@camada/remix 0.1.3 → 0.2.0

package/README.md

@@ -25,7 +25,7 @@ import { type RouteConfig, index, route } from '@react-router/dev/routes';
 
 export default [
   index('routes/home.tsx'),
-  route('/_cam/*', 'routes/cam.tsx'),   // the beacon endpoints only run where a route exists
+  route('/_cam/*', 'routes/cam.tsx'),   // camada's own endpoints (beacon + challenge) only run where a route exists
 ] satisfies RouteConfig;
 ```
 
@@ -33,7 +33,9 @@ export default [
 // app/routes/cam.tsx
 import { camadaRoute } from '@camada/remix';
 
-export const { loader, action } = camadaRoute();
+const r = camadaRoute();
+export const loader = r.loader;   // plain consts: `export const { loader, action } = ...` fails
+export const action = r.action;   // `react-router build` ("Cannot remove destructured export")
 ```
 
 Env (printed by camada onboarding / `npm run seed` in dev):
@@ -79,9 +81,15 @@ fill one event queue. Two mounts with different keys or URLs each get their own.
    before `next()`; the event still ships, with `st: 403` and `blk: <reason>` so the analyst
    counts SDK blocks apart from your own 403s.
 5. **Skip** → a skip rule or the allow list wins over a wider block.
-6. **Challenge** → a `403` proof-of-work page for HTML navigations, `403
-   {"error":"challenge_required"}` for anything else; `POST /__camada/challenge` verifies the
-   work, sets `_cch` and 302s back.
+6. **Challenge** → a `403` proof-of-work page for HTML navigations; API and
+   `fetch()` calls pass to your app with `x-camada-challenge: 1` on the response (and `chs: 1` on the
+   event) so your frontend can choose to challenge; `POST /_cam/challenge` verifies
+   the work, sets `_cch` and 302s back. A client-side navigation (React Router fetching
+   `<path>.data` for a `<Link>`) is answered in React Router's own redirect form instead
+   (`204` + `X-Remix-Redirect` to the same page + `X-Remix-Reload-Document`), so the browser
+   reloads the page as a document and meets the challenge, rather than your error boundary
+   rendering a 403. A challenged submission (`fetcher.submit`, `<Form action>`, any non-GET
+   `.data`) reloads the same-origin page it came from (its `Referer`), else the data path.
 7. Otherwise `next()` runs your loaders and actions, and the settled response ships one
    batched, redacted event with its real status (Authorization and Cookie values never leave
    the process; credential-looking query values are scrubbed — see `@camada/core`). A first
@@ -98,22 +106,42 @@ this tap vouches for no address. A custom server knows the socket and can say so
 // server.ts (Express)
 import { createRequestHandler } from '@react-router/express';
 import { RouterContextProvider } from 'react-router';
-import { camadaPeerContext } from '@camada/remix';
+import { camadaPeerContext, camadaResponseContext } from '@camada/remix';
 
 app.all('*', createRequestHandler({
   build,
-  getLoadContext(req) {
+  getLoadContext(req, res) {
     const context = new RouterContextProvider();
     context.set(camadaPeerContext, req.socket.remoteAddress ?? null);   // the address Node vouches for, never a header
+    context.set(camadaResponseContext, res);   // lets camada's answers replace headers set before the handler (below)
     return context;
   },
 }));
 ```
 
+`@react-router/express` copies a Response's headers onto `res` with `res.append`, so a header an
+Express middleware set before the handler goes out next to camada's own. With
+[helmet](https://helmetjs.github.io/) in front, the challenge page would carry two
+`Content-Security-Policy` headers: browsers enforce both, and helmet's blocks the page's inline
+solver, so a challenged visitor can never pass. Handing camada `res` through
+`camadaResponseContext` (as above) fixes that: before it answers a request itself (block,
+challenge, verify, beacon script), camada removes from `res` every header its answer sets, plus a
+report-only policy under the challenge page's own. Set-Cookie headers are left alone. Without it,
+mount helmet after the React Router handler, or set your policy from React Router's
+`entry.server` / route `headers` instead of Express.
+
 Behind a load balancer, set `CAMADA_TRUSTED_PROXY=hops:1` (or `cidrs:…`) — or the
 `trustedProxy` option — and `X-Forwarded-For` is read one hop behind that peer. Never put a
 header value in `camadaPeerContext`: that is the one address camada takes on faith.
 
+Without a vouched peer (no `camadaPeerContext`, e.g. on a serverless host), this adapter keeps
+the plain `X-Forwarded-For` walk under your trusted-proxy config. With a peer, a `cidrs`
+config is walked only when the peer itself is a trusted proxy or loopback. Without one there is
+nothing to check, so the walk trusts that every request came through your edge (the platform,
+load balancer or CDN in front of the app). That holds when the edge is the only way in. If the
+origin is reachable directly, a client can send its own `X-Forwarded-For`, so lock the origin to
+the edge.
+
 ## Options
 
 | option | default | meaning |
@@ -123,11 +151,12 @@ header value in `camadaPeerContext`: that is the one address camada takes on fai
 | `snapshotUrl` | `<ingestUrl>/snapshot` | snapshot endpoint |
 | `trustedProxy` | server config | `none` / `vercel` / `hops:N` / `cidrs:a,b`, or the parsed object |
 | `challenge` | `true` | serve the proof-of-work page for `challenge` verdicts |
-| `challengePath` | `/__camada/challenge` | where that page posts its solution |
+| `challengePath` | `/_cam/challenge` (next to `scriptPath`; under `basename` if set) | where that page posts its solution; keep it under the route that calls `camadaRoute()` |
 | `snapshotVersion` | `5` | `4` drops the custom rules, `3` the allow/challenge sides too |
-| `scriptPath` | `/_cam/b.js` | where the first-party beacon script is served |
-| `fpPath` | `/_cam/fp` | where that script posts the beacon; keep it in `scriptPath`'s directory |
+| `scriptPath` | `/_cam/b.js` (`<basename>/_cam/b.js` if `basename` is set) | where the first-party beacon script is served |
+| `fpPath` | `fp` in `scriptPath`'s directory: `/_cam/fp`, `<basename>/_cam/fp` if `basename` is set, `/app/x/fp` for `scriptPath: '/app/x/b.js'` | where that script posts the beacon; the script derives it from its own `src`, so keep it in `scriptPath`'s directory |
 | `mode` | `lazy` (or `timer`) | `timer` polls the snapshot on an unref'd interval (long-lived process); `lazy` refreshes it per request off-path. `CAMADA_SERVERLESS=1` forces `lazy` |
+| `basename` | none | your React Router `basename` (react-router.config.ts). Set it when the app has one (on `camada()` and `camadaRoute()` alike): the default `scriptPath`, `fpPath` and `challengePath` then live under it (`/app/_cam/b.js`, `/app/_cam/fp`, `/app/_cam/challenge`), and the client's redirect for a challenged navigation no longer lands on `/app/app/page`. An explicit path is used as given |
 | `env` | `process.env` | overrides the process env (tests, and apps that read config themselves) |
 
 `CAMADA_CHALLENGE=0` in the env switches the challenge off without a code change.
@@ -173,12 +202,37 @@ never the one the body claims. Both endpoints sit behind the verdict: a blocked
 there too. The tag is `''` when camada is off for the request or the project turned the beacon
 off in its settings, and the endpoints stand down with it.
 
-React Router runs middleware only for matched routes, so `/_cam/*` needs a route to exist:
-that is what `route('/_cam/*', 'routes/cam.tsx')` and `camadaRoute()` are for. With the root
-middleware mounted it answers first and the route's loader and action are the fallback (a
-middleware mounted lower, or none at all); they re-run the verdict, so a blocked client is
-403'd there as well. A custom `scriptPath` / `fpPath` must share a directory (the script derives
-the post path from its own `src`) and the route must cover it.
+## The routes camada needs
+
+React Router runs middleware only for a URL some route matches. An unmatched URL gets the
+router's 404 before any middleware runs, so camada never sees it. Its own endpoints therefore
+need a route, and `route('/_cam/*', 'routes/cam.tsx')` with `camadaRoute()` is that route. It
+covers three endpoints:
+
+| endpoint | what it is |
+|---|---|
+| `GET /_cam/b.js` | the beacon script |
+| `POST /_cam/fp` | the beacon relay |
+| `POST /_cam/challenge` | the challenge page's form: verifies the work and sets `_cch` |
+
+With a React Router `basename` (say `/app`) the URLs carry it: `/app/_cam/b.js`, `/app/_cam/fp`,
+`/app/_cam/challenge`. Pass `basename: '/app'` to both `camada()` and `camadaRoute()` and those
+are the defaults; the route itself stays `route('/_cam/*', ...)` in `routes.ts`, because the
+router matches routes after stripping the basename. Without the option the defaults sit outside
+the basename, the router 404s the challenge form, and no challenged visitor can pass.
+
+With the root middleware mounted it answers first, and the route's loader and action are the
+fallback (a middleware mounted lower, or none at all). They re-run the verdict, so a blocked
+client gets a 403 there as well. A custom `scriptPath` / `fpPath` must share a directory (the
+script derives the post path from its own `src`), `fpPath` and the challenge path default to that same
+directory (`/api/cam/b.js` → `/api/cam/fp`, `/api/cam/challenge`), and the route must cover it. An explicit
+`challengePath` outside that route 404s in the router, and no challenged visitor can pass.
+
+What is **not** captured: requests to URLs no route matches (scanner probes such as
+`/wp-admin/setup.php` or `/.env`). They never reach the middleware, so they ship no event and a
+path block on them is not counted. Your app's 404 still answers them. To capture them as well,
+add a splat route (`route('*', 'routes/not-found.tsx')`) whose loader throws your 404: the
+middleware then runs for every URL.
