@gradial/aci 0.1.48 → 0.1.51-ssr.2

package/dist/internal/render-proof.js

@@ -1,197 +0,0 @@
-const RENDER_PROOF_VERSION = 'gradial.aci.renderProof.v1';
-const RENDER_PROOF_KEYS = [
-    'version',
-    'releaseId',
-    'route',
-    'contentRef',
-    'contentSha256',
-    'variantKey',
-];
-const MAX_RENDER_PROOF_CONTENT_BYTES = 4096;
-const receiptBrand = Symbol('aci.verified-page-receipt');
-const renderProofReceipts = new WeakMap();
-/** @internal */
-export const selectVerifiedPage = Symbol('aci.select-verified-page');
-/** @internal */
-export function createVerifiedPageReceipt(value) {
-    // Selection itself must fail if the coupled marker cannot be emitted.
-    // `getPage` also uses this capability and intentionally discards the
-    // receipt, so deferring the size check to React would permit markerless
-    // success on that public server loader.
-    validateVerifiedPageReceipt(value);
-    return Object.freeze({
-        ...value,
-        [receiptBrand]: true,
-    });
-}
-/** @internal */
-export function validateVerifiedPageReceipt(value) {
-    encodeRenderProofContent(toRenderProof(value));
-}
-/** @internal */
-export function attachRenderProofReceipt(input, receipt) {
-    if (receipt[receiptBrand] !== true) {
-        throw new Error('ACI render proof integrity error: unverified receipt');
-    }
-    renderProofReceipts.set(input, receipt);
-}
-/** @internal */
-export function renderProofContentFor(input) {
-    const receipt = renderProofReceipts.get(input);
-    return receipt ? encodeRenderProofContent(toRenderProof(receipt)) : null;
-}
-/** @internal */
-export function encodeRenderProofContent(proof) {
-    validateRenderProof(proof);
-    const canonicalJSON = JSON.stringify({
-        version: proof.version,
-        releaseId: proof.releaseId,
-        route: proof.route,
-        contentRef: proof.contentRef,
-        contentSha256: proof.contentSha256,
-        variantKey: proof.variantKey,
-    });
-    const content = Buffer.from(canonicalJSON, 'utf8').toString('base64url');
-    if (content.length < 1 || content.length > MAX_RENDER_PROOF_CONTENT_BYTES) {
-        throw new Error(`ACI render proof integrity error: marker content is ${content.length} bytes`);
-    }
-    return content;
-}
-/** @internal */
-export function decodeRenderProofContent(content) {
-    if (content.length < 1
-        || content.length > MAX_RENDER_PROOF_CONTENT_BYTES
-        || !/^[A-Za-z0-9_-]+$/.test(content)) {
-        throw new Error('ACI render proof integrity error: invalid marker encoding');
-    }
-    const bytes = Buffer.from(content, 'base64url');
-    if (bytes.toString('base64url') !== content) {
-        throw new Error('ACI render proof integrity error: non-canonical base64url');
-    }
-    let canonicalJSON = '';
-    try {
-        canonicalJSON = new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-    }
-    catch (cause) {
-        throw integrityError('marker is not valid UTF-8', cause);
-    }
-    let decoded;
-    try {
-        decoded = JSON.parse(canonicalJSON);
-    }
-    catch (cause) {
-        throw integrityError('marker is not valid JSON', cause);
-    }
-    if (!isRecord(decoded)) {
-        throw new Error('ACI render proof integrity error: marker must be an object');
-    }
-    if (!sameKeys(Object.keys(decoded), RENDER_PROOF_KEYS)) {
-        throw new Error('ACI render proof integrity error: marker keys are not canonical');
-    }
-    const proof = {
-        version: decoded.version,
-        releaseId: decoded.releaseId,
-        route: decoded.route,
-        contentRef: decoded.contentRef,
-        contentSha256: decoded.contentSha256,
-        variantKey: decoded.variantKey,
-    };
-    validateRenderProof(proof);
-    if (JSON.stringify(proof) !== canonicalJSON) {
-        throw new Error('ACI render proof integrity error: marker JSON is not canonical');
-    }
-    return Object.freeze(proof);
-}
-function toRenderProof(receipt) {
-    return {
-        version: RENDER_PROOF_VERSION,
-        releaseId: receipt.releaseId,
-        route: receipt.route,
-        contentRef: receipt.contentRef,
-        contentSha256: receipt.contentSha256,
-        variantKey: receipt.variantKey,
-    };
-}
-function validateRenderProof(proof) {
-    if (!isRecord(proof)) {
-        throw new Error('ACI render proof integrity error: proof must be an object');
-    }
-    for (const key of RENDER_PROOF_KEYS) {
-        if (typeof proof[key] !== 'string') {
-            throw new Error(`ACI render proof integrity error: ${key} must be a string`);
-        }
-        if (hasUnpairedSurrogate(proof[key])) {
-            throw new Error(`ACI render proof integrity error: ${key} has invalid Unicode`);
-        }
-    }
-    if (proof.version !== RENDER_PROOF_VERSION) {
-        throw new Error('ACI render proof integrity error: unsupported version');
-    }
-    if (Buffer.byteLength(proof.releaseId, 'ascii') > 128
-        || !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(proof.releaseId)) {
-        throw new Error('ACI render proof integrity error: invalid releaseId');
-    }
-    if (Buffer.byteLength(proof.route, 'utf8') > 2048
-        || !isCanonicalRoute(proof.route)) {
-        throw new Error('ACI render proof integrity error: invalid route');
-    }
-    if (Buffer.byteLength(proof.contentRef, 'utf8') > 2048
-        || !isCleanContentRef(proof.contentRef)) {
-        throw new Error('ACI render proof integrity error: invalid contentRef');
-    }
-    if (!/^[0-9a-f]{64}$/.test(proof.contentSha256)) {
-        throw new Error('ACI render proof integrity error: invalid contentSha256');
-    }
-    if (Buffer.byteLength(proof.variantKey, 'utf8') > 1024
-        || /[\u0000-\u001f\u007f]/.test(proof.variantKey)) {
-        throw new Error('ACI render proof integrity error: invalid variantKey');
-    }
-}
-function isCanonicalRoute(route) {
-    if (route === '/')
-        return true;
-    if (!route.startsWith('/')
-        || route.startsWith('//')
-        || route.endsWith('/')
-        || /[\u0000-\u001f\u007f]/.test(route)) {
-        return false;
-    }
-    return route.slice(1).split('/').every((segment) => (segment !== '' && segment !== '.' && segment !== '..'));
-}
-function isCleanContentRef(ref) {
-    if (!ref
-        || ref.startsWith('/')
-        || ref.endsWith('/')
-        || ref.includes('\\')
-        || /[\u0000-\u001f\u007f]/.test(ref)) {
-        return false;
-    }
-    return ref.split('/').every((segment) => (segment !== '' && segment !== '.' && segment !== '..'));
-}
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-function sameKeys(actual, expected) {
-    return actual.length === expected.length
-        && actual.every((key, index) => key === expected[index]);
-}
-function hasUnpairedSurrogate(value) {
-    for (let index = 0; index < value.length; index += 1) {
-        const code = value.charCodeAt(index);
-        if (code >= 0xd800 && code <= 0xdbff) {
-            const next = value.charCodeAt(index + 1);
-            if (!(next >= 0xdc00 && next <= 0xdfff))
-                return true;
-            index += 1;
-        }
-        else if (code >= 0xdc00 && code <= 0xdfff) {
-            return true;
-        }
-    }
-    return false;
-}
-function integrityError(message, cause) {
-    const error = new Error(`ACI render proof integrity error: ${message}`);
-    error.cause = cause;
-    return error;
-}

