@canonical/react-ssr 0.27.1-experimental.0 → 0.28.0

package/dist/esm/lib/server/resolveStaticFile.js

@@ -0,0 +1,61 @@
+import path from "node:path";
+import { matchStaticRoute } from "./matchStaticRoute.js";
+/** True when the path's last segment carries a file extension (e.g. `.js`, `.txt`). */
+function hasFileExtension(pathname) {
+    return /\.[a-z0-9]+$/i.test(pathname);
+}
+/**
+ * Resolve the on-disk path for a request under a static mount, or `null` if the
+ * request does not match the mount, is not a static-file request, or attempts to
+ * escape the mount directory.
+ *
+ * Only paths that carry a **file extension** are treated as static, so a root
+ * mount (`/`) serves `/robots.txt`, `/sitemap.xml`, `/favicon.ico`, and the
+ * hashed `/assets/*` while extensionless routes (`/`, `/about`) fall through to
+ * be server-rendered — `index.html` is never served in place of the SSR page.
+ *
+ * Guards against path traversal: the URL tail is decoded (so `%2e%2e`/`%2f`
+ * forms are caught) and rejected if it contains a `..` segment; as defence in
+ * depth the resolved path must remain within the mount directory. This mirrors
+ * the Deno adapter's guard so the bins cannot drift from it.
+ *
+ * @returns The absolute file path to serve, or `null` to skip this mount.
+ */
+export function resolveStaticFile(pathname, mount) {
+    if (!matchStaticRoute(pathname, mount.route))
+        return null;
+    if (!hasFileExtension(pathname))
+        return null;
+    // A root mount serves from the mount dir itself; a prefixed mount strips the
+    // prefix so the remainder resolves under the dir.
+    const tail = mount.route === "/" ? pathname : pathname.slice(mount.route.length);
+    let decoded;
+    try {
+        decoded = decodeURIComponent(tail);
+    }
+    catch {
+        // Malformed percent-encoding — reject.
+        return null;
+    }
+    // Reject any traversal segment (covers `..`, `%2e%2e`, and `%2f`-smuggled
+    // separators since `tail` is decoded above).
+    if (decoded.split(/[/\\]/).includes(".."))
+        return null;
+    // Strip the leading separator so `path.join` cannot treat an absolute-looking
+    // tail (e.g. `/etc/passwd`) as a root and discard the mount directory. Resolve
+    // against the mount and verify the result stays within it — a path that
+    // escapes (via absolute tail or otherwise) is rejected. This containment check
+    // is the real guard; the `..` rejection above is defence in depth.
+    const relative = decoded.replace(/^[/\\]+/, "");
+    const resolvedDir = path.resolve(mount.dir);
+    const resolved = path.resolve(resolvedDir, relative);
+    /* v8 ignore next 4 -- defensive backstop: the `..` rejection and leading-separator
+       strip above already prevent every known escape, so this containment check is
+       not reachable in tests; it stays as a last line of defence against future drift. */
+    if (resolved !== resolvedDir &&
+        !resolved.startsWith(`${resolvedDir}${path.sep}`)) {
+        return null;
+    }
+    return resolved;
+}
+//# sourceMappingURL=resolveStaticFile.js.map

package/dist/esm/lib/server/resolveStaticFile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveStaticFile.js","sourceRoot":"","sources":["../../../../src/lib/server/resolveStaticFile.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAGzD,uFAAuF;AACvF,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,KAAkB;IAElB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7C,6EAA6E;IAC7E,kDAAkD;IAClD,MAAM,IAAI,GACR,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEtE,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,6CAA6C;IAC7C,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvD,8EAA8E;IAC9E,+EAA+E;IAC/E,wEAAwE;IACxE,+EAA+E;IAC/E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrD;;0FAEsF;IACtF,IACE,QAAQ,KAAK,WAAW;QACxB,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EACjD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/esm/lib/server/serveStream.js

@@ -37,7 +37,7 @@ export function serveStream(factory) {
             const result = renderer.renderToPipeableStream();
             await renderer.statusReady;
             res.writeHead(renderer.statusCode, {
-                "Content-Type": "text/html; charset=utf-8",
+                "Content-Type": renderer.contentType ?? "text/html; charset=utf-8",
             });
             result.pipe(res);
             /* v8 ignore next -- finish event fires after stream completes; not triggered in unit tests */

package/dist/esm/lib/server/serveStream.js.map

@@ -1 +1 @@
-{"version":3,"file":"serveStream.js","sourceRoot":"","sources":["../../../../src/lib/server/serveStream.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,WAAW,CACzB,OAMC;IAED,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YACjD,MAAM,QAAQ,CAAC,WAAW,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE;gBACjC,cAAc,EAAE,0BAA0B;aAC3C,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,8FAA8F;YAC9F,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAChD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"serveStream.js","sourceRoot":"","sources":["../../../../src/lib/server/serveStream.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,UAAU,WAAW,CACzB,OAOC;IAED,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,sBAAsB,EAAE,CAAC;YACjD,MAAM,QAAQ,CAAC,WAAW,CAAC;YAC3B,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE;gBACjC,cAAc,EAAE,QAAQ,CAAC,WAAW,IAAI,0BAA0B;aACnE,CAAC,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,8FAA8F;YAC9F,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YAChD,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/lib/server/viteFetchMiddleware.js

@@ -0,0 +1,152 @@
+import { IncomingMessage, ServerResponse } from "node:http";
+import { Socket } from "node:net";
+/**
+ * Bridge Vite's connect-style middleware into a `fetch`-style handler.