 
 ## App-context events
 

package/dist/index.cjs

@@ -32,6 +32,7 @@ var index_exports = {};
 __export(index_exports, {
   camada: () => camada,
   camadaPeerContext: () => camadaPeerContext,
+  camadaResponseContext: () => camadaResponseContext,
   camadaRoute: () => camadaRoute,
   resetCamada: () => resetCamada,
   scriptTag: () => scriptTag,
@@ -50,13 +51,14 @@ var import_core = require("@camada/core");
 var import_fetch = require("@camada/core/fetch");
 var camadaContext = (0, import_react_router.createContext)(null);
 var camadaPeerContext = (0, import_react_router.createContext)(null);
+var camadaResponseContext = (0, import_react_router.createContext)(null);
 var readSlot = (context) => (0, import_core.guarded)(() => context.get(camadaContext) ?? void 0, void 0);
 var track = (context, event, data) => (0, import_fetch.track)(readSlot(context), event, data);
 var scriptTag = (context) => (0, import_fetch.scriptTag)(readSlot(context));
 
 // package.json
 var name = "@camada/remix";
-var version = "0.1.3";
+var version = "0.2.0";
 
 // src/version.ts
 var SDK_ID = `${name}/${version}`;
@@ -65,7 +67,18 @@ var SDK_ID = `${name}/${version}`;
 var instances = /* @__PURE__ */ new Set();
 var byKey = /* @__PURE__ */ new Map();
 var sortedJson = (v) => JSON.stringify(v, (_, x) => x && typeof x === "object" && !Array.isArray(x) ? Object.fromEntries(Object.entries(x).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)) : x);
-function instanceFor(opts = {}) {
+var inScriptDir = (scriptPath, name2) => (scriptPath ?? "/_cam/b.js").replace(/[^/]*$/, name2);
+function instanceFor(given = {}) {
+  const { basename, ...core } = given;
+  const base = (basename ?? "").replace(/\/+$/, "");
+  const scriptPath = core.scriptPath ?? (base ? `${base}/_cam/b.js` : void 0);
+  const fpPath = core.fpPath ?? inScriptDir(scriptPath, "fp");
+  const opts = {
+    ...core,
+    ...scriptPath ? { scriptPath } : {},
+    fpPath,
+    challengePath: core.challengePath ?? inScriptDir(scriptPath, "challenge")
+  };
   const { fetchImpl, ...serialisable } = opts;
   const key = sortedJson(serialisable);
   let bucket = byKey.get(fetchImpl);
@@ -87,12 +100,69 @@ function requestContext(context) {
     env: globalThis.process?.env
   };
 }
+function underBasename(path, basename) {
+  const base = (basename ?? "").replace(/\/+$/, "");
+  if (!base) return path;
+  if (path === base) return "/";
+  return path.startsWith(base + "/") ? path.slice(base.length) : null;
+}
+var isDataPath = (pathname) => pathname.endsWith(".data");
+var isDataRequest = (req) => isDataPath(new URL(req.url).pathname);
+function forNavigation(req, res, basename) {
+  return (0, import_core2.guarded)(() => {
+    if (res.status !== 403 || res.headers.get("x-camada-challenge") !== "1") return res;
+    const url = new URL(req.url);
+    if (!isDataPath(url.pathname)) return res;
+    url.pathname = url.pathname.endsWith("/_.data") ? url.pathname.slice(0, -"_.data".length) : url.pathname.endsWith("/_root.data") ? url.pathname.slice(0, -"_root.data".length) : url.pathname.slice(0, -".data".length);
+    url.searchParams.delete("_routes");
+    let to = underBasename(url.pathname, basename) ?? "/";
+    to = (0, import_core2.safeReturnTo)(to + url.search);
+    if (req.method !== "GET" && req.method !== "HEAD") to = fromReferer(req, url.origin, basename) ?? to;
+    void res.body?.cancel().catch(() => {
+    });
+    return new Response(null, {
+      status: 204,
+      headers: {
+        "X-Remix-Redirect": to,
+        "X-Remix-Status": "302",
+        "X-Remix-Reload-Document": "true",
+        "cache-control": "no-store",
+        "x-camada-challenge": "1"
+      }
+    });
+  }, res);
+}
+function answered(req, context, res, basename) {
+  const out = forNavigation(req, res, basename);
+  (0, import_core2.guarded)(() => {
+    const node = context.get(camadaResponseContext);
+    if (!node || typeof node.removeHeader !== "function") return;
+    for (const k of out.headers.keys()) if (k !== "set-cookie") node.removeHeader(k);
+    if (out.headers.has("content-security-policy")) node.removeHeader("content-security-policy-report-only");
+  }, void 0);
+  return out;
+}
+function fromReferer(req, origin, basename) {
+  const raw = req.headers.get("referer");
+  if (!raw) return null;
+  let ref;
+  try {
+    ref = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (ref.origin !== origin) return null;
+  const path = underBasename(ref.pathname, basename);
+  if (path === null) return null;
+  const to = path + ref.search;
+  return (0, import_core2.safeReturnTo)(to) === to ? to : null;
+}
 function camada(opts = {}) {
   const cam = instanceFor(opts);
   return async ({ request, context }, next) => {
-    const r = await cam.before(request, requestContext(context));
+    const r = await cam.before(request, { ...requestContext(context), navigation: isDataRequest(request) });
     if (!r) return next();
-    if (r.response) return r.response;
+    if (r.response) return answered(request, context, r.response, opts.basename);
     (0, import_core2.guarded)(() => context.set(camadaContext, r.vars), void 0);
     let res;
     try {
@@ -114,7 +184,7 @@ function camadaRoute(opts = {}) {
   const cam = instanceFor(opts);
   const answer = async ({ request, context }) => {
     const r = await cam.before(request, requestContext(context));
-    return r?.response ?? new Response(null, { status: 404 });
+    return r?.response ? answered(request, context, r.response, opts.basename) : new Response(null, { status: 404 });
   };
   return { loader: answer, action: answer };
 }
@@ -122,6 +192,7 @@ function camadaRoute(opts = {}) {
 0 && (module.exports = {
   camada,
   camadaPeerContext,
+  camadaResponseContext,
   camadaRoute,
   resetCamada,
   scriptTag,

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/camada.ts","../src/context.ts","../package.json","../src/version.ts","../src/route.ts"],"sourcesContent":["// @camada/remix — the install for a React Router framework-mode (Remix) app:\n//   export const middleware = [camada()];              // app/root.tsx; env: CAMADA_KEY (+ CAMADA_INGEST_URL in dev)\n//   route('/_cam/*', 'routes/cam.tsx')                 // routes.ts; the file re-exports camadaRoute()\n//   scriptTag(context)                                 // in a loader: the first-party beacon tag\n//   track(context, 'login_failed', { user })           // in an action: an outcome the wire cannot show\nexport { camada, resetCamada, type CamadaRemixOptions, type CamadaRemixVars } from './camada.js';\nexport { camadaRoute } from './route.js';\nexport { track, scriptTag, camadaPeerContext } from './context.js';\n","// @camada/remix — the root server middleware for React Router framework mode (SDK-G04):\n//   export const middleware = [camada()];   // app/root.tsx\n// A thin binding over @camada/core/fetch: the peer is whatever a custom server put in\n// `camadaPeerContext` (React Router itself vouches for no socket), the env is process.env, and\n// there is no waitUntil — the host is a long-lived Node server or an edge runtime that keeps\n// its own isolate open. A camada bug, a dead ingest or a corrupt snapshot costs telemetry,\n// never the app's response.\nimport iife from '@camada/browser/iife-string';\nimport { guarded, TAP_REMIX } from '@camada/core';\nimport { createFetchCamada, withSetCookie, withRid, type FetchCamada, type FetchCamadaOptions, type FetchRequestContext, type FetchVars } from '@camada/core/fetch';\nimport type { MiddlewareFunction } from 'react-router';\nimport { camadaContext, camadaPeerContext, type RouterContext } from './context.js';\nimport { SDK_ID } from './version.js';\n\nexport type CamadaRemixOptions = FetchCamadaOptions;\nexport type CamadaRemixVars = FetchVars;\n\n// camada() and camadaRoute() must see one engine for the same options, or the route would poll\n// and enforce a second copy of the tenant's snapshot: an instance is found by its serialisable\n// options (keys sorted, so two modules spelling them in a different order agree); fetchImpl\n// cannot be stringified, so it keys a bucket by identity.\nconst instances = new Set<FetchCamada>();\nconst byKey = new Map<typeof fetch | undefined, Map<string, FetchCamada>>();\n\n// Sorts the keys of every object on the way in, so key order never splits one configuration in two.\nconst sortedJson = (v: unknown): string =>\n  JSON.stringify(v, (_, x: unknown) => (x && typeof x === 'object' && !Array.isArray(x) ? Object.fromEntries(Object.entries(x).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) : x));\n\nexport function instanceFor(opts: CamadaRemixOptions = {}): FetchCamada {\n  const { fetchImpl, ...serialisable } = opts;\n  const key = sortedJson(serialisable);\n  let bucket = byKey.get(fetchImpl);\n  if (!bucket) byKey.set(fetchImpl, (bucket = new Map()));\n  let cam = bucket.get(key);\n  if (!cam) {\n    cam = createFetchCamada({ tap: TAP_REMIX, sdk: SDK_ID, iife }, opts);\n    bucket.set(key, cam);\n    instances.add(cam);\n  }\n  return cam;\n}\n\n/** Test/reset hook: stops and drops every engine this module created; the instances stay wired and rebuild lazily. */\nexport function resetCamada(): void {\n  for (const cam of instances) cam.reset();\n}\n\n/** What the host can vouch for: the peer a custom server set, and the process env. The peer read\n *  is guarded — a 7.9 app without the middleware flag hands a plain object; an edge runtime has no process. */\nexport function requestContext(context: RouterContext): FetchRequestContext {\n  return {\n    peer: guarded(() => context.get(camadaPeerContext), null),\n    env: globalThis.process?.env,\n  };\n}\n\nexport function camada(opts: CamadaRemixOptions = {}): MiddlewareFunction<Response> {\n  const cam = instanceFor(opts);\n  return async ({ request, context }, next) => {\n    const r = await cam.before(request, requestContext(context));\n    if (!r) return next();\n    if (r.response) return r.response;   // block, challenge, verify, beacon: answered without the app\n    guarded(() => context.set(camadaContext, r.vars), undefined);\n    let res: Response;\n    try {\n      res = await next();\n    } catch (err) {\n      // A thrown Response (a redirect from a downstream middleware) is the answer, so it carries\n      // the status and the cookie; anything else lands in the router's error boundary as a 500.\n      if (err instanceof Response) {\n        cam.after(request, r.vars, err.status);\n        throw withRid(r.vars.sessionCookie ? withSetCookie(err, r.vars.sessionCookie) : err, r.vars);\n      }\n      cam.after(request, r.vars, 500);\n      throw err;\n    }\n    return cam.finish(request, r.vars, r.vars.sessionCookie ? withSetCookie(res, r.vars.sessionCookie) : res);   // an SSE body ships once it has gone out; anything else now\n  };\n}\n","// Per-request state the middleware leaves on React Router's context for the two helpers an app\n// calls from its own loaders and actions: `scriptTag(context)` (the beacon tag) and\n// `track(context, event, data)` (an app-context outcome). When the middleware did not run for\n// this request (no key, CAMADA_DISABLED, or a request it answered itself) the slot is empty and\n// both helpers stand down.\nimport { createContext, type RouterContextProvider } from 'react-router';\nimport { guarded } from '@camada/core';\nimport { track as coreTrack, scriptTag as coreScriptTag, type FetchVars } from '@camada/core/fetch';\n\n// Defaults are null, not undefined: React Router's `get()` throws on a context that has neither\n// a value nor a default, and the helpers must stand down silently where the middleware did not run.\n/** The vars the middleware kept for this request; null where it did not run. Private to the package: track() and scriptTag() are the API. */\nexport const camadaContext = createContext<FetchVars | null>(null);\n\n/** The socket address a custom server vouches for (set from `getLoadContext`); null = nothing vouched. */\nexport const camadaPeerContext = createContext<string | null>(null);\n\n/** Loaders, actions and middleware all receive the same read-only provider. */\nexport type RouterContext = Readonly<RouterContextProvider>;\n\nconst readSlot = (context: RouterContext): FetchVars | undefined => guarded(() => context.get(camadaContext) ?? undefined, undefined);\n\n/**\n * Records an outcome the app knows and the wire cannot show: `login_failed`, `login_succeeded`,\n * `signup`, `password_reset`, `mfa_failed`, `payment_failed`, `payment_succeeded`, `coupon_failed`\n * (free-form; that vocabulary is what the analyst's rules read). Joined to this request's event\n * through its rid and session; the user identifier is HMAC-hashed in-process. Never throws,\n * never rejects, and is a no-op where the middleware did not run.