zitejs 0.9.141 → 0.9.143

package/dist/esm/start/describe.js

@@ -1,176 +0,0 @@
-// Describes a built app by loading it, not by reading its source: each server
-// function's real middleware chain, each server route's, and input schemas.
-import { createMiddleware, flattenMiddlewares } from "@tanstack/react-start";
-import { createSsrRpc } from "@tanstack/react-start/ssr-rpc";
-import { runWithStartContext } from "@tanstack/start-storage-context";
-import { z } from "zod";
-import { ziteMiddlewareKind } from "./index.js";
-const accessOf = (chain, problems) => {
-    const kinds = chain.map(ziteMiddlewareKind).filter((k) => !!k);
-    const roles = kinds.flatMap((k) => (k.kind === "role" ? [k.role] : []));
-    const base = [...new Set(kinds.flatMap((k) => (k.kind === "signedIn" || k.kind === "anyone" || k.kind === "webhook" ? [k.kind] : [])))];
-    if (base.length === 0) {
-        problems.push("access-missing: no signedIn, anyone or webhook middleware in its chain");
-        return { kind: "none", roles };
-    }
-    if (base.length > 1)
-        problems.push(`access-conflict: ${base.join(" + ")}`);
-    const kind = base.includes("webhook") ? "webhook" : base.includes("signedIn") ? "signedIn" : "anyone";
-    const paused = kinds.some((k) => k.kind === "webhook" && k.paused === true);
-    return paused ? { kind, roles, paused } : { kind, roles };
-};
-const jsonSchemaOf = (validator) => {
-    if (validator && typeof validator === "object" && "_zod" in validator) {
-        try {
-            return z.toJSONSchema(validator);
-        }
-        catch {
-            return { unrepresentable: true };
-        }
-    }
-    return validator ? { opaque: true } : undefined;
-};
-// Describe walks functions one at a time, so one probe slot is enough.
-let probe = null;
-// The only global function middleware while describing: it records what it was
-// handed and ends the call, so no app middleware or handler runs.
-const describeProbe = createMiddleware({ type: "function" }).server(({ serverFnMeta, method }) => {
-    if (probe)
-        Object.assign(probe, { meta: serverFnMeta, method, reached: true });
-    return "zite:describe";
-});
-const SERVER_ONLY = "server-only: nothing in the browser calls it, and a server function that only other server functions call can't run. " +
-    "Move the shared logic into a *.server.ts helper and call that.";
-export async function describeFunction(id, request) {
-    const problems = [];
-    const seen = [];
-    probe = { reached: false };
-    // Before running a chain, TanStack asks this set about every middleware in it.
-    // Recording the questions gives the exact chain it would have run.
-    const executedRequestMiddlewares = {
-        has: (middleware) => {
-            seen.push(middleware);
-            return false;
-        },
-    };
-    const startContext = {
-        request,
-        startOptions: { functionMiddleware: [describeProbe] },
-        executedRequestMiddlewares,
-        contextAfterGlobalMiddlewares: {},
-        handlerType: "serverFn",
-        getRouter: () => {
-            throw new Error("describe has no router");
-        },
-    };
-    try {
-        await runWithStartContext(startContext, () => createSsrRpc(id)({ data: undefined, context: {} }));
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        // TanStack registers only functions something can call through it. One that
-        // only other server functions call isn't registered, and calling it fails.
-        if (message === `Server function info not found for ${id}`) {
-            probe = null;
-            return { id, access: { kind: "none", roles: [] }, problems: [SERVER_ONLY] };
-        }
-        problems.push(`probe-failed: ${message}`);
-    }
-    const state = probe;
-    probe = null;
-    // Fails closed: if TanStack stops asking, or stops running globals first, every
-    // function reports a problem and the build stops.
-    if (!state.reached || seen[0] !== describeProbe)
-        problems.push("probe-not-first: chain could not be read");
-    const chain = seen.filter((m) => m !== describeProbe);
-    if (!chain.some((m) => ziteMiddlewareKind(m)?.kind === "factory")) {
-        problems.push("raw-server-fn: define it with signedInFn or publicFn from zitejs/start");
-    }
-    // TanStack keeps the validator under `inputValidator` up to 1.168 and `validator` from 1.169 (Start 1.0).
-    const handlerStep = chain.at(-1);
-    return {
-        id,
-        name: state.meta?.name,
-        file: state.meta?.filename,
-        method: state.method,
-        access: accessOf(chain, problems),
-        input: jsonSchemaOf(handlerStep?.options?.validator ?? handlerStep?.options?.inputValidator),
-        problems,
-    };
-}
-export function describeRoutes(routesById) {
-    const out = [];
-    for (const route of Object.values(routesById)) {
-        const server = route.options?.server;
-        if (!server?.handlers)
-            continue;
-        const problems = [];
-        const ancestry = [];
-        for (let r = route; r; r = r.parentRoute)
-            ancestry.unshift(r);
-        const routeMiddleware = ancestry.flatMap((r) => r.options?.server?.middleware ?? []);
-        const handlers = (typeof server.handlers === "function"
-            ? server.handlers({ createHandlers: (d) => d })
-            : server.handlers);
-        const methods = {};
-        for (const [method, handler] of Object.entries(handlers)) {
-            const own = typeof handler === "function" ? [] : (handler.middleware ?? []);
-            const chain = flattenMiddlewares([...routeMiddleware, ...own]);
-            const methodProblems = [];
-            methods[method] = accessOf(chain, methodProblems);
-            problems.push(...methodProblems.map((p) => `${method}: ${p}`));
-        }
-        out.push({ path: route.fullPath, methods, problems });
-    }
-    return out;
-}
-// cyrb53: enough to tell when the code changed, which is all publish asks.
-const sourceHash = (text) => {
-    let h1 = 0xdeadbeef;
-    let h2 = 0x41c6ce57;
-    for (let i = 0; i < text.length; i++) {
-        const ch = text.charCodeAt(i);
-        h1 = Math.imul(h1 ^ ch, 2654435761);
-        h2 = Math.imul(h2 ^ ch, 1597334677);
-    }
-    h1 = Math.imul(h1 ^ (h1 >>> 16), 2246822507) ^ Math.imul(h2 ^ (h2 >>> 13), 3266489909);
-    h2 = Math.imul(h2 ^ (h2 >>> 16), 2246822507) ^ Math.imul(h1 ^ (h1 >>> 13), 3266489909);
-    return (4294967296 * (2097151 & h2) + (h1 >>> 0)).toString(16).padStart(14, "0");
-};
-// A workflow's id is its export name: what the host invokes it by and the editor shows.
-export function describeWorkflows(workflows) {
-    return workflows.map(({ id, file, workflow }) => {
-        const problems = [];
-        if (id === "default")
-            problems.push("workflow-default-export: export it by name, which becomes its id");
-        const elsewhere = workflows.find((other) => other.id === id && other.file !== file);
-        if (elsewhere)
-            problems.push(`duplicate-workflow: ${id} is also exported from ${elsewhere.file}`);
-        const { description, schedule, trigger } = workflow.config;
-        if (schedule)
-            return { id, file, description, schedule, problems };
-        if (!trigger || trigger.every !== undefined || trigger.events !== undefined) {
-            return { id, file, description, trigger, problems };
-        }
-        const { subscribe, unsubscribe, ...declared } = trigger;
-        if (typeof subscribe !== "function") {
-            problems.push("workflow-trigger-unregistered: a provider trigger needs `subscribe` to register it with the provider");
-            return { id, file, description, trigger: declared, problems };
-        }
-        const registration = {
-            unsubscribe: typeof unsubscribe === "function",
-            hash: sourceHash(`${String(subscribe)}\n${typeof unsubscribe === "function" ? String(unsubscribe) : ""}`),
-        };
-        return { id, file, description, trigger: declared, registration, problems };
-    });
-}
-export async function describeApp(opts) {
-    const functions = [];
-    for (const id of opts.fnIds) {
-        const described = await describeFunction(id, opts.request);
-        const description = opts.descriptions?.[id];
-        functions.push(description ? { ...described, description } : described);
-    }
-    const router = (await opts.getRouter());
-    return { functions, routes: describeRoutes(router.routesById), workflows: describeWorkflows(opts.workflows ?? []) };
-}