+ *
+ * Runtime SSR dev servers built on `Bun.serve` (or any Web `fetch` server)
+ * cannot mount Vite's `(req, res, next)` middleware directly: that stack
+ * expects Node's `http.IncomingMessage` / `ServerResponse`, while `fetch`
+ * deals in Web `Request` / `Response`. Without delegating to Vite, every
+ * request — including `/@vite/client`, `/src/**`, `/@id/**`, `/@fs/**`,
+ * `/@react-refresh`, and `/node_modules/.vite/**` — would have to be
+ * server-rendered, so client modules and HMR assets would be returned as the
+ * SSR HTML page with the wrong `Content-Type` (browsers then block them as
+ * modules and the page never hydrates).
+ *
+ * This helper adapts a Web `Request` into a Node `req`/`res` pair, runs Vite's
+ * middleware against it, and returns a Web `Response` if the middleware handled
+ * the request — or `null` if the stack called `next()` (a page route the
+ * caller should server-render).
+ *
+ * The bridge is **runtime-agnostic**: it depends only on `node:http` /
+ * `node:net` and Web globals (`Request`, `Response`), so it works under Bun,
+ * Node's own `fetch` servers, Deno, and Workers — not just Bun. The `vite`
+ * instance is injected, not imported, keeping this module free of a runtime
+ * Vite dependency.
+ *
+ * The response body is **buffered**: chunks written by the middleware are
+ * collected and the `Response` resolves on `end`, with `status` and `headers`
+ * read from the (by-then-final) `ServerResponse`. This is correct and robust
+ * for dev assets — transformed JS/CSS modules and source maps, which are small
+ * and already in memory when Vite writes them. Streaming would buy near-zero
+ * latency here (SSR render streaming goes through the renderer's
+ * `renderToReadableStream`, never this bridge) while introducing header-timing
+ * and backpressure hazards, so it is deliberately avoided.
+ *
+ * Headers set via `res.writeHead(status, headers)` are captured in addition to
+ * `res.getHeaders()` (Vite's static-file middleware sets `Content-Type` etc.
+ * that way for non-JS assets), and multi-value headers such as `set-cookie` are
+ * preserved as separate entries rather than comma-folded.
+ *
+ * Only `GET`/`HEAD` requests are bridged. A bare `IncomingMessage` carries no
+ * request body, so any middleware that reads one would hang; requests with a
+ * body (and other methods) return `null` so the caller handles them. This
+ * matches Vite's asset/module/HMR surface, which is entirely `GET`/`HEAD`.
+ *
+ * @param vite - A Vite dev server created with `middlewareMode: true`.
+ * @returns A function mapping a Web `Request` to a `Response` (Vite handled it)
+ *   or `null` (a page route, a non-`GET`/`HEAD` request — pass through to SSR).
+ *
+ * @example
+ * ```ts
+ * import { createServer as createViteServer } from "vite";
+ * import { viteFetchMiddleware } from "@canonical/react-ssr/server";
+ *
+ * const vite = await createViteServer({
+ *   server: { middlewareMode: true },
+ *   appType: "custom",
+ * });
+ * const handleAsset = viteFetchMiddleware(vite);
+ *
+ * Bun.serve({
+ *   async fetch(req) {
+ *     const asset = await handleAsset(req);
+ *     if (asset) return asset; // /@vite/client, /src/**, CSS, HMR …
+ *     return ssrRender(req); // page route
+ *   },
+ * });
+ * ```
+ */
+export function viteFetchMiddleware(vite) {
+    return (request) => {
+        // Asset-only contract: a bare IncomingMessage carries no request body, so a
+        // middleware that reads one (e.g. Vite's proxy when `server.proxy` is set)
+        // would hang. Asset/module/HMR requests are all GET/HEAD; pass anything else
+        // through to the caller (page POSTs are server-rendered, not bridged).