\n */\nexport const track = (context: RouterContext, event: string, data?: { user?: string }): Promise<void> => coreTrack(readSlot(context), event, data);\n\n/** The `<script>` tag for an HTML response — `''` when camada is off for this request or the tenant turned the beacon off. */\nexport const scriptTag = (context: RouterContext): string => coreScriptTag(readSlot(context));\n","{\n  \"name\": \"@camada/remix\",\n  \"version\": \"0.1.3\",\n  \"license\": \"MIT\",\n  \"type\": \"module\",\n  \"engines\": {\n    \"node\": \">=20\"\n  },\n  \"files\": [\n    \"dist\",\n    \"README.md\",\n    \"LICENSE\"\n  ],\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"check\": \"tsc --noEmit\"\n  },\n  \"description\": \"camada SDK for React Router framework mode (Remix): snapshot enforcement in a root middleware, first-party challenge and beacon route, track() outcomes\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\",\n      \"require\": \"./dist/index.cjs\"\n    }\n  },\n  \"main\": \"./dist/index.cjs\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"dependencies\": {\n    \"@camada/core\": \"file:../camada-core\",\n    \"@camada/browser\": \"file:../camada-browser\"\n  },\n  \"peerDependencies\": {\n    \"react-router\": \">=7.9\"\n  },\n  \"devDependencies\": {\n    \"@types/node\": \"^22.10.0\",\n    \"react-router\": \"^8.3.1\",\n    \"tsup\": \"^8.3.5\",\n    \"typescript\": \"^5.7.2\",\n    \"vitest\": \"^3.0.0\"\n  }\n}\n","// The SDK's wire identity (SDK-03): x-camada-sdk: <package>/<version>. Named JSON imports are\n// inlined and tree-shaken by tsup at build, so dist carries two literals — no runtime fs read.\nimport { name, version } from '../package.json';\nexport const SDK_ID = `${name}/${version}`;\n","// The resource route for the beacon endpoints (routes.ts: route('/_cam/*', 'routes/cam.tsx')).\n// React Router runs middleware only for a matched route, so without a route under /_cam/* the\n// root middleware never sees the script or the relay and the router 404s them — the same reason\n// @camada/next has camadaRoute(). before() re-runs the verdict, so a blocked client gets its\n// 403 here too, and with the root middleware mounted it answers first and this never runs.\nimport type { ActionFunctionArgs, LoaderFunctionArgs } from 'react-router';\nimport { instanceFor, requestContext, type CamadaRemixOptions } from './camada.js';\n\ntype Handler<A> = (args: A) => Promise<Response>;\n\nexport function camadaRoute(opts: CamadaRemixOptions = {}): { loader: Handler<LoaderFunctionArgs>; action: Handler<ActionFunctionArgs> } {\n  const cam = instanceFor(opts);\n  const answer: Handler<LoaderFunctionArgs | ActionFunctionArgs> = async ({ request, context }) => {\n    const r = await cam.before(request, requestContext(context));\n    return r?.response ?? new Response(null, { status: 404 });   // not a beacon path, or camada inert: nothing to serve\n  };\n  return { loader: answer, action: answer };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACOA,yBAAiB;AACjB,IAAAA,eAAmC;AACnC,IAAAC,gBAA+I;;;ACJ/I,0BAA0D;AAC1D,kBAAwB;AACxB,mBAA+E;AAKxE,IAAM,oBAAgB,mCAAgC,IAAI;AAG1D,IAAM,wBAAoB,mCAA6B,IAAI;AAKlE,IAAM,WAAW,CAAC,gBAAkD,qBAAQ,MAAM,QAAQ,IAAI,aAAa,KAAK,QAAW,MAAS;AAS7H,IAAM,QAAQ,CAAC,SAAwB,OAAe,aAA4C,aAAAC,OAAU,SAAS,OAAO,GAAG,OAAO,IAAI;AAG1I,IAAM,YAAY,CAAC,gBAAmC,aAAAC,WAAc,SAAS,OAAO,CAAC;;;AC/B1F,WAAQ;AACR,cAAW;;;ACCN,IAAM,SAAS,GAAG,IAAI,IAAI,OAAO;;;AHkBxC,IAAM,YAAY,oBAAI,IAAiB;AACvC,IAAM,QAAQ,oBAAI,IAAwD;AAG1E,IAAM,aAAa,CAAC,MAClB,KAAK,UAAU,GAAG,CAAC,GAAG,MAAgB,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC,IAAI,OAAO,YAAY,OAAO,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE,CAAC,IAAI,CAAE;AAE9K,SAAS,YAAY,OAA2B,CAAC,GAAgB;AACtE,QAAM,EAAE,WAAW,GAAG,aAAa,IAAI;AACvC,QAAM,MAAM,WAAW,YAAY;AACnC,MAAI,SAAS,MAAM,IAAI,SAAS;AAChC,MAAI,CAAC,OAAQ,OAAM,IAAI,WAAY,SAAS,oBAAI,IAAI,CAAE;AACtD,MAAI,MAAM,OAAO,IAAI,GAAG;AACxB,MAAI,CAAC,KAAK;AACR,cAAM,iCAAkB,EAAE,KAAK,wBAAW,KAAK,QAAQ,yBAAAC,QAAK,GAAG,IAAI;AACnE,WAAO,IAAI,KAAK,GAAG;AACnB,cAAU,IAAI,GAAG;AAAA,EACnB;AACA,SAAO;AACT;AAGO,SAAS,cAAoB;AAClC,aAAW,OAAO,UAAW,KAAI,MAAM;AACzC;AAIO,SAAS,eAAe,SAA6C;AAC1E,SAAO;AAAA,IACL,UAAM,sBAAQ,MAAM,QAAQ,IAAI,iBAAiB,GAAG,IAAI;AAAA,IACxD,KAAK,WAAW,SAAS;AAAA,EAC3B;AACF;AAEO,SAAS,OAAO,OAA2B,CAAC,GAAiC;AAClF,QAAM,MAAM,YAAY,IAAI;AAC5B,SAAO,OAAO,EAAE,SAAS,QAAQ,GAAG,SAAS;AAC3C,UAAM,IAAI,MAAM,IAAI,OAAO,SAAS,eAAe,OAAO,CAAC;AAC3D,QAAI,CAAC,EAAG,QAAO,KAAK;AACpB,QAAI,EAAE,SAAU,QAAO,EAAE;AACzB,8BAAQ,MAAM,QAAQ,IAAI,eAAe,EAAE,IAAI,GAAG,MAAS;AAC3D,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,KAAK;AAAA,IACnB,SAAS,KAAK;AAGZ,UAAI,eAAe,UAAU;AAC3B,YAAI,MAAM,SAAS,EAAE,MAAM,IAAI,MAAM;AACrC,kBAAM,uBAAQ,EAAE,KAAK,oBAAgB,6BAAc,KAAK,EAAE,KAAK,aAAa,IAAI,KAAK,EAAE,IAAI;AAAA,MAC7F;AACA,UAAI,MAAM,SAAS,EAAE,MAAM,GAAG;AAC9B,YAAM;AAAA,IACR;AACA,WAAO,IAAI,OAAO,SAAS,EAAE,MAAM,EAAE,KAAK,oBAAgB,6BAAc,KAAK,EAAE,KAAK,aAAa,IAAI,GAAG;AAAA,EAC1G;AACF;;;AIpEO,SAAS,YAAY,OAA2B,CAAC,GAAiF;AACvI,QAAM,MAAM,YAAY,IAAI;AAC5B,QAAM,SAA2D,OAAO,EAAE,SAAS,QAAQ,MAAM;AAC/F,UAAM,IAAI,MAAM,IAAI,OAAO,SAAS,eAAe,OAAO,CAAC;AAC3D,WAAO,GAAG,YAAY,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1D;AACA,SAAO,EAAE,QAAQ,QAAQ,QAAQ,OAAO;AAC1C;","names":["import_core","import_fetch","coreTrack","coreScriptTag","iife"]}
+{"version":3,"sources":["../src/index.ts","../src/camada.ts","../src/context.ts","../package.json","../src/version.ts","../src/route.ts"],"sourcesContent":["// @camada/remix — the install for a React Router framework-mode (Remix) app:\n//   export const middleware = [camada()];              // app/root.tsx; env: CAMADA_KEY (+ CAMADA_INGEST_URL in dev)\n//   route('/_cam/*', 'routes/cam.tsx')                 // routes.ts; the file re-exports camadaRoute()\n//   scriptTag(context)                                 // in a loader: the first-party beacon tag\n//   track(context, 'login_failed', { user })           // in an action: an outcome the wire cannot show\nexport { camada, resetCamada, type CamadaRemixOptions, type CamadaRemixVars } from './camada.js';\nexport { camadaRoute } from './route.js';\nexport { track, scriptTag, camadaPeerContext, camadaResponseContext } from './context.js';\n","// @camada/remix — the root server middleware for React Router framework mode (SDK-G04):\n//   export const middleware = [camada()];   // app/root.tsx\n// A thin binding over @camada/core/fetch: the peer is whatever a custom server put in\n// `camadaPeerContext` (React Router itself vouches for no socket), the env is process.env, and\n// there is no waitUntil — the host is a long-lived Node server or an edge runtime that keeps\n// its own isolate open. A camada bug, a dead ingest or a corrupt snapshot costs telemetry,\n// never the app's response.\nimport iife from '@camada/browser/iife-string';\nimport { guarded, safeReturnTo, TAP_REMIX } from '@camada/core';\nimport { createFetchCamada, withSetCookie, withRid, type FetchCamada, type FetchCamadaOptions, type FetchRequestContext, type FetchVars } from '@camada/core/fetch';\nimport type { MiddlewareFunction } from 'react-router';\nimport { camadaContext, camadaPeerContext, camadaResponseContext, type RouterContext } from './context.js';\nimport { SDK_ID } from './version.js';\n\nexport interface CamadaRemixOptions extends FetchCamadaOptions {\n  /** The app's React Router `basename` (react-router.config.ts), when it has one. The client puts\n   *  it back in front of a redirect, so a challenged data request's `X-Remix-Redirect` goes out\n   *  without it. */\n  basename?: string;\n}\nexport type CamadaRemixVars = FetchVars;\n\n// camada() and camadaRoute() must see one engine for the same options, or the route would poll\n// and enforce a second copy of the tenant's snapshot: an instance is found by its serialisable\n// options (keys sorted, so two modules spelling them in a different order agree); fetchImpl\n// cannot be stringified, so it keys a bucket by identity.\nconst instances = new Set<FetchCamada>();\nconst byKey = new Map<typeof fetch | undefined, Map<string, FetchCamada>>();\n\n// Sorts the keys of every object on the way in, so key order never splits one configuration in two.\nconst sortedJson = (v: unknown): string =>\n  JSON.stringify(v, (_, x: unknown) => (x && typeof x === 'object' && !Array.isArray(x) ? Object.fromEntries(Object.entries(x).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) : x));\n\n/** The directory of the beacon script, `/_cam/` by default: a path in it with `name` last. */\nexport const inScriptDir = (scriptPath: string | undefined, name: string): string => (scriptPath ?? '/_cam/b.js').replace(/[^/]*$/, name);\n\nexport function instanceFor(given: CamadaRemixOptions = {}): FetchCamada {\n  // React Router runs middleware only for a matched route, and the beacon route (`/_cam/*` in the\n  // README) is the one camada can count on: the challenge form posts into that directory by\n  // default (`/_cam/challenge`, or next to a custom `scriptPath`), where camadaRoute() matches and\n  // the root middleware answers. Core's own default, `/__camada/challenge`, would 404 in the\n  // router before camada ever ran (camada-all-zhoc).\n  const { basename, ...core } = given;   // the adapter's own option: not core's, and part of the engine's identity only through the paths it moves\n  // Under a `basename` the router strips it before matching, so the endpoints' URLs (what the\n  // browser requests and core compares) carry it: the defaults live under it (camada-all-xms0).\n  const base = (basename ?? '').replace(/\\/+$/, '');\n  const scriptPath = core.scriptPath ?? (base ? `${base}/_cam/b.js` : undefined);\n  const fpPath = core.fpPath ?? inScriptDir(scriptPath, 'fp');   // the script posts next to itself (auto.ts derives it): `/_cam/fp` by default\n  const opts = {\n    ...core,\n    ...(scriptPath ? { scriptPath } : {}),\n    fpPath,\n    challengePath: core.challengePath ?? inScriptDir(scriptPath, 'challenge'),\n  };\n  const { fetchImpl, ...serialisable } = opts;\n  const key = sortedJson(serialisable);\n  let bucket = byKey.get(fetchImpl);\n  if (!bucket) byKey.set(fetchImpl, (bucket = new Map()));\n  let cam = bucket.get(key);\n  if (!cam) {\n    cam = createFetchCamada({ tap: TAP_REMIX, sdk: SDK_ID, iife }, opts);\n    bucket.set(key, cam);\n    instances.add(cam);\n  }\n  return cam;\n}\n\n/** Test/reset hook: stops and drops every engine this module created; the instances stay wired and rebuild lazily. */\nexport function resetCamada(): void {\n  for (const cam of instances) cam.reset();\n}\n\n/** What the host can vouch for: the peer a custom server set, and the process env. The peer read\n *  is guarded — a 7.9 app without the middleware flag hands a plain object; an edge runtime has no process. */\nexport function requestContext(context: RouterContext): FetchRequestContext {\n  return {\n    peer: guarded(() => context.get(camadaPeerContext), null),\n    env: globalThis.process?.env,\n  };\n}\n\n/** `path` without the router's basename, or null when it lies outside it. */\nfunction underBasename(path: string, basename: string | undefined): string | null {\n  const base = (basename ?? '').replace(/\\/+$/, '');\n  if (!base) return path;\n  if (path === base) return '/';\n  return path.startsWith(base + '/') ? path.slice(base.length) : null;\n}\n\n/** Whether `pathname` is React Router's client fetching `<path>.data` (any method). */\nconst isDataPath = (pathname: string): boolean => pathname.endsWith('.data');\nconst isDataRequest = (req: Request): boolean => isDataPath(new URL(req.url).pathname);\n\n/** A challenged client-side navigation: React Router's client fetches `<path>.data` (`/_.data` for a\n *  path ending in `/`) and throws any 4xx without `X-Remix-Response` into the route's error\n *  boundary, so core's 403 JSON would show the app's error page, never the challenge. Answer it\n *  in React Router's single-fetch redirect form instead: 204 + `X-Remix-Redirect` +\n *  `X-Remix-Reload-Document`, which the client turns into a document navigation\n *  (`window.location.assign`) that meets the HTML challenge (camada-all-wjln). A GET reloads the\n *  page itself. A non-GET (`fetcher.submit`, `fetcher.load` of a resource route, `<Form\n *  action=/other>`) targets a route that may have no page, so it reloads the same-origin page it\n *  came from (the Referer), else the data path. The location goes out without the router's\n *  basename, which the client adds back. Any other answer, and every request that is not a\n *  `.data` fetch, is left as it is. */\nexport function forNavigation(req: Request, res: Response, basename?: string): Response {\n  return guarded(() => {\n    if (res.status !== 403 || res.headers.get('x-camada-challenge') !== '1') return res;\n    const url = new URL(req.url);\n    if (!isDataPath(url.pathname)) return res;\n    url.pathname = url.pathname.endsWith('/_.data') ? url.pathname.slice(0, -'_.data'.length)\n      : url.pathname.endsWith('/_root.data') ? url.pathname.slice(0, -'_root.data'.length)   // Remix v2's spelling of the root\n      : url.pathname.slice(0, -'.data'.length);\n    url.searchParams.delete('_routes');\n    let to = underBasename(url.pathname, basename) ?? '/';\n    to = safeReturnTo(to + url.search);\n    if (req.method !== 'GET' && req.method !== 'HEAD') to = fromReferer(req, url.origin, basename) ?? to;\n    void res.body?.cancel().catch(() => {});\n    return new Response(null, {\n      status: 204,\n      headers: {\n        'X-Remix-Redirect': to, 'X-Remix-Status': '302', 'X-Remix-Reload-Document': 'true',\n        'cache-control': 'no-store', 'x-camada-challenge': '1',\n      },\n    });\n  }, res);\n}\n\n/** camada's own answer (block, challenge, verify, beacon), in the form the router sends. Where a custom\n *  server passed its Node response in `camadaResponseContext`, the headers that answer sets are\n *  removed from it first: the Express adapter appends, so an upstream policy or cache header\n *  would otherwise go out next to the answer's own (R7-2). Set-Cookie is the app's and stays. */\nexport function answered(req: Request, context: RouterContext, res: Response, basename?: string): Response {\n  const out = forNavigation(req, res, basename);\n  guarded(() => {\n    const node = context.get(camadaResponseContext);\n    if (!node || typeof node.removeHeader !