache.get(mod);
+    if (cached)
+      return cached;
+  }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
   for (let key of __getOwnPropNames(mod))
     if (!__hasOwnProp.call(to, key))
       __defProp(to, key, {
-        get: () => mod[key],
+        get: __accessProp.bind(mod, key),
         enumerable: true
       });
+  if (canCache)
+    cache.set(mod, to);
   return to;
 };
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
       get: all[name],
       enumerable: true,
       configurable: true,
-      set: (newValue) => all[name] = () => newValue
+      set: __exportSetter.bind(all, name)
     });
 };
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
@@ -1674,65 +1692,6 @@ function isLocalIp(ip) {
     return true;
   return false;
 }
-function checkOrigin(req, res, config) {
-  const { origin } = req.headers;
-  if (!origin)
-    return true;
-  const allowedOrigins = config.allowedOrigins || getDefaultAllowedOrigins(config);
-  const originUrl = parseUrl(origin);
-  if (!originUrl) {
-    const message = `For security reasons, Tidewave only accepts requests from allowed origins.
-
-Invalid origin: ${origin}`;
-    console.warn(message);
-    res.statusCode = 403;
-    res.end(message);
-    return false;
-  }
-  const isAllowed = allowedOrigins.some((allowed) => isOriginAllowed(originUrl, parseUrl(allowed)));
-  if (!isAllowed) {
-    const message = `For security reasons, Tidewave only accepts requests from the same origin your web app is running on.
-
-If you really want to allow remote connections, configure the Tidewave with the \`allowedOrigins: [${JSON.stringify(origin)}]\` option.`;
-    console.warn(message);
-    res.statusCode = 403;
-    res.end(message);
-    return false;
-  }
-  return true;
-}
-function getDefaultAllowedOrigins(config) {
-  const { host, port } = config;
-  if (!(host || port))
-    return [];
-  return [`http://${host}:${port}`, `https://${host}:${port}`];
-}
-function parseUrl(url) {
-  try {
-    const isProtocolRelative = url.startsWith("//");
-    const parsed = new URL(isProtocolRelative ? "http:" + url : url);
-    return {
-      scheme: isProtocolRelative ? undefined : parsed.protocol?.slice(0, -1),
-      host: parsed.hostname,
-      port: parsed.port ? parseInt(parsed.port) : undefined
-    };
-  } catch {
-    return null;
-  }
-}
-function isOriginAllowed(origin, allowed) {
-  if (!origin || !allowed)
-    return false;
-  if (allowed.scheme && origin.scheme !== allowed.scheme)
-    return false;
-  if (allowed.port && origin.port !== allowed.port)
-    return false;
-  if (allowed.host.startsWith("*.")) {
-    const allowedDomain = allowed.host.slice(2);
-    return origin.host === allowedDomain || origin.host.endsWith("." + allowedDomain);
-  }
-  return origin.host === allowed.host;
-}
 
 // node_modules/zod/v3/helpers/util.js
 var util, objectUtil, ZodParsedType, getParsedType = (data) => {
@@ -11828,10 +11787,10 @@ var require_uri_all = __commonJS((exports, module) => {
       }
       return output;
     }
-    var ucs2encode = function ucs2encode(array) {
+    var ucs2encode = function ucs2encode2(array) {
       return String.fromCodePoint.apply(String, toConsumableArray(array));
     };
-    var basicToDigit = function basicToDigit(codePoint) {
+    var basicToDigit = function basicToDigit2(codePoint) {
       if (codePoint - 48 < 10) {
         return codePoint - 22;
       }
@@ -11843,10 +11802,10 @@ var require_uri_all = __commonJS((exports, module) => {
       }
       return base;
     };
-    var digitToBasic = function digitToBasic(digit, flag) {
+    var digitToBasic = function digitToBasic2(digit, flag) {
       return digit + 22 + 75 * (digit < 26) - ((flag != 0) << 5);
     };
-    var adapt = function adapt(delta, numPoints, firstTime) {
+    var adapt = function adapt2(delta, numPoints, firstTime) {
       var k = 0;
       delta = firstTime ? floor(delta / damp) : delta >> 1;
       delta += floor(delta / numPoints);
@@ -11855,7 +11814,7 @@ var require_uri_all = __commonJS((exports, module) => {
       }
       return floor(k + (baseMinusTMin + 1) * delta / (delta + skew));
     };
-    var decode = function decode(input) {
+    var decode = function decode2(input) {
       var output = [];
       var inputLength = input.length;
       var i = 0;
@@ -11903,7 +11862,7 @@ var require_uri_all = __commonJS((exports, module) => {
       }
       return String.fromCodePoint.apply(String, output);
     };
-    var encode = function encode(input) {
+    var encode = function encode2(input) {
       var output = [];
       input = ucs2decode(input);
       var inputLength = input.length;
@@ -12017,12 +11976,12 @@ var require_uri_all = __commonJS((exports, module) => {
       }
       return output.join("");
     };
-    var toUnicode = function toUnicode(input) {
+    var toUnicode = function toUnicode2(input) {
       return mapDomain(input, function(string) {
         return regexPunycode.test(string) ? decode(string.slice(4).toLowerCase()) : string;
       });
     };
-    var toASCII = function toASCII(input) {
+    var toASCII = function toASCII2(input) {
       return mapDomain(input, function(string) {
         return regexNonASCII.test(string) ? "xn--" + encode(string) : string;
       });
@@ -12419,13 +12378,13 @@ var require_uri_all = __commonJS((exports, module) => {
     var handler = {
       scheme: "http",
       domainHost: true,
-      parse: function parse(components, options) {
+      parse: function parse2(components, options) {
         if (!components.host) {
           components.error = components.error || "HTTP URIs must have a host.";
         }
         return components;
       },
-      serialize: function serialize(components, options) {
+      serialize: function serialize2(components, options) {
         var secure = String(components.scheme).toLowerCase() === "https";
         if (components.port === (secure ? 443 : 80) || components.port === "") {
           components.port = undefined;
@@ -12448,7 +12407,7 @@ var require_uri_all = __commonJS((exports, module) => {
     var handler$2 = {
       scheme: "ws",
       domainHost: true,
-      parse: function parse(components, options) {
+      parse: function parse2(components, options) {
         var wsComponents = components;
         wsComponents.secure = isSecure(wsComponents);
         wsComponents.resourceName = (wsComponents.path || "/") + (wsComponents.query ? "?" + wsComponents.query : "");
@@ -12456,7 +12415,7 @@ var require_uri_all = __commonJS((exports, module) => {
         wsComponents.query = undefined;
         return wsComponents;
       },
-      serialize: function serialize(wsComponents, options) {
+      serialize: function serialize2(wsComponents, options) {
         if (wsComponents.port === (isSecure(wsComponents) ? 443 : 80) || wsComponents.port === "") {
           wsComponents.port = undefined;
         }
@@ -12624,7 +12583,7 @@ var require_uri_all = __commonJS((exports, module) => {
     var UUID = /^[0-9A-Fa-f]{8}(?:\-[0-9A-Fa-f]{4}){3}\-[0-9A-Fa-f]{12}$/;
     var handler$6 = {
       scheme: "urn:uuid",
-      parse: function parse(urnComponents, options) {
+      parse: function parse2(urnComponents, options) {
         var uuidComponents = urnComponents;
         uuidComponents.uuid = uuidComponents.nss;
         uuidComponents.nss = undefined;
@@ -12633,7 +12592,7 @@ var require_uri_all = __commonJS((exports, module) => {
         }
         return uuidComponents;
       },
-      serialize: function serialize(uuidComponents, options) {
+      serialize: function serialize2(uuidComponents, options) {
         var urnComponents = uuidComponents;
         urnComponents.nss = (uuidComponents.uuid || "").toLowerCase();
         return urnComponents;
@@ -14079,7 +14038,7 @@ var require_compile = __commonJS((exports, module) => {
 
 // node_modules/ajv/lib/cache.js
 var require_cache = __commonJS((exports, module) => {
-  var Cache = module.exports = function Cache() {
+  var Cache = module.exports = function Cache2() {
     this._cache = {};
   };
   Cache.prototype.put = function Cache_put(key, value) {
@@ -19374,6 +19333,7 @@ var init_zodToJsonSchema = __esm(() => {
 
 // node_modules/zod-to-json-schema/dist/esm/index.js
 var init_esm = __esm(() => {
+  init_zodToJsonSchema();
   init_Options();
   init_Refs();
   init_parseDef();
@@ -19405,7 +19365,6 @@ var init_esm = __esm(() => {
   init_unknown();
   init_selectParser();
   init_zodToJsonSchema();
-  init_zodToJsonSchema();
 });
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/completable.js
@@ -20028,9 +19987,10 @@ var init_mcp = __esm(() => {
 });
 
 // src/tools.ts
-var projectEvalDescription, projectEvalInputSchema, referenceDescription = `Module path in format 'module:symbol[#method|.method]'. Supports local files, dependencies, and Node.js builtins.
+var projectEvalDescription, projectEvalInputSchema, referenceDescription = `Module/file path, optionally with symbol in format 'module[:symbol[#method|.method]]'. Supports local files, dependencies, and Node.js builtins.
 
 Module reference format:
+- module                - List all symbols in the module (file-level documentation)
 - module:symbol         - Extract a top-level symbol
 - module:Class#method   - Extract an instance method
 - module:Class.method   - Extract a static method
@@ -20038,6 +19998,8 @@ Module reference format:
 - node:Class.method     - Extract a global/builtin static method
 
 Examples:
+- src/types.ts (list all symbols in file)
+- lodash (list all symbols in dependency)
 - src/types.ts:SymbolInfo (local file symbol)
 - lodash:isEmpty (dependency function)
 - react:Component#render (instance method)
@@ -20045,7 +20007,8 @@ Examples:
 var init_tools = __esm(() => {
   init_zod();
   projectEvalDescription = `
-Evaluates JavaScript/TypeScript code in the context of the project.
+Evaluates JavaScript/TypeScript code within your project's build tool
+(or server for full-stack applications).
 
 The current NodeJS version is: ${process.version}
 
@@ -20054,7 +20017,7 @@ including to test the behaviour of a function or to debug
 something. The tool also returns anything written to standard
 output. DO NOT use shell tools to evaluate JavaScript/TypeScript code.
 
-Imports are allowed only as the form of dynamic imports with async/await, e.g.:
+Imports are allowed only as the form of dynamic imports with async/await:
 const path = await import('node:path');
 `;
   projectEvalInputSchema = exports_external.object({
@@ -20080,7 +20043,26 @@ Defaults to 30000 (30 seconds).`),
     docs: {
       mcp: {
         name: "get_docs",
-        description: "Extract TypeScript/JavaScript documentation and type information for symbols, classes, functions, and methods. This works for modules in the current project, as well as dependencies, and builtin node modules",
+        description: `Extract TypeScript/JavaScript documentation and type information. Works for modules in the current project, dependencies, and builtin node modules.
+
+Reference format determines what is returned:
+
+• "module" - Returns file overview and lists all exported symbols with their kinds, line numbers, and brief documentation. Use this to discover what's available in a module.
+
+• "module:symbol" - Returns detailed documentation for a specific top-level symbol including its type signature, full documentation, JSDoc tags, and source location.
+
+• "module:Class.staticMethod" - Returns detailed documentation for a static method or property of a class or object.
+
+• "module:Class#instanceMethod" - Returns detailed documentation for an instance method or property of a class.
+
+Examples:
+- "src/types.ts" → Lists all exported symbols in the file
+- "lodash" → Lists all symbols exported from lodash
+- "src/types.ts:SymbolInfo" → Full docs for SymbolInfo interface
+- "react:Component#render" → Docs for React Component's render method
+- "node:Math.max" → Docs for Math.max static method
+
+Start with module-only references to explore, then drill into specific symbols for detailed information.`,
         inputSchema: docsInputSchema
       },
       cli: {
@@ -20129,7 +20111,7 @@ Defaults to 30000 (30 seconds).`),
     logs: {
       mcp: {
         name: "get_logs",
-        description: "Retrieve application logs for debugging. Returns logs excluding Tidewave internal logs. Supports filtering by level, time, and pattern matching.",
+        description: "Retrieve application logs within your project's build tool (or server for full-stack applications). Supports filtering by level, time, and pattern matching.",
         inputSchema: getLogsInputSchema
       }
     }
@@ -20137,7 +20119,7 @@ Defaults to 30000 (30 seconds).`),
 });
 
 // package.json
-var name = "tidewave", version = "0.6.0", package_default;
+var name = "tidewave", version = "0.7.0", package_default;
 var init_package = __esm(() => {
   package_default = {
     name,
@@ -20148,7 +20130,10 @@ var init_package = __esm(() => {
       "documentation",
       "mcp",
       "cli",
-      "tidewave"
+      "tidewave",
+      "next",
+      "vite",
+      "tanstack"
     ],
     homepage: "https://tidewave.ai",
     repository: {
@@ -20239,7 +20224,7 @@ var init_package = __esm(() => {
       next: "^15.5.3",
       prettier: "^3.4.2",
       vite: "^7.1.5",
-      vitest: "^3.2.4"
+      vitest: "^4.1.8"
     },
     peerDependencies: {
       typescript: "^5"
@@ -20263,6 +20248,9 @@ function isResolveError(result) {
 function isExtractError(result) {
   return result != null && "error" in result;
 }
+function isFileInfo(result) {
+  return result != null && "exports" in result && Array.isArray(result.exports);
+}
 function resolveError(specifier, source) {
   return {
     success: false,
@@ -20461,6 +20449,8 @@ function getSymbolKind(symbol) {
     return "property";
   if (flags & ts2.SymbolFlags.Method)
     return "method";
+  if (flags & ts2.SymbolFlags.EnumMember)
+    return "enum member";
   if (flags & ts2.SymbolFlags.Enum)
     return "enum";
   if (flags & ts2.SymbolFlags.Module)
@@ -20481,6 +20471,27 @@ function getSymbolKind(symbol) {
   }
   return "unknown";
 }
+function getFileOverview(sourceFile) {
+  const leadingComments = ts2.getLeadingCommentRanges(sourceFile.text, 0);
+  if (!leadingComments || leadingComments.length === 0) {
+    return;
+  }
+  for (const comment of leadingComments) {
+    const commentText = sourceFile.text.slice(comment.pos, comment.end);
+    const fileoverviewMatch = commentText.match(/@fileoverview\s+([\s\S]*?)(?=@\w+|$)/);
+    const fileMatch = commentText.match(/@file\s+([\s\S]*?)(?=@\w+|$)/);
+    const match = fileoverviewMatch || fileMatch;
+    if (match && match[1]) {
+      const overviewText = match[1].split(`
+`).map((line) => line.replace(/^\s*\*\s?/, "").trim()).filter((line) => line.length > 0).join(`
+`).trim();
+      if (overviewText) {
+        return overviewText;
+      }
+    }
+  }
+  return;
+}
 var init_utils = () => {};
 
 // src/resolution/formatters.ts
@@ -20577,7 +20588,7 @@ function getTypeString(checker, symbol, type) {
   }
   return defaultTypeString;
 }
-function formatOutput(info) {
+function formatSymbolInfo(info) {
   const output = [];
   output.push(`
 ${info.name}`);
@@ -20604,7 +20615,36 @@ ${info.name}`);
   return output.join(`
 `);
 }
-var init_formatters = () => {};
+function formatFileInfo(info) {
+  const output = [];
+  output.push(`
+File: ${info.path}`);
+  output.push("");
+  if (info.overview) {
+    output.push("Overview:");
+    output.push(info.overview);
+    output.push("");
+  }
+  output.push(`Symbols (${info.exportCount} total):`);
+  output.push("");
+  for (const exp of info.exports) {
+    output.push(`${exp.name} (${exp.kind}) - line ${exp.line}`);
+    if (exp.documentation) {
+      output.push(exp.documentation);
+    }
+  }
+  return output.join(`
+`);
+}
+function formatOutput(info) {
+  if (isFileInfo(info)) {
+    return formatFileInfo(info);
+  }
+  return formatSymbolInfo(info);
+}
+var init_formatters = __esm(() => {
+  init_core();
+});
 
 // src/resolution/symbol-finder.ts
 import ts4 from "typescript";
@@ -20681,7 +20721,12 @@ function getSymbolInfo(checker, symbol, member, isStatic) {
     return createExtractError("TYPE_ERROR", `Symbol '${symbol.getName()}' has no declarations`);
   }
   const targetDeclaration = declaration || symbol.declarations[0];
-  const type = checker.getTypeOfSymbolAtLocation(symbol, targetDeclaration);
+  let type;
+  if (symbol.flags & (ts4.SymbolFlags.Interface | ts4.SymbolFlags.TypeAlias)) {
+    type = checker.getDeclaredTypeOfSymbol(symbol);
+  } else {
+    type = checker.getTypeOfSymbolAtLocation(symbol, targetDeclaration);
+  }
   const symbolName = symbol.getName();
   let targetSymbol = symbol;
   let targetType = type;
@@ -20695,11 +20740,27 @@ function getSymbolInfo(checker, symbol, member, isStatic) {
         targetType = checker.getTypeOfSymbolAtLocation(staticMember, staticMember.valueDeclaration);
         name2 = `${symbolName}.${member}`;
       } else {
-        return createExtractError("MEMBER_NOT_FOUND", `Static member '${member}' not found on '${symbolName}'`);
+        return createExtractError("MEMBER_NOT_FOUND", `Static member '${member}' not found on '${symbolName}'. Available: ${staticMembers.map((m) => m.getName()).join(", ")}`);
       }
     } else {
       let instanceType;
-      if (symbol.flags & ts4.SymbolFlags.Class) {
+      if (symbol.flags & ts4.SymbolFlags.Interface) {
+        instanceType = type;
+        const instanceMembers = checker.getPropertiesOfType(instanceType);
+        const instanceMember = instanceMembers.find((s) => s.getName() === member);
+        if (instanceMember) {
+          targetSymbol = instanceMember;
+          const memberDecl = instanceMember.valueDeclaration || instanceMember.declarations?.[0];
+          if (memberDecl) {
+            targetType = checker.getTypeOfSymbolAtLocation(instanceMember, memberDecl);
+          } else {
+            targetType = checker.getTypeOfSymbol(instanceMember);
+          }
+          name2 = `${symbolName}#${member}`;
+        } else {
+          return createExtractError("MEMBER_NOT_FOUND", `Instance member '${member}' not found on interface '${symbolName}'. Available: ${instanceMembers.map((m) => m.getName()).join(", ")}`);
+        }
+      } else if (symbol.flags & ts4.SymbolFlags.Class) {
         instanceType = checker.getTypeOfSymbolAtLocation(symbol, symbol.valueDeclaration);
         const constructSignatures = instanceType.getConstructSignatures();
         if (constructSignatures.length > 0) {
@@ -20783,6 +20844,9 @@ var init_symbol_finder = __esm(() => {
 import ts5 from "typescript";
 import path4 from "node:path";
 function parseModulePath(modulePath) {
+  if (!modulePath || modulePath.trim() === "") {
+    return createExtractError("INVALID_REQUEST", "Module path is required");
+  }
   let module;
   let symbolPath;
   if (modulePath.startsWith("node:")) {
@@ -20791,12 +20855,22 @@ function parseModulePath(modulePath) {
     module = `node:${baseSymbol}`;
     symbolPath = nodeSymbol;
   } else {
-    const [mod, symPath] = modulePath.split(":");
-    if (!mod || !symPath) {
-      return createExtractError("INVALID_REQUEST", `Invalid format. Expected 'module:symbol', got '${modulePath}'`);
+    const colonIndex = modulePath.indexOf(":");
+    if (colonIndex === -1) {
+      module = modulePath;
+      symbolPath = undefined;
+    } else if (colonIndex === 0) {
+      return createExtractError("INVALID_REQUEST", 'Module path is required before ":"');
+    } else {
+      module = modulePath.substring(0, colonIndex);
+      symbolPath = modulePath.substring(colonIndex + 1);
+      if (!symbolPath || symbolPath.trim() === "") {
+        return createExtractError("INVALID_REQUEST", 'Symbol name is required after ":"');
+      }
     }
-    module = mod;
-    symbolPath = symPath;
+  }
+  if (!symbolPath) {
+    return { module, symbol: undefined, member: undefined, isStatic: false };
   }
   if (symbolPath.includes("#")) {
     const [symbol, member] = symbolPath.split("#");
@@ -20814,6 +20888,37 @@ function parseModulePath(modulePath) {
   }
   return { module, symbol: symbolPath, member: undefined, isStatic: false };
 }
+function getExportSummaries(moduleSymbol, sourceFile, checker) {
+  if (!moduleSymbol) {
+    return [];
+  }
+  try {
+    const exports = checker.getExportsOfModule(moduleSymbol);
+    const summaries = [];
+    for (const exp of exports) {
+      const name2 = exp.getName();
+      const kind = getSymbolKind(exp);
+      const decl = exp.valueDeclaration ?? exp.declarations?.[0];
+      let line = 0;
+      if (decl) {
+        const pos = sourceFile.getLineAndCharacterOfPosition(decl.getStart());
+        line = pos.line + 1;
+      }
+      const fullDoc = ts5.displayPartsToString(exp.getDocumentationComment(checker));
+      const briefDoc = fullDoc.split(`
+`)[0]?.trim();
+      summaries.push({
+        name: name2,
+        kind,
+        line,
+        documentation: briefDoc || undefined
+      });
+    }
+    return summaries.sort((a, b) => a.line - b.line);
+  } catch {
+    return [];
+  }
+}
 async function extractDocs(modulePath) {
   const options = { prefix: process.cwd() };
   const parseResult = parseModulePath(modulePath);
@@ -20836,6 +20941,22 @@ async function extractDocs(modulePath) {
   }
   const { sourceFile, program } = resolvedModule;
   const checker = program.getTypeChecker();
+  if (symbol === undefined) {
+    const overview = getFileOverview(sourceFile);
+    const moduleSymbol = checker.getSymbolAtLocation(sourceFile);
+    const exports = getExportSummaries(moduleSymbol, sourceFile, checker);
+    let relativePath = sourceFile.fileName;
+    const cwd = process.cwd();
+    if (relativePath.startsWith(cwd)) {
+      relativePath = path4.relative(cwd, relativePath);
+    }
+    return {
+      path: relativePath,
+      overview,
+      exportCount: exports.length,
+      exports
+    };
+  }
   let targetSymbol;
   if (isGlobalModule) {
     const actualSymbolName = module.startsWith("node:") ? module.slice(5) : module;
@@ -20856,9 +20977,11 @@ async function extractDocs(modulePath) {
       const exports = checker.getExportsOfModule(moduleSymbol);
       const exportSymbol = exports.find((exp) => exp.getName() === symbol);
       if (exportSymbol) {
-        if (exportSymbol.valueDeclaration && (ts5.isFunctionDeclaration(exportSymbol.valueDeclaration) || ts5.isClassDeclaration(exportSymbol.valueDeclaration) || ts5.isVariableDeclaration(exportSymbol.valueDeclaration))) {
+        if (exportSymbol.flags & ts5.SymbolFlags.Alias) {
+          targetSymbol = checker.getAliasedSymbol(exportSymbol);
+        } else if (exportSymbol.valueDeclaration && (ts5.isFunctionDeclaration(exportSymbol.valueDeclaration) || ts5.isClassDeclaration(exportSymbol.valueDeclaration) || ts5.isVariableDeclaration(exportSymbol.valueDeclaration) || ts5.isEnumDeclaration(exportSymbol.valueDeclaration))) {
           targetSymbol = exportSymbol;
-        } else if (exportSymbol.flags & (ts5.SymbolFlags.Interface | ts5.SymbolFlags.TypeAlias)) {
+        } else if (exportSymbol.flags & (ts5.SymbolFlags.Interface | ts5.SymbolFlags.TypeAlias | ts5.SymbolFlags.Enum)) {
           targetSymbol = exportSymbol;
         } else {
           targetSymbol = findSymbolInJavaScriptFile(sourceFile, checker, symbol);
@@ -20899,6 +21022,15 @@ async function getSourceLocation(reference) {
       };
     }
     const { module, symbol, member, isStatic } = parseResult;
+    if (!symbol) {
+      return {
+        success: false,
+        error: {
+          code: "INVALID_SPECIFIER",
+          message: "Symbol reference required for source location lookup"
+        }
+      };
+    }
     const config2 = loadTsConfig(options.prefix);
     let resolvedModule = resolveModule(module, config2.options);
     let isGlobalModule = false;
@@ -21019,6 +21151,7 @@ var init_resolution = __esm(() => {
   init_core();
   init_module_resolver();
   init_symbol_finder();
+  init_utils();
   init_formatters();
 });
 
