@abide/abide 0.116.0 → 0.116.2

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @abide/abide
 
+## 0.116.2
+
+### Patch Changes
+
+- ef77e8d: a comment directly above an at-rule in a component's `<style>` no longer breaks its scoping — `/* … */ @media (…) { .x {…} }` scopes `.x` as it would with no comment
+- 99631d1: the registry names `isFailed`, says `route.url` includes the fragment and `route.name` is the same under any mount path, and shows a `GET` over a plain function or a value taking `ReactiveOptions`; a scaffolded app's AGENTS.md names the `abide-ignore` escape, exporting a `Reactive` unwrapped, never `raw()` on untrusted markup, and `config` / `cookies()` over `Bun.env` and header parsing
+
+## 0.116.1
+
+### Patch Changes
+
+- 7dedb9a: the offline worker keeps an answer marked `cache-control: public` — a public file, a font a stylesheet draws with — through a sign-in, a sign-out and a form submitted, which drop only what was saved for the caller
+- 6a69393: a copy the offline worker kept stands in for a year where the network fails, rather than a week — a page, a GET's answer and a public file carry `stale-if-error=31536000`
+
 ## 0.116.0
 
 ### Minor Changes

package/docs/REGISTRY.md

@@ -183,6 +183,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | `refuse.named` | `<Name extends string>(name: Name, status?: number, message?: string) => ((data?: undefined) => Failed<Name, undefined>) & { is: (error: unknown) => error is Failed<Name, undefined> }` | A reusable factory for a named, narrowable failure. | 15.3, 15.13, 15.18 |
 | `refuse.named` | `<Name extends string, Data extends JsonValue>(name: Name, status: number \| undefined, message: string \| ((data: Data) => string) \| undefined, options: { schema: Schema<Data> }) => ((data?: Data) => Failed<Name, Data>) & { is: (error: unknown) => error is Failed<Name, Data> }` | The same, carrying data its schema declares. | 15.3, 15.11, 15.12, 15.13, 15.14, 15.15, 15.18 |
 | `Failed<Name, Data>` | `Error & { name: Name; status: number; message: string; data: Data }` | The one refusal type, in-process and over a wire alike. | 15.1, 15.2, 15.6, 16.40, 16.41, 15.21 |
+| `isFailed` | `(value: unknown) => value is Failed<string, unknown>` | Whether a value is a refusal. | 15.6 |
 | `return myError(data)` | `Failed<Name, Data>` | The one spelling for every refusal. | 15.4, 15.5 |
 | `notFound` | `(data?: { path: string; method: string }) => Failed<'NotFound', { path: string; method: string }>` | abide's own refusal for an address nothing answers. | 15.7, 15.9, 15.22 |
 | `validationError` | `<T>(data?: Issues<T>) => Failed<'ValidationError', Issues<T>>` | abide's own refusal for a schema or an `args` gate that refused, or a call's route parameter no segment can spell. | 15.8, 15.9 |
@@ -219,8 +220,8 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | `Args` | `Record<string, JsonValue> \| undefined` | The arguments, in the body on a mutation and in the URL on a `GET` or `DELETE`. | 11.24, 16.18, 19.15 |
 | `Middleware` | `<Ctx, Result>(next: (ctx?: Ctx) => Promise<Result>, ctx: Ctx) => Result \| Promise<Result>` | One rung of `middleware`. | 16.14, 16.15, 16.16, 16.21 |
 | `GET` | `<Value, Args, Failures, RungFailures, Produced = Value>(handler: Reactive<Value, Value, Failures, Produced> \| Keyed<Value, Args, Value, Failures, Produced>, options?: RpcOptions<Args, RungFailures>) => Rpc<Value, Args, Failures \| RungFailures, Produced>` | Declares a read any surface may call. | 16.1, 16.2, 16.5, 16.6, 16.30, 16.31, 16.32, 16.68, 16.76, 16.34, 16.35, 16.36, 16.37, 16.39, 16.44, 16.45, 16.46, 16.47, 16.75, 16.50, 16.51, 16.52, 16.64, 18.1, 18.3, 18.6, 18.8, 18.10, 18.12, 18.21, 18.24, 18.27 |
-| `GET` | `<Value, Args, Failures, RungFailures, Produced = Value>(handler: (args?: Args) => Value, options?: RpcOptions<Args, RungFailures> & ReactiveOptions<Value, Value, Failures, Args>) => Rpc<Value, Args, Failures \| RungFailures, Produced>` | The plain-function overload, whose options build the value it becomes beside its address. | 16.1, 16.6, 16.7 |
