@braidlabs/gateway 0.1.1 → 0.2.0

package/src/protocol.d.ts

@@ -49,6 +49,17 @@ export declare const BRAID_ADAPTER_META = "braid-adapter";
 export declare const BRAID_ADAPTER_OPTIONS_META = "braid-adapter-options";
 /** Response/request header carrying a fragment id for diagnostics. */
 export declare const BRAID_FRAGMENT_ID_HEADER = "x-braid-fragment-id";
+/**
+ * Response header on a `409` from the document namespace: where the fragment tried to send the
+ * request. A browser hides the target of a redirect it was told not to follow, so the gateway
+ * carries it here instead — only for fragments that opt in with `redirect: 'navigate'`.
+ */
+export declare const BRAID_REDIRECT_LOCATION_HEADER = "x-braid-redirect-location";
+/**
+ * Request header on a document fetch: the page the fragment is being shown on. The gateway uses it
+ * to point a login's return URL at that page instead of at the fragment's own document URL.
+ */
+export declare const BRAID_RETURN_URL_HEADER = "x-braid-return-url";
 /** What a braid-namespaced URL addresses. */
 export type BraidRouteKind = 
 /** The fragment's own endpoint: assets, data, anything it serves. Forwarded verbatim. */
@@ -75,5 +86,10 @@ export declare function parseNamespacePathname(pathname: string): {
     fragmentId: string;
     pathname: string;
 } | null;
-/** Builds a URL in the fragment's asset namespace. */
-export declare function braidFragmentUrl(fragmentId: string, pathname: string, search?: string): string;
+/**
+ * Builds a URL in the fragment's asset namespace.
+ *
+ * `basePath` is the gateway's mount (`/manage`), already normalized: empty, or a path with no
+ * trailing slash.
+ */
+export declare function braidFragmentUrl(fragmentId: string, pathname: string, search?: string, basePath?: string): string;

package/src/protocol.js

@@ -49,6 +49,17 @@ export const BRAID_ADAPTER_META = 'braid-adapter';
 export const BRAID_ADAPTER_OPTIONS_META = 'braid-adapter-options';
 /** Response/request header carrying a fragment id for diagnostics. */
 export const BRAID_FRAGMENT_ID_HEADER = 'x-braid-fragment-id';
+/**
+ * Response header on a `409` from the document namespace: where the fragment tried to send the
+ * request. A browser hides the target of a redirect it was told not to follow, so the gateway
+ * carries it here instead — only for fragments that opt in with `redirect: 'navigate'`.
+ */
+export const BRAID_REDIRECT_LOCATION_HEADER = 'x-braid-redirect-location';
+/**
+ * Request header on a document fetch: the page the fragment is being shown on. The gateway uses it
+ * to point a login's return URL at that page instead of at the fragment's own document URL.
+ */
+export const BRAID_RETURN_URL_HEADER = 'x-braid-return-url';
 const PREFIXES = [
     [BRAID_FRAGMENT_PREFIX, 'fragment'],
     [BRAID_REALM_PREFIX, 'realm'],
@@ -82,8 +93,13 @@ export function parseNamespacePathname(pathname) {
     const route = parseBraidPathname(pathname);
     return route && route.kind === 'fragment' ? { fragmentId: route.fragmentId, pathname: route.pathname } : null;
 }
-/** Builds a URL in the fragment's asset namespace. */
-export function braidFragmentUrl(fragmentId, pathname, search = '') {
-    return `${BRAID_FRAGMENT_PREFIX}${encodeURIComponent(fragmentId)}${pathname}${search}`;
+/**
+ * Builds a URL in the fragment's asset namespace.
+ *
+ * `basePath` is the gateway's mount (`/manage`), already normalized: empty, or a path with no
+ * trailing slash.
+ */
+export function braidFragmentUrl(fragmentId, pathname, search = '', basePath = '') {
+    return `${basePath}${BRAID_FRAGMENT_PREFIX}${encodeURIComponent(fragmentId)}${pathname}${search}`;
 }
 //# sourceMappingURL=protocol.js.map

package/src/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../libs/braid-gateway/src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAErD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D;;;;;;GAMG;AACH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AAE1D,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD,wGAAwG;AACxG,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAElE,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAkB9D,MAAM,QAAQ,GAAqD;IACjE,CAAC,qBAAqB,EAAE,UAAU,CAAC;IACnC,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,qBAAqB,EAAE,UAAU,CAAC;CACpC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QAE3C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,iBAAiB,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAE/E,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAEpC,OAAO;YACL,IAAI;YACJ,UAAU,EAAE,kBAAkB,CAAC,iBAAiB,CAAC;YACjD,QAAQ,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;SAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChH,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,QAAgB,EAAE,MAAM,GAAG,EAAE;IAChF,OAAO,GAAG,qBAAqB,GAAG,kBAAkB,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC;AACzF,CAAC"}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../../libs/braid-gateway/src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,gBAAgB,CAAC;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC;AAErD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D;;;;;;GAMG;AACH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AAE1D,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,wBAAwB,GAAG,iBAAiB,CAAC;AAE1D,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AAEpD,wGAAwG;AACxG,MAAM,CAAC,MAAM,kBAAkB,GAAG,eAAe,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAElE,sEAAsE;AACtE,MAAM,CAAC,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,2BAA2B,CAAC;AAE1E;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,oBAAoB,CAAC;AAkB5D,MAAM,QAAQ,GAAqD;IACjE,CAAC,qBAAqB,EAAE,UAAU,CAAC;IACnC,CAAC,kBAAkB,EAAE,OAAO,CAAC;IAC7B,CAAC,qBAAqB,EAAE,UAAU,CAAC;CACpC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,QAAQ,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QAE3C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,iBAAiB,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAE/E,IAAI,CAAC,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAEpC,OAAO;YACL,IAAI;YACJ,UAAU,EAAE,kBAAkB,CAAC,iBAAiB,CAAC;YACjD,QAAQ,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;SAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,QAAgB,EAAE,MAAM,GAAG,EAAE,EAAE,QAAQ,GAAG,EAAE;IAC/F,OAAO,GAAG,QAAQ,GAAG,qBAAqB,GAAG,kBAAkB,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,MAAM,EAAE,CAAC;AACpG,CAAC"}

package/src/redirect.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Turning a fragment's redirect into something a browser can act on.
+ *
+ * A browser that was told not to follow a redirect hides where it was going, so for fragments that
+ * opt in (`redirect: 'navigate'`) the gateway answers the document request with a `409` carrying the
+ * target in a header. Everything here is pure: what the target may be, and how a login's return URL
+ * is pointed back at the page the user was on.
+ *
+ * The target is chosen by the fragment's endpoint, and it ends up as a top-level navigation, so it
+ * is only ever one of three things: a path on the host's own origin, a path inside the fragment's
+ * own endpoint (mapped back to the host), or an origin the host operator listed.
+ */
+/** An origin the host trusts as a redirect destination — `https://login.example.com`, or `https://*.example.com`. */
+export interface OriginRule {
+    protocol: string;
+    /** The exact hostname, or the suffix after `*.` when `wildcard` is set. */
+    host: string;
+    wildcard: boolean;
+    port: string;
+}
+/** Parses `redirectOrigins`, failing at construction so a typo is not a silent refusal at 2am. */
+export declare function parseOriginRules(origins: readonly string[]): OriginRule[];
+export interface RedirectContext {
+    /** The raw `Location` the fragment answered with. */
+    location: string;
+    /** The URL the fragment's endpoint was asked for — what a relative `Location` is relative to. */
+    fragmentRequestUrl: URL;
+    /** The fragment's endpoint, when it is a URL (a function endpoint has no origin of its own). */
+    endpoint: string | undefined;
+    /** The request that reached the gateway: the host's origin. */
+    requestUrl: URL;
+    allowedOrigins: readonly OriginRule[];
+}
+export type RedirectResolution = {
+    ok: true;
+    target: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/** `origin + path` only. A login's query string is where its tokens and return URLs live. */
+export declare function redactUrl(url: URL): string;
+/**
+ * A path that can only mean a path on this origin.
+ *
+ * `//evil.net` is a valid *path* to a URL parser (`https://host//evil.net`, or `/\evil.net`, whose
+ * backslash becomes a slash) and a valid *host* to whoever reads it back as a relative URL — the
+ * client does, with `new URL(target, location.href)`. Every leading slash or backslash collapses to
+ * one, so nothing this module emits as a path can be read as anything else.
+ */
+export declare function hostPath(pathname: string, search?: string, hash?: string): string;
+export declare function resolveRedirectTarget(context: RedirectContext): RedirectResolution;
+/**
+ * The page the user is on, if the request says so and it is one the gateway may send them back to.
+ *
+ * Same origin as the gateway only: this value is client-supplied and ends up inside a redirect, so
+ * it must not be able to name anywhere else. A braid URL is not a page.
+ */
+export declare function resolveReturnUrl(requestUrl: URL, headerValue: string | null, referer: string | null): URL | null;
+/**
+ * Points a login's return-URL parameters at the page instead of at the fragment.
+ *
+ * A fragment builds `?next=` from the request it saw — its own URL, which means nothing to the
+ * user. Any query parameter whose value is that URL (same path, on the fragment's origin or the
+ * host's) is replaced with the page the user was on, in the same form (absolute stays absolute, a
+ * path stays a path). Anything else is left exactly as it was.
+ */
+export declare function rewriteReturnUrls(target: string, returnUrl: URL | null, context: Pick<RedirectContext, 'fragmentRequestUrl' | 'requestUrl'> & {
+    strippedUrl: URL;
+}): string;