@@ -21221,7 +21354,7 @@ async function handleGetDocs({ reference }) {
       isError: true
     };
   }
-  if (!docs.documentation) {
+  if ("documentation" in docs && !docs.documentation) {
     return {
       content: [
         {
@@ -21326,6 +21459,10 @@ var init_mcp2 = __esm(() => {
 // src/http/handlers/mcp.ts
 async function handleMcp(req, res, next) {
   try {
+    if (req.headers.origin) {
+      originNotAllowed(res);
+      return;
+    }
     if (req.method !== "POST") {
       methodNotAllowed(res);
       return;
@@ -21377,12 +21514,6 @@ function createHandleHtml(config) {
     }
     try {
       const clientUrl = config.clientUrl || "https://tidewave.ai";
-      const tidewaveConfig = {
-        project_name: config.projectName || "app",
-        framework_type: config.framework || "unknown",
-        tidewave_version: package_default.version,
-        team: config.team || {}
-      };
       res.statusCode = 200;
       res.setHeader("Content-Type", "text/html");
       res.end(`
@@ -21390,7 +21521,6 @@ function createHandleHtml(config) {
   <head>
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-    <meta name="tidewave:config" content="${escapeHtml(JSON.stringify(tidewaveConfig))}" />
     <script type="module" src="${clientUrl}/tc/tc.js"></script>
   </head>
   <body></body>
@@ -21407,32 +21537,21 @@ function createHandleHtml(config) {
     }
   };
 }
-function escapeHtml(text) {
-  const map2 = {
-    "&": "&amp;",
-    "<": "&lt;",
-    ">": "&gt;",
-    '"': "&quot;",
-    "'": "&#039;"
-  };
-  return text.replace(/[&<>"']/g, (match) => map2[match]);
-}
-var init_html = __esm(() => {
-  init_package();
-});
 