-| `GET` | `<Value, Failures, RungFailures>(handler: Value \| PromiseLike<Value>, options?: RpcOptions<undefined, RungFailures> & ReactiveOptions<Value, Value, Failures>) => Rpc<Value, undefined, Failures \| RungFailures>` | The value overload, for what the handler owns outright. | 16.1, 16.6, 16.7 |
+| `GET` | `<Value, Args, Failures, RungFailures, Produced = Value>(handler: (args?: Args) => Value, options?: RpcOptions<Args, RungFailures> & ReactiveOptions<Value, Value, Failures, Args>) => Rpc<Value, Args, Failures \| RungFailures, Produced>` | The plain-function overload, whose `ReactiveOptions` (`ttl`, `global`, `debounce` and the rest) build the value it becomes beside its address. | 16.1, 16.6, 16.7 |
+| `GET` | `<Value, Failures, RungFailures>(handler: Value \| PromiseLike<Value>, options?: RpcOptions<undefined, RungFailures> & ReactiveOptions<Value, Value, Failures>) => Rpc<Value, undefined, Failures \| RungFailures>` | The value overload, for what the handler owns outright, whose `ReactiveOptions` build the value it becomes. | 16.1, 16.6, 16.7 |
 | `POST` / `PUT` / `PATCH` / `DELETE` | same as `GET` | Declares a mutation. | 16.2, 16.7, 16.32, 16.68, 16.76, 16.38, 16.53 |
 | `rpc.busy` | `(pattern?: Partial<Args>) => boolean` | `busy` narrowed to the handler's matching entries. | 13.2, 13.3, 13.12, 46.11 |
 | `rpc.ready` | `(pattern?: Partial<Args>) => boolean` | `ready` narrowed to the handler's matching entries. | 13.11, 13.12 |
@@ -291,8 +292,8 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | `cache-control: no-store` | `/__abide/openapi.json`, `/__abide/mcp` | Refuses caching for an answer about the app's surfaces. | 21.4 |
 | `cache-control: public, max-age=31536000, immutable` | the built bundle | A chunk addressed by its own content hash. | 21.5 |
 | `cache-control: public, max-age=0, must-revalidate` | a file under a `public` directory | A file at an address the build never chose. | 21.12 |
-| `cache-control: private, stale-while-revalidate=604800, stale-if-error=604800` | a page, a `GET`'s answer, where `ABIDE_OFFLINE` registers its worker | The default that lets a copy kept on the device stand in for the network. | 21.22, 21.11, 21.17 |
-| `cache-control: public, max-age=0, stale-while-revalidate=604800, stale-if-error=604800` | a file under a `public` directory, where `ABIDE_OFFLINE` registers its worker | The same, for a file at an address the build never chose. | 21.23 |
+| `cache-control: private, stale-while-revalidate=604800, stale-if-error=31536000` | a page, a `GET`'s answer, where `ABIDE_OFFLINE` registers its worker | The default that lets a copy kept on the device stand in for the network. | 21.22, 21.11, 21.17 |
+| `cache-control: public, max-age=0, stale-while-revalidate=604800, stale-if-error=31536000` | a file under a `public` directory, where `ABIDE_OFFLINE` registers its worker | The same, for a file at an address the build never chose. | 21.23 |
 | `clear-site-data: "cache"` | an answer carrying `abide-principal`, where pages are kept offline | Drops what the browser's own cache kept for the caller signed in before. | 21.24 |
 | `etag` | a file under a `public` directory | The answered bytes, addressed by their content. | 21.13, 21.14 |
 | `referrer-policy: strict-origin-when-cross-origin` | a page | The browsers' own default, written down. | 21.6 |
@@ -379,10 +380,10 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `route.url` | `Reactive<URL>` | Where we are. | 23.1, 23.2, 23.3, 23.4, 30.23, 19.16, 31.16 |
+| `route.url` | `Reactive<URL>` | Where we are, fragment included. | 23.1, 23.2, 23.3, 23.4, 30.20, 30.21, 30.23, 19.16, 31.16 |
 | `route.params` | `Reactive<Params>` | The matched route's segments. | 23.1, 23.5, 23.9, 30.23, 31.16 |
 | `Params` | `Record<string, string \| string[]>` | What a matched route's segments are. | 23.5 |
-| `route.name` | `Reactive<string>` | The resolution path. | 23.1, 23.6, 31.16 |
+| `route.name` | `Reactive<string>` | The resolution path, the same under any mount path. | 23.1, 23.6, 23.14, 31.16 |
 | `route.navigating` | `Reactive<boolean>` | Whether a navigation is in flight. | 23.1, 31.16 |
 
