@demiurgejs/core 0.2.0-beta.1 → 0.2.0-beta.3

package/README.md

@@ -66,7 +66,9 @@ covers host allowlists, proxy trust, timeouts, and graceful shutdown.
 - `@demiurgejs/core` — routes, document APIs, security, caching, and browser runtime
 - `@demiurgejs/core/node` — production Node HTTP, SSR, and static-file adapter
 - `@demiurgejs/core/static` — static-output adapter
+- `@demiurgejs/core/redis` — Redis-backed cache store with cross-instance tag invalidation
 - `@demiurgejs/core/vite` — Vite framework plugin
+- `@demiurgejs/core/adapter/testing` — adapter capability conformance contract
 - `@demiurgejs/core/data/testing` — cache-store conformance contract
 - `@demiurgejs/core/internal/testing` — explicitly unstable test helpers
 

package/dist/adapter/testing.d.ts

@@ -0,0 +1,33 @@
+import { type CacheStoreFactory } from "../data/testing";
+import type { Adapter } from "./index";
+type MaybePromise<T> = T | Promise<T>;
+export type AdapterUpgradeResult = {
+    headers?: Record<string, string>;
+    status: number;
+};
+export type AdapterBackgroundHost = {
+    shutdown: () => Promise<void>;
+    waitUntil: (promise: Promise<unknown>) => void;
+};
+export type AdapterStaticOutputEntry = {
+    file: string;
+    headers: Record<string, string>;
+    pathname: string;
+};
+export type AdapterStaticOutput = {
+    entries: readonly AdapterStaticOutputEntry[];
+};
+export type AdapterContractProbes = {
+    backgroundLifetime?: () => MaybePromise<AdapterBackgroundHost>;
+    crossOriginIsolationHeaders?: () => MaybePromise<Response>;
+    nonceInjection?: () => MaybePromise<Response>;
+    sharedCache?: CacheStoreFactory;
+    staticOutput?: (outDir: string) => MaybePromise<AdapterStaticOutput>;
+    streaming?: () => MaybePromise<Response>;
+    webSocket?: (request: Request) => MaybePromise<AdapterUpgradeResult>;
+    webTransport?: (request: Request) => MaybePromise<AdapterUpgradeResult>;
+};
+export declare const adapterContractOrigin = "https://adapter.contract.test";
+export declare function verifyAdapterContract(adapter: Adapter, probes: AdapterContractProbes): Promise<void>;
+export {};
+//# sourceMappingURL=testing.d.ts.map

package/dist/adapter/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../src/adapter/testing.ts"],"names":[],"mappings":"AAGA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAE1D,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAKtC,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;CAC9C,CAAC;AAKF,MAAM,MAAM,qBAAqB,GAAG;IAClC,kBAAkB,CAAC,EAAE,MAAM,YAAY,CAAC,qBAAqB,CAAC,CAAC;IAC/D,2BAA2B,CAAC,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC3D,cAAc,CAAC,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9C,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC,mBAAmB,CAAC,CAAC;IACrE,SAAS,CAAC,EAAE,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACrE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,YAAY,CAAC,oBAAoB,CAAC,CAAC;CACzE,CAAC;AAEF,eAAO,MAAM,qBAAqB,kCAAkC,CAAC;AAiBrE,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,qBAAqB,iBAwD9B"}

package/dist/adapter/testing.js

@@ -0,0 +1,251 @@
+import { mkdtemp as C, rm as v, readFile as $ } from "node:fs/promises";
+import { tmpdir as O } from "node:os";
+import { join as p } from "node:path";
+import { verifyCacheStoreContract as S, verifyCacheStoreRefreshContract as N } from "../data/testing.js";
+const u = "https://adapter.contract.test", j = "https://foreign.contract.test", q = [
+  "backgroundLifetime",
+  "crossOriginIsolationHeaders",
+  "nonceInjection",
+  "sharedCache",
+  "staticOutput",
+  "streaming",
+  "webSocket",
+  "webTransport"
+], g = /'nonce-([^']+)'/;
+async function F(t, e) {
+  a(
+    typeof t.name == "string" && t.name.length > 0,
+    "an adapter must carry a name"
+  );
+  for (const n of q) {
+    const i = t.capabilities[n], s = e[n];
+    a(
+      typeof i == "boolean",
+      `an adapter must declare capability "${n}" as a boolean`
+    ), a(
+      !i || !!s,
+      `capability "${n}" is declared true and needs a probe that proves it`
+    ), a(
+      i || !s,
+      `capability "${n}" has a probe but the adapter declares it false`
+    );
+  }
+  e.backgroundLifetime && await J(e.backgroundLifetime), e.crossOriginIsolationHeaders && await B(e.crossOriginIsolationHeaders), e.nonceInjection && await L(e.nonceInjection), e.sharedCache && await R(e.sharedCache), e.staticOutput && await x(e.staticOutput), e.streaming && await I(e.streaming), e.webSocket && await h(e.webSocket, "websocket", 101), e.webTransport && await h(e.webTransport, "webtransport", 200);
+}
+async function I(t) {
+  const e = await t();
+  a(
+    !!e.body,
+    "a streaming response must expose a readable body stream"
+  );
+  const n = e.body.getReader(), i = new TextDecoder();
+  let s = 0, o = "";
+  for (; ; ) {
+    const r = await n.read();
+    if (r.done)
+      break;
+    s += 1, o += i.decode(r.value, { stream: !0 });
+  }
+  o += i.decode(), a(o.length > 0, "a streaming response must deliver a body"), a(
+    s > 1,
+    "a streaming response must deliver its body in more than one chunk"
+  );
+  const c = await t();
+  try {
+    await c.body?.cancel();
+  } catch (r) {
+    throw l(
+      `a streaming response body must accept cancellation, and it failed with ${k(r)}`
+    );
+  }
+}
+async function L(t) {
+  const e = await t(), n = await t(), i = m(e), s = m(n);
+  await n.body?.cancel(), a(
+    !!i,
+    "a nonce-injecting response must declare a content-security-policy nonce source"
+  ), a(
+    !!s && s !== i,
+    "every response must carry a freshly generated nonce"
+  );
+  const o = await e.text();
+  a(
+    o.includes(`nonce="${i}"`),
+    "the rendered document must carry the nonce its header declares"
+  );
+  const c = (e.headers.get("cache-control") ?? "").toLowerCase();
+  a(
+    c.includes("no-store") || c.includes("private"),
+    "a nonce-backed document must not be a shared cache representation"
+  );
+}
+async function B(t) {
+  const e = await t(), n = e.headers.get("cross-origin-embedder-policy");
+  await e.body?.cancel(), a(
+    e.headers.get("cross-origin-opener-policy") === "same-origin",
+    "an isolated response must carry cross-origin-opener-policy same-origin"
+  ), a(
+    n === "require-corp" || n === "credentialless",
+    "an isolated response must carry cross-origin-embedder-policy require-corp or credentialless"
+  ), a(
+    !!e.headers.get("cross-origin-resource-policy"),
+    "an isolated response must carry a cross-origin-resource-policy"
+  );
+}
+async function J(t) {
+  const e = await t();
+  let n = () => {
+  }, i = !1;
+  const s = new Promise((d) => {
+    n = () => {
+      i = !0, d();
+    };
+  });
+  e.waitUntil(s);
+  let o = !1;
+  const c = e.shutdown().then(() => {
+    o = !0;
+  });
+  await H(), a(
+    !o,
+    "shutdown must not complete while background work is pending"
+  ), n(), await c, a(
+    i && o,
+    "shutdown must complete once background work settles"
+  );
+  const r = await t();
+  r.waitUntil(
+    Promise.reject(new Error("Adapter contract background failure."))
+  );
+  try {
+    await r.shutdown(), await r.shutdown();
+  } catch (d) {
+    throw l(
+      `failed background work must not fail shutdown, and it failed with ${k(d)}`
+    );
+  }
+}
+async function R(t) {
+  await S(t), (await t()).acquireRefreshLease && await N(t);
+}
+async function x(t) {
+  const e = await C(p(O(), "demiurge-adapter-contract-"));
+  try {
+    const n = await t(e);
+    a(
+      n.entries.length > 0,
+      "a static build must produce at least one output entry"
+    );
+    const i = /* @__PURE__ */ new Set(), s = /* @__PURE__ */ new Set(), o = /* @__PURE__ */ new Map();
+    for (const r of n.entries) {
+      const d = JSON.stringify(r.file);
+      a(
+        E(r.file),
+        `every output file must stay inside the output directory, and ${d} does not`
+      ), a(
+        !i.has(r.file),
+        `every output entry must own one file, and ${d} repeats`
+      ), a(
+        !s.has(r.pathname),
+        `every output entry must own one pathname, and ${JSON.stringify(r.pathname)} repeats`
+      ), i.add(r.file), s.add(r.pathname);
+      const f = b(r.headers);
+      a(
+        f["set-cookie"] === void 0,
+        `a build artifact must not carry per-request state, and ${d} sets a cookie`
+      ), a(
+        !g.test(f["content-security-policy"] ?? ""),
+        `a build artifact must not depend on a per-request nonce, and ${d} declares one`
+      ), o.set(r.file, await y(e, r.file));
+    }
+    const c = await t(e);
+    a(
+      JSON.stringify(c.entries) === JSON.stringify(n.entries),
+      "a repeated static build must produce the same output entries"
+    );
+    for (const r of c.entries)
+      a(
+        await y(e, r.file) === o.get(r.file),
+        `a repeated static build must write the same file, and ${JSON.stringify(r.file)} changed`
+      );
+  } finally {
+    await v(e, { force: !0, recursive: !0 });
+  }
+}
+async function h(t, e, n) {
+  const i = await t(
+    w(e, u)
+  ), s = b(i.headers ?? {}).upgrade;
+  a(
+    i.status === n,
+    `an accepted ${e} handshake must answer with status ${n}`
+  ), a(
+    s?.toLowerCase() === e,
+    `an accepted ${e} handshake must confirm the negotiated protocol`
+  );
+  const o = await t(w(e, j));
+  a(
+    o.status >= 400 && o.status < 500,
+    `a ${e} handshake from an origin the host does not own must be refused`
+  );
+  const c = await t(
+    new Request(`${u}/`, {
+      headers: { origin: u }
+    })
+  );
+  a(
+    c.status !== n,
+    `a request without a ${e} upgrade must not receive a handshake`
+  );
+}
+function w(t, e) {
+  return new Request(`${u}/`, {
+    headers: {
+      connection: "Upgrade",
+      origin: e,
+      upgrade: t
+    }
+  });
+}
+function m(t) {
+  const e = t.headers.get("content-security-policy") ?? "";
+  return g.exec(e)?.[1];
+}
+async function y(t, e) {
+  try {
+    return await $(p(t, e), "utf8");
+  } catch {
+    throw l(
+      `every output entry must write its file, and ${JSON.stringify(e)} is missing`
+    );
+  }
+}
+function E(t) {
+  return !!t && !t.startsWith("/") && !t.startsWith("\\") && !t.split(/[\\/]/).includes("..");
+}
+function b(t) {
+  return Object.fromEntries(
+    Object.entries(t).map(([e, n]) => [
+      e.toLowerCase(),
+      n
+    ])
+  );
+}
+function H() {
+  return new Promise((t) => setTimeout(t, 0));
+}
+function k(t) {
+  return t instanceof Error ? t.message : String(t);
+}
+function a(t, e) {
+  if (!t)
+    throw l(e);
+}
+function l(t) {
+  return new Error(`Adapter contract failed: ${t}.`);
+}
+export {
+  u as adapterContractOrigin,
+  F as verifyAdapterContract
+};
+//# sourceMappingURL=testing.js.map

package/dist/adapter/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sources":["../../src/adapter/testing.ts"],"sourcesContent":["import { mkdtemp, readFile, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport {\n  verifyCacheStoreContract,\n  verifyCacheStoreRefreshContract,\n  type CacheStoreFactory,\n} from \"../data/testing\";\nimport type { Adapter, AdapterCapability } from \"./index\";\n\ntype MaybePromise<T> = T | Promise<T>;\n\n// A host answers a protocol upgrade before it has an HTTP response body, and\n// the Response constructor rejects status 101. A handshake is reported as a\n// plain status and header pair instead.\nexport type AdapterUpgradeResult = {\n  headers?: Record<string, string>;\n  status: number;\n};\n\nexport type AdapterBackgroundHost = {\n  shutdown: () => Promise<void>;\n  waitUntil: (promise: Promise<unknown>) => void;\n};\n\nexport type AdapterStaticOutputEntry = {\n  file: string;\n  headers: Record<string, string>;\n  pathname: string;\n};\n\nexport type AdapterStaticOutput = {\n  entries: readonly AdapterStaticOutputEntry[];\n};\n\n// One probe per capability. A probe runs the adapter through the smallest\n// deployment that can prove the capability, and the contract reads the result.\n// Every probe may be called more than once.\nexport type AdapterContractProbes = {\n  backgroundLifetime?: () => MaybePromise<AdapterBackgroundHost>;\n  crossOriginIsolationHeaders?: () => MaybePromise<Response>;\n  nonceInjection?: () => MaybePromise<Response>;\n  sharedCache?: CacheStoreFactory;\n  staticOutput?: (outDir: string) => MaybePromise<AdapterStaticOutput>;\n  streaming?: () => MaybePromise<Response>;\n  webSocket?: (request: Request) => MaybePromise<AdapterUpgradeResult>;\n  webTransport?: (request: Request) => MaybePromise<AdapterUpgradeResult>;\n};\n\nexport const adapterContractOrigin = \"https://adapter.contract.test\";\n\nconst foreignOrigin = \"https://foreign.contract.test\";\n\nconst contractCapabilities = [\n  \"backgroundLifetime\",\n  \"crossOriginIsolationHeaders\",\n  \"nonceInjection\",\n  \"sharedCache\",\n  \"staticOutput\",\n  \"streaming\",\n  \"webSocket\",\n  \"webTransport\",\n] as const satisfies readonly AdapterCapability[];\n\nconst noncePattern = /'nonce-([^']+)'/;\n\nexport async function verifyAdapterContract(\n  adapter: Adapter,\n  probes: AdapterContractProbes,\n) {\n  assert(\n    typeof adapter.name === \"string\" && adapter.name.length > 0,\n    \"an adapter must carry a name\",\n  );\n\n  for (const capability of contractCapabilities) {\n    const declared = adapter.capabilities[capability];\n    const probe = probes[capability];\n\n    assert(\n      typeof declared === \"boolean\",\n      `an adapter must declare capability \"${capability}\" as a boolean`,\n    );\n    assert(\n      !declared || Boolean(probe),\n      `capability \"${capability}\" is declared true and needs a probe that proves it`,\n    );\n    assert(\n      declared || !probe,\n      `capability \"${capability}\" has a probe but the adapter declares it false`,\n    );\n  }\n\n  if (probes.backgroundLifetime) {\n    await verifyBackgroundLifetimeContract(probes.backgroundLifetime);\n  }\n\n  if (probes.crossOriginIsolationHeaders) {\n    await verifyCrossOriginIsolationContract(probes.crossOriginIsolationHeaders);\n  }\n\n  if (probes.nonceInjection) {\n    await verifyNonceInjectionContract(probes.nonceInjection);\n  }\n\n  if (probes.sharedCache) {\n    await verifySharedCacheContract(probes.sharedCache);\n  }\n\n  if (probes.staticOutput) {\n    await verifyStaticOutputContract(probes.staticOutput);\n  }\n\n  if (probes.streaming) {\n    await verifyStreamingContract(probes.streaming);\n  }\n\n  if (probes.webSocket) {\n    await verifyUpgradeContract(probes.webSocket, \"websocket\", 101);\n  }\n\n  if (probes.webTransport) {\n    await verifyUpgradeContract(probes.webTransport, \"webtransport\", 200);\n  }\n}\n\n// A streamed body reaches the client before the render finishes, so it arrives\n// as more than one chunk. A buffered response fails this, and a client that\n// disconnects early must not fault the host.\nasync function verifyStreamingContract(\n  probe: NonNullable<AdapterContractProbes[\"streaming\"]>,\n) {\n  const response = await probe();\n\n  assert(\n    Boolean(response.body),\n    \"a streaming response must expose a readable body stream\",\n  );\n\n  const reader = response.body!.getReader();\n  const decoder = new TextDecoder();\n  let chunks = 0;\n  let body = \"\";\n\n  while (true) {\n    const chunk = await reader.read();\n\n    if (chunk.done) {\n      break;\n    }\n\n    chunks += 1;\n    body += decoder.decode(chunk.value, { stream: true });\n  }\n\n  body += decoder.decode();\n\n  assert(body.length > 0, \"a streaming response must deliver a body\");\n  assert(\n    chunks > 1,\n    \"a streaming response must deliver its body in more than one chunk\",\n  );\n\n  const cancelled = await probe();\n\n  try {\n    await cancelled.body?.cancel();\n  } catch (error) {\n    throw contractError(\n      `a streaming response body must accept cancellation, and it failed with ${describe(error)}`,\n    );\n  }\n}\n\n// A nonce is single use. Two responses cannot share one, the document must\n// carry the value the header declares, and a shared cache must not store it.\nasync function verifyNonceInjectionContract(\n  probe: NonNullable<AdapterContractProbes[\"nonceInjection\"]>,\n) {\n  const first = await probe();\n  const second = await probe();\n  const firstNonce = readCspNonce(first);\n  const secondNonce = readCspNonce(second);\n\n  await second.body?.cancel();\n\n  assert(\n    Boolean(firstNonce),\n    \"a nonce-injecting response must declare a content-security-policy nonce source\",\n  );\n  assert(\n    Boolean(secondNonce) && secondNonce !== firstNonce,\n    \"every response must carry a freshly generated nonce\",\n  );\n\n  const document = await first.text();\n\n  assert(\n    document.includes(`nonce=\"${firstNonce}\"`),\n    \"the rendered document must carry the nonce its header declares\",\n  );\n\n  const cacheControl = (first.headers.get(\"cache-control\") ?? \"\").toLowerCase();\n\n  assert(\n    cacheControl.includes(\"no-store\") || cacheControl.includes(\"private\"),\n    \"a nonce-backed document must not be a shared cache representation\",\n  );\n}\n\n// Cross-origin isolation needs both headers to survive the host response path.\n// A resource policy travels with them and keeps the isolated document from\n// leaking as a subresource.\nasync function verifyCrossOriginIsolationContract(\n  probe: NonNullable<AdapterContractProbes[\"crossOriginIsolationHeaders\"]>,\n) {\n  const response = await probe();\n  const embedderPolicy = response.headers.get(\"cross-origin-embedder-policy\");\n\n  await response.body?.cancel();\n\n  assert(\n    response.headers.get(\"cross-origin-opener-policy\") === \"same-origin\",\n    \"an isolated response must carry cross-origin-opener-policy same-origin\",\n  );\n  assert(\n    embedderPolicy === \"require-corp\" || embedderPolicy === \"credentialless\",\n    \"an isolated response must carry cross-origin-embedder-policy require-corp or credentialless\",\n  );\n  assert(\n    Boolean(response.headers.get(\"cross-origin-resource-policy\")),\n    \"an isolated response must carry a cross-origin-resource-policy\",\n  );\n}\n\n// Background work outlives the response that started it. Shutdown waits for\n// that work, a failed task never fails shutdown, and a repeated shutdown is\n// safe.\nasync function verifyBackgroundLifetimeContract(\n  probe: NonNullable<AdapterContractProbes[\"backgroundLifetime\"]>,\n) {\n  const host = await probe();\n  let release = () => {};\n  let settled = false;\n  const work = new Promise<void>((resolveWork) => {\n    release = () => {\n      settled = true;\n      resolveWork();\n    };\n  });\n\n  host.waitUntil(work);\n\n  let stopped = false;\n  const shutdown = host.shutdown().then(() => {\n    stopped = true;\n  });\n\n  await tick();\n\n  assert(\n    !stopped,\n    \"shutdown must not complete while background work is pending\",\n  );\n\n  release();\n  await shutdown;\n\n  assert(\n    settled && stopped,\n    \"shutdown must complete once background work settles\",\n  );\n\n  const failingHost = await probe();\n  failingHost.waitUntil(\n    Promise.reject(new Error(\"Adapter contract background failure.\")),\n  );\n\n  try {\n    await failingHost.shutdown();\n    await failingHost.shutdown();\n  } catch (error) {\n    throw contractError(\n      `failed background work must not fail shutdown, and it failed with ${describe(error)}`,\n    );\n  }\n}\n\n// A shared cache is the framework cache store contract seen from a host. The\n// refresh contract applies to a store that publishes the lease methods.\nasync function verifySharedCacheContract(\n  probe: NonNullable<AdapterContractProbes[\"sharedCache\"]>,\n) {\n  await verifyCacheStoreContract(probe);\n\n  const store = await probe();\n\n  if (store.acquireRefreshLease) {\n    await verifyCacheStoreRefreshContract(probe);\n  }\n}\n\n// A build artifact is a file on disk, and it holds no per-request state. The\n// same build run twice writes the same files, which is what makes a deployment\n// reproducible.\nasync function verifyStaticOutputContract(\n  probe: NonNullable<AdapterContractProbes[\"staticOutput\"]>,\n) {\n  const outDir = await mkdtemp(join(tmpdir(), \"demiurge-adapter-contract-\"));\n\n  try {\n    const first = await probe(outDir);\n\n    assert(\n      first.entries.length > 0,\n      \"a static build must produce at least one output entry\",\n    );\n\n    const files = new Set<string>();\n    const pathnames = new Set<string>();\n    const contents = new Map<string, string>();\n\n    for (const entry of first.entries) {\n      const file = JSON.stringify(entry.file);\n\n      assert(\n        isContainedFile(entry.file),\n        `every output file must stay inside the output directory, and ${file} does not`,\n      );\n      assert(\n        !files.has(entry.file),\n        `every output entry must own one file, and ${file} repeats`,\n      );\n      assert(\n        !pathnames.has(entry.pathname),\n        `every output entry must own one pathname, and ${JSON.stringify(entry.pathname)} repeats`,\n      );\n\n      files.add(entry.file);\n      pathnames.add(entry.pathname);\n\n      const headers = lowercaseHeaders(entry.headers);\n\n      assert(\n        headers[\"set-cookie\"] === undefined,\n        `a build artifact must not carry per-request state, and ${file} sets a cookie`,\n      );\n      assert(\n        !noncePattern.test(headers[\"content-security-policy\"] ?? \"\"),\n        `a build artifact must not depend on a per-request nonce, and ${file} declares one`,\n      );\n\n      contents.set(entry.file, await readOutputFile(outDir, entry.file));\n    }\n\n    const second = await probe(outDir);\n\n    assert(\n      JSON.stringify(second.entries) === JSON.stringify(first.entries),\n      \"a repeated static build must produce the same output entries\",\n    );\n\n    for (const entry of second.entries) {\n      assert(\n        await readOutputFile(outDir, entry.file) === contents.get(entry.file),\n        `a repeated static build must write the same file, and ${JSON.stringify(entry.file)} changed`,\n      );\n    }\n  } finally {\n    await rm(outDir, { force: true, recursive: true });\n  }\n}\n\n// A host that accepts a connection upgrade also has to refuse one. An origin\n// it does not own and a request without the upgrade never reach the accepted\n// handshake.\nasync function verifyUpgradeContract(\n  probe: (request: Request) => MaybePromise<AdapterUpgradeResult>,\n  protocol: \"websocket\" | \"webtransport\",\n  acceptedStatus: 101 | 200,\n) {\n  const accepted = await probe(\n    upgradeRequest(protocol, adapterContractOrigin),\n  );\n  const negotiated = lowercaseHeaders(accepted.headers ?? {}).upgrade;\n\n  assert(\n    accepted.status === acceptedStatus,\n    `an accepted ${protocol} handshake must answer with status ${acceptedStatus}`,\n  );\n  assert(\n    negotiated?.toLowerCase() === protocol,\n    `an accepted ${protocol} handshake must confirm the negotiated protocol`,\n  );\n\n  const foreign = await probe(upgradeRequest(protocol, foreignOrigin));\n\n  assert(\n    foreign.status >= 400 && foreign.status < 500,\n    `a ${protocol} handshake from an origin the host does not own must be refused`,\n  );\n\n  const plain = await probe(\n    new Request(`${adapterContractOrigin}/`, {\n      headers: { origin: adapterContractOrigin },\n    }),\n  );\n\n  assert(\n    plain.status !== acceptedStatus,\n    `a request without a ${protocol} upgrade must not receive a handshake`,\n  );\n}\n\nfunction upgradeRequest(protocol: string, origin: string) {\n  return new Request(`${adapterContractOrigin}/`, {\n    headers: {\n      connection: \"Upgrade\",\n      origin,\n      upgrade: protocol,\n    },\n  });\n}\n\nfunction readCspNonce(response: Response) {\n  const csp = response.headers.get(\"content-security-policy\") ?? \"\";\n\n  return noncePattern.exec(csp)?.[1];\n}\n\nasync function readOutputFile(outDir: string, file: string) {\n  try {\n    return await readFile(join(outDir, file), \"utf8\");\n  } catch {\n    throw contractError(\n      `every output entry must write its file, and ${JSON.stringify(file)} is missing`,\n    );\n  }\n}\n\nfunction isContainedFile(file: string) {\n  return Boolean(file) &&\n    !file.startsWith(\"/\") &&\n    !file.startsWith(\"\\\\\") &&\n    !file.split(/[\\\\/]/).includes(\"..\");\n}\n\nfunction lowercaseHeaders(headers: Record<string, string>) {\n  // TYPE-EVIDENCE: Object.fromEntries builds a record with string keys and string values. The cast widens the values to allow undefined.\n  return Object.fromEntries(\n    Object.entries(headers).map(([name, value]) => [\n      name.toLowerCase(),\n      value,\n    ]),\n  ) as Record<string, string | undefined>;\n}\n\nfunction tick() {\n  return new Promise((resolveTick) => setTimeout(resolveTick, 0));\n}\n\nfunction describe(error: unknown) {\n  return error instanceof Error ? error.message : String(error);\n}\n\nfunction assert(condition: boolean, requirement: string): asserts condition {\n  if (!condition) {\n    throw contractError(requirement);\n  }\n}\n\nfunction contractError(requirement: string) {\n  return new Error(`Adapter contract failed: ${requirement}.