@askrjs/askr 0.0.28 → 0.0.30

package/dist/router/policy.js

@@ -0,0 +1,116 @@
+//#region src/router/policy.ts
+const ROUTE_AUTH_OPTIONS = Symbol.for("__ASKR_ROUTE_AUTH_OPTIONS__");
+function isPromise(value) {
+	return value instanceof Promise;
+}
+function allow() {
+	return { kind: "allow" };
+}
+function redirect(to, init = {}) {
+	return {
+		kind: "redirect",
+		to,
+		...init.status ? { status: init.status } : {},
+		...init.replace !== void 0 ? { replace: init.replace } : {}
+	};
+}
+function deny(status) {
+	return {
+		kind: "deny",
+		status
+	};
+}
+function unauthorized() {
+	return deny(401);
+}
+function forbidden() {
+	return deny(403);
+}
+function notFound() {
+	return deny(404);
+}
+function withRouteAuthOptions(context, auth) {
+	const internal = context;
+	if (!auth) {
+		delete internal[ROUTE_AUTH_OPTIONS];
+		return context;
+	}
+	internal[ROUTE_AUTH_OPTIONS] = auth;
+	return context;
+}
+function getRouteAuthOptions(context) {
+	return context[ROUTE_AUTH_OPTIONS];
+}
+function assertRouteAuthOptions(context) {
+	const auth = getRouteAuthOptions(context);
+	if (!auth?.resolve) throw new Error("Built-in auth policies require router auth configuration. Provide `auth` to registerRoutes(...), createSPA(...), hydrateSPA(...), or SSR route resolution.");
+	return auth;
+}
+function resolvePathSetting(value, fallback, context) {
+	if (!value) return fallback;
+	if (typeof value === "function") return value(context);
+	return value;
+}
+function appendNextTarget(path, href) {
+	const resolved = new URL(path, "http://localhost");
+	resolved.searchParams.set("next", href);
+	return `${resolved.pathname}${resolved.search}${resolved.hash}`;
+}
+function collectStringValues(value) {
+	if (typeof value === "string") return [value];
+	if (Array.isArray(value)) return value.filter((entry) => typeof entry === "string");
+	if (value instanceof Set) return Array.from(value).filter((entry) => typeof entry === "string");
+	return [];
+}
+function defaultHasRole(user, role) {
+	if (!user || typeof user !== "object") return false;
+	return collectStringValues(user.roles).includes(role);
+}
+function defaultHasPermission(user, permission) {
+	if (!user || typeof user !== "object") return false;
+	return collectStringValues(user.permissions).includes(permission);
+}
+function resolveUnauthenticatedRedirect(context) {
+	const loginPath = resolvePathSetting(assertRouteAuthOptions(context).loginPath, "/login", context);
+	if (isPromise(loginPath)) return loginPath.then((nextPath) => redirect(appendNextTarget(nextPath, context.href), { replace: context.mode === "spa" }));
+	return redirect(appendNextTarget(loginPath, context.href), { replace: context.mode === "spa" });
+}
+function resolveAuthenticatedRedirect(context) {
+	const target = resolvePathSetting(assertRouteAuthOptions(context).guestRedirectTo, "/", context);
+	if (isPromise(target)) return target.then((nextTarget) => redirect(nextTarget, { replace: true }));
+	return redirect(target, { replace: true });
+}
+function requireAuth() {
+	return (context) => {
+		if (context.session) return allow();
+		return resolveUnauthenticatedRedirect(context);
+	};
+}
+function requireGuest() {
+	return (context) => {
+		if (!context.session) return allow();
+		return resolveAuthenticatedRedirect(context);
+	};
+}
+function requireRole(role) {
+	return (context) => {
+		if (!context.user) return resolveUnauthenticatedRedirect(context);
+		const auth = assertRouteAuthOptions(context);
+		const hasRole = auth.hasRole ? auth.hasRole(context.user, role, context) : defaultHasRole(context.user, role);
+		if (isPromise(hasRole)) return hasRole.then((next) => next ? allow() : forbidden());
+		return hasRole ? allow() : forbidden();
+	};
+}
+function requirePermission(permission) {
+	return (context) => {
+		if (!context.user) return resolveUnauthenticatedRedirect(context);
