@gradial/aci 0.1.52-rc.2 → 0.1.52-rc.21

package/dist/mimic/core.js

@@ -0,0 +1,31 @@
+// View-as-audience mimic banner contract (specs/features/audience-mimic).
+// The platform edge router (internal/domain/hosting/runtime/mimic.ts) owns
+// the mimic session — token validation, cookies, redirects, and banner
+// creation. On body-less SSR rewrites it forwards the rendered banner to the
+// framework host via MIMIC_BANNER_HEADER; this module is the framework-side
+// leg that decodes it (the MimicBanner component in next/page.tsx). The
+// middleware strips any inbound copy of the header and sets it only for a
+// validated session, so the decoded HTML is trusted as authored.
+//
+// The SDK-side token validator that used to live here served the retired
+// Next personalization-host lane (ADR 0041); the Go/TS validators in
+// internal/domain/edge remain pinned by the shared vector file.
+export const MIMIC_BANNER_HEADER = 'x-aci-mimic-banner';
+export function decodeMimicBanner(encoded) {
+    try {
+        return new TextDecoder().decode(base64URLToBytes(encoded));
+    }
+    catch {
+        return '';
+    }
+}
+function base64URLToBytes(value) {
+    const base64 = value.replace(/-/g, '+').replace(/_/g, '/');
+    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');
+    const binary = atob(padded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes;
+}

package/dist/next/error-seat-payload.js

@@ -104,7 +104,7 @@ export function buildErrorSeatPayload(contentRoot, posture) {
                 if (!fragmentRef)
                     continue;
                 const fragment = readJSON(root, fragmentRef);
-                blocks.push({ id: fragment.id, component: fragment.component, props: fragment.props || {} });
+                blocks.push({ $type: 'component', id: fragment.id, component: fragment.component, props: fragment.props || {} });
             }
             if (blocks.length)
                 slots[slot.name] = blocks;

package/dist/next/hosted-page-target.d.ts

@@ -0,0 +1,7 @@
+export type HostedPageTarget = Readonly<{
+    kind: 'base' | 'variant';
+    route: string;
+    pageRef: string;
+    variantKey?: string;
+}>;
+export declare function parseHostedPageTarget(rawSegments: readonly string[]): HostedPageTarget | null;

package/dist/next/hosted-page-target.js

@@ -0,0 +1,39 @@
+const VARIANT_NAMESPACE = '__variant';
+export function parseHostedPageTarget(rawSegments) {
+    const segments = decodeSegments(rawSegments);
+    if (!segments)
+        return null;
+    const variantAt = segments.indexOf(VARIANT_NAMESPACE);
+    if (variantAt < 0)
+        return target('base', segments, segments);
+    if (variantAt !== segments.lastIndexOf(VARIANT_NAMESPACE) || variantAt !== segments.length - 2) {
+        return null;
+    }
+    return {
+        ...target('variant', segments.slice(0, variantAt), segments),
+        variantKey: segments[variantAt + 1],
+    };
+}
+function target(kind, routeSegments, targetSegments) {
+    return {
+        kind,
+        route: routeSegments.length === 0 ? '/' : `/${routeSegments.join('/')}/`,
+        pageRef: ['routes', ...targetSegments, 'index.json'].join('/'),
+    };
+}
+function decodeSegments(rawSegments) {
+    const segments = [];
+    for (const raw of rawSegments) {
+        let segment;
+        try {
+            segment = decodeURIComponent(raw);
+        }
+        catch {
+            return null;
+        }
+        if (!segment || segment === '.' || segment === '..' || segment.includes('/'))
+            return null;
+        segments.push(segment);
+    }
+    return segments;
+}

package/dist/next/index.d.ts

@@ -5,7 +5,6 @@ export { createPage, type CreatePageOptions, type SlotPropsFn } from './page.js'
 export { getSiteConfig, getFragment, getLayout, getPage, getRenderInput, routeFromNextParams } from './server.js';
 export { PageNotFoundError, FragmentNotFoundError, LayoutNotFoundError } from './server.js';
 export { CollectScript, type CollectScriptProps } from './collect-script.js';
-export { aciMiddlewareMatcher } from './middleware.js';
 export { AssignmentsScript, type AssignmentsScriptProps } from './assignments-script.js';
 export { createNotFound, renderPageForRoute, resolveErrorPage, type NextResolvedErrorPage, } from './error-pages.js';
 export { ErrorPageInstrumentation } from './error-page-instrumentation.js';

package/dist/next/index.js

@@ -5,7 +5,6 @@ export { createPage } from './page.js';
 export { getSiteConfig, getFragment, getLayout, getPage, getRenderInput, routeFromNextParams } from './server.js';
 export { PageNotFoundError, FragmentNotFoundError, LayoutNotFoundError } from './server.js';
 export { CollectScript } from './collect-script.js';
-export { aciMiddlewareMatcher } from './middleware.js';
 export { AssignmentsScript } from './assignments-script.js';
 export { createNotFound, renderPageForRoute, resolveErrorPage, } from './error-pages.js';
 export { ErrorPageInstrumentation } from './error-page-instrumentation.js';

package/dist/next/page.d.ts

@@ -31,12 +31,10 @@ export interface CreatePageOptions {
  * the collect script tag exactly once per page (design/04 contract tag).
  *
  * Release-scoped routes (production): the middleware rewrites a public URL
- * to `/__r/{releaseId}/routes/{path}`. The optional catch-all `[[...slug]]`
- * receives `['__r', releaseId, 'routes', ...pathSegments]`. createPage
- * extracts the releaseId and passes it to the content loader, giving
- * each release a unique CDN cache key without a separate route folder.
- * The `routes` namespace segment leaves room for future siblings under
- * the release prefix (e.g. `/__r/{releaseId}/assets/*`).
+ * to `/__r/{releaseId}/{targetRef}`. The target ref selects the exact immutable
+ * base or variant page while its prefix identifies the logical public route.
+ * createPage passes both identities to the content loader, giving each target
+ * a distinct CDN cache key without sending selection headers into Next.
  *
  * Dev pass-through (ACI_CONTENT_PROVIDER=file): the middleware passes
  * requests through unrewritten, so `/` arrives with an empty/undefined
@@ -54,4 +52,29 @@ export declare function createPage(registry: Registry, options?: CreatePageOptio
     generateMetadata: ({ params }: NextPageProps) => Promise<Metadata>;
     default: ({ params }: NextPageProps) => Promise<import("react").JSX.Element>;
 };
+/**
+ * Resolves the logical route and releaseId from Next.js catch-all params.
+ *
+ * Two shapes are supported:
+ *
+ * 1. **Rewritten (production):** middleware rewrites a public URL to the exact
+ *    selected target under `/__r/{releaseId}`. A root variant therefore has
+ *    `['__r', releaseId, '__variant', variantKey]`. The full suffix selects the
+ *    immutable page object; the segments before the reserved `__variant`
+ *    namespace form the logical public route.
+ *
+ * 2. **Dev pass-through (ACI_CONTENT_PROVIDER=file):** middleware passes
+ *    requests through unrewritten, so the slug is the raw public path
+ *    segments (possibly empty/undefined for `/`). No releaseId is present;
+ *    the file provider serves content from disk.
+ */
+export declare function resolveRouteAndRelease(params: Promise<{
+    slug?: string[];
+}> | {
+    slug?: string[];
+}): Promise<{
+    route: string;
+    releaseId?: string;
+    pageRef?: string;
+}>;
 export {};

package/dist/next/page.js

@@ -1,12 +1,15 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { notFound } from 'next/navigation.js';
+import { headers } from 'next/headers.js';
 import { Fragment } from 'react';
 import { PageNotFoundError, getRenderInput, getLayout, getFragment, } from './server.js';
+import { MIMIC_BANNER_HEADER, decodeMimicBanner } from '../mimic/core.js';
 import { routeMetadataForContent, resolveSlots, } from '../content/index.js';
 import { renderBlocks } from './render.js';
 import { AssignmentsScript } from './assignments-script.js';
 import { CollectScript } from './collect-script.js';
 import { renderProofContentFor } from '../internal/render-proof.js';
+import { parseHostedPageTarget } from './hosted-page-target.js';
 /**
  * Creates the catch-all route handler for a Next.js ACI site.
  *
@@ -28,12 +31,10 @@ import { renderProofContentFor } from '../internal/render-proof.js';
  * the collect script tag exactly once per page (design/04 contract tag).
  *
  * Release-scoped routes (production): the middleware rewrites a public URL
- * to `/__r/{releaseId}/routes/{path}`. The optional catch-all `[[...slug]]`
- * receives `['__r', releaseId, 'routes', ...pathSegments]`. createPage
- * extracts the releaseId and passes it to the content loader, giving
- * each release a unique CDN cache key without a separate route folder.
- * The `routes` namespace segment leaves room for future siblings under
- * the release prefix (e.g. `/__r/{releaseId}/assets/*`).
+ * to `/__r/{releaseId}/{targetRef}`. The target ref selects the exact immutable
+ * base or variant page while its prefix identifies the logical public route.
+ * createPage passes both identities to the content loader, giving each target
+ * a distinct CDN cache key without sending selection headers into Next.
  *
  * Dev pass-through (ACI_CONTENT_PROVIDER=file): the middleware passes
  * requests through unrewritten, so `/` arrives with an empty/undefined
@@ -49,8 +50,9 @@ import { renderProofContentFor } from '../internal/render-proof.js';
 export function createPage(registry, options) {
     const dynamic = 'force-dynamic';
     async function generateMetadata({ params }) {
-        const { route, releaseId } = await resolveRouteAndRelease(params);
-        const input = await getRenderInput(route, { releaseId });
+        const { route, releaseId, pageRef } = await resolveRouteAndRelease(params);
+        const fetchConfig = { releaseId, pageRef };
+        const input = await getRenderInput(route, fetchConfig);
         const meta = routeMetadataForContent(input.siteConfig, input.page);
         return {
             title: meta.title,
@@ -64,8 +66,8 @@ export function createPage(registry, options) {
         };
     }
     async function CatchAllPage({ params }) {
-        const { route, releaseId } = await resolveRouteAndRelease(params);
-        const fetchConfig = { releaseId };
+        const { route, releaseId, pageRef } = await resolveRouteAndRelease(params);
+        const fetchConfig = { releaseId, pageRef };
         try {
             const input = await getRenderInput(route, fetchConfig);
             if (!input.page)
@@ -84,9 +86,9 @@ export function createPage(registry, options) {
                 }
                 return (_jsx(Fragment, { children: renderedBlocks }, slot.name));
             }));
-            return (_jsxs(_Fragment, { children: [renderProofContent
+            return (_jsxs(_Fragment, { children: [renderedSlots.filter(Boolean), _jsx(AssignmentsScript, { page: input.page }), _jsx(CollectScript, { siteConfig: input.siteConfig }), _jsx(MimicBanner, { html: await readMimicBannerHTML() }), renderProofContent
                         ? _jsx("meta", { name: "aci-render-proof", content: renderProofContent })
-                        : null, renderedSlots.filter(Boolean), _jsx(AssignmentsScript, { page: input.page }), _jsx(CollectScript, { siteConfig: input.siteConfig })] }));
+                        : null] }));
         }
         catch (error) {
             if (error instanceof PageNotFoundError)
@@ -105,19 +107,18 @@ export function createPage(registry, options) {
  *
  * Two shapes are supported:
  *
- * 1. **Rewritten (production):** middleware rewrites a public URL to
- *    `/__r/{releaseId}/routes/{path}`, so slug is
- *    `['__r', releaseId, 'routes', ...pathSegments]`. The releaseId is
- *    extracted; the remaining segments form the content route. The `routes`
- *    segment is the namespace for page routes (siblings like `assets/` live
- *    under the same release prefix).
+ * 1. **Rewritten (production):** middleware rewrites a public URL to the exact
+ *    selected target under `/__r/{releaseId}`. A root variant therefore has
+ *    `['__r', releaseId, '__variant', variantKey]`. The full suffix selects the
+ *    immutable page object; the segments before the reserved `__variant`
+ *    namespace form the logical public route.
  *
  * 2. **Dev pass-through (ACI_CONTENT_PROVIDER=file):** middleware passes
  *    requests through unrewritten, so the slug is the raw public path
  *    segments (possibly empty/undefined for `/`). No releaseId is present;
  *    the file provider serves content from disk.
  */
-async function resolveRouteAndRelease(params) {
+export async function resolveRouteAndRelease(params) {
     const resolved = await params;
     const slug = resolved.slug ?? [];
     if (slug.length >= 2 && slug[0] === '__r') {
@@ -125,13 +126,14 @@ async function resolveRouteAndRelease(params) {
         if (!releaseId || releaseId.includes('/') || releaseId === '.' || releaseId === '..') {
             return { route: '/' };
         }
-        // Skip the 'routes' namespace segment when present.
-        const rest = slug.length >= 3 && slug[2] === 'routes' ? slug.slice(3) : slug.slice(2);
-        if (rest.length === 0)
-            return { route: '/', releaseId };
-        if (rest.some((s) => s === '' || s === '.' || s === '..'))
+        const target = parseHostedPageTarget(slug.slice(2));
+        if (!target)
             return { route: '/' };
-        return { route: `/${rest.join('/')}/`, releaseId };
+        return {
+            route: target.route,
+            releaseId,
+            pageRef: target.pageRef,
+        };
     }
     const route = routeFromSlug(slug);
     return { route };
@@ -141,3 +143,23 @@ function routeFromSlug(slug) {
         return '/';
     return `/${slug.join('/')}/`;
 }
+// The middleware emits the banner HTML in a reserved request header only
+// after validating a signed mimic token; viewer-forged copies are stripped at
+// the dispatch gate (specs/features/audience-mimic REQ-4). The header read
+// happens here (the page already awaits request-scoped data) so the banner
+// itself stays a synchronous leaf.
+async function readMimicBannerHTML() {
+    try {
+        const current = await headers();
+        return decodeMimicBanner(current.get(MIMIC_BANNER_HEADER) || '');
+    }
+    catch {
+        // headers() has no request context in static generation and unit tests.
+        return '';
+    }
+}
+function MimicBanner({ html }) {
+    if (!html)
+        return null;
+    return _jsx("div", { dangerouslySetInnerHTML: { __html: html } });
+}

package/dist/next/server.js

@@ -1,14 +1,18 @@
 import { headers } from 'next/headers.js';
 import { FragmentNotFoundError, LayoutNotFoundError, PageNotFoundError, } from '../content/provider.js';
+import { ObjectContentProvider } from '../providers/object.js';
 import { normalizeRoute } from '../content/routes.js';
 import { getCachedManifest, getCachedSiteConfig } from '../content/cache.js';
 import { S3ContentProvider } from '../providers/s3.js';
+import { VercelReleaseObjectReader } from '../providers/vercel-object-reader.js';
 import { GRADIAL_RENDER_INPUT_HEADER, getPendingRenderInput } from '../runtime/page.js';
 import { attachRenderProofReceipt, selectVerifiedPage, } from '../internal/render-proof.js';
 import { getUncachedEdgeConfigValue } from './edge-config.js';
 import { activeReleaseV1Key, clampDeploymentCompatibleReleaseV1, decodeActiveReleaseV1, decodeDeploymentCompatibilityV1, deploymentCