@braidlabs/sw 0.7.1 → 0.8.0

package/README.md

@@ -109,63 +109,160 @@ and cache a composed response (a page pierced against a registry that has since
 the stale artifact this package exists to avoid). Composed pages carry
 `x-braid-composed: offline` so a shell can say so rather than look merely slow.
 
-## The gateway in the worker, for static hosting (requirements, not built)
-
-Offline composition already runs the gateway's piercing in the worker. The open question is whether
-the worker can be the gateway **while online**, for a shell on purely static hosting (a bucket, a
-CDN, GitHub Pages) with no server in front of it. Nothing below is built. It records what an
-implementation must satisfy, so the design starts from the constraints rather than discovering them.
-
-**What it would do.** It would serve `/__braid/realm/:id/*` stubs, proxy `/__braid/frag/:id/*` and
-`/__braid/doc/:id/*` to each fragment's origin, and pierce document navigations, all with the
-gateway's own code. That is exactly what offline composition does now, but against the network.
-
-### Requirements
-
-1. **The first visit must work without a reload.** No worker is installed on a first visit, so the
-   design is:
-   - The static host serves the shell and realm stubs generated at build time. Stubs are
-     byte-stable per registry snapshot, so they can be plain files.
-   - The page registers the worker, and the worker calls `clients.claim()` for this mode. This is
-     a deliberate exception to the `claimClients: false` default above: there is no earlier worker
-     to swap out from under the page.
-   - Slots wait for `navigator.serviceWorker.ready`, with a timeout, before booting. From then on
-     the realm iframes' navigations and the namespace fetches are the worker's to answer.
-   - The first visit's first paint is not composed. Fragments boot client-side, which already works
-     without piercing. Every later navigation is composed by the worker.
-2. **Fragment origins must send CORS headers.** The worker fetches them cross-origin. Documents and
-   assets need `Access-Control-Allow-Origin` naming the shell's origin, and module scripts need it
-   regardless.
-3. **Authenticated fragments must be same-site with the shell** (subdomains of one registrable
-   domain). With credentials, the worker's cross-origin requests also need
-   `Access-Control-Allow-Credentials`. Across sites, third-party cookie blocking (Safari, Firefox,
-   and Chrome where enabled) drops the session. A fragment that needs login cookies from another
-   site cannot be composed this way, and the build should refuse its manifest rather than let it
-   fail at runtime.
-4. **There must be a fallback where no worker can run.** Some private-browsing modes and enterprise
-   policies disable service workers. Without a worker, compat fragments have no namespace, so the
-   page must boot those slots as contract or untrusted fragments, or show their fallback content.
-   It must never leave them half-booted.
-5. **What the server gateway enforces must stay enforced.** Today's server gateway strips
-   credentials (`forwardCredentials`), checks `access`, and decides redirects (`redirectOrigins`).
-   In the worker, all of that runs on the user's device, which makes it advisory: a user can
-   change it. Anything that must hold against the user stays on the fragment's own origin. The
-   docs must say so plainly, as the boundary docs do for trusted fragments.
-6. **The registry must be pinned.** The worker loads one snapshot (`snapshotUrl`), verifies it as
-   the registry does, and composes only from it. Updating the snapshot follows the worker's
-   version discipline (see below), so configuration churn never becomes an unannounced change of
-   composition mid-session.
-7. **The gateway core stays runtime-neutral.** No `node:` imports in the gateway, registry or
-   rewriter, which offline composition already depends on. A new dependency of the core that
-   breaks this breaks both.
+**What it keeps is one person's.** The parts are fetched with the user's cookies, and the cache
+outlives the session. It keeps nothing the origin marked `Cache-Control: no-store` (and drops a copy
+it kept before the origin said so), and nothing for a route no fragment pierces. `private` pages are
+kept: that directive is about shared caches, this one is the browser's own, and the gateway marks
+every pierced page `private` by default. So clear it at sign-out, or the next person on the device
+is served the last one's pages whenever the network drops. A refresh still running when the clear
+lands does not write afterwards:
+
+```ts
+// in the page, at sign-out
+navigator.serviceWorker.controller?.postMessage({ type: 'braid-sw:clear' }); // replies { type: 'braid-sw:cleared', ok }
+
+// or in your own worker
+import { clearBraidCaches } from '@braidlabs/sw';
+await clearBraidCaches();
+```
+
+## The gateway in the worker, for static hosting (`@braidlabs/sw/gateway`, proof of concept)
+
+Offline composition runs the gateway's piercing in the worker against the cache. The
+`@braidlabs/sw/gateway` entry runs the **whole gateway** in the worker against the network. That's
+for a shell on purely static hosting (a bucket, a CDN, GitHub Pages) with no server to put a gateway
+on. It's the same `createGateway` the server runs, with the network as its shell.
+
+```js
+// sw.js — bundled, and served from the root so its scope covers the shell
+import { setupBraidGateway } from '@braidlabs/sw/gateway';
+
+setupBraidGateway({
+  registry: [{ id: 'billing', endpoint: new URL('/billing-app/', self.location.origin).href, pierce: ['/billing/*'] }],
+  claimClients: true, // the installing page composes without a reload
+  assets: {}, // optional: the skew cache, in front of the in-worker gateway
+});
+```
+
+Its own entry, rather than part of `@braidlabs/sw`, because it is a different decision. The main
+entry keeps a *server* gateway's assets alive and stays small enough to compose into any worker. It
+bundles none of the gateway's router. This entry *is* the router, rewriter and piercing.
+
+To compose it into a worker you already own, use `braidGatewayHandler(options)`. It returns a handler
+that decides synchronously, as `respondWith` requires:
+- It claims same-origin requests under `/__braid/` (or under `basePath`) and the browser's own GET
+  navigations.
+- Everything else, including a page's own `fetch` for HTML, returns `null`.
+
+Its `.fetch` routes any request through the gateway. Hand it to the asset handler, and the skew
+cache sits in front of the in-worker gateway as it would in front of a server one. Without it, the
+asset handler's misses go to the network, and on a static host that's a 404:
+
+```js
+const braid = braidGatewayHandler({ registry });
+const assets = braidFetchHandler({ fetch: braid.fetch });
+self.addEventListener('fetch', (event) => {
+  if (!braid.claims(event.request)) return; // the asset handler matches by path alone, on any origin
+  const handled = assets(event.request) ?? braid(event.request);
+  if (handled) event.respondWith(handled);
+});
+```
+
+The page starts Braid once the worker controls it. Until then `/__braid/` is a 404 on a static host.
+A hard reload loads the page past a worker that is already active, and an active worker doesn't
+claim a page unasked, so the page asks:
+
+```js
+if (!navigator.serviceWorker.controller) {
+  const changed = new Promise((resolve) => navigator.serviceWorker.addEventListener('controllerchange', resolve, { once: true }));
+  const registration = await navigator.serviceWorker.register('/sw.js', { type: 'module', scope: '/' });
+  registration.active?.postMessage({ type: 'braid-sw:claim' }); // BRAID_CLAIM_MESSAGE, honoured with claimClients
+  await changed;
+}
+initBraid();
+```
+
+[`examples/sw-gateway`](../../examples/sw-gateway) is the proof of concept. It's a static server with
+no gateway, serving the fragment zstd-compressed as a CDN would. The fragment composes, boots in its
+realm, pierces, and comes back after a hard reload. The repository's e2e runs that example in
+Chromium and asserts no `/__braid/` request ever reaches the server.
+
+### What running in a browser changed
+
+The server never meets any of these. The e2e found each one, and fails without its fix:
+
+- **Navigation requests can't be copied.** The gateway derives fragment requests with
+  `new Request(url, request)`, which a browser refuses for a `navigate`-mode request. The gateway
+  caught the error and pierced a placeholder.
+  - The handler now hands the gateway a non-navigation copy, and the shell still loads through the
+    browser's own navigation.
+  - The copy sends credentials as a page's own `fetch` would (same-origin), not as the navigation's
+    `include`.
+  - It keeps a POST's body.
+- **`accept-encoding` is a forbidden header.** The gateway pins it on a server so it knows which
+  codings `fetch` decoded, and a browser silently drops the pin. The gateway now notices the header
+  didn't take and trusts the browser to have decoded whatever it asked for, instead of refusing
+  `zstd` with a 502.
+- **Navigation preload is off.** The browser preloads *every* navigation in scope, including the
+  realm frames' navigations, which the worker answers itself. Each would also go to a server with no
+  answer for it. `setupBraidGateway` turns preload off. A worker of your own that enables it should
+  expect those requests.
+
+Two came from review rather than the e2e, and have specs:
+- **A redirecting shell is handed back to the browser.** A navigation's own `fetch` returns an
+  opaque redirect, for example when the host answers `/billing` with `/billing/`. It can't be copied
+  into a new response, so the gateway passes any status-0 shell through untouched.
+- **A page's `fetch` for HTML isn't a navigation.** The gateway can't see `Sec-Fetch-Dest` from a
+  worker. Claiming an htmx or Turbo request by its `Accept` header would pierce it as a document.
+
+### Requirements, and where each stands
+
+1. **The first visit must work without a reload.** *Met in the POC, partly.*
+   - The page registers the worker and starts the runtime once a controller exists, and
+     `claimClients` hands it the page. A hard reload asks the active worker to claim it.
+   - The first paint isn't composed. Fragments boot client-side, and every later navigation is
+     pierced by the worker.
+   - Still open: build-time realm stubs, and a timeout on the wait.
+2. **Fragment origins must send CORS headers.** *Documented, not exercised.* The worker reads what
+   it pierces, so a cross-origin endpoint needs `Access-Control-Allow-Origin` naming the shell's
+   origin. The POC's endpoint is same-origin. The endpoint also has to be public: on a server it can
+   sit behind the gateway, but here the browser fetches it.
+3. **Authenticated fragments must be same-origin with the shell.** *Documented.* The worker can't set
+   `Cookie` by name, and its fragment requests send credentials same-origin only, as the page's own
+   do. So a same-origin endpoint gets the browser's cookies and a cross-origin one gets none.
+   `forwardCredentials` and per-fragment cookie scoping can't take effect: the browser's cookie rules
+   replace them.
+4. **There must be a fallback where no worker can run.** *Open.* Without a worker, the namespace is
+   a 404 on a static host. The POC page waits for a controller indefinitely.
+5. **What the server gateway enforces is advisory here.**
+   - `access` and `redirectOrigins` run on the user's device, where the user can change them.
+     Anything that must hold against the user stays on the fragment's own origin.
+   - Everything in the options ships in the public `sw.js`, `additionalHeaders` included, so they
+     must hold no secrets.
+   - A fragment's redirect comes back to the worker opaque, so `redirect: 'navigate'` can't be
+     honoured. It fails closed: a pierced slot falls back to its placeholder.
+   - On `SameSite`, by reasoning rather than a browser test: a worker pierce sends a same-origin
+     fragment the cookies the page's own client-side compose would send a moment later. That
+     includes `Strict` ones after a cross-site link, which a server pierce wouldn't see. The shell
+     should refuse cross-site framing, and the example sends `X-Frame-Options: SAMEORIGIN`.
+6. **The registry must be pinned.** *Open.* The POC bakes its registry into the worker, so a
+   registry change is a worker update. That's version discipline of a kind, but it isn't
+   `snapshotUrl` loading and verification.
+7. **The gateway core stays runtime-neutral.** *Holds.* The worker bundles the gateway apart from two
+   fixes that apply on any runtime: the coding fix above, and passing an opaque shell through. A
+   worker that imports only the main entry carries none of it.
 
