@cogenta/render 0.1.0

package/dist/pwa/service-worker.js

@@ -0,0 +1,119 @@
+import { chooseStrategy } from './strategy.js';
+import { serviceWorkerMain, tombstoneMain } from './sw-runtime.js';
+import { cacheNameFor, cachesToPurge } from './version.js';
+/**
+ * Generation of the service worker script.
+ *
+ * ## The update strategy, stated in full
+ *
+ * `skipWaiting()` and `clients.claim()` are two calls; the strategy is the four
+ * properties that make those two calls safe.
+ *
+ * **1. Every generation owns its caches.** Cache names embed a version derived
+ * from the offline page, the precache list and the route table
+ * (`computeCacheVersion`). A new deploy therefore writes into new caches and
+ * cannot mix generations, which is what makes immediate activation safe: there
+ * is no window in which half the entries are old.
+ *
+ * **2. Activation purges the previous generations.** `cachesToPurge` returns
+ * every cache of ours whose version is not the current one, and activation
+ * deletes them before claiming clients. Storage does not accumulate one
+ * generation per deploy, and — the part that matters — yesterday's HTML is
+ * *gone*, not merely lower priority.
+ *
+ * **3. Documents are never served from cache while the network works.** Even a
+ * worker that somehow survived a bad deploy cannot pin an old page: the
+ * document strategy is network-first, so the cache answers only when the
+ * network has already failed. This is the property that keeps a mistake
+ * recoverable by deploying a fix, rather than requiring every visitor to clear
+ * their site data.
+ *
+ * **4. There is an exit.** The worker answers a message by purging every cache
+ * it owns and calling `registration.unregister()` — that is the admin's "clear
+ * client cache" button. For clients we can no longer run code on,
+ * `renderTombstoneServiceWorker` produces a worker that unregisters itself on
+ * activation; deploying it at the same URL removes the PWA from every browser
+ * that re-fetches the script, which browsers do at least daily.
+ *
+ * ## What is deliberately *not* done
+ *
+ * The worker does not reload open pages when it activates. A forced reload
+ * destroys scroll position, half-typed comments and video playback, and it
+ * turns one bad deploy into a reload loop. It posts `cogenta:activated`
+ * instead, and the page decides — the registration helper in `client.ts` turns
+ * that into an "a new version is available" prompt.
+ *
+ * The worker is a *classic* script, not an ES module: module workers are still
+ * unevenly supported, and there is nothing to import — the script is
+ * self-contained by construction.
+ */
+/**
+ * Headers the server must send for the service worker script.
+ *
+ * This is not decoration. A worker script cached by the HTTP cache for a year
+ * is the canonical unkillable zombie: the browser's daily update check reads
+ * the stale copy from disk, sees no change, and keeps the old worker alive —
+ * including after the tombstone has been deployed. `no-cache` (revalidate, do
+ * not blindly reuse) is the minimum, and the scope header lets the script live
+ * anywhere while controlling the whole origin.
+ */
+export const SERVICE_WORKER_HEADERS = {
+    'cache-control': 'no-cache, max-age=0, must-revalidate',
+    'content-type': 'text/javascript; charset=utf-8',
+    'service-worker-allowed': '/',
+};
+/**
+ * `Function.prototype.toString` returns the source of the function itself; the
+ * `export` keyword is a separate declaration in the module grammar. Stripping
+ * it anyway costs one line and removes a dependency on that detail of whichever
+ * engine ran `tsc`.
+ */
+function sourceOf(fn) {
+    return String(fn).replace(/^export\s+/, '');
+}
+const BANNER = [
+    '/*',
+    ' * Generated by @cogenta/render. Do not edit: this file is rewritten on every',
+    ' * build, and its content determines the cache generation.',
+    ' *',
+    ' * Serve it with `cache-control: no-cache` (see SERVICE_WORKER_HEADERS). A',
+    ' * worker script held in the HTTP cache cannot be updated or removed.',
+    ' */',
+].join('\n');
+function scriptFor(body) {
+    return `${BANNER}\n${body}\n`;
+}
+export function renderServiceWorker(config) {
+    // Pretty-printed on purpose: this file is the first thing anyone reads when a
+    // browser is serving something unexpected, and a minified route table is
+    // unreadable at exactly that moment.
