P372:[{"_387":91,"_388":95,"_389":390},"app1","app2","diffPatch","diff --git a/.env b/.env\nnew file mode 100644\nindex 0000000..b0cc267\n--- /dev/null\n+++ b/.env\n@@ -0,0 +1,14 @@\n+# Example environment variables for local dev, test, and preview deploys.\n+# Copy this to `.env` for local development and local tests.\n+\n+# Required\n+COOKIE_SECRET=79c7d07db29567bc273192c55b1a613bfdc73097c134ef00573a372c51c2ae78\n+\n+# Optional (preview uses request origin by default)\n+APP_BASE_URL=\n+\n+# Resend (optional; preview deploys overwrite these to point at the mock services)\n+RESEND_API_BASE_URL=\n+RESEND_API_KEY=\n+RESEND_FROM_EMAIL=reset@epic-scheduler.dev\n+\ndiff --git a/.env.example b/.env.example\nnew file mode 100644\nindex 0000000..2090ada\n--- /dev/null\n+++ b/.env.example\n@@ -0,0 +1,14 @@\n+# Example environment variables for local dev, test, and preview deploys.\n+# Copy this to `.env` for local development and local tests.\n+\n+# Required\n+COOKIE_SECRET=LOCAL_AND_PREVIEW_COOKIE_SECRET_32_CHARS_MINIMUM\n+\n+# Optional (preview uses request origin by default)\n+APP_BASE_URL=\n+\n+# Resend (optional; preview deploys overwrite these to point at the mock services)\n+RESEND_API_BASE_URL=\n+RESEND_API_KEY=\n+RESEND_FROM_EMAIL=reset@epic-scheduler.dev\n+\ndiff --git a/.oxlintrc.json b/.oxlintrc.json\nnew file mode 100644\nindex 0000000..d4e5fc9\n--- /dev/null\n+++ b/.oxlintrc.json\n@@ -0,0 +1,7 @@\n+{\n+\t\"$schema\": \"./node_modules/oxlint/configuration_schema.json\",\n+\t\"extends\": [\n+\t\t\"./node_modules/@epic-web/config/oxlint-config.json\",\n+\t\t\"./tools/oxlint/oxlint-rules.json\"\n+\t]\n+}\ndiff --git a/.prettierignore b/.prettierignore\nnew file mode 100644\nindex 0000000..a60cef1\n--- /dev/null\n+++ b/.prettierignore\n@@ -0,0 +1,15 @@\n+node_modules\n+dist\n+build\n+.next\n+.vercel\n+.netlify\n+coverage\n+*.log\n+.env*\n+!.env.example\n+package-lock.json\n+yarn.lock\n+pnpm-lock.yaml\n+**/worker-configuration.d.ts\n+public/client-entry.js\ndiff --git a/AGENTS.md b/AGENTS.md\nnew file mode 100644\nindex 0000000..a1beeaa\n--- /dev/null\n+++ b/AGENTS.md\n@@ -0,0 +1,28 @@\n+# epic-scheduler agent index\n+\n+Use Node.js v24+ and npm for installs/scripts (`npm install`, `npm run ...`).\n+\n+This file is intentionally brief. Detailed instructions live in focused docs:\n+\n+- Setup, checks, docs maintenance, preview deploys, and seeding:\n+ - [docs/agents/setup.md](./docs/agents/setup.md)\n+- Code style conventions:\n+ - [docs/agents/code-style.md](./docs/agents/code-style.md)\n+- Testing guidance:\n+ - [docs/agents/testing-principles.md](./docs/agents/testing-principles.md)\n+ - [docs/agents/end-to-end-testing.md](./docs/agents/end-to-end-testing.md)\n+- Tooling and framework references:\n+ - [docs/agents/harness-engineering.md](./docs/agents/harness-engineering.md)\n+ - [docs/agents/oxlint-js-plugins.md](./docs/agents/oxlint-js-plugins.md)\n+ - [docs/agents/remix/index.md](./docs/agents/remix/index.md)\n+ - [docs/agents/cloudflare-agents-sdk.md](./docs/agents/cloudflare-agents-sdk.md)\n+ - [docs/agents/mcp-apps-starter-guide.md](./docs/agents/mcp-apps-starter-guide.md)\n+- Project setup references:\n+ - [docs/getting-started.md](./docs/getting-started.md)\n+ - [docs/environment-variables.md](./docs/environment-variables.md)\n+ - [docs/setup-manifest.md](./docs/setup-manifest.md)\n+- Architecture references:\n+ - [docs/architecture/index.md](./docs/architecture/index.md)\n+ - [docs/architecture/request-lifecycle.md](./docs/architecture/request-lifecycle.md)\n+ - [docs/architecture/authentication.md](./docs/architecture/authentication.md)\n+ - [docs/architecture/data-storage.md](./docs/architecture/data-storage.md)\ndiff --git a/cli.ts b/cli.ts\nnew file mode 100644\nindex 0000000..c903ba3\n--- /dev/null\n+++ b/cli.ts\n@@ -0,0 +1,413 @@\n+import { spawn, type ChildProcess } from 'node:child_process'\n+import { randomUUID } from 'node:crypto'\n+import { platform } from 'node:os'\n+import readline from 'node:readline'\n+import { setTimeout as delay } from 'node:timers/promises'\n+import getPort, { clearLockedPorts } from 'get-port'\n+\n+const defaultWorkerPort = 3742\n+const defaultMockPort = 8788\n+const mockReadyTimeoutMs = 10_000\n+const mockReadyPollMs = 200\n+\n+const ansiReset = '\\x1b[0m'\n+const ansiBright = '\\x1b[1m'\n+const ansiDim = '\\x1b[2m'\n+\n+function colorize(text: string, color: string) {\n+\tconst colorCodes: Record = {\n+\t\tcyan: '\\x1b[36m',\n+\t\tgreen: '\\x1b[32m',\n+\t\tcornflowerblue: '\\x1b[94m',\n+\t\tyellow: '\\x1b[33m',\n+\t\torange: '\\x1b[38;5;214m',\n+\t\tmagenta: '\\x1b[35m',\n+\t\tfirebrick: '\\x1b[31m',\n+\t}\n+\tconst colorCode = colorCodes[color]\n+\treturn colorCode ? `${colorCode}${text}${ansiReset}` : text\n+}\n+\n+function bright(text: string) {\n+\treturn `${ansiBright}${text}${ansiReset}`\n+}\n+\n+function dim(text: string) {\n+\treturn `${ansiDim}${text}${ansiReset}`\n+}\n+\n+type OutputFilterKey = 'client' | 'worker' | 'default'\n+\n+const outputFilters: Record> = {\n+\tclient: [],\n+\tworker: [],\n+\tdefault: [],\n+}\n+\n+const extraArgs = process.argv.slice(2)\n+let shutdown: (() => void) | null = null\n+let devChildren: Array = []\n+let workerOrigin = ''\n+let mockResendProcess: ChildProcess | null = null\n+let mockEnvOverrides: Record = {}\n+\n+void startDev()\n+\n+async function startDev() {\n+\tawait restartDev({ announce: false })\n+\tsetupInteractiveCli({\n+\t\tgetWorkerOrigin: () => workerOrigin,\n+\t\trestart: restartDev,\n+\t})\n+\tshutdown = setupShutdown(\n+\t\t() => devChildren,\n+\t\t() => mockResendProcess,\n+\t)\n+}\n+\n+function resolveWorkerOrigin(port: number) {\n+\tconst envOrigin = process.env.WORKER_DEV_ORIGIN\n+\tif (envOrigin) return envOrigin.trim()\n+\treturn `http://localhost:${port}`\n+}\n+\n+function runNpmScript(\n+\tscript: string,\n+\targs: Array = [],\n+\tenvOverrides: Record = {},\n+\toptions: { outputFilter?: OutputFilterKey } = {},\n+): ChildProcess {\n+\tconst npmCommand = platform() === 'win32' ? 'npm.cmd' : 'npm'\n+\tconst scriptArgs = args.length > 0 ? ['--', ...args] : []\n+\tconst child = spawn(\n+\t\tnpmCommand,\n+\t\t['run', '--silent', script, ...scriptArgs],\n+\t\t{\n+\t\tstdio: ['inherit', 'pipe', 'pipe'],\n+\t\tenv: { ...process.env, ...envOverrides },\n+\t\t},\n+\t)\n+\n+\tpipeOutput(child, options.outputFilter)\n+\n+\tchild.on('exit', (code, signal) => {\n+\t\tif (signal) return\n+\t\tif (code && code !== 0) {\n+\t\t\tprocess.exitCode = code\n+\t\t}\n+\t})\n+\n+\treturn child\n+}\n+\n+function pipeOutput(\n+\tchild: ChildProcess,\n+\tfilterKey: OutputFilterKey = 'default',\n+) {\n+\tconst filters = outputFilters[filterKey]\n+\tif (child.stdout) {\n+\t\tpipeStream(child.stdout, process.stdout, filters)\n+\t}\n+\tif (child.stderr) {\n+\t\tpipeStream(child.stderr, process.stderr, filters)\n+\t}\n+}\n+\n+function pipeStream(\n+\tsource: NodeJS.ReadableStream,\n+\ttarget: NodeJS.WritableStream,\n+\tfilters: Array,\n+) {\n+\tconst rl = readline.createInterface({ input: source })\n+\trl.on('line', (line) => {\n+\t\tif (filters.some((filter) => filter.test(line))) {\n+\t\t\treturn\n+\t\t}\n+\t\ttarget.write(`${line}\\n`)\n+\t})\n+}\n+\n+function setupShutdown(\n+\tgetChildren: () => Array,\n+\tgetMockProcess: () => ChildProcess | null,\n+) {\n+\tlet isShuttingDown = false\n+\tfunction doShutdown() {\n+\t\tif (isShuttingDown) return\n+\t\tisShuttingDown = true\n+\t\tconsole.log(dim('\\nShutting down...'))\n+\t\tconst children = getChildren().filter((child) => child.exitCode === null)\n+\t\tconst mockProcess = getMockProcess()\n+\t\tif (mockProcess && mockProcess.exitCode === null) {\n+\t\t\tchildren.push(mockProcess)\n+\t\t}\n+\t\tvoid (async () => {\n+\t\t\tawait Promise.all(children.map((child) => stopChild(child)))\n+\t\t\tprocess.exit(0)\n+\t\t})()\n+\t}\n+\n+\tprocess.on('SIGINT', doShutdown)\n+\tprocess.on('SIGTERM', doShutdown)\n+\treturn doShutdown\n+}\n+\n+function setupInteractiveCli(options: {\n+\tgetWorkerOrigin: () => string\n+\trestart: () => Promise\n+}) {\n+\tconst stdin = process.stdin\n+\tif (!stdin.isTTY || typeof stdin.setRawMode !== 'function') return\n+\n+\tshowHelp()\n+\tlogAppRunning(options.getWorkerOrigin)\n+\n+\treadline.emitKeypressEvents(stdin)\n+\tstdin.setRawMode(true)\n+\tstdin.resume()\n+\n+\tstdin.on('keypress', (_key, key) => {\n+\t\tif (key?.ctrl && key.name === 'c') {\n+\t\t\tshutdown?.()\n+\t\t\treturn\n+\t\t}\n+\n+\t\tif (key?.name === 'return') {\n+\t\t\tprocess.stdout.write('\\n')\n+\t\t\treturn\n+\t\t}\n+\n+\t\tswitch (key?.name) {\n+\t\t\tcase 'o': {\n+\t\t\t\topenInBrowser(options.getWorkerOrigin())\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase 'u': {\n+\t\t\t\tcopyToClipboard(options.getWorkerOrigin())\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase 'c': {\n+\t\t\t\tconsole.clear()\n+\t\t\t\tshowHelp()\n+\t\t\t\tlogAppRunning(options.getWorkerOrigin)\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase 'r': {\n+\t\t\t\tvoid options.restart()\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase 'h':\n+\t\t\tcase '?': {\n+\t\t\t\tshowHelp()\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase 'q': {\n+\t\t\t\tshutdown?.()\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t}\n+\t})\n+}\n+\n+function showHelp(header?: string) {\n+\tif (header) console.log(header)\n+\tconsole.log(`\\n${bright('CLI shortcuts:')}`)\n+\tconsole.log(\n+\t\t` ${colorize('o', 'cyan')} - ${colorize('open browser', 'green')}`,\n+\t)\n+\tconsole.log(\n+\t\t` ${colorize('u', 'cyan')} - ${colorize('copy URL', 'cornflowerblue')}`,\n+\t)\n+\tconsole.log(\n+\t\t` ${colorize('c', 'cyan')} - ${colorize('clear console', 'yellow')}`,\n+\t)\n+\tconsole.log(` ${colorize('r', 'cyan')} - ${colorize('restart', 'orange')}`)\n+\tconsole.log(` ${colorize('h', 'cyan')} - ${colorize('help', 'magenta')}`)\n+\tconsole.log(` ${colorize('q', 'cyan')} - ${colorize('quit', 'firebrick')}`)\n+}\n+\n+async function restartDev(\n+\t{ announce }: { announce: boolean } = { announce: true },\n+) {\n+\tawait stopChildren(devChildren)\n+\tconst mockEnv = await ensureMockServers()\n+\tconst desiredPort = Number.parseInt(\n+\t\tprocess.env.PORT ?? String(defaultWorkerPort),\n+\t\t10,\n+\t)\n+\tconst portRange = Array.from(\n+\t\t{ length: 10 },\n+\t\t(_, index) => desiredPort + index,\n+\t)\n+\tclearLockedPorts()\n+\tconst workerPort = await getPort({ port: portRange })\n+\tworkerOrigin = resolveWorkerOrigin(workerPort)\n+\tconst client = runNpmScript(\n+\t\t'dev:client',\n+\t\t[],\n+\t\t{},\n+\t\t{\n+\t\t\toutputFilter: 'client',\n+\t\t},\n+\t)\n+\tconst worker = runNpmScript(\n+\t\t'dev:worker',\n+\t\textraArgs,\n+\t\t{ PORT: String(workerPort), ...mockEnv },\n+\t\t{ outputFilter: 'worker' },\n+\t)\n+\tdevChildren = [client, worker]\n+\n+\tif (announce) {\n+\t\tconsole.log(dim('\\nRestarted dev servers.'))\n+\t\tlogAppRunning(() => workerOrigin)\n+\t}\n+}\n+\n+function hasEnvValue(value: string | undefined) {\n+\treturn typeof value === 'string' && value.trim().length > 0\n+}\n+\n+async function isMockReady(baseUrl: string) {\n+\ttry {\n+\t\tconst response = await fetch(`${baseUrl}/__mocks/meta`)\n+\t\tawait response.body?.cancel()\n+\t\treturn response.ok\n+\t} catch {\n+\t\treturn false\n+\t}\n+}\n+\n+async function waitForMockReady(baseUrl: string, child: ChildProcess) {\n+\tconst start = Date.now()\n+\twhile (Date.now() - start < mockReadyTimeoutMs) {\n+\t\tif (child.killed || child.exitCode !== null) {\n+\t\t\treturn false\n+\t\t}\n+\t\tif (await isMockReady(baseUrl)) {\n+\t\t\treturn true\n+\t\t}\n+\t\tawait delay(mockReadyPollMs)\n+\t}\n+\treturn false\n+}\n+\n+async function ensureMockServers() {\n+\tif (\n+\t\tmockResendProcess &&\n+\t\t!mockResendProcess.killed &&\n+\t\tmockResendProcess.exitCode === null\n+\t) {\n+\t\treturn mockEnvOverrides\n+\t}\n+\tconst desiredPort = Number.parseInt(\n+\t\tprocess.env.MOCK_API_PORT ?? String(defaultMockPort),\n+\t\t10,\n+\t)\n+\tconst portRange = Array.from(\n+\t\t{ length: 10 },\n+\t\t(_, index) => desiredPort + index,\n+\t)\n+\tconst mockPort = await getPort({ port: portRange })\n+\tconst baseUrl = `http://127.0.0.1:${mockPort}`\n+\tconst apiToken = `mock-resend-${randomUUID()}`\n+\tconst child = runNpmScript(\n+\t\t'dev:mock-resend',\n+\t\t[\n+\t\t\t'--port',\n+\t\t\tString(mockPort),\n+\t\t\t'--ip',\n+\t\t\t'127.0.0.1',\n+\t\t\t'--var',\n+\t\t\t`MOCK_API_TOKEN:${apiToken}`,\n+\t\t],\n+\t\t{},\n+\t)\n+\tmockResendProcess = child\n+\tchild.once('exit', () => {\n+\t\tmockResendProcess = null\n+\t})\n+\tmockEnvOverrides = {\n+\t\tRESEND_API_BASE_URL: baseUrl,\n+\t\tRESEND_API_KEY: apiToken,\n+\t}\n+\tif (!hasEnvValue(process.env.RESEND_FROM_EMAIL)) {\n+\t\tmockEnvOverrides.RESEND_FROM_EMAIL = 'reset@epic-scheduler.dev'\n+\t}\n+\tconst didStart = await waitForMockReady(baseUrl, child)\n+\tif (!didStart) {\n+\t\tconsole.warn(\n+\t\t\t`Mock API worker did not become ready within ${mockReadyTimeoutMs}ms.`,\n+\t\t)\n+\t}\n+\tconsole.log(dim(`Mock API worker running at ${baseUrl}`))\n+\tconsole.log(dim(`Resend mock base URL ${baseUrl}`))\n+\treturn mockEnvOverrides\n+}\n+\n+async function stopChildren(children: Array) {\n+\tawait Promise.all(children.map((child) => stopChild(child)))\n+}\n+\n+async function stopChild(child: ChildProcess) {\n+\tif (child.killed) return\n+\tchild.kill('SIGINT')\n+\tconst didExit = await waitForExit(child, 5000)\n+\tif (didExit) return\n+\tchild.kill('SIGTERM')\n+\tawait waitForExit(child, 2000)\n+}\n+\n+function waitForExit(child: ChildProcess, timeoutMs: number) {\n+\treturn Promise.race([\n+\t\tnew Promise((resolve) => {\n+\t\t\tchild.once('exit', () => resolve(true))\n+\t\t}),\n+\t\tdelay(timeoutMs).then(() => false),\n+\t])\n+}\n+\n+function logAppRunning(getOrigin: () => string) {\n+\tconsole.log(`\\n${dim('App running at')} ${bright(getOrigin())}`)\n+}\n+\n+function openInBrowser(url: string) {\n+\tconst os = platform()\n+\tif (os === 'darwin') {\n+\t\tspawn('open', [url], { stdio: 'ignore', detached: true }).unref()\n+\t\treturn\n+\t}\n+\n+\tif (os === 'win32') {\n+\t\tspawn('cmd', ['/c', 'start', url], {\n+\t\t\tstdio: 'ignore',\n+\t\t\tdetached: true,\n+\t\t}).unref()\n+\t\treturn\n+\t}\n+\n+\tspawn('xdg-open', [url], { stdio: 'ignore', detached: true }).unref()\n+}\n+\n+function copyToClipboard(text: string) {\n+\tconst os = platform()\n+\tif (os === 'darwin') {\n+\t\tconst proc = spawn('pbcopy', [], { stdio: ['pipe', 'ignore', 'ignore'] })\n+\t\tproc.stdin?.write(text)\n+\t\tproc.stdin?.end()\n+\t\treturn\n+\t}\n+\n+\tif (os === 'win32') {\n+\t\tconst proc = spawn('clip', [], { stdio: ['pipe', 'ignore', 'ignore'] })\n+\t\tproc.stdin?.write(text)\n+\t\tproc.stdin?.end()\n+\t\treturn\n+\t}\n+\n+\tconst proc = spawn('xclip', ['-selection', 'clipboard'], {\n+\t\tstdio: ['pipe', 'ignore', 'ignore'],\n+\t})\n+\tproc.stdin?.write(text)\n+\tproc.stdin?.end()\n+}\ndiff --git a/client/app-session-refresh.test.ts b/client/app-session-refresh.test.ts\nnew file mode 100644\nindex 0000000..5c6acb3\n--- /dev/null\n+++ b/client/app-session-refresh.test.ts\n@@ -0,0 +1,80 @@\n+import { expect, test, vi } from 'vitest'\n+import { type Handle } from 'remix/component'\n+\n+type QueueTask = Parameters[0]\n+\n+const navigationListeners: Array<() => void> = []\n+const queuedSessionResponses: Array<{ email: string } | null> = []\n+const fetchSessionInfoMock = vi.fn(async () => {\n+\treturn queuedSessionResponses.shift() ?? null\n+})\n+\n+vi.mock('./client-router.tsx', () => ({\n+\trouterEvents: new EventTarget(),\n+\tlistenToRouterNavigation: (_handle: Handle, listener: () => void) => {\n+\t\tnavigationListeners.push(listener)\n+\t},\n+\tgetPathname: () => '/',\n+\tnavigate: () => {\n+\t\treturn\n+\t},\n+\tRouter: () => () => null,\n+}))\n+\n+vi.mock('./session.ts', () => ({\n+\tfetchSessionInfo: fetchSessionInfoMock,\n+}))\n+\n+const { App } = await import('./app.tsx')\n+\n+function inspect(value: unknown) {\n+\treturn JSON.stringify(value)\n+}\n+\n+async function runNextTask(tasks: Array, aborted: boolean) {\n+\tconst task = tasks.shift()\n+\texpect(task).toBeDefined()\n+\tconst controller = new AbortController()\n+\tif (aborted) controller.abort()\n+\tawait task!(controller.signal)\n+}\n+\n+test('aborted refresh does not erase a ready authenticated session', async () => {\n+\tnavigationListeners.length = 0\n+\tqueuedSessionResponses.length = 0\n+\tqueuedSessionResponses.push({ email: 'signed-in@example.com' }, null)\n+\n+\tconst queuedTasks: Array = []\n+\tconst handle = {\n+\t\tqueueTask(task: QueueTask) {\n+\t\t\tqueuedTasks.push(task)\n+\t\t},\n+\t\tasync update() {\n+\t\t\treturn new AbortController().signal\n+\t\t},\n+\t\ton() {\n+\t\t\treturn\n+\t\t},\n+\t} as unknown as Handle\n+\n+\tconst render = App(handle)\n+\texpect(navigationListeners).toHaveLength(1)\n+\n+\t// Initial bootstrap task enqueues the session fetch.\n+\tawait runNextTask(queuedTasks, false)\n+\tawait runNextTask(queuedTasks, false)\n+\n+\tconst authenticatedUi = inspect(render())\n+\texpect(authenticatedUi).toContain('signed-in@example.com')\n+\texpect(authenticatedUi).toContain('Log out')\n+\n+\t// Re-run refresh via navigation, then abort in-flight fetch.\n+\tnavigationListeners[0]!()\n+\tawait runNextTask(queuedTasks, true)\n+\n+\tconst uiAfterAbort = inspect(render())\n+\texpect(uiAfterAbort).toContain('signed-in@example.com')\n+\texpect(uiAfterAbort).toContain('Log out')\n+\texpect(uiAfterAbort).not.toContain('>Login<')\n+\texpect(uiAfterAbort).not.toContain('>Signup<')\n+})\ndiff --git a/client/app.tsx b/client/app.tsx\nnew file mode 100644\nindex 0000000..d5cb400\n--- /dev/null\n+++ b/client/app.tsx\n@@ -0,0 +1,154 @@\n+import { type Handle } from 'remix/component'\n+import { clientRoutes } from './routes/index.tsx'\n+import { listenToRouterNavigation, Router } from './client-router.tsx'\n+import {\n+\tfetchSessionInfo,\n+\ttype SessionInfo,\n+\ttype SessionStatus,\n+} from './session.ts'\n+import { buildAuthLink } from './auth-links.ts'\n+import { colors, spacing, typography } from './styles/tokens.ts'\n+\n+export function App(handle: Handle) {\n+\tlet session: SessionInfo | null = null\n+\tlet sessionStatus: SessionStatus = 'idle'\n+\tlet sessionRefreshInFlight = false\n+\tlet sessionRefreshQueued = false\n+\n+\tfunction queueSessionRefresh() {\n+\t\tsessionRefreshQueued = true\n+\t\tif (sessionRefreshInFlight) return\n+\n+\t\t// Preserve current nav state during refreshes after first load.\n+\t\tif (sessionStatus === 'idle') {\n+\t\t\tsessionStatus = 'loading'\n+\t\t\thandle.update()\n+\t\t}\n+\n+\t\tsessionRefreshQueued = false\n+\t\tsessionRefreshInFlight = true\n+\t\thandle.queueTask(async (signal) => {\n+\t\t\tconst nextSession = await fetchSessionInfo(signal)\n+\t\t\tsessionRefreshInFlight = false\n+\t\t\tif (signal.aborted) return\n+\t\t\tsession = nextSession\n+\t\t\tsessionStatus = 'ready'\n+\t\t\thandle.update()\n+\t\t\tif (sessionRefreshQueued) {\n+\t\t\t\tqueueSessionRefresh()\n+\t\t\t}\n+\t\t})\n+\t\tif (sessionStatus !== 'loading') {\n+\t\t\thandle.update()\n+\t\t}\n+\t}\n+\n+\thandle.queueTask(() => {\n+\t\tqueueSessionRefresh()\n+\t})\n+\tlistenToRouterNavigation(handle, queueSessionRefresh)\n+\n+\tconst navLinkCss = {\n+\t\tcolor: colors.primaryText,\n+\t\tfontWeight: typography.fontWeight.medium,\n+\t\ttextDecoration: 'none',\n+\t\t'&:hover': {\n+\t\t\ttextDecoration: 'underline',\n+\t\t},\n+\t}\n+\n+\tconst logOutButtonCss = {\n+\t\tpadding: `${spacing.xs} ${spacing.md}`,\n+\t\tborderRadius: '999px',\n+\t\tborder: `1px solid ${colors.border}`,\n+\t\tbackgroundColor: 'transparent',\n+\t\tcolor: colors.text,\n+\t\tfontWeight: typography.fontWeight.medium,\n+\t\tcursor: 'pointer',\n+\t}\n+\n+\treturn () => {\n+\t\tconst sessionEmail = session?.email ?? ''\n+\t\tconst isSessionReady = sessionStatus === 'ready'\n+\t\tconst isLoggedIn = isSessionReady && Boolean(sessionEmail)\n+\t\tconst showAuthLinks = isSessionReady && !isLoggedIn\n+\t\tconst oauthRedirectTo =\n+\t\t\ttypeof window !== 'undefined' &&\n+\t\t\twindow.location.pathname === '/oauth/authorize'\n+\t\t\t\t? `${window.location.pathname}${window.location.search}`\n+\t\t\t\t: null\n+\t\tconst loginHref = buildAuthLink('/login', oauthRedirectTo)\n+\t\tconst signupHref = buildAuthLink('/signup', oauthRedirectTo)\n+\n+\t\treturn (\n+\t\t\t\n+\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\tHome\n+\t\t\t\t\t\n+\t\t\t\t\t{showAuthLinks ? (\n+\t\t\t\t\t\t<>\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\tLogin\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\tSignup\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t) : null}\n+\t\t\t\t\t{isLoggedIn ? (\n+\t\t\t\t\t\t<>\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\tChat\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t{sessionEmail}\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t) : null}\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t\tNot Found\n+\t\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t

\n+\t\t\t\t\t\t\t\t\tThat route does not exist.\n+\t\t\t\t\t\t\t\t

\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t),\n+\t\t\t\t\t}}\n+\t\t\t\t/>\n+\t\t\t\n+\t\t)\n+\t}\n+}\ndiff --git a/client/auth-links.ts b/client/auth-links.ts\nnew file mode 100644\nindex 0000000..587b4f1\n--- /dev/null\n+++ b/client/auth-links.ts\n@@ -0,0 +1,5 @@\n+export function buildAuthLink(path: string, redirectTo: string | null) {\n+\tif (!redirectTo) return path\n+\tconst params = new URLSearchParams({ redirectTo })\n+\treturn `${path}?${params.toString()}`\n+}\ndiff --git a/client/client-router.tsx b/client/client-router.tsx\nnew file mode 100644\nindex 0000000..813fdf4\n--- /dev/null\n+++ b/client/client-router.tsx\n@@ -0,0 +1,295 @@\n+import { type Handle } from 'remix/component'\n+\n+type RouterSetup = {\n+\troutes: Record\n+\tfallback?: JSX.Element\n+}\n+\n+type FormMethod = 'get' | 'post'\n+\n+type FormSubmitDetails = {\n+\taction: URL\n+\tmethod: FormMethod\n+\tenctype: string\n+\tformData: FormData\n+}\n+\n+export const routerEvents = new EventTarget()\n+let routerInitialized = false\n+\n+function notify() {\n+\trouterEvents.dispatchEvent(new Event('navigate'))\n+}\n+\n+function compileRoutePattern(pattern: string) {\n+\tconst regexPattern = pattern\n+\t\t.replace(/:([^/]+)/g, '([^/]+)')\n+\t\t.replace(/\\*/g, '.*')\n+\n+\treturn {\n+\t\tpattern: new RegExp(`^${regexPattern}$`),\n+\t}\n+}\n+\n+function matchRoute(\n+\tpath: string,\n+\troutes: Record,\n+): JSX.Element | null {\n+\tfor (const [pattern, routeElement] of Object.entries(routes)) {\n+\t\tconst { pattern: compiled } = compileRoutePattern(pattern)\n+\t\tconst result = compiled.exec(path)\n+\t\tif (!result) continue\n+\t\treturn routeElement\n+\t}\n+\n+\treturn null\n+}\n+\n+function shouldHandleClick(event: MouseEvent, anchor: HTMLAnchorElement) {\n+\tif (event.defaultPrevented) return false\n+\tif (event.button !== 0) return false\n+\tif (event.metaKey || event.altKey || event.ctrlKey || event.shiftKey)\n+\t\treturn false\n+\tif (anchor.target && anchor.target !== '_self') return false\n+\tif (anchor.hasAttribute('download')) return false\n+\n+\tconst href = anchor.getAttribute('href')\n+\tif (!href || href.startsWith('#')) return false\n+\n+\tconst destination = new URL(href, window.location.href)\n+\tif (destination.origin !== window.location.origin) return false\n+\treturn true\n+}\n+\n+function handleDocumentClick(event: MouseEvent) {\n+\tconst target = event.target as Element | null\n+\tconst anchor = target?.closest('a') as HTMLAnchorElement | null\n+\tif (!anchor || typeof window === 'undefined') return\n+\tif (!shouldHandleClick(event, anchor)) return\n+\n+\tevent.preventDefault()\n+\tconst destination = new URL(anchor.href, window.location.href)\n+\tnavigate(`${destination.pathname}${destination.search}${destination.hash}`)\n+}\n+\n+function getFormSubmitter(event: SubmitEvent) {\n+\tconst submitter = event.submitter\n+\tif (\n+\t\tsubmitter instanceof HTMLButtonElement ||\n+\t\tsubmitter instanceof HTMLInputElement\n+\t) {\n+\t\treturn submitter\n+\t}\n+\treturn null\n+}\n+\n+function normalizeFormMethod(rawMethod: string | null): FormMethod | null {\n+\tconst method = (rawMethod ?? 'get').trim().toLowerCase()\n+\tif (method === 'get' || method === 'post') return method\n+\treturn null\n+}\n+\n+function normalizeTarget(rawTarget: string | null) {\n+\treturn (rawTarget ?? '').trim().toLowerCase()\n+}\n+\n+function createSubmitFormData(\n+\tform: HTMLFormElement,\n+\tsubmitter: HTMLButtonElement | HTMLInputElement | null,\n+) {\n+\treturn submitter ? new FormData(form, submitter) : new FormData(form)\n+}\n+\n+function resolveFormSubmitDetails(\n+\tform: HTMLFormElement,\n+\tsubmitter: HTMLButtonElement | HTMLInputElement | null,\n+): FormSubmitDetails | null {\n+\tconst method = normalizeFormMethod(\n+\t\tsubmitter?.getAttribute('formmethod') ?? form.getAttribute('method'),\n+\t)\n+\tif (!method) return null\n+\n+\tconst target = normalizeTarget(\n+\t\tsubmitter?.getAttribute('formtarget') ?? form.getAttribute('target'),\n+\t)\n+\tif (target && target !== '_self') return null\n+\n+\tconst rawAction =\n+\t\tsubmitter?.getAttribute('formaction') ?? form.getAttribute('action')\n+\tconst action = new URL(\n+\t\trawAction || window.location.href,\n+\t\twindow.location.href,\n+\t)\n+\tif (action.origin !== window.location.origin) return null\n+\n+\tconst enctype = (\n+\t\tsubmitter?.getAttribute('formenctype') ??\n+\t\tform.getAttribute('enctype') ??\n+\t\t'application/x-www-form-urlencoded'\n+\t)\n+\t\t.trim()\n+\t\t.toLowerCase()\n+\n+\treturn {\n+\t\taction,\n+\t\tmethod,\n+\t\tenctype,\n+\t\tformData: createSubmitFormData(form, submitter),\n+\t}\n+}\n+\n+function formDataToSearchParams(formData: FormData) {\n+\tconst params = new URLSearchParams()\n+\tfor (const [name, value] of formData.entries()) {\n+\t\tparams.append(name, getFormDataValueText(value))\n+\t}\n+\treturn params\n+}\n+\n+function formDataToPlainText(formData: FormData) {\n+\tconst lines: Array = []\n+\tfor (const [name, value] of formData.entries()) {\n+\t\tlines.push(`${name}=${getFormDataValueText(value)}`)\n+\t}\n+\treturn lines.join('\\r\\n')\n+}\n+\n+function getFormDataValueText(value: FormDataEntryValue) {\n+\tif (typeof value === 'string') return value\n+\tconst fileName = (value as { name?: unknown }).name\n+\treturn typeof fileName === 'string' ? fileName : 'blob'\n+}\n+\n+function buildGetDestination(action: URL, formData: FormData) {\n+\tconst destination = new URL(action.toString())\n+\tdestination.search = formDataToSearchParams(formData).toString()\n+\treturn destination\n+}\n+\n+function getPathWithSearchAndHashFromUrl(url: URL) {\n+\treturn `${url.pathname}${url.search}${url.hash}`\n+}\n+\n+function navigateWithRefreshForSamePath(destination: URL) {\n+\tif (\n+\t\tgetPathWithSearchAndHashFromUrl(destination) ===\n+\t\tgetCurrentPathWithSearchAndHash()\n+\t) {\n+\t\tnotify()\n+\t\treturn\n+\t}\n+\tnavigate(destination.toString())\n+}\n+\n+async function submitFormThroughRouter(details: FormSubmitDetails) {\n+\tif (details.method === 'get') {\n+\t\tnavigate(buildGetDestination(details.action, details.formData).toString())\n+\t\treturn\n+\t}\n+\n+\tconst init: RequestInit = {\n+\t\tmethod: details.method.toUpperCase(),\n+\t\tcredentials: 'include',\n+\t\tredirect: 'follow',\n+\t}\n+\n+\tif (details.enctype === 'application/x-www-form-urlencoded') {\n+\t\tinit.body = formDataToSearchParams(details.formData)\n+\t\tinit.headers = {\n+\t\t\t'Content-Type': 'application/x-www-form-urlencoded;charset=UTF-8',\n+\t\t}\n+\t} else if (details.enctype === 'text/plain') {\n+\t\tinit.body = formDataToPlainText(details.formData)\n+\t\tinit.headers = {\n+\t\t\t'Content-Type': 'text/plain;charset=UTF-8',\n+\t\t}\n+\t} else {\n+\t\tinit.body = details.formData\n+\t}\n+\n+\tconst response = await fetch(details.action.toString(), init)\n+\tif (response.redirected) {\n+\t\tnavigateWithRefreshForSamePath(new URL(response.url, window.location.href))\n+\t\treturn\n+\t}\n+\n+\tconst location = response.headers.get('Location')\n+\tif (location) {\n+\t\tnavigateWithRefreshForSamePath(new URL(location, details.action))\n+\t\treturn\n+\t}\n+\n+\tthrow new Error(\n+\t\t`Expected redirect location after form submit (${response.status} ${response.statusText})`,\n+\t)\n+}\n+\n+function handleDocumentSubmit(event: Event) {\n+\tif (!(event instanceof SubmitEvent)) return\n+\tif (typeof window === 'undefined') return\n+\tif (event.defaultPrevented) return\n+\tif (!(event.target instanceof HTMLFormElement)) return\n+\tif (event.target.hasAttribute('data-router-skip')) return\n+\n+\tconst submitter = getFormSubmitter(event)\n+\tconst details = resolveFormSubmitDetails(event.target, submitter)\n+\tif (!details) return\n+\n+\tevent.preventDefault()\n+\tvoid submitFormThroughRouter(details).catch((error: unknown) => {\n+\t\tconsole.error('Router form submit failed', error)\n+\t})\n+}\n+\n+function ensureRouter() {\n+\tif (routerInitialized) return\n+\trouterInitialized = true\n+\twindow.addEventListener('popstate', notify)\n+\tdocument.addEventListener('click', handleDocumentClick)\n+\tdocument.addEventListener('submit', handleDocumentSubmit)\n+}\n+\n+export function listenToRouterNavigation(handle: Handle, listener: () => void) {\n+\tensureRouter()\n+\thandle.on(routerEvents, {\n+\t\tnavigate: () => listener(),\n+\t})\n+}\n+\n+export function getPathname() {\n+\tif (typeof window === 'undefined') return '/'\n+\treturn window.location.pathname\n+}\n+\n+function getCurrentPathWithSearchAndHash() {\n+\tif (typeof window === 'undefined') return '/'\n+\treturn `${window.location.pathname}${window.location.search}${window.location.hash}`\n+}\n+\n+export function navigate(to: string) {\n+\tif (typeof window === 'undefined') return\n+\tconst destination = new URL(to, window.location.href)\n+\tif (destination.origin !== window.location.origin) {\n+\t\twindow.location.assign(destination.toString())\n+\t\treturn\n+\t}\n+\n+\tconst nextPath = `${destination.pathname}${destination.search}${destination.hash}`\n+\tif (nextPath === getCurrentPathWithSearchAndHash()) return\n+\n+\twindow.history.pushState({}, '', nextPath)\n+\tnotify()\n+}\n+\n+export function Router(handle: Handle, setup: RouterSetup) {\n+\tlistenToRouterNavigation(handle, () => {\n+\t\tvoid handle.update()\n+\t})\n+\n+\treturn () => {\n+\t\tconst path = getPathname()\n+\t\tconst routeElement = matchRoute(path, setup.routes)\n+\t\tif (routeElement) return routeElement\n+\t\treturn setup.fallback ?? null\n+\t}\n+}\ndiff --git a/client/counter.tsx b/client/counter.tsx\nnew file mode 100644\nindex 0000000..f7fcea9\n--- /dev/null\n+++ b/client/counter.tsx\n@@ -0,0 +1,49 @@\n+import { type Handle } from 'remix/component'\n+import {\n+\tcolors,\n+\tradius,\n+\tspacing,\n+\ttransitions,\n+\ttypography,\n+} from './styles/tokens.ts'\n+\n+type CounterSetup = {\n+\tinitial?: number\n+}\n+\n+export function Counter(handle: Handle, setup: CounterSetup = {}) {\n+\tlet count = setup.initial ?? 0\n+\n+\tfunction increment() {\n+\t\tcount += 1\n+\t\thandle.update()\n+\t}\n+\n+\treturn () => (\n+\t\t\n+\t\t\tCount: {count}\n+\t\t\n+\t)\n+}\ndiff --git a/client/entry.tsx b/client/entry.tsx\nnew file mode 100644\nindex 0000000..4b0ed1a\n--- /dev/null\n+++ b/client/entry.tsx\n@@ -0,0 +1,9 @@\n+import { createRoot } from 'remix/component'\n+import { App } from './app.tsx'\n+\n+const rootElement = document.getElementById('root') ?? document.body\n+if (rootElement.childNodes.length > 0) {\n+\t// Remix alpha.3 auto-hydrates non-empty containers. We render from scratch.\n+\trootElement.replaceChildren()\n+}\n+createRoot(rootElement).render()\ndiff --git a/client/mcp-apps/calculator-widget.ts b/client/mcp-apps/calculator-widget.ts\nnew file mode 100644\nindex 0000000..7303fdb\n--- /dev/null\n+++ b/client/mcp-apps/calculator-widget.ts\n@@ -0,0 +1,299 @@\n+import { createWidgetHostBridge } from './widget-host-bridge.js'\n+\n+type CalculatorOperator = '+' | '-' | '*' | '/'\n+\n+type CalculatorState = {\n+\tleftOperand: number | null\n+\toperator: CalculatorOperator | null\n+\tdisplayValue: string\n+\twaitingForNextOperand: boolean\n+\texpressionText: string\n+}\n+\n+function readTheme(source: Record | undefined) {\n+\tconst theme = source?.theme\n+\treturn theme === 'dark' || theme === 'light' ? theme : undefined\n+}\n+\n+function initializeCalculatorWidget() {\n+\tconst documentRef = globalThis.document\n+\tconst windowRef = globalThis.window\n+\tif (!documentRef || !windowRef) return\n+\n+\tconst rootElement = documentRef.documentElement\n+\tconst expressionElement =\n+\t\tdocumentRef.querySelector('[data-expression]')\n+\tconst resultElement = documentRef.querySelector('[data-result]')\n+\tconst keyElements = Array.from(\n+\t\tdocumentRef.querySelectorAll('[data-action]'),\n+\t)\n+\n+\tif (!expressionElement || !resultElement) {\n+\t\treturn\n+\t}\n+\tconst expressionDisplayElement = expressionElement\n+\tconst resultDisplayElement = resultElement\n+\n+\tconst state: CalculatorState = {\n+\t\tleftOperand: null,\n+\t\toperator: null,\n+\t\tdisplayValue: '0',\n+\t\twaitingForNextOperand: false,\n+\t\texpressionText: '',\n+\t}\n+\n+\tfunction applyTheme(theme: string | undefined) {\n+\t\tif (theme === 'dark' || theme === 'light') {\n+\t\t\trootElement.setAttribute('data-theme', theme)\n+\t\t\treturn\n+\t\t}\n+\t\trootElement.removeAttribute('data-theme')\n+\t}\n+\n+\tconst hostBridge = createWidgetHostBridge({\n+\t\tappInfo: {\n+\t\t\tname: 'calculator-widget',\n+\t\t\tversion: '1.0.0',\n+\t\t},\n+\t\tonRenderData: (renderData) => {\n+\t\t\tapplyTheme(readTheme(renderData))\n+\t\t},\n+\t\tonHostContextChanged: (hostContext) => {\n+\t\t\tapplyTheme(readTheme(hostContext))\n+\t\t},\n+\t})\n+\n+\tfunction formatNumber(value: number) {\n+\t\tif (!Number.isFinite(value)) return 'Error'\n+\t\treturn Number(value.toPrecision(12)).toString()\n+\t}\n+\n+\tfunction compute(\n+\t\tleft: number,\n+\t\toperator: CalculatorOperator | null,\n+\t\tright: number,\n+\t): number | null {\n+\t\tif (operator === '+') return left + right\n+\t\tif (operator === '-') return left - right\n+\t\tif (operator === '*') return left * right\n+\t\tif (operator === '/') {\n+\t\t\tif (right === 0) return null\n+\t\t\treturn left / right\n+\t\t}\n+\t\treturn right\n+\t}\n+\n+\tfunction updateView() {\n+\t\texpressionDisplayElement.textContent = state.expressionText || ' '\n+\t\tresultDisplayElement.textContent = state.displayValue\n+\t}\n+\n+\tfunction sendResultToHostAgent(expression: string, resultValue: string) {\n+\t\tconst prompt = 'Calculator result: ' + expression + ' = ' + resultValue\n+\t\tvoid hostBridge.sendUserMessageWithFallback(prompt)\n+\t}\n+\n+\tfunction resetAll() {\n+\t\tstate.leftOperand = null\n+\t\tstate.operator = null\n+\t\tstate.displayValue = '0'\n+\t\tstate.waitingForNextOperand = false\n+\t\tstate.expressionText = ''\n+\t\tupdateView()\n+\t}\n+\n+\tfunction setError() {\n+\t\tstate.leftOperand = null\n+\t\tstate.operator = null\n+\t\tstate.displayValue = 'Error'\n+\t\tstate.waitingForNextOperand = true\n+\t\tstate.expressionText = 'Invalid operation'\n+\t\tupdateView()\n+\t}\n+\n+\tfunction addDigit(digit: string) {\n+\t\tif (state.displayValue === 'Error' || state.waitingForNextOperand) {\n+\t\t\tstate.displayValue = digit\n+\t\t\tstate.waitingForNextOperand = false\n+\t\t\tupdateView()\n+\t\t\treturn\n+\t\t}\n+\n+\t\tstate.displayValue =\n+\t\t\tstate.displayValue === '0' ? digit : state.displayValue + digit\n+\t\tupdateView()\n+\t}\n+\n+\tfunction addDecimal() {\n+\t\tif (state.displayValue === 'Error' || state.waitingForNextOperand) {\n+\t\t\tstate.displayValue = '0.'\n+\t\t\tstate.waitingForNextOperand = false\n+\t\t\tupdateView()\n+\t\t\treturn\n+\t\t}\n+\n+\t\tif (!state.displayValue.includes('.')) {\n+\t\t\tstate.displayValue += '.'\n+\t\t\tupdateView()\n+\t\t}\n+\t}\n+\n+\tfunction removeLastCharacter() {\n+\t\tif (state.displayValue === 'Error' || state.waitingForNextOperand) {\n+\t\t\tstate.displayValue = '0'\n+\t\t\tstate.waitingForNextOperand = false\n+\t\t\tupdateView()\n+\t\t\treturn\n+\t\t}\n+\n+\t\tstate.displayValue = state.displayValue.slice(0, -1) || '0'\n+\t\tupdateView()\n+\t}\n+\n+\tfunction useOperator(nextOperator: CalculatorOperator) {\n+\t\tconst inputValue = Number(state.displayValue)\n+\t\tif (!Number.isFinite(inputValue)) {\n+\t\t\tsetError()\n+\t\t\treturn\n+\t\t}\n+\n+\t\tif (state.operator && state.waitingForNextOperand) {\n+\t\t\tstate.operator = nextOperator\n+\t\t\tstate.expressionText =\n+\t\t\t\tformatNumber(state.leftOperand ?? 0) + ' ' + nextOperator\n+\t\t\tupdateView()\n+\t\t\treturn\n+\t\t}\n+\n+\t\tif (state.leftOperand === null || state.operator === null) {\n+\t\t\tstate.leftOperand = inputValue\n+\t\t} else {\n+\t\t\tconst result = compute(state.leftOperand, state.operator, inputValue)\n+\t\t\tif (result === null || !Number.isFinite(result)) {\n+\t\t\t\tsetError()\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t\tstate.leftOperand = result\n+\t\t\tstate.displayValue = formatNumber(result)\n+\t\t}\n+\n+\t\tstate.operator = nextOperator\n+\t\tstate.waitingForNextOperand = true\n+\t\tstate.expressionText = formatNumber(state.leftOperand) + ' ' + nextOperator\n+\t\tupdateView()\n+\t}\n+\n+\tfunction evaluateExpression() {\n+\t\tif (\n+\t\t\tstate.operator === null ||\n+\t\t\tstate.leftOperand === null ||\n+\t\t\tstate.waitingForNextOperand\n+\t\t) {\n+\t\t\treturn\n+\t\t}\n+\n+\t\tconst rightOperand = Number(state.displayValue)\n+\t\tconst result = compute(state.leftOperand, state.operator, rightOperand)\n+\t\tif (result === null || !Number.isFinite(result)) {\n+\t\t\tsetError()\n+\t\t\treturn\n+\t\t}\n+\n+\t\tconst expression =\n+\t\t\tformatNumber(state.leftOperand) +\n+\t\t\t' ' +\n+\t\t\tstate.operator +\n+\t\t\t' ' +\n+\t\t\tformatNumber(rightOperand)\n+\n+\t\tstate.displayValue = formatNumber(result)\n+\t\tstate.leftOperand = result\n+\t\tstate.operator = null\n+\t\tstate.waitingForNextOperand = true\n+\t\tstate.expressionText = expression + ' ='\n+\t\tupdateView()\n+\t\tsendResultToHostAgent(expression, state.displayValue)\n+\t}\n+\n+\tfunction handleAction(action: string | null, value: string | null) {\n+\t\tif (action === 'digit' && value) return addDigit(value)\n+\t\tif (action === 'decimal') return addDecimal()\n+\t\tif (action === 'operator' && value) {\n+\t\t\tif (value === '+' || value === '-' || value === '*' || value === '/') {\n+\t\t\t\treturn useOperator(value)\n+\t\t\t}\n+\t\t\treturn\n+\t\t}\n+\t\tif (action === 'evaluate') return evaluateExpression()\n+\t\tif (action === 'clear') {\n+\t\t\tstate.displayValue = '0'\n+\t\t\tstate.waitingForNextOperand = false\n+\t\t\tupdateView()\n+\t\t\treturn\n+\t\t}\n+\t\tif (action === 'backspace') return removeLastCharacter()\n+\t\tif (action === 'reset') return resetAll()\n+\t}\n+\n+\tfor (const keyElement of keyElements) {\n+\t\tkeyElement.addEventListener('click', () => {\n+\t\t\thandleAction(\n+\t\t\t\tkeyElement.getAttribute('data-action'),\n+\t\t\t\tkeyElement.getAttribute('data-value'),\n+\t\t\t)\n+\t\t})\n+\t}\n+\n+\tdocumentRef.addEventListener('keydown', (event) => {\n+\t\tif (event.key >= '0' && event.key <= '9') {\n+\t\t\tevent.preventDefault()\n+\t\t\taddDigit(event.key)\n+\t\t\treturn\n+\t\t}\n+\t\tif (event.key === '.') {\n+\t\t\tevent.preventDefault()\n+\t\t\taddDecimal()\n+\t\t\treturn\n+\t\t}\n+\t\tif (event.key === 'Enter' || event.key === '=') {\n+\t\t\tevent.preventDefault()\n+\t\t\tevaluateExpression()\n+\t\t\treturn\n+\t\t}\n+\t\tif (\n+\t\t\tevent.key === '+' ||\n+\t\t\tevent.key === '-' ||\n+\t\t\tevent.key === '*' ||\n+\t\t\tevent.key === '/'\n+\t\t) {\n+\t\t\tevent.preventDefault()\n+\t\t\tuseOperator(event.key)\n+\t\t\treturn\n+\t\t}\n+\t\tif (event.key === 'Backspace') {\n+\t\t\tevent.preventDefault()\n+\t\t\tremoveLastCharacter()\n+\t\t\treturn\n+\t\t}\n+\t\tif (event.key.toLowerCase() === 'c' && !event.ctrlKey && !event.metaKey) {\n+\t\t\tevent.preventDefault()\n+\t\t\thandleAction('clear', null)\n+\t\t}\n+\t})\n+\n+\twindowRef.addEventListener('message', (event) => {\n+\t\thostBridge.handleHostMessage(event.data)\n+\t})\n+\n+\tvoid hostBridge.initialize()\n+\thostBridge.requestRenderData()\n+\tupdateView()\n+}\n+\n+if (document.readyState === 'loading') {\n+\tdocument.addEventListener('DOMContentLoaded', initializeCalculatorWidget, {\n+\t\tonce: true,\n+\t})\n+} else {\n+\tinitializeCalculatorWidget()\n+}\ndiff --git a/client/mcp-apps/widget-host-bridge.test.ts b/client/mcp-apps/widget-host-bridge.test.ts\nnew file mode 100644\nindex 0000000..1339563\n--- /dev/null\n+++ b/client/mcp-apps/widget-host-bridge.test.ts\n@@ -0,0 +1,125 @@\n+import { afterEach, expect, test } from 'vitest'\n+import { createWidgetHostBridge } from './widget-host-bridge.ts'\n+\n+type HostRequestMessage = {\n+\tjsonrpc?: string\n+\tid?: string | number | null\n+\tmethod?: string\n+\tparams?: Record\n+\ttype?: string\n+\tpayload?: Record\n+}\n+\n+const latestProtocolVersion = '2026-01-26'\n+\n+const originalWindow = globalThis.window\n+\n+afterEach(() => {\n+\tif (originalWindow) {\n+\t\tglobalThis.window = originalWindow\n+\t\treturn\n+\t}\n+\tReflect.deleteProperty(globalThis, 'window')\n+})\n+\n+test('sendUserMessageWithFallback delivers ui/message to latest-protocol host', async () => {\n+\tconst deliveredChatMessages: Array = []\n+\tconst hostPostedMessages: Array = []\n+\tlet bridge: ReturnType\n+\tlet initialized = false\n+\n+\tconst parentWindow = {\n+\t\tpostMessage(message: unknown) {\n+\t\t\tif (!message || typeof message !== 'object' || Array.isArray(message)) {\n+\t\t\t\treturn\n+\t\t\t}\n+\n+\t\t\tconst request = message as HostRequestMessage\n+\t\t\thostPostedMessages.push(request)\n+\t\t\tif (request.method === 'ui/initialize') {\n+\t\t\t\tif (request.params?.protocolVersion !== latestProtocolVersion) {\n+\t\t\t\t\tbridge.handleHostMessage({\n+\t\t\t\t\t\tjsonrpc: '2.0',\n+\t\t\t\t\t\tid: request.id,\n+\t\t\t\t\t\terror: {\n+\t\t\t\t\t\t\tcode: -32602,\n+\t\t\t\t\t\t\tmessage: `Unsupported protocol version ${String(\n+\t\t\t\t\t\t\t\trequest.params?.protocolVersion,\n+\t\t\t\t\t\t\t)}`,\n+\t\t\t\t\t\t},\n+\t\t\t\t\t})\n+\t\t\t\t\treturn\n+\t\t\t\t}\n+\n+\t\t\t\tinitialized = true\n+\t\t\t\tbridge.handleHostMessage({\n+\t\t\t\t\tjsonrpc: '2.0',\n+\t\t\t\t\tid: request.id,\n+\t\t\t\t\tresult: {\n+\t\t\t\t\t\tprotocolVersion: latestProtocolVersion,\n+\t\t\t\t\t\thostInfo: {\n+\t\t\t\t\t\t\tname: 'mcp-jam-sim',\n+\t\t\t\t\t\t\tversion: '1.0.0',\n+\t\t\t\t\t\t},\n+\t\t\t\t\t\thostCapabilities: {\n+\t\t\t\t\t\t\tmessage: { text: {} },\n+\t\t\t\t\t\t},\n+\t\t\t\t\t\thostContext: {},\n+\t\t\t\t\t},\n+\t\t\t\t})\n+\t\t\t\treturn\n+\t\t\t}\n+\n+\t\t\tif (request.method !== 'ui/message') {\n+\t\t\t\treturn\n+\t\t\t}\n+\n+\t\t\tconst firstContent = Array.isArray(request.params?.content)\n+\t\t\t\t? request.params.content[0]\n+\t\t\t\t: null\n+\t\t\tconst text =\n+\t\t\t\tfirstContent &&\n+\t\t\t\ttypeof firstContent === 'object' &&\n+\t\t\t\t(firstContent as { type?: unknown }).type === 'text' &&\n+\t\t\t\ttypeof (firstContent as { text?: unknown }).text === 'string'\n+\t\t\t\t\t? (firstContent as { text: string }).text\n+\t\t\t\t\t: null\n+\n+\t\t\tif (!initialized || request.params?.role !== 'user' || !text) {\n+\t\t\t\tbridge.handleHostMessage({\n+\t\t\t\t\tjsonrpc: '2.0',\n+\t\t\t\t\tid: request.id,\n+\t\t\t\t\tresult: { isError: true },\n+\t\t\t\t})\n+\t\t\t\treturn\n+\t\t\t}\n+\n+\t\t\tdeliveredChatMessages.push(text)\n+\t\t\tbridge.handleHostMessage({\n+\t\t\t\tjsonrpc: '2.0',\n+\t\t\t\tid: request.id,\n+\t\t\t\tresult: {},\n+\t\t\t})\n+\t\t},\n+\t}\n+\n+\tglobalThis.window = {\n+\t\tparent: parentWindow,\n+\t} as unknown as Window & typeof globalThis\n+\n+\tbridge = createWidgetHostBridge({\n+\t\tappInfo: {\n+\t\t\tname: 'calculator-widget',\n+\t\t\tversion: '1.0.0',\n+\t\t},\n+\t\trequestTimeoutMs: 500,\n+\t})\n+\n+\tconst messageText = 'Calculator result: 7 + 3 = 10'\n+\tconst sent = await bridge.sendUserMessageWithFallback(messageText)\n+\texpect(sent).toBe(true)\n+\texpect(deliveredChatMessages).toEqual([messageText])\n+\texpect(hostPostedMessages.some((entry) => entry.type === 'prompt')).toBe(\n+\t\tfalse,\n+\t)\n+})\ndiff --git a/client/mcp-apps/widget-host-bridge.ts b/client/mcp-apps/widget-host-bridge.ts\nnew file mode 100644\nindex 0000000..2c4521a\n--- /dev/null\n+++ b/client/mcp-apps/widget-host-bridge.ts\n@@ -0,0 +1,248 @@\n+type WidgetHostBridgeOptions = {\n+\tprotocolVersion?: string\n+\trequestTimeoutMs?: number\n+\tappInfo?: {\n+\t\tname: string\n+\t\tversion: string\n+\t}\n+\tonRenderData?: (renderData: Record | undefined) => void\n+\tonHostContextChanged?: (\n+\t\thostContext: Record | undefined,\n+\t) => void\n+}\n+\n+type WidgetHostBridge = {\n+\thandleHostMessage(message: unknown): void\n+\tinitialize(): Promise\n+\tsendUserMessage(text: string): Promise\n+\tsendUserMessageWithFallback(text: string): Promise\n+\trequestRenderData(): boolean\n+}\n+\n+type BridgeResponseMessage = {\n+\tjsonrpc: '2.0'\n+\tid?: string | number | null\n+\tresult?: Record\n+\terror?: Record\n+}\n+\n+type PendingBridgeRequest = {\n+\tresolve: (value: BridgeResponseMessage) => void\n+\treject: (reason?: unknown) => void\n+\ttimeoutId: ReturnType\n+}\n+\n+function isRecord(value: unknown): value is Record {\n+\treturn typeof value === 'object' && value !== null\n+}\n+\n+function toRequestId(value: string | number) {\n+\treturn String(value)\n+}\n+\n+function getBridgeErrorMessage(error: unknown) {\n+\tif (isRecord(error) && typeof error.message === 'string') {\n+\t\treturn error.message\n+\t}\n+\treturn 'Bridge request failed'\n+}\n+\n+export function createWidgetHostBridge(\n+\toptions: WidgetHostBridgeOptions = {},\n+): WidgetHostBridge {\n+\tconst protocolVersion = options.protocolVersion ?? '2026-01-26'\n+\tconst requestTimeoutMs = options.requestTimeoutMs ?? 1500\n+\tconst appInfo = options.appInfo ?? {\n+\t\tname: 'mcp-widget',\n+\t\tversion: '1.0.0',\n+\t}\n+\tconst renderDataMessageType = 'ui-lifecycle-iframe-render-data'\n+\tconst hostContextChangedMethod = 'ui/notifications/host-context-changed'\n+\n+\tlet requestCounter = 0\n+\tlet initialized = false\n+\tlet initializationPromise: Promise | null = null\n+\tconst pendingRequests = new Map()\n+\n+\tfunction postMessageToHost(message: Record) {\n+\t\tconst hostWindow = globalThis.window?.parent\n+\t\tif (!hostWindow) {\n+\t\t\tthrow new Error('Host window is unavailable')\n+\t\t}\n+\t\thostWindow.postMessage(message, '*')\n+\t}\n+\n+\tfunction dispatchRenderData(renderData: unknown) {\n+\t\tif (!options.onRenderData) return\n+\t\toptions.onRenderData(isRecord(renderData) ? renderData : undefined)\n+\t}\n+\n+\tfunction dispatchHostContext(hostContext: unknown) {\n+\t\tif (!options.onHostContextChanged) return\n+\t\toptions.onHostContextChanged(\n+\t\t\tisRecord(hostContext) ? hostContext : undefined,\n+\t\t)\n+\t}\n+\n+\tfunction handleBridgeResponseMessage(message: unknown) {\n+\t\tif (!isRecord(message)) return\n+\t\tif (message.jsonrpc !== '2.0') return\n+\t\tif (typeof message.id !== 'string' && typeof message.id !== 'number') return\n+\n+\t\tconst requestId = toRequestId(message.id)\n+\t\tconst pendingRequest = pendingRequests.get(requestId)\n+\t\tif (!pendingRequest) return\n+\n+\t\tglobalThis.clearTimeout(pendingRequest.timeoutId)\n+\t\tpendingRequests.delete(requestId)\n+\n+\t\tconst response: BridgeResponseMessage = {\n+\t\t\tjsonrpc: '2.0',\n+\t\t\tid: message.id,\n+\t\t\tresult: isRecord(message.result) ? message.result : undefined,\n+\t\t\terror: isRecord(message.error) ? message.error : undefined,\n+\t\t}\n+\n+\t\tif (response.error) {\n+\t\t\tpendingRequest.reject(new Error(getBridgeErrorMessage(response.error)))\n+\t\t\treturn\n+\t\t}\n+\n+\t\tpendingRequest.resolve(response)\n+\t}\n+\n+\tfunction handleLifecycleMessage(message: unknown) {\n+\t\tif (!isRecord(message)) return\n+\n+\t\tif (message.type === renderDataMessageType) {\n+\t\t\tconst payload = isRecord(message.payload) ? message.payload : undefined\n+\t\t\tdispatchRenderData(payload?.renderData)\n+\t\t\treturn\n+\t\t}\n+\n+\t\tif (message.method === hostContextChangedMethod) {\n+\t\t\tdispatchHostContext(message.params)\n+\t\t}\n+\t}\n+\n+\tfunction handleHostMessage(message: unknown) {\n+\t\thandleBridgeResponseMessage(message)\n+\t\thandleLifecycleMessage(message)\n+\t}\n+\n+\tfunction sendBridgeRequest(\n+\t\tmethod: string,\n+\t\tparams: Record,\n+\t): Promise {\n+\t\treturn new Promise((resolve, reject) => {\n+\t\t\trequestCounter += 1\n+\t\t\tconst requestId = toRequestId(`${appInfo.name}-bridge-${requestCounter}`)\n+\t\t\tconst timeoutId = globalThis.setTimeout(() => {\n+\t\t\t\tpendingRequests.delete(requestId)\n+\t\t\t\treject(new Error('Bridge request timed out'))\n+\t\t\t}, requestTimeoutMs)\n+\n+\t\t\tpendingRequests.set(requestId, {\n+\t\t\t\tresolve,\n+\t\t\t\treject,\n+\t\t\t\ttimeoutId,\n+\t\t\t})\n+\n+\t\t\ttry {\n+\t\t\t\tpostMessageToHost({\n+\t\t\t\t\tjsonrpc: '2.0',\n+\t\t\t\t\tid: requestId,\n+\t\t\t\t\tmethod,\n+\t\t\t\t\tparams,\n+\t\t\t\t})\n+\t\t\t} catch (error) {\n+\t\t\t\tpendingRequests.delete(requestId)\n+\t\t\t\tglobalThis.clearTimeout(timeoutId)\n+\t\t\t\treject(error)\n+\t\t\t}\n+\t\t})\n+\t}\n+\n+\tasync function initialize() {\n+\t\tif (initialized) return true\n+\t\tif (initializationPromise) return initializationPromise\n+\n+\t\tinitializationPromise = sendBridgeRequest('ui/initialize', {\n+\t\t\tappInfo,\n+\t\t\tappCapabilities: {},\n+\t\t\tprotocolVersion,\n+\t\t})\n+\t\t\t.then((response) => {\n+\t\t\t\tdispatchHostContext(response.result?.hostContext)\n+\t\t\t\tinitialized = true\n+\t\t\t\ttry {\n+\t\t\t\t\tpostMessageToHost({\n+\t\t\t\t\t\tjsonrpc: '2.0',\n+\t\t\t\t\t\tmethod: 'ui/notifications/initialized',\n+\t\t\t\t\t\tparams: {},\n+\t\t\t\t\t})\n+\t\t\t\t} catch {\n+\t\t\t\t\t// Ignore initialized notification failures and continue.\n+\t\t\t\t}\n+\t\t\t\treturn true\n+\t\t\t})\n+\t\t\t.catch(() => {\n+\t\t\t\treturn false\n+\t\t\t})\n+\t\t\t.finally(() => {\n+\t\t\t\tinitializationPromise = null\n+\t\t\t})\n+\n+\t\treturn initializationPromise\n+\t}\n+\n+\tasync function sendUserMessage(text: string) {\n+\t\tconst bridgeReady = await initialize()\n+\t\tif (!bridgeReady) return false\n+\n+\t\ttry {\n+\t\t\tconst response = await sendBridgeRequest('ui/message', {\n+\t\t\t\trole: 'user',\n+\t\t\t\tcontent: [{ type: 'text', text }],\n+\t\t\t})\n+\t\t\treturn response.result?.isError !== true\n+\t\t} catch {\n+\t\t\treturn false\n+\t\t}\n+\t}\n+\n+\tasync function sendUserMessageWithFallback(text: string) {\n+\t\tconst bridgeSent = await sendUserMessage(text)\n+\t\tif (bridgeSent) return true\n+\n+\t\ttry {\n+\t\t\tpostMessageToHost({\n+\t\t\t\ttype: 'prompt',\n+\t\t\t\tpayload: { prompt: text },\n+\t\t\t})\n+\t\t\treturn true\n+\t\t} catch {\n+\t\t\treturn false\n+\t\t}\n+\t}\n+\n+\tfunction requestRenderData() {\n+\t\ttry {\n+\t\t\tpostMessageToHost({\n+\t\t\t\ttype: 'ui-request-render-data',\n+\t\t\t\tpayload: {},\n+\t\t\t})\n+\t\t\treturn true\n+\t\t} catch {\n+\t\t\treturn false\n+\t\t}\n+\t}\n+\n+\treturn {\n+\t\thandleHostMessage,\n+\t\tinitialize,\n+\t\tsendUserMessage,\n+\t\tsendUserMessageWithFallback,\n+\t\trequestRenderData,\n+\t}\n+}\ndiff --git a/client/routes/account.tsx b/client/routes/account.tsx\nnew file mode 100644\nindex 0000000..3f3b02e\n--- /dev/null\n+++ b/client/routes/account.tsx\n@@ -0,0 +1,82 @@\n+import { type Handle } from 'remix/component'\n+import { colors, spacing, typography } from '#client/styles/tokens.ts'\n+\n+type AccountStatus = 'idle' | 'loading' | 'ready' | 'error'\n+\n+export function AccountRoute(handle: Handle) {\n+\tlet status: AccountStatus = 'loading'\n+\tlet email = ''\n+\tlet message: string | null = null\n+\n+\tasync function loadAccount(signal: AbortSignal) {\n+\t\ttry {\n+\t\t\tconst response = await fetch('/session', {\n+\t\t\t\theaders: { Accept: 'application/json' },\n+\t\t\t\tcredentials: 'include',\n+\t\t\t\tsignal,\n+\t\t\t})\n+\t\t\tif (signal.aborted) return\n+\t\t\tconst payload = await response.json().catch(() => null)\n+\t\t\tconst sessionEmail =\n+\t\t\t\tresponse.ok &&\n+\t\t\t\tpayload?.ok &&\n+\t\t\t\ttypeof payload?.session?.email === 'string'\n+\t\t\t\t\t? payload.session.email.trim()\n+\t\t\t\t\t: ''\n+\t\t\tif (!sessionEmail) {\n+\t\t\t\twindow.location.assign('/login')\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t\temail = sessionEmail\n+\t\t\tstatus = 'ready'\n+\t\t\tmessage = null\n+\t\t\thandle.update()\n+\t\t} catch {\n+\t\t\tif (signal.aborted) return\n+\t\t\tstatus = 'error'\n+\t\t\tmessage = 'Unable to load your account.'\n+\t\t\thandle.update()\n+\t\t}\n+\t}\n+\n+\treturn () => {\n+\t\tif (status === 'loading') {\n+\t\t\thandle.queueTask(loadAccount)\n+\t\t}\n+\n+\t\treturn (\n+\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t\n+\t\t\t\t\t\t{email ? `Welcome, ${email}` : 'Welcome'}\n+\t\t\t\t\t\n+\t\t\t\t\t

\n+\t\t\t\t\t\tYou are signed in to epic-scheduler.\n+\t\t\t\t\t

\n+\t\t\t\t

\n+\t\t\t\t{status === 'loading' ? (\n+\t\t\t\t\t

Loading your account…

\n+\t\t\t\t) : null}\n+\t\t\t\t{message ? (\n+\t\t\t\t\t

\n+\t\t\t\t\t\t{message}\n+\t\t\t\t\t

\n+\t\t\t\t) : null}\n+\t\t\t\n+\t\t)\n+\t}\n+}\ndiff --git a/client/routes/chat.tsx b/client/routes/chat.tsx\nnew file mode 100644\nindex 0000000..aabff4d\n--- /dev/null\n+++ b/client/routes/chat.tsx\n@@ -0,0 +1,20 @@\n+import { type Handle } from 'remix/component'\n+import { colors, spacing, typography } from '#client/styles/tokens.ts'\n+\n+export function ChatRoute(_handle: Handle) {\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t\tChat\n+\t\t\t\n+\t\t\t

AI chat coming soon.

\n+\t\t

\n+\t)\n+}\ndiff --git a/client/routes/home.tsx b/client/routes/home.tsx\nnew file mode 100644\nindex 0000000..cb8b61c\n--- /dev/null\n+++ b/client/routes/home.tsx\n@@ -0,0 +1,71 @@\n+import { type Handle } from 'remix/component'\n+import { Counter } from '#client/counter.tsx'\n+import {\n+\tcolors,\n+\tradius,\n+\tshadows,\n+\tspacing,\n+\ttypography,\n+} from '#client/styles/tokens.ts'\n+\n+export function HomeRoute(_handle: Handle) {\n+\treturn () => (\n+\t\t\n+\t\t\t\n+\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t

\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\tepic-scheduler Remix 3\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t

\n+\t\t\t\t\t\t\tRemix 3 components running on the client, backed by Remix 3\n+\t\t\t\t\t\t\trouting in the worker.\n+\t\t\t\t\t\t

\n+\t\t\t\t\t

\n+\t\t\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\n+\t)\n+}\ndiff --git a/client/routes/index.tsx b/client/routes/index.tsx\nnew file mode 100644\nindex 0000000..a99e05f\n--- /dev/null\n+++ b/client/routes/index.tsx\n@@ -0,0 +1,18 @@\n+import { AccountRoute } from './account.tsx'\n+import { ChatRoute } from './chat.tsx'\n+import { HomeRoute } from './home.tsx'\n+import { LoginRoute } from './login.tsx'\n+import { OAuthAuthorizeRoute } from './oauth-authorize.tsx'\n+import { OAuthCallbackRoute } from './oauth-callback.tsx'\n+import { ResetPasswordRoute } from './reset-password.tsx'\n+\n+export const clientRoutes = {\n+\t'/': ,\n+\t'/chat': ,\n+\t'/account': ,\n+\t'/login': ,\n+\t'/signup': ,\n+\t'/reset-password': ,\n+\t'/oauth/authorize': ,\n+\t'/oauth/callback': ,\n+}\ndiff --git a/client/routes/login.tsx b/client/routes/login.tsx\nnew file mode 100644\nindex 0000000..b482221\n--- /dev/null\n+++ b/client/routes/login.tsx\n@@ -0,0 +1,322 @@\n+import { type Handle } from 'remix/component'\n+import { buildAuthLink } from '#client/auth-links.ts'\n+import { navigate } from '#client/client-router.tsx'\n+import { fetchSessionInfo, type SessionStatus } from '#client/session.ts'\n+import {\n+\tcolors,\n+\tradius,\n+\tshadows,\n+\tspacing,\n+\ttransitions,\n+\ttypography,\n+} from '#client/styles/tokens.ts'\n+\n+type AuthMode = 'login' | 'signup'\n+type AuthStatus = 'idle' | 'submitting' | 'success' | 'error'\n+\n+type LoginFormSetup = {\n+\tinitialMode?: AuthMode\n+}\n+\n+function getSearchParams() {\n+\treturn typeof window === 'undefined'\n+\t\t? new URLSearchParams()\n+\t\t: new URLSearchParams(window.location.search)\n+}\n+\n+function normalizeRedirectTo(value: string | null) {\n+\tif (!value) return null\n+\tif (!value.startsWith('/')) return null\n+\tif (value.startsWith('//')) return null\n+\treturn value\n+}\n+\n+function buildAuthPath(mode: AuthMode, redirectTo: string | null) {\n+\tconst path = mode === 'signup' ? '/signup' : '/login'\n+\treturn buildAuthLink(path, redirectTo)\n+}\n+\n+export function LoginRoute(handle: Handle, setup: LoginFormSetup = {}) {\n+\tlet mode: AuthMode = setup.initialMode ?? 'login'\n+\tlet status: AuthStatus = 'idle'\n+\tlet message: string | null = null\n+\tlet sessionStatus: SessionStatus = 'idle'\n+\tlet sessionEmail = ''\n+\tconst redirectTo = normalizeRedirectTo(getSearchParams().get('redirectTo'))\n+\tconst redirectTarget = redirectTo ?? '/account'\n+\n+\tfunction setState(nextStatus: AuthStatus, nextMessage: string | null = null) {\n+\t\tstatus = nextStatus\n+\t\tmessage = nextMessage\n+\t\thandle.update()\n+\t}\n+\n+\tfunction switchMode(nextMode: AuthMode) {\n+\t\tif (mode === nextMode) return\n+\t\tmode = nextMode\n+\t\tstatus = 'idle'\n+\t\tmessage = null\n+\t\tnavigate(buildAuthPath(nextMode, redirectTo))\n+\t\thandle.update()\n+\t}\n+\n+\thandle.queueTask(async (signal) => {\n+\t\tif (sessionStatus !== 'idle') return\n+\t\tsessionStatus = 'loading'\n+\n+\t\tconst session = await fetchSessionInfo(signal)\n+\t\tif (signal.aborted) return\n+\t\tsessionEmail = session?.email ?? ''\n+\n+\t\tsessionStatus = 'ready'\n+\t\tif (sessionEmail && typeof window !== 'undefined') {\n+\t\t\twindow.location.assign(redirectTarget)\n+\t\t\treturn\n+\t\t}\n+\t\thandle.update()\n+\t})\n+\n+\tasync function handleSubmit(event: SubmitEvent) {\n+\t\tevent.preventDefault()\n+\t\tif (!(event.currentTarget instanceof HTMLFormElement)) return\n+\n+\t\tconst formData = new FormData(event.currentTarget)\n+\t\tconst email = String(formData.get('email') ?? '').trim()\n+\t\tconst password = String(formData.get('password') ?? '')\n+\n+\t\tif (!email || !password) {\n+\t\t\tsetState('error', 'Email and password are required.')\n+\t\t\treturn\n+\t\t}\n+\n+\t\tsetState('submitting')\n+\n+\t\ttry {\n+\t\t\tconst response = await fetch('/auth', {\n+\t\t\t\tmethod: 'POST',\n+\t\t\t\theaders: { 'Content-Type': 'application/json' },\n+\t\t\t\tcredentials: 'include',\n+\t\t\t\tbody: JSON.stringify({ email, password, mode }),\n+\t\t\t})\n+\t\t\tconst payload = await response.json().catch(() => null)\n+\n+\t\t\tif (!response.ok) {\n+\t\t\t\tconst errorMessage =\n+\t\t\t\t\ttypeof payload?.error === 'string'\n+\t\t\t\t\t\t? payload.error\n+\t\t\t\t\t\t: 'Unable to authenticate.'\n+\t\t\t\tsetState('error', errorMessage)\n+\t\t\t\treturn\n+\t\t\t}\n+\n+\t\t\tif (typeof window !== 'undefined') {\n+\t\t\t\twindow.location.assign(redirectTarget)\n+\t\t\t}\n+\t\t} catch {\n+\t\t\tsetState('error', 'Network error. Please try again.')\n+\t\t}\n+\t}\n+\n+\treturn () => {\n+\t\tconst isSignup = mode === 'signup'\n+\t\tconst isSubmitting = status === 'submitting'\n+\t\tconst title = isSignup ? 'Create your account' : 'Welcome back'\n+\t\tconst description = isSignup\n+\t\t\t? 'Sign up to start using epic-scheduler.'\n+\t\t\t: 'Log in to continue to epic-scheduler.'\n+\t\tconst submitLabel = isSignup ? 'Create account' : 'Sign in'\n+\t\tconst toggleLabel = isSignup\n+\t\t\t? 'Already have an account?'\n+\t\t\t: 'Need an account?'\n+\t\tconst toggleAction = isSignup ? 'Sign in instead' : 'Sign up instead'\n+\n+\t\treturn (\n+\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t\n+\t\t\t\t\t\t{title}\n+\t\t\t\t\t\n+\t\t\t\t\t

{description}

\n+\t\t\t\t

\n+\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\tEmail\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\tPassword\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\t{isSubmitting ? 'Submitting...' : submitLabel}\n+\t\t\t\t\t\n+\t\t\t\t\t{message ? (\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\t{message}\n+\t\t\t\t\t\t

\n+\t\t\t\t\t) : null}\n+\t\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t {\n+\t\t\t\t\t\t\t\tif (event.defaultPrevented) return\n+\t\t\t\t\t\t\t\tswitchMode(isSignup ? 'login' : 'signup')\n+\t\t\t\t\t\t\t},\n+\t\t\t\t\t\t}}\n+\t\t\t\t\t\tcss={{\n+\t\t\t\t\t\t\tbackground: 'none',\n+\t\t\t\t\t\t\tborder: 'none',\n+\t\t\t\t\t\t\tpadding: 0,\n+\t\t\t\t\t\t\tcolor: colors.primaryText,\n+\t\t\t\t\t\t\tfontSize: typography.fontSize.sm,\n+\t\t\t\t\t\t\tcursor: 'pointer',\n+\t\t\t\t\t\t\ttextAlign: 'left',\n+\t\t\t\t\t\t\ttextDecoration: 'none',\n+\t\t\t\t\t\t\t'&:hover': {\n+\t\t\t\t\t\t\t\ttextDecoration: 'underline',\n+\t\t\t\t\t\t\t},\n+\t\t\t\t\t\t}}\n+\t\t\t\t\t>\n+\t\t\t\t\t\t{toggleLabel} {toggleAction}\n+\t\t\t\t\t\n+\t\t\t\t\t{!isSignup ? (\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\tForgot password?\n+\t\t\t\t\t\t\n+\t\t\t\t\t) : null}\n+\t\t\t\t\t\n+\t\t\t\t\t\tBack home\n+\t\t\t\t\t\n+\t\t\t\t

\n+\t\t\t\n+\t\t)\n+\t}\n+}\ndiff --git a/client/routes/oauth-authorize.tsx b/client/routes/oauth-authorize.tsx\nnew file mode 100644\nindex 0000000..1f3a6b3\n--- /dev/null\n+++ b/client/routes/oauth-authorize.tsx\n@@ -0,0 +1,420 @@\n+import { type Handle } from 'remix/component'\n+import {\n+\tfetchSessionInfo,\n+\ttype SessionInfo,\n+\ttype SessionStatus,\n+} from '#client/session.ts'\n+import {\n+\tcolors,\n+\tradius,\n+\tshadows,\n+\tspacing,\n+\ttypography,\n+} from '#client/styles/tokens.ts'\n+\n+type OAuthAuthorizeInfo = {\n+\tclient: { id: string; name: string }\n+\tscopes: Array\n+}\n+\n+type OAuthAuthorizeStatus = 'idle' | 'loading' | 'ready' | 'error'\n+type OAuthAuthorizeMessage = { type: 'error' | 'info'; text: string }\n+\n+function getSearchParams() {\n+\treturn typeof window === 'undefined'\n+\t\t? new URLSearchParams()\n+\t\t: new URLSearchParams(window.location.search)\n+}\n+\n+export function OAuthAuthorizeRoute(handle: Handle) {\n+\tlet info: OAuthAuthorizeInfo | null = null\n+\tlet status: OAuthAuthorizeStatus = 'idle'\n+\tlet message: OAuthAuthorizeMessage | null = null\n+\tlet submitting = false\n+\tlet lastSearch = ''\n+\tlet session: SessionInfo | null = null\n+\tlet sessionStatus: SessionStatus = 'idle'\n+\n+\tfunction setMessage(next: OAuthAuthorizeMessage | null) {\n+\t\tmessage = next\n+\t\thandle.update()\n+\t}\n+\n+\tfunction readQueryError() {\n+\t\tconst params = getSearchParams()\n+\t\tconst description = params.get('error_description')\n+\t\tif (description) return description\n+\t\tconst error = params.get('error')\n+\t\treturn error ? `Authorization error: ${error}` : null\n+\t}\n+\n+\tasync function loadInfo() {\n+\t\tstatus = 'loading'\n+\n+\t\tconst queryError = readQueryError()\n+\t\tif (queryError) {\n+\t\t\tmessage = { type: 'error', text: queryError }\n+\t\t}\n+\n+\t\ttry {\n+\t\t\tconst query = typeof window === 'undefined' ? '' : window.location.search\n+\t\t\tconst response = await fetch(`/oauth/authorize-info${query}`, {\n+\t\t\t\theaders: { Accept: 'application/json' },\n+\t\t\t\tcredentials: 'include',\n+\t\t\t})\n+\t\t\tconst payload = await response.json().catch(() => null)\n+\t\t\tif (!response.ok || !payload?.ok) {\n+\t\t\t\tconst errorText =\n+\t\t\t\t\ttypeof payload?.error === 'string'\n+\t\t\t\t\t\t? payload.error\n+\t\t\t\t\t\t: 'Unable to load authorization details.'\n+\t\t\t\tinfo = null\n+\t\t\t\tstatus = 'error'\n+\t\t\t\tmessage = { type: 'error', text: errorText }\n+\t\t\t\thandle.update()\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t\tinfo = {\n+\t\t\t\tclient: payload.client,\n+\t\t\t\tscopes: payload.scopes,\n+\t\t\t}\n+\t\t\tstatus = 'ready'\n+\t\t\tif (!queryError) {\n+\t\t\t\tmessage = null\n+\t\t\t}\n+\t\t\thandle.update()\n+\t\t} catch {\n+\t\t\tinfo = null\n+\t\t\tstatus = 'error'\n+\t\t\tmessage = {\n+\t\t\t\ttype: 'error',\n+\t\t\t\ttext: 'Unable to load authorization details.',\n+\t\t\t}\n+\t\t\thandle.update()\n+\t\t}\n+\t}\n+\n+\tasync function loadSession() {\n+\t\tif (sessionStatus !== 'idle') return\n+\t\tsessionStatus = 'loading'\n+\n+\t\tsession = await fetchSessionInfo()\n+\n+\t\tsessionStatus = 'ready'\n+\t\thandle.update()\n+\t}\n+\n+\tasync function submitDecision(\n+\t\tdecision: 'approve' | 'deny',\n+\t\tform?: HTMLFormElement,\n+\t) {\n+\t\tif (submitting) return\n+\t\tsubmitting = true\n+\t\thandle.update()\n+\n+\t\ttry {\n+\t\t\tconst body = new URLSearchParams()\n+\t\t\tbody.set('decision', decision)\n+\t\t\tif (decision === 'approve' && form) {\n+\t\t\t\tconst formData = new FormData(form)\n+\t\t\t\tconst email = String(formData.get('email') ?? '').trim()\n+\t\t\t\tconst password = String(formData.get('password') ?? '')\n+\t\t\t\tif (!email || !password) {\n+\t\t\t\t\tsetMessage({\n+\t\t\t\t\t\ttype: 'error',\n+\t\t\t\t\t\ttext: 'Email and password are required.',\n+\t\t\t\t\t})\n+\t\t\t\t\tsubmitting = false\n+\t\t\t\t\thandle.update()\n+\t\t\t\t\treturn\n+\t\t\t\t}\n+\t\t\t\tbody.set('email', email)\n+\t\t\t\tbody.set('password', password)\n+\t\t\t}\n+\t\t\tconst response = await fetch(window.location.href, {\n+\t\t\t\tmethod: 'POST',\n+\t\t\t\theaders: {\n+\t\t\t\t\tAccept: 'application/json',\n+\t\t\t\t\t'Content-Type': 'application/x-www-form-urlencoded',\n+\t\t\t\t},\n+\t\t\t\tcredentials: 'include',\n+\t\t\t\tbody,\n+\t\t\t})\n+\t\t\tconst payload = await response.json().catch(() => null)\n+\t\t\tif (!response.ok) {\n+\t\t\t\tconst errorText =\n+\t\t\t\t\ttypeof payload?.error === 'string'\n+\t\t\t\t\t\t? payload.error\n+\t\t\t\t\t\t: 'Unable to complete authorization.'\n+\t\t\t\tsetMessage({ type: 'error', text: errorText })\n+\t\t\t\tsubmitting = false\n+\t\t\t\thandle.update()\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t\tif (payload?.redirectTo) {\n+\t\t\t\twindow.location.assign(payload.redirectTo)\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t\tsetMessage({ type: 'error', text: 'Missing redirect response.' })\n+\t\t} catch {\n+\t\t\tsetMessage({\n+\t\t\t\ttype: 'error',\n+\t\t\t\ttext: 'Network error. Please try again.',\n+\t\t\t})\n+\t\t} finally {\n+\t\t\tsubmitting = false\n+\t\t\thandle.update()\n+\t\t}\n+\t}\n+\n+\tasync function handleSubmit(event: SubmitEvent) {\n+\t\tevent.preventDefault()\n+\t\tif (!(event.currentTarget instanceof HTMLFormElement)) return\n+\t\tconst hasSession = Boolean(session?.email)\n+\t\tawait submitDecision(\n+\t\t\t'approve',\n+\t\t\thasSession ? undefined : event.currentTarget,\n+\t\t)\n+\t}\n+\n+\treturn () => {\n+\t\tconst currentSearch =\n+\t\t\ttypeof window === 'undefined' ? '' : window.location.search\n+\t\tif (currentSearch !== lastSearch) {\n+\t\t\tlastSearch = currentSearch\n+\t\t\tvoid loadInfo()\n+\t\t}\n+\t\tif (sessionStatus === 'idle') {\n+\t\t\tvoid loadSession()\n+\t\t}\n+\n+\t\tconst clientLabel = info?.client?.name ?? 'Unknown client'\n+\t\tconst scopes = info?.scopes ?? []\n+\t\tconst scopeLabel =\n+\t\t\tscopes.length > 0 ? scopes.join(', ') : 'No scopes requested.'\n+\t\tconst sessionEmail = session?.email ?? ''\n+\t\tconst isSessionReady = sessionStatus === 'ready'\n+\t\tconst isSessionLoading =\n+\t\t\tsessionStatus === 'loading' || sessionStatus === 'idle'\n+\t\tconst isLoggedIn = isSessionReady && Boolean(sessionEmail)\n+\t\tconst actionsDisabled = status !== 'ready' || submitting || isSessionLoading\n+\t\tconst formReady = status === 'ready' && !isSessionLoading\n+\t\tconst authorizeLabel = submitting\n+\t\t\t? 'Submitting...'\n+\t\t\t: isLoggedIn\n+\t\t\t\t? 'Approve connection'\n+\t\t\t\t: 'Authorize'\n+\n+\t\treturn (\n+\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t\n+\t\t\t\t\t\tAuthorize access\n+\t\t\t\t\t\n+\t\t\t\t\t

\n+\t\t\t\t\t\t{clientLabel} wants to access your epic-scheduler account.\n+\t\t\t\t\t

\n+\t\t\t\t

\n+\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\tRequested scopes\n+\t\t\t\t\t

\n+\t\t\t\t\t

{scopeLabel}

\n+\t\t\t\t\n+\t\t\t\t{isSessionLoading ? (\n+\t\t\t\t\t

Checking your session…

\n+\t\t\t\t) : null}\n+\t\t\t\t{isLoggedIn ? (\n+\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\tSigned in as {sessionEmail}\n+\t\t\t\t\t\t

\n+\t\t\t\t\t\t

\n+\t\t\t\t\t\t\tApprove to continue with this account.\n+\t\t\t\t\t\t

\n+\t\t\t\t\t\n+\t\t\t\t) : null}\n+\t\t\t\t{status === 'loading' ? (\n+\t\t\t\t\t

\n+\t\t\t\t\t\tLoading authorization details…\n+\t\t\t\t\t

\n+\t\t\t\t) : null}\n+\t\t\t\t{message ? (\n+\t\t\t\t\t\n+\t\t\t\t\t\t{message.text}\n+\t\t\t\t\t

\n+\t\t\t\t) : null}\n+\t\t\t\t\n+\t\t\t\t\t{!isLoggedIn && isSessionReady ? (\n+\t\t\t\t\t\t<>\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t\tEmail\n+\t\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t\tPassword\n+\t\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t) : null}\n+\t\t\t\t\t

\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\t{authorizeLabel}\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t submitDecision('deny') }}\n+\t\t\t\t\t\t\tcss={{\n+\t\t\t\t\t\t\t\tpadding: `${spacing.sm} ${spacing.lg}`,\n+\t\t\t\t\t\t\t\tborderRadius: radius.full,\n+\t\t\t\t\t\t\t\tborder: `1px solid ${colors.border}`,\n+\t\t\t\t\t\t\t\tbackgroundColor: 'transparent',\n+\t\t\t\t\t\t\t\tcolor: colors.text,\n+\t\t\t\t\t\t\t\tfontSize: typography.fontSize.base,\n+\t\t\t\t\t\t\t\tfontWeight: typography.fontWeight.medium,\n+\t\t\t\t\t\t\t\tcursor: actionsDisabled ? 'not-allowed' : 'pointer',\n+\t\t\t\t\t\t\t\topacity: actionsDisabled ? 0.7 : 1,\n+\t\t\t\t\t\t\t}}\n+\t\t\t\t\t\t>\n+\t\t\t\t\t\t\tDeny\n+\t\t\t\t\t\t\n+\t\t\t\t\t

\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\tBack home\n+\t\t\t\t\n+\t\t\t\n+\t\t)\n+\t}\n+}\ndiff --git a/client/routes/oauth-callback.tsx b/client/routes/oauth-callback.tsx\nnew file mode 100644\nindex 0000000..11ba295\n--- /dev/null\n+++ b/client/routes/oauth-callback.tsx\n@@ -0,0 +1,73 @@\n+import { colors, radius, spacing, typography } from '#client/styles/tokens.ts'\n+import { type Handle } from 'remix/component'\n+\n+export function OAuthCallbackRoute(_handle: Handle) {\n+\treturn () => {\n+\t\tconst params =\n+\t\t\ttypeof window === 'undefined'\n+\t\t\t\t? new URLSearchParams()\n+\t\t\t\t: new URLSearchParams(window.location.search)\n+\t\tconst error = params.get('error')\n+\t\tconst description = params.get('error_description')\n+\t\tconst code = params.get('code')\n+\t\tconst state = params.get('state')\n+\t\tconst isError = Boolean(error || description)\n+\t\tconst title = isError ? 'Authorization failed' : 'Authorization completed'\n+\t\tconst message = description || error\n+\t\tconst detail = isError ? message : code\n+\n+\t\treturn (\n+\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t\n+\t\t\t\t\t\tOAuth callback\n+\t\t\t\t\t\n+\t\t\t\t\t

{title}.