 ## `online`

package/docs/RULEBOOK.md

@@ -1448,11 +1448,11 @@ time those rungs took apart from what they wrapped.
 
 21.22 Where 45.1 has a page register the worker `ABIDE_OFFLINE` turns on, a page, and the answer of
 a `GET` of the app's own that is neither a refusal nor a stream 16.32 frames, MUST default to `cache-control: private,
-stale-while-revalidate=604800, stale-if-error=604800`.
+stale-while-revalidate=604800, stale-if-error=31536000`.
 
 21.23 Where 45.1 has a page register the worker `ABIDE_OFFLINE` turns on, a file under a `public`
 directory MUST answer `cache-control: public, max-age=0, stale-while-revalidate=604800,
-stale-if-error=604800`.
+stale-if-error=31536000`.
 
 21.24 Where 45.1 has a page register the worker `ABIDE_OFFLINE` turns on, an answer carrying the
 `abide-principal` header 26.24 has it carry MUST carry `clear-site-data: "cache"`.
@@ -3301,8 +3301,9 @@ rather than one a redirect led to, that is neither a stream 16.32 frames nor a b
 45.6 The worker `ABIDE_OFFLINE` turns on MUST answer a file of the build's bundle from what it
 saved.
 
-45.7 The worker `ABIDE_OFFLINE` turns on MUST drop everything it saved where an answer it is handed
-carries `abide-principal`, where `principal` changes in any tab, and where a form is submitted.
+45.7 The worker `ABIDE_OFFLINE` turns on MUST drop everything it saved, save an answer whose
+`cache-control` is `public`, where an answer it is handed carries `abide-principal`, where
+`principal` changes in any tab, and where a form is submitted.
 
 45.8 The worker `ABIDE_OFFLINE` turns on, of a new build, MUST drop everything the one before it
 saved, and every file of the bundle the new build does not name.

package/docs/abide.md

@@ -43,6 +43,7 @@ at its address with `.md` on the end, and the links below point at those files.
 - `invalidate` — `reference/invalidate.md`
 - `refuse` — `reference/refuse.md`
 - `Failed` — `reference/types/Failed.md`
+- `isFailed` — `reference/isFailed.md`
 - `notFound` — `reference/notFound.md`
 - `validationError` — `reference/validationError.md`
 - `aborted` — `reference/aborted.md`
@@ -439,7 +440,7 @@ let starred = reactive(false)
 </script>
 
 <div class="row">
-    <button aria-pressed={String(starred)} onclick={() => (starred = !starred)}>
+    <button aria-pressed={starred} onclick={() => (starred = !starred)}>
         {starred ? '★ Starred' : '☆ Star'}
     </button>
     <span>Grace Hopper</span>
@@ -2135,7 +2136,7 @@ const { id, name } = props<{ id: string; name: string }>()
 let selected = reactive.share('selectedDeal', () => reactive(''))
 </script>
 