`);\n}\n"],"names":["adapterContractOrigin","foreignOrigin","contractCapabilities","noncePattern","verifyAdapterContract","adapter","probes","assert","capability","declared","probe","verifyBackgroundLifetimeContract","verifyCrossOriginIsolationContract","verifyNonceInjectionContract","verifySharedCacheContract","verifyStaticOutputContract","verifyStreamingContract","verifyUpgradeContract","response","reader","decoder","chunks","body","chunk","cancelled","error","contractError","describe","first","second","firstNonce","readCspNonce","secondNonce","document","cacheControl","embedderPolicy","host","release","settled","work","resolveWork","stopped","shutdown","tick","failingHost","verifyCacheStoreContract","verifyCacheStoreRefreshContract","outDir","mkdtemp","join","tmpdir","files","pathnames","contents","entry","file","isContainedFile","headers","lowercaseHeaders","readOutputFile","rm","protocol","acceptedStatus","accepted","upgradeRequest","negotiated","foreign","plain","origin","csp","readFile","name","value","resolveTick","condition","requirement"],"mappings":";;;;AAiDO,MAAMA,IAAwB,iCAE/BC,IAAgB,iCAEhBC,IAAuB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAEMC,IAAe;AAErB,eAAsBC,EACpBC,GACAC,GACA;AACA,EAAAC;AAAA,IACE,OAAOF,EAAQ,QAAS,YAAYA,EAAQ,KAAK,SAAS;AAAA,IAC1D;AAAA,EAAA;AAGF,aAAWG,KAAcN,GAAsB;AAC7C,UAAMO,IAAWJ,EAAQ,aAAaG,CAAU,GAC1CE,IAAQJ,EAAOE,CAAU;AAE/B,IAAAD;AAAA,MACE,OAAOE,KAAa;AAAA,MACpB,uCAAuCD,CAAU;AAAA,IAAA,GAEnDD;AAAA,MACE,CAACE,KAAY,EAAQC;AAAA,MACrB,eAAeF,CAAU;AAAA,IAAA,GAE3BD;AAAA,MACEE,KAAY,CAACC;AAAA,MACb,eAAeF,CAAU;AAAA,IAAA;AAAA,EAE7B;AAEA,EAAIF,EAAO,sBACT,MAAMK,EAAiCL,EAAO,kBAAkB,GAG9DA,EAAO,+BACT,MAAMM,EAAmCN,EAAO,2BAA2B,GAGzEA,EAAO,kBACT,MAAMO,EAA6BP,EAAO,cAAc,GAGtDA,EAAO,eACT,MAAMQ,EAA0BR,EAAO,WAAW,GAGhDA,EAAO,gBACT,MAAMS,EAA2BT,EAAO,YAAY,GAGlDA,EAAO,aACT,MAAMU,EAAwBV,EAAO,SAAS,GAG5CA,EAAO,aACT,MAAMW,EAAsBX,EAAO,WAAW,aAAa,GAAG,GAG5DA,EAAO,gBACT,MAAMW,EAAsBX,EAAO,cAAc,gBAAgB,GAAG;AAExE;AAKA,eAAeU,EACbN,GACA;AACA,QAAMQ,IAAW,MAAMR,EAAA;AAEvB,EAAAH;AAAA,IACE,EAAQW,EAAS;AAAA,IACjB;AAAA,EAAA;AAGF,QAAMC,IAASD,EAAS,KAAM,UAAA,GACxBE,IAAU,IAAI,YAAA;AACpB,MAAIC,IAAS,GACTC,IAAO;AAEX,aAAa;AACX,UAAMC,IAAQ,MAAMJ,EAAO,KAAA;AAE3B,QAAII,EAAM;AACR;AAGF,IAAAF,KAAU,GACVC,KAAQF,EAAQ,OAAOG,EAAM,OAAO,EAAE,QAAQ,IAAM;AAAA,EACtD;AAEA,EAAAD,KAAQF,EAAQ,OAAA,GAEhBb,EAAOe,EAAK,SAAS,GAAG,0CAA0C,GAClEf;AAAA,IACEc,IAAS;AAAA,IACT;AAAA,EAAA;AAGF,QAAMG,IAAY,MAAMd,EAAA;AAExB,MAAI;AACF,UAAMc,EAAU,MAAM,OAAA;AAAA,EACxB,SAASC,GAAO;AACd,UAAMC;AAAA,MACJ,0EAA0EC,EAASF,CAAK,CAAC;AAAA,IAAA;AAAA,EAE7F;AACF;AAIA,eAAeZ,EACbH,GACA;AACA,QAAMkB,IAAQ,MAAMlB,EAAA,GACdmB,IAAS,MAAMnB,EAAA,GACfoB,IAAaC,EAAaH,CAAK,GAC/BI,IAAcD,EAAaF,CAAM;AAEvC,QAAMA,EAAO,MAAM,OAAA,GAEnBtB;AAAA,IACE,EAAQuB;AAAA,IACR;AAAA,EAAA,GAEFvB;AAAA,IACE,EAAQyB,KAAgBA,MAAgBF;AAAA,IACxC;AAAA,EAAA;AAGF,QAAMG,IAAW,MAAML,EAAM,KAAA;AAE7B,EAAArB;AAAA,IACE0B,EAAS,SAAS,UAAUH,CAAU,GAAG;AAAA,IACzC;AAAA,EAAA;AAGF,QAAMI,KAAgBN,EAAM,QAAQ,IAAI,eAAe,KAAK,IAAI,YAAA;AAEhE,EAAArB;AAAA,IACE2B,EAAa,SAAS,UAAU,KAAKA,EAAa,SAAS,SAAS;AAAA,IACpE;AAAA,EAAA;AAEJ;AAKA,eAAetB,EACbF,GACA;AACA,QAAMQ,IAAW,MAAMR,EAAA,GACjByB,IAAiBjB,EAAS,QAAQ,IAAI,8BAA8B;AAE1E,QAAMA,EAAS,MAAM,OAAA,GAErBX;AAAA,IACEW,EAAS,QAAQ,IAAI,4BAA4B,MAAM;AAAA,IACvD;AAAA,EAAA,GAEFX;AAAA,IACE4B,MAAmB,kBAAkBA,MAAmB;AAAA,IACxD;AAAA,EAAA,GAEF5B;AAAA,IACE,EAAQW,EAAS,QAAQ,IAAI,8BAA8B;AAAA,IAC3D;AAAA,EAAA;AAEJ;AAKA,eAAeP,EACbD,GACA;AACA,QAAM0B,IAAO,MAAM1B,EAAA;AACnB,MAAI2B,IAAU,MAAM;AAAA,EAAC,GACjBC,IAAU;AACd,QAAMC,IAAO,IAAI,QAAc,CAACC,MAAgB;AAC9C,IAAAH,IAAU,MAAM;AACd,MAAAC,IAAU,IACVE,EAAA;AAAA,IACF;AAAA,EACF,CAAC;AAED,EAAAJ,EAAK,UAAUG,CAAI;AAEnB,MAAIE,IAAU;AACd,QAAMC,IAAWN,EAAK,SAAA,EAAW,KAAK,MAAM;AAC1C,IAAAK,IAAU;AAAA,EACZ,CAAC;AAED,QAAME,EAAA,GAENpC;AAAA,IACE,CAACkC;AAAA,IACD;AAAA,EAAA,GAGFJ,EAAA,GACA,MAAMK,GAENnC;AAAA,IACE+B,KAAWG;AAAA,IACX;AAAA,EAAA;AAGF,QAAMG,IAAc,MAAMlC,EAAA;AAC1B,EAAAkC,EAAY;AAAA,IACV,QAAQ,OAAO,IAAI,MAAM,sCAAsC,CAAC;AAAA,EAAA;AAGlE,MAAI;AACF,UAAMA,EAAY,SAAA,GAClB,MAAMA,EAAY,SAAA;AAAA,EACpB,SAASnB,GAAO;AACd,UAAMC;AAAA,MACJ,qEAAqEC,EAASF,CAAK,CAAC;AAAA,IAAA;AAAA,EAExF;AACF;AAIA,eAAeX,EACbJ,GACA;AACA,QAAMmC,EAAyBnC,CAAK,IAEtB,MAAMA,EAAA,GAEV,uBACR,MAAMoC,EAAgCpC,CAAK;AAE/C;AAKA,eAAeK,EACbL,GACA;AACA,QAAMqC,IAAS,MAAMC,EAAQC,EAAKC,EAAA,GAAU,4BAA4B,CAAC;AAEzE,MAAI;AACF,UAAMtB,IAAQ,MAAMlB,EAAMqC,CAAM;AAEhC,IAAAxC;AAAA,MACEqB,EAAM,QAAQ,SAAS;AAAA,MACvB;AAAA,IAAA;AAGF,UAAMuB,wBAAY,IAAA,GACZC,wBAAgB,IAAA,GAChBC,wBAAe,IAAA;AAErB,eAAWC,KAAS1B,EAAM,SAAS;AACjC,YAAM2B,IAAO,KAAK,UAAUD,EAAM,IAAI;AAEtC,MAAA/C;AAAA,QACEiD,EAAgBF,EAAM,IAAI;AAAA,QAC1B,gEAAgEC,CAAI;AAAA,MAAA,GAEtEhD;AAAA,QACE,CAAC4C,EAAM,IAAIG,EAAM,IAAI;AAAA,QACrB,6CAA6CC,CAAI;AAAA,MAAA,GAEnDhD;AAAA,QACE,CAAC6C,EAAU,IAAIE,EAAM,QAAQ;AAAA,QAC7B,iDAAiD,KAAK,UAAUA,EAAM,QAAQ,CAAC;AAAA,MAAA,GAGjFH,EAAM,IAAIG,EAAM,IAAI,GACpBF,EAAU,IAAIE,EAAM,QAAQ;AAE5B,YAAMG,IAAUC,EAAiBJ,EAAM,OAAO;AAE9C,MAAA/C;AAAA,QACEkD,EAAQ,YAAY,MAAM;AAAA,QAC1B,0DAA0DF,CAAI;AAAA,MAAA,GAEhEhD;AAAA,QACE,CAACJ,EAAa,KAAKsD,EAAQ,yBAAyB,KAAK,EAAE;AAAA,QAC3D,gEAAgEF,CAAI;AAAA,MAAA,GAGtEF,EAAS,IAAIC,EAAM,MAAM,MAAMK,EAAeZ,GAAQO,EAAM,IAAI,CAAC;AAAA,IACnE;AAEA,UAAMzB,IAAS,MAAMnB,EAAMqC,CAAM;AAEjC,IAAAxC;AAAA,MACE,KAAK,UAAUsB,EAAO,OAAO,MAAM,KAAK,UAAUD,EAAM,OAAO;AAAA,MAC/D;AAAA,IAAA;AAGF,eAAW0B,KAASzB,EAAO;AACzB,MAAAtB;AAAA,QACE,MAAMoD,EAAeZ,GAAQO,EAAM,IAAI,MAAMD,EAAS,IAAIC,EAAM,IAAI;AAAA,QACpE,yDAAyD,KAAK,UAAUA,EAAM,IAAI,CAAC;AAAA,MAAA;AAAA,EAGzF,UAAA;AACE,UAAMM,EAAGb,GAAQ,EAAE,OAAO,IAAM,WAAW,IAAM;AAAA,EACnD;AACF;AAKA,eAAe9B,EACbP,GACAmD,GACAC,GACA;AACA,QAAMC,IAAW,MAAMrD;AAAA,IACrBsD,EAAeH,GAAU7D,CAAqB;AAAA,EAAA,GAE1CiE,IAAaP,EAAiBK,EAAS,WAAW,CAAA,CAAE,EAAE;AAE5D,EAAAxD;AAAA,IACEwD,EAAS,WAAWD;AAAA,IACpB,eAAeD,CAAQ,sCAAsCC,CAAc;AAAA,EAAA,GAE7EvD;AAAA,IACE0D,GAAY,kBAAkBJ;AAAA,IAC9B,eAAeA,CAAQ;AAAA,EAAA;AAGzB,QAAMK,IAAU,MAAMxD,EAAMsD,EAAeH,GAAU5D,CAAa,CAAC;AAEnE,EAAAM;AAAA,IACE2D,EAAQ,UAAU,OAAOA,EAAQ,SAAS;AAAA,IAC1C,KAAKL,CAAQ;AAAA,EAAA;AAGf,QAAMM,IAAQ,MAAMzD;AAAA,IAClB,IAAI,QAAQ,GAAGV,CAAqB,KAAK;AAAA,MACvC,SAAS,EAAE,QAAQA,EAAA;AAAA,IAAsB,CAC1C;AAAA,EAAA;AAGH,EAAAO;AAAA,IACE4D,EAAM,WAAWL;AAAA,IACjB,uBAAuBD,CAAQ;AAAA,EAAA;AAEnC;AAEA,SAASG,EAAeH,GAAkBO,GAAgB;AACxD,SAAO,IAAI,QAAQ,GAAGpE,CAAqB,KAAK;AAAA,IAC9C,SAAS;AAAA,MACP,YAAY;AAAA,MACZ,QAAAoE;AAAA,MACA,SAASP;AAAA,IAAA;AAAA,EACX,CACD;AACH;AAEA,SAAS9B,EAAab,GAAoB;AACxC,QAAMmD,IAAMnD,EAAS,QAAQ,IAAI,yBAAyB,KAAK;AAE/D,SAAOf,EAAa,KAAKkE,CAAG,IAAI,CAAC;AACnC;AAEA,eAAeV,EAAeZ,GAAgBQ,GAAc;AAC1D,MAAI;AACF,WAAO,MAAMe,EAASrB,EAAKF,GAAQQ,CAAI,GAAG,MAAM;AAAA,EAClD,QAAQ;AACN,UAAM7B;AAAA,MACJ,+CAA+C,KAAK,UAAU6B,CAAI,CAAC;AAAA,IAAA;AAAA,EAEvE;AACF;AAEA,SAASC,EAAgBD,GAAc;AACrC,SAAO,EAAQA,KACb,CAACA,EAAK,WAAW,GAAG,KACpB,CAACA,EAAK,WAAW,IAAI,KACrB,CAACA,EAAK,MAAM,OAAO,EAAE,SAAS,IAAI;AACtC;AAEA,SAASG,EAAiBD,GAAiC;AAEzD,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQA,CAAO,EAAE,IAAI,CAAC,CAACc,GAAMC,CAAK,MAAM;AAAA,MAC7CD,EAAK,YAAA;AAAA,MACLC;AAAA,IAAA,CACD;AAAA,EAAA;AAEL;AAEA,SAAS7B,IAAO;AACd,SAAO,IAAI,QAAQ,CAAC8B,MAAgB,WAAWA,GAAa,CAAC,CAAC;AAChE;AAEA,SAAS9C,EAASF,GAAgB;AAChC,SAAOA,aAAiB,QAAQA,EAAM,UAAU,OAAOA,CAAK;AAC9D;AAEA,SAASlB,EAAOmE,GAAoBC,GAAwC;AAC1E,MAAI,CAACD;AACH,UAAMhD,EAAciD,CAAW;AAEnC;AAEA,SAASjD,EAAciD,GAAqB;AAC1C,SAAO,IAAI,MAAM,4BAA4BA,CAAW,GAAG;AAC7D;"}