== 'function') return;\n    for (const k of out.headers.keys()) if (k !== 'set-cookie') node.removeHeader(k);\n    if (out.headers.has('content-security-policy')) node.removeHeader('content-security-policy-report-only');\n  }, undefined);\n  return out;\n}\n\n/** The same-origin Referer's path and query (without the basename), when it is a safe return target. */\nfunction fromReferer(req: Request, origin: string, basename: string | undefined): string | null {\n  const raw = req.headers.get('referer');\n  if (!raw) return null;\n  let ref: URL;\n  try { ref = new URL(raw); } catch { return null; }\n  if (ref.origin !== origin) return null;\n  const path = underBasename(ref.pathname, basename);\n  if (path === null) return null;\n  const to = path + ref.search;\n  return safeReturnTo(to) === to ? to : null;\n}\n\nexport function camada(opts: CamadaRemixOptions = {}): MiddlewareFunction<Response> {\n  const cam = instanceFor(opts);\n  return async ({ request, context }, next) => {\n    const r = await cam.before(request, { ...requestContext(context), navigation: isDataRequest(request) });\n    if (!r) return next();\n    if (r.response) return answered(request, context, r.response, opts.basename);   // block, challenge, verify, beacon: answered without the app\n    guarded(() => context.set(camadaContext, r.vars), undefined);\n    let res: Response;\n    try {\n      res = await next();\n    } catch (err) {\n      // A thrown Response (a redirect from a downstream middleware) is the answer, so it carries\n      // the status and the cookie; anything else lands in the router's error boundary as a 500.\n      if (err instanceof Response) {\n        cam.after(request, r.vars, err.status);\n        throw withRid(r.vars.sessionCookie ? withSetCookie(err, r.vars.sessionCookie) : err, r.vars);\n      }\n      cam.after(request, r.vars, 500);\n      throw err;\n    }\n    return cam.finish(request, r.vars, r.vars.sessionCookie ? withSetCookie(res, r.vars.sessionCookie) : res);   // an SSE body ships once it has gone out; anything else now\n  };\n}\n","// Per-request state the middleware leaves on React Router's context for the two helpers an app\n// calls from its own loaders and actions: `scriptTag(context)` (the beacon tag) and\n// `track(context, event, data)` (an app-context outcome). When the middleware did not run for\n// this request (no key, CAMADA_DISABLED, or a request it answered itself) the slot is empty and\n// both helpers stand down.\nimport { createContext, type RouterContextProvider } from 'react-router';\nimport { guarded } from '@camada/core';\nimport { track as coreTrack, scriptTag as coreScriptTag, type FetchVars } from '@camada/core/fetch';\n\n// Defaults are null, not undefined: React Router's `get()` throws on a context that has neither\n// a value nor a default, and the helpers must stand down silently where the middleware did not run.\n/** The vars the middleware kept for this request; null where it did not run. Private to the package: track() and scriptTag() are the API. */\nexport const camadaContext = createContext<FetchVars | null>(null);\n\n/** The socket address a custom server vouches for (set from `getLoadContext`); null = nothing vouched. */\nexport const camadaPeerContext = createContext<string | null>(null);\n\n/** The Node response a custom server hands camada (Express's `res`, set from `getLoadContext(req, res)`).\n *  @react-router/express writes an answer's headers with `res.append`, so a header an Express\n *  middleware already set (helmet's Content-Security-Policy) would go out twice; with this, camada\n *  removes the ones its own answer replaces first. Null = nothing handed over. */\nexport const camadaResponseContext = createContext<{ removeHeader(name: string): void } | null>(null);\n\n/** Loaders, actions and middleware all receive the same read-only provider. */\nexport type RouterContext = Readonly<RouterContextProvider>;\n\nconst readSlot = (context: RouterContext): FetchVars | undefined => guarded(() => context.get(camadaContext) ?? undefined, undefined);\n\n/**\n * Records an outcome the app knows and the wire cannot show: `login_failed`, `login_succeeded`,\n * `signup`, `password_reset`, `mfa_failed`, `payment_failed`, `payment_succeeded`, `coupon_failed`\n * (free-form; that vocabulary is what the analyst's rules read). Joined to this request's event\n * through its rid and session; the user identifier is HMAC-hashed in-process. Never throws,\n * never rejects, and is a no-op where the middleware did not run.\n */\nexport const track = (context: RouterContext, event: string, data?: { user?: string }): Promise<void> => coreTrack(readSlot(context), event, data);\n\n/** The `<script>` tag for an HTML response — `''` when camada is off for this request or the tenant turned the beacon off. */\nexport const scriptTag = (context: RouterContext): string => coreScriptTag(readSlot(context));\n","{\n  \"name\": \"@camada/remix\",\n  \"version\": \"0.2.0\",\n  \"license\": \"MIT\",\n  \"type\": \"module\",\n  \"engines\": {\n    \"node\": \">=20\"\n  },\n  \"files\": [\n    \"dist\",\n    \"README.md\",\n    \"LICENSE\"\n  ],\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"check\": \"tsc --noEmit\",\n    \"check:readme-build\": \"scripts/readme-build-check.sh\"\n  },\n  \"description\": \"camada SDK for React Router framework mode (Remix): snapshot enforcement in a root middleware, first-party challenge and beacon route, track() outcomes\",\n  \"exports\": {\n    \".\": {\n      \"import\": {\n        \"types\": \"./dist/index.d.ts\",\n        \"default\": \"./dist/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/index.d.cts\",\n        \"default\": \"./dist/index.cjs\"\n      }\n    }\n  },\n  \"main\": \"./dist/index.cjs\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"dependencies\": {\n    \"@camada/browser\": \"file:../camada-browser\",\n    \"@camada/core\": \"file:../camada-core\"\n  },\n  \"peerDependencies\": {\n    \"react-router\": \">=7.9\"\n  },\n  \"devDependencies\": {\n    \"@react-router/express\": \"^8.3.1\",\n    \"@types/express\": \"^5.0.6\",\n    \"@types/node\": \"^22.10.0\",\n    \"express\": \"^5.3.0\",\n    \"helmet\": \"^8.3.0\",\n    \"react-router\": \"^8.3.1\",\n    \"tsup\": \"^8.3.5\",\n    \"typescript\": \"^5.7.2\",\n    \"vitest\": \"^3.0.0\"\n  }\n}\n","// The SDK's wire identity (SDK-03): x-camada-sdk: <package>/<version>. Named JSON imports are\n// inlined and tree-shaken by tsup at build, so dist carries two literals — no runtime fs read.\nimport { name, version } from '../package.json';\nexport const SDK_ID = `${name}/${version}`;\n","// The resource route for the beacon endpoints (routes.ts: route('/_cam/*', 'routes/cam.tsx')).\n// React Router runs middleware only for a matched route, so without a route under /_cam/* the\n// root middleware never sees the script or the relay and the router 404s them — the same reason\n// @camada/next has camadaRoute(). before() re-runs the verdict, so a blocked client gets its\n// 403 here too, and with the root middleware mounted it answers first and this never runs.\nimport type { ActionFunctionArgs, LoaderFunctionArgs } from 'react-router';\nimport { instanceFor, requestContext, answered, type CamadaRemixOptions } from './camada.js';\n\ntype Handler<A> = (args: A) => Promise<Response>;\n\nexport function camadaRoute(opts: CamadaRemixOptions = {}): { loader: Handler<LoaderFunctionArgs>; action: Handler<ActionFunctionArgs> } {\n  const cam = instanceFor(opts);\n  const answer: Handler<LoaderFunctionArgs | ActionFunctionArgs> = async ({ request, context }) => {\n    const r = await cam.before(request, requestContext(context));\n    return r?.response ? answered(request, context, r.response, opts.basename) : new Response(null, { status: 404 });   // not a beacon path, or camada inert: nothing to serve\n  };\n  return { loader: answer, action: answer };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACOA,yBAAiB;AACjB,IAAAA,eAAiD;AACjD,IAAAC,gBAA+I;;;ACJ/I,0BAA0D;AAC1D,kBAAwB;AACxB,mBAA+E;AAKxE,IAAM,oBAAgB,mCAAgC,IAAI;AAG1D,IAAM,wBAAoB,mCAA6B,IAAI;AAM3D,IAAM,4BAAwB,mCAA2D,IAAI;AAKpG,IAAM,WAAW,CAAC,gBAAkD,qBAAQ,MAAM,QAAQ,IAAI,aAAa,KAAK,QAAW,MAAS;AAS7H,IAAM,QAAQ,CAAC,SAAwB,OAAe,aAA4C,aAAAC,OAAU,SAAS,OAAO,GAAG,OAAO,IAAI;AAG1I,IAAM,YAAY,CAAC,gBAAmC,aAAAC,WAAc,SAAS,OAAO,CAAC;;;ACrC1F,WAAQ;AACR,cAAW;;;ACCN,IAAM,SAAS,GAAG,IAAI,IAAI,OAAO;;;AHuBxC,IAAM,YAAY,oBAAI,IAAiB;AACvC,IAAM,QAAQ,oBAAI,IAAwD;AAG1E,IAAM,aAAa,CAAC,MAClB,KAAK,UAAU,GAAG,CAAC,GAAG,MAAgB,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC,IAAI,OAAO,YAAY,OAAO,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE,CAAC,IAAI,CAAE;AAG9K,IAAM,cAAc,CAAC,YAAgCC,WAA0B,cAAc,cAAc,QAAQ,UAAUA,KAAI;AAEjI,SAAS,YAAY,QAA4B,CAAC,GAAgB;AAMvE,QAAM,EAAE,UAAU,GAAG,KAAK,IAAI;AAG9B,QAAM,QAAQ,YAAY,IAAI,QAAQ,QAAQ,EAAE;AAChD,QAAM,aAAa,KAAK,eAAe,OAAO,GAAG,IAAI,eAAe;AACpE,QAAM,SAAS,KAAK,UAAU,YAAY,YAAY,IAAI;AAC1D,QAAM,OAAO;AAAA,IACX,GAAG;AAAA,IACH,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC;AAAA,IACA,eAAe,KAAK,iBAAiB,YAAY,YAAY,WAAW;AAAA,EAC1E;AACA,QAAM,EAAE,WAAW,GAAG,aAAa,IAAI;AACvC,QAAM,MAAM,WAAW,YAAY;AACnC,MAAI,SAAS,MAAM,IAAI,SAAS;AAChC,MAAI,CAAC,OAAQ,OAAM,IAAI,WAAY,SAAS,oBAAI,IAAI,CAAE;AACtD,MAAI,MAAM,OAAO,IAAI,GAAG;AACxB,MAAI,CAAC,KAAK;AACR,cAAM,iCAAkB,EAAE,KAAK,wBAAW,KAAK,QAAQ,yBAAAC,QAAK,GAAG,IAAI;AACnE,WAAO,IAAI,KAAK,GAAG;AACnB,cAAU,IAAI,GAAG;AAAA,EACnB;AACA,SAAO;AACT;AAGO,SAAS,cAAoB;AAClC,aAAW,OAAO,UAAW,KAAI,MAAM;AACzC;AAIO,SAAS,eAAe,SAA6C;AAC1E,SAAO;AAAA,IACL,UAAM,sBAAQ,MAAM,QAAQ,IAAI,iBAAiB,GAAG,IAAI;AAAA,IACxD,KAAK,WAAW,SAAS;AAAA,EAC3B;AACF;AAGA,SAAS,cAAc,MAAc,UAA6C;AAChF,QAAM,QAAQ,YAAY,IAAI,QAAQ,QAAQ,EAAE;AAChD,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,SAAS,KAAM,QAAO;AAC1B,SAAO,KAAK,WAAW,OAAO,GAAG,IAAI,KAAK,MAAM,KAAK,MAAM,IAAI;AACjE;AAGA,IAAM,aAAa,CAAC,aAA8B,SAAS,SAAS,OAAO;AAC3E,IAAM,gBAAgB,CAAC,QAA0B,WAAW,IAAI,IAAI,IAAI,GAAG,EAAE,QAAQ;AAa9E,SAAS,cAAc,KAAc,KAAe,UAA6B;AACtF,aAAO,sBAAQ,MAAM;AACnB,QAAI,IAAI,WAAW,OAAO,IAAI,QAAQ,IAAI,oBAAoB,MAAM,IAAK,QAAO;AAChF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAI,CAAC,WAAW,IAAI,QAAQ,EAAG,QAAO;AACtC,QAAI,WAAW,IAAI,SAAS,SAAS,SAAS,IAAI,IAAI,SAAS,MAAM,GAAG,CAAC,SAAS,MAAM,IACpF,IAAI,SAAS,SAAS,aAAa,IAAI,IAAI,SAAS,MAAM,GAAG,CAAC,aAAa,MAAM,IACjF,IAAI,SAAS,MAAM,GAAG,CAAC,QAAQ,MAAM;AACzC,QAAI,aAAa,OAAO,SAAS;AACjC,QAAI,KAAK,cAAc,IAAI,UAAU,QAAQ,KAAK;AAClD,aAAK,2BAAa,KAAK,IAAI,MAAM;AACjC,QAAI,IAAI,WAAW,SAAS,IAAI,WAAW,OAAQ,MAAK,YAAY,KAAK,IAAI,QAAQ,QAAQ,KAAK;AAClG,SAAK,IAAI,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACtC,WAAO,IAAI,SAAS,MAAM;AAAA,MACxB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,oBAAoB;AAAA,QAAI,kBAAkB;AAAA,QAAO,2BAA2B;AAAA,QAC5E,iBAAiB;AAAA,QAAY,sBAAsB;AAAA,MACrD;AAAA,IACF,CAAC;AAAA,EACH,GAAG,GAAG;AACR;AAMO,SAAS,SAAS,KAAc,SAAwB,KAAe,UAA6B;AACzG,QAAM,MAAM,cAAc,KAAK,KAAK,QAAQ;AAC5C,4BAAQ,MAAM;AACZ,UAAM,OAAO,QAAQ,IAAI,qBAAqB;AAC9C,QAAI,CAAC,QAAQ,OAAO,KAAK,iBAAiB,WAAY;AACtD,eAAW,KAAK,IAAI,QAAQ,KAAK,EAAG,KAAI,MAAM,aAAc,MAAK,aAAa,CAAC;AAC/E,QAAI,IAAI,QAAQ,IAAI,yBAAyB,EAAG,MAAK,aAAa,qCAAqC;AAAA,EACzG,GAAG,MAAS;AACZ,SAAO;AACT;AAGA,SAAS,YAAY,KAAc,QAAgB,UAA6C;AAC9F,QAAM,MAAM,IAAI,QAAQ,IAAI,SAAS;AACrC,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACJ,MAAI;AAAE,UAAM,IAAI,IAAI,GAAG;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAM;AACjD,MAAI,IAAI,WAAW,OAAQ,QAAO;AAClC,QAAM,OAAO,cAAc,IAAI,UAAU,QAAQ;AACjD,MAAI,SAAS,KAAM,QAAO;AAC1B,QAAM,KAAK,OAAO,IAAI;AACtB,aAAO,2BAAa,EAAE,MAAM,KAAK,KAAK;AACxC;AAEO,SAAS,OAAO,OAA2B,CAAC,GAAiC;AAClF,QAAM,MAAM,YAAY,IAAI;AAC5B,SAAO,OAAO,EAAE,SAAS,QAAQ,GAAG,SAAS;AAC3C,UAAM,IAAI,MAAM,IAAI,OAAO,SAAS,EAAE,GAAG,eAAe,OAAO,GAAG,YAAY,cAAc,OAAO,EAAE,CAAC;AACtG,QAAI,CAAC,EAAG,QAAO,KAAK;AACpB,QAAI,EAAE,SAAU,QAAO,SAAS,SAAS,SAAS,EAAE,UAAU,KAAK,QAAQ;AAC3E,8BAAQ,MAAM,QAAQ,IAAI,eAAe,EAAE,IAAI,GAAG,MAAS;AAC3D,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,KAAK;AAAA,IACnB,SAAS,KAAK;AAGZ,UAAI,eAAe,UAAU;AAC3B,YAAI,MAAM,SAAS,EAAE,MAAM,IAAI,MAAM;AACrC,kBAAM,uBAAQ,EAAE,KAAK,oBAAgB,6BAAc,KAAK,EAAE,KAAK,aAAa,IAAI,KAAK,EAAE,IAAI;AAAA,MAC7F;AACA,UAAI,MAAM,SAAS,EAAE,MAAM,GAAG;AAC9B,YAAM;AAAA,IACR;AACA,WAAO,IAAI,OAAO,SAAS,EAAE,MAAM,EAAE,KAAK,oBAAgB,6BAAc,KAAK,EAAE,KAAK,aAAa,IAAI,GAAG;AAAA,EAC1G;AACF;;;AIvKO,SAAS,YAAY,OAA2B,CAAC,GAAiF;AACvI,QAAM,MAAM,YAAY,IAAI;AAC5B,QAAM,SAA2D,OAAO,EAAE,SAAS,QAAQ,MAAM;AAC/F,UAAM,IAAI,MAAM,IAAI,OAAO,SAAS,eAAe,OAAO,CAAC;AAC3D,WAAO,GAAG,WAAW,SAAS,SAAS,SAAS,EAAE,UAAU,KAAK,QAAQ,IAAI,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjH;AACA,SAAO,EAAE,QAAQ,QAAQ,QAAQ,OAAO;AAC1C;","names":["import_core","import_fetch","coreTrack","coreScriptTag","name","iife"]}

package/dist/index.d.cts

@@ -4,6 +4,13 @@ import { RouterContextProvider, MiddlewareFunction, LoaderFunctionArgs, ActionFu
 
 /** The socket address a custom server vouches for (set from `getLoadContext`); null = nothing vouched. */
 declare const camadaPeerContext: react_router.RouterContext<string | null>;
+/** The Node response a custom server hands camada (Express's `res`, set from `getLoadContext(req, res)`).