package/dist/esm/start/describeBuilt.d.ts

@@ -1,3 +0,0 @@
-/** Describes a built Start app from its `dist/server`: a Workers build in workerd, a Node build in-process. */
-export declare function describeBuiltApp(appDir: string): Promise<unknown>;
-export declare function runDescribe(): Promise<void>;

package/dist/esm/start/describeBuilt.js

@@ -1,66 +0,0 @@
-import { spawn } from "node:child_process";
-import { existsSync } from "node:fs";
-import { createServer } from "node:net";
-import path from "node:path";
-import { pathToFileURL } from "node:url";
-// Only the host can set x-zite-* in production: the front strips them from public traffic.
-const DESCRIBE_HEADERS = { "x-zite-invoke": "describe" };
-// Not "localhost": it can resolve to ::1 for vite's listen and to 127.0.0.1 for fetch.
-const HOST = "127.0.0.1";
-const freePort = () => new Promise((resolve, reject) => {
-    const server = createServer();
-    server.once("error", reject);
-    server.listen(0, HOST, () => {
-        const { port } = server.address();
-        server.close(() => resolve(port));
-    });
-});
-// A Workers build runs where it will run: workerd, through the app's own
-// `vite preview`, so it uses the same Cloudflare plugin and config as the build.
-async function describeInWorkerd(appDir) {
-    const port = await freePort();
-    // Its own process group, so stopping it also stops vite and workerd under npx.
-    const preview = spawn("npx", ["--no-install", "vite", "preview", "--host", HOST, "--port", String(port), "--strictPort"], {
-        cwd: appDir,
-        stdio: ["ignore", "ignore", "pipe"],
-        detached: true,
-    });
-    let stderr = "";
-    preview.stderr.on("data", (chunk) => (stderr += chunk));
-    try {
-        const deadline = Date.now() + 60_000;
-        while (true) {
-            try {
-                const response = await fetch(`http://${HOST}:${port}/`, { headers: DESCRIBE_HEADERS });
-                // Right after start, preview can answer before the Worker does; only the
-                // app's own describe answer is JSON.
-                if (response.ok && response.headers.get("content-type")?.includes("application/json")) {
-                    return await response.json();
-                }
-            }
-            catch { }
-            if (preview.exitCode !== null || Date.now() > deadline) {
-                throw new Error(`vite preview didn't serve the app: ${stderr.trim().slice(-500)}`);
-            }
-            await new Promise((resolve) => setTimeout(resolve, 250));
-        }
-    }
-    finally {
-        try {
-            process.kill(-preview.pid, "SIGTERM");
-        }
-        catch { }
-    }
-}
-/** Describes a built Start app from its `dist/server`: a Workers build in workerd, a Node build in-process. */
-export async function describeBuiltApp(appDir) {
-    const serverDir = path.join(appDir, "dist/server");
-    if (existsSync(path.join(serverDir, "wrangler.json")))
-        return describeInWorkerd(appDir);
-    const { default: server } = await import(pathToFileURL(path.join(serverDir, "server.js")).href);
-    return (await server.fetch(new Request("http://describe.local/", { headers: DESCRIBE_HEADERS }))).json();
-}
-export async function runDescribe() {
-    const appDir = path.resolve(process.argv[3] ?? ".");
-    process.stdout.write(`${JSON.stringify(await describeBuiltApp(appDir), null, 2)}\n`);
-}

package/dist/esm/start/descriptions.d.ts

@@ -1,4 +0,0 @@
-/** `name -> description` for each top-level const built with a description option. */
-export declare function factoryDescriptions(program: {
-    body: unknown[];
-}): Map<string, string>;