+		const auth = assertRouteAuthOptions(context);
+		const hasPermission = auth.hasPermission ? auth.hasPermission(context.user, permission, context) : defaultHasPermission(context.user, permission);
+		if (isPromise(hasPermission)) return hasPermission.then((next) => next ? allow() : forbidden());
+		return hasPermission ? allow() : forbidden();
+	};
+}
+//#endregion
+export { allow, deny, forbidden, notFound, redirect, requireAuth, requireGuest, requirePermission, requireRole, unauthorized, withRouteAuthOptions };
+
+//# sourceMappingURL=policy.js.map

package/dist/router/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","names":[],"sources":["../../src/router/policy.ts"],"sourcesContent":["import type {\n  AccessDecision,\n  AccessDenyStatus,\n  AccessRedirectStatus,\n  RouteAuthOptions,\n  RouteContext,\n  RoutePolicy,\n} from '../common/router';\n\nconst ROUTE_AUTH_OPTIONS = Symbol.for('__ASKR_ROUTE_AUTH_OPTIONS__');\n\ntype InternalRouteContext = RouteContext & {\n  [ROUTE_AUTH_OPTIONS]?: RouteAuthOptions;\n};\n\ntype RoutePathResolver =\n  | string\n  | ((context: RouteContext) => string | Promise<string>);\n\nfunction isPromise<T>(value: T | Promise<T>): value is Promise<T> {\n  return value instanceof Promise;\n}\n\nexport function allow(): AccessDecision {\n  return { kind: 'allow' };\n}\n\nexport function redirect(\n  to: string,\n  init: {\n    status?: AccessRedirectStatus;\n    replace?: boolean;\n  } = {}\n): AccessDecision {\n  return {\n    kind: 'redirect',\n    to,\n    ...(init.status ? { status: init.status } : {}),\n    ...(init.replace !== undefined ? { replace: init.replace } : {}),\n  };\n}\n\nexport function deny(status: AccessDenyStatus): AccessDecision {\n  return { kind: 'deny', status };\n}\n\nexport function unauthorized(): AccessDecision {\n  return deny(401);\n}\n\nexport function forbidden(): AccessDecision {\n  return deny(403);\n}\n\nexport function notFound(): AccessDecision {\n  return deny(404);\n}\n\nexport function normalizeAccessDecision(\n  result: AccessDecision\n): AccessDecision {\n  return result;\n}\n\nexport function withRouteAuthOptions(\n  context: RouteContext,\n  auth: RouteAuthOptions | undefined\n): RouteContext {\n  const internal = context as InternalRouteContext;\n\n  if (!auth) {\n    delete internal[ROUTE_AUTH_OPTIONS];\n    return context;\n  }\n\n  internal[ROUTE_AUTH_OPTIONS] = auth;\n  return context;\n}\n\nfunction getRouteAuthOptions(\n  context: RouteContext\n): RouteAuthOptions | undefined {\n  return (context as InternalRouteContext)[ROUTE_AUTH_OPTIONS];\n}\n\nfunction assertRouteAuthOptions(context: RouteContext): RouteAuthOptions {\n  const auth = getRouteAuthOptions(context);\n  if (!auth?.resolve) {\n    throw new Error(\n      'Built-in auth policies require router auth configuration. ' +\n        'Provide `auth` to registerRoutes(...), createSPA(...), hydrateSPA(...), or SSR route resolution.'\n    );\n  }\n\n  return auth;\n}\n\nfunction resolvePathSetting(\n  value: RoutePathResolver | undefined,\n  fallback: string,\n  context: RouteContext\n): string | Promise<string> {\n  if (!value) {\n    return fallback;\n  }\n\n  if (typeof value === 'function') {\n    return value(context);\n  }\n\n  return value;\n}\n\nfunction appendNextTarget(path: string, href: string): string {\n  const resolved = new URL(path, 'http://localhost');\n  resolved.searchParams.set('next', href);\n  return `${resolved.pathname}${resolved.search}${resolved.hash}`;\n}\n\nfunction collectStringValues(value: unknown): string[] {\n  if (typeof value === 'string') {\n    return [value];\n  }\n\n  if (Array.isArray(value)) {\n    return value.filter((entry): entry is string => typeof entry === 'string');\n  }\n\n  if (value instanceof Set) {\n    return Array.from(value).filter(\n      (entry): entry is string => typeof entry === 'string'\n    );\n  }\n\n  return [];\n}\n\nfunction defaultHasRole(user: unknown, role: string): boolean {\n  if (!user || typeof user !