+ *  @react-router/express writes an answer's headers with `res.append`, so a header an Express
+ *  middleware already set (helmet's Content-Security-Policy) would go out twice; with this, camada
+ *  removes the ones its own answer replaces first. Null = nothing handed over. */
+declare const camadaResponseContext: react_router.RouterContext<{
+    removeHeader(name: string): void;
+} | null>;
 /** Loaders, actions and middleware all receive the same read-only provider. */
 type RouterContext = Readonly<RouterContextProvider>;
 /**
@@ -19,7 +26,12 @@ declare const track: (context: RouterContext, event: string, data?: {
 /** The `<script>` tag for an HTML response — `''` when camada is off for this request or the tenant turned the beacon off. */
 declare const scriptTag: (context: RouterContext) => string;
 
-type CamadaRemixOptions = FetchCamadaOptions;
+interface CamadaRemixOptions extends FetchCamadaOptions {
+    /** The app's React Router `basename` (react-router.config.ts), when it has one. The client puts
+     *  it back in front of a redirect, so a challenged data request's `X-Remix-Redirect` goes out
+     *  without it. */
+    basename?: string;
+}
 type CamadaRemixVars = FetchVars;
 /** Test/reset hook: stops and drops every engine this module created; the instances stay wired and rebuild lazily. */
 declare function resetCamada(): void;
@@ -31,4 +43,4 @@ declare function camadaRoute(opts?: CamadaRemixOptions): {
     action: Handler<ActionFunctionArgs>;
 };
 
-export { type CamadaRemixOptions, type CamadaRemixVars, camada, camadaPeerContext, camadaRoute, resetCamada, scriptTag, track };
+export { type CamadaRemixOptions, type CamadaRemixVars, camada, camadaPeerContext, camadaResponseContext, camadaRoute, resetCamada, scriptTag, track };

package/dist/index.d.ts

@@ -4,6 +4,13 @@ import { RouterContextProvider, MiddlewareFunction, LoaderFunctionArgs, ActionFu
 
 /** The socket address a custom server vouches for (set from `getLoadContext`); null = nothing vouched. */
 declare const camadaPeerContext: react_router.RouterContext<string | null>;
+/** The Node response a custom server hands camada (Express's `res`, set from `getLoadContext(req, res)`).
+ *  @react-router/express writes an answer's headers with `res.append`, so a header an Express
+ *  middleware already set (helmet's Content-Security-Policy) would go out twice; with this, camada
+ *  removes the ones its own answer replaces first. Null = nothing handed over. */
+declare const camadaResponseContext: react_router.RouterContext<{
+    removeHeader(name: string): void;
+} | null>;
 /** Loaders, actions and middleware all receive the same read-only provider. */
 type RouterContext = Readonly<RouterContextProvider>;
 /**
@@ -19,7 +26,12 @@ declare const track: (context: RouterContext, event: string, data?: {
 /** The `<script>` tag for an HTML response — `''` when camada is off for this request or the tenant turned the beacon off. */
 declare const scriptTag: (context: RouterContext) => string;
 
-type CamadaRemixOptions = FetchCamadaOptions;
+interface CamadaRemixOptions extends FetchCamadaOptions {
+    /** The app's React Router `basename` (react-router.config.ts), when it has one. The client puts
+     *  it back in front of a redirect, so a challenged data request's `X-Remix-Redirect` goes out
+     *  without it. */
+    basename?: string;
+}
 type CamadaRemixVars = FetchVars;
 /** Test/reset hook: stops and drops every engine this module created; the instances stay wired and rebuild lazily. */
 declare function resetCamada(): void;
@@ -31,4 +43,4 @@ declare function camadaRoute(opts?: CamadaRemixOptions): {
     action: Handler<ActionFunctionArgs>;
 };
 
-export { type CamadaRemixOptions, type CamadaRemixVars, camada, camadaPeerContext, camadaRoute, resetCamada, scriptTag, track };
+export { type CamadaRemixOptions, type CamadaRemixVars, camada, camadaPeerContext, camadaResponseContext, camadaRoute, resetCamada, scriptTag, track };

package/dist/index.js

@@ -1,6 +1,6 @@
 // src/camada.ts
 import iife from "@camada/browser/iife-string";
-import { guarded as guarded2, TAP_REMIX } from "@camada/core";
+import { guarded as guarded2, safeReturnTo, TAP_REMIX } from "@camada/core";
 import { createFetchCamada, withSetCookie, withRid } from "@camada/core/fetch";
 
 // src/context.ts
@@ -9,13 +9,14 @@ import { guarded } from "@camada/core";
 import { track as coreTrack, scriptTag as coreScriptTag } from "@camada/core/fetch";
 var camadaContext = createContext(null);
 var camadaPeerContext = createContext(null);
+var camadaResponseContext = createContext(null);
 var readSlot = (context) => guarded(() => context.get(camadaContext) ?? void 0, void 0);
 var track = (context, event, data) => coreTrack(readSlot(context), event, data);
 var scriptTag = (context) => coreScriptTag(readSlot(context));
 
 // package.json
 var name = "@camada/remix";
-var version = "0.1.3";
+var version = "0.2.0";
 
 // src/version.ts
 var SDK_ID = `${name}/${version}`;
@@ -24,7 +25,18 @@ var SDK_ID = `${name}/${version}`;
 var instances = /* @__PURE__ */ new Set();
 var byKey = /* @__PURE__ */ new Map();
 var sortedJson = (v) => JSON.stringify(v, (_, x) => x && typeof x === "object" && !Array.isArray(x) ? Object.fromEntries(Object.entries(x).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0)) : x);
-function instanceFor(opts = {}) {
+var inScriptDir = (scriptPath, name2) => (scriptPath ?? "/_cam/b.js").replace(/[^/]*$/, name2);
+function instanceFor(given = {}) {
+  const { basename, ...core } = given;
+  const base = (basename ?? "").replace(/\/+$/, "");
+  const scriptPath = core.scriptPath ?? (base ? `${base}/_cam/b.js` : void 0);
+  const fpPath = core.fpPath ?? inScriptDir(scriptPath, "fp");
+  const opts = {
+    ...core,
+    ...scriptPath ? { scriptPath } : {},
+    fpPath,
+    challengePath: core.challengePath ?? inScriptDir(scriptPath, "challenge")
+  };
   const { fetchImpl, ...serialisable } = opts;
   const key = sortedJson(serialisable);
   let bucket = byKey.get(fetchImpl);
@@ -46,12 +58,69 @@ function requestContext(context) {
     env: globalThis.process?.env
   };
 }
+function underBasename(path, basename) {
+  const base = (basename ?? "").replace(/\/+$/, "");
+  if (!base) return path;
+  if (path === base) return "/";
+  return path.startsWith(base + "/") ? path.slice(base.length) : null;
+}
+var isDataPath = (pathname) => pathname.endsWith(".data");
+var isDataRequest = (req) => isDataPath(new URL(req.url).pathname);
+function forNavigation(req, res, basename) {
+  return guarded2(() => {
+    if (res.status !== 403 || res.headers.get("x-camada-challenge") !== "1") return res;
+    const url = new URL(req.url);
+    if (!isDataPath(url.pathname)) return res;
+    url.pathname = url.pathname.endsWith("/_.data") ? url.pathname.slice(0, -"_.data".length) : url.pathname.endsWith("/_root.data") ? url.pathname.slice(0, -"_root.data".length) : url.pathname.slice(0, -".data".length);
+    url.searchParams.delete("_routes");
+    let to = underBasename(url.pathname, basename) ?? "/";
+    to = safeReturnTo(to + url.search);
+    if (req.method !== "GET" && req.method !== "HEAD") to = fromReferer(req, url.origin, basename) ?? to;
+    void res.body?.cancel().catch(() => {
+    });
+    return new Response(null, {
+      status: 204,
+      headers: {
+        "X-Remix-Redirect": to,
+        "X-Remix-Status": "302",
+        "X-Remix-Reload-Document": "true",
+        "cache-control": "no-store",
+        "x-camada-challenge": "1"
+      }
+    });
+  }, res);
+}
+function answered(req, context, res, basename) {
+  const out = forNavigation(req, res, basename);
+  guarded2(() => {
+    const node = context.get(camadaResponseContext);
+    if (!node || typeof node.removeHeader !== "function") return;
+    for (const k of out.headers.keys()) if (k !== "set-cookie") node.removeHeader(k);
+    if (out.headers.has("content-security-policy")) node.removeHeader("content-security-policy-report-only");
+  }, void 0);
+  return out;
+}
+function fromReferer(req, origin, basename) {
+  const raw = req.headers.get("referer");
+  if (!raw) return null;
+  let ref;
+  try {
+    ref = new URL(raw);
+  } catch {
+    return null;
+  }
+  if (ref.origin !== origin) return null;
+  const path = underBasename(ref.pathname, basename);
+  if (path === null) return null;
+  const to = path + ref.search;
+  return safeReturnTo(to) === to ? to : null;
+}
 function camada(opts = {}) {
   const cam = instanceFor(opts);
   return async ({ request, context }, next) => {
-    const r = await cam.before(request, requestContext(context));
+    const r = await cam.before(request, { ...requestContext(context), navigation: isDataRequest(request) });
     if (!r) return next();
-    if (r.response) return r.response;
+    if (r.response) return answered(request, context, r.response, opts.basename);
     guarded2(() => context.set(camadaContext, r.vars), void 0);
     let res;
     try {
@@ -73,13 +142,14 @@ function camadaRoute(opts = {}) {
   const cam = instanceFor(opts);
   const answer = async ({ request, context }) => {
     const r = await cam.before(request, requestContext(context));
-    return r?.response ?? new Response(null, { status: 404 });
+    return r?.response ? answered(request, context, r.response, opts.basename) : new Response(null, { status: 404 });
   };
   return { loader: answer, action: answer };
 }
 export {
   camada,
   camadaPeerContext,
+  camadaResponseContext,
   camadaRoute,
   resetCamada,