package/src/redirect.js

@@ -0,0 +1,172 @@
+/**
+ * Turning a fragment's redirect into something a browser can act on.
+ *
+ * A browser that was told not to follow a redirect hides where it was going, so for fragments that
+ * opt in (`redirect: 'navigate'`) the gateway answers the document request with a `409` carrying the
+ * target in a header. Everything here is pure: what the target may be, and how a login's return URL
+ * is pointed back at the page the user was on.
+ *
+ * The target is chosen by the fragment's endpoint, and it ends up as a top-level navigation, so it
+ * is only ever one of three things: a path on the host's own origin, a path inside the fragment's
+ * own endpoint (mapped back to the host), or an origin the host operator listed.
+ */
+/** Parses `redirectOrigins`, failing at construction so a typo is not a silent refusal at 2am. */
+export function parseOriginRules(origins) {
+    return origins.map((origin) => {
+        const wildcard = /^[a-z][a-z0-9+.-]*:\/\/\*\./i.test(origin);
+        let url;
+        try {
+            url = new URL(wildcard ? origin.replace('*.', '') : origin);
+        }
+        catch {
+            throw new Error(`braid-gateway: redirectOrigins entry "${origin}" is not a valid origin`);
+        }
+        if ((url.protocol !== 'https:' && url.protocol !== 'http:') || url.pathname !== '/' || url.search || url.hash) {
+            throw new Error(`braid-gateway: redirectOrigins entry "${origin}" must be a bare http(s) origin such as ` +
+                `"https://login.example.com" or "https://*.example.com"`);
+        }
+        return { protocol: url.protocol, host: url.hostname, wildcard, port: url.port };
+    });
+}
+function originAllowed(url, rules) {
+    return rules.some((rule) => rule.protocol === url.protocol &&
+        rule.port === url.port &&
+        // a wildcard is subdomains only — the apex is a different thing and has to be listed
+        (rule.wildcard ? url.hostname.endsWith(`.${rule.host}`) : url.hostname === rule.host));
+}
+/** `origin + path` only. A login's query string is where its tokens and return URLs live. */
+export function redactUrl(url) {
+    return `${url.origin}${url.pathname}`;
+}
+/**
+ * A path that can only mean a path on this origin.
+ *
+ * `//evil.net` is a valid *path* to a URL parser (`https://host//evil.net`, or `/\evil.net`, whose
+ * backslash becomes a slash) and a valid *host* to whoever reads it back as a relative URL — the
+ * client does, with `new URL(target, location.href)`. Every leading slash or backslash collapses to
+ * one, so nothing this module emits as a path can be read as anything else.
+ */
+export function hostPath(pathname, search = '', hash = '') {
+    return `/${pathname.replace(/^[\\/]+/, '')}${search}${hash}`;
+}
+export function resolveRedirectTarget(context) {
+    let target;
+    try {
+        target = new URL(context.location, context.fragmentRequestUrl);
+    }
+    catch {
+        return { ok: false, reason: 'its Location is not a valid URL' };
+    }
+    // `javascript:` and `data:` would run in the page that follows them
+    if (target.protocol !== 'https:' && target.protocol !== 'http:') {
+        return { ok: false, reason: `its Location uses the "${target.protocol}" scheme` };
+    }
+    // credentials in a URL are for phishing, and nothing a login sends the user to needs them
+    if (target.username || target.password) {
+        return { ok: false, reason: 'its Location carries credentials in the URL' };
+    }
+    // Inside the fragment's own endpoint: the same path on the host. The mirror image of how the
+    // gateway forwards requests, which is what makes `/apps/billing/login` mean `/login` to a user.
+    if (context.endpoint) {
+        const endpointUrl = new URL(context.endpoint);
+        const basePath = endpointUrl.pathname.endsWith('/') ? endpointUrl.pathname.slice(0, -1) : endpointUrl.pathname;
+        if (target.origin === endpointUrl.origin &&
+            (!basePath || target.pathname === basePath || target.pathname.startsWith(`${basePath}/`))) {
+            return { ok: true, target: hostPath(target.pathname.slice(basePath.length), target.search, target.hash) };