package/dist/esm/start/descriptions.js

@@ -1,47 +0,0 @@
-const stringValue = (node) => {
-    if (node?.type === "Literal" && typeof node.value === "string")
-        return node.value;
-    const quasis = node?.quasis;
-    if (node?.type === "TemplateLiteral" && node.expressions.length === 0)
-        return quasis?.[0]?.value.cooked;
-    return undefined;
-};
-const descriptionProperty = (node) => {
-    for (const property of node.properties) {
-        const key = property.key;
-        const named = key?.type === "Identifier" ? key.name : key?.type === "Literal" ? key.value : undefined;
-        if (property.type === "Property" && named === "description")
-            return stringValue(property.value);
-    }
-    return undefined;
-};
-// Walks a builder chain, `signedInFn({ description }).validator(…).handler(…)`, to an object option.
-const descriptionIn = (node) => {
-    if (node?.type === "CallExpression") {
-        for (const arg of node.arguments) {
-            const found = arg.type === "ObjectExpression" ? descriptionProperty(arg) : undefined;
-            if (found !== undefined)
-                return found;
-        }
-        return descriptionIn(node.callee);
-    }
-    if (node?.type === "MemberExpression")
-        return descriptionIn(node.object);
-    return undefined;
-};
-/** `name -> description` for each top-level const built with a description option. */
-export function factoryDescriptions(program) {
-    const found = new Map();
-    for (const statement of program.body) {
-        const declaration = (statement.type === "ExportNamedDeclaration" ? statement.declaration : statement);
-        if (declaration?.type !== "VariableDeclaration")
-            continue;
-        for (const declarator of declaration.declarations) {
-            const id = declarator.id;
-            const description = descriptionIn(declarator.init);
-            if (id.type === "Identifier" && description)
-                found.set(id.name, description);
-        }
-    }
-    return found;
-}

package/dist/esm/start/entries.d.ts

@@ -1,20 +0,0 @@
-import type { SourceDir } from "../sourceRoots.js";
-export declare const START_SERVER_ENTRY = ".zite/server.ts";
-export declare const START_INSTANCE_ENTRY = ".zite/start.ts";
-export type StartTarget = "cloudflare" | "node";
-/**
- * The server entry every Start app builds with. Platform-owned: regenerated,
- * never edited. On Workers it's an entrypoint the host can also call over RPC.
- */
-export declare const renderStartServerEntry: (target?: StartTarget) => string;
-/** The start instance: the platform's middleware, then the app's own `src/start.ts` when it has one. */
-export declare const renderStartInstance: (hasAppStart: boolean) => string;
-export declare const hasAppStart: (appDir: string) => boolean;
-/** Writes `file` under `appDir` when its content differs. Returns whether it wrote. */
-export declare const writeIfChanged: (appDir: string, file: string, content: string) => boolean;
-export declare const isStartAppDir: (appPath: string) => boolean;
-export declare function regenerateStartEntries(app: SourceDir): void;
-/** App modules that mention createWorkflow: what the workflow registry imports. Describe decides what each one really exports. */
-export declare function workflowFiles(appDir: string): string[];
-/** The registry zite() builds in place of zitejs's empty one. */
-export declare const renderWorkflowModules: (appDir: string, files: string[]) => string;