   scriptTag,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/camada.ts","../src/context.ts","../package.json","../src/version.ts","../src/route.ts"],"sourcesContent":["// @camada/remix — the root server middleware for React Router framework mode (SDK-G04):\n//   export const middleware = [camada()];   // app/root.tsx\n// A thin binding over @camada/core/fetch: the peer is whatever a custom server put in\n// `camadaPeerContext` (React Router itself vouches for no socket), the env is process.env, and\n// there is no waitUntil — the host is a long-lived Node server or an edge runtime that keeps\n// its own isolate open. A camada bug, a dead ingest or a corrupt snapshot costs telemetry,\n// never the app's response.\nimport iife from '@camada/browser/iife-string';\nimport { guarded, TAP_REMIX } from '@camada/core';\nimport { createFetchCamada, withSetCookie, withRid, type FetchCamada, type FetchCamadaOptions, type FetchRequestContext, type FetchVars } from '@camada/core/fetch';\nimport type { MiddlewareFunction } from 'react-router';\nimport { camadaContext, camadaPeerContext, type RouterContext } from './context.js';\nimport { SDK_ID } from './version.js';\n\nexport type CamadaRemixOptions = FetchCamadaOptions;\nexport type CamadaRemixVars = FetchVars;\n\n// camada() and camadaRoute() must see one engine for the same options, or the route would poll\n// and enforce a second copy of the tenant's snapshot: an instance is found by its serialisable\n// options (keys sorted, so two modules spelling them in a different order agree); fetchImpl\n// cannot be stringified, so it keys a bucket by identity.\nconst instances = new Set<FetchCamada>();\nconst byKey = new Map<typeof fetch | undefined, Map<string, FetchCamada>>();\n\n// Sorts the keys of every object on the way in, so key order never splits one configuration in two.\nconst sortedJson = (v: unknown): string =>\n  JSON.stringify(v, (_, x: unknown) => (x && typeof x === 'object' && !Array.isArray(x) ? Object.fromEntries(Object.entries(x).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) : x));\n\nexport function instanceFor(opts: CamadaRemixOptions = {}): FetchCamada {\n  const { fetchImpl, ...serialisable } = opts;\n  const key = sortedJson(serialisable);\n  let bucket = byKey.get(fetchImpl);\n  if (!bucket) byKey.set(fetchImpl, (bucket = new Map()));\n  let cam = bucket.get(key);\n  if (!cam) {\n    cam = createFetchCamada({ tap: TAP_REMIX, sdk: SDK_ID, iife }, opts);\n    bucket.set(key, cam);\n    instances.add(cam);\n  }\n  return cam;\n}\n\n/** Test/reset hook: stops and drops every engine this module created; the instances stay wired and rebuild lazily. */\nexport function resetCamada(): void {\n  for (const cam of instances) cam.reset();\n}\n\n/** What the host can vouch for: the peer a custom server set, and the process env. The peer read\n *  is guarded — a 7.9 app without the middleware flag hands a plain object; an edge runtime has no process. */\nexport function requestContext(context: RouterContext): FetchRequestContext {\n  return {\n    peer: guarded(() => context.get(camadaPeerContext), null),\n    env: globalThis.process?.env,\n  };\n}\n\nexport function camada(opts: CamadaRemixOptions = {}): MiddlewareFunction<Response> {\n  const cam = instanceFor(opts);\n  return async ({ request, context }, next) => {\n    const r = await cam.before(request, requestContext(context));\n    if (!r) return next();\n    if (r.response) return r.response;   // block, challenge, verify, beacon: answered without the app\n    guarded(() => context.set(camadaContext, r.vars), undefined);\n    let res: Response;\n    try {\n      res = await next();\n    } catch (err) {\n      // A thrown Response (a redirect from a downstream middleware) is the answer, so it carries\n      // the status and the cookie; anything else lands in the router's error boundary as a 500.\n      if (err instanceof Response) {\n        cam.after(request, r.vars, err.status);\n        throw withRid(r.vars.sessionCookie ? withSetCookie(err, r.vars.sessionCookie) : err, r.vars);\n      }\n      cam.after(request, r.vars, 500);\n      throw err;\n    }\n    return cam.finish(request, r.vars, r.vars.sessionCookie ? withSetCookie(res, r.vars.sessionCookie) : res);   // an SSE body ships once it has gone out; anything else now\n  };\n}\n","// Per-request state the middleware leaves on React Router's context for the two helpers an app\n// calls from its own loaders and actions: `scriptTag(context)` (the beacon tag) and\n// `track(context, event, data)` (an app-context outcome). When the middleware did not run for\n// this request (no key, CAMADA_DISABLED, or a request it answered itself) the slot is empty and\n// both helpers stand down.\nimport { createContext, type RouterContextProvider } from 'react-router';\nimport { guarded } from '@camada/core';\nimport { track as coreTrack, scriptTag as coreScriptTag, type FetchVars } from '@camada/core/fetch';\n\n// Defaults are null, not undefined: React Router's `get()` throws on a context that has neither\n// a value nor a default, and the helpers must stand down silently where the middleware did not run.\n/** The vars the middleware kept for this request; null where it did not run. Private to the package: track() and scriptTag() are the API. */\nexport const camadaContext = createContext<FetchVars | null>(null);\n\n/** The socket address a custom server vouches for (set from `getLoadContext`); null = nothing vouched. */\nexport const camadaPeerContext = createContext<string | null>(null);\n\n/** Loaders, actions and middleware all receive the same read-only provider. */\nexport type RouterContext = Readonly<RouterContextProvider>;\n\nconst readSlot = (context: RouterContext): FetchVars | undefined => guarded(() => context.get(camadaContext) ?? undefined, undefined);\n\n/**\n * Records an outcome the app knows and the wire cannot show: `login_failed`, `login_succeeded`,\n * `signup`, `password_reset`, `mfa_failed`, `payment_failed`, `payment_succeeded`, `coupon_failed`\n * (free-form; that vocabulary is what the analyst's rules read). Joined to this request's event\n * through its rid and session; the user identifier is HMAC-hashed in-process. Never throws,\n * never rejects, and is a no-op where the middleware did not run.\n */\nexport const track = (context: RouterContext, event: string, data?: { user?: string }): Promise<void> => coreTrack(readSlot(context), event, data);\n\n/** The `<script>` tag for an HTML response — `''` when camada is off for this request or the tenant turned the beacon off. */\nexport const scriptTag = (context: RouterContext): string => coreScriptTag(readSlot(context));\n","{\n  \"name\": \"@camada/remix\",\n  \"version\": \"0.1.3\",\n  \"license\": \"MIT\",\n  \"type\": \"module\",\n  \"engines\": {\n    \"node\": \">=20\"\n  },\n  \"files\": [\n    \"dist\",\n    \"README.md\",\n    \"LICENSE\"\n  ],\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"check\": \"tsc --noEmit\"\n  },\n  \"description\": \"camada SDK for React Router framework mode (Remix): snapshot enforcement in a root middleware, first-party challenge and beacon route, track() outcomes\",\n  \"exports\": {\n    \".\": {\n      \"types\": \"./dist/index.d.ts\",\n      \"import\": \"./dist/index.js\",\n      \"require\": \"./dist/index.cjs\"\n    }\n  },\n  \"main\": \"./dist/index.cjs\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"dependencies\": {\n    \"@camada/core\": \"file:../camada-core\",\n    \"@camada/browser\": \"file:../camada-browser\"\n  },\n  \"peerDependencies\": {\n    \"react-router\": \">=7.9\"\n  },\n  \"devDependencies\": {\n    \"@types/node\": \"^22.10.0\",\n    \"react-router\": \"^8.3.1\",\n    \"tsup\": \"^8.3.5\",\n    \"typescript\": \"^5.7.2\",\n    \"vitest\": \"^3.0.0\"\n  }\n}\n","// The SDK's wire identity (SDK-03): x-camada-sdk: <package>/<version>. Named JSON imports are\n// inlined and tree-shaken by tsup at build, so dist carries two literals — no runtime fs read.\nimport { name, version } from '../package.json';\nexport const SDK_ID = `${name}/${version}`;\n","// The resource route for the beacon endpoints (routes.ts: route('/_cam/*', 'routes/cam.tsx')).\n// React Router runs middleware only for a matched route, so without a route under /_cam/* the\n// root middleware never sees the script or the relay and the router 404s them — the same reason\n// @camada/next has camadaRoute(). before() re-runs the verdict, so a blocked client gets its\n// 403 here too, and with the root middleware mounted it answers first and this never runs.\nimport type { ActionFunctionArgs, LoaderFunctionArgs } from 'react-router';\nimport { instanceFor, requestContext, type CamadaRemixOptions } from './camada.js';\n\ntype Handler<A> = (args: A) => Promise<Response>;\n\nexport function camadaRoute(opts: CamadaRemixOptions = {}): { loader: Handler<LoaderFunctionArgs>; action: Handler<ActionFunctionArgs> } {\n  const cam = instanceFor(opts);\n  const answer: Handler<LoaderFunctionArgs | ActionFunctionArgs> = async ({ request, context }) => {\n    const r = await cam.before(request, requestContext(context));\n    return r?.response ?? new Response(null, { status: 404 });   // not a beacon path, or camada inert: nothing to serve\n  };\n  return { loader: answer, action: answer };\n}\n"],"mappings":";AAOA,OAAO,UAAU;AACjB,SAAS,WAAAA,UAAS,iBAAiB;AACnC,SAAS,mBAAmB,eAAe,eAAoG;;;ACJ/I,SAAS,qBAAiD;AAC1D,SAAS,eAAe;AACxB,SAAS,SAAS,WAAW,aAAa,qBAAqC;AAKxE,IAAM,gBAAgB,cAAgC,IAAI;AAG1D,IAAM,oBAAoB,cAA6B,IAAI;AAKlE,IAAM,WAAW,CAAC,YAAkD,QAAQ,MAAM,QAAQ,IAAI,aAAa,KAAK,QAAW,MAAS;AAS7H,IAAM,QAAQ,CAAC,SAAwB,OAAe,SAA4C,UAAU,SAAS,OAAO,GAAG,OAAO,IAAI;AAG1I,IAAM,YAAY,CAAC,YAAmC,cAAc,SAAS,OAAO,CAAC;;;AC/B1F,WAAQ;AACR,cAAW;;;ACCN,IAAM,SAAS,GAAG,IAAI,IAAI,OAAO;;;AHkBxC,IAAM,YAAY,oBAAI,IAAiB;AACvC,IAAM,QAAQ,oBAAI,IAAwD;AAG1E,IAAM,aAAa,CAAC,MAClB,KAAK,UAAU,GAAG,CAAC,GAAG,MAAgB,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC,IAAI,OAAO,YAAY,OAAO,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE,CAAC,IAAI,CAAE;AAE9K,SAAS,YAAY,OAA2B,CAAC,GAAgB;AACtE,QAAM,EAAE,WAAW,GAAG,aAAa,IAAI;AACvC,QAAM,MAAM,WAAW,YAAY;AACnC,MAAI,SAAS,MAAM,IAAI,SAAS;AAChC,MAAI,CAAC,OAAQ,OAAM,IAAI,WAAY,SAAS,oBAAI,IAAI,CAAE;AACtD,MAAI,MAAM,OAAO,IAAI,GAAG;AACxB,MAAI,CAAC,KAAK;AACR,UAAM,kBAAkB,EAAE,KAAK,WAAW,KAAK,QAAQ,KAAK,GAAG,IAAI;AACnE,WAAO,IAAI,KAAK,GAAG;AACnB,cAAU,IAAI,GAAG;AAAA,EACnB;AACA,SAAO;AACT;AAGO,SAAS,cAAoB;AAClC,aAAW,OAAO,UAAW,KAAI,MAAM;AACzC;AAIO,SAAS,eAAe,SAA6C;AAC1E,SAAO;AAAA,IACL,MAAMC,SAAQ,MAAM,QAAQ,IAAI,iBAAiB,GAAG,IAAI;AAAA,IACxD,KAAK,WAAW,SAAS;AAAA,EAC3B;AACF;AAEO,SAAS,OAAO,OAA2B,CAAC,GAAiC;AAClF,QAAM,MAAM,YAAY,IAAI;AAC5B,SAAO,OAAO,EAAE,SAAS,QAAQ,GAAG,SAAS;AAC3C,UAAM,IAAI,MAAM,IAAI,OAAO,SAAS,eAAe,OAAO,CAAC;AAC3D,QAAI,CAAC,EAAG,QAAO,KAAK;AACpB,QAAI,EAAE,SAAU,QAAO,EAAE;AACzB,IAAAA,SAAQ,MAAM,QAAQ,IAAI,eAAe,EAAE,IAAI,GAAG,MAAS;AAC3D,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,KAAK;AAAA,IACnB,SAAS,KAAK;AAGZ,UAAI,eAAe,UAAU;AAC3B,YAAI,MAAM,SAAS,EAAE,MAAM,IAAI,MAAM;AACrC,cAAM,QAAQ,EAAE,KAAK,gBAAgB,cAAc,KAAK,EAAE,KAAK,aAAa,IAAI,KAAK,EAAE,IAAI;AAAA,MAC7F;AACA,UAAI,MAAM,SAAS,EAAE,MAAM,GAAG;AAC9B,YAAM;AAAA,IACR;AACA,WAAO,IAAI,OAAO,SAAS,EAAE,MAAM,EAAE,KAAK,gBAAgB,cAAc,KAAK,EAAE,KAAK,aAAa,IAAI,GAAG;AAAA,EAC1G;AACF;;;AIpEO,SAAS,YAAY,OAA2B,CAAC,GAAiF;AACvI,QAAM,MAAM,YAAY,IAAI;AAC5B,QAAM,SAA2D,OAAO,EAAE,SAAS,QAAQ,MAAM;AAC/F,UAAM,IAAI,MAAM,IAAI,OAAO,SAAS,eAAe,OAAO,CAAC;AAC3D,WAAO,GAAG,YAAY,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1D;AACA,SAAO,EAAE,QAAQ,QAAQ,QAAQ,OAAO;AAC1C;","names":["guarded","guarded"]}