 ### Open questions
 
-- **Worker startup on every navigation.** A cold start can add tens of milliseconds on mobile.
-  Navigation preload can fetch the shell while the worker boots, but there is no server to ask for
-  the fragments early.
+- **Worker startup on every navigation.** With preload off, a navigation's shell request waits for
+  the worker to boot, which can be tens of milliseconds on mobile. Requests it doesn't answer no
+  longer pay that where the browser has static routing. `setupBraidGateway` declares its namespace
+  and navigations at install (`staticRoutes`, on by default), and everything else goes straight to
+  the network.
 - **Which `x-braid-composed` value** a worker-composed online page should carry, so it can be told
   apart from a server-composed one in telemetry.
+- **`assets` together with `basePath`.** The asset handler only recognises the namespace at the
+  root, so `setupBraidGateway` refuses the combination for now.
 
 ## The worker is itself a skew vector
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@braidlabs/sw",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "Braid service worker — skew-aware asset serving for composed pages: each fragment gets its own build-keyed cache partition, so a page already open keeps getting the chunks it was built against after a deploy lands. Ships as a handler to compose into an existing worker, and as a complete worker.",
   "keywords": [
     "micro-frontends",
@@ -22,11 +22,15 @@
       "types": "./src/index.d.ts",
       "default": "./src/index.js"
     },
+    "./gateway": {
+      "types": "./src/gateway.d.ts",
+      "default": "./src/gateway.js"
+    },
     "./package.json": "./package.json"
   },
   "peerDependencies": {
-    "@braidlabs/data": "^0.7.1",
-    "@braidlabs/gateway": "^0.7.1"
+    "@braidlabs/data": "^0.8.0",
+    "@braidlabs/gateway": "^0.8.0"
   },
   "publishConfig": {
     "access": "public"

package/src/gateway.d.ts

@@ -0,0 +1,10 @@
+/**
+ * `@braidlabs/sw/gateway` — the Braid gateway, run inside the service worker.
+ *
+ * Its own entry rather than part of `@braidlabs/sw`, because it is a different decision: the main
+ * entry keeps a server gateway's assets alive across deploys, and stays small enough to compose
+ * into any worker. This one *is* the gateway — the whole router, rewriter, and piercing — for an
+ * origin with no server to run it on. A worker that imports only the main entry never bundles it.
+ */
+export { braidGatewayHandler, setupBraidGateway, BRAID_CLAIM_MESSAGE, } from './lib/gateway.js';
+export type { BraidGatewayHandler, BraidGatewayHandlerOptions, BraidGatewayWorkerOptions, } from './lib/gateway.js';