package/dist/esm/start/entries.js

@@ -1,93 +0,0 @@
-import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, join, relative } from "node:path";
-export const START_SERVER_ENTRY = ".zite/server.ts";
-export const START_INSTANCE_ENTRY = ".zite/start.ts";
-const APP_START_FILES = ["src/start.ts", "src/start.tsx"];
-/**
- * The server entry every Start app builds with. Platform-owned: regenerated,
- * never edited. On Workers it's an entrypoint the host can also call over RPC.
- */
-export const renderStartServerEntry = (target = "cloudflare") => target === "cloudflare"
-    ? `// Generated by zitejs for TanStack Start apps. The platform owns this file.
-import handler from '@tanstack/react-start/server-entry';
-import { createZiteWorker } from 'zitejs/start/worker';
-import { getRouter } from '../src/router';
-
-export default createZiteWorker({ handler, getRouter });
-`
-    : `// Generated by zitejs for TanStack Start apps. The platform owns this file.
-import handler, { createServerEntry } from '@tanstack/react-start/server-entry';
-import { createZiteFetch } from 'zitejs/start/server';
-import { getRouter } from '../src/router';
-
-export default createServerEntry({ fetch: createZiteFetch({ handler, getRouter }) });
-`;
-/** The start instance: the platform's middleware, then the app's own `src/start.ts` when it has one. */
-export const renderStartInstance = (hasAppStart) => hasAppStart
-    ? `// Generated by zitejs for TanStack Start apps. The platform owns this file.
-import { createZiteStart } from 'zitejs/start/instance';
-import { startInstance as app } from '../src/start';
-
-export const startInstance = createZiteStart(app);
-`
-    : `// Generated by zitejs for TanStack Start apps. The platform owns this file.
-import { createZiteStart } from 'zitejs/start/instance';
-
-export const startInstance = createZiteStart();
-`;
-export const hasAppStart = (appDir) => APP_START_FILES.some((file) => existsSync(join(appDir, file)));
-/** Writes `file` under `appDir` when its content differs. Returns whether it wrote. */
-export const writeIfChanged = (appDir, file, content) => {
-    const target = join(appDir, file);
-    if (existsSync(target) && readFileSync(target, "utf-8") === content)
-        return false;
-    mkdirSync(dirname(target), { recursive: true });
-    writeFileSync(target, content);
-    return true;
-};
-export const isStartAppDir = (appPath) => {
-    try {
-        return JSON.parse(readFileSync(join(appPath, "zite.config.json"), "utf-8"))?.runtime === "start";
-    }
-    catch {
-        return false;
-    }
-};
-const isStartApp = (app) => isStartAppDir(app.path);
-export function regenerateStartEntries(app) {
-    if (!isStartApp(app))
-        return;
-    const entries = [
-        [START_SERVER_ENTRY, renderStartServerEntry()],
-        [START_INSTANCE_ENTRY, renderStartInstance(hasAppStart(app.path))],
-    ];
-    for (const [file, content] of entries) {
-        if (writeIfChanged(app.path, file, content))
-            console.log(`Wrote ${join(app.path, file)}`);
-    }
-}
-const SOURCE_FILE = /\.[mc]?[jt]sx?$/;
-const NOT_APP_CODE = /(\.(test|spec)\.[^.]+|\.d\.ts|routeTree\.gen\.ts)$/;
-/** App modules that mention createWorkflow: what the workflow registry imports. Describe decides what each one really exports. */
-export function workflowFiles(appDir) {
-    const found = [];
-    const walk = (dir) => {
-        for (const entry of readdirSync(dir, { withFileTypes: true })) {
-            const full = join(dir, entry.name);
-            if (entry.isDirectory()) {
-                if (entry.name !== "node_modules")
-                    walk(full);
-            }
-            else if (SOURCE_FILE.test(entry.name) && !NOT_APP_CODE.test(entry.name) && readFileSync(full, "utf-8").includes("createWorkflow")) {
-                found.push(relative(appDir, full).split("\\").join("/"));
-            }
-        }
-    };
-    if (existsSync(join(appDir, "src")))
-        walk(join(appDir, "src"));
-    return found.sort();
-}
-/** The registry zite() builds in place of zitejs's empty one. */
-export const renderWorkflowModules = (appDir, files) => `export const workflowModules = {\n${files
-    .map((file) => `  ${JSON.stringify(file)}: () => import(${JSON.stringify(join(appDir, file))}),`)
-    .join("\n")}\n};\n`;

package/dist/esm/start/host.d.ts

@@ -1,3 +0,0 @@
-import type { ZiteRequestContext } from "./types.js";
-export declare const HOST_STORE_KEY: unique symbol;
-export declare const currentHost: () => ZiteRequestContext | undefined;

package/dist/esm/start/host.js

@@ -1,4 +0,0 @@
-// Isomorphic, so it can't import the server-only store: it reads it through the
-// global key ./scope.ts registers it under. In the browser there is none.
-export const HOST_STORE_KEY = Symbol.for("zitejs:host-context");
-export const currentHost = () => globalThis[HOST_STORE_KEY]?.getStore();