 // src/http/handlers/config.ts
-function createHandleConfig(config) {
-  return async function handleConfig(_req, res, next) {
+function createHandleConfig(config, getLocalPort) {
+  return async function handleConfig(req, res, next) {
     try {
       const tidewaveConfig = {
         project_name: config.projectName || "app",
         framework_type: config.framework || "unknown",
         tidewave_version: package_default.version,
-        team: config.team || {}
+        team: config.team || {},
+        local_port: getLocalPort?.(req)
       };
       res.statusCode = 200;
       res.setHeader("Content-Type", "application/json");
+      res.setHeader("Access-Control-Allow-Origin", "*");
       res.end(JSON.stringify(tidewaveConfig));
     } catch (err) {
       console.error(`[Tidewave] Failed to serve config: ${err}`);
@@ -31772,17 +31891,6 @@ var require_db = __commonJS((exports, module) => {
   };
 });
 
-// node_modules/mime-db/index.js
-var require_mime_db = __commonJS((exports, module) => {
-  /*!
-   * mime-db
-   * Copyright(c) 2014 Jonathan Ong
-   * Copyright(c) 2015-2022 Douglas Christopher Wilson
-   * MIT Licensed
-   */
-  module.exports = require_db();
-});
-
 // node_modules/mime-types/mimeScore.js
 var require_mimeScore = __commonJS((exports, module) => {
   var FACET_SCORES = {
@@ -31825,7 +31933,7 @@ var require_mime_types = __commonJS((exports) => {
    * Copyright(c) 2015 Douglas Christopher Wilson
    * MIT Licensed
    */
-  var db = require_mime_db();
+  var db = require_db();
   var extname = __require("path").extname;
   var mimeScore = require_mimeScore();
   var EXTRACT_TYPE_REGEXP = /^\s*([^;\s]*)(?:;|\s|$)/;
@@ -33037,7 +33145,7 @@ var require_round = __commonJS((exports, module) => {
 