package/src/gateway.js

@@ -0,0 +1,10 @@
+/**
+ * `@braidlabs/sw/gateway` — the Braid gateway, run inside the service worker.
+ *
+ * Its own entry rather than part of `@braidlabs/sw`, because it is a different decision: the main
+ * entry keeps a server gateway's assets alive across deploys, and stays small enough to compose
+ * into any worker. This one *is* the gateway — the whole router, rewriter, and piercing — for an
+ * origin with no server to run it on. A worker that imports only the main entry never bundles it.
+ */
+export { braidGatewayHandler, setupBraidGateway, BRAID_CLAIM_MESSAGE, } from './lib/gateway.js';
+//# sourceMappingURL=gateway.js.map

package/src/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../../../../libs/braid-sw/src/gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC"}

package/src/index.d.ts

@@ -14,7 +14,7 @@ export { braidFetchHandler, pruneFragmentCaches } from './lib/asset-handler.js';
 export type { BraidFetchHandlerOptions, AssetOutcome, AssetReport } from './lib/asset-handler.js';
 export { setupBraidWorker } from './lib/worker.js';
 export type { BraidWorkerOptions } from './lib/worker.js';
-export { braidNavigationHandler } from './lib/compose.js';
+export { braidNavigationHandler, clearBraidCaches } from './lib/compose.js';
 export type { OfflineCompositionOptions } from './lib/compose.js';
 export { precacheRealmStubs } from './lib/precache.js';
 export type { PrecacheOptions, PrecacheResult } from './lib/precache.js';

package/src/index.js

@@ -12,7 +12,7 @@
  */
 export { braidFetchHandler, pruneFragmentCaches } from './lib/asset-handler.js';
 export { setupBraidWorker } from './lib/worker.js';
-export { braidNavigationHandler } from './lib/compose.js';
+export { braidNavigationHandler, clearBraidCaches } from './lib/compose.js';
 export { precacheRealmStubs } from './lib/precache.js';
 export { createReportQueue, BRAID_REPORT_SYNC_TAG } from './lib/reports.js';
 export { diagnoseSkew, BRAID_BUILD_HEADER, BRAID_SNAPSHOT_HEADER } from './lib/skew-report.js';

package/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/braid-sw/src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAGhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAGvD,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../libs/braid-sw/src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAGhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAGvD,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAG5E,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC"}

package/src/lib/asset-handler.d.ts

@@ -1,3 +1,4 @@
+import { type FragmentCacheOptions } from './fragment-caches.js';
 /**
  * Skew-aware asset serving: the one layer that can keep an open page working after a deploy.
  *
@@ -28,7 +29,7 @@ export interface AssetReport {
     /** The cache partition that answered, or would have. */
     partition: string;
 }
-export interface BraidFetchHandlerOptions {
+export interface BraidFetchHandlerOptions extends FragmentCacheOptions {
     /**
      * The build this worker was shipped as.
      *
@@ -66,7 +67,4 @@ export declare function braidFetchHandler(options?: BraidFetchHandlerOptions): (
  * old chunks this handler exists to keep. A fragment that has left the registry, on the other hand,
  * is never coming back for them.
  */
-export declare function pruneFragmentCaches(keep: readonly string[], options?: {
-    cachePrefix?: string;
-    caches?: CacheStorage;
-}): Promise<string[]>;
+export declare function pruneFragmentCaches(keep: readonly string[], options?: FragmentCacheOptions): Promise<string[]>;

package/src/lib/asset-handler.js

@@ -1,5 +1,5 @@
 import { parseBraidPathname } from '@braidlabs/gateway';
-const DEFAULT_CACHE_PREFIX = 'braid-frag';
+import { DEFAULT_CACHE_PREFIX, deleteFragmentBuckets, keptWithBuckets, openFragmentCache, usesBuckets } from './fragment-caches.js';
 /**
  * Builds a fetch handler for the Braid namespace.
  *
@@ -13,7 +13,6 @@ const DEFAULT_CACHE_PREFIX = 'braid-frag';
  */
 export function braidFetchHandler(options = {}) {
     const cachePrefix = options.cachePrefix ?? DEFAULT_CACHE_PREFIX;
-    const cacheStorage = options.caches ?? globalThis.caches;
     const networkFetch = options.fetch ?? globalThis.fetch;
     return (request) => {
         // GET only. A cache cannot answer a POST, and pretending otherwise is how a worker turns a
@@ -32,7 +31,7 @@ export function braidFetchHandler(options = {}) {
     async function serve(request, url, fragmentId) {
         const partition = `${cachePrefix}:${fragmentId}`;
         const report = (outcome) => options.onReport?.({ fragmentId, url: url.href, outcome, partition });
-        const cache = await cacheStorage?.open(partition);
+        const cache = await openFragmentCache(fragmentId, options);
         try {
             const response = await networkFetch(request);
             // 404 is the deploy case, and the only status worth reaching into the cache for. A 500 is the
@@ -77,16 +76,19 @@ export function braidFetchHandler(options = {}) {
 export async function pruneFragmentCaches(keep, options = {}) {
     const cachePrefix = options.cachePrefix ?? DEFAULT_CACHE_PREFIX;
     const cacheStorage = options.caches ?? globalThis.caches;
-    if (!cacheStorage)
-        return [];
     const kept = new Set(keep.map((id) => `${cachePrefix}:${id}`));
     const removed = [];
-    for (const name of await cacheStorage.keys()) {
-        if (!name.startsWith(`${cachePrefix}:`) || kept.has(name))
+    // The shared cache storage first: with buckets on, this is also where a worker that just
+    // switched left its old per-fragment caches. A kept fragment's shared cache is superseded only
+    // once its bucket exists; one whose bucket was refused falls back to it, and keeps it.
+    const superseded = new Set(usesBuckets(options) ? await keptWithBuckets(keep, options) : []);
+    for (const name of (await cacheStorage?.keys()) ?? []) {
+        if (!name.startsWith(`${cachePrefix}:`) || (kept.has(name) && !superseded.has(name.slice(cachePrefix.length + 1))))
             continue;
         await cacheStorage.delete(name);
         removed.push(name);
     }
+    removed.push(...(await deleteFragmentBuckets(keep, options)));
     return removed;
 }
 //# sourceMappingURL=asset-handler.js.map