+    const configLiteral = JSON.stringify(config, null, 2);
+    return scriptFor([
+        `const COGENTA_PWA_CONFIG = ${configLiteral}\n`,
+        sourceOf(cacheNameFor),
+        sourceOf(cachesToPurge),
+        sourceOf(chooseStrategy),
+        sourceOf(serviceWorkerMain),
+        '',
+        'serviceWorkerMain(self, COGENTA_PWA_CONFIG)',
+    ].join('\n\n'));
+}
+/**
+ * The kill switch, as a deployable artefact.
+ *
+ * Deploy this at the URL the real worker was served from. It caches nothing,
+ * intercepts nothing, deletes every cache under `cachePrefix` and unregisters
+ * itself. Keep it deployed for at least one update cycle — twenty-four hours
+ * covers browsers that only check the script once a day — before removing the
+ * route entirely, because a 404 on the worker URL also unregisters the worker
+ * but tells the caches nothing.
+ */
+export function renderTombstoneServiceWorker(cachePrefix) {
+    return scriptFor([
+        `const COGENTA_CACHE_PREFIX = ${JSON.stringify(cachePrefix)}\n`,
+        sourceOf(tombstoneMain),
+        '',
+        'tombstoneMain(self, COGENTA_CACHE_PREFIX)',
+    ].join('\n\n'));
+}
+//# sourceMappingURL=service-worker.js.map

package/dist/pwa/service-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-worker.js","sourceRoot":"","sources":["../../src/pwa/service-worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAElE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAqC;IACtE,eAAe,EAAE,sCAAsC;IACvD,cAAc,EAAE,gCAAgC;IAChD,wBAAwB,EAAE,GAAG;CAC9B,CAAA;AAED;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,EAAiC;IACjD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,MAAM,GAAG;IACb,IAAI;IACJ,+EAA+E;IAC/E,4DAA4D;IAC5D,IAAI;IACJ,4EAA4E;IAC5E,uEAAuE;IACvE,KAAK;CACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,GAAG,MAAM,KAAK,IAAI,IAAI,CAAA;AAC/B,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAiB;IACnD,8EAA8E;IAC9E,yEAAyE;IACzE,qCAAqC;IACrC,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAErD,OAAO,SAAS,CACd;QACE,8BAA8B,aAAa,IAAI;QAC/C,QAAQ,CAAC,YAAY,CAAC;QACtB,QAAQ,CAAC,aAAa,CAAC;QACvB,QAAQ,CAAC,cAAc,CAAC;QACxB,QAAQ,CAAC,iBAAiB,CAAC;QAC3B,EAAE;QACF,6CAA6C;KAC9C,CAAC,IAAI,CAAC,MAAM,CAAC,CACf,CAAA;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAAC,WAAmB;IAC9D,OAAO,SAAS,CACd;QACE,gCAAgC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI;QAC/D,QAAQ,CAAC,aAAa,CAAC;QACvB,EAAE;QACF,2CAA2C;KAC5C,CAAC,IAAI,CAAC,MAAM,CAAC,CACf,CAAA;AACH,CAAC"}

package/dist/pwa/strategy.d.ts

@@ -0,0 +1,36 @@
+import type { RequestDescriptor, RouteRule, StrategyDecision } from './types.js';
+/**
+ * Which strategy answers which request, and why.
+ *
+ * The rule that governs every choice below: **a resource may be served from
+ * cache without revalidation only when its URL changes whenever its content
+ * changes.** Fingerprinted assets satisfy that. Nothing else on a CMS-driven
+ * site does — an author republishes an article at the same URL, replaces an
+ * image at the same path, fixes a typo in a JSON feed. Serving those cache-first
+ * is exactly the "stale content forever" failure the L3 spec warns about.
+ */
+/**
+ * A URL is treated as immutable when it lives under Astro's hashed asset
+ * directory or carries a content hash in its filename. Both forms change on
+ * every content change, which is the entire justification for cache-first.
+ */
+export declare const IMMUTABLE_ASSET_PATTERN = "(^/_astro/)|(\\.[0-9a-f]{8,}\\.[a-z0-9]+(?:$|\\?))";
+/**
+ * The default route table, in priority order. Each rule states its bucket, so
+ * caches stay separable, and its cap, so no bucket can grow without bound.
+ */
+export declare const DEFAULT_ROUTES: readonly RouteRule[];
+/**
+ * Picks the strategy for one request.
+ *
+ * Pure, total, and free of any reference to module scope — this function is
+ * inlined verbatim into the generated service worker (see `runtime-source.ts`)
+ * so that the behaviour under test and the behaviour shipped are the same text.
+ *
+ * The bypasses come first and are deliberately generous. Every one of them is a
+ * case where storing a response would produce a wrong answer later, and a
+ * service worker that returns a wrong answer is worse than no service worker:
+ * it is a wrong answer nobody can reproduce without clearing site data.
+ */
+export declare function chooseStrategy(request: RequestDescriptor, routes: readonly RouteRule[]): StrategyDecision;
+//# sourceMappingURL=strategy.d.ts.map

package/dist/pwa/strategy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.d.ts","sourceRoot":"","sources":["../../src/pwa/strategy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAEhF;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,uDAAuD,CAAA;AAE3F;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,SAAS,EAuF9C,CAAA;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,SAAS,SAAS,EAAE,GAC3B,gBAAgB,CA6DlB"}

package/dist/pwa/strategy.js

@@ -0,0 +1,180 @@
+/**
+ * Which strategy answers which request, and why.
+ *
+ * The rule that governs every choice below: **a resource may be served from
+ * cache without revalidation only when its URL changes whenever its content
+ * changes.** Fingerprinted assets satisfy that. Nothing else on a CMS-driven
+ * site does — an author republishes an article at the same URL, replaces an
+ * image at the same path, fixes a typo in a JSON feed. Serving those cache-first
+ * is exactly the "stale content forever" failure the L3 spec warns about.
+ */
+/**
+ * A URL is treated as immutable when it lives under Astro's hashed asset
+ * directory or carries a content hash in its filename. Both forms change on
+ * every content change, which is the entire justification for cache-first.
+ */
+export const IMMUTABLE_ASSET_PATTERN = '(^/_astro/)|(\\.[0-9a-f]{8,}\\.[a-z0-9]+(?:$|\\?))';
+/**
+ * The default route table, in priority order. Each rule states its bucket, so
+ * caches stay separable, and its cap, so no bucket can grow without bound.
+ */
+export const DEFAULT_ROUTES = [
+    {
+        // HTML is the index of everything else: it names the asset URLs, the nav,
+        // the current article. Stale HTML points at assets a purge has already
+        // deleted, so a cache-first document is both wrong and broken. Network
+        // first, with a short timeout so a captive portal or a dead mobile leg
+        // falls back to the last copy instead of hanging on a white screen.
+        id: 'documents',
+        destinations: ['document'],
+        pattern: null,
+        crossOrigin: false,
+        strategy: 'network-first',
+        bucket: 'documents',
+        maxEntries: 50,
+        networkTimeoutMs: 3000,
+    },
+    {
+        // Fingerprinted assets. The URL is a content hash, so the cached body can
+        // never be wrong; revalidating it would only cost a round trip. This is the
+        // one and only place cache-first is safe, and it is where the offline win
+        // actually comes from.
+        id: 'immutable-assets',
+        destinations: ['script', 'style', 'font', 'worker'],
+        pattern: IMMUTABLE_ASSET_PATTERN,
+        crossOrigin: false,
+        strategy: 'cache-first',
+        bucket: 'assets',
+        maxEntries: 200,
+        networkTimeoutMs: null,
+    },
+    {
+        // Scripts, stylesheets and fonts served from a stable URL. The body can
+        // change under that URL, so cache-first would pin an old build; but they
+        // are render-blocking, so network-first would cost a round trip on every
+        // page. Stale-while-revalidate is the honest middle: fast now, correct on
+        // the next navigation.
+        id: 'mutable-assets',
+        destinations: ['script', 'style', 'font'],
+        pattern: null,
+        crossOrigin: false,
+        strategy: 'stale-while-revalidate',
+        bucket: 'assets',
+        maxEntries: 60,
+        networkTimeoutMs: null,
+    },
+    {
+        // Images are large, replaceable at the same path by an editor, and never
+        // load-bearing for correctness: one page view showing yesterday's crop is a
+        // cosmetic defect, not a wrong answer. Capped, because an image cache is
+        // the one that fills a phone.
+        id: 'images',
+        destinations: ['image'],
+        pattern: null,
+        crossOrigin: false,
+        strategy: 'stale-while-revalidate',
+        bucket: 'images',
+        maxEntries: 80,
+        networkTimeoutMs: null,
+    },
+    {
+        // API data. Never stale-while-revalidate: JSON drives what the interface
+        // asserts, and rendering last week's data as if it were current is the
+        // failure mode users report as "the site is lying". Network first, cached
+        // only so that an offline reader still sees the last state they had, with
+        // a longer timeout than documents because a list endpoint is legitimately
+        // slower than a page.
+        id: 'api-data',
+        destinations: ['', 'empty'],
+        pattern: '^/api/',
+        crossOrigin: false,
+        strategy: 'network-first',
+        bucket: 'data',
+        maxEntries: 40,
+        networkTimeoutMs: 4000,
+    },
+    {
+        // The manifest itself. Rarely changes, tiny, and needed for the install
+        // prompt to appear offline.
+        id: 'manifest',
+        destinations: ['manifest'],
+        pattern: null,
+        crossOrigin: false,
+        strategy: 'stale-while-revalidate',
+        bucket: 'assets',
+        maxEntries: 5,
+        networkTimeoutMs: null,
+    },
+];
+/**
+ * Picks the strategy for one request.
+ *
+ * Pure, total, and free of any reference to module scope — this function is
+ * inlined verbatim into the generated service worker (see `runtime-source.ts`)
+ * so that the behaviour under test and the behaviour shipped are the same text.
+ *
+ * The bypasses come first and are deliberately generous. Every one of them is a
+ * case where storing a response would produce a wrong answer later, and a
+ * service worker that returns a wrong answer is worse than no service worker:
+ * it is a wrong answer nobody can reproduce without clearing site data.
+ */
+export function chooseStrategy(request, routes) {
+    const bypass = (reason) => ({
+        strategy: 'network-only',
+        bucket: 'documents',
+        maxEntries: null,
+        networkTimeoutMs: null,
+        ruleId: 'bypass',
+        reason,
+    });
+    // The Cache API only keys on GET. A POST answered from a cache would be a
+    // silent correctness bug, and a POST *stored* in one would be a data leak.
+    if (request.method !== 'GET')
+        return bypass(`method ${request.method} is not cacheable`);
+    // The caller explicitly asked to skip caches: a hard reload, or a fetch with
+    // `cache: 'no-store'`. Overruling that is how a service worker earns its
+    // reputation for being impossible to bypass.
+    if (request.cacheMode === 'no-store' || request.cacheMode === 'reload') {
+        return bypass(`request cache mode ${request.cacheMode} forbids caching`);
+    }
+    // A ranged response is a fragment. Storing it and later matching a full
+    // request against it hands back a truncated body — the classic broken-video
+    // bug.