== 'object') {\n    return false;\n  }\n\n  return collectStringValues((user as { roles?: unknown }).roles).includes(\n    role\n  );\n}\n\nfunction defaultHasPermission(user: unknown, permission: string): boolean {\n  if (!user || typeof user !== 'object') {\n    return false;\n  }\n\n  return collectStringValues(\n    (user as { permissions?: unknown }).permissions\n  ).includes(permission);\n}\n\nfunction resolveUnauthenticatedRedirect(\n  context: RouteContext\n): AccessDecision | Promise<AccessDecision> {\n  const auth = assertRouteAuthOptions(context);\n  const loginPath = resolvePathSetting(auth.loginPath, '/login', context);\n  if (isPromise(loginPath)) {\n    return loginPath.then((nextPath) =>\n      redirect(appendNextTarget(nextPath, context.href), {\n        replace: context.mode === 'spa',\n      })\n    );\n  }\n\n  return redirect(appendNextTarget(loginPath, context.href), {\n    replace: context.mode === 'spa',\n  });\n}\n\nfunction resolveAuthenticatedRedirect(\n  context: RouteContext\n): AccessDecision | Promise<AccessDecision> {\n  const auth = assertRouteAuthOptions(context);\n  const target = resolvePathSetting(auth.guestRedirectTo, '/', context);\n  if (isPromise(target)) {\n    return target.then((nextTarget) =>\n      redirect(nextTarget, {\n        replace: true,\n      })\n    );\n  }\n\n  return redirect(target, {\n    replace: true,\n  });\n}\n\nexport function requireAuth(): RoutePolicy {\n  return (context) => {\n    if (context.session) {\n      return allow();\n    }\n\n    return resolveUnauthenticatedRedirect(context);\n  };\n}\n\nexport function requireGuest(): RoutePolicy {\n  return (context) => {\n    if (!context.session) {\n      return allow();\n    }\n\n    return resolveAuthenticatedRedirect(context);\n  };\n}\n\nexport function requireRole(role: string): RoutePolicy {\n  return (context) => {\n    if (!context.user) {\n      return resolveUnauthenticatedRedirect(context);\n    }\n\n    const auth = assertRouteAuthOptions(context);\n    const hasRole = auth.hasRole\n      ? auth.hasRole(context.user, role, context)\n      : defaultHasRole(context.user, role);\n\n    if (isPromise(hasRole)) {\n      return hasRole.then((next) => (next ? allow() : forbidden()));\n    }\n\n    return hasRole ? allow() : forbidden();\n  };\n}\n\nexport function requirePermission(permission: string): RoutePolicy {\n  return (context) => {\n    if (!context.user) {\n      return resolveUnauthenticatedRedirect(context);\n    }\n\n    const auth = assertRouteAuthOptions(context);\n    const hasPermission = auth.hasPermission\n      ? auth.hasPermission(context.user, permission, context)\n      : defaultHasPermission(context.user, permission);\n\n    if (isPromise(hasPermission)) {\n      return hasPermission.then((next) => (next ? allow() : forbidden()));\n    }\n\n    return hasPermission ? allow() : forbidden();\n  };\n}\n\nexport async function evaluateRoutePolicy(\n  policy: RoutePolicy,\n  context: RouteContext\n): Promise<AccessDecision> {\n  const result = await policy(context);\n  return result;\n}\n"],"mappings":";AASA,MAAM,qBAAqB,OAAO,IAAI,8BAA8B;AAUpE,SAAS,UAAa,OAA4C;AAChE,QAAO,iBAAiB;;AAG1B,SAAgB,QAAwB;AACtC,QAAO,EAAE,MAAM,SAAS;;AAG1B,SAAgB,SACd,IACA,OAGI,EAAE,EACU;AAChB,QAAO;EACL,MAAM;EACN;EACA,GAAI,KAAK,SAAS,EAAE,QAAQ,KAAK,QAAQ,GAAG,EAAE;EAC9C,GAAI,KAAK,YAAY,SAAY,EAAE,SAAS,KAAK,SAAS,GAAG,EAAE;EAChE;;AAGH,SAAgB,KAAK,QAA0C;AAC7D,QAAO;EAAE,MAAM;EAAQ;EAAQ;;AAGjC,SAAgB,eAA+B;AAC7C,QAAO,KAAK,IAAI;;AAGlB,SAAgB,YAA4B;AAC1C,QAAO,KAAK,IAAI;;AAGlB,SAAgB,WAA2B;AACzC,QAAO,KAAK,IAAI;;AASlB,SAAgB,qBACd,SACA,MACc;CACd,MAAM,WAAW;AAEjB,KAAI,CAAC,MAAM;AACT,SAAO,SAAS;AAChB,SAAO;;AAGT,UAAS,sBAAsB;AAC/B,QAAO;;AAGT,SAAS,oBACP,SAC8B;AAC9B,QAAQ,QAAiC;;AAG