+        if (request.method !== "GET" && request.method !== "HEAD") {
+            return Promise.resolve(null);
+        }
+        return new Promise((resolve, reject) => {
+            const url = new URL(request.url);
+            // A bare IncomingMessage needs a socket and a populated, lower-cased
+            // headers object before Vite's middleware runs — Vite reads navigation
+            // hints (e.g. `sec-fetch-mode`) and will throw on an empty header bag.
+            const socket = new Socket();
+            const req = new IncomingMessage(socket);
+            req.url = url.pathname + url.search;
+            req.method = request.method;
+            const headers = {};
+            request.headers.forEach((value, key) => {
+                headers[key.toLowerCase()] = value;
+            });
+            if (!headers.host)
+                headers.host = url.host;
+            req.headers = headers;
+            const res = new ServerResponse(req);
+            const chunks = [];
+            const originalWrite = res.write.bind(res);
+            const originalEnd = res.end.bind(res);
+            const originalWriteHead = res.writeHead.bind(res);
+            // Headers passed to writeHead(status, [statusMessage,] headers) are NOT
+            // returned by res.getHeaders() unless also set via setHeader, so capture
+            // them here. Vite's static (sirv) middleware sets Content-Type, ETag,
+            // Cache-Control this way for non-JS assets (svg, fonts, images, maps).
+            let writeHeadHeaders;
+            res.writeHead = ((statusCode, ...rest) => {
+                const last = rest[rest.length - 1];
+                if (last && typeof last === "object" && !Array.isArray(last)) {
+                    writeHeadHeaders = last;
+                }
+                return originalWriteHead(statusCode, ...rest);
+            });
+            res.write = ((chunk, ...rest) => {
+                chunks.push(Buffer.from(chunk));
+                return originalWrite(chunk, ...rest);
+            });
+            res.end = ((chunk, ...rest) => {
+                if (chunk != null && typeof chunk !== "function") {
+                    chunks.push(Buffer.from(chunk));
+                }
+                const result = originalEnd(chunk, ...rest);
+                // Merge setHeader() headers with writeHead() headers (the latter win),
+                // and preserve multi-value headers (e.g. set-cookie) as separate
+                // entries rather than comma-folding them via String().
+                const responseHeaders = new Headers();
+                const merged = {
+                    ...res.getHeaders(),
+                    ...writeHeadHeaders,
+                };
+                for (const [key, value] of Object.entries(merged)) {
+                    if (value == null)
+                        continue;
+                    if (Array.isArray(value)) {
+                        for (const item of value)
+                            responseHeaders.append(key, String(item));
+                    }
+                    else {
+                        responseHeaders.set(key, String(value));
+                    }
+                }
+                resolve(new Response(chunks.length ? Buffer.concat(chunks) : null, {
+                    status: res.statusCode,
+                    headers: responseHeaders,
+                }));
+                return result;
+            });
+            res.on("error", reject);
+            // `next()` → Vite did not handle it (a page route); the caller renders it.
+            vite.middlewares(req, res, () => resolve(null));
+        });
+    };
+}
+//# sourceMappingURL=viteFetchMiddleware.js.map

package/dist/esm/lib/server/viteFetchMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"viteFetchMiddleware.js","sourceRoot":"","sources":["../../../../src/lib/server/viteFetchMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAkBlC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAA0B;IAE1B,OAAO,CAAC,OAAO,EAAE,EAAE;QACjB,4EAA4E;QAC5E,2EAA2E;QAC3E,6EAA6E;QAC7E,uEAAuE;QACvE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1D,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEjC,qEAAqE;YACrE,uEAAuE;YACvE,uEAAuE;YACvE,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;YACxC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC;YACpC,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAE5B,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACrC,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC;YACrC,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,IAAI;gBAAE,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YAC3C,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;YAEtB,MAAM,GAAG,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;YAEpC,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,iBAAiB,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAElD,wEAAwE;YACxE,yEAAyE;YACzE,sEAAsE;YACtE,uEAAuE;YACvE,IAAI,gBAES,CAAC;YAEd,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,UAAkB,EAAE,GAAG,IAAe,EAAE,EAAE;gBAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBACnC,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7D,gBAAgB,GAAG,IAAgD,CAAC;gBACtE,CAAC;gBACD,OACE,iBACD,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;YACzB,CAAC,CAAgC,CAAC;YAElC,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAc,EAAE,GAAG,IAAe,EAAE,EAAE;gBAClD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAC;gBAC9C,OAAQ,aAAiD,CACvD,KAAK,EACL,GAAG,IAAI,CACR,CAAC;YACJ,CAAC,CAA4B,CAAC;YAE9B,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,KAAc,EAAE,GAAG,IAAe,EAAE,EAAE;gBAChD,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;oBACjD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAmB,CAAC,CAAC,CAAC;gBAChD,CAAC;gBACD,MAAM,MAAM,GAAI,WAAsD,CACpE,KAAK,EACL,GAAG,IAAI,CACR,CAAC;gBAEF,uEAAuE;gBACvE,iEAAiE;gBACjE,uDAAuD;gBACvD,MAAM,eAAe,GAAG,IAAI,OAAO,EAAE,CAAC;gBACtC,MAAM,MAAM,GAA2D;oBACrE,GAAG,GAAG,CAAC,UAAU,EAAE;oBACnB,GAAG,gBAAgB;iBACpB,CAAC;gBACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClD,IAAI,KAAK,IAAI,IAAI;wBAAE,SAAS;oBAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;wBACzB,KAAK,MAAM,IAAI,IAAI,KAAK;4BAAE,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;oBACtE,CAAC;yBAAM,CAAC;wBACN,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC1C,CAAC;gBACH,CAAC;gBAED,OAAO,CACL,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;oBACzD,MAAM,EAAE,GAAG,CAAC,UAAU;oBACtB,OAAO,EAAE,eAAe;iBACzB,CAAC,CACH,CAAC;gBACF,OAAO,MAAM,CAAC;YAChB,CAAC,CAA0B,CAAC;YAE5B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAExB,2EAA2E;YAC3E,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/types/bin/serve-bun.d.ts

@@ -0,0 +1,25 @@
+#!/usr/bin/env bun
+/**
+ * Standalone Bun server for serving an SSR application with stream rendering.