\n+\t\t\t\t

\n+\t\t\t\t{detail ? (\n+\t\t\t\t\t\n+\t\t\t\t\t\t{detail}\n+\t\t\t\t\t\n+\t\t\t\t) : null}\n+\t\t\t\t{state ? (\n+\t\t\t\t\t

State: {state}

\n+\t\t\t\t) : null}\n+\t\t\t\t\n+\t\t\t\t\tBack home\n+\t\t\t\t\n+\t\t\t\n+\t\t)\n+\t}\n+}\ndiff --git a/client/routes/reset-password.tsx b/client/routes/reset-password.tsx\nnew file mode 100644\nindex 0000000..e39d776\n--- /dev/null\n+++ b/client/routes/reset-password.tsx\n@@ -0,0 +1,269 @@\n+import { type Handle } from 'remix/component'\n+import {\n+\tcolors,\n+\tradius,\n+\tshadows,\n+\tspacing,\n+\ttypography,\n+} from '#client/styles/tokens.ts'\n+\n+type ResetStatus = 'idle' | 'submitting' | 'success' | 'error'\n+\n+function getSearchParams() {\n+\treturn typeof window === 'undefined'\n+\t\t? new URLSearchParams()\n+\t\t: new URLSearchParams(window.location.search)\n+}\n+\n+export function ResetPasswordRoute(handle: Handle) {\n+\tlet status: ResetStatus = 'idle'\n+\tlet message: string | null = null\n+\n+\tfunction setState(\n+\t\tnextStatus: ResetStatus,\n+\t\tnextMessage: string | null = null,\n+\t) {\n+\t\tstatus = nextStatus\n+\t\tmessage = nextMessage\n+\t\thandle.update()\n+\t}\n+\n+\tasync function submitResetRequest(event: SubmitEvent) {\n+\t\tevent.preventDefault()\n+\t\tif (!(event.currentTarget instanceof HTMLFormElement)) return\n+\n+\t\tconst formData = new FormData(event.currentTarget)\n+\t\tconst email = String(formData.get('email') ?? '').trim()\n+\t\tif (!email) {\n+\t\t\tsetState('error', 'Email is required.')\n+\t\t\treturn\n+\t\t}\n+\n+\t\tsetState('submitting')\n+\t\ttry {\n+\t\t\tconst response = await fetch('/password-reset', {\n+\t\t\t\tmethod: 'POST',\n+\t\t\t\theaders: { 'Content-Type': 'application/json' },\n+\t\t\t\tbody: JSON.stringify({ email }),\n+\t\t\t})\n+\t\t\tconst payload = await response.json().catch(() => null)\n+\t\t\tif (!response.ok) {\n+\t\t\t\tconst errorMessage =\n+\t\t\t\t\ttypeof payload?.error === 'string'\n+\t\t\t\t\t\t? payload.error\n+\t\t\t\t\t\t: 'Unable to request a reset.'\n+\t\t\t\tsetState('error', errorMessage)\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t\tsetState(\n+\t\t\t\t'success',\n+\t\t\t\tpayload?.message ?? 'Check your inbox for a reset link.',\n+\t\t\t)\n+\t\t} catch {\n+\t\t\tsetState('error', 'Network error. Please try again.')\n+\t\t}\n+\t}\n+\n+\tasync function submitResetConfirm(event: SubmitEvent, token: string) {\n+\t\tevent.preventDefault()\n+\t\tif (!(event.currentTarget instanceof HTMLFormElement)) return\n+\n+\t\tconst formData = new FormData(event.currentTarget)\n+\t\tconst password = String(formData.get('password') ?? '')\n+\t\tif (!password) {\n+\t\t\tsetState('error', 'Password is required.')\n+\t\t\treturn\n+\t\t}\n+\n+\t\tsetState('submitting')\n+\t\ttry {\n+\t\t\tconst response = await fetch('/password-reset/confirm', {\n+\t\t\t\tmethod: 'POST',\n+\t\t\t\theaders: { 'Content-Type': 'application/json' },\n+\t\t\t\tbody: JSON.stringify({ token, password }),\n+\t\t\t})\n+\t\t\tconst payload = await response.json().catch(() => null)\n+\t\t\tif (!response.ok) {\n+\t\t\t\tconst errorMessage =\n+\t\t\t\t\ttypeof payload?.error === 'string'\n+\t\t\t\t\t\t? payload.error\n+\t\t\t\t\t\t: 'Unable to reset password.'\n+\t\t\t\tsetState('error', errorMessage)\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t\tsetState('success', 'Password updated. You can sign in now.')\n+\t\t} catch {\n+\t\t\tsetState('error', 'Network error. Please try again.')\n+\t\t}\n+\t}\n+\n+\treturn () => {\n+\t\tconst searchParams = getSearchParams()\n+\t\tconst token = String(searchParams.get('token') ?? '').trim()\n+\t\tconst mode = token ? 'confirm' : 'request'\n+\t\tconst isSubmitting = status === 'submitting'\n+\t\tconst title =\n+\t\t\tmode === 'confirm' ? 'Choose a new password' : 'Reset your password'\n+\t\tconst description =\n+\t\t\tmode === 'confirm'\n+\t\t\t\t? 'Enter a new password for your account.'\n+\t\t\t\t: 'We will send a reset link to your email.'\n+\n+\t\treturn (\n+\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t\n+\t\t\t\t\t\t{title}\n+\t\t\t\t\t\n+\t\t\t\t\t

{description}

\n+\t\t\t\t

\n+\t\t\t\t\n+\t\t\t\t\t\t\tmode === 'confirm'\n+\t\t\t\t\t\t\t\t? submitResetConfirm(event, token)\n+\t\t\t\t\t\t\t\t: submitResetRequest(event),\n+\t\t\t\t\t}}\n+\t\t\t\t>\n+\t\t\t\t\t{mode === 'confirm' ? (\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\tNew password\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t) : (\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\tEmail\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t)}\n+\t\t\t\t\t\n+\t\t\t\t\t\t{isSubmitting\n+\t\t\t\t\t\t\t? 'Submitting...'\n+\t\t\t\t\t\t\t: mode === 'confirm'\n+\t\t\t\t\t\t\t\t? 'Update password'\n+\t\t\t\t\t\t\t\t: 'Send reset link'}\n+\t\t\t\t\t\n+\t\t\t\t\t{message ? (\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\t{message}\n+\t\t\t\t\t\t

\n+\t\t\t\t\t) : null}\n+\t\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t\n+\t\t\t\t\t\tBack to sign in\n+\t\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\tBack home\n+\t\t\t\t\t\n+\t\t\t\t

\n+\t\t\t\n+\t\t)\n+\t}\n+}\ndiff --git a/client/session.ts b/client/session.ts\nnew file mode 100644\nindex 0000000..db7666c\n--- /dev/null\n+++ b/client/session.ts\n@@ -0,0 +1,26 @@\n+export type SessionInfo = {\n+\temail: string\n+}\n+\n+export type SessionStatus = 'idle' | 'loading' | 'ready'\n+\n+export async function fetchSessionInfo(\n+\tsignal?: AbortSignal,\n+): Promise {\n+\ttry {\n+\t\tconst response = await fetch('/session', {\n+\t\t\theaders: { Accept: 'application/json' },\n+\t\t\tcredentials: 'include',\n+\t\t\tsignal,\n+\t\t})\n+\t\tif (signal?.aborted) return null\n+\t\tconst payload = await response.json().catch(() => null)\n+\t\tconst email =\n+\t\t\tresponse.ok && payload?.ok && typeof payload?.session?.email === 'string'\n+\t\t\t\t? payload.session.email.trim()\n+\t\t\t\t: ''\n+\t\treturn email ? { email } : null\n+\t} catch {\n+\t\treturn null\n+\t}\n+}\ndiff --git a/client/styles/tokens.ts b/client/styles/tokens.ts\nnew file mode 100644\nindex 0000000..b1ac956\n--- /dev/null\n+++ b/client/styles/tokens.ts\n@@ -0,0 +1,92 @@\n+// Color tokens\n+export const colors = {\n+\tprimary: 'var(--color-primary)',\n+\tprimaryHover: 'var(--color-primary-hover)',\n+\tprimaryActive: 'var(--color-primary-active)',\n+\tprimaryText: 'var(--color-primary-text)',\n+\tprimarySoftest: 'color-mix(in srgb, var(--color-primary) 6%, transparent)',\n+\tprimarySoftSubtle: 'color-mix(in srgb, var(--color-primary) 8%, transparent)',\n+\tprimarySoft: 'color-mix(in srgb, var(--color-primary) 12%, transparent)',\n+\tprimarySoftStrong:\n+\t\t'color-mix(in srgb, var(--color-primary) 15%, transparent)',\n+\tprimarySoftHover: 'color-mix(in srgb, var(--color-primary) 18%, transparent)',\n+\tonPrimary: 'var(--color-on-primary)',\n+\tbackground: 'var(--color-background)',\n+\tsurface: 'var(--color-surface)',\n+\ttext: 'var(--color-text)',\n+\ttextMuted: 'var(--color-text-muted)',\n+\tborder: 'var(--color-border)',\n+\terror: '#dc2626',\n+\terrorHover: '#b91c1c',\n+} as const\n+\n+// Typography tokens\n+export const typography = {\n+\tfontFamily: 'var(--font-family)',\n+\tfontSize: {\n+\t\txs: 'var(--font-size-xs)',\n+\t\tsm: 'var(--font-size-sm)',\n+\t\tbase: 'var(--font-size-base)',\n+\t\tlg: 'var(--font-size-lg)',\n+\t\txl: 'var(--font-size-xl)',\n+\t\t'2xl': 'var(--font-size-2xl)',\n+\t} as const,\n+\tfontWeight: {\n+\t\tnormal: 'var(--font-weight-normal)',\n+\t\tmedium: 'var(--font-weight-medium)',\n+\t\tsemibold: 'var(--font-weight-semibold)',\n+\t\tbold: 'var(--font-weight-bold)',\n+\t} as const,\n+} as const\n+\n+// Spacing tokens\n+export const spacing = {\n+\txs: 'var(--spacing-xs)',\n+\tsm: 'var(--spacing-sm)',\n+\tmd: 'var(--spacing-md)',\n+\tlg: 'var(--spacing-lg)',\n+\txl: 'var(--spacing-xl)',\n+\t'2xl': 'var(--spacing-2xl)',\n+} as const\n+\n+// Border radius tokens\n+export const radius = {\n+\tsm: 'var(--radius-sm)',\n+\tmd: 'var(--radius-md)',\n+\tlg: 'var(--radius-lg)',\n+\txl: 'var(--radius-xl)',\n+\tfull: 'var(--radius-full)',\n+} as const\n+\n+// Shadow tokens\n+export const shadows = {\n+\tsm: 'var(--shadow-sm)',\n+\tmd: 'var(--shadow-md)',\n+\tlg: 'var(--shadow-lg)',\n+} as const\n+\n+// Transition tokens\n+export const transitions = {\n+\tfast: 'var(--transition-fast)',\n+\tnormal: 'var(--transition-normal)',\n+} as const\n+\n+// Responsive tokens - these change based on screen size\n+export const responsive = {\n+\tspacingPage: 'var(--spacing-page)',\n+\tspacingSection: 'var(--spacing-section)',\n+\tspacingHeader: 'var(--spacing-header)',\n+} as const\n+\n+// Breakpoints for CSS-in-JS media queries\n+export const breakpoints = {\n+\tmobile: '640px',\n+\ttablet: '1024px',\n+} as const\n+\n+// Helper to create media query string (mq = media query)\n+export const mq = {\n+\tmobile: `@media (max-width: ${breakpoints.mobile})`,\n+\ttablet: `@media (max-width: ${breakpoints.tablet})`,\n+\tdesktop: `@media (min-width: ${breakpoints.tablet})`,\n+} as const\ndiff --git a/docs/agents/cloudflare-agents-sdk.md b/docs/agents/cloudflare-agents-sdk.md\nnew file mode 100644\nindex 0000000..c9969c9\n--- /dev/null\n+++ b/docs/agents/cloudflare-agents-sdk.md\n@@ -0,0 +1,226 @@\n+# Cloudflare Agents SDK (`agents`)\n+\n+This repo has the Cloudflare Agents SDK installed as the `agents` npm package.\n+It is designed for building long-lived, stateful \"agent instances\" on top of\n+Durable Objects (with built-in state, SQLite, WebSockets, queues, scheduling,\n+Workflows integration, MCP, and more).\n+\n+Primary docs:\n+\n+- https://developers.cloudflare.com/agents/\n+\n+Installed in this repo as `agents` in `package.json` (currently `^0.7.4`).\n+\n+## Quick pointers for this repo\n+\n+- MCP server uses `McpAgent` in `mcp/index.ts` and is served via\n+ `MCP.serve(...)` in `worker/index.ts`.\n+- This project is not organized around the React hook APIs from the SDK; for\n+ non-React clients, use `AgentClient` from `agents/client`.\n+\n+## Required configuration (Durable Objects + SQLite)\n+\n+Agents require Durable Objects and (for persisted state) SQLite-backed storage.\n+Cloudflare's setup checklist lives here:\n+\n+- https://developers.cloudflare.com/agents/api-reference/configuration/\n+\n+## Docs map (what Cloudflare documents)\n+\n+Use these sections when you want the official \"how/why\" and end-to-end guides:\n+\n+- Getting started: https://developers.cloudflare.com/agents/getting-started/\n+- Concepts: https://developers.cloudflare.com/agents/concepts/\n+- Guides: https://developers.cloudflare.com/agents/guides/\n+- API reference: https://developers.cloudflare.com/agents/api-reference/\n+- MCP (Model Context Protocol):\n+ https://developers.cloudflare.com/agents/model-context-protocol/\n+- Platform notes (limits, prompting):\n+ https://developers.cloudflare.com/agents/platform/\n+- x402 payments: https://developers.cloudflare.com/agents/x402/\n+\n+## SDK module map (what you can import)\n+\n+These are the import paths exported by the installed `agents` package.\n+\n+### Core server-side API\n+\n+- `agents`\n+ - `Agent` base class (state, sqlite via `this.sql`, WebSockets via\n+ `onConnect`/`onMessage`, queue, scheduling, workflows, MCP client manager).\n+ Docs: https://developers.cloudflare.com/agents/api-reference/agents-api/\n+ - Routing helpers:\n+ - `routeAgentRequest(request, env, options?)` Docs:\n+ https://developers.cloudflare.com/agents/api-reference/routing/\n+ - `getAgentByName(namespace, name, options?)` Docs:\n+ https://developers.cloudflare.com/agents/api-reference/routing/#server-side-instance-selection\n+ - RPC/Callable helpers:\n+ - `@callable()` decorator Docs:\n+ https://developers.cloudflare.com/agents/api-reference/callable-methods/\n+ - `StreamingResponse` for streaming callables Docs:\n+ https://developers.cloudflare.com/agents/api-reference/callable-methods/#streaming-responses\n+ - `getCurrentAgent()` (access `{ agent, connection, request, email }`) Docs:\n+ https://developers.cloudflare.com/agents/api-reference/get-current-agent/\n+ - Email routing:\n+ - `routeAgentEmail(email, env, { resolver, ... })` Docs:\n+ https://developers.cloudflare.com/agents/api-reference/email/\n+\n+### Client SDK (non-React friendly)\n+\n+- `agents/client`\n+ - `AgentClient` (WebSocket client with state sync + RPC + streaming)\n+ - `agentFetch` (HTTP requests without WebSockets) Docs:\n+ https://developers.cloudflare.com/agents/api-reference/client-sdk/\n+\n+### MCP (Model Context Protocol)\n+\n+Use these if you're building MCP servers or connecting to external MCP servers.\n+\n+- `agents/mcp`\n+ - `McpAgent` for stateful MCP servers on Durable Objects Docs:\n+ https://developers.cloudflare.com/agents/api-reference/mcp-agent-api/\n+ - `createMcpHandler` and `WorkerTransport` for serving MCP without `McpAgent`\n+ (stateless or custom routing) Docs:\n+ https://developers.cloudflare.com/agents/api-reference/mcp-handler-api/\n+- `agents/mcp/client`\n+ - `MCPClientManager` (connect/discover/list tools/prompts/resources across\n+ multiple MCP servers; persists connections in storage) Docs:\n+ https://developers.cloudflare.com/agents/api-reference/mcp-client-api/\n+- `agents/mcp/do-oauth-client-provider`\n+ - Durable Object-backed OAuth provider used for MCP client OAuth flows, and a\n+ customization point if you need a different OAuth strategy. Docs:\n+ https://developers.cloudflare.com/agents/guides/oauth-mcp-client/\n+\n+### Workflows integration\n+\n+- `agents/workflows`\n+ - `AgentWorkflow` base class for Cloudflare Workflows that need typed access\n+ back to their originating agent instance. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/run-workflows/\n+\n+### Scheduling prompt/schema helpers\n+\n+- `agents/schedule`\n+ - `getSchedulePrompt` and `scheduleSchema` for parsing \"natural language\n+ scheduling\" input via an LLM (commonly with the AI SDK). Docs (agent\n+ scheduling itself):\n+ https://developers.cloudflare.com/agents/api-reference/schedule-tasks/\n+\n+### Email helpers\n+\n+- `agents/email`\n+ - Resolvers for inbound routing and secure reply routing (signature-based)\n+ - `isAutoReplyEmail` and signing helpers Docs:\n+ https://developers.cloudflare.com/agents/api-reference/email/\n+\n+### Observability\n+\n+- `agents/observability`\n+ - `Observability` interface + `genericObservability` Docs:\n+ https://developers.cloudflare.com/agents/api-reference/observability/\n+\n+### Payments (x402)\n+\n+- `agents/x402`\n+ - `withX402` (paid MCP tools) and `withX402Client` (call paid tools) Docs:\n+ https://developers.cloudflare.com/agents/x402/\n+\n+### Optional UI/framework integrations\n+\n+These exist, but you only need them if your UI stack wants them.\n+\n+- `agents/react` (React state sync)\n+- `agents/ai-react` (React chat UI helpers)\n+- `agents/ai-chat-agent` (re-export of `@cloudflare/ai-chat`, including\n+ `AIChatAgent`) Docs for chat agents:\n+ https://developers.cloudflare.com/agents/getting-started/build-a-chat-agent/\n+\n+## Capability outline (what the SDK enables)\n+\n+Use this section when you want to answer \"can Agents do X?\" quickly.\n+\n+### Durable, per-instance state + SQLite\n+\n+- Persistent `this.state` with `initialState` and `this.setState(...)` that\n+ broadcasts to connected clients. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/store-and-sync-state/\n+- Embedded SQLite via `this.sql\\`...\\`` for relational data per agent instance.\n+ Docs:\n+ https://developers.cloudflare.com/agents/api-reference/agents-api/#sql-api\n+\n+### Real-time communication (WebSockets) and streaming (HTTP/SSE)\n+\n+- WebSocket lifecycle hooks (`onConnect`, `onMessage`, `onClose`, `onError`) and\n+ `this.broadcast(...)`. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/websockets/\n+- HTTP request handling via `onRequest(request)`; SSE streaming patterns. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/http-sse/\n+\n+### RPC method calls from clients\n+\n+- Mark methods with `@callable()` and call them from clients via:\n+ - `client.stub.someMethod(...)`\n+ - `client.call(\"methodName\", [args])` Docs:\n+ https://developers.cloudflare.com/agents/api-reference/callable-methods/\n+- Streaming callables for token-by-token output using `StreamingResponse`. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/callable-methods/#streaming-responses\n+\n+### Access control: readonly connections\n+\n+- Mark some connections as read-only to prevent state writes while still\n+ receiving state + calling read-only RPC methods. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/readonly-connections/\n+\n+### Background work: queues + schedules\n+\n+- Queue tasks with `this.queue(...)` (async work stored in SQLite and processed\n+ FIFO). Docs:\n+ https://developers.cloudflare.com/agents/api-reference/queue-tasks/\n+- Schedule tasks with:\n+ - `this.schedule(delaySeconds | Date | cron, callbackName, payload?)`\n+ - `this.scheduleEvery(intervalSeconds, callbackName, payload?)` Docs:\n+ https://developers.cloudflare.com/agents/api-reference/schedule-tasks/\n+\n+### Durable, multi-step execution: Workflows\n+\n+- Run Cloudflare Workflows from an Agent (`this.runWorkflow(...)`) and handle\n+ progress/completion callbacks. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/run-workflows/\n+\n+### LLM integration (bring your model/provider)\n+\n+The SDK does not force a single model provider. Common options in the docs:\n+\n+- Workers AI bindings and streaming\n+- AI Gateway routing\n+- Vercel AI SDK (`ai`, `@ai-sdk/*`) for a unified provider interface\n+\n+Docs: https://developers.cloudflare.com/agents/api-reference/using-ai-models/\n+\n+### RAG, Vectorize, and web browsing\n+\n+- Vector search with Vectorize + Workers AI embeddings to implement retrieval.\n+ Docs: https://developers.cloudflare.com/agents/api-reference/rag/\n+- Browser Rendering (or another headless browser service) for agent-driven web\n+ browsing. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/browse-the-web/\n+\n+### MCP (servers and clients)\n+\n+- Build MCP servers on Durable Objects using `McpAgent`. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/mcp-agent-api/\n+- Serve MCP via `createMcpHandler` + `WorkerTransport`. Docs:\n+ https://developers.cloudflare.com/agents/api-reference/mcp-handler-api/\n+- Connect to remote MCP servers as a client (OAuth, tools/resources/prompts).\n+ Docs: https://developers.cloudflare.com/agents/api-reference/mcp-client-api/\n+\n+### Email routing\n+\n+- Route inbound emails to specific agent instances; reply with\n+ `this.replyToEmail(...)`; secure reply routing via signature-based headers.\n+ Docs: https://developers.cloudflare.com/agents/api-reference/email/\n+\n+### Platform limits + operational notes\n+\n+- Limits (CPU time refresh behavior, state size, etc.) Docs:\n+ https://developers.cloudflare.com/agents/platform/limits/\ndiff --git a/docs/agents/code-style.md b/docs/agents/code-style.md\nnew file mode 100644\nindex 0000000..d3bbf14\n--- /dev/null\n+++ b/docs/agents/code-style.md\n@@ -0,0 +1,49 @@\n+# Code style\n+\n+Apply these rules to all new or edited code. When in doubt, match the existing\n+file style first, then run the formatter.\n+\n+## Function forms\n+\n+- Prefer function declarations for named, reusable functions.\n+- Use arrow functions for callbacks and inline handlers.\n+- Use object method shorthand for multi-line object methods.\n+\n+## Array types\n+\n+- Prefer `Array` and `ReadonlyArray` over `T[]`.\n+- This avoids precedence pitfalls in union types and keeps type reads clearer.\n+\n+## Exports\n+\n+- Prefer named exports.\n+- Use default exports only when a framework contract requires them.\n+\n+## Imports\n+\n+- Prefer repo-root `#...` imports (configured via `package.json` `\"imports\"`)\n+ over parent-relative `../...` paths.\n+- Keep `./...` imports for same-folder files.\n+- Generated files (for example `types/worker-configuration.d.ts`) are allowed to\n+ be exceptions; do not edit them by hand.\n+\n+## Type conventions\n+\n+- Prefer `type` aliases for object shapes and unions.\n+- Use `interface` only when you need declaration merging or public extension\n+ points.\n+- Prefer inline type definitions in parameters over named types unless sharing\n+ is necessary. When a one-off named type is useful, consider `Parameters<>` (or\n+ similar utility types) instead.\n+- Use `satisfies` when exporting objects that must match framework contracts.\n+\n+## Absence values\n+\n+- Use `null` for explicit \"no value\" in local state or API responses.\n+- Use `undefined` for optional or omitted fields, and avoid mixing within one\n+ API.\n+\n+## References\n+\n+- https://kentcdodds.com/blog/function-forms\n+- https://tkdodo.eu/blog/array-types-in-type-script\ndiff --git a/docs/agents/end-to-end-testing.md b/docs/agents/end-to-end-testing.md\nnew file mode 100644\nindex 0000000..80a8508\n--- /dev/null\n+++ b/docs/agents/end-to-end-testing.md\n@@ -0,0 +1,82 @@\n+# End-to-end testing principles\n+\n+These notes summarize how we approach Playwright tests in this codebase, based\n+on the Epic Web E2E workshop and our existing setup.\n+\n+## Goals\n+\n+- Validate user-visible journeys end-to-end through the worker and client.\n+- Prefer a few high-signal tests over many brittle ones.\n+- Keep tests readable and close to how a user describes behavior.\n+\n+## What to test\n+\n+- Primary routes and flows (navigation, auth, critical forms).\n+- Integration across the worker, client router, and API endpoints.\n+- Regressions that are expensive to catch in unit tests.\n+\n+Avoid testing implementation details, styling, or pure utility functions.\n+\n+## Structure and style\n+\n+- Keep tests flat: top-level `test(...)` with no `describe` nesting.\n+- Inline setup per test; avoid shared `beforeEach` unless required.\n+- Prefer one clear assertion per step and a small number of final assertions.\n+- Use Playwright’s `expect` and locator APIs (role/label/placeholder).\n+\n+## Locators\n+\n+Prefer stable, user-facing selectors:\n+\n+- `getByRole` for buttons, links, headings, and inputs.\n+- `getByLabel` for form fields.\n+- `getByText` only for brief, stable copy.\n+\n+Avoid `page.locator('css')` unless no accessible alternative exists.\n+\n+## Server and routing\n+\n+- The test server is started via Playwright `webServer` using Wrangler.\n+- The base URL defaults to `http://localhost:8788` for Playwright to avoid\n+ colliding with the dev server. Override with `PLAYWRIGHT_BASE_URL` or\n+ `PLAYWRIGHT_PORT`.\n+- Playwright sets `CLOUDFLARE_ENV=test`; Wrangler still loads `.env` values for\n+ local secrets.\n+- Ensure the `env.test` section in `wrangler.jsonc` includes assets, KV, and\n+ durable objects since these are not inherited from top-level Wrangler config.\n+- Ensure `.env` includes a `COOKIE_SECRET` var for local sessions.\n+- Client routes live in `client/app.tsx` and `client/routes/index.tsx`.\n+- API endpoints are defined in `server/routes.ts` and mapped in\n+ `server/router.ts`.\n+\n+When adding endpoints that accept bodies, ensure POST/PUT requests are not\n+handled by the static asset fetcher in `worker/index.ts`.\n+\n+## Test data\n+\n+- Use real input values and a happy-path payload.\n+- Keep credentials and emails obviously fake and local-only.\n+- Avoid hidden fixtures or global state in the Playwright tests.\n+\n+## Assertions\n+\n+- Assert user-facing results (success message, redirect, visible element).\n+- For async actions, wait on the UI result, not arbitrary timeouts.\n+- For client-router regressions, you may set a `window` marker before clicking a\n+ link and assert it survives navigation to prove there was no full document\n+ reload.\n+- Use the same marker pattern for form submissions (for example logout) when\n+ verifying router-handled form navigation.\n+\n+## Running tests\n+\n+Common commands:\n+\n+- `npm run test:e2e`\n+- `npm run test:e2e e2e/login.spec.ts`\n+\n+If `.env` is missing, `test:e2e` copies `.env.example` to `.env` before running\n+Playwright.\n+\n+These tests are executed by the `validate` gate, which also runs `lint:fix` and\n+the MCP E2E suite.\ndiff --git a/docs/agents/harness-engineering.md b/docs/agents/harness-engineering.md\nnew file mode 100644\nindex 0000000..037c5b0\n--- /dev/null\n+++ b/docs/agents/harness-engineering.md\n@@ -0,0 +1,77 @@\n+# Harness engineering\n+\n+This repository already uses an agent-first workflow. This guide explains how to\n+turn each change into a durable improvement, not a one-off fix.\n+\n+## Core mindset\n+\n+- Humans steer outcomes; agents execute implementation details.\n+- Optimize for `human attention` as the scarce resource.\n+- Treat repository-local knowledge as the source of truth.\n+- Prefer small, enforceable rules over long, fragile instructions.\n+\n+## Keep `AGENTS.md` small and navigable\n+\n+- Use `AGENTS.md` as a map, not an encyclopedia.\n+- Put detailed guidance in focused docs under `docs/agents`.\n+- When behavior changes, update the closest source-of-truth doc in the same PR.\n+- If knowledge is only in chat threads or memory, assume it will be lost.\n+\n+## The continuous improvement loop\n+\n+Run this loop for features, fixes, and refactors:\n+\n+1. Define intent and acceptance criteria in the task/PR.\n+2. Implement the change.\n+3. Evaluate with fast checks and repo gates.\n+4. Capture what was learned in docs, tests, or tooling.\n+5. Promote repeated guidance into mechanical enforcement.\n+\n+For this repo, the default evaluation step is:\n+\n+- `npm run validate`\n+- `npm run format`\n+\n+## Promote learning into enforcement\n+\n+When a mistake repeats, move \"advice\" into a stronger guardrail:\n+\n+1. **Docs**: clarify the expected pattern in `docs/agents`.\n+2. **Tests**: add coverage for the failure mode.\n+3. **Lint/structure**: add a static rule when possible.\n+4. **Scripts/automation**: encode the workflow in commands.\n+\n+Rule of thumb: if reviewers repeat the same comment twice, encode it.\n+\n+## Make quality legible to agents and humans\n+\n+Prefer signals that are easy to run and interpret locally:\n+\n+- Deterministic scripts (`validate`, targeted tests, type checks).\n+- Explicit failure messages that include remediation hints.\n+- Small PRs with clear intent and verification notes.\n+- Documentation links near related code and workflows.\n+\n+## Working agreements for contributors\n+\n+- Keep changes scoped; split large work into smaller steps.\n+- Always include the verification commands you ran in the PR description.\n+- Update docs in the same change when workflows or constraints shift.\n+- Avoid introducing new patterns without documenting when to use them.\n+- Favor boring, composable abstractions over opaque magic.\n+\n+## Weekly maintenance cadence\n+\n+Use a lightweight \"doc and quality gardening\" pass to prevent drift:\n+\n+- Remove stale guidance from `docs/agents`.\n+- Tighten unclear instructions and add cross-links.\n+- Identify recurring defects and propose one new mechanical guardrail.\n+- Record follow-up tech debt as explicit, trackable work.\n+\n+Continuous small cleanups are cheaper than periodic large rewrites.\n+\n+## References\n+\n+- OpenAI Engineering, \"Harness engineering: leveraging Codex in an agent-first\n+ world\" https://openai.com/index/harness-engineering/\ndiff --git a/docs/agents/mcp-apps-starter-guide.md b/docs/agents/mcp-apps-starter-guide.md\nnew file mode 100644\nindex 0000000..4393a51\n--- /dev/null\n+++ b/docs/agents/mcp-apps-starter-guide.md\n@@ -0,0 +1,177 @@\n+# MCP Apps starter guide\n+\n+This guide explains how to build MCP Apps in this starter project in a reusable\n+way. It is intentionally **not** tied to the calculator example.\n+\n+Use this when replacing starter tools/resources with your own product-specific\n+UI and workflows.\n+\n+## Goals\n+\n+- Build MCP tools that can open interactive UI widgets in MCP App-compatible\n+ hosts.\n+- Keep tool/resource metadata aligned with the MCP Apps specification.\n+- Keep implementation modular so starter examples are easy to replace.\n+- Ensure apps support host messaging, theming, and predictable validation.\n+\n+## Architecture in this repo\n+\n+Use this file map as the default structure:\n+\n+- `mcp/index.ts`\n+ - MCP server + `init()` registration entrypoint.\n+- `mcp/register-tools.ts`\n+ - Aggregates tool registration.\n+- `mcp/register-resources.ts`\n+ - Aggregates resource registration.\n+- `mcp/tools/*.ts`\n+ - One tool per file.\n+- `mcp/resources/*.ts`\n+ - One resource registration module per file.\n+- `mcp/apps/*.ts`\n+ - UI entry-point modules that return HTML/JS payloads for `ui://` resources.\n+\n+## Recommended implementation workflow\n+\n+### 1) Create an app entry point\n+\n+Create a dedicated module under `mcp/apps/`:\n+\n+- Export a stable `ui://` URI.\n+- Export a render function that returns the app HTML.\n+- Keep widget logic local to this module.\n+\n+Keep file names lower-kebab-case and prefer one entry point per app.\n+\n+### 2) Register the app resource\n+\n+In `mcp/resources/.ts`:\n+\n+- Use `registerAppResource(...)` from `@modelcontextprotocol/ext-apps/server`.\n+- Return `text/html;profile=mcp-app`.\n+- Use `createUIResource(...)` from `@mcp-ui/server` when you need adapter\n+ injection.\n+- Enable the `mcpApps` adapter when UI events should be translated into MCP Apps\n+ host JSON-RPC.\n+- Set `_meta.ui.domain` on resource contents to the widget origin (required for\n+ app submission).\n+- Add `_meta[\"openai/widgetDomain\"]` as a compatibility alias for ChatGPT.\n+\n+### 3) Register the app-opening tool\n+\n+In `mcp/tools/.ts`:\n+\n+- Use `registerAppTool(...)` from `@modelcontextprotocol/ext-apps/server`.\n+- Set `_meta.ui.resourceUri` to the **same** `ui://` URI as the resource.\n+- Include annotations (`readOnlyHint`, `idempotentHint`, etc.).\n+- Provide `outputSchema` for machine-usable outputs where relevant.\n+\n+### 4) Wire registration in server init\n+\n+- Add resource registration to `mcp/register-resources.ts`.\n+- Add tool registration to `mcp/register-tools.ts`.\n+- Ensure `mcp/index.ts` calls both in `init()`.\n+\n+### 5) Add or update MCP E2E coverage\n+\n+At minimum, cover:\n+\n+- `listTools` includes your new tool.\n+- `listResources` includes your `ui://` resource.\n+- `readResource` returns expected MIME type + payload markers.\n+- `readResource` metadata includes widget domain + CSP expectations.\n+- `callTool` returns expected content/structuredContent.\n+\n+## Host messaging patterns\n+\n+When a UI should communicate back to the host agent:\n+\n+- Prefer the standard MCP Apps bridge (`App` from\n+ `@modelcontextprotocol/ext-apps`) and call host methods such as:\n+ - `ui/message` (send a user-style message)\n+ - `tools/call` (call server tools)\n+ - `ui/open-link` (request external link open)\n+- Keep messages concise and deterministic where possible.\n+- For inline `rawHtml` widgets in this repo, prefer reusing the shared runtime\n+ in `client/mcp-apps/widget-host-bridge.ts` (bundled into\n+ `public/mcp-apps/calculator-widget.js`) instead of duplicating bridge code.\n+\n+You can also send simplified MCP-UI actions via `window.parent.postMessage(...)`\n+(`type: 'tool' | 'prompt' | 'notify' | 'link'`) when using the `mcpApps`\n+adapter. Those shorthand actions depend on adapter translation and may not be\n+available in every host runtime.\n+\n+## Theme and design-system guidance\n+\n+### Theme support\n+\n+For robust light/dark behavior:\n+\n+- Support browser fallback with `prefers-color-scheme`.\n+- Also support host-provided theme:\n+ - Request render data (`ui-request-render-data`).\n+ - Handle host updates (`ui-lifecycle-iframe-render-data`).\n+ - Apply `renderData.theme` (`light`/`dark`) when present.\n+\n+### Design-system alignment\n+\n+Prefer app token names so widgets stay visually consistent with the host app:\n+\n+- `--color-*`\n+- `--spacing-*`\n+- `--radius-*`\n+- `--shadow-*`\n+- shared typography tokens (`--font-*`)\n+\n+When app and widget are served from the same origin, prefer referencing the\n+canonical stylesheet directly (for example `/styles.css`) instead of copying\n+token values into widget CSS. If you do this in an MCP App resource, set\n+`_meta.ui.csp.resourceDomains` to allow that stylesheet origin.\n+\n+## Security and metadata checklist\n+\n+- Keep resources sandbox-friendly (no unnecessary external dependencies).\n+- If loading external assets/APIs, define explicit `_meta.ui.csp` domains.\n+- When serving widget JS/CSS from your app origin (for example `/mcp-apps/*` or\n+ `/styles.css`), add `Access-Control-Allow-Origin` so sandboxed iframes with\n+ opaque origins can fetch assets in ChatGPT/MCP Jam.\n+- If you use Workers static assets, configure `assets.run_worker_first` for\n+ widget asset paths so those requests pass through your CORS logic.\n+- Always set `_meta.ui.domain` and `_meta[\"openai/widgetDomain\"]` to your app's\n+ dedicated widget origin.\n+- Request only required permissions in `_meta.ui.permissions`.\n+- Avoid embedding secrets or private tokens in UI payloads.\n+\n+## Quality checklist before merge\n+\n+- `npm run format`\n+- `npm run test:mcp`\n+- `npm run validate`\n+- Confirm docs in `docs/agents` reflect any new workflow or constraints.\n+\n+## Replacing starter examples safely\n+\n+When removing starter examples (for example calculator + math tool):\n+\n+1. Delete example modules under `mcp/apps`, `mcp/tools`, and `mcp/resources`.\n+2. Replace entries in registration modules.\n+3. Update MCP E2E tests to your new tool/resource names and behavior.\n+4. Update this guide (or adjacent docs) if your project-specific conventions\n+ differ from defaults.\n+\n+## References\n+\n+Core MCP Apps docs/spec:\n+\n+- MCP UI introduction: https://mcpui.dev/guide/introduction\n+- `@modelcontextprotocol/ext-apps` repository:\n+ https://github.com/modelcontextprotocol/ext-apps\n+- MCP Apps API docs: https://apps.extensions.modelcontextprotocol.io/api/\n+- MCP Apps stable spec (2026-01-26):\n+ https://github.com/modelcontextprotocol/ext-apps/blob/main/specification/2026-01-26/apps.mdx\n+\n+Repo-specific implementation references:\n+\n+- MCP server patterns: `docs/mcp-server-patterns.md`\n+- Cloudflare Agents SDK notes: `docs/agents/cloudflare-agents-sdk.md`\n+- Worker MCP entrypoint wiring: `worker/index.ts`\ndiff --git a/docs/agents/mock-api-servers.md b/docs/agents/mock-api-servers.md\nnew file mode 100644\nindex 0000000..5ed63ed\n--- /dev/null\n+++ b/docs/agents/mock-api-servers.md\n@@ -0,0 +1,31 @@\n+## Mock API servers\n+\n+Mock servers emulate third-party APIs during local development and PR previews.\n+Each mock lives in `mock-servers//` as a dedicated Cloudflare Worker so\n+it can also be deployed alongside the main app.\n+\n+### Add a new third-party mock\n+\n+1. Create a new directory under `mock-servers/`, for example\n+ `mock-servers/acme/`.\n+2. Add a Worker entrypoint (for example `mock-servers/acme/worker.ts`) that\n+ mirrors the third-party API (for example, `POST /resource`).\n+3. Add `mock-servers/acme/wrangler.jsonc` with the Worker config and any\n+ bindings (D1/KV/etc).\n+4. In `cli.ts`, start the mock Worker during `npm run dev` (via `wrangler dev`)\n+ and set `ACME_API_BASE_URL` to the mock Worker origin.\n+\n+### Tips\n+\n+- Prefer D1 for storing mock requests/messages so the mock can run both locally\n+ and in PR preview deploys.\n+- Add a `GET /__mocks` dashboard route so it is easy to discover endpoints and\n+ validate state while debugging.\n+- PR previews deploy each mock Worker with the name pattern\n+ `-pr--mock-` and configure the app preview to point at\n+ the deployed mock URL. A single generated token is shared between the app and\n+ all mock Workers for request authentication. The preview workflow includes an\n+ authenticated dashboard link in the PR comment (href includes `?token=...`) so\n+ you can open `//__mocks` without manually copying secrets.\n+- Set `\"preview_urls\": true` in each mock Worker `wrangler.jsonc` so Cloudflare\n+ emits version preview URLs in CI summaries when available.\ndiff --git a/docs/agents/oxlint-js-plugins.md b/docs/agents/oxlint-js-plugins.md\nnew file mode 100644\nindex 0000000..771511c\n--- /dev/null\n+++ b/docs/agents/oxlint-js-plugins.md\n@@ -0,0 +1,58 @@\n+# Oxlint JS plugin pattern\n+\n+Use this repo's local plugin as the baseline pattern for custom oxlint rules.\n+\n+## Files\n+\n+- Plugin: `tools/oxlint/local-plugin.js`\n+- Plugin config: `tools/oxlint/oxlint-rules.json`\n+- Root config: `.oxlintrc.json`\n+\n+## Pattern\n+\n+1. Create a JS module that default-exports a plugin object.\n+2. Write rules with `createOnce` (alternative API) instead of `create`.\n+3. Keep rule metadata/rule names the same:\n+ - `meta.name` defines the rule namespace.\n+ - `rules` maps rule names to rule objects.\n+4. Add plugin paths and rule toggles in `tools/oxlint/oxlint-rules.json`.\n+5. Keep `.oxlintrc.json` stable by extending that file.\n+6. Enable rules using `/`.\n+\n+## Why this API here\n+\n+This repo standardizes on Oxlint's alternative API (`createOnce`) for custom\n+rules. We are not targeting ESLint usage for these local plugins, so we keep\n+plugins Oxlint-only and do not include ESLint-compat helpers.\n+\n+## Config layout\n+\n+`.oxlintrc.json` should only contain shared/base extends plus a single extend to\n+`tools/oxlint/oxlint-rules.json`. Add or change custom JS plugins and local rule\n+settings in `tools/oxlint/oxlint-rules.json` so new rules do not require\n+touching root config.\n+\n+## Example in this repo\n+\n+- Plugin name: `epic-scheduler-custom`\n+- Rule id: `no-example-identifier`\n+- Config key: `epic-scheduler-custom/no-example-identifier`\n+\n+The example rule reports when it finds the identifier\n+`__oxlint_plugin_example__`. This keeps the demo deterministic and avoids\n+accidentally linting normal production code.\n+\n+## Verify manually\n+\n+Create a temporary file containing the sentinel identifier and run:\n+\n+```sh\n+npm run lint -- ./tmp-oxlint-plugin-rule-test.js\n+```\n+\n+You should see a lint error from `epic-scheduler-custom/no-example-identifier`.\n+Delete the temporary file after verification.\n+\n+## References\n+\n+- https://oxc.rs/docs/guide/usage/linter/js-plugins.html\ndiff --git a/docs/agents/remix/async-context-middleware.md b/docs/agents/remix/async-context-middleware.md\nnew file mode 100644\nindex 0000000..dfa4764\n--- /dev/null\n+++ b/docs/agents/remix/async-context-middleware.md\n@@ -0,0 +1,58 @@\n+# async-context-middleware\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/async-context-middleware\n+\n+## README\n+\n+Middleware for storing request context in `AsyncLocalStorage` for use with\n+[`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router).\n+\n+This middleware stores the request context in\n+[`AsyncLocalStorage`](https://nodejs.org/api/async_context.html#class-asynclocalstorage)\n+(using `node:async_hooks`), making it available to all functions in the same\n+async execution context.\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/async-context-middleware\n+```\n+\n+## Usage\n+\n+Simply use the `asyncContext()` middleware at the router level to make the\n+request context available to all functions in the same async execution context.\n+Get access to the context using the `getContext()` function.\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { asyncContext, getContext } from '@remix-run/async-context-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [asyncContext()],\n+})\n+\n+router.get('/users/:id', async () => {\n+\t// Access context from anywhere in the async call stack\n+\tlet context = getContext()\n+\tlet userId = context.params.id\n+\n+\treturn new Response(`User ${userId}`)\n+})\n+```\n+\n+Note: This middleware requires support for `node:async_hooks`.\n+\n+## Related Packages\n+\n+- [`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Router for the web Fetch API\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/component/animate-basics.md b/docs/agents/remix/component/animate-basics.md\nnew file mode 100644\nindex 0000000..940f85a\n--- /dev/null\n+++ b/docs/agents/remix/component/animate-basics.md\n@@ -0,0 +1,113 @@\n+# Animate basics\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/animate.md\n+\n+Declarative animations for element lifecycle and layout changes. The `animate`\n+prop handles three types of animations:\n+\n+- **Enter**: Animation played when an element mounts\n+- **Exit**: Animation played when an element is removed (element persists until\n+ animation completes)\n+- **Layout**: FLIP animation when an element's position or size changes\n+\n+## How it works\n+\n+The `animate` prop is an intrinsic property that wraps the Web Animations API\n+(`element.animate()`). The reconciler handles the complexity:\n+\n+- **Enter**: Element animates from the specified keyframe(s) to its natural\n+ styles\n+- **Exit**: Element animates from its current styles to the specified\n+ keyframe(s)\n+- **Layout**: Element smoothly animates from old position/size to new using FLIP\n+ technique\n+- **DOM persistence**: When a vnode is removed, the element stays in the DOM\n+ until the exit animation finishes\n+- **Interruption**: If an animation is interrupted mid-flight, it reverses from\n+ its current position rather than jumping to the other animation\n+\n+## Basic usage\n+\n+### Default animations\n+\n+Use `true` to enable default animations for each type:\n+\n+```tsx\n+

Hello

\n+```\n+\n+This enables:\n+\n+- **Enter**: Fade in (150ms, ease-out)\n+- **Exit**: Fade out (150ms, ease-in)\n+- **Layout**: FLIP position/size animation (200ms, ease-out)\n+\n+Mix and match as needed:\n+\n+```tsx\n+

\n+

\n+```\n+\n+### Single keyframe (shorthand)\n+\n+The `enter` keyframe defines the starting state - the element animates from\n+these values to its natural styles. The `exit` keyframe defines the ending state\n+\n+- the element animates from its current styles to these values:\n+\n+```tsx\n+\n+\tModal content\n+

\n+```\n+\n+### Multi-step animations\n+\n+For complex sequences, provide an array of keyframes:\n+\n+```tsx\n+\n+\tToast notification\n+

\n+```\n+\n+### Conditional animations\n+\n+Use falsy values to disable animations conditionally. This is useful for\n+skipping the enter animation on initial render:\n+\n+```tsx\n+\n+\tContent\n+

\n+```\n+\n+When `enter` is falsy (`false`, `null`, `undefined`), the element appears\n+instantly with no animation. The exit animation still plays when the element is\n+removed.\n+\n+## Navigation\n+\n+- [Animate patterns](./animate-patterns.md)\n+- [Animate layout](./animate-layout.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/animate-layout.md b/docs/agents/remix/component/animate-layout.md\nnew file mode 100644\nindex 0000000..d714c2b\n--- /dev/null\n+++ b/docs/agents/remix/component/animate-layout.md\n@@ -0,0 +1,172 @@\n+# Animate layout\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/animate.md\n+\n+The `layout` property enables automatic FLIP (First, Last, Invert, Play)\n+animations when an element's position or size changes due to layout shifts.\n+Instead of the element jumping to its new position, it smoothly animates there.\n+\n+## Basic usage\n+\n+Enable layout animations with `layout: true`:\n+\n+```tsx\n+

Animates position/size changes

\n+```\n+\n+Or customize duration and easing, including springs:\n+\n+```tsx\n+import { spring } from '@remix-run/component'\n+\n+let custom = (\n+\t

Ease

\n+)\n+\n+let springEasing = (\n+\t

Bouncy

\n+)\n+```\n+\n+## How it works\n+\n+Layout animations use the FLIP technique:\n+\n+1. **First**: Before any DOM changes, the element's current position is captured\n+2. **Last**: After DOM changes, the new position is measured\n+3. **Invert**: A CSS transform is applied to make the element appear at its old\n+ position\n+4. **Play**: The transform animates to identity, moving the element to its new\n+ position\n+\n+This approach is performant because it only animates `transform` (and optionally\n+`scale`), which are GPU-accelerated and don't trigger layout recalculations.\n+\n+## What gets animated\n+\n+Layout animations handle:\n+\n+- **Position changes**: Moving left/right/up/down via `translate3d()`\n+- **Size changes**: Width/height changes via `scale()`\n+\n+## Example: toggle switch\n+\n+A classic use case is animating a toggle knob when its `justify-content`\n+changes:\n+\n+```tsx\n+function FlipToggle(handle: Handle) {\n+\tlet isOn = false\n+\n+\treturn () => (\n+\t\t\n+\t\t\t\n+\t\t\t\t

\n+\t\t\t

\n+\t\t\n+\t)\n+}\n+```\n+\n+When clicked, the knob smoothly slides from one side to the other instead of\n+jumping.\n+\n+## Example: list reordering\n+\n+Layout animations shine when reordering list items:\n+\n+```tsx\n+function ReorderableList(handle: Handle) {\n+\tlet items = [\n+\t\t{ id: 'a', name: 'Apple' },\n+\t\t{ id: 'b', name: 'Banana' },\n+\t\t{ id: 'c', name: 'Cherry' },\n+\t]\n+\n+\tfunction shuffle() {\n+\t\titems = [...items].sort(() => Math.random() - 0.5)\n+\t\thandle.update()\n+\t}\n+\n+\treturn () => (\n+\t\t<>\n+\t\t\t\n+\t\t\t

\n+\t\t\t\t\t\t{item.name}\n+\t\t\t\t\t

\n+\t\t\n+\t)\n+}\n+```\n+\n+Each item animates to its new position when the list order changes.\n+\n+## Combining with enter/exit\n+\n+Layout animations work alongside enter/exit animations:\n+\n+```tsx\n+

\n+\tFades in/out and animates position changes\n+

\n+```\n+\n+## Interruption\n+\n+Layout animations are interruptible. If the layout changes again while an\n+animation is in progress:\n+\n+1. The current animation is cancelled\n+2. The element's current visual position is captured\n+3. A new animation starts from that position to the new target\n+\n+This ensures smooth transitions even during rapid layout changes.\n+\n+## Configuration options\n+\n+```tsx\n+interface LayoutAnimationConfig {\n+\tduration?: number // Animation duration in ms (default: 200)\n+\teasing?: string // CSS easing function (default: 'ease-out')\n+}\n+```\n+\n+All options are optional - use `layout: true` for defaults, or customize:\n+\n+```tsx\n+// Just layout with defaults\n+animate={{ layout: true }}\n+\n+// Custom duration only\n+animate={{ layout: { duration: 300 } }}\n+\n+// Custom easing only\n+animate={{ layout: { easing: 'ease-in-out' } }}\n+\n+// Spring physics\n+animate={{ layout: { ...spring('bouncy') } }}\n+```\n+\n+## Navigation\n+\n+- [Animate basics](./animate-basics.md)\n+- [Animate tips](./animate-tips.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/animate-patterns.md b/docs/agents/remix/component/animate-patterns.md\nnew file mode 100644\nindex 0000000..3c009b9\n--- /dev/null\n+++ b/docs/agents/remix/component/animate-patterns.md\n@@ -0,0 +1,172 @@\n+# Animate patterns\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/animate.md\n+\n+## Common patterns\n+\n+### Slide down from top\n+\n+```tsx\n+\n+\tDropdown menu\n+\n+```\n+\n+### Slide with blur (icon swap)\n+\n+```tsx\n+let iconAnimation = {\n+\tenter: {\n+\t\ttransform: 'translateY(-40px) scale(0.5)',\n+\t\tfilter: 'blur(6px)',\n+\t\tduration: 100,\n+\t\teasing: 'ease-out',\n+\t},\n+\texit: {\n+\t\ttransform: 'translateY(40px) scale(0.5)',\n+\t\tfilter: 'blur(6px)',\n+\t\tduration: 100,\n+\t\teasing: 'ease-in',\n+\t},\n+}\n+\n+// Use for swapping icons or labels - keys enable smooth cross-fade\n+{\n+\tstate === 'loading' ? (\n+\t\t

\n+\t\t\tLoading\n+\t\t

\n+\t) : (\n+\t\t

\n+\t\t\tDone\n+\t\t

\n+\t)\n+}\n+```\n+\n+### Enter only (no exit animation)\n+\n+Element animates in but disappears instantly when removed:\n+\n+```tsx\n+

One-way animation

\n+```\n+\n+### Exit only (no enter animation)\n+\n+Element appears instantly but animates out:\n+\n+```tsx\n+

Fade out only

\n+```\n+\n+### With delay\n+\n+Stagger animations or wait before starting:\n+\n+```tsx\n+

Delayed entrance

\n+```\n+\n+## Interruption handling\n+\n+If a user toggles an element before its animation finishes, the current\n+animation reverses from its current position rather than jumping to the other\n+animation. This creates smooth, interruptible transitions.\n+\n+```tsx\n+// User clicks \"Toggle\" to show element\n+// Enter animation starts: opacity 0 -> 1\n+// User clicks \"Toggle\" again at opacity 0.4\n+// Animation reverses: opacity 0.4 -> 0 (doesn't jump to exit animation)\n+```\n+\n+If an exit animation is interrupted, it reverses and the node is reclaimed back\n+into the virtual DOM.\n+\n+**Important**: For reclamation to work, the element must have a `key` prop:\n+\n+```tsx\n+// Reclamation works - element can be interrupted and reused\n+{\n+\tshow && (\n+\t\t

\n+\t\t\t...\n+\t\t

\n+\t)\n+}\n+\n+// No reclamation - element is recreated each time\n+{\n+\tshow &&

\n+}\n+```\n+\n+Without a key, the reconciler can't determine if a new element should reclaim an\n+exiting one, so interrupting an exit animation will still remove the old element\n+and create a new one.\n+\n+## With spring easing\n+\n+Spread a spring value to get physics-based `duration` and `easing`:\n+\n+```tsx\n+import { spring } from '@remix-run/component'\n+\n+let el = (\n+\t

\n+\t\tBouncy modal\n+\t

\n+)\n+```\n+\n+See [Spring basics](./spring-basics.md) for available presets and custom spring\n+options.\n+\n+## Complete example\n+\n+A toggle component with animate:\n+\n+```tsx\n+import { createRoot, type Handle } from '@remix-run/component'\n+\n+function ToggleContent(handle: Handle) {\n+\tlet show = false\n+\n+\treturn () => (\n+\t\t<>\n+\t\t\t\n+\t\t\t\tToggle\n+\t\t\t\n+\n+\t\t\t{show && (\n+\t\t\t\t\n+\t\t\t\t\tContent that animates in and out\n+\t\t\t\t

\n+\t\t\t)}\n+\t\t\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Animate basics](./animate-basics.md)\n+- [Animate layout](./animate-layout.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/animate-tips.md b/docs/agents/remix/component/animate-tips.md\nnew file mode 100644\nindex 0000000..de327aa\n--- /dev/null\n+++ b/docs/agents/remix/component/animate-tips.md\n@@ -0,0 +1,40 @@\n+# Animate tips\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/animate.md\n+\n+## Tips\n+\n+- **Keep durations short**: 100-300ms feels snappy. Longer durations can feel\n+ sluggish.\n+- **Use `ease-out` for enter**: Elements should decelerate as they arrive at\n+ their final position.\n+- **Use `ease-in` for exit**: Elements should accelerate as they leave.\n+- **Use springs for layout**: Physics-based easing feels natural for\n+ position/size changes.\n+- **Always use `key` for animated elements**: Keys are required for reclamation\n+ (interrupting exit to re-enter) and for layout animations to track element\n+ identity. Even conditionally rendered elements need keys:\n+ `{show && }`\n+- **Skip animation on first render**: For elements like labels that shouldn't\n+ animate on initial mount, use a falsy value for `enter`:\n+\n+```tsx\n+function Label(handle: Handle) {\n+\tlet isFirstRender = true\n+\thandle.queueTask(() => {\n+\t\tisFirstRender = false\n+\t})\n+\n+\treturn (props: { text: string }) => (\n+\t\t\n+\t\t\t{props.text}\n+\t\t\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Animate layout](./animate-layout.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/components.md b/docs/agents/remix/component/components.md\nnew file mode 100644\nindex 0000000..e1d59c6\n--- /dev/null\n+++ b/docs/agents/remix/component/components.md\n@@ -0,0 +1,141 @@\n+# Components\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/components.md\n+\n+All components follow a consistent two-phase structure.\n+\n+## Component structure\n+\n+1. **Setup phase** - Runs once when the component is first created\n+2. **Render phase** - Runs on initial render and every update afterward\n+\n+```tsx\n+function MyComponent(handle: Handle, setup: SetupType) {\n+\t// Setup phase: runs once\n+\tlet state = initializeState(setup)\n+\n+\t// Return render function: runs on every update\n+\treturn (props: Props) => {\n+\t\treturn

{/* render content */}

\n+\t}\n+}\n+```\n+\n+## Runtime behavior\n+\n+When a component is rendered:\n+\n+1. **First render**:\n+\n+- The component function is called with `handle` and the `setup` prop\n+- The returned render function is stored\n+- The render function is called with regular props\n+- Any tasks queued via `handle.queueTask()` are executed after rendering\n+\n+2. **Subsequent updates**:\n+\n+- Only the render function is called\n+- Setup phase is skipped, setup closure persists for the lifetime of the\n+ component instance\n+- Props are passed to the render function\n+- The `setup` prop is stripped from props\n+- Tasks queued during the update are executed after rendering\n+\n+3. **Component removal**:\n+\n+- `handle.signal` is aborted\n+- All event listeners registered via `handle.on()` are automatically cleaned up\n+- Any queued tasks are executed with an aborted signal\n+\n+## Setup vs props\n+\n+The `setup` prop is special - it's only available in the setup phase and is\n+automatically excluded from props. This prevents accidental stale captures:\n+\n+```tsx\n+function Counter(handle: Handle, setup: number) {\n+\t// setup prop (e.g., initialCount) only available here\n+\tlet count = setup\n+\n+\treturn (props: { label: string }) => {\n+\t\t// props only receives { label } - setup is excluded\n+\t\treturn (\n+\t\t\t

\n+\t\t\t\t{props.label}: {count}\n+\t\t\t

\n+\t\t)\n+\t}\n+}\n+\n+// Usage\n+let element = \n+```\n+\n+## Basic rendering\n+\n+The simplest component just returns JSX:\n+\n+```tsx\n+function Greeting() {\n+\treturn (props: { name: string }) =>

Hello, {props.name}!

\n+}\n+\n+let el = \n+```\n+\n+## Prop passing\n+\n+Props flow from parent to child through JSX attributes:\n+\n+```tsx\n+function Parent() {\n+\treturn () => \n+}\n+\n+function Child() {\n+\treturn (props: { message: string; count: number }) => (\n+\t\t

\n+\t\t\t

{props.message}

\n+\t\t\t

Count: {props.count}

\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Stateful updates\n+\n+State is managed with plain JavaScript variables. Call `handle.update()` to\n+trigger a re-render:\n+\n+```tsx\n+function Counter(handle: Handle) {\n+\tlet count = 0\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t

Count: {count}

\n+\t\t\t\n+\t\t\t\tIncrement\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+```\n+\n+## See also\n+\n+- [Handle API](./handle-updates.md) - Complete handle API reference\n+- [Patterns](./patterns-state.md) - State management best practices\n+\n+## Navigation\n+\n+- [Component index](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/component/composition-basics.md b/docs/agents/remix/component/composition-basics.md\nnew file mode 100644\nindex 0000000..2cf7a15\n--- /dev/null\n+++ b/docs/agents/remix/component/composition-basics.md\n@@ -0,0 +1,121 @@\n+# Composition basics\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/composition.md\n+\n+Building component trees with props, children, and `connect`.\n+\n+## Props\n+\n+Props flow from parent to child through JSX attributes:\n+\n+```tsx\n+function Parent() {\n+\treturn () => \n+}\n+\n+function Child() {\n+\treturn (props: { message: string; count: number }) => (\n+\t\t

\n+\t\t\t

{props.message}

\n+\t\t\t

Count: {props.count}

\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Children\n+\n+Components can compose other components via `children`:\n+\n+```tsx\n+function Layout() {\n+\treturn (props: { children: RemixNode }) => (\n+\t\t

\n+\t\t\t

My App

\n+\t\t\t

{props.children}

\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+\n+function App() {\n+\treturn () => (\n+\t\t\n+\t\t\t

Welcome

\n+\t\t\t

Content goes here

\n+\t\t\n+\t)\n+}\n+```\n+\n+## Connect prop\n+\n+Use the `connect` prop to get a reference to the DOM node after it's rendered.\n+This is useful for DOM operations like focusing elements, scrolling, measuring\n+dimensions, or setting up observers.\n+\n+```tsx\n+function Form(handle: Handle) {\n+\tlet inputRef: HTMLInputElement\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t (inputRef = node)} />\n+\t\t\t\n+\t\t\t\tFocus Input\n+\t\t\t\n+\t\t\n+\t)\n+}\n+```\n+\n+The `connect` callback can optionally receive an `AbortSignal` as a second\n+parameter, which is aborted when the element is removed from the DOM. Use this\n+for cleanup operations:\n+\n+```tsx\n+function ResizeTracker(handle: Handle) {\n+\tlet dimensions = { width: 0, height: 0 }\n+\n+\treturn () => (\n+\t\t {\n+\t\t\t\t// Set up ResizeObserver\n+\t\t\t\tlet observer = new ResizeObserver((entries) => {\n+\t\t\t\t\tlet entry = entries[0]\n+\t\t\t\t\tif (entry) {\n+\t\t\t\t\t\tdimensions.width = Math.round(entry.contentRect.width)\n+\t\t\t\t\t\tdimensions.height = Math.round(entry.contentRect.height)\n+\t\t\t\t\t\thandle.update()\n+\t\t\t\t\t}\n+\t\t\t\t})\n+\t\t\t\tobserver.observe(node)\n+\n+\t\t\t\t// Clean up when element is removed\n+\t\t\t\tsignal.addEventListener('abort', () => {\n+\t\t\t\t\tobserver.disconnect()\n+\t\t\t\t})\n+\t\t\t}}\n+\t\t>\n+\t\t\tSize: {dimensions.width} x {dimensions.height}\n+\t\t\n+\t)\n+}\n+```\n+\n+The `connect` callback is called only once when the element is first rendered,\n+not on every update.\n+\n+## Navigation\n+\n+- [Composition keys](./composition-keys.md)\n+- [Component index](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/component/composition-keys.md b/docs/agents/remix/component/composition-keys.md\nnew file mode 100644\nindex 0000000..932df5e\n--- /dev/null\n+++ b/docs/agents/remix/component/composition-keys.md\n@@ -0,0 +1,99 @@\n+# Composition keys\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/composition.md\n+\n+## Key prop\n+\n+Use the `key` prop to uniquely identify elements in lists. Keys enable efficient\n+diffing and preserve DOM nodes and component state when lists are reordered,\n+filtered, or updated.\n+\n+```tsx\n+function TodoList(handle: Handle) {\n+\tlet todos = [\n+\t\t{ id: '1', text: 'Buy milk' },\n+\t\t{ id: '2', text: 'Walk dog' },\n+\t\t{ id: '3', text: 'Write code' },\n+\t]\n+\n+\treturn () => (\n+\t\t

{todo.text}

\n+\t)\n+}\n+```\n+\n+When you reorder, add, or remove items, keys ensure:\n+\n+- **DOM nodes are reused** - Elements with matching keys are moved, not\n+ recreated\n+- **Component state is preserved** - Component instances persist across reorders\n+- **Focus and selection are maintained** - Input focus stays with the same\n+ element\n+- **Input values are preserved** - Form values remain with their elements\n+\n+```tsx\n+function ReorderableList(handle: Handle) {\n+\tlet items = [\n+\t\t{ id: 'a', label: 'Item A' },\n+\t\t{ id: 'b', label: 'Item B' },\n+\t\t{ id: 'c', label: 'Item C' },\n+\t]\n+\n+\tfunction reverse() {\n+\t\titems = [...items].reverse()\n+\t\thandle.update()\n+\t}\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t

\n+\t\t\t\t\t\t\n+\t\t\t\t\t

\n+\t\t

\n+\t)\n+}\n+```\n+\n+Even when the list order changes, each input maintains its value and focus state\n+because the `key` prop identifies which DOM node corresponds to which item.\n+\n+Keys can be any type (string, number, bigint, object, symbol), but should be\n+stable and unique within the list:\n+\n+```tsx\n+// Good: stable, unique IDs\n+{\n+\titems.map((item) =>

)\n+}\n+\n+// Good: index can work if list never reorders\n+{\n+\titems.map((item, index) =>

)\n+}\n+\n+// Bad: don't use random values or values that change\n+{\n+\titems.map((item) =>

)\n+}\n+```\n+\n+## See also\n+\n+- [Context](./context.md) - Indirect composition without prop drilling\n+- [Animate basics](./animate-basics.md) - Keys are required for reclamation\n+\n+## Navigation\n+\n+- [Composition basics](./composition-basics.md)\n+- [Component index](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/component/context.md b/docs/agents/remix/component/context.md\nnew file mode 100644\nindex 0000000..d02bbc3\n--- /dev/null\n+++ b/docs/agents/remix/component/context.md\n@@ -0,0 +1,173 @@\n+# Context\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/context.md\n+\n+Context enables components to communicate without direct prop passing.\n+\n+## Basic context\n+\n+Use `handle.context.set()` to provide values and `handle.context.get()` to\n+consume them:\n+\n+```tsx\n+function ThemeProvider(handle: Handle<{ theme: 'light' | 'dark' }>) {\n+\tlet theme: 'light' | 'dark' = 'light'\n+\n+\thandle.context.set({ theme })\n+\n+\treturn (props: { children: RemixNode }) => (\n+\t\t

\n+\t\t\t\n+\t\t\t\tToggle Theme\n+\t\t\t\n+\t\t\t{props.children}\n+\t\t

\n+\t)\n+}\n+\n+function ThemedContent(handle: Handle) {\n+\tlet { theme } = handle.context.get(ThemeProvider)\n+\n+\treturn () =>

Current theme: {theme}

\n+}\n+```\n+\n+**Important:** `handle.context.set()` does not cause any updates - it simply\n+stores a value. If you want the component tree to update when context changes,\n+you must call `handle.update()` after setting the context (as shown above).\n+\n+## TypedEventTarget for granular updates\n+\n+For better performance, use `TypedEventTarget` to avoid updating the entire\n+subtree. This allows descendants to subscribe to specific changes rather than\n+re-rendering on every parent update:\n+\n+```tsx\n+import { TypedEventTarget } from '@remix-run/interaction'\n+\n+class Theme extends TypedEventTarget<{ change: Event }> {\n+\t#value: 'light' | 'dark' = 'light'\n+\n+\tget value() {\n+\t\treturn this.#value\n+\t}\n+\n+\tsetValue(value: 'light' | 'dark') {\n+\t\tthis.#value = value\n+\t\tthis.dispatchEvent(new Event('change'))\n+\t}\n+}\n+\n+function ThemeProvider(handle: Handle) {\n+\tlet theme = new Theme()\n+\thandle.context.set(theme)\n+\n+\treturn (props: { children: RemixNode }) => (\n+\t\t

\n+\t\t\t\n+\t\t\t\tToggle Theme\n+\t\t\t\n+\t\t\t{props.children}\n+\t\t

\n+\t)\n+}\n+\n+function ThemedContent(handle: Handle) {\n+\tlet theme = handle.context.get(ThemeProvider)\n+\n+\t// Subscribe to granular updates\n+\thandle.on(theme, {\n+\t\tchange() {\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () =>

Current theme: {theme.value}

\n+}\n+```\n+\n+Benefits of this pattern:\n+\n+- **No unnecessary re-renders**: Only components that subscribe to changes are\n+ updated\n+- **Decoupled updates**: The provider doesn't need to call `handle.update()`\n+ when context changes\n+- **Type-safe events**: `TypedEventTarget` ensures event handlers receive the\n+ correct event types\n+\n+## Context with multiple values\n+\n+Provide multiple related values through context:\n+\n+```tsx\n+class AppContext extends TypedEventTarget<{\n+\tuserChange: Event\n+\tsettingsChange: Event\n+}> {\n+\t#user: User | null = null\n+\t#settings: Settings = defaultSettings\n+\n+\tget user() {\n+\t\treturn this.#user\n+\t}\n+\n+\tget settings() {\n+\t\treturn this.#settings\n+\t}\n+\n+\tsetUser(user: User | null) {\n+\t\tthis.#user = user\n+\t\tthis.dispatchEvent(new Event('userChange'))\n+\t}\n+\n+\tsetSettings(settings: Settings) {\n+\t\tthis.#settings = settings\n+\t\tthis.dispatchEvent(new Event('settingsChange'))\n+\t}\n+}\n+\n+function AppProvider(handle: Handle) {\n+\tlet context = new AppContext()\n+\thandle.context.set(context)\n+\n+\treturn (props: { children: RemixNode }) => props.children\n+}\n+\n+// Components can subscribe to only the events they care about\n+function UserDisplay(handle: Handle) {\n+\tlet context = handle.context.get(AppProvider)\n+\n+\thandle.on(context, {\n+\t\tuserChange() {\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () =>

{context.user?.name ?? 'Not logged in'}

\n+}\n+```\n+\n+## See also\n+\n+- [Handle context](./handle-context.md) - `handle.context` reference\n+- [Events](./events-basics.md) - `handle.on()` for subscribing to EventTargets\n+\n+## Navigation\n+\n+- [Component index](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/component/events-basics.md b/docs/agents/remix/component/events-basics.md\nnew file mode 100644\nindex 0000000..ec8d3cd\n--- /dev/null\n+++ b/docs/agents/remix/component/events-basics.md\n@@ -0,0 +1,105 @@\n+# Event handling basics\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/events.md\n+\n+Event handling with the `on` prop and signal-based interruption management.\n+\n+## Basic event handling\n+\n+Use the `on` prop to attach event listeners to elements:\n+\n+```tsx\n+function Button(handle: Handle) {\n+\tlet count = 0\n+\n+\treturn () => (\n+\t\t\n+\t\t\tClicked {count} times\n+\t\t\n+\t)\n+}\n+```\n+\n+## Event handler signature\n+\n+Event handlers receive the event object and an optional `AbortSignal`:\n+\n+```tsx\n+on={{\n+ click(event) {\n+ // event is the DOM event\n+ event.preventDefault()\n+ },\n+ async input(event, signal) {\n+ // signal is aborted when handler is re-entered or component removed\n+ let response = await fetch('/api', { signal })\n+ }\n+}}\n+```\n+\n+## Signals in event handlers\n+\n+Event handlers receive an `AbortSignal` that's automatically aborted when:\n+\n+- The handler is re-entered (user triggers another event before the previous one\n+ completes)\n+- The component is removed from the tree\n+\n+This prevents race conditions when users create events faster than async work\n+completes:\n+\n+```tsx\n+function SearchInput(handle: Handle) {\n+\tlet results: string[] = []\n+\tlet loading = false\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t{loading &&

}\n+\t\t\t{!loading && results.length > 0 && (\n+\t\t\t\t

{result}

\n+\t\t\t)}\n+\t\t

\n+\t)\n+}\n+```\n+\n+The signal ensures only the latest search request completes, preventing stale\n+results from overwriting newer ones.\n+\n+## Navigation\n+\n+- [Event patterns](./events-patterns.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/events-best-practices.md b/docs/agents/remix/component/events-best-practices.md\nnew file mode 100644\nindex 0000000..413c51f\n--- /dev/null\n+++ b/docs/agents/remix/component/events-best-practices.md\n@@ -0,0 +1,96 @@\n+# Event best practices\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/events.md\n+\n+## Prefer press events over click\n+\n+For interactive elements, prefer `press` events over `click`. Press events\n+provide better cross-device behavior:\n+\n+- Fire on both mouse and touch interactions\n+- Handle keyboard activation (Enter/Space) automatically\n+- Prevent ghost clicks on touch devices\n+- Support press-and-hold patterns\n+\n+```tsx\n+// BAD: click doesn't handle all interaction modes well\n+\n+\n+// GOOD: press handles mouse, touch, and keyboard uniformly\n+\n+```\n+\n+Use `click` only when you specifically need mouse-click behavior (e.g.,\n+detecting right-clicks or modifier keys).\n+\n+## Do work in event handlers\n+\n+Do as much work as possible in event handlers. Use the event handler scope for\n+transient state:\n+\n+```tsx\n+// GOOD: Do work in handler, only store what renders need\n+function SearchResults(handle: Handle) {\n+\tlet results: string[] = [] // Needed for rendering\n+\tlet loading = false // Needed for rendering loading state\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t{loading &&

}\n+\t\t\t{results.map((result, i) => (\n+\t\t\t\t

{result}

\n+\t\t\t))}\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Always check `signal.aborted`\n+\n+For async work, always check the signal or pass it to APIs that support it:\n+\n+```tsx\n+on={{\n+ async click(event, signal) {\n+ // Option 1: Pass signal to fetch\n+ let response = await fetch('/api', { signal })\n+\n+ // Option 2: Manual check after await\n+ let data = await someAsyncOperation()\n+ if (signal.aborted) return\n+\n+ // Safe to update state\n+ handle.update()\n+ }\n+}}\n+```\n+\n+## See also\n+\n+- [Handle signals and listeners](./handle-signals.md)\n+- [Pattern: data loading](./patterns-data-loading.md)\n+\n+## Navigation\n+\n+- [Event patterns](./events-patterns.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/events-patterns.md b/docs/agents/remix/component/events-patterns.md\nnew file mode 100644\nindex 0000000..b576c80\n--- /dev/null\n+++ b/docs/agents/remix/component/events-patterns.md\n@@ -0,0 +1,164 @@\n+# Event patterns\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/events.md\n+\n+## Multiple event types\n+\n+Handle multiple events on the same element:\n+\n+```tsx\n+function InteractiveBox(handle: Handle) {\n+\tlet state = 'idle'\n+\n+\treturn () => (\n+\t\t\n+\t\t\tState: {state}\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Form events\n+\n+Common form event patterns:\n+\n+```tsx\n+function Form(handle: Handle) {\n+\treturn () => (\n+\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\n+\t)\n+}\n+```\n+\n+## Keyboard events\n+\n+Handle keyboard interactions:\n+\n+```tsx\n+function KeyboardNav(handle: Handle) {\n+\tlet selectedIndex = 0\n+\tlet items = ['Apple', 'Banana', 'Cherry']\n+\n+\treturn () => (\n+\t\t\n+\t\t\t{items.map((item, i) => (\n+\t\t\t\t\n+\t\t\t\t\t{item}\n+\t\t\t\t\n+\t\t\t))}\n+\t\t\n+\t)\n+}\n+```\n+\n+## Global event listeners\n+\n+Use `handle.on()` for global event targets with automatic cleanup:\n+\n+```tsx\n+function WindowResizeTracker(handle: Handle) {\n+\tlet width = window.innerWidth\n+\tlet height = window.innerHeight\n+\n+\t// Set up global listeners once in setup\n+\thandle.on(window, {\n+\t\tresize() {\n+\t\t\twidth = window.innerWidth\n+\t\t\theight = window.innerHeight\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () => (\n+\t\t

\n+\t\t\tWindow size: {width} x {height}\n+\t\t

\n+\t)\n+}\n+```\n+\n+```tsx\n+function KeyboardTracker(handle: Handle) {\n+\tlet keys: string[] = []\n+\n+\thandle.on(document, {\n+\t\tkeydown(event) {\n+\t\t\tkeys.push(event.key)\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () =>

Keys: {keys.join(', ')}

\n+}\n+```\n+\n+## Navigation\n+\n+- [Event handling basics](./events-basics.md)\n+- [Event best practices](./events-best-practices.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/getting-started.md b/docs/agents/remix/component/getting-started.md\nnew file mode 100644\nindex 0000000..79f5e62\n--- /dev/null\n+++ b/docs/agents/remix/component/getting-started.md\n@@ -0,0 +1,93 @@\n+# Getting started\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/getting-started.md\n+\n+Create interactive UIs with Remix Component using a two-phase component model:\n+setup runs once, render runs on every update.\n+\n+## Creating a root\n+\n+To start using Remix Component, create a root and render your top-level\n+component:\n+\n+```tsx\n+import { createRoot } from '@remix-run/component'\n+import type { Handle } from '@remix-run/component'\n+\n+function App(handle: Handle) {\n+\treturn () =>

Hello, World!

\n+}\n+\n+// Create a root attached to a DOM element\n+let container = document.getElementById('app')!\n+let root = createRoot(container)\n+\n+// Render your app\n+root.render()\n+```\n+\n+The `createRoot` function takes a DOM element (or `document.body`) and returns a\n+root object with a `render` method. You can call `render` multiple times to\n+update the app:\n+\n+```tsx\n+function App(handle: Handle) {\n+\tlet count = 0\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t

Count: {count}

\n+\t\t\t\n+\t\t\t\tIncrement\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+\n+let root = createRoot(document.body)\n+root.render()\n+\n+// Later, you can update the app by calling render again\n+// root.render()\n+```\n+\n+## Root methods\n+\n+The root object provides several methods:\n+\n+- **`render(node)`** - Renders a component tree into the root container\n+- **`flush()`** - Synchronously flushes all pending updates and tasks\n+- **`remove()`** - Removes the component tree and cleans up\n+\n+```tsx\n+let root = createRoot(document.body)\n+\n+// Render initial app\n+root.render()\n+\n+// Flush any pending updates synchronously\n+root.flush()\n+\n+// Later, remove the app\n+root.remove()\n+```\n+\n+## Next steps\n+\n+- [Components](./components.md) - Component structure and runtime behavior\n+- [Handle API](./handle-updates.md) - The component's interface to the framework\n+- [Styling](./styling-basics.md) - CSS prop for inline styling\n+- [Events](./events-basics.md) - Event handling patterns\n+\n+## Navigation\n+\n+- [Component index](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/component/handle-context.md b/docs/agents/remix/component/handle-context.md\nnew file mode 100644\nindex 0000000..72518d7\n--- /dev/null\n+++ b/docs/agents/remix/component/handle-context.md\n@@ -0,0 +1,41 @@\n+# Handle context\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/handle.md\n+\n+## `handle.context`\n+\n+Context API for ancestor/descendant communication. See `context.md` for full\n+documentation.\n+\n+```tsx\n+function App(handle: Handle<{ theme: string }>) {\n+\thandle.context.set({ theme: 'dark' })\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t

\n+\t\t

\n+\t)\n+}\n+\n+function Header(handle: Handle) {\n+\tlet { theme } = handle.context.get(App)\n+\treturn () =>

Header

\n+}\n+```\n+\n+**Important:** `handle.context.set()` does not cause any updates - it simply\n+stores a value. If you need the component tree to update when context changes,\n+call `handle.update()` after setting the context.\n+\n+## See also\n+\n+- [Events](./events-basics.md) - Event handling patterns with signals\n+- [Context](./context.md) - Context API with TypedEventTarget\n+- [Patterns](./patterns-state.md) - Common usage patterns\n+\n+## Navigation\n+\n+- [Handle updates and tasks](./handle-updates.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/handle-signals.md b/docs/agents/remix/component/handle-signals.md\nnew file mode 100644\nindex 0000000..57fde4f\n--- /dev/null\n+++ b/docs/agents/remix/component/handle-signals.md\n@@ -0,0 +1,76 @@\n+# Handle signals and listeners\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/handle.md\n+\n+## `handle.signal`\n+\n+An `AbortSignal` that's aborted when the component is disconnected. Useful for\n+cleanup operations.\n+\n+```tsx\n+function Clock(handle: Handle) {\n+\tlet interval = setInterval(() => {\n+\t\tif (handle.signal.aborted) {\n+\t\t\tclearInterval(interval)\n+\t\t\treturn\n+\t\t}\n+\t\thandle.update()\n+\t}, 1000)\n+\n+\treturn () =>

{new Date().toString()}

\n+}\n+```\n+\n+Or using event listeners:\n+\n+```tsx\n+function Clock(handle: Handle) {\n+\tlet interval = setInterval(handle.update, 1000)\n+\thandle.signal.addEventListener('abort', () => clearInterval(interval))\n+\n+\treturn () =>

{new Date().toString()}

\n+}\n+```\n+\n+## `handle.on(target, listeners)`\n+\n+Listen to an `EventTarget` with automatic cleanup when the component\n+disconnects. Ideal for global event targets like `document` and `window`.\n+\n+```tsx\n+function KeyboardTracker(handle: Handle) {\n+\tlet keys: string[] = []\n+\n+\thandle.on(document, {\n+\t\tkeydown(event) {\n+\t\t\tkeys.push(event.key)\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () =>

Keys: {keys.join(', ')}

\n+}\n+```\n+\n+## `handle.id`\n+\n+Stable identifier per component instance. Useful for HTML APIs like `htmlFor`,\n+`aria-owns`, etc.\n+\n+```tsx\n+function LabeledInput(handle: Handle) {\n+\treturn () => (\n+\t\t

\n+\t\t\tName\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Handle updates and tasks](./handle-updates.md)\n+- [Handle context](./handle-context.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/handle-updates.md b/docs/agents/remix/component/handle-updates.md\nnew file mode 100644\nindex 0000000..bb6a605\n--- /dev/null\n+++ b/docs/agents/remix/component/handle-updates.md\n@@ -0,0 +1,193 @@\n+# Handle updates and tasks\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/handle.md\n+\n+The `Handle` object provides the component's interface to the framework.\n+\n+## `handle.update(task?)`\n+\n+Schedules a component update. Optionally accepts a task to run after the update\n+completes.\n+\n+```tsx\n+function Counter(handle: Handle) {\n+\tlet count = 0\n+\n+\treturn () => (\n+\t\t\n+\t\t\tCount: {count}\n+\t\t\n+\t)\n+}\n+```\n+\n+With a task:\n+\n+```tsx\n+function Player(handle: Handle) {\n+\tlet isPlaying = false\n+\tlet stopButton: HTMLButtonElement\n+\n+\treturn () => (\n+\t\t {\n+\t\t\t\t\t\t// Task runs after update completes\n+\t\t\t\t\t\tstopButton.focus()\n+\t\t\t\t\t})\n+\t\t\t\t},\n+\t\t\t}}\n+\t\t>\n+\t\t\tPlay\n+\t\t\n+\t)\n+}\n+```\n+\n+## `handle.queueTask(task)`\n+\n+Schedules a task to run after the next update. The task receives an\n+`AbortSignal` that's aborted when:\n+\n+- The component re-renders (new render cycle starts)\n+- The component is removed from the tree\n+\n+Use `queueTask` in event handlers when work needs to happen after DOM changes:\n+\n+```tsx\n+function Form(handle: Handle) {\n+\tlet showDetails = false\n+\tlet detailsSection: HTMLElement\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t {\n+\t\t\t\t\t\t\tdetailsSection.scrollIntoView({ behavior: 'smooth' })\n+\t\t\t\t\t\t})\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\tShow Details\n+\t\t\t\n+\t\t\t{showDetails && (\n+\t\t\t\t

(detailsSection = node)}>Details content

\n+\t\t\t)}\n+\t\t

\n+\t)\n+}\n+```\n+\n+Use `queueTask` for work that needs to be reactive to prop changes:\n+\n+When you need to perform async work (like data fetching) that should respond to\n+prop changes, use `queueTask` in the render function. The signal will be aborted\n+if props change or the component is removed, ensuring only the latest work\n+completes.\n+\n+### Anti-patterns\n+\n+Do not create state just to react to it in `queueTask`:\n+\n+```tsx\n+// BAD: Creating state just to react to it in queueTask\n+function BadExample(handle: Handle) {\n+\tlet shouldLoad = false // Unnecessary state\n+\n+\treturn () => (\n+\t\t {\n+\t\t\t\t\t\tif (shouldLoad) {\n+\t\t\t\t\t\t\t// Do work\n+\t\t\t\t\t\t}\n+\t\t\t\t\t})\n+\t\t\t\t},\n+\t\t\t}}\n+\t\t>\n+\t\t\tLoad\n+\t\t\n+\t)\n+}\n+\n+// GOOD: Do the work directly in the event handler or queueTask\n+function GoodExample(handle: Handle) {\n+\treturn () => (\n+\t\t {\n+\t\t\t\t\t\t// Do work directly - no intermediate state needed\n+\t\t\t\t\t})\n+\t\t\t\t},\n+\t\t\t}}\n+\t\t>\n+\t\t\tLoad\n+\t\t\n+\t)\n+}\n+```\n+\n+Do not call `handle.update()` before async work in a task:\n+\n+```tsx\n+// BAD: Calling handle.update() before async work\n+function BadAsyncExample(handle: Handle) {\n+\tlet data: string[] = []\n+\tlet loading = false\n+\n+\thandle.queueTask(async (signal) => {\n+\t\tloading = true\n+\t\thandle.update() // This triggers a re-render, which aborts signal!\n+\n+\t\tlet response = await fetch('/api/data', { signal }) // AbortError: signal is aborted\n+\t\tif (signal.aborted) return\n+\n+\t\tdata = await response.json()\n+\t\tloading = false\n+\t\thandle.update()\n+\t})\n+\n+\treturn () =>

{loading ? 'Loading...' : data.join(', ')}

\n+}\n+\n+// GOOD: Set initial state in setup, only call handle.update() after async work\n+function GoodAsyncExample(handle: Handle) {\n+\tlet data: string[] = []\n+\tlet loading = true // Start in loading state\n+\n+\thandle.queueTask(async (signal) => {\n+\t\tlet response = await fetch('/api/data', { signal })\n+\t\tif (signal.aborted) return\n+\n+\t\tdata = await response.json()\n+\t\tloading = false\n+\t\thandle.update() // Safe - async work is complete\n+\t})\n+\n+\treturn () =>

{loading ? 'Loading...' : data.join(', ')}

\n+}\n+```\n+\n+## Navigation\n+\n+- [Handle signals and listeners](./handle-signals.md)\n+- [Handle context](./handle-context.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/index.md b/docs/agents/remix/component/index.md\nnew file mode 100644\nindex 0000000..ac98677\n--- /dev/null\n+++ b/docs/agents/remix/component/index.md\n@@ -0,0 +1,52 @@\n+# component\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## README\n+\n+- [Overview, install, and quick start](./readme-overview.md)\n+- [Component state and setup props](./readme-components.md)\n+- [Events](./readme-events.md)\n+- [Styling and DOM connections](./readme-styling-and-connect.md)\n+- [Handle API reference](./readme-handle-api.md)\n+- [Handle listeners and signals](./readme-handle-listeners.md)\n+- [Handle context](./readme-handle-context.md)\n+- [Fragments and future work](./readme-extras.md)\n+\n+## Component docs\n+\n+- [Getting started](./getting-started.md)\n+- [Components](./components.md)\n+- [Composition basics](./composition-basics.md)\n+- [Composition keys](./composition-keys.md)\n+- [Handle updates and tasks](./handle-updates.md)\n+- [Handle signals and listeners](./handle-signals.md)\n+- [Handle context](./handle-context.md)\n+- [Event handling basics](./events-basics.md)\n+- [Event patterns](./events-patterns.md)\n+- [Event best practices](./events-best-practices.md)\n+- [Interaction basics](./interactions-basics.md)\n+- [Interaction examples](./interactions-examples.md)\n+- [Context](./context.md)\n+- [Styling basics](./styling-basics.md)\n+- [Styling selectors](./styling-selectors.md)\n+- [Styling with nested selectors](./styling-nesting.md)\n+- [Styling responsive and examples](./styling-responsive.md)\n+- [Pattern: state management](./patterns-state.md)\n+- [Pattern: setup scope](./patterns-setup.md)\n+- [Pattern: focus and scroll](./patterns-focus-and-scroll.md)\n+- [Pattern: inputs](./patterns-inputs.md)\n+- [Pattern: data loading](./patterns-data-loading.md)\n+- [Animate basics](./animate-basics.md)\n+- [Animate patterns](./animate-patterns.md)\n+- [Animate layout](./animate-layout.md)\n+- [Animate tips](./animate-tips.md)\n+- [Spring basics](./spring-basics.md)\n+- [Spring advanced usage](./spring-advanced.md)\n+- [Tween basics](./tween-basics.md)\n+- [Tween advanced usage](./tween-advanced.md)\n+- [Testing](./testing.md)\n+\n+## Navigation\n+\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/component/interactions-basics.md b/docs/agents/remix/component/interactions-basics.md\nnew file mode 100644\nindex 0000000..b5a3626\n--- /dev/null\n+++ b/docs/agents/remix/component/interactions-basics.md\n@@ -0,0 +1,166 @@\n+# Interaction basics\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/interactions.md\n+\n+Build reusable interaction patterns with the `@remix-run/interaction` package.\n+\n+## Built-in interactions\n+\n+The interaction package provides several ready-to-use interactions:\n+\n+```tsx\n+import {\n+\tpress,\n+\tpressDown,\n+\tpressUp,\n+\tlongPress,\n+\tpressCancel,\n+} from '@remix-run/interaction/press'\n+import {\n+\tswipeStart,\n+\tswipeMove,\n+\tswipeEnd,\n+\tswipeCancel,\n+} from '@remix-run/interaction/swipe'\n+import {\n+\tarrowUp,\n+\tarrowDown,\n+\tarrowLeft,\n+\tarrowRight,\n+\tspace,\n+} from '@remix-run/interaction/keys'\n+```\n+\n+Use them like any event type:\n+\n+```tsx\n+\n+\tAction\n+\n+```\n+\n+## When to create custom interactions\n+\n+Create a custom interaction when:\n+\n+- You need to combine multiple low-level events into a semantic action\n+- The interaction pattern will be reused across multiple components\n+- You want to encapsulate complex state tracking (e.g., gesture recognition,\n+ tempo detection)\n+\n+Do not create a custom interaction when:\n+\n+- A built-in interaction already handles your use case\n+- The logic is simple enough to handle inline in an event handler\n+- The pattern is only used in one place\n+\n+## Defining an interaction\n+\n+Use `defineInteraction` to create a reusable interaction:\n+\n+```ts\n+import { defineInteraction, type Interaction } from '@remix-run/interaction'\n+\n+// 1. Define the interaction with a unique namespaced type\n+export let dragRelease = defineInteraction('myapp:drag-release', DragRelease)\n+\n+// 2. Declare the event type for TypeScript\n+declare global {\n+\tinterface HTMLElementEventMap {\n+\t\t[dragRelease]: DragReleaseEvent\n+\t}\n+}\n+\n+// 3. Create a custom event class with relevant data\n+export class DragReleaseEvent extends Event {\n+\tvelocityX: number\n+\tvelocityY: number\n+\n+\tconstructor(\n+\t\ttype: typeof dragRelease,\n+\t\tinit: { velocityX: number; velocityY: number },\n+\t) {\n+\t\tsuper(type, { bubbles: true, cancelable: true })\n+\t\tthis.velocityX = init.velocityX\n+\t\tthis.velocityY = init.velocityY\n+\t}\n+}\n+\n+// 4. Implement the interaction setup function\n+function DragRelease(handle: Interaction) {\n+\tif (!(handle.target instanceof HTMLElement)) return\n+\n+\tlet target = handle.target\n+\tlet isTracking = false\n+\tlet velocityX = 0\n+\tlet velocityY = 0\n+\n+\thandle.on(target, {\n+\t\tpointerdown(event) {\n+\t\t\tif (!event.isPrimary) return\n+\t\t\tisTracking = true\n+\t\t\ttarget.setPointerCapture(event.pointerId)\n+\t\t},\n+\n+\t\tpointermove(event) {\n+\t\t\tif (!isTracking) return\n+\t\t\t// Track velocity...\n+\t\t},\n+\n+\t\tpointerup(event) {\n+\t\t\tif (!isTracking) return\n+\t\t\tisTracking = false\n+\n+\t\t\t// Dispatch the custom event\n+\t\t\ttarget.dispatchEvent(\n+\t\t\t\tnew DragReleaseEvent(dragRelease, { velocityX, velocityY }),\n+\t\t\t)\n+\t\t},\n+\t})\n+}\n+```\n+\n+## The interaction handle\n+\n+The setup function receives an `Interaction` handle with:\n+\n+- **`handle.target`** - The element the interaction is attached to\n+- **`handle.signal`** - AbortSignal for cleanup when the interaction is disposed\n+- **`handle.on(target, listeners)`** - Add event listeners with automatic\n+ cleanup\n+- **`handle.raise(error)`** - Report errors to the parent error handler\n+\n+```ts\n+function MyInteraction(handle: Interaction) {\n+\t// Guard for specific element types if needed\n+\tif (!(handle.target instanceof HTMLElement)) return\n+\n+\tlet target = handle.target\n+\n+\t// Set up listeners - automatically cleaned up when signal aborts\n+\thandle.on(target, {\n+\t\tpointerdown(event) {\n+\t\t\t// Handle event...\n+\t\t},\n+\t})\n+\n+\t// Listen to other targets (e.g., document for global events)\n+\thandle.on(target.ownerDocument, {\n+\t\tpointerup() {\n+\t\t\t// Handle pointer released outside target...\n+\t\t},\n+\t})\n+}\n+```\n+\n+## Navigation\n+\n+- [Interaction examples](./interactions-examples.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/interactions-examples.md b/docs/agents/remix/component/interactions-examples.md\nnew file mode 100644\nindex 0000000..e196339\n--- /dev/null\n+++ b/docs/agents/remix/component/interactions-examples.md\n@@ -0,0 +1,113 @@\n+# Interaction examples\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/interactions.md\n+\n+## Consuming in components\n+\n+Use custom interactions just like built-in events:\n+\n+```tsx\n+import { dragRelease } from './drag-release.ts'\n+\n+function DraggableCard(handle: Handle) {\n+\treturn () => (\n+\t\t\n+\t\t\tDrag me\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Example: tap tempo\n+\n+A more complex example that tracks repeated taps to calculate BPM:\n+\n+```ts\n+import { defineInteraction, type Interaction } from '@remix-run/interaction'\n+\n+export let tempo = defineInteraction('myapp:tempo', Tempo)\n+\n+declare global {\n+\tinterface HTMLElementEventMap {\n+\t\t[tempo]: TempoEvent\n+\t}\n+}\n+\n+export class TempoEvent extends Event {\n+\tbpm: number\n+\n+\tconstructor(type: typeof tempo, bpm: number) {\n+\t\tsuper(type)\n+\t\tthis.bpm = bpm\n+\t}\n+}\n+\n+function Tempo(handle: Interaction) {\n+\tif (!(handle.target instanceof HTMLElement)) return\n+\n+\tlet target = handle.target\n+\tlet taps: number[] = []\n+\tlet resetTimer = 0\n+\n+\tfunction handleTap() {\n+\t\tclearTimeout(resetTimer)\n+\n+\t\ttaps.push(Date.now())\n+\t\ttaps = taps.filter((tap) => Date.now() - tap < 4000)\n+\n+\t\tif (taps.length >= 4) {\n+\t\t\tlet intervals = []\n+\t\t\tfor (let i = 1; i < taps.length; i++) {\n+\t\t\t\tintervals.push(taps[i] - taps[i - 1])\n+\t\t\t}\n+\t\t\tlet avgMs = intervals.reduce((sum, v) => sum + v, 0) / intervals.length\n+\t\t\tlet bpm = Math.round(60000 / avgMs)\n+\t\t\ttarget.dispatchEvent(new TempoEvent(tempo, bpm))\n+\t\t}\n+\n+\t\tresetTimer = window.setTimeout(() => {\n+\t\t\ttaps = []\n+\t\t}, 4000)\n+\t}\n+\n+\thandle.on(target, {\n+\t\tpointerdown: handleTap,\n+\t\tkeydown(event) {\n+\t\t\tif (event.repeat) return\n+\t\t\tif (event.key === 'Enter' || event.key === ' ') {\n+\t\t\t\thandleTap()\n+\t\t\t}\n+\t\t},\n+\t})\n+}\n+```\n+\n+## Best practices\n+\n+1. **Namespace your event types** - Use a prefix like `myapp:` to avoid\n+ collisions with built-in interactions\n+2. **Use cancelable events** - Set `cancelable: true` so consumers can call\n+ `event.preventDefault()`\n+3. **Include relevant data** - Add properties to your event class for data\n+ consumers need\n+4. **Guard element types** - Check `handle.target instanceof HTMLElement` if you\n+ need DOM-specific APIs\n+5. **Clean up automatically** - Use `handle.on()` instead of `addEventListener`\n+ for automatic cleanup\n+\n+## See also\n+\n+- [Events](./events-basics.md) - Event handling basics\n+- [Handle updates and tasks](./handle-updates.md) - `handle.on()` in components\n+\n+## Navigation\n+\n+- [Interaction basics](./interactions-basics.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/patterns-data-loading.md b/docs/agents/remix/component/patterns-data-loading.md\nnew file mode 100644\nindex 0000000..530a8aa\n--- /dev/null\n+++ b/docs/agents/remix/component/patterns-data-loading.md\n@@ -0,0 +1,127 @@\n+# Pattern: data loading\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/patterns.md\n+\n+## Using event handler signals\n+\n+Event handlers receive an `AbortSignal` that's aborted when the handler is\n+re-entered:\n+\n+```tsx\n+function SearchInput(handle: Handle) {\n+\tlet results: string[] = []\n+\tlet loading = false\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t{loading &&

}\n+\t\t\t{!loading && results.length > 0 && (\n+\t\t\t\t

{result}

\n+\t\t\t)}\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Using queueTask for reactive loading\n+\n+Use `handle.queueTask()` in the render function for reactive data loading that\n+responds to prop changes:\n+\n+```tsx\n+function DataLoader(handle: Handle) {\n+\tlet data: any = null\n+\tlet loading = false\n+\tlet error: Error | null = null\n+\n+\treturn (props: { url: string }) => {\n+\t\t// Queue data loading task that responds to prop changes\n+\t\thandle.queueTask(async (signal) => {\n+\t\t\tloading = true\n+\t\t\terror = null\n+\t\t\thandle.update()\n+\n+\t\t\tlet response = await fetch(props.url, { signal })\n+\t\t\tlet json = await response.json()\n+\t\t\tif (signal.aborted) return\n+\t\t\tdata = json\n+\t\t\tloading = false\n+\t\t\thandle.update()\n+\t\t})\n+\n+\t\tif (loading) return

\n+\t\tif (error) return

Error: {error.message}

\n+\t\tif (!data) return

No data

\n+\n+\t\treturn

{JSON.stringify(data)}

\n+\t}\n+}\n+```\n+\n+## Using setup scope for initial data\n+\n+Load initial data in the setup scope:\n+\n+```tsx\n+function UserProfile(handle: Handle, setup: { userId: string }) {\n+\tlet user: User | null = null\n+\tlet loading = true\n+\n+\t// Load initial data in setup scope using queueTask\n+\thandle.queueTask(async (signal) => {\n+\t\tlet response = await fetch(`/api/users/${setup.userId}`, { signal })\n+\t\tlet data = await response.json()\n+\t\tif (signal.aborted) return\n+\t\tuser = data\n+\t\tloading = false\n+\t\thandle.update()\n+\t})\n+\n+\treturn (props: { showEmail?: boolean }) => {\n+\t\tif (loading) return

Loading user...

\n+\n+\t\treturn (\n+\t\t\t

\n+\t\t\t\t

{user.name}

\n+\t\t\t\t{props.showEmail &&

{user.email}

}\n+\t\t\t

\n+\t\t)\n+\t}\n+}\n+```\n+\n+Note that by fetching this data in the setup scope any parent updates that\n+change `setup.userId` will have no effect.\n+\n+## See also\n+\n+- [Handle updates and tasks](./handle-updates.md)\n+- [Event handling basics](./events-basics.md)\n+- [Components](./components.md)\n+\n+## Navigation\n+\n+- [Pattern: inputs](./patterns-inputs.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/patterns-focus-and-scroll.md b/docs/agents/remix/component/patterns-focus-and-scroll.md\nnew file mode 100644\nindex 0000000..3625727\n--- /dev/null\n+++ b/docs/agents/remix/component/patterns-focus-and-scroll.md\n@@ -0,0 +1,107 @@\n+# Pattern: focus and scroll\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/patterns.md\n+\n+Use `handle.queueTask()` in event handlers for DOM operations that need to\n+happen after the DOM has changed from the next update.\n+\n+## Focus management\n+\n+```tsx\n+function Modal(handle: Handle) {\n+\tlet isOpen = false\n+\tlet closeButton: HTMLButtonElement\n+\tlet openButton: HTMLButtonElement\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t (openButton = node)}\n+\t\t\t\ton={{\n+\t\t\t\t\tclick() {\n+\t\t\t\t\t\tisOpen = true\n+\t\t\t\t\t\thandle.update()\n+\t\t\t\t\t\t// Queue focus operation after modal renders\n+\t\t\t\t\t\thandle.queueTask(() => {\n+\t\t\t\t\t\t\tcloseButton.focus()\n+\t\t\t\t\t\t})\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\tOpen Modal\n+\t\t\t\n+\n+\t\t\t{isOpen && (\n+\t\t\t\t

\n+\t\t\t\t\t (closeButton = node)}\n+\t\t\t\t\t\ton={{\n+\t\t\t\t\t\t\tclick() {\n+\t\t\t\t\t\t\t\tisOpen = false\n+\t\t\t\t\t\t\t\thandle.update()\n+\t\t\t\t\t\t\t\t// Queue focus operation after modal closes\n+\t\t\t\t\t\t\t\thandle.queueTask(() => {\n+\t\t\t\t\t\t\t\t\topenButton.focus()\n+\t\t\t\t\t\t\t\t})\n+\t\t\t\t\t\t\t},\n+\t\t\t\t\t\t}}\n+\t\t\t\t\t>\n+\t\t\t\t\t\tClose\n+\t\t\t\t\t\n+\t\t\t\t

\n+\t\t\t)}\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Scroll management\n+\n+```tsx\n+function ScrollableList(handle: Handle) {\n+\tlet items: string[] = []\n+\tlet newItemInput: HTMLInputElement\n+\tlet listContainer: HTMLElement\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t (newItemInput = node)}\n+\t\t\t\ton={{\n+\t\t\t\t\tkeydown(event) {\n+\t\t\t\t\t\tif (event.key === 'Enter') {\n+\t\t\t\t\t\t\tlet text = event.currentTarget.value\n+\t\t\t\t\t\t\tif (text.trim()) {\n+\t\t\t\t\t\t\t\titems.push(text)\n+\t\t\t\t\t\t\t\tevent.currentTarget.value = ''\n+\t\t\t\t\t\t\t\thandle.update()\n+\t\t\t\t\t\t\t\t// Queue scroll operation after new item renders\n+\t\t\t\t\t\t\t\thandle.queueTask(() => {\n+\t\t\t\t\t\t\t\t\tlistContainer.scrollTop = listContainer.scrollHeight\n+\t\t\t\t\t\t\t\t})\n+\t\t\t\t\t\t\t}\n+\t\t\t\t\t\t}\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t/>\n+\t\t\t (listContainer = node)}\n+\t\t\t\tcss={{\n+\t\t\t\t\tmaxHeight: '300px',\n+\t\t\t\t\toverflowY: 'auto',\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\t{items.map((item, i) => (\n+\t\t\t\t\t

{item}

\n+\t\t\t\t))}\n+\t\t\t

\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Pattern: inputs](./patterns-inputs.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/patterns-inputs.md b/docs/agents/remix/component/patterns-inputs.md\nnew file mode 100644\nindex 0000000..caab7db\n--- /dev/null\n+++ b/docs/agents/remix/component/patterns-inputs.md\n@@ -0,0 +1,81 @@\n+# Pattern: inputs\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/patterns.md\n+\n+Only control an input's value when something besides the user's interaction with\n+that input can also control its state.\n+\n+## Uncontrolled input\n+\n+Use when only the user controls the value:\n+\n+```tsx\n+function SearchInput(handle: Handle) {\n+\tlet results: string[] = []\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Controlled input\n+\n+Use when programmatic control is needed:\n+\n+```tsx\n+function SlugForm(handle: Handle) {\n+\tlet slug = ''\n+\tlet generatedSlug = ''\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t\tAuto-generate slug\n+\t\t\t\n+\t\t\t\n+\t\t\t\tSlug\n+\t\t\t\t\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+```\n+\n+Use controlled inputs when:\n+\n+- The value can be set programmatically (auto-generated fields, reset buttons,\n+ external state)\n+- The input can be disabled and its value changed by other interactions\n+- You need to validate or transform input before it appears\n+- You need to prevent certain values from being entered\n+\n+Use uncontrolled inputs when:\n+\n+- Only the user can change the value through direct interaction with that input\n+- You just need to read the value on events (submit, blur, etc.)\n+\n+## Navigation\n+\n+- [Pattern: data loading](./patterns-data-loading.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/patterns-setup.md b/docs/agents/remix/component/patterns-setup.md\nnew file mode 100644\nindex 0000000..b61fd0d\n--- /dev/null\n+++ b/docs/agents/remix/component/patterns-setup.md\n@@ -0,0 +1,148 @@\n+# Pattern: setup scope\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/patterns.md\n+\n+The setup scope is perfect for one-time initialization.\n+\n+## Initializing instances\n+\n+```tsx\n+function CacheExample(handle: Handle, setup: { cacheSize: number }) {\n+\t// Initialize cache once\n+\tlet cache = new Map()\n+\tlet maxSize = setup.cacheSize\n+\n+\treturn (props: { key: string; value: any }) => {\n+\t\t// Use cache in render\n+\t\tif (cache.has(props.key)) {\n+\t\t\treturn

Cached: {cache.get(props.key)}

\n+\t\t}\n+\t\tcache.set(props.key, props.value)\n+\t\tif (cache.size > maxSize) {\n+\t\t\tlet firstKey = cache.keys().next().value\n+\t\t\tcache.delete(firstKey)\n+\t\t}\n+\t\treturn

New: {props.value}

\n+\t}\n+}\n+```\n+\n+## Third-party SDKs\n+\n+```tsx\n+function Analytics(handle: Handle, setup: { apiKey: string }) {\n+\t// Initialize SDK once\n+\tlet analytics = new AnalyticsSDK(setup.apiKey)\n+\n+\t// Cleanup on disconnect\n+\thandle.signal.addEventListener('abort', () => {\n+\t\tanalytics.disconnect()\n+\t})\n+\n+\treturn (props: { event: string; data?: any }) => {\n+\t\t// SDK is ready to use\n+\t\treturn

Tracking: {props.event}

\n+\t}\n+}\n+```\n+\n+## Event emitters\n+\n+```tsx\n+import { TypedEventTarget } from '@remix-run/interaction'\n+\n+class DataEvent extends Event {\n+\tconstructor(public value: string) {\n+\t\tsuper('data')\n+\t}\n+}\n+\n+class DataEmitter extends TypedEventTarget<{ data: DataEvent }> {\n+\temitData(value: string) {\n+\t\tthis.dispatchEvent(new DataEvent(value))\n+\t}\n+}\n+\n+function EventListener(handle: Handle, setup: DataEmitter) {\n+\t// Set up listeners once with automatic cleanup\n+\thandle.on(setup, {\n+\t\tdata(event) {\n+\t\t\t// Handle data\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () =>

Listening for events...