+        }
+    }
+    // The host's own origin — including a path under /__braid/, which is how a login that is itself
+    // a fragment is reached.
+    if (target.origin === context.requestUrl.origin) {
+        return { ok: true, target: hostPath(target.pathname, target.search, target.hash) };
+    }
+    if (originAllowed(target, context.allowedOrigins))
+        return { ok: true, target: target.href };
+    return {
+        ok: false,
+        reason: `its Location (${redactUrl(target)}) is not on this host, inside the fragment's endpoint, or in ` +
+            `redirectOrigins`,
+    };
+}
+/**
+ * The page the user is on, if the request says so and it is one the gateway may send them back to.
+ *
+ * Same origin as the gateway only: this value is client-supplied and ends up inside a redirect, so
+ * it must not be able to name anywhere else. A braid URL is not a page.
+ */
+export function resolveReturnUrl(requestUrl, headerValue, referer) {
+    for (const candidate of [headerValue, referer]) {
+        if (!candidate)
+            continue;
+        try {
+            const url = new URL(candidate);
+            // a braid URL is not a page — wherever the gateway is mounted (`/manage/__braid/…` with a basePath)
+            if (url.origin === requestUrl.origin && !/(^|\/)__braid\//.test(url.pathname))
+                return url;
+        }
+        catch {
+            // try the next one
+        }
+    }
+    return null;
+}
+/**
+ * Points a login's return-URL parameters at the page instead of at the fragment.
+ *
+ * A fragment builds `?next=` from the request it saw — its own URL, which means nothing to the
+ * user. Any query parameter whose value is that URL (same path, on the fragment's origin or the
+ * host's) is replaced with the page the user was on, in the same form (absolute stays absolute, a
+ * path stays a path). Anything else is left exactly as it was.
+ */
+export function rewriteReturnUrls(target, returnUrl, context) {
+    if (!returnUrl)
+        return target;
+    const url = new URL(target, context.requestUrl);
+    if (!url.search)
+        return target;
+    const origins = new Set([context.fragmentRequestUrl.origin, context.requestUrl.origin]);
+    const paths = new Set([
+        context.fragmentRequestUrl.pathname,
+        context.strippedUrl.pathname,
+        context.requestUrl.pathname,
+    ]);
+    const pagePath = hostPath(returnUrl.pathname, returnUrl.search, returnUrl.hash);
+    let rewritten = false;
+    // Pair by pair on the raw query, so a parameter that is not being rewritten keeps its exact bytes
+    // — re-serializing the whole query would change `~`, bare flags and invalid UTF-8 for an IdP that
+    // never asked for it.
+    const pairs = url.search.slice(1).split('&').map((pair) => {
+        const eq = pair.indexOf('=');
+        if (eq < 0)
+            return pair;
+        let value;
+        try {
+            value = decodeURIComponent(pair.slice(eq + 1).replace(/\+/g, ' '));
+        }
+        catch {
+            return pair;
+        }
+        const isPath = value.startsWith('/') && !value.startsWith('//');
+        if (!isPath && !/^https?:\/\//i.test(value))
+            return pair;
+        let candidate;
+        try {
+            candidate = new URL(value, context.fragmentRequestUrl);
+        }
+        catch {
+            return pair;
+        }
+        // A fragment served at `/` would match every `redirect_uri=<its root>`, which is an OAuth
+        // callback registration and not a place to return to.
+        if (candidate.pathname === '/' || !origins.has(candidate.origin) || !paths.has(candidate.pathname))
+            return pair;
+        rewritten = true;
+        return `${pair.slice(0, eq + 1)}${encodeURIComponent(isPath ? pagePath : returnUrl.href)}`;
+    });
+    if (!rewritten)
+        return target;
+    url.search = `?${pairs.join('&')}`;
+    // keep the form the target arrived in: host-relative stays host-relative
+    return /^https?:\/\//i.test(target) ? url.href : hostPath(url.pathname, url.search, url.hash);
+}
+//# sourceMappingURL=redirect.js.map