+ *
+ * Uses `Bun.serve()` for the HTTP layer and `Bun.file()` for zero-copy static
+ * file serving. The renderer module must default-export a factory that accepts a
+ * `Request` and returns a renderer with `renderToReadableStream`.
+ *
+ * Argument parsing, port resolution, and static-file matching live in
+ * `@canonical/react-ssr/server` (covered by unit tests); this bin is the thin
+ * Bun-specific shell around them.
+ *
+ * @example
+ * ```sh
+ * # Single static directory
+ * serve-bun dist/server/renderer.js --static assets:dist/client/assets
+ *
+ * # Multiple static directories, custom port
+ * serve-bun dist/server/renderer.js -p 3000 \
+ *   --static assets:dist/client/assets \
+ *   --static public:dist/client/public
+ * ```
+ */
+export {};
+//# sourceMappingURL=serve-bun.d.ts.map

package/dist/types/bin/serve-bun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve-bun.d.ts","sourceRoot":"","sources":["../../../src/bin/serve-bun.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/types/bin/serve-express.d.ts

@@ -2,9 +2,12 @@
 /**
  * Standalone Express server for serving an SSR application.
  *
- * Dynamically imports a renderer module that exports a factory function.
- * The factory receives a Node `IncomingMessage` and returns a renderer.
- * Supports both streaming and string rendering modes.
+ * Dynamically imports a renderer module that default-exports a factory. The
+ * factory receives a Node `IncomingMessage` and returns a renderer. Supports
+ * both streaming (`--streaming`) and string rendering modes.
+ *
+ * Argument parsing and port resolution live in `@canonical/react-ssr/server`
+ * (covered by unit tests); this bin is the thin Express-specific shell.
  *
  * @example
  * ```sh

package/dist/types/bin/serve-express.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve-express.d.ts","sourceRoot":"","sources":["../../../src/bin/serve-express.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;GAoBG"}
+{"version":3,"file":"serve-express.d.ts","sourceRoot":"","sources":["../../../src/bin/serve-express.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;;;;;;;;;;GAuBG"}

package/dist/types/lib/adapter/index.d.ts

@@ -1,3 +1,3 @@
-export { buildCacheControl, getMimeType, matchPattern } from "./mime.js";
+export { buildCacheControl, getMimeType, IMMUTABLE_ASSET_CACHE_CONTROL, matchPattern, } from "./mime.js";
 export type { CacheConfig, RendererFactory, RendererResult, RouteDefinition, StaticAssetConfig, } from "./types.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/lib/adapter/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapter/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzE,YAAY,EACV,WAAW,EACX,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapter/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,6BAA6B,EAC7B,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,WAAW,EACX,eAAe,EACf,cAAc,EACd,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAC"}

package/dist/types/lib/adapter/mime.d.ts

@@ -7,6 +7,13 @@
  *
  * No external dependencies — the lookup is a plain record.
  */
+/**
+ * `Cache-Control` value for immutable, content-hashed static assets (e.g. Vite
+ * build output). One year, immutable — the canonical policy every adapter
+ * applies when serving fingerprinted assets. Centralised here so the three
+ * deployment adapters cannot drift.
+ */
+export declare const IMMUTABLE_ASSET_CACHE_CONTROL = "public, max-age=31536000, immutable";
 /**
  * Look up the MIME type for a file path based on its extension.