\n+}\n+```\n+\n+## Window and document events\n+\n+```tsx\n+function WindowResizeTracker(handle: Handle) {\n+\tlet width = window.innerWidth\n+\tlet height = window.innerHeight\n+\n+\t// Set up global listeners once\n+\thandle.on(window, {\n+\t\tresize() {\n+\t\t\twidth = window.innerWidth\n+\t\t\theight = window.innerHeight\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () => (\n+\t\t

\n+\t\t\tWindow size: {width} x {height}\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Initializing state from props\n+\n+```tsx\n+function Timer(handle: Handle, setup: { initialSeconds: number }) {\n+\t// Initialize from setup prop\n+\tlet seconds = setup.initialSeconds\n+\tlet interval: number | null = null\n+\n+\tfunction start() {\n+\t\tif (interval) return\n+\t\tinterval = setInterval(() => {\n+\t\t\tseconds--\n+\t\t\tif (seconds <= 0) {\n+\t\t\t\tstop()\n+\t\t\t}\n+\t\t\thandle.update()\n+\t\t}, 1000)\n+\t}\n+\n+\tfunction stop() {\n+\t\tif (interval) {\n+\t\t\tclearInterval(interval)\n+\t\t\tinterval = null\n+\t\t}\n+\t}\n+\n+\t// Cleanup on disconnect\n+\thandle.signal.addEventListener('abort', stop)\n+\n+\treturn (props: { paused?: boolean }) => {\n+\t\tif (!props.paused && !interval) {\n+\t\t\tstart()\n+\t\t} else if (props.paused && interval) {\n+\t\t\tstop()\n+\t\t}\n+\n+\t\treturn

Time remaining: {seconds}s

\n+\t}\n+}\n+```\n+\n+## Navigation\n+\n+- [Pattern: focus and scroll](./patterns-focus-and-scroll.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/patterns-state.md b/docs/agents/remix/component/patterns-state.md\nnew file mode 100644\nindex 0000000..27caec1\n--- /dev/null\n+++ b/docs/agents/remix/component/patterns-state.md\n@@ -0,0 +1,125 @@\n+# Pattern: state management\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/patterns.md\n+\n+Common patterns and best practices for building components.\n+\n+## Use minimal component state\n+\n+Only store state that's needed for rendering. Derive computed values instead of\n+storing them, and avoid storing input state that you don't need.\n+\n+Derive computed values:\n+\n+```tsx\n+// BAD: Storing computed values\n+function TodoList(handle: Handle) {\n+\tlet todos: string[] = []\n+\tlet completedCount = 0 // Unnecessary state\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t{todos.map((todo, i) => (\n+\t\t\t\t

{todo}

\n+\t\t\t))}\n+\t\t\t

Completed: {completedCount}

\n+\t\t

\n+\t)\n+}\n+\n+// GOOD: Derive computed values in render\n+function TodoList(handle: Handle) {\n+\tlet todos: Array<{ text: string; completed: boolean }> = []\n+\n+\treturn () => {\n+\t\t// Derive computed value in render\n+\t\tlet completedCount = todos.filter((t) => t.completed).length\n+\n+\t\treturn (\n+\t\t\t

\n+\t\t\t\t{todos.map((todo, i) => (\n+\t\t\t\t\t

{todo.text}

\n+\t\t\t\t))}\n+\t\t\t\t

Completed: {completedCount}

\n+\t\t\t

\n+\t\t)\n+\t}\n+}\n+```\n+\n+Do not store input state you do not need:\n+\n+```tsx\n+// BAD: Storing input value when you only need it on submit\n+function SearchForm(handle: Handle) {\n+\tlet query = '' // Unnecessary state\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t\n+\t\t\n+\t)\n+}\n+\n+// GOOD: Read input value directly from the form\n+function SearchForm(handle: Handle) {\n+\treturn () => (\n+\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\n+\t)\n+}\n+```\n+\n+## Do work in event handlers\n+\n+Do as much work as possible in event handlers with minimal component state. Use\n+the event handler scope for transient event state, and only capture to component\n+state if it's used for rendering.\n+\n+```tsx\n+// GOOD: Store state that affects rendering\n+function Toggle(handle: Handle) {\n+\tlet isOpen = false // Needed for rendering conditional content\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t\tToggle\n+\t\t\t\n+\t\t\t{isOpen &&

Content

}\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Pattern: setup scope](./patterns-setup.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/readme-components.md b/docs/agents/remix/component/readme-components.md\nnew file mode 100644\nindex 0000000..3cca620\n--- /dev/null\n+++ b/docs/agents/remix/component/readme-components.md\n@@ -0,0 +1,103 @@\n+# Component README: state and setup\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## Component state and updates\n+\n+State is managed with plain JavaScript variables. Call `handle.update()` to\n+schedule an update:\n+\n+```tsx\n+function Counter(handle: Handle) {\n+\tlet count = 0\n+\n+\treturn () => (\n+\t\t

\n+\t\t\tCount: {count}\n+\t\t\t {\n+\t\t\t\t\t\tcount++\n+\t\t\t\t\t\thandle.update()\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\tIncrement\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Components\n+\n+All components return a render function. The setup function runs once when the\n+component is first created, and the returned render function runs on the first\n+render and every update afterward:\n+\n+```tsx\n+function Counter(handle: Handle, setup: number) {\n+\t// Setup phase: runs once\n+\tlet count = setup\n+\n+\t// Return render function: runs on every update\n+\treturn (props: { label?: string }) => (\n+\t\t

\n+\t\t\t{props.label || 'Count'}: {count}\n+\t\t\t {\n+\t\t\t\t\t\tcount++\n+\t\t\t\t\t\thandle.update()\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\tIncrement\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+```\n+\n+### Setup prop vs props\n+\n+When a component returns a function, it has two phases:\n+\n+1. **Setup phase** - The component function receives the `setup` prop and runs\n+ once. Use this for initialization.\n+2. **Render phase** - The returned function receives props and runs on initial\n+ render and every update afterward. Use this for rendering.\n+\n+The `setup` prop is separate from regular props. Only the `setup` prop is passed\n+to the setup function, and only props are passed to the render function.\n+\n+- `setup` prop for values that initialize state (e.g., `initial`,\n+ `defaultValue`)\n+- Regular props for values that change over time (e.g., `label`, `disabled`)\n+\n+```tsx\n+// Usage: setup prop goes to setup function, regular props go to render function\n+let el = \n+\n+function Counter(\n+\thandle: Handle,\n+\tsetup: number, // receives 5 (the setup prop value)\n+) {\n+\tlet count = setup // use setup for initialization\n+\n+\treturn (props: { label?: string }) => {\n+\t\t// props only receives { label: \"Total\" } - not the setup prop\n+\t\treturn (\n+\t\t\t

\n+\t\t\t\t{props.label}: {count}\n+\t\t\t

\n+\t\t)\n+\t}\n+}\n+```\n+\n+## Navigation\n+\n+- [README overview](./readme-overview.md)\n+- [Events](./readme-events.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/readme-events.md b/docs/agents/remix/component/readme-events.md\nnew file mode 100644\nindex 0000000..8f8b054\n--- /dev/null\n+++ b/docs/agents/remix/component/readme-events.md\n@@ -0,0 +1,62 @@\n+# Component README: events\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## Events\n+\n+Events use the `on` prop and are handled by\n+[`@remix-run/interaction`](../interaction/index.md). Listeners receive an\n+`AbortSignal` that's aborted when the component is disconnected or the handler\n+is re-entered.\n+\n+```tsx\n+function SearchInput(handle: Handle) {\n+\tlet query = ''\n+\n+\treturn () => (\n+\t\t {\n+\t\t\t\t\tquery = event.currentTarget.value\n+\t\t\t\t\thandle.update()\n+\n+\t\t\t\t\t// Pass the signal to abort the fetch on re-entry or node removal\n+\t\t\t\t\t// This avoids race conditions in the UI and manages cleanup\n+\t\t\t\t\tfetch(`/search?q=${query}`, { signal })\n+\t\t\t\t\t\t.then((res) => res.json())\n+\t\t\t\t\t\t.then((results) => {\n+\t\t\t\t\t\t\tif (signal.aborted) return\n+\t\t\t\t\t\t\t// Update results\n+\t\t\t\t\t\t})\n+\t\t\t\t},\n+\t\t\t}}\n+\t\t/>\n+\t)\n+}\n+```\n+\n+You can also listen to global event targets like `document` or `window` using\n+`handle.on()` with automatic cleanup on component removal:\n+\n+```tsx\n+function KeyboardTracker(handle: Handle) {\n+\tlet keys: string[] = []\n+\n+\thandle.on(document, {\n+\t\tkeydown: (event) => {\n+\t\t\tkeys.push(event.key)\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () =>

Keys: {keys.join(', ')}

\n+}\n+```\n+\n+## Navigation\n+\n+- [Styling and DOM connections](./readme-styling-and-connect.md)\n+- [Handle API reference](./readme-handle-api.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/readme-extras.md b/docs/agents/remix/component/readme-extras.md\nnew file mode 100644\nindex 0000000..bc7b163\n--- /dev/null\n+++ b/docs/agents/remix/component/readme-extras.md\n@@ -0,0 +1,40 @@\n+# Component README: extras\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## Fragments\n+\n+Use `Fragment` to group elements without adding extra DOM nodes:\n+\n+```tsx\n+function List(handle: Handle) {\n+\treturn () => (\n+\t\t<>\n+\t\t\t

Item 1

\n+\t\t\t

Item 2

\n+\t\t\t

Item 3

\n+\t\t\n+\t)\n+}\n+```\n+\n+## Wrapping components\n+\n+- use `Props<'div'>`\n+- use `RemixNode` not JSX.Element, etc.\n+\n+## Future\n+\n+This package is a work in progress. Future features (demo'd at Remix Jam)\n+include:\n+\n+- Server Rendering\n+- Selective Hydration\n+- `` for streamable, reloadable partial server UI\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Handle context](./readme-handle-context.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/readme-handle-api.md b/docs/agents/remix/component/readme-handle-api.md\nnew file mode 100644\nindex 0000000..2a6d500\n--- /dev/null\n+++ b/docs/agents/remix/component/readme-handle-api.md\n@@ -0,0 +1,145 @@\n+# Component README: handle API\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## Component Handle API\n+\n+Components receive a `Handle` as their first argument with the following API:\n+\n+- **`handle.update(task?)`** - Schedule an update. Optionally provide a task to\n+ run after the update.\n+- **`handle.queueTask(task)`** - Schedule a task to run after the next update.\n+ Useful for DOM operations that need to happen after rendering.\n+- **`handle.on(target, listeners)`** - Listen to an event target with automatic\n+ cleanup when the component disconnects.\n+- **`handle.signal`** - An `AbortSignal` that's aborted when the component is\n+ disconnected. Useful for cleanup.\n+- **`handle.id`** - Stable identifier per component instance.\n+- **`handle.context`** - Context API for ancestor/descendant communication.\n+\n+### `handle.update(task?)`\n+\n+Schedule an update. Optionally provide a task to run after the update completes.\n+\n+```tsx\n+function Counter(handle: Handle) {\n+\tlet count = 0\n+\n+\treturn () => (\n+\t\t {\n+\t\t\t\t\tcount++\n+\t\t\t\t\thandle.update()\n+\t\t\t\t},\n+\t\t\t}}\n+\t\t>\n+\t\t\tCount: {count}\n+\t\t\n+\t)\n+}\n+```\n+\n+You can pass a task to run after the update:\n+\n+```tsx\n+function Player(handle: Handle) {\n+\tlet isPlaying = false\n+\tlet playButton: HTMLButtonElement\n+\tlet stopButton: HTMLButtonElement\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t (playButton = node)}\n+\t\t\t\ton={{\n+\t\t\t\t\tclick: () => {\n+\t\t\t\t\t\tisPlaying = true\n+\t\t\t\t\t\thandle.update(() => {\n+\t\t\t\t\t\t\t// Focus the enabled button after update completes\n+\t\t\t\t\t\t\tstopButton.focus()\n+\t\t\t\t\t\t})\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\tPlay\n+\t\t\t\n+\t\t\t (stopButton = node)}\n+\t\t\t\ton={{\n+\t\t\t\t\tclick: () => {\n+\t\t\t\t\t\tisPlaying = false\n+\t\t\t\t\t\thandle.update(() => {\n+\t\t\t\t\t\t\t// Focus the enabled button after update completes\n+\t\t\t\t\t\t\tplayButton.focus()\n+\t\t\t\t\t\t})\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\tStop\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+```\n+\n+### `handle.queueTask(task)`\n+\n+Schedule a task to run after the next update. Useful for DOM operations that\n+need to happen after rendering.\n+\n+```tsx\n+function Form(handle: Handle) {\n+\tlet showDetails = false\n+\tlet detailsSection: HTMLElement\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t\n+\t\t\t\t {\n+\t\t\t\t\t\t\tshowDetails = event.currentTarget.checked\n+\t\t\t\t\t\t\thandle.update()\n+\t\t\t\t\t\t\tif (showDetails) {\n+\t\t\t\t\t\t\t\t// Scroll to the expanded section after it renders\n+\t\t\t\t\t\t\t\thandle.queueTask(() => {\n+\t\t\t\t\t\t\t\t\tdetailsSection.scrollIntoView({\n+\t\t\t\t\t\t\t\t\t\tbehavior: 'smooth',\n+\t\t\t\t\t\t\t\t\t\tblock: 'start',\n+\t\t\t\t\t\t\t\t\t})\n+\t\t\t\t\t\t\t\t})\n+\t\t\t\t\t\t\t}\n+\t\t\t\t\t\t},\n+\t\t\t\t\t}}\n+\t\t\t\t/>\n+\t\t\t\tShow additional details\n+\t\t\t\n+\t\t\t{showDetails && (\n+\t\t\t\t (detailsSection = node)}\n+\t\t\t\t\tcss={{\n+\t\t\t\t\t\tmarginTop: '2rem',\n+\t\t\t\t\t\tpadding: '1rem',\n+\t\t\t\t\t\tborder: '1px solid #ccc',\n+\t\t\t\t\t}}\n+\t\t\t\t>\n+\t\t\t\t\t

Additional Details

\n+\t\t\t\t\t

This section appears when the checkbox is checked.

\n+\t\t\t\t\n+\t\t\t)}\n+\t\t\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Handle listeners and signals](./readme-handle-listeners.md)\n+- [Handle context](./readme-handle-context.md)\n+- [Fragments and future work](./readme-extras.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/readme-handle-context.md b/docs/agents/remix/component/readme-handle-context.md\nnew file mode 100644\nindex 0000000..32d79b1\n--- /dev/null\n+++ b/docs/agents/remix/component/readme-handle-context.md\n@@ -0,0 +1,101 @@\n+# Component README: handle context\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## `handle.context`\n+\n+Context API for ancestor/descendant communication. All components are potential\n+context providers and consumers. Use `handle.context.set()` to provide values\n+and `handle.context.get()` to consume them.\n+\n+```tsx\n+function App(handle: Handle<{ theme: string }>) {\n+\thandle.context.set({ theme: 'dark' })\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t

\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+\n+function Header(handle: Handle) {\n+\t// Consume context from App\n+\tlet { theme } = handle.context.get(App)\n+\treturn () => (\n+\t\t\n+\t\t\tHeader\n+\t\t\n+\t)\n+}\n+```\n+\n+Setting context values does not automatically trigger updates. If a provider\n+needs to render its own context values, call `handle.update()` after setting\n+them. However, since providers often don't render context values themselves,\n+calling `update()` can cause expensive updates of the entire subtree. Instead,\n+make your context an\n+[EventTarget](https://developer.mozilla.org/en-US/docs/Web/API/EventTarget) and\n+have consumers subscribe to changes.\n+\n+```tsx\n+import { TypedEventTarget } from '@remix-run/interaction'\n+\n+class Theme extends TypedEventTarget<{ change: Event }> {\n+\t#value: 'light' | 'dark' = 'light'\n+\n+\tget value() {\n+\t\treturn this.#value\n+\t}\n+\n+\tsetValue(value: string) {\n+\t\tthis.#value = value\n+\t\tthis.dispatchEvent(new Event('change'))\n+\t}\n+}\n+\n+function App(handle: Handle) {\n+\tlet theme = new Theme()\n+\thandle.context.set(theme)\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t {\n+\t\t\t\t\t\t// no updates in the parent component\n+\t\t\t\t\t\ttheme.setValue(theme.value === 'light' ? 'dark' : 'light')\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\tToggle Theme\n+\t\t\t\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+\n+function ThemedContent(handle: Handle) {\n+\tlet theme = handle.context.get(App)\n+\n+\t// Subscribe to theme changes and update when it changes\n+\thandle.on(theme, { change: () => handle.update() })\n+\n+\treturn () => (\n+\t\t

\n+\t\t\tCurrent theme: {theme.value}\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Handle API reference](./readme-handle-api.md)\n+- [Fragments and future work](./readme-extras.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/readme-handle-listeners.md b/docs/agents/remix/component/readme-handle-listeners.md\nnew file mode 100644\nindex 0000000..a8b6345\n--- /dev/null\n+++ b/docs/agents/remix/component/readme-handle-listeners.md\n@@ -0,0 +1,69 @@\n+# Component README: handle listeners\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## `handle.on(target, listeners)`\n+\n+Listen to an\n+[EventTarget](https://developer.mozilla.org/en-US/docs/Web/API/EventTarget) with\n+automatic cleanup when the component disconnects. Ideal for listening to events\n+on global event targets like `document` and `window`.\n+\n+```tsx\n+function KeyboardTracker(handle: Handle) {\n+\tlet keys: string[] = []\n+\n+\thandle.on(document, {\n+\t\tkeydown: (event) => {\n+\t\t\tkeys.push(event.key)\n+\t\t\thandle.update()\n+\t\t},\n+\t})\n+\n+\treturn () =>

Keys: {keys.join(', ')}

\n+}\n+```\n+\n+The listeners are automatically removed when the component is disconnected, so\n+you don't need to manually clean up.\n+\n+## `handle.signal`\n+\n+An `AbortSignal` that's aborted when the component is disconnected. Useful for\n+cleanup operations.\n+\n+```tsx\n+function Clock(handle: Handle) {\n+\tlet interval = setInterval(() => {\n+\t\t// clear the interval when the component is disconnected\n+\t\tif (handle.signal.aborted) {\n+\t\t\tclearInterval(interval)\n+\t\t\treturn\n+\t\t}\n+\t\thandle.update()\n+\t}, 1000)\n+\treturn () => {new Date().toString()}\n+}\n+```\n+\n+## `handle.id`\n+\n+Stable identifier per component instance. Useful for HTML APIs like `htmlFor`,\n+`aria-owns`, etc. so consumers don't have to supply an id.\n+\n+```tsx\n+function LabeledInput(handle: Handle) {\n+\treturn () => (\n+\t\t

\n+\t\t\tName\n+\t\t\t\n+\t\t

\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Handle API reference](./readme-handle-api.md)\n+- [Handle context](./readme-handle-context.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/readme-overview.md b/docs/agents/remix/component/readme-overview.md\nnew file mode 100644\nindex 0000000..9207d47\n--- /dev/null\n+++ b/docs/agents/remix/component/readme-overview.md\n@@ -0,0 +1,58 @@\n+# Component README: overview\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## Overview\n+\n+A minimal component system that leans on JavaScript and DOM primitives.\n+\n+## Features\n+\n+- **JSX Runtime** - Convenient JSX syntax\n+- **Component State** - State managed with plain JavaScript variables\n+- **Manual Updates** - Explicit control over when components update via\n+ `handle.update()`\n+- **Real DOM Events** - Events are real DOM events using\n+ [`@remix-run/interaction`](../interaction/index.md)\n+- **Inline CSS** - CSS prop with pseudo-selectors and nested rules\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/component\n+```\n+\n+## Getting started\n+\n+Create a root and render a component:\n+\n+```tsx\n+import { createRoot } from '@remix-run/component'\n+\n+function App(handle: Handle) {\n+\tlet count = 0\n+\treturn () => (\n+\t\t {\n+\t\t\t\t\tcount++\n+\t\t\t\t\thandle.update()\n+\t\t\t\t},\n+\t\t\t}}\n+\t\t>\n+\t\t\tCount: {count}\n+\t\t\n+\t)\n+}\n+\n+createRoot(document.body).render()\n+```\n+\n+Components are functions that receive a `Handle` as their first argument. They\n+must return a render function that receives props.\n+\n+## Navigation\n+\n+- [Component state and setup props](./readme-components.md)\n+- [Events](./readme-events.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/readme-styling-and-connect.md b/docs/agents/remix/component/readme-styling-and-connect.md\nnew file mode 100644\nindex 0000000..69d8cc9\n--- /dev/null\n+++ b/docs/agents/remix/component/readme-styling-and-connect.md\n@@ -0,0 +1,158 @@\n+# Component README: styling and connect\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/component\n+\n+## CSS prop\n+\n+Use the `css` prop for inline styles with pseudo-selectors and nested rules:\n+\n+```tsx\n+function Button(handle: Handle) {\n+\treturn () => (\n+\t\t\n+\t\t\tClick me\n+\t\t\n+\t)\n+}\n+```\n+\n+The syntax mirrors modern CSS nesting, but in object form. Use `&` to reference\n+the current element in pseudo-selectors, pseudo-elements, and attribute\n+selectors. Use class names or other selectors directly for child selectors:\n+\n+```css\n+.button {\n+\tcolor: white;\n+\tbackground-color: blue;\n+\n+\t&:hover {\n+\t\tbackground-color: darkblue;\n+\t}\n+\n+\t&::before {\n+\t\tcontent: '';\n+\t\tposition: absolute;\n+\t}\n+\n+\t&[aria-selected='true'] {\n+\t\tborder: 2px solid yellow;\n+\t}\n+\n+\t.icon {\n+\t\twidth: 16px;\n+\t\theight: 16px;\n+\t}\n+\n+\t@media (max-width: 768px) {\n+\t\tpadding: 8px;\n+\t}\n+}\n+```\n+\n+```tsx\n+function Button(handle: Handle) {\n+\treturn () => (\n+\t\t\n+\t\t\t*\n+\t\t\tClick me\n+\t\t\n+\t)\n+}\n+```\n+\n+## Connect prop\n+\n+Use the `connect` prop to get a reference to the DOM node after it's rendered.\n+This is useful for DOM operations like focusing elements, scrolling, or\n+measuring dimensions.\n+\n+```tsx\n+function Form(handle: Handle) {\n+\tlet inputRef: HTMLInputElement\n+\n+\treturn () => (\n+\t\t

\n+\t\t\t (inputRef = node)}\n+\t\t\t/>\n+\t\t\t {\n+\t\t\t\t\t\t// Select it from other parts of the form\n+\t\t\t\t\t\tinputRef.select()\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t>\n+\t\t\t\tFocus Input\n+\t\t\t\n+\t\t\n+\t)\n+}\n+```\n+\n+The `connect` callback can optionally receive an `AbortSignal` as a second\n+parameter, which is aborted when the element is removed from the DOM:\n+\n+```tsx\n+function Component(handle: Handle) {\n+\treturn () => (\n+\t\t {\n+\t\t\t\t// Set up something that needs cleanup\n+\t\t\t\tlet observer = new ResizeObserver(() => {\n+\t\t\t\t\t// handle resize\n+\t\t\t\t})\n+\t\t\t\tobserver.observe(node)\n+\n+\t\t\t\t// Clean up when element is removed\n+\t\t\t\tsignal.addEventListener('abort', () => {\n+\t\t\t\t\tobserver.disconnect()\n+\t\t\t\t})\n+\t\t\t}}\n+\t\t>\n+\t\t\tContent\n+\t\t\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Component state and setup props](./readme-components.md)\n+- [Handle API reference](./readme-handle-api.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/spring-advanced.md b/docs/agents/remix/component/spring-advanced.md\nnew file mode 100644\nindex 0000000..f4e3b7a\n--- /dev/null\n+++ b/docs/agents/remix/component/spring-advanced.md\n@@ -0,0 +1,60 @@\n+# Spring advanced usage\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/spring.md\n+\n+## Custom springs\n+\n+Customize spring parameters for finer control:\n+\n+```tsx\n+import { spring } from '@remix-run/component'\n+\n+let custom = spring({\n+\tmass: 1,\n+\tstiffness: 170,\n+\tdamping: 26,\n+\tvelocity: 0,\n+})\n+```\n+\n+Available parameters:\n+\n+- `mass` - Higher values move slower\n+- `stiffness` - Higher values move faster\n+- `damping` - Higher values reduce oscillation\n+- `velocity` - Initial velocity\n+\n+## Using for JS animations\n+\n+You can use the spring to compute keyframes over time for JavaScript-driven\n+animations:\n+\n+```tsx\n+import { spring } from '@remix-run/component'\n+\n+let { duration, easing } = spring('bouncy')\n+\n+let keyframes = [{ transform: 'scale(0.9)' }, { transform: 'scale(1)' }]\n+\n+element.animate(keyframes, {\n+\tduration,\n+\teasing,\n+})\n+```\n+\n+## Reading raw values\n+\n+Use `spring()` to compute raw animation values in a render loop:\n+\n+```ts\n+import { spring } from '@remix-run/component'\n+\n+let springValue = spring({ mass: 1, stiffness: 170, damping: 26 })\n+// springValue.duration, springValue.easing\n+```\n+\n+## Navigation\n+\n+- [Spring basics](./spring-basics.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/spring-basics.md b/docs/agents/remix/component/spring-basics.md\nnew file mode 100644\nindex 0000000..fc718e1\n--- /dev/null\n+++ b/docs/agents/remix/component/spring-basics.md\n@@ -0,0 +1,62 @@\n+# Spring basics\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/spring.md\n+\n+The `spring` utility computes duration and easing values for natural\n+spring-based motion.\n+\n+## Basic usage\n+\n+```tsx\n+import { spring } from '@remix-run/component'\n+\n+let { duration, easing } = spring()\n+```\n+\n+Use the returned values with the `animate` prop:\n+\n+```tsx\n+\n+```\n+\n+## Presets\n+\n+Available presets:\n+\n+- `default`\n+- `fast`\n+- `slow`\n+- `gentle`\n+- `bouncy`\n+\n+```tsx\n+

\n+```\n+\n+## Using with CSS transitions\n+\n+You can also use the values with CSS transitions:\n+\n+```tsx\n+let { duration, easing } = spring()\n+\n+\n+```\n+\n+## Navigation\n+\n+- [Spring advanced usage](./spring-advanced.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/styling-basics.md b/docs/agents/remix/component/styling-basics.md\nnew file mode 100644\nindex 0000000..d4c6efc\n--- /dev/null\n+++ b/docs/agents/remix/component/styling-basics.md\n@@ -0,0 +1,84 @@\n+# Styling basics\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/styling.md\n+\n+The `css` prop provides inline styling with support for pseudo-selectors,\n+pseudo-elements, attribute selectors, descendant selectors, and media queries.\n+It follows modern CSS nesting selector rules.\n+\n+## Basic CSS prop\n+\n+```tsx\n+function Button() {\n+\treturn () => (\n+\t\t\n+\t\t\tClick me\n+\t\t\n+\t)\n+}\n+```\n+\n+## CSS prop vs style prop\n+\n+The `css` prop produces static styles that are inserted into the document as CSS\n+rules, while the `style` prop applies styles directly to the element. For\n+dynamic styles that change frequently, use the `style` prop for better\n+performance:\n+\n+```tsx\n+// BAD: Using css prop for dynamic styles\n+function ProgressBar(handle: Handle) {\n+\tlet progress = 0\n+\n+\treturn () => (\n+\t\t\n+\t\t\t{progress}%\n+\t\t

\n+\t)\n+}\n+\n+// GOOD: Using style prop for dynamic styles\n+function ProgressBar(handle: Handle) {\n+\tlet progress = 0\n+\n+\treturn () => (\n+\t\t\n+\t\t\t{progress}%\n+\t\t\n+\t)\n+}\n+```\n+\n+Use the `css` prop for:\n+\n+- Static styles that don't change\n+- Styles that need pseudo-selectors (`:hover`, `:focus`, etc.)\n+- Styles that need media queries\n+\n+Use the `style` prop for:\n+\n+- Dynamic styles that change based on state or props\n+- Computed values that update frequently\n+\n+## Navigation\n+\n+- [Styling selectors](./styling-selectors.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/styling-nesting.md b/docs/agents/remix/component/styling-nesting.md\nnew file mode 100644\nindex 0000000..80a4c27\n--- /dev/null\n+++ b/docs/agents/remix/component/styling-nesting.md\n@@ -0,0 +1,105 @@\n+# Styling with nested selectors\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/styling.md\n+\n+## When to use nested selectors\n+\n+Use nested selectors when parent state affects children. Do not nest when you\n+can style the element directly.\n+\n+This is preferable to creating JavaScript state and passing it around. Instead\n+of managing hover/focus state in JavaScript and passing it as props, use CSS\n+nested selectors to let the browser handle state transitions declaratively.\n+\n+Use nested selectors when:\n+\n+1. Parent state affects children - Parent hover/focus/state changes child\n+ styling (prefer this over JavaScript state management)\n+2. Styling descendant elements - Avoid duplicating styles on every child or\n+ creating new components just for styling\n+\n+Do not nest when:\n+\n+- Styling the element's own pseudo-states (hover, focus, etc.)\n+- The element controls its own styling\n+\n+Example: Parent hover affects children (use nested selectors, not JavaScript\n+state):\n+\n+```tsx\n+// BAD: Managing hover state in JavaScript\n+function CardWithJSState(handle: Handle) {\n+\tlet isHovered = false\n+\n+\treturn (props: { children: RemixNode }) => (\n+\t\t\n+\t\t\t\n+\t\t\t\tTitle\n+\t\t\t\n+\t\t\t{props.children}\n+\t\t\n+\t)\n+}\n+\n+// GOOD: CSS nested selectors handle state declaratively\n+function Card(handle: Handle) {\n+\treturn (props: { children: RemixNode }) => (\n+\t\t\n+\t\t\t

Title

\n+\t\t\t{props.children}\n+\t\t\n+\t)\n+}\n+```\n+\n+Example: Element's own hover (style directly, no nesting needed):\n+\n+```tsx\n+function Button() {\n+\treturn () => (\n+\t\t\n+\t\t\tHover me\n+\t\t\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Styling selectors](./styling-selectors.md)\n+- [Styling responsive and examples](./styling-responsive.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/styling-responsive.md b/docs/agents/remix/component/styling-responsive.md\nnew file mode 100644\nindex 0000000..fa5d6cc\n--- /dev/null\n+++ b/docs/agents/remix/component/styling-responsive.md\n@@ -0,0 +1,94 @@\n+# Styling responsive and examples\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/styling.md\n+\n+## Media queries\n+\n+Use `@media` for responsive design:\n+\n+```tsx\n+function ResponsiveGrid() {\n+\treturn (props: { children: RemixNode }) => (\n+\t\t\n+\t\t\t{props.children}\n+\t\t\n+\t)\n+}\n+```\n+\n+## Complete example\n+\n+Here's a comprehensive example demonstrating parent-state-affecting-children and\n+media queries:\n+\n+```tsx\n+function ProductCard() {\n+\treturn (props: { title: string; price: number; image: string }) => (\n+\t\t\n+\t\t\t

\n+\t\t\t

\n+\t\t\t\t

\n+\t\t\t\t\t{props.title}\n+\t\t\t\t

\n+\t\t\t\t

${props.price}

\n+\t\t\t\t\n+\t\t\t\t\tAdd to Cart\n+\t\t\t\t\n+\t\t\t

\n+\t\t\n+\t)\n+}\n+```\n+\n+This example demonstrates:\n+\n+- Parent hover affecting children: Card hover changes title color and button\n+ background\n+- Styles on elements themselves: Each element has its own `css` prop\n+- Element's own states: Button's `:active` state styled directly on the button\n+- Media queries: Responsive adjustments applied directly to elements\n+\n+## See also\n+\n+- [Spring basics](./spring-basics.md) - Physics-based animation easing\n+- [Animate basics](./animate-basics.md) - Declarative animations\n+\n+## Navigation\n+\n+- [Styling selectors](./styling-selectors.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/styling-selectors.md b/docs/agents/remix/component/styling-selectors.md\nnew file mode 100644\nindex 0000000..9c9019d\n--- /dev/null\n+++ b/docs/agents/remix/component/styling-selectors.md\n@@ -0,0 +1,112 @@\n+# Styling selectors\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/styling.md\n+\n+## Pseudo-selectors\n+\n+Use `&` to reference the current element in pseudo-selectors:\n+\n+```tsx\n+function Button() {\n+\treturn () => (\n+\t\t\n+\t\t\tClick me\n+\t\t\n+\t)\n+}\n+```\n+\n+## Pseudo-elements\n+\n+Use `&::before` and `&::after` for pseudo-elements:\n+\n+```tsx\n+function Badge() {\n+\treturn (props: { count: number }) => (\n+\t\t\n+\t\t\tNotifications\n+\t\t\n+\t)\n+}\n+```\n+\n+## Attribute selectors\n+\n+Use `&[attribute]` for attribute selectors:\n+\n+```tsx\n+function Input() {\n+\treturn (props: { required?: boolean }) => (\n+\t\t\n+\t)\n+}\n+```\n+\n+## Descendant selectors\n+\n+Use class names or element selectors directly for descendant selectors:\n+\n+```tsx\n+function Card() {\n+\treturn (props: { children: RemixNode }) => (\n+\t\t\n+\t\t\t

Title

\n+\t\t\t{props.children}\n+\t\t\n+\t)\n+}\n+```\n+\n+## Navigation\n+\n+- [Styling basics](./styling-basics.md)\n+- [Styling with nested selectors](./styling-nesting.md)\n+- [Styling responsive and examples](./styling-responsive.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/testing.md b/docs/agents/remix/component/testing.md\nnew file mode 100644\nindex 0000000..c6108ba\n--- /dev/null\n+++ b/docs/agents/remix/component/testing.md\n@@ -0,0 +1,58 @@\n+# Testing\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/testing.md\n+\n+Testing component behavior is just JavaScript. Use your favorite test runner.\n+\n+## Example\n+\n+```tsx\n+import { createRoot } from '@remix-run/component'\n+\n+describe('Counter', () => {\n+\tit('increments when clicked', () => {\n+\t\tlet container = document.createElement('div')\n+\t\tlet root = createRoot(container)\n+\t\troot.render()\n+\n+\t\tlet button = container.querySelector('button')!\n+\t\tbutton.click()\n+\n+\t\texpect(button.textContent).toBe('Count: 1')\n+\t})\n+})\n+```\n+\n+## Testing async behavior\n+\n+Use `AbortSignal` in event handlers to ensure predictable async behavior in\n+tests, just like in production.\n+\n+```tsx\n+it('aborts stale async work', async () => {\n+\tlet signal: AbortSignal | undefined\n+\n+\tfunction Search(handle: Handle) {\n+\t\treturn () => (\n+\t\t\t setTimeout(resolve, 10))\n+\t\t\t\t\t\tif (signal?.aborted) return\n+\t\t\t\t\t},\n+\t\t\t\t}}\n+\t\t\t/>\n+\t\t)\n+\t}\n+\n+\t// render, trigger input twice quickly...\n+})\n+```\n+\n+## Navigation\n+\n+- [Getting started](./getting-started.md)\n+- [Handle updates and tasks](./handle-updates.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/tween-advanced.md b/docs/agents/remix/component/tween-advanced.md\nnew file mode 100644\nindex 0000000..9a82ae8\n--- /dev/null\n+++ b/docs/agents/remix/component/tween-advanced.md\n@@ -0,0 +1,41 @@\n+# Tween advanced usage\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/tween.md\n+\n+## Custom curves\n+\n+Define a custom cubic-bezier curve:\n+\n+```tsx\n+import { tween } from '@remix-run/component'\n+\n+let custom = tween({\n+\tduration: 400,\n+\teasing: 'cubic-bezier(0.34, 1.56, 0.64, 1)',\n+})\n+```\n+\n+## When to use tween vs spring\n+\n+Use `tween` when:\n+\n+- You want precise duration control\n+- You want standard easing curves\n+- You want predictable timing (no overshoot)\n+\n+Use `spring` when:\n+\n+- You want natural physics-based motion\n+- You want smooth interruption handling\n+- You want dynamic response based on motion values\n+\n+## See also\n+\n+- [Spring basics](./spring-basics.md)\n+- [Animate basics](./animate-basics.md)\n+\n+## Navigation\n+\n+- [Tween basics](./tween-basics.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/component/tween-basics.md b/docs/agents/remix/component/tween-basics.md\nnew file mode 100644\nindex 0000000..ecdcd22\n--- /dev/null\n+++ b/docs/agents/remix/component/tween-basics.md\n@@ -0,0 +1,38 @@\n+# Tween basics\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/component/docs/tween.md\n+\n+The `tween` utility generates duration and easing for time-based animations.\n+\n+## Basic usage\n+\n+```tsx\n+import { tween } from '@remix-run/component'\n+\n+let { duration, easing } = tween()\n+```\n+\n+Use with `animate`:\n+\n+```tsx\n+\n+```\n+\n+## Presets\n+\n+```tsx\n+