package/src/lib/asset-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"asset-handler.js","sourceRoot":"","sources":["../../../../../libs/braid-sw/src/lib/asset-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAyDxD,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAoC,EAAE;IAEtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,IAAK,UAAwC,CAAC,MAAM,CAAC;IACxF,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAEvD,OAAO,CAAC,OAAgB,EAAE,EAAE;QAC1B,2FAA2F;QAC3F,qCAAqC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/C,+FAA+F;QAC/F,6FAA6F;QAC7F,wFAAwF;QACxF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAEjF,OAAO,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,KAAK,UAAU,KAAK,CAAC,OAAgB,EAAE,GAAQ,EAAE,UAAkB;QACjE,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,CAAC,OAAqB,EAAE,EAAE,CACvC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAE7C,8FAA8F;YAC9F,6FAA6F;YAC7F,2DAA2D;YAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBAC1B,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,yFAAyF;YACzF,oCAAoC;YACpC,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;gBACpD,oFAAoF;gBACpF,0EAA0E;gBAC1E,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,CAAC,SAAS,CAAC,CAAC;YAClB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,SAAS,CAAC,CAAC;gBAClB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,UAA2D,EAAE;IAE7D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,IAAK,UAAwC,CAAC,MAAM,CAAC;IACxF,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,IAAI,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACpE,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"asset-handler.js","sourceRoot":"","sources":["../../../../../libs/braid-sw/src/lib/asset-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EAA6B,MAAM,sBAAsB,CAAC;AA0D/J;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAoC,EAAE;IAEtC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAEvD,OAAO,CAAC,OAAgB,EAAE,EAAE;QAC1B,2FAA2F;QAC3F,qCAAqC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QAE1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/C,+FAA+F;QAC/F,6FAA6F;QAC7F,wFAAwF;QACxF,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAEjF,OAAO,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,KAAK,UAAU,KAAK,CAAC,OAAgB,EAAE,GAAQ,EAAE,UAAkB;QACjE,MAAM,SAAS,GAAG,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,CAAC,OAAqB,EAAE,EAAE,CACvC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAE7C,8FAA8F;YAC9F,6FAA6F;YAC7F,2DAA2D;YAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBAC1B,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,yFAAyF;YACzF,oCAAoC;YACpC,IAAI,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;gBACpD,oFAAoF;gBACpF,0EAA0E;gBAC1E,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACnE,CAAC;YAED,MAAM,CAAC,SAAS,CAAC,CAAC;YAClB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,CAAC,SAAS,CAAC,CAAC;gBAClB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAuB,EACvB,UAAgC,EAAE;IAElC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,IAAK,UAAwC,CAAC,MAAM,CAAC;IACxF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,WAAW,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,yFAAyF;IACzF,+FAA+F;IAC/F,uFAAuF;IACvF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,YAAY,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7H,MAAM,YAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE9D,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/src/lib/compose.d.ts

@@ -1,3 +1,4 @@
+import { type FragmentCacheOptions } from './fragment-caches.js';
 /**
  * Offline composition: the gateway's own piercing, run inside the worker.
  *
@@ -29,6 +30,8 @@ export interface OfflineCompositionOptions {
     snapshotUrl: string;
     cachePrefix?: string;
     caches?: CacheStorage;
+    /** Keep fragment documents in per-fragment Storage Buckets, as the asset handler does with `buckets`. */
+    buckets?: boolean;
     fetch?: typeof fetch;
     /** Called when a page is composed offline, so a shell can say so rather than look merely slow. */
     onCompose?: (event: {
@@ -52,3 +55,9 @@ export interface OfflineCompositionOptions {
  * while the worker is still booting, rather than after.
  */
 export declare function braidNavigationHandler(options: OfflineCompositionOptions): (request: Request, preloadResponse?: Promise<Response | undefined>) => Promise<Response> | null;
+/**
+ * Deletes every page and fragment document kept for offline composition, and the fragments' cached
+ * assets with them. Call it at sign-out: what was composed for one person must not be composed for
+ * the next. A page can ask its worker to do it with `postMessage({ type: 'braid-sw:clear' })`.
+ */
+export declare function clearBraidCaches(options?: FragmentCacheOptions): Promise<void>;