 // node_modules/math-intrinsics/isNaN.js
 var require_isNaN = __commonJS((exports, module) => {
-  module.exports = Number.isNaN || function isNaN(a) {
+  module.exports = Number.isNaN || function isNaN2(a) {
     return a !== a;
   };
 });
@@ -33171,7 +33279,7 @@ var require_implementation = __commonJS((exports, module) => {
   var toStr = Object.prototype.toString;
   var max = Math.max;
   var funcType = "[object Function]";
-  var concatty = function concatty(a, b) {
+  var concatty = function concatty2(a, b) {
     var arr = [];
     for (var i = 0;i < a.length; i += 1) {
       arr[i] = a[i];
@@ -33181,7 +33289,7 @@ var require_implementation = __commonJS((exports, module) => {
     }
     return arr;
   };
-  var slicy = function slicy(arrLike, offset) {
+  var slicy = function slicy2(arrLike, offset) {
     var arr = [];
     for (var i = offset || 0, j = 0;i < arrLike.length; i += 1, j += 1) {
       arr[j] = arrLike[i];
@@ -33222,7 +33330,7 @@ var require_implementation = __commonJS((exports, module) => {
     }
     bound = Function("binder", "return function (" + joiny(boundArgs, ",") + "){ return binder.apply(this,arguments); }")(binder);
     if (target.prototype) {
-      var Empty = function Empty() {};
+      var Empty = function Empty2() {};
       Empty.prototype = target.prototype;
       bound.prototype = new Empty;
       Empty.prototype = null;
@@ -33461,7 +33569,7 @@ var require_get_intrinsic = __commonJS((exports, module) => {
     }
   }
   var errorProto;
-  var doEval = function doEval(name2) {
+  var doEval = function doEval2(name2) {
     var value;
     if (name2 === "%AsyncFunction%") {
       value = getEvalledConstructor("async function () {}");
@@ -33470,12 +33578,12 @@ var require_get_intrinsic = __commonJS((exports, module) => {
     } else if (name2 === "%AsyncGeneratorFunction%") {
       value = getEvalledConstructor("async function* () {}");
     } else if (name2 === "%AsyncGenerator%") {
-      var fn = doEval("%AsyncGeneratorFunction%");
+      var fn = doEval2("%AsyncGeneratorFunction%");
       if (fn) {
         value = fn.prototype;
       }
     } else if (name2 === "%AsyncIteratorPrototype%") {
-      var gen = doEval("%AsyncGenerator%");
+      var gen = doEval2("%AsyncGenerator%");
       if (gen && getProto) {
         value = getProto(gen.prototype);
       }
@@ -33546,7 +33654,7 @@ var require_get_intrinsic = __commonJS((exports, module) => {
   var $exec = bind.call($call, RegExp.prototype.exec);
   var rePropName = /[^%.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|%$))/g;
   var reEscapeChar = /\\(\\)?/g;
-  var stringToPath = function stringToPath(string2) {
+  var stringToPath = function stringToPath2(string2) {
     var first = $strSlice(string2, 0, 1);
     var last = $strSlice(string2, -1);
     if (first === "%" && last !== "%") {
@@ -33560,7 +33668,7 @@ var require_get_intrinsic = __commonJS((exports, module) => {
     });
     return result;
   };
-  var getBaseIntrinsic = function getBaseIntrinsic(name2, allowMissing) {
+  var getBaseIntrinsic = function getBaseIntrinsic2(name2, allowMissing) {
     var intrinsicName = name2;
     var alias;
     if (hasOwn(LEGACY_ALIASES, intrinsicName)) {
@@ -33850,7 +33958,7 @@ var require_utils2 = __commonJS((exports, module) => {
     }
     return array2;
   }();
-  var compactQueue = function compactQueue(queue) {
+  var compactQueue = function compactQueue2(queue) {
     while (queue.length > 1) {
       var item = queue.pop();
       var obj = item.obj[item.prop];
@@ -33865,7 +33973,7 @@ var require_utils2 = __commonJS((exports, module) => {
       }
     }
   };
-  var arrayToObject = function arrayToObject(source, options) {
+  var arrayToObject = function arrayToObject2(source, options) {
     var obj = options && options.plainObjects ? { __proto__: null } : {};
     for (var i = 0;i < source.length; ++i) {
       if (typeof source[i] !== "undefined") {
@@ -33874,7 +33982,7 @@ var require_utils2 = __commonJS((exports, module) => {
     }
     return obj;
   };
-  var merge = function merge(target, source, options) {
+  var merge = function merge2(target, source, options) {
     if (!source) {
       return target;
     }
@@ -33902,7 +34010,7 @@ var require_utils2 = __commonJS((exports, module) => {
         if (has.call(target, i)) {
           var targetItem = target[i];
           if (targetItem && typeof targetItem === "object" && item && typeof item === "object") {
-            target[i] = merge(targetItem, item, options);
+            target[i] = merge2(targetItem, item, options);
           } else {
             target.push(item);
           }
@@ -33915,7 +34023,7 @@ var require_utils2 = __commonJS((exports, module) => {
     return Object.keys(source).reduce(function(acc, key) {
       var value = source[key];
       if (has.call(acc, key)) {
-        acc[key] = merge(acc[key], value, options);
+        acc[key] = merge2(acc[key], value, options);
       } else {
         acc[key] = value;
       }
@@ -33940,7 +34048,7 @@ var require_utils2 = __commonJS((exports, module) => {
     }
   };
   var limit = 1024;
-  var encode = function encode(str, defaultEncoder, charset, kind, format) {
+  var encode = function encode2(str, defaultEncoder, charset, kind, format) {
     if (str.length === 0) {
       return str;
     }
@@ -33985,7 +34093,7 @@ var require_utils2 = __commonJS((exports, module) => {
     }
     return out;
   };
-  var compact = function compact(value) {
+  var compact = function compact2(value) {
     var queue = [{ obj: { o: value }, prop: "o" }];
     var refs = [];
     for (var i = 0;i < queue.length; ++i) {
@@ -34004,19 +34112,19 @@ var require_utils2 = __commonJS((exports, module) => {
     compactQueue(queue);
     return value;
   };
-  var isRegExp = function isRegExp(obj) {
+  var isRegExp = function isRegExp2(obj) {
     return Object.prototype.toString.call(obj) === "[object RegExp]";
   };
-  var isBuffer = function isBuffer(obj) {
+  var isBuffer = function isBuffer2(obj) {
     if (!obj || typeof obj !== "object") {
       return false;
     }
     return !!(obj.constructor && obj.constructor.isBuffer && obj.constructor.isBuffer(obj));
   };
-  var combine = function combine(a, b) {
+  var combine = function combine2(a, b) {
     return [].concat(a, b);
   };
-  var maybeMap = function maybeMap(val, fn) {
+  var maybeMap = function maybeMap2(val, fn) {
     if (isArray(val)) {
       var mapped = [];
       for (var i = 0;i < val.length; i += 1) {
@@ -34088,11 +34196,11 @@ var require_stringify = __commonJS((exports, module) => {
     skipNulls: false,
     strictNullHandling: false
   };
-  var isNonNullishPrimitive = function isNonNullishPrimitive(v) {
+  var isNonNullishPrimitive = function isNonNullishPrimitive2(v) {
     return typeof v === "string" || typeof v === "number" || typeof v === "boolean" || typeof v === "symbol" || typeof v === "bigint";
   };
   var sentinel = {};
-  var stringify = function stringify(object2, prefix, generateArrayPrefix, commaRoundTrip, allowEmptyArrays, strictNullHandling, skipNulls, encodeDotInKeys, encoder, filter, sort, allowDots, serializeDate, format, formatter, encodeValuesOnly, charset, sideChannel) {
+  var stringify = function stringify2(object2, prefix, generateArrayPrefix, commaRoundTrip, allowEmptyArrays, strictNullHandling, skipNulls, encodeDotInKeys, encoder, filter, sort, allowDots, serializeDate, format, formatter, encodeValuesOnly, charset, sideChannel) {
     var obj = object2;
     var tmpSc = sideChannel;
     var step = 0;
@@ -34168,11 +34276,11 @@ var require_stringify = __commonJS((exports, module) => {
       sideChannel.set(object2, step);
       var valueSideChannel = getSideChannel();
       valueSideChannel.set(sentinel, sideChannel);
-      pushToArray(values, stringify(value, keyPrefix, generateArrayPrefix, commaRoundTrip, allowEmptyArrays, strictNullHandling, skipNulls, encodeDotInKeys, generateArrayPrefix === "comma" && encodeValuesOnly && isArray(obj) ? null : encoder, filter, sort, allowDots, serializeDate, format, formatter, encodeValuesOnly, charset, valueSideChannel));
+      pushToArray(values, stringify2(value, keyPrefix, generateArrayPrefix, commaRoundTrip, allowEmptyArrays, strictNullHandling, skipNulls, encodeDotInKeys, generateArrayPrefix === "comma" && encodeValuesOnly && isArray(obj) ? null : encoder, filter, sort, allowDots, serializeDate, format, formatter, encodeValuesOnly, charset, valueSideChannel));
     }
     return values;
   };
-  var normalizeStringifyOptions = function normalizeStringifyOptions(opts) {
+  var normalizeStringifyOptions = function normalizeStringifyOptions2(opts) {
     if (!opts) {
       return defaults;
     }
@@ -34449,7 +34557,7 @@ var require_parse = __commonJS((exports, module) => {
     }
     return parseObject(keys, val, options, valuesParsed);
   };
-  var normalizeParseOptions = function normalizeParseOptions(opts) {
+  var normalizeParseOptions = function normalizeParseOptions2(opts) {
     if (!opts) {
       return defaults;
     }
@@ -34682,40 +34790,34 @@ var require_body_parser = __commonJS((exports, module) => {
 // src/http/index.ts
 var exports_http = {};
 __export(exports_http, {
-  serve: () => serve,
+  originNotAllowed: () => originNotAllowed,
   methodNotAllowed: () => methodNotAllowed,
   getHandlers: () => getHandlers,
   configureServer: () => configureServer,
   checkSecurity: () => checkSecurity,
   ENDPOINT: () => ENDPOINT
 });
-import http from "node:http";
-function getHandlers(config) {
+function getHandlers(config, options = {}) {
   return {
     "": createHandleHtml(config),
-    config: createHandleConfig(config),
+    config: createHandleConfig(config, options.getLocalPort),
     mcp: handleMcp
   };
 }
-function configureServer(server = import_connect.default(), config = DEFAULT_OPTIONS) {
+function configureServer(server = import_connect.default(), config = DEFAULT_OPTIONS, options = {}) {
   const securityChecker = checkSecurity(config);
   server.use(`${ENDPOINT}`, securityChecker);
   server.use(`${ENDPOINT}`, import_body_parser.default.json());
-  const handlers = getHandlers(config);
+  const handlers = getHandlers(config, options);
   for (const [path6, handler] of Object.entries(handlers)) {
     server.use(ENDPOINT + "/" + path6, handler);
   }
   return server;
 }
-function serve(server, config = DEFAULT_OPTIONS) {
-  http.createServer(server).listen(config.port || DEFAULT_PORT);
-}
 function checkSecurity(config) {
   return (req, res, next) => {
     if (!checkRemoteIp(req, res, config))
       return;
-    if (!checkOrigin(req, res, config))
-      return;
     next();
   };
 }
@@ -34723,20 +34825,21 @@ function methodNotAllowed(res) {
   res.statusCode = 405;
   res.setHeader("Allow", "POST");
   res.end();
-  return;
 }
-var import_connect, import_body_parser, ENDPOINT = "/tidewave", DEFAULT_PORT = 5001, DEFAULT_OPTIONS;
+function originNotAllowed(res) {
+  const message = "For security reasons, Tidewave does not accept requests with an origin header for this endpoint.";
+  console.warn(message);
+  res.statusCode = 403;
+  res.end(message);
+}
+var import_connect, import_body_parser, ENDPOINT = "/tidewave", DEFAULT_OPTIONS;
 var init_http = __esm(() => {
-  import_connect = __toESM(require_connect(), 1);
   init_mcp3();
-  init_html();
   init_config();
+  import_connect = __toESM(require_connect(), 1);
   import_body_parser = __toESM(require_body_parser(), 1);
   DEFAULT_OPTIONS = {
-    allowRemoteAccess: false,
-    allowedOrigins: [],
-    port: 5001,
-    host: "localhost"
+    allowRemoteAccess: false
   };
 });
 