+{"version":3,"sources":["../src/camada.ts","../src/context.ts","../package.json","../src/version.ts","../src/route.ts"],"sourcesContent":["// @camada/remix — the root server middleware for React Router framework mode (SDK-G04):\n//   export const middleware = [camada()];   // app/root.tsx\n// A thin binding over @camada/core/fetch: the peer is whatever a custom server put in\n// `camadaPeerContext` (React Router itself vouches for no socket), the env is process.env, and\n// there is no waitUntil — the host is a long-lived Node server or an edge runtime that keeps\n// its own isolate open. A camada bug, a dead ingest or a corrupt snapshot costs telemetry,\n// never the app's response.\nimport iife from '@camada/browser/iife-string';\nimport { guarded, safeReturnTo, TAP_REMIX } from '@camada/core';\nimport { createFetchCamada, withSetCookie, withRid, type FetchCamada, type FetchCamadaOptions, type FetchRequestContext, type FetchVars } from '@camada/core/fetch';\nimport type { MiddlewareFunction } from 'react-router';\nimport { camadaContext, camadaPeerContext, camadaResponseContext, type RouterContext } from './context.js';\nimport { SDK_ID } from './version.js';\n\nexport interface CamadaRemixOptions extends FetchCamadaOptions {\n  /** The app's React Router `basename` (react-router.config.ts), when it has one. The client puts\n   *  it back in front of a redirect, so a challenged data request's `X-Remix-Redirect` goes out\n   *  without it. */\n  basename?: string;\n}\nexport type CamadaRemixVars = FetchVars;\n\n// camada() and camadaRoute() must see one engine for the same options, or the route would poll\n// and enforce a second copy of the tenant's snapshot: an instance is found by its serialisable\n// options (keys sorted, so two modules spelling them in a different order agree); fetchImpl\n// cannot be stringified, so it keys a bucket by identity.\nconst instances = new Set<FetchCamada>();\nconst byKey = new Map<typeof fetch | undefined, Map<string, FetchCamada>>();\n\n// Sorts the keys of every object on the way in, so key order never splits one configuration in two.\nconst sortedJson = (v: unknown): string =>\n  JSON.stringify(v, (_, x: unknown) => (x && typeof x === 'object' && !Array.isArray(x) ? Object.fromEntries(Object.entries(x).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))) : x));\n\n/** The directory of the beacon script, `/_cam/` by default: a path in it with `name` last. */\nexport const inScriptDir = (scriptPath: string | undefined, name: string): string => (scriptPath ?? '/_cam/b.js').replace(/[^/]*$/, name);\n\nexport function instanceFor(given: CamadaRemixOptions = {}): FetchCamada {\n  // React Router runs middleware only for a matched route, and the beacon route (`/_cam/*` in the\n  // README) is the one camada can count on: the challenge form posts into that directory by\n  // default (`/_cam/challenge`, or next to a custom `scriptPath`), where camadaRoute() matches and\n  // the root middleware answers. Core's own default, `/__camada/challenge`, would 404 in the\n  // router before camada ever ran (camada-all-zhoc).\n  const { basename, ...core } = given;   // the adapter's own option: not core's, and part of the engine's identity only through the paths it moves\n  // Under a `basename` the router strips it before matching, so the endpoints' URLs (what the\n  // browser requests and core compares) carry it: the defaults live under it (camada-all-xms0).\n  const base = (basename ?? '').replace(/\\/+$/, '');\n  const scriptPath = core.scriptPath ?? (base ? `${base}/_cam/b.js` : undefined);\n  const fpPath = core.fpPath ?? inScriptDir(scriptPath, 'fp');   // the script posts next to itself (auto.ts derives it): `/_cam/fp` by default\n  const opts = {\n    ...core,\n    ...(scriptPath ? { scriptPath } : {}),\n    fpPath,\n    challengePath: core.challengePath ?? inScriptDir(scriptPath, 'challenge'),\n  };\n  const { fetchImpl, ...serialisable } = opts;\n  const key = sortedJson(serialisable);\n  let bucket = byKey.get(fetchImpl);\n  if (!bucket) byKey.set(fetchImpl, (bucket = new Map()));\n  let cam = bucket.get(key);\n  if (!cam) {\n    cam = createFetchCamada({ tap: TAP_REMIX, sdk: SDK_ID, iife }, opts);\n    bucket.set(key, cam);\n    instances.add(cam);\n  }\n  return cam;\n}\n\n/** Test/reset hook: stops and drops every engine this module created; the instances stay wired and rebuild lazily. */\nexport function resetCamada(): void {\n  for (const cam of instances) cam.reset();\n}\n\n/** What the host can vouch for: the peer a custom server set, and the process env. The peer read\n *  is guarded — a 7.9 app without the middleware flag hands a plain object; an edge runtime has no process. */\nexport function requestContext(context: RouterContext): FetchRequestContext {\n  return {\n    peer: guarded(() => context.get(camadaPeerContext), null),\n    env: globalThis.process?.env,\n  };\n}\n\n/** `path` without the router's basename, or null when it lies outside it. */\nfunction underBasename(path: string, basename: string | undefined): string | null {\n  const base = (basename ?? '').replace(/\\/+$/, '');\n  if (!base) return path;\n  if (path === base) return '/';\n  return path.startsWith(base + '/') ? path.slice(base.length) : null;\n}\n\n/** Whether `pathname` is React Router's client fetching `<path>.data` (any method). */\nconst isDataPath = (pathname: string): boolean => pathname.endsWith('.data');\nconst isDataRequest = (req: Request): boolean => isDataPath(new URL(req.url).pathname);\n\n/** A challenged client-side navigation: React Router's client fetches `<path>.data` (`/_.data` for a\n *  path ending in `/`) and throws any 4xx without `X-Remix-Response` into the route's error\n *  boundary, so core's 403 JSON would show the app's error page, never the challenge. Answer it\n *  in React Router's single-fetch redirect form instead: 204 + `X-Remix-Redirect` +\n *  `X-Remix-Reload-Document`, which the client turns into a document navigation\n *  (`window.location.assign`) that meets the HTML challenge (camada-all-wjln). A GET reloads the\n *  page itself. A non-GET (`fetcher.submit`, `fetcher.load` of a resource route, `<Form\n *  action=/other>`) targets a route that may have no page, so it reloads the same-origin page it\n *  came from (the Referer), else the data path. The location goes out without the router's\n *  basename, which the client adds back. Any other answer, and every request that is not a\n *  `.data` fetch, is left as it is. */\nexport function forNavigation(req: Request, res: Response, basename?: string): Response {\n  return guarded(() => {\n    if (res.status !== 403 || res.headers.get('x-camada-challenge') !== '1') return res;\n    const url = new URL(req.url);\n    if (!isDataPath(url.pathname)) return res;\n    url.pathname = url.pathname.endsWith('/_.data') ? url.pathname.slice(0, -'_.data'.length)\n      : url.pathname.endsWith('/_root.data') ? url.pathname.slice(0, -'_root.data'.length)   // Remix v2's spelling of the root\n      : url.pathname.slice(0, -'.data'.length);\n    url.searchParams.delete('_routes');\n    let to = underBasename(url.pathname, basename) ?? '/';\n    to = safeReturnTo(to + url.search);\n    if (req.method !== 'GET' && req.method !== 'HEAD') to = fromReferer(req, url.origin, basename) ?? to;\n    void res.body?.cancel().catch(() => {});\n    return new Response(null, {\n      status: 204,\n      headers: {\n        'X-Remix-Redirect': to, 'X-Remix-Status': '302', 'X-Remix-Reload-Document': 'true',\n        'cache-control': 'no-store', 'x-camada-challenge': '1',\n      },\n    });\n  }, res);\n}\n\n/** camada's own answer (block, challenge, verify, beacon), in the form the router sends. Where a custom\n *  server passed its Node response in `camadaResponseContext`, the headers that answer sets are\n *  removed from it first: the Express adapter appends, so an upstream policy or cache header\n *  would otherwise go out next to the answer's own (R7-2). Set-Cookie is the app's and stays. */\nexport function answered(req: Request, context: RouterContext, res: Response, basename?: string): Response {\n  const out = forNavigation(req, res, basename);\n  guarded(() => {\n    const node = context.get(camadaResponseContext);\n    if (!node || typeof node.removeHeader !== 'function') return;\n    for (const k of out.headers.keys()) if (k !== 'set-cookie') node.removeHeader(k);\n    if (out.headers.has('content-security-policy')) node.removeHeader('content-security-policy-report-only');\n  }, undefined);\n  return out;\n}\n\n/** The same-origin Referer's path and query (without the basename), when it is a safe return target. */\nfunction fromReferer(req: Request, origin: string, basename: string | undefined): string | null {\n  const raw = req.headers.get('referer');\n  if (!raw) return null;\n  let ref: URL;\n  try { ref = new URL(raw); } catch { return null; }\n  if (ref.origin !== origin) return null;\n  const path = underBasename(ref.pathname, basename);\n  if (path === null) return null;\n  const to = path + ref.search;\n  return safeReturnTo(to) === to ? to : null;\n}\n\nexport function camada(opts: CamadaRemixOptions = {}): MiddlewareFunction<Response> {\n  const cam = instanceFor(opts);\n  return async ({ request, context }, next) => {\n    const r = await cam.before(request, { ...requestContext(context), navigation: isDataRequest(request) });\n    if (!r) return next();\n    if (r.response) return answered(request, context, r.response, opts.basename);   // block, challenge, verify, beacon: answered without the app\n    guarded(() => context.set(camadaContext, r.vars), undefined);\n    let res: Response;\n    try {\n      res = await next();\n    } catch (err) {\n      // A thrown Response (a redirect from a downstream middleware) is the answer, so it carries\n      // the status and the cookie; anything else lands in the router's error boundary as a 500.\n      if (err instanceof Response) {\n        cam.after(request, r.vars, err.status);\n        throw withRid(r.vars.sessionCookie ? withSetCookie(err, r.vars.sessionCookie) : err, r.vars);\n      }\n      cam.after(request, r.vars, 500);\n      throw err;\n    }\n    return cam.finish(request, r.vars, r.vars.sessionCookie ? withSetCookie(res, r.vars.sessionCookie) : res);   // an SSE body ships once it has gone out; anything else now\n  };\n}\n","// Per-request state the middleware leaves on React Router's context for the two helpers an app\n// calls from its own loaders and actions: `scriptTag(context)` (the beacon tag) and\n// `track(context, event, data)` (an app-context outcome). When the middleware did not run for\n// this request (no key, CAMADA_DISABLED, or a request it answered itself) the slot is empty and\n// both helpers stand down.