package/src/lib/compose.js

@@ -1,5 +1,10 @@
 import { BRAID_DOCUMENT_PREFIX, Registry, pierceShellHtml, } from '@braidlabs/gateway';
-const DEFAULT_CACHE_PREFIX = 'braid-frag';
+import { DEFAULT_CACHE_PREFIX, deleteFragmentBuckets, openFragmentCache } from './fragment-caches.js';
+/**
+ * Bumped by every clear. A refresh started before a clear must not write after it: it was fetched
+ * with the previous person's cookies, and putting it back would undo the sign-out it raced.
+ */
+let generation = 0;
 const SHELL_CACHE = 'braid-shell';
 const SNAPSHOT_CACHE = 'braid-snapshot';
 /**
@@ -54,25 +59,44 @@ export function braidNavigationHandler(options) {
     async function refresh(request) {
         if (!cacheStorage)
             return;
+        const startedIn = generation;
+        const current = () => generation === startedIn;
         const url = new URL(request.url);
         const manifests = await loadSnapshot(url.origin);
         if (!manifests)
             return;
         const registry = new Registry([...manifests]);
         const matches = await registry.matchPierceRoutes(url.pathname);
+        // A route no fragment pierces has nothing to compose, and its page is not worth keeping.
+        if (matches.length === 0)
+            return;
         const shell = await networkFetch(new Request(request.url, { headers: { 'sec-fetch-dest': 'empty' } }));
-        if (shell.ok) {
-            const shellCache = await cacheStorage.open(SHELL_CACHE);
+        if (!current())
+            return;
+        const shellCache = await cacheStorage.open(SHELL_CACHE);
+        if (shell.ok && mayKeep(shell))
             await shellCache.put(shellKey(url), shell.clone());
-        }
+        // A page the origin now says must not be stored loses the copy kept before it said so.
+        else if (shell.ok)
+            await shellCache.delete(shellKey(url));
         for (const manifest of matches) {
             const documentUrl = `${url.origin}${BRAID_DOCUMENT_PREFIX}${encodeURIComponent(manifest.id)}${documentPath(manifest, url)}`;
             const response = await networkFetch(documentUrl);
+            if (!current())
+                return;
             if (!response.ok)
                 continue;
             // In the fragment's own partition, so pruning a retired fragment takes its documents too.
-            const cache = await cacheStorage.open(`${cachePrefix}:${manifest.id}`);
-            await cache.put(documentUrl, response.clone());
+            const cache = await openFragmentCache(manifest.id, options);
+            // a sign-out may have cleared while the bucket opened: nothing of the old session is written back
+            if (!current())
+                return;
+            if (!cache)
+                continue;
+            if (mayKeep(response))
+                await cache.put(documentUrl, response.clone());
+            else
+                await cache.delete(documentUrl);
         }
     }
     async function composeFromCache(request) {
@@ -88,11 +112,14 @@ export function braidNavigationHandler(options) {
             return null;
         const registry = new Registry([...manifests]);
         const matches = await registry.matchPierceRoutes(url.pathname);
+        // Nothing to compose: a shell kept for this route by an older build is not served alone.
+        if (matches.length === 0)
+            return null;
         const fragments = [];
         for (const manifest of matches) {
-            const cache = await cacheStorage.open(`${cachePrefix}:${manifest.id}`);
+            const cache = await openFragmentCache(manifest.id, options);
             const documentUrl = `${url.origin}${BRAID_DOCUMENT_PREFIX}${encodeURIComponent(manifest.id)}${documentPath(manifest, url)}`;
-            const cached = await cache.match(documentUrl);
+            const cached = await cache?.match(documentUrl);
             // A fragment with nothing cached pierces nothing and is marked, exactly as a failed fetch is
             // server-side: the slot degrades to a placeholder rather than the page failing.
             fragments.push({
@@ -140,6 +167,34 @@ export function braidNavigationHandler(options) {
         }
     }
 }
+/**
+ * Whether a response may be kept for an offline compose: anything but `no-store`.
+ *
+ * `private` is no reason to refuse. It keeps a response out of *shared* caches, and this cache is the
+ * browser's own — and the gateway adds `private` to every pierced page by default, so refusing it
+ * would turn offline composition off. What a private page needs is to leave with its person, which
+ * is `clearBraidCaches` at sign-out.
+ */
+function mayKeep(response) {
+    const directives = (response.headers.get('cache-control') ?? '').toLowerCase().split(',').map((part) => part.trim());
+    return !directives.includes('no-store');
+}
+/**
+ * Deletes every page and fragment document kept for offline composition, and the fragments' cached
+ * assets with them. Call it at sign-out: what was composed for one person must not be composed for
+ * the next. A page can ask its worker to do it with `postMessage({ type: 'braid-sw:clear' })`.
+ */
+export async function clearBraidCaches(options = {}) {
+    // Before anything else, so a refresh already running does not write after this clear.
+    generation += 1;
+    const cacheStorage = options.caches ?? globalThis.caches;
+    if (!cacheStorage)
+        return;
+    const prefix = `${options.cachePrefix ?? DEFAULT_CACHE_PREFIX}:`;
+    const names = await cacheStorage.keys();
+    await Promise.all(names.filter((name) => name === SHELL_CACHE || name.startsWith(prefix)).map((name) => cacheStorage.delete(name)));
+    await deleteFragmentBuckets(null, options, { always: true });
+}
 /** Unbound fragments are fetched at their own path, bound ones at the page's — as on the server. */
 function documentPath(manifest, url) {
     return manifest.bound === false && manifest.src ? manifest.src : `${url.pathname}${url.search}`;