\n+```\n+\n+## Navigation\n+\n+- [Tween advanced usage](./tween-advanced.md)\n+- [Component index](./index.md)\ndiff --git a/docs/agents/remix/compression-middleware/index.md b/docs/agents/remix/compression-middleware/index.md\nnew file mode 100644\nindex 0000000..5ae95c1\n--- /dev/null\n+++ b/docs/agents/remix/compression-middleware/index.md\n@@ -0,0 +1,45 @@\n+# compression-middleware\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/compression-middleware\n+\n+## Overview\n+\n+Middleware for compressing HTTP responses for use with\n+[`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router).\n+\n+Automatically compresses responses using `gzip`, `brotli`, or `deflate` based on\n+the client's `Accept-Encoding` header, with intelligent defaults for media type\n+filtering and threshold-based compression.\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/compression-middleware\n+```\n+\n+## Usage\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { compression } from '@remix-run/compression-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [compression()],\n+})\n+```\n+\n+The middleware will automatically compress responses for compressible MIME types\n+when:\n+\n+- The client supports compression (`Accept-Encoding` header with a supported\n+ encoding)\n+- The response is large enough to benefit from compression (>=1024 bytes if\n+ `Content-Length` is present, by default)\n+- The response hasn't already been compressed\n+- The response doesn't advertise range support (`Accept-Ranges: bytes`)\n+\n+## Navigation\n+\n+- [Options and configuration](./options.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/compression-middleware/options.md b/docs/agents/remix/compression-middleware/options.md\nnew file mode 100644\nindex 0000000..88317d0\n--- /dev/null\n+++ b/docs/agents/remix/compression-middleware/options.md\n@@ -0,0 +1,167 @@\n+# Compression options\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/compression-middleware\n+\n+## Threshold\n+\n+**Default:** `1024` (only enforced if `Content-Length` is present)\n+\n+Set the minimum response size in bytes to compress:\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { compression } from '@remix-run/compression-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tcompression({\n+\t\t\tthreshold: 2048, // Only compress responses >=2KB\n+\t\t}),\n+\t],\n+})\n+```\n+\n+## Encodings\n+\n+**Default:** `['br', 'gzip', 'deflate']`\n+\n+Customize which compression algorithms to support:\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { compression } from '@remix-run/compression-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tcompression({\n+\t\t\tencodings: ['br', 'gzip'], // Only use Brotli and Gzip\n+\t\t}),\n+\t],\n+})\n+```\n+\n+The `encodings` option can also be a function that receives the response:\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { compression } from '@remix-run/compression-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tcompression({\n+\t\t\tencodings: (response) => {\n+\t\t\t\t// Use different encodings for server-sent events\n+\t\t\t\tlet contentType = response.headers.get('Content-Type')\n+\t\t\t\treturn contentType?.startsWith('text/event-stream;')\n+\t\t\t\t\t? ['gzip', 'deflate']\n+\t\t\t\t\t: ['br', 'gzip', 'deflate']\n+\t\t\t},\n+\t\t}),\n+\t],\n+})\n+```\n+\n+## Filter media type\n+\n+**Default:** Uses `isCompressibleMimeType()` from\n+[`@remix-run/mime`](https://github.com/remix-run/remix/tree/main/packages/mime)\n+\n+You can customize this behavior with the `filterMediaType` option:\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { compression } from '@remix-run/compression-middleware'\n+import { isCompressibleMimeType } from '@remix-run/mime'\n+\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tcompression({\n+\t\t\tfilterMediaType(mediaType) {\n+\t\t\t\t// Add a custom media type to the default compressible list\n+\t\t\t\treturn (\n+\t\t\t\t\tisCompressibleMimeType(mediaType) ||\n+\t\t\t\t\tmediaType === 'application/vnd.example+data'\n+\t\t\t\t)\n+\t\t\t},\n+\t\t}),\n+\t],\n+})\n+```\n+\n+## Compression options\n+\n+**Default:** Uses Node.js defaults for\n+[zlib](https://nodejs.org/api/zlib.html#class-options) and\n+[Brotli](https://nodejs.org/api/zlib.html#class-brotlioptions), with automatic\n+flush handling for server-sent events.\n+\n+You can pass options options to the underlying Node.js `zlib` and `brotli`\n+compressors for fine-grained control:\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { compression } from '@remix-run/compression-middleware'\n+import { zlib } from 'node:zlib'\n+\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tcompression({\n+\t\t\tzlib: {\n+\t\t\t\tlevel: 6,\n+\t\t\t},\n+\t\t\tbrotli: {\n+\t\t\t\tparams: {\n+\t\t\t\t\t[zlib.constants.BROTLI_PARAM_QUALITY]: 4,\n+\t\t\t\t},\n+\t\t\t},\n+\t\t}),\n+\t],\n+})\n+```\n+\n+Like `encodings`, both `zlib` and `brotli` options can also be functions that\n+receive the response:\n+\n+```ts\n+import zlib from 'node:zlib'\n+import { createRouter } from '@remix-run/fetch-router'\n+import { compression } from '@remix-run/compression-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tcompression({\n+\t\t\tbrotli: (response) => {\n+\t\t\t\tlet contentType = response.headers.get('Content-Type')\n+\t\t\t\treturn {\n+\t\t\t\t\tparams: {\n+\t\t\t\t\t\t[zlib.constants.BROTLI_PARAM_QUALITY]: contentType?.startsWith(\n+\t\t\t\t\t\t\t'text/html;',\n+\t\t\t\t\t\t)\n+\t\t\t\t\t\t\t? 4\n+\t\t\t\t\t\t\t: 11,\n+\t\t\t\t\t},\n+\t\t\t\t}\n+\t\t\t},\n+\t\t}),\n+\t],\n+})\n+```\n+\n+## Related packages\n+\n+- [`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Router for the web Fetch API\n+- [`@remix-run/mime`](https://github.com/remix-run/remix/tree/main/packages/mime) -\n+ MIME type utilities\n+- [`@remix-run/response`](https://github.com/remix-run/remix/tree/main/packages/response) -\n+ Response helpers\n+\n+## License\n+\n+MIT\n+\n+## Navigation\n+\n+- [Compression middleware overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/cookie.md b/docs/agents/remix/cookie.md\nnew file mode 100644\nindex 0000000..0415b99\n--- /dev/null\n+++ b/docs/agents/remix/cookie.md\n@@ -0,0 +1,144 @@\n+# cookie\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/cookie\n+\n+## README\n+\n+Simplify HTTP cookie management in JavaScript with type-safe, secure cookie\n+handling. `@remix-run/cookie` provides a clean, intuitive API for creating,\n+parsing, and serializing HTTP cookies with built-in support for signing, secret\n+rotation, and comprehensive cookie attribute management.\n+\n+HTTP cookies are essential for web applications, from session management and\n+user preferences to authentication tokens and tracking. While the standard\n+cookie parsing libraries provide basic functionality, they often leave complex\n+scenarios like secure signing, secret rotation, and type-safe value handling up\n+to you.\n+\n+## Features\n+\n+- **Secure Cookie Signing:** Built-in cryptographic signing using HMAC-SHA256 to\n+ prevent cookie tampering, with support for secret rotation without breaking\n+ existing cookies.\n+- **Secret Rotation Support:** Seamlessly rotate signing secrets while\n+ maintaining backward compatibility with existing cookies.\n+- **Web Standards Compliant:** Built on Web Crypto API and standard cookie\n+ parsing, making it runtime-agnostic (Node.js, Bun, Deno, Cloudflare Workers).\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/cookie\n+```\n+\n+## Usage\n+\n+```tsx\n+import { createCookie } from '@remix-run/cookie'\n+\n+let sessionCookie = createCookie('session', {\n+\thttpOnly: true,\n+\tsecrets: ['s3cret1'],\n+\tsecure: true,\n+})\n+\n+cookie.name // \"session\"\n+cookie.httpOnly // true\n+cookie.secure // true\n+cookie.signed // true\n+\n+// Get the value of the \"session\" cookie from the request's `Cookie` header\n+let value = await sessionCookie.parse(request.headers.get('Cookie'))\n+\n+// Set the value of the cookie in a Response's `Set-Cookie` header\n+let response = new Response('Hello, world!', {\n+\theaders: {\n+\t\t'Set-Cookie': await sessionCookie.serialize(value),\n+\t},\n+})\n+```\n+\n+### Signing Cookies\n+\n+This library supports signing cookies, which is useful for ensuring the\n+integrity of the cookie value and preventing tampering. Signing happens\n+automatically when you provide a `secrets` option to the `Cookie` constructor.\n+\n+Secret rotation is also supported, so you can easily rotate in new secrets\n+without breaking existing cookies.\n+\n+```tsx\n+import { Cookie } from '@remix-run/cookie'\n+\n+// Start with a single secret\n+let sessionCookie = createCookie('session', {\n+\tsecrets: ['secret1'],\n+})\n+\n+console.log(sessionCookie.signed) // true\n+\n+let response = new Response('Hello, world!', {\n+\theaders: {\n+\t\t'Set-Cookie': await sessionCookie.serialize(value),\n+\t},\n+})\n+```\n+\n+All cookies sent in this scenario will be signed with the secret `secret1`.\n+Later, when it's time to rotate secrets, add a new secret to the beginning of\n+the array and all existing cookies will still be able to be parsed.\n+\n+```tsx\n+let sessionCookie = createCookie('session', {\n+\tsecrets: ['secret2', 'secret1'],\n+})\n+\n+// This works for cookies signed with either secret\n+let value = await sessionCookie.parse(request.headers.get('Cookie'))\n+\n+// Newly serialized cookies will be signed with the new secret\n+let response = new Response('Hello, world!', {\n+\theaders: {\n+\t\t'Set-Cookie': await sessionCookie.serialize(value),\n+\t},\n+})\n+```\n+\n+### Custom Encoding\n+\n+By default,\n+[`encodeURIComponent`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/encodeURIComponent)\n+and\n+[`decodeURIComponent`](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/decodeURIComponent)\n+are used to encode and decode the cookie value. This is suitable for most use\n+cases, but you can provide your own functions to customize the encoding and\n+decoding of the cookie value.\n+\n+```tsx\n+let sessionCookie = createCookie('session', {\n+\tencode: (value) => value,\n+\tdecode: (value) => value,\n+})\n+```\n+\n+This can be useful for viewing the value of cookies in a human-readable format\n+in the browser's developer tools. But you should be sure that the cookie value\n+contains only characters that are\n+[valid in a cookie value](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie#attributes).\n+\n+## Related Packages\n+\n+- [`headers`](https://github.com/remix-run/remix/tree/main/packages/headers) -\n+ Type-safe HTTP header manipulation\n+- [`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Build HTTP routers using the web fetch API\n+- [`node-fetch-server`](https://github.com/remix-run/remix/tree/main/packages/node-fetch-server) -\n+ Build HTTP servers on Node.js using the web fetch API\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/data-schema.md b/docs/agents/remix/data-schema.md\nnew file mode 100644\nindex 0000000..b5dcbcd\n--- /dev/null\n+++ b/docs/agents/remix/data-schema.md\n@@ -0,0 +1,65 @@\n+# data-schema\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/data-schema\n+\n+## README\n+\n+`data-schema` is a tiny, standards-aligned validation and parsing library used\n+across Remix packages.\n+\n+- Compatible with [Standard Schema](https://standardschema.dev/) v1\n+- Runtime-agnostic (browser, Node.js, Bun, Deno, Workers)\n+- Designed for schema-first parsing with strong TypeScript inference\n+\n+## Installation\n+\n+```sh\n+npm i remix\n+```\n+\n+## Package exports\n+\n+- `remix/data-schema` - core schema builders and `parse`/`parseSafe`\n+- `remix/data-schema/checks` - reusable validation checks (`min`, `email`, etc.)\n+- `remix/data-schema/coerce` - coercion helpers for stringly input\n+- `remix/data-schema/lazy` - lazy schema support for recursive types\n+\n+## Usage\n+\n+```ts\n+import { object, parse, string } from 'remix/data-schema'\n+import { email, minLength } from 'remix/data-schema/checks'\n+import * as coerce from 'remix/data-schema/coerce'\n+\n+let User = object({\n+\tid: string(),\n+\temail: string().pipe(email()),\n+\tusername: string().pipe(minLength(3)),\n+\tage: coerce.number(),\n+})\n+\n+let user = parse(User, {\n+\tid: 'u1',\n+\temail: 'ada@example.com',\n+\tusername: 'ada',\n+\tage: '37',\n+})\n+```\n+\n+Use `parseSafe` when you want structured validation results instead of thrown\n+errors.\n+\n+## Related packages\n+\n+- [`data-table`](https://github.com/remix-run/remix/tree/main/packages/data-table) -\n+ SQL toolkit that validates writes with `data-schema`\n+- [`form-data-parser`](https://github.com/remix-run/remix/tree/main/packages/form-data-parser) -\n+ common pair for parsing request input before schema validation\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/data-table-mysql.md b/docs/agents/remix/data-table-mysql.md\nnew file mode 100644\nindex 0000000..47638cf\n--- /dev/null\n+++ b/docs/agents/remix/data-table-mysql.md\n@@ -0,0 +1,47 @@\n+# data-table-mysql\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/data-table-mysql\n+\n+## README\n+\n+MySQL adapter for `remix/data-table`.\n+\n+## Installation\n+\n+```sh\n+npm i remix mysql2\n+```\n+\n+## Usage\n+\n+```ts\n+import { createPool } from 'mysql2/promise'\n+import { createDatabase } from 'remix/data-table'\n+import { createMysqlDatabaseAdapter } from 'remix/data-table-mysql'\n+\n+let pool = createPool(process.env.DATABASE_URL as string)\n+let db = createDatabase(createMysqlDatabaseAdapter(pool))\n+```\n+\n+## Default capabilities\n+\n+- `returning: false`\n+- `savepoints: true`\n+- `upsert: true`\n+\n+MySQL has no native SQL `RETURNING`; write operations should use write metadata\n+(`affectedRows`, `insertId`) instead of returned row sets.\n+\n+## Related packages\n+\n+- [`data-table`](https://github.com/remix-run/remix/tree/main/packages/data-table)\n+- [`data-table-postgres`](https://github.com/remix-run/remix/tree/main/packages/data-table-postgres)\n+- [`data-table-sqlite`](https://github.com/remix-run/remix/tree/main/packages/data-table-sqlite)\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/data-table-postgres.md b/docs/agents/remix/data-table-postgres.md\nnew file mode 100644\nindex 0000000..8dfc8e7\n--- /dev/null\n+++ b/docs/agents/remix/data-table-postgres.md\n@@ -0,0 +1,48 @@\n+# data-table-postgres\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/data-table-postgres\n+\n+## README\n+\n+PostgreSQL adapter for `remix/data-table`.\n+\n+## Installation\n+\n+```sh\n+npm i remix pg\n+```\n+\n+## Usage\n+\n+```ts\n+import { Pool } from 'pg'\n+import { createDatabase } from 'remix/data-table'\n+import { createPostgresDatabaseAdapter } from 'remix/data-table-postgres'\n+\n+let pool = new Pool({\n+\tconnectionString: process.env.DATABASE_URL,\n+})\n+\n+let db = createDatabase(createPostgresDatabaseAdapter(pool))\n+```\n+\n+## Default capabilities\n+\n+- `returning: true`\n+- `savepoints: true`\n+- `upsert: true`\n+\n+## Related packages\n+\n+- [`data-table`](https://github.com/remix-run/remix/tree/main/packages/data-table)\n+- [`data-table-mysql`](https://github.com/remix-run/remix/tree/main/packages/data-table-mysql)\n+- [`data-table-sqlite`](https://github.com/remix-run/remix/tree/main/packages/data-table-sqlite)\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/data-table-sqlite.md b/docs/agents/remix/data-table-sqlite.md\nnew file mode 100644\nindex 0000000..493cb21\n--- /dev/null\n+++ b/docs/agents/remix/data-table-sqlite.md\n@@ -0,0 +1,50 @@\n+# data-table-sqlite\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/data-table-sqlite\n+\n+## README\n+\n+SQLite adapter for `remix/data-table`.\n+\n+## Installation\n+\n+```sh\n+npm i remix better-sqlite3\n+```\n+\n+## Usage\n+\n+```ts\n+import Database from 'better-sqlite3'\n+import { createDatabase } from 'remix/data-table'\n+import { createSqliteDatabaseAdapter } from 'remix/data-table-sqlite'\n+\n+let sqlite = new Database('app.db')\n+let db = createDatabase(createSqliteDatabaseAdapter(sqlite))\n+```\n+\n+## Cloudflare D1 note\n+\n+`remix/data-table-sqlite` expects a `better-sqlite3` connection object. For D1,\n+use a D1-specific adapter (for this repo, `worker/d1-data-table-adapter.ts`)\n+instead of `createSqliteDatabaseAdapter(...)`.\n+\n+## Default capabilities\n+\n+- `returning: true`\n+- `savepoints: true`\n+- `upsert: true`\n+\n+## Related packages\n+\n+- [`data-table`](https://github.com/remix-run/remix/tree/main/packages/data-table)\n+- [`data-table-postgres`](https://github.com/remix-run/remix/tree/main/packages/data-table-postgres)\n+- [`data-table-mysql`](https://github.com/remix-run/remix/tree/main/packages/data-table-mysql)\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/data-table.md b/docs/agents/remix/data-table.md\nnew file mode 100644\nindex 0000000..3e1d11b\n--- /dev/null\n+++ b/docs/agents/remix/data-table.md\n@@ -0,0 +1,86 @@\n+# data-table\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/data-table\n+\n+## README\n+\n+`data-table` is a typed relational query toolkit with a shared API across SQL\n+adapters.\n+\n+## Features\n+\n+- Query builder + CRUD helpers\n+- Typed selects and relation loading\n+- Schema-validated writes via `remix/data-schema`\n+- Transaction support and adapter capability detection\n+\n+## Installation\n+\n+```sh\n+npm i remix\n+```\n+\n+Install a database driver for your adapter:\n+\n+- Postgres: `npm i pg`\n+- MySQL: `npm i mysql2`\n+- SQLite: `npm i better-sqlite3`\n+\n+## Usage\n+\n+```ts\n+import * as s from 'remix/data-schema'\n+import { createDatabase, createTable } from 'remix/data-table'\n+import { createSqliteDatabaseAdapter } from 'remix/data-table-sqlite'\n+import Database from 'better-sqlite3'\n+\n+let users = createTable({\n+\tname: 'users',\n+\tcolumns: {\n+\t\tid: s.string(),\n+\t\temail: s.string(),\n+\t},\n+})\n+\n+let sqlite = new Database('app.db')\n+let db = createDatabase(createSqliteDatabaseAdapter(sqlite))\n+\n+let allUsers = await db.query(users).select().all()\n+```\n+\n+## epic-scheduler note (Cloudflare D1)\n+\n+This repository uses `remix/data-table` for D1-backed app and mock-server data\n+access, but D1 is not a `better-sqlite3` connection. We use a custom adapter at\n+`worker/d1-data-table-adapter.ts` and build the runtime in `worker/db.ts`:\n+\n+```ts\n+import { createDatabase } from 'remix/data-table'\n+import { createD1DataTableAdapter } from '#worker/d1-data-table-adapter.ts'\n+\n+let db = createDatabase(createD1DataTableAdapter(env.APP_DB))\n+```\n+\n+Table metadata and shared table definitions live in `worker/db.ts`.\n+\n+## Adapter packages\n+\n+- `remix/data-table-postgres`\n+- `remix/data-table-mysql`\n+- `remix/data-table-sqlite`\n+\n+## Related packages\n+\n+- [`data-schema`](https://github.com/remix-run/remix/tree/main/packages/data-schema) -\n+ parsing and validation primitives used by table definitions\n+- [`data-table-postgres`](https://github.com/remix-run/remix/tree/main/packages/data-table-postgres)\n+- [`data-table-mysql`](https://github.com/remix-run/remix/tree/main/packages/data-table-mysql)\n+- [`data-table-sqlite`](https://github.com/remix-run/remix/tree/main/packages/data-table-sqlite)\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/fetch-proxy.md b/docs/agents/remix/fetch-proxy.md\nnew file mode 100644\nindex 0000000..30f4d9b\n--- /dev/null\n+++ b/docs/agents/remix/fetch-proxy.md\n@@ -0,0 +1,76 @@\n+# fetch-proxy\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fetch-proxy\n+\n+## README\n+\n+`fetch-proxy` is an HTTP proxy for the\n+[JavaScript Fetch API](https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API).\n+\n+HTTP proxies are essential for many web architectures: load balancing, API\n+gateways, development servers that forward to backend services, and middleware\n+that needs to intercept and modify traffic. Traditional proxy implementations\n+often require platform-specific APIs or complex server setups.\n+\n+In the context of servers, an HTTP proxy server is a server that forwards all\n+requests it receives to another server and returns the responses it receives.\n+When you think about it this way, a\n+[`fetch` function](https://developer.mozilla.org/en-US/docs/Web/API/Window/fetch)\n+is like a mini proxy server sitting right there in your code. You send it\n+requests, it goes and talks to some other server, and it gives you back the\n+response it received.\n+\n+`fetch-proxy` allows you to easily create `fetch` functions that act as proxies\n+to \"target\" servers using the familiar web-standard Fetch API.\n+\n+## Features\n+\n+- **Web Standards** - Built on the standard\n+ [JavaScript Fetch API](https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API)\n+- **Cookie Rewriting** - Supports rewriting `Set-Cookie` headers received from\n+ target server\n+- **Forwarding Headers** - Supports `X-Forwarded-Proto` and `X-Forwarded-Host`\n+ headers\n+- **Custom Fetch** - Supports custom `fetch` implementations\n+\n+## Installation\n+\n+Install from [npm](https://www.npmjs.com/):\n+\n+```sh\n+npm i @remix-run/fetch-proxy\n+```\n+\n+## Usage\n+\n+```ts\n+import { createFetchProxy } from '@remix-run/fetch-proxy'\n+\n+// Create a proxy that sends all requests through to remix.run\n+let proxy = createFetchProxy('https://remix.run')\n+\n+// This fetch handler is probably running as part of your server somewhere...\n+function handleFetch(request: Request): Promise {\n+\treturn proxy(request)\n+}\n+\n+// Test it out by manually throwing a Request at it\n+let response = await handleFetch(new Request('https://shopify.com'))\n+\n+let text = await response.text()\n+let title = text.match(/([^<]+)<\\/title>/)[1]\n+assert(title.includes('Remix'))\n+```\n+\n+## Related Packages\n+\n+- [`node-fetch-server`](https://github.com/remix-run/remix/tree/main/packages/node-fetch-server) -\n+ Build HTTP servers for Node.js using the web fetch API\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/fetch-router/advanced-topics.md b/docs/agents/remix/fetch-router/advanced-topics.md\nnew file mode 100644\nindex 0000000..6237c9c\n--- /dev/null\n+++ b/docs/agents/remix/fetch-router/advanced-topics.md\n@@ -0,0 +1,125 @@\n+# Additional topics and HTML helpers\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fetch-router\n+\n+## Additional topics\n+\n+### Scaling your application\n+\n+- how to use a TrieMatcher\n+- how to spread controllers across multiple files\n+\n+### Error handling and aborted requests\n+\n+- wrap `router.fetch()` in a try/catch to handle errors\n+- `AbortError` is thrown when a request is aborted\n+\n+### Content negotiation\n+\n+- use `Accept.from()` from `@remix-run/headers` to serve different responses\n+ based on the client's `Accept` header\n+ - maybe put this on `context.accepts()` for convenience?\n+\n+### Sessions\n+\n+- use a custom `sessionStorage` implementation to store session data\n+- use `session.get()` and `session.set()` to get and set session data\n+- use `session.flash()` to set a flash message\n+- use `session.destroy()` to destroy the session\n+\n+### Form data and file uploads\n+\n+- use the `formData()` middleware to parse the `FormData` object from the\n+ request body\n+- use the `formData` property of the context object to access the form data\n+- use the `files` property of the context object to access the uploaded files\n+- use the `uploadHandler` option of the `formData()` middleware to handle file\n+ uploads\n+\n+### Request method override\n+\n+- use the `methodOverride()` middleware to override the request method\n+- use a hidden `<input name=\"_method\" value=\"...\">` to override the request\n+ method\n+\n+## Response helpers\n+\n+Response helpers for creating common HTTP responses are available in the\n+[`@remix-run/response`](https://github.com/remix-run/remix/tree/main/packages/response)\n+package:\n+\n+```tsx\n+import { createFileResponse } from '@remix-run/response/file'\n+import { createHtmlResponse } from '@remix-run/response/html'\n+import { createRedirectResponse } from '@remix-run/response/redirect'\n+import { compressResponse } from '@remix-run/response/compress'\n+\n+let response = createHtmlResponse('<h1>Hello</h1>')\n+let response = Response.json({ message: 'Hello' })\n+let response = createRedirectResponse('/')\n+let response = compressResponse(uncompressedResponse, request)\n+```\n+\n+See the\n+[`@remix-run/response` documentation](https://github.com/remix-run/remix/tree/main/packages/response#readme)\n+for more details.\n+\n+## Working with HTML\n+\n+For working with HTML strings and safe HTML interpolation, see the\n+[`@remix-run/html-template`](https://github.com/remix-run/remix/tree/main/packages/html-template)\n+package. It provides a `html` template tag with automatic escaping to prevent\n+XSS vulnerabilities.\n+\n+```ts\n+import { html } from '@remix-run/html-template'\n+import { createHtmlResponse } from '@remix-run/response/html'\n+\n+// Use the template tag to escape unsafe variables in HTML.\n+let unsafe = '<script>alert(1)</script>'\n+let response = createHtmlResponse(html`<h1>${unsafe}</h1>`, { status: 400 })\n+```\n+\n+The `html.raw` template tag can be used to interpolate values without escaping\n+them. This has the same semantics as `String.raw` but for HTML snippets that\n+have already been escaped or are from trusted sources:\n+\n+```ts\n+// Use html.raw as a template tag to skip escaping interpolations\n+let safeHtml = '<b>Bold</b>'\n+let content = html.raw`<div class=\"content\">${safeHtml}</div>`\n+let response = createHtmlResponse(content)\n+\n+// This is particularly useful when building HTML from multiple safe fragments\n+let header = '<header>Title</header>'\n+let body = '<main>Content</main>'\n+let footer = '<footer>Footer</footer>'\n+let page = html.raw`\n+ <!DOCTYPE html>\n+ <html>\n+ <body>\n+ ${header}\n+ ${body}\n+ ${footer}\n+ </body>\n+ </html>\n+`\n+\n+// You can nest html.raw inside html to preserve SafeHtml fragments\n+let icon = html.raw`<svg>...</svg>`\n+let button = html`<button>${icon} Click me</button>` // icon is not escaped\n+```\n+\n+**Warning**: Only use `html.raw` with trusted content. Unlike the regular `html`\n+template tag, `html.raw` does not escape its interpolations, which can lead to\n+XSS vulnerabilities if used with untrusted user input.\n+\n+See the\n+[`@remix-run/html-template` documentation](https://github.com/remix-run/remix/tree/main/packages/html-template#readme)\n+for more details.\n+\n+## Navigation\n+\n+- [fetch-router overview](./index.md)\n+- [Middleware and request context](./middleware.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/fetch-router/index.md b/docs/agents/remix/fetch-router/index.md\nnew file mode 100644\nindex 0000000..0b6f0e7\n--- /dev/null\n+++ b/docs/agents/remix/fetch-router/index.md\n@@ -0,0 +1,53 @@\n+# fetch-router\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fetch-router\n+\n+## Overview\n+\n+A minimal, composable router built on the\n+[web Fetch API](https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API) and\n+[`route-pattern`](../route-pattern). Ideal for building APIs, web services, and\n+server-rendered applications across any JavaScript runtime.\n+\n+## Features\n+\n+- **Fetch API**: Built on standard web APIs that work everywhere - Node.js, Bun,\n+ Deno, Cloudflare Workers, and browsers\n+- **Type-Safe Routing**: Leverage TypeScript for compile-time route validation\n+ and parameter inference\n+- **Composable Architecture**: Nest routers, combine middleware, and organize\n+ routes hierarchically\n+- **Declarative Route Maps**: Define your entire route structure upfront with\n+ type-safe route names and request methods\n+- **Flexible Middleware**: Apply middleware globally, per-route, or to entire\n+ route hierarchies\n+- **Easy Testing**: Use standard `fetch()` to test your routes - no special test\n+ harness required\n+\n+## Goals\n+\n+- **Simplicity**: A router should be simple to understand and use. The entire\n+ API surface fits in your head.\n+- **Composability**: Small routers combine to build large applications.\n+ Middleware and nested routers make organization natural.\n+- **Standards-Based**: Built on web standards that work across runtimes. No\n+ proprietary APIs or Node.js-specific code.\n+\n+## Installation\n+\n+```sh\n+npm i remix\n+```\n+\n+Import route definition helpers from `remix/fetch-router/routes`, and runtime\n+APIs from `remix/fetch-router`.\n+\n+## Navigation\n+\n+- [Basic usage and route maps](./usage.md)\n+- [Routing based on request method](./routing-methods.md)\n+- [Resource-based routes](./routing-resources.md)\n+- [Middleware and request context](./middleware.md)\n+- [Additional topics and HTML helpers](./advanced-topics.md)\n+- [Testing and related work](./testing-and-related.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/fetch-router/middleware.md b/docs/agents/remix/fetch-router/middleware.md\nnew file mode 100644\nindex 0000000..14b0110\n--- /dev/null\n+++ b/docs/agents/remix/fetch-router/middleware.md\n@@ -0,0 +1,130 @@\n+# Middleware and request context\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fetch-router\n+\n+## Controllers and middleware\n+\n+Middleware functions run code before and/or after actions. They are a powerful\n+way to add functionality to your app.\n+\n+A basic logging middleware might look like this:\n+\n+```ts\n+import type { Middleware } from 'remix/fetch-router'\n+\n+// You can use the `Middleware` type to type middleware functions.\n+function logger(): Middleware {\n+\treturn async (context, next) => {\n+\t\tlet start = new Date()\n+\n+\t\t// Call next() to invoke the next middleware or action in the chain.\n+\t\tlet response = await next()\n+\n+\t\tlet end = new Date()\n+\t\tlet duration = end.getTime() - start.getTime()\n+\n+\t\tconsole.log(\n+\t\t\t`${context.request.method} ${context.request.url} ${response.status} ${duration}ms`,\n+\t\t)\n+\n+\t\treturn response\n+\t}\n+}\n+\n+// Use it like this:\n+let router = createRouter({\n+\tmiddleware: [logger()],\n+})\n+```\n+\n+Middleware is typically built as a function that returns a middleware function.\n+This allows you to pass options to the middleware function if needed. For\n+example, the `auth()` middleware below allows you to pass a `token` option that\n+is used to authenticate the request.\n+\n+```tsx\n+interface AuthOptions {\n+\ttoken: string\n+}\n+\n+function auth(options?: AuthOptions): Middleware {\n+\tlet token = options?.token ?? 'secret'\n+\n+\treturn (context, next) => {\n+\t\tif (context.headers.get('Authorization') !== `Bearer ${token}`) {\n+\t\t\treturn new Response('Unauthorized', { status: 401 })\n+\t\t}\n+\t\treturn next()\n+\t}\n+}\n+```\n+\n+Middleware may be used in two different contexts: globally (at the router level)\n+or inline (at the route level).\n+\n+Global middleware is added to the router when it is created using the\n+`createRouter({ middleware })` option. This middleware runs before any routes\n+are matched and is useful for doing things like logging, serving static files,\n+profiling, and a variety of other things. Global middleware runs on every\n+request, so it's important to keep them lightweight and fast.\n+\n+Inline (or \"route\") middleware is added to the router when actions are\n+registered using either `router.map()` or one of the method-specific helpers\n+like `router.get()`, `router.post()`, `router.put()`, `router.delete()`, etc.\n+Route middleware runs after global middleware but before the route action, and\n+is useful for doing things like authentication, authorization, and data\n+validation.\n+\n+```tsx\n+let routes = route({\n+\thome: '/',\n+\tadmin: {\n+\t\tdashboard: '/admin/dashboard',\n+\t},\n+})\n+\n+let router = createRouter({\n+\t// This middleware runs on all requests.\n+\tmiddleware: [staticFiles('./public')],\n+})\n+\n+router.map(routes.home, () => new Response('Home'))\n+\n+router.map(routes.admin.dashboard, {\n+\t// This middleware runs only on the `/admin/dashboard` route.\n+\tmiddleware: [auth({ token: 'secret' })],\n+\taction() {\n+\t\treturn new Response('Dashboard')\n+\t},\n+})\n+```\n+\n+## Request context\n+\n+Every action and middleware receives a `context` object with useful properties:\n+\n+```ts\n+router.get('/posts/:id', ({ request, url, params, storage }) => {\n+\t// request: The original Request object\n+\tconsole.log(request.method) // \"GET\"\n+\tconsole.log(request.headers.get('Accept'))\n+\n+\t// url: Parsed URL object\n+\tconsole.log(url.pathname) // \"/posts/123\"\n+\tconsole.log(url.searchParams.get('sort'))\n+\n+\t// params: Route parameters (fully typed!)\n+\tconsole.log(params.id) // \"123\"\n+\n+\t// storage: AppStorage for type-safe access to request-scoped data\n+\tstorage.set('user', currentUser)\n+\n+\treturn new Response(`Post ${params.id}`)\n+})\n+```\n+\n+## Navigation\n+\n+- [fetch-router overview](./index.md)\n+- [Routing based on request method](./routing-methods.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/fetch-router/routing-methods.md b/docs/agents/remix/fetch-router/routing-methods.md\nnew file mode 100644\nindex 0000000..62e183d\n--- /dev/null\n+++ b/docs/agents/remix/fetch-router/routing-methods.md\n@@ -0,0 +1,173 @@\n+# Routing based on request method\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fetch-router\n+\n+## Routing based on request method\n+\n+In the example above, both the `home` and `contact` routes are able to be\n+registered for any incoming\n+[`request.method`](https://developer.mozilla.org/en-US/docs/Web/API/Request/method).\n+If you inspect their types, you'll see:\n+\n+```tsx\n+type HomeRoute = typeof routes.home // Route<'ANY', '/'>\n+type ContactRoute = typeof routes.contact // Route<'ANY', '/contact'>\n+```\n+\n+We used `router.get()` and `router.post()` to register actions on each route\n+specifically for the `GET` and `POST` request methods.\n+\n+However, we can also encode the request method into the route definition itself\n+using the `method` property on the route. When you include the `method` in the\n+route definition, `router.map()` will register the action only for that specific\n+request method. This can be more convenient than using `router.get()` and\n+`router.post()` to register actions one at a time.\n+\n+```ts\n+import * as assert from 'node:assert/strict'\n+import { createRouter } from 'remix/fetch-router'\n+import { route } from 'remix/fetch-router/routes'\n+\n+let routes = route({\n+\thome: { method: 'GET', pattern: '/' },\n+\tcontact: {\n+\t\tindex: { method: 'GET', pattern: '/contact' },\n+\t\taction: { method: 'POST', pattern: '/contact' },\n+\t},\n+})\n+\n+type Routes = typeof routes\n+// Each route is now typed with a specific request method.\n+// {\n+// home: Route<'GET', '/'>,\n+// contact: {\n+// index: Route<'GET', '/contact'>,\n+// action: Route<'POST', '/contact'>,\n+// },\n+// }\n+\n+let router = createRouter()\n+\n+router.map(routes, {\n+\thome({ method }) {\n+\t\tassert.equal(method, 'GET')\n+\t\treturn new Response('Home')\n+\t},\n+\tcontact: {\n+\t\tindex({ method }) {\n+\t\t\tassert.equal(method, 'GET')\n+\t\t\treturn new Response('Contact')\n+\t\t},\n+\t\taction({ method }) {\n+\t\t\tassert.equal(method, 'POST')\n+\t\t\treturn new Response('Contact Action')\n+\t\t},\n+\t},\n+})\n+```\n+\n+## Declaring routes\n+\n+In additon to the `{ method, pattern }` syntax shown above, the router provides\n+a few shorthand methods that help to eliminate some of the boilerplate when\n+building complex route maps:\n+\n+- [`form`](#declaring-form-routes) - creates a route map with an `index` (`GET`)\n+ and `action` (`POST`) route. This is well-suited to showing a standard HTML\n+ `<form>` and handling its submit action at the same URL.\n+- [`resources` (and `resource`)](./routing-resources.md) - creates a route map\n+ with a set of resource-based routes, useful when defining RESTful API routes\n+ or\n+ [Rails-style resource-based routes](https://guides.rubyonrails.org/routing.html#resource-routing-the-rails-default).\n+\n+### Declaring form routes\n+\n+Continuing with the contact page example, let's use the `form` shorthand to make\n+the route map a little less verbose.\n+\n+A `form()` route map contains two routes: `index` and `action`. The `index`\n+route is a `GET` route that shows the form, and the `action` route is a `POST`\n+route that handles the form submission.\n+\n+```tsx\n+import { createRouter } from 'remix/fetch-router'\n+import { form, route } from 'remix/fetch-router/routes'\n+import { createHtmlResponse } from 'remix/response/html'\n+import { html } from 'remix/html-template'\n+\n+let routes = route({\n+\thome: '/',\n+\tcontact: form('contact'),\n+})\n+\n+type Routes = typeof routes\n+// {\n+// home: Route<'ANY', '/'>\n+// contact: {\n+// index: Route<'GET', '/contact'> - Shows the form\n+// action: Route<'POST', '/contact'> - Handles the form submission\n+// },\n+// }\n+\n+let router = createRouter()\n+\n+router.map(routes, {\n+\thome() {\n+\t\treturn createHtmlResponse(`\n+ <html>\n+ <body>\n+ <h1>Home</h1>\n+ <footer>\n+ <p>\n+ <a href=\"${routes.contact.index.href()}\">Contact Us</a>\n+ </p>\n+ </footer>\n+ </body>\n+ </html>\n+ `)\n+\t},\n+\tcontact: {\n+\t\t// GET /contact - shows the form\n+\t\tindex() {\n+\t\t\treturn createHtmlResponse(`\n+ <html>\n+ <body>\n+ <h1>Contact Us</h1>\n+ <form method=\"POST\" action=\"${routes.contact.action.href()}\">\n+ <label for=\"message\">Message</label>\n+ <input type=\"text\" name=\"message\" />\n+ <button type=\"submit\">Send</button>\n+ </form>\n+ </body>\n+ </html>\n+ `)\n+\t\t},\n+\t\t// POST /contact - handles the form submission\n+\t\taction({ formData }) {\n+\t\t\tlet message = formData.get('message') as string\n+\t\t\tlet body = html`\n+\t\t\t\t<html>\n+\t\t\t\t\t<body>\n+\t\t\t\t\t\t<h1>Thanks!</h1>\n+\t\t\t\t\t\t<p>You said: ${message}</p>\n+\n+\t\t\t\t\t\t<p>\n+\t\t\t\t\t\t\tGot more to say?\n+\t\t\t\t\t\t\t<a href=\"${routes.contact.index.href()}\">Send another message</a>\n+\t\t\t\t\t\t</p>\n+\t\t\t\t\t</body>\n+\t\t\t\t</html>\n+\t\t\t`\n+\n+\t\t\treturn createHtmlResponse(body)\n+\t\t},\n+\t},\n+})\n+```\n+\n+## Navigation\n+\n+- [Resource-based routes](./routing-resources.md)\n+- [Basic usage and route maps](./usage.md)\n+- [fetch-router overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/fetch-router/routing-resources.md b/docs/agents/remix/fetch-router/routing-resources.md\nnew file mode 100644\nindex 0000000..150b7e5\n--- /dev/null\n+++ b/docs/agents/remix/fetch-router/routing-resources.md\n@@ -0,0 +1,186 @@\n+# Resource-based routes\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fetch-router\n+\n+## Resource-based routes\n+\n+The router provides a `resources()` helper that creates a route map with a set\n+of resource-based routes, useful when defining RESTful API routes or modeling\n+resources in a web application (similar to Rails' `resources` helper).\n+\n+```ts\n+import { createRouter } from 'remix/fetch-router'\n+import { resources, route } from 'remix/fetch-router/routes'\n+\n+let routes = route({\n+\tbrands: {\n+\t\t...resources('brands', { only: ['index', 'show'] }),\n+\t\tproducts: resources('brands/:brandId/products', {\n+\t\t\tonly: ['index', 'show'],\n+\t\t}),\n+\t},\n+})\n+\n+type Routes = typeof routes\n+// {\n+// brands: {\n+// index: Route<'GET', '/brands'>\n+// show: Route<'GET', '/brands/:id'>\n+// products: {\n+// index: Route<'GET', '/brands/:brandId/products'>\n+// show: Route<'GET', '/brands/:brandId/products/:id'>\n+// },\n+// },\n+// }\n+\n+let router = createRouter()\n+\n+router.map(routes.brands, {\n+\t// GET /brands\n+\tindex() {\n+\t\treturn new Response('Brands Index')\n+\t},\n+\t// GET /brands/:id\n+\tshow({ params }) {\n+\t\treturn new Response(`Brand ${params.id}`)\n+\t},\n+\tproducts: {\n+\t\t// GET /brands/:brandId/products\n+\t\tindex() {\n+\t\t\treturn new Response('Products Index')\n+\t\t},\n+\t\t// GET /brands/:brandId/products/:id\n+\t\tshow({ params }) {\n+\t\t\treturn new Response(`Brand ${params.brandId}, Product ${params.id}`)\n+\t\t},\n+\t},\n+})\n+```\n+\n+The `resource()` helper creates a route map for a single resource (not something\n+that is part of a collection). This is useful when defining operations on a\n+singleton resource, like a user profile.\n+\n+```tsx\n+import { createRouter } from 'remix/fetch-router'\n+import { resource, resources, route } from 'remix/fetch-router/routes'\n+\n+let routes = route({\n+\tuser: {\n+\t\t...resources('users', { only: ['index', 'show'] }),\n+\t\tprofile: resource('users/:userId/profile', {\n+\t\t\tonly: ['show', 'edit', 'update'],\n+\t\t}),\n+\t},\n+})\n+\n+type Routes = typeof routes\n+// {\n+// user: {\n+// index: Route<'GET', '/users'>\n+// show: Route<'GET', '/users/:id'>\n+// profile: {\n+// show: Route<'GET', '/users/:userId/profile'>\n+// edit: Route<'GET', '/users/:userId/profile/edit'>\n+// update: Route<'PUT', '/users/:userId/profile'>\n+// },\n+// },\n+// }\n+```\n+\n+Without the `only` option, a `resources('users')` route map contains 7 routes:\n+`index`, `new`, `show`, `create`, `edit`, `update`, and `destroy`.\n+\n+```tsx\n+let routes = resources('users')\n+type Routes = typeof routes\n+// {\n+// index: Route<'GET', '/users'> - Lists all users\n+// new: Route<'GET', '/users/new'> - Shows a form to create a new user\n+// show: Route<'GET', '/users/:id'> - Shows a single user\n+// create: Route<'POST', '/users'> - Creates a new user\n+// edit: Route<'GET', '/users/:id/edit'> - Shows a form to edit a user\n+// update: Route<'PUT', '/users/:id'> - Updates a user\n+// destroy: Route<'DELETE', '/users/:id'> - Deletes a user\n+// }\n+```\n+\n+Similarly, a `resource('profile')` route map contains 6 routes: `new`, `show`,\n+`create`, `edit`, `update`, and `destroy`. There is no `index` route because a\n+`resource()` represents a singleton resource, not a collection, so there is no\n+collection view.\n+\n+```tsx\n+let routes = resource('profile')\n+type Routes = typeof routes\n+// {\n+// new: Route<'GET', '/profile/new'> - Shows a form to create the profile\n+// show: Route<'GET', '/profile'> - Shows the profile\n+// create: Route<'POST', '/profile'> - Creates the profile\n+// edit: Route<'GET', '/profile/edit'> - Shows a form to edit the profile\n+// update: Route<'PUT', '/profile'> - Updates the profile\n+// destroy: Route<'DELETE', '/profile'> - Deletes the profile\n+// }\n+```\n+\n+Resource route names may be customized using the `names` option when you'd\n+prefer not to use the default\n+`index`/`new`/`show`/`create`/`edit`/`update`/`destroy` route names.\n+\n+```tsx\n+import { createRouter } from 'remix/fetch-router'\n+import { resources, route } from 'remix/fetch-router/routes'\n+\n+let routes = route({\n+\tusers: resources('users', {\n+\t\tonly: ['index', 'show'],\n+\t\tnames: { index: 'list', show: 'view' },\n+\t}),\n+})\n+type Routes = typeof routes.users\n+// {\n+// list: Route<'GET', '/users'> - Lists all users\n+// view: Route<'GET', '/users/:id'> - Shows a single user\n+// }\n+```\n+\n+If you want to use a param name other than `id`, you can use the `param` option.\n+\n+```tsx\n+import { createRouter } from 'remix/fetch-router'\n+import { resources, route } from 'remix/fetch-router/routes'\n+\n+let routes = route({\n+\tusers: resources('users', {\n+\t\tonly: ['index', 'show', 'edit', 'update'],\n+\t\tparam: 'userId',\n+\t}),\n+})\n+type Routes = typeof routes.users\n+// {\n+// index: Route<'GET', '/users'> - Lists all users\n+// show: Route<'GET', '/users/:userId'> - Shows a single user\n+// edit: Route<'GET', '/users/:userId/edit'> - Shows a form to edit a user\n+// update: Route<'PUT', '/users/:userId'> - Updates a user\n+// }\n+```\n+\n+You can use the `exclude` option to exclude routes from being generated.\n+\n+```tsx\n+let routes = resources('users', { exclude: ['edit', 'update', 'destroy'] })\n+type Routes = typeof routes\n+// {\n+// index: Route<'GET', '/users'> - Lists all users\n+// new: Route<'GET', '/users/new'> - Shows a form to create a new user\n+// show: Route<'GET', '/users/:userId'> - Shows a single user\n+// create: Route<'POST', '/users'> - Creates a new user\n+// }\n+```\n+\n+## Navigation\n+\n+- [Routing based on request method](./routing-methods.md)\n+- [Basic usage and route maps](./usage.md)\n+- [fetch-router overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/fetch-router/testing-and-related.md b/docs/agents/remix/fetch-router/testing-and-related.md\nnew file mode 100644\nindex 0000000..16607c5\n--- /dev/null\n+++ b/docs/agents/remix/fetch-router/testing-and-related.md\n@@ -0,0 +1,56 @@\n+# Testing and related work\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fetch-router\n+\n+## Testing\n+\n+Testing is straightforward because `fetch-router` uses the standard `fetch()`\n+API:\n+\n+```ts\n+import * as assert from 'node:assert/strict'\n+import { describe, it } from 'node:test'\n+\n+describe('blog routes', () => {\n+\tit('creates a new post', async () => {\n+\t\tlet response = await router.fetch('https://api.remix.run/posts', {\n+\t\t\tmethod: 'POST',\n+\t\t\theaders: { 'Content-Type': 'application/json' },\n+\t\t\tbody: JSON.stringify({ title: 'Hello', content: 'World' }),\n+\t\t})\n+\n+\t\tassert.equal(response.status, 201)\n+\t\tlet post = await response.json()\n+\t\tassert.equal(post.title, 'Hello')\n+\t})\n+\n+\tit('returns 404 for missing posts', async () => {\n+\t\tlet response = await router.fetch('https://api.remix.run/posts/not-found')\n+\t\tassert.equal(response.status, 404)\n+\t})\n+})\n+```\n+\n+No special test harness or mocking required! Just use `fetch()` like you would\n+in production.\n+\n+## Related work\n+\n+- [@remix-run/response](../response/index.md) - Response helpers for HTML, JSON,\n+ files, and redirects\n+- [@remix-run/headers](../headers/index.md) - A library for working with HTTP\n+ headers\n+- [@remix-run/form-data-parser](../form-data-parser) - A library for parsing\n+ multipart/form-data requests\n+- [@remix-run/route-pattern](../route-pattern) - The pattern matching library\n+ that powers `fetch-router`\n+- [Express](https://expressjs.com/) - The classic Node.js web framework\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [fetch-router overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/fetch-router/usage.md b/docs/agents/remix/fetch-router/usage.md\nnew file mode 100644\nindex 0000000..14fc7b8\n--- /dev/null\n+++ b/docs/agents/remix/fetch-router/usage.md\n@@ -0,0 +1,170 @@\n+# Basic usage and route maps\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fetch-router\n+\n+The main purpose of the router is to map incoming requests to request handlers\n+and middleware. The router uses the `fetch()` API to accept a\n+[`Request`](https://developer.mozilla.org/en-US/docs/Web/API/Request) and return\n+a [`Response`](https://developer.mozilla.org/en-US/docs/Web/API/Response).\n+\n+The example below is a small site with a home page, an \"about\" page, and a blog.\n+\n+```ts\n+import { createRouter } from 'remix/fetch-router'\n+import { route } from 'remix/fetch-router/routes'\n+import { logger } from 'remix/logger-middleware'\n+\n+// `route()` creates a \"route map\" that organizes routes by name. The keys\n+// of the map may be any name, and may be nested to group related routes.\n+let routes = route({\n+\thome: '/',\n+\tabout: '/about',\n+\tblog: {\n+\t\tindex: '/blog',\n+\t\tshow: '/blog/:slug',\n+\t},\n+})\n+\n+let router = createRouter({\n+\t// Middleware may be used to run code before and/or after actions run.\n+\t// In this case, the `logger()` middleware logs the request to the console.\n+\tmiddleware: [logger()],\n+})\n+\n+// Map the routes to a \"controller\" that defines actions for each route. The\n+// structure of the controller mirrors the structure of the route map.\n+router.map(routes, {\n+\thome() {\n+\t\treturn new Response('Home')\n+\t},\n+\tabout() {\n+\t\treturn new Response('About')\n+\t},\n+\tblog: {\n+\t\tindex() {\n+\t\t\treturn new Response('Blog')\n+\t\t},\n+\t\tshow({ params }) {\n+\t\t\t// params is a type-safe object with the parameters from the route pattern\n+\t\t\treturn new Response(`Post ${params.slug}`)\n+\t\t},\n+\t},\n+})\n+\n+let response = await router.fetch('https://remix.run/blog/hello-remix')\n+console.log(await response.text()) // \"Post hello-remix\"\n+```\n+\n+The route map is an object of the same shape as the object passed into\n+`route()`, including nested objects. The leaves of the map are `Route` objects,\n+which you can see if you inspect the type of the `routes` variable in your IDE.\n+\n+```ts\n+type Routes = typeof routes\n+// {\n+// home: Route<'ANY', '/'>\n+// about: Route<'ANY', '/about'>\n+// blog: {\n+// index: Route<'ANY', '/blog'>\n+// show: Route<'ANY', '/blog/:slug'>\n+// },\n+// }\n+```\n+\n+The `routes.home` route is a `Route<'ANY', '/'>`, which means it serves any\n+request method (`GET`, `POST`, `PUT`, `DELETE`, etc.) when the URL path is `/`.\n+We'll discuss routing based on request method in the routing guide.\n+\n+## Links and form actions\n+\n+In addition to describing the structure of your routes, route maps also make it\n+easy to generate type-safe links and form actions using the `href()` function on\n+a route. The example below is a small site with a home page and a \"Contact Us\"\n+page.\n+\n+Note: We're using the\n+[`createHtmlResponse` helper from `remix/response`](https://github.com/remix-run/remix/tree/main/packages/response/README.md#html-responses)\n+below to create `Response`s with `Content-Type: text/html`. We're also using the\n+`html` template tag to create safe HTML strings to use in the response body.\n+\n+```ts\n+import { createRouter } from 'remix/fetch-router'\n+import { route } from 'remix/fetch-router/routes'\n+import { html } from 'remix/html-template'\n+import { createHtmlResponse } from 'remix/response/html'\n+\n+let routes = route({\n+\thome: '/',\n+\tcontact: '/contact',\n+})\n+\n+let router = createRouter()\n+\n+// Register an action for `GET /`\n+router.get(routes.home, () => {\n+\treturn createHtmlResponse(`\n+ <html>\n+ <body>\n+ <h1>Home</h1>\n+ <p>\n+ <a href=\"${routes.contact.href()}\">Contact Us</a>\n+ </p>\n+ </body>\n+ </html>\n+ `)\n+})\n+\n+// Register an action for `GET /contact`\n+router.get(routes.contact, () => {\n+\treturn createHtmlResponse(`\n+ <html>\n+ <body>\n+ <h1>Contact Us</h1>\n+ <form method=\"POST\" action=\"${routes.contact.href()}\">\n+ <div>\n+ <label for=\"message\">Message</label>\n+ <input type=\"text\" name=\"message\" />\n+ </div>\n+ <button type=\"submit\">Send</button>\n+ </form>\n+ <footer>\n+ <p>\n+ <a href=\"${routes.home.href()}\">Home</a>\n+ </p>\n+ </footer>\n+ </body>\n+ </html>\n+ `)\n+})\n+\n+// Register an action for `POST /contact`\n+router.post(routes.contact, ({ formData }) => {\n+\t// POST actions receive a `context` object with a `formData` property that\n+\t// contains the `FormData` from the form submission. It is automatically\n+\t// parsed from the request body and available in all POST actions.\n+\tlet message = formData.get('message') as string\n+\tlet body = html`\n+\t\t<html>\n+\t\t\t<body>\n+\t\t\t\t<h1>Thanks!</h1>\n+\t\t\t\t<div>\n+\t\t\t\t\t<p>You said: ${message}</p>\n+\t\t\t\t</div>\n+\t\t\t\t<footer>\n+\t\t\t\t\t<p>\n+\t\t\t\t\t\t<a href=\"${routes.home.href()}\">Home</a>\n+\t\t\t\t\t</p>\n+\t\t\t\t</footer>\n+\t\t\t</body>\n+\t\t</html>\n+\t`\n+\n+\treturn createHtmlResponse(body)\n+})\n+```\n+\n+## Navigation\n+\n+- [fetch-router overview](./index.md)\n+- [Routing based on request method](./routing-methods.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/file-storage-s3.md b/docs/agents/remix/file-storage-s3.md\nnew file mode 100644\nindex 0000000..ed64e78\n--- /dev/null\n+++ b/docs/agents/remix/file-storage-s3.md\n@@ -0,0 +1,44 @@\n+# file-storage-s3\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/file-storage-s3\n+\n+## README\n+\n+S3 backend for `remix/file-storage`.\n+\n+Use this package when you want the `FileStorage` API backed by AWS S3 or an\n+S3-compatible provider (MinIO, LocalStack, etc.).\n+\n+## Installation\n+\n+```sh\n+npm i remix\n+```\n+\n+## Usage\n+\n+```ts\n+import { createS3FileStorage } from 'remix/file-storage-s3'\n+\n+let storage = createS3FileStorage({\n+\taccessKeyId: process.env.AWS_ACCESS_KEY_ID!,\n+\tsecretAccessKey: process.env.AWS_SECRET_ACCESS_KEY!,\n+\tbucket: 'my-app-uploads',\n+\tregion: 'us-east-1',\n+})\n+```\n+\n+Use `endpoint` and `forcePathStyle: true` for non-AWS S3-compatible providers.\n+\n+## Related packages\n+\n+- [`file-storage`](https://github.com/remix-run/remix/tree/main/packages/file-storage)\n+- [`form-data-parser`](https://github.com/remix-run/remix/tree/main/packages/form-data-parser)\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/file-storage.md b/docs/agents/remix/file-storage.md\nnew file mode 100644\nindex 0000000..4cf3af1\n--- /dev/null\n+++ b/docs/agents/remix/file-storage.md\n@@ -0,0 +1,83 @@\n+# file-storage\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/file-storage\n+\n+## README\n+\n+`file-storage` is a key/value interface for storing\n+[`File` objects](https://developer.mozilla.org/en-US/docs/Web/API/File) in\n+JavaScript.\n+\n+Handling file uploads and storage is a common requirement in web applications,\n+but each storage backend (local disk, AWS S3, Cloudflare R2, etc.) has its own\n+API and conventions. This fragmentation makes it difficult to write portable\n+code that can easily switch between storage providers or support multiple\n+backends simultaneously.\n+\n+Similar to how `localStorage` allows you to store key/value pairs of strings in\n+the browser, `file-storage` allows you to store key/value pairs of files on the\n+server with a consistent interface regardless of the underlying storage\n+mechanism.\n+\n+## Features\n+\n+- **Simple API** - Intuitive key/value API (like\n+ [Web Storage](https://developer.mozilla.org/en-US/docs/Web/API/Web_Storage_API),\n+ but for `File`s instead of strings)\n+- **Generic Interface** - `FileStorage` interface that works for various large\n+ object storage backends (can be adapted to AWS S3, Cloudflare R2, etc.)\n+- **Streaming Support** - Stream file content to and from storage\n+- **Metadata Preservation** - Preserves all `File` metadata including\n+ `file.name`, `file.type`, and `file.lastModified`\n+\n+## Installation\n+\n+Install from [npm](https://www.npmjs.com/):\n+\n+```sh\n+npm i remix\n+```\n+\n+## Usage\n+\n+### File System\n+\n+```ts\n+import { createFsFileStorage } from 'remix/file-storage/fs'\n+\n+let storage = createFsFileStorage('./user/files')\n+\n+let file = new File(['hello world'], 'hello.txt', { type: 'text/plain' })\n+let key = 'hello-key'\n+\n+// Put the file in storage.\n+await storage.set(key, file)\n+\n+// Then, sometime later...\n+let fileFromStorage = await storage.get(key)\n+// All of the original file's metadata is intact\n+fileFromStorage.name // 'hello.txt'\n+fileFromStorage.type // 'text/plain'\n+\n+// To remove from storage\n+await storage.remove(key)\n+```\n+\n+## Related Packages\n+\n+- [`file-storage-s3`](https://github.com/remix-run/remix/tree/main/packages/file-storage-s3) -\n+ S3 backend for `file-storage`\n+- [`form-data-parser`](https://github.com/remix-run/remix/tree/main/packages/form-data-parser) -\n+ Pairs well with this library for storing `FileUpload` objects received in\n+ `multipart/form-data` requests\n+- [`lazy-file`](https://github.com/remix-run/remix/tree/main/packages/lazy-file) -\n+ The streaming `File` implementation used internally to stream files from\n+ storage\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/form-data-middleware.md b/docs/agents/remix/form-data-middleware.md\nnew file mode 100644\nindex 0000000..5465a6b\n--- /dev/null\n+++ b/docs/agents/remix/form-data-middleware.md\n@@ -0,0 +1,99 @@\n+# form-data-middleware\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/form-data-middleware\n+\n+## README\n+\n+Middleware for parsing\n+[`FormData`](https://developer.mozilla.org/en-US/docs/Web/API/FormData) from\n+incoming request bodies for use with\n+[`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router).\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/form-data-middleware\n+```\n+\n+## Usage\n+\n+Use the `formData()` middleware at the router level to parse `FormData` from the\n+request body and make it available on the request context as `context.formData`.\n+\n+`context.files` will also be available as a map of `File` objects keyed by the\n+name of the form field.\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { formData } from '@remix-run/form-data-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [formData()],\n+})\n+\n+router.post('/users', async (context) => {\n+\tlet name = context.formData.get('name')\n+\tlet email = context.formData.get('email')\n+\n+\t// Handle file uploads\n+\tlet avatar = context.files?.get('avatar')\n+\n+\treturn Response.json({ name, email, hasAvatar: !!avatar })\n+})\n+```\n+\n+### Custom File Upload Handler\n+\n+You can use a custom upload handler to customize how file uploads are handled.\n+The return value of the upload handler will be used as the value of the form\n+field in the `FormData` object.\n+\n+```ts\n+import { formData } from '@remix-run/form-data-middleware'\n+import { writeFile } from 'node:fs/promises'\n+\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tformData({\n+\t\t\tasync uploadHandler(upload) {\n+\t\t\t\t// Save to disk and return path\n+\t\t\t\tlet path = `./uploads/${upload.name}`\n+\t\t\t\tawait writeFile(path, Buffer.from(await upload.arrayBuffer()))\n+\t\t\t\treturn path\n+\t\t\t},\n+\t\t}),\n+\t],\n+})\n+```\n+\n+### Suppress Parse Errors\n+\n+Some requests may contain invalid form data that cannot be parsed. You can\n+suppress parse errors by setting `suppressErrors` to `true`. In these cases,\n+`context.formData` will be an empty `FormData` object.\n+\n+```ts\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tformData({\n+\t\t\tsuppressErrors: true, // Invalid form data won't throw\n+\t\t}),\n+\t],\n+})\n+```\n+\n+## Related Packages\n+\n+- [`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Router for the web Fetch API\n+- [`form-data-parser`](https://github.com/remix-run/remix/tree/main/packages/form-data-parser) -\n+ The underlying form data parser\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/form-data-parser.md b/docs/agents/remix/form-data-parser.md\nnew file mode 100644\nindex 0000000..117c88a\n--- /dev/null\n+++ b/docs/agents/remix/form-data-parser.md\n@@ -0,0 +1,183 @@\n+# form-data-parser\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/form-data-parser\n+\n+## README\n+\n+A streaming `multipart/form-data` parser that solves memory issues with file\n+uploads in server environments. Built as an enhanced replacement for the native\n+`request.formData()` API, it enables efficient handling of large file uploads by\n+streaming directly to disk or cloud storage services like\n+[AWS S3](https://aws.amazon.com/s3/) or\n+[Cloudflare R2](https://www.cloudflare.com/developer-platform/r2/), preventing\n+server crashes from memory exhaustion.\n+\n+## Features\n+\n+- **Drop-in replacement** for `request.formData()` with streaming file upload\n+ support\n+- **Minimal buffering** - processes file upload streams with minimal memory\n+ footprint\n+- **Standards-based** - built on the\n+ [web Streams API](https://developer.mozilla.org/en-US/docs/Web/API/Streams_API)\n+ and [File API](https://developer.mozilla.org/en-US/docs/Web/API/File)\n+- **Smart fallback** - automatically uses native `request.formData()` for\n+ non-`multipart/form-data` requests\n+- **Storage agnostic** - works with any storage backend (local disk, S3, R2,\n+ etc.)\n+\n+## Why You Need This\n+\n+The native\n+[`request.formData()` method](https://developer.mozilla.org/en-US/docs/Web/API/Request/formData)\n+has a few major flaws in server environments:\n+\n+- It buffers all file uploads in memory\n+- It does not provide fine-grained control over file upload handling\n+- It does not prevent DoS attacks from malicious requests\n+\n+In normal usage, this makes it difficult to process requests with large file\n+uploads because they can exhaust your server's RAM and crash the application.\n+\n+For attackers, this creates an attack vector where malicious actors can\n+overwhelm your server's memory by sending large payloads with many files.\n+\n+`form-data-parser` solves this by handling file uploads as they arrive in the\n+request body stream, allowing you to safely store files and use either a) the\n+`File` directly or b) a unique identifier for that file in the returned\n+`FormData` object.\n+\n+## Installation\n+\n+Install from [npm](https://www.npmjs.com/):\n+\n+```sh\n+npm install @remix-run/form-data-parser\n+```\n+\n+## Usage\n+\n+The `parseFormData` interface allows you to define an \"upload handler\" function\n+for fine-grained control of handling file uploads.\n+\n+```ts\n+import * as fsp from 'node:fs/promises'\n+import type { FileUpload } from '@remix-run/form-data-parser'\n+import { parseFormData } from '@remix-run/form-data-parser'\n+\n+// Define how to handle incoming file uploads\n+async function uploadHandler(fileUpload: FileUpload) {\n+\t// Is this file upload from the <input type=\"file\" name=\"user-avatar\"> field?\n+\tif (fileUpload.fieldName === 'user-avatar') {\n+\t\tlet filename = `/uploads/user-${user.id}-avatar.bin`\n+\n+\t\t// Store the file safely on disk\n+\t\tawait fsp.writeFile(filename, fileUpload.bytes)\n+\n+\t\t// Return the file name to use in the FormData object so we don't\n+\t\t// keep the file contents around in memory.\n+\t\treturn filename\n+\t}\n+\n+\t// Ignore unrecognized fields\n+}\n+\n+// Handle form submissions with file uploads\n+async function requestHandler(request: Request) {\n+\t// Parse the form data from the request.body stream, passing any files\n+\t// through your upload handler as they are parsed from the stream\n+\tlet formData = await parseFormData(request, uploadHandler)\n+\n+\tlet avatarFilename = formData.get('user-avatar')\n+\n+\tif (avatarFilename != null) {\n+\t\tconsole.log(`User avatar uploaded to ${avatarFilename}`)\n+\t} else {\n+\t\tconsole.log(`No user avatar file was uploaded`)\n+\t}\n+}\n+```\n+\n+To limit the maximum size of files that are uploaded, or the maximum number of\n+files that may be uploaded in a single request, use the `maxFileSize` and\n+`maxFiles` options.\n+\n+```ts\n+import {\n+\tMaxFilesExceededError,\n+\tMaxFileSizeExceededError,\n+} from '@remix-run/form-data-parser'\n+\n+const oneKb = 1024\n+const oneMb = 1024 * oneKb\n+\n+try {\n+\tlet formData = await parseFormData(request, {\n+\t\tmaxFiles: 5,\n+\t\tmaxFileSize: 10 * oneMb,\n+\t})\n+} catch (error) {\n+\tif (error instanceof MaxFilesExceededError) {\n+\t\tconsole.error(`Request may not contain more than 5 files`)\n+\t} else if (error instanceof MaxFileSizeExceededError) {\n+\t\tconsole.error(`Files may not be larger than 10 MiB`)\n+\t} else {\n+\t\tconsole.error(`An unknown error occurred:`, error)\n+\t}\n+}\n+```\n+\n+If you're looking for a more flexible storage solution for `File` objects that\n+are uploaded, this library pairs really well with\n+[the `file-storage` library](https://github.com/remix-run/remix/tree/main/packages/file-storage)\n+for keeping files in various storage backends.\n+\n+```ts\n+import { LocalFileStorage } from '@remix-run/file-storage/local'\n+import type { FileUpload } from '@remix-run/form-data-parser'\n+import { parseFormData } from '@remix-run/form-data-parser'\n+\n+// Set up storage for uploaded files\n+const fileStorage = new LocalFileStorage('/uploads/user-avatars')\n+\n+// Define how to handle incoming file uploads\n+async function uploadHandler(fileUpload: FileUpload) {\n+\t// Is this file upload from the <input type=\"file\" name=\"user-avatar\"> field?\n+\tif (fileUpload.fieldName === 'user-avatar') {\n+\t\tlet storageKey = `user-${user.id}-avatar`\n+\n+\t\t// Put the file in storage\n+\t\tawait fileStorage.set(storageKey, fileUpload)\n+\n+\t\t// Return a lazy File object that can access the stored file when needed\n+\t\treturn fileStorage.get(storageKey)\n+\t}\n+\n+\t// Ignore unrecognized fields\n+}\n+```\n+\n+## Demos\n+\n+The\n+[`demos` directory](https://github.com/remix-run/remix/tree/main/packages/form-data-parser/demos)\n+contains working demos:\n+\n+- [`demos/node`](https://github.com/remix-run/remix/tree/main/packages/form-data-parser/demos/node) -\n+ using form-data-parser with file-storage in Node.js\n+\n+## Related Packages\n+\n+- [`file-storage`](https://github.com/remix-run/remix/tree/main/packages/file-storage) -\n+ A simple key/value interface for storing `FileUpload` objects you get from the\n+ parser\n+- [`multipart-parser`](https://github.com/remix-run/remix/tree/main/packages/multipart-parser) -\n+ The parser used internally for parsing `multipart/form-data` HTTP messages\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/fs.md b/docs/agents/remix/fs.md\nnew file mode 100644\nindex 0000000..72bd728\n--- /dev/null\n+++ b/docs/agents/remix/fs.md\n@@ -0,0 +1,83 @@\n+# fs\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/fs\n+\n+## README\n+\n+Lazy, streaming filesystem utilities for JavaScript.\n+\n+This package provides utilities for working with files on the local filesystem\n+using the\n+[`LazyFile`](https://github.com/remix-run/remix/tree/main/packages/lazy-file)/\n+native [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File) API.\n+\n+## Features\n+\n+- **Web Standards** - Uses\n+ [`LazyFile`](https://github.com/remix-run/remix/tree/main/packages/lazy-file)\n+ which matches the native\n+ [`File`](https://developer.mozilla.org/en-US/docs/Web/API/File) API and\n+ provides `.stream()`, `.toFile()`, and `.toBlob()` for converting to native\n+ types.\n+- **Seamless Node.js Compat** - Works seamlessly with Node.js file descriptors\n+ and handles\n+\n+## Installation\n+\n+Install from [npm](https://www.npmjs.com/):\n+\n+```sh\n+npm install @remix-run/fs\n+```\n+\n+## Usage\n+\n+### Opening Lazy Files\n+\n+```ts\n+import { openLazyFile } from '@remix-run/fs'\n+\n+// Open a file from the filesystem\n+let lazyFile = openLazyFile('./path/to/file.json')\n+\n+// The file is lazy - no data is read until you call lazyFile.text(), lazyFile.bytes(), etc.\n+let json = JSON.parse(await lazyFile.text())\n+\n+// You can override file metadata\n+let customLazyFile = openLazyFile('./image.jpg', {\n+\tname: 'custom-name.jpg',\n+\ttype: 'image/jpeg',\n+\tlastModified: Date.now(),\n+})\n+```\n+\n+### Writing Files\n+\n+```ts\n+import { openLazyFile, writeFile } from '@remix-run/fs'\n+\n+// Read a file and write it elsewhere\n+let lazyFile = openLazyFile('./source.txt')\n+await writeFile('./destination.txt', lazyFile)\n+\n+// Write to an open file handle\n+import * as fsp from 'node:fs/promises'\n+let handle = await fsp.open('./destination.txt', 'w')\n+await writeFile(handle, lazyFile)\n+await handle.close()\n+```\n+\n+## Related Packages\n+\n+- [`lazy-file`](https://github.com/remix-run/remix/tree/main/packages/lazy-file) -\n+ Lazy, streaming `Blob`/`File` implementation\n+- [`file-storage`](https://github.com/remix-run/remix/tree/main/packages/file-storage) -\n+ Storage abstraction for files\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/headers/accept-headers.md b/docs/agents/remix/headers/accept-headers.md\nnew file mode 100644\nindex 0000000..bf2b9a0\n--- /dev/null\n+++ b/docs/agents/remix/headers/accept-headers.md\n@@ -0,0 +1,131 @@\n+# Accept headers\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/headers\n+\n+Each supported header has a class that represents the header value. Use the\n+static `from()` method to parse header values. Each class has a `toString()`\n+method that returns the header value as a string.\n+\n+## Accept\n+\n+Parse, manipulate and stringify\n+[`Accept` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Accept).\n+\n+Implements `Map<mediaType, quality>`.\n+\n+```ts\n+import { Accept } from '@remix-run/headers'\n+\n+// Parse from headers\n+let accept = Accept.from(request.headers.get('accept'))\n+\n+accept.mediaTypes // ['text/html', 'text/*']\n+accept.weights // [1, 0.9]\n+accept.accepts('text/html') // true\n+accept.accepts('text/plain') // true (matches text/*)\n+accept.accepts('image/jpeg') // false\n+accept.getWeight('text/plain') // 1 (matches text/*)\n+accept.getPreferred(['text/html', 'text/plain']) // 'text/html'\n+\n+// Iterate\n+for (let [mediaType, quality] of accept) {\n+\t// ...\n+}\n+\n+// Modify and set header\n+accept.set('application/json', 0.8)\n+accept.delete('text/*')\n+headers.set('Accept', accept)\n+\n+// Construct directly\n+new Accept('text/html, text/*;q=0.9')\n+new Accept({ 'text/html': 1, 'text/*': 0.9 })\n+new Accept(['text/html', ['text/*', 0.9]])\n+\n+// Use class for type safety when setting Headers values\n+// via Accept's `.toString()` method\n+let headers = new Headers({\n+\tAccept: new Accept({ 'text/html': 1, 'application/json': 0.8 }),\n+})\n+headers.set('Accept', new Accept({ 'text/html': 1, 'application/json': 0.8 }))\n+```\n+\n+## Accept-Encoding\n+\n+Parse, manipulate and stringify\n+[`Accept-Encoding` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Accept-Encoding).\n+\n+Implements `Map<encoding, quality>`.\n+\n+```ts\n+import { AcceptEncoding } from '@remix-run/headers'\n+\n+// Parse from headers\n+let acceptEncoding = AcceptEncoding.from(request.headers.get('accept-encoding'))\n+\n+acceptEncoding.encodings // ['gzip', 'deflate']\n+acceptEncoding.weights // [1, 0.8]\n+acceptEncoding.accepts('gzip') // true\n+acceptEncoding.accepts('br') // false\n+acceptEncoding.getWeight('gzip') // 1\n+acceptEncoding.getPreferred(['gzip', 'deflate', 'br']) // 'gzip'\n+\n+// Modify and set header\n+acceptEncoding.set('br', 1)\n+acceptEncoding.delete('deflate')\n+headers.set('Accept-Encoding', acceptEncoding)\n+\n+// Construct directly\n+new AcceptEncoding('gzip, deflate;q=0.8')\n+new AcceptEncoding({ gzip: 1, deflate: 0.8 })\n+\n+// Use class for type safety when setting Headers values\n+// via AcceptEncoding's `.toString()` method\n+let headers = new Headers({\n+\t'Accept-Encoding': new AcceptEncoding({ gzip: 1, br: 0.9 }),\n+})\n+headers.set('Accept-Encoding', new AcceptEncoding({ gzip: 1, br: 0.9 }))\n+```\n+\n+## Accept-Language\n+\n+Parse, manipulate and stringify\n+[`Accept-Language` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Accept-Language).\n+\n+Implements `Map<language, quality>`.\n+\n+```ts\n+import { AcceptLanguage } from '@remix-run/headers'\n+\n+// Parse from headers\n+let acceptLanguage = AcceptLanguage.from(request.headers.get('accept-language'))\n+\n+acceptLanguage.languages // ['en-us', 'en']\n+acceptLanguage.weights // [1, 0.9]\n+acceptLanguage.accepts('en-US') // true\n+acceptLanguage.accepts('en-GB') // true (matches en)\n+acceptLanguage.getWeight('en-GB') // 1 (matches en)\n+acceptLanguage.getPreferred(['en-US', 'en-GB', 'fr']) // 'en-US'\n+\n+// Modify and set header\n+acceptLanguage.set('fr', 0.5)\n+acceptLanguage.delete('en')\n+headers.set('Accept-Language', acceptLanguage)\n+\n+// Construct directly\n+new AcceptLanguage('en-US, en;q=0.9')\n+new AcceptLanguage({ 'en-US': 1, en: 0.9 })\n+\n+// Use class for type safety when setting Headers values\n+// via AcceptLanguage's `.toString()` method\n+let headers = new Headers({\n+\t'Accept-Language': new AcceptLanguage({ 'en-US': 1, fr: 0.5 }),\n+})\n+headers.set('Accept-Language', new AcceptLanguage({ 'en-US': 1, fr: 0.5 }))\n+```\n+\n+## Navigation\n+\n+- [Headers overview](./index.md)\n+- [Content and cache headers](./content-headers.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/headers/conditional-headers.md b/docs/agents/remix/headers/conditional-headers.md\nnew file mode 100644\nindex 0000000..1dd4cbf\n--- /dev/null\n+++ b/docs/agents/remix/headers/conditional-headers.md\n@@ -0,0 +1,192 @@\n+# Conditionals and ranges\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/headers\n+\n+## If-Match\n+\n+Parse, manipulate and stringify\n+[`If-Match` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Match).\n+\n+Implements `Set<etag>`.\n+\n+```ts\n+import { IfMatch } from '@remix-run/headers'\n+\n+// Parse from headers\n+let ifMatch = IfMatch.from(request.headers.get('if-match'))\n+\n+ifMatch.tags // ['\"67ab43\"', '\"54ed21\"']\n+ifMatch.has('\"67ab43\"') // true\n+ifMatch.matches('\"67ab43\"') // true (checks precondition)\n+ifMatch.matches('\"abc123\"') // false\n+\n+// Note: Uses strong comparison only (weak ETags never match)\n+let weak = IfMatch.from('W/\"67ab43\"')\n+weak.matches('W/\"67ab43\"') // false\n+\n+// Modify and set header\n+ifMatch.add('\"newetag\"')\n+ifMatch.delete('\"67ab43\"')\n+headers.set('If-Match', ifMatch)\n+\n+// Construct directly\n+new IfMatch(['abc123', 'def456'])\n+\n+// Use class for type safety when setting Headers values\n+// via IfMatch's `.toString()` method\n+let headers = new Headers({\n+\t'If-Match': new IfMatch(['\"abc123\"', '\"def456\"']),\n+})\n+headers.set('If-Match', new IfMatch(['\"abc123\"', '\"def456\"']))\n+```\n+\n+## If-None-Match\n+\n+Parse, manipulate and stringify\n+[`If-None-Match` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-None-Match).\n+\n+Implements `Set<etag>`.\n+\n+```ts\n+import { IfNoneMatch } from '@remix-run/headers'\n+\n+// Parse from headers\n+let ifNoneMatch = IfNoneMatch.from(request.headers.get('if-none-match'))\n+\n+ifNoneMatch.tags // ['\"67ab43\"', '\"54ed21\"']\n+ifNoneMatch.has('\"67ab43\"') // true\n+ifNoneMatch.matches('\"67ab43\"') // true\n+\n+// Supports weak comparison (unlike If-Match)\n+let weak = IfNoneMatch.from('W/\"67ab43\"')\n+weak.matches('W/\"67ab43\"') // true\n+\n+// Modify and set header\n+ifNoneMatch.add('\"newetag\"')\n+ifNoneMatch.delete('\"67ab43\"')\n+headers.set('If-None-Match', ifNoneMatch)\n+\n+// Construct directly\n+new IfNoneMatch(['abc123'])\n+\n+// Use class for type safety when setting Headers values\n+// via IfNoneMatch's `.toString()` method\n+let headers = new Headers({\n+\t'If-None-Match': new IfNoneMatch(['\"abc123\"']),\n+})\n+headers.set('If-None-Match', new IfNoneMatch(['\"abc123\"']))\n+```\n+\n+## If-Range\n+\n+Parse, manipulate and stringify\n+[`If-Range` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Range).\n+\n+```ts\n+import { IfRange } from '@remix-run/headers'\n+\n+// Parse from headers\n+let ifRange = IfRange.from(request.headers.get('if-range'))\n+\n+// With HTTP date\n+ifRange.matches({ lastModified: 1609459200000 }) // true\n+ifRange.matches({ lastModified: new Date('2021-01-01') }) // true\n+\n+// With ETag\n+let etagHeader = IfRange.from('\"67ab43\"')\n+etagHeader.matches({ etag: '\"67ab43\"' }) // true\n+\n+// Empty/null returns empty instance (range proceeds unconditionally)\n+let empty = IfRange.from(null)\n+empty.matches({ etag: '\"any\"' }) // true\n+\n+// Construct directly\n+new IfRange('\"abc123\"')\n+\n+// Use class for type safety when setting Headers values\n+// via IfRange's `.toString()` method\n+let headers = new Headers({\n+\t'If-Range': new IfRange('\"abc123\"'),\n+})\n+headers.set('If-Range', new IfRange('\"abc123\"'))\n+```\n+\n+## Range\n+\n+Parse, manipulate and stringify\n+[`Range` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Range).\n+\n+```ts\n+import { Range } from '@remix-run/headers'\n+\n+// Parse from headers\n+let range = Range.from(request.headers.get('range'))\n+\n+range.unit // \"bytes\"\n+range.ranges // [{ start: 200, end: 1000 }]\n+range.canSatisfy(2000) // true\n+range.canSatisfy(500) // false\n+range.normalize(2000) // [{ start: 200, end: 1000 }]\n+\n+// Multiple ranges\n+let multi = Range.from('bytes=0-499, 1000-1499')\n+multi.ranges.length // 2\n+\n+// Suffix range (last N bytes)\n+let suffix = Range.from('bytes=-500')\n+suffix.normalize(2000) // [{ start: 1500, end: 1999 }]\n+\n+// Construct directly\n+new Range({ unit: 'bytes', ranges: [{ start: 0, end: 999 }] })\n+\n+// Use class for type safety when setting Headers values\n+// via Range's `.toString()` method\n+let headers = new Headers({\n+\tRange: new Range({ unit: 'bytes', ranges: [{ start: 0, end: 999 }] }),\n+})\n+headers.set(\n+\t'Range',\n+\tnew Range({ unit: 'bytes', ranges: [{ start: 0, end: 999 }] }),\n+)\n+```\n+\n+## Vary\n+\n+Parse, manipulate and stringify\n+[`Vary` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Vary).\n+\n+Implements `Set<headerName>`.\n+\n+```ts\n+import { Vary } from '@remix-run/headers'\n+\n+// Parse from headers\n+let vary = Vary.from(response.headers.get('vary'))\n+\n+vary.headerNames // ['accept-encoding', 'accept-language']\n+vary.has('Accept-Encoding') // true (case-insensitive)\n+vary.size // 2\n+\n+// Modify and set header\n+vary.add('User-Agent')\n+vary.delete('Accept-Language')\n+headers.set('Vary', vary)\n+\n+// Construct directly\n+new Vary('Accept-Encoding, Accept-Language')\n+new Vary(['Accept-Encoding', 'Accept-Language'])\n+new Vary({ headerNames: ['Accept-Encoding', 'Accept-Language'] })\n+\n+// Use class for type safety when setting Headers values\n+// via Vary's `.toString()` method\n+let headers = new Headers({\n+\tVary: new Vary(['Accept-Encoding', 'Accept-Language']),\n+})\n+headers.set('Vary', new Vary(['Accept-Encoding', 'Accept-Language']))\n+```\n+\n+## Navigation\n+\n+- [Headers overview](./index.md)\n+- [Cookie headers](./cookie-headers.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/headers/content-headers.md b/docs/agents/remix/headers/content-headers.md\nnew file mode 100644\nindex 0000000..f007953\n--- /dev/null\n+++ b/docs/agents/remix/headers/content-headers.md\n@@ -0,0 +1,161 @@\n+# Content and cache headers\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/headers\n+\n+## Cache-Control\n+\n+Parse, manipulate and stringify\n+[`Cache-Control` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control).\n+\n+```ts\n+import { CacheControl } from '@remix-run/headers'\n+\n+// Parse from headers\n+let cacheControl = CacheControl.from(response.headers.get('cache-control'))\n+\n+cacheControl.public // true\n+cacheControl.maxAge // 3600\n+cacheControl.sMaxage // 7200\n+cacheControl.noCache // undefined\n+cacheControl.noStore // undefined\n+cacheControl.noTransform // undefined\n+cacheControl.mustRevalidate // undefined\n+cacheControl.immutable // undefined\n+\n+// Modify and set header\n+cacheControl.maxAge = 7200\n+cacheControl.immutable = true\n+headers.set('Cache-Control', cacheControl)\n+\n+// Construct directly\n+new CacheControl('public, max-age=3600')\n+new CacheControl({ public: true, maxAge: 3600 })\n+\n+// Use class for type safety when setting Headers values\n+// via CacheControl's `.toString()` method\n+let headers = new Headers({\n+\t'Cache-Control': new CacheControl({ public: true, maxAge: 3600 }),\n+})\n+headers.set('Cache-Control', new CacheControl({ public: true, maxAge: 3600 }))\n+```\n+\n+## Content-Disposition\n+\n+Parse, manipulate and stringify\n+[`Content-Disposition` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Disposition).\n+\n+```ts\n+import { ContentDisposition } from '@remix-run/headers'\n+\n+// Parse from headers\n+let contentDisposition = ContentDisposition.from(\n+\tresponse.headers.get('content-disposition'),\n+)\n+\n+contentDisposition.type // 'attachment'\n+contentDisposition.filename // 'example.pdf'\n+contentDisposition.filenameSplat // \"UTF-8''example.pdf\"\n+contentDisposition.preferredFilename // 'example.pdf' (decoded from filename*)\n+\n+// Modify and set header\n+contentDisposition.filename = 'download.pdf'\n+headers.set('Content-Disposition', contentDisposition)\n+\n+// Construct directly\n+new ContentDisposition('attachment; filename=\"example.pdf\"')\n+new ContentDisposition({ type: 'attachment', filename: 'example.pdf' })\n+\n+// Use class for type safety when setting Headers values\n+// via ContentDisposition's `.toString()` method\n+let headers = new Headers({\n+\t'Content-Disposition': new ContentDisposition({\n+\t\ttype: 'attachment',\n+\t\tfilename: 'example.pdf',\n+\t}),\n+})\n+headers.set(\n+\t'Content-Disposition',\n+\tnew ContentDisposition({ type: 'attachment', filename: 'example.pdf' }),\n+)\n+```\n+\n+## Content-Range\n+\n+Parse, manipulate and stringify\n+[`Content-Range` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Range).\n+\n+```ts\n+import { ContentRange } from '@remix-run/headers'\n+\n+// Parse from headers\n+let contentRange = ContentRange.from(response.headers.get('content-range'))\n+\n+contentRange.unit // \"bytes\"\n+contentRange.start // 200\n+contentRange.end // 1000\n+contentRange.size // 67589\n+\n+// Unsatisfied range\n+let unsatisfied = ContentRange.from('bytes */67589')\n+unsatisfied.start // null\n+unsatisfied.end // null\n+unsatisfied.size // 67589\n+\n+// Construct directly\n+new ContentRange({ unit: 'bytes', start: 0, end: 499, size: 1000 })\n+\n+// Use class for type safety when setting Headers values\n+// via ContentRange's `.toString()` method\n+let headers = new Headers({\n+\t'Content-Range': new ContentRange({\n+\t\tunit: 'bytes',\n+\t\tstart: 0,\n+\t\tend: 499,\n+\t\tsize: 1000,\n+\t}),\n+})\n+headers.set(\n+\t'Content-Range',\n+\tnew ContentRange({ unit: 'bytes', start: 0, end: 499, size: 1000 }),\n+)\n+```\n+\n+## Content-Type\n+\n+Parse, manipulate and stringify\n+[`Content-Type` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Type).\n+\n+```ts\n+import { ContentType } from '@remix-run/headers'\n+\n+// Parse from headers\n+let contentType = ContentType.from(request.headers.get('content-type'))\n+\n+contentType.mediaType // \"text/html\"\n+contentType.charset // \"utf-8\"\n+contentType.boundary // undefined (or boundary string for multipart)\n+\n+// Modify and set header\n+contentType.charset = 'iso-8859-1'\n+headers.set('Content-Type', contentType)\n+\n+// Construct directly\n+new ContentType('text/html; charset=utf-8')\n+new ContentType({ mediaType: 'text/html', charset: 'utf-8' })\n+\n+// Use class for type safety when setting Headers values\n+// via ContentType's `.toString()` method\n+let headers = new Headers({\n+\t'Content-Type': new ContentType({ mediaType: 'text/html', charset: 'utf-8' }),\n+})\n+headers.set(\n+\t'Content-Type',\n+\tnew ContentType({ mediaType: 'text/html', charset: 'utf-8' }),\n+)\n+```\n+\n+## Navigation\n+\n+- [Headers overview](./index.md)\n+- [Accept headers](./accept-headers.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/headers/cookie-headers.md b/docs/agents/remix/headers/cookie-headers.md\nnew file mode 100644\nindex 0000000..65e4fa3\n--- /dev/null\n+++ b/docs/agents/remix/headers/cookie-headers.md\n@@ -0,0 +1,104 @@\n+# Cookie headers\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/headers\n+\n+## Cookie\n+\n+Parse, manipulate and stringify\n+[`Cookie` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cookie).\n+\n+Implements `Map<name, value>`.\n+\n+```ts\n+import { Cookie } from '@remix-run/headers'\n+\n+// Parse from headers\n+let cookie = Cookie.from(request.headers.get('cookie'))\n+\n+cookie.get('session_id') // 'abc123'\n+cookie.get('theme') // 'dark'\n+cookie.has('session_id') // true\n+cookie.size // 2\n+\n+// Iterate\n+for (let [name, value] of cookie) {\n+\t// ...\n+}\n+\n+// Modify and set header\n+cookie.set('theme', 'light')\n+cookie.delete('session_id')\n+headers.set('Cookie', cookie)\n+\n+// Construct directly\n+new Cookie('session_id=abc123; theme=dark')\n+new Cookie({ session_id: 'abc123', theme: 'dark' })\n+new Cookie([\n+\t['session_id', 'abc123'],\n+\t['theme', 'dark'],\n+])\n+\n+// Use class for type safety when setting Headers values\n+// via Cookie's `.toString()` method\n+let headers = new Headers({\n+\tCookie: new Cookie({ session_id: 'abc123', theme: 'dark' }),\n+})\n+headers.set('Cookie', new Cookie({ session_id: 'abc123', theme: 'dark' }))\n+```\n+\n+## Set-Cookie\n+\n+Parse, manipulate and stringify\n+[`Set-Cookie` headers](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie).\n+\n+```ts\n+import { SetCookie } from '@remix-run/headers'\n+\n+// Parse from headers\n+let setCookie = SetCookie.from(response.headers.get('set-cookie'))\n+\n+setCookie.name // \"session_id\"\n+setCookie.value // \"abc\"\n+setCookie.path // \"/\"\n+setCookie.httpOnly // true\n+setCookie.secure // true\n+setCookie.domain // undefined\n+setCookie.maxAge // undefined\n+setCookie.expires // undefined\n+setCookie.sameSite // undefined\n+\n+// Modify and set header\n+setCookie.maxAge = 3600\n+setCookie.sameSite = 'Strict'\n+headers.set('Set-Cookie', setCookie)\n+\n+// Construct directly\n+new SetCookie('session_id=abc; Path=/; HttpOnly; Secure')\n+new SetCookie({\n+\tname: 'session_id',\n+\tvalue: 'abc',\n+\tpath: '/',\n+\thttpOnly: true,\n+\tsecure: true,\n+})\n+\n+// Use class for type safety when setting Headers values\n+// via SetCookie's `.toString()` method\n+let headers = new Headers({\n+\t'Set-Cookie': new SetCookie({\n+\t\tname: 'session_id',\n+\t\tvalue: 'abc',\n+\t\thttpOnly: true,\n+\t}),\n+})\n+headers.set(\n+\t'Set-Cookie',\n+\tnew SetCookie({ name: 'session_id', value: 'abc', httpOnly: true }),\n+)\n+```\n+\n+## Navigation\n+\n+- [Headers overview](./index.md)\n+- [Conditionals and ranges](./conditional-headers.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/headers/index.md b/docs/agents/remix/headers/index.md\nnew file mode 100644\nindex 0000000..ab77435\n--- /dev/null\n+++ b/docs/agents/remix/headers/index.md\n@@ -0,0 +1,30 @@\n+# headers\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/headers\n+\n+## Overview\n+\n+Utilities for parsing, manipulating and stringifying HTTP header values.\n+\n+HTTP headers contain critical information - from content negotiation and caching\n+directives to authentication tokens and file metadata. While the native\n+`Headers` API provides a basic string-based interface, it leaves the\n+complexities of parsing specific header formats entirely up to you.\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/headers\n+```\n+\n+## Header utilities\n+\n+- Accept headers: [accept-headers](./accept-headers.md)\n+- Content and cache headers: [content-headers](./content-headers.md)\n+- Cookies: [cookie-headers](./cookie-headers.md)\n+- Conditionals and ranges: [conditional-headers](./conditional-headers.md)\n+- Raw header parsing: [raw-headers](./raw-headers.md)\n+\n+## Navigation\n+\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/headers/raw-headers.md b/docs/agents/remix/headers/raw-headers.md\nnew file mode 100644\nindex 0000000..eeea369\n--- /dev/null\n+++ b/docs/agents/remix/headers/raw-headers.md\n@@ -0,0 +1,34 @@\n+# Raw header parsing\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/headers\n+\n+## Raw headers\n+\n+Parse and stringify raw HTTP header strings.\n+\n+```ts\n+import { parse, stringify } from '@remix-run/headers'\n+\n+let headers = parse('Content-Type: text/html\\\\r\\\\nCache-Control: no-cache')\n+headers.get('content-type') // 'text/html'\n+headers.get('cache-control') // 'no-cache'\n+\n+stringify(headers)\n+// 'Content-Type: text/html\\\\r\\\\nCache-Control: no-cache'\n+```\n+\n+## Related packages\n+\n+- [`fetch-proxy`](https://github.com/remix-run/remix/tree/main/packages/fetch-proxy) -\n+ Build HTTP proxy servers using the web fetch API\n+- [`node-fetch-server`](https://github.com/remix-run/remix/tree/main/packages/node-fetch-server) -\n+ Build HTTP servers on Node.js using the web fetch API\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Headers overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/html-template.md b/docs/agents/remix/html-template.md\nnew file mode 100644\nindex 0000000..392b51e\n--- /dev/null\n+++ b/docs/agents/remix/html-template.md\n@@ -0,0 +1,127 @@\n+# html-template\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/html-template\n+\n+## README\n+\n+Safe HTML template tag with auto-escaping for JavaScript.\n+\n+Building HTML strings with user input is dangerous. Without proper escaping, you\n+risk XSS (cross-site scripting) vulnerabilities where malicious code can be\n+injected into your pages. Manual escaping is error-prone and easy to forget,\n+especially when composing HTML from multiple sources.\n+\n+`html-template` provides a tagged template literal for safely constructing HTML\n+strings with automatic escaping of interpolated values to prevent XSS\n+vulnerabilities.\n+\n+## Features\n+\n+- **Automatic HTML escaping** - All interpolated values are escaped by default\n+- **Explicit raw HTML** - Use `html.raw` when you need unescaped HTML from\n+ trusted sources\n+- **Composable** - SafeHtml values can be nested without double-escaping\n+- **Type-safe** - Full TypeScript support with branded types\n+- **Zero dependencies** - Lightweight and self-contained\n+- **Runtime agnostic** - Works in Node.js, Bun, Deno, browsers, and edge\n+ runtimes\n+\n+## Installation\n+\n+Install from [npm](https://www.npmjs.com/):\n+\n+```sh\n+npm install @remix-run/html-template\n+```\n+\n+## Usage\n+\n+```ts\n+import { html } from '@remix-run/html-template'\n+\n+let userInput = '<script>alert(\"XSS\")</script>'\n+let greeting = html`<h1>Hello ${userInput}!</h1>`\n+\n+console.log(String(greeting))\n+// Output: <h1>Hello <script>alert(\"XSS\")</script>!</h1>\n+```\n+\n+By default, all interpolated values are automatically escaped to prevent XSS\n+attacks.\n+\n+If you have trusted HTML that should not be escaped, use `html.raw`:\n+\n+```ts\n+import { html } from '@remix-run/html-template'\n+\n+let trustedIcon = '<svg>...</svg>'\n+let button = html.raw`<button>${trustedIcon} Click me</button>`\n+\n+console.log(String(button))\n+// => <button><svg>...</svg> Click me</button>\n+```\n+\n+**Warning**: Only use `html.raw` with content you trust. Never use it with user\n+input.\n+\n+### Composing HTML Fragments\n+\n+SafeHtml values can be nested without double-escaping:\n+\n+```ts\n+import { html } from '@remix-run/html-template'\n+\n+let title = html`<h1>My Title</h1>`\n+let content = html`<p>Some content with ${userInput}</p>`\n+\n+let page = html`\n+\t<!doctype html>\n+\t<html>\n+\t\t<body>\n+\t\t\t${title} ${content}\n+\t\t</body>\n+\t</html>\n+`\n+```\n+\n+### Working with Arrays\n+\n+You can interpolate arrays of values, which will be flattened and joined:\n+\n+```ts\n+import { html } from '@remix-run/html-template'\n+\n+let items = ['Apple', 'Banana', 'Cherry']\n+let list = html`\n+\t<ul>\n+\t\t${items.map((item) => html`<li>${item}</li>`)}\n+\t</ul>\n+`\n+```\n+\n+### Conditional Rendering\n+\n+Use `null` or `undefined` to render nothing:\n+\n+```ts\n+import { html } from '@remix-run/html-template'\n+\n+let showError = false\n+let errorMessage = 'Something went wrong'\n+let page = html`<div>\n+\t${showError ? html`<div class=\"error\">${errorMessage}</div>` : null}\n+</div>`\n+```\n+\n+## Related Packages\n+\n+- [`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ HTTP router that works great with html-template\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/index.md b/docs/agents/remix/index.md\nnew file mode 100644\nindex 0000000..0e1148f\n--- /dev/null\n+++ b/docs/agents/remix/index.md\n@@ -0,0 +1,183 @@\n+# Remix packages\n+\n+Docs for every package in https://github.com/remix-run/remix/tree/main/packages.\n+\n+## Table of contents\n+\n+- [Start here](#start-here)\n+- [UI and components](#ui-and-components)\n+- [Routing and requests](#routing-and-requests)\n+- [Data and SQL](#data-and-sql)\n+- [Sessions and cookies](#sessions-and-cookies)\n+- [Responses and headers](#responses-and-headers)\n+- [Uploads and parsing](#uploads-and-parsing)\n+- [Files and storage](#files-and-storage)\n+- [Middleware and utilities](#middleware-and-utilities)\n+- [Package map](#package-map)\n+- [Update instructions](#update-instructions)\n+\n+## Start here\n+\n+- Building UI with Remix Component: [component](./component/index.md)\n+- Routing and request handling: [fetch-router](./fetch-router/index.md) +\n+ [route-pattern](./route-pattern.md)\n+- Sessions and cookies: [session](./session/index.md) +\n+ [session-middleware](./session-middleware.md) + [cookie](./cookie.md)\n+- Responses, headers, and HTML safety: [response](./response/index.md) +\n+ [headers](./headers/index.md) + [html-template](./html-template.md)\n+- Data validation and SQL tables: [data-schema](./data-schema.md) +\n+ [data-table](./data-table.md)\n+- File upload pipelines: [form-data-middleware](./form-data-middleware.md) +\n+ [form-data-parser](./form-data-parser.md) +\n+ [multipart-parser](./multipart-parser/index.md)\n+- File storage and streaming: [file-storage](./file-storage.md) +\n+ [file-storage-s3](./file-storage-s3.md) + [lazy-file](./lazy-file.md) +\n+ [fs](./fs.md)\n+- Static assets and compression: [static-middleware](./static-middleware.md) +\n+ [compression-middleware](./compression-middleware/index.md)\n+\n+## epic-scheduler adoption snapshot\n+\n+- Primary runtime packages in active use:\n+ - `remix/component`\n+ - `remix/fetch-router`\n+ - `remix/data-schema`\n+ - `remix/data-table`\n+- D1 integration uses `remix/data-table` with a repository adapter\n+ (`worker/d1-data-table-adapter.ts`) instead of `remix/data-table-sqlite`.\n+- Package coverage audit against installed `remix@3.0.0-alpha.3` top-level\n+ exports: no missing Remix package docs in this index.\n+\n+## UI and components\n+\n+- [component](./component/index.md)\n+ - [Getting started](./component/getting-started.md)\n+ - [Components](./component/components.md)\n+ - [Styling basics](./component/styling-basics.md)\n+ - [Animate basics](./component/animate-basics.md)\n+ - [Testing](./component/testing.md)\n+- [interaction](./interaction/index.md)\n+ - [Event listeners and interactions](./interaction/listeners.md)\n+ - [Containers and disposal](./interaction/containers-and-disposal.md)\n+ - [Custom interactions and typed targets](./interaction/custom-interactions.md)\n+\n+## Routing and requests\n+\n+- [fetch-router](./fetch-router/index.md)\n+ - [Basic usage and route maps](./fetch-router/usage.md)\n+ - [Routing based on request method](./fetch-router/routing-methods.md)\n+ - [Resource-based routes](./fetch-router/routing-resources.md)\n+ - [Middleware and request context](./fetch-router/middleware.md)\n+- [route-pattern](./route-pattern.md)\n+- [node-fetch-server](./node-fetch-server/index.md)\n+ - [Quick start](./node-fetch-server/quick-start.md)\n+ - [Advanced usage](./node-fetch-server/advanced-usage.md)\n+ - [Migration from Express](./node-fetch-server/migration.md)\n+ - [Demos and benchmark](./node-fetch-server/demos-and-benchmark.md)\n+- [fetch-proxy](./fetch-proxy.md)\n+\n+## Data and SQL\n+\n+- [data-schema](./data-schema.md)\n+- [data-table](./data-table.md)\n+- [data-table-postgres](./data-table-postgres.md)\n+- [data-table-mysql](./data-table-mysql.md)\n+- [data-table-sqlite](./data-table-sqlite.md)\n+\n+## Sessions and cookies\n+\n+- [session](./session/index.md)\n+ - [Flash data and security](./session/flash-and-security.md)\n+ - [Storage strategies](./session/storage-strategies.md)\n+ - [Related packages](./session/related.md)\n+- [session-middleware](./session-middleware.md)\n+- [session-storage-memcache](./session-storage-memcache.md)\n+- [session-storage-redis](./session-storage-redis.md)\n+- [cookie](./cookie.md)\n+\n+## Responses and headers\n+\n+- [response](./response/index.md)\n+ - [File responses](./response/file-responses.md)\n+ - [HTML responses](./response/html-responses.md)\n+ - [Redirect responses](./response/redirect-responses.md)\n+ - [Compressed responses](./response/compress-responses.md)\n+ - [Related packages](./response/related.md)\n+- [headers](./headers/index.md)\n+ - [Accept headers](./headers/accept-headers.md)\n+ - [Content and cache headers](./headers/content-headers.md)\n+ - [Cookie headers](./headers/cookie-headers.md)\n+ - [Conditionals and ranges](./headers/conditional-headers.md)\n+ - [Raw header parsing](./headers/raw-headers.md)\n+- [html-template](./html-template.md)\n+\n+## Uploads and parsing\n+\n+- [form-data-middleware](./form-data-middleware.md)\n+- [form-data-parser](./form-data-parser.md)\n+- [multipart-parser](./multipart-parser/index.md)\n+ - [Limits and Node bindings](./multipart-parser/limits-and-node.md)\n+ - [Low-level APIs](./multipart-parser/low-level.md)\n+ - [Benchmarks and related packages](./multipart-parser/benchmarks.md)\n+\n+## Files and storage\n+\n+- [file-storage](./file-storage.md)\n+- [file-storage-s3](./file-storage-s3.md)\n+- [lazy-file](./lazy-file.md)\n+- [fs](./fs.md)\n+- [tar-parser](./tar-parser.md)\n+\n+## Middleware and utilities\n+\n+- [compression-middleware](./compression-middleware/index.md)\n+ - [Options and configuration](./compression-middleware/options.md)\n+- [static-middleware](./static-middleware.md)\n+- [logger-middleware](./logger-middleware.md)\n+- [method-override-middleware](./method-override-middleware.md)\n+- [async-context-middleware](./async-context-middleware.md)\n+- [mime](./mime.md)\n+- [remix](./remix.md)\n+\n+## Package map\n+\n+| Package | Focus | Docs |\n+| -------------------------- | ------------------------------------------ | ------------------------------------------------------------- |\n+| async-context-middleware | AsyncLocalStorage context for fetch-router | [async-context-middleware](./async-context-middleware.md) |\n+| component | Remix Component UI system | [component](./component/index.md) |\n+| compression-middleware | Response compression for fetch-router | [compression-middleware](./compression-middleware/index.md) |\n+| cookie | Cookie parsing, signing, and serialization | [cookie](./cookie.md) |\n+| data-schema | Runtime validation and schema parsing | [data-schema](./data-schema.md) |\n+| data-table | Typed SQL query toolkit | [data-table](./data-table.md) |\n+| data-table-mysql | MySQL adapter for data-table | [data-table-mysql](./data-table-mysql.md) |\n+| data-table-postgres | Postgres adapter for data-table | [data-table-postgres](./data-table-postgres.md) |\n+| data-table-sqlite | SQLite adapter for data-table | [data-table-sqlite](./data-table-sqlite.md) |\n+| fetch-proxy | Fetch-based HTTP proxy | [fetch-proxy](./fetch-proxy.md) |\n+| fetch-router | Fetch-based router and middleware | [fetch-router](./fetch-router/index.md) |\n+| file-storage | Storage abstraction for files | [file-storage](./file-storage.md) |\n+| file-storage-s3 | S3 backend for file-storage | [file-storage-s3](./file-storage-s3.md) |\n+| form-data-middleware | Request FormData middleware | [form-data-middleware](./form-data-middleware.md) |\n+| form-data-parser | Streaming multipart/form-data parser | [form-data-parser](./form-data-parser.md) |\n+| fs | Lazy file system utilities | [fs](./fs.md) |\n+| headers | Header parsing and helpers | [headers](./headers/index.md) |\n+| html-template | Safe HTML template tag | [html-template](./html-template.md) |\n+| interaction | Event helpers and interactions | [interaction](./interaction/index.md) |\n+| lazy-file | Streaming File/Blob implementation | [lazy-file](./lazy-file.md) |\n+| logger-middleware | Request/response logging | [logger-middleware](./logger-middleware.md) |\n+| method-override-middleware | HTML form method override | [method-override-middleware](./method-override-middleware.md) |\n+| mime | MIME type utilities | [mime](./mime.md) |\n+| multipart-parser | Streaming multipart parser | [multipart-parser](./multipart-parser/index.md) |\n+| node-fetch-server | Fetch-based Node server | [node-fetch-server](./node-fetch-server/index.md) |\n+| remix | Remix framework package | [remix](./remix.md) |\n+| response | Response helpers | [response](./response/index.md) |\n+| route-pattern | URL matching and href generation | [route-pattern](./route-pattern.md) |\n+| session | Session management and storage | [session](./session/index.md) |\n+| session-middleware | Session middleware for fetch-router | [session-middleware](./session-middleware.md) |\n+| session-storage-memcache | Memcache storage adapter for sessions | [session-storage-memcache](./session-storage-memcache.md) |\n+| session-storage-redis | Redis storage adapter for sessions | [session-storage-redis](./session-storage-redis.md) |\n+| static-middleware | Static file middleware | [static-middleware](./static-middleware.md) |\n+| tar-parser | Streaming tar parser | [tar-parser](./tar-parser.md) |\n+\n+## Update instructions\n+\n+See [update](./update.md) for how to sync this documentation from upstream.\ndiff --git a/docs/agents/remix/interaction/containers-and-disposal.md b/docs/agents/remix/interaction/containers-and-disposal.md\nnew file mode 100644\nindex 0000000..10c1116\n--- /dev/null\n+++ b/docs/agents/remix/interaction/containers-and-disposal.md\n@@ -0,0 +1,86 @@\n+# Containers and disposal\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/interaction\n+\n+## Updating listeners efficiently\n+\n+Use `createContainer` when you need to update listeners in place (e.g., in a\n+component system). The container diffs and updates existing bindings without\n+unnecessary `removeEventListener`/`addEventListener` churn.\n+\n+```ts\n+import { createContainer } from '@remix-run/interaction'\n+\n+let container = createContainer(form)\n+\n+let formData = new FormData()\n+\n+container.set({\n+\tchange(event) {\n+\t\tformData = new FormData(event.currentTarget)\n+\t},\n+\tasync submit(event, signal) {\n+\t\tevent.preventDefault()\n+\t\tawait fetch('/save', { method: 'POST', body: formData, signal })\n+\t},\n+})\n+\n+// later - only the minimal necessary changes are rebound\n+container.set({\n+\tchange(event) {\n+\t\tconsole.log('different listener')\n+\t},\n+\tsubmit(event, signal) {\n+\t\tconsole.log('different listener')\n+\t},\n+})\n+```\n+\n+## Disposing listeners\n+\n+`on` returns a dispose function. Containers expose `dispose()`. You can also\n+pass an external `AbortSignal`.\n+\n+```ts\n+import { on, createContainer } from '@remix-run/interaction'\n+\n+// Using the function returned from on()\n+let dispose = on(button, { click: () => {} })\n+dispose()\n+\n+// Containers\n+let container = createContainer(window)\n+container.set({ resize: () => {} })\n+container.dispose()\n+\n+// Use a signal\n+let eventsController = new AbortController()\n+let container = createContainer(window, {\n+\tsignal: eventsController.signal,\n+})\n+container.set({ resize: () => {} })\n+eventsController.abort()\n+```\n+\n+## Stop propagation semantics\n+\n+All DOM semantics are preserved.\n+\n+```ts\n+on(button, {\n+\tclick: [\n+\t\t(event) => {\n+\t\t\tevent.stopImmediatePropagation()\n+\t\t},\n+\t\t() => {\n+\t\t\t// not called\n+\t\t},\n+\t],\n+})\n+```\n+\n+## Navigation\n+\n+- [Event listeners and interactions](./listeners.md)\n+- [interaction overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/interaction/custom-interactions.md b/docs/agents/remix/interaction/custom-interactions.md\nnew file mode 100644\nindex 0000000..c47f854\n--- /dev/null\n+++ b/docs/agents/remix/interaction/custom-interactions.md\n@@ -0,0 +1,120 @@\n+# Custom interactions and typed targets\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/interaction\n+\n+## Custom interactions\n+\n+Define semantic interactions that can dispatch custom events and be reused\n+declaratively.\n+\n+```ts\n+import { defineInteraction, on, type Interaction } from '@remix-run/interaction'\n+\n+// Provide type safety for consumers\n+declare global {\n+\tinterface HTMLElementEventMap {\n+\t\t[keydownEnter]: KeyboardEvent\n+\t}\n+}\n+\n+function KeydownEnter(handle: Interaction) {\n+\tif (!(handle.target instanceof HTMLElement)) return\n+\n+\thandle.on(handle.target, {\n+\t\tkeydown(event) {\n+\t\t\tif (event.key === 'Enter') {\n+\t\t\t\thandle.target.dispatchEvent(\n+\t\t\t\t\tnew KeyboardEvent(keydownEnter, { key: 'Enter' }),\n+\t\t\t\t)\n+\t\t\t}\n+\t\t},\n+\t})\n+}\n+\n+// define the interaction type and setup function\n+const keydownEnter = defineInteraction('keydown:enter', KeydownEnter)\n+\n+// usage\n+let button = document.createElement('button')\n+on(button, {\n+\t[keydownEnter](event) {\n+\t\tconsole.log('Enter key pressed')\n+\t},\n+})\n+```\n+\n+Notes:\n+\n+- An interaction is initialized at most once per target, even if multiple\n+ listeners bind the same interaction type.\n+\n+## Typed event targets\n+\n+Use `TypedEventTarget<eventMap>` to get type-safe `addEventListener` and\n+integrate with this library's `on` helpers.\n+\n+```ts\n+import { TypedEventTarget, on } from '@remix-run/interaction'\n+\n+interface DrummerEventMap {\n+\tkick: DrummerEvent\n+\tsnare: DrummerEvent\n+\that: DrummerEvent\n+}\n+\n+class DrummerEvent extends Event {\n+\tconstructor(type: keyof DrummerEventMap) {\n+\t\tsuper(type)\n+\t}\n+}\n+\n+class Drummer extends TypedEventTarget<DrummerEventMap> {\n+\tkick() {\n+\t\t// ...\n+\t\tthis.dispatchEvent(new DrummerEvent('kick'))\n+\t}\n+}\n+\n+let drummer = new Drummer()\n+\n+// native API is NOT typed\n+drummer.addEventListener('kick', (event) => {\n+\t// event is DrummerEvent\n+})\n+\n+// type safe with on()\n+on(drummer, {\n+\tkick: (event) => {\n+\t\t// event is Dispatched<DrummerEvent, Drummer>\n+\t},\n+})\n+```\n+\n+## Demos\n+\n+The\n+[`demos` directory](https://github.com/remix-run/remix/tree/main/packages/interaction/demos)\n+contains working demos:\n+\n+- [`demos/async`](https://github.com/remix-run/remix/tree/main/packages/interaction/demos/async) -\n+ Async listeners with abort signal\n+- [`demos/basic`](https://github.com/remix-run/remix/tree/main/packages/interaction/demos/basic) -\n+ Basic event handling\n+- [`demos/form`](https://github.com/remix-run/remix/tree/main/packages/interaction/demos/form) -\n+ Form event handling\n+- [`demos/keys`](https://github.com/remix-run/remix/tree/main/packages/interaction/demos/keys) -\n+ Keyboard interactions\n+- [`demos/popover`](https://github.com/remix-run/remix/tree/main/packages/interaction/demos/popover) -\n+ Popover interactions\n+- [`demos/press`](https://github.com/remix-run/remix/tree/main/packages/interaction/demos/press) -\n+ Press and long press interactions\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [interaction overview](./index.md)\n+- [Event listeners and interactions](./listeners.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/interaction/index.md b/docs/agents/remix/interaction/index.md\nnew file mode 100644\nindex 0000000..fd1ba2c\n--- /dev/null\n+++ b/docs/agents/remix/interaction/index.md\n@@ -0,0 +1,45 @@\n+# interaction\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/interaction\n+\n+## Overview\n+\n+Enhanced events and custom interactions for any\n+[EventTarget](https://developer.mozilla.org/en-US/docs/Web/API/EventTarget).\n+\n+## Features\n+\n+- **Declarative Bindings** - Event bindings with plain objects\n+- **Semantic Interactions** - Reusable \"interactions\" like `longPress` and\n+ `arrowDown`\n+- **Async Support** - Listeners with reentry protection via\n+ [AbortSignal](https://developer.mozilla.org/en-US/docs/Web/API/AbortSignal)\n+- **Type Safety** - Type-safe listeners and custom `EventTarget` subclasses with\n+ `TypedEventTarget`\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/interaction\n+```\n+\n+## Quick start\n+\n+```ts\n+import { on } from '@remix-run/interaction'\n+\n+let inputElement = document.createElement('input')\n+\n+on(inputElement, {\n+\tinput: (event, signal) => {\n+\t\tconsole.log('current value', event.currentTarget.value)\n+\t},\n+})\n+```\n+\n+## Navigation\n+\n+- [Event listeners and interactions](./listeners.md)\n+- [Containers and disposal](./containers-and-disposal.md)\n+- [Custom interactions and typed targets](./custom-interactions.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/interaction/listeners.md b/docs/agents/remix/interaction/listeners.md\nnew file mode 100644\nindex 0000000..970cdfb\n--- /dev/null\n+++ b/docs/agents/remix/interaction/listeners.md\n@@ -0,0 +1,138 @@\n+# Event listeners and interactions\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/interaction\n+\n+## Adding event listeners\n+\n+Use `on(target, listeners)` to add one or more listeners. Each listener receives\n+`(event, signal)` where `signal` is aborted on reentry.\n+\n+```ts\n+import { on } from '@remix-run/interaction'\n+\n+let inputElement = document.createElement('input')\n+\n+on(inputElement, {\n+\tinput: (event, signal) => {\n+\t\tconsole.log('current value', event.currentTarget.value)\n+\t},\n+})\n+```\n+\n+Listeners can be arrays. They run in order and preserve normal DOM semantics\n+(including `stopImmediatePropagation`).\n+\n+```ts\n+import { on } from '@remix-run/interaction'\n+\n+on(inputElement, {\n+\tinput: [\n+\t\t(event) => {\n+\t\t\tconsole.log('first')\n+\t\t},\n+\t\t{\n+\t\t\tcapture: true,\n+\t\t\tlistener(event) {\n+\t\t\t\t// capture phase\n+\t\t\t},\n+\t\t},\n+\t\t{\n+\t\t\tonce: true,\n+\t\t\tlistener(event) {\n+\t\t\t\tconsole.log('only once')\n+\t\t\t},\n+\t\t},\n+\t],\n+})\n+```\n+\n+## Built-in interactions\n+\n+Builtin interactions are higher-level, semantic event types (e.g., `press`,\n+`longPress`, arrow keys) exported as string constants. Consume them just like\n+native events by using computed keys in your listener map. When you bind one,\n+the necessary underlying host events are set up automatically.\n+\n+```tsx\n+import { on } from '@remix-run/interaction'\n+import { press, longPress } from '@remix-run/interaction/press'\n+\n+on(listItem, {\n+\t[press](event) {\n+\t\tnavigateTo(listItem.href)\n+\t},\n+\n+\t[longPress](event) {\n+\t\tevent.preventDefault() // prevents `press`\n+\t\tshowActions()\n+\t},\n+})\n+```\n+\n+Import builtins from their modules (for example, `@remix-run/interaction/press`,\n+`@remix-run/interaction/keys`). Some interactions may coordinate with others\n+(for example, calling `event.preventDefault()` in one listener can prevent a\n+related interaction from firing).\n+\n+## Async listeners and reentry protection\n+\n+The `signal` is aborted when the same listener is re-entered (for example, a\n+user types quickly and triggers `input` repeatedly). Pass it to async APIs or\n+check it manually to avoid stale work.\n+\n+```ts\n+on(inputElement, {\n+\tasync input(event, signal) {\n+\t\tshowSearchSpinner()\n+\n+\t\t// Abortable fetch\n+\t\tlet res = await fetch(`/search?q=${event.currentTarget.value}`, { signal })\n+\t\tlet results = await res.json()\n+\t\tupdateResults(results)\n+\t},\n+})\n+```\n+\n+For APIs that don't accept a signal:\n+\n+```ts\n+on(inputElement, {\n+\tasync input(event, signal) {\n+\t\tshowSearchSpinner()\n+\t\tlet results = await someSearch(event.currentTarget.value)\n+\t\tif (signal.aborted) return\n+\t\tupdateResults(results)\n+\t},\n+})\n+```\n+\n+## Event listener options\n+\n+All DOM\n+[`AddEventListenerOptions`](https://developer.mozilla.org/en-US/docs/Web/API/EventTarget/addEventListener#options)\n+are supported via descriptors:\n+\n+```ts\n+import { on } from '@remix-run/interaction'\n+\n+on(button, {\n+\tclick: {\n+\t\tcapture: true,\n+\t\tlistener(event) {\n+\t\t\tconsole.log('capture phase')\n+\t\t},\n+\t},\n+\tfocus: {\n+\t\tonce: true,\n+\t\tlistener(event) {\n+\t\t\tconsole.log('focused once')\n+\t\t},\n+\t},\n+})\n+```\n+\n+## Navigation\n+\n+- [Containers and disposal](./containers-and-disposal.md)\n+- [interaction overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/lazy-file.md b/docs/agents/remix/lazy-file.md\nnew file mode 100644\nindex 0000000..6f86e9c\n--- /dev/null\n+++ b/docs/agents/remix/lazy-file.md\n@@ -0,0 +1,146 @@\n+# lazy-file\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/lazy-file\n+\n+## README\n+\n+`lazy-file` is a lazy, streaming `Blob`/`File` implementation for JavaScript.\n+\n+It allows you to easily create\n+[Blob](https://developer.mozilla.org/en-US/docs/Web/API/Blob)-like and\n+[File](https://developer.mozilla.org/en-US/docs/Web/API/File)-like objects that\n+defer reading their contents until needed, which is ideal for situations where a\n+file's contents do not fit in memory all at once. When file contents are read,\n+they are streamed to avoid buffering.\n+\n+## Features\n+\n+- **Deferred Loading** - Blob/file contents loaded on demand to minimize memory\n+ usage\n+- **Familiar Interface** - `LazyBlob` and `LazyFile` implement the same\n+ interface as native `Blob` and `File`\n+- **Easy Conversion** - Convert to native `ReadableStream` with `.stream()`, or\n+ to native `Blob`/`File` with `.toBlob()` and `.toFile()`\n+- **Standard Constructors** - Accepts all the same content types as the original\n+ [`Blob()`](https://developer.mozilla.org/en-US/docs/Web/API/Blob/Blob) and\n+ [`File()`](https://developer.mozilla.org/en-US/docs/Web/API/File/File)\n+ constructors\n+- **Slice Support** - Supports\n+ [`Blob.slice()`](https://developer.mozilla.org/en-US/docs/Web/API/Blob/slice),\n+ even on streaming content\n+\n+## The Problem\n+\n+JavaScript's [File API](https://developer.mozilla.org/en-US/docs/Web/API/File)\n+is useful, but it's not a great fit for streaming server environments where you\n+don't want to buffer file contents. In particular,\n+[`the File() constructor`](https://developer.mozilla.org/en-US/docs/Web/API/File/File)\n+requires the contents of a file to be supplied up front when the object is first\n+created, like this:\n+\n+```ts\n+let file = new File(['hello world'], 'hello.txt', { type: 'text/plain' })\n+```\n+\n+A `LazyFile` improves this model by accepting an additional content type in its\n+constructor: `LazyContent`.\n+\n+```ts\n+let lazyContent: LazyContent = {\n+\t/* See below for usage */\n+}\n+let lazyFile = new LazyFile(lazyContent, 'hello.txt', { type: 'text/plain' })\n+```\n+\n+All other `File` functionality works as you'd expect.\n+\n+## Installation\n+\n+Install from [npm](https://www.npmjs.com/):\n+\n+```sh\n+npm install @remix-run/lazy-file\n+```\n+\n+## Usage\n+\n+The low-level API can be used to create a `LazyFile` that streams content from\n+anywhere:\n+\n+```ts\n+import { type LazyContent, LazyFile } from '@remix-run/lazy-file'\n+\n+let content: LazyContent = {\n+\t// The total length of this file in bytes.\n+\tbyteLength: 100000,\n+\t// A function that provides a stream of data for the file contents,\n+\t// beginning at the `start` index and ending at `end`.\n+\tstream(start, end) {\n+\t\t// ... read the file contents from somewhere and return a ReadableStream\n+\t\treturn new ReadableStream({\n+\t\t\tstart(controller) {\n+\t\t\t\tcontroller.enqueue('X'.repeat(100000).slice(start, end))\n+\t\t\t\tcontroller.close()\n+\t\t\t},\n+\t\t})\n+\t},\n+}\n+\n+let lazyFile = new LazyFile(content, 'example.txt', { type: 'text/plain' })\n+await lazyFile.arrayBuffer() // ArrayBuffer of the file's content\n+lazyFile.name // \"example.txt\"\n+lazyFile.type // \"text/plain\"\n+```\n+\n+All file contents are read on-demand and nothing is ever buffered unless you\n+explicitly call `.toFile()` or `.toBlob()`.\n+\n+### Streaming Content\n+\n+Use `.stream()` to get a `ReadableStream` for `Response` and other streaming\n+APIs:\n+\n+```ts\n+import { openLazyFile } from '@remix-run/fs'\n+\n+let lazyFile = openLazyFile('./large-video.mp4')\n+\n+let response = new Response(lazyFile.stream(), {\n+\theaders: {\n+\t\t'Content-Type': lazyFile.type,\n+\t\t'Content-Length': String(lazyFile.size),\n+\t},\n+})\n+```\n+\n+### Converting to Native File/Blob\n+\n+For non-streaming APIs that require a complete `File` or `Blob` (e.g.\n+`FormData`), use `.toFile()` or `.toBlob()`.\n+\n+```ts\n+let lazyFile = openLazyFile('./document.pdf')\n+let realFile = await lazyFile.toFile()\n+\n+let formData = new FormData()\n+formData.append('document', realFile)\n+```\n+\n+> **Note:** `.toFile()` and `.toBlob()` read the entire file into memory. Only\n+> use these for non-streaming APIs that require a complete `File` or `Blob`\n+> (e.g. `FormData`). Always prefer `.stream()` if possible.\n+\n+## Related Packages\n+\n+- [`fs`](https://github.com/remix-run/remix/tree/main/packages/fs) - Filesystem\n+ utilities for reading and writing files using the Web `File` API\n+- [`file-storage`](https://github.com/remix-run/remix/tree/main/packages/file-storage) -\n+ Storage abstraction for files on disk or in memory\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/logger-middleware.md b/docs/agents/remix/logger-middleware.md\nnew file mode 100644\nindex 0000000..383d446\n--- /dev/null\n+++ b/docs/agents/remix/logger-middleware.md\n@@ -0,0 +1,110 @@\n+# logger-middleware\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/logger-middleware\n+\n+## README\n+\n+Middleware for logging HTTP requests and responses for use with\n+[`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router).\n+\n+Logs information about HTTP requests and responses with customizable formatting.\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/logger-middleware\n+```\n+\n+## Usage\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { logger } from '@remix-run/logger-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [logger()],\n+})\n+\n+// Logs: [19/Nov/2025:14:32:10 -0800] GET /users/123 200 1234\n+```\n+\n+### Custom Format\n+\n+You can use the `format` option to customize the log format. The following\n+tokens are available:\n+\n+- `%date` - Date and time in Apache/nginx format (dd/Mon/yyyy:HH:mm:ss +/-zzzz)\n+- `%dateISO` - Date and time in ISO format\n+- `%duration` - Request duration in milliseconds\n+- `%contentLength` - Response Content-Length header\n+- `%contentType` - Response Content-Type header\n+- `%host` - Request URL host\n+- `%hostname` - Request URL hostname\n+- `%method` - Request method\n+- `%path` - Request pathname + search\n+- `%pathname` - Request pathname\n+- `%port` - Request port\n+- `%query` - Request query string (search)\n+- `%referer` - Request Referer header\n+- `%search` - Request search string\n+- `%status` - Response status code\n+- `%statusText` - Response status text\n+- `%url` - Full request URL\n+- `%userAgent` - Request User-Agent header\n+\n+```ts\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tlogger({\n+\t\t\tformat: '%method %path - %status (%duration ms)',\n+\t\t}),\n+\t],\n+})\n+// Logs: GET /users/123 - 200 (42 ms)\n+```\n+\n+For Apache-style combined log format, you can use the following format:\n+\n+```ts\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tlogger({\n+\t\t\tformat:\n+\t\t\t\t'%host - - [%date] \"%method %path\" %status %contentLength \"%referer\" \"%userAgent\"',\n+\t\t}),\n+\t],\n+})\n+```\n+\n+### Custom Logger\n+\n+You can use a custom logger to write logs to a file or other stream.\n+\n+```ts\n+import { createWriteStream } from 'node:fs'\n+\n+let logStream = createWriteStream('access.log', { flags: 'a' })\n+\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tlogger({\n+\t\t\tlog(message) {\n+\t\t\t\tlogStream.write(message + '\\n')\n+\t\t\t},\n+\t\t}),\n+\t],\n+})\n+```\n+\n+## Related Packages\n+\n+- [`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Router for the web Fetch API\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/method-override-middleware.md b/docs/agents/remix/method-override-middleware.md\nnew file mode 100644\nindex 0000000..6dd1d52\n--- /dev/null\n+++ b/docs/agents/remix/method-override-middleware.md\n@@ -0,0 +1,85 @@\n+# method-override-middleware\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/method-override-middleware\n+\n+## README\n+\n+Middleware for overriding HTTP request methods from form data for use with\n+[`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router).\n+\n+Allows HTML forms (which only support GET and POST) to submit with other HTTP\n+methods like PUT, PATCH, or DELETE by including a special form field.\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/method-override-middleware\n+```\n+\n+## Usage\n+\n+This middleware runs after\n+[the `formData` middleware](https://github.com/remix-run/remix/tree/main/packages/form-data-middleware)\n+and updates the request context's `context.method` with the value of the method\n+override field. This is useful for simulating RESTful API request methods like\n+PUT and DELETE using HTML forms.\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { formData } from '@remix-run/form-data-middleware'\n+import { methodOverride } from '@remix-run/method-override-middleware'\n+\n+let router = createRouter({\n+\t// methodOverride must come AFTER formData middleware\n+\tmiddleware: [formData(), methodOverride()],\n+})\n+\n+router.delete('/users/:id', async (context) => {\n+\tlet userId = context.params.id\n+\t// Delete user logic...\n+\treturn new Response('User deleted')\n+})\n+```\n+\n+In your HTML form:\n+\n+```html\n+<form method=\"POST\" action=\"/users/123\">\n+\t<input type=\"hidden\" name=\"_method\" value=\"DELETE\" />\n+\t<button type=\"submit\">Delete User</button>\n+</form>\n+```\n+\n+### Custom Field Name\n+\n+You can customize the name of the method override field by passing a `fieldName`\n+option to the `methodOverride()` middleware.\n+\n+```ts\n+let router = createRouter({\n+\tmiddleware: [formData(), methodOverride({ fieldName: '__method__' })],\n+})\n+```\n+\n+```html\n+<form method=\"POST\" action=\"/users/123\">\n+\t<input type=\"hidden\" name=\"__method__\" value=\"PUT\" />\n+\t<button type=\"submit\">Update User</button>\n+</form>\n+```\n+\n+## Related Packages\n+\n+- [`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Router for the web Fetch API\n+- [`form-data-middleware`](https://github.com/remix-run/remix/tree/main/packages/form-data-middleware) -\n+ Required for parsing form data\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/mime.md b/docs/agents/remix/mime.md\nnew file mode 100644\nindex 0000000..af42256\n--- /dev/null\n+++ b/docs/agents/remix/mime.md\n@@ -0,0 +1,120 @@\n+# @remix-run/mime\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/mime\n+\n+## README\n+\n+Utilities for working with MIME types.\n+\n+Data used for these utilities is generated at build time from\n+[mime-db](https://github.com/jshttp/mime-db).\n+\n+## Installation\n+\n+```bash\n+npm install @remix-run/mime\n+```\n+\n+## Usage\n+\n+### `detectMimeType(extension)`\n+\n+Detects the MIME type for a given file extension or filename.\n+\n+```ts\n+import { detectMimeType } from '@remix-run/mime'\n+\n+detectMimeType('txt') // 'text/plain'\n+detectMimeType('.txt') // 'text/plain'\n+detectMimeType('file.txt') // 'text/plain'\n+detectMimeType('path/to/file.txt') // 'text/plain'\n+detectMimeType('unknown') // undefined\n+```\n+\n+### `detectContentType(extension)`\n+\n+Detects the Content-Type header value for a given file extension or filename,\n+including `charset` for text-based types. See\n+[`mimeTypeToContentType`](#mimetypetocontenttypemimetype) for charset logic.\n+\n+```ts\n+import { detectContentType } from '@remix-run/mime'\n+\n+detectContentType('css') // 'text/css; charset=utf-8'\n+detectContentType('.json') // 'application/json; charset=utf-8'\n+detectContentType('image.png') // 'image/png'\n+detectContentType('path/to/file.unknown') // undefined\n+```\n+\n+### `isCompressibleMimeType(mimeType)`\n+\n+Checks if a MIME type is known to be compressible.\n+\n+```ts\n+import { isCompressibleMimeType } from '@remix-run/mime'\n+\n+isCompressibleMimeType('text/html') // true\n+isCompressibleMimeType('application/json') // true\n+isCompressibleMimeType('image/png') // false\n+isCompressibleMimeType('video/mp4') // false\n+```\n+\n+For convenience, the function also accepts a full Content-Type header value:\n+\n+```ts\n+import { isCompressibleMimeType } from '@remix-run/mime'\n+\n+isCompressibleMimeType('text/html; charset=utf-8') // true\n+isCompressibleMimeType('application/json; charset=utf-8') // true\n+isCompressibleMimeType('image/png; charset=utf-8') // false\n+isCompressibleMimeType('video/mp4; charset=utf-8') // false\n+```\n+\n+### `mimeTypeToContentType(mimeType)`\n+\n+Converts a MIME type to a Content-Type header value, adding `; charset=utf-8` to\n+text-based MIME types: `text/*` (except `text/xml` which has built-in encoding\n+declarations), `application/json`, `application/javascript`, and all `+json`\n+suffixed types. All other types are returned unchanged.\n+\n+```ts\n+import { mimeTypeToContentType } from '@remix-run/mime'\n+\n+mimeTypeToContentType('text/css') // 'text/css; charset=utf-8'\n+mimeTypeToContentType('application/json') // 'application/json; charset=utf-8'\n+mimeTypeToContentType('application/ld+json') // 'application/ld+json; charset=utf-8'\n+mimeTypeToContentType('image/png') // 'image/png'\n+```\n+\n+### `defineMimeType(definition)`\n+\n+Registers or overrides a MIME type for one or more file extensions.\n+\n+```ts\n+import { defineMimeType } from '@remix-run/mime'\n+\n+defineMimeType({\n+\textensions: ['myformat'],\n+\tmimeType: 'application/x-myformat',\n+})\n+```\n+\n+You can also optionally configure the charset and whether the MIME type is\n+compressible:\n+\n+```ts\n+defineMimeType({\n+\textensions: ['myformat'],\n+\tmimeType: 'application/x-myformat',\n+\tcompressible: true,\n+\tcharset: 'utf-8',\n+})\n+```\n+\n+## License\n+\n+MIT\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/multipart-parser/benchmarks.md b/docs/agents/remix/multipart-parser/benchmarks.md\nnew file mode 100644\nindex 0000000..ac36b1b\n--- /dev/null\n+++ b/docs/agents/remix/multipart-parser/benchmarks.md\n@@ -0,0 +1,76 @@\n+# Benchmarks and related packages\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/multipart-parser\n+\n+## Demos\n+\n+The\n+[`demos` directory](https://github.com/remix-run/remix/tree/main/packages/multipart-parser/demos)\n+contains working demos:\n+\n+- [`demos/cf-workers`](https://github.com/remix-run/remix/tree/main/packages/multipart-parser/demos/cf-workers) -\n+ using multipart-parser in a Cloudflare Worker and storing file uploads in R2\n+- [`demos/deno`](https://github.com/remix-run/remix/tree/main/packages/multipart-parser/demos/deno) -\n+ using multipart-parser in Deno\n+- [`demos/node`](https://github.com/remix-run/remix/tree/main/packages/multipart-parser/demos/node) -\n+ using multipart-parser in Node.js\n+\n+## Benchmark\n+\n+`multipart-parser` is designed to be as efficient as possible, operating on\n+streams of data and rarely buffering in common usage. This design yields\n+exceptional performance when handling multipart payloads of any size. In\n+benchmarks, `multipart-parser` is as fast or faster than `busboy`.\n+\n+The results of running the benchmarks on my laptop:\n+\n+```\n+> @remix-run/multipart-parser@0.10.1 bench:node /Users/michael/Projects/remix-the-web/packages/multipart-parser\n+> node --disable-warning=ExperimentalWarning ./bench/runner.ts\n+\n+Platform: Darwin (24.5.0)\n+CPU: Apple M1 Pro\n+Date: 6/13/2025, 12:27:09 PM\n+Node.js v24.0.2\n+(index) | 1 small file | 1 large file | 100 small files | 5 large files\n+multipart-parser | '0.01 ms +/- 0.03' | '1.08 ms +/- 0.08' | '0.04 ms +/- 0.01' | '10.50 ms +/- 0.38'\n+multipasta | '0.02 ms +/- 0.06' | '1.07 ms +/- 0.02' | '0.15 ms +/- 0.02' | '10.46 ms +/- 0.11'\n+busboy | '0.06 ms +/- 0.17' | '3.07 ms +/- 0.24' | '0.24 ms +/- 0.05' | '29.85 ms +/- 0.18'\n+@fastify/busboy | '0.05 ms +/- 0.13' | '1.23 ms +/- 0.09' | '0.45 ms +/- 0.22' | '11.81 ms +/- 0.11'\n+\n+> @remix-run/multipart-parser@0.10.1 bench:deno /Users/michael/Projects/remix-the-web/packages/multipart-parser\n+> deno run --allow-sys ./bench/runner.ts\n+\n+Platform: Darwin (24.5.0)\n+CPU: Apple M1 Pro\n+Date: 6/13/2025, 12:28:12 PM\n+Deno 2.3.6\n+(idx) | 1 small file | 1 large file | 100 small files | 5 large files\n+multipart-parser | \"0.01 ms +/- 0.03\" | \"1.03 ms +/- 0.04\" | \"0.05 ms +/- 0.01\" | \"10.05 ms +/- 0.20\"\n+multipasta | \"0.02 ms +/- 0.07\" | \"1.04 ms +/- 0.03\" | \"0.16 ms +/- 0.02\" | \"10.10 ms +/- 0.08\"\n+busboy | \"0.05 ms +/- 0.19\" | \"3.06 ms +/- 0.15\" | \"0.32 ms +/- 0.05\" | \"29.92 ms +/- 0.24\"\n+@fastify/busboy | \"0.06 ms +/- 0.14\" | \"14.72 ms +/- 11.42\" | \"0.81 ms +/- 0.20\" | \"127.63 ms +/- 35.77\"\n+```\n+\n+## Related packages\n+\n+- [`form-data-parser`](https://github.com/remix-run/remix/tree/main/packages/form-data-parser) -\n+ Uses `multipart-parser` internally to parse multipart requests and generate\n+ `FileUpload`s for storage\n+- [`headers`](https://github.com/remix-run/remix/tree/main/packages/headers) -\n+ Used internally to parse HTTP headers and get metadata (filename, content\n+ type) for each `MultipartPart`\n+\n+## Credits\n+\n+Thanks to Jacob Ebey who gave me several code reviews on this project prior to\n+publishing.\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [multipart-parser overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/multipart-parser/index.md b/docs/agents/remix/multipart-parser/index.md\nnew file mode 100644\nindex 0000000..6e1f7d1\n--- /dev/null\n+++ b/docs/agents/remix/multipart-parser/index.md\n@@ -0,0 +1,78 @@\n+# multipart-parser\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/multipart-parser\n+\n+## Overview\n+\n+`multipart-parser` is a fast, streaming multipart parser that works in any\n+JavaScript environment. Whether you're handling file uploads, parsing email\n+attachments, or working with multipart API responses, `multipart-parser` has you\n+covered.\n+\n+## Why multipart-parser?\n+\n+- **Universal JavaScript** - One library that works everywhere: Node.js, Bun,\n+ Deno, Cloudflare Workers, and browsers\n+- **Blazing Fast** - Outperforms popular alternatives like busboy in benchmarks\n+- **Zero Dependencies** - Lightweight and secure with no external dependencies\n+- **Memory Efficient** - Streaming architecture that yields files as they are\n+ found in the stream\n+- **Type Safe** - Written in TypeScript with comprehensive type definitions\n+- **Standards Based** - Built on the web Streams API for maximum compatibility\n+- **Production Ready** - Battle-tested error handling with specific error types\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/multipart-parser\n+```\n+\n+## Usage\n+\n+The most common use case is handling file uploads when you're building a web\n+server. The `parseMultipartRequest` function validates the request, extracts the\n+multipart boundary from the `Content-Type` header, parses all fields and files\n+in the `request.body` stream, and gives each one to you as a `MultipartPart`\n+object.\n+\n+```ts\n+import {\n+\tMultipartParseError,\n+\tparseMultipartRequest,\n+} from '@remix-run/multipart-parser'\n+\n+async function handleRequest(request: Request): void {\n+\ttry {\n+\t\tfor await (let part of parseMultipartRequest(request)) {\n+\t\t\tif (part.isFile) {\n+\t\t\t\t// Access file data in multiple formats\n+\t\t\t\tlet buffer = part.arrayBuffer // ArrayBuffer\n+\t\t\t\tconsole.log(\n+\t\t\t\t\t`File received: ${part.filename} (${buffer.byteLength} bytes)`,\n+\t\t\t\t)\n+\t\t\t\tconsole.log(`Content type: ${part.mediaType}`)\n+\t\t\t\tconsole.log(`Field name: ${part.name}`)\n+\n+\t\t\t\t// Save to disk, upload to cloud storage, etc.\n+\t\t\t\tawait saveFile(part.filename, part.bytes)\n+\t\t\t} else {\n+\t\t\t\tlet text = part.text // string\n+\t\t\t\tconsole.log(`Field received: ${part.name} = ${JSON.stringify(text)}`)\n+\t\t\t}\n+\t\t}\n+\t} catch (error) {\n+\t\tif (error instanceof MultipartParseError) {\n+\t\t\tconsole.error('Failed to parse multipart request:', error.message)\n+\t\t} else {\n+\t\t\tconsole.error('An unexpected error occurred:', error)\n+\t\t}\n+\t}\n+}\n+```\n+\n+## Navigation\n+\n+- [Limits and Node bindings](./limits-and-node.md)\n+- [Low-level APIs](./low-level.md)\n+- [Benchmarks and related packages](./benchmarks.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/multipart-parser/limits-and-node.md b/docs/agents/remix/multipart-parser/limits-and-node.md\nnew file mode 100644\nindex 0000000..7d2dcc8\n--- /dev/null\n+++ b/docs/agents/remix/multipart-parser/limits-and-node.md\n@@ -0,0 +1,78 @@\n+# Limits and Node bindings\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/multipart-parser\n+\n+## Limiting file upload size\n+\n+You can set a file upload size limit using the `maxFileSize` option, and return\n+a 413 \"Payload Too Large\" response when you receive a request that exceeds the\n+limit.\n+\n+```ts\n+import {\n+\tMultipartParseError,\n+\tMaxFileSizeExceededError,\n+\tparseMultipartRequest,\n+} from '@remix-run/multipart-parser/node'\n+\n+const oneMb = Math.pow(2, 20)\n+const maxFileSize = 10 * oneMb\n+\n+async function handleRequest(request: Request): Promise<Response> {\n+\ttry {\n+\t\tfor await (let part of parseMultipartRequest(request, { maxFileSize })) {\n+\t\t\t// ...\n+\t\t}\n+\t} catch (error) {\n+\t\tif (error instanceof MaxFileSizeExceededError) {\n+\t\t\treturn new Response('File size limit exceeded', { status: 413 })\n+\t\t} else if (error instanceof MultipartParseError) {\n+\t\t\treturn new Response('Failed to parse multipart request', { status: 400 })\n+\t\t} else {\n+\t\t\tconsole.error(error)\n+\t\t\treturn new Response('Internal Server Error', { status: 500 })\n+\t\t}\n+\t}\n+}\n+```\n+\n+## Node.js bindings\n+\n+The main module (`import from \"@remix-run/multipart-parser\"`) assumes you're\n+working with the Fetch API (`Request`, `ReadableStream`, etc). Support for these\n+interfaces was added to Node.js by the undici project in version 16.5.0.\n+\n+If you're building a server for Node.js that relies on node-specific APIs like\n+`http.IncomingMessage`, `stream.Readable`, and `buffer.Buffer`,\n+`multipart-parser` ships with an additional module that works directly with\n+these APIs.\n+\n+```ts\n+import * as http from 'node:http'\n+import {\n+\tMultipartParseError,\n+\tparseMultipartRequest,\n+} from '@remix-run/multipart-parser/node'\n+\n+let server = http.createServer(async (req, res) => {\n+\ttry {\n+\t\tfor await (let part of parseMultipartRequest(req)) {\n+\t\t\t// ...\n+\t\t}\n+\t} catch (error) {\n+\t\tif (error instanceof MultipartParseError) {\n+\t\t\tconsole.error('Failed to parse multipart request:', error.message)\n+\t\t} else {\n+\t\t\tconsole.error('An unexpected error occurred:', error)\n+\t\t}\n+\t}\n+})\n+\n+server.listen(8080)\n+```\n+\n+## Navigation\n+\n+- [multipart-parser overview](./index.md)\n+- [Low-level APIs](./low-level.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/multipart-parser/low-level.md b/docs/agents/remix/multipart-parser/low-level.md\nnew file mode 100644\nindex 0000000..5df5773\n--- /dev/null\n+++ b/docs/agents/remix/multipart-parser/low-level.md\n@@ -0,0 +1,40 @@\n+# Low-level APIs\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/multipart-parser\n+\n+## Low-level API\n+\n+If you're working directly with multipart boundaries and buffers/streams of\n+multipart data that are not necessarily part of a request, `multipart-parser`\n+provides a low-level `parseMultipart()` API that you can use directly:\n+\n+```ts\n+import { parseMultipart } from '@remix-run/multipart-parser'\n+\n+let message = new Uint8Array(/* ... */)\n+let boundary = '----WebKitFormBoundary56eac3x'\n+\n+for (let part of parseMultipart(message, { boundary })) {\n+\t// ...\n+}\n+```\n+\n+In addition, the `parseMultipartStream` function provides an async generator\n+interface for multipart data in a `ReadableStream`:\n+\n+```ts\n+import { parseMultipartStream } from '@remix-run/multipart-parser'\n+\n+let message = new ReadableStream(/* ... */)\n+let boundary = '----WebKitFormBoundary56eac3x'\n+\n+for await (let part of parseMultipartStream(message, { boundary })) {\n+\t// ...\n+}\n+```\n+\n+## Navigation\n+\n+- [multipart-parser overview](./index.md)\n+- [Benchmarks and related packages](./benchmarks.