@@ -34808,14 +34911,23 @@ var init_console_patch = __esm(() => {
 
 // src/next-js/handler.ts
 init_http();
-var import_body_parser2 = __toESM(require_body_parser(), 1);
 init_core();
+var import_body_parser2 = __toESM(require_body_parser(), 1);
 var DEFAULT_CONFIG = {};
 function connectWrapper(fn) {
   return (req, res, next) => new Promise((resolve, reject) => {
     fn(req, res, (err) => err ? reject(err) : resolve());
   }).then(next);
 }
+function isAddressInfo(address) {
+  return typeof address === "object" && address !== null && "port" in address;
+}
+function getRequestLocalPort(request) {
+  const address = request.socket.address();
+  if (isAddressInfo(address))
+    return address.port;
+  return request.socket.localPort;
+}
 async function tidewaveHandler(config = DEFAULT_CONFIG) {
   const env = process.env["NODE_ENV"];
   if (!(env === "development")) {
@@ -34835,23 +34947,21 @@ async function tidewaveHandler(config = DEFAULT_CONFIG) {
     if (!url.pathname.startsWith("/tidewave")) {
       return res.status(404).json({ message: "This route only works when accessed at /tidewave" });
     }
-    if (origin) {
-      const [hostname, port] = origin.split(":");
-      config.host = hostname ? hostname : config.host;
-      config.port = port ? Number(port) : config.port;
-    }
     const next = () => {};
     const securityMiddleware = checkSecurity(config);
     await connectWrapper(securityMiddleware)(req, res, next);
     await connectWrapper(import_body_parser2.default.json())(req, res, next);
     const { getHandlers: getHandlers2 } = await Promise.resolve().then(() => (init_http(), exports_http));
-    const handlers = getHandlers2(config);
-    const handler = handlers[endpoint || ""];
-    if (handler)
-      return await connectWrapper(handler)(req, res, next);
+    const handlers = getHandlers2(config, {
+      getLocalPort: getRequestLocalPort
+    });
+    const handler2 = handlers[endpoint || ""];
+    if (handler2)
+      return await connectWrapper(handler2)(req, res, next);
     return res.status(404).json({ message: `Route not found: ${req.method} ${req.url}` });
   };
 }
 export {
-  tidewaveHandler
+  tidewaveHandler,
+  getRequestLocalPort
 };