-<button aria-pressed={String(selected === id)} onclick={() => (selected = id)}>
+<button aria-pressed={selected === id} onclick={() => (selected = id)}>
     {name}
 </button>
 ```
@@ -2939,7 +2940,7 @@ const address = reactive(() => url('/companies/[id]', { id: open }))
 
 <div class="tabs">
     {#for id of IDS}
-        <button aria-selected={String(open === id)}
+        <button aria-selected={open === id}
             onclick={() => (open = id)}>{id}</button>
     {/for}
 </div>
@@ -3087,7 +3088,7 @@ let draft = reactive('')
 
 <div class="tabs">
     {#for name of TABS}
-        <button aria-selected={String(tab === name)}
+        <button aria-selected={tab === name}
             onclick={() => navigate(`?tab=${name}`, { replace: true })}
         >{name}</button>
     {/for}
@@ -3236,7 +3237,7 @@ function followTitle(element: Element) {
 
 <div class="tabs">
     {#for page of PAGES}
-        <button aria-selected={String(open === page.address)}
+        <button aria-selected={open === page.address}
             onclick={() => (open = page.address)}>{page.label}</button>
     {/for}
 </div>
@@ -5678,6 +5679,7 @@ import { claudeCode, GET } from '@abide/abide/server'
 // This browser's pairing, for as long as the page watches it.
 export default GET(() => claudeCode.bridge(), {
     description: "This browser's Claude Code pairing, as it changes.",
+    // Exempt from an operator's ABIDE_RPC_TIMEOUT: a pairing idles for minutes.
     timeout: Infinity,
     clients: { mcp: false },
 })
@@ -6541,12 +6543,12 @@ abide start
 ABIDE_OFFLINE=0 abide start
 ```
 
-Each page the CRM opens is kept on the device, with the answers its handlers gave, the public files it loaded and the bundle it runs, until `ABIDE_OFFLINE=0` turns that off where the CRM is served. A kept page opens at once, however weak the signal, and the network is asked for the next copy behind it. With the network gone, a page opened in the last week loads again with its data and works. One never opened says the device is offline, and a link to it leaves the page you are on standing.
+Each page the CRM opens is kept on the device, with the answers its handlers gave, the public files it loaded and the bundle it runs, until `ABIDE_OFFLINE=0` turns that off where the CRM is served. A kept page opens at once, however weak the signal, and the network is asked for the next copy behind it. With the network gone, a page opened in the last year loads again with its data and works. One never opened says the device is offline, and a link to it leaves the page you are on standing.
 
 | Name | What it does for the CRM |
 | --- | --- |
-| `cache-control: private, stale-while-revalidate=604800, stale-if-error=604800` | what a page and a handler's answer carry, so the device shows what it kept while it asks again |
-| `cache-control: public, max-age=0, stale-while-revalidate=604800, stale-if-error=604800` | the same, for a public file |
+| `cache-control: private, stale-while-revalidate=604800, stale-if-error=31536000` | what a page and a handler's answer carry, so the device shows what it kept while it asks again |
+| `cache-control: public, max-age=0, stale-while-revalidate=604800, stale-if-error=31536000` | the same, for a public file |
 | `clear-site-data: "cache"` | what a sign-in or a sign-out answers, so the browser forgets what it kept for the last person |
 
 What is kept is what those headers allow, and nothing else decides it. A handler that writes `cache-control: no-store` through `response` is never kept, and an answer with a `ttl` is shown from the device until its `max-age` runs out. A refresh always asks the network.
@@ -6596,6 +6598,7 @@ Arrive here knowing which name you want. Each page is read off the registry: the
 | [`invalidate`](/reference/invalidate.md) | `@abide/abide` |
 | [`refuse`](/reference/refuse.md) | `@abide/abide` |
 | [`Failed`](/reference/types/Failed.md) | `@abide/abide` |
+| [`isFailed`](/reference/isFailed.md) | `@abide/abide` |
 | [`notFound`](/reference/notFound.md) | `@abide/abide` |
 | [`validationError`](/reference/validationError.md) | `@abide/abide` |
 | [`aborted`](/reference/aborted.md) | `@abide/abide` |
@@ -7289,6 +7292,24 @@ Arrive here knowing which name you want. Each page is read off the registry: the
 