package/src/redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.js","sourceRoot":"","sources":["../../../../libs/braid-gateway/src/redirect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QAC5B,MAAM,QAAQ,GAAG,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,yBAAyB,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9G,MAAM,IAAI,KAAK,CACb,yCAAyC,MAAM,0CAA0C;gBACvF,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAClF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ,EAAE,KAA4B;IAC3D,OAAO,KAAK,CAAC,IAAI,CACf,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ;QAC9B,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI;QACtB,qFAAqF;QACrF,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,CAAC,CACxF,CAAC;AACJ,CAAC;AAgBD,6FAA6F;AAC7F,MAAM,UAAU,SAAS,CAAC,GAAQ;IAChC,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,MAAM,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE;IAC/D,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAwB;IAC5D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IAClE,CAAC;IAED,oEAAoE;IACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,MAAM,CAAC,QAAQ,UAAU,EAAE,CAAC;IACpF,CAAC;IACD,0FAA0F;IAC1F,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAC9E,CAAC;IAED,6FAA6F;IAC7F,gGAAgG;IAChG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC;QAC/G,IACE,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;YACpC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,EACzF,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5G,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,yBAAyB;IACzB,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IACrF,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAE5F,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EACJ,iBAAiB,SAAS,CAAC,MAAM,CAAC,+DAA+D;YACjG,iBAAiB;KACpB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAe,EACf,WAA0B,EAC1B,OAAsB;IAEtB,KAAK,MAAM,SAAS,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,oGAAoG;YACpG,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,GAAG,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,SAAqB,EACrB,OAA0F;IAE1F,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC;IAE9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAE/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;QACpB,OAAO,CAAC,kBAAkB,CAAC,QAAQ;QACnC,OAAO,CAAC,WAAW,CAAC,QAAQ;QAC5B,OAAO,CAAC,UAAU,CAAC,QAAQ;KAC5B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAEhF,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,kGAAkG;IAClG,kGAAkG;IAClG,sBAAsB;IACtB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAExB,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YACH,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzD,IAAI,SAAc,CAAC;QACnB,IAAI,CAAC;YACH,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,0FAA0F;QAC1F,sDAAsD;QACtD,IAAI,SAAS,CAAC,QAAQ,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhH,SAAS,GAAG,IAAI,CAAC;QACjB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC;IAC9B,GAAG,CAAC,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,yEAAyE;IACzE,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AAChG,CAAC"}

package/src/registry.d.ts

@@ -24,6 +24,54 @@ export interface FragmentManifest {
     adapter?: string;
     /** Contract version for contract-mode fragments (unused by the compat adapter). */
     contractVersion?: string;
+    /**
+     * What this fragment requires of a host, and what it provides back.
+     *
+     * Compared at the boundary handshake, before any state crosses. Recorded here rather than taken
+     * only from the fragment's own ACCEPT because the registry is host-side configuration: on the
+     * untrusted tier a fragment stating its own requirements could state them away.
+     *
+     * ```jsonc
+     * "contract": {
+     *   "version": "2.1.0",
+     *   "requires": { "host": ">=1.4.0", "context": { "cart": 2 } },
+     *   "provides": { "events": ["checkout:complete"] }
+     * }
+     * ```
+     */
+    contract?: {
+        version: string;
+        requires?: {
+            host?: string;
+            context?: Record<string, number>;
+        };
+        provides?: {
+            events?: string[];
+            actions?: string[];
+        };
+    };
+    /**
+     * What this fragment is allowed to do. Host-owned: never describable by the fragment itself,
+     * because a grant a fragment can widen is not a grant.
+     *
+     * ```jsonc
+     * "capabilities": {
+     *   "context": { "read": ["user", "cart"] },
+     *   "sandbox": ["allow-popups"],
+     *   "permissions": ["clipboard-write"]
+     * }
+     * ```
+     */
+    capabilities?: {
+        context?: {
+            read?: string[];
+            write?: string[];
+        };
+        sandbox?: string[];
+        permissions?: string[];
+        network?: string[];
+        storage?: 'partitioned' | 'shared';
+    };
     /** Module entry for contract-mode fragments (unused by the compat adapter). */
     entry?: string;
     /**
@@ -57,6 +105,15 @@ export interface FragmentManifest {
      * 404 on every page the widget appears on.
      */
     src?: string;
+    /**
+     * Where a bound fragment's document lives, as a path on its own endpoint (`/index.html`).
+     *
+     * For a single-page app on a static origin — a bucket behind a CDN — that has one document and
+     * 404s every route. Without it, a deep link asks that origin for `/accounts/123`. The fragment's
+     * router still sees the page's real route; only the request for its document changes. Assets
+     * are unaffected and are always fetched at their own paths.
+     */
+    documentPath?: string;
     /** Typed event surface for hosts. Reserved; not enforced by this build. */
     events?: Record<string, {
         detail: string;
@@ -117,6 +174,22 @@ export interface FragmentManifest {
      * holding a deep link but kept out of listings.
      */
     access?: FragmentAccess;
+    /**
+     * What happens when the fragment answers its document request with a redirect — almost always an
+     * unauthenticated request being sent to a login page.
+     *
+     * - `'error'` (default) — the client reports a named `fragment-fetch` error. A browser hides where
+     *   a redirect it was told not to follow was going, so nothing more is possible without an opt-in.
+     * - `'navigate'` — the gateway hands the target to the client, which navigates the whole page
+     *   there, exactly as the shell would have done had the redirect hit the top-level request.
+     *
+     * Opt-in because it lets the fragment's endpoint move the top-level page. The target must be on
+     * the host's origin, inside the fragment's own endpoint path, or on an origin listed in the
+     * gateway's `redirectOrigins`; anything else is refused. It only works end to end once the
+     * fragment can see who the user is (`forwardCredentials` or `additionalHeaders`) — otherwise it
+     * redirects again on the way back, and the client stops after one round trip.
+     */
+    redirect?: 'error' | 'navigate';
 }
 export interface FragmentAccess {
     /** Who may see this fragment in the discovery registry. Public when omitted. */