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/node-fetch-server/advanced-usage.md b/docs/agents/remix/node-fetch-server/advanced-usage.md\nnew file mode 100644\nindex 0000000..b4f1007\n--- /dev/null\n+++ b/docs/agents/remix/node-fetch-server/advanced-usage.md\n@@ -0,0 +1,58 @@\n+# Advanced usage\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/node-fetch-server\n+\n+## Low-level API\n+\n+For more control over request/response handling, use the low-level API:\n+\n+```ts\n+import * as http from 'node:http'\n+import { createRequest, sendResponse } from '@remix-run/node-fetch-server'\n+\n+let server = http.createServer(async (req, res) => {\n+\t// Convert Node.js request to Fetch API Request\n+\tlet request = createRequest(req, res, { host: process.env.HOST })\n+\n+\ttry {\n+\t\t// Add custom headers or middleware logic\n+\t\tlet startTime = Date.now()\n+\n+\t\t// Process the request with your handler\n+\t\tlet response = await handler(request)\n+\n+\t\t// Add response timing header\n+\t\tlet duration = Date.now() - startTime\n+\t\tresponse.headers.set('X-Response-Time', `${duration}ms`)\n+\n+\t\t// Send the response\n+\t\tawait sendResponse(res, response)\n+\t} catch (error) {\n+\t\tconsole.error('Server error:', error)\n+\t\tres.writeHead(500, { 'Content-Type': 'text/plain' })\n+\t\tres.end('Internal Server Error')\n+\t}\n+})\n+\n+server.listen(3000)\n+```\n+\n+The low-level API provides:\n+\n+- `createRequest(req, res, options)` - Converts Node.js IncomingMessage to web\n+ Request\n+- `sendResponse(res, response)` - Sends web Response using Node.js\n+ ServerResponse\n+\n+This is useful for:\n+\n+- Building custom middleware systems\n+- Integrating with existing Node.js code\n+- Implementing custom error handling\n+- Performance-critical applications\n+\n+## Navigation\n+\n+- [node-fetch-server overview](./index.md)\n+- [Migration from Express](./migration.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/node-fetch-server/demos-and-benchmark.md b/docs/agents/remix/node-fetch-server/demos-and-benchmark.md\nnew file mode 100644\nindex 0000000..aab88a9\n--- /dev/null\n+++ b/docs/agents/remix/node-fetch-server/demos-and-benchmark.md\n@@ -0,0 +1,35 @@\n+# Demos and benchmark\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/node-fetch-server\n+\n+## Demos\n+\n+The\n+[`demos` directory](https://github.com/remix-run/remix/tree/main/packages/node-fetch-server/demos)\n+contains working demos:\n+\n+- [`demos/http2`](https://github.com/remix-run/remix/tree/main/packages/node-fetch-server/demos/http2) -\n+ HTTP/2 server with TLS certificates\n+\n+## Benchmark\n+\n+To run benchmarks comparing `node-fetch-server` performance with comparable\n+libraries:\n+\n+```sh\n+pnpm run bench\n+```\n+\n+## Related packages\n+\n+- [`fetch-proxy`](https://github.com/remix-run/remix/tree/main/packages/fetch-proxy) -\n+ Build HTTP proxy servers using the web fetch API\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [node-fetch-server overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/node-fetch-server/index.md b/docs/agents/remix/node-fetch-server/index.md\nnew file mode 100644\nindex 0000000..91a0ed9\n--- /dev/null\n+++ b/docs/agents/remix/node-fetch-server/index.md\n@@ -0,0 +1,39 @@\n+# node-fetch-server\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/node-fetch-server\n+\n+## Overview\n+\n+Build portable Node.js servers using web-standard Fetch API primitives.\n+\n+`node-fetch-server` brings the simplicity and familiarity of the\n+[Fetch API](https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API) to\n+Node.js server development. Instead of dealing with Node's traditional\n+`req`/`res` objects, you work with web-standard\n+[`Request`](https://developer.mozilla.org/en-US/docs/Web/API/Request) and\n+[`Response`](https://developer.mozilla.org/en-US/docs/Web/API/Response)\n+objects - the same APIs you already use in the browser and modern JavaScript\n+runtimes.\n+\n+## Features\n+\n+- **Web Standards** - Standard `Request` and `Response` APIs\n+- **Drop-in Integration** - Works with `node:http` and `node:https`\n+- **Streaming Support** - Response support with `ReadableStream`\n+- **Custom Hostname** - Configuration for deployment flexibility\n+- **Client Info** - Access to client connection info (IP address, port)\n+- **TypeScript** - Full TypeScript support with type definitions\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/node-fetch-server\n+```\n+\n+## Navigation\n+\n+- [Quick start examples](./quick-start.md)\n+- [Advanced usage](./advanced-usage.md)\n+- [Migration from Express](./migration.md)\n+- [Demos and benchmark](./demos-and-benchmark.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/node-fetch-server/migration.md b/docs/agents/remix/node-fetch-server/migration.md\nnew file mode 100644\nindex 0000000..63dec91\n--- /dev/null\n+++ b/docs/agents/remix/node-fetch-server/migration.md\n@@ -0,0 +1,46 @@\n+# Migration from Express\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/node-fetch-server\n+\n+## Basic routing\n+\n+```ts\n+// Express\n+let app = express()\n+\n+app.get('/users/:id', async (req, res) => {\n+\tlet user = await db.getUser(req.params.id)\n+\tif (!user) {\n+\t\treturn res.status(404).json({ error: 'User not found' })\n+\t}\n+\tres.json(user)\n+})\n+\n+app.listen(3000)\n+\n+// node-fetch-server\n+import { createRequestListener } from '@remix-run/node-fetch-server'\n+\n+async function handler(request: Request) {\n+\tlet url = new URL(request.url)\n+\tlet match = url.pathname.match(/^\\\\/users\\\\/(\\\\w+)$/)\n+\n+\tif (match && request.method === 'GET') {\n+\t\tlet user = await db.getUser(match[1])\n+\t\tif (!user) {\n+\t\t\treturn Response.json({ error: 'User not found' }, { status: 404 })\n+\t\t}\n+\t\treturn Response.json(user)\n+\t}\n+\n+\treturn new Response('Not Found', { status: 404 })\n+}\n+\n+http.createServer(createRequestListener(handler)).listen(3000)\n+```\n+\n+## Navigation\n+\n+- [node-fetch-server overview](./index.md)\n+- [Demos and benchmark](./demos-and-benchmark.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/node-fetch-server/quick-start.md b/docs/agents/remix/node-fetch-server/quick-start.md\nnew file mode 100644\nindex 0000000..3ed2e0b\n--- /dev/null\n+++ b/docs/agents/remix/node-fetch-server/quick-start.md\n@@ -0,0 +1,193 @@\n+# Quick start\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/node-fetch-server\n+\n+## Basic server\n+\n+```ts\n+import * as http from 'node:http'\n+import { createRequestListener } from '@remix-run/node-fetch-server'\n+\n+// Example: Simple in-memory user storage\n+let users = new Map([\n+\t['1', { id: '1', name: 'Alice', email: 'alice@example.com' }],\n+\t['2', { id: '2', name: 'Bob', email: 'bob@example.com' }],\n+])\n+\n+async function handler(request: Request) {\n+\tlet url = new URL(request.url)\n+\n+\t// GET / - Home page\n+\tif (url.pathname === '/' && request.method === 'GET') {\n+\t\treturn new Response('Welcome to the User API! Try GET /api/users')\n+\t}\n+\n+\t// GET /api/users - List all users\n+\tif (url.pathname === '/api/users' && request.method === 'GET') {\n+\t\treturn Response.json(Array.from(users.values()))\n+\t}\n+\n+\t// GET /api/users/:id - Get specific user\n+\tlet userMatch = url.pathname.match(/^\\\\/api\\\\/users\\\\/(\\\\w+)$/)\n+\tif (userMatch && request.method === 'GET') {\n+\t\tlet user = users.get(userMatch[1])\n+\t\tif (user) {\n+\t\t\treturn Response.json(user)\n+\t\t}\n+\t\treturn new Response('User not found', { status: 404 })\n+\t}\n+\n+\treturn new Response('Not Found', { status: 404 })\n+}\n+\n+// Create a standard Node.js server\n+let server = http.createServer(createRequestListener(handler))\n+\n+server.listen(3000, () => {\n+\tconsole.log('Server running at http://localhost:3000')\n+})\n+```\n+\n+## Working with request data\n+\n+```ts\n+async function handler(request: Request) {\n+\tlet url = new URL(request.url)\n+\n+\t// Handle JSON data\n+\tif (request.method === 'POST' && url.pathname === '/api/users') {\n+\t\ttry {\n+\t\t\tlet userData = await request.json()\n+\n+\t\t\t// Validate required fields\n+\t\t\tif (!userData.name || !userData.email) {\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Name and email are required' },\n+\t\t\t\t\t{ status: 400 },\n+\t\t\t\t)\n+\t\t\t}\n+\n+\t\t\t// Create user (your implementation)\n+\t\t\tlet newUser = {\n+\t\t\t\tid: Date.now().toString(),\n+\t\t\t\t...userData,\n+\t\t\t}\n+\n+\t\t\treturn Response.json(newUser, { status: 201 })\n+\t\t} catch (error) {\n+\t\t\treturn Response.json({ error: 'Invalid JSON' }, { status: 400 })\n+\t\t}\n+\t}\n+\n+\t// Handle URL search params\n+\tif (url.pathname === '/api/search') {\n+\t\tlet query = url.searchParams.get('q')\n+\t\tlet limit = parseInt(url.searchParams.get('limit') || '10')\n+\n+\t\treturn Response.json({\n+\t\t\tquery,\n+\t\t\tlimit,\n+\t\t\tresults: [], // Your search results here\n+\t\t})\n+\t}\n+\n+\treturn new Response('Not Found', { status: 404 })\n+}\n+```\n+\n+## Streaming responses\n+\n+```ts\n+async function handler(request: Request) {\n+\tif (request.url.endsWith('/stream')) {\n+\t\t// Create a streaming response\n+\t\tlet stream = new ReadableStream({\n+\t\t\tasync start(controller) {\n+\t\t\t\tfor (let i = 0; i < 5; i++) {\n+\t\t\t\t\tcontroller.enqueue(new TextEncoder().encode(`Chunk ${i}\\\\n`))\n+\t\t\t\t\tawait new Promise((resolve) => setTimeout(resolve, 1000))\n+\t\t\t\t}\n+\t\t\t\tcontroller.close()\n+\t\t\t},\n+\t\t})\n+\n+\t\treturn new Response(stream, {\n+\t\t\theaders: { 'Content-Type': 'text/plain' },\n+\t\t})\n+\t}\n+\n+\treturn new Response('Not Found', { status: 404 })\n+}\n+```\n+\n+## Custom hostname configuration\n+\n+```ts\n+import * as http from 'node:http'\n+import { createRequestListener } from '@remix-run/node-fetch-server'\n+\n+// Use a custom hostname (e.g., from environment variable)\n+let hostname = process.env.HOST || 'api.example.com'\n+\n+async function handler(request: Request) {\n+\t// request.url will now use your custom hostname\n+\tconsole.log(request.url) // https://api.example.com/path\n+\n+\treturn Response.json({\n+\t\tmessage: 'Hello from custom domain!',\n+\t\turl: request.url,\n+\t})\n+}\n+\n+let server = http.createServer(\n+\tcreateRequestListener(handler, { host: hostname }),\n+)\n+\n+server.listen(3000)\n+```\n+\n+## Accessing client information\n+\n+```ts\n+import { type FetchHandler } from '@remix-run/node-fetch-server'\n+\n+let handler: FetchHandler = async (request, client) => {\n+\t// Log client information\n+\tconsole.log(`Request from ${client.address}:${client.port}`)\n+\n+\t// Use for rate limiting, geolocation, etc.\n+\tif (isRateLimited(client.address)) {\n+\t\treturn new Response('Too Many Requests', { status: 429 })\n+\t}\n+\n+\treturn Response.json({\n+\t\tmessage: 'Hello!',\n+\t\tyourIp: client.address,\n+\t})\n+}\n+```\n+\n+## HTTPS support\n+\n+```ts\n+import * as https from 'node:https'\n+import * as fs from 'node:fs'\n+import { createRequestListener } from '@remix-run/node-fetch-server'\n+\n+let options = {\n+\tkey: fs.readFileSync('private-key.pem'),\n+\tcert: fs.readFileSync('certificate.pem'),\n+}\n+\n+let server = https.createServer(options, createRequestListener(handler))\n+\n+server.listen(443, () => {\n+\tconsole.log('HTTPS Server running on port 443')\n+})\n+```\n+\n+## Navigation\n+\n+- [node-fetch-server overview](./index.md)\n+- [Advanced usage](./advanced-usage.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/remix.md b/docs/agents/remix/remix.md\nnew file mode 100644\nindex 0000000..30fc7d9\n--- /dev/null\n+++ b/docs/agents/remix/remix.md\n@@ -0,0 +1,82 @@\n+# remix\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/remix\n+\n+## README\n+\n+A modern web framework for JavaScript.\n+\n+See [remix.run](https://remix.run) for framework docs.\n+\n+## Installation\n+\n+```sh\n+npm i remix\n+```\n+\n+## Package usage in Remix 3 alpha\n+\n+The `remix` package is used through subpath imports.\n+\n+- ✅ `import { createRouter } from 'remix/fetch-router'`\n+- ✅ `import { route } from 'remix/fetch-router/routes'`\n+- ✅ `import { createRoot } from 'remix/component'`\n+- ❌ `import { ... } from 'remix'` (root import removed in `3.0.0-alpha.3`)\n+\n+## Subpath export surface (`3.0.0-alpha.3`)\n+\n+Top-level package exports currently include:\n+\n+- `remix/async-context-middleware`\n+- `remix/component`\n+- `remix/compression-middleware`\n+- `remix/cookie`\n+- `remix/data-schema`\n+- `remix/data-table`\n+- `remix/fetch-proxy`\n+- `remix/fetch-router`\n+- `remix/file-storage`\n+- `remix/file-storage-s3`\n+- `remix/form-data-middleware`\n+- `remix/form-data-parser`\n+- `remix/fs`\n+- `remix/headers`\n+- `remix/html-template`\n+- `remix/interaction`\n+- `remix/lazy-file`\n+- `remix/logger-middleware`\n+- `remix/method-override-middleware`\n+- `remix/mime`\n+- `remix/multipart-parser`\n+- `remix/node-fetch-server`\n+- `remix/response`\n+- `remix/route-pattern`\n+- `remix/session`\n+- `remix/session-middleware`\n+- `remix/session-storage-memcache`\n+- `remix/session-storage-redis`\n+- `remix/static-middleware`\n+- `remix/tar-parser`\n+\n+Plus adapter/data helper subpaths and utility subpaths:\n+\n+- `remix/data-schema/checks`, `remix/data-schema/coerce`,\n+ `remix/data-schema/lazy`\n+- `remix/data-table-mysql`, `remix/data-table-postgres`,\n+ `remix/data-table-sqlite`\n+- `remix/fetch-router/routes`\n+- `remix/component/jsx-runtime`, `remix/component/jsx-dev-runtime`,\n+ `remix/component/server`\n+- `remix/interaction/form`, `remix/interaction/keys`,\n+ `remix/interaction/popover`, `remix/interaction/press`\n+- `remix/response/compress`, `remix/response/file`, `remix/response/html`,\n+ `remix/response/redirect`\n+- `remix/route-pattern/specificity`\n+- `remix/session/cookie-storage`, `remix/session/fs-storage`,\n+ `remix/session/memory-storage`\n+- `remix/file-storage/fs`, `remix/file-storage/memory`\n+- `remix/multipart-parser/node`\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/response/compress-responses.md b/docs/agents/remix/response/compress-responses.md\nnew file mode 100644\nindex 0000000..9573fdb\n--- /dev/null\n+++ b/docs/agents/remix/response/compress-responses.md\n@@ -0,0 +1,72 @@\n+# Compressed responses\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/response\n+\n+The `compressResponse` helper compresses a `Response` based on the client's\n+`Accept-Encoding` header:\n+\n+```ts\n+import { compressResponse } from '@remix-run/response/compress'\n+\n+let response = new Response(JSON.stringify(data), {\n+\theaders: { 'Content-Type': 'application/json' },\n+})\n+let compressed = await compressResponse(response, request)\n+```\n+\n+Compression is automatically skipped for:\n+\n+- Responses with no `Accept-Encoding` header\n+- Responses that are already compressed (existing `Content-Encoding`)\n+- Responses with `Cache-Control: no-transform`\n+- Responses with `Content-Length` below threshold (default: 1024 bytes)\n+- Responses with range support (`Accept-Ranges: bytes`)\n+- 206 Partial Content responses\n+- HEAD requests (only headers are modified)\n+\n+## Options\n+\n+```ts\n+await compressResponse(response, request, {\n+\t// Minimum size in bytes to compress (only enforced if Content-Length is present).\n+\t// Default: 1024\n+\tthreshold: 1024,\n+\n+\t// Which encodings the server supports for negotiation.\n+\t// Defaults to ['br', 'gzip', 'deflate']\n+\tencodings: ['br', 'gzip', 'deflate'],\n+\n+\t// node:zlib options for gzip/deflate compression.\n+\t// For SSE responses (text/event-stream), flush: Z_SYNC_FLUSH\n+\t// is automatically applied unless you explicitly set a flush value.\n+\t// See: https://nodejs.org/api/zlib.html#class-options\n+\tzlib: {\n+\t\tlevel: 6,\n+\t},\n+\n+\t// node:zlib options for Brotli compression.\n+\t// For SSE responses (text/event-stream), flush: BROTLI_OPERATION_FLUSH\n+\t// is automatically applied unless you explicitly set a flush value.\n+\t// See: https://nodejs.org/api/zlib.html#class-brotlioptions\n+\tbrotli: {\n+\t\tparams: {\n+\t\t\t[zlib.constants.BROTLI_PARAM_QUALITY]: 4,\n+\t\t},\n+\t},\n+})\n+```\n+\n+## Range requests and compression\n+\n+Range requests and compression are mutually exclusive. When\n+`Accept-Ranges: bytes` is present in the response headers, `compressResponse`\n+will not compress the response. This is why the `createFileResponse` helper\n+enables ranges only for non-compressible MIME types by default - to allow\n+text-based assets to be compressed while still supporting resumable downloads\n+for media files.\n+\n+## Navigation\n+\n+- [Response overview](./index.md)\n+- [Related packages](./related.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/response/file-responses.md b/docs/agents/remix/response/file-responses.md\nnew file mode 100644\nindex 0000000..43d7ddc\n--- /dev/null\n+++ b/docs/agents/remix/response/file-responses.md\n@@ -0,0 +1,108 @@\n+# File responses\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/response\n+\n+The `createFileResponse` helper creates a response for serving files with full\n+HTTP semantics. It works with both native `File` objects and `LazyFile` from\n+`@remix-run/lazy-file`.\n+\n+```ts\n+import { createFileResponse } from '@remix-run/response/file'\n+import { openLazyFile } from '@remix-run/fs'\n+\n+let lazyFile = openLazyFile('./public/image.jpg')\n+let response = await createFileResponse(lazyFile, request, {\n+\tcacheControl: 'public, max-age=3600',\n+})\n+```\n+\n+## Features\n+\n+- **Content-Type** and **Content-Length** headers\n+- **ETag** generation (weak or strong)\n+- **Last-Modified** headers\n+- **Cache-Control** headers\n+- **Conditional requests** (`If-None-Match`, `If-Modified-Since`, `If-Match`,\n+ `If-Unmodified-Since`)\n+- **Range requests** for partial content (`206 Partial Content`)\n+- **HEAD** request support\n+\n+## Options\n+\n+```ts\n+await createFileResponse(file, request, {\n+\t// Cache-Control header value.\n+\t// Defaults to `undefined` (no Cache-Control header).\n+\tcacheControl: 'public, max-age=3600',\n+\n+\t// ETag generation strategy:\n+\t// - 'weak': Generates weak ETags based on file size and mtime (default)\n+\t// - 'strong': Generates strong ETags by hashing file content\n+\t// - false: Disables ETag generation\n+\tetag: 'weak',\n+\n+\t// Hash algorithm for strong ETags (Web Crypto API algorithm names).\n+\t// Only used when etag: 'strong'.\n+\t// Defaults to 'SHA-256'.\n+\tdigest: 'SHA-256',\n+\n+\t// Whether to generate Last-Modified headers.\n+\t// Defaults to `true`.\n+\tlastModified: true,\n+\n+\t// Whether to support HTTP Range requests for partial content.\n+\t// Defaults to `true`.\n+\tacceptRanges: true,\n+})\n+```\n+\n+## Strong ETags and content hashing\n+\n+For assets that require strong validation (e.g., to support\n+[`If-Match`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Match)\n+preconditions or\n+[`If-Range`](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-Range)\n+with\n+[`Range` requests](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Range)),\n+configure strong ETag generation:\n+\n+```ts\n+return createFileResponse(file, request, {\n+\tetag: 'strong',\n+})\n+```\n+\n+By default, strong ETags are generated using the Web Crypto API with the\n+`'SHA-256'` algorithm. You can customize this:\n+\n+```ts\n+return createFileResponse(file, request, {\n+\tetag: 'strong',\n+\t// Specify a different hash algorithm\n+\tdigest: 'SHA-512',\n+})\n+```\n+\n+For large files or custom hashing requirements, provide a custom digest\n+function:\n+\n+```ts\n+await createFileResponse(file, request, {\n+\tetag: 'strong',\n+\tasync digest(file) {\n+\t\t// Custom streaming hash for large files\n+\t\tlet { createHash } = await import('node:crypto')\n+\t\tlet hash = createHash('sha256')\n+\t\tfor await (let chunk of file.stream()) {\n+\t\t\thash.update(chunk)\n+\t\t}\n+\t\treturn hash.digest('hex')\n+\t},\n+})\n+```\n+\n+## Navigation\n+\n+- [Response overview](./index.md)\n+- [HTML responses](./html-responses.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/response/html-responses.md b/docs/agents/remix/response/html-responses.md\nnew file mode 100644\nindex 0000000..27ff0f0\n--- /dev/null\n+++ b/docs/agents/remix/response/html-responses.md\n@@ -0,0 +1,33 @@\n+# HTML responses\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/response\n+\n+The `createHtmlResponse` helper creates HTML responses with proper\n+`Content-Type` and DOCTYPE handling:\n+\n+```ts\n+import { createHtmlResponse } from '@remix-run/response/html'\n+\n+let response = createHtmlResponse('<h1>Hello, World!</h1>')\n+// Content-Type: text/html; charset=UTF-8\n+// Body: <!DOCTYPE html><h1>Hello, World!</h1>\n+```\n+\n+The helper automatically prepends `<!DOCTYPE html>` if not already present. It\n+works with strings, `SafeHtml` from `@remix-run/html-template`, Blobs/Files,\n+ArrayBuffers, and ReadableStreams.\n+\n+```ts\n+import { html } from '@remix-run/html-template'\n+import { createHtmlResponse } from '@remix-run/response/html'\n+\n+let name = '<script>alert(1)</script>'\n+let response = createHtmlResponse(html`<h1>Hello, ${name}!</h1>`)\n+// Safely escaped HTML\n+```\n+\n+## Navigation\n+\n+- [Response overview](./index.md)\n+- [Redirect responses](./redirect-responses.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/response/index.md b/docs/agents/remix/response/index.md\nnew file mode 100644\nindex 0000000..40230c6\n--- /dev/null\n+++ b/docs/agents/remix/response/index.md\n@@ -0,0 +1,48 @@\n+# response\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/response\n+\n+## Overview\n+\n+Response helpers for the web Fetch API. `response` provides a collection of\n+helper functions for creating common HTTP responses with proper headers and\n+semantics.\n+\n+## Features\n+\n+- **Web Standards Compliant:** Built on the standard `Response` API, works in\n+ any JavaScript runtime (Node.js, Bun, Deno, Cloudflare Workers)\n+- **File Responses:** Full HTTP semantics including ETags, Last-Modified,\n+ conditional requests, and Range support\n+- **HTML Responses:** Automatic DOCTYPE prepending and proper Content-Type\n+ headers\n+- **Redirect Responses:** Simple redirect creation with customizable status\n+ codes\n+- **Compress Responses:** Streaming compression based on Accept-Encoding header\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/response\n+```\n+\n+## Usage\n+\n+This package provides no default export. Instead, import the specific helper you\n+need:\n+\n+```ts\n+import { createFileResponse } from '@remix-run/response/file'\n+import { createHtmlResponse } from '@remix-run/response/html'\n+import { createRedirectResponse } from '@remix-run/response/redirect'\n+import { compressResponse } from '@remix-run/response/compress'\n+```\n+\n+## Navigation\n+\n+- [File responses](./file-responses.md)\n+- [HTML responses](./html-responses.md)\n+- [Redirect responses](./redirect-responses.md)\n+- [Compressed responses](./compress-responses.md)\n+- [Related packages](./related.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/response/redirect-responses.md b/docs/agents/remix/response/redirect-responses.md\nnew file mode 100644\nindex 0000000..f5f58f5\n--- /dev/null\n+++ b/docs/agents/remix/response/redirect-responses.md\n@@ -0,0 +1,32 @@\n+# Redirect responses\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/response\n+\n+The `createRedirectResponse` helper creates redirect responses. The main\n+improvements over the native `Response.redirect` API are:\n+\n+- Accepts a relative `location` instead of a full URL.\n+- Accepts a `ResponseInit` object as the second argument, allowing you to set\n+ additional headers and status code.\n+\n+```ts\n+import { createRedirectResponse } from '@remix-run/response/redirect'\n+\n+// Default 302 redirect\n+let response = createRedirectResponse('/login')\n+\n+// Custom status code\n+let response = createRedirectResponse('/new-page', 301)\n+\n+// With additional headers\n+let response = createRedirectResponse('/dashboard', {\n+\tstatus: 303,\n+\theaders: { 'X-Redirect-Reason': 'authentication' },\n+})\n+```\n+\n+## Navigation\n+\n+- [Response overview](./index.md)\n+- [Compressed responses](./compress-responses.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/response/related.md b/docs/agents/remix/response/related.md\nnew file mode 100644\nindex 0000000..9e1eabf\n--- /dev/null\n+++ b/docs/agents/remix/response/related.md\n@@ -0,0 +1,25 @@\n+# Related packages\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/response\n+\n+## Related packages\n+\n+- [`@remix-run/headers`](https://github.com/remix-run/remix/tree/main/packages/headers) -\n+ Type-safe HTTP header manipulation\n+- [`@remix-run/html-template`](https://github.com/remix-run/remix/tree/main/packages/html-template) -\n+ Safe HTML templating with automatic escaping\n+- [`@remix-run/fs`](https://github.com/remix-run/remix/tree/main/packages/fs) -\n+ File system utilities including `openFile`\n+- [`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Build HTTP routers using the web fetch API\n+- [`@remix-run/mime`](https://github.com/remix-run/remix/tree/main/packages/mime) -\n+ MIME type utilities\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Response overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/route-pattern.md b/docs/agents/remix/route-pattern.md\nnew file mode 100644\nindex 0000000..ecb310d\n--- /dev/null\n+++ b/docs/agents/remix/route-pattern.md\n@@ -0,0 +1,175 @@\n+# route-pattern\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/route-pattern\n+\n+## README\n+\n+Fast URL matching and href generation with type safe params.\n+\n+```ts\n+import { RoutePattern } from '@remix-run/route-pattern'\n+\n+let blog = new RoutePattern('blog/:slug')\n+blog.match('https://remix.run/blog/v3') // { params: { slug: 'v3' } }\n+blog.href({ slug: 'v3' }) // '/blog/v3'\n+\n+let api = new RoutePattern('api(/v:version)/*path')\n+api.match('https://api.com/api/v2/users/profile') // { params: { version: '2', path: 'users/profile' } }\n+api.href({ version: '2', path: 'users/profile' }) // '/api/v2/users/profile'\n+api.href({ path: 'users/profile' }) // '/api/users/profile'\n+\n+let cdn = new RoutePattern('http(s)://:region.cdn.com/assets/*file.:ext')\n+cdn.match('https://us-west.cdn.com/assets/images/logo.png') // { params: { region: 'us-west', file: 'images/logo', ext: 'png' } }\n+cdn.href({ region: 'us-west', file: 'images/logo', ext: 'png' }) // 'https://us-west.cdn.com/assets/images/logo.png'\n+```\n+\n+**Goals**\n+\n+- **Universal**: Runs on any JS runtime (Node, Bun, Deno, Cloudflare Workers,\n+ browsers, ...)\n+- **Type-safe params**: Autocomplete and validation for variables, wildcards,\n+ and search params\n+- **Full URL matching**: Protocol, hostname, port, pathname, search params\n+- **Fast**: Includes matchers optimized for small and large apps\n+- **Simple ranking**: Static segments beat variables, variables beat wildcards\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/route-pattern\n+```\n+\n+## Intuitive syntax\n+\n+**Variables** capture dynamic segments using `:name`:\n+\n+```ts\n+new RoutePattern('users/:id') // matches /users/123\n+new RoutePattern('blog/:year-:month-:day/:slug') // matches /blog/2024-01-15/hello\n+```\n+\n+**Wildcards** match multi-segment paths using `*name`:\n+\n+```ts\n+new RoutePattern('files/*path') // matches /files/images/logo.png\n+new RoutePattern('node_modules/*package/dist/index.js') // matches /node_modules/@remix-run/router/dist/index.js\n+new RoutePattern('files/*') // matches any path under /files, but doesn't capture the value for the wildcard\n+```\n+\n+**Optionals** make parts optional using `()`:\n+\n+```ts\n+new RoutePattern('api(/v:version)/users') // matches /api/users AND /api/v2/users\n+new RoutePattern('blog/:slug(.html)') // matches /blog/hello AND /blog/hello.html\n+new RoutePattern('docs(/guides/:category)') // multiple segments optional: /docs OR /docs/guides/routing\n+new RoutePattern('api(/v:major(.:minor))') // nested optionals: /api, /api/v2, /api/v2.1\n+```\n+\n+**Search params** narrow matches using `?key` or `?key=value`:\n+\n+```ts\n+new RoutePattern('search?q') // requires ?q in URL\n+new RoutePattern('search?q=') // requires ?q with any value\n+new RoutePattern('search?q=routing') // requires ?q=routing exactly\n+```\n+\n+**Flexible matching** for partial URL patterns:\n+\n+```ts\n+new RoutePattern('blog/:slug') // omits protocol/hostname, matches any origin\n+new RoutePattern('://example.com/api') // omits protocol, matches http and https\n+new RoutePattern('search?q') // allows additional search params beyond ?q\n+```\n+\n+## Matchers\n+\n+Match URLs against multiple patterns. Each pattern can have associated data\n+(handlers, route IDs, metadata, etc.):\n+\n+```ts\n+import { ArrayMatcher as Matcher } from '@remix-run/route-pattern'\n+\n+// Any data type you want!\n+let matcher = new Matcher<string>()\n+\n+matcher.add('/', 'home')\n+matcher.add('blog/:slug', 'blog-post')\n+matcher.add('api(/v:version)/*path', 'api')\n+\n+matcher.match('https://example.com/blog/v3')\n+// { pattern: 'blog/:slug', params: { slug: 'v3' }, data: 'blog-post' }\n+\n+matcher.match('https://example.com/api/v2/users/profile')\n+// { pattern: 'api(/v:version)/*path', params: { version: '2', path: 'users/profile' }, data: 'api' }\n+```\n+\n+**ArrayMatcher vs TrieMatcher**\n+\n+- **ArrayMatcher**: Best for small apps (~80 routes or fewer)\n+- **TrieMatcher**: Best for large apps (hundreds of routes)\n+\n+Note: Performance depends on your specific patterns - benchmark both to verify\n+which is faster for your app.\n+\n+Both implement the `Matcher` API so you can swap them out easily:\n+\n+```ts\n+// import { ArrayMatcher as Matcher } from \"@remix-run/route-pattern\"\n+import { TrieMatcher as Matcher } from '@remix-run/route-pattern'\n+```\n+\n+## Specificity\n+\n+When multiple patterns match a URL, the most specific pattern wins.\n+\n+**Pathname specificity** (left-to-right):\n+\n+```ts\n+import { ArrayMatcher } from '@remix-run/route-pattern'\n+\n+let matcher = new ArrayMatcher<string>()\n+matcher.add('blog/hello', 'static')\n+matcher.add('blog/:slug', 'variable')\n+matcher.add('blog/*path', 'wildcard')\n+matcher.add('*path', 'catch-all')\n+\n+matcher.match('https://example.com/blog/hello')\n+// { pattern: 'blog/hello', params: {}, data: 'static' }\n+// 'blog/hello' wins: static segments beat variables/wildcards at each position\n+```\n+\n+**Search parameter specificity**:\n+\n+```ts\n+let router = new ArrayMatcher<string>()\n+router.add('search', 'no-params')\n+router.add('search?q', 'has-q')\n+router.add('search?q=', 'has-q-with-value')\n+router.add('search?q=hello', 'exact-match')\n+\n+router.match('https://example.com/search?q=hello')\n+// { pattern: 'search?q=hello', params: {}, data: 'exact-match' }\n+// More constrained search params = more specific\n+```\n+\n+## Benchmark\n+\n+To run benchmarks comparing `route-pattern` performance with comparable\n+libraries:\n+\n+```sh\n+pnpm bench bench/comparison.bench.ts\n+```\n+\n+## Related Work\n+\n+- [`path-to-regexp`](https://www.npmjs.com/package/path-to-regexp)\n+- [`URLPattern`](https://developer.mozilla.org/en-US/docs/Web/API/URLPattern)\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/session/flash-and-security.md b/docs/agents/remix/session/flash-and-security.md\nnew file mode 100644\nindex 0000000..0f71be4\n--- /dev/null\n+++ b/docs/agents/remix/session/flash-and-security.md\n@@ -0,0 +1,91 @@\n+# Flash data and security\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/session\n+\n+## Flash messages\n+\n+Flash messages are values that persist only for the next request, perfect for\n+displaying one-time notifications:\n+\n+```ts\n+async function requestIndex(cookie: string | null) {\n+\tlet session = await storage.read(cookie)\n+\treturn { session, cookie: await storage.save(session) }\n+}\n+\n+async function requestSubmit(cookie: string | null) {\n+\tlet session = await storage.read(cookie)\n+\tsession.flash('message', 'success!')\n+\treturn { session, cookie: await storage.save(session) }\n+}\n+\n+// Flash data is undefined on the first request\n+let response1 = await requestIndex(null)\n+assert.equal(response1.session.get('message'), undefined)\n+\n+// Flash data is undefined on the same request it is set. This response\n+// is typically a redirect to a route that displays the flash data.\n+let response2 = await requestSubmit(response1.cookie)\n+assert.equal(response2.session.get('message'), undefined)\n+\n+// Flash data is available on the next request\n+let response3 = await requestIndex(response2.cookie)\n+assert.equal(response3.session.get('message'), 'success!')\n+\n+// Flash data is not available on subsequent requests\n+let response4 = await requestIndex(response3.cookie)\n+assert.equal(response4.session.get('message'), undefined)\n+```\n+\n+## Regenerating session IDs\n+\n+For security, regenerate the session ID after privilege changes like a login.\n+This helps prevent session fixation attacks by issuing a new session ID in the\n+response.\n+\n+```ts\n+import { createFsSessionStorage } from '@remix-run/session/fs-storage'\n+\n+let sessionStorage = createFsSessionStorage('/tmp/sessions')\n+\n+async function requestIndex(cookie: string | null) {\n+\tlet session = await sessionStorage.read(cookie)\n+\treturn { session, cookie: await sessionStorage.save(session) }\n+}\n+\n+async function requestLogin(cookie: string | null) {\n+\tlet session = await sessionStorage.read(cookie)\n+\tsession.set('userId', 'mj')\n+\tsession.regenerateId()\n+\treturn { session, cookie: await sessionStorage.save(session) }\n+}\n+\n+let response1 = await requestIndex(null)\n+assert.equal(response1.session.get('userId'), undefined)\n+\n+let response2 = await requestLogin(response1.cookie)\n+assert.notEqual(response2.session.id, response1.session.id)\n+\n+let response3 = await requestIndex(response2.cookie)\n+assert.equal(response3.session.get('userId'), 'mj')\n+```\n+\n+To delete the old session data when the session is saved, use\n+`session.regenerateId(true)`. This can help to prevent session fixation attacks\n+by deleting the old session data when the session is saved. However, it may not\n+be desirable in a situation with mobile clients on flaky connections that may\n+need to resume the session using an old session ID.\n+\n+## Destroying sessions\n+\n+When a user logs out, you should destroy the session using `session.destroy()`.\n+\n+This will clear all session data from storage the next time it is saved. It also\n+clears the session ID on the client in the next response, so it will start with\n+a new session on the next request.\n+\n+## Navigation\n+\n+- [Session overview](./index.md)\n+- [Storage strategies](./storage-strategies.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/session/index.md b/docs/agents/remix/session/index.md\nnew file mode 100644\nindex 0000000..c03438a\n--- /dev/null\n+++ b/docs/agents/remix/session/index.md\n@@ -0,0 +1,67 @@\n+# session\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/session\n+\n+## Overview\n+\n+A full-featured session management library for JavaScript. This package provides\n+a flexible and secure way to manage user sessions in server-side applications\n+with a flexible API for different session storage strategies.\n+\n+## Features\n+\n+- **Multiple Storage Strategies:** Includes memory, cookie, and file-based\n+ storage strategies for different use cases\n+- **Flash Messages:** Support for flash data that persists only for the next\n+ request\n+- **Session Security:** Built-in protection against session fixation attacks\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/session\n+```\n+\n+## Usage\n+\n+The standard pattern is to read the session from the request, modify it, and\n+save it back to storage and write the session cookie to the response.\n+\n+```ts\n+import { createCookieSessionStorage } from '@remix-run/session/cookie-storage'\n+\n+// Create a session storage. This is used to store session data across requests.\n+let storage = createCookieSessionStorage()\n+\n+// This function simulates a typical request flow where the session is read from\n+// the request cookie, modified, and the new cookie is returned in the response.\n+async function handleRequest(cookie: string | null) {\n+\tlet session = await storage.read(cookie)\n+\tsession.set('count', Number(session.get('count') ?? 0) + 1)\n+\treturn {\n+\t\tsession, // The session data from this \"request\"\n+\t\tcookie: await storage.save(session), // The cookie to use on the next request\n+\t}\n+}\n+\n+let response1 = await handleRequest(null)\n+assert.equal(response1.session.get('count'), 1)\n+\n+let response2 = await handleRequest(response1.cookie)\n+assert.equal(response2.session.get('count'), 2)\n+\n+let response3 = await handleRequest(response2.cookie)\n+assert.equal(response3.session.get('count'), 3)\n+```\n+\n+The example above is a low-level illustration of how to use this package for\n+session management. In practice, you would use the `session` middleware in\n+[`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router)\n+to automatically manage the session for you.\n+\n+## Navigation\n+\n+- [Flash data and security](./flash-and-security.md)\n+- [Storage strategies](./storage-strategies.md)\n+- [Related packages](./related.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/session/related.md b/docs/agents/remix/session/related.md\nnew file mode 100644\nindex 0000000..932ef56\n--- /dev/null\n+++ b/docs/agents/remix/session/related.md\n@@ -0,0 +1,23 @@\n+# Related packages\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/session\n+\n+## Related packages\n+\n+- [`cookie`](https://github.com/remix-run/remix/tree/main/packages/cookie) -\n+ Cookie parsing and serialization\n+- [`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Router with built-in session middleware\n+- [`session-storage-memcache`](https://github.com/remix-run/remix/tree/main/packages/session-storage-memcache) -\n+ Memcache-backed session storage adapter\n+- [`session-storage-redis`](https://github.com/remix-run/remix/tree/main/packages/session-storage-redis) -\n+ Redis-backed session storage adapter\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Session overview](./index.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/session/storage-strategies.md b/docs/agents/remix/session/storage-strategies.md\nnew file mode 100644\nindex 0000000..2347c11\n--- /dev/null\n+++ b/docs/agents/remix/session/storage-strategies.md\n@@ -0,0 +1,55 @@\n+# Storage strategies\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/session\n+\n+Several strategies are provided out of the box for storing session data across\n+requests, depending on your needs.\n+\n+A session storage object must always be initialized with a signed session\n+cookie. This is used to identify the session and to store the session data in\n+the response.\n+\n+## Filesystem storage\n+\n+Filesystem storage is a good choice for production environments. It requires\n+access to a persistent filesystem, which is readily available on most servers.\n+And it can scale to handle sessions with a lot of data easily.\n+\n+```ts\n+import { createFsSessionStorage } from '@remix-run/session/fs-storage'\n+\n+let sessionStorage = createFsSessionStorage('/tmp/sessions')\n+```\n+\n+## Cookie storage\n+\n+Cookie storage is suitable for production environments. In this strategy, all\n+session data is stored directly in the session cookie itself, which means it\n+doesn't require any additional storage.\n+\n+The main limitation of cookie storage is that the total size of the session\n+cookie is limited to the browser's maximum cookie size, typically 4096 bytes.\n+\n+```ts\n+import { createCookieSessionStorage } from '@remix-run/session/cookie-storage'\n+\n+let sessionStorage = createCookieSessionStorage()\n+```\n+\n+## Memory storage\n+\n+Memory storage is useful in testing and development environments. In this\n+strategy, all session data is stored in memory, which means no additional\n+storage is required. However, all session data is lost when the server restarts.\n+\n+```ts\n+import { createMemorySessionStorage } from '@remix-run/session/memory-storage'\n+\n+let sessionStorage = createMemorySessionStorage()\n+```\n+\n+## Navigation\n+\n+- [Session overview](./index.md)\n+- [Related packages](./related.md)\n+- [Remix package index](../index.md)\ndiff --git a/docs/agents/remix/session-middleware.md b/docs/agents/remix/session-middleware.md\nnew file mode 100644\nindex 0000000..6683df1\n--- /dev/null\n+++ b/docs/agents/remix/session-middleware.md\n@@ -0,0 +1,114 @@\n+# session-middleware\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/session-middleware\n+\n+## README\n+\n+Middleware for managing sessions with\n+[`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router)\n+via securely signed cookies.\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/session-middleware\n+```\n+\n+## Usage\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { createCookie } from '@remix-run/cookie'\n+import { createCookieSessionStorage } from '@remix-run/session/cookie-storage'\n+import { session } from '@remix-run/session-middleware'\n+\n+let sessionCookie = createCookie('__session', {\n+\tsecrets: ['s3cr3t'], // session cookies must be signed!\n+\thttpOnly: true,\n+\tsecure: true,\n+\tsameSite: 'lax',\n+})\n+\n+let sessionStorage = createCookieSessionStorage()\n+\n+let router = createRouter({\n+\tmiddleware: [session(sessionCookie, sessionStorage)],\n+})\n+\n+router.get('/', (context) => {\n+\tcontext.session.set('count', Number(context.session.get('count') ?? 0) + 1)\n+\treturn new Response(`Count: ${context.session.get('count')}`)\n+})\n+```\n+\n+The middleware:\n+\n+- Reads the session from the cookie on incoming requests\n+- Makes it available as `context.session`\n+- Automatically saves session changes and sets the cookie on responses\n+\n+Note: The session cookie must be signed for security. This prevents tampering\n+with the session data on the client.\n+\n+### Login/Logout Flow\n+\n+A basic login/logout flow could look like this:\n+\n+```ts\n+import * as res from '@remix-run/fetch-router/response-helpers'\n+\n+router.get('/login', ({ session }) => {\n+ let error = session.get('error')\n+ return res.html(`\n+ <html>\n+ <body>\n+ <h1>Login</h1>\n+ ${typeof error === 'string' ? <div class=\"error\">${error}</div> : null}\n+ <form method=\"POST\" action=\"/login\">\n+ <input type=\"text\" name=\"username\" placeholder=\"Username\" />\n+ <input type=\"password\" name=\"password\" placeholder=\"Password\" />\n+ <button type=\"submit\">Login</button>\n+ </form>\n+ </body>\n+ </html>\n+ `)\n+})\n+\n+router.post('/login', ({ session, formData }) => {\n+ let username = formData.get('username')\n+ let password = formData.get('password')\n+\n+ let user = authenticateUser(username, password)\n+ if (!user) {\n+ session.flash('error', 'Invalid username or password')\n+ return res.redirect('/login')\n+ }\n+\n+ session.regenerateId()\n+ session.set('userId', user.id)\n+\n+ return res.redirect('/dashboard')\n+})\n+\n+router.post('/logout', ({ session }) => {\n+ session.destroy()\n+ return res.redirect('/')\n+})\n+```\n+\n+## Related Packages\n+\n+- [`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Router for the web Fetch API\n+- [`session`](https://github.com/remix-run/remix/tree/main/packages/session) -\n+ Session management and storage\n+- [`cookie`](https://github.com/remix-run/remix/tree/main/packages/cookie) -\n+ Cookie parsing and serialization\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/session-storage-memcache.md b/docs/agents/remix/session-storage-memcache.md\nnew file mode 100644\nindex 0000000..c2f8a4b\n--- /dev/null\n+++ b/docs/agents/remix/session-storage-memcache.md\n@@ -0,0 +1,46 @@\n+# session-storage-memcache\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/session-storage-memcache\n+\n+## README\n+\n+Memcache session storage for `remix/session`.\n+\n+## Installation\n+\n+```sh\n+npm i remix\n+```\n+\n+## Usage\n+\n+```ts\n+import { createMemcacheSessionStorage } from 'remix/session-storage-memcache'\n+\n+let sessionStorage = createMemcacheSessionStorage('127.0.0.1:11211', {\n+\tkeyPrefix: 'my-app:session:',\n+\tttlSeconds: 60 * 60 * 24 * 7,\n+})\n+```\n+\n+## Options\n+\n+- `useUnknownIds` (`boolean`, default: `false`)\n+- `keyPrefix` (`string`, default: `'remix:session:'`)\n+- `ttlSeconds` (`number`, default: `0`)\n+\n+Memcache storage uses TCP sockets and therefore requires a Node.js runtime.\n+\n+## Related packages\n+\n+- [`session`](https://github.com/remix-run/remix/tree/main/packages/session)\n+- [`session-middleware`](https://github.com/remix-run/remix/tree/main/packages/session-middleware)\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/session-storage-redis.md b/docs/agents/remix/session-storage-redis.md\nnew file mode 100644\nindex 0000000..96534c4\n--- /dev/null\n+++ b/docs/agents/remix/session-storage-redis.md\n@@ -0,0 +1,43 @@\n+# session-storage-redis\n+\n+Source:\n+https://github.com/remix-run/remix/tree/main/packages/session-storage-redis\n+\n+## README\n+\n+Redis-backed session storage for `remix/session`.\n+\n+## Installation\n+\n+```sh\n+npm i remix redis\n+```\n+\n+## Usage\n+\n+```ts\n+import { createClient } from 'redis'\n+import { createRedisSessionStorage } from 'remix/session-storage-redis'\n+\n+let redis = createClient({ url: process.env.REDIS_URL })\n+await redis.connect()\n+\n+let sessionStorage = createRedisSessionStorage(redis, {\n+\tkeyPrefix: 'session:',\n+\tttl: 60 * 60 * 24,\n+})\n+```\n+\n+## Options\n+\n+- `keyPrefix` (`string`, default: `'session:'`)\n+- `ttl` (`number` in seconds)\n+- `useUnknownIds` (`boolean`, default: `false`)\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/static-middleware.md b/docs/agents/remix/static-middleware.md\nnew file mode 100644\nindex 0000000..0f1a06c\n--- /dev/null\n+++ b/docs/agents/remix/static-middleware.md\n@@ -0,0 +1,109 @@\n+# static-middleware\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/static-middleware\n+\n+## README\n+\n+Middleware for serving static files from the filesystem for use with\n+[`@remix-run/fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router).\n+\n+Serves static files from a directory with support for ETags, range requests, and\n+conditional requests.\n+\n+## Features\n+\n+- [ETag support](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/ETag)\n+ (weak and strong)\n+- [Range request support](https://developer.mozilla.org/en-US/docs/Web/HTTP/Range_requests)\n+ (HTTP 206 Partial Content)\n+- [Conditional request support](https://developer.mozilla.org/en-US/docs/Web/HTTP/Conditional_requests)\n+ (If-None-Match, If-Modified-Since)\n+- Path traversal protection\n+- Automatic fall through to next middleware/handler if file not found\n+\n+## Installation\n+\n+```sh\n+npm install @remix-run/static-middleware\n+```\n+\n+## Usage\n+\n+Static middleware is useful for serving static files from a directory.\n+\n+```ts\n+import { createRouter } from '@remix-run/fetch-router'\n+import { staticFiles } from '@remix-run/static-middleware'\n+\n+let router = createRouter({\n+\tmiddleware: [staticFiles('./public')],\n+})\n+\n+router.get('/', () => new Response('Home'))\n+```\n+\n+### With Cache Control\n+\n+Internally, the `staticFiles()` middleware uses the\n+[`createFileResponse()` helper from `@remix-run/response`](https://github.com/remix-run/remix/tree/main/packages/response/README.md#file-responses)\n+to send files with full HTTP semantics. This means it also accepts the same\n+options as the `createFileResponse()` helper.\n+\n+```ts\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tstaticFiles('./public', {\n+\t\t\tcacheControl: 'public, max-age=31536000, immutable', // 1 year\n+\t\t}),\n+\t],\n+})\n+```\n+\n+### Filter Files\n+\n+```ts\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tstaticFiles('./public', {\n+\t\t\tfilter(path) {\n+\t\t\t\t// Don't serve hidden files\n+\t\t\t\treturn !path.startsWith('.')\n+\t\t\t},\n+\t\t}),\n+\t],\n+})\n+```\n+\n+### Multiple Directories\n+\n+```ts\n+let router = createRouter({\n+\tmiddleware: [\n+\t\tstaticFiles('./public'),\n+\t\tstaticFiles('./assets', {\n+\t\t\tcacheControl: 'public, max-age=31536000',\n+\t\t}),\n+\t],\n+})\n+```\n+\n+## Security\n+\n+- Prevents path traversal attacks (e.g., `../../../etc/passwd`)\n+- Only serves files with GET and HEAD requests\n+- Respects the configured root directory boundary\n+\n+## Related Packages\n+\n+- [`fetch-router`](https://github.com/remix-run/remix/tree/main/packages/fetch-router) -\n+ Router for the web Fetch API\n+- [`lazy-file`](https://github.com/remix-run/remix/tree/main/packages/lazy-file) -\n+ Used internally for streaming file contents\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/tar-parser.md b/docs/agents/remix/tar-parser.md\nnew file mode 100644\nindex 0000000..40de625\n--- /dev/null\n+++ b/docs/agents/remix/tar-parser.md\n@@ -0,0 +1,104 @@\n+# tar-parser\n+\n+Source: https://github.com/remix-run/remix/tree/main/packages/tar-parser\n+\n+## README\n+\n+`tar-parser` is a fast, efficient parser for\n+[tar archives](<https://en.wikipedia.org/wiki/Tar_(computing)>).\n+\n+Tar archives are ubiquitous in software development, used for distributing\n+packages, backing up files, and transferring data. Most existing JavaScript tar\n+parsers are either Node.js-specific or don't handle streaming efficiently,\n+forcing you to buffer entire archives in memory. This makes them unsuitable for\n+serverless environments or processing large archives.\n+\n+`tar-parser` can be used in any JavaScript environment (not just Node.js) and\n+processes archives as streams, making it ideal for modern web development across\n+all runtimes.\n+\n+## Features\n+\n+- **Universal Runtime** - Runs anywhere JavaScript runs\n+- **Web Streams** - Built on the standard\n+ [web Streams API](https://developer.mozilla.org/en-US/docs/Web/API/Streams_API),\n+ so it's composable with `fetch()` streams\n+- **Format Support** - Supports POSIX, GNU, and PAX tar formats\n+- **Memory Efficient** - Does not buffer anything in normal usage\n+- **Zero Dependencies** - No external dependencies\n+\n+## Installation\n+\n+Install from [npm](https://www.npmjs.com/):\n+\n+```sh\n+npm install @remix-run/tar-parser\n+```\n+\n+## Usage\n+\n+The main parser interface is the `parseTar(archive, handler)` function:\n+\n+```ts\n+import { parseTar } from '@remix-run/tar-parser'\n+\n+let response = await fetch(\n+\t'https://github.com/remix-run/remix/archive/refs/heads/main.tar.gz',\n+)\n+\n+await parseTar(\n+\tresponse.body.pipeThrough(new DecompressionStream('gzip')),\n+\t(entry) => {\n+\t\tconsole.log(entry.name, entry.size)\n+\t},\n+)\n+```\n+\n+If you're parsing an archive with filename encodings other than UTF-8, use the\n+`filenameEncoding` option:\n+\n+```ts\n+let response = await fetch(/* ... */)\n+\n+await parseTar(response.body, { filenameEncoding: 'latin1' }, (entry) => {\n+\tconsole.log(entry.name, entry.size)\n+})\n+```\n+\n+## Benchmark\n+\n+`tar-parser` performs on par with other popular tar parsing libraries on\n+Node.js.\n+\n+```\n+> @remix-run/tar-parser@0.0.0 bench /Users/michael/Projects/remix-the-web/packages/tar-parser\n+> node --disable-warning=ExperimentalWarning ./bench/runner.ts\n+\n+Platform: Darwin (24.0.0)\n+CPU: Apple M1 Pro\n+Date: 12/6/2024, 11:00:55 AM\n+Node.js v22.8.0\n+(index) | lodash npm package\n+tar-parser | '6.23 ms +/- 0.58'\n+tar-stream | '6.72 ms +/- 2.24'\n+node-tar | '6.49 ms +/- 0.44'\n+```\n+\n+## Related Packages\n+\n+- [`multipart-parser`](https://github.com/remix-run/remix/tree/main/packages/multipart-parser) -\n+ Fast, streaming multipart parser for JavaScript\n+\n+## Credits\n+\n+`tar-parser` is based on the excellent\n+[tar-stream package](https://www.npmjs.com/package/tar-stream) (MIT license) and\n+adopts the same core parsing algorithm, utility functions, and many test cases.\n+\n+## License\n+\n+See [LICENSE](https://github.com/remix-run/remix/blob/main/LICENSE)\n+\n+## Navigation\n+\n+- [Remix package index](./index.md)\ndiff --git a/docs/agents/remix/update.md b/docs/agents/remix/update.md\nnew file mode 100644\nindex 0000000..aad1aaa\n--- /dev/null\n+++ b/docs/agents/remix/update.md\n@@ -0,0 +1,70 @@\n+# Updating Remix package docs\n+\n+Use this checklist to refresh `docs/agents/remix/**/*.md` from upstream.\n+\n+## 1) List packages\n+\n+```sh\n+gh api repos/remix-run/remix/contents/packages --jq '.[].name'\n+```\n+\n+## 2) Refresh each package README\n+\n+For each package name, download the README from upstream:\n+\n+```sh\n+curl -L \"https://raw.githubusercontent.com/remix-run/remix/main/packages/<package>/README.md\"\n+```\n+\n+Replace the corresponding README content in docs:\n+\n+- For single-file packages, update `docs/agents/remix/<package>.md`.\n+- For split packages, update the README chunks under\n+ `docs/agents/remix/<package>/`.\n+\n+Keep each Markdown file to roughly 200 lines or fewer. If a README grows beyond\n+that, split it into multiple files and update the package `index.md` to link the\n+new chunks.\n+\n+## 3) Refresh component docs\n+\n+`component` is the only package with a `docs` directory. Sync every file from:\n+\n+```\n+https://github.com/remix-run/remix/tree/main/packages/component/docs\n+```\n+\n+Update the split files in `docs/agents/remix/component/` to match upstream. Keep\n+all docs: `animate`, `components`, `composition`, `context`, `events`,\n+`getting-started`, `handle`, `interactions`, `patterns`, `spring`, `styling`,\n+`testing`, `tween`. If any single doc exceeds roughly 200 lines, split it into\n+multiple files and add links in `component/index.md`.\n+\n+## 4) Keep the index current\n+\n+If a package is added or removed upstream, update `docs/agents/remix/index.md`:\n+\n+- Add/remove package rows in the table.\n+- Update the \"Start here\" section if new docs are important.\n+- If a package moves to a folder, update links to `./<package>/index.md`.\n+\n+## 5) Audit export coverage\n+\n+Confirm `docs/agents/remix/index.md` package rows still cover all top-level\n+exports from the installed `remix` package:\n+\n+```sh\n+node -e \"const fs=require('fs');const pkg=JSON.parse(fs.readFileSync('node_modules/remix/package.json','utf8'));const top=[...new Set(Object.keys(pkg.exports).filter(k=>k!=='./package.json').map(k=>k.slice(2).split('/')[0]))].sort();const idx=fs.readFileSync('docs/agents/remix/index.md','utf8');const docs=[...new Set([...idx.matchAll(/^\\\\|\\\\s*([a-z0-9-]+)\\\\s*\\\\|/gm)].map(m=>m[1]).filter(x=>!['Package','--------------------------'].includes(x)))].sort();const missing=top.filter(x=>!docs.includes(x));console.log(missing.length===0?'No missing package docs in index.':'Missing docs for: '+missing.join(', '));\"\n+```\n+\n+If any package names are missing, add them to `docs/agents/remix/index.md` and\n+add the corresponding docs file(s).\n+\n+## 6) Verify\n+\n+Run formatting and validation before committing:\n+\n+```sh\n+npm run format\n+npm run validate\n+```\ndiff --git a/docs/agents/setup.md b/docs/agents/setup.md\nnew file mode 100644\nindex 0000000..bce569a\n--- /dev/null\n+++ b/docs/agents/setup.md\n@@ -0,0 +1,129 @@\n+# Setup\n+\n+Quick notes for getting a local epic-scheduler environment running.\n+\n+## Prerequisites\n+\n+- Node.js v24+.\n+- npm.\n+\n+## Install\n+\n+- `npm install`\n+\n+## Local development\n+\n+- Copy `.env.example` to `.env` before starting any work, then update secrets as\n+ needed.\n+- `npm run dev` (starts mock API servers automatically and sets\n+ `RESEND_API_BASE_URL` to the local mock Worker).\n+- Add new mock API servers by following `docs/agents/mock-api-servers.md`.\n+- If you only need the client bundle or worker, use:\n+ - `npm run dev:client`\n+ - `npm run dev:worker`\n+- Set `CLOUDFLARE_ENV` to switch Wrangler environments (defaults to\n+ `production`). Playwright sets this to `test`.\n+\n+## Checks\n+\n+- `npm run validate` runs format check, lint fix, build, typecheck, Playwright\n+ tests, and MCP E2E tests.\n+- `npm run format` applies formatting updates.\n+- `npm run test:e2e:install` to install Playwright browsers.\n+- `npm run test:e2e` to run Playwright specs.\n+- `npm run test:mcp` to run MCP server E2E tests.\n+\n+## Documentation maintenance\n+\n+- Update `docs/agents` when behavior, workflows, architecture notes, or\n+ verification guidance change.\n+- Treat docs updates as part of done work.\n+- Keep `AGENTS.md` concise and index-like; put details in focused docs.\n+- When failures repeat, promote lessons from docs into tests, lint rules, or\n+ scripts.\n+\n+## Seed test account\n+\n+Use this script to ensure a known test login exists in any deployed environment:\n+\n+- Local D1 (default):\n+ - `npm run migrate:local`\n+ - `node ./tools/seed-test-data.ts --local`\n+- Local D1 with custom persisted state:\n+ - `node ./tools/seed-test-data.ts --local --persist-to .wrangler/state/e2e`\n+- Remote D1:\n+ - `node ./tools/seed-test-data.ts --remote --config <wrangler-config-path>`\n+- Default credentials:\n+ - email: `kody@kcd.dev`\n+ - password: `kodylovesyou`\n+- Override credentials when needed:\n+ - `node ./tools/seed-test-data.ts --email <email> --password <password>`\n+- When changing DB schema/model definitions or migrations, review\n+ `tools/seed-test-data.ts` and update it so seeded data still matches the new\n+ model and remains useful for local and preview verification.\n+\n+### Reset, re-migrate, then seed\n+\n+For a full local reset before seeding:\n+\n+1. Drop app tables:\n+ - `node ./wrangler-env.ts d1 execute APP_DB --local --command \"PRAGMA foreign_keys=OFF; DROP TABLE IF EXISTS password_resets; DROP TABLE IF EXISTS mock_resend_messages; DROP TABLE IF EXISTS users; PRAGMA foreign_keys=ON;\"`\n+2. Re-apply migrations:\n+ - `npm run migrate:local`\n+3. Seed test account:\n+ - `node ./tools/seed-test-data.ts`\n+\n+For preview environments, we do a full resource reset:\n+\n+1. Delete preview resources:\n+ - `node ./tools/ci/preview-resources.ts cleanup --worker-name <preview-worker-name>`\n+2. Recreate preview resources and config:\n+ - `node ./tools/ci/preview-resources.ts ensure --worker-name <preview-worker-name> --out-config wrangler-preview.generated.json`\n+3. Re-apply remote migrations:\n+ - `CLOUDFLARE_ENV=preview node ./wrangler-env.ts d1 migrations apply APP_DB --remote --config wrangler-preview.generated.json`\n+4. Seed test account:\n+ - `node ./tools/seed-test-data.ts --remote --config wrangler-preview.generated.json`\n+\n+## PR preview deployments\n+\n+The GitHub Actions preview workflow creates per-preview Cloudflare resources so\n+each PR preview is isolated:\n+\n+- D1 database: `<preview-worker-name>-db`\n+- KV namespace (OAuth state): `<preview-worker-name>-oauth-kv`\n+\n+When a PR is closed, the cleanup job deletes the preview Worker(s) and these\n+resources as well.\n+\n+Cloudflare Workers supports version `preview_urls`, but those preview URLs are\n+not currently available for Workers that use Durable Objects. The main app\n+Worker binds `MCP_OBJECT`, so app previews continue to use per-PR Worker names.\n+Mock Workers do not use Durable Objects, so their Wrangler configs opt into\n+`preview_urls = true` and the workflow includes mock version preview links when\n+Cloudflare returns them.\n+\n+Production deploys also ensure required Cloudflare resources exist before\n+migrations/deploy:\n+\n+- D1 database: from `env.production.d1_databases` binding `APP_DB`\n+- KV namespace: `OAUTH_KV` (defaults to `<worker-name>-oauth` when creating)\n+\n+Both the preview and production deploy workflows run a post-deploy healthcheck\n+against `<deploy-url>/health` and fail the job if it does not return\n+`{ ok: true, commitSha }` with `commitSha` matching the commit SHA deployed by\n+that workflow.\n+\n+Preview deploys also run `node ./tools/seed-test-data.ts` after deploy to create or\n+verify the shared test account credentials listed above.\n+\n+If you ever need to do the same operations manually, use:\n+\n+- `node ./tools/ci/preview-resources.ts ensure --worker-name <name> --out-config <path>`\n+- `node ./tools/ci/preview-resources.ts cleanup --worker-name <name>`\n+- `node ./tools/ci/production-resources.ts ensure --out-config <path>`\n+\n+## Remix package docs\n+\n+Use the Remix package index for quick navigation:\n+\n+- `docs/agents/remix/index.md`\ndiff --git a/docs/agents/testing-principles.md b/docs/agents/testing-principles.md\nnew file mode 100644\nindex 0000000..842fb33\n--- /dev/null\n+++ b/docs/agents/testing-principles.md\n@@ -0,0 +1,88 @@\n+# Testing principles\n+\n+This codebase favors small, readable tests with explicit setup and minimal\n+magic.\n+\n+## Principles\n+\n+- Prefer flat test files: use top-level `test(...)` and avoid `describe`\n+ nesting.\n+- Avoid shared setup like `beforeEach`/`afterEach`; inline setup per test.\n+- Don't write tests for what the type system already guarantees.\n+- Use disposable objects only when there is real cleanup. If no cleanup, skip\n+ `using` and `Symbol.dispose`.\n+- Build helpers that return ready-to-run objects (factory pattern), not globals.\n+- Keep test intent obvious in the name: \"auth handler returns 400 for invalid\n+ JSON\".\n+- Write tests so they could run offline if necessary: avoid relying on the\n+ public internet and third-party services; prefer local fakes/fixtures.\n+- Prefer fast unit tests for server logic; keep e2e tests focused on journeys.\n+- Run server/unit tests with `npx vitest run ./server ./mock-servers` to avoid\n+ Playwright spec discovery and accidental matches like `mcp-server-e2e`.\n+\n+## Examples\n+\n+### `Symbol.dispose` with `using`\n+\n+```ts\n+import { readFileSync, rmSync, writeFileSync } from 'node:fs'\n+import { test, expect } from 'vitest'\n+\n+const createTempFile = () => {\n+\tconst path = `/tmp/test-${crypto.randomUUID()}.txt`\n+\twriteFileSync(path, 'hello')\n+\n+\treturn {\n+\t\tpath,\n+\t\t[Symbol.dispose]: () => {\n+\t\t\ttry {\n+\t\t\t\trmSync(path, { force: true })\n+\t\t\t} catch {\n+\t\t\t\t// Cleanup should never fail the test.\n+\t\t\t}\n+\t\t},\n+\t}\n+}\n+\n+test('reads a temp file', () => {\n+\tusing tempFile = createTempFile()\n+\tconst contents = readFileSync(tempFile.path, 'utf8')\n+\texpect(contents).toBe('hello')\n+})\n+```\n+\n+### `Symbol.asyncDispose` with `await using`\n+\n+```ts\n+import { createServer } from 'node:http'\n+import { test, expect } from 'vitest'\n+\n+const createDisposableServer = async () => {\n+\tconst server = createServer((_request, response) => {\n+\t\tresponse.end('ok')\n+\t})\n+\tawait new Promise<void>((resolve) => server.listen(0, resolve))\n+\tconst address = server.address()\n+\tif (!address || typeof address === 'string') {\n+\t\tthrow new Error('Expected an ephemeral TCP port')\n+\t}\n+\n+\treturn {\n+\t\turl: `http://localhost:${address.port}`,\n+\t\t[Symbol.asyncDispose]: async () => {\n+\t\t\tawait new Promise<void>((resolve, reject) => {\n+\t\t\t\tserver.close((error) => {\n+\t\t\t\t\tif (error) reject(error)\n+\t\t\t\t\telse resolve()\n+\t\t\t\t})\n+\t\t\t})\n+\t\t},\n+\t}\n+}\n+\n+test('fetches from a disposable server', async () => {\n+\tawait using server = await createDisposableServer()\n+\tconst response = await fetch(server.url)\n+\texpect(await response.text()).toBe('ok')\n+})\n+```\ndiff --git a/docs/agents/typescript-setup.md b/docs/agents/typescript-setup.md\nnew file mode 100644\nindex 0000000..2e049c6\n--- /dev/null\n+++ b/docs/agents/typescript-setup.md\n@@ -0,0 +1,68 @@\n+# TypeScript setup\n+\n+This repo uses **TypeScript project references** (build mode) so the editor and\n+CLI typechecking agree without forcing every file into a single TS\n+\"environment\".\n+\n+## The three environments\n+\n+We have **three** distinct TypeScript environments, each with its own\n+`tsconfig`.\n+\n+### Client\n+\n+- **Config**: `types/tsconfig-client.json`\n+- **Files**: `client/**/*.ts`, `client/**/*.tsx`\n+- **Environment**: browser (`DOM`, `DOM.Iterable`) + JSX (`remix/component`)\n+\n+### Tools\n+\n+- **Config**: `types/tsconfig-tools.json`\n+- **Files**:\n+ - `playwright.config.ts`\n+ - `wrangler-env.ts`\n+ - `cli.ts`\n+ - `docs/post-download.ts`\n+ - `mcp/mcp-server-e2e.test.ts`\n+- **Environment**: Node/Bun (scripts, configs, tests)\n+\n+### Worker\n+\n+- **Config**: `types/tsconfig-worker.json`\n+- **Files**:\n+ - `worker/**/*.ts`\n+ - `server/**/*.ts`\n+ - `mcp/**/*.ts`\n+ - `types/env.d.ts`, `types/env-schema.ts`\n+ - generated `types/worker-configuration.d.ts` (via `npm run generate-types`)\n+- **Environment**: Cloudflare Workers (`WebWorker`, `WebWorker.Iterable`)\n+\n+## Solution config (project references)\n+\n+The root `tsconfig.json` is the **solution** file:\n+\n+- It has no `include`.\n+- It references the three environment configs above.\n+\n+The CLI `typecheck` runs:\n+\n+- `tsc -b --noEmit` (build mode, using the root `tsconfig.json`)\n+\n+## Generated worker types (`types/worker-configuration.d.ts`)\n+\n+`types/worker-configuration.d.ts` is **generated** and must never be edited by\n+hand.\n+\n+- To update it, run `npm run generate-types`.\n+- This file is allowed to include relative `../...` imports since it is\n+ generated by Wrangler.\n+- If you see this file change in a PR, it should be explainable by changes to\n+ Worker bindings/config (for example `wrangler.jsonc`) or by re-running the\n+ generation script.\n+\n+## Common gotchas\n+\n+- **Missing editor types** usually means the file isn't included by any of the\n+ three environment configs. Add it to the appropriate `tsconfig.*.json`.\n+- **Worker types** depend on the generated `types/worker-configuration.d.ts`;\n+ run `npm run generate-types` if bindings/types drift.\ndiff --git a/docs/architecture/authentication.md b/docs/architecture/authentication.md\nnew file mode 100644\nindex 0000000..de634b1\n--- /dev/null\n+++ b/docs/architecture/authentication.md\n@@ -0,0 +1,87 @@\n+# Authentication\n+\n+`epic-scheduler` uses two related authentication models:\n+\n+1. Cookie-based app sessions for browser users\n+2. OAuth bearer tokens for MCP access\n+\n+## Browser app sessions\n+\n+Session cookie behavior is implemented in `server/auth-session.ts`.\n+\n+- Cookie name: `epic-scheduler_session`\n+- `httpOnly: true`\n+- `sameSite: 'Lax'`\n+- signed with `COOKIE_SECRET`\n+- max age: 7 days\n+\n+The cookie payload stores:\n+\n+- `id` (user id as string)\n+- `email`\n+\n+`server/handler.ts` calls `setAuthSessionSecret` on each request so cookie\n+signing and verification are available to handlers.\n+\n+## Login and signup\n+\n+`POST /auth` is implemented by `server/handlers/auth.ts`.\n+\n+- Accepts JSON body with `email`, `password`, and `mode` (`login` or `signup`)\n+- Uses D1 (`users` table) for user lookups and inserts\n+- Hashes passwords with `server/password-hash.ts`\n+- Returns signed session cookie via `Set-Cookie` on success\n+- Emits structured audit events through `server/audit-log.ts`\n+\n+Related handlers:\n+\n+- `GET /login` and `GET /signup`: `server/handlers/auth-page.ts`\n+- `POST /logout`: `server/handlers/logout.ts`\n+- `POST /session`: `server/handlers/session.ts` for session status checks\n+- `GET /account`: `server/handlers/account.ts` (redirects to login if missing\n+ session)\n+\n+### Client session refresh behavior\n+\n+The app shell (`client/app.tsx`) refreshes session state after initial load and\n+on client-side navigation events. If an in-flight refresh is aborted, the client\n+keeps the last known ready session instead of overwriting it with `null`. This\n+prevents transient logged-out UI during concurrent re-renders.\n+\n+## Password reset\n+\n+Password reset handlers are in `server/handlers/password-reset.ts`.\n+\n+- `POST /password-reset` creates a one-time token and stores only its hash\n+- `POST /password-reset/confirm` verifies token hash and expiry, then updates\n+ password\n+- reset tokens expire after 1 hour\n+- when configured, email delivery is done via Resend\n+\n+## OAuth for MCP\n+\n+OAuth endpoints are implemented in `worker/oauth-handlers.ts` and routed from\n+`worker/index.ts`.\n+\n+- Authorization endpoint: `/oauth/authorize`\n+- Token endpoint: `/oauth/token` (via provider)\n+- Client registration: `/oauth/register` (via provider)\n+- Supported scopes: `profile`, `email`\n+- On `/oauth/authorize`, unauthenticated users can log in inline or via top-nav\n+ auth links; those links preserve the full authorize URL in `redirectTo` so\n+ successful login/signup returns to the original OAuth request\n+\n+`/mcp` is protected by `worker/mcp-auth.ts`:\n+\n+- Requires `Authorization: Bearer <token>`\n+- Token is validated via OAuth provider helpers (`unwrapToken`)\n+- Audience must match the app origin or `<origin>/mcp`\n+- Unauthenticated requests return `401` with `WWW-Authenticate` metadata\n+\n+## What to read when changing auth\n+\n+- `worker/index.ts` for route order and integration points\n+- `worker/oauth-handlers.ts` for OAuth authorization logic\n+- `worker/mcp-auth.ts` for MCP token enforcement\n+- `server/auth-session.ts` for cookie format/signing\n+- `server/handlers/auth.ts` for app login/signup flow\ndiff --git a/docs/architecture/data-storage.md b/docs/architecture/data-storage.md\nnew file mode 100644\nindex 0000000..520ed9f\n--- /dev/null\n+++ b/docs/architecture/data-storage.md\n@@ -0,0 +1,47 @@\n+# Data storage\n+\n+This project uses three Cloudflare storage systems for different purposes.\n+\n+## D1 (`APP_DB`)\n+\n+Relational app data lives in D1.\n+\n+Current schema is defined by migrations in `migrations/`:\n+\n+- `users`: login identity and password hash\n+- `password_resets`: hashed reset tokens with expiry and foreign key to users\n+\n+App access pattern:\n+\n+- `worker/db.ts` defines shared `remix/data-table` table metadata and creates a\n+ D1-backed database runtime via `worker/d1-data-table-adapter.ts`\n+- Database row validation and API payload parsing use `remix/data-schema`\n+- app handlers and the mock Resend worker perform CRUD/query operations through\n+ `remix/data-table` (including `findOne`, `create`, `update`, `deleteMany`, and\n+ `count`)\n+\n+## KV (`OAUTH_KV`)\n+\n+OAuth provider state is stored in KV through the\n+`@cloudflare/workers-oauth-provider` integration.\n+\n+- Binding is configured in `wrangler.jsonc`\n+- This supports OAuth client and token flows without custom storage code in the\n+ app handlers\n+\n+## Durable Objects (`MCP_OBJECT`)\n+\n+MCP server runtime state is hosted via a Durable Object class (`MCP`) in\n+`mcp/index.ts`, exposed through the `/mcp` route.\n+\n+- The Worker forwards authorized MCP requests to `MCP.serve(...).fetch`\n+- Durable Objects provide a stateful execution model for MCP operations\n+\n+## Configuration reference\n+\n+Bindings are configured per environment in `wrangler.jsonc`:\n+\n+- `APP_DB` (D1)\n+- `OAUTH_KV` (KV)\n+- `MCP_OBJECT` (Durable Objects)\n+- `ASSETS` (static assets bucket)\ndiff --git a/docs/architecture/index.md b/docs/architecture/index.md\nnew file mode 100644\nindex 0000000..b533ed4\n--- /dev/null\n+++ b/docs/architecture/index.md\n@@ -0,0 +1,20 @@\n+# Architecture overview\n+\n+This folder documents the important runtime architecture for `epic-scheduler`.\n+\n+## Core docs\n+\n+- [Request Lifecycle](./request-lifecycle.md): how requests are routed in the\n+ Worker.\n+- [Authentication](./authentication.md): app session auth and OAuth-protected\n+ MCP auth.\n+- [Data Storage](./data-storage.md): what is stored in D1, KV, and Durable\n+ Objects.\n+\n+## Source of truth in code\n+\n+- Worker entrypoint: `worker/index.ts`\n+- Server request handler: `server/handler.ts`\n+- Router and HTTP route mapping: `server/router.ts` and `server/routes.ts`\n+- OAuth handlers: `worker/oauth-handlers.ts`\n+- MCP auth checks: `worker/mcp-auth.ts`\ndiff --git a/docs/architecture/request-lifecycle.md b/docs/architecture/request-lifecycle.md\nnew file mode 100644\nindex 0000000..10a57d8\n--- /dev/null\n+++ b/docs/architecture/request-lifecycle.md\n@@ -0,0 +1,62 @@\n+# Request lifecycle\n+\n+This document explains how an incoming request moves through the system.\n+\n+## Entry point\n+\n+All traffic enters the Worker at `worker/index.ts`.\n+\n+The `fetch` handler is wrapped by `OAuthProvider` from\n+`@cloudflare/workers-oauth-provider`, which means OAuth endpoints and token\n+infrastructure are available alongside normal app routes.\n+\n+## Routing order\n+\n+Requests are handled in this order:\n+\n+1. OAuth authorization endpoints:\n+ - `/oauth/authorize`\n+ - `/oauth/authorize-info`\n+ - `/oauth/callback`\n+2. Browser noise endpoint:\n+ - `/.well-known/appspecific/com.chrome.devtools.json` (returns 204)\n+3. OAuth protected resource metadata endpoint:\n+ - `/.well-known/oauth-protected-resource` (and the `/mcp` variant)\n+4. MCP endpoint:\n+ - `/mcp` (requires OAuth bearer token)\n+5. Static assets:\n+ - Served from `ASSETS` for `GET` and `HEAD` when available\n+6. App server routes:\n+ - Everything else is handled by `server/handler.ts`\n+\n+## App server flow\n+\n+`server/handler.ts` validates environment variables and configures session\n+cookie signing (`COOKIE_SECRET`) before creating the app router.\n+\n+`server/router.ts` maps route patterns from `server/routes.ts` to handler\n+modules (home, auth, account, session, logout, password reset, health).\n+\n+## Client-side navigation flow\n+\n+The browser app intercepts same-origin `<a>` clicks and same-origin form\n+submissions (`GET`/`POST`) and routes them in-place through the client router.\n+Normal app navigations no longer require a full document refresh.\n+\n+Full page navigations still occur for:\n+\n+- Explicit browser reloads/new tab loads\n+- Cross-origin links/forms\n+- Non-`_self` form targets (for example, `_blank`)\n+- Explicit code paths that intentionally call `window.location.assign(...)`\n+\n+## CORS behavior\n+\n+`worker/index.ts` wraps the handler with `withCors`:\n+\n+- CORS headers are only added when `Origin` exactly matches the request origin.\n+- Allowed methods are `GET, POST, OPTIONS`.\n+- Allowed headers include `content-type` and `authorization`.\n+\n+This keeps cross-origin behavior narrow while still allowing same-origin browser\n+and API requests.\ndiff --git a/docs/cloudflare-offerings.md b/docs/cloudflare-offerings.md\nnew file mode 100644\nindex 0000000..65c25c2\n--- /dev/null\n+++ b/docs/cloudflare-offerings.md\n@@ -0,0 +1,337 @@\n+# Cloudflare offerings (optional integrations)\n+\n+epic-scheduler ships with:\n+\n+- D1 (`APP_DB`) for relational storage\n+- KV (`OAUTH_KV`) for OAuth/session state (owned by\n+ `@cloudflare/workers-oauth-provider`)\n+- Durable Objects (`MCP_OBJECT`) for MCP server state\n+\n+This guide covers how to add common Cloudflare offerings on top of the starter:\n+\n+- R2 (object storage)\n+- Workers AI\n+- AI Gateway\n+- An additional KV namespace for app data (separate from `OAUTH_KV`)\n+\n+All examples assume you are using the template's `wrangler.jsonc` and that you\n+run commands from the repo root.\n+\n+## Authentication: `wrangler login` vs API tokens\n+\n+For local, interactive development:\n+\n+- Log in once with `npx wrangler login`\n+- Wrangler uses browser-based OAuth, and commands run as your user\n+\n+For CI / GitHub Actions / automation:\n+\n+- Create a Cloudflare API token and provide it as `CLOUDFLARE_API_TOKEN`\n+- Prefer least-privilege, account-scoped tokens (avoid \"All accounts\")\n+\n+### What token to make (permissions)\n+\n+Cloudflare's API token UI changes over time, but the shape is stable:\n+\n+- Token permissions are **Account** permissions (not Zone permissions)\n+- You grant **Read**/**Edit** per product area\n+- Wrangler deploys, creates resources, and sets secrets via the API token\n+\n+Recommended baseline permissions for this template (deploy + existing D1/KV):\n+\n+- `Workers Scripts:Edit` (deploy, update, delete preview Workers)\n+- `Workers KV Storage:Edit` (OAuth/session KV)\n+- `D1:Edit` (migrations, database operations)\n+\n+Add these permissions when you add the corresponding offering:\n+\n+- R2: `R2 Storage:Edit`\n+- Workers AI: `Workers AI:Read` (for `wrangler ai models`; deploy still uses\n+ Workers Scripts)\n+- AI Gateway (only if you want to manage gateways via API): `AI Gateway:Edit`\n+\n+If you use `npx wrangler secret put ...` in CI, your token must also be able to\n+edit Worker secrets (covered by `Workers Scripts:Edit`).\n+\n+## R2 (object storage)\n+\n+Use R2 for file uploads, user-generated media, and other blob/object storage.\n+\n+### Token permissions\n+\n+- `R2 Storage:Edit` (for creating/listing buckets via Wrangler)\n+\n+### Commands to create buckets\n+\n+Create separate buckets for production vs preview/testing:\n+\n+- `npx wrangler r2 bucket create <app-name>-uploads`\n+- `npx wrangler r2 bucket create <app-name>-uploads-preview`\n+- `npx wrangler r2 bucket list`\n+\n+Wrangler can also update `wrangler.jsonc` for you:\n+\n+- `npx wrangler r2 bucket create <app-name>-uploads --binding UPLOADS_BUCKET --env production --update-config`\n+- `npx wrangler r2 bucket create <app-name>-uploads-preview --binding UPLOADS_BUCKET --env preview --update-config`\n+\n+### Bind the bucket in `wrangler.jsonc`\n+\n+Add an `r2_buckets` binding in each environment you want to use it:\n+\n+- `env.production`: bind the production bucket\n+- `env.preview` / `env.test`: bind the preview bucket\n+\n+Example (production):\n+\n+```jsonc\n+\"r2_buckets\": [\n+ {\n+ \"binding\": \"UPLOADS_BUCKET\",\n+ \"bucket_name\": \"<app-name>-uploads\"\n+ }\n+],\n+```\n+\n+Example (preview/test):\n+\n+```jsonc\n+\"r2_buckets\": [\n+ {\n+ \"binding\": \"UPLOADS_BUCKET\",\n+ \"bucket_name\": \"<app-name>-uploads-preview\"\n+ }\n+],\n+```\n+\n+### Local dev notes\n+\n+`npm run dev` runs `wrangler dev --local`, so R2 is emulated locally. To hit\n+remote R2 from dev, run Wrangler with `--remote` (for example\n+`node ./wrangler-env.ts dev --remote`).\n+\n+## Workers AI\n+\n+Workers AI lets your Worker call Cloudflare-hosted AI models.\n+\n+### Token permissions\n+\n+- `Workers Scripts:Edit` (deploy)\n+- `Workers AI:Read` (optional; for `wrangler ai models`)\n+\n+### Commands to explore models\n+\n+- `npx wrangler ai models`\n+- `npx wrangler ai models --json`\n+\n+### Bind Workers AI in `wrangler.jsonc`\n+\n+Add the AI binding per environment:\n+\n+```jsonc\n+\"ai\": { \"binding\": \"AI\" }\n+```\n+\n+If you want the `Ai` helper client, install it:\n+\n+- `npm install @cloudflare/ai`\n+\n+In your Worker code, you typically construct a client like:\n+\n+```ts\n+import { Ai } from '@cloudflare/ai'\n+\n+const ai = new Ai(env.AI)\n+```\n+\n+## AI Gateway\n+\n+AI Gateway provides analytics, caching, retries, and controls for calling\n+third-party AI providers (for example OpenAI or Anthropic) from your Worker.\n+\n+### Token permissions\n+\n+If you create/configure gateways via the dashboard, you do not need any extra\n+token permissions beyond what you already use to deploy Workers.\n+\n+If you want to manage gateways via API automation, add:\n+\n+- `AI Gateway:Edit`\n+\n+### Create a gateway\n+\n+There is no `wrangler` subcommand for AI Gateway in Wrangler v4. Create the\n+gateway in the Cloudflare dashboard:\n+\n+1. Cloudflare dashboard -> `AI` -> `AI Gateway`\n+2. Create a gateway and copy:\n+ - your `account_id`\n+ - the `gateway_id` you chose/received\n+\n+### Commands to verify the gateway works\n+\n+AI Gateway uses provider-specific upstream paths. For OpenAI-compatible traffic,\n+the URL looks like:\n+\n+`https://gateway.ai.cloudflare.com/v1/<account_id>/<gateway_id>/openai`\n+\n+You can do a quick smoke test with curl (example uses `OPENAI_API_KEY`):\n+\n+- `curl -sS \"https://gateway.ai.cloudflare.com/v1/<account_id>/<gateway_id>/openai/v1/models\" -H \"Authorization: Bearer $OPENAI_API_KEY\" | head`\n+\n+### Using AI Gateway in app code\n+\n+Most provider SDKs support overriding the base URL:\n+\n+- Keep the provider API key as a Worker secret (for example `OPENAI_API_KEY`)\n+- Point the SDK's base URL at the gateway URL\n+\n+## KV (app KV, separate from `OAUTH_KV`)\n+\n+This template already binds `OAUTH_KV` for OAuth/session state. Treat `OAUTH_KV`\n+as \"owned\" by `@cloudflare/workers-oauth-provider`:\n+\n+- Avoid mixing app data into `OAUTH_KV`\n+- Avoid key prefix collisions with the OAuth library\n+- Keep quotas/evictions isolated from auth state\n+\n+### Token permissions\n+\n+- `Workers KV Storage:Edit`\n+\n+### Commands to create a second namespace\n+\n+Create a dedicated namespace for app data, for example `APP_KV`:\n+\n+- `npx wrangler kv namespace create <app-name>-app --binding APP_KV --env production --update-config`\n+- `npx wrangler kv namespace create <app-name>-app-preview --binding APP_KV --env production --preview --update-config`\n+\n+If you are not using `--update-config`, record the namespace IDs and add them to\n+`wrangler.jsonc` manually (see next section).\n+\n+### Bind the namespace in `wrangler.jsonc`\n+\n+Add a second entry in `kv_namespaces` alongside `OAUTH_KV`:\n+\n+```jsonc\n+\"kv_namespaces\": [\n+ {\n+ \"binding\": \"OAUTH_KV\",\n+ \"id\": \"<oauth-kv-id>\",\n+ \"preview_id\": \"<oauth-kv-preview-id>\"\n+ },\n+ {\n+ \"binding\": \"APP_KV\",\n+ \"id\": \"<app-kv-id>\",\n+ \"preview_id\": \"<app-kv-preview-id>\"\n+ }\n+],\n+```\n+\n+## If you want a higher-level AI integration\n+\n+If you're looking for a higher-level way to integrate AI (streaming responses,\n+tool/function calling, typed outputs, and a clean client/server contract),\n+consider TanStack AI.\n+\n+This starter is not a React app, so the main thing to know is: TanStack AI is\n+framework-agnostic at its core. You can use:\n+\n+- `@tanstack/ai` on the server (Workers) to run models and tools\n+- `@tanstack/ai-client` in any UI (headless) to manage chat state + streaming\n+\n+You only need the React/Solid packages if your UI framework benefits from their\n+hooks.\n+\n+### Cloudflare integration: `@cloudflare/tanstack-ai`\n+\n+Cloudflare maintains an official integration package that makes TanStack AI work\n+well with both:\n+\n+- Workers AI (`env.AI` binding)\n+- AI Gateway (`env.AI.gateway(\"<gateway-id>\")`)\n+\n+It includes ready-to-use adapters for chat, image generation, transcription,\n+text-to-speech, and summarization for Workers AI models, plus AI Gateway routing\n+for OpenAI/Anthropic/Gemini/Grok/OpenRouter. See:\n+\n+- https://github.com/cloudflare/ai/tree/main/packages/tanstack-ai\n+\n+#### Install (Bun)\n+\n+- `npm install @tanstack/ai @tanstack/ai-client @cloudflare/tanstack-ai`\n+\n+If you want to route to third-party providers through AI Gateway, also install\n+the TanStack provider packages you use (for example OpenAI or Anthropic):\n+\n+- `npm install @tanstack/ai-openai`\n+- `npm install @tanstack/ai-anthropic`\n+\n+#### Bindings (`wrangler.jsonc`)\n+\n+Add the Workers AI binding in each environment you want:\n+\n+```jsonc\n+\"ai\": { \"binding\": \"AI\" }\n+```\n+\n+Then your Worker receives `env.AI` at runtime.\n+\n+#### Server-first usage (no React required)\n+\n+TanStack AI supports multiple streaming formats. A common pattern is:\n+\n+1. A Worker endpoint accepts `{ messages, conversationId? }` as JSON\n+2. Server runs `chat(...)` and returns a streaming `Response`\n+3. Your UI uses `@tanstack/ai-client` with either:\n+ - `fetchHttpStream(\"/api/chat\")` (newline-delimited JSON), or\n+ - `fetchServerSentEvents(\"/api/chat\")` (SSE)\n+\n+Workers AI example (direct binding, no third-party API keys):\n+\n+```ts\n+import { createWorkersAiChat } from '@cloudflare/tanstack-ai'\n+import { chat, toHttpResponse } from '@tanstack/ai'\n+\n+const adapter = createWorkersAiChat('@cf/meta/llama-4-scout-17b-16e-instruct', {\n+\tbinding: env.AI,\n+})\n+\n+const stream = chat({\n+\tadapter,\n+\tstream: true,\n+\tmessages,\n+\tconversationId,\n+})\n+\n+return toHttpResponse(stream)\n+```\n+\n+AI Gateway example (route OpenAI requests through your gateway):\n+\n+```ts\n+import { createOpenAiChat } from '@cloudflare/tanstack-ai'\n+import { chat, toHttpResponse } from '@tanstack/ai'\n+\n+const adapter = createOpenAiChat('gpt-4o', {\n+\tbinding: env.AI.gateway('my-gateway-id'),\n+\t// Depending on your gateway mode, you may not need to pass an API key here.\n+\t// apiKey: env.OPENAI_API_KEY,\n+})\n+\n+const stream = chat({ adapter, stream: true, messages, conversationId })\n+return toHttpResponse(stream)\n+```\n+\n+Client usage (headless, works with any UI toolkit) looks like:\n+\n+```ts\n+import { ChatClient, fetchHttpStream } from '@tanstack/ai-client'\n+\n+const client = new ChatClient({\n+\tconnection: fetchHttpStream('/api/chat'),\n+\tonMessagesChange: (next) => {\n+\t\t// Render however your app renders (not tied to React)\n+\t\tconsole.log(next)\n+\t},\n+})\n+```\ndiff --git a/docs/environment-variables.md b/docs/environment-variables.md\nnew file mode 100644\nindex 0000000..8149094\n--- /dev/null\n+++ b/docs/environment-variables.md\n@@ -0,0 +1,51 @@\n+# Environment variables\n+\n+Use this guide when you add a new environment variable to the starter. It keeps\n+types, runtime validation, and documentation in sync.\n+\n+## Steps\n+\n+1. **Add the type**\n+ - Update `types/env.d.ts` so `Env` includes the new variable.\n+\n+2. **Validate at runtime**\n+ - Add the variable to the Zod schema in `types/env-schema.ts`.\n+ - `server/env.ts` uses the schema to fail fast at runtime.\n+ - The schema is the single source of truth for validation + types.\n+\n+ Example:\n+\n+ ```ts\n+ const EnvSchema = z.object({\n+ \tCOOKIE_SECRET: z\n+ \t\t.string()\n+ \t\t.min(\n+ \t\t\t32,\n+ \t\t\t'COOKIE_SECRET must be at least 32 characters for session signing.',\n+ \t\t),\n+ \tTHIRD_PARTY_API_KEY: z\n+ \t\t.string()\n+ \t\t.min(\n+ \t\t\t1,\n+ \t\t\t'Missing THIRD_PARTY_API_KEY. Go to https://example.com/ to get one.',\n+ \t\t),\n+ })\n+ ```\n+\n+3. **Add local defaults**\n+ - Update `.env.example` (source for new local `.env` files).\n+\n+4. **Update required resources docs**\n+ - Add the variable to `docs/setup-manifest.md`.\n+\n+5. **Sync deploy secrets**\n+ - Add the variable to the relevant GitHub Actions workflows so it is pushed\n+ via `wrangler secret put`:\n+ - `.github/workflows/deploy.yml` (production deploys)\n+ - `.github/workflows/preview.yml` (preview deploys)\n+\n+## Why Zod?\n+\n+Zod gives type inference for `Env`-driven values and a single runtime gate that\n+fails fast with clear errors. It keeps the “what’s required” definition in one\n+place.\ndiff --git a/docs/getting-started.md b/docs/getting-started.md\nnew file mode 100644\nindex 0000000..262012c\n--- /dev/null\n+++ b/docs/getting-started.md\n@@ -0,0 +1,157 @@\n+# epic-scheduler Template Setup\n+\n+\n+\n+Use these steps to generate a new project from this template and run it on\n+Cloudflare Workers.\n+\n+## Create the project with degit\n+\n+```\n+npx degit epicweb-dev/epicflare my-epic-scheduler-app\n+cd my-epic-scheduler-app\n+```\n+\n+## Install dependencies\n+\n+Use npm for scripts and installs.\n+\n+```\n+npm install\n+```\n+\n+## Expectations and assumptions\n+\n+The setup flow assumes:\n+\n+- Node.js v24+ and npm are installed.\n+- You run commands from the repo root (needs `wrangler.jsonc` and\n+ `package.json`).\n+- You can write to files in the repository (the script updates config files and\n+ replaces template `epic-scheduler` tokens across text files).\n+- Wrangler is optional for post-download setup. It is only needed when you\n+ choose to create Cloudflare resources directly from the script.\n+\n+See `docs/setup-manifest.md` for required resources and secrets.\n+\n+For optional Cloudflare offerings (R2, Workers AI, AI Gateway, extra KV), see\n+`docs/cloudflare-offerings.md`.\n+\n+## Preflight checks\n+\n+Run a quick validation of your environment and Wrangler login status:\n+\n+```\n+node ./docs/post-download.ts --check\n+```\n+\n+## Quick Start (local only)\n+\n+1. Run the guided setup script:\n+\n+```\n+node ./docs/post-download.ts --guided\n+```\n+\n+2. Start local development:\n+\n+```\n+npm run dev\n+```\n+\n+## Full Cloudflare setup (deploy)\n+\n+1. Run the guided setup script:\n+\n+```\n+node ./docs/post-download.ts --guided\n+```\n+\n+This setup step does not create Cloudflare resources or rewrite `wrangler.jsonc`\n+resource IDs. The production deploy workflow creates missing D1/KV resources\n+automatically on first CI deploy. Cloudflare deploys do not auto-create those\n+resources from bindings alone, so the workflow runs an explicit ensure step\n+before migrations/deploy.\n+\n+2. Configure GitHub Actions secrets for deploy:\n+\n+- `CLOUDFLARE_API_TOKEN` (Workers deploy + D1 edit access on the correct\n+ account)\n+- `COOKIE_SECRET` (generate with `openssl rand -hex 32` or similar)\n+- See `docs/setup-manifest.md` (`GitHub Actions secrets`) for full optional\n+ secrets and where to get each value.\n+\n+3. Deploy:\n+\n+```\n+npm run deploy\n+```\n+\n+## Agent/CI setup\n+\n+Use non-interactive flags or `--defaults`. The `--defaults` flag skips prompts\n+and uses defaults based on the current directory name (app/package naming), plus\n+a generated cookie secret.\n+\n+```\n+node ./docs/post-download.ts --defaults\n+```\n+\n+To preview changes without writing, add `--dry-run`. To emit a JSON summary, add\n+`--json`. To run preflight checks only, add `--check`.\n+\n+When running in a non-TTY shell, the script fails fast if required prompt values\n+are missing (for example `--app-name` without `--defaults`, and init choice when\n+`--guided` is set without `--init` or `--no-init`).\n+\n+### Script flags\n+\n+- `--guided`: interactive, state-aware flow (optional git init/first commit\n+ prompt).\n+- `--init` / `--no-init`: force or skip git init + initial `init` commit.\n+- `--check`: run preflight checks only.\n+- `--defaults`: accept defaults without prompts.\n+- `--dry-run`: show changes without writing or deleting the script.\n+- `--json`: print a JSON summary.\n+- `--app-name`: app name used for branding token replacement.\n+- `--package-name`: override package name (defaults to kebab-cased app name).\n+- `--github-username`: derives repository URL as\n+ `git+ssh://git@github.com/<username>/<package-name>.git`.\n+- `--repository-url`: explicit repository URL override.\n+- `--cookie-secret`: explicit `COOKIE_SECRET` value (otherwise generated).\n+\n+Cloudflare resources are managed during deploy. The setup script does not create\n+Cloudflare resources or rewrite `wrangler.jsonc` resource IDs.\n+\n+## Local development\n+\n+See `docs/agents/setup.md` for local dev commands and verification steps.\n+\n+To create a deterministic test login in a running environment:\n+\n+```bash\n+npm run migrate:local\n+node ./tools/seed-test-data.ts --local\n+```\n+\n+Default test credentials:\n+\n+- Email: `kody@kcd.dev`\n+- Password: `kodylovesyou`\n+\n+## Build and deploy\n+\n+Build the project:\n+\n+```\n+npm run build\n+```\n+\n+Deploy to Cloudflare:\n+\n+```\n+npm run deploy\n+```\ndiff --git a/docs/mcp-server-patterns.md b/docs/mcp-server-patterns.md\nnew file mode 100644\nindex 0000000..8007bc1\n--- /dev/null\n+++ b/docs/mcp-server-patterns.md\n@@ -0,0 +1,458 @@\n+# MCP Server Patterns\n+\n+_Patterns learned from analyzing high-quality MCP server implementations_\n+\n+This document summarizes patterns learned from analyzing the following MCP\n+server implementations:\n+\n+- [Linear MCP Server](https://github.com/iceener/linear-streamable-mcp-server)\n+- [Google Calendar MCP Server](https://github.com/iceener/google-calendar-streamable-mcp-server)\n+- [Google Maps MCP Server](https://github.com/iceener/maps-streamable-mcp-server)\n+- [Tesla MCP Server](https://github.com/iceener/tesla-streamable-mcp-server)\n+\n+---\n+\n+## 1. Server Instructions\n+\n+### What Great Servers Do\n+\n+Provide comprehensive server-level instructions that act as an \"onboarding\n+guide\" for the AI. This is the first thing the AI reads when connecting.\n+\n+**Avoid duplication:** Server instructions should not repeat tool descriptions\n+or tool argument docs. Keep tool-specific behavior and defaults in the tool\n+description + schemas, and keep server instructions focused on workflows and\n+cross-tool conventions.\n+\n+**Suggested format:**\n+\n+```\n+Quick start\n+- What to call first\n+- Most common workflows\n+- How to chain tools\n+\n+Default behavior\n+- What happens when optional params are omitted\n+- Timezone handling\n+- Date format expectations\n+\n+How to chain tools safely\n+- Which IDs come from which tools\n+- Dependency order\n+- Verification patterns\n+\n+Common patterns & examples\n+- \"To do X, first call Y, then Z\"\n+```\n+\n+**Example from Linear:**\n+\n+```\n+Quick start\n+- Call 'workspace_metadata' first to fetch canonical identifiers you will reuse across tools.\n+- Then use 'list_issues' with teamId/projectId and filters to locate targets.\n+- To modify, use 'update_issues', then verify with 'list_issues'.\n+```\n+\n+**Example in this repo:** Server-level instructions are intentionally short and\n+avoid repeating tool-level docs. Tool-specific behavior/defaults live with the\n+tool description + schemas.\n+\n+---\n+\n+## 2. Tool Descriptions\n+\n+### What Great Servers Do\n+\n+Tools have _structured descriptions_ that **complement** the schemas\n+(`inputSchema` and `outputSchema`) rather than duplicating them.\n+\n+Include:\n+\n+1. **What the tool does** (1-2 sentences)\n+2. **Behavior & gotchas** - semantics that aren't obvious from types alone\n+ (cross-field rules, default meaning, side effects)\n+3. **Outputs & return semantics** - what the structured result means and how to\n+ use it (the _shape_ lives in `outputSchema`)\n+4. **Errors & recovery** - common failure modes and what to do next\n+5. **Examples** - concrete, copy/pasteable payloads\n+\n+**Avoid duplication:**\n+\n+- Do not re-list every input parameter (name/type/required/default) if the\n+ `inputSchema` already documents it (see section 4).\n+- Do not re-list the full output object shape if an `outputSchema` exists (see\n+ section 4).\n+- Mention inputs only when they are necessary to explain behavior or cross-field\n+ semantics.\n+- Avoid boilerplate that only points to schemas (for example \"Input details: see\n+ input schema\"). The schemas should stand on their own.\n+- Avoid protocol field names (for example `content` or `structuredContent`) in\n+ tool descriptions. Describe behavior and meaning conceptually; let schemas and\n+ examples carry the structure.\n+\n+**Suggested format:**\n+\n+```\n+Brief description of what the tool does.\n+\n+Behavior:\n+- Important semantic rule...\n+- Cross-field constraint...\n+\n+Examples:\n+- \"Do X\" → { ... }\n+- \"Do Y\" → { ... }\n+\n+Next:\n+- Use tool_a to verify. Pass id to tool_b.\n+```\n+\n+**Example from Google Calendar (trimmed to the non-obvious behavior):**\n+\n+```\n+Search events across ALL calendars by default. Returns merged results sorted by start time.\n+\n+FILTERING BY TIME (important!):\n+- Today's events: timeMin=start of day, timeMax=end of day\n+- This week: timeMin=Monday 00:00, timeMax=Sunday 23:59:59\n+\n+Next: Use eventId AND calendarId with 'update_event' or 'delete_event'.\n+```\n+\n+**Example in this repo:** Tool descriptions focus on semantics/examples and next\n+steps, while argument docs live in `inputSchema` and structured output docs live\n+in `outputSchema`.\n+\n+---\n+\n+## 3. Tool Annotations\n+\n+### What Great Servers Do\n+\n+Every tool includes annotations that help the AI understand the tool's behavior:\n+\n+```typescript\n+annotations: {\n+ readOnlyHint: true, // Does not modify state\n+ destructiveHint: false, // Does not delete data\n+ idempotentHint: true, // Safe to call multiple times\n+ openWorldHint: true, // May access external resources\n+}\n+```\n+\n+**Guidelines:**\n+\n+| Annotation | When to use `true` |\n+| ----------------- | --------------------------------------- |\n+| `readOnlyHint` | GET/LIST operations |\n+| `destructiveHint` | DELETE operations, irreversible changes |\n+| `idempotentHint` | Same input always produces same result |\n+| `openWorldHint` | Accesses external APIs/resources |\n+\n+**Example in this repo:** All tools now provide annotations via the\n+`server.registerTool()` config.\n+\n+---\n+\n+## 4. Schema Patterns (Input & Output)\n+\n+### What Great Servers Do\n+\n+Rich, descriptive schemas with:\n+\n+- **Clear descriptions** for each field\n+- **Default values** explained (where defaults exist)\n+- **Valid values** listed (especially for enums)\n+- **Format expectations** (dates, IDs, etc.)\n+\n+Use:\n+\n+- `inputSchema` to document tool arguments (types, defaults, constraints).\n+- `outputSchema` to document the shape of `structuredContent` on success. If an\n+ `outputSchema` is provided, the SDK validates that `structuredContent` exists\n+ and matches the schema for non-error tool results.\n+\n+**Example (input schema):**\n+\n+```typescript\n+z.object({\n+\tcalendarId: z\n+\t\t.union([z.literal('all'), z.string(), z.array(z.string())])\n+\t\t.optional()\n+\t\t.default('all')\n+\t\t.describe(\n+\t\t\t'Calendar ID(s). Use \"all\" (default) to search all calendars, a single ID, or array of IDs',\n+\t\t),\n+\n+\ttimeMin: z\n+\t\t.string()\n+\t\t.optional()\n+\t\t.describe(\n+\t\t\t'Start of time range (RFC3339 with timezone, e.g., 2025-12-06T19:00:00Z)',\n+\t\t),\n+\n+\tmaxResults: z\n+\t\t.number()\n+\t\t.int()\n+\t\t.min(1)\n+\t\t.max(250)\n+\t\t.optional()\n+\t\t.default(50)\n+\t\t.describe('Max events to return (1-250, default: 50)'),\n+})\n+```\n+\n+**Example (output schema):**\n+\n+```typescript\n+outputSchema: {\n+\texpression: z.string().describe('Expression string, e.g. \"8 + 4\"'),\n+\tresult: z.number().finite().describe('Exact numeric result (not rounded)'),\n+\tprecisionUsed: z.number().int().min(0).max(15),\n+}\n+```\n+\n+**Example in this repo:** Tool schemas describe defaults, valid values, and\n+format expectations (where applicable), and tools provide `outputSchema` for the\n+shape of `structuredContent` on success.\n+\n+---\n+\n+## 5. Response Formatting\n+\n+### What Great Servers Do\n+\n+Return **both** human-readable text AND structured content:\n+\n+```typescript\n+return {\n+\tcontent: [\n+\t\t{\n+\t\t\ttype: 'text',\n+\t\t\ttext: `✓ Event created: [${title}](${htmlLink})\\n when: ${start}\\n meet: ${meetLink}`,\n+\t\t},\n+\t],\n+\tstructuredContent: {\n+\t\tid: event.id,\n+\t\tsummary: event.summary,\n+\t\t// ... full structured data\n+\t},\n+}\n+```\n+\n+**Human-readable text patterns:**\n+\n+- Use **markdown** formatting (links, bold, lists)\n+- Use **emojis** for status (✓, ⚠️, 🟢, 🔴)\n+- Include **context** (what calendar, which feed)\n+- Provide **next steps** in the text\n+\n+**Example from Tesla:**\n+\n+```\n+## Model 3\n+\n+**Status**: asleep\n+**Locked**: Yes ✓\n+**Sentry Mode**: On\n+\n+### Battery\n+- Level: 78%\n+- Range: 312 km\n+- Charging: Not charging\n+\n+### ⚠️ Open\n+- Trunk\n+```\n+\n+**Example in this repo:** Tools now return human-readable markdown in `content`\n+and machine-friendly data in `structuredContent`. Tool descriptions should not\n+mention these protocol field names.\n+\n+---\n+\n+## 6. Tool Modules (One Tool Per File)\n+\n+### What Great Servers Do\n+\n+Prefer **one tool per file**, with the tool's description, annotations, schemas,\n+and handler colocated. Keep a small `register-tools` module that imports each\n+tool module and registers them.\n+\n+```typescript\n+// mcp/tools/do-math.ts\n+export async function registerDoMathTool(agent: MCP) {\n+\tagent.server.registerTool(\n+\t\t'do_math',\n+\t\t{\n+\t\t\t/* metadata + schemas */\n+\t\t},\n+\t\tasync (args) => {\n+\t\t\t// handler\n+\t\t},\n+\t)\n+}\n+\n+// mcp/register-tools.ts\n+import { registerDoMathTool } from './tools/do-math.ts'\n+export async function registerTools(agent: MCP) {\n+\tawait registerDoMathTool(agent)\n+}\n+```\n+\n+**Benefits:**\n+\n+- Smaller diffs and less merge conflict\n+- Tool docs/schemas/handler stay in sync\n+- Easier to add/remove tools without touching unrelated tools\n+\n+**Example in this repo:** Server instructions live in `mcp/index.ts`, and tool\n+metadata is colocated with tool registration + schemas in `mcp/tools/do-math.ts`\n+(with `mcp/register-tools.ts` as the small aggregator).\n+\n+---\n+\n+## 7. Tool Naming Conventions\n+\n+### What Great Servers Do\n+\n+| Pattern | Example | Use Case |\n+| ---------- | -------------------------- | --------------------- |\n+| `list_*` | `list_feeds`, `list_users` | Get multiple items |\n+| `get_*` | `get_feed`, `get_issue` | Get single item by ID |\n+| `create_*` | `create_feed` | Create new item |\n+| `update_*` | `update_feed` | Modify existing item |\n+| `delete_*` | `delete_feed` | Remove item |\n+| `browse_*` | `browse_media` | Navigate/explore |\n+| `search_*` | `search_events` | Query with filters |\n+\n+**Consistency rules:**\n+\n+- Use `snake_case` for tool names\n+- Group related tools with common prefix\n+- Use singular nouns for get/create, plural for list\n+\n+**Example in this repo:** Tool names use `snake_case`.\n+\n+---\n+\n+## 8. Error Handling\n+\n+### What Great Servers Do\n+\n+Provide helpful, actionable error messages:\n+\n+```typescript\n+if (!feed) {\n+\treturn {\n+\t\tcontent: [\n+\t\t\t{\n+\t\t\t\ttype: 'text',\n+\t\t\t\ttext: `Feed \"${feedId}\" not found.\\n\\nNext: Use list_feeds to see available feeds.`,\n+\t\t\t},\n+\t\t],\n+\t\tisError: true,\n+\t}\n+}\n+```\n+\n+**Patterns:**\n+\n+- Explain **what went wrong**\n+- Suggest **how to fix it**\n+- Reference **related tools** that can help\n+- Include **valid values** when applicable\n+\n+**Example in this repo:** Tool error responses now include actionable next steps\n+(including which tool to call next).\n+\n+---\n+\n+## 9. Pagination & Limiting\n+\n+### What Great Servers Do\n+\n+Consistent pagination patterns:\n+\n+```typescript\n+return {\n+ content: [...],\n+ structuredContent: {\n+ items: [...],\n+ pagination: {\n+ hasMore: boolean,\n+ nextCursor: string | undefined,\n+ itemsReturned: number,\n+ limit: number,\n+ },\n+ },\n+}\n+```\n+\n+**In schemas + descriptions:**\n+\n+```\n+Put the output shape in `outputSchema` (for `structuredContent`), and describe\n+the chaining semantics in the tool description:\n+\n+Next:\n+- Pass `pagination.nextCursor` to fetch the next page.\n+```\n+\n+**Example in this repo:** The example tool does not paginate, but this pattern\n+is recommended for future list-style tools.\n+\n+---\n+\n+## 10. Resource Patterns\n+\n+### What Great Servers Do\n+\n+Resources provide **read-only data access** with:\n+\n+- Clear URI schemes (`media://feeds`, `media://feeds/{id}`)\n+- Proper MIME types\n+- Descriptions that explain the data structure\n+\n+**Good resource examples:**\n+\n+- `media://server` — Server info and statistics\n+- `media://feeds` — All feeds list\n+- `media://feeds/{id}` — Individual feed details\n+- `media://directories` — Available media directories\n+\n+**Example in this repo:** Resources are not currently registered, but this\n+pattern is recommended for exposing read-only docs and server metadata.\n+\n+---\n+\n+## 11. Prompt Patterns\n+\n+### What Great Servers Do\n+\n+Prompts are **task-oriented conversation starters**:\n+\n+- Guide the user through **multi-step workflows**\n+- Provide **context** about available tools\n+- Include **concrete next steps**\n+- Support **optional parameters** to customize the task\n+\n+**Example prompt:**\n+\n+```\n+I want to create a new feed. Please help me decide:\n+\n+1. Should this be a directory feed (automatically includes all media from a folder)?\n+2. Or a curated feed (manually select specific content)?\n+\n+Available media roots:\n+- audio: /media/audio\n+- video: /media/video\n+\n+Please ask me some questions to understand what I'm trying to create, then help me set it up.\n+```\n+\n+**Example in this repo:** Prompts are not currently registered, but this pattern\n+is recommended for guiding multi-step workflows.\ndiff --git a/docs/setup-manifest.md b/docs/setup-manifest.md\nnew file mode 100644\nindex 0000000..1eb9f9a\n--- /dev/null\n+++ b/docs/setup-manifest.md\n@@ -0,0 +1,92 @@\n+# Setup manifest\n+\n+This document describes the infrastructure and secrets that epic-scheduler expects.\n+\n+## Cloudflare resources\n+\n+This project uses the following resources:\n+\n+- D1 database\n+ - `database_name`: `<app-name>`\n+- KV namespace for OAuth/session storage\n+ - `binding`: `OAUTH_KV`\n+ - `title`: `<app-name>-oauth`\n+\n+Production CI deploys now ensure these resources exist and create them when\n+missing. The post-download script does not create Cloudflare resources and does\n+not rewrite `wrangler.jsonc` resource IDs. Cloudflare deploys do not auto-create\n+these resources from bindings alone, so the deploy workflow runs\n+`node ./tools/ci/production-resources.ts ensure` first.\n+\n+## Optional Cloudflare offerings\n+\n+The starter intentionally keeps the default footprint small. If you want to add\n+additional Cloudflare offerings (R2, Workers AI, AI Gateway, or a separate KV\n+namespace for app data), see:\n+\n+- `docs/cloudflare-offerings.md`\n+\n+## Rate limiting (Cloudflare dashboard)\n+\n+Use Cloudflare's built-in rate limiting rules instead of custom Worker logic.\n+\n+1. Open the Cloudflare dashboard for the zone that routes to your Worker.\n+2. Go to `Security` → `WAF` → `Rate limiting rules` (or `Rules` →\n+ `Rate limiting rules`).\n+3. Create a rule that targets auth endpoints, for example:\n+ - Expression:\n+ `(http.request.method eq \"POST\" and http.request.uri.path in {\"/auth\" \"/oauth/authorize\" \"/oauth/token\" \"/oauth/register\"})`\n+ - Threshold: `10` requests per `1 minute` per IP (tune as needed).\n+ - Action: `Block` or `Managed Challenge`.\n+\n+## Environment variables\n+\n+Local development uses `.env`, which Wrangler loads automatically:\n+\n+- `COOKIE_SECRET` (generate with `openssl rand -hex 32`)\n+- `APP_BASE_URL` (optional; defaults to request origin, example\n+ `https://app.example.com`)\n+- `APP_COMMIT_SHA` (optional; set automatically by deploy workflows for\n+ version-aware `/health` checks)\n+- `RESEND_API_BASE_URL` (optional, defaults to `https://api.resend.com`)\n+- `RESEND_API_KEY` (optional, required to send via Resend)\n+- `RESEND_FROM_EMAIL` (optional, required to send via Resend)\n+\n+Tests run with `CLOUDFLARE_ENV=test` (set by Playwright) and still read local\n+secrets from `.env`.\n+\n+## GitHub Actions secrets\n+\n+Configure these secrets for GitHub Actions workflows:\n+\n+- `CLOUDFLARE_API_TOKEN` (Workers deploy + D1 edit access on the correct\n+ account)\n+- `COOKIE_SECRET` (same format as local)\n+- `APP_BASE_URL` (optional, used by the production deploy)\n+- `RESEND_API_KEY` (optional, required to send via Resend in non-mock\n+ environments)\n+- `RESEND_FROM_EMAIL` (optional, required to send via Resend)\n+\n+How to get/set each secret:\n+\n+- `CLOUDFLARE_API_TOKEN`\n+ - In Cloudflare Dashboard, create an API Token with permissions to deploy\n+ Workers and edit D1 on the target account.\n+ - In GitHub: `Settings` → `Secrets and variables` → `Actions` →\n+ `New repository secret`.\n+- `COOKIE_SECRET`\n+ - Generate locally: `openssl rand -hex 32`\n+ - Store the exact value as a repository secret in GitHub Actions.\n+- `APP_BASE_URL` (optional)\n+ - Use your production app URL (for example `https://app.example.com`).\n+ - Add only if you want deploy-time health/version checks to use a fixed URL.\n+- `RESEND_API_KEY` (optional)\n+ - Create in Resend Dashboard (API keys), then store in GitHub Actions secrets.\n+- `RESEND_FROM_EMAIL` (optional)\n+ - Use your verified sender/from address in Resend (for example\n+ `noreply@example.com`), then store it as a secret.\n+\n+Preview deploys for pull requests create a separate Worker per PR named\n+`<app-name>-pr-<number>` (for epic-scheduler: `epic-scheduler-pr-123`) plus one Worker per\n+mock service named `<app-name>-pr-<number>-mock-<service>`. The same\n+`CLOUDFLARE_API_TOKEN` must be able to create/update and delete those Workers.\ndiff --git a/e2e/account.spec.ts b/e2e/account.spec.ts\nnew file mode 100644\nindex 0000000..a650c85\n--- /dev/null\n+++ b/e2e/account.spec.ts\n@@ -0,0 +1,67 @@\n+import { expect, test, type APIRequestContext } from '@playwright/test'\n+\n+const testUser = { email: 'user@example.com', password: 'password123' }\n+\n+async function ensureUserExists(request: APIRequestContext) {\n+\tconst response = await request.post('/auth', {\n+\t\tdata: { ...testUser, mode: 'signup' },\n+\t\theaders: { 'Content-Type': 'application/json' },\n+\t})\n+\tif (response.ok() || response.status() === 409) {\n+\t\treturn\n+\t}\n+\tthrow new Error(`Failed to seed user (${response.status()}).`)\n+}\n+\n+test.beforeEach(async ({ page }) => {\n+\tawait ensureUserExists(page.request)\n+\tawait page.context().clearCookies()\n+})\n+\n+test('redirects unauthenticated account to login with redirectTo', async ({\n+\tpage,\n+}) => {\n+\tawait page.goto('/account')\n+\tawait expect(page).toHaveURL(/\\/login\\?redirectTo=%2Faccount$/)\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: 'Welcome back' }),\n+\t).toBeVisible()\n+})\n+\n+test('redirects authenticated user from login to account', async ({ page }) => {\n+\tawait page.goto('/login')\n+\tawait page.getByLabel('Email').fill(testUser.email)\n+\tawait page.getByLabel('Password').fill(testUser.password)\n+\tawait page.getByRole('button', { name: 'Sign in' }).click()\n+\n+\tawait expect(page).toHaveURL(/\\/account$/)\n+\n+\tawait page.goto('/login')\n+\tawait expect(page).toHaveURL(/\\/account$/)\n+})\n+\n+test('logs out from the account page', async ({ page }) => {\n+\tawait page.goto('/login')\n+\tawait page.getByLabel('Email').fill(testUser.email)\n+\tawait page.getByLabel('Password').fill(testUser.password)\n+\tawait page.getByRole('button', { name: 'Sign in' }).click()\n+\n+\tawait expect(page).toHaveURL(/\\/account$/)\n+\tconst marker = await page.evaluate(() => {\n+\t\tconst value = `form-spa-${Math.random().toString(16).slice(2)}`\n+\t\t;(window as { __formSpaMarker?: string }).__formSpaMarker = value\n+\t\treturn value\n+\t})\n+\tawait page.getByRole('button', { name: 'Log out' }).click()\n+\n+\tawait expect(page).toHaveURL(/\\/login$/)\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: 'Welcome back' }),\n+\t).toBeVisible()\n+\tawait expect(page.getByRole('link', { name: 'Login' })).toBeVisible()\n+\tawait expect(page.getByRole('button', { name: 'Log out' })).toHaveCount(0)\n+\tconst markerAfterLogout = await page.evaluate(\n+\t\t() => (window as { __formSpaMarker?: string }).__formSpaMarker ?? null,\n+\t)\n+\texpect(markerAfterLogout).toBe(marker)\n+})\ndiff --git a/e2e/calculator-widget.spec.ts b/e2e/calculator-widget.spec.ts\nnew file mode 100644\nindex 0000000..9530d53\n--- /dev/null\n+++ b/e2e/calculator-widget.spec.ts\n@@ -0,0 +1,62 @@\n+import { expect, test } from '@playwright/test'\n+\n+test('calculator widget buttons respond in default iframe', async ({\n+\tpage,\n+}) => {\n+\tawait page.goto('/dev/calculator-widget-test')\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: 'Calculator Widget Test' }),\n+\t).toBeVisible()\n+\n+\tconst iframe = page.frameLocator('#calc-default')\n+\tawait expect(\n+\t\tiframe.getByRole('heading', { name: 'Calculator' }),\n+\t).toBeVisible()\n+\n+\tconst resultEl = iframe.locator('[data-result]')\n+\tawait expect(resultEl).toHaveText('0')\n+\n+\tawait iframe.getByRole('button', { name: '7' }).click()\n+\tawait iframe.getByRole('button', { name: '+' }).click()\n+\tawait iframe.getByRole('button', { name: '3' }).click()\n+\tawait iframe.getByRole('button', { name: '=' }).click()\n+\tawait expect(resultEl).toHaveText('10')\n+})\n+\n+test('calculator widget buttons respond in sandboxed iframe', async ({\n+\tpage,\n+}) => {\n+\tawait page.goto('/dev/calculator-widget-test')\n+\tconst sandboxedIframe = page.frameLocator('#calc-sandboxed')\n+\tawait expect(\n+\t\tsandboxedIframe.getByRole('heading', { name: 'Calculator' }),\n+\t).toBeVisible()\n+\n+\tconst resultEl = sandboxedIframe.locator('[data-result]')\n+\tawait expect(resultEl).toHaveText('0')\n+\n+\tawait sandboxedIframe.getByRole('button', { name: '7' }).click()\n+\tawait sandboxedIframe.getByRole('button', { name: '+' }).click()\n+\tawait sandboxedIframe.getByRole('button', { name: '3' }).click()\n+\tawait sandboxedIframe.getByRole('button', { name: '=' }).click()\n+\tawait expect(resultEl).toHaveText('10')\n+})\n+\n+test('sandboxed calculator sends result back to host chat on =', async ({\n+\tpage,\n+}) => {\n+\tawait page.goto('/dev/calculator-widget-test')\n+\tconst sandboxedIframe = page.frameLocator('#calc-sandboxed')\n+\tawait expect(\n+\t\tsandboxedIframe.getByRole('heading', { name: 'Calculator' }),\n+\t).toBeVisible()\n+\n+\tawait sandboxedIframe.getByRole('button', { name: '7' }).click()\n+\tawait sandboxedIframe.getByRole('button', { name: '+' }).click()\n+\tawait sandboxedIframe.getByRole('button', { name: '3' }).click()\n+\tawait sandboxedIframe.getByRole('button', { name: '=' }).click()\n+\n+\tawait expect(\n+\t\tpage.locator('[data-host-chat=\"calc-sandboxed\"] [data-chat-message]'),\n+\t).toContainText('Calculator result: 7 + 3 = 10')\n+})\ndiff --git a/e2e/chat.spec.ts b/e2e/chat.spec.ts\nnew file mode 100644\nindex 0000000..3083473\n--- /dev/null\n+++ b/e2e/chat.spec.ts\n@@ -0,0 +1,15 @@\n+import { expect, test } from './playwright-utils.ts'\n+\n+test('redirects to login when unauthenticated', async ({ page }) => {\n+\tawait page.goto('/chat')\n+\tawait expect(page).toHaveURL(/\\/login/)\n+})\n+\n+test('loads chat page when authenticated', async ({ page, login }) => {\n+\tawait login()\n+\tawait page.goto('/chat')\n+\tawait expect(page).toHaveURL(/\\/chat$/)\n+\n+\t// Check that we don't get redirected to login and the shell is visible\n+\tawait expect(page.getByRole('heading', { name: 'Chat' })).toBeVisible()\n+})\ndiff --git a/e2e/home.spec.ts b/e2e/home.spec.ts\nnew file mode 100644\nindex 0000000..1045286\n--- /dev/null\n+++ b/e2e/home.spec.ts\n@@ -0,0 +1,32 @@\n+import { expect, test } from '@playwright/test'\n+\n+test('home page renders the shell', async ({ page }) => {\n+\tawait page.goto('/')\n+\tawait expect(page).toHaveTitle('epic-scheduler')\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: 'epic-scheduler Remix 3' }),\n+\t).toBeVisible()\n+})\n+\n+test('login link navigates without full page reload', async ({ page }) => {\n+\tawait page.goto('/')\n+\tconst loginLink = page.getByRole('link', { name: 'Login' })\n+\tawait expect(loginLink).toBeVisible()\n+\n+\tconst marker = await page.evaluate(() => {\n+\t\tconst value = `spa-${Math.random().toString(16).slice(2)}`\n+\t\t;(window as { __spaMarker?: string }).__spaMarker = value\n+\t\treturn value\n+\t})\n+\n+\tawait loginLink.click()\n+\tawait expect(page).toHaveURL(/\\/login$/)\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: 'Welcome back' }),\n+\t).toBeVisible()\n+\n+\tconst markerAfterNavigation = await page.evaluate(\n+\t\t() => (window as { __spaMarker?: string }).__spaMarker ?? null,\n+\t)\n+\texpect(markerAfterNavigation).toBe(marker)\n+})\ndiff --git a/e2e/login.spec.ts b/e2e/login.spec.ts\nnew file mode 100644\nindex 0000000..92e225d\n--- /dev/null\n+++ b/e2e/login.spec.ts\n@@ -0,0 +1,46 @@\n+import { expect, test, type APIRequestContext } from '@playwright/test'\n+\n+const testUser = { email: 'user@example.com', password: 'password123' }\n+\n+async function ensureUserExists(request: APIRequestContext) {\n+\tconst response = await request.post('/auth', {\n+\t\tdata: { ...testUser, mode: 'signup' },\n+\t\theaders: { 'Content-Type': 'application/json' },\n+\t})\n+\tif (response.ok() || response.status() === 409) {\n+\t\treturn\n+\t}\n+\tthrow new Error(`Failed to seed user (${response.status()}).`)\n+}\n+\n+test('logs in with email and password', async ({ page }) => {\n+\tawait ensureUserExists(page.request)\n+\tawait page.context().clearCookies()\n+\tawait page.goto('/login')\n+\n+\tawait page.getByLabel('Email').fill(testUser.email)\n+\tawait page.getByLabel('Password').fill(testUser.password)\n+\tawait page.getByRole('button', { name: 'Sign in' }).click()\n+\n+\tawait expect(page).toHaveURL(/\\/account$/)\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: `Welcome, ${testUser.email}` }),\n+\t).toBeVisible()\n+})\n+\n+test('signs up with email and password', async ({ page }) => {\n+\tconst signupUser = {\n+\t\temail: `new-user-${crypto.randomUUID()}@example.com`,\n+\t\tpassword: 'password123',\n+\t}\n+\tawait page.goto('/signup')\n+\n+\tawait page.getByLabel('Email').fill(signupUser.email)\n+\tawait page.getByLabel('Password').fill(signupUser.password)\n+\tawait page.getByRole('button', { name: 'Create account' }).click()\n+\n+\tawait expect(page).toHaveURL(/\\/account$/)\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: `Welcome, ${signupUser.email}` }),\n+\t).toBeVisible()\n+})\ndiff --git a/e2e/oauth-authorize.spec.ts b/e2e/oauth-authorize.spec.ts\nnew file mode 100644\nindex 0000000..6a5b071\n--- /dev/null\n+++ b/e2e/oauth-authorize.spec.ts\n@@ -0,0 +1,229 @@\n+import { expect, test, type APIRequestContext } from '@playwright/test'\n+import { createServer } from 'node:http'\n+import getPort from 'get-port'\n+\n+function toBase64Url(bytes: Uint8Array) {\n+\treturn Buffer.from(bytes)\n+\t\t.toString('base64')\n+\t\t.replace(/\\+/g, '-')\n+\t\t.replace(/\\//g, '_')\n+\t\t.replace(/=+$/g, '')\n+}\n+\n+function createCodeVerifier() {\n+\treturn toBase64Url(crypto.getRandomValues(new Uint8Array(32)))\n+}\n+\n+async function createCodeChallenge(codeVerifier: string) {\n+\tconst digest = await crypto.subtle.digest(\n+\t\t'SHA-256',\n+\t\tnew TextEncoder().encode(codeVerifier),\n+\t)\n+\treturn toBase64Url(new Uint8Array(digest))\n+}\n+\n+async function createUser(request: APIRequestContext) {\n+\tconst user = {\n+\t\temail: `oauth-ui-${crypto.randomUUID()}@example.com`,\n+\t\tpassword: `pw-${crypto.randomUUID()}`,\n+\t}\n+\tconst response = await request.post('/auth', {\n+\t\tdata: { ...user, mode: 'signup' },\n+\t\theaders: { 'Content-Type': 'application/json' },\n+\t})\n+\tif (!response.ok()) {\n+\t\tthrow new Error(`Failed to create user (${response.status()}).`)\n+\t}\n+\treturn user\n+}\n+\n+async function registerOAuthClient(\n+\trequest: APIRequestContext,\n+\tredirectUri: string,\n+) {\n+\tconst response = await request.post('/oauth/register', {\n+\t\tdata: {\n+\t\t\tclient_name: 'oauth-ui-playwright-client',\n+\t\t\tredirect_uris: [redirectUri],\n+\t\t\tgrant_types: ['authorization_code', 'refresh_token'],\n+\t\t\tresponse_types: ['code'],\n+\t\t\ttoken_endpoint_auth_method: 'client_secret_post',\n+\t\t},\n+\t\theaders: { 'Content-Type': 'application/json' },\n+\t})\n+\tif (!response.ok()) {\n+\t\tthrow new Error(`Failed to register OAuth client (${response.status()}).`)\n+\t}\n+\tconst payload = (await response.json()) as {\n+\t\tclient_id?: unknown\n+\t}\n+\tif (typeof payload.client_id !== 'string') {\n+\t\tthrow new Error('OAuth client registration response missing client_id.')\n+\t}\n+\treturn payload.client_id\n+}\n+\n+async function createLoopbackCallbackServer() {\n+\tconst port = await getPort({ host: '127.0.0.1' })\n+\tlet resolveCallback: ((url: URL) => void) | null = null\n+\tconst callbackPromise = new Promise<URL>((resolve) => {\n+\t\tresolveCallback = resolve\n+\t})\n+\n+\tconst server = createServer((req, res) => {\n+\t\tconst requestUrl = new URL(req.url ?? '/', `http://127.0.0.1:${port}`)\n+\t\tresolveCallback?.(requestUrl)\n+\t\tresolveCallback = null\n+\t\tres.statusCode = 200\n+\t\tres.setHeader('Content-Type', 'text/plain; charset=utf-8')\n+\t\tres.end('oauth callback received')\n+\t})\n+\n+\tawait new Promise<void>((resolve, reject) => {\n+\t\tserver.once('error', reject)\n+\t\tserver.listen(port, '127.0.0.1', () => {\n+\t\t\tserver.off('error', reject)\n+\t\t\tresolve()\n+\t\t})\n+\t})\n+\n+\treturn {\n+\t\tredirectUri: `http://127.0.0.1:${port}/oauth/callback`,\n+\t\twaitForCallback: () => callbackPromise,\n+\t\tclose: async () => {\n+\t\t\tawait new Promise<void>((resolve, reject) => {\n+\t\t\t\tserver.close((error) => {\n+\t\t\t\t\tif (error) {\n+\t\t\t\t\t\treject(error)\n+\t\t\t\t\t\treturn\n+\t\t\t\t\t}\n+\t\t\t\t\tresolve()\n+\t\t\t\t})\n+\t\t\t})\n+\t\t},\n+\t}\n+}\n+\n+test('oauth authorize page accepts valid credentials for logged-out user', async ({\n+\tbaseURL,\n+\tpage,\n+}) => {\n+\tif (!baseURL) {\n+\t\tthrow new Error('Playwright baseURL is required for OAuth test.')\n+\t}\n+\n+\tconst user = await createUser(page.request)\n+\tconst redirectUri = `${baseURL}/oauth/callback`\n+\tconst clientId = await registerOAuthClient(page.request, redirectUri)\n+\tconst codeVerifier = createCodeVerifier()\n+\tconst codeChallenge = await createCodeChallenge(codeVerifier)\n+\tawait page.context().clearCookies()\n+\n+\tconst authorizeParams = new URLSearchParams({\n+\t\tresponse_type: 'code',\n+\t\tclient_id: clientId,\n+\t\tredirect_uri: redirectUri,\n+\t\tscope: 'profile email',\n+\t\tstate: 'playwright-oauth-state',\n+\t\tcode_challenge: codeChallenge,\n+\t\tcode_challenge_method: 'S256',\n+\t})\n+\n+\tawait page.goto(`/oauth/authorize?${authorizeParams.toString()}`)\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: 'Authorize access' }),\n+\t).toBeVisible()\n+\tawait expect(page.getByLabel('Email')).toBeVisible()\n+\n+\tawait page.getByLabel('Email').fill(user.email)\n+\tawait page.getByLabel('Password').fill(user.password)\n+\tawait page.getByRole('button', { name: 'Authorize' }).click()\n+\n+\tawait expect(page).toHaveURL(/\\/oauth\\/callback\\?/)\n+\tconst callbackUrl = new URL(page.url())\n+\texpect(callbackUrl.searchParams.get('code')).toBeTruthy()\n+\tawait expect(\n+\t\tpage.getByRole('heading', { name: 'OAuth callback' }),\n+\t).toBeVisible()\n+})\n+\n+test('oauth authorize redirects to loopback callback with code after login', async ({\n+\tpage,\n+}) => {\n+\tconst callbackServer = await createLoopbackCallbackServer()\n+\ttry {\n+\t\tconst user = await createUser(page.request)\n+\t\tconst clientId = await registerOAuthClient(\n+\t\t\tpage.request,\n+\t\t\tcallbackServer.redirectUri,\n+\t\t)\n+\t\tconst codeVerifier = createCodeVerifier()\n+\t\tconst codeChallenge = await createCodeChallenge(codeVerifier)\n+\t\tawait page.context().clearCookies()\n+\n+\t\tconst authorizeParams = new URLSearchParams({\n+\t\t\tresponse_type: 'code',\n+\t\t\tclient_id: clientId,\n+\t\t\tredirect_uri: callbackServer.redirectUri,\n+\t\t\tscope: 'profile email',\n+\t\t\tstate: 'playwright-oauth-loopback',\n+\t\t\tcode_challenge: codeChallenge,\n+\t\t\tcode_challenge_method: 'S256',\n+\t\t})\n+\n+\t\tawait page.goto(`/oauth/authorize?${authorizeParams.toString()}`)\n+\t\tawait expect(page.getByLabel('Email')).toBeVisible()\n+\t\tawait page.getByLabel('Email').fill(user.email)\n+\t\tawait page.getByLabel('Password').fill(user.password)\n+\t\tawait page.getByRole('button', { name: 'Authorize' }).click()\n+\n+\t\tconst callbackRequest = await callbackServer.waitForCallback()\n+\t\texpect(callbackRequest.searchParams.get('code')).toBeTruthy()\n+\t\texpect(callbackRequest.searchParams.get('state')).toBe(\n+\t\t\t'playwright-oauth-loopback',\n+\t\t)\n+\t} finally {\n+\t\tawait callbackServer.close()\n+\t}\n+})\n+\n+test('oauth login link preserves authorize params through login', async ({\n+\tpage,\n+}) => {\n+\tconst callbackServer = await createLoopbackCallbackServer()\n+\ttry {\n+\t\tconst user = await createUser(page.request)\n+\t\tconst clientId = await registerOAuthClient(\n+\t\t\tpage.request,\n+\t\t\tcallbackServer.redirectUri,\n+\t\t)\n+\t\tconst codeVerifier = createCodeVerifier()\n+\t\tconst codeChallenge = await createCodeChallenge(codeVerifier)\n+\t\tawait page.context().clearCookies()\n+\n+\t\tconst authorizeParams = new URLSearchParams({\n+\t\t\tresponse_type: 'code',\n+\t\t\tclient_id: clientId,\n+\t\t\tredirect_uri: callbackServer.redirectUri,\n+\t\t\tscope: 'profile email',\n+\t\t\tstate: 'playwright-oauth-link-login',\n+\t\t\tcode_challenge: codeChallenge,\n+\t\t\tcode_challenge_method: 'S256',\n+\t\t})\n+\t\tconst authorizePath = `/oauth/authorize?${authorizeParams.toString()}`\n+\t\tawait page.goto(authorizePath)\n+\t\tawait page.getByRole('link', { name: 'Login' }).click()\n+\t\tawait expect(page).toHaveURL(/\\/login/)\n+\n+\t\tawait page.getByLabel('Email').fill(user.email)\n+\t\tawait page.getByLabel('Password').fill(user.password)\n+\t\tawait page.getByRole('button', { name: 'Sign in' }).click()\n+\n+\t\tawait expect(page).toHaveURL(new RegExp(`/oauth/authorize\\\\?`))\n+\t\tawait expect(\n+\t\t\tpage.getByRole('button', { name: 'Approve connection' }),\n+\t\t).toBeVisible()\n+\t} finally {\n+\t\tawait callbackServer.close()\n+\t}\n+})\ndiff --git a/e2e/playwright-utils.ts b/e2e/playwright-utils.ts\nnew file mode 100644\nindex 0000000..ba2a8c5\n--- /dev/null\n+++ b/e2e/playwright-utils.ts\n@@ -0,0 +1,76 @@\n+import { test as base } from '@playwright/test'\n+import * as setCookieParser from 'set-cookie-parser'\n+\n+export * from '@playwright/test'\n+\n+export const test = base.extend<{\n+\tinsertNewUser(options?: {\n+\t\temail?: string\n+\t\tpassword?: string\n+\t}): Promise<{ email: string; password: string }>\n+\tlogin(options?: {\n+\t\temail?: string\n+\t\tpassword?: string\n+\t}): Promise<{ email: string; password: string }>\n+}>({\n+\tinsertNewUser: async ({ page }, use) => {\n+\t\tawait use(async (options) => {\n+\t\t\tconst email = options?.email ?? `user-${crypto.randomUUID()}@example.com`\n+\t\t\tconst password = options?.password ?? 'password123'\n+\n+\t\t\tconst response = await page.request.post('/auth', {\n+\t\t\t\tdata: { email, password, mode: 'signup' },\n+\t\t\t\theaders: { 'Content-Type': 'application/json' },\n+\t\t\t})\n+\n+\t\t\tif (!response.ok() && response.status() !== 409) {\n+\t\t\t\tthrow new Error(`Failed to seed user (${response.status()}).`)\n+\t\t\t}\n+\n+\t\t\treturn { email, password }\n+\t\t})\n+\t},\n+\tlogin: async ({ page }, use) => {\n+\t\tawait use(async (options) => {\n+\t\t\tconst email = options?.email ?? `user-${crypto.randomUUID()}@example.com`\n+\t\t\tconst password = options?.password ?? 'password123'\n+\n+\t\t\tlet response = await page.request.post('/auth', {\n+\t\t\t\tdata: { email, password, mode: 'signup' },\n+\t\t\t\theaders: { 'Content-Type': 'application/json' },\n+\t\t\t})\n+\n+\t\t\tif (!response.ok() && response.status() !== 409) {\n+\t\t\t\tthrow new Error(`Failed to seed user (${response.status()}).`)\n+\t\t\t}\n+\n+\t\t\tif (response.status() === 409) {\n+\t\t\t\tresponse = await page.request.post('/auth', {\n+\t\t\t\t\tdata: { email, password, mode: 'login' },\n+\t\t\t\t\theaders: { 'Content-Type': 'application/json' },\n+\t\t\t\t})\n+\n+\t\t\t\tif (!response.ok()) {\n+\t\t\t\t\tthrow new Error(`Failed to login user (${response.status()}).`)\n+\t\t\t\t}\n+\t\t\t}\n+\n+\t\t\tconst setCookieHeader = response.headers()['set-cookie']\n+\t\t\tif (setCookieHeader) {\n+\t\t\t\tconst parsed = setCookieParser.parseString(setCookieHeader)\n+\t\t\t\tconst cookieConfig = {\n+\t\t\t\t\tname: parsed.name,\n+\t\t\t\t\tvalue: parsed.value,\n+\t\t\t\t\tdomain: 'localhost',\n+\t\t\t\t\tpath: parsed.path || '/',\n+\t\t\t\t\thttpOnly: parsed.httpOnly,\n+\t\t\t\t\tsecure: parsed.secure,\n+\t\t\t\t\tsameSite: parsed.sameSite as 'Strict' | 'Lax' | 'None',\n+\t\t\t\t}\n+\t\t\t\tawait page.context().addCookies([cookieConfig])\n+\t\t\t}\n+\n+\t\t\treturn { email, password }\n+\t\t})\n+\t},\n+})\ndiff --git a/implementation-brief.md b/implementation-brief.md\ndeleted file mode 100644\nindex 786c31f..0000000\n--- a/implementation-brief.md\n+++ /dev/null\n@@ -1,144 +0,0 @@\n-# Implementation Brief\n-\n-This brief turns the UX invariants into a concrete implementation plan for a\n-narrow host-login rollout.\n-\n-## Goal and boundaries\n-\n-- Requested implementation:\n- - Add host-only login so returning hosts can re-find and manage schedules more\n- reliably.\n-- Why the team now believes this is justified:\n- - Enough time has passed since the exercise 2 decision that we now have\n- evidence host return/access friction is materially harming follow-through.\n- - The problem is still narrow: this is about returning-host continuity, not a\n- broad product move to full participant accounts.\n-- Key indicators this plan must protect:\n- - Finalized-plan rate\n- - Create-flow completion rate\n- - Attendee submission completion rate\n-\n-## UX guardrails driving the plan\n-\n-- Which invariants matter most for this implementation:\n- - Creating a schedule must remain fast and account-free at the point of\n- creation.\n- - Attendee participation on `/s/{scheduleKey}` must remain no-account and\n- low-ceremony.\n- - Returning hosts must be able to get back to the right schedule without being\n- dropped into generic auth confusion.\n- - Host-only access paths and public participation paths must stay clearly\n- separated.\n-- Which flows must remain effectively unchanged:\n- - `/` should still behave like a lightweight schedule-creation flow.\n- - `/s/{scheduleKey}` should still behave like a focused attendee submission\n- flow.\n- - Timezone clarity and finalization trust should remain intact once hosts are\n- back in the product.\n-- What regressions are unacceptable:\n- - Mandatory login before a schedule can be created\n- - Any sign-in requirement for attendees\n- - Losing host-link access before the logged-in path proves reliable\n- - A measurable drop in finalized-plan rate because host return becomes more\n- complicated\n-\n-## Narrow first release\n-\n-- What is the smallest host-login release worth shipping first:\n- - Add optional host-only passwordless login plus a \"claim this schedule\"\n- action for hosts who already have the private host link.\n-- Who can log in in this first version:\n- - Hosts only\n-- What should still work without login:\n- - Schedule creation\n- - Attendee participation\n- - Existing host-link-based management for both old and newly created schedules\n-- What remains explicitly out of scope:\n- - Attendee accounts\n- - Mandatory account creation during schedule setup\n- - Cross-user collaboration, team ownership, or social profile features\n- - Broad notification, settings, or account-management surfaces\n-\n-## Flow and route design\n-\n-- Which existing routes are touched:\n- - `/` to optionally offer \"save this schedule to your account\" after creation\n- - `/s/{scheduleKey}/{hostKey}` to let a host claim or associate the schedule\n- with a logged-in identity\n-- What new authenticated host entry points, if any, are needed:\n- - `/login` for passwordless host sign-in\n- - `/account/schedules` or similar host-only route that lists claimed schedules\n-- How a returning host gets back to a schedule:\n- - A returning host can sign in from a host-only entry point and land on a\n- simple schedule list showing schedules they have already claimed.\n- - Selecting a schedule takes them directly into the management experience.\n-- How host-link access and authenticated access coexist:\n- - Host links remain valid in the first rollout and act as both a fallback\n- access path and the proof needed to claim a schedule.\n- - Claimed schedules can still be opened with the host link while the logged-in\n- path proves itself in production.\n-- What the host sees after successful login:\n- - A focused \"your schedules\" destination with direct links back to active host\n- management surfaces, not a broad account dashboard.\n-- What happens when auth fails, expires, or is skipped:\n- - The host is returned to a clear retry state with context preserved.\n- - If they still have a valid host link, they can continue using it instead of\n- being hard-blocked.\n-\n-## Technical approach\n-\n-- Authentication/session approach:\n- - Use the starter's existing auth/session primitives, but limit the first\n- rollout to passwordless email login for hosts to minimize support burden and\n- password-recovery complexity.\n-- Data model or ownership changes:\n- - Add a user record for hosts.\n- - Add nullable schedule ownership fields such as `ownerUserId` and\n- `claimedAt`, while preserving the existing host-key model.\n- - Track whether a schedule is unclaimed, claimed, or later accessed through a\n- fallback host link.\n-- Migration or backward-compatibility strategy:\n- - Do not migrate or invalidate existing host links.\n- - Make schedule claiming opt-in and incremental.\n- - Preserve old behavior for any schedule that has not been claimed.\n-- Instrumentation needed before or during rollout:\n- - Track create completion before/after login prompts are introduced.\n- - Track host-link reuse, claim completion, login completion, and successful\n- host-return rate.\n- - Track finalized-plan rate for claimed vs unclaimed schedules.\n-\n-## Delivery plan\n-\n-- Recommended implementation sequence:\n- - Re-enable the minimal auth primitives needed for passwordless host login.\n- - Add host user + schedule ownership schema support.\n- - Add schedule-claiming from the existing host route.\n- - Add the returning-host schedule list.\n- - Add instrumentation and review hooks before broader rollout.\n-- Risk-reduction steps before broad rollout:\n- - Keep host links fully functional during the first release.\n- - Gate post-create login prompts so they remain secondary and easy to dismiss.\n- - Review every auth touchpoint against the UX invariants before shipping.\n-- Review checklist for protecting UX:\n- - Confirm `/` still works without login and still centers schedule creation.\n- - Confirm `/s/{scheduleKey}` has no account or ownership concepts.\n- - Confirm a logged-in host can return to the intended schedule without losing\n- context.\n- - Confirm fallback host-link access still works when login is skipped or fails.\n-\n-## Validation and rollback\n-\n-- Positive signals to watch:\n- - More hosts successfully return to manage/finalize schedules\n- - Finalized-plan rate holds steady or improves\n- - Create and attendee completion remain stable\n-- Regression signals to watch:\n- - Create abandonment rises after login prompts are added\n- - Attendees show confusion about whether they need accounts\n- - Hosts fail to claim schedules or end up in dead-end auth states\n- - Support burden increases around host-link vs login confusion\n-- What the team should do if the first rollout harms key indicators:\n- - Hide or remove the post-create login prompt first.\n- - Fall back to host-link-only management while preserving any claimed-account\n- data already created.\n- - Revisit the login entry points rather than forcing broader auth adoption.\ndiff --git a/mcp/apps/calculator-ui-entry-point.ts b/mcp/apps/calculator-ui-entry-point.ts\nnew file mode 100644\nindex 0000000..7b6ca04\n--- /dev/null\n+++ b/mcp/apps/calculator-ui-entry-point.ts\n@@ -0,0 +1,211 @@\n+export const calculatorUiResourceUri =\n+\t'ui://calculator-app/entry-point.html' as const\n+\n+export function renderCalculatorUiEntryPoint(baseUrl: string | URL) {\n+\tconst stylesheetHref = new URL('/styles.css', baseUrl).toString()\n+\tconst widgetScriptHref = new URL(\n+\t\t'/mcp-apps/calculator-widget.js',\n+\t\tbaseUrl,\n+\t).toString()\n+\n+\treturn `\n+<!doctype html>\n+<html lang=\"en\">\n+\t<head>\n+\t\t<meta charset=\"utf-8\" />\n+\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n+\t\t<title>Calculator\n+\t\t\n+\t\t\n+\t\n+\t\n+\t\t