package/dist/next/asset-route.d.ts

@@ -1,10 +0,0 @@
-type AssetRouteContext = {
-    params: Promise<AssetRouteParams>;
-};
-type AssetRouteParams = {
-    path?: string[];
-};
-export declare const runtime = "nodejs";
-export declare const dynamic = "force-dynamic";
-export declare function GET(_request: Request, { params }: AssetRouteContext): Promise<Response>;
-export {};

package/dist/next/asset-route.js

@@ -1,45 +0,0 @@
-import { FileContentProvider } from '../providers/file.js';
-import { getDamAssetResponse, getReleaseAssetResponse, isDamAssetPath, resolveReleaseId, } from './server.js';
-export const runtime = 'nodejs';
-export const dynamic = 'force-dynamic';
-export async function GET(_request, { params }) {
-    const resolvedParams = await params;
-    const assetPath = '/' + (resolvedParams.path || []).join('/');
-    if (assetPath === '/') {
-        return new Response('asset not found', { status: 404 });
-    }
-    const local = await localAssetResponse(assetPath);
-    if (local) {
-        return local;
-    }
-    // DAM assets are global (not release-scoped): serve them from the hosting
-    // bucket root without resolving a release.
-    if (isDamAssetPath(assetPath)) {
-        try {
-            return await getDamAssetResponse(assetPath);
-        }
-        catch {
-            return new Response('dam asset not found', { status: 404 });
-        }
-    }
-    try {
-        const releaseId = await resolveReleaseId();
-        return await getReleaseAssetResponse(releaseId, assetPath);
-    }
-    catch {
-        return new Response('asset not found', { status: 404 });
-    }
-}
-async function localAssetResponse(assetPath) {
-    const localRoot = process.env.ACI_LOCAL_ASSET_ROOT;
-    if (localRoot) {
-        const response = await new FileContentProvider(localRoot).fetchRaw(assetPath);
-        if (response.ok)
-            return response;
-    }
-    if (process.env.ACI_CONTENT_PROVIDER !== 'file') {
-        return null;
-    }
-    const response = await new FileContentProvider().fetchRaw(assetPath);
-    return response.ok ? response : null;
-}

package/dist/next/collect-route.d.ts

@@ -1,19 +0,0 @@
-import { type IdentitySigningKeys, type PersonalizationCollectionStore } from './personalization-host.js';
-export interface PersonalizationCollectRouteConfig {
-    siteId: string;
-    store: PersonalizationCollectionStore;
-    identityKeys: IdentitySigningKeys;
-    /**
-     * Claims verify keys (kid -> secret) for withdrawal EVIDENCE
-     * (anonymous-experiments REQ-6): suppression fires only when the request
-     * presents a signature-verified aci_claims cookie — presence alone is
-     * spoofable, and under universal minting an unverified trigger would
-     * suppress every reject-all visitor. Empty = evidence never verifies =
-     * suppression disabled (fails safe).
-     */
-    claimsKeys?: Record<string, string>;
-    retentionSeconds?: number;
-    secureCookies?: boolean;
-    now?: () => Date;
-}
-export declare function createPersonalizationCollectRoute(config: PersonalizationCollectRouteConfig): (request: Request) => Promise<Response>;