+    if (request.hasRange)
+        return bypass('ranged request has a partial body');
+    let pathAndQuery;
+    let sameOrigin;
+    try {
+        const parsed = new URL(request.url);
+        sameOrigin = parsed.origin === request.origin;
+        pathAndQuery = parsed.pathname + parsed.search;
+    }
+    catch {
+        return bypass('request url could not be parsed');
+    }
+    // A navigation is a document even when the destination field is empty, which
+    // it is on some engines for the very first request of a page.
+    const destination = request.mode === 'navigate' ? 'document' : request.destination;
+    for (const rule of routes) {
+        if (!sameOrigin && !rule.crossOrigin)
+            continue;
+        if (rule.destinations.length > 0 && !rule.destinations.includes(destination))
+            continue;
+        if (rule.pattern !== null && !new RegExp(rule.pattern).test(pathAndQuery))
+            continue;
+        return {
+            strategy: rule.strategy,
+            bucket: rule.bucket,
+            maxEntries: rule.maxEntries,
+            networkTimeoutMs: rule.networkTimeoutMs,
+            ruleId: rule.id,
+            reason: `matched rule ${rule.id}`,
+        };
+    }
+    // No rule claimed it, so we do not touch it. Defaulting to a cache here would
+    // mean the service worker quietly takes ownership of resources nobody
+    // reasoned about, including opaque cross-origin responses whose status it
+    // cannot even read.
+    return bypass(sameOrigin ? `no rule matches destination "${destination}"` : 'cross-origin request');
+}
+//# sourceMappingURL=strategy.js.map

package/dist/pwa/strategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strategy.js","sourceRoot":"","sources":["../../src/pwa/strategy.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,oDAAoD,CAAA;AAE3F;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAyB;IAClD;QACE,0EAA0E;QAC1E,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,EAAE,EAAE,WAAW;QACf,YAAY,EAAE,CAAC,UAAU,CAAC;QAC1B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,EAAE;QACd,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,0EAA0E;QAC1E,4EAA4E;QAC5E,0EAA0E;QAC1E,uBAAuB;QACvB,EAAE,EAAE,kBAAkB;QACtB,YAAY,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;QACnD,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,GAAG;QACf,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,wEAAwE;QACxE,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,uBAAuB;QACvB,EAAE,EAAE,gBAAgB;QACpB,YAAY,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC;QACzC,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,EAAE;QACd,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,yEAAyE;QACzE,4EAA4E;QAC5E,yEAAyE;QACzE,8BAA8B;QAC9B,EAAE,EAAE,QAAQ;QACZ,YAAY,EAAE,CAAC,OAAO,CAAC;QACvB,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,EAAE;QACd,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,yEAAyE;QACzE,uEAAuE;QACvE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,sBAAsB;QACtB,EAAE,EAAE,UAAU;QACd,YAAY,EAAE,CAAC,EAAE,EAAE,OAAO,CAAC;QAC3B,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,EAAE;QACd,gBAAgB,EAAE,IAAI;KACvB;IACD;QACE,wEAAwE;QACxE,4BAA4B;QAC5B,EAAE,EAAE,UAAU;QACd,YAAY,EAAE,CAAC,UAAU,CAAC;QAC1B,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,wBAAwB;QAClC,MAAM,EAAE,QAAQ;QAChB,UAAU,EAAE,CAAC;QACb,gBAAgB,EAAE,IAAI;KACvB;CACF,CAAA;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA0B,EAC1B,MAA4B;IAE5B,MAAM,MAAM,GAAG,CAAC,MAAc,EAAoB,EAAE,CAAC,CAAC;QACpD,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,WAAW;QACnB,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,IAAI;QACtB,MAAM,EAAE,QAAQ;QAChB,MAAM;KACP,CAAC,CAAA;IAEF,0EAA0E;IAC1E,2EAA2E;IAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,UAAU,OAAO,CAAC,MAAM,mBAAmB,CAAC,CAAA;IAExF,6EAA6E;IAC7E,yEAAyE;IACzE,6CAA6C;IAC7C,IAAI,OAAO,CAAC,SAAS,KAAK,UAAU,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,sBAAsB,OAAO,CAAC,SAAS,kBAAkB,CAAC,CAAA;IAC1E,CAAC;IAED,wEAAwE;IACxE,4EAA4E;IAC5E,OAAO;IACP,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,mCAAmC,CAAC,CAAA;IAExE,IAAI,YAAoB,CAAA;IACxB,IAAI,UAAmB,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACnC,UAAU,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAA;QAC7C,YAAY,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAA;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,iCAAiC,CAAC,CAAA;IAClD,CAAC;IAED,6EAA6E;IAC7E,8DAA8D;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAA;IAElF,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,SAAQ;QAC9C,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,SAAQ;QACtF,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,SAAQ;QACnF,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,gBAAgB,IAAI,CAAC,EAAE,EAAE;SAClC,CAAA;IACH,CAAC;IAED,8EAA8E;IAC9E,sEAAsE;IACtE,0EAA0E;IAC1E,oBAAoB;IACpB,OAAO,MAAM,CACX,UAAU,CAAC,CAAC,CAAC,gCAAgC,WAAW,GAAG,CAAC,CAAC,CAAC,sBAAsB,CACrF,CAAA;AACH,CAAC"}

package/dist/pwa/sw-runtime.d.ts

@@ -0,0 +1,109 @@
+import type { PwaConfig } from './types.js';
+/**
+ * The service worker runtime, written as ordinary TypeScript.
+ *
+ * It is never *imported* by a browser: `renderServiceWorker` inlines the source
+ * text of these functions into the script it generates. That indirection buys
+ * three things a hand-written string template cannot. The runtime is
+ * type-checked and linted like the rest of the package. The routing decision
+ * shipped to browsers is character-for-character the function the unit tests
+ * exercise, so the two cannot drift. And there is no bundler in the loop, which
+ * matters because a service worker must be one self-contained file served from
+ * the site root.
+ *
+ * The constraint that comes with it: **nothing in this file may reference
+ * module scope.** Only the parameters, and the three helpers that are inlined
+ * alongside (`chooseStrategy`, `cacheNameFor`, `cachesToPurge`). A test asserts
+ * that the generated script defines each of them.
+ *
+ * The scope is typed against the minimal interfaces below rather than
+ * `lib.webworker`: the package compiles with `lib: ES2023`, and a narrow
+ * hand-written surface documents exactly which browser APIs the worker is
+ * allowed to touch.
+ */
+export interface ExtendableEventLike {
+    waitUntil(promise: Promise<unknown>): void;
+}
+export interface HeadersLike {
+    has(name: string): boolean;
+}
+export interface RequestLike {
+    readonly method: string;
+    readonly url: string;
+    readonly destination: string;
+    readonly mode: string;
+    readonly cache: string;
+    readonly headers: HeadersLike;
+}
+export interface ResponseLike {
+    readonly ok: boolean;
+    readonly status: number;
+    clone(): ResponseLike;
+}
+export interface FetchEventLike extends ExtendableEventLike {
+    readonly request: RequestLike;
+    respondWith(response: Promise<ResponseLike>): void;
+}
+export interface MessageEventLike extends ExtendableEventLike {
+    readonly data: unknown;
+}
+export interface CacheLike {
+    match(request: RequestLike | string): Promise<ResponseLike | undefined>;
+    put(request: RequestLike | string, response: ResponseLike): Promise<void>;
+    addAll(urls: readonly string[]): Promise<void>;
+    keys(): Promise<readonly RequestLike[]>;
+    delete(request: RequestLike | string): Promise<boolean>;
+}
+export interface CacheStorageLike {
+    open(name: string): Promise<CacheLike>;
+    keys(): Promise<string[]>;
+    delete(name: string): Promise<boolean>;
+}
+export interface WindowClientLike {
+    postMessage(message: unknown): void;
+}
+export interface ClientsLike {
+    claim(): Promise<void>;
+    matchAll(options: {
+        type: 'window';
+    }): Promise<readonly WindowClientLike[]>;
+}
+export interface ResponseInitLike {
+    readonly status?: number;
+    readonly headers?: Record<string, string>;
+}