\n+\t\t\t

\n+\t\t\t\t

Calculator

\n+\t\t\t\t

Use keys, Enter, and Backspace.

\n+\t\t\t

\n+\n+\t\t\t

\n+\t\t\t\t

\n+\t\t\t

\n+\n+\t\t\t

\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t\t\n+\t\t\t

\n+\t\t

\n+\n+\t\t\n+\t\n+\n+`.trim()\n+}\ndiff --git a/mcp/index.ts b/mcp/index.ts\nnew file mode 100644\nindex 0000000..a79dee9\n--- /dev/null\n+++ b/mcp/index.ts\n@@ -0,0 +1,43 @@\n+import { invariant } from '@epic-web/invariant'\n+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js'\n+import { McpAgent } from 'agents/mcp'\n+import { registerResources } from './register-resources.ts'\n+import { registerTools } from './register-tools.ts'\n+\n+export type State = {}\n+export type Props = {\n+\tbaseUrl: string\n+}\n+\n+const serverMetadata = {\n+\timplementation: {\n+\t\tname: 'epic-scheduler-mcp',\n+\t\tversion: '1.0.0',\n+\t},\n+\tinstructions: `\n+Quick start\n+- Use 'do_math' any time you need arithmetic. Prefer calling the tool over doing mental math.\n+- Use 'open_calculator_ui' when you want an interactive calculator widget in MCP App compatible hosts.\n+\n+How to chain tools safely\n+- If you need to verify, re-run 'do_math' with the same arguments (idempotent) or validate with an inverse operation.\n+\t`.trim(),\n+} as const\n+\n+export class MCP extends McpAgent {\n+\tserver = new McpServer(serverMetadata.implementation, {\n+\t\tinstructions: serverMetadata.instructions,\n+\t})\n+\tasync init() {\n+\t\tawait registerResources(this)\n+\t\tawait registerTools(this)\n+\t}\n+\trequireDomain() {\n+\t\tconst baseUrl = this.props?.baseUrl\n+\t\tinvariant(\n+\t\t\tbaseUrl,\n+\t\t\t'This should never happen, but somehow we did not get the baseUrl from the request handler',\n+\t\t)\n+\t\treturn baseUrl\n+\t}\n+}\ndiff --git a/mcp/mcp-server-e2e.test.ts b/mcp/mcp-server-e2e.test.ts\nnew file mode 100644\nindex 0000000..941c691\n--- /dev/null\n+++ b/mcp/mcp-server-e2e.test.ts\n@@ -0,0 +1,650 @@\n+import {\n+\tspawn,\n+\tspawnSync,\n+\ttype ChildProcess,\n+} from 'node:child_process'\n+import { expect, test } from 'vitest'\n+import { Client } from '@modelcontextprotocol/sdk/client/index.js'\n+import { StreamableHTTPClientTransport } from '@modelcontextprotocol/sdk/client/streamableHttp.js'\n+import {\n+\tauth,\n+\ttype OAuthClientProvider,\n+} from '@modelcontextprotocol/sdk/client/auth.js'\n+import {\n+\ttype OAuthClientInformationMixed,\n+\ttype OAuthTokens,\n+} from '@modelcontextprotocol/sdk/shared/auth.js'\n+import {\n+\ttype CallToolResult,\n+\ttype ContentBlock,\n+} from '@modelcontextprotocol/sdk/types.js'\n+import getPort from 'get-port'\n+import { mkdtemp, readdir, rm } from 'node:fs/promises'\n+import { tmpdir } from 'node:os'\n+import { join } from 'node:path'\n+import { fileURLToPath } from 'node:url'\n+\n+const projectRoot = fileURLToPath(new URL('..', import.meta.url))\n+const migrationsDir = join(projectRoot, 'migrations')\n+const defaultTimeoutMs = 60_000\n+const calculatorUiResourceUri = 'ui://calculator-app/entry-point.html'\n+\n+const passwordHashPrefix = 'pbkdf2_sha256'\n+const passwordSaltBytes = 16\n+const passwordHashBytes = 32\n+const passwordHashIterations = 100_000\n+\n+function delay(ms: number) {\n+\treturn new Promise((resolve) => setTimeout(resolve, ms))\n+}\n+\n+function toHex(bytes: Uint8Array) {\n+\treturn Array.from(bytes)\n+\t\t.map((value) => value.toString(16).padStart(2, '0'))\n+\t\t.join('')\n+}\n+\n+async function createPasswordHash(password: string) {\n+\tconst salt = crypto.getRandomValues(new Uint8Array(passwordSaltBytes))\n+\tconst key = await crypto.subtle.importKey(\n+\t\t'raw',\n+\t\tnew TextEncoder().encode(password),\n+\t\t'PBKDF2',\n+\t\tfalse,\n+\t\t['deriveBits'],\n+\t)\n+\tconst derivedBits = await crypto.subtle.deriveBits(\n+\t\t{\n+\t\t\tname: 'PBKDF2',\n+\t\t\tsalt,\n+\t\t\titerations: passwordHashIterations,\n+\t\t\thash: 'SHA-256',\n+\t\t},\n+\t\tkey,\n+\t\tpasswordHashBytes * 8,\n+\t)\n+\treturn `${passwordHashPrefix}$${passwordHashIterations}$${toHex(salt)}$${toHex(\n+\t\tnew Uint8Array(derivedBits),\n+\t)}`\n+}\n+\n+function escapeSql(value: string) {\n+\treturn value.replace(/'/g, \"''\")\n+}\n+\n+async function runWrangler(args: Array) {\n+\tconst result = spawnSync(process.execPath, ['./wrangler-env.ts', ...args], {\n+\t\tcwd: projectRoot,\n+\t\tenv: process.env,\n+\t\tencoding: 'utf8',\n+\t})\n+\tconst stdout = result.stdout ?? ''\n+\tconst stderr = result.stderr ?? ''\n+\tconst exitCode = result.status ?? 1\n+\tif (exitCode !== 0) {\n+\t\tthrow new Error(\n+\t\t\t`wrangler ${args.join(' ')} failed (${exitCode}). ${stderr || stdout}`,\n+\t\t)\n+\t}\n+\treturn { stdout, stderr }\n+}\n+\n+async function createTestDatabase() {\n+\tconst persistDir = await mkdtemp(join(tmpdir(), 'epic-scheduler-mcp-e2e-'))\n+\tconst user = {\n+\t\temail: `mcp-${crypto.randomUUID()}@example.com`,\n+\t\tpassword: `pw-${crypto.randomUUID()}`,\n+\t}\n+\n+\tawait applyMigrations(persistDir)\n+\n+\tconst passwordHash = await createPasswordHash(user.password)\n+\tconst username = user.email.split('@')[0] || 'user'\n+\tconst insertSql = `INSERT INTO users (username, email, password_hash) VALUES ('${escapeSql(\n+\t\tusername,\n+\t)}', '${escapeSql(user.email)}', '${escapeSql(passwordHash)}');`\n+\n+\tawait runWrangler([\n+\t\t'd1',\n+\t\t'execute',\n+\t\t'APP_DB',\n+\t\t'--local',\n+\t\t'--env',\n+\t\t'test',\n+\t\t'--persist-to',\n+\t\tpersistDir,\n+\t\t'--command',\n+\t\tinsertSql,\n+\t])\n+\n+\treturn {\n+\t\tpersistDir,\n+\t\tuser,\n+\t\t[Symbol.asyncDispose]: async () => {\n+\t\t\tawait rm(persistDir, { recursive: true, force: true })\n+\t\t},\n+\t}\n+}\n+\n+async function applyMigrations(persistDir: string) {\n+\tconst migrationFiles = await listMigrationFiles()\n+\tif (migrationFiles.length === 0) {\n+\t\tthrow new Error('No migration files found in migrations directory.')\n+\t}\n+\n+\tfor (const migrationFile of migrationFiles) {\n+\t\tawait runWrangler([\n+\t\t\t'd1',\n+\t\t\t'execute',\n+\t\t\t'APP_DB',\n+\t\t\t'--local',\n+\t\t\t'--env',\n+\t\t\t'test',\n+\t\t\t'--persist-to',\n+\t\t\tpersistDir,\n+\t\t\t'--file',\n+\t\t\tjoin('migrations', migrationFile),\n+\t\t])\n+\t}\n+}\n+\n+async function listMigrationFiles() {\n+\tconst entries = await readdir(migrationsDir, { withFileTypes: true })\n+\treturn entries\n+\t\t.filter((entry) => entry.isFile() && entry.name.endsWith('.sql'))\n+\t\t.map((entry) => entry.name)\n+\t\t.sort((left, right) => left.localeCompare(right))\n+}\n+\n+type ManagedProcess = {\n+\tprocess: ChildProcess\n+\texited: Promise\n+\tstdout: NodeJS.ReadableStream | null\n+\tstderr: NodeJS.ReadableStream | null\n+\tkill: (signal?: NodeJS.Signals) => void\n+}\n+\n+function captureOutput(stream: NodeJS.ReadableStream | null) {\n+\tlet output = ''\n+\tif (!stream) {\n+\t\treturn () => output\n+\t}\n+\n+\tstream.on('data', (chunk) => {\n+\t\toutput += String(chunk)\n+\t})\n+\treturn () => output\n+}\n+\n+function formatOutput(stdout: string, stderr: string) {\n+\tconst snippets: Array = []\n+\tif (stdout.trim()) {\n+\t\tsnippets.push(`stdout: ${stdout.trim().slice(-2000)}`)\n+\t}\n+\tif (stderr.trim()) {\n+\t\tsnippets.push(`stderr: ${stderr.trim().slice(-2000)}`)\n+\t}\n+\treturn snippets.length > 0 ? ` Output:\\n${snippets.join('\\n')}` : ''\n+}\n+\n+async function waitForServer(\n+\torigin: string,\n+\tproc: ManagedProcess,\n+\tgetStdout: () => string,\n+\tgetStderr: () => string,\n+) {\n+\tlet exited = false\n+\tlet exitCode: number | null = null\n+\tvoid proc.exited\n+\t\t.then((code) => {\n+\t\t\texited = true\n+\t\t\texitCode = code\n+\t\t})\n+\t\t.catch(() => {\n+\t\t\texited = true\n+\t\t})\n+\n+\tconst metadataUrl = new URL('/.well-known/oauth-protected-resource', origin)\n+\tconst deadline = Date.now() + 25_000\n+\twhile (Date.now() < deadline) {\n+\t\tif (exited) {\n+\t\t\tthrow new Error(\n+\t\t\t\t`wrangler dev exited (${exitCode ?? 'unknown'}).${formatOutput(\n+\t\t\t\t\tgetStdout(),\n+\t\t\t\t\tgetStderr(),\n+\t\t\t\t)}`,\n+\t\t\t)\n+\t\t}\n+\t\ttry {\n+\t\t\tconst response = await fetch(metadataUrl)\n+\t\t\tif (response.ok) {\n+\t\t\t\tawait response.body?.cancel()\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t} catch {\n+\t\t\t// Retry until the server is ready.\n+\t\t}\n+\t\tawait delay(250)\n+\t}\n+\n+\tthrow new Error(\n+\t\t`Timed out waiting for dev server at ${origin}.${formatOutput(\n+\t\t\tgetStdout(),\n+\t\t\tgetStderr(),\n+\t\t)}`,\n+\t)\n+}\n+\n+async function stopProcess(proc: ManagedProcess) {\n+\tlet exited = false\n+\tvoid proc.exited.then(() => {\n+\t\texited = true\n+\t})\n+\tproc.kill('SIGINT')\n+\tawait Promise.race([proc.exited, delay(5_000)])\n+\tif (!exited) {\n+\t\tproc.kill('SIGKILL')\n+\t\tawait proc.exited\n+\t}\n+}\n+\n+async function startDevServer(persistDir: string) {\n+\tconst port = await getPort({ host: '127.0.0.1' })\n+\tconst inspectorPortBase =\n+\t\tport + 10_000 <= 65_535 ? port + 10_000 : Math.max(1, port - 10_000)\n+\tconst inspectorPort = await getPort({\n+\t\thost: '127.0.0.1',\n+\t\tport: Array.from(\n+\t\t\t{ length: 10 },\n+\t\t\t(_, index) => inspectorPortBase + index,\n+\t\t).filter((candidate) => candidate > 0 && candidate <= 65_535),\n+\t})\n+\tconst origin = `http://127.0.0.1:${port}`\n+\tconst processHandle = createProcess([\n+\t\tprocess.execPath,\n+\t\t'./wrangler-env.ts',\n+\t\t'dev',\n+\t\t'--local',\n+\t\t'--env',\n+\t\t'test',\n+\t\t'--port',\n+\t\tString(port),\n+\t\t'--inspector-port',\n+\t\tString(inspectorPort),\n+\t\t'--ip',\n+\t\t'127.0.0.1',\n+\t\t'--persist-to',\n+\t\tpersistDir,\n+\t\t'--show-interactive-dev-session=false',\n+\t\t'--log-level',\n+\t\t'error',\n+\t])\n+\n+\tconst getStdout = captureOutput(processHandle.stdout)\n+\tconst getStderr = captureOutput(processHandle.stderr)\n+\n+\tawait waitForServer(origin, processHandle, getStdout, getStderr)\n+\n+\treturn {\n+\t\torigin,\n+\t\t[Symbol.asyncDispose]: async () => {\n+\t\t\tawait stopProcess(processHandle)\n+\t\t},\n+\t}\n+}\n+\n+function createProcess(args: Array): ManagedProcess {\n+\tconst child = spawn(args[0]!, args.slice(1), {\n+\t\tcwd: projectRoot,\n+\t\tstdio: ['ignore', 'pipe', 'pipe'],\n+\t\tenv: {\n+\t\t\t...process.env,\n+\t\t\tCLOUDFLARE_ENV: 'test',\n+\t\t},\n+\t})\n+\tconst exited = new Promise((resolve, reject) => {\n+\t\tchild.once('error', reject)\n+\t\tchild.once('exit', (code) => resolve(code ?? 1))\n+\t})\n+\treturn {\n+\t\tprocess: child,\n+\t\texited,\n+\t\tstdout: child.stdout,\n+\t\tstderr: child.stderr,\n+\t\tkill: (signal) => {\n+\t\t\tchild.kill(signal)\n+\t\t},\n+\t}\n+}\n+\n+async function authorizeWithPassword(\n+\tauthorizationUrl: URL,\n+\tuser: { email: string; password: string },\n+\toptions: { simulateInteractiveAuthorize?: boolean } = {},\n+) {\n+\tif (options.simulateInteractiveAuthorize) {\n+\t\tconst authorizeInfoUrl = new URL('/oauth/authorize-info', authorizationUrl)\n+\t\tauthorizeInfoUrl.search = authorizationUrl.search\n+\t\tconst authorizeInfoResponse = await fetch(authorizeInfoUrl, {\n+\t\t\theaders: { Accept: 'application/json' },\n+\t\t})\n+\t\tconst authorizeInfoPayload = (await authorizeInfoResponse\n+\t\t\t.json()\n+\t\t\t.catch(() => null)) as unknown\n+\t\tconst authorizeInfo =\n+\t\t\tauthorizeInfoPayload &&\n+\t\t\ttypeof authorizeInfoPayload === 'object' &&\n+\t\t\t'ok' in authorizeInfoPayload\n+\t\t\t\t? (authorizeInfoPayload as { ok?: unknown })\n+\t\t\t\t: null\n+\t\tif (!authorizeInfoResponse.ok || authorizeInfo?.ok !== true) {\n+\t\t\tthrow new Error(\n+\t\t\t\t`OAuth authorize-info failed (${authorizeInfoResponse.status}). ${JSON.stringify(authorizeInfoPayload)}`,\n+\t\t\t)\n+\t\t}\n+\t}\n+\n+\tconst response = await fetch(authorizationUrl, {\n+\t\tmethod: 'POST',\n+\t\theaders: {\n+\t\t\t'Content-Type': 'application/x-www-form-urlencoded',\n+\t\t\tAccept: 'application/json',\n+\t\t},\n+\t\tbody: new URLSearchParams({\n+\t\t\tdecision: 'approve',\n+\t\t\temail: user.email,\n+\t\t\tpassword: user.password,\n+\t\t}),\n+\t})\n+\tconst payload = (await response.json().catch(() => null)) as unknown\n+\n+\tif (!response.ok || !payload || typeof payload !== 'object') {\n+\t\tthrow new Error(\n+\t\t\t`OAuth approval failed (${response.status}). ${JSON.stringify(payload)}`,\n+\t\t)\n+\t}\n+\n+\tconst approval = payload as { ok?: unknown; redirectTo?: unknown }\n+\tif (approval.ok !== true || typeof approval.redirectTo !== 'string') {\n+\t\tthrow new Error(\n+\t\t\t`OAuth approval failed (${response.status}). ${JSON.stringify(payload)}`,\n+\t\t)\n+\t}\n+\n+\tconst redirectUrl = new URL(approval.redirectTo)\n+\tconst code = redirectUrl.searchParams.get('code')\n+\tif (!code) {\n+\t\tthrow new Error('Authorization response missing code.')\n+\t}\n+\treturn code\n+}\n+\n+type TestOAuthProvider = OAuthClientProvider & {\n+\twaitForAuthorizationCode: () => Promise\n+}\n+\n+function createOAuthProvider({\n+\tredirectUrl,\n+\tclientMetadata,\n+\tauthorize,\n+}: {\n+\tredirectUrl: URL\n+\tclientMetadata: OAuthClientProvider['clientMetadata']\n+\tauthorize: (authorizationUrl: URL) => Promise\n+}): TestOAuthProvider {\n+\tlet clientInformation: OAuthClientInformationMixed | undefined\n+\tlet tokens: OAuthTokens | undefined\n+\tlet codeVerifier: string | undefined\n+\tlet authorizationCode: Promise | undefined\n+\n+\treturn {\n+\t\tredirectUrl,\n+\t\tclientMetadata,\n+\t\tclientInformation() {\n+\t\t\treturn clientInformation\n+\t\t},\n+\t\tsaveClientInformation(nextClientInfo) {\n+\t\t\tclientInformation = nextClientInfo\n+\t\t},\n+\t\ttokens() {\n+\t\t\treturn tokens\n+\t\t},\n+\t\tsaveTokens(nextTokens) {\n+\t\t\ttokens = nextTokens\n+\t\t},\n+\t\tredirectToAuthorization(authorizationUrl) {\n+\t\t\tauthorizationCode = authorize(authorizationUrl)\n+\t\t},\n+\t\tsaveCodeVerifier(nextCodeVerifier) {\n+\t\t\tcodeVerifier = nextCodeVerifier\n+\t\t},\n+\t\tcodeVerifier() {\n+\t\t\tif (!codeVerifier) {\n+\t\t\t\tthrow new Error('No code verifier saved')\n+\t\t\t}\n+\t\t\treturn codeVerifier\n+\t\t},\n+\t\tasync waitForAuthorizationCode() {\n+\t\t\tif (!authorizationCode) {\n+\t\t\t\tthrow new Error('Authorization flow was not started')\n+\t\t\t}\n+\t\t\treturn authorizationCode\n+\t\t},\n+\t}\n+}\n+\n+async function ensureAuthorized(\n+\tserverUrl: URL,\n+\ttransport: StreamableHTTPClientTransport,\n+\tprovider: TestOAuthProvider,\n+) {\n+\tconst result = await auth(provider, { serverUrl })\n+\tif (result === 'AUTHORIZED') {\n+\t\treturn\n+\t}\n+\tconst authorizationCode = await provider.waitForAuthorizationCode()\n+\tawait transport.finishAuth(authorizationCode)\n+}\n+\n+async function createMcpClient(\n+\torigin: string,\n+\tuser: { email: string; password: string },\n+\toptions: { simulateInteractiveAuthorize?: boolean } = {},\n+) {\n+\tconst redirectUrl = new URL('/oauth/callback', origin)\n+\tconst provider = createOAuthProvider({\n+\t\tredirectUrl,\n+\t\tclientMetadata: {\n+\t\t\tclient_name: 'mcp-e2e-client',\n+\t\t\tredirect_uris: [redirectUrl.toString()],\n+\t\t\tgrant_types: ['authorization_code', 'refresh_token'],\n+\t\t\tresponse_types: ['code'],\n+\t\t\ttoken_endpoint_auth_method: 'client_secret_post',\n+\t\t},\n+\t\tauthorize: (authorizationUrl) =>\n+\t\t\tauthorizeWithPassword(authorizationUrl, user, options),\n+\t})\n+\tconst serverUrl = new URL('/mcp', origin)\n+\tconst transport = new StreamableHTTPClientTransport(serverUrl, {\n+\t\tauthProvider: provider,\n+\t})\n+\tconst client = new Client(\n+\t\t{ name: 'mcp-e2e', version: '1.0.0' },\n+\t\t{ capabilities: {} },\n+\t)\n+\n+\tawait ensureAuthorized(serverUrl, transport, provider)\n+\tawait client.connect(transport)\n+\n+\treturn {\n+\t\tclient,\n+\t\t[Symbol.asyncDispose]: async () => {\n+\t\t\tawait client.close()\n+\t\t},\n+\t}\n+}\n+\n+test(\n+\t'mcp server lists tools after interactive oauth authorize flow',\n+\tasync () => {\n+\t\tawait using database = await createTestDatabase()\n+\t\tawait using server = await startDevServer(database.persistDir)\n+\t\tawait using mcpClient = await createMcpClient(\n+\t\t\tserver.origin,\n+\t\t\tdatabase.user,\n+\t\t\t{\n+\t\t\t\tsimulateInteractiveAuthorize: true,\n+\t\t\t},\n+\t\t)\n+\n+\t\tconst result = await mcpClient.client.listTools()\n+\t\tconst toolNames = result.tools.map((tool) => tool.name)\n+\n+\t\texpect(toolNames.sort()).toEqual(['do_math', 'open_calculator_ui'])\n+\t},\n+\tdefaultTimeoutMs,\n+)\n+\n+test(\n+\t'mcp server lists tools after oauth flow',\n+\tasync () => {\n+\t\tawait using database = await createTestDatabase()\n+\t\tawait using server = await startDevServer(database.persistDir)\n+\t\tawait using mcpClient = await createMcpClient(server.origin, database.user)\n+\n+\t\tconst instructions = mcpClient.client.getInstructions() ?? ''\n+\t\texpect(instructions).toContain('Quick start')\n+\n+\t\tconst result = await mcpClient.client.listTools()\n+\t\tconst toolNames = result.tools.map((tool) => tool.name)\n+\n+\t\texpect(toolNames.sort()).toEqual(['do_math', 'open_calculator_ui'])\n+\n+\t\tconst resourcesResult = await mcpClient.client.listResources()\n+\t\tconst resourceUris = resourcesResult.resources.map(\n+\t\t\t(resource) => resource.uri,\n+\t\t)\n+\n+\t\texpect(resourceUris).toContain(calculatorUiResourceUri)\n+\t},\n+\tdefaultTimeoutMs,\n+)\n+\n+test(\n+\t'mcp server executes do_math tool',\n+\tasync () => {\n+\t\tawait using database = await createTestDatabase()\n+\t\tawait using server = await startDevServer(database.persistDir)\n+\t\tawait using mcpClient = await createMcpClient(server.origin, database.user)\n+\n+\t\tconst result = await mcpClient.client.callTool({\n+\t\t\tname: 'do_math',\n+\t\t\targuments: {\n+\t\t\t\tleft: 8,\n+\t\t\t\tright: 4,\n+\t\t\t\toperator: '+',\n+\t\t\t},\n+\t\t})\n+\n+\t\tconst structuredResult = (result as CallToolResult).structuredContent as\n+\t\t\t| Record\n+\t\t\t| undefined\n+\t\texpect(structuredResult?.result).toBe(12)\n+\n+\t\tconst textOutput =\n+\t\t\t(result as CallToolResult).content.find(\n+\t\t\t\t(item): item is Extract =>\n+\t\t\t\t\titem.type === 'text',\n+\t\t\t)?.text ?? ''\n+\n+\t\texpect(textOutput).toContain('12')\n+\t},\n+\tdefaultTimeoutMs,\n+)\n+\n+test(\n+\t'mcp server executes calculator ui tool and serves resource entry point',\n+\tasync () => {\n+\t\tawait using database = await createTestDatabase()\n+\t\tawait using server = await startDevServer(database.persistDir)\n+\t\tawait using mcpClient = await createMcpClient(server.origin, database.user)\n+\n+\t\tconst result = await mcpClient.client.callTool({\n+\t\t\tname: 'open_calculator_ui',\n+\t\t})\n+\n+\t\tconst structuredResult = (result as CallToolResult).structuredContent as\n+\t\t\t| Record\n+\t\t\t| undefined\n+\t\texpect(structuredResult?.widget).toBe('calculator')\n+\t\texpect(structuredResult?.resourceUri).toBe(calculatorUiResourceUri)\n+\n+\t\tconst textOutput =\n+\t\t\t(result as CallToolResult).content.find(\n+\t\t\t\t(item): item is Extract =>\n+\t\t\t\t\titem.type === 'text',\n+\t\t\t)?.text ?? ''\n+\t\texpect(textOutput).toContain('Calculator widget')\n+\n+\t\tconst resourceResult = await mcpClient.client.readResource({\n+\t\t\turi: calculatorUiResourceUri,\n+\t\t})\n+\t\tconst calculatorResource = resourceResult.contents.find(\n+\t\t\t(content): content is { uri: string; mimeType?: string; text: string } =>\n+\t\t\t\tcontent.uri === calculatorUiResourceUri &&\n+\t\t\t\t'text' in content &&\n+\t\t\t\ttypeof content.text === 'string',\n+\t\t)\n+\t\tconst calculatorResourceMeta = (\n+\t\t\tresourceResult.contents.find(\n+\t\t\t\t(content) => content.uri === calculatorUiResourceUri,\n+\t\t\t) as { _meta?: Record } | undefined\n+\t\t)?._meta as\n+\t\t\t| {\n+\t\t\t\t\tui?: {\n+\t\t\t\t\t\tdomain?: string\n+\t\t\t\t\t\tcsp?: {\n+\t\t\t\t\t\t\tresourceDomains?: Array\n+\t\t\t\t\t\t}\n+\t\t\t\t\t}\n+\t\t\t\t\t'openai/widgetDomain'?: string\n+\t\t\t }\n+\t\t\t| undefined\n+\n+\t\texpect(calculatorResource).toBeDefined()\n+\t\texpect(calculatorResource?.mimeType).toBe('text/html;profile=mcp-app')\n+\t\texpect(calculatorResource?.text).toContain('data-calculator-ui')\n+\t\texpect(calculatorResource?.text).toContain('rel=\"stylesheet\"')\n+\t\texpect(calculatorResource?.text).toContain('styles.css')\n+\t\texpect(calculatorResource?.text).toContain('--color-primary')\n+\t\texpect(calculatorResource?.text).toContain('--color-background')\n+\t\texpect(calculatorResource?.text).toContain(\"data-theme='dark'\")\n+\t\texpect(calculatorResource?.text).toContain('type=\"module\"')\n+\t\texpect(calculatorResource?.text).toContain('/mcp-apps/calculator-widget.js')\n+\n+\t\tconst calculatorWidgetResponse = await fetch(\n+\t\t\tnew URL('/mcp-apps/calculator-widget.js', server.origin),\n+\t\t)\n+\t\texpect(calculatorWidgetResponse.ok).toBe(true)\n+\t\texpect(\n+\t\t\tcalculatorWidgetResponse.headers.get('access-control-allow-origin'),\n+\t\t).toBe('*')\n+\t\tconst calculatorWidgetSource = await calculatorWidgetResponse.text()\n+\t\texpect(calculatorWidgetSource).toContain('createWidgetHostBridge')\n+\t\texpect(calculatorWidgetSource).toContain('Calculator result:')\n+\t\texpect(calculatorWidgetSource).toContain('sendUserMessageWithFallback')\n+\t\texpect(calculatorWidgetSource).toContain('ui/initialize')\n+\t\texpect(calculatorWidgetSource).toContain('ui/message')\n+\n+\t\tconst stylesResponse = await fetch(new URL('/styles.css', server.origin))\n+\t\texpect(stylesResponse.ok).toBe(true)\n+\t\texpect(stylesResponse.headers.get('access-control-allow-origin')).toBe('*')\n+\n+\t\texpect(calculatorResourceMeta?.ui?.domain).toBe(server.origin)\n+\t\texpect(calculatorResourceMeta?.['openai/widgetDomain']).toBe(server.origin)\n+\t\texpect(calculatorResourceMeta?.ui?.csp?.resourceDomains).toContain(\n+\t\t\tserver.origin,\n+\t\t)\n+\t},\n+\tdefaultTimeoutMs,\n+)\ndiff --git a/mcp/register-resources.ts b/mcp/register-resources.ts\nnew file mode 100644\nindex 0000000..829a899\n--- /dev/null\n+++ b/mcp/register-resources.ts\n@@ -0,0 +1,6 @@\n+import { type MCP } from './index.ts'\n+import { registerCalculatorAppResource } from './resources/calculator-app-resource.ts'\n+\n+export async function registerResources(agent: MCP) {\n+\tawait registerCalculatorAppResource(agent)\n+}\ndiff --git a/mcp/register-tools.ts b/mcp/register-tools.ts\nnew file mode 100644\nindex 0000000..7b37046\n--- /dev/null\n+++ b/mcp/register-tools.ts\n@@ -0,0 +1,8 @@\n+import { type MCP } from './index.ts'\n+import { registerDoMathTool } from './tools/do-math.ts'\n+import { registerOpenCalculatorUiTool } from './tools/open-calculator-ui.ts'\n+\n+export async function registerTools(agent: MCP) {\n+\tawait registerDoMathTool(agent)\n+\tawait registerOpenCalculatorUiTool(agent)\n+}\ndiff --git a/mcp/resources/calculator-app-resource.ts b/mcp/resources/calculator-app-resource.ts\nnew file mode 100644\nindex 0000000..86905f0\n--- /dev/null\n+++ b/mcp/resources/calculator-app-resource.ts\n@@ -0,0 +1,66 @@\n+import {\n+\tRESOURCE_MIME_TYPE,\n+\tregisterAppResource,\n+} from '@modelcontextprotocol/ext-apps/server'\n+import { createUIResource } from '@mcp-ui/server'\n+import {\n+\tcalculatorUiResourceUri,\n+\trenderCalculatorUiEntryPoint,\n+} from '#mcp/apps/calculator-ui-entry-point.ts'\n+import { type MCP } from '#mcp/index.ts'\n+\n+const calculatorAppResource = {\n+\tname: 'calculator_app_resource',\n+\ttitle: 'Calculator App Resource',\n+\tdescription:\n+\t\t'Interactive calculator app entry point rendered by MCP App compatible hosts.',\n+} as const\n+\n+export async function registerCalculatorAppResource(agent: MCP) {\n+\tconst baseUrl = agent.requireDomain()\n+\tconst resourceDomain = new URL('/styles.css', baseUrl).origin\n+\n+\tregisterAppResource(\n+\t\tagent.server,\n+\t\tcalculatorAppResource.name,\n+\t\tcalculatorUiResourceUri,\n+\t\t{\n+\t\t\ttitle: calculatorAppResource.title,\n+\t\t\tdescription: calculatorAppResource.description,\n+\t\t},\n+\t\tasync () => {\n+\t\t\tconst calculatorUiResource = createUIResource({\n+\t\t\t\turi: calculatorUiResourceUri,\n+\t\t\t\tcontent: {\n+\t\t\t\t\ttype: 'rawHtml',\n+\t\t\t\t\thtmlString: renderCalculatorUiEntryPoint(baseUrl),\n+\t\t\t\t},\n+\t\t\t\tencoding: 'text',\n+\t\t\t\tadapters: {\n+\t\t\t\t\tmcpApps: {\n+\t\t\t\t\t\tenabled: true,\n+\t\t\t\t\t},\n+\t\t\t\t},\n+\t\t\t})\n+\n+\t\t\treturn {\n+\t\t\t\tcontents: [\n+\t\t\t\t\t{\n+\t\t\t\t\t\t...calculatorUiResource.resource,\n+\t\t\t\t\t\tmimeType: RESOURCE_MIME_TYPE,\n+\t\t\t\t\t\t_meta: {\n+\t\t\t\t\t\t\tui: {\n+\t\t\t\t\t\t\t\tprefersBorder: true,\n+\t\t\t\t\t\t\t\tdomain: resourceDomain,\n+\t\t\t\t\t\t\t\tcsp: {\n+\t\t\t\t\t\t\t\t\tresourceDomains: [resourceDomain],\n+\t\t\t\t\t\t\t\t},\n+\t\t\t\t\t\t\t},\n+\t\t\t\t\t\t\t'openai/widgetDomain': resourceDomain,\n+\t\t\t\t\t\t},\n+\t\t\t\t\t},\n+\t\t\t\t],\n+\t\t\t}\n+\t\t},\n+\t)\n+}\ndiff --git a/mcp/tools/do-math.ts b/mcp/tools/do-math.ts\nnew file mode 100644\nindex 0000000..590b16e\n--- /dev/null\n+++ b/mcp/tools/do-math.ts\n@@ -0,0 +1,186 @@\n+import { type ToolAnnotations } from '@modelcontextprotocol/sdk/types.js'\n+import { z } from 'zod'\n+import { type MCP } from '#mcp/index.ts'\n+\n+type OperationFn = (left: number, right: number) => number\n+type MathOperator = '+' | '-' | '*' | '/'\n+\n+const operations = {\n+\t'+': (left: number, right: number) => left + right,\n+\t'-': (left: number, right: number) => left - right,\n+\t'*': (left: number, right: number) => left * right,\n+\t'/': (left: number, right: number) => left / right,\n+} satisfies Record\n+\n+const mathOperators = Object.keys(operations) as Array\n+\n+const doMathTool = {\n+\tname: 'do_math',\n+\ttitle: 'Do Math',\n+\tdescription: `\n+Compute a single arithmetic operation over two numbers.\n+\n+Behavior:\n+- Division by zero is rejected.\n+\n+Examples:\n+- \"Add 8 and 4\" → { left: 8, operator: \"+\", right: 4 }\n+- \"Divide 1 by 3 with 3 decimals\" → { left: 1, operator: \"/\", right: 3, precision: 3 }\n+\t`.trim(),\n+\tannotations: {\n+\t\treadOnlyHint: true,\n+\t\tdestructiveHint: false,\n+\t\tidempotentHint: true,\n+\t\topenWorldHint: false,\n+\t} satisfies ToolAnnotations,\n+} as const\n+\n+function formatNumberForMarkdown(value: number, precision: number) {\n+\tif (Number.isInteger(value)) return String(value)\n+\tconst rounded = value.toFixed(precision)\n+\treturn rounded.includes('.') ? rounded.replace(/\\.?0+$/, '') : rounded\n+}\n+\n+export async function registerDoMathTool(agent: MCP) {\n+\tagent.server.registerTool(\n+\t\tdoMathTool.name,\n+\t\t{\n+\t\t\ttitle: doMathTool.title,\n+\t\t\tdescription: doMathTool.description,\n+\t\t\tinputSchema: {\n+\t\t\t\tleft: z\n+\t\t\t\t\t.number()\n+\t\t\t\t\t.finite()\n+\t\t\t\t\t.describe('Left operand (finite number). Example: 8'),\n+\t\t\t\tright: z\n+\t\t\t\t\t.number()\n+\t\t\t\t\t.finite()\n+\t\t\t\t\t.describe('Right operand (finite number). Example: 4'),\n+\t\t\t\toperator: z\n+\t\t\t\t\t.enum(mathOperators)\n+\t\t\t\t\t.describe('Operator. Valid values: \"+\", \"-\", \"*\", \"/\".'),\n+\t\t\t\tprecision: z\n+\t\t\t\t\t.number()\n+\t\t\t\t\t.int()\n+\t\t\t\t\t.min(0)\n+\t\t\t\t\t.max(15)\n+\t\t\t\t\t.optional()\n+\t\t\t\t\t.default(6)\n+\t\t\t\t\t.describe(\n+\t\t\t\t\t\t'Decimal places used ONLY for the markdown output (0-15, default: 6). Does not change the computed numeric result.',\n+\t\t\t\t\t),\n+\t\t\t},\n+\t\t\toutputSchema: {\n+\t\t\t\tleft: z\n+\t\t\t\t\t.number()\n+\t\t\t\t\t.finite()\n+\t\t\t\t\t.describe('Left operand used in the evaluated expression.'),\n+\t\t\t\toperator: z\n+\t\t\t\t\t.enum(mathOperators)\n+\t\t\t\t\t.describe('Operator used in the evaluated expression.'),\n+\t\t\t\tright: z\n+\t\t\t\t\t.number()\n+\t\t\t\t\t.finite()\n+\t\t\t\t\t.describe('Right operand used in the evaluated expression.'),\n+\t\t\t\texpression: z.string().describe('Expression string, e.g. \"8 + 4\".'),\n+\t\t\t\tresult: z\n+\t\t\t\t\t.number()\n+\t\t\t\t\t.finite()\n+\t\t\t\t\t.describe('Exact numeric result (not rounded).'),\n+\t\t\t\tprecisionUsed: z\n+\t\t\t\t\t.number()\n+\t\t\t\t\t.int()\n+\t\t\t\t\t.min(0)\n+\t\t\t\t\t.max(15)\n+\t\t\t\t\t.describe('Precision used ONLY for markdown formatting.'),\n+\t\t\t},\n+\t\t\tannotations: doMathTool.annotations,\n+\t\t},\n+\t\tasync ({\n+\t\t\tleft,\n+\t\t\tright,\n+\t\t\toperator,\n+\t\t\tprecision,\n+\t\t}: {\n+\t\t\tleft: number\n+\t\t\tright: number\n+\t\t\toperator: MathOperator\n+\t\t\tprecision: number\n+\t\t}) => {\n+\t\t\tif (operator === '/' && right === 0) {\n+\t\t\t\treturn {\n+\t\t\t\t\tcontent: [\n+\t\t\t\t\t\t{\n+\t\t\t\t\t\t\ttype: 'text',\n+\t\t\t\t\t\t\ttext: `\n+❌ Division by zero.\n+\n+Inputs: left=${left}, operator=\"${operator}\", right=${right}\n+\n+Next: Choose a non-zero right operand.\n+\t\t\t\t\t\t\t`.trim(),\n+\t\t\t\t\t\t},\n+\t\t\t\t\t],\n+\t\t\t\t\tstructuredContent: {\n+\t\t\t\t\t\terror: 'DIVISION_BY_ZERO',\n+\t\t\t\t\t\tleft,\n+\t\t\t\t\t\toperator,\n+\t\t\t\t\t\tright,\n+\t\t\t\t\t},\n+\t\t\t\t\tisError: true,\n+\t\t\t\t}\n+\t\t\t}\n+\n+\t\t\tconst operation = operations[operator]\n+\t\t\tconst result = operation(left, right)\n+\t\t\tif (!Number.isFinite(result)) {\n+\t\t\t\treturn {\n+\t\t\t\t\tcontent: [\n+\t\t\t\t\t\t{\n+\t\t\t\t\t\t\ttype: 'text',\n+\t\t\t\t\t\t\ttext: `\n+❌ Result is not a finite number.\n+\n+Inputs: left=${left}, operator=\"${operator}\", right=${right}\n+\n+Next: Use smaller inputs or choose a different operator.\n+\t\t\t\t\t\t\t`.trim(),\n+\t\t\t\t\t\t},\n+\t\t\t\t\t],\n+\t\t\t\t\tstructuredContent: {\n+\t\t\t\t\t\terror: 'NON_FINITE_RESULT',\n+\t\t\t\t\t\tleft,\n+\t\t\t\t\t\toperator,\n+\t\t\t\t\t\tright,\n+\t\t\t\t\t},\n+\t\t\t\t\tisError: true,\n+\t\t\t\t}\n+\t\t\t}\n+\n+\t\t\tconst expression = `${left} ${operator} ${right}`\n+\t\t\tconst markdownResult = formatNumberForMarkdown(result, precision)\n+\t\t\treturn {\n+\t\t\t\tcontent: [\n+\t\t\t\t\t{\n+\t\t\t\t\t\ttype: 'text',\n+\t\t\t\t\t\ttext: `\n+## ✅ Result\n+\n+**Expression**: \\`${expression}\\`\n+\n+**Result**: \\`${markdownResult}\\`\n+\t\t\t\t\t\t`.trim(),\n+\t\t\t\t\t},\n+\t\t\t\t],\n+\t\t\t\tstructuredContent: {\n+\t\t\t\t\tleft,\n+\t\t\t\t\toperator,\n+\t\t\t\t\tright,\n+\t\t\t\t\texpression,\n+\t\t\t\t\tresult,\n+\t\t\t\t\tprecisionUsed: precision,\n+\t\t\t\t},\n+\t\t\t}\n+\t\t},\n+\t)\n+}\ndiff --git a/mcp/tools/open-calculator-ui.ts b/mcp/tools/open-calculator-ui.ts\nnew file mode 100644\nindex 0000000..d79308e\n--- /dev/null\n+++ b/mcp/tools/open-calculator-ui.ts\n@@ -0,0 +1,72 @@\n+import { registerAppTool } from '@modelcontextprotocol/ext-apps/server'\n+import { type ToolAnnotations } from '@modelcontextprotocol/sdk/types.js'\n+import { z } from 'zod'\n+import { calculatorUiResourceUri } from '#mcp/apps/calculator-ui-entry-point.ts'\n+import { type MCP } from '#mcp/index.ts'\n+\n+const openCalculatorUiTool = {\n+\tname: 'open_calculator_ui',\n+\ttitle: 'Open Calculator UI',\n+\tdescription: `\n+Show an interactive calculator MCP App widget.\n+\n+Behavior:\n+- Opens a calculator app resource that runs arithmetic directly in the UI.\n+- Supports mouse and keyboard input.\n+\n+Next:\n+- Use 'do_math' when you need a precise, machine-readable result in tool output.\n+\t`.trim(),\n+\tannotations: {\n+\t\treadOnlyHint: true,\n+\t\tdestructiveHint: false,\n+\t\tidempotentHint: true,\n+\t\topenWorldHint: false,\n+\t} satisfies ToolAnnotations,\n+} as const\n+\n+export async function registerOpenCalculatorUiTool(agent: MCP) {\n+\tregisterAppTool(\n+\t\tagent.server,\n+\t\topenCalculatorUiTool.name,\n+\t\t{\n+\t\t\ttitle: openCalculatorUiTool.title,\n+\t\t\tdescription: openCalculatorUiTool.description,\n+\t\t\toutputSchema: {\n+\t\t\t\twidget: z\n+\t\t\t\t\t.literal('calculator')\n+\t\t\t\t\t.describe('Identifier for the calculator widget.'),\n+\t\t\t\tresourceUri: z\n+\t\t\t\t\t.literal(calculatorUiResourceUri)\n+\t\t\t\t\t.describe('MCP App resource URI associated with this widget.'),\n+\t\t\t},\n+\t\t\tannotations: openCalculatorUiTool.annotations,\n+\t\t\t_meta: {\n+\t\t\t\tui: {\n+\t\t\t\t\tresourceUri: calculatorUiResourceUri,\n+\t\t\t\t},\n+\t\t\t},\n+\t\t},\n+\t\tasync () => {\n+\t\t\treturn {\n+\t\t\t\tcontent: [\n+\t\t\t\t\t{\n+\t\t\t\t\t\ttype: 'text',\n+\t\t\t\t\t\ttext: `\n+## Calculator widget ready\n+\n+The calculator UI is attached to this tool call.\n+\n+- Use number keys, operators, Enter, and Backspace.\n+- Use **AC** (or keyboard **c**) to reset all state.\n+\t\t\t\t\t\t`.trim(),\n+\t\t\t\t\t},\n+\t\t\t\t],\n+\t\t\t\tstructuredContent: {\n+\t\t\t\t\twidget: 'calculator',\n+\t\t\t\t\tresourceUri: calculatorUiResourceUri,\n+\t\t\t\t},\n+\t\t\t}\n+\t\t},\n+\t)\n+}\ndiff --git a/migrations/0001-init.sql b/migrations/0001-init.sql\nnew file mode 100644\nindex 0000000..5e16485\n--- /dev/null\n+++ b/migrations/0001-init.sql\n@@ -0,0 +1,37 @@\n+CREATE TABLE IF NOT EXISTS users (\n+\tid INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,\n+\tusername TEXT NOT NULL UNIQUE,\n+\temail TEXT NOT NULL UNIQUE,\n+\tpassword_hash TEXT NOT NULL,\n+\tcreated_at TEXT NOT NULL DEFAULT (CURRENT_TIMESTAMP),\n+\tupdated_at TEXT NOT NULL DEFAULT (CURRENT_TIMESTAMP)\n+);\n+\n+CREATE INDEX IF NOT EXISTS idx_users_username ON users(username);\n+CREATE INDEX IF NOT EXISTS idx_users_email ON users(email);\n+\n+CREATE TABLE IF NOT EXISTS password_resets (\n+\tid INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL,\n+\tuser_id INTEGER NOT NULL,\n+\ttoken_hash TEXT NOT NULL UNIQUE,\n+\texpires_at INTEGER NOT NULL,\n+\tcreated_at TEXT NOT NULL DEFAULT (CURRENT_TIMESTAMP),\n+\tFOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE\n+);\n+\n+CREATE INDEX IF NOT EXISTS idx_password_resets_user_id ON password_resets(user_id);\n+CREATE INDEX IF NOT EXISTS idx_password_resets_token_hash ON password_resets(token_hash);\n+\n+CREATE TABLE IF NOT EXISTS mock_resend_messages (\n+\tid TEXT PRIMARY KEY,\n+\ttoken_hash TEXT NOT NULL,\n+\treceived_at INTEGER NOT NULL,\n+\tfrom_email TEXT NOT NULL,\n+\tto_json TEXT NOT NULL,\n+\tsubject TEXT NOT NULL,\n+\thtml TEXT NOT NULL,\n+\tpayload_json TEXT NOT NULL\n+);\n+\n+CREATE INDEX IF NOT EXISTS mock_resend_messages_token_received_at\n+\tON mock_resend_messages(token_hash, received_at DESC);\ndiff --git a/mock-servers/resend/resend-mock.test.ts b/mock-servers/resend/resend-mock.test.ts\nnew file mode 100644\nindex 0000000..d2878b2\n--- /dev/null\n+++ b/mock-servers/resend/resend-mock.test.ts\n@@ -0,0 +1,295 @@\n+import { spawn, type ChildProcess } from 'node:child_process'\n+import { expect, test } from 'vitest'\n+import getPort from 'get-port'\n+import { setTimeout as delay } from 'node:timers/promises'\n+import { createTemporaryDirectory } from '#tools/temp-directory.ts'\n+\n+const workerConfig = 'mock-servers/resend/wrangler.jsonc'\n+const projectRoot = process.cwd()\n+const defaultTimeoutMs = 60_000\n+\n+type ManagedProcess = {\n+\tprocess: ChildProcess\n+\texited: Promise\n+\tstdout: NodeJS.ReadableStream | null\n+\tstderr: NodeJS.ReadableStream | null\n+\tkill: (signal?: NodeJS.Signals) => void\n+}\n+\n+function captureOutput(stream: NodeJS.ReadableStream | null) {\n+\tlet output = ''\n+\tif (!stream) {\n+\t\treturn () => output\n+\t}\n+\n+\tstream.on('data', (chunk) => {\n+\t\toutput += String(chunk)\n+\t})\n+\treturn () => output\n+}\n+\n+function formatOutput(stdout: string, stderr: string) {\n+\tconst snippets: Array = []\n+\tif (stdout.trim()) {\n+\t\tsnippets.push(`stdout: ${stdout.trim().slice(-2000)}`)\n+\t}\n+\tif (stderr.trim()) {\n+\t\tsnippets.push(`stderr: ${stderr.trim().slice(-2000)}`)\n+\t}\n+\treturn snippets.length > 0 ? ` Output:\\n${snippets.join('\\n')}` : ''\n+}\n+\n+async function waitForMockServer(\n+\torigin: string,\n+\tproc: ManagedProcess,\n+\tgetStdout: () => string,\n+\tgetStderr: () => string,\n+) {\n+\tlet exited = false\n+\tlet exitCode: number | null = null\n+\tvoid proc.exited\n+\t\t.then((code) => {\n+\t\t\texited = true\n+\t\t\texitCode = code\n+\t\t})\n+\t\t.catch(() => {\n+\t\t\texited = true\n+\t\t})\n+\n+\tconst metaUrl = new URL('/__mocks/meta', origin)\n+\tconst deadline = Date.now() + 25_000\n+\twhile (Date.now() < deadline) {\n+\t\tif (exited) {\n+\t\t\tthrow new Error(\n+\t\t\t\t`wrangler dev exited (${exitCode ?? 'unknown'}).${formatOutput(\n+\t\t\t\t\tgetStdout(),\n+\t\t\t\t\tgetStderr(),\n+\t\t\t\t)}`,\n+\t\t\t)\n+\t\t}\n+\t\ttry {\n+\t\t\tconst response = await fetch(metaUrl)\n+\t\t\tif (response.ok) {\n+\t\t\t\tawait response.body?.cancel()\n+\t\t\t\treturn\n+\t\t\t}\n+\t\t} catch {\n+\t\t\t// Retry until the server is ready.\n+\t\t}\n+\t\tawait delay(250)\n+\t}\n+\n+\tthrow new Error(\n+\t\t`Timed out waiting for mock server at ${origin}.${formatOutput(\n+\t\t\tgetStdout(),\n+\t\t\tgetStderr(),\n+\t\t)}`,\n+\t)\n+}\n+\n+async function stopProcess(proc: ManagedProcess) {\n+\tlet exited = false\n+\tvoid proc.exited.then(() => {\n+\t\texited = true\n+\t})\n+\tproc.kill('SIGINT')\n+\tawait Promise.race([proc.exited, delay(5_000)])\n+\tif (!exited) {\n+\t\tproc.kill('SIGKILL')\n+\t\tawait proc.exited\n+\t}\n+}\n+\n+async function startMockResendWorker(persistDir: string, token: string) {\n+\tconst port = await getPort({ host: '127.0.0.1' })\n+\tconst inspectorPortBase =\n+\t\tport + 10_000 <= 65_535 ? port + 10_000 : Math.max(1, port - 10_000)\n+\tconst inspectorPort = await getPort({\n+\t\thost: '127.0.0.1',\n+\t\tport: Array.from(\n+\t\t\t{ length: 10 },\n+\t\t\t(_, index) => inspectorPortBase + index,\n+\t\t).filter((candidate) => candidate > 0 && candidate <= 65_535),\n+\t})\n+\tconst origin = `http://127.0.0.1:${port}`\n+\tconst processHandle = createProcess([\n+\t\tprocess.execPath,\n+\t\t'./wrangler-env.ts',\n+\t\t'dev',\n+\t\t'--local',\n+\t\t'--env',\n+\t\t'test',\n+\t\t'--config',\n+\t\tworkerConfig,\n+\t\t'--var',\n+\t\t`MOCK_API_TOKEN:${token}`,\n+\t\t'--port',\n+\t\tString(port),\n+\t\t'--inspector-port',\n+\t\tString(inspectorPort),\n+\t\t'--ip',\n+\t\t'127.0.0.1',\n+\t\t'--persist-to',\n+\t\tpersistDir,\n+\t\t'--show-interactive-dev-session=false',\n+\t\t'--log-level',\n+\t\t'error',\n+\t])\n+\n+\tconst getStdout = captureOutput(processHandle.stdout)\n+\tconst getStderr = captureOutput(processHandle.stderr)\n+\n+\tawait waitForMockServer(origin, processHandle, getStdout, getStderr)\n+\n+\treturn {\n+\t\torigin,\n+\t\t[Symbol.asyncDispose]: async () => {\n+\t\t\tawait stopProcess(processHandle)\n+\t\t},\n+\t}\n+}\n+\n+function createProcess(args: Array): ManagedProcess {\n+\tconst child = spawn(args[0]!, args.slice(1), {\n+\t\tcwd: projectRoot,\n+\t\tstdio: ['ignore', 'pipe', 'pipe'],\n+\t\tenv: {\n+\t\t\t...process.env,\n+\t\t\tCLOUDFLARE_ENV: 'test',\n+\t\t},\n+\t})\n+\tconst exited = new Promise((resolve, reject) => {\n+\t\tchild.once('error', reject)\n+\t\tchild.once('exit', (code) => resolve(code ?? 1))\n+\t})\n+\treturn {\n+\t\tprocess: child,\n+\t\texited,\n+\t\tstdout: child.stdout,\n+\t\tstderr: child.stderr,\n+\t\tkill: (signal) => {\n+\t\t\tchild.kill(signal)\n+\t\t},\n+\t}\n+}\n+\n+test(\n+\t'resend mock stores messages in D1 and exposes a count',\n+\tasync () => {\n+\t\tawait using tempDir = await createTemporaryDirectory('resend-mock-d1-')\n+\t\tconst token = 'test-mock-token'\n+\t\tawait using server = await startMockResendWorker(tempDir.path, token)\n+\n+\t\tconst email = {\n+\t\t\tto: 'alex@example.com',\n+\t\t\tfrom: 'no-reply@example.com',\n+\t\t\tsubject: 'Reset your password',\n+\t\t\thtml: '

Reset link

',\n+\t\t}\n+\n+\t\tconst createResp = await fetch(new URL('/emails', server.origin), {\n+\t\t\tmethod: 'POST',\n+\t\t\theaders: {\n+\t\t\t\tauthorization: `Bearer ${token}`,\n+\t\t\t\t'content-type': 'application/json',\n+\t\t\t},\n+\t\t\tbody: JSON.stringify(email),\n+\t\t})\n+\t\texpect(createResp.status).toBe(200)\n+\t\tconst createJson = (await createResp.json()) as { id?: string }\n+\t\texpect(typeof createJson.id).toBe('string')\n+\n+\t\tconst metaResp = await fetch(new URL('/__mocks/meta', server.origin), {\n+\t\t\theaders: { authorization: `Bearer ${token}` },\n+\t\t})\n+\t\texpect(metaResp.status).toBe(200)\n+\t\tconst metaJson = (await metaResp.json()) as {\n+\t\t\tauthorized: boolean\n+\t\t\tmessageCount?: number\n+\t\t}\n+\t\texpect(metaJson.authorized).toBe(true)\n+\t\texpect(metaJson.messageCount).toBe(1)\n+\n+\t\tconst listUrl = new URL('/__mocks/messages', server.origin)\n+\t\tlistUrl.searchParams.set('limit', '10')\n+\t\tconst listResp = await fetch(listUrl, {\n+\t\t\theaders: { authorization: `Bearer ${token}` },\n+\t\t})\n+\t\texpect(listResp.status).toBe(200)\n+\t\tconst listJson = (await listResp.json()) as {\n+\t\t\tcount: number\n+\t\t\tmessages: Array<{\n+\t\t\t\tid: string\n+\t\t\t\treceived_at: number\n+\t\t\t\tfrom_email: string\n+\t\t\t\tto_json: string\n+\t\t\t\tsubject: string\n+\t\t\t\thtml: string\n+\t\t\t\tpayload_json: string\n+\t\t\t}>\n+\t\t}\n+\t\texpect(listJson.count).toBe(1)\n+\t\texpect(listJson.messages[0]?.subject).toBe(email.subject)\n+\t\texpect(listJson.messages[0]?.from_email).toBe(email.from)\n+\t\texpect(JSON.parse(listJson.messages[0]?.to_json ?? 'null')).toEqual(\n+\t\t\temail.to,\n+\t\t)\n+\t\texpect(listJson.messages[0]?.html).toBe(email.html)\n+\t\texpect(JSON.parse(listJson.messages[0]?.payload_json ?? 'null')).toEqual(\n+\t\t\temail,\n+\t\t)\n+\t},\n+\tdefaultTimeoutMs,\n+)\n+\n+test(\n+\t'resend mock rejects unauthenticated requests when a token is configured',\n+\tasync () => {\n+\t\tawait using tempDir = await createTemporaryDirectory('resend-mock-auth-')\n+\t\tconst token = 'test-mock-token'\n+\t\tawait using server = await startMockResendWorker(tempDir.path, token)\n+\n+\t\tconst createResp = await fetch(new URL('/emails', server.origin), {\n+\t\t\tmethod: 'POST',\n+\t\t\theaders: { 'content-type': 'application/json' },\n+\t\t\tbody: JSON.stringify({\n+\t\t\t\tto: 'alex@example.com',\n+\t\t\t\tfrom: 'no-reply@example.com',\n+\t\t\t\tsubject: 'hello',\n+\t\t\t\thtml: '