package/dist/esm/start/index.d.ts

@@ -1,79 +0,0 @@
-import type { User } from "./types.js";
-export type { User, ZiteRequestContext } from "./types.js";
-export { createZiteRouter, type ZiteRouterContext } from "./router.js";
-export { createWorkflow, type StartProviderTrigger, type StartTrigger, type Workflow, type WorkflowArgs, type WorkflowConfig, } from "./workflow.js";
-export type { ZiteSchedule } from "../schedules/index.js";
-export type { ZiteTrigger, ZiteTriggerSubscribe, ZiteTriggerSubscribeInput, ZiteTriggerSubscribeResult, ZiteTriggerUnsubscribe, ZiteTriggerUnsubscribeInput, } from "../backend/index.js";
-declare module "@tanstack/start-client-core" {
-    interface ServerFnOptions {
-        /** What this function does, in a sentence. Shown in the editor. */
-        description?: string;
-    }
-}
-declare const STATUS: {
-    readonly BAD_REQUEST: 400;
-    readonly INVALID_INPUT: 400;
-    readonly UNAUTHORIZED: 401;
-    readonly FORBIDDEN: 403;
-    readonly NOT_FOUND: 404;
-    readonly CONFLICT: 409;
-    readonly RATE_LIMITED: 429;
-    readonly INTERNAL_ERROR: 500;
-};
-export type ZiteErrorCode = keyof typeof STATUS;
-/** @internal The HTTP status each code answers with. */
-export declare const ZITE_ERROR_STATUS: Readonly<Record<ZiteErrorCode, number>>;
-/** Fail with a status: `throw new ZiteError('FORBIDDEN', 'Only the owner can edit this')`. */
-export declare class ZiteError extends Error {
-    readonly code: ZiteErrorCode;
-    constructor(code: ZiteErrorCode, message?: string);
-}
-export declare const hasRole: (user: User, role: string) => boolean;
-/** The message a server function fails with when it needs a session; the platform's client middleware sends the user to sign in. */
-export declare const SIGN_IN_REQUIRED = "ZITE_SIGN_IN_REQUIRED";
-export declare const isSignInRequired: (error: unknown) => boolean;
-/**
- * The platform's sign-in page, returning to `redirectTo` (default: the current
- * page). For guards: `throw redirect({ href: loginHref(), reloadDocument: true })`.
- */
-export declare function loginHref(redirectTo?: string): string;
-/** What a zitejs middleware means, for describe. Keyed by identity, so composing or re-exporting keeps it. */
-export type ZiteMiddlewareKind = {
-    kind: "signedIn" | "anyone" | "factory";
-} | {
-    kind: "webhook";
-    paused?: true;
-} | {
-    kind: "role";
-    role: string;
-};
-/** @internal */
-export declare const ziteMiddlewareKind: (middleware: unknown) => ZiteMiddlewareKind | undefined;
-/** Only signed-in users. Handlers get `context.user: User`. */
-export declare const signedIn: import("@tanstack/react-start").RequestMiddlewareAfterServer<{}, undefined, {
-    user: User;
-}>;
-/** Anyone, signed in or not. Handlers get `context.user: User | null`. */
-export declare const anyone: import("@tanstack/react-start").RequestMiddlewareAfterServer<{}, undefined, {
-    user: User | null;
-}>;
-/**
- * Webhooks delivered by the platform, which already checked the URL token.
- * `webhook.paused` keeps the URL but runs nothing: the platform answers the
- * provider 200 and drops the delivery until it's switched back.
- */
-export declare const webhook: import("@tanstack/react-start").RequestMiddlewareAfterServer<{}, undefined, undefined> & {
-    paused: import("@tanstack/react-start").RequestMiddlewareAfterServer<{}, undefined, undefined>;
-};
-/** Signed-in users with this role. */
-export declare const role: (name: string) => import("@tanstack/react-start").RequestMiddlewareAfterServer<{}, readonly [import("@tanstack/react-start").RequestMiddlewareAfterServer<{}, undefined, {
-    user: User;
-}>], undefined>;
-declare const compiled: import("@tanstack/react-start").FunctionMiddlewareAfterClient<{}, unknown, undefined, undefined, undefined>;
-declare const builder: import("@tanstack/react-start").ServerFnBuilder<import("@tanstack/react-start").Register, import("@tanstack/react-start").Method, true>;
-type SignedInFn = ReturnType<typeof builder.middleware<readonly [typeof compiled, typeof signedIn]>>;
-type PublicFn = ReturnType<typeof builder.middleware<readonly [typeof compiled, typeof anyone]>>;
-/** A server function only signed-in users can call. */
-export declare const signedInFn: SignedInFn;
-/** A server function anyone can call (external apps only). */
-export declare const publicFn: PublicFn;