package/dist/browser/file-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file-router.d.ts","sourceRoot":"","sources":["../../src/browser/file-router.tsx"],"names":[],"mappings":"AAAA,OAAO,EAEL,aAAa,EAEb,SAAS,EAQV,MAAM,OAAO,CAAC;AACf,OAAO,EAIL,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,aAAa,EAElB,KAAK,aAAa,EACnB,MAAM,UAAU,CAAC;AAClB,OAAO,EAUL,KAAK,iBAAiB,EACvB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAQ,KAAK,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,MAAM,oBAAoB,GAAG,CACjC,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE/B,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IAC1C,UAAU,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtC,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CACzC,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,4FA8H1D;AA0BD,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,iBAAiB,EACjB,cAAc,CACf,GAAG;IACF,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,iBAkDxE;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,cAAc,kBAAkB,CAAC,EACjC,YAAY,GAAG,aAAa,CAC7B,CAAC;AAEF,KAAK,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,GAAG;IACvD,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,qBAiBjE;AAED,wBAAgB,IAAI,CAAC,KAAK,CAAC,GAAG,SAAS,OAAO,EAC5C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG;IACnB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,+BAsBF;AA4LD,KAAK,SAAS,GAAG;IACf,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC;IAClC,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,CAAC"}
+{"version":3,"file":"file-router.d.ts","sourceRoot":"","sources":["../../src/browser/file-router.tsx"],"names":[],"mappings":"AAAA,OAAO,EAEL,aAAa,EAEb,SAAS,EAQV,MAAM,OAAO,CAAC;AACf,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,aAAa,EAElB,KAAK,aAAa,EACnB,MAAM,UAAU,CAAC;AAClB,OAAO,EAUL,KAAK,iBAAiB,EACvB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAQ,KAAK,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAE9E,MAAM,MAAM,oBAAoB,GAAG,CACjC,OAAO,EAAE,OAAO,KACb,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE/B,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,CAAC,EAAE,iBAAiB,CAAC;IACjC,kBAAkB,CAAC,EAAE,oBAAoB,CAAC;IAC1C,UAAU,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtC,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CACzC,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,4FA8H1D;AA0BD,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,iBAAiB,EACjB,cAAc,CACf,GAAG;IACF,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,iBAoDxE;AAED,KAAK,iBAAiB,GAAG,IAAI,CAC3B,cAAc,kBAAkB,CAAC,EACjC,YAAY,GAAG,aAAa,CAC7B,CAAC;AAEF,KAAK,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,GAAG;IACvD,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B,CAAC;AAEF,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,oBAAoB,qBAkBjE;AAED,wBAAgB,IAAI,CAAC,KAAK,CAAC,GAAG,SAAS,OAAO,EAC5C,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG;IACnB,QAAQ,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,+BAuBF;AA+LD,KAAK,SAAS,GAAG;IACf,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC;IAClC,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,CAAC"}