',\n+\t\t\t}),\n+\t\t})\n+\t\texpect(createResp.status).toBe(401)\n+\t},\n+\tdefaultTimeoutMs,\n+)\n+\n+test(\n+\t'resend mock dashboard keeps token in endpoint links',\n+\tasync () => {\n+\t\tawait using tempDir = await createTemporaryDirectory(\n+\t\t\t'resend-mock-dashboard-',\n+\t\t)\n+\t\tconst token = 'test-mock-token'\n+\t\tawait using server = await startMockResendWorker(tempDir.path, token)\n+\n+\t\tconst rootUrl = new URL('/', server.origin)\n+\t\trootUrl.searchParams.set('token', token)\n+\t\tconst rootResp = await fetch(rootUrl, { redirect: 'manual' })\n+\t\texpect(rootResp.status).toBe(302)\n+\t\tconst expectedRedirectUrl = new URL('/__mocks', server.origin)\n+\t\texpectedRedirectUrl.searchParams.set('token', token)\n+\t\texpect(rootResp.headers.get('location')).toBe(\n+\t\t\texpectedRedirectUrl.toString(),\n+\t\t)\n+\n+\t\tconst dashboardUrl = new URL('/__mocks', server.origin)\n+\t\tdashboardUrl.searchParams.set('token', token)\n+\t\tconst dashboardResp = await fetch(dashboardUrl)\n+\t\texpect(dashboardResp.status).toBe(200)\n+\t\tconst dashboardHtml = await dashboardResp.text()\n+\t\texpect(dashboardHtml).toContain(`href=\"/__mocks/meta?token=${token}\"`)\n+\t\texpect(dashboardHtml).toContain(`href=\"/__mocks/messages?token=${token}\"`)\n+\t},\n+\tdefaultTimeoutMs,\n+)\ndiff --git a/mock-servers/resend/worker.ts b/mock-servers/resend/worker.ts\nnew file mode 100644\nindex 0000000..83c8825\n--- /dev/null\n+++ b/mock-servers/resend/worker.ts\n@@ -0,0 +1,498 @@\n+import { parseSafe } from 'remix/data-schema'\n+import { resendEmailSchema } from '#shared/resend-email.ts'\n+import { createDb, mockResendMessagesTable } from '#worker/db.ts'\n+\n+type MockResendEnv = {\n+\tAPP_DB: D1Database\n+\tMOCK_API_TOKEN?: string\n+}\n+\n+type DashboardEndpoint = {\n+\tmethod: string\n+\tpath: string\n+\tdescription: string\n+\trequiresAuth: boolean\n+}\n+\n+const dashboardEndpoints: Array = [\n+\t{\n+\t\tmethod: 'POST',\n+\t\tpath: '/emails',\n+\t\tdescription: 'Create an email message (Resend API compatible)',\n+\t\trequiresAuth: true,\n+\t},\n+\t{\n+\t\tmethod: 'GET',\n+\t\tpath: '/__mocks',\n+\t\tdescription: 'Mock dashboard (HTML)',\n+\t\trequiresAuth: false,\n+\t},\n+\t{\n+\t\tmethod: 'GET',\n+\t\tpath: '/__mocks/meta',\n+\t\tdescription: 'Mock metadata (JSON)',\n+\t\trequiresAuth: false,\n+\t},\n+\t{\n+\t\tmethod: 'GET',\n+\t\tpath: '/__mocks/messages',\n+\t\tdescription: 'List stored messages (JSON)',\n+\t\trequiresAuth: true,\n+\t},\n+\t{\n+\t\tmethod: 'POST',\n+\t\tpath: '/__mocks/clear',\n+\t\tdescription: 'Delete stored messages for this token (JSON)',\n+\t\trequiresAuth: true,\n+\t},\n+]\n+\n+let schemaReady: Promise | null = null\n+\n+function htmlEscape(value: string) {\n+\treturn value\n+\t\t.replaceAll('&', '&')\n+\t\t.replaceAll('<', '<')\n+\t\t.replaceAll('>', '>')\n+\t\t.replaceAll('\"', '"')\n+\t\t.replaceAll(\"'\", ''')\n+}\n+\n+function withTokenQueryParam(baseUrl: URL, href: string, token: string | null) {\n+\tif (!token) return href\n+\tconst next = new URL(href, baseUrl)\n+\tnext.searchParams.set('token', token)\n+\treturn `${next.pathname}${next.search}${next.hash}`\n+}\n+\n+function json(data: unknown, init: ResponseInit = {}) {\n+\tconst headers = new Headers(init.headers)\n+\tif (!headers.has('content-type')) {\n+\t\theaders.set('content-type', 'application/json; charset=utf-8')\n+\t}\n+\treturn new Response(JSON.stringify(data, null, 2), { ...init, headers })\n+}\n+\n+function parseBearerToken(headerValue: string | null) {\n+\tif (!headerValue) return null\n+\tconst match = headerValue.match(/^Bearer\\s+(.+)\\s*$/i)\n+\treturn match?.[1]?.trim() || null\n+}\n+\n+function getCookieValue(cookieHeader: string | null, name: string) {\n+\tif (!cookieHeader) return null\n+\tfor (const part of cookieHeader.split(';')) {\n+\t\tconst [rawKey, ...rest] = part.trim().split('=')\n+\t\tif (!rawKey) continue\n+\t\tif (rawKey !== name) continue\n+\t\treturn rest.join('=')\n+\t}\n+\treturn null\n+}\n+\n+function readAuthToken(request: Request, url: URL) {\n+\tconst bearer = parseBearerToken(request.headers.get('authorization'))\n+\tif (bearer) return bearer\n+\n+\tconst headerToken = request.headers.get('x-mock-token')?.trim()\n+\tif (headerToken) return headerToken\n+\n+\tconst urlToken = url.searchParams.get('token')?.trim()\n+\tif (urlToken) return urlToken\n+\n+\tconst cookieToken = getCookieValue(\n+\t\trequest.headers.get('cookie'),\n+\t\t'mock_token',\n+\t)\n+\tif (cookieToken) return cookieToken\n+\n+\treturn null\n+}\n+\n+function isAuthorized(request: Request, env: MockResendEnv, url: URL) {\n+\tconst expected = env.MOCK_API_TOKEN?.trim() ?? ''\n+\tif (!expected) return true\n+\tconst provided = readAuthToken(request, url)\n+\treturn Boolean(provided && provided === expected)\n+}\n+\n+async function sha256Hex(value: string) {\n+\tconst data = new TextEncoder().encode(value)\n+\tconst digest = await crypto.subtle.digest('SHA-256', data)\n+\treturn Array.from(new Uint8Array(digest))\n+\t\t.map((byte) => byte.toString(16).padStart(2, '0'))\n+\t\t.join('')\n+}\n+\n+function getTokenPartition(env: MockResendEnv) {\n+\tconst expected = env.MOCK_API_TOKEN?.trim() ?? ''\n+\treturn expected ? sha256Hex(expected) : Promise.resolve('public')\n+}\n+\n+type MockResendDb = ReturnType\n+\n+async function ensureSchema(db: MockResendDb) {\n+\tif (!schemaReady) {\n+\t\tschemaReady = (async () => {\n+\t\t\tawait db.exec(`CREATE TABLE IF NOT EXISTS mock_resend_messages (\n+\t\t\t\tid TEXT PRIMARY KEY,\n+\t\t\t\ttoken_hash TEXT NOT NULL,\n+\t\t\t\treceived_at INTEGER NOT NULL,\n+\t\t\t\tfrom_email TEXT NOT NULL,\n+\t\t\t\tto_json TEXT NOT NULL,\n+\t\t\t\tsubject TEXT NOT NULL,\n+\t\t\t\thtml TEXT NOT NULL,\n+\t\t\t\tpayload_json TEXT NOT NULL\n+\t\t\t)`)\n+\t\t\tawait db.exec(`CREATE INDEX IF NOT EXISTS mock_resend_messages_token_received_at\n+\t\t\t\tON mock_resend_messages(token_hash, received_at DESC)`)\n+\t\t})().catch((error) => {\n+\t\t\tschemaReady = null\n+\t\t\tthrow error\n+\t\t})\n+\t}\n+\tawait schemaReady\n+}\n+\n+async function readJsonBody(request: Request) {\n+\ttry {\n+\t\treturn await request.json()\n+\t} catch {\n+\t\treturn null\n+\t}\n+}\n+\n+async function countMessages(db: MockResendDb, tokenHash: string) {\n+\tawait ensureSchema(db)\n+\treturn db.count(mockResendMessagesTable, {\n+\t\twhere: { token_hash: tokenHash },\n+\t})\n+}\n+\n+async function listMessages(\n+\tdb: MockResendDb,\n+\ttokenHash: string,\n+\tlimit: number,\n+) {\n+\tawait ensureSchema(db)\n+\treturn db.findMany(mockResendMessagesTable, {\n+\t\twhere: { token_hash: tokenHash },\n+\t\torderBy: ['received_at', 'desc'],\n+\t\tlimit,\n+\t})\n+}\n+\n+async function getMessage(db: MockResendDb, tokenHash: string, id: string) {\n+\tawait ensureSchema(db)\n+\treturn db.findOne(mockResendMessagesTable, {\n+\t\twhere: { token_hash: tokenHash, id },\n+\t})\n+}\n+\n+async function clearMessages(db: MockResendDb, tokenHash: string) {\n+\tawait ensureSchema(db)\n+\tawait db.deleteMany(mockResendMessagesTable, {\n+\t\twhere: { token_hash: tokenHash },\n+\t})\n+}\n+\n+async function handlePostEmails(\n+\trequest: Request,\n+\tenv: MockResendEnv,\n+\turl: URL,\n+) {\n+\tif (!isAuthorized(request, env, url)) {\n+\t\treturn json({ error: 'Unauthorized' }, { status: 401 })\n+\t}\n+\n+\tconst db = createDb(env.APP_DB)\n+\tconst body = await readJsonBody(request)\n+\tconst parsed = parseSafe(resendEmailSchema, body)\n+\tif (!parsed.success) {\n+\t\treturn json({ error: 'Invalid email payload.' }, { status: 400 })\n+\t}\n+\n+\tawait ensureSchema(db)\n+\tconst tokenHash = await getTokenPartition(env)\n+\tconst now = Date.now()\n+\tconst id = `email_${crypto.randomUUID()}`\n+\tconst payloadJson = JSON.stringify(parsed.value)\n+\n+\tawait db.create(mockResendMessagesTable, {\n+\t\tid,\n+\t\ttoken_hash: tokenHash,\n+\t\treceived_at: now,\n+\t\tfrom_email: parsed.value.from,\n+\t\tto_json: JSON.stringify(parsed.value.to),\n+\t\tsubject: parsed.value.subject,\n+\t\thtml: parsed.value.html,\n+\t\tpayload_json: payloadJson,\n+\t})\n+\n+\t// Mirror Resend's happy-path shape.\n+\treturn json({ id }, { status: 200 })\n+}\n+\n+async function handleGetMeta(request: Request, env: MockResendEnv, url: URL) {\n+\tconst authorized = isAuthorized(request, env, url)\n+\tconst tokenHash = authorized ? await getTokenPartition(env) : null\n+\tconst db = createDb(env.APP_DB)\n+\n+\treturn json({\n+\t\tservice: 'resend',\n+\t\tauthorized,\n+\t\tendpoints: dashboardEndpoints,\n+\t\t...(tokenHash\n+\t\t\t? {\n+\t\t\t\t\tmessageCount: await countMessages(db, tokenHash),\n+\t\t\t\t}\n+\t\t\t: {}),\n+\t})\n+}\n+\n+async function handleGetMessages(\n+\trequest: Request,\n+\tenv: MockResendEnv,\n+\turl: URL,\n+) {\n+\tif (!isAuthorized(request, env, url)) {\n+\t\treturn json({ error: 'Unauthorized' }, { status: 401 })\n+\t}\n+\tconst db = createDb(env.APP_DB)\n+\tconst tokenHash = await getTokenPartition(env)\n+\tconst messageId = url.pathname.startsWith('/__mocks/messages/')\n+\t\t? url.pathname.slice('/__mocks/messages/'.length).trim()\n+\t\t: ''\n+\tif (messageId) {\n+\t\tconst message = await getMessage(db, tokenHash, messageId)\n+\t\tif (!message) {\n+\t\t\treturn json({ error: 'Not Found' }, { status: 404 })\n+\t\t}\n+\t\treturn json({ message })\n+\t}\n+\tconst limitParam = url.searchParams.get('limit')?.trim() ?? ''\n+\tconst limit = Math.min(\n+\t\t100,\n+\t\tMath.max(1, Number.parseInt(limitParam || '50', 10)),\n+\t)\n+\n+\tconst messages = await listMessages(db, tokenHash, limit)\n+\treturn json({ count: messages.length, messages })\n+}\n+\n+async function handleClear(request: Request, env: MockResendEnv, url: URL) {\n+\tif (!isAuthorized(request, env, url)) {\n+\t\treturn json({ error: 'Unauthorized' }, { status: 401 })\n+\t}\n+\tconst db = createDb(env.APP_DB)\n+\tconst tokenHash = await getTokenPartition(env)\n+\tawait clearMessages(db, tokenHash)\n+\treturn json({ ok: true })\n+}\n+\n+async function handleDashboard(request: Request, env: MockResendEnv, url: URL) {\n+\tconst meta = (await handleGetMeta(request, env, url).then((res) =>\n+\t\tres.json(),\n+\t)) as {\n+\t\tauthorized: boolean\n+\t\tmessageCount?: number\n+\t}\n+\n+\tconst tokenParam = url.searchParams.get('token')\n+\tconst dashboardToken = tokenParam?.trim() ? tokenParam.trim() : null\n+\n+\tconst tokenHint = env.MOCK_API_TOKEN?.trim()\n+\t\t? 'This mock requires a token (Authorization: Bearer ... or ?token=...).'\n+\t\t: 'No token is configured; mock endpoints are open.'\n+\n+\tconst endpointRows = dashboardEndpoints\n+\t\t.map((endpoint) => {\n+\t\t\tconst authBadge = endpoint.requiresAuth\n+\t\t\t\t? 'auth'\n+\t\t\t\t: 'public'\n+\t\t\tconst endpointHref = withTokenQueryParam(\n+\t\t\t\turl,\n+\t\t\t\tendpoint.path,\n+\t\t\t\tdashboardToken,\n+\t\t\t)\n+\t\t\tconst pathCell =\n+\t\t\t\tendpoint.method === 'GET'\n+\t\t\t\t\t? `${htmlEscape(endpoint.path)}`\n+\t\t\t\t\t: `${htmlEscape(endpoint.path)}`\n+\t\t\treturn `\n+\t\t\t\t${htmlEscape(endpoint.method)}\n+\t\t\t\t${pathCell}\n+\t\t\t\t${authBadge}\n+\t\t\t\t${htmlEscape(endpoint.description)}\n+\t\t\t`\n+\t\t})\n+\t\t.join('')\n+\n+\tconst messageCountLine = meta.authorized\n+\t\t? `${meta.messageCount ?? 0}`\n+\t\t: `hidden`\n+\n+\tconst body = `\n+\n+\t\n+\t\t\n+\t\t\n+\t\tMock: Resend\n+\t\t\n+\t\n+\t\n+\t\t

\n+\t\t\t

Mock: Resend

\n+\t\t\t

${htmlEscape(tokenHint)}

\n+\t\t\t

\n+\t\t\t\t

\n+\t\t\t\t\t

Auth

\n+\t\t\t\t\t

${meta.authorized ? 'authorized' : 'unauthorized'}

\n+\t\t\t\t

\n+\t\t\t\t\t

Stored messages

\n+\t\t\t\t\t

${messageCountLine}

\n+\t\t\t\t

\n+\t\t\t

\n+\t\t\t\t

Endpoints

\n+\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\t\n+\t\t\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\n+\t\t\t\t\t\t${endpointRows}\n+\t\t\t\t\t\n+\t\t\t\t

Method	Path	Access	Description

\n+\t\t\t\t\n+\t\t\t

\n+\t\t

\n+\t\n+`\n+\n+\treturn new Response(body, {\n+\t\tstatus: 200,\n+\t\theaders: { 'content-type': 'text/html; charset=utf-8' },\n+\t})\n+}\n+\n+export default {\n+\tasync fetch(request: Request, env: MockResendEnv, ctx: ExecutionContext) {\n+\t\tvoid ctx\n+\t\tconst url = new URL(request.url)\n+\n+\t\tif (request.method === 'GET' && url.pathname === '/') {\n+\t\t\tconst destination = new URL('/__mocks', url)\n+\t\t\tdestination.search = url.search\n+\t\t\treturn Response.redirect(destination.toString(), 302)\n+\t\t}\n+\n+\t\tif (request.method === 'POST' && url.pathname === '/emails') {\n+\t\t\treturn handlePostEmails(request, env, url)\n+\t\t}\n+\n+\t\tif (request.method === 'GET' && url.pathname === '/__mocks') {\n+\t\t\treturn handleDashboard(request, env, url)\n+\t\t}\n+\n+\t\tif (request.method === 'GET' && url.pathname === '/__mocks/meta') {\n+\t\t\treturn handleGetMeta(request, env, url)\n+\t\t}\n+\n+\t\tif (request.method === 'GET' && url.pathname === '/__mocks/messages') {\n+\t\t\treturn handleGetMessages(request, env, url)\n+\t\t}\n+\n+\t\tif (\n+\t\t\trequest.method === 'GET' &&\n+\t\t\turl.pathname.startsWith('/__mocks/messages/')\n+\t\t) {\n+\t\t\treturn handleGetMessages(request, env, url)\n+\t\t}\n+\n+\t\tif (request.method === 'POST' && url.pathname === '/__mocks/clear') {\n+\t\t\treturn handleClear(request, env, url)\n+\t\t}\n+\n+\t\treturn new Response('Not Found', { status: 404 })\n+\t},\n+} satisfies ExportedHandler\ndiff --git a/mock-servers/resend/wrangler.jsonc b/mock-servers/resend/wrangler.jsonc\nnew file mode 100644\nindex 0000000..024c7a7\n--- /dev/null\n+++ b/mock-servers/resend/wrangler.jsonc\n@@ -0,0 +1,41 @@\n+{\n+\t\"$schema\": \"../../node_modules/wrangler/config-schema.json\",\n+\t\"name\": \"epic-scheduler-mock-resend\",\n+\t\"compatibility_date\": \"2026-01-31\",\n+\t\"compatibility_flags\": [\"nodejs_compat\", \"global_fetch_strictly_public\"],\n+\t\"main\": \"./worker.ts\",\n+\t\"preview_urls\": true,\n+\t\"observability\": { \"enabled\": true },\n+\t\"env\": {\n+\t\t\"production\": {\n+\t\t\t\"d1_databases\": [\n+\t\t\t\t{\n+\t\t\t\t\t\"binding\": \"APP_DB\",\n+\t\t\t\t\t\"database_name\": \"epic-scheduler\",\n+\t\t\t\t\t\"database_id\": \"c64eb497-a93d-4af4-bfb7-62beda9552b6\",\n+\t\t\t\t\t\"migrations_dir\": \"../../migrations\",\n+\t\t\t\t},\n+\t\t\t],\n+\t\t},\n+\t\t\"preview\": {\n+\t\t\t\"d1_databases\": [\n+\t\t\t\t{\n+\t\t\t\t\t\"binding\": \"APP_DB\",\n+\t\t\t\t\t\"database_name\": \"epic-scheduler-preview\",\n+\t\t\t\t\t\"database_id\": \"0e2f1e31-b7c4-42bc-8133-04627230a25f\",\n+\t\t\t\t\t\"migrations_dir\": \"../../migrations\",\n+\t\t\t\t},\n+\t\t\t],\n+\t\t},\n+\t\t\"test\": {\n+\t\t\t\"d1_databases\": [\n+\t\t\t\t{\n+\t\t\t\t\t\"binding\": \"APP_DB\",\n+\t\t\t\t\t\"database_name\": \"epic-scheduler-preview\",\n+\t\t\t\t\t\"database_id\": \"0e2f1e31-b7c4-42bc-8133-04627230a25f\",\n+\t\t\t\t\t\"migrations_dir\": \"../../migrations\",\n+\t\t\t\t},\n+\t\t\t],\n+\t\t},\n+\t},\n+}\ndiff --git a/playwright.config.ts b/playwright.config.ts\nnew file mode 100644\nindex 0000000..1e02178\n--- /dev/null\n+++ b/playwright.config.ts\n@@ -0,0 +1,35 @@\n+import { defineConfig, devices } from '@playwright/test'\n+\n+const playwrightPort = process.env.PLAYWRIGHT_PORT ?? '8788'\n+const baseURL =\n+\tprocess.env.PLAYWRIGHT_BASE_URL ?? `http://localhost:${playwrightPort}`\n+\n+export default defineConfig({\n+\ttestDir: './e2e',\n+\tfullyParallel: true,\n+\tforbidOnly: !!process.env.CI,\n+\tretries: process.env.CI ? 2 : 0,\n+\tworkers: process.env.CI ? 1 : undefined,\n+\treporter: process.env.CI ? 'github' : 'list',\n+\tuse: {\n+\t\tbaseURL,\n+\t\ttrace: 'on-first-retry',\n+\t},\n+\twebServer: {\n+\t\tcommand: 'npm run build:client && npm run preview:e2e',\n+\t\turl: baseURL,\n+\t\treuseExistingServer: true,\n+\t\tenv: {\n+\t\t\tCLOUDFLARE_ENV: 'test',\n+\t\t\tPORT: playwrightPort,\n+\t\t\tWRANGLER_LOG_PATH: './logs.local',\n+\t\t\tWRANGLER_DISABLE_REQUEST_BODY_DRAINING: 'true',\n+\t\t},\n+\t},\n+\tprojects: [\n+\t\t{\n+\t\t\tname: 'chromium',\n+\t\t\tuse: { ...devices['Desktop Chrome'] },\n+\t\t},\n+\t],\n+})\ndiff --git a/public/android-chrome-192x192.png b/public/android-chrome-192x192.png\nnew file mode 100644\nindex 0000000..1a6b077\nBinary files /dev/null and b/public/android-chrome-192x192.png differ\ndiff --git a/public/android-chrome-512x512.png b/public/android-chrome-512x512.png\nnew file mode 100644\nindex 0000000..c5a5850\nBinary files /dev/null and b/public/android-chrome-512x512.png differ\ndiff --git a/public/apple-touch-icon.png b/public/apple-touch-icon.png\nnew file mode 100644\nindex 0000000..efe263a\nBinary files /dev/null and b/public/apple-touch-icon.png differ\ndiff --git a/public/dev/calculator-widget-test.html b/public/dev/calculator-widget-test.html\nnew file mode 100644\nindex 0000000..39842ca\n--- /dev/null\n+++ b/public/dev/calculator-widget-test.html\n@@ -0,0 +1,229 @@\n+\n+\n+\t\n+\t\t\n+\t\t\n+\t\tCalculator Widget Test (iframe)\n+\t\t\n+\t\n+\t\n+\t\t

Calculator Widget Test

\n+\t\t

\n+\t\t\t

\n+\t\t\t\t

Default iframe

\n+\t\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t

Host chat (default iframe)

\n+\t\t\t\t\t

\n+\t\t\t\t

\n+\t\t\t

\n+\t\t\t\t

Sandboxed iframe (MCP host style)

\n+\t\t\t\t

\n+\t\t\t\t\tUses sandbox=\"allow-scripts\" to match ChatGPT/MCP Jam\n+\t\t\t\t\twidget restrictions.\n+\t\t\t\t

\n+\t\t\t\t\n+\t\t\t\t

\n+\t\t\t\t\t

Host chat (sandboxed iframe)

\n+\t\t\t\t\t

\n+\t\t\t\t

\n+\t\t\t

\n+\t\t

\n+\t\t\n+\t\n+\ndiff --git a/public/favicon-16x16.png b/public/favicon-16x16.png\nnew file mode 100644\nindex 0000000..92a04bb\nBinary files /dev/null and b/public/favicon-16x16.png differ\ndiff --git a/public/favicon-32x32.png b/public/favicon-32x32.png\nnew file mode 100644\nindex 0000000..1bb929d\nBinary files /dev/null and b/public/favicon-32x32.png differ\ndiff --git a/public/favicon.ico b/public/favicon.ico\nnew file mode 100644\nindex 0000000..919b471\nBinary files /dev/null and b/public/favicon.ico differ\ndiff --git a/public/logo.png b/public/logo.png\nnew file mode 100644\nindex 0000000..9c39f85\nBinary files /dev/null and b/public/logo.png differ\ndiff --git a/public/mark.png b/public/mark.png\nnew file mode 100644\nindex 0000000..5e8120c\nBinary files /dev/null and b/public/mark.png differ\ndiff --git a/public/site.webmanifest b/public/site.webmanifest\nnew file mode 100644\nindex 0000000..58ca4fb\n--- /dev/null\n+++ b/public/site.webmanifest\n@@ -0,0 +1,19 @@\n+{\n+\t\"name\": \"epic-scheduler\",\n+\t\"short_name\": \"epic-scheduler\",\n+\t\"icons\": [\n+\t\t{\n+\t\t\t\"src\": \"/android-chrome-192x192.png\",\n+\t\t\t\"sizes\": \"192x192\",\n+\t\t\t\"type\": \"image/png\"\n+\t\t},\n+\t\t{\n+\t\t\t\"src\": \"/android-chrome-512x512.png\",\n+\t\t\t\"sizes\": \"512x512\",\n+\t\t\t\"type\": \"image/png\"\n+\t\t}\n+\t],\n+\t\"theme_color\": \"#f47c00\",\n+\t\"background_color\": \"#ffffff\",\n+\t\"display\": \"standalone\"\n+}\ndiff --git a/public/styles.css b/public/styles.css\nnew file mode 100644\nindex 0000000..7c707ce\n--- /dev/null\n+++ b/public/styles.css\n@@ -0,0 +1,187 @@\n+:root {\n+\tcolor-scheme: light dark;\n+\n+\t/* Colors - Light mode (epic-scheduler ember) */\n+\t--color-primary: #f47c00;\n+\t--color-primary-hover: #e26c00;\n+\t--color-primary-active: #c85a00;\n+\t--color-on-primary: #120b08;\n+\t--color-primary-text: #b04700;\n+\t--color-background: #f6f6f8;\n+\t--color-surface: #ececf1;\n+\t--color-text: #2f2f34;\n+\t--color-text-muted: #676770;\n+\t--color-border: #d7d7df;\n+\n+\t/* Colors - Dark mode (smoldering ember) */\n+\t--color-primary-dark: #f6a23a;\n+\t--color-primary-hover-dark: #f08b1a;\n+\t--color-primary-active-dark: #d87305;\n+\t--color-on-primary-dark: #120b08;\n+\t--color-primary-text-dark: #f6a23a;\n+\t--color-background-dark: #121216;\n+\t--color-surface-dark: #1c1c22;\n+\t--color-text-dark: #f1f1f5;\n+\t--color-text-muted-dark: #b3b3bd;\n+\t--color-border-dark: #2b2b33;\n+\n+\t/* Typography */\n+\t--font-family: system-ui, sans-serif;\n+\t--font-size-xs: 0.75rem;\n+\t--font-size-sm: 0.875rem;\n+\t--font-size-base: 1rem;\n+\t--font-size-lg: 1.25rem;\n+\t--font-size-xl: 2rem;\n+\t--font-size-2xl: 3rem;\n+\t--font-weight-normal: 400;\n+\t--font-weight-medium: 500;\n+\t--font-weight-semibold: 600;\n+\t--font-weight-bold: 700;\n+\n+\t/* Spacing */\n+\t--spacing-xs: 0.25rem;\n+\t--spacing-sm: 0.5rem;\n+\t--spacing-md: 1rem;\n+\t--spacing-lg: 1.5rem;\n+\t--spacing-xl: 2rem;\n+\t--spacing-2xl: 3rem;\n+\n+\t/* Border radius */\n+\t--radius-sm: 0.25rem;\n+\t--radius-md: 0.5rem;\n+\t--radius-lg: 0.75rem;\n+\t--radius-xl: 1rem;\n+\t--radius-full: 999px;\n+\n+\t/* Shadows */\n+\t--shadow-sm: 0 1px 2px 0 rgb(0 0 0 / 0.05);\n+\t--shadow-md: 0 4px 6px -1px rgb(0 0 0 / 0.1), 0 2px 4px -2px rgb(0 0 0 / 0.1);\n+\t--shadow-lg:\n+\t\t0 10px 15px -3px rgb(0 0 0 / 0.1), 0 4px 6px -4px rgb(0 0 0 / 0.1);\n+\t--shadow-sm-dark: 0 1px 2px 0 rgb(255 255 255 / 0.05);\n+\t--shadow-md-dark:\n+\t\t0 4px 6px -1px rgb(255 255 255 / 0.08),\n+\t\t0 2px 4px -2px rgb(255 255 255 / 0.08);\n+\t--shadow-lg-dark:\n+\t\t0 10px 15px -3px rgb(255 255 255 / 0.1),\n+\t\t0 4px 6px -4px rgb(255 255 255 / 0.1);\n+\n+\t/* Transitions */\n+\t--transition-fast: 0.15s ease;\n+\t--transition-normal: 0.2s ease;\n+\n+\t/* Responsive spacing - used for page-level padding */\n+\t--spacing-page: var(--spacing-2xl);\n+\t--spacing-section: var(--spacing-xl);\n+\t--spacing-header: var(--spacing-xl);\n+}\n+\n+/* Tablet responsive overrides */\n+@media (max-width: 1024px) {\n+\t:root {\n+\t\t--spacing-page: var(--spacing-xl);\n+\t\t--spacing-section: var(--spacing-lg);\n+\t\t--spacing-header: var(--spacing-lg);\n+\t}\n+}\n+\n+/* Mobile responsive overrides */\n+@media (max-width: 640px) {\n+\t:root {\n+\t\t--spacing-page: var(--spacing-md);\n+\t\t--spacing-section: var(--spacing-md);\n+\t\t--spacing-header: var(--spacing-md);\n+\t}\n+}\n+\n+:root[data-theme='dark'] {\n+\t/* Colors - Dark mode (smoldering ember) */\n+\t--color-primary: var(--color-primary-dark);\n+\t--color-primary-hover: var(--color-primary-hover-dark);\n+\t--color-primary-active: var(--color-primary-active-dark);\n+\t--color-on-primary: var(--color-on-primary-dark);\n+\t--color-primary-text: var(--color-primary-text-dark);\n+\t--color-background: var(--color-background-dark);\n+\t--color-surface: var(--color-surface-dark);\n+\t--color-text: var(--color-text-dark);\n+\t--color-text-muted: var(--color-text-muted-dark);\n+\t--color-border: var(--color-border-dark);\n+\n+\t/* Dark mode shadows - lighter for visibility */\n+\t--shadow-sm: var(--shadow-sm-dark);\n+\t--shadow-md: var(--shadow-md-dark);\n+\t--shadow-lg: var(--shadow-lg-dark);\n+}\n+\n+@media (prefers-color-scheme: dark) {\n+\t:root:not([data-theme='light']) {\n+\t\t/* Colors - Dark mode (smoldering ember) */\n+\t\t--color-primary: var(--color-primary-dark);\n+\t\t--color-primary-hover: var(--color-primary-hover-dark);\n+\t\t--color-primary-active: var(--color-primary-active-dark);\n+\t\t--color-on-primary: var(--color-on-primary-dark);\n+\t\t--color-primary-text: var(--color-primary-text-dark);\n+\t\t--color-background: var(--color-background-dark);\n+\t\t--color-surface: var(--color-surface-dark);\n+\t\t--color-text: var(--color-text-dark);\n+\t\t--color-text-muted: var(--color-text-muted-dark);\n+\t\t--color-border: var(--color-border-dark);\n+\n+\t\t/* Dark mode shadows - lighter for visibility */\n+\t\t--shadow-sm: var(--shadow-sm-dark);\n+\t\t--shadow-md: var(--shadow-md-dark);\n+\t\t--shadow-lg: var(--shadow-lg-dark);\n+\t}\n+}\n+\n+/* Reset and base styles */\n+*,\n+*::before,\n+*::after {\n+\tbox-sizing: border-box;\n+}\n+\n+body {\n+\tmargin: 0;\n+\tpadding: 0;\n+\tfont-family: var(--font-family);\n+\tfont-size: var(--font-size-base);\n+\tline-height: 1.5;\n+\tcolor: var(--color-text);\n+\tbackground-color: var(--color-background);\n+}\n+\n+#root {\n+\tmin-height: 100vh;\n+}\n+\n+.app-shell {\n+\tmin-height: 100vh;\n+\tdisplay: flex;\n+\talign-items: center;\n+\tjustify-content: center;\n+}\n+\n+.loading-spinner {\n+\twidth: 36px;\n+\theight: 36px;\n+\tborder-radius: 999px;\n+\tborder: 4px solid color-mix(in srgb, var(--color-border) 70%, transparent);\n+\tborder-top-color: var(--color-primary);\n+\topacity: 0;\n+\tanimation:\n+\t\tspinner-fade-in 0.2s ease 120ms forwards,\n+\t\tspinner-spin 0.9s linear 120ms infinite;\n+}\n+\n+@keyframes spinner-spin {\n+\tto {\n+\t\ttransform: rotate(360deg);\n+\t}\n+}\n+\n+@keyframes spinner-fade-in {\n+\tto {\n+\t\topacity: 1;\n+\t}\n+}\ndiff --git a/server/app-env.ts b/server/app-env.ts\nnew file mode 100644\nindex 0000000..9990456\n--- /dev/null\n+++ b/server/app-env.ts\n@@ -0,0 +1,12 @@\n+let appDb: D1Database | null = null\n+\n+export function setAppDb(db: D1Database) {\n+\tappDb = db\n+}\n+\n+export function getAppDb() {\n+\tif (!appDb) {\n+\t\tthrow new Error('APP_DB binding is not configured.')\n+\t}\n+\treturn appDb\n+}\ndiff --git a/server/audit-log.ts b/server/audit-log.ts\nnew file mode 100644\nindex 0000000..9d2eb37\n--- /dev/null\n+++ b/server/audit-log.ts\n@@ -0,0 +1,50 @@\n+import { toHex } from './hex.ts'\n+\n+type AuditEvent = {\n+\tcategory: 'auth' | 'oauth'\n+\taction: string\n+\tresult: 'success' | 'failure' | 'rate_limited'\n+\temail?: string\n+\tip?: string\n+\tclientId?: string\n+\tpath?: string\n+\treason?: string\n+}\n+\n+async function hashIdentifier(value: string) {\n+\tconst data = new TextEncoder().encode(value.trim().toLowerCase())\n+\tconst digest = await crypto.subtle.digest('SHA-256', data)\n+\treturn toHex(new Uint8Array(digest))\n+}\n+\n+export function getRequestIp(request: Request) {\n+\tconst forwarded = request.headers.get('x-forwarded-for')\n+\tconst forwardedIp = forwarded?.split(',')[0]?.trim()\n+\treturn (\n+\t\trequest.headers.get('CF-Connecting-IP') ??\n+\t\t(forwardedIp && forwardedIp.length > 0 ? forwardedIp : null)\n+\t)\n+}\n+\n+export async function logAuditEvent(event: AuditEvent) {\n+\ttry {\n+\t\tconst [emailHash, ipHash] = await Promise.all([\n+\t\t\tevent.email ? hashIdentifier(event.email) : undefined,\n+\t\t\tevent.ip ? hashIdentifier(event.ip) : undefined,\n+\t\t])\n+\t\tconst payload = {\n+\t\t\tcategory: event.category,\n+\t\t\taction: event.action,\n+\t\t\tresult: event.result,\n+\t\t\temailHash,\n+\t\t\tipHash,\n+\t\t\tclientId: event.clientId,\n+\t\t\tpath: event.path,\n+\t\t\treason: event.reason,\n+\t\t\ttimestamp: new Date().toISOString(),\n+\t\t}\n+\t\tconsole.info('audit-event', JSON.stringify(payload))\n+\t} catch (error) {\n+\t\tconsole.warn('audit-event-failed', error)\n+\t}\n+}\ndiff --git a/server/auth-redirect.ts b/server/auth-redirect.ts\nnew file mode 100644\nindex 0000000..155cab1\n--- /dev/null\n+++ b/server/auth-redirect.ts\n@@ -0,0 +1,27 @@\n+type RedirectToLoginOptions = {\n+\tredirectTo?: string\n+}\n+\n+function normalizeRedirectTo(value: string | null) {\n+\tif (!value) return null\n+\tif (!value.startsWith('/')) return null\n+\tif (value.startsWith('//')) return null\n+\treturn value\n+}\n+\n+export function redirectToLogin(\n+\trequest: Request,\n+\toptions: RedirectToLoginOptions = {},\n+) {\n+\tconst requestUrl = new URL(request.url)\n+\tconst target =\n+\t\tnormalizeRedirectTo(options.redirectTo ?? null) ??\n+\t\t`${requestUrl.pathname}${requestUrl.search}`\n+\tconst loginUrl = new URL('/login', requestUrl)\n+\n+\tif (target) {\n+\t\tloginUrl.searchParams.set('redirectTo', target)\n+\t}\n+\n+\treturn Response.redirect(loginUrl, 302)\n+}\ndiff --git a/server/auth-session.ts b/server/auth-session.ts\nnew file mode 100644\nindex 0000000..c18a2ad\n--- /dev/null\n+++ b/server/auth-session.ts\n@@ -0,0 +1,80 @@\n+import { createCookie } from '@remix-run/cookie'\n+\n+const sessionMaxAgeSeconds = 60 * 60 * 24 * 7\n+\n+export type AuthSession = {\n+\tid: string\n+\temail: string\n+}\n+\n+let sessionCookie: ReturnType | null = null\n+let sessionSecret: string | null = null\n+\n+export function setAuthSessionSecret(secret: string) {\n+\tif (!secret) {\n+\t\tthrow new Error('Missing COOKIE_SECRET for session signing.')\n+\t}\n+\n+\tif (sessionCookie && sessionSecret === secret) {\n+\t\treturn\n+\t}\n+\n+\tsessionSecret = secret\n+\tsessionCookie = createCookie('epic-scheduler_session', {\n+\t\thttpOnly: true,\n+\t\tsameSite: 'Lax',\n+\t\tpath: '/',\n+\t\tmaxAge: sessionMaxAgeSeconds,\n+\t\tsecrets: [secret],\n+\t})\n+}\n+\n+function getSessionCookie() {\n+\tif (!sessionCookie) {\n+\t\tthrow new Error('Session cookie not configured. Call setAuthSessionSecret.')\n+\t}\n+\n+\treturn sessionCookie\n+}\n+\n+function isAuthSession(value: unknown): value is AuthSession {\n+\tif (!value || typeof value !== 'object') return false\n+\tconst record = value as Record\n+\treturn (\n+\t\ttypeof record.id === 'string' &&\n+\t\trecord.id.length > 0 &&\n+\t\ttypeof record.email === 'string' &&\n+\t\trecord.email.length > 0\n+\t)\n+}\n+\n+export async function createAuthCookie(session: AuthSession, secure: boolean) {\n+\treturn getSessionCookie().serialize(JSON.stringify(session), { secure })\n+}\n+\n+export async function destroyAuthCookie(secure: boolean) {\n+\treturn getSessionCookie().serialize('', {\n+\t\tsecure,\n+\t\tmaxAge: 0,\n+\t\texpires: new Date(0),\n+\t})\n+}\n+\n+export async function readAuthSession(request: Request) {\n+\tconst cookieHeader = request.headers.get('Cookie')\n+\tif (!cookieHeader) return null\n+\n+\tconst stored = await getSessionCookie().parse(cookieHeader)\n+\tif (!stored || typeof stored !== 'string') return null\n+\n+\ttry {\n+\t\tconst parsed = JSON.parse(stored)\n+\t\tif (isAuthSession(parsed)) {\n+\t\t\treturn parsed\n+\t\t}\n+\t} catch {\n+\t\treturn null\n+\t}\n+\n+\treturn null\n+}\ndiff --git a/server/email/resend.ts b/server/email/resend.ts\nnew file mode 100644\nindex 0000000..2bde4a1\n--- /dev/null\n+++ b/server/email/resend.ts\n@@ -0,0 +1,90 @@\n+import { parseSafe } from 'remix/data-schema'\n+import { resendEmailSchema, type ResendEmail } from '#shared/resend-email.ts'\n+\n+type ResendClientConfig = {\n+\tapiBaseUrl: string\n+\tapiKey?: string\n+}\n+\n+type ResendSendResult = {\n+\tok: boolean\n+\tid?: string\n+\tskipped?: boolean\n+\terror?: string\n+}\n+\n+function normalizeEmailPayload(message: ResendEmail) {\n+\tconst result = parseSafe(resendEmailSchema, message)\n+\tif (!result.success) {\n+\t\tconst issueMessage = result.issues\n+\t\t\t.map((issue) => {\n+\t\t\t\tconst path =\n+\t\t\t\t\tArray.isArray(issue.path) && issue.path.length > 0\n+\t\t\t\t\t\t? issue.path.join('.')\n+\t\t\t\t\t\t: 'payload'\n+\t\t\t\treturn `${path}: ${issue.message}`\n+\t\t\t})\n+\t\t\t.join(', ')\n+\t\tthrow new Error(`Invalid Resend email payload: ${issueMessage}`)\n+\t}\n+\treturn result.value\n+}\n+\n+function logSkippedEmail(reason: string, message: ResendEmail) {\n+\tconsole.warn(\n+\t\treason,\n+\t\tJSON.stringify({\n+\t\t\tto: message.to,\n+\t\t\tfrom: message.from,\n+\t\t\tsubject: message.subject,\n+\t\t\tbody: message.html,\n+\t\t}),\n+\t)\n+}\n+\n+export async function sendResendEmail(\n+\tconfig: ResendClientConfig,\n+\tmessage: ResendEmail,\n+): Promise {\n+\tconst normalized = normalizeEmailPayload(message)\n+\tif (!config.apiKey) {\n+\t\tlogSkippedEmail('resend-api-key-missing', normalized)\n+\t\treturn { ok: false, skipped: true }\n+\t}\n+\n+\tconst baseUrl = config.apiBaseUrl.endsWith('/')\n+\t\t? config.apiBaseUrl\n+\t\t: `${config.apiBaseUrl}/`\n+\tconst endpoint = new URL('emails', baseUrl)\n+\tconst response = await fetch(endpoint.toString(), {\n+\t\tmethod: 'POST',\n+\t\theaders: {\n+\t\t\tAuthorization: `Bearer ${config.apiKey}`,\n+\t\t\t'Content-Type': 'application/json',\n+\t\t},\n+\t\tbody: JSON.stringify(normalized),\n+\t})\n+\tconst payload = (await response.json().catch(() => null)) as {\n+\t\tid?: string\n+\t} | null\n+\tif (!response.ok) {\n+\t\tconsole.warn(\n+\t\t\t'resend-email-failed',\n+\t\t\tJSON.stringify({\n+\t\t\t\tstatus: response.status,\n+\t\t\t\tbody: payload,\n+\t\t\t\tto: normalized.to,\n+\t\t\t\tfrom: normalized.from,\n+\t\t\t\tsubject: normalized.subject,\n+\t\t\t}),\n+\t\t)\n+\t\treturn { ok: false, error: 'Resend API returned an error response.' }\n+\t}\n+\n+\treturn {\n+\t\tok: true,\n+\t\tid: typeof payload?.id === 'string' ? payload.id : undefined,\n+\t}\n+}\n+\n+export { resendEmailSchema }\ndiff --git a/server/env.ts b/server/env.ts\nnew file mode 100644\nindex 0000000..f3ff922\n--- /dev/null\n+++ b/server/env.ts\n@@ -0,0 +1,24 @@\n+import { parseSafe } from 'remix/data-schema'\n+import { EnvSchema, type AppEnv } from '#types/env-schema.ts'\n+\n+export function getEnv(env: Env): AppEnv {\n+\tconst result = parseSafe(EnvSchema, env)\n+\n+\tif (!result.success) {\n+\t\tconst message = result.issues\n+\t\t\t.map((issue) => {\n+\t\t\t\tconst key =\n+\t\t\t\t\tArray.isArray(issue.path) && issue.path.length > 0\n+\t\t\t\t\t\t? issue.path.join('.')\n+\t\t\t\t\t\t: 'env'\n+\t\t\t\treturn `${key}: ${issue.message}`\n+\t\t\t})\n+\t\t\t.join(', ')\n+\n+\t\tthrow new Error(\n+\t\t\t`Invalid environment variables: ${message}.\\n\\n💡 Tip: Check \\`docs/environment-variables.md\\` for details.`,\n+\t\t)\n+\t}\n+\n+\treturn result.value\n+}\ndiff --git a/server/handler.ts b/server/handler.ts\nnew file mode 100644\nindex 0000000..a511bdc\n--- /dev/null\n+++ b/server/handler.ts\n@@ -0,0 +1,15 @@\n+import { setAuthSessionSecret } from './auth-session.ts'\n+import { getEnv } from './env.ts'\n+import { createAppRouter } from './router.ts'\n+\n+export async function handleRequest(request: Request, env: Env) {\n+\ttry {\n+\t\tconst appEnv = getEnv(env)\n+\t\tsetAuthSessionSecret(appEnv.COOKIE_SECRET)\n+\t\tconst router = createAppRouter(appEnv)\n+\t\treturn await router.fetch(request)\n+\t} catch (error) {\n+\t\tconsole.error('Remix server handler failed:', error)\n+\t\treturn new Response('Internal Server Error', { status: 500 })\n+\t}\n+}\ndiff --git a/server/handlers/account.ts b/server/handlers/account.ts\nnew file mode 100644\nindex 0000000..96b931e\n--- /dev/null\n+++ b/server/handlers/account.ts\n@@ -0,0 +1,26 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { readAuthSession } from '#server/auth-session.ts'\n+import { redirectToLogin } from '#server/auth-redirect.ts'\n+import { Layout } from '#server/layout.ts'\n+import { render } from '#server/render.ts'\n+import { type routes } from '#server/routes.ts'\n+\n+export const account = {\n+\tmiddleware: [],\n+\tasync action({ request }) {\n+\t\tconst session = await readAuthSession(request)\n+\n+\t\tif (!session) {\n+\t\t\treturn redirectToLogin(request)\n+\t\t}\n+\n+\t\treturn render(\n+\t\t\tLayout({\n+\t\t\t\ttitle: 'Account',\n+\t\t\t}),\n+\t\t)\n+\t},\n+} satisfies BuildAction<\n+\ttypeof routes.account.method,\n+\ttypeof routes.account.pattern\n+>\ndiff --git a/server/handlers/auth-handler.test.ts b/server/handlers/auth-handler.test.ts\nnew file mode 100644\nindex 0000000..2f4deb4\n--- /dev/null\n+++ b/server/handlers/auth-handler.test.ts\n@@ -0,0 +1,238 @@\n+import { beforeAll, expect, test } from 'vitest'\n+import { RequestContext } from 'remix/fetch-router'\n+import { setAuthSessionSecret } from '#server/auth-session.ts'\n+import { createPasswordHash } from '#server/password-hash.ts'\n+import { createAuthHandler } from './auth.ts'\n+\n+const testCookieSecret = 'test-cookie-secret-0123456789abcdef0123456789'\n+\n+function createAuthRequest(\n+\tbody: unknown,\n+\turl: string,\n+\thandler: ReturnType,\n+) {\n+\tconst request = new Request(url, {\n+\t\tmethod: 'POST',\n+\t\theaders: { 'Content-Type': 'application/json' },\n+\t\tbody: typeof body === 'string' ? body : JSON.stringify(body),\n+\t})\n+\tconst context = new RequestContext(request)\n+\n+\treturn {\n+\t\trun: () => handler.action(context),\n+\t}\n+}\n+\n+type TestUser = {\n+\tid: number\n+\temail: string\n+\tusername: string\n+\tpassword_hash: string\n+}\n+\n+function createTestDb() {\n+\tlet nextId = 1\n+\tconst users = new Map()\n+\tconst db = {\n+\t\tprepare(query: string) {\n+\t\t\tconst normalizedQuery = query.replace(/\\s+/g, ' ').trim().toLowerCase()\n+\t\t\treturn {\n+\t\t\t\tbind(...params: Array) {\n+\t\t\t\t\tconst readUserByEmail = () => {\n+\t\t\t\t\t\tconst email = String(params[0] ?? '').toLowerCase()\n+\t\t\t\t\t\treturn users.get(email) ?? null\n+\t\t\t\t\t}\n+\n+\t\t\t\t\tconst insertUser = () => {\n+\t\t\t\t\t\tconst [username, email, passwordHash] = params as Array\n+\t\t\t\t\t\tconst normalizedEmail = String(email).toLowerCase()\n+\t\t\t\t\t\tif (users.has(normalizedEmail)) {\n+\t\t\t\t\t\t\tthrow new Error('UNIQUE constraint failed: users.email')\n+\t\t\t\t\t\t}\n+\t\t\t\t\t\tconst user: TestUser = {\n+\t\t\t\t\t\t\tid: nextId,\n+\t\t\t\t\t\t\temail: String(email),\n+\t\t\t\t\t\t\tusername: String(username),\n+\t\t\t\t\t\t\tpassword_hash: String(passwordHash),\n+\t\t\t\t\t\t}\n+\t\t\t\t\t\tnextId += 1\n+\t\t\t\t\t\tusers.set(normalizedEmail, user)\n+\t\t\t\t\t\treturn user\n+\t\t\t\t\t}\n+\n+\t\t\t\t\tconst executeAll = async () => {\n+\t\t\t\t\t\tif (\n+\t\t\t\t\t\t\tnormalizedQuery.startsWith('select') &&\n+\t\t\t\t\t\t\tnormalizedQuery.includes('from \"users\"') &&\n+\t\t\t\t\t\t\tnormalizedQuery.includes('email')\n+\t\t\t\t\t\t) {\n+\t\t\t\t\t\t\tconst user = readUserByEmail()\n+\t\t\t\t\t\t\treturn {\n+\t\t\t\t\t\t\t\tresults: user ? [{ ...user }] : [],\n+\t\t\t\t\t\t\t\tmeta: { changes: 0, last_row_id: 0 },\n+\t\t\t\t\t\t\t}\n+\t\t\t\t\t\t}\n+\n+\t\t\t\t\t\tif (normalizedQuery.includes('insert into \"users\"')) {\n+\t\t\t\t\t\t\tconst user = insertUser()\n+\t\t\t\t\t\t\treturn {\n+\t\t\t\t\t\t\t\tresults: [{ ...user }],\n+\t\t\t\t\t\t\t\tmeta: { changes: 1, last_row_id: user.id },\n+\t\t\t\t\t\t\t}\n+\t\t\t\t\t\t}\n+\n+\t\t\t\t\t\treturn {\n+\t\t\t\t\t\t\tresults: [],\n+\t\t\t\t\t\t\tmeta: { changes: 0, last_row_id: 0 },\n+\t\t\t\t\t\t}\n+\t\t\t\t\t}\n+\n+\t\t\t\t\treturn {\n+\t\t\t\t\t\tasync all() {\n+\t\t\t\t\t\t\treturn executeAll()\n+\t\t\t\t\t\t},\n+\t\t\t\t\t\tasync first() {\n+\t\t\t\t\t\t\tconst result = await executeAll()\n+\t\t\t\t\t\t\treturn result.results[0] ?? null\n+\t\t\t\t\t\t},\n+\t\t\t\t\t\tasync run() {\n+\t\t\t\t\t\t\tif (normalizedQuery.includes('insert into \"users\"')) {\n+\t\t\t\t\t\t\t\tconst user = insertUser()\n+\t\t\t\t\t\t\t\treturn { meta: { changes: 1, last_row_id: user.id } }\n+\t\t\t\t\t\t\t}\n+\t\t\t\t\t\t\treturn { meta: { changes: 0, last_row_id: 0 } }\n+\t\t\t\t\t\t},\n+\t\t\t\t\t}\n+\t\t\t\t},\n+\t\t\t}\n+\t\t},\n+\t\tasync exec() {\n+\t\t\treturn\n+\t\t},\n+\t} as unknown as D1Database\n+\n+\tasync function addUser(email: string, password: string) {\n+\t\tconst passwordHash = await createPasswordHash(password)\n+\t\tconst user: TestUser = {\n+\t\t\tid: nextId,\n+\t\t\temail,\n+\t\t\tusername: email,\n+\t\t\tpassword_hash: passwordHash,\n+\t\t}\n+\t\tnextId += 1\n+\t\tusers.set(email.toLowerCase(), user)\n+\t\treturn user\n+\t}\n+\n+\treturn { db, users, addUser }\n+}\n+\n+beforeAll(() => {\n+\tsetAuthSessionSecret(testCookieSecret)\n+})\n+\n+test('auth handler returns 400 for invalid JSON', async () => {\n+\tconst testDb = createTestDb()\n+\tconst handler = createAuthHandler({\n+\t\tCOOKIE_SECRET: testCookieSecret,\n+\t\tAPP_DB: testDb.db,\n+\t})\n+\tconst authRequest = createAuthRequest('{', 'http://example.com/auth', handler)\n+\tconst response = await authRequest.run()\n+\texpect(response.status).toBe(400)\n+\tconst payload = await response.json()\n+\texpect(payload).toEqual({ error: 'Invalid JSON payload.' })\n+})\n+\n+test('auth handler returns 400 for missing fields', async () => {\n+\tconst testDb = createTestDb()\n+\tconst handler = createAuthHandler({\n+\t\tCOOKIE_SECRET: testCookieSecret,\n+\t\tAPP_DB: testDb.db,\n+\t})\n+\tconst authRequest = createAuthRequest(\n+\t\t{ email: 'a@b.com' },\n+\t\t'http://example.com/auth',\n+\t\thandler,\n+\t)\n+\tconst response = await authRequest.run()\n+\texpect(response.status).toBe(400)\n+\tconst payload = await response.json()\n+\texpect(payload).toEqual({\n+\t\terror: 'Invalid request body.',\n+\t})\n+})\n+\n+test('auth handler rejects login with unknown user', async () => {\n+\tconst testDb = createTestDb()\n+\tconst handler = createAuthHandler({\n+\t\tCOOKIE_SECRET: testCookieSecret,\n+\t\tAPP_DB: testDb.db,\n+\t})\n+\tconst authRequest = createAuthRequest(\n+\t\t{ email: 'a@b.com', password: 'secret', mode: 'login' },\n+\t\t'http://example.com/auth',\n+\t\thandler,\n+\t)\n+\tconst response = await authRequest.run()\n+\texpect(response.status).toBe(401)\n+\tconst payload = await response.json()\n+\texpect(payload).toEqual({ error: 'Invalid email or password.' })\n+})\n+\n+test('auth handler creates a user and cookie for signup', async () => {\n+\tconst testDb = createTestDb()\n+\tconst handler = createAuthHandler({\n+\t\tCOOKIE_SECRET: testCookieSecret,\n+\t\tAPP_DB: testDb.db,\n+\t})\n+\tconst authRequest = createAuthRequest(\n+\t\t{ email: 'new@b.com', password: 'secret', mode: 'signup' },\n+\t\t'http://example.com/auth',\n+\t\thandler,\n+\t)\n+\tconst response = await authRequest.run()\n+\texpect(response.status).toBe(200)\n+\tconst payload = await response.json()\n+\texpect(payload).toEqual({ ok: true, mode: 'signup' })\n+\texpect(testDb.users.has('new@b.com')).toBe(true)\n+\tconst setCookie = response.headers.get('Set-Cookie') ?? ''\n+\texpect(setCookie).toContain('epic-scheduler_session=')\n+})\n+\n+test('auth handler returns ok with a session cookie for login', async () => {\n+\tconst testDb = createTestDb()\n+\tconst handler = createAuthHandler({\n+\t\tCOOKIE_SECRET: testCookieSecret,\n+\t\tAPP_DB: testDb.db,\n+\t})\n+\tawait testDb.addUser('a@b.com', 'secret')\n+\tconst authRequest = createAuthRequest(\n+\t\t{ email: 'a@b.com', password: 'secret', mode: 'login' },\n+\t\t'http://example.com/auth',\n+\t\thandler,\n+\t)\n+\tconst response = await authRequest.run()\n+\texpect(response.status).toBe(200)\n+\tconst payload = await response.json()\n+\texpect(payload).toEqual({ ok: true, mode: 'login' })\n+\tconst setCookie = response.headers.get('Set-Cookie') ?? ''\n+\texpect(setCookie).toContain('epic-scheduler_session=')\n+})\n+\n+test('auth handler sets Secure cookie over https', async () => {\n+\tconst testDb = createTestDb()\n+\tconst handler = createAuthHandler({\n+\t\tCOOKIE_SECRET: testCookieSecret,\n+\t\tAPP_DB: testDb.db,\n+\t})\n+\tawait testDb.addUser('secure@b.com', 'secret')\n+\tconst authRequest = createAuthRequest(\n+\t\t{ email: 'secure@b.com', password: 'secret', mode: 'login' },\n+\t\t'https://example.com/auth',\n+\t\thandler,\n+\t)\n+\tconst response = await authRequest.run()\n+\tconst setCookie = response.headers.get('Set-Cookie') ?? ''\n+\texpect(setCookie).toContain('Secure')\n+})\ndiff --git a/server/handlers/auth-page.ts b/server/handlers/auth-page.ts\nnew file mode 100644\nindex 0000000..7704cf9\n--- /dev/null\n+++ b/server/handlers/auth-page.ts\n@@ -0,0 +1,29 @@\n+import { readAuthSession } from '#server/auth-session.ts'\n+import { Layout } from '#server/layout.ts'\n+import { render } from '#server/render.ts'\n+\n+function normalizeRedirectTo(value: string | null) {\n+\tif (!value) return null\n+\tif (!value.startsWith('/')) return null\n+\tif (value.startsWith('//')) return null\n+\treturn value\n+}\n+\n+export function createAuthPageHandler() {\n+\treturn {\n+\t\tmiddleware: [],\n+\t\tasync action({ request }: { request: Request }) {\n+\t\t\tconst session = await readAuthSession(request)\n+\t\t\tif (session) {\n+\t\t\t\tconst url = new URL(request.url)\n+\t\t\t\tconst redirectTo = normalizeRedirectTo(\n+\t\t\t\t\turl.searchParams.get('redirectTo'),\n+\t\t\t\t)\n+\t\t\t\tconst redirectTarget = redirectTo ?? '/account'\n+\t\t\t\treturn Response.redirect(new URL(redirectTarget, request.url), 302)\n+\t\t\t}\n+\n+\t\t\treturn render(Layout({}))\n+\t\t},\n+\t}\n+}\ndiff --git a/server/handlers/auth.ts b/server/handlers/auth.ts\nnew file mode 100644\nindex 0000000..b7d61d3\n--- /dev/null\n+++ b/server/handlers/auth.ts\n@@ -0,0 +1,220 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { enum_, object, parseSafe, string } from 'remix/data-schema'\n+import { createAuthCookie } from '#server/auth-session.ts'\n+import { getRequestIp, logAuditEvent } from '#server/audit-log.ts'\n+import { normalizeEmail } from '#server/normalize-email.ts'\n+import { createPasswordHash, verifyPassword } from '#server/password-hash.ts'\n+import { type routes } from '#server/routes.ts'\n+import { type AppEnv } from '#types/env-schema.ts'\n+import { createDb, usersTable } from '#worker/db.ts'\n+\n+const authModes = ['login', 'signup'] as const\n+type AuthMode = (typeof authModes)[number]\n+\n+function isUniqueConstraintError(error: unknown) {\n+\treturn (\n+\t\terror instanceof Error && /unique constraint failed/i.test(error.message)\n+\t)\n+}\n+\n+const authRequestSchema = object({\n+\temail: string(),\n+\tpassword: string(),\n+\tmode: enum_(authModes),\n+})\n+\n+const dummyPasswordHash =\n+\t'pbkdf2_sha256$100000$00000000000000000000000000000000$0000000000000000000000000000000000000000000000000000000000000000'\n+\n+export function createAuthHandler(appEnv: AppEnv) {\n+\tconst db = createDb(appEnv.APP_DB)\n+\n+\treturn {\n+\t\tmiddleware: [],\n+\t\tasync action({ request, url }) {\n+\t\t\tlet body: unknown\n+\n+\t\t\ttry {\n+\t\t\t\tbody = await request.json()\n+\t\t\t} catch {\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Invalid JSON payload.' },\n+\t\t\t\t\t{ status: 400 },\n+\t\t\t\t)\n+\t\t\t}\n+\n+\t\t\tconst parsedBody = parseSafe(authRequestSchema, body)\n+\t\t\tif (!parsedBody.success) {\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Invalid request body.' },\n+\t\t\t\t\t{ status: 400 },\n+\t\t\t\t)\n+\t\t\t}\n+\n+\t\t\tconst normalizedEmail = normalizeEmail(parsedBody.value.email)\n+\t\t\tconst normalizedPassword = parsedBody.value.password\n+\t\t\tconst normalizedMode: AuthMode = parsedBody.value.mode\n+\t\t\tconst requestIp = getRequestIp(request) ?? undefined\n+\n+\t\t\tif (!normalizedEmail || !normalizedPassword) {\n+\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\taction: 'authenticate',\n+\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\temail: normalizedEmail || undefined,\n+\t\t\t\t\tip: requestIp,\n+\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\treason: 'missing_fields',\n+\t\t\t\t})\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Email, password, and mode are required.' },\n+\t\t\t\t\t{ status: 400 },\n+\t\t\t\t)\n+\t\t\t}\n+\n+\t\t\tif (normalizedMode === 'signup') {\n+\t\t\t\tconst existingUser = await db.findOne(usersTable, {\n+\t\t\t\t\twhere: { email: normalizedEmail },\n+\t\t\t\t})\n+\t\t\t\tif (existingUser) {\n+\t\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\t\taction: 'signup',\n+\t\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t\t\tip: requestIp,\n+\t\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\t\treason: 'email_exists',\n+\t\t\t\t\t})\n+\t\t\t\t\treturn Response.json(\n+\t\t\t\t\t\t{ error: 'Email already registered.' },\n+\t\t\t\t\t\t{ status: 409 },\n+\t\t\t\t\t)\n+\t\t\t\t}\n+\n+\t\t\t\tconst passwordHash = await createPasswordHash(normalizedPassword)\n+\t\t\t\tconst username = normalizedEmail\n+\t\t\t\tlet record: { id: number } | null = null\n+\t\t\t\ttry {\n+\t\t\t\t\tconst createdUser = await db.create(\n+\t\t\t\t\t\tusersTable,\n+\t\t\t\t\t\t{\n+\t\t\t\t\t\t\tusername,\n+\t\t\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t\t\t\tpassword_hash: passwordHash,\n+\t\t\t\t\t\t},\n+\t\t\t\t\t\t{\n+\t\t\t\t\t\t\treturnRow: true,\n+\t\t\t\t\t\t},\n+\t\t\t\t\t)\n+\t\t\t\t\trecord = { id: createdUser.id }\n+\t\t\t\t} catch (error) {\n+\t\t\t\t\tif (isUniqueConstraintError(error)) {\n+\t\t\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\t\t\taction: 'signup',\n+\t\t\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t\t\t\tip: requestIp,\n+\t\t\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\t\t\treason: 'email_exists',\n+\t\t\t\t\t\t})\n+\t\t\t\t\t\treturn Response.json(\n+\t\t\t\t\t\t\t{ error: 'Email already registered.' },\n+\t\t\t\t\t\t\t{ status: 409 },\n+\t\t\t\t\t\t)\n+\t\t\t\t\t}\n+\t\t\t\t\tthrow error\n+\t\t\t\t}\n+\t\t\t\tif (!record) {\n+\t\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\t\taction: 'signup',\n+\t\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t\t\tip: requestIp,\n+\t\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\t\treason: 'insert_failed',\n+\t\t\t\t\t})\n+\t\t\t\t\treturn Response.json(\n+\t\t\t\t\t\t{ error: 'Unable to create account.' },\n+\t\t\t\t\t\t{ status: 500 },\n+\t\t\t\t\t)\n+\t\t\t\t}\n+\n+\t\t\t\tconst cookie = await createAuthCookie(\n+\t\t\t\t\t{ id: String(record.id), email: normalizedEmail },\n+\t\t\t\t\turl.protocol === 'https:',\n+\t\t\t\t)\n+\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\taction: 'signup',\n+\t\t\t\t\tresult: 'success',\n+\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t\tip: requestIp,\n+\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t})\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ ok: true, mode: normalizedMode },\n+\t\t\t\t\t{\n+\t\t\t\t\t\theaders: {\n+\t\t\t\t\t\t\t'Set-Cookie': cookie,\n+\t\t\t\t\t\t},\n+\t\t\t\t\t},\n+\t\t\t\t)\n+\t\t\t}\n+\n+\t\t\tconst userRecord = await db.findOne(usersTable, {\n+\t\t\t\twhere: { email: normalizedEmail },\n+\t\t\t})\n+\t\t\tlet passwordValid = false\n+\t\t\tif (userRecord) {\n+\t\t\t\tpasswordValid = await verifyPassword(\n+\t\t\t\t\tnormalizedPassword,\n+\t\t\t\t\tuserRecord.password_hash,\n+\t\t\t\t)\n+\t\t\t} else {\n+\t\t\t\tawait verifyPassword(normalizedPassword, dummyPasswordHash)\n+\t\t\t}\n+\t\t\tif (!userRecord || !passwordValid) {\n+\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\taction: 'login',\n+\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t\tip: requestIp,\n+\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\treason: 'invalid_credentials',\n+\t\t\t\t})\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Invalid email or password.' },\n+\t\t\t\t\t{ status: 401 },\n+\t\t\t\t)\n+\t\t\t}\n+\n+\t\t\tconst cookie = await createAuthCookie(\n+\t\t\t\t{\n+\t\t\t\t\tid: String(userRecord.id),\n+\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t},\n+\t\t\t\turl.protocol === 'https:',\n+\t\t\t)\n+\t\t\tvoid logAuditEvent({\n+\t\t\t\tcategory: 'auth',\n+\t\t\t\taction: 'login',\n+\t\t\t\tresult: 'success',\n+\t\t\t\temail: normalizedEmail,\n+\t\t\t\tip: requestIp,\n+\t\t\t\tpath: url.pathname,\n+\t\t\t})\n+\t\t\treturn Response.json(\n+\t\t\t\t{ ok: true, mode: normalizedMode },\n+\t\t\t\t{\n+\t\t\t\t\theaders: {\n+\t\t\t\t\t\t'Set-Cookie': cookie,\n+\t\t\t\t\t},\n+\t\t\t\t},\n+\t\t\t)\n+\t\t},\n+\t} satisfies BuildAction\n+}\ndiff --git a/server/handlers/chat.ts b/server/handlers/chat.ts\nnew file mode 100644\nindex 0000000..099ba5f\n--- /dev/null\n+++ b/server/handlers/chat.ts\n@@ -0,0 +1,19 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { readAuthSession } from '#server/auth-session.ts'\n+import { redirectToLogin } from '#server/auth-redirect.ts'\n+import { Layout } from '#server/layout.ts'\n+import { render } from '#server/render.ts'\n+import { type routes } from '#server/routes.ts'\n+\n+export const chat = {\n+\tmiddleware: [],\n+\tasync action({ request }) {\n+\t\tconst session = await readAuthSession(request)\n+\n+\t\tif (!session) {\n+\t\t\treturn redirectToLogin(request)\n+\t\t}\n+\n+\t\treturn render(Layout({}))\n+\t},\n+} satisfies BuildAction\ndiff --git a/server/handlers/health-handler.test.ts b/server/handlers/health-handler.test.ts\nnew file mode 100644\nindex 0000000..60fec49\n--- /dev/null\n+++ b/server/handlers/health-handler.test.ts\n@@ -0,0 +1,35 @@\n+import { expect, test } from 'vitest'\n+import { RequestContext } from 'remix/fetch-router'\n+import { createHealthHandler } from './health.ts'\n+\n+function createHealthRequestContext() {\n+\treturn new RequestContext(new Request('https://example.com/health'))\n+}\n+\n+test('health handler returns ok with null commit SHA when unset', async () => {\n+\tconst handler = createHealthHandler({ APP_COMMIT_SHA: undefined })\n+\n+\tconst response = await handler.action(createHealthRequestContext())\n+\n+\texpect(response.status).toBe(200)\n+\texpect(response.headers.get('Cache-Control')).toBe('no-store')\n+\texpect(response.headers.get('X-App-Commit-Sha')).toBe('unknown')\n+\tawait expect(response.json()).resolves.toEqual({ ok: true, commitSha: null })\n+})\n+\n+test('health handler returns the configured commit SHA', async () => {\n+\tconst handler = createHealthHandler({\n+\t\tAPP_COMMIT_SHA: 'f2d82dba4ba50cf2ad3f56f5c88f7b8ef5f97d8e',\n+\t})\n+\n+\tconst response = await handler.action(createHealthRequestContext())\n+\n+\texpect(response.status).toBe(200)\n+\texpect(response.headers.get('X-App-Commit-Sha')).toBe(\n+\t\t'f2d82dba4ba50cf2ad3f56f5c88f7b8ef5f97d8e',\n+\t)\n+\tawait expect(response.json()).resolves.toEqual({\n+\t\tok: true,\n+\t\tcommitSha: 'f2d82dba4ba50cf2ad3f56f5c88f7b8ef5f97d8e',\n+\t})\n+})\ndiff --git a/server/handlers/health.ts b/server/handlers/health.ts\nnew file mode 100644\nindex 0000000..e26f2f0\n--- /dev/null\n+++ b/server/handlers/health.ts\n@@ -0,0 +1,28 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { type routes } from '#server/routes.ts'\n+import { type AppEnv } from '#types/env-schema.ts'\n+\n+type HealthEnv = {\n+\tAPP_COMMIT_SHA: AppEnv['APP_COMMIT_SHA']\n+}\n+\n+export function createHealthHandler(appEnv: HealthEnv) {\n+\treturn {\n+\t\tmiddleware: [],\n+\t\tasync action() {\n+\t\t\tconst commitSha = appEnv.APP_COMMIT_SHA ?? null\n+\t\t\treturn Response.json(\n+\t\t\t\t{ ok: true, commitSha },\n+\t\t\t\t{\n+\t\t\t\t\theaders: {\n+\t\t\t\t\t\t'Cache-Control': 'no-store',\n+\t\t\t\t\t\t'X-App-Commit-Sha': commitSha ?? 'unknown',\n+\t\t\t\t\t},\n+\t\t\t\t},\n+\t\t\t)\n+\t\t},\n+\t} satisfies BuildAction<\n+\t\ttypeof routes.health.method,\n+\t\ttypeof routes.health.pattern\n+\t>\n+}\ndiff --git a/server/handlers/home.ts b/server/handlers/home.ts\nnew file mode 100644\nindex 0000000..133fe29\n--- /dev/null\n+++ b/server/handlers/home.ts\n@@ -0,0 +1,11 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { Layout } from '#server/layout.ts'\n+import { render } from '#server/render.ts'\n+import { type routes } from '#server/routes.ts'\n+\n+export const home = {\n+\tmiddleware: [],\n+\tasync action() {\n+\t\treturn render(Layout({}))\n+\t},\n+} satisfies BuildAction\ndiff --git a/server/handlers/login.ts b/server/handlers/login.ts\nnew file mode 100644\nindex 0000000..b05f133\n--- /dev/null\n+++ b/server/handlers/login.ts\n@@ -0,0 +1,8 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { type routes } from '#server/routes.ts'\n+import { createAuthPageHandler } from './auth-page.ts'\n+\n+export const login = createAuthPageHandler() satisfies BuildAction<\n+\ttypeof routes.login.method,\n+\ttypeof routes.login.pattern\n+>\ndiff --git a/server/handlers/logout.ts b/server/handlers/logout.ts\nnew file mode 100644\nindex 0000000..d7f2fc6\n--- /dev/null\n+++ b/server/handlers/logout.ts\n@@ -0,0 +1,56 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { destroyAuthCookie } from '#server/auth-session.ts'\n+import { type routes } from '#server/routes.ts'\n+\n+function normalizeProto(value: string) {\n+\treturn value.trim().replace(/^\"|\"$/g, '').toLowerCase()\n+}\n+\n+function getForwardedProto(request: Request) {\n+\tconst forwarded = request.headers.get('forwarded')\n+\tif (forwarded) {\n+\t\tfor (const entry of forwarded.split(',')) {\n+\t\t\tfor (const pair of entry.split(';')) {\n+\t\t\t\tconst [key, rawValue] = pair.split('=')\n+\t\t\t\tif (!key || !rawValue) continue\n+\t\t\t\tif (key.trim().toLowerCase() === 'proto') {\n+\t\t\t\t\treturn normalizeProto(rawValue)\n+\t\t\t\t}\n+\t\t\t}\n+\t\t}\n+\t}\n+\n+\tconst xForwardedProto = request.headers.get('x-forwarded-proto')\n+\tif (xForwardedProto) {\n+\t\treturn normalizeProto(xForwardedProto.split(',')[0] ?? '')\n+\t}\n+\n+\treturn null\n+}\n+\n+function isSecureRequest(request: Request) {\n+\tconst forwardedProto = getForwardedProto(request)\n+\tif (forwardedProto) {\n+\t\treturn forwardedProto === 'https'\n+\t}\n+\treturn new URL(request.url).protocol === 'https:'\n+}\n+\n+export const logout = {\n+\tmiddleware: [],\n+\tasync action({ request }) {\n+\t\tconst cookie = await destroyAuthCookie(isSecureRequest(request))\n+\t\tconst location = new URL('/login', request.url)\n+\n+\t\treturn new Response(null, {\n+\t\t\tstatus: 302,\n+\t\t\theaders: {\n+\t\t\t\tLocation: location.toString(),\n+\t\t\t\t'Set-Cookie': cookie,\n+\t\t\t},\n+\t\t})\n+\t},\n+} satisfies BuildAction<\n+\ttypeof routes.logout.method,\n+\ttypeof routes.logout.pattern\n+>\ndiff --git a/server/handlers/password-reset.ts b/server/handlers/password-reset.ts\nnew file mode 100644\nindex 0000000..7198774\n--- /dev/null\n+++ b/server/handlers/password-reset.ts\n@@ -0,0 +1,272 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { object, parseSafe, string } from 'remix/data-schema'\n+import { type AppEnv } from '#types/env-schema.ts'\n+import { createDb, passwordResetsTable, usersTable } from '#worker/db.ts'\n+import { logAuditEvent, getRequestIp } from '#server/audit-log.ts'\n+import { sendResendEmail } from '#server/email/resend.ts'\n+import { toHex } from '#server/hex.ts'\n+import { normalizeEmail } from '#server/normalize-email.ts'\n+import { createPasswordHash } from '#server/password-hash.ts'\n+import { type routes } from '#server/routes.ts'\n+\n+const resetTokenBytes = 32\n+const resetTokenExpiryMs = 60 * 60 * 1000\n+\n+const resetRequestSchema = object({\n+\temail: string(),\n+})\n+\n+const resetConfirmSchema = object({\n+\ttoken: string(),\n+\tpassword: string(),\n+})\n+\n+function buildResetEmail(resetUrl: string) {\n+\treturn {\n+\t\tsubject: 'Reset your epic-scheduler password',\n+\t\thtml: `\n+\n+ \n+ \n+ Password reset\n+ \n+ \n+

We received a request to reset your epic-scheduler password.

\n+

Reset your password

\n+

If you did not request a reset, you can safely ignore this email.

\n+ \n+`,\n+\t}\n+}\n+\n+function generateResetToken() {\n+\tconst bytes = new Uint8Array(resetTokenBytes)\n+\tcrypto.getRandomValues(bytes)\n+\treturn toHex(bytes)\n+}\n+\n+async function hashResetToken(token: string) {\n+\tconst data = new TextEncoder().encode(token)\n+\tconst digest = await crypto.subtle.digest('SHA-256', data)\n+\treturn toHex(new Uint8Array(digest))\n+}\n+\n+function logMissingEmailConfig(payload: {\n+\tto: string\n+\tfrom: string\n+\tsubject: string\n+\thtml: string\n+}) {\n+\tconsole.warn(\n+\t\t'resend-from-email-missing',\n+\t\tJSON.stringify({\n+\t\t\tto: payload.to,\n+\t\t\tfrom: payload.from,\n+\t\t\tsubject: payload.subject,\n+\t\t\tbody: payload.html,\n+\t\t}),\n+\t)\n+}\n+\n+export function createPasswordResetRequestHandler(appEnv: AppEnv) {\n+\tconst db = createDb(appEnv.APP_DB)\n+\n+\treturn {\n+\t\tmiddleware: [],\n+\t\tasync action({ request, url }) {\n+\t\t\tlet body: unknown\n+\t\t\ttry {\n+\t\t\t\tbody = await request.json()\n+\t\t\t} catch {\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Invalid JSON payload.' },\n+\t\t\t\t\t{ status: 400 },\n+\t\t\t\t)\n+\t\t\t}\n+\t\t\tconst parsed = parseSafe(resetRequestSchema, body)\n+\t\t\tconst requestIp = getRequestIp(request) ?? undefined\n+\t\t\tconst normalizedEmail = parsed.success\n+\t\t\t\t? normalizeEmail(parsed.value.email)\n+\t\t\t\t: ''\n+\n+\t\t\tif (!parsed.success || !normalizedEmail) {\n+\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\taction: 'password_reset_request',\n+\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\temail: normalizedEmail || undefined,\n+\t\t\t\t\tip: requestIp,\n+\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\treason: 'invalid_payload',\n+\t\t\t\t})\n+\t\t\t\treturn Response.json({ error: 'Email is required.' }, { status: 400 })\n+\t\t\t}\n+\n+\t\t\tconst userRecord = await db.findOne(usersTable, {\n+\t\t\t\twhere: { email: normalizedEmail },\n+\t\t\t})\n+\n+\t\t\tconst token = generateResetToken()\n+\t\t\tconst tokenHash = await hashResetToken(token)\n+\t\t\tconst expiresAt = Date.now() + resetTokenExpiryMs\n+\n+\t\t\tif (userRecord) {\n+\t\t\t\tawait db.deleteMany(passwordResetsTable, {\n+\t\t\t\t\twhere: { user_id: userRecord.id },\n+\t\t\t\t})\n+\t\t\t\tawait db.create(passwordResetsTable, {\n+\t\t\t\t\tuser_id: userRecord.id,\n+\t\t\t\t\ttoken_hash: tokenHash,\n+\t\t\t\t\texpires_at: expiresAt,\n+\t\t\t\t})\n+\t\t\t}\n+\n+\t\t\tif (userRecord) {\n+\t\t\t\tconst appBaseUrl = appEnv.APP_BASE_URL ?? url.origin\n+\t\t\t\tconst resetUrl = new URL('/reset-password', appBaseUrl)\n+\t\t\t\tresetUrl.searchParams.set('token', token)\n+\t\t\t\tconst email = buildResetEmail(resetUrl.toString())\n+\t\t\t\tconst fromEmail = appEnv.RESEND_FROM_EMAIL?.trim() ?? ''\n+\n+\t\t\t\tif (!fromEmail) {\n+\t\t\t\t\tlogMissingEmailConfig({\n+\t\t\t\t\t\tto: normalizedEmail,\n+\t\t\t\t\t\tfrom: fromEmail,\n+\t\t\t\t\t\tsubject: email.subject,\n+\t\t\t\t\t\thtml: email.html,\n+\t\t\t\t\t})\n+\t\t\t\t} else {\n+\t\t\t\t\ttry {\n+\t\t\t\t\t\tconst apiBaseUrl =\n+\t\t\t\t\t\t\tappEnv.RESEND_API_BASE_URL ?? 'https://api.resend.com'\n+\t\t\t\t\t\tawait sendResendEmail(\n+\t\t\t\t\t\t\t{\n+\t\t\t\t\t\t\t\tapiBaseUrl,\n+\t\t\t\t\t\t\t\tapiKey: appEnv.RESEND_API_KEY,\n+\t\t\t\t\t\t\t},\n+\t\t\t\t\t\t\t{\n+\t\t\t\t\t\t\t\tto: normalizedEmail,\n+\t\t\t\t\t\t\t\tfrom: fromEmail,\n+\t\t\t\t\t\t\t\tsubject: email.subject,\n+\t\t\t\t\t\t\t\thtml: email.html,\n+\t\t\t\t\t\t\t},\n+\t\t\t\t\t\t)\n+\t\t\t\t\t} catch (error) {\n+\t\t\t\t\t\tconsole.warn('resend-email-error', error)\n+\t\t\t\t\t}\n+\t\t\t\t}\n+\n+\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\taction: 'password_reset_request',\n+\t\t\t\t\tresult: 'success',\n+\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t\tip: requestIp,\n+\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t})\n+\t\t\t} else {\n+\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\taction: 'password_reset_request',\n+\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\temail: normalizedEmail,\n+\t\t\t\t\tip: requestIp,\n+\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\treason: 'email_not_found',\n+\t\t\t\t})\n+\t\t\t}\n+\n+\t\t\treturn Response.json({\n+\t\t\t\tok: true,\n+\t\t\t\tmessage: 'If the account exists, a reset email has been sent.',\n+\t\t\t})\n+\t\t},\n+\t} satisfies BuildAction<\n+\t\ttypeof routes.passwordResetRequest.method,\n+\t\ttypeof routes.passwordResetRequest.pattern\n+\t>\n+}\n+\n+export function createPasswordResetConfirmHandler(appEnv: AppEnv) {\n+\tconst db = createDb(appEnv.APP_DB)\n+\n+\treturn {\n+\t\tmiddleware: [],\n+\t\tasync action({ request, url }) {\n+\t\t\tlet body: unknown\n+\t\t\ttry {\n+\t\t\t\tbody = await request.json()\n+\t\t\t} catch {\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Invalid JSON payload.' },\n+\t\t\t\t\t{ status: 400 },\n+\t\t\t\t)\n+\t\t\t}\n+\t\t\tconst parsed = parseSafe(resetConfirmSchema, body)\n+\t\t\tconst requestIp = getRequestIp(request) ?? undefined\n+\t\t\tconst token = parsed.success ? parsed.value.token.trim() : ''\n+\t\t\tconst password = parsed.success ? parsed.value.password : ''\n+\n+\t\t\tif (!parsed.success || !token || !password) {\n+\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\taction: 'password_reset_confirm',\n+\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\tip: requestIp,\n+\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\treason: 'invalid_payload',\n+\t\t\t\t})\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Token and password are required.' },\n+\t\t\t\t\t{ status: 400 },\n+\t\t\t\t)\n+\t\t\t}\n+\n+\t\t\tconst tokenHash = await hashResetToken(token)\n+\t\t\tconst resetRecord = await db.findOne(passwordResetsTable, {\n+\t\t\t\twhere: { token_hash: tokenHash },\n+\t\t\t})\n+\t\t\tconst now = Date.now()\n+\n+\t\t\tif (!resetRecord || resetRecord.expires_at < now) {\n+\t\t\t\tif (resetRecord && resetRecord.expires_at < now) {\n+\t\t\t\t\tawait db.delete(passwordResetsTable, resetRecord.id)\n+\t\t\t\t}\n+\t\t\t\tvoid logAuditEvent({\n+\t\t\t\t\tcategory: 'auth',\n+\t\t\t\t\taction: 'password_reset_confirm',\n+\t\t\t\t\tresult: 'failure',\n+\t\t\t\t\tip: requestIp,\n+\t\t\t\t\tpath: url.pathname,\n+\t\t\t\t\treason: resetRecord ? 'expired_token' : 'invalid_token',\n+\t\t\t\t})\n+\t\t\t\treturn Response.json(\n+\t\t\t\t\t{ error: 'Reset link is invalid or expired.' },\n+\t\t\t\t\t{ status: 400 },\n+\t\t\t\t)\n+\t\t\t}\n+\n+\t\t\tconst passwordHash = await createPasswordHash(password)\n+\t\t\tawait db.update(usersTable, resetRecord.user_id, {\n+\t\t\t\tpassword_hash: passwordHash,\n+\t\t\t\tupdated_at: new Date().toISOString().replace('T', ' ').slice(0, 19),\n+\t\t\t})\n+\t\t\tawait db.deleteMany(passwordResetsTable, {\n+\t\t\t\twhere: { user_id: resetRecord.user_id },\n+\t\t\t})\n+\n+\t\t\tvoid logAuditEvent({\n+\t\t\t\tcategory: 'auth',\n+\t\t\t\taction: 'password_reset_confirm',\n+\t\t\t\tresult: 'success',\n+\t\t\t\tip: requestIp,\n+\t\t\t\tpath: url.pathname,\n+\t\t\t})\n+\n+\t\t\treturn Response.json({ ok: true })\n+\t\t},\n+\t} satisfies BuildAction<\n+\t\ttypeof routes.passwordResetConfirm.method,\n+\t\ttypeof routes.passwordResetConfirm.pattern\n+\t>\n+}\ndiff --git a/server/handlers/session.ts b/server/handlers/session.ts\nnew file mode 100644\nindex 0000000..c41fac5\n--- /dev/null\n+++ b/server/handlers/session.ts\n@@ -0,0 +1,29 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { readAuthSession } from '#server/auth-session.ts'\n+import { type routes } from '#server/routes.ts'\n+\n+function jsonResponse(data: unknown, init?: ResponseInit) {\n+\treturn new Response(JSON.stringify(data), {\n+\t\t...init,\n+\t\theaders: {\n+\t\t\t'Content-Type': 'application/json',\n+\t\t\t'Cache-Control': 'no-store',\n+\t\t\t...init?.headers,\n+\t\t},\n+\t})\n+}\n+\n+export const session = {\n+\tmiddleware: [],\n+\tasync action({ request }) {\n+\t\tconst session = await readAuthSession(request)\n+\t\tif (!session) {\n+\t\t\treturn jsonResponse({ ok: false })\n+\t\t}\n+\n+\t\treturn jsonResponse({ ok: true, session: { email: session.email } })\n+\t},\n+} satisfies BuildAction<\n+\ttypeof routes.session.method,\n+\ttypeof routes.session.pattern\n+>\ndiff --git a/server/handlers/signup.ts b/server/handlers/signup.ts\nnew file mode 100644\nindex 0000000..4c193ec\n--- /dev/null\n+++ b/server/handlers/signup.ts\n@@ -0,0 +1,8 @@\n+import { type BuildAction } from 'remix/fetch-router'\n+import { type routes } from '#server/routes.ts'\n+import { createAuthPageHandler } from './auth-page.ts'\n+\n+export const signup = createAuthPageHandler() satisfies BuildAction<\n+\ttypeof routes.signup.method,\n+\ttypeof routes.signup.pattern\n+>\ndiff --git a/server/hex.ts b/server/hex.ts\nnew file mode 100644\nindex 0000000..4f97b9c\n--- /dev/null\n+++ b/server/hex.ts\n@@ -0,0 +1,5 @@\n+export function toHex(bytes: Uint8Array) {\n+\treturn Array.from(bytes)\n+\t\t.map((value) => value.toString(16).padStart(2, '0'))\n+\t\t.join('')\n+}\ndiff --git a/server/layout.ts b/server/layout.ts\nnew file mode 100644\nindex 0000000..4d1be7d\n--- /dev/null\n+++ b/server/layout.ts\n@@ -0,0 +1,58 @@\n+import { html, type SafeHtml } from 'remix/html-template'\n+\n+const defaultEntryScripts: Array = ['/client-entry.js']\n+const defaultShell = html`

\n+\t

\n+

`\n+\n+export function Layout({\n+\tchildren,\n+\ttitle = 'epic-scheduler',\n+\tentryScripts = defaultEntryScripts,\n+}: {\n+\tchildren?: SafeHtml\n+\ttitle?: string\n+\tentryScripts?: Array | false\n+}) {\n+\tconst scripts = entryScripts === false ? [] : entryScripts\n+\tconst shell = children ?? defaultShell\n+\treturn html`\n+\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\t\n+\t\t\t${title}\n+\t\t\t\n+\t\t\n+\t\t\n+\t\t\t