\nimport { createContext, type RouterContextProvider } from 'react-router';\nimport { guarded } from '@camada/core';\nimport { track as coreTrack, scriptTag as coreScriptTag, type FetchVars } from '@camada/core/fetch';\n\n// Defaults are null, not undefined: React Router's `get()` throws on a context that has neither\n// a value nor a default, and the helpers must stand down silently where the middleware did not run.\n/** The vars the middleware kept for this request; null where it did not run. Private to the package: track() and scriptTag() are the API. */\nexport const camadaContext = createContext<FetchVars | null>(null);\n\n/** The socket address a custom server vouches for (set from `getLoadContext`); null = nothing vouched. */\nexport const camadaPeerContext = createContext<string | null>(null);\n\n/** The Node response a custom server hands camada (Express's `res`, set from `getLoadContext(req, res)`).\n *  @react-router/express writes an answer's headers with `res.append`, so a header an Express\n *  middleware already set (helmet's Content-Security-Policy) would go out twice; with this, camada\n *  removes the ones its own answer replaces first. Null = nothing handed over. */\nexport const camadaResponseContext = createContext<{ removeHeader(name: string): void } | null>(null);\n\n/** Loaders, actions and middleware all receive the same read-only provider. */\nexport type RouterContext = Readonly<RouterContextProvider>;\n\nconst readSlot = (context: RouterContext): FetchVars | undefined => guarded(() => context.get(camadaContext) ?? undefined, undefined);\n\n/**\n * Records an outcome the app knows and the wire cannot show: `login_failed`, `login_succeeded`,\n * `signup`, `password_reset`, `mfa_failed`, `payment_failed`, `payment_succeeded`, `coupon_failed`\n * (free-form; that vocabulary is what the analyst's rules read). Joined to this request's event\n * through its rid and session; the user identifier is HMAC-hashed in-process. Never throws,\n * never rejects, and is a no-op where the middleware did not run.\n */\nexport const track = (context: RouterContext, event: string, data?: { user?: string }): Promise<void> => coreTrack(readSlot(context), event, data);\n\n/** The `<script>` tag for an HTML response — `''` when camada is off for this request or the tenant turned the beacon off. */\nexport const scriptTag = (context: RouterContext): string => coreScriptTag(readSlot(context));\n","{\n  \"name\": \"@camada/remix\",\n  \"version\": \"0.2.0\",\n  \"license\": \"MIT\",\n  \"type\": \"module\",\n  \"engines\": {\n    \"node\": \">=20\"\n  },\n  \"files\": [\n    \"dist\",\n    \"README.md\",\n    \"LICENSE\"\n  ],\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"dev\": \"tsup --watch\",\n    \"test\": \"vitest run\",\n    \"check\": \"tsc --noEmit\",\n    \"check:readme-build\": \"scripts/readme-build-check.sh\"\n  },\n  \"description\": \"camada SDK for React Router framework mode (Remix): snapshot enforcement in a root middleware, first-party challenge and beacon route, track() outcomes\",\n  \"exports\": {\n    \".\": {\n      \"import\": {\n        \"types\": \"./dist/index.d.ts\",\n        \"default\": \"./dist/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/index.d.cts\",\n        \"default\": \"./dist/index.cjs\"\n      }\n    }\n  },\n  \"main\": \"./dist/index.cjs\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"dependencies\": {\n    \"@camada/browser\": \"file:../camada-browser\",\n    \"@camada/core\": \"file:../camada-core\"\n  },\n  \"peerDependencies\": {\n    \"react-router\": \">=7.9\"\n  },\n  \"devDependencies\": {\n    \"@react-router/express\": \"^8.3.1\",\n    \"@types/express\": \"^5.0.6\",\n    \"@types/node\": \"^22.10.0\",\n    \"express\": \"^5.3.0\",\n    \"helmet\": \"^8.3.0\",\n    \"react-router\": \"^8.3.1\",\n    \"tsup\": \"^8.3.5\",\n    \"typescript\": \"^5.7.2\",\n    \"vitest\": \"^3.0.0\"\n  }\n}\n","// The SDK's wire identity (SDK-03): x-camada-sdk: <package>/<version>. Named JSON imports are\n// inlined and tree-shaken by tsup at build, so dist carries two literals — no runtime fs read.\nimport { name, version } from '../package.json';\nexport const SDK_ID = `${name}/${version}`;\n","// The resource route for the beacon endpoints (routes.ts: route('/_cam/*', 'routes/cam.tsx')).\n// React Router runs middleware only for a matched route, so without a route under /_cam/* the\n// root middleware never sees the script or the relay and the router 404s them — the same reason\n// @camada/next has camadaRoute(). before() re-runs the verdict, so a blocked client gets its\n// 403 here too, and with the root middleware mounted it answers first and this never runs.\nimport type { ActionFunctionArgs, LoaderFunctionArgs } from 'react-router';\nimport { instanceFor, requestContext, answered, type CamadaRemixOptions } from './camada.js';\n\ntype Handler<A> = (args: A) => Promise<Response>;\n\nexport function camadaRoute(opts: CamadaRemixOptions = {}): { loader: Handler<LoaderFunctionArgs>; action: Handler<ActionFunctionArgs> } {\n  const cam = instanceFor(opts);\n  const answer: Handler<LoaderFunctionArgs | ActionFunctionArgs> = async ({ request, context }) => {\n    const r = await cam.before(request, requestContext(context));\n    return r?.response ? answered(request, context, r.response, opts.basename) : new Response(null, { status: 404 });   // not a beacon path, or camada inert: nothing to serve\n  };\n  return { loader: answer, action: answer };\n}\n"],"mappings":";AAOA,OAAO,UAAU;AACjB,SAAS,WAAAA,UAAS,cAAc,iBAAiB;AACjD,SAAS,mBAAmB,eAAe,eAAoG;;;ACJ/I,SAAS,qBAAiD;AAC1D,SAAS,eAAe;AACxB,SAAS,SAAS,WAAW,aAAa,qBAAqC;AAKxE,IAAM,gBAAgB,cAAgC,IAAI;AAG1D,IAAM,oBAAoB,cAA6B,IAAI;AAM3D,IAAM,wBAAwB,cAA2D,IAAI;AAKpG,IAAM,WAAW,CAAC,YAAkD,QAAQ,MAAM,QAAQ,IAAI,aAAa,KAAK,QAAW,MAAS;AAS7H,IAAM,QAAQ,CAAC,SAAwB,OAAe,SAA4C,UAAU,SAAS,OAAO,GAAG,OAAO,IAAI;AAG1I,IAAM,YAAY,CAAC,YAAmC,cAAc,SAAS,OAAO,CAAC;;;ACrC1F,WAAQ;AACR,cAAW;;;ACCN,IAAM,SAAS,GAAG,IAAI,IAAI,OAAO;;;AHuBxC,IAAM,YAAY,oBAAI,IAAiB;AACvC,IAAM,QAAQ,oBAAI,IAAwD;AAG1E,IAAM,aAAa,CAAC,MAClB,KAAK,UAAU,GAAG,CAAC,GAAG,MAAgB,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC,IAAI,OAAO,YAAY,OAAO,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAE,CAAC,IAAI,CAAE;AAG9K,IAAM,cAAc,CAAC,YAAgCC,WAA0B,cAAc,cAAc,QAAQ,UAAUA,KAAI;AAEjI,SAAS,YAAY,QAA4B,CAAC,GAAgB;AAMvE,QAAM,EAAE,UAAU,GAAG,KAAK,IAAI;AAG9B,QAAM,QAAQ,YAAY,IAAI,QAAQ,QAAQ,EAAE;AAChD,QAAM,aAAa,KAAK,eAAe,OAAO,GAAG,IAAI,eAAe;AACpE,QAAM,SAAS,KAAK,UAAU,YAAY,YAAY,IAAI;AAC1D,QAAM,OAAO;AAAA,IACX,GAAG;AAAA,IACH,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACnC;AAAA,IACA,eAAe,KAAK,iBAAiB,YAAY,YAAY,WAAW;AAAA,EAC1E;AACA,QAAM,EAAE,WAAW,GAAG,aAAa,IAAI;AACvC,QAAM,MAAM,WAAW,YAAY;AACnC,MAAI,SAAS,MAAM,IAAI,SAAS;AAChC,MAAI,CAAC,OAAQ,OAAM,IAAI,WAAY,SAAS,oBAAI,IAAI,CAAE;AACtD,MAAI,MAAM,OAAO,IAAI,GAAG;AACxB,MAAI,CAAC,KAAK;AACR,UAAM,kBAAkB,EAAE,KAAK,WAAW,KAAK,QAAQ,KAAK,GAAG,IAAI;AACnE,WAAO,IAAI,KAAK,GAAG;AACnB,cAAU,IAAI,GAAG;AAAA,EACnB;AACA,SAAO;AACT;AAGO,SAAS,cAAoB;AAClC,aAAW,OAAO,UAAW,KAAI,MAAM;AACzC;AAIO,SAAS,eAAe,SAA6C;AAC1E,SAAO;AAAA,IACL,MAAMC,SAAQ,MAAM,QAAQ,IAAI,iBAAiB,GAAG,IAAI;AAAA,IACxD,KAAK,WAAW,SAAS;AAAA,EAC3B;AACF;AAGA,SAAS,cAAc,MAAc,UAA6C;AAChF,QAAM,QAAQ,YAAY,IAAI,QAAQ,QAAQ,EAAE;AAChD,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,SAAS,KAAM,QAAO;AAC1B,SAAO,KAAK,WAAW,OAAO,GAAG,IAAI,KAAK,MAAM,KAAK,MAAM,IAAI;AACjE;AAGA,IAAM,aAAa,CAAC,aAA8B,SAAS,SAAS,OAAO;AAC3E,IAAM,gBAAgB,CAAC,QAA0B,WAAW,IAAI,IAAI,IAAI,GAAG,EAAE,QAAQ;AAa9E,SAAS,cAAc,KAAc,KAAe,UAA6B;AACtF,SAAOA,SAAQ,MAAM;AACnB,QAAI,IAAI,WAAW,OAAO,IAAI,QAAQ,IAAI,oBAAoB,MAAM,IAAK,QAAO;AAChF,UAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAI,CAAC,WAAW,IAAI,QAAQ,EAAG,QAAO;AACtC,QAAI,WAAW,IAAI,SAAS,SAAS,SAAS,IAAI,IAAI,SAAS,MAAM,GAAG,CAAC,SAAS,MAAM,IACpF,IAAI,SAAS,SAAS,aAAa,IAAI,IAAI,SAAS,MAAM,GAAG,CAAC,aAAa,MAAM,IACjF,IAAI,SAAS,MAAM,GAAG,CAAC,QAAQ,MAAM;AACzC,QAAI,aAAa,OAAO,SAAS;AACjC,QAAI,KAAK,cAAc,IAAI,UAAU,QAAQ,KAAK;AAClD,SAAK,aAAa,KAAK,IAAI,MAAM;AACjC,QAAI,IAAI,WAAW,SAAS,IAAI,WAAW,OAAQ,MAAK,YAAY,KAAK,IAAI,QAAQ,QAAQ,KAAK;AAClG,SAAK,IAAI,MAAM,OAAO,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AACtC,WAAO,IAAI,SAAS,MAAM;AAAA,MACxB,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,oBAAoB;AAAA,QAAI,kBAAkB;AAAA,QAAO,2BAA2B;AAAA,QAC5E,iBAAiB;AAAA,QAAY,sBAAsB;AAAA,MACrD;AAAA,IACF,CAAC;AAAA,EACH,GAAG,GAAG;AACR;AAMO,SAAS,SAAS,KAAc,SAAwB,KAAe,UAA6B;AACzG,QAAM,MAAM,cAAc,KAAK,KAAK,QAAQ;AAC5C,EAAAA,SAAQ,MAAM;AACZ,UAAM,OAAO,QAAQ,IAAI,qBAAqB;AAC9C,QAAI,CAAC,QAAQ,OAAO,KAAK,iBAAiB,WAAY;AACtD,eAAW,KAAK,IAAI,QAAQ,KAAK,EAAG,KAAI,MAAM,aAAc,MAAK,aAAa,CAAC;AAC/E,QAAI,IAAI,QAAQ,IAAI,yBAAyB,EAAG,MAAK,aAAa,qCAAqC;AAAA,EACzG,GAAG,MAAS;AACZ,SAAO;AACT;AAGA,SAAS,YAAY,KAAc,QAAgB,UAA6C;AAC9F,QAAM,MAAM,IAAI,QAAQ,IAAI,SAAS;AACrC,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI;AACJ,MAAI;AAAE,UAAM,IAAI,IAAI,GAAG;AAAA,EAAG,QAAQ;AAAE,WAAO;AAAA,EAAM;AACjD,MAAI,IAAI,WAAW,OAAQ,QAAO;AAClC,QAAM,OAAO,cAAc,IAAI,UAAU,QAAQ;AACjD,MAAI,SAAS,KAAM,QAAO;AAC1B,QAAM,KAAK,OAAO,IAAI;AACtB,SAAO,aAAa,EAAE,MAAM,KAAK,KAAK;AACxC;AAEO,SAAS,OAAO,OAA2B,CAAC,GAAiC;AAClF,QAAM,MAAM,YAAY,IAAI;AAC5B,SAAO,OAAO,EAAE,SAAS,QAAQ,GAAG,SAAS;AAC3C,UAAM,IAAI,MAAM,IAAI,OAAO,SAAS,EAAE,GAAG,eAAe,OAAO,GAAG,YAAY,cAAc,OAAO,EAAE,CAAC;AACtG,QAAI,CAAC,EAAG,QAAO,KAAK;AACpB,QAAI,EAAE,SAAU,QAAO,SAAS,SAAS,SAAS,EAAE,UAAU,KAAK,QAAQ;AAC3E,IAAAA,SAAQ,MAAM,QAAQ,IAAI,eAAe,EAAE,IAAI,GAAG,MAAS;AAC3D,QAAI;AACJ,QAAI;AACF,YAAM,MAAM,KAAK;AAAA,IACnB,SAAS,KAAK;AAGZ,UAAI,eAAe,UAAU;AAC3B,YAAI,MAAM,SAAS,EAAE,MAAM,IAAI,MAAM;AACrC,cAAM,QAAQ,EAAE,KAAK,gBAAgB,cAAc,KAAK,EAAE,KAAK,aAAa,IAAI,KAAK,EAAE,IAAI;AAAA,MAC7F;AACA,UAAI,MAAM,SAAS,EAAE,MAAM,GAAG;AAC9B,YAAM;AAAA,IACR;AACA,WAAO,IAAI,OAAO,SAAS,EAAE,MAAM,EAAE,KAAK,gBAAgB,cAAc,KAAK,EAAE,KAAK,aAAa,IAAI,GAAG;AAAA,EAC1G;AACF;;;AIvKO,SAAS,YAAY,OAA2B,CAAC,GAAiF;AACvI,QAAM,MAAM,YAAY,IAAI;AAC5B,QAAM,SAA2D,OAAO,EAAE,SAAS,QAAQ,MAAM;AAC/F,UAAM,IAAI,MAAM,IAAI,OAAO,SAAS,eAAe,OAAO,CAAC;AAC3D,WAAO,GAAG,WAAW,SAAS,SAAS,SAAS,EAAE,UAAU,KAAK,QAAQ,IAAI,IAAI,SAAS,MAAM,EAAE,QAAQ,IAAI,CAAC;AAAA,EACjH;AACA,SAAO,EAAE,QAAQ,QAAQ,QAAQ,OAAO;AAC1C;","names":["guarded","name","guarded"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camada/remix",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -14,17 +14,22 @@
   "description": "camada SDK for React Router framework mode (Remix): snapshot enforcement in a root middleware, first-party challenge and beacon route, track() outcomes",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
     }
   },
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "dependencies": {
-    "@camada/core": "^0.5.1",
-    "@camada/browser": "^0.3.0"
+    "@camada/browser": "^0.4.0",
+    "@camada/core": "^0.6.0"
   },
   "peerDependencies": {
     "react-router": ">=7.9"