3C,SAAS,uBAAuB,SAAyC;CACvE,MAAM,OAAO,oBAAoB,QAAQ;AACzC,KAAI,CAAC,MAAM,QACT,OAAM,IAAI,MACR,6JAED;AAGH,QAAO;;AAGT,SAAS,mBACP,OACA,UACA,SAC0B;AAC1B,KAAI,CAAC,MACH,QAAO;AAGT,KAAI,OAAO,UAAU,WACnB,QAAO,MAAM,QAAQ;AAGvB,QAAO;;AAGT,SAAS,iBAAiB,MAAc,MAAsB;CAC5D,MAAM,WAAW,IAAI,IAAI,MAAM,mBAAmB;AAClD,UAAS,aAAa,IAAI,QAAQ,KAAK;AACvC,QAAO,GAAG,SAAS,WAAW,SAAS,SAAS,SAAS;;AAG3D,SAAS,oBAAoB,OAA0B;AACrD,KAAI,OAAO,UAAU,SACnB,QAAO,CAAC,MAAM;AAGhB,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,QAAQ,UAA2B,OAAO,UAAU,SAAS;AAG5E,KAAI,iBAAiB,IACnB,QAAO,MAAM,KAAK,MAAM,CAAC,QACtB,UAA2B,OAAO,UAAU,SAC9C;AAGH,QAAO,EAAE;;AAGX,SAAS,eAAe,MAAe,MAAuB;AAC5D,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;AAGT,QAAO,oBAAqB,KAA6B,MAAM,CAAC,SAC9D,KACD;;AAGH,SAAS,qBAAqB,MAAe,YAA6B;AACxE,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;AAGT,QAAO,oBACJ,KAAmC,YACrC,CAAC,SAAS,WAAW;;AAGxB,SAAS,+BACP,SAC0C;CAE1C,MAAM,YAAY,mBADL,uBAAuB,QACC,CAAK,WAAW,UAAU,QAAQ;AACvE,KAAI,UAAU,UAAU,CACtB,QAAO,UAAU,MAAM,aACrB,SAAS,iBAAiB,UAAU,QAAQ,KAAK,EAAE,EACjD,SAAS,QAAQ,SAAS,OAC3B,CAAC,CACH;AAGH,QAAO,SAAS,iBAAiB,WAAW,QAAQ,KAAK,EAAE,EACzD,SAAS,QAAQ,SAAS,OAC3B,CAAC;;AAGJ,SAAS,6BACP,SAC0C;CAE1C,MAAM,SAAS,mBADF,uBAAuB,QACF,CAAK,iBAAiB,KAAK,QAAQ;AACrE,KAAI,UAAU,OAAO,CACnB,QAAO,OAAO,MAAM,eAClB,SAAS,YAAY,EACnB,SAAS,MACV,CAAC,CACH;AAGH,QAAO,SAAS,QAAQ,EACtB,SAAS,MACV,CAAC;;AAGJ,SAAgB,cAA2B;AACzC,SAAQ,YAAY;AAClB,MAAI,QAAQ,QACV,QAAO,OAAO;AAGhB,SAAO,+BAA+B,QAAQ;;;AAIlD,SAAgB,eAA4B;AAC1C,SAAQ,YAAY;AAClB,MAAI,CAAC,QAAQ,QACX,QAAO,OAAO;AAGhB,SAAO,6BAA6B,QAAQ;;;AAIhD,SAAgB,YAAY,MAA2B;AACrD,SAAQ,YAAY;AAClB,MAAI,CAAC,QAAQ,KACX,QAAO,+BAA+B,QAAQ;EAGhD,MAAM,OAAO,uBAAuB,QAAQ;EAC5C,MAAM,UAAU,KAAK,UACjB,KAAK,QAAQ,QAAQ,MAAM,MAAM,QAAQ,GACzC,eAAe,QAAQ,MAAM,KAAK;AAEtC,MAAI,UAAU,QAAQ,CACpB,QAAO,QAAQ,MAAM,SAAU,OAAO,OAAO,GAAG,WAAW,CAAE;AAG/D,SAAO,UAAU,OAAO,GAAG,WAAW;;;AAI1C,SAAgB,kBAAkB,YAAiC;AACjE,SAAQ,YAAY;AAClB,MAAI,CAAC,QAAQ,KACX,QAAO,+BAA+B,QAAQ;EAGhD,MAAM,OAAO,uBAAuB,QAAQ;EAC5C,MAAM,gBAAgB,KAAK,gBACvB,KAAK,cAAc,QAAQ,MAAM,YAAY,QAAQ,GACrD,qBAAqB,QAAQ,MAAM,WAAW;AAElD,MAAI,UAAU,cAAc,CAC1B,QAAO,cAAc,MAAM,SAAU,OAAO,OAAO,GAAG,WAAW,CAAE;AAGrE,SAAO,gBAAgB,OAAO,GAAG,WAAW"}

package/dist/router/route-context.js

@@ -0,0 +1,79 @@
+import { withRouteAuthOptions } from "./policy.js";
+//#region src/router/route-context.ts
+function parseLocation(url) {
+	try {
+		const parsedUrl = new URL(url, "http://localhost");
+		return {
+			pathname: parsedUrl.pathname,
+			search: parsedUrl.search,
+			hash: parsedUrl.hash
+		};
+	} catch {
+		return {
+			pathname: "/",
+			search: "",
+			hash: ""
+		};
+	}
+}
+function deepFreeze(obj) {
+	if (obj && typeof obj === "object" && !Object.isFrozen(obj)) {
+		Object.freeze(obj);
+		for (const key of Object.keys(obj)) {
+			const value = obj[key];
+			if (value && typeof value === "object") deepFreeze(value);
+		}
+	}
+	return obj;
+}
+function makeQuery(search) {
+	const searchParams = new URLSearchParams(search || "");
+	const mapping = /* @__PURE__ */ new Map();
+	for (const [key, value] of searchParams.entries()) {
+		const existing = mapping.get(key);
+		if (existing) existing.push(value);
+		else mapping.set(key, [value]);
+	}
+	return deepFreeze({
+		get(key) {
+			const values = mapping.get(key);
+			return values ? values[0] : null;
+		},
+		getAll(key) {
+			const values = mapping.get(key);
+			return values ? [...values] : [];
+		},
+		has(key) {
+			return mapping.has(key);
+		},
+		toJSON() {
+			const output = {};
+			for (const [key, values] of mapping.entries()) output[key] = values.length > 1 ? [...values] : values[0];
+			return output;
+		}
+	});
+}
+function buildRouteContextBase(target, params, options) {
+	const parsed = parseLocation(target);
+	const href = `${parsed.pathname}${parsed.search}${parsed.hash}`;
+	return {
+		mode: options.mode,
+		params,
+		pathname: parsed.pathname,
+		search: parsed.search,
+		hash: parsed.hash,