 ---
 
+<!-- reference/isFailed.md -->
+
+# `isFailed`
+
+`import { isFailed } from '@abide/abide'`
+
+## Refusals
+
+| Name | Signature | Meaning | Rules |
+| --- | --- | --- | --- |
+| `isFailed` | `(value: unknown) => value is Failed<string, unknown>` | Whether a value is a refusal. | [15.6](/rulebook#15.6) |
+
+## Taught in
+
+- [Add pages](/guide/add-pages.md)
+
+---
+
 <!-- reference/notFound.md -->
 
 # `notFound`
@@ -7441,8 +7462,8 @@ Reactive primitives: what is written in place rather than imported.
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
 | `GET` | `<Value, Args, Failures, RungFailures, Produced = Value>(handler: Reactive<Value, Value, Failures, Produced> \| Keyed<Value, Args, Value, Failures, Produced>, options?: RpcOptions<Args, RungFailures>) => Rpc<Value, Args, Failures \| RungFailures, Produced>` | Declares a read any surface may call. | [16.1](/rulebook#16.1), [16.2](/rulebook#16.2), [16.5](/rulebook#16.5), [16.6](/rulebook#16.6), [16.30](/rulebook#16.30), [16.31](/rulebook#16.31), [16.32](/rulebook#16.32), [16.68](/rulebook#16.68), [16.76](/rulebook#16.76), [16.34](/rulebook#16.34), [16.35](/rulebook#16.35), [16.36](/rulebook#16.36), [16.37](/rulebook#16.37), [16.39](/rulebook#16.39), [16.44](/rulebook#16.44), [16.45](/rulebook#16.45), [16.46](/rulebook#16.46), [16.47](/rulebook#16.47), [16.75](/rulebook#16.75), [16.50](/rulebook#16.50), [16.51](/rulebook#16.51), [16.52](/rulebook#16.52), [16.64](/rulebook#16.64), [18.1](/rulebook#18.1), [18.3](/rulebook#18.3), [18.6](/rulebook#18.6), [18.8](/rulebook#18.8), [18.10](/rulebook#18.10), [18.12](/rulebook#18.12), [18.21](/rulebook#18.21), [18.24](/rulebook#18.24), [18.27](/rulebook#18.27) |
-| `GET` | `<Value, Args, Failures, RungFailures, Produced = Value>(handler: (args?: Args) => Value, options?: RpcOptions<Args, RungFailures> & ReactiveOptions<Value, Value, Failures, Args>) => Rpc<Value, Args, Failures \| RungFailures, Produced>` | The plain-function overload, whose options build the value it becomes beside its address. | [16.1](/rulebook#16.1), [16.6](/rulebook#16.6), [16.7](/rulebook#16.7) |
-| `GET` | `<Value, Failures, RungFailures>(handler: Value \| PromiseLike<Value>, options?: RpcOptions<undefined, RungFailures> & ReactiveOptions<Value, Value, Failures>) => Rpc<Value, undefined, Failures \| RungFailures>` | The value overload, for what the handler owns outright. | [16.1](/rulebook#16.1), [16.6](/rulebook#16.6), [16.7](/rulebook#16.7) |
+| `GET` | `<Value, Args, Failures, RungFailures, Produced = Value>(handler: (args?: Args) => Value, options?: RpcOptions<Args, RungFailures> & ReactiveOptions<Value, Value, Failures, Args>) => Rpc<Value, Args, Failures \| RungFailures, Produced>` | The plain-function overload, whose `ReactiveOptions` (`ttl`, `global`, `debounce` and the rest) build the value it becomes beside its address. | [16.1](/rulebook#16.1), [16.6](/rulebook#16.6), [16.7](/rulebook#16.7) |
+| `GET` | `<Value, Failures, RungFailures>(handler: Value \| PromiseLike<Value>, options?: RpcOptions<undefined, RungFailures> & ReactiveOptions<Value, Value, Failures>) => Rpc<Value, undefined, Failures \| RungFailures>` | The value overload, for what the handler owns outright, whose `ReactiveOptions` build the value it becomes. | [16.1](/rulebook#16.1), [16.6](/rulebook#16.6), [16.7](/rulebook#16.7) |
 