  *

package/dist/types/lib/adapter/mime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mime.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapter/mime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA0BH;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKhD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,MAAM,CAOT;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOvE"}
+{"version":3,"file":"mime.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapter/mime.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,wCACH,CAAC;AA0BxC;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKhD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B,GAAG,MAAM,CAOT;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAOvE"}

package/dist/types/lib/adapter/types.d.ts

@@ -65,21 +65,19 @@ export interface CacheConfig {
     staleWhileRevalidate?: number;
 }
 /**
- * Configuration for serving static assets (CSS, JS, images, fonts).
+ * Configuration for serving static assets (CSS, JS, images, fonts) from a
+ * runtime that has no static layer in front of the SSR handler.
  *
- * Each entry maps a URL prefix to a source directory. The adapter serves
- * matching requests from the source using the platform's optimal mechanism
- * (R2 on Cloudflare, CDN on Vercel, filesystem on Deno/Bun).
+ * Only the Deno/Bun adapters use this: their runtimes serve the SSR handler
+ * directly, so the handler reads matching files from the filesystem. Cloudflare
+ * and Vercel do NOT use it — those platforms serve static assets at the edge
+ * before the SSR function runs (Workers Static Assets / the Vercel CDN), so
+ * their adapters take no `staticAssets` config. See each adapter's README.
  */
 export interface StaticAssetConfig {
     /** URL path prefix (e.g. `"/assets"`). */
     urlPrefix: string;
-    /**
-     * Source directory or key prefix.
-     * - Cloudflare: R2 key prefix (e.g. `"assets"`)
-     * - Vercel: not used (static assets served by CDN from `.vercel/output/static/`)
-     * - Deno/Bun: filesystem path (e.g. `"dist/client/assets"`)
-     */
+    /** Filesystem path the prefix maps to (e.g. `"dist/client/assets"`). */
     directory: string;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types/lib/adapter/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapter/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,qFAAqF;IACrF,sBAAsB,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAE1E,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IAEnB,gDAAgD;IAChD,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,cAAc,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;IAEhB,4DAA4D;IAC5D,OAAO,EAAE,eAAe,CAAC;IAEzB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,yDAAyD;IACzD,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,wFAAwF;IACxF,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAElB;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/lib/adapter/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,qFAAqF;IACrF,sBAAsB,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;IAE1E,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IAEnB,gDAAgD;IAChD,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,cAAc,CAAC;AAEnE;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,OAAO,EAAE,MAAM,CAAC;IAEhB,4DAA4D;IAC5D,OAAO,EAAE,eAAe,CAAC;IAEzB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,yDAAyD;IACzD,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,wFAAwF;IACxF,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAElB,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/types/lib/renderer/JSXRenderer.d.ts

@@ -49,6 +49,8 @@ export default class JSXRenderer<TComponent extends ServerEntrypoint<InitialData
      * `renderToString`) or after awaiting `statusReady` (for `renderToPipeableStream`).
      */
     statusCode: number;
+    /** MIME type of the rendered output, for the consumer's `Content-Type` header. */
+    readonly contentType = "text/html; charset=utf-8";
     /**
      * Resolves when `statusCode` is determined.
      *

package/dist/types/lib/renderer/JSXRenderer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"JSXRenderer.d.ts","sourceRoot":"","sources":["../../../../src/lib/renderer/JSXRenderer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAGtE,OAAO,SAAS,MAAM,gBAAgB,CAAC;AACvC,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAmBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,OAAO,OAAO,WAAW,CAC9B,UAAU,SAAS,gBAAgB,CAAC,WAAW,CAAC,EAChD,WAAW,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAoCzC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU;IACxC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW;IAC3C,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe;IApC7C,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAE3C;;;;;;;;OAQG;IACI,UAAU,SAAO;IAExB;;;;;;OAMG;IACI,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAqB;IAEtD;;;;;;;;;;OAUG;gBAEkB,SAAS,EAAE,UAAU,EACrB,WAAW,GAAE,WAA+B,EAC5C,OAAO,GAAE,eAAoB;IAOlD;;;;;;OAMG;IACI,SAAS,IAAI,MAAM;IAI1B;;;;;;OAMG;IACH,SAAS,CAAC,iBAAiB,IAAI,qBAAqB,CAAC,WAAW,CAAC;IAUjE;;;;;;;;;;OAUG;IACH,SAAS,CAAC,sBAAsB,CAC9B,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,EAC7B,IAAI,EAAE,QAAQ,GAAG,SAAS,GACzB,MAAM,EAAE;IAmBX;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,qBAAqB,CAC7B,KAAK,EAAE,qBAAqB,CAAC,WAAW,CAAC,GACxC,6BAA6B;IA8BhC;;;;;;;;;;;;;;OAcG;IACH,sBAAsB,GACpB,SAAS,WAAW,KACnB,OAAO,CAAC,cAAc,CAAC,CAuCxB;IAEF;;;;;;;;;;;;;;OAcG;IACH,sBAAsB,QAAO,oBAAoB,CAkD/C;IAEF;;;;;;;;;;;;OAYG;IACH,cAAc,QAAO,MAAM,CAOzB;CACH"}