+		href,
+		signal: options.signal
+	};
+}
+function buildRouteContext(target, params, options) {
+	return withRouteAuthOptions({
+		...buildRouteContextBase(target, params, options),
+		session: options.session ?? null,
+		user: options.user ?? null
+	}, options.auth);
+}
+//#endregion
+export { buildRouteContext, buildRouteContextBase, deepFreeze, makeQuery, parseLocation };
+
+//# sourceMappingURL=route-context.js.map

package/dist/router/route-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-context.js","names":[],"sources":["../../src/router/route-context.ts"],"sourcesContent":["import { withRouteAuthOptions } from './policy';\n\nimport type {\n  RouteAuthOptions,\n  RouteContext,\n  RouteQuery,\n} from '../common/router';\n\nexport function parseLocation(url: string): {\n  pathname: string;\n  search: string;\n  hash: string;\n} {\n  try {\n    const parsedUrl = new URL(url, 'http://localhost');\n    return {\n      pathname: parsedUrl.pathname,\n      search: parsedUrl.search,\n      hash: parsedUrl.hash,\n    };\n  } catch {\n    return { pathname: '/', search: '', hash: '' };\n  }\n}\n\nexport function deepFreeze<T>(obj: T): T {\n  if (obj && typeof obj === 'object' && !Object.isFrozen(obj)) {\n    Object.freeze(obj as Record<string, unknown>);\n    for (const key of Object.keys(obj as Record<string, unknown>)) {\n      const value = (obj as Record<string, unknown>)[key];\n      if (value && typeof value === 'object') {\n        deepFreeze(value);\n      }\n    }\n  }\n\n  return obj;\n}\n\nexport function makeQuery(search: string): RouteQuery {\n  const searchParams = new URLSearchParams(search || '');\n  const mapping = new Map<string, string[]>();\n\n  for (const [key, value] of searchParams.entries()) {\n    const existing = mapping.get(key);\n    if (existing) {\n      existing.push(value);\n    } else {\n      mapping.set(key, [value]);\n    }\n  }\n\n  const query: RouteQuery = {\n    get(key: string) {\n      const values = mapping.get(key);\n      return values ? values[0] : null;\n    },\n    getAll(key: string) {\n      const values = mapping.get(key);\n      return values ? [...values] : [];\n    },\n    has(key: string) {\n      return mapping.has(key);\n    },\n    toJSON() {\n      const output: Record<string, string | string[]> = {};\n      for (const [key, values] of mapping.entries()) {\n        output[key] = values.length > 1 ? [...values] : values[0];\n      }\n      return output;\n    },\n  };\n\n  return deepFreeze(query);\n}\n\nexport function buildRouteContextBase(\n  target: string,\n  params: Record<string, string>,\n  options: {\n    mode: RouteContext['mode'];\n    signal: AbortSignal;\n  }\n): Omit<RouteContext, 'session' | 'user'> {\n  const parsed = parseLocation(target);\n  const href = `${parsed.pathname}${parsed.search}${parsed.hash}`;\n\n  return {\n    mode: options.mode,\n    params,\n    pathname: parsed.pathname,\n    search: parsed.search,\n    hash: parsed.hash,\n    href,\n    signal: options.signal,\n  };\n}\n\nexport function buildRouteContext(\n  target: string,\n  params: Record<string, string>,\n  options: {\n    mode: RouteContext['mode'];\n    signal: AbortSignal;\n    auth?: RouteAuthOptions;\n    session?: unknown;\n    user?: unknown;\n  }\n): RouteContext {\n  const context: RouteContext = {\n    ...buildRouteContextBase(target, params, options),\n    session: options.session ?? null,\n    user: options.user ?? null,\n  };\n\n  return