package/dist/esm/start/index.js

@@ -1,157 +0,0 @@
-import { createMiddleware, createServerFn } from "@tanstack/react-start";
-import { setResponseStatus } from "@tanstack/react-start/server";
-import { USAGE_TOKEN_QUERY_PARAM } from "../auth/constants.js";
-import { currentHost } from "./host.js";
-import { getHost, inScope, runInScope } from "./scope.js";
-export { createZiteRouter } from "./router.js";
-export { createWorkflow, } from "./workflow.js";
-const STATUS = {
-    BAD_REQUEST: 400,
-    INVALID_INPUT: 400,
-    UNAUTHORIZED: 401,
-    FORBIDDEN: 403,
-    NOT_FOUND: 404,
-    CONFLICT: 409,
-    RATE_LIMITED: 429,
-    INTERNAL_ERROR: 500,
-};
-/** @internal The HTTP status each code answers with. */
-export const ZITE_ERROR_STATUS = STATUS;
-/** Fail with a status: `throw new ZiteError('FORBIDDEN', 'Only the owner can edit this')`. */
-export class ZiteError extends Error {
-    code;
-    constructor(code, message) {
-        super(message ?? code);
-        this.name = "ZiteError";
-        this.code = code;
-    }
-}
-export const hasRole = (user, role) => user.roles.includes(role);
-/** The message a server function fails with when it needs a session; the platform's client middleware sends the user to sign in. */
-export const SIGN_IN_REQUIRED = "ZITE_SIGN_IN_REQUIRED";
-export const isSignInRequired = (error) => error instanceof Error && error.message === SIGN_IN_REQUIRED;
-/**
- * The platform's sign-in page, returning to `redirectTo` (default: the current
- * page). For guards: `throw redirect({ href: loginHref(), reloadDocument: true })`.
- */
-export function loginHref(redirectTo) {
-    const current = typeof window !== "undefined" ? window.location.href : currentHost()?.url;
-    // Absolute on purpose: better-auth drops a relative callback with an encoded
-    // space, fragment or non-ASCII path, and never checks an absolute one.
-    const target = current ? new URL(redirectTo ?? current, current) : undefined;
-    const params = new URLSearchParams();
-    if (target && !(target.pathname === "/" && !target.search && !target.hash))
-        params.set("redirectUrl", target.toString());
-    else if (!target && redirectTo)
-        params.set("redirectUrl", redirectTo);
-    // The editor preview's sign-in page needs the preview's token.
-    const usageToken = current ? new URL(current).searchParams.get(USAGE_TOKEN_QUERY_PARAM) : null;
-    if (usageToken)
-        params.set(USAGE_TOKEN_QUERY_PARAM, usageToken);
-    const query = params.toString();
-    return query ? `/auth/login?${query}` : "/auth/login";
-}
-const kinds = new WeakMap();
-const tag = (middleware, kind) => {
-    kinds.set(middleware, kind);
-    return middleware;
-};
-/** @internal */
-export const ziteMiddlewareKind = (middleware) => typeof middleware === "object" && middleware !== null ? kinds.get(middleware) : undefined;
-// Identity comes from server-only storage, never TanStack's context, which
-// merges whatever context the browser sends.
-const host = () => {
-    const current = getHost();
-    if (!current)
-        throw new ZiteError("UNAUTHORIZED", "Missing platform context");
-    return current;
-};
-// TanStack fails a validator with a plain Error whose message is the issues as JSON.
-const validationIssues = (error) => {
-    if (!(error instanceof Error) || error.constructor !== Error)
-        return undefined;
-    try {
-        const issues = JSON.parse(error.message);
-        return Array.isArray(issues) && issues.length > 0 && issues.every((issue) => typeof issue?.message === "string")
-            ? issues
-            : undefined;
-    }
-    catch {
-        return undefined;
-    }
-};
-const invalidInput = (issues) => {
-    if (getHost()?.mode === "live")
-        return new ZiteError("INVALID_INPUT", "Invalid input");
-    const describe = ({ message, path = [] }) => {