package/src/registry.js

@@ -45,12 +45,21 @@ export function normalizeManifest(manifest) {
     if (!manifest.endpoint) {
         throw new Error(`braid-gateway: manifest "${manifest.id}" is missing its endpoint`);
     }
+    if (manifest.documentPath !== undefined && !isPlainPath(manifest.documentPath)) {
+        throw new Error(`braid-gateway: manifest "${manifest.id}" has documentPath "${manifest.documentPath}" — it must be ` +
+            `a plain path on the fragment's endpoint, e.g. documentPath: "/index.html" (no "//", "\\", ` +
+            `dot segments, query, or fragment)`);
+    }
     // Warned rather than thrown: the fragment still composes, at the page path, which is wrong in a
     // way that shows up as an empty widget rather than as an error anyone can trace back to here.
     if (manifest.bound === false && !manifest.src) {
         console.warn(`braid-gateway: fragment "${manifest.id}" declares bound: false without a src, so it will be ` +
             `fetched at each page's own path — declare the path its content lives at, e.g. src: "/panel"`);
     }
+    if (manifest.redirect !== undefined && manifest.redirect !== 'error' && manifest.redirect !== 'navigate') {
+        throw new Error(`braid-gateway: manifest "${manifest.id}" declares redirect: "${String(manifest.redirect)}" — ` +
+            `use "error" or "navigate"`);
+    }
     return {
         ...manifest,
         adapter: manifest.adapter ?? DEFAULT_ADAPTER,
@@ -59,6 +68,13 @@ export function normalizeManifest(manifest) {
         bound: manifest.bound ?? true,
     };
 }
+/**
+ * An absolute path that means the same thing however it is joined onto an endpoint: one leading
+ * slash, no backslashes (which URL parsers treat as slashes), no dot segments, no query or hash.
+ */
+function isPlainPath(path) {
+    return /^\/(?!\/)[^?#\\]*$/.test(path) && !path.split('/').some((segment) => segment === '.' || segment === '..');
+}
 export class Registry {
     #source;
     #manifests;