 ## Taught in
 
@@ -7681,8 +7702,8 @@ Transports: what is written in place rather than imported.
 | `cache-control: no-store` | `/__abide/openapi.json`, `/__abide/mcp` | Refuses caching for an answer about the app's surfaces. | [21.4](/rulebook#21.4) |
 | `cache-control: public, max-age=31536000, immutable` | the built bundle | A chunk addressed by its own content hash. | [21.5](/rulebook#21.5) |
 | `cache-control: public, max-age=0, must-revalidate` | a file under a `public` directory | A file at an address the build never chose. | [21.12](/rulebook#21.12) |
-| `cache-control: private, stale-while-revalidate=604800, stale-if-error=604800` | a page, a `GET`'s answer, where `ABIDE_OFFLINE` registers its worker | The default that lets a copy kept on the device stand in for the network. | [21.22](/rulebook#21.22), [21.11](/rulebook#21.11), [21.17](/rulebook#21.17) |
-| `cache-control: public, max-age=0, stale-while-revalidate=604800, stale-if-error=604800` | a file under a `public` directory, where `ABIDE_OFFLINE` registers its worker | The same, for a file at an address the build never chose. | [21.23](/rulebook#21.23) |
+| `cache-control: private, stale-while-revalidate=604800, stale-if-error=31536000` | a page, a `GET`'s answer, where `ABIDE_OFFLINE` registers its worker | The default that lets a copy kept on the device stand in for the network. | [21.22](/rulebook#21.22), [21.11](/rulebook#21.11), [21.17](/rulebook#21.17) |
+| `cache-control: public, max-age=0, stale-while-revalidate=604800, stale-if-error=31536000` | a file under a `public` directory, where `ABIDE_OFFLINE` registers its worker | The same, for a file at an address the build never chose. | [21.23](/rulebook#21.23) |
 | `clear-site-data: "cache"` | an answer carrying `abide-principal`, where pages are kept offline | Drops what the browser's own cache kept for the caller signed in before. | [21.24](/rulebook#21.24) |
 | `etag` | a file under a `public` directory | The answered bytes, addressed by their content. | [21.13](/rulebook#21.13), [21.14](/rulebook#21.14) |
 | `referrer-policy: strict-origin-when-cross-origin` | a page | The browsers' own default, written down. | [21.6](/rulebook#21.6) |
@@ -8175,9 +8196,9 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `route.url` | `Reactive<URL>` | Where we are. | [23.1](/rulebook#23.1), [23.2](/rulebook#23.2), [23.3](/rulebook#23.3), [23.4](/rulebook#23.4), [30.23](/rulebook#30.23), [19.16](/rulebook#19.16), [31.16](/rulebook#31.16) |
+| `route.url` | `Reactive<URL>` | Where we are, fragment included. | [23.1](/rulebook#23.1), [23.2](/rulebook#23.2), [23.3](/rulebook#23.3), [23.4](/rulebook#23.4), [30.20](/rulebook#30.20), [30.21](/rulebook#30.21), [30.23](/rulebook#30.23), [19.16](/rulebook#19.16), [31.16](/rulebook#31.16) |
 | `route.params` | `Reactive<Params>` | The matched route's segments. | [23.1](/rulebook#23.1), [23.5](/rulebook#23.5), [23.9](/rulebook#23.9), [30.23](/rulebook#30.23), [31.16](/rulebook#31.16) |
-| `route.name` | `Reactive<string>` | The resolution path. | [23.1](/rulebook#23.1), [23.6](/rulebook#23.6), [31.16](/rulebook#31.16) |
+| `route.name` | `Reactive<string>` | The resolution path, the same under any mount path. | [23.1](/rulebook#23.1), [23.6](/rulebook#23.6), [23.14](/rulebook#23.14), [31.16](/rulebook#31.16) |
 | `route.navigating` | `Reactive<boolean>` | Whether a navigation is in flight. | [23.1](/rulebook#23.1), [31.16](/rulebook#31.16) |
 