-        const at = path.map((segment) => String(typeof segment === "object" ? segment.key : segment)).join(".");
-        return at ? `${at}: ${message}` : message;
-    };
-    return new ZiteError("INVALID_INPUT", issues.map(describe).join("; "));
-};
-// Server functions report a status through TanStack's error envelope; server
-// routes need a Response. A nested call's failure is the caller's to handle.
-const withStatus = async (isServerFn, fn) => {
-    const nested = inScope();
-    try {
-        return await fn();
-    }
-    catch (caught) {
-        const issues = validationIssues(caught);
-        const error = issues ? invalidInput(issues) : caught;
-        if (!(error instanceof ZiteError))
-            throw error;
-        if (!isServerFn)
-            return new Response(error.message, { status: STATUS[error.code] });
-        if (!nested)
-            setResponseStatus(STATUS[error.code]);
-        throw error;
-    }
-};
-/** Only signed-in users. Handlers get `context.user: User`. */
-export const signedIn = tag(createMiddleware().server(({ next, serverFnMeta }) => withStatus(!!serverFnMeta, async () => {
-    const { user } = host();
-    if (!user)
-        throw new ZiteError("UNAUTHORIZED", SIGN_IN_REQUIRED);
-    return runInScope({ kind: "signedIn", user }, () => next({ context: { user } }));
-})), { kind: "signedIn" });
-/** Anyone, signed in or not. Handlers get `context.user: User | null`. */
-export const anyone = tag(createMiddleware().server(({ next, serverFnMeta }) => withStatus(!!serverFnMeta, async () => {
-    const { user } = host();
-    return runInScope({ kind: "anyone", user }, () => next({ context: { user } }));
-})), { kind: "anyone" });
-const webhookMiddleware = (paused) => tag(createMiddleware().server(({ next }) => {
-    if (host().invoke?.kind !== "webhook")
-        return new Response("Not found", { status: 404 });
-    return runInScope({ kind: "webhook", user: null }, () => next());
-}), paused ? { kind: "webhook", paused: true } : { kind: "webhook" });
-/**
- * Webhooks delivered by the platform, which already checked the URL token.
- * `webhook.paused` keeps the URL but runs nothing: the platform answers the
- * provider 200 and drops the delivery until it's switched back.
- */
-export const webhook = Object.assign(webhookMiddleware(false), { paused: webhookMiddleware(true) });
-/** Signed-in users with this role. */
-export const role = (name) => tag(createMiddleware()
-    .middleware([signedIn])
-    .server(({ next, context, serverFnMeta }) => withStatus(!!serverFnMeta, async () => {
-    if (!hasRole(context.user, name))
-        throw new ZiteError("FORBIDDEN", `Requires the ${name} role`);
-    return next();
-})), { kind: "role", role: name });
-// TanStack's compiler tags every server function it compiles with an id. A
-// builder it didn't compile (an object property, one returned from a helper)
-// has none and would run its handler wherever it was called, so it fails here.
-const compiled = tag(createMiddleware({ type: "function" }).client(({ next, serverFnMeta }) => {
-    if (!serverFnMeta?.id) {
-        throw new Error("This server function was not compiled by TanStack Start. Assign signedInFn(...)/publicFn(...)" +
-            ".handler(...) directly to its own top-level const, not an object property or a helper's return value.");
-    }
-    return next();
-}), { kind: "factory" });
-// TanStack doesn't export its builder-after-middleware type, so name it through the public builder.
-const builder = createServerFn();
-/** A server function only signed-in users can call. */
-export const signedInFn = createServerFn().middleware([compiled, signedIn]);
-/** A server function anyone can call (external apps only). */
-export const publicFn = createServerFn().middleware([compiled, anyone]);