withRouteAuthOptions(context, options.auth);\n}\n"],"mappings":";;AAQA,SAAgB,cAAc,KAI5B;AACA,KAAI;EACF,MAAM,YAAY,IAAI,IAAI,KAAK,mBAAmB;AAClD,SAAO;GACL,UAAU,UAAU;GACpB,QAAQ,UAAU;GAClB,MAAM,UAAU;GACjB;SACK;AACN,SAAO;GAAE,UAAU;GAAK,QAAQ;GAAI,MAAM;GAAI;;;AAIlD,SAAgB,WAAc,KAAW;AACvC,KAAI,OAAO,OAAO,QAAQ,YAAY,CAAC,OAAO,SAAS,IAAI,EAAE;AAC3D,SAAO,OAAO,IAA+B;AAC7C,OAAK,MAAM,OAAO,OAAO,KAAK,IAA+B,EAAE;GAC7D,MAAM,QAAS,IAAgC;AAC/C,OAAI,SAAS,OAAO,UAAU,SAC5B,YAAW,MAAM;;;AAKvB,QAAO;;AAGT,SAAgB,UAAU,QAA4B;CACpD,MAAM,eAAe,IAAI,gBAAgB,UAAU,GAAG;CACtD,MAAM,0BAAU,IAAI,KAAuB;AAE3C,MAAK,MAAM,CAAC,KAAK,UAAU,aAAa,SAAS,EAAE;EACjD,MAAM,WAAW,QAAQ,IAAI,IAAI;AACjC,MAAI,SACF,UAAS,KAAK,MAAM;MAEpB,SAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;;AAyB7B,QAAO,WAAW;EApBhB,IAAI,KAAa;GACf,MAAM,SAAS,QAAQ,IAAI,IAAI;AAC/B,UAAO,SAAS,OAAO,KAAK;;EAE9B,OAAO,KAAa;GAClB,MAAM,SAAS,QAAQ,IAAI,IAAI;AAC/B,UAAO,SAAS,CAAC,GAAG,OAAO,GAAG,EAAE;;EAElC,IAAI,KAAa;AACf,UAAO,QAAQ,IAAI,IAAI;;EAEzB,SAAS;GACP,MAAM,SAA4C,EAAE;AACpD,QAAK,MAAM,CAAC,KAAK,WAAW,QAAQ,SAAS,CAC3C,QAAO,OAAO,OAAO,SAAS,IAAI,CAAC,GAAG,OAAO,GAAG,OAAO;AAEzD,UAAO;;EAIO,CAAM;;AAG1B,SAAgB,sBACd,QACA,QACA,SAIwC;CACxC,MAAM,SAAS,cAAc,OAAO;CACpC,MAAM,OAAO,GAAG,OAAO,WAAW,OAAO,SAAS,OAAO;AAEzD,QAAO;EACL,MAAM,QAAQ;EACd;EACA,UAAU,OAAO;EACjB,QAAQ,OAAO;EACf,MAAM,OAAO;EACb;EACA,QAAQ,QAAQ;EACjB;;AAGH,SAAgB,kBACd,QACA,QACA,SAOc;AAOd,QAAO,qBAAqB;EAL1B,GAAG,sBAAsB,QAAQ,QAAQ,QAAQ;EACjD,SAAS,QAAQ,WAAW;EAC5B,MAAM,QAAQ,QAAQ;EAGI,EAAS,QAAQ,KAAK"}

package/dist/router/route.d.ts

@@ -1,53 +1,120 @@
+import { AccessDecision, AccessDenyDecision, AccessRedirectDecision, GroupHelperOptions, LayoutScopeRecord, ParsedSegment, RegisterRoutesOptions, ResolvedRoute, Route, RouteAuthOptions, RouteComponent, RouteContext, RouteDefinition, RouteHandler, RouteManifest, RouteMatch, RouteOptions, RoutePolicy, RouteQuery, RouteRecord, RouteRenderResult, RouteRequestOptions, RouteRequestResult, RouteSnapshot } from "../common/router.js";
+
+//#region src/router/route.d.ts
+declare function setServerLocation(url: string | null): void;
+declare function _setActiveRouteAuthOptions(auth: RouteAuthOptions | undefined): void;
+declare function lockRouteRegistration(): void;
+declare function _lockRouteRegistrationForTests(): void;
+declare function _unlockRouteRegistrationForTests(): void;
 /**
- * Route definition and matching
- * Supports dynamic route registration for micro frontends
+ * Snapshot the current in-flight lazy() imports.
+ * Boot uses this before clearing route state so manifest-based startup can
+ * still await chunks that were kicked off during route module evaluation.
+ */
+declare function _snapshotLazy(): Promise<unknown>[];
+/**
+ * Declare a code-split route component. The `import()` fires immediately at
+ * module evaluation time (creating a bundler split point), and the resolved
+ * chunk is guaranteed to be available before the app mounts — so the renderer
+ * always receives a plain synchronous function.
+ *
+ * ```ts
+ * registerRoutes(() => {
+ *   group({ layout: AppLayout }, () => {
+ *     route('/', lazy(() => import('./pages/landing')));
+ *     route('/dashboard', lazy(() => import('./pages/dashboard')));
+ *   });
+ * });
+ * ```
  *
- * Optimization: Index by depth but maintain insertion order within each depth
+ * The module must export the component as its **default** export:
+ * ```ts
+ * // pages/dashboard.tsx
+ * export default function DashboardPage() { … }
+ * ```
  */
-export type { RouteHandler, Route, ResolvedRoute, RouteMatch, RouteQuery, RouteSnapshot, } from '../common/router';
-import type { RouteHandler, Route, ResolvedRoute, RouteSnapshot } from '../common/router';
-export declare function setServerLocation(url: string | null): void;
-export declare function lockRouteRegistration(): void;
-export declare function _lockRouteRegistrationForTests(): void;
-export declare function _unlockRouteRegistrationForTests(): void;
-export declare function route(): RouteSnapshot;
-export declare function route(path: string, handler?: RouteHandler, namespace?: string): void;
+declare function lazy(factory: () => Promise<{
+  default: RouteComponent;
+} | RouteComponent>): RouteComponent;
 /**
- * Get all registered routes
+ * Wait for all pending `lazy()` imports to settle.