+export interface ServiceWorkerScope {
+    addEventListener(type: 'install' | 'activate', handler: (event: ExtendableEventLike) => void): void;
+    addEventListener(type: 'fetch', handler: (event: FetchEventLike) => void): void;
+    addEventListener(type: 'message', handler: (event: MessageEventLike) => void): void;
+    readonly caches: CacheStorageLike;
+    readonly clients: ClientsLike;
+    readonly registration: {
+        unregister(): Promise<boolean>;
+    };
+    readonly location: {
+        readonly origin: string;
+    };
+    readonly Response: new (body: string | null, init?: ResponseInitLike) => ResponseLike;
+    fetch(request: RequestLike): Promise<ResponseLike>;
+    skipWaiting(): Promise<void>;
+    setTimeout(handler: () => void, ms: number): unknown;
+}
+/** Messages the page may send the worker. Part of the public PWA contract. */
+export declare const SW_MESSAGE_PURGE = "cogenta:purge";
+export declare const SW_MESSAGE_UNREGISTER = "cogenta:unregister";
+export declare const SW_MESSAGE_ACTIVATED = "cogenta:activated";
+export declare const SW_MESSAGE_UNREGISTERED = "cogenta:unregistered";
+export declare function serviceWorkerMain(scope: ServiceWorkerScope, config: PwaConfig): void;
+/**
+ * The tombstone worker.
+ *
+ * Deployed at the *same URL* as the real worker when the PWA has to be turned
+ * off. It registers no fetch handler, empties every cache the site owns and
+ * unregisters itself. Browsers re-fetch a service worker script at least every
+ * 24 hours, so shipping this file is the only mechanism that reaches clients we
+ * can no longer run code on — which is precisely the situation the "zombie
+ * worker" incident describes.
+ */
+export declare function tombstoneMain(scope: ServiceWorkerScope, cachePrefix: string): void;
+//# sourceMappingURL=sw-runtime.d.ts.map

package/dist/pwa/sw-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sw-runtime.d.ts","sourceRoot":"","sources":["../../src/pwa/sw-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAuC,MAAM,YAAY,CAAA;AAGhF;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAA;CAC3C;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,KAAK,IAAI,YAAY,CAAA;CACtB;AAED,MAAM,WAAW,cAAe,SAAQ,mBAAmB;IACzD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,IAAI,CAAA;CACnD;AAED,MAAM,WAAW,gBAAiB,SAAQ,mBAAmB;IAC3D,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAA;IACvE,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzE,MAAM,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9C,IAAI,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAA;IACvC,MAAM,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxD;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACzB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;CACpC;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAA;CAC5E;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC1C;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CACd,IAAI,EAAE,SAAS,GAAG,UAAU,EAC5B,OAAO,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,GAC5C,IAAI,CAAA;IACP,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,GAAG,IAAI,CAAA;IAC/E,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,GAAG,IAAI,CAAA;IACnF,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,YAAY,EAAE;QAAE,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAA;IACzD,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9C,QAAQ,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,KAAK,YAAY,CAAA;IACrF,KAAK,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAClD,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5B,UAAU,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAA;CACrD;AAED,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB,kBAAkB,CAAA;AAC/C,eAAO,MAAM,qBAAqB,uBAAuB,CAAA;AACzD,eAAO,MAAM,oBAAoB,sBAAsB,CAAA;AACvD,eAAO,MAAM,uBAAuB,yBAAyB,CAAA;AAE7D,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAiNpF;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAoBlF"}