package/dist/chunks/document-shell-WoM8yZlR.js

@@ -0,0 +1,35 @@
+import { r as l } from "./request-metadata-DaIYq4Ea.js";
+const t = '<template data-demiurge-stream-root=""></template>';
+async function i(r, e) {
+  const s = l({
+    body: { data: r.data, navigation: e.navigation },
+    entrySrc: e.clientEntry,
+    lang: e.lang,
+    links: r.links,
+    metadata: r.metadata,
+    nonce: e.nonce,
+    scripts: e.scripts ?? r.scripts,
+    styles: e.styles,
+    title: e.title
+  });
+  if (!e.transformDocument)
+    return s;
+  const n = await e.transformDocument(
+    `${s.prefix}${t}${s.suffix}`
+  ), a = n.indexOf(t);
+  if (a === -1 || n.indexOf(
+    t,
+    a + t.length
+  ) !== -1)
+    throw new Error(
+      "Demiurge streaming document transform must preserve the root marker exactly once."
+    );
+  return {
+    prefix: n.slice(0, a),
+    suffix: n.slice(a + t.length)
+  };
+}
+export {
+  i as c
+};
+//# sourceMappingURL=document-shell-WoM8yZlR.js.map

package/dist/chunks/document-shell-WoM8yZlR.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-shell-WoM8yZlR.js","sources":["../../src/server/document-shell.ts"],"sourcesContent":["import { renderDocumentShell } from \"../document/render\";\nimport type { ScriptTag } from \"../document/scripts\";\nimport type { LoadedRouteMatch } from \"../router\";\nimport type { SsrRenderOptions } from \"./ssr\";\n\n// A streaming render sends the document head before the body exists. A\n// transform that rewrites the document therefore needs a placeholder where the\n// streamed body will go, and it has to leave that placeholder in place.\nexport const STREAM_ROOT_MARKER =\n  '<template data-demiurge-stream-root=\"\"></template>';\n\nexport type DocumentShell = {\n  prefix: string;\n  suffix: string;\n};\n\nexport async function createDocumentShell(\n  match: LoadedRouteMatch,\n  options: SsrRenderOptions & { scripts?: ScriptTag[] },\n): Promise<DocumentShell> {\n  const shell = renderDocumentShell({\n    body: { data: match.data, navigation: options.navigation },\n    entrySrc: options.clientEntry,\n    lang: options.lang,\n    links: match.links,\n    metadata: match.metadata,\n    nonce: options.nonce,\n    scripts: options.scripts ?? match.scripts,\n    styles: options.styles,\n    title: options.title,\n  });\n\n  if (!options.transformDocument) {\n    return shell;\n  }\n\n  const transformed = await options.transformDocument(\n    `${shell.prefix}${STREAM_ROOT_MARKER}${shell.suffix}`,\n  );\n  const markerIndex = transformed.indexOf(STREAM_ROOT_MARKER);\n\n  if (\n    markerIndex === -1 ||\n    transformed.indexOf(\n      STREAM_ROOT_MARKER,\n      markerIndex + STREAM_ROOT_MARKER.length,\n    ) !== -1\n  ) {\n    throw new Error(\n      \"Demiurge streaming document transform must preserve the root marker exactly once.\",\n    );\n  }\n\n  return {\n    prefix: transformed.slice(0, markerIndex),\n    suffix: transformed.slice(markerIndex + STREAM_ROOT_MARKER.length),\n  };\n}\n"],"names":["STREAM_ROOT_MARKER","createDocumentShell","match","options","shell","renderDocumentShell","transformed","markerIndex"],"mappings":";AAQO,MAAMA,IACX;AAOF,eAAsBC,EACpBC,GACAC,GACwB;AACxB,QAAMC,IAAQC,EAAoB;AAAA,IAChC,MAAM,EAAE,MAAMH,EAAM,MAAM,YAAYC,EAAQ,WAAA;AAAA,IAC9C,UAAUA,EAAQ;AAAA,IAClB,MAAMA,EAAQ;AAAA,IACd,OAAOD,EAAM;AAAA,IACb,UAAUA,EAAM;AAAA,IAChB,OAAOC,EAAQ;AAAA,IACf,SAASA,EAAQ,WAAWD,EAAM;AAAA,IAClC,QAAQC,EAAQ;AAAA,IAChB,OAAOA,EAAQ;AAAA,EAAA,CAChB;AAED,MAAI,CAACA,EAAQ;AACX,WAAOC;AAGT,QAAME,IAAc,MAAMH,EAAQ;AAAA,IAChC,GAAGC,EAAM,MAAM,GAAGJ,CAAkB,GAAGI,EAAM,MAAM;AAAA,EAAA,GAE/CG,IAAcD,EAAY,QAAQN,CAAkB;AAE1D,MACEO,MAAgB,MAChBD,EAAY;AAAA,IACVN;AAAA,IACAO,IAAcP,EAAmB;AAAA,EAAA,MAC7B;AAEN,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAIJ,SAAO;AAAA,IACL,QAAQM,EAAY,MAAM,GAAGC,CAAW;AAAA,IACxC,QAAQD,EAAY,MAAMC,IAAcP,EAAmB,MAAM;AAAA,EAAA;AAErE;"}

package/dist/chunks/image-codec-Di53WpcH.js

@@ -0,0 +1,141 @@
+import { createHash as d } from "node:crypto";
+import { readFile as h, mkdir as p, writeFile as F } from "node:fs/promises";
+import { resolve as u, join as w, relative as b, sep as $ } from "node:path";
+import { d as v, f as S, a as N, r as E, b as J, c as O, i as j } from "./images-Edar3eU1.js";
+const y = 5 * 1024 * 1024;
+async function H(e) {
+  const t = e.fonts ?? [];
+  if (t.length === 0)
+    return [];
+  const r = e.basePath ?? v, a = u(e.root), o = u(
+    e.cacheDir ?? w(a, "node_modules", ".demiurge", "fonts")
+  ), i = e.fetch ?? ((n, s) => fetch(n, s)), c = /* @__PURE__ */ new Map(), f = [];
+  for (const n of t) {
+    if (!n.selfHost)
+      continue;
+    const s = S(n), l = c.get(s);
+    if (l !== void 0) {
+      if (l !== n.src)
+        throw new Error(
+          `Font family ${JSON.stringify(n.family)} declares two sources that publish the same file ${JSON.stringify(s)}. Give one of them a different weight or style.`
+        );
+      continue;
+    }
+    c.set(s, n.src), f.push({
+      body: await B(n, { cacheDir: o, load: i, root: a }),
+      contentType: N(n.src),
+      file: m(r, s),
+      url: `${r}/${s}`
+    });
+  }
+  const g = `${E(t, r)}
+`;
+  return f.push({
+    body: new TextEncoder().encode(g),
+    contentType: "text/css; charset=utf-8",
+    file: m(r, "fonts.css"),
+    url: J(r)
+  }), f;
+}
+async function B(e, t) {
+  const r = e.source === "google" ? await T(e, t) : await D(e, t.root);
+  if (r.byteLength === 0)
+    throw new Error(
+      `Font family ${JSON.stringify(e.family)} resolved to an empty file.`
+    );
+  if (r.byteLength > y)
+    throw new Error(
+      `Font family ${JSON.stringify(e.family)} is larger than the ${y} byte limit.`
+    );
+  return r;
+}
+async function D(e, t) {
+  const r = u(t, e.src.replace(/^\/+/, ""));
+  if (b(t, r).split($).includes(".."))
+    throw new Error(
+      `Font source escaped the project directory: ${JSON.stringify(e.src)}.`
+    );
+  try {
+    return new Uint8Array(await h(r));
+  } catch (a) {
+    throw new Error(
+      `Demiurge could not read the font file ${JSON.stringify(e.src)} for family ${JSON.stringify(e.family)}.`,
+      { cause: a }
+    );
+  }
+}
+async function T(e, t) {
+  const r = d("sha256").update(e.src).digest("hex"), a = w(
+    t.cacheDir,
+    `${r.slice(0, 32)}.${O(e.src)}`
+  );
+  try {
+    return new Uint8Array(await h(a));
+  } catch {
+  }
+  let o;
+  try {
+    o = await t.load(e.src);
+  } catch (c) {
+    throw new Error(
+      `Demiurge could not download the font for family ${JSON.stringify(e.family)} from ${JSON.stringify(e.src)}.`,
+      { cause: c }
+    );
+  }
+  if (!o.ok)
+    throw new Error(
+      `The font host answered ${o.status} for family ${JSON.stringify(e.family)} at ${JSON.stringify(e.src)}.`
+    );
+  const i = new Uint8Array(await o.arrayBuffer());
+  return await p(t.cacheDir, { recursive: !0 }), await F(a, i), i;
+}
+function m(e, t) {
+  return `${e.replace(/^\/+/, "")}/${t}`;
+}
+const A = {
+  avif: "image/avif",
+  jpeg: "image/jpeg",
+  png: "image/png",
+  webp: "image/webp"
+}, U = 75;
+function M(e, t) {
+  if (e.format !== "auto")
+    return e.format;
+  const r = (t ?? "").toLowerCase();
+  return r.includes("image/avif") ? "avif" : r.includes("image/webp") ? "webp" : x(e.src);
+}
+function x(e) {
+  const t = j(e);
+  return t === "avif" ? "avif" : t === "webp" ? "webp" : t === "png" ? "png" : "jpeg";
+}
+async function q(e, t) {
+  const r = await L(), a = t.quality ?? U, o = r(e).resize({
+    width: t.width,
+    withoutEnlargement: !0
+  });
+  return {
+    body: new Uint8Array(await I(o, t.format, a)),
+    contentType: A[t.format]
+  };
+}
+function I(e, t, r) {
+  return t === "png" ? e.png().toBuffer() : t === "jpeg" ? e.jpeg({ quality: r }).toBuffer() : t === "avif" ? e.avif({ quality: r }).toBuffer() : e.webp({ quality: r }).toBuffer();
+}
+async function L() {
+  let e;
+  try {
+    e = await import("sharp");
+  } catch (t) {
+    throw new Error(
+      "Demiurge image optimization requires the optional peer dependency sharp. Install sharp in the application.",
+      { cause: t }
+    );
+  }
+  return e.default;
+}
+export {
+  M as n,
+  H as r,
+  q as t
+};
+//# sourceMappingURL=image-codec-Di53WpcH.js.map