+{"version":3,"file":"JSXRenderer.d.ts","sourceRoot":"","sources":["../../../../src/lib/renderer/JSXRenderer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAGtE,OAAO,SAAS,MAAM,gBAAgB,CAAC;AACvC,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAmBpB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,OAAO,OAAO,WAAW,CAC9B,UAAU,SAAS,gBAAgB,CAAC,WAAW,CAAC,EAChD,WAAW,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAuCzC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU;IACxC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE,WAAW;IAC3C,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe;IAvC7C,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAE3C;;;;;;;;OAQG;IACI,UAAU,SAAO;IAExB,kFAAkF;IAClF,SAAgB,WAAW,8BAA8B;IAEzD;;;;;;OAMG;IACI,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAqB;IAEtD;;;;;;;;;;OAUG;gBAEkB,SAAS,EAAE,UAAU,EACrB,WAAW,GAAE,WAA+B,EAC5C,OAAO,GAAE,eAAoB;IAOlD;;;;;;OAMG;IACI,SAAS,IAAI,MAAM;IAI1B;;;;;;OAMG;IACH,SAAS,CAAC,iBAAiB,IAAI,qBAAqB,CAAC,WAAW,CAAC;IAUjE;;;;;;;;;;OAUG;IACH,SAAS,CAAC,sBAAsB,CAC9B,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,EAC7B,IAAI,EAAE,QAAQ,GAAG,SAAS,GACzB,MAAM,EAAE;IAmBX;;;;;;;;;;;;;;OAcG;IACH,SAAS,CAAC,qBAAqB,CAC7B,KAAK,EAAE,qBAAqB,CAAC,WAAW,CAAC,GACxC,6BAA6B;IA8BhC;;;;;;;;;;;;;;OAcG;IACH,sBAAsB,GACpB,SAAS,WAAW,KACnB,OAAO,CAAC,cAAc,CAAC,CAuCxB;IAEF;;;;;;;;;;;;;;OAcG;IACH,sBAAsB,QAAO,oBAAoB,CAkD/C;IAEF;;;;;;;;;;;;OAYG;IACH,cAAc,QAAO,MAAM,CAOzB;CACH"}

package/dist/types/lib/renderer/SitemapRenderer.d.ts

@@ -37,6 +37,8 @@ export default class SitemapRenderer {
      * error handler decides the status code for unexpected failures.
      */
     statusCode: number;
+    /** MIME type of the rendered output, for the consumer's `Content-Type` header. */
+    readonly contentType = "application/xml; charset=utf-8";
     /**
      * Resolves when `statusCode` is determined.
      *

package/dist/types/lib/renderer/SitemapRenderer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SitemapRenderer.d.ts","sourceRoot":"","sources":["../../../../src/lib/renderer/SitemapRenderer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,OAAO,OAAO,eAAe;IA2BhC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE;IACpD,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IA3B1C;;;;;;OAMG;IACI,UAAU,SAAO;IAExB;;;;;;OAMG;IACI,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAqB;IAEtD;;;;;;OAMG;gBAEkB,OAAO,EAAE,SAAS,aAAa,EAAE,EACjC,MAAM,EAAE,aAAa;IAG1C;;;;;;;;OAQG;cACa,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAKnD;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,GAAG,WAAW,EAAE;IAcnE;;;;;;;;OAQG;IACH,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM;IAKxD;;;;;;;;OAQG;IACH,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IASjD;;;;;;;;;OASG;IACH,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM;IA6BtD;;;OAGG;cACa,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAM3C;;;;;;;;;;OAUG;IACH,sBAAsB,GACpB,UAAU,WAAW,KACpB,OAAO,CAAC,cAAc,CAAC,CAWxB;IAEF;;;;;;;;;;OAUG;IACH,sBAAsB,QAAO,oBAAoB,CAqB/C;IAEF;;;;;;;;;;;OAWG;IACH,cAAc,QAAa,OAAO,CAAC,MAAM,CAAC,CAKxC;CACH"}
+{"version":3,"file":"SitemapRenderer.d.ts","sourceRoot":"","sources":["../../../../src/lib/renderer/SitemapRenderer.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,OAAO,OAAO,eAAe;IA8BhC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE;IACpD,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,aAAa;IA9B1C;;;;;;OAMG;IACI,UAAU,SAAO;IAExB,kFAAkF;IAClF,SAAgB,WAAW,oCAAoC;IAE/D;;;;;;OAMG;IACI,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAqB;IAEtD;;;;;;OAMG;gBAEkB,OAAO,EAAE,SAAS,aAAa,EAAE,EACjC,MAAM,EAAE,aAAa;IAG1C;;;;;;;;OAQG;cACa,SAAS,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAKnD;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,GAAG,WAAW,EAAE;IAcnE;;;;;;;;OAQG;IACH,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM;IAKxD;;;;;;;;OAQG;IACH,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IASjD;;;;;;;;;OASG;IACH,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,GAAG,MAAM;IA6BtD;;;OAGG;cACa,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAM3C;;;;;;;;;;OAUG;IACH,sBAAsB,GACpB,UAAU,WAAW,KACpB,OAAO,CAAC,cAAc,CAAC,CAWxB;IAEF;;;;;;;;;;OAUG;IACH,sBAAsB,QAAO,oBAAoB,CAqB/C;IAEF;;;;;;;;;;;OAWG;IACH,cAAc,QAAa,OAAO,CAAC,MAAM,CAAC,CAKxC;CACH"}

package/dist/types/lib/server/StaticMount.d.ts

@@ -0,0 +1,11 @@
+/**
+ * A static mount: a URL route prefix mapped to a filesystem directory.