 ## Taught in

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@abide/abide",
-    "version": "0.116.0",
+    "version": "0.116.2",
     "type": "module",
     "description": "Isomorphic type-safe framework for reactive async interfaces for humans and machines",
     "license": "MIT",

package/scaffold/AGENTS.md

@@ -17,6 +17,9 @@ before writing code, rather than guessing from Svelte, Vue or React. It installs
   TypeScript service do not read `.abide` files, so a clean `tsc` says nothing about them. Run
   `bun run check` after every change, and treat its warnings as bugs: several of them name a read
   that will not update when its value changes.
+  Where the read is meant, `// abide-ignore` and the clause the warning cites, on the line above
+  (`// abide-ignore 14.15`), silences that one (RULEBOOK 14.19); a read hoisted out of its place
+  only to quiet a warning is the bug it named.
 - `bun run test` — runs `bun test`. `src/getGreeting.test.ts` is the pattern: a test imports a
   handler or a `.abide` file and calls it.
 - `bun run dev` — serves the app on a local port and rebuilds when a file changes.
@@ -44,3 +47,12 @@ before writing code, rather than guessing from Svelte, Vue or React. It installs
 - Import the app's own modules as `#src/…` (see `imports` in `package.json`).
 - A test imports `.abide` files directly: `bunfig.toml` preloads `@abide/harness/abide/preload`,
   a DOM to mount into and then `@abide/abide/test`.
+
+## Habits
+
+- Export a `Reactive` itself, never wrapped in an object: an `.abide` file reads and writes it by
+  name (RULEBOOK 31.1), and one reached through a property is left to `x()` and `x.set(v)` (31.7).
+- Model output and fetched HTML are untrusted. Never hand them to `raw()` (RULEBOOK 32.2)
+  unsanitized.
+- Settings come from `onConfig` and `config` (RULEBOOK 27.2, 27.9), which already read the
+  environment, and cookies from `cookies()` (22.2) — not `Bun.env` or a parsed `cookie` header.

package/src/compiler/scopeStyles.ts

@@ -122,6 +122,9 @@ export function namesViewTransition(css: string): boolean {
     return false
 }
 
+// Whitespace and comments ahead of a statement, which do not decide whether it is an at-rule.
+const LEADING_COMMENTS = /^(?:\s|\/\*[\s\S]*?\*\/)*/
+
 // The block at-rules that hold rules, which `scopeRules` walks into.
 const NESTING =
     /^@(media|supports|container|layer|document|starting-style|scope)\b/i
@@ -155,7 +158,7 @@ function scopeRules(css: string, attribute: string): string {
         }
         const close = matching(css, open)
         const body = css.slice(open + 1, close)
-        const trimmed = prelude.trim()
+        const trimmed = prelude.replace(LEADING_COMMENTS, '').trim()
         if (trimmed.startsWith('@'))
             out += NESTING.test(trimmed)
                 ? `${prelude}{${scopeRules(body, attribute)}}`

package/src/server/OFFLINE_STALE.ts

@@ -1,10 +1,11 @@
 // 21.22, 21.23 — HOW LONG A COPY KEPT ON THE DEVICE STAYS SERVABLE once stale, where `ABIDE_OFFLINE`
-// registers its worker: a week, while the network answers or fails to — as long as Safari keeps an
-// unvisited site's storage.
+// registers its worker: a week while the network answers and the copy is asked for again behind it,
+// and a year where the network fails — a copy of any age beats the page saying nothing was saved, and
+// what may evict it sooner (Safari's week for a site not visited) is the browser's, not this header's.
 //
 // NO `max-age` BESIDE IT on a page or a `GET`: a copy reads `max-age` as its own life (18.14), and
 // a followed copy stale from the moment it landed would reload on every read. With no lifetime and
 // no `Last-Modified`, a cache holds the answer stale at once, which is all the two windows need.
 
 export const OFFLINE_STALE =
-    'stale-while-revalidate=604800, stale-if-error=604800'
+    'stale-while-revalidate=604800, stale-if-error=31536000'

package/src/server/answerWorker.ts

@@ -15,6 +15,7 @@ import {
     OFFLINE_BUNDLE,
     OFFLINE_CACHE_PREFIX,
     OFFLINE_SAVED,
+    OFFLINE_SHARED,
 } from '#shared/OFFLINE_CACHES.ts'
 import { PRINCIPAL_HEADER } from '#shared/PRINCIPAL_HEADER.ts'
 import { REACHED_MESSAGE } from '#shared/REACHED_MESSAGE.ts'
@@ -31,6 +32,7 @@ const STREAMED_TYPES = [
 
 const CACHES = `const OURS = ${JSON.stringify(OFFLINE_CACHE_PREFIX)}
 const SAVED = ${JSON.stringify(OFFLINE_SAVED)}
+const SHARED = ${JSON.stringify(OFFLINE_SHARED)}
 const BUNDLE = ${JSON.stringify(OFFLINE_BUNDLE)}
 
 async function dropOurs(keeping) {
@@ -112,7 +114,7 @@ async function answer(event, page) {
             request.cache === 'no-store')
     const saved = bypass
         ? undefined
-        : await caches.match(request, { cacheName: SAVED, ignoreVary: true })
+        : await savedCopy(request)
     const life = saved === undefined ? undefined : lifeOf(saved)
     if (life !== undefined) {
         if (life.age < life.fresh) return marked(saved)
@@ -197,7 +199,7 @@ async function keepReached(url) {
     if (reaching.has(url)) return
     reaching.add(url)
     try {
-        const saved = await caches.match(url, { cacheName: SAVED, ignoreVary: true })
+        const saved = await savedCopy(url)
         if (saved === undefined || !standsIn(lifeOf(saved))) await keepPage(url)
     } finally {
         reaching.delete(url)
@@ -247,9 +249,19 @@ function kept(response) {
     return !STREAMED.some((streamed) => type.startsWith(streamed))
 }
 
+// The copy saved of an address, a caller's own ahead of one any caller may be answered.
+async function savedCopy(request) {
+    return (
+        (await caches.match(request, { cacheName: SAVED, ignoreVary: true })) ??
+        (await caches.match(request, { cacheName: SHARED, ignoreVary: true }))
+    )
+}
+
 // 45.7 — EVERY PAGE SAVED DROPPED, and with them every copy asked for before the drop: one asked under
 // the cookies of then would land after it holding the caller signed out since. The drop an answer's
-// own abide-principal makes is the exception, since that answer is the new caller's.
+// own abide-principal makes is the exception, since that answer is the new caller's. What any caller
+// may be answered is kept apart and left standing: it was never the caller's to drop, and a font
+// thrown away at sign-in is a page drawn without it offline.
 let drops = 0
 
 function dropSaved() {
@@ -259,15 +271,19 @@ function dropSaved() {
 
 // Saves a copy 45.3 and 45.4 let through where no drop has come since its request was asked — after
 // the drop its own answer makes where that answer rotated the principal — and cancels one where one has.
+// One any caller may be answered is saved whenever it was asked, since no caller's cookies made it.
 async function keep(request, copy, since, rotated) {
     if (rotated) {
         await dropSaved()
         since = drops
     }
     if (copy === undefined) return
-    if (since !== drops) return copy.body?.cancel()
-    const cache = await caches.open(SAVED)
-    await cache.put(request, copy)
+    const shared = directivesOf(copy).has('public')
+    if (!shared && since !== drops) return copy.body?.cancel()
+    // An address whose answer went public or private since leaves no copy behind for savedCopy to
+    // prefer over this one.
+    await (await caches.open(shared ? SAVED : SHARED)).delete(request)
+    await (await caches.open(shared ? SHARED : SAVED)).put(request, copy)
 }
 
 function offline() {

package/src/shared/OFFLINE_CACHES.ts

@@ -5,8 +5,11 @@
 /** What every cache the worker keeps is named under, so a cache an earlier worker named is found. */
 export const OFFLINE_CACHE_PREFIX = 'abide:'
 
-/** The pages, the handlers' answers and the public files the worker saved, by address. */
+/** The pages and the handlers' answers the worker saved, by address. */
 export const OFFLINE_SAVED = `${OFFLINE_CACHE_PREFIX}saved`
 
+/** What the worker saved that any caller may be answered — `cache-control: public` — by address. */
+export const OFFLINE_SHARED = `${OFFLINE_CACHE_PREFIX}shared`
+
 /** The build's bundle, saved as the worker installs. */
 export const OFFLINE_BUNDLE = `${OFFLINE_CACHE_PREFIX}bundle`