package/dist/chunks/image-codec-Di53WpcH.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-codec-Di53WpcH.js","sources":["../../src/platform/font-assets.ts","../../src/platform/image-codec.ts"],"sourcesContent":["import { createHash } from \"node:crypto\";\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\";\nimport { join, relative, resolve, sep } from \"node:path\";\nimport {\n  defaultFontPath,\n  fontAssetFileName,\n  fontFormat,\n  fontMediaType,\n  fontStylesheetUrl,\n  renderFontFaceCss,\n  type FontContribution,\n  type FontDefinition,\n} from \"./fonts\";\n\nexport type FontAssetFetch = (\n  input: string,\n  init?: { signal?: AbortSignal },\n) => Promise<Response>;\n\nexport type FontAssetOptions = {\n  basePath?: string;\n  // Where a downloaded font file stays between builds. A build that already\n  // downloaded a font reads it back and makes no network request.\n  cacheDir?: string;\n  fetch?: FontAssetFetch;\n  fonts?: FontContribution;\n  // The project directory that every local font source resolves against.\n  root: string;\n};\n\nexport type FontAsset = {\n  body: Uint8Array;\n  contentType: string;\n  // The output path, relative to the directory that the build publishes.\n  file: string;\n  url: string;\n};\n\nconst maximumFontBytes = 5 * 1024 * 1024;\n\n// One font declaration becomes one published file plus one stylesheet. The\n// build writes these files, and the Node handler serves the same set from\n// memory. Both derive every URL from the declaration, so they cannot drift.\nexport async function resolveFontAssets(\n  options: FontAssetOptions,\n): Promise<FontAsset[]> {\n  const fonts = options.fonts ?? [];\n\n  if (fonts.length === 0) {\n    return [];\n  }\n\n  const basePath = options.basePath ?? defaultFontPath;\n  const root = resolve(options.root);\n  const cacheDir = resolve(\n    options.cacheDir ?? join(root, \"node_modules\", \".demiurge\", \"fonts\"),\n  );\n  const load = options.fetch ?? ((input, init) => fetch(input, init));\n  const published = new Map<string, string>();\n  const assets: FontAsset[] = [];\n\n  for (const definition of fonts) {\n    if (!definition.selfHost) {\n      continue;\n    }\n\n    const name = fontAssetFileName(definition);\n    const claimed = published.get(name);\n\n    if (claimed !== undefined) {\n      if (claimed !== definition.src) {\n        throw new Error(\n          `Font family ${JSON.stringify(definition.family)} declares two sources that publish the same file ${JSON.stringify(name)}. Give one of them a different weight or style.`,\n        );\n      }\n\n      continue;\n    }\n\n    published.set(name, definition.src);\n    assets.push({\n      body: await readFontBody(definition, { cacheDir, load, root }),\n      contentType: fontMediaType(definition.src),\n      file: outputFile(basePath, name),\n      url: `${basePath}/${name}`,\n    });\n  }\n\n  const stylesheet = `${renderFontFaceCss(fonts, basePath)}\\n`;\n\n  assets.push({\n    body: new TextEncoder().encode(stylesheet),\n    contentType: \"text/css; charset=utf-8\",\n    file: outputFile(basePath, \"fonts.css\"),\n    url: fontStylesheetUrl(basePath),\n  });\n\n  return assets;\n}\n\nasync function readFontBody(\n  definition: FontDefinition,\n  context: { cacheDir: string; load: FontAssetFetch; root: string },\n) {\n  const body = definition.source === \"google\"\n    ? await downloadFontFile(definition, context)\n    : await readLocalFontFile(definition, context.root);\n\n  if (body.byteLength === 0) {\n    throw new Error(\n      `Font family ${JSON.stringify(definition.family)} resolved to an empty file.`,\n    );\n  }\n\n  if (body.byteLength > maximumFontBytes) {\n    throw new Error(\n      `Font family ${JSON.stringify(definition.family)} is larger than the ${maximumFontBytes} byte limit.`,\n    );\n  }\n\n  return body;\n}\n\nasync function readLocalFontFile(definition: FontDefinition, root: string) {\n  const file = resolve(root, definition.src.replace(/^\\/+/, \"\"));\n\n  if (relative(root, file).split(sep).includes(\"..\")) {\n    throw new Error(\n      `Font source escaped the project directory: ${JSON.stringify(definition.src)}.`,\n    );\n  }\n\n  try {\n    return new Uint8Array(await readFile(file));\n  } catch (error) {\n    throw new Error(\n      `Demiurge could not read the font file ${JSON.stringify(definition.src)} for family ${JSON.stringify(definition.family)}.`,\n      { cause: error },\n    );\n  }\n}\n\n// A downloaded font stays in the cache directory. The first build reaches the\n// font host once, and every later build reads the file from disk. A build that\n// runs without network access therefore keeps working.\nasync function downloadFontFile(\n  definition: FontDefinition,\n  context: { cacheDir: string; load: FontAssetFetch; root: string },\n) {\n  const digest = createHash(\"sha256\").update(definition.src).digest(\"hex\");\n  const cacheFile = join(\n    context.cacheDir,\n    `${digest.slice(0, 32)}.${fontFormat(definition.src)}`,\n  );\n\n  try {\n    return new Uint8Array(await readFile(cacheFile));\n  } catch {\n    // The cache holds no copy yet, so the font host answers this once.\n  }\n\n  let response: Response;\n\n  try {\n    response = await context.load(definition.src);\n  } catch (error) {\n    throw new Error(\n      `Demiurge could not download the font for family ${JSON.stringify(definition.family)} from ${JSON.stringify(definition.src)}.`,\n      { cause: error },\n    );\n  }\n\n  if (!response.ok) {\n    throw new Error(\n      `The font host answered ${response.status} for family ${JSON.stringify(definition.family)} at ${JSON.stringify(definition.src)}.`,\n    );\n  }\n\n  const body = new Uint8Array(await response.arrayBuffer());\n\n  await mkdir(context.cacheDir, { recursive: true });\n  await writeFile(cacheFile, body);\n\n  return body;\n}\n\nfunction outputFile(basePath: string, name: string) {\n  return `${basePath.replace(/^\\/+/, \"\")}/${name}`;\n}\n","import type { ImageFormat } from \"./images\";\nimport { imageSourceExtension, type ImageVariantDescriptor } from \"./image-url\";\n\nexport type EncodedImage = {\n  body: Uint8Array;\n  contentType: string;\n};\n\ntype SharpModule = {\n  default: (input: Uint8Array) => SharpPipeline;\n};\n\ntype SharpPipeline = {\n  avif: (options: { quality: number }) => SharpPipeline;\n  jpeg: (options: { quality: number }) => SharpPipeline;\n  png: () => SharpPipeline;\n  resize: (options: {\n    width: number;\n    withoutEnlargement: boolean;\n  }) => SharpPipeline;\n  toBuffer: () => Promise<Buffer>;\n  webp: (options: { quality: number }) => SharpPipeline;\n};\n\nconst contentTypes: Record<Exclude<ImageFormat, \"auto\">, string> = {\n  avif: \"image/avif\",\n  jpeg: \"image/jpeg\",\n  png: \"image/png\",\n  webp: \"image/webp\",\n};\n\nconst defaultQuality = 75;\n\nexport function imageContentType(format: Exclude<ImageFormat, \"auto\">) {\n  return contentTypes[format];\n}\n\n// `auto` lets the browser take the smallest format that it accepts. A client\n// that sends no usable `accept` header keeps the source format.