+ */
+export interface StaticMount {
+    /** URL prefix, always leading-slashed, e.g. `/assets`. The root mount `/`
+     * serves a whole directory. */
+    route: string;
+    /** Absolute directory the route serves from. */
+    dir: string;
+}
+//# sourceMappingURL=StaticMount.d.ts.map

package/dist/types/lib/server/StaticMount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StaticMount.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/StaticMount.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;mCAC+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/types/lib/server/getRequestUrl.d.ts

@@ -0,0 +1,29 @@
+import type { IncomingMessage } from "node:http";
+/**
+ * Extract the request path (`pathname` + `search`) from either a Web `Request`
+ * or a Node `IncomingMessage`.
+ *
+ * The `serve-bun` and `serve-express` bins call a renderer factory with
+ * different request shapes — `serve-bun` passes a Web `Request` (whose `url` is
+ * absolute, e.g. `https://host/a/b?x=1`), while `serve-express` (via
+ * `serveStream`) passes a Node `IncomingMessage` (whose `url` is already a path,
+ * e.g. `/a/b?x=1`). A renderer factory that needs the URL for routing must
+ * handle both; this helper normalises them to a single path string.
+ *
+ * @param request - A Web `Request` or a Node `IncomingMessage`.
+ * @returns The request path including query string, e.g. `/a/b?x=1`. Defaults to
+ *   `/` when no URL is present.
+ *
+ * @example
+ * ```ts
+ * import { JSXRenderer } from "@canonical/react-ssr/renderer";
+ * import { getRequestUrl } from "@canonical/react-ssr/server";
+ *
+ * export default function createRenderer(request: Request | IncomingMessage) {
+ *   const url = getRequestUrl(request);
+ *   return new JSXRenderer(EntryServer, { url }, { htmlString });
+ * }
+ * ```
+ */
+export declare function getRequestUrl(request: Request | IncomingMessage): string;
+//# sourceMappingURL=getRequestUrl.d.ts.map

package/dist/types/lib/server/getRequestUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getRequestUrl.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/getRequestUrl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,eAAe,GAAG,MAAM,CAWxE"}

package/dist/types/lib/server/index.d.ts

@@ -1,3 +1,10 @@
+export { getRequestUrl } from "./getRequestUrl.js";
+export { matchStaticRoute } from "./matchStaticRoute.js";
+export { parseStaticPair } from "./parseStaticPair.js";
+export { resolvePort } from "./resolvePort.js";
+export { resolveStaticFile } from "./resolveStaticFile.js";
+export type { StaticMount } from "./StaticMount.js";
 export { serveStream } from "./serveStream.js";
 export { serveString } from "./serveString.js";
+export { type ViteMiddlewareServer, viteFetchMiddleware, } from "./viteFetchMiddleware.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/lib/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,YAAY,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EACL,KAAK,oBAAoB,EACzB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC"}

package/dist/types/lib/server/matchStaticRoute.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Does `pathname` fall under `route`, matched on a path-segment boundary?
+ *
+ * `/assets` matches `/assets` and `/assets/x` but NOT `/assetsfoo/x` — a plain
+ * `startsWith` would wrongly match the latter. The root mount `/` matches every
+ * path, so a single `:dir` mount can serve a whole built client directory.
+ *
+ * @param pathname - The request pathname (no query string).
+ * @param route - The mount's route prefix.