package/src/lib/compose.js.map

@@ -1 +1 @@
-{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../../../libs/braid-sw/src/lib/compose.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,QAAQ,EACR,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAuC5B,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAC1C,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAkC;IAElC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,IAAK,UAAwC,CAAC,MAAM,CAAC;IACxF,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAEvD,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE;QAClC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,KAAK,UAAU,MAAM,CAAC,OAAgB,EAAE,eAA+C;QACrF,IAAI,CAAC;YACH,wFAAwF;YACxF,MAAM,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1E,4FAA4F;YAC5F,kDAAkD;YAClD,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,OAAO,CAAC,OAAgB;QACrC,IAAI,CAAC,YAAY;YAAE,OAAO;QAE1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACvG,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,qBAAqB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,YAAY,CACxG,QAAQ,EACR,GAAG,CACJ,EAAE,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,SAAS;YAE3B,0FAA0F;YAC1F,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACvE,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,OAAgB;QAC9C,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,IAAI;YAAE,OAAO,IAAI,CAAC;QAE9B,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,GAAG,WAAW,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,qBAAqB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,YAAY,CACxG,QAAQ,EACR,GAAG,CACJ,EAAE,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAE9C,6FAA6F;YAC7F,gFAAgF;YAChF,SAAS,CAAC,IAAI,CAAC;gBACb,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI;gBAC7B,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;gBAC1D,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;aAC7D,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAErG,OAAO,IAAI,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;YACrE,OAAO,EAAE;gBACP,cAAc,EAAE,0BAA0B;gBAC1C,4FAA4F;gBAC5F,yCAAyC;gBACzC,kBAAkB,EAAE,SAAS;aAC9B;SACF,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,KAAK,UAAU,YAAY,CAAC,MAAc;QACxC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEtD,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,KAAK,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC3B,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACpC,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4D,CAAC;YACpG,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,SAAS,YAAY,CAAC,QAA0B,EAAE,GAAQ;IACxD,OAAO,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;AAClG,CAAC;AAED,mGAAmG;AACnG,SAAS,QAAQ,CAAC,GAAQ;IACxB,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7C,6FAA6F;IAC7F,gCAAgC;IAChC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;AACvE,CAAC"}
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../../../libs/braid-sw/src/lib/compose.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,QAAQ,EACR,eAAe,GAGhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,iBAAiB,EAA6B,MAAM,sBAAsB,CAAC;AA0CjI;;;GAGG;AACH,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAkC;IAElC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,IAAK,UAAwC,CAAC,MAAM,CAAC;IACxF,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAEvD,OAAO,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE;QAClC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,KAAK,UAAU,MAAM,CAAC,OAAgB,EAAE,eAA+C;QACrF,IAAI,CAAC;YACH,wFAAwF;YACxF,MAAM,QAAQ,GAAG,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1E,4FAA4F;YAC5F,kDAAkD;YAClD,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACjD,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,OAAO,CAAC,OAAgB;QACrC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,MAAM,SAAS,GAAG,UAAU,CAAC;QAC7B,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;QAE/C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,yFAAyF;QACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACvG,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO;QACvB,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACnF,uFAAuF;aAClF,IAAI,KAAK,CAAC,EAAE;YAAE,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAE1D,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,qBAAqB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,YAAY,CACxG,QAAQ,EACR,GAAG,CACJ,EAAE,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;YACjD,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO;YACvB,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,SAAS;YAE3B,0FAA0F;YAC1F,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5D,kGAAkG;YAClG,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO;YACvB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,IAAI,OAAO,CAAC,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;;gBACjE,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,KAAK,UAAU,gBAAgB,CAAC,OAAgB;QAC9C,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,KAAK,EAAE,IAAI;YAAE,OAAO,IAAI,CAAC;QAE9B,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/D,yFAAyF;QACzF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtC,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,MAAM,GAAG,qBAAqB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,YAAY,CACxG,QAAQ,EACR,GAAG,CACJ,EAAE,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAE/C,6FAA6F;YAC7F,gFAAgF;YAChF,SAAS,CAAC,IAAI,CAAC;gBACb,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,OAAO,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI;gBAC7B,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;gBAC1D,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC;aAC7D,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAErG,OAAO,IAAI,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE;YACrE,OAAO,EAAE;gBACP,cAAc,EAAE,0BAA0B;gBAC1C,4FAA4F;gBAC5F,yCAAyC;gBACzC,kBAAkB,EAAE,SAAS;aAC9B;SACF,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAC1E,KAAK,UAAU,YAAY,CAAC,MAAc;QACxC,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEtD,IAAI,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,CAAC,KAAK,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC3B,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;gBACpC,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4D,CAAC;YACpG,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,OAAO,CAAC,QAAkB;IACjC,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACrH,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,UAAgC,EAAE;IACvE,sFAAsF;IACtF,UAAU,IAAI,CAAC,CAAC;IAChB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,IAAK,UAAwC,CAAC,MAAM,CAAC;IACxF,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,MAAM,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,GAAG,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CACjH,CAAC;IACF,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,oGAAoG;AACpG,SAAS,YAAY,CAAC,QAA0B,EAAE,GAAQ;IACxD,OAAO,QAAQ,CAAC,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;AAClG,CAAC;AAED,mGAAmG;AACnG,SAAS,QAAQ,CAAC,GAAQ;IACxB,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB;IACpC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC7C,6FAA6F;IAC7F,gCAAgC;IAChC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC;AACvE,CAAC"}