package/src/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../libs/braid-gateway/src/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA8IH;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,IAA4B,EAAE,SAAgC;IACtF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IAEhD,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,OAAO,CAAC,QAAkC,EAAE,SAAgC;IAC1F,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,QAAQ,CAAC,QAAkC,EAAE,SAAgC;IAC3F,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAAC,QAAkC;IAC/D,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAExC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAQvC,MAAM,UAAU,iBAAiB,CAAC,QAA0B;IAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,+BAA+B,QAAQ,CAAC,EAAE,+DAA+D,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACtF,CAAC;IAED,gGAAgG;IAChG,8FAA8F;IAC9F,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC9C,OAAO,CAAC,IAAI,CACV,4BAA4B,QAAQ,CAAC,EAAE,uDAAuD;YAC5F,6FAA6F,CAChG,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,eAAe;QAC5C,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,kBAAkB;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,aAAa;QAC5C,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;KAC9B,CAAC;AACJ,CAAC;AAQD,MAAM,OAAO,QAAQ;IACnB,OAAO,CAAiB;IACxB,UAAU,CAAoD;IAC9D,aAAa,CAAoC;IAEjD,YAAY,MAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,6CAA6C;YAC7C,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAkB;QAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAEnB,2FAA2F;QAC3F,qFAAqF;QACrF,6FAA6F;QAC7F,2FAA2F;QAC3F,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAc,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,aAAa;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC;QAC7B,CAAC;aAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,SAAgD;IAC3E,MAAM,MAAM,GAA0B,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChG,IAAI,QAAQ;QAAE,yBAAyB,EAAE,CAAC;IAE1C,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,KAAK,MAAM,eAAe,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,OAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,CAAC,EAAE,yCAAyC,eAAe,MAAM;oBACnG,sGAAsG,EACxG,EAAE,KAAK,EAAE,CACV,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ;gBACR,OAAO,CAAC,QAAgB;oBACtB,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;wBAAE,OAAO,IAAI,CAAC;oBAC5C,4EAA4E;oBAC5E,oFAAoF;oBACpF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC;oBAChF,OAAO,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC/D,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB;IAChC,IAAI,OAAO,UAAU,KAAK,WAAW;QAAE,OAAO;IAE9C,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxH,MAAM,IAAI,KAAK,CACb,uDAAuD,IAAI,oCAAoC;QAC7F,+FAA+F;QAC/F,kDAAkD,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAA6B;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC5D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,sDAAsD,QAAQ,CAAC,EAAE,4BAA4B,CAAC,CAAC;YAC5G,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../libs/braid-gateway/src/registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+MH;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,IAA4B,EAAE,SAAgC;IACtF,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;IAEhD,IAAI,IAAI,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,OAAO,CAAC,QAAkC,EAAE,SAAgC;IAC1F,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,QAAQ,CAAC,QAAkC,EAAE,SAAgC;IAC3F,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAAC,QAAkC;IAC/D,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAUD;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AAExC,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAQvC,MAAM,UAAU,iBAAiB,CAAC,QAA0B;IAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,+BAA+B,QAAQ,CAAC,EAAE,+DAA+D,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,CAAC,EAAE,uBAAuB,QAAQ,CAAC,YAAY,iBAAiB;YAClG,4FAA4F;YAC5F,mCAAmC,CACtC,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,8FAA8F;IAC9F,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC9C,OAAO,CAAC,IAAI,CACV,4BAA4B,QAAQ,CAAC,EAAE,uDAAuD;YAC5F,6FAA6F,CAChG,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACzG,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,CAAC,EAAE,yBAAyB,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAC7F,2BAA2B,CAC9B,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,eAAe;QAC5C,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,kBAAkB;QACnD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,aAAa;QAC5C,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI;KAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACpH,CAAC;AAQD,MAAM,OAAO,QAAQ;IACnB,OAAO,CAAiB;IACxB,UAAU,CAAoD;IAC9D,aAAa,CAAoC;IAEjD,YAAY,MAAsB;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,6CAA6C;YAC7C,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAkB;QAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,iBAAiB,CAAC,QAAgB;QACtC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAEnB,2FAA2F;QAC3F,qFAAqF;QACrF,6FAA6F;QAC7F,2FAA2F;QAC3F,oCAAoC;QACpC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;QAC5D,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,aAAc,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,aAAa;QACjB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,SAA6B,CAAC;QAClC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC;QAC7B,CAAC;aAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,sBAAsB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9G,CAAC;YACD,SAAS,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,SAAgD;IAC3E,MAAM,MAAM,GAA0B,EAAE,CAAC;IAEzC,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAChG,IAAI,QAAQ;QAAE,yBAAyB,EAAE,CAAC;IAE1C,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,KAAK,MAAM,eAAe,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,OAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,4BAA4B,QAAQ,CAAC,EAAE,yCAAyC,eAAe,MAAM;oBACnG,sGAAsG,EACxG,EAAE,KAAK,EAAE,CACV,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC;gBACV,QAAQ;gBACR,OAAO,CAAC,QAAgB;oBACtB,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;wBAAE,OAAO,IAAI,CAAC;oBAC5C,4EAA4E;oBAC5E,oFAAoF;oBACpF,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,CAAC;oBAChF,OAAO,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC/D,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,yBAAyB;IAChC,IAAI,OAAO,UAAU,KAAK,WAAW;QAAE,OAAO;IAE9C,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxH,MAAM,IAAI,KAAK,CACb,uDAAuD,IAAI,oCAAoC;QAC7F,+FAA+F;QAC/F,kDAAkD,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAA6B;IACnD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC5D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,sDAAsD,QAAQ,CAAC,EAAE,4BAA4B,CAAC,CAAC;YAC5G,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/src/rewriter/html-rewrite-stream.d.ts