+ */
+export declare function matchStaticRoute(pathname: string, route: string): boolean;
+//# sourceMappingURL=matchStaticRoute.d.ts.map

package/dist/types/lib/server/matchStaticRoute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matchStaticRoute.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/matchStaticRoute.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIzE"}

package/dist/types/lib/server/parseStaticPair.d.ts

@@ -0,0 +1,12 @@
+import type { StaticMount } from "./StaticMount.js";
+/**
+ * Parse a `route:filepath` pair (e.g. `"assets:dist/client/assets"`) into a
+ * {@link StaticMount}. With no separator the whole string is both the route and
+ * the (cwd-relative) directory; an empty route (`":dist/client"`) is the root
+ * mount. The directory is resolved against `cwd`.
+ *
+ * @param pair - A `"route:filepath"` or bare `"name"` string.
+ * @param cwd - Base directory for resolving the filepath (default `process.cwd()`).
+ */
+export declare function parseStaticPair(pair: string, cwd?: string): StaticMount;
+//# sourceMappingURL=parseStaticPair.d.ts.map

package/dist/types/lib/server/parseStaticPair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseStaticPair.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/parseStaticPair.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,MAAsB,GAC1B,WAAW,CAQb"}

package/dist/types/lib/server/resolvePort.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Resolve the port a `serve-*` bin should listen on.
+ *
+ * Precedence: an explicit `--port`/`-p` flag, then the `PORT` env var, then the
+ * default `5174`. A value that is *present but not a valid TCP port* (non-integer
+ * or outside `1..65535`, including `"0"`) is a user error — it throws rather than
+ * silently falling back to the default, so a typo'd port fails loudly instead of
+ * binding the wrong one. Only an absent value falls through to the default.
+ *
+ * The `5174` default matches the SSR dev servers (`PORT || 5174`), so every SSR
+ * target — dev and preview, Bun and Node — lands on the same port by default.
+ *
+ * @param flag - The `--port`/`-p` value, if supplied.
+ * @param env - The `PORT` env var, if set.
+ * @param fallback - Port to use when neither is supplied (default `5174`).
+ * @returns The resolved port number.
+ * @throws If a supplied value is not an integer in `1..65535`.
+ */
+export declare function resolvePort(flag: string | undefined, env: string | undefined, fallback?: number): number;
+//# sourceMappingURL=resolvePort.d.ts.map

package/dist/types/lib/server/resolvePort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolvePort.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/resolvePort.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,QAAQ,SAAO,GACd,MAAM,CAWR"}

package/dist/types/lib/server/resolveStaticFile.d.ts

@@ -0,0 +1,20 @@
+import type { StaticMount } from "./StaticMount.js";
+/**
+ * Resolve the on-disk path for a request under a static mount, or `null` if the
+ * request does not match the mount, is not a static-file request, or attempts to
+ * escape the mount directory.
+ *
+ * Only paths that carry a **file extension** are treated as static, so a root
+ * mount (`/`) serves `/robots.txt`, `/sitemap.xml`, `/favicon.ico`, and the
+ * hashed `/assets/*` while extensionless routes (`/`, `/about`) fall through to
+ * be server-rendered — `index.html` is never served in place of the SSR page.
+ *
+ * Guards against path traversal: the URL tail is decoded (so `%2e%2e`/`%2f`
+ * forms are caught) and rejected if it contains a `..` segment; as defence in
+ * depth the resolved path must remain within the mount directory. This mirrors
+ * the Deno adapter's guard so the bins cannot drift from it.
+ *
+ * @returns The absolute file path to serve, or `null` to skip this mount.
+ */
+export declare function resolveStaticFile(pathname: string, mount: StaticMount): string | null;
+//# sourceMappingURL=resolveStaticFile.d.ts.map

package/dist/types/lib/server/resolveStaticFile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveStaticFile.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/resolveStaticFile.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAOpD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,WAAW,GACjB,MAAM,GAAG,IAAI,CAuCf"}

package/dist/types/lib/server/serveStream.d.ts

@@ -37,5 +37,6 @@ export declare function serveStream(factory: (req: IncomingMessage) => {
     };
     statusCode: number;
     statusReady: Promise<void>;
+    contentType?: string;
 }): (req: IncomingMessage, res: ServerResponse) => Promise<void>;
 //# sourceMappingURL=serveStream.d.ts.map

package/dist/types/lib/server/serveStream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serveStream.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/serveStream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK;IACjC,sBAAsB,EAAE,MAAM;QAC5B,IAAI,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;KAC9D,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B,IAEa,KAAK,eAAe,EAAE,KAAK,cAAc,mBAiBxD"}
+{"version":3,"file":"serveStream.d.ts","sourceRoot":"","sources":["../../../../src/lib/server/serveStream.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK;IACjC,sBAAsB,EAAE,MAAM;QAC5B,IAAI,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC;KAC9D,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,IAEa,KAAK,eAAe,EAAE,KAAK,cAAc,mBAiBxD"}