${shell}

\n+\t\t\t${scripts.map(\n+\t\t\t\t(script) => html``,\n+\t\t\t)}\n+\t\t\n+\t`\n+}\ndiff --git a/server/normalize-email.ts b/server/normalize-email.ts\nnew file mode 100644\nindex 0000000..907a603\n--- /dev/null\n+++ b/server/normalize-email.ts\n@@ -0,0 +1,3 @@\n+export function normalizeEmail(email: string) {\n+\treturn email.trim().toLowerCase()\n+}\ndiff --git a/server/password-hash.ts b/server/password-hash.ts\nnew file mode 100644\nindex 0000000..ea5611b\n--- /dev/null\n+++ b/server/password-hash.ts\n@@ -0,0 +1 @@\n+export { createPasswordHash, verifyPassword } from '#shared/password-hash.ts'\ndiff --git a/server/render.ts b/server/render.ts\nnew file mode 100644\nindex 0000000..b8b7526\n--- /dev/null\n+++ b/server/render.ts\n@@ -0,0 +1,6 @@\n+import { type SafeHtml } from 'remix/html-template'\n+import { createHtmlResponse } from 'remix/response/html'\n+\n+export function render(body: string | SafeHtml, init?: ResponseInit) {\n+\treturn createHtmlResponse(body, init)\n+}\ndiff --git a/server/router.ts b/server/router.ts\nnew file mode 100644\nindex 0000000..a7027f8\n--- /dev/null\n+++ b/server/router.ts\n@@ -0,0 +1,47 @@\n+import { createRouter } from 'remix/fetch-router'\n+import { type AppEnv } from '#types/env-schema.ts'\n+import { account } from './handlers/account.ts'\n+import { createAuthHandler } from './handlers/auth.ts'\n+import { chat } from './handlers/chat.ts'\n+import { createHealthHandler } from './handlers/health.ts'\n+import { home } from './handlers/home.ts'\n+import { login } from './handlers/login.ts'\n+import { logout } from './handlers/logout.ts'\n+import {\n+\tcreatePasswordResetConfirmHandler,\n+\tcreatePasswordResetRequestHandler,\n+} from './handlers/password-reset.ts'\n+import { session } from './handlers/session.ts'\n+import { signup } from './handlers/signup.ts'\n+import { Layout } from './layout.ts'\n+import { render } from './render.ts'\n+import { routes } from './routes.ts'\n+\n+export function createAppRouter(appEnv: AppEnv) {\n+\tconst router = createRouter({\n+\t\tmiddleware: [],\n+\t\tasync defaultHandler() {\n+\t\t\treturn render(Layout({}))\n+\t\t},\n+\t})\n+\n+\trouter.map(routes.home, home)\n+\trouter.map(routes.chat, chat)\n+\trouter.map(routes.health, createHealthHandler(appEnv))\n+\trouter.map(routes.login, login)\n+\trouter.map(routes.signup, signup)\n+\trouter.map(routes.account, account)\n+\trouter.map(routes.auth, createAuthHandler(appEnv))\n+\trouter.map(routes.session, session)\n+\trouter.map(routes.logout, logout)\n+\trouter.map(\n+\t\troutes.passwordResetRequest,\n+\t\tcreatePasswordResetRequestHandler(appEnv),\n+\t)\n+\trouter.map(\n+\t\troutes.passwordResetConfirm,\n+\t\tcreatePasswordResetConfirmHandler(appEnv),\n+\t)\n+\n+\treturn router\n+}\ndiff --git a/server/routes.ts b/server/routes.ts\nnew file mode 100644\nindex 0000000..d08f070\n--- /dev/null\n+++ b/server/routes.ts\n@@ -0,0 +1,15 @@\n+import { post, route } from 'remix/fetch-router/routes'\n+\n+export const routes = route({\n+\thome: '/',\n+\tchat: '/chat',\n+\thealth: '/health',\n+\tlogin: '/login',\n+\tsignup: '/signup',\n+\taccount: '/account',\n+\tauth: post('/auth'),\n+\tsession: '/session',\n+\tlogout: post('/logout'),\n+\tpasswordResetRequest: post('/password-reset'),\n+\tpasswordResetConfirm: post('/password-reset/confirm'),\n+})\ndiff --git a/shared/hex.ts b/shared/hex.ts\nnew file mode 100644\nindex 0000000..4f97b9c\n--- /dev/null\n+++ b/shared/hex.ts\n@@ -0,0 +1,5 @@\n+export function toHex(bytes: Uint8Array) {\n+\treturn Array.from(bytes)\n+\t\t.map((value) => value.toString(16).padStart(2, '0'))\n+\t\t.join('')\n+}\ndiff --git a/shared/password-hash.test.ts b/shared/password-hash.test.ts\nnew file mode 100644\nindex 0000000..2a4f787\n--- /dev/null\n+++ b/shared/password-hash.test.ts\n@@ -0,0 +1,19 @@\n+import { expect, test } from 'vitest'\n+\n+import { createPasswordHash, verifyPassword } from './password-hash.ts'\n+\n+test('verifyPassword accepts valid hashes', async () => {\n+\tconst password = 'kodylovesyou'\n+\tconst hash = await createPasswordHash(password)\n+\n+\tawait expect(verifyPassword(password, hash)).resolves.toBe(true)\n+})\n+\n+test('verifyPassword rejects iteration values with trailing characters', async () => {\n+\tconst password = 'kodylovesyou'\n+\tconst hash = await createPasswordHash(password)\n+\tconst [prefix, iterations, saltHex, hashHex] = hash.split('$')\n+\tconst tamperedHash = `${prefix}$${iterations}abc$${saltHex}$${hashHex}`\n+\n+\tawait expect(verifyPassword(password, tamperedHash)).resolves.toBe(false)\n+})\ndiff --git a/shared/password-hash.ts b/shared/password-hash.ts\nnew file mode 100644\nindex 0000000..69a7b2e\n--- /dev/null\n+++ b/shared/password-hash.ts\n@@ -0,0 +1,129 @@\n+import { toHex } from './hex.ts'\n+\n+const passwordHashPrefix = 'pbkdf2_sha256'\n+const passwordSaltBytes = 16\n+const passwordHashBytes = 32\n+const maxPasswordHashIterations = 100_000\n+const passwordHashIterations = maxPasswordHashIterations\n+\n+function fromHex(value: string): Uint8Array | null {\n+\tconst normalized = value.trim().toLowerCase()\n+\tif (!/^[0-9a-f]+$/.test(normalized) || normalized.length % 2 !== 0) {\n+\t\treturn null\n+\t}\n+\tconst bytes = new Uint8Array(normalized.length / 2)\n+\tfor (let index = 0; index < normalized.length; index += 2) {\n+\t\tconst byte = Number.parseInt(normalized.slice(index, index + 2), 16)\n+\t\tif (Number.isNaN(byte)) return null\n+\t\tbytes[index / 2] = byte\n+\t}\n+\treturn bytes\n+}\n+\n+function padToLength(buffer: Uint8Array, length: number) {\n+\tif (buffer.length === length) return buffer\n+\tconst padded = new Uint8Array(length)\n+\tpadded.set(buffer)\n+\treturn padded\n+}\n+\n+function timingSafeEqual(left: Uint8Array, right: Uint8Array) {\n+\tconst maxLength = Math.max(left.length, right.length)\n+\tconst leftPadded = padToLength(left, maxLength)\n+\tconst rightPadded = padToLength(right, maxLength)\n+\tconst subtle = crypto.subtle as SubtleCrypto & {\n+\t\ttimingSafeEqual?: (\n+\t\t\ta: ArrayBuffer | ArrayBufferView,\n+\t\t\tb: ArrayBuffer | ArrayBufferView,\n+\t\t) => boolean\n+\t}\n+\tconst isEqual =\n+\t\ttypeof subtle.timingSafeEqual === 'function'\n+\t\t\t? subtle.timingSafeEqual(leftPadded, rightPadded)\n+\t\t\t: (() => {\n+\t\t\t\t\tlet result = 0\n+\t\t\t\t\tfor (let index = 0; index < maxLength; index += 1) {\n+\t\t\t\t\t\tconst leftValue = leftPadded[index] ?? 0\n+\t\t\t\t\t\tconst rightValue = rightPadded[index] ?? 0\n+\t\t\t\t\t\tresult |= leftValue ^ rightValue\n+\t\t\t\t\t}\n+\t\t\t\t\treturn result === 0\n+\t\t\t\t})()\n+\treturn isEqual && left.length === right.length\n+}\n+\n+async function derivePasswordKey(\n+\tpassword: string,\n+\tsalt: Uint8Array,\n+\titerations: number,\n+\tlength: number,\n+) {\n+\tconst key = await crypto.subtle.importKey(\n+\t\t'raw',\n+\t\tnew TextEncoder().encode(password),\n+\t\t'PBKDF2',\n+\t\tfalse,\n+\t\t['deriveBits'],\n+\t)\n+\tconst derivedBits = await crypto.subtle.deriveBits(\n+\t\t{\n+\t\t\tname: 'PBKDF2',\n+\t\t\tsalt,\n+\t\t\titerations,\n+\t\t\thash: 'SHA-256',\n+\t\t},\n+\t\tkey,\n+\t\tlength * 8,\n+\t)\n+\treturn new Uint8Array(derivedBits)\n+}\n+\n+export async function createPasswordHash(password: string) {\n+\tconst salt = new Uint8Array(new ArrayBuffer(passwordSaltBytes))\n+\tcrypto.getRandomValues(salt)\n+\tconst hash = await derivePasswordKey(\n+\t\tpassword,\n+\t\tsalt,\n+\t\tpasswordHashIterations,\n+\t\tpasswordHashBytes,\n+\t)\n+\treturn `${passwordHashPrefix}$${passwordHashIterations}$${toHex(salt)}$${toHex(\n+\t\thash,\n+\t)}`\n+}\n+\n+export async function verifyPassword(\n+\tpassword: string,\n+\tstoredHash: string,\n+): Promise {\n+\tif (!storedHash) {\n+\t\treturn false\n+\t}\n+\tconst normalizedHash = storedHash.trim()\n+\tif (normalizedHash.startsWith(`${passwordHashPrefix}$`)) {\n+\t\tconst [prefix, iterationsRaw, saltHex, hashHex, ...extra] =\n+\t\t\tnormalizedHash.split('$')\n+\t\tif (prefix !== passwordHashPrefix || extra.length > 0) {\n+\t\t\treturn false\n+\t\t}\n+\t\tif (!iterationsRaw || !/^\\d+$/.test(iterationsRaw)) return false\n+\t\tconst iterations = Number(iterationsRaw)\n+\t\tconst salt = saltHex ? fromHex(saltHex) : null\n+\t\tconst hash = hashHex ? fromHex(hashHex) : null\n+\t\tif (!Number.isSafeInteger(iterations) || iterations < 1 || !salt || !hash) {\n+\t\t\treturn false\n+\t\t}\n+\t\tif (iterations > maxPasswordHashIterations) {\n+\t\t\treturn false\n+\t\t}\n+\t\tconst derived = await derivePasswordKey(\n+\t\t\tpassword,\n+\t\t\tsalt,\n+\t\t\titerations,\n+\t\t\thash.length,\n+\t\t)\n+\t\treturn timingSafeEqual(derived, hash)\n+\t}\n+\n+\treturn false\n+}\ndiff --git a/shared/resend-email.ts b/shared/resend-email.ts\nnew file mode 100644\nindex 0000000..e179126\n--- /dev/null\n+++ b/shared/resend-email.ts\n@@ -0,0 +1,21 @@\n+import {\n+\tarray,\n+\tobject,\n+\tstring,\n+\tunion,\n+\ttype InferOutput,\n+} from 'remix/data-schema'\n+import { minLength } from 'remix/data-schema/checks'\n+\n+const nonEmptyStringSchema = string().pipe(minLength(1))\n+\n+const resendEmailSchema = object({\n+\tfrom: nonEmptyStringSchema,\n+\tto: union([nonEmptyStringSchema, array(nonEmptyStringSchema)]),\n+\tsubject: nonEmptyStringSchema,\n+\thtml: nonEmptyStringSchema,\n+})\n+\n+export type ResendEmail = InferOutput\n+\n+export { resendEmailSchema }\ndiff --git a/tools/oxlint/local-plugin.js b/tools/oxlint/local-plugin.js\nnew file mode 100644\nindex 0000000..65226b4\n--- /dev/null\n+++ b/tools/oxlint/local-plugin.js\n@@ -0,0 +1,33 @@\n+const EXAMPLE_IDENTIFIER = '__oxlint_plugin_example__'\n+\n+const noExampleIdentifierRule = {\n+\tmeta: {\n+\t\ttype: 'problem',\n+\t\tdocs: {\n+\t\t\tdescription:\n+\t\t\t\t'Demonstrates how to author a custom oxlint JS plugin rule in this repo.',\n+\t\t},\n+\t\tschema: [],\n+\t\tmessages: {\n+\t\t\tavoidExampleIdentifier:\n+\t\t\t\t'Avoid using __oxlint_plugin_example__. This identifier exists only to verify the custom oxlint rule example.',\n+\t\t},\n+\t},\n+\tcreateOnce(context) {\n+\t\treturn {\n+\t\t\tIdentifier(node) {\n+\t\t\t\tif (node.name !== EXAMPLE_IDENTIFIER) return\n+\t\t\t\tcontext.report({ node, messageId: 'avoidExampleIdentifier' })\n+\t\t\t},\n+\t\t}\n+\t},\n+}\n+\n+const plugin = {\n+\tmeta: { name: 'epic-scheduler-custom' },\n+\trules: {\n+\t\t'no-example-identifier': noExampleIdentifierRule,\n+\t},\n+}\n+\n+export default plugin\ndiff --git a/tools/oxlint/oxlint-rules.json b/tools/oxlint/oxlint-rules.json\nnew file mode 100644\nindex 0000000..be4a520\n--- /dev/null\n+++ b/tools/oxlint/oxlint-rules.json\n@@ -0,0 +1,6 @@\n+{\n+\t\"jsPlugins\": [\"./local-plugin.js\"],\n+\t\"rules\": {\n+\t\t\"epic-scheduler-custom/no-example-identifier\": \"error\"\n+\t}\n+}\ndiff --git a/tools/prepare-e2e-env.ts b/tools/prepare-e2e-env.ts\nnew file mode 100644\nindex 0000000..d738133\n--- /dev/null\n+++ b/tools/prepare-e2e-env.ts\n@@ -0,0 +1,18 @@\n+import { copyFileSync, existsSync } from 'node:fs'\n+import { join } from 'node:path'\n+\n+const envPath = join(process.cwd(), '.env')\n+if (existsSync(envPath)) {\n+\tprocess.exit(0)\n+}\n+\n+const examplePath = join(process.cwd(), '.env.example')\n+if (!existsSync(examplePath)) {\n+\tconsole.error(\n+\t\t'Missing .env and .env.example; cannot prepare E2E environment.',\n+\t)\n+\tprocess.exit(1)\n+}\n+\n+copyFileSync(examplePath, envPath)\n+console.log('Created .env from .env.example for E2E tests.')\ndiff --git a/tools/seed-test-data.test.ts b/tools/seed-test-data.test.ts\nnew file mode 100644\nindex 0000000..8486d7b\n--- /dev/null\n+++ b/tools/seed-test-data.test.ts\n@@ -0,0 +1,23 @@\n+import { expect, test } from 'vitest'\n+\n+import { parseArgs } from './seed-test-data.ts'\n+\n+test('parseArgs defaults username to provided email when omitted', () => {\n+\tconst options = parseArgs(['--email', 'alice@example.com', '--local'])\n+\n+\texpect(options.email).toBe('alice@example.com')\n+\texpect(options.username).toBe('alice@example.com')\n+})\n+\n+test('parseArgs keeps explicit username when provided', () => {\n+\tconst options = parseArgs([\n+\t\t'--email',\n+\t\t'alice@example.com',\n+\t\t'--username',\n+\t\t'alice',\n+\t\t'--local',\n+\t])\n+\n+\texpect(options.email).toBe('alice@example.com')\n+\texpect(options.username).toBe('alice')\n+})\ndiff --git a/tools/seed-test-data.ts b/tools/seed-test-data.ts\nnew file mode 100644\nindex 0000000..8919f5f\n--- /dev/null\n+++ b/tools/seed-test-data.ts\n@@ -0,0 +1,206 @@\n+import { existsSync } from 'node:fs'\n+import path from 'node:path'\n+import { spawnSync } from 'node:child_process'\n+import { createPasswordHash } from '#shared/password-hash.ts'\n+\n+type CliOptions = {\n+\temail: string\n+\tusername: string\n+\tpassword: string\n+\tlocal: boolean\n+\tremote: boolean\n+\tconfig?: string\n+\tpersistTo?: string\n+}\n+\n+const defaultTestEmail = 'kody@kcd.dev'\n+const defaultTestPassword = 'kodylovesyou'\n+\n+function fail(message: string): never {\n+\tconsole.error(message)\n+\tprocess.exit(1)\n+}\n+\n+function runWrangler(args: Array) {\n+\tconst localWranglerPath = path.join(\n+\t\tprocess.cwd(),\n+\t\t'node_modules',\n+\t\t'.bin',\n+\t\tprocess.platform === 'win32' ? 'wrangler.cmd' : 'wrangler',\n+\t)\n+\tconst wranglerCommand = existsSync(localWranglerPath)\n+\t\t? localWranglerPath\n+\t\t: process.platform === 'win32'\n+\t\t\t? 'wrangler.cmd'\n+\t\t\t: 'wrangler'\n+\tconst result = spawnSync(wranglerCommand, args, {\n+\t\tencoding: 'utf8',\n+\t\tstdio: 'pipe',\n+\t\tenv: process.env,\n+\t})\n+\n+\treturn {\n+\t\tstatus: result.status ?? 1,\n+\t\tstdout: result.stdout ?? '',\n+\t\tstderr: result.stderr ?? '',\n+\t}\n+}\n+\n+export function parseArgs(argv: Array): CliOptions {\n+\tconst options: CliOptions = {\n+\t\temail: defaultTestEmail,\n+\t\tusername: defaultTestEmail,\n+\t\tpassword: defaultTestPassword,\n+\t\tlocal: false,\n+\t\tremote: false,\n+\t\tconfig: undefined,\n+\t\tpersistTo: undefined,\n+\t}\n+\tlet usernameProvided = false\n+\n+\tfor (let index = 0; index < argv.length; index += 1) {\n+\t\tconst arg = argv[index]\n+\t\tif (!arg) continue\n+\n+\t\tswitch (arg) {\n+\t\t\tcase '--email': {\n+\t\t\t\toptions.email = argv[index + 1] ?? ''\n+\t\t\t\tindex += 1\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase '--username': {\n+\t\t\t\tusernameProvided = true\n+\t\t\t\toptions.username = argv[index + 1] ?? ''\n+\t\t\t\tindex += 1\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase '--password': {\n+\t\t\t\toptions.password = argv[index + 1] ?? ''\n+\t\t\t\tindex += 1\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase '--local': {\n+\t\t\t\toptions.local = true\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase '--remote': {\n+\t\t\t\toptions.remote = true\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase '--config': {\n+\t\t\t\toptions.config = argv[index + 1] ?? ''\n+\t\t\t\tindex += 1\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tcase '--persist-to': {\n+\t\t\t\toptions.persistTo = argv[index + 1] ?? ''\n+\t\t\t\tindex += 1\n+\t\t\t\tbreak\n+\t\t\t}\n+\t\t\tdefault: {\n+\t\t\t\tif (arg.startsWith('-')) {\n+\t\t\t\t\tfail(\n+\t\t\t\t\t\t[\n+\t\t\t\t\t\t\t`Unknown flag: ${arg}`,\n+\t\t\t\t\t\t\t'Usage: node tools/seed-test-data.ts [--local|--remote] [--config ] [--persist-to ] [--email ] [--username ] [--password ]',\n+\t\t\t\t\t\t].join('\\n'),\n+\t\t\t\t\t)\n+\t\t\t\t}\n+\t\t\t}\n+\t\t}\n+\t}\n+\n+\tif (options.local && options.remote) {\n+\t\tfail('Choose only one target mode: --local or --remote.')\n+\t}\n+\tif (!options.local && !options.remote) {\n+\t\toptions.local = true\n+\t}\n+\tif (!options.email) {\n+\t\tfail('Missing required --email value.')\n+\t}\n+\tconst effectiveEmail = options.email\n+\tif (!usernameProvided) {\n+\t\toptions.username = effectiveEmail\n+\t}\n+\tif (!options.username) {\n+\t\tfail('Missing required --username value.')\n+\t}\n+\tif (!options.password) {\n+\t\tfail('Missing required --password value.')\n+\t}\n+\tif (options.remote && options.persistTo) {\n+\t\tfail('--persist-to is only valid with --local.')\n+\t}\n+\tif (options.config !== undefined && options.config.length === 0) {\n+\t\tfail('Missing value for --config .')\n+\t}\n+\tif (options.persistTo !== undefined && options.persistTo.length === 0) {\n+\t\tfail('Missing value for --persist-to .')\n+\t}\n+\n+\treturn options\n+}\n+\n+function quoteSql(value: string) {\n+\treturn `'${value.replace(/'/g, \"''\")}'`\n+}\n+\n+function buildSeedSql({\n+\temail,\n+\tusername,\n+\tpasswordHash,\n+}: {\n+\temail: string\n+\tusername: string\n+\tpasswordHash: string\n+}) {\n+\treturn `\n+INSERT INTO users (username, email, password_hash)\n+VALUES (${quoteSql(username)}, ${quoteSql(email)}, ${quoteSql(passwordHash)})\n+ON CONFLICT(email) DO UPDATE SET\n+ username = excluded.username,\n+ password_hash = excluded.password_hash,\n+ updated_at = CURRENT_TIMESTAMP;\n+`.trim()\n+}\n+\n+function executeSeedSql(sql: string, options: CliOptions) {\n+\tconst args = ['d1', 'execute', 'APP_DB', '--command', sql]\n+\tif (options.local) {\n+\t\targs.push('--local')\n+\t\tif (options.persistTo) {\n+\t\t\targs.push('--persist-to', options.persistTo)\n+\t\t}\n+\t}\n+\tif (options.remote) {\n+\t\targs.push('--remote')\n+\t}\n+\tif (options.config) {\n+\t\targs.push('--config', options.config)\n+\t}\n+\n+\tconst result = runWrangler(args)\n+\tif (result.status !== 0) {\n+\t\tfail('Failed to write seed user directly to D1.')\n+\t}\n+}\n+\n+async function main() {\n+\tconst options = parseArgs(process.argv.slice(2))\n+\tconst passwordHash = await createPasswordHash(options.password)\n+\tconst sql = buildSeedSql({\n+\t\temail: options.email,\n+\t\tusername: options.username,\n+\t\tpasswordHash,\n+\t})\n+\texecuteSeedSql(sql, options)\n+\n+\tconsole.log(\n+\t\t`Seeded test account in D1 (${options.local ? 'local' : 'remote'}): ${options.email}`,\n+\t)\n+}\n+\n+if (import.meta.main) {\n+\tawait main()\n+}\ndiff --git a/tools/temp-directory.ts b/tools/temp-directory.ts\nnew file mode 100644\nindex 0000000..25d43a7\n--- /dev/null\n+++ b/tools/temp-directory.ts\n@@ -0,0 +1,20 @@\n+import { mkdtemp, rm } from 'node:fs/promises'\n+import { tmpdir } from 'node:os'\n+import { join } from 'node:path'\n+\n+export type TemporaryDirectory = {\n+\tpath: string\n+\t[Symbol.asyncDispose]: () => Promise\n+}\n+\n+export async function createTemporaryDirectory(\n+\tprefix: string,\n+): Promise {\n+\tconst path = await mkdtemp(join(tmpdir(), prefix))\n+\treturn {\n+\t\tpath,\n+\t\tasync [Symbol.asyncDispose]() {\n+\t\t\tawait rm(path, { recursive: true, force: true })\n+\t\t},\n+\t}\n+}\ndiff --git a/tsconfig.json b/tsconfig.json\nnew file mode 100644\nindex 0000000..15562b5\n--- /dev/null\n+++ b/tsconfig.json\n@@ -0,0 +1,8 @@\n+{\n+\t\"files\": [],\n+\t\"references\": [\n+\t\t{ \"path\": \"./types/tsconfig-tools.json\" },\n+\t\t{ \"path\": \"./types/tsconfig-client.json\" },\n+\t\t{ \"path\": \"./types/tsconfig-worker.json\" }\n+\t]\n+}\ndiff --git a/types/env-schema.ts b/types/env-schema.ts\nnew file mode 100644\nindex 0000000..19ac522\n--- /dev/null\n+++ b/types/env-schema.ts\n@@ -0,0 +1,74 @@\n+import {\n+\tcreateSchema,\n+\tfail,\n+\tobject,\n+\tstring,\n+\ttype InferOutput,\n+} from 'remix/data-schema'\n+\n+const d1DatabaseSchema = createSchema((value, context) => {\n+\tif (value) {\n+\t\treturn { value: value as D1Database }\n+\t}\n+\treturn fail('Missing APP_DB binding for database access.', context.path)\n+})\n+\n+const optionalNonEmptyStringSchema = createSchema(\n+\t(value, context) => {\n+\t\tif (value === undefined) return { value: undefined }\n+\t\tif (typeof value !== 'string') return fail('Expected string', context.path)\n+\n+\t\tconst trimmed = value.trim()\n+\t\treturn { value: trimmed.length > 0 ? trimmed : undefined }\n+\t},\n+)\n+\n+const optionalUrlStringSchema = createSchema(\n+\t(value, context) => {\n+\t\tif (value === undefined) return { value: undefined }\n+\t\tif (typeof value !== 'string') return fail('Expected string', context.path)\n+\n+\t\tconst trimmed = value.trim()\n+\t\tif (!trimmed) return { value: undefined }\n+\n+\t\ttry {\n+\t\t\tnew URL(trimmed)\n+\t\t\treturn { value: trimmed }\n+\t\t} catch {\n+\t\t\treturn fail('Expected valid URL', context.path)\n+\t\t}\n+\t},\n+)\n+\n+const optionalCommitShaSchema = createSchema(\n+\t(value, context) => {\n+\t\tif (value === undefined) return { value: undefined }\n+\t\tif (typeof value !== 'string') return fail('Expected string', context.path)\n+\n+\t\tconst trimmed = value.trim()\n+\t\tif (!trimmed) return { value: undefined }\n+\t\tif (!/^[0-9a-f]{7,40}$/i.test(trimmed)) {\n+\t\t\treturn fail(\n+\t\t\t\t'Expected commit SHA (7-40 hexadecimal characters)',\n+\t\t\t\tcontext.path,\n+\t\t\t)\n+\t\t}\n+\n+\t\treturn { value: trimmed.toLowerCase() }\n+\t},\n+)\n+\n+export const EnvSchema = object({\n+\tCOOKIE_SECRET: string().refine(\n+\t\t(value) => value.length >= 32,\n+\t\t'COOKIE_SECRET must be at least 32 characters for session signing.',\n+\t),\n+\tAPP_DB: d1DatabaseSchema,\n+\tAPP_BASE_URL: optionalUrlStringSchema,\n+\tAPP_COMMIT_SHA: optionalCommitShaSchema,\n+\tRESEND_API_BASE_URL: optionalUrlStringSchema,\n+\tRESEND_API_KEY: optionalNonEmptyStringSchema,\n+\tRESEND_FROM_EMAIL: optionalNonEmptyStringSchema,\n+})\n+\n+export type AppEnv = InferOutput\ndiff --git a/types/env.d.ts b/types/env.d.ts\nnew file mode 100644\nindex 0000000..d894802\n--- /dev/null\n+++ b/types/env.d.ts\n@@ -0,0 +1,15 @@\n+import { type AppEnv } from './env-schema.ts'\n+\n+declare global {\n+\tinterface Env extends AppEnv {}\n+\n+\tinterface CustomExportedHandler {\n+\t\tfetch: (\n+\t\t\trequest: Request,\n+\t\t\tenv: Env,\n+\t\t\tctx: ExecutionContext,\n+\t\t) => Response | Promise\n+\t}\n+}\n+\n+export {}\ndiff --git a/types/tsconfig-client.json b/types/tsconfig-client.json\nnew file mode 100644\nindex 0000000..db5f966\n--- /dev/null\n+++ b/types/tsconfig-client.json\n@@ -0,0 +1,13 @@\n+{\n+\t\"extends\": \"@epic-web/config/typescript\",\n+\t\"compilerOptions\": {\n+\t\t\"composite\": true,\n+\t\t\"allowImportingTsExtensions\": true,\n+\t\t\"tsBuildInfoFile\": \"../node_modules/.tmp/tsconfig.client.tsbuildinfo\",\n+\t\t\"lib\": [\"DOM\", \"DOM.Iterable\", \"ES2022\"],\n+\t\t\"types\": [],\n+\t\t\"jsx\": \"react-jsx\",\n+\t\t\"jsxImportSource\": \"remix/component\"\n+\t},\n+\t\"include\": [\"../client/**/*.ts\", \"../client/**/*.tsx\"]\n+}\ndiff --git a/types/tsconfig-tools.json b/types/tsconfig-tools.json\nnew file mode 100644\nindex 0000000..d695e17\n--- /dev/null\n+++ b/types/tsconfig-tools.json\n@@ -0,0 +1,40 @@\n+{\n+\t\"extends\": \"@epic-web/config/typescript\",\n+\t\"compilerOptions\": {\n+\t\t\"composite\": true,\n+\t\t\"allowImportingTsExtensions\": true,\n+\t\t\"target\": \"ES2023\",\n+\t\t\"lib\": [\"ES2023\", \"ESNext.Disposable\"],\n+\t\t\"baseUrl\": \".\",\n+\t\t// Force MCP SDK to resolve to the hoisted install to avoid duplicate\n+\t\t// private type conflicts when multiple copies are present.\n+\t\t\"paths\": {\n+\t\t\t\"@modelcontextprotocol/sdk\": [\n+\t\t\t\t\"../node_modules/@modelcontextprotocol/sdk\"\n+\t\t\t],\n+\t\t\t\"@modelcontextprotocol/sdk/*\": [\n+\t\t\t\t\"../node_modules/@modelcontextprotocol/sdk/*\"\n+\t\t\t]\n+\t\t},\n+\t\t\"module\": \"ESNext\",\n+\t\t\"types\": [\"node\"],\n+\t\t\"moduleResolution\": \"bundler\",\n+\t\t\"verbatimModuleSyntax\": true,\n+\t\t\"moduleDetection\": \"force\",\n+\t\t\"noUnusedLocals\": true,\n+\t\t\"noUnusedParameters\": true,\n+\t\t\"erasableSyntaxOnly\": true,\n+\t\t\"noFallthroughCasesInSwitch\": true,\n+\t\t\"noUncheckedSideEffectImports\": true,\n+\t\t\"tsBuildInfoFile\": \"../node_modules/.tmp/tsconfig.tools.tsbuildinfo\"\n+\t},\n+\t\"include\": [\n+\t\t\"../playwright.config.ts\",\n+\t\t\"../wrangler-env.ts\",\n+\t\t\"../cli.ts\",\n+\t\t\"../docs/post-download.ts\",\n+\t\t\"../mcp/mcp-server-e2e.test.ts\",\n+\t\t\"../tools/**/*.ts\",\n+\t\t\"../shared/**/*.ts\"\n+\t]\n+}\ndiff --git a/types/tsconfig-worker.json b/types/tsconfig-worker.json\nnew file mode 100644\nindex 0000000..aafff83\n--- /dev/null\n+++ b/types/tsconfig-worker.json\n@@ -0,0 +1,47 @@\n+{\n+\t\"extends\": \"@epic-web/config/typescript\",\n+\t\"compilerOptions\": {\n+\t\t\"composite\": true,\n+\t\t\"allowImportingTsExtensions\": true,\n+\t\t\"tsBuildInfoFile\": \"../node_modules/.tmp/tsconfig.worker.tsbuildinfo\",\n+\t\t\"target\": \"ES2023\",\n+\t\t\"lib\": [\"ES2023\", \"WebWorker\", \"WebWorker.Iterable\"],\n+\t\t\"baseUrl\": \".\",\n+\t\t// Force MCP SDK to resolve to the hoisted install to avoid duplicate\n+\t\t// private type conflicts when multiple copies are present.\n+\t\t\"paths\": {\n+\t\t\t\"@modelcontextprotocol/sdk\": [\n+\t\t\t\t\"../node_modules/@modelcontextprotocol/sdk\"\n+\t\t\t],\n+\t\t\t\"@modelcontextprotocol/sdk/*\": [\n+\t\t\t\t\"../node_modules/@modelcontextprotocol/sdk/*\"\n+\t\t\t]\n+\t\t},\n+\t\t\"module\": \"ESNext\",\n+\t\t\"types\": [],\n+\t\t\"moduleResolution\": \"bundler\",\n+\t\t\"verbatimModuleSyntax\": true,\n+\t\t\"moduleDetection\": \"force\",\n+\t\t\"noUnusedLocals\": true,\n+\t\t\"noUnusedParameters\": true,\n+\t\t\"erasableSyntaxOnly\": true,\n+\t\t\"noFallthroughCasesInSwitch\": true,\n+\t\t\"noUncheckedSideEffectImports\": true\n+\t},\n+\t\"include\": [\n+\t\t\"./env.d.ts\",\n+\t\t\"./env-schema.ts\",\n+\t\t\"./worker-configuration.d.ts\",\n+\t\t\"../shared/**/*.ts\",\n+\t\t\"../mock-servers/**/*.ts\",\n+\t\t\"../worker/**/*.ts\",\n+\t\t\"../server/**/*.ts\",\n+\t\t\"../mcp/**/*.ts\"\n+\t],\n+\t\"exclude\": [\n+\t\t\"**/*.test.ts\",\n+\t\t\"**/*.spec.ts\",\n+\t\t\"../**/*.test.ts\",\n+\t\t\"../**/*.spec.ts\"\n+\t]\n+}\ndiff --git a/types/worker-configuration.d.ts b/types/worker-configuration.d.ts\nnew file mode 100644\nindex 0000000..198c7c6\n--- /dev/null\n+++ b/types/worker-configuration.d.ts\n@@ -0,0 +1,10934 @@\n+/* eslint-disable */\n+// Generated by Wrangler by running `wrangler types ./types/worker-configuration.d.ts --env production` (hash: 45ac839829cab18886a2801ad2a6c4f8)\n+// Runtime types generated with workerd@1.20260212.0 2026-01-31 global_fetch_strictly_public,nodejs_compat\n+declare namespace Cloudflare {\n+\tinterface GlobalProps {\n+\t\tmainModule: typeof import(\"../worker/index\");\n+\t\tdurableNamespaces: \"MCP\";\n+\t}\n+\tinterface Env {\n+\t\tOAUTH_KV: KVNamespace;\n+\t\tAPP_DB: D1Database;\n+\t\tASSETS: Fetcher;\n+\t\tCOOKIE_SECRET: string;\n+\t\tAPP_BASE_URL: string;\n+\t\tRESEND_API_KEY: string;\n+\t\tRESEND_FROM_EMAIL: string;\n+\t\tMCP_OBJECT: DurableObjectNamespace;\n+\t}\n+}\n+interface Env extends Cloudflare.Env {}\n+type StringifyValues> = {\n+\t[Binding in keyof EnvType]: EnvType[Binding] extends string ? EnvType[Binding] : string;\n+};\n+declare namespace NodeJS {\n+\tinterface ProcessEnv extends StringifyValues> {}\n+}\n+\n+// Begin runtime types\n+/*! *****************************************************************************\n+Copyright (c) Cloudflare. All rights reserved.\n+Copyright (c) Microsoft Corporation. All rights reserved.\n+\n+Licensed under the Apache License, Version 2.0 (the \"License\"); you may not use\n+this file except in compliance with the License. You may obtain a copy of the\n+License at http://www.apache.org/licenses/LICENSE-2.0\n+THIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\n+KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED\n+WARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,\n+MERCHANTABLITY OR NON-INFRINGEMENT.\n+See the Apache Version 2.0 License for specific language governing permissions\n+and limitations under the License.\n+***************************************************************************** */\n+/* eslint-disable */\n+// noinspection JSUnusedGlobalSymbols\n+declare var onmessage: never;\n+/**\n+ * The **`DOMException`** interface represents an abnormal event (called an **exception**) that occurs as a result of calling a method or accessing a property of a web API.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/DOMException)\n+ */\n+declare class DOMException extends Error {\n+ constructor(message?: string, name?: string);\n+ /**\n+ * The **`message`** read-only property of the a message or description associated with the given error name.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/DOMException/message)\n+ */\n+ readonly message: string;\n+ /**\n+ * The **`name`** read-only property of the one of the strings associated with an error name.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/DOMException/name)\n+ */\n+ readonly name: string;\n+ /**\n+ * The **`code`** read-only property of the DOMException interface returns one of the legacy error code constants, or `0` if none match.\n+ * @deprecated\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/DOMException/code)\n+ */\n+ readonly code: number;\n+ static readonly INDEX_SIZE_ERR: number;\n+ static readonly DOMSTRING_SIZE_ERR: number;\n+ static readonly HIERARCHY_REQUEST_ERR: number;\n+ static readonly WRONG_DOCUMENT_ERR: number;\n+ static readonly INVALID_CHARACTER_ERR: number;\n+ static readonly NO_DATA_ALLOWED_ERR: number;\n+ static readonly NO_MODIFICATION_ALLOWED_ERR: number;\n+ static readonly NOT_FOUND_ERR: number;\n+ static readonly NOT_SUPPORTED_ERR: number;\n+ static readonly INUSE_ATTRIBUTE_ERR: number;\n+ static readonly INVALID_STATE_ERR: number;\n+ static readonly SYNTAX_ERR: number;\n+ static readonly INVALID_MODIFICATION_ERR: number;\n+ static readonly NAMESPACE_ERR: number;\n+ static readonly INVALID_ACCESS_ERR: number;\n+ static readonly VALIDATION_ERR: number;\n+ static readonly TYPE_MISMATCH_ERR: number;\n+ static readonly SECURITY_ERR: number;\n+ static readonly NETWORK_ERR: number;\n+ static readonly ABORT_ERR: number;\n+ static readonly URL_MISMATCH_ERR: number;\n+ static readonly QUOTA_EXCEEDED_ERR: number;\n+ static readonly TIMEOUT_ERR: number;\n+ static readonly INVALID_NODE_TYPE_ERR: number;\n+ static readonly DATA_CLONE_ERR: number;\n+ get stack(): any;\n+ set stack(value: any);\n+}\n+type WorkerGlobalScopeEventMap = {\n+ fetch: FetchEvent;\n+ scheduled: ScheduledEvent;\n+ queue: QueueEvent;\n+ unhandledrejection: PromiseRejectionEvent;\n+ rejectionhandled: PromiseRejectionEvent;\n+};\n+declare abstract class WorkerGlobalScope extends EventTarget {\n+ EventTarget: typeof EventTarget;\n+}\n+/* The **`console`** object provides access to the debugging console (e.g., the Web console in Firefox). *\n+ * The **`console`** object provides access to the debugging console (e.g., the Web console in Firefox).\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console)\n+ */\n+interface Console {\n+ \"assert\"(condition?: boolean, ...data: any[]): void;\n+ /**\n+ * The **`console.clear()`** static method clears the console if possible.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/clear_static)\n+ */\n+ clear(): void;\n+ /**\n+ * The **`console.count()`** static method logs the number of times that this particular call to `count()` has been called.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/count_static)\n+ */\n+ count(label?: string): void;\n+ /**\n+ * The **`console.countReset()`** static method resets counter used with console/count_static.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/countReset_static)\n+ */\n+ countReset(label?: string): void;\n+ /**\n+ * The **`console.debug()`** static method outputs a message to the console at the 'debug' log level.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/debug_static)\n+ */\n+ debug(...data: any[]): void;\n+ /**\n+ * The **`console.dir()`** static method displays a list of the properties of the specified JavaScript object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/dir_static)\n+ */\n+ dir(item?: any, options?: any): void;\n+ /**\n+ * The **`console.dirxml()`** static method displays an interactive tree of the descendant elements of the specified XML/HTML element.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/dirxml_static)\n+ */\n+ dirxml(...data: any[]): void;\n+ /**\n+ * The **`console.error()`** static method outputs a message to the console at the 'error' log level.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/error_static)\n+ */\n+ error(...data: any[]): void;\n+ /**\n+ * The **`console.group()`** static method creates a new inline group in the Web console log, causing any subsequent console messages to be indented by an additional level, until console/groupEnd_static is called.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/group_static)\n+ */\n+ group(...data: any[]): void;\n+ /**\n+ * The **`console.groupCollapsed()`** static method creates a new inline group in the console.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/groupCollapsed_static)\n+ */\n+ groupCollapsed(...data: any[]): void;\n+ /**\n+ * The **`console.groupEnd()`** static method exits the current inline group in the console.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/groupEnd_static)\n+ */\n+ groupEnd(): void;\n+ /**\n+ * The **`console.info()`** static method outputs a message to the console at the 'info' log level.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/info_static)\n+ */\n+ info(...data: any[]): void;\n+ /**\n+ * The **`console.log()`** static method outputs a message to the console.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/log_static)\n+ */\n+ log(...data: any[]): void;\n+ /**\n+ * The **`console.table()`** static method displays tabular data as a table.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/table_static)\n+ */\n+ table(tabularData?: any, properties?: string[]): void;\n+ /**\n+ * The **`console.time()`** static method starts a timer you can use to track how long an operation takes.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/time_static)\n+ */\n+ time(label?: string): void;\n+ /**\n+ * The **`console.timeEnd()`** static method stops a timer that was previously started by calling console/time_static.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/timeEnd_static)\n+ */\n+ timeEnd(label?: string): void;\n+ /**\n+ * The **`console.timeLog()`** static method logs the current value of a timer that was previously started by calling console/time_static.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/timeLog_static)\n+ */\n+ timeLog(label?: string, ...data: any[]): void;\n+ timeStamp(label?: string): void;\n+ /**\n+ * The **`console.trace()`** static method outputs a stack trace to the console.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/trace_static)\n+ */\n+ trace(...data: any[]): void;\n+ /**\n+ * The **`console.warn()`** static method outputs a warning message to the console at the 'warning' log level.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/console/warn_static)\n+ */\n+ warn(...data: any[]): void;\n+}\n+declare const console: Console;\n+type BufferSource = ArrayBufferView | ArrayBuffer;\n+type TypedArray = Int8Array | Uint8Array | Uint8ClampedArray | Int16Array | Uint16Array | Int32Array | Uint32Array | Float32Array | Float64Array | BigInt64Array | BigUint64Array;\n+declare namespace WebAssembly {\n+ class CompileError extends Error {\n+ constructor(message?: string);\n+ }\n+ class RuntimeError extends Error {\n+ constructor(message?: string);\n+ }\n+ type ValueType = \"anyfunc\" | \"externref\" | \"f32\" | \"f64\" | \"i32\" | \"i64\" | \"v128\";\n+ interface GlobalDescriptor {\n+ value: ValueType;\n+ mutable?: boolean;\n+ }\n+ class Global {\n+ constructor(descriptor: GlobalDescriptor, value?: any);\n+ value: any;\n+ valueOf(): any;\n+ }\n+ type ImportValue = ExportValue | number;\n+ type ModuleImports = Record;\n+ type Imports = Record;\n+ type ExportValue = Function | Global | Memory | Table;\n+ type Exports = Record;\n+ class Instance {\n+ constructor(module: Module, imports?: Imports);\n+ readonly exports: Exports;\n+ }\n+ interface MemoryDescriptor {\n+ initial: number;\n+ maximum?: number;\n+ shared?: boolean;\n+ }\n+ class Memory {\n+ constructor(descriptor: MemoryDescriptor);\n+ readonly buffer: ArrayBuffer;\n+ grow(delta: number): number;\n+ }\n+ type ImportExportKind = \"function\" | \"global\" | \"memory\" | \"table\";\n+ interface ModuleExportDescriptor {\n+ kind: ImportExportKind;\n+ name: string;\n+ }\n+ interface ModuleImportDescriptor {\n+ kind: ImportExportKind;\n+ module: string;\n+ name: string;\n+ }\n+ abstract class Module {\n+ static customSections(module: Module, sectionName: string): ArrayBuffer[];\n+ static exports(module: Module): ModuleExportDescriptor[];\n+ static imports(module: Module): ModuleImportDescriptor[];\n+ }\n+ type TableKind = \"anyfunc\" | \"externref\";\n+ interface TableDescriptor {\n+ element: TableKind;\n+ initial: number;\n+ maximum?: number;\n+ }\n+ class Table {\n+ constructor(descriptor: TableDescriptor, value?: any);\n+ readonly length: number;\n+ get(index: number): any;\n+ grow(delta: number, value?: any): number;\n+ set(index: number, value?: any): void;\n+ }\n+ function instantiate(module: Module, imports?: Imports): Promise;\n+ function validate(bytes: BufferSource): boolean;\n+}\n+/**\n+ * The **`ServiceWorkerGlobalScope`** interface of the Service Worker API represents the global execution context of a service worker.\n+ * Available only in secure contexts.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ServiceWorkerGlobalScope)\n+ */\n+interface ServiceWorkerGlobalScope extends WorkerGlobalScope {\n+ DOMException: typeof DOMException;\n+ WorkerGlobalScope: typeof WorkerGlobalScope;\n+ btoa(data: string): string;\n+ atob(data: string): string;\n+ setTimeout(callback: (...args: any[]) => void, msDelay?: number): number;\n+ setTimeout(callback: (...args: Args) => void, msDelay?: number, ...args: Args): number;\n+ clearTimeout(timeoutId: number | null): void;\n+ setInterval(callback: (...args: any[]) => void, msDelay?: number): number;\n+ setInterval(callback: (...args: Args) => void, msDelay?: number, ...args: Args): number;\n+ clearInterval(timeoutId: number | null): void;\n+ queueMicrotask(task: Function): void;\n+ structuredClone(value: T, options?: StructuredSerializeOptions): T;\n+ reportError(error: any): void;\n+ fetch(input: RequestInfo | URL, init?: RequestInit): Promise;\n+ self: ServiceWorkerGlobalScope;\n+ crypto: Crypto;\n+ caches: CacheStorage;\n+ scheduler: Scheduler;\n+ performance: Performance;\n+ Cloudflare: Cloudflare;\n+ readonly origin: string;\n+ Event: typeof Event;\n+ ExtendableEvent: typeof ExtendableEvent;\n+ CustomEvent: typeof CustomEvent;\n+ PromiseRejectionEvent: typeof PromiseRejectionEvent;\n+ FetchEvent: typeof FetchEvent;\n+ TailEvent: typeof TailEvent;\n+ TraceEvent: typeof TailEvent;\n+ ScheduledEvent: typeof ScheduledEvent;\n+ MessageEvent: typeof MessageEvent;\n+ CloseEvent: typeof CloseEvent;\n+ ReadableStreamDefaultReader: typeof ReadableStreamDefaultReader;\n+ ReadableStreamBYOBReader: typeof ReadableStreamBYOBReader;\n+ ReadableStream: typeof ReadableStream;\n+ WritableStream: typeof WritableStream;\n+ WritableStreamDefaultWriter: typeof WritableStreamDefaultWriter;\n+ TransformStream: typeof TransformStream;\n+ ByteLengthQueuingStrategy: typeof ByteLengthQueuingStrategy;\n+ CountQueuingStrategy: typeof CountQueuingStrategy;\n+ ErrorEvent: typeof ErrorEvent;\n+ MessageChannel: typeof MessageChannel;\n+ MessagePort: typeof MessagePort;\n+ EventSource: typeof EventSource;\n+ ReadableStreamBYOBRequest: typeof ReadableStreamBYOBRequest;\n+ ReadableStreamDefaultController: typeof ReadableStreamDefaultController;\n+ ReadableByteStreamController: typeof ReadableByteStreamController;\n+ WritableStreamDefaultController: typeof WritableStreamDefaultController;\n+ TransformStreamDefaultController: typeof TransformStreamDefaultController;\n+ CompressionStream: typeof CompressionStream;\n+ DecompressionStream: typeof DecompressionStream;\n+ TextEncoderStream: typeof TextEncoderStream;\n+ TextDecoderStream: typeof TextDecoderStream;\n+ Headers: typeof Headers;\n+ Body: typeof Body;\n+ Request: typeof Request;\n+ Response: typeof Response;\n+ WebSocket: typeof WebSocket;\n+ WebSocketPair: typeof WebSocketPair;\n+ WebSocketRequestResponsePair: typeof WebSocketRequestResponsePair;\n+ AbortController: typeof AbortController;\n+ AbortSignal: typeof AbortSignal;\n+ TextDecoder: typeof TextDecoder;\n+ TextEncoder: typeof TextEncoder;\n+ navigator: Navigator;\n+ Navigator: typeof Navigator;\n+ URL: typeof URL;\n+ URLSearchParams: typeof URLSearchParams;\n+ URLPattern: typeof URLPattern;\n+ Blob: typeof Blob;\n+ File: typeof File;\n+ FormData: typeof FormData;\n+ Crypto: typeof Crypto;\n+ SubtleCrypto: typeof SubtleCrypto;\n+ CryptoKey: typeof CryptoKey;\n+ CacheStorage: typeof CacheStorage;\n+ Cache: typeof Cache;\n+ FixedLengthStream: typeof FixedLengthStream;\n+ IdentityTransformStream: typeof IdentityTransformStream;\n+ HTMLRewriter: typeof HTMLRewriter;\n+}\n+declare function addEventListener(type: Type, handler: EventListenerOrEventListenerObject, options?: EventTargetAddEventListenerOptions | boolean): void;\n+declare function removeEventListener(type: Type, handler: EventListenerOrEventListenerObject, options?: EventTargetEventListenerOptions | boolean): void;\n+/**\n+ * The **`dispatchEvent()`** method of the EventTarget sends an Event to the object, (synchronously) invoking the affected event listeners in the appropriate order.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventTarget/dispatchEvent)\n+ */\n+declare function dispatchEvent(event: WorkerGlobalScopeEventMap[keyof WorkerGlobalScopeEventMap]): boolean;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/btoa) */\n+declare function btoa(data: string): string;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/atob) */\n+declare function atob(data: string): string;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/setTimeout) */\n+declare function setTimeout(callback: (...args: any[]) => void, msDelay?: number): number;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/setTimeout) */\n+declare function setTimeout(callback: (...args: Args) => void, msDelay?: number, ...args: Args): number;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/clearTimeout) */\n+declare function clearTimeout(timeoutId: number | null): void;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/setInterval) */\n+declare function setInterval(callback: (...args: any[]) => void, msDelay?: number): number;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/setInterval) */\n+declare function setInterval(callback: (...args: Args) => void, msDelay?: number, ...args: Args): number;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/clearInterval) */\n+declare function clearInterval(timeoutId: number | null): void;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/queueMicrotask) */\n+declare function queueMicrotask(task: Function): void;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/structuredClone) */\n+declare function structuredClone(value: T, options?: StructuredSerializeOptions): T;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/reportError) */\n+declare function reportError(error: any): void;\n+/* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Window/fetch) */\n+declare function fetch(input: RequestInfo | URL, init?: RequestInit): Promise;\n+declare const self: ServiceWorkerGlobalScope;\n+/**\n+* The Web Crypto API provides a set of low-level functions for common cryptographic tasks.\n+* The Workers runtime implements the full surface of this API, but with some differences in\n+* the [supported algorithms](https://developers.cloudflare.com/workers/runtime-apis/web-crypto/#supported-algorithms)\n+* compared to those implemented in most browsers.\n+*\n+* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/web-crypto/)\n+*/\n+declare const crypto: Crypto;\n+/**\n+* The Cache API allows fine grained control of reading and writing from the Cloudflare global network cache.\n+*\n+* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/cache/)\n+*/\n+declare const caches: CacheStorage;\n+declare const scheduler: Scheduler;\n+/**\n+* The Workers runtime supports a subset of the Performance API, used to measure timing and performance,\n+* as well as timing of subrequests and other operations.\n+*\n+* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/performance/)\n+*/\n+declare const performance: Performance;\n+declare const Cloudflare: Cloudflare;\n+declare const origin: string;\n+declare const navigator: Navigator;\n+interface TestController {\n+}\n+interface ExecutionContext {\n+ waitUntil(promise: Promise): void;\n+ passThroughOnException(): void;\n+ readonly exports: Cloudflare.Exports;\n+ readonly props: Props;\n+}\n+type ExportedHandlerFetchHandler = (request: Request>, env: Env, ctx: ExecutionContext) => Response | Promise;\n+type ExportedHandlerTailHandler = (events: TraceItem[], env: Env, ctx: ExecutionContext) => void | Promise;\n+type ExportedHandlerTraceHandler = (traces: TraceItem[], env: Env, ctx: ExecutionContext) => void | Promise;\n+type ExportedHandlerTailStreamHandler = (event: TailStream.TailEvent, env: Env, ctx: ExecutionContext) => TailStream.TailEventHandlerType | Promise;\n+type ExportedHandlerScheduledHandler = (controller: ScheduledController, env: Env, ctx: ExecutionContext) => void | Promise;\n+type ExportedHandlerQueueHandler = (batch: MessageBatch, env: Env, ctx: ExecutionContext) => void | Promise;\n+type ExportedHandlerTestHandler = (controller: TestController, env: Env, ctx: ExecutionContext) => void | Promise;\n+interface ExportedHandler {\n+ fetch?: ExportedHandlerFetchHandler;\n+ tail?: ExportedHandlerTailHandler;\n+ trace?: ExportedHandlerTraceHandler;\n+ tailStream?: ExportedHandlerTailStreamHandler;\n+ scheduled?: ExportedHandlerScheduledHandler;\n+ test?: ExportedHandlerTestHandler;\n+ email?: EmailExportedHandler;\n+ queue?: ExportedHandlerQueueHandler;\n+}\n+interface StructuredSerializeOptions {\n+ transfer?: any[];\n+}\n+declare abstract class Navigator {\n+ sendBeacon(url: string, body?: BodyInit): boolean;\n+ readonly userAgent: string;\n+ readonly hardwareConcurrency: number;\n+ readonly language: string;\n+ readonly languages: string[];\n+}\n+interface AlarmInvocationInfo {\n+ readonly isRetry: boolean;\n+ readonly retryCount: number;\n+}\n+interface Cloudflare {\n+ readonly compatibilityFlags: Record;\n+}\n+interface DurableObject {\n+ fetch(request: Request): Response | Promise;\n+ alarm?(alarmInfo?: AlarmInvocationInfo): void | Promise;\n+ webSocketMessage?(ws: WebSocket, message: string | ArrayBuffer): void | Promise;\n+ webSocketClose?(ws: WebSocket, code: number, reason: string, wasClean: boolean): void | Promise;\n+ webSocketError?(ws: WebSocket, error: unknown): void | Promise;\n+}\n+type DurableObjectStub = Fetcher & {\n+ readonly id: DurableObjectId;\n+ readonly name?: string;\n+};\n+interface DurableObjectId {\n+ toString(): string;\n+ equals(other: DurableObjectId): boolean;\n+ readonly name?: string;\n+}\n+declare abstract class DurableObjectNamespace {\n+ newUniqueId(options?: DurableObjectNamespaceNewUniqueIdOptions): DurableObjectId;\n+ idFromName(name: string): DurableObjectId;\n+ idFromString(id: string): DurableObjectId;\n+ get(id: DurableObjectId, options?: DurableObjectNamespaceGetDurableObjectOptions): DurableObjectStub;\n+ getByName(name: string, options?: DurableObjectNamespaceGetDurableObjectOptions): DurableObjectStub;\n+ jurisdiction(jurisdiction: DurableObjectJurisdiction): DurableObjectNamespace;\n+}\n+type DurableObjectJurisdiction = \"eu\" | \"fedramp\" | \"fedramp-high\";\n+interface DurableObjectNamespaceNewUniqueIdOptions {\n+ jurisdiction?: DurableObjectJurisdiction;\n+}\n+type DurableObjectLocationHint = \"wnam\" | \"enam\" | \"sam\" | \"weur\" | \"eeur\" | \"apac\" | \"oc\" | \"afr\" | \"me\";\n+type DurableObjectRoutingMode = \"primary-only\";\n+interface DurableObjectNamespaceGetDurableObjectOptions {\n+ locationHint?: DurableObjectLocationHint;\n+ routingMode?: DurableObjectRoutingMode;\n+}\n+interface DurableObjectClass<_T extends Rpc.DurableObjectBranded | undefined = undefined> {\n+}\n+interface DurableObjectState {\n+ waitUntil(promise: Promise): void;\n+ readonly exports: Cloudflare.Exports;\n+ readonly props: Props;\n+ readonly id: DurableObjectId;\n+ readonly storage: DurableObjectStorage;\n+ container?: Container;\n+ blockConcurrencyWhile(callback: () => Promise): Promise;\n+ acceptWebSocket(ws: WebSocket, tags?: string[]): void;\n+ getWebSockets(tag?: string): WebSocket[];\n+ setWebSocketAutoResponse(maybeReqResp?: WebSocketRequestResponsePair): void;\n+ getWebSocketAutoResponse(): WebSocketRequestResponsePair | null;\n+ getWebSocketAutoResponseTimestamp(ws: WebSocket): Date | null;\n+ setHibernatableWebSocketEventTimeout(timeoutMs?: number): void;\n+ getHibernatableWebSocketEventTimeout(): number | null;\n+ getTags(ws: WebSocket): string[];\n+ abort(reason?: string): void;\n+}\n+interface DurableObjectTransaction {\n+ get(key: string, options?: DurableObjectGetOptions): Promise;\n+ get(keys: string[], options?: DurableObjectGetOptions): Promise>;\n+ list(options?: DurableObjectListOptions): Promise>;\n+ put(key: string, value: T, options?: DurableObjectPutOptions): Promise;\n+ put(entries: Record, options?: DurableObjectPutOptions): Promise;\n+ delete(key: string, options?: DurableObjectPutOptions): Promise;\n+ delete(keys: string[], options?: DurableObjectPutOptions): Promise;\n+ rollback(): void;\n+ getAlarm(options?: DurableObjectGetAlarmOptions): Promise;\n+ setAlarm(scheduledTime: number | Date, options?: DurableObjectSetAlarmOptions): Promise;\n+ deleteAlarm(options?: DurableObjectSetAlarmOptions): Promise;\n+}\n+interface DurableObjectStorage {\n+ get(key: string, options?: DurableObjectGetOptions): Promise;\n+ get(keys: string[], options?: DurableObjectGetOptions): Promise>;\n+ list(options?: DurableObjectListOptions): Promise>;\n+ put(key: string, value: T, options?: DurableObjectPutOptions): Promise;\n+ put(entries: Record, options?: DurableObjectPutOptions): Promise;\n+ delete(key: string, options?: DurableObjectPutOptions): Promise;\n+ delete(keys: string[], options?: DurableObjectPutOptions): Promise;\n+ deleteAll(options?: DurableObjectPutOptions): Promise;\n+ transaction(closure: (txn: DurableObjectTransaction) => Promise): Promise;\n+ getAlarm(options?: DurableObjectGetAlarmOptions): Promise;\n+ setAlarm(scheduledTime: number | Date, options?: DurableObjectSetAlarmOptions): Promise;\n+ deleteAlarm(options?: DurableObjectSetAlarmOptions): Promise;\n+ sync(): Promise;\n+ sql: SqlStorage;\n+ kv: SyncKvStorage;\n+ transactionSync(closure: () => T): T;\n+ getCurrentBookmark(): Promise;\n+ getBookmarkForTime(timestamp: number | Date): Promise;\n+ onNextSessionRestoreBookmark(bookmark: string): Promise;\n+}\n+interface DurableObjectListOptions {\n+ start?: string;\n+ startAfter?: string;\n+ end?: string;\n+ prefix?: string;\n+ reverse?: boolean;\n+ limit?: number;\n+ allowConcurrency?: boolean;\n+ noCache?: boolean;\n+}\n+interface DurableObjectGetOptions {\n+ allowConcurrency?: boolean;\n+ noCache?: boolean;\n+}\n+interface DurableObjectGetAlarmOptions {\n+ allowConcurrency?: boolean;\n+}\n+interface DurableObjectPutOptions {\n+ allowConcurrency?: boolean;\n+ allowUnconfirmed?: boolean;\n+ noCache?: boolean;\n+}\n+interface DurableObjectSetAlarmOptions {\n+ allowConcurrency?: boolean;\n+ allowUnconfirmed?: boolean;\n+}\n+declare class WebSocketRequestResponsePair {\n+ constructor(request: string, response: string);\n+ get request(): string;\n+ get response(): string;\n+}\n+interface AnalyticsEngineDataset {\n+ writeDataPoint(event?: AnalyticsEngineDataPoint): void;\n+}\n+interface AnalyticsEngineDataPoint {\n+ indexes?: ((ArrayBuffer | string) | null)[];\n+ doubles?: number[];\n+ blobs?: ((ArrayBuffer | string) | null)[];\n+}\n+/**\n+ * The **`Event`** interface represents an event which takes place on an `EventTarget`.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event)\n+ */\n+declare class Event {\n+ constructor(type: string, init?: EventInit);\n+ /**\n+ * The **`type`** read-only property of the Event interface returns a string containing the event's type.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/type)\n+ */\n+ get type(): string;\n+ /**\n+ * The **`eventPhase`** read-only property of the being evaluated.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/eventPhase)\n+ */\n+ get eventPhase(): number;\n+ /**\n+ * The read-only **`composed`** property of the or not the event will propagate across the shadow DOM boundary into the standard DOM.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/composed)\n+ */\n+ get composed(): boolean;\n+ /**\n+ * The **`bubbles`** read-only property of the Event interface indicates whether the event bubbles up through the DOM tree or not.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/bubbles)\n+ */\n+ get bubbles(): boolean;\n+ /**\n+ * The **`cancelable`** read-only property of the Event interface indicates whether the event can be canceled, and therefore prevented as if the event never happened.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/cancelable)\n+ */\n+ get cancelable(): boolean;\n+ /**\n+ * The **`defaultPrevented`** read-only property of the Event interface returns a boolean value indicating whether or not the call to Event.preventDefault() canceled the event.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/defaultPrevented)\n+ */\n+ get defaultPrevented(): boolean;\n+ /**\n+ * The Event property **`returnValue`** indicates whether the default action for this event has been prevented or not.\n+ * @deprecated\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/returnValue)\n+ */\n+ get returnValue(): boolean;\n+ /**\n+ * The **`currentTarget`** read-only property of the Event interface identifies the element to which the event handler has been attached.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/currentTarget)\n+ */\n+ get currentTarget(): EventTarget | undefined;\n+ /**\n+ * The read-only **`target`** property of the dispatched.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/target)\n+ */\n+ get target(): EventTarget | undefined;\n+ /**\n+ * The deprecated **`Event.srcElement`** is an alias for the Event.target property.\n+ * @deprecated\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/srcElement)\n+ */\n+ get srcElement(): EventTarget | undefined;\n+ /**\n+ * The **`timeStamp`** read-only property of the Event interface returns the time (in milliseconds) at which the event was created.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/timeStamp)\n+ */\n+ get timeStamp(): number;\n+ /**\n+ * The **`isTrusted`** read-only property of the when the event was generated by the user agent (including via user actions and programmatic methods such as HTMLElement.focus()), and `false` when the event was dispatched via The only exception is the `click` event, which initializes the `isTrusted` property to `false` in user agents.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/isTrusted)\n+ */\n+ get isTrusted(): boolean;\n+ /**\n+ * The **`cancelBubble`** property of the Event interface is deprecated.\n+ * @deprecated\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/cancelBubble)\n+ */\n+ get cancelBubble(): boolean;\n+ /**\n+ * The **`cancelBubble`** property of the Event interface is deprecated.\n+ * @deprecated\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/cancelBubble)\n+ */\n+ set cancelBubble(value: boolean);\n+ /**\n+ * The **`stopImmediatePropagation()`** method of the If several listeners are attached to the same element for the same event type, they are called in the order in which they were added.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/stopImmediatePropagation)\n+ */\n+ stopImmediatePropagation(): void;\n+ /**\n+ * The **`preventDefault()`** method of the Event interface tells the user agent that if the event does not get explicitly handled, its default action should not be taken as it normally would be.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/preventDefault)\n+ */\n+ preventDefault(): void;\n+ /**\n+ * The **`stopPropagation()`** method of the Event interface prevents further propagation of the current event in the capturing and bubbling phases.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/stopPropagation)\n+ */\n+ stopPropagation(): void;\n+ /**\n+ * The **`composedPath()`** method of the Event interface returns the event's path which is an array of the objects on which listeners will be invoked.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/composedPath)\n+ */\n+ composedPath(): EventTarget[];\n+ static readonly NONE: number;\n+ static readonly CAPTURING_PHASE: number;\n+ static readonly AT_TARGET: number;\n+ static readonly BUBBLING_PHASE: number;\n+}\n+interface EventInit {\n+ bubbles?: boolean;\n+ cancelable?: boolean;\n+ composed?: boolean;\n+}\n+type EventListener = (event: EventType) => void;\n+interface EventListenerObject {\n+ handleEvent(event: EventType): void;\n+}\n+type EventListenerOrEventListenerObject = EventListener | EventListenerObject;\n+/**\n+ * The **`EventTarget`** interface is implemented by objects that can receive events and may have listeners for them.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventTarget)\n+ */\n+declare class EventTarget = Record> {\n+ constructor();\n+ /**\n+ * The **`addEventListener()`** method of the EventTarget interface sets up a function that will be called whenever the specified event is delivered to the target.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener)\n+ */\n+ addEventListener(type: Type, handler: EventListenerOrEventListenerObject, options?: EventTargetAddEventListenerOptions | boolean): void;\n+ /**\n+ * The **`removeEventListener()`** method of the EventTarget interface removes an event listener previously registered with EventTarget.addEventListener() from the target.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventTarget/removeEventListener)\n+ */\n+ removeEventListener(type: Type, handler: EventListenerOrEventListenerObject, options?: EventTargetEventListenerOptions | boolean): void;\n+ /**\n+ * The **`dispatchEvent()`** method of the EventTarget sends an Event to the object, (synchronously) invoking the affected event listeners in the appropriate order.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/EventTarget/dispatchEvent)\n+ */\n+ dispatchEvent(event: EventMap[keyof EventMap]): boolean;\n+}\n+interface EventTargetEventListenerOptions {\n+ capture?: boolean;\n+}\n+interface EventTargetAddEventListenerOptions {\n+ capture?: boolean;\n+ passive?: boolean;\n+ once?: boolean;\n+ signal?: AbortSignal;\n+}\n+interface EventTargetHandlerObject {\n+ handleEvent: (event: Event) => any | undefined;\n+}\n+/**\n+ * The **`AbortController`** interface represents a controller object that allows you to abort one or more Web requests as and when desired.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortController)\n+ */\n+declare class AbortController {\n+ constructor();\n+ /**\n+ * The **`signal`** read-only property of the AbortController interface returns an AbortSignal object instance, which can be used to communicate with/abort an asynchronous operation as desired.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortController/signal)\n+ */\n+ get signal(): AbortSignal;\n+ /**\n+ * The **`abort()`** method of the AbortController interface aborts an asynchronous operation before it has completed.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortController/abort)\n+ */\n+ abort(reason?: any): void;\n+}\n+/**\n+ * The **`AbortSignal`** interface represents a signal object that allows you to communicate with an asynchronous operation (such as a fetch request) and abort it if required via an AbortController object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal)\n+ */\n+declare abstract class AbortSignal extends EventTarget {\n+ /**\n+ * The **`AbortSignal.abort()`** static method returns an AbortSignal that is already set as aborted (and which does not trigger an AbortSignal/abort_event event).\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal/abort_static)\n+ */\n+ static abort(reason?: any): AbortSignal;\n+ /**\n+ * The **`AbortSignal.timeout()`** static method returns an AbortSignal that will automatically abort after a specified time.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal/timeout_static)\n+ */\n+ static timeout(delay: number): AbortSignal;\n+ /**\n+ * The **`AbortSignal.any()`** static method takes an iterable of abort signals and returns an AbortSignal.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal/any_static)\n+ */\n+ static any(signals: AbortSignal[]): AbortSignal;\n+ /**\n+ * The **`aborted`** read-only property returns a value that indicates whether the asynchronous operations the signal is communicating with are aborted (`true`) or not (`false`).\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal/aborted)\n+ */\n+ get aborted(): boolean;\n+ /**\n+ * The **`reason`** read-only property returns a JavaScript value that indicates the abort reason.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal/reason)\n+ */\n+ get reason(): any;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal/abort_event) */\n+ get onabort(): any | null;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal/abort_event) */\n+ set onabort(value: any | null);\n+ /**\n+ * The **`throwIfAborted()`** method throws the signal's abort AbortSignal.reason if the signal has been aborted; otherwise it does nothing.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/AbortSignal/throwIfAborted)\n+ */\n+ throwIfAborted(): void;\n+}\n+interface Scheduler {\n+ wait(delay: number, maybeOptions?: SchedulerWaitOptions): Promise;\n+}\n+interface SchedulerWaitOptions {\n+ signal?: AbortSignal;\n+}\n+/**\n+ * The **`ExtendableEvent`** interface extends the lifetime of the `install` and `activate` events dispatched on the global scope as part of the service worker lifecycle.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ExtendableEvent)\n+ */\n+declare abstract class ExtendableEvent extends Event {\n+ /**\n+ * The **`ExtendableEvent.waitUntil()`** method tells the event dispatcher that work is ongoing.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ExtendableEvent/waitUntil)\n+ */\n+ waitUntil(promise: Promise): void;\n+}\n+/**\n+ * The **`CustomEvent`** interface represents events initialized by an application for any purpose.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/CustomEvent)\n+ */\n+declare class CustomEvent extends Event {\n+ constructor(type: string, init?: CustomEventCustomEventInit);\n+ /**\n+ * The read-only **`detail`** property of the CustomEvent interface returns any data passed when initializing the event.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/CustomEvent/detail)\n+ */\n+ get detail(): T;\n+}\n+interface CustomEventCustomEventInit {\n+ bubbles?: boolean;\n+ cancelable?: boolean;\n+ composed?: boolean;\n+ detail?: any;\n+}\n+/**\n+ * The **`Blob`** interface represents a blob, which is a file-like object of immutable, raw data; they can be read as text or binary data, or converted into a ReadableStream so its methods can be used for processing the data.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Blob)\n+ */\n+declare class Blob {\n+ constructor(type?: ((ArrayBuffer | ArrayBufferView) | string | Blob)[], options?: BlobOptions);\n+ /**\n+ * The **`size`** read-only property of the Blob interface returns the size of the Blob or File in bytes.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Blob/size)\n+ */\n+ get size(): number;\n+ /**\n+ * The **`type`** read-only property of the Blob interface returns the MIME type of the file.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Blob/type)\n+ */\n+ get type(): string;\n+ /**\n+ * The **`slice()`** method of the Blob interface creates and returns a new `Blob` object which contains data from a subset of the blob on which it's called.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Blob/slice)\n+ */\n+ slice(start?: number, end?: number, type?: string): Blob;\n+ /**\n+ * The **`arrayBuffer()`** method of the Blob interface returns a Promise that resolves with the contents of the blob as binary data contained in an ArrayBuffer.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Blob/arrayBuffer)\n+ */\n+ arrayBuffer(): Promise;\n+ /**\n+ * The **`bytes()`** method of the Blob interface returns a Promise that resolves with a Uint8Array containing the contents of the blob as an array of bytes.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Blob/bytes)\n+ */\n+ bytes(): Promise;\n+ /**\n+ * The **`text()`** method of the string containing the contents of the blob, interpreted as UTF-8.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Blob/text)\n+ */\n+ text(): Promise;\n+ /**\n+ * The **`stream()`** method of the Blob interface returns a ReadableStream which upon reading returns the data contained within the `Blob`.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Blob/stream)\n+ */\n+ stream(): ReadableStream;\n+}\n+interface BlobOptions {\n+ type?: string;\n+}\n+/**\n+ * The **`File`** interface provides information about files and allows JavaScript in a web page to access their content.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/File)\n+ */\n+declare class File extends Blob {\n+ constructor(bits: ((ArrayBuffer | ArrayBufferView) | string | Blob)[] | undefined, name: string, options?: FileOptions);\n+ /**\n+ * The **`name`** read-only property of the File interface returns the name of the file represented by a File object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/File/name)\n+ */\n+ get name(): string;\n+ /**\n+ * The **`lastModified`** read-only property of the File interface provides the last modified date of the file as the number of milliseconds since the Unix epoch (January 1, 1970 at midnight).\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/File/lastModified)\n+ */\n+ get lastModified(): number;\n+}\n+interface FileOptions {\n+ type?: string;\n+ lastModified?: number;\n+}\n+/**\n+* The Cache API allows fine grained control of reading and writing from the Cloudflare global network cache.\n+*\n+* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/cache/)\n+*/\n+declare abstract class CacheStorage {\n+ /**\n+ * The **`open()`** method of the the Cache object matching the `cacheName`.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/CacheStorage/open)\n+ */\n+ open(cacheName: string): Promise;\n+ readonly default: Cache;\n+}\n+/**\n+* The Cache API allows fine grained control of reading and writing from the Cloudflare global network cache.\n+*\n+* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/cache/)\n+*/\n+declare abstract class Cache {\n+ /* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/cache/#delete) */\n+ delete(request: RequestInfo | URL, options?: CacheQueryOptions): Promise;\n+ /* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/cache/#match) */\n+ match(request: RequestInfo | URL, options?: CacheQueryOptions): Promise;\n+ /* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/cache/#put) */\n+ put(request: RequestInfo | URL, response: Response): Promise;\n+}\n+interface CacheQueryOptions {\n+ ignoreMethod?: boolean;\n+}\n+/**\n+* The Web Crypto API provides a set of low-level functions for common cryptographic tasks.\n+* The Workers runtime implements the full surface of this API, but with some differences in\n+* the [supported algorithms](https://developers.cloudflare.com/workers/runtime-apis/web-crypto/#supported-algorithms)\n+* compared to those implemented in most browsers.\n+*\n+* [Cloudflare Docs Reference](https://developers.cloudflare.com/workers/runtime-apis/web-crypto/)\n+*/\n+declare abstract class Crypto {\n+ /**\n+ * The **`Crypto.subtle`** read-only property returns a cryptographic operations.\n+ * Available only in secure contexts.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Crypto/subtle)\n+ */\n+ get subtle(): SubtleCrypto;\n+ /**\n+ * The **`Crypto.getRandomValues()`** method lets you get cryptographically strong random values.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Crypto/getRandomValues)\n+ */\n+ getRandomValues(buffer: T): T;\n+ /**\n+ * The **`randomUUID()`** method of the Crypto interface is used to generate a v4 UUID using a cryptographically secure random number generator.\n+ * Available only in secure contexts.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Crypto/randomUUID)\n+ */\n+ randomUUID(): string;\n+ DigestStream: typeof DigestStream;\n+}\n+/**\n+ * The **`SubtleCrypto`** interface of the Web Crypto API provides a number of low-level cryptographic functions.\n+ * Available only in secure contexts.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto)\n+ */\n+declare abstract class SubtleCrypto {\n+ /**\n+ * The **`encrypt()`** method of the SubtleCrypto interface encrypts data.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/encrypt)\n+ */\n+ encrypt(algorithm: string | SubtleCryptoEncryptAlgorithm, key: CryptoKey, plainText: ArrayBuffer | ArrayBufferView): Promise;\n+ /**\n+ * The **`decrypt()`** method of the SubtleCrypto interface decrypts some encrypted data.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/decrypt)\n+ */\n+ decrypt(algorithm: string | SubtleCryptoEncryptAlgorithm, key: CryptoKey, cipherText: ArrayBuffer | ArrayBufferView): Promise;\n+ /**\n+ * The **`sign()`** method of the SubtleCrypto interface generates a digital signature.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/sign)\n+ */\n+ sign(algorithm: string | SubtleCryptoSignAlgorithm, key: CryptoKey, data: ArrayBuffer | ArrayBufferView): Promise;\n+ /**\n+ * The **`verify()`** method of the SubtleCrypto interface verifies a digital signature.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/verify)\n+ */\n+ verify(algorithm: string | SubtleCryptoSignAlgorithm, key: CryptoKey, signature: ArrayBuffer | ArrayBufferView, data: ArrayBuffer | ArrayBufferView): Promise;\n+ /**\n+ * The **`digest()`** method of the SubtleCrypto interface generates a _digest_ of the given data, using the specified hash function.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/digest)\n+ */\n+ digest(algorithm: string | SubtleCryptoHashAlgorithm, data: ArrayBuffer | ArrayBufferView): Promise;\n+ /**\n+ * The **`generateKey()`** method of the SubtleCrypto interface is used to generate a new key (for symmetric algorithms) or key pair (for public-key algorithms).\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/generateKey)\n+ */\n+ generateKey(algorithm: string | SubtleCryptoGenerateKeyAlgorithm, extractable: boolean, keyUsages: string[]): Promise;\n+ /**\n+ * The **`deriveKey()`** method of the SubtleCrypto interface can be used to derive a secret key from a master key.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/deriveKey)\n+ */\n+ deriveKey(algorithm: string | SubtleCryptoDeriveKeyAlgorithm, baseKey: CryptoKey, derivedKeyAlgorithm: string | SubtleCryptoImportKeyAlgorithm, extractable: boolean, keyUsages: string[]): Promise;\n+ /**\n+ * The **`deriveBits()`** method of the key.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/deriveBits)\n+ */\n+ deriveBits(algorithm: string | SubtleCryptoDeriveKeyAlgorithm, baseKey: CryptoKey, length?: number | null): Promise;\n+ /**\n+ * The **`importKey()`** method of the SubtleCrypto interface imports a key: that is, it takes as input a key in an external, portable format and gives you a CryptoKey object that you can use in the Web Crypto API.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/importKey)\n+ */\n+ importKey(format: string, keyData: (ArrayBuffer | ArrayBufferView) | JsonWebKey, algorithm: string | SubtleCryptoImportKeyAlgorithm, extractable: boolean, keyUsages: string[]): Promise;\n+ /**\n+ * The **`exportKey()`** method of the SubtleCrypto interface exports a key: that is, it takes as input a CryptoKey object and gives you the key in an external, portable format.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/exportKey)\n+ */\n+ exportKey(format: string, key: CryptoKey): Promise;\n+ /**\n+ * The **`wrapKey()`** method of the SubtleCrypto interface 'wraps' a key.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/wrapKey)\n+ */\n+ wrapKey(format: string, key: CryptoKey, wrappingKey: CryptoKey, wrapAlgorithm: string | SubtleCryptoEncryptAlgorithm): Promise;\n+ /**\n+ * The **`unwrapKey()`** method of the SubtleCrypto interface 'unwraps' a key.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/SubtleCrypto/unwrapKey)\n+ */\n+ unwrapKey(format: string, wrappedKey: ArrayBuffer | ArrayBufferView, unwrappingKey: CryptoKey, unwrapAlgorithm: string | SubtleCryptoEncryptAlgorithm, unwrappedKeyAlgorithm: string | SubtleCryptoImportKeyAlgorithm, extractable: boolean, keyUsages: string[]): Promise;\n+ timingSafeEqual(a: ArrayBuffer | ArrayBufferView, b: ArrayBuffer | ArrayBufferView): boolean;\n+}\n+/**\n+ * The **`CryptoKey`** interface of the Web Crypto API represents a cryptographic key obtained from one of the SubtleCrypto methods SubtleCrypto.generateKey, SubtleCrypto.deriveKey, SubtleCrypto.importKey, or SubtleCrypto.unwrapKey.\n+ * Available only in secure contexts.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/CryptoKey)\n+ */\n+declare abstract class CryptoKey {\n+ /**\n+ * The read-only **`type`** property of the CryptoKey interface indicates which kind of key is represented by the object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/CryptoKey/type)\n+ */\n+ readonly type: string;\n+ /**\n+ * The read-only **`extractable`** property of the CryptoKey interface indicates whether or not the key may be extracted using `SubtleCrypto.exportKey()` or `SubtleCrypto.wrapKey()`.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/CryptoKey/extractable)\n+ */\n+ readonly extractable: boolean;\n+ /**\n+ * The read-only **`algorithm`** property of the CryptoKey interface returns an object describing the algorithm for which this key can be used, and any associated extra parameters.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/CryptoKey/algorithm)\n+ */\n+ readonly algorithm: CryptoKeyKeyAlgorithm | CryptoKeyAesKeyAlgorithm | CryptoKeyHmacKeyAlgorithm | CryptoKeyRsaKeyAlgorithm | CryptoKeyEllipticKeyAlgorithm | CryptoKeyArbitraryKeyAlgorithm;\n+ /**\n+ * The read-only **`usages`** property of the CryptoKey interface indicates what can be done with the key.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/CryptoKey/usages)\n+ */\n+ readonly usages: string[];\n+}\n+interface CryptoKeyPair {\n+ publicKey: CryptoKey;\n+ privateKey: CryptoKey;\n+}\n+interface JsonWebKey {\n+ kty: string;\n+ use?: string;\n+ key_ops?: string[];\n+ alg?: string;\n+ ext?: boolean;\n+ crv?: string;\n+ x?: string;\n+ y?: string;\n+ d?: string;\n+ n?: string;\n+ e?: string;\n+ p?: string;\n+ q?: string;\n+ dp?: string;\n+ dq?: string;\n+ qi?: string;\n+ oth?: RsaOtherPrimesInfo[];\n+ k?: string;\n+}\n+interface RsaOtherPrimesInfo {\n+ r?: string;\n+ d?: string;\n+ t?: string;\n+}\n+interface SubtleCryptoDeriveKeyAlgorithm {\n+ name: string;\n+ salt?: (ArrayBuffer | ArrayBufferView);\n+ iterations?: number;\n+ hash?: (string | SubtleCryptoHashAlgorithm);\n+ $public?: CryptoKey;\n+ info?: (ArrayBuffer | ArrayBufferView);\n+}\n+interface SubtleCryptoEncryptAlgorithm {\n+ name: string;\n+ iv?: (ArrayBuffer | ArrayBufferView);\n+ additionalData?: (ArrayBuffer | ArrayBufferView);\n+ tagLength?: number;\n+ counter?: (ArrayBuffer | ArrayBufferView);\n+ length?: number;\n+ label?: (ArrayBuffer | ArrayBufferView);\n+}\n+interface SubtleCryptoGenerateKeyAlgorithm {\n+ name: string;\n+ hash?: (string | SubtleCryptoHashAlgorithm);\n+ modulusLength?: number;\n+ publicExponent?: (ArrayBuffer | ArrayBufferView);\n+ length?: number;\n+ namedCurve?: string;\n+}\n+interface SubtleCryptoHashAlgorithm {\n+ name: string;\n+}\n+interface SubtleCryptoImportKeyAlgorithm {\n+ name: string;\n+ hash?: (string | SubtleCryptoHashAlgorithm);\n+ length?: number;\n+ namedCurve?: string;\n+ compressed?: boolean;\n+}\n+interface SubtleCryptoSignAlgorithm {\n+ name: string;\n+ hash?: (string | SubtleCryptoHashAlgorithm);\n+ dataLength?: number;\n+ saltLength?: number;\n+}\n+interface CryptoKeyKeyAlgorithm {\n+ name: string;\n+}\n+interface CryptoKeyAesKeyAlgorithm {\n+ name: string;\n+ length: number;\n+}\n+interface CryptoKeyHmacKeyAlgorithm {\n+ name: string;\n+ hash: CryptoKeyKeyAlgorithm;\n+ length: number;\n+}\n+interface CryptoKeyRsaKeyAlgorithm {\n+ name: string;\n+ modulusLength: number;\n+ publicExponent: ArrayBuffer | ArrayBufferView;\n+ hash?: CryptoKeyKeyAlgorithm;\n+}\n+interface CryptoKeyEllipticKeyAlgorithm {\n+ name: string;\n+ namedCurve: string;\n+}\n+interface CryptoKeyArbitraryKeyAlgorithm {\n+ name: string;\n+ hash?: CryptoKeyKeyAlgorithm;\n+ namedCurve?: string;\n+ length?: number;\n+}\n+declare class DigestStream extends WritableStream {\n+ constructor(algorithm: string | SubtleCryptoHashAlgorithm);\n+ readonly digest: Promise;\n+ get bytesWritten(): number | bigint;\n+}\n+/**\n+ * The **`TextDecoder`** interface represents a decoder for a specific text encoding, such as `UTF-8`, `ISO-8859-2`, `KOI8-R`, `GBK`, etc.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/TextDecoder)\n+ */\n+declare class TextDecoder {\n+ constructor(label?: string, options?: TextDecoderConstructorOptions);\n+ /**\n+ * The **`TextDecoder.decode()`** method returns a string containing text decoded from the buffer passed as a parameter.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/TextDecoder/decode)\n+ */\n+ decode(input?: (ArrayBuffer | ArrayBufferView), options?: TextDecoderDecodeOptions): string;\n+ get encoding(): string;\n+ get fatal(): boolean;\n+ get ignoreBOM(): boolean;\n+}\n+/**\n+ * The **`TextEncoder`** interface takes a stream of code points as input and emits a stream of UTF-8 bytes.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/TextEncoder)\n+ */\n+declare class TextEncoder {\n+ constructor();\n+ /**\n+ * The **`TextEncoder.encode()`** method takes a string as input, and returns a Global_Objects/Uint8Array containing the text given in parameters encoded with the specific method for that TextEncoder object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/TextEncoder/encode)\n+ */\n+ encode(input?: string): Uint8Array;\n+ /**\n+ * The **`TextEncoder.encodeInto()`** method takes a string to encode and a destination Uint8Array to put resulting UTF-8 encoded text into, and returns a dictionary object indicating the progress of the encoding.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/TextEncoder/encodeInto)\n+ */\n+ encodeInto(input: string, buffer: Uint8Array): TextEncoderEncodeIntoResult;\n+ get encoding(): string;\n+}\n+interface TextDecoderConstructorOptions {\n+ fatal: boolean;\n+ ignoreBOM: boolean;\n+}\n+interface TextDecoderDecodeOptions {\n+ stream: boolean;\n+}\n+interface TextEncoderEncodeIntoResult {\n+ read: number;\n+ written: number;\n+}\n+/**\n+ * The **`ErrorEvent`** interface represents events providing information related to errors in scripts or in files.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ErrorEvent)\n+ */\n+declare class ErrorEvent extends Event {\n+ constructor(type: string, init?: ErrorEventErrorEventInit);\n+ /**\n+ * The **`filename`** read-only property of the ErrorEvent interface returns a string containing the name of the script file in which the error occurred.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ErrorEvent/filename)\n+ */\n+ get filename(): string;\n+ /**\n+ * The **`message`** read-only property of the ErrorEvent interface returns a string containing a human-readable error message describing the problem.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ErrorEvent/message)\n+ */\n+ get message(): string;\n+ /**\n+ * The **`lineno`** read-only property of the ErrorEvent interface returns an integer containing the line number of the script file on which the error occurred.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ErrorEvent/lineno)\n+ */\n+ get lineno(): number;\n+ /**\n+ * The **`colno`** read-only property of the ErrorEvent interface returns an integer containing the column number of the script file on which the error occurred.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ErrorEvent/colno)\n+ */\n+ get colno(): number;\n+ /**\n+ * The **`error`** read-only property of the ErrorEvent interface returns a JavaScript value, such as an Error or DOMException, representing the error associated with this event.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/ErrorEvent/error)\n+ */\n+ get error(): any;\n+}\n+interface ErrorEventErrorEventInit {\n+ message?: string;\n+ filename?: string;\n+ lineno?: number;\n+ colno?: number;\n+ error?: any;\n+}\n+/**\n+ * The **`MessageEvent`** interface represents a message received by a target object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/MessageEvent)\n+ */\n+declare class MessageEvent extends Event {\n+ constructor(type: string, initializer: MessageEventInit);\n+ /**\n+ * The **`data`** read-only property of the The data sent by the message emitter; this can be any data type, depending on what originated this event.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/MessageEvent/data)\n+ */\n+ readonly data: any;\n+ /**\n+ * The **`origin`** read-only property of the origin of the message emitter.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/MessageEvent/origin)\n+ */\n+ readonly origin: string | null;\n+ /**\n+ * The **`lastEventId`** read-only property of the unique ID for the event.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/MessageEvent/lastEventId)\n+ */\n+ readonly lastEventId: string;\n+ /**\n+ * The **`source`** read-only property of the a WindowProxy, MessagePort, or a `MessageEventSource` (which can be a WindowProxy, message emitter.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/MessageEvent/source)\n+ */\n+ readonly source: MessagePort | null;\n+ /**\n+ * The **`ports`** read-only property of the containing all MessagePort objects sent with the message, in order.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/MessageEvent/ports)\n+ */\n+ readonly ports: MessagePort[];\n+}\n+interface MessageEventInit {\n+ data: ArrayBuffer | string;\n+}\n+/**\n+ * The **`PromiseRejectionEvent`** interface represents events which are sent to the global script context when JavaScript Promises are rejected.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/PromiseRejectionEvent)\n+ */\n+declare abstract class PromiseRejectionEvent extends Event {\n+ /**\n+ * The PromiseRejectionEvent interface's **`promise`** read-only property indicates the JavaScript rejected.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/PromiseRejectionEvent/promise)\n+ */\n+ readonly promise: Promise;\n+ /**\n+ * The PromiseRejectionEvent **`reason`** read-only property is any JavaScript value or Object which provides the reason passed into Promise.reject().\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/PromiseRejectionEvent/reason)\n+ */\n+ readonly reason: any;\n+}\n+/**\n+ * The **`FormData`** interface provides a way to construct a set of key/value pairs representing form fields and their values, which can be sent using the Window/fetch, XMLHttpRequest.send() or navigator.sendBeacon() methods.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData)\n+ */\n+declare class FormData {\n+ constructor();\n+ /**\n+ * The **`append()`** method of the FormData interface appends a new value onto an existing key inside a `FormData` object, or adds the key if it does not already exist.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/append)\n+ */\n+ append(name: string, value: string | Blob): void;\n+ /**\n+ * The **`append()`** method of the FormData interface appends a new value onto an existing key inside a `FormData` object, or adds the key if it does not already exist.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/append)\n+ */\n+ append(name: string, value: string): void;\n+ /**\n+ * The **`append()`** method of the FormData interface appends a new value onto an existing key inside a `FormData` object, or adds the key if it does not already exist.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/append)\n+ */\n+ append(name: string, value: Blob, filename?: string): void;\n+ /**\n+ * The **`delete()`** method of the FormData interface deletes a key and its value(s) from a `FormData` object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/delete)\n+ */\n+ delete(name: string): void;\n+ /**\n+ * The **`get()`** method of the FormData interface returns the first value associated with a given key from within a `FormData` object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/get)\n+ */\n+ get(name: string): (File | string) | null;\n+ /**\n+ * The **`getAll()`** method of the FormData interface returns all the values associated with a given key from within a `FormData` object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/getAll)\n+ */\n+ getAll(name: string): (File | string)[];\n+ /**\n+ * The **`has()`** method of the FormData interface returns whether a `FormData` object contains a certain key.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/has)\n+ */\n+ has(name: string): boolean;\n+ /**\n+ * The **`set()`** method of the FormData interface sets a new value for an existing key inside a `FormData` object, or adds the key/value if it does not already exist.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/set)\n+ */\n+ set(name: string, value: string | Blob): void;\n+ /**\n+ * The **`set()`** method of the FormData interface sets a new value for an existing key inside a `FormData` object, or adds the key/value if it does not already exist.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/set)\n+ */\n+ set(name: string, value: string): void;\n+ /**\n+ * The **`set()`** method of the FormData interface sets a new value for an existing key inside a `FormData` object, or adds the key/value if it does not already exist.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FormData/set)\n+ */\n+ set(name: string, value: Blob, filename?: string): void;\n+ /* Returns an array of key, value pairs for every entry in the list. */\n+ entries(): IterableIterator<[\n+ key: string,\n+ value: File | string\n+ ]>;\n+ /* Returns a list of keys in the list. */\n+ keys(): IterableIterator;\n+ /* Returns a list of values in the list. */\n+ values(): IterableIterator<(File | string)>;\n+ forEach(callback: (this: This, value: File | string, key: string, parent: FormData) => void, thisArg?: This): void;\n+ [Symbol.iterator](): IterableIterator<[\n+ key: string,\n+ value: File | string\n+ ]>;\n+}\n+interface ContentOptions {\n+ html?: boolean;\n+}\n+declare class HTMLRewriter {\n+ constructor();\n+ on(selector: string, handlers: HTMLRewriterElementContentHandlers): HTMLRewriter;\n+ onDocument(handlers: HTMLRewriterDocumentContentHandlers): HTMLRewriter;\n+ transform(response: Response): Response;\n+}\n+interface HTMLRewriterElementContentHandlers {\n+ element?(element: Element): void | Promise;\n+ comments?(comment: Comment): void | Promise;\n+ text?(element: Text): void | Promise;\n+}\n+interface HTMLRewriterDocumentContentHandlers {\n+ doctype?(doctype: Doctype): void | Promise;\n+ comments?(comment: Comment): void | Promise;\n+ text?(text: Text): void | Promise;\n+ end?(end: DocumentEnd): void | Promise;\n+}\n+interface Doctype {\n+ readonly name: string | null;\n+ readonly publicId: string | null;\n+ readonly systemId: string | null;\n+}\n+interface Element {\n+ tagName: string;\n+ readonly attributes: IterableIterator;\n+ readonly removed: boolean;\n+ readonly namespaceURI: string;\n+ getAttribute(name: string): string | null;\n+ hasAttribute(name: string): boolean;\n+ setAttribute(name: string, value: string): Element;\n+ removeAttribute(name: string): Element;\n+ before(content: string | ReadableStream | Response, options?: ContentOptions): Element;\n+ after(content: string | ReadableStream | Response, options?: ContentOptions): Element;\n+ prepend(content: string | ReadableStream | Response, options?: ContentOptions): Element;\n+ append(content: string | ReadableStream | Response, options?: ContentOptions): Element;\n+ replace(content: string | ReadableStream | Response, options?: ContentOptions): Element;\n+ remove(): Element;\n+ removeAndKeepContent(): Element;\n+ setInnerContent(content: string | ReadableStream | Response, options?: ContentOptions): Element;\n+ onEndTag(handler: (tag: EndTag) => void | Promise): void;\n+}\n+interface EndTag {\n+ name: string;\n+ before(content: string | ReadableStream | Response, options?: ContentOptions): EndTag;\n+ after(content: string | ReadableStream | Response, options?: ContentOptions): EndTag;\n+ remove(): EndTag;\n+}\n+interface Comment {\n+ text: string;\n+ readonly removed: boolean;\n+ before(content: string, options?: ContentOptions): Comment;\n+ after(content: string, options?: ContentOptions): Comment;\n+ replace(content: string, options?: ContentOptions): Comment;\n+ remove(): Comment;\n+}\n+interface Text {\n+ readonly text: string;\n+ readonly lastInTextNode: boolean;\n+ readonly removed: boolean;\n+ before(content: string | ReadableStream | Response, options?: ContentOptions): Text;\n+ after(content: string | ReadableStream | Response, options?: ContentOptions): Text;\n+ replace(content: string | ReadableStream | Response, options?: ContentOptions): Text;\n+ remove(): Text;\n+}\n+interface DocumentEnd {\n+ append(content: string, options?: ContentOptions): DocumentEnd;\n+}\n+/**\n+ * This is the event type for `fetch` events dispatched on the ServiceWorkerGlobalScope.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FetchEvent)\n+ */\n+declare abstract class FetchEvent extends ExtendableEvent {\n+ /**\n+ * The **`request`** read-only property of the the event handler.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FetchEvent/request)\n+ */\n+ readonly request: Request;\n+ /**\n+ * The **`respondWith()`** method of allows you to provide a promise for a Response yourself.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/FetchEvent/respondWith)\n+ */\n+ respondWith(promise: Response | Promise): void;\n+ passThroughOnException(): void;\n+}\n+type HeadersInit = Headers | Iterable> | Record;\n+/**\n+ * The **`Headers`** interface of the Fetch API allows you to perform various actions on HTTP request and response headers.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Headers)\n+ */\n+declare class Headers {\n+ constructor(init?: HeadersInit);\n+ /**\n+ * The **`get()`** method of the Headers interface returns a byte string of all the values of a header within a `Headers` object with a given name.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Headers/get)\n+ */\n+ get(name: string): string | null;\n+ getAll(name: string): string[];\n+ /**\n+ * The **`getSetCookie()`** method of the Headers interface returns an array containing the values of all Set-Cookie headers associated with a response.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Headers/getSetCookie)\n+ */\n+ getSetCookie(): string[];\n+ /**\n+ * The **`has()`** method of the Headers interface returns a boolean stating whether a `Headers` object contains a certain header.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Headers/has)\n+ */\n+ has(name: string): boolean;\n+ /**\n+ * The **`set()`** method of the Headers interface sets a new value for an existing header inside a `Headers` object, or adds the header if it does not already exist.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Headers/set)\n+ */\n+ set(name: string, value: string): void;\n+ /**\n+ * The **`append()`** method of the Headers interface appends a new value onto an existing header inside a `Headers` object, or adds the header if it does not already exist.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Headers/append)\n+ */\n+ append(name: string, value: string): void;\n+ /**\n+ * The **`delete()`** method of the Headers interface deletes a header from the current `Headers` object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Headers/delete)\n+ */\n+ delete(name: string): void;\n+ forEach(callback: (this: This, value: string, key: string, parent: Headers) => void, thisArg?: This): void;\n+ /* Returns an iterator allowing to go through all key/value pairs contained in this object. */\n+ entries(): IterableIterator<[\n+ key: string,\n+ value: string\n+ ]>;\n+ /* Returns an iterator allowing to go through all keys of the key/value pairs contained in this object. */\n+ keys(): IterableIterator;\n+ /* Returns an iterator allowing to go through all values of the key/value pairs contained in this object. */\n+ values(): IterableIterator;\n+ [Symbol.iterator](): IterableIterator<[\n+ key: string,\n+ value: string\n+ ]>;\n+}\n+type BodyInit = ReadableStream | string | ArrayBuffer | ArrayBufferView | Blob | URLSearchParams | FormData;\n+declare abstract class Body {\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/body) */\n+ get body(): ReadableStream | null;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bodyUsed) */\n+ get bodyUsed(): boolean;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/arrayBuffer) */\n+ arrayBuffer(): Promise;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/bytes) */\n+ bytes(): Promise;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/text) */\n+ text(): Promise;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/json) */\n+ json(): Promise;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/formData) */\n+ formData(): Promise;\n+ /* [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/blob) */\n+ blob(): Promise;\n+}\n+/**\n+ * The **`Response`** interface of the Fetch API represents the response to a request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response)\n+ */\n+declare var Response: {\n+ prototype: Response;\n+ new (body?: BodyInit | null, init?: ResponseInit): Response;\n+ error(): Response;\n+ redirect(url: string, status?: number): Response;\n+ json(any: any, maybeInit?: (ResponseInit | Response)): Response;\n+};\n+/**\n+ * The **`Response`** interface of the Fetch API represents the response to a request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response)\n+ */\n+interface Response extends Body {\n+ /**\n+ * The **`clone()`** method of the Response interface creates a clone of a response object, identical in every way, but stored in a different variable.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response/clone)\n+ */\n+ clone(): Response;\n+ /**\n+ * The **`status`** read-only property of the Response interface contains the HTTP status codes of the response.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response/status)\n+ */\n+ status: number;\n+ /**\n+ * The **`statusText`** read-only property of the Response interface contains the status message corresponding to the HTTP status code in Response.status.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response/statusText)\n+ */\n+ statusText: string;\n+ /**\n+ * The **`headers`** read-only property of the with the response.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response/headers)\n+ */\n+ headers: Headers;\n+ /**\n+ * The **`ok`** read-only property of the Response interface contains a Boolean stating whether the response was successful (status in the range 200-299) or not.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response/ok)\n+ */\n+ ok: boolean;\n+ /**\n+ * The **`redirected`** read-only property of the Response interface indicates whether or not the response is the result of a request you made which was redirected.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response/redirected)\n+ */\n+ redirected: boolean;\n+ /**\n+ * The **`url`** read-only property of the Response interface contains the URL of the response.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response/url)\n+ */\n+ url: string;\n+ webSocket: WebSocket | null;\n+ cf: any | undefined;\n+ /**\n+ * The **`type`** read-only property of the Response interface contains the type of the response.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Response/type)\n+ */\n+ type: \"default\" | \"error\";\n+}\n+interface ResponseInit {\n+ status?: number;\n+ statusText?: string;\n+ headers?: HeadersInit;\n+ cf?: any;\n+ webSocket?: (WebSocket | null);\n+ encodeBody?: \"automatic\" | \"manual\";\n+}\n+type RequestInfo> = Request | string;\n+/**\n+ * The **`Request`** interface of the Fetch API represents a resource request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request)\n+ */\n+declare var Request: {\n+ prototype: Request;\n+ new >(input: RequestInfo | URL, init?: RequestInit): Request;\n+};\n+/**\n+ * The **`Request`** interface of the Fetch API represents a resource request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request)\n+ */\n+interface Request> extends Body {\n+ /**\n+ * The **`clone()`** method of the Request interface creates a copy of the current `Request` object.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/clone)\n+ */\n+ clone(): Request;\n+ /**\n+ * The **`method`** read-only property of the `POST`, etc.) A String indicating the method of the request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/method)\n+ */\n+ method: string;\n+ /**\n+ * The **`url`** read-only property of the Request interface contains the URL of the request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/url)\n+ */\n+ url: string;\n+ /**\n+ * The **`headers`** read-only property of the with the request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/headers)\n+ */\n+ headers: Headers;\n+ /**\n+ * The **`redirect`** read-only property of the Request interface contains the mode for how redirects are handled.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/redirect)\n+ */\n+ redirect: string;\n+ fetcher: Fetcher | null;\n+ /**\n+ * The read-only **`signal`** property of the Request interface returns the AbortSignal associated with the request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/signal)\n+ */\n+ signal: AbortSignal;\n+ cf?: Cf;\n+ /**\n+ * The **`integrity`** read-only property of the Request interface contains the subresource integrity value of the request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/integrity)\n+ */\n+ integrity: string;\n+ /**\n+ * The **`keepalive`** read-only property of the Request interface contains the request's `keepalive` setting (`true` or `false`), which indicates whether the browser will keep the associated request alive if the page that initiated it is unloaded before the request is complete.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/keepalive)\n+ */\n+ keepalive: boolean;\n+ /**\n+ * The **`cache`** read-only property of the Request interface contains the cache mode of the request.\n+ *\n+ * [MDN Reference](https://developer.mozilla.org/docs/Web/API/Request/cache)\n+ */\n+ cache?: \"no-store\" | \"no-cache\";\n+}\n+interface RequestInit {\n+ /* A string to set request's method. */\n+ method?: string;\n+ /* A Headers object, an object literal, or an array of two-item arrays to set request's headers. */\n+ headers?: HeadersInit;\n+ /* A BodyInit object or null to set request's body. */\n+ body?: BodyInit | null;\n+ /* A string indicating whether request follows redirects, results in an error upon encountering a redirect, or returns the redirect (in an opaque fashion). Sets request's redirect. */\n+ redirect?: string;\n+ fetcher?: (Fetcher | null);\n+ cf?: Cf;\n+ /* A string indicating how the request will interact with the browser's cache to set request's cache. */\n+ cache?: \"no-store\" | \"no-cache\";\n+ /* A cryptographic hash of the resource to be fetched by request. Sets request's integrity. */\n+ integrity?: string;\n+ /* An AbortSignal to set request's signal. */\n+ signal?: (AbortSignal | null);\n+ encodeResponseBody?: \"automatic\" | \"manual\";\n+}\n+type Service Rpc.WorkerEntrypointBranded) | Rpc.WorkerEntrypointBranded | ExportedHandler | undefined = undefined> = T extends new (...args: any[]) => Rpc.WorkerEntrypointBranded ? Fetcher> : T extends Rpc.WorkerEntrypointBranded ? Fetcher : T extends Exclude ? never : Fetcher;\n+type Fetcher = (T extends Rpc.EntrypointBranded ? Rpc.Provider : unknown) & {\n+ fetch(input: RequestInfo | URL, init?: RequestInit): Promise;\n+ connect(address: SocketAddress | string, options?: SocketOptions): Socket;\n+};\n+interface KVNamespaceListKey {\n+ name: Key;\n+ expiration?: number;\n+ metadata?: Metadata;\n+}\n+type KVNamespaceListResult = {\n+ list_complete: false;\n+ keys: KVNamespaceListKey[];\n+ cursor: string;\n+ cacheStatus: string | null;\n+} | {\n+ list_complete: true;\n+ keys: KVNamespaceListKey[];\n+ cacheStatus: string | null;\n+};\n+interface KVNamespace {\n+ get(key: Key, options?: Partial>): Promise;\n+ get(key: Key, type: \"text\"): Promise;\n+ get(key: Key, type: \"json\"): Promise;\n+ get(key: Key, type: \"arrayBuffer\"): Promise;\n+ get(key: Key, type: \"stream\"): Promise;\n+ get(key: Key, options?: KVNamespaceGetOptions<\"text\">): Promise;\n+ get(key: Key, options?: KVNamespaceGetOptions<\"json\">): Promise;\n+ get(key: Key, options?: KVNamespaceGetOptions<\"arrayBuffer\">): Promise;\n+ get(key: Key, options?: KVNamespaceGetOptions<\"stream\">): Promise;\n+ get(key: Array, type: \"text\"): Promise>;\n+ get(key: Array, type: \"json\"): Promise>;\n+ get(key: Array, options?: Partial>): Promise>;\n+ get(key: Array, options?: KVNamespaceGetOptions<\"text\">): Promise>;\n+ get(key: Array, options?: KVNamespaceGetOptions<\"json\">): Promise>;\n+ list(options?: KVNamespaceListOptions): Promise>;\n+ put(key: Key, value: string | ArrayBuffer | ArrayBufferView | ReadableStream, options?: KVNamespacePutOptions): Promise;\n+ getWithMetadata(key: Key, options?: Partial>): Promise>;\n+ getWithMetadata(key: Key, type: \"text\"): Promise>;\n+ getWithMetadata(key: Key, type: \"json\"): Promise>;\n+ getWithMetadata(key: Key, type: \"arrayBuffer\"): Promise>;\n+ getWithMetadata(key: Key, type: \"stream\"): Promise>;\n+ getWithMetadata(key: Key, options: KVNamespaceGetOptions<\"text\">): Promise

.env-0+14App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

.env.example-0+14App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

.oxlintrc.json-0+7App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

.prettierignore-0+15App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

AGENTS.md-0+28App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

cli.ts-0+413App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/app-session-refresh.test.ts-0+80App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/app.tsx-0+154App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/auth-links.ts-0+5App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/client-router.tsx-0+295App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/counter.tsx-0+49App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/entry.tsx-0+9App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/mcp-apps/calculator-widget.ts-0+299App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/mcp-apps/widget-host-bridge.test.ts-0+125App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/mcp-apps/widget-host-bridge.ts-0+248App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/routes/account.tsx-0+82App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/routes/chat.tsx-0+20App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/routes/home.tsx-0+71App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/routes/index.tsx-0+18App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/routes/login.tsx-0+322App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/routes/oauth-authorize.tsx-0+420App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/routes/oauth-callback.tsx-0+73App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/routes/reset-password.tsx-0+269App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/session.ts-0+26App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

client/styles/tokens.ts-0+92App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/cloudflare-agents-sdk.md-0+226App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/code-style.md-0+49App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/end-to-end-testing.md-0+82App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/harness-engineering.md-0+77App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/mcp-apps-starter-guide.md-0+177App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/mock-api-servers.md-0+31App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/oxlint-js-plugins.md-0+58App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/async-context-middleware.md-0+58App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/animate-basics.md-0+113App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/animate-layout.md-0+172App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/animate-patterns.md-0+172App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/animate-tips.md-0+40App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/components.md-0+141App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/composition-basics.md-0+121App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/composition-keys.md-0+99App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/context.md-0+173App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/events-basics.md-0+105App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/events-best-practices.md-0+96App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/events-patterns.md-0+164App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/getting-started.md-0+93App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/handle-context.md-0+41App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/handle-signals.md-0+76App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/handle-updates.md-0+193App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/index.md-0+52App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/interactions-basics.md-0+166App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/interactions-examples.md-0+113App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/patterns-data-loading.md-0+127App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/patterns-focus-and-scroll.md-0+107App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/patterns-inputs.md-0+81App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/patterns-setup.md-0+148App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/patterns-state.md-0+125App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/readme-components.md-0+103App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/readme-events.md-0+62App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/readme-extras.md-0+40App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/readme-handle-api.md-0+145App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/readme-handle-context.md-0+101App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/readme-handle-listeners.md-0+69App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/readme-overview.md-0+58App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/readme-styling-and-connect.md-0+158App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/spring-advanced.md-0+60App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/spring-basics.md-0+62App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/styling-basics.md-0+84App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/styling-nesting.md-0+105App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/styling-responsive.md-0+94App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/styling-selectors.md-0+112App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/testing.md-0+58App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/tween-advanced.md-0+41App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/component/tween-basics.md-0+38App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/compression-middleware/index.md-0+45App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/compression-middleware/options.md-0+167App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/cookie.md-0+144App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/data-schema.md-0+65App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/data-table-mysql.md-0+47App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/data-table-postgres.md-0+48App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

docs/agents/remix/data-table-sqlite.md-0+50App 1Copy app 2 file to app 1 (Option+Command to sync without opening)Copy app 1 file to app 2 (Option+Command to sync without opening)App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2

App 1
App 2