\nexport function negotiateImageFormat(\n  descriptor: ImageVariantDescriptor,\n  accept: string | null,\n): Exclude<ImageFormat, \"auto\"> {\n  if (descriptor.format !== \"auto\") {\n    return descriptor.format;\n  }\n\n  const accepted = (accept ?? \"\").toLowerCase();\n\n  if (accepted.includes(\"image/avif\")) {\n    return \"avif\";\n  }\n\n  if (accepted.includes(\"image/webp\")) {\n    return \"webp\";\n  }\n\n  return sourceFormat(descriptor.src);\n}\n\nexport function sourceFormat(src: string): Exclude<ImageFormat, \"auto\"> {\n  const extension = imageSourceExtension(src);\n\n  if (extension === \"avif\") {\n    return \"avif\";\n  }\n\n  if (extension === \"webp\") {\n    return \"webp\";\n  }\n\n  if (extension === \"png\") {\n    return \"png\";\n  }\n\n  return \"jpeg\";\n}\n\nexport async function transformImage(\n  source: Uint8Array,\n  options: {\n    format: Exclude<ImageFormat, \"auto\">;\n    quality?: number;\n    width: number;\n  },\n): Promise<EncodedImage> {\n  const sharp = await loadImageCodec();\n  const quality = options.quality ?? defaultQuality;\n  const resized = sharp(source).resize({\n    width: options.width,\n    withoutEnlargement: true,\n  });\n\n  return {\n    body: new Uint8Array(await encode(resized, options.format, quality)),\n    contentType: contentTypes[options.format],\n  };\n}\n\nfunction encode(\n  pipeline: SharpPipeline,\n  format: Exclude<ImageFormat, \"auto\">,\n  quality: number,\n) {\n  if (format === \"png\") {\n    return pipeline.png().toBuffer();\n  }\n\n  if (format === \"jpeg\") {\n    return pipeline.jpeg({ quality }).toBuffer();\n  }\n\n  if (format === \"avif\") {\n    return pipeline.avif({ quality }).toBuffer();\n  }\n\n  return pipeline.webp({ quality }).toBuffer();\n}\n\n// `sharp` is an optional peer dependency. Only an application that optimizes\n// an image installs it, the same rule that ADR 0006 states for a host\n// adapter dependency.\nasync function loadImageCodec() {\n  let module: SharpModule;\n\n  try {\n    // TYPE-EVIDENCE: sharp ships no types. The local type describes the methods the codec calls.\n    module = (await import(\"sharp\")) as SharpModule;\n  } catch (error) {\n    throw new Error(\n      \"Demiurge image optimization requires the optional peer dependency sharp. Install sharp in the application.\",\n      { cause: error },\n    );\n  }\n\n  return module.default;\n}\n"],"names":["maximumFontBytes","resolveFontAssets","options","fonts","basePath","defaultFontPath","root","resolve","cacheDir","join","load","input","init","published","assets","definition","name","fontAssetFileName","claimed","readFontBody","fontMediaType","outputFile","stylesheet","renderFontFaceCss","fontStylesheetUrl","context","body","downloadFontFile","readLocalFontFile","file","relative","sep","readFile","error","digest","createHash","cacheFile","fontFormat","response","mkdir","writeFile","contentTypes","defaultQuality","negotiateImageFormat","descriptor","accept","accepted","sourceFormat","src","extension","imageSourceExtension","transformImage","source","sharp","loadImageCodec","quality","resized","encode","pipeline","format","module"],"mappings":";;;;AAsCA,MAAMA,IAAmB,IAAI,OAAO;AAKpC,eAAsBC,EACpBC,GACsB;AACtB,QAAMC,IAAQD,EAAQ,SAAS,CAAA;AAE/B,MAAIC,EAAM,WAAW;AACnB,WAAO,CAAA;AAGT,QAAMC,IAAWF,EAAQ,YAAYG,GAC/BC,IAAOC,EAAQL,EAAQ,IAAI,GAC3BM,IAAWD;AAAA,IACfL,EAAQ,YAAYO,EAAKH,GAAM,gBAAgB,aAAa,OAAO;AAAA,EAAA,GAE/DI,IAAOR,EAAQ,UAAU,CAACS,GAAOC,MAAS,MAAMD,GAAOC,CAAI,IAC3DC,wBAAgB,IAAA,GAChBC,IAAsB,CAAA;AAE5B,aAAWC,KAAcZ,GAAO;AAC9B,QAAI,CAACY,EAAW;AACd;AAGF,UAAMC,IAAOC,EAAkBF,CAAU,GACnCG,IAAUL,EAAU,IAAIG,CAAI;AAElC,QAAIE,MAAY,QAAW;AACzB,UAAIA,MAAYH,EAAW;AACzB,cAAM,IAAI;AAAA,UACR,eAAe,KAAK,UAAUA,EAAW,MAAM,CAAC,oDAAoD,KAAK,UAAUC,CAAI,CAAC;AAAA,QAAA;AAI5H;AAAA,IACF;AAEA,IAAAH,EAAU,IAAIG,GAAMD,EAAW,GAAG,GAClCD,EAAO,KAAK;AAAA,MACV,MAAM,MAAMK,EAAaJ,GAAY,EAAE,UAAAP,GAAU,MAAAE,GAAM,MAAAJ,GAAM;AAAA,MAC7D,aAAac,EAAcL,EAAW,GAAG;AAAA,MACzC,MAAMM,EAAWjB,GAAUY,CAAI;AAAA,MAC/B,KAAK,GAAGZ,CAAQ,IAAIY,CAAI;AAAA,IAAA,CACzB;AAAA,EACH;AAEA,QAAMM,IAAa,GAAGC,EAAkBpB,GAAOC,CAAQ,CAAC;AAAA;AAExD,SAAAU,EAAO,KAAK;AAAA,IACV,MAAM,IAAI,cAAc,OAAOQ,CAAU;AAAA,IACzC,aAAa;AAAA,IACb,MAAMD,EAAWjB,GAAU,WAAW;AAAA,IACtC,KAAKoB,EAAkBpB,CAAQ;AAAA,EAAA,CAChC,GAEMU;AACT;AAEA,eAAeK,EACbJ,GACAU,GACA;AACA,QAAMC,IAAOX,EAAW,WAAW,WAC/B,MAAMY,EAAiBZ,GAAYU,CAAO,IAC1C,MAAMG,EAAkBb,GAAYU,EAAQ,IAAI;AAEpD,MAAIC,EAAK,eAAe;AACtB,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAUX,EAAW,MAAM,CAAC;AAAA,IAAA;AAIpD,MAAIW,EAAK,aAAa1B;AACpB,UAAM,IAAI;AAAA,MACR,eAAe,KAAK,UAAUe,EAAW,MAAM,CAAC,uBAAuBf,CAAgB;AAAA,IAAA;AAI3F,SAAO0B;AACT;AAEA,eAAeE,EAAkBb,GAA4BT,GAAc;AACzE,QAAMuB,IAAOtB,EAAQD,GAAMS,EAAW,IAAI,QAAQ,QAAQ,EAAE,CAAC;AAE7D,MAAIe,EAASxB,GAAMuB,CAAI,EAAE,MAAME,CAAG,EAAE,SAAS,IAAI;AAC/C,UAAM,IAAI;AAAA,MACR,8CAA8C,KAAK,UAAUhB,EAAW,GAAG,CAAC;AAAA,IAAA;AAIhF,MAAI;AACF,WAAO,IAAI,WAAW,MAAMiB,EAASH,CAAI,CAAC;AAAA,EAC5C,SAASI,GAAO;AACd,UAAM,IAAI;AAAA,MACR,yCAAyC,KAAK,UAAUlB,EAAW,GAAG,CAAC,eAAe,KAAK,UAAUA,EAAW,MAAM,CAAC;AAAA,MACvH,EAAE,OAAOkB,EAAA;AAAA,IAAM;AAAA,EAEnB;AACF;AAKA,eAAeN,EACbZ,GACAU,GACA;AACA,QAAMS,IAASC,EAAW,QAAQ,EAAE,OAAOpB,EAAW,GAAG,EAAE,OAAO,KAAK,GACjEqB,IAAY3B;AAAA,IAChBgB,EAAQ;AAAA,IACR,GAAGS,EAAO,MAAM,GAAG,EAAE,CAAC,IAAIG,EAAWtB,EAAW,GAAG,CAAC;AAAA,EAAA;AAGtD,MAAI;AACF,WAAO,IAAI,WAAW,MAAMiB,EAASI,CAAS,CAAC;AAAA,EACjD,QAAQ;AAAA,EAER;AAEA,MAAIE;AAEJ,MAAI;AACF,IAAAA,IAAW,MAAMb,EAAQ,KAAKV,EAAW,GAAG;AAAA,EAC9C,SAASkB,GAAO;AACd,UAAM,IAAI;AAAA,MACR,mDAAmD,KAAK,UAAUlB,EAAW,MAAM,CAAC,SAAS,KAAK,UAAUA,EAAW,GAAG,CAAC;AAAA,MAC3H,EAAE,OAAOkB,EAAA;AAAA,IAAM;AAAA,EAEnB;AAEA,MAAI,CAACK,EAAS;AACZ,UAAM,IAAI;AAAA,MACR,0BAA0BA,EAAS,MAAM,eAAe,KAAK,UAAUvB,EAAW,MAAM,CAAC,OAAO,KAAK,UAAUA,EAAW,GAAG,CAAC;AAAA,IAAA;AAIlI,QAAMW,IAAO,IAAI,WAAW,MAAMY,EAAS,aAAa;AAExD,eAAMC,EAAMd,EAAQ,UAAU,EAAE,WAAW,IAAM,GACjD,MAAMe,EAAUJ,GAAWV,CAAI,GAExBA;AACT;AAEA,SAASL,EAAWjB,GAAkBY,GAAc;AAClD,SAAO,GAAGZ,EAAS,QAAQ,QAAQ,EAAE,CAAC,IAAIY,CAAI;AAChD;ACpKA,MAAMyB,IAA6D;AAAA,EACjE,MAAM;AAAA,EACN,MAAM;AAAA,EACN,KAAK;AAAA,EACL,MAAM;AACR,GAEMC,IAAiB;AAQhB,SAASC,EACdC,GACAC,GAC8B;AAC9B,MAAID,EAAW,WAAW;AACxB,WAAOA,EAAW;AAGpB,QAAME,KAAYD,KAAU,IAAI,YAAA;AAEhC,SAAIC,EAAS,SAAS,YAAY,IACzB,SAGLA,EAAS,SAAS,YAAY,IACzB,SAGFC,EAAaH,EAAW,GAAG;AACpC;AAEO,SAASG,EAAaC,GAA2C;AACtE,QAAMC,IAAYC,EAAqBF,CAAG;AAE1C,SAAIC,MAAc,SACT,SAGLA,MAAc,SACT,SAGLA,MAAc,QACT,QAGF;AACT;AAEA,eAAsBE,EACpBC,GACAlD,GAKuB;AACvB,QAAMmD,IAAQ,MAAMC,EAAA,GACdC,IAAUrD,EAAQ,WAAWwC,GAC7Bc,IAAUH,EAAMD,CAAM,EAAE,OAAO;AAAA,IACnC,OAAOlD,EAAQ;AAAA,IACf,oBAAoB;AAAA,EAAA,CACrB;AAED,SAAO;AAAA,IACL,MAAM,IAAI,WAAW,MAAMuD,EAAOD,GAAStD,EAAQ,QAAQqD,CAAO,CAAC;AAAA,IACnE,aAAad,EAAavC,EAAQ,MAAM;AAAA,EAAA;AAE5C;AAEA,SAASuD,EACPC,GACAC,GACAJ,GACA;AACA,SAAII,MAAW,QACND,EAAS,IAAA,EAAM,SAAA,IAGpBC,MAAW,SACND,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA,IAGhCI,MAAW,SACND,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA,IAG7BG,EAAS,KAAK,EAAE,SAAAH,EAAA,CAAS,EAAE,SAAA;AACpC;AAKA,eAAeD,IAAiB;AAC9B,MAAIM;AAEJ,MAAI;AAEF,IAAAA,IAAU,MAAM,OAAO,OAAO;AAAA,EAChC,SAAS3B,GAAO;AACd,UAAM,IAAI;AAAA,MACR;AAAA,MACA,EAAE,OAAOA,EAAA;AAAA,IAAM;AAAA,EAEnB;AAEA,SAAO2B,EAAO;AAChB;"}