+ * Called automatically by `createSPA` / `hydrateSPA` before mounting.
  */
-export declare function getRoutes(): Route[];
+declare function _drainLazy(additionalPending?: Iterable<Promise<unknown>>): Promise<void>;
+declare function group(options: GroupHelperOptions, fn: RouteDefinition): void;
+declare function fallback(Component: RouteComponent): void;
+declare function registerRoutes(definition: RouteDefinition, options?: RegisterRoutesOptions): void;
+declare function currentRoute(): RouteSnapshot;
 /**
- * Get routes for a specific namespace
+ * Register a route.
+ *
+ * ```ts
+ * route('/posts/{slug}', PostPage, {
+ *   loader:  ({ params }) => getPost(params.slug),
+ *   entries: async () => getPosts().map(p => ({ slug: p.slug })),
+ *   title:   'Post',
+ *   policies:[requireAuth()],
+ * });
+ * ```
  */
-export declare function getNamespaceRoutes(namespace: string): Route[];
+declare function route(path: string, Component: RouteComponent, options?: RouteOptions): void;
 /**
- * Unload all routes from a namespace (for MFE unmounting)
+ * Return the normalized route manifest built from registered route definitions.
+ *
+ * Pass this to `createSPA`, `hydrateSPA`, or `renderToString` as the
+ * authoritative routing input:
+ *
+ * ```ts
+ * import { getManifest } from '@askrjs/askr/router';
+ * await createSPA({ root: '#app', manifest: getManifest() });
+ * ```
  */
-export declare function unloadNamespace(namespace: string): number;
+declare function getManifest(): RouteManifest;
 /**
- * Clear all registered routes (mainly for testing)
+ * Internal: apply a pre-built manifest to the runtime stores without running
+ * route() again. Called by createSPA / hydrateSPA when a manifest is passed.
  */
-export declare function clearRoutes(): void;
+declare function _applyManifest(manifest: RouteManifest): void;
 /**
- * RouteDescriptor type — used by `registerRoute` for nested descriptors.
- *
- * Note: `registerRouteTree` helper was removed; prefer explicit `route()` registrations.
+ * Get all registered routes (flat list, insertion order).
+ * Prefer `getManifest()` when metadata (loader, policies, entries) is needed.
  */
-export type RouteDescriptor = {
-    path: string;
-    handler?: RouteHandler | unknown;
-    children?: RouteDescriptor[];
-    _isDescriptor?: true;
-};
-export declare function registerRoute(path: string, handler?: unknown, ...children: Array<RouteDescriptor | undefined>): RouteDescriptor;
+declare function getRoutes(): Route[];
+/** Get routes for a specific namespace. */
+declare function getNamespaceRoutes(namespace: string): Route[];
+/** Unload all routes from a namespace (for MFE unmounting). */
+declare function unloadNamespace(namespace: string): number;
+/** Clear all registered routes and records (testing / boot reset). */
+declare function clearRoutes(): void;
 /**
  * Get all loaded namespaces (MFE identifiers)
  */
-export declare function getLoadedNamespaces(): string[];
+declare function getLoadedNamespaces(): string[];
 /**
- * Resolve a path to a route handler with optimized lookup
- * Routes are matched by specificity: literals > parameters > wildcards > catch-all
+ * Resolve a path to a route handler.
+ *
+ * Hot path: walks the module-level `records[]` array which is kept sorted by
+ * rank descending at registration time — so the first `matchSegments` hit is
+ * always the most specific match.  No per-call allocations for the common
+ * case of purely-static routes.
+ */
+declare function resolveRoute(pathname: string): ResolvedRoute | null;
+declare function resolveRouteRequest(target: string, options?: RouteRequestOptions): RouteRequestResult | Promise<RouteRequestResult>;
+/**
+ * Resolve a path against an explicit route list (e.g. an SSR per-render
+ * context).  When called with the global `routes` array this delegates to
+ * the faster `resolveRoute` which uses pre-sorted `records[]`.
+ *
+ * For externally supplied lists the function:
+ *   1. Builds a rank-sorted copy of the list on first call and caches it
+ *      in a WeakMap so subsequent resolutions against the same list pay
+ *      zero sort cost.
+ *   2. Uses pre-parsed `ParsedSegment[]` from a WeakMap cache so no string
+ *      splitting or segment parsing occurs on the hot path.