package/src/lib/fragment-caches.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Where a fragment's cached files live: one Cache Storage cache per fragment (`braid-frag:<id>`),
+ * or, with `buckets: true` where the browser has Storage Buckets (Chromium), that same cache inside
+ * a bucket of the fragment's own.
+ *
+ * A bucket is the browser's unit of eviction, quota and deletion. In one shared Cache Storage, a
+ * device short on space can evict every fragment's files at once, and the deploy-skew save — the
+ * chunk an old page still asks for after a deploy — goes with them. Per-fragment buckets are evicted
+ * one fragment at a time, and pruning a fragment that left the registry deletes its bucket outright.
+ *
+ * Opt-in: turning it on moves where files are kept, so a worker that switches starts with empty
+ * fragment caches once (pruning removes the old ones).
+ */
+/** The per-fragment cache prefix, unless a worker names its own. */
+export declare const DEFAULT_CACHE_PREFIX = "braid-frag";
+export interface FragmentCacheOptions {
+    /** Prefix for the per-fragment caches. Defaults to `braid-frag`. */
+    cachePrefix?: string;
+    /** Cache storage to use (tests, or a worker that wraps it). Defaults to the global. */
+    caches?: CacheStorage;
+    /** Keep each fragment's cache in a Storage Bucket of its own where the browser has them. */
+    buckets?: boolean;
+    /** The bucket manager to use (tests). Defaults to `navigator.storageBuckets`. */
+    storageBuckets?: StorageBucketsLike;
+}
+export interface StorageBucketsLike {
+    open(name: string): Promise<{
+        caches: CacheStorage;
+    }>;
+    keys(): Promise<string[]>;
+    delete(name: string): Promise<void>;
+}
+/** The cache a fragment's files are kept in, or undefined where there is no cache storage. */
+export declare function openFragmentCache(fragmentId: string, options?: FragmentCacheOptions): Promise<Cache | undefined>;
+/**
+ * Deletes the fragment buckets this worker's prefix made, except those for `keep` (all of them when
+ * null). Only names in this worker's exact format: buckets are the whole origin's, and a looser match
+ * would take the realm's database buckets (`braid-db-…`), another worker's, or the app's own.
+ *
+ * `always` deletes even when `buckets` is off, where the API exists: sign-out must not leave a
+ * previous configuration's buckets, which may hold a previous user's offline documents.
+ */
+export declare function deleteFragmentBuckets(keep: readonly string[] | null, options?: FragmentCacheOptions, { always }?: {
+    always?: boolean;
+}): Promise<string[]>;
+/** Whether this worker keeps fragment caches in buckets: asked for, and available. */
+export declare function usesBuckets(options: FragmentCacheOptions): boolean;
+/** The fragments among `keep` whose bucket exists, so their shared caches are superseded. */
+export declare function keptWithBuckets(keep: readonly string[], options: FragmentCacheOptions): Promise<string[]>;
+/**
+ * A fragment's bucket name: lowercase letters, digits, `-` and `_`, at most 64 characters, as the
+ * API requires. The readable part may collide once folded; the hash of the exact id keeps two
+ * fragments apart.
+ */
+export declare function bucketFor(fragmentId: string, options?: FragmentCacheOptions): string;