@@ -44,9 +44,14 @@ export interface EndTag {
     /** Emits content immediately before this end tag. */
     before(content: Injection): void;
 }
+/**
+ * A handler may return a promise, and the stream waits on it at that tag — everything before the
+ * tag has already been emitted. That is how a pierced slot waits for its fragment without holding
+ * back the shell ahead of it. Handlers that return nothing cost nothing extra.
+ */
 export interface ElementHandler {
-    element?(tag: StartTag): void;
-    endTag?(tag: EndTag): void;
+    element?(tag: StartTag): void | Promise<void>;
+    endTag?(tag: EndTag): void | Promise<void>;
 }
 export interface RewriteOptions {
     /**
@@ -61,7 +66,7 @@ export interface RewriteOptions {
      * Emitted once the input ends. Used as the safety net for injections anchored to an end tag
      * that never arrives — `</body>` is optional in HTML and frequently omitted.
      */
-    onEnd?(): Injection | undefined;
+    onEnd?(): Injection | undefined | Promise<Injection | undefined>;
 }
 export declare function rewriteHtmlStream(input: ReadableStream<Uint8Array>, options: RewriteOptions): ReadableStream<Uint8Array>;
 /** Adapts an async generator of chunks into a ReadableStream. */

package/src/rewriter/html-rewrite-stream.js

@@ -74,7 +74,7 @@ async function* rewrite(input, options) {
     finally {
         reader.releaseLock();
     }
-    const trailing = options.onEnd?.();
+    const trailing = await options.onEnd?.();
     if (trailing !== undefined) {
         yield* emit(trailing);
     }
@@ -206,7 +206,11 @@ async function* rewrite(input, options) {
             },
         };
         for (const element of elementHandlers) {
-            element(tag);
+            // awaited only when it is a promise: this runs for every element of every document, and an
+            // unconditional await would be a microtask per tag
+            const pending = element(tag);
+            if (pending)
+                await pending;
         }
         if (name !== originalName && !token.selfClosing && !VOID_ELEMENTS.has(originalName)) {
             openRenames.push({ original: originalName, renamed: name });
@@ -234,12 +238,14 @@ async function* rewrite(input, options) {
             return;
         }
         const before = [];
-        handler.endTag({
+        const pending = handler.endTag({
             tagName: token.name,
             before(content) {
                 before.push(content);
             },
         });
+        if (pending)
+            await pending;
         for (const content of before) {
             yield* emit(content);
         }
@@ -330,10 +336,17 @@ function scanToken(text, start) {
             index++;
             continue;
         }
+        // Attribute names end where the HTML tokenizer ends them — at `/` too, which separates
+        // attributes — and a leading `=` is the name's first character, not a separator. A name split
+        // differently here than in the browser is an attribute the transforms never see.
         const attributeNameStart = index;
-        while (index < length && !isWhitespace(text[index]) && text[index] !== '=' && text[index] !== '>') {
-            if (text[index] === '/' && text[index + 1] === '>')
-                break;
+        if (text[index] === '=')
+            index++;
+        while (index < length &&
+            !isWhitespace(text[index]) &&
+            text[index] !== '=' &&
+            text[index] !== '>' &&
+            text[index] !== '/') {
             index++;
         }
         if (index >= length)
@@ -374,7 +387,12 @@ function scanToken(text, start) {
             }
             index = cursor;
         }
-        attributes.push({ name: rawName.toLowerCase(), rawName, value });
+        // The browser keeps the first of a repeated attribute and drops the rest, so the same goes
+        // here: otherwise removing the first would promote a second the transforms never looked at.
+        const attributeName = rawName.toLowerCase();
+        if (!attributes.some((attribute) => attribute.name === attributeName)) {
+            attributes.push({ name: attributeName, rawName, value });
+        }
     }
 }
 /** Finds the end of a markup declaration, honoring quoted strings (doctypes may contain `>`). */