+ *   3. Uses a running-best with an early-exit once the sorted list reaches
+ *      a rank that cannot beat the current best match.
  */
-export declare function resolveRoute(pathname: string): ResolvedRoute | null;
-export declare function resolveRouteFromRoutes(pathname: string, routeList: readonly Route[]): ResolvedRoute | null;
+declare function resolveRouteFromRoutes(pathname: string, routeList: readonly Route[]): ResolvedRoute | null;
+//#endregion
+export { _applyManifest, _drainLazy, clearRoutes, currentRoute, fallback, getLoadedNamespaces, getManifest, getNamespaceRoutes, getRoutes, group, lazy, registerRoutes, resolveRouteRequest, route, setServerLocation, unloadNamespace };
 //# sourceMappingURL=route.d.ts.map

package/dist/router/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/router/route.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,YAAY,EACV,YAAY,EACZ,KAAK,EACL,aAAa,EACb,UAAU,EACV,UAAU,EACV,aAAa,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EACV,YAAY,EACZ,KAAK,EACL,aAAa,EAGb,aAAa,EACd,MAAM,kBAAkB,CAAC;AAqE1B,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAE1D;AA0HD,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAGD,wBAAgB,8BAA8B,IAAI,IAAI,CAErD;AAED,wBAAgB,gCAAgC,IAAI,IAAI,CAEvD;AAED,wBAAgB,KAAK,IAAI,aAAa,CAAC;AACvC,wBAAgB,KAAK,CACnB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,YAAY,EACtB,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CAAC;AA2GR;;GAEG;AACH,wBAAgB,SAAS,IAAI,KAAK,EAAE,CAEnC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,EAAE,CAE7D;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAuBzD;AAED;;GAEG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAMlC;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC;IACjC,QAAQ,CAAC,EAAE,eAAe,EAAE,CAAC;IAC7B,aAAa,CAAC,EAAE,IAAI,CAAC;CACtB,CAAC;AAiCF,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,OAAO,EACjB,GAAG,QAAQ,EAAE,KAAK,CAAC,eAAe,GAAG,SAAS,CAAC,GAC9C,eAAe,CAuDjB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAEnE;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,SAAS,KAAK,EAAE,GAC1B,aAAa,GAAG,IAAI,CAyDtB"}
+{"version":3,"file":"route.d.ts","names":[],"sources":["../../src/router/route.ts"],"mappings":";;;iBAiMgB,iBAAA,CAAkB,GAAA;AAAA,iBAuElB,0BAAA,CACd,IAAA,EAAM,gBAAA;AAAA,iBAwDQ,qBAAA,CAAA;AAAA,iBAIA,8BAAA,CAAA;AAAA,iBAIA,gCAAA,CAAA;AAJhB;;;;;AAAA,iBA6EgB,aAAA,CAAA,GAAiB,OAAA;;;;;AAAjC;;;;;AAyBA;;;;;;;;;;;;iBAAgB,IAAA,CACd,OAAA,QAAe,OAAA;EAAU,OAAA,EAAS,cAAA;AAAA,IAAmB,cAAA,IACpD,cAAA;;;AAmCH;;iBAAgB,UAAA,CACd,iBAAA,GAAmB,QAAA,CAAS,OAAA,aAC3B,OAAA;AAAA,iBASa,KAAA,CAAM,OAAA,EAAS,kBAAA,EAAoB,EAAA,EAAI,eAAA;AAAA,iBAKvC,QAAA,CAAS,SAAA,EAAW,cAAA;AAAA,iBAmLpB,cAAA,CACd,UAAA,EAAY,eAAA,EACZ,OAAA,GAAS,qBAAA;AAAA,iBAoEK,YAAA,CAAA,GAAgB,aAAA;;;;;;;;AA9PhC;;;;;iBA8QgB,KAAA,CACd,IAAA,UACA,SAAA,EAAW,cAAA,EACX,OAAA,GAAU,YAAA;;;;;AA5QZ;;;;;AAmLA;;iBAyMgB,WAAA,CAAA,GAAe,aAAA;;;;;iBAWf,cAAA,CAAe,QAAA,EAAU,aAAA;;;AA9IzC;;iBAoKgB,SAAA,CAAA,GAAa,KAAA;;iBAKb,kBAAA,CAAmB,SAAA,WAAoB,KAAA;AAzJvD;AAAA,iBA8JgB,eAAA,CAAgB,SAAA;;iBA6BhB,WAAA,CAAA;;;;iBAiBA,mBAAA,CAAA;;;;AAzFhB;;;;;iBAqGgB,YAAA,CAAa,QAAA,WAAmB,aAAA;AAAA,iBA0GhC,mBAAA,CACd,MAAA,UACA,OAAA,GAAS,mBAAA,GACR,kBAAA,GAAqB,OAAA,CAAQ,kBAAA;;;;AAjLhC;;;;;AAKA;;;;;AAKA;iBA2OgB,sBAAA,CACd,QAAA,UACA,SAAA,WAAoB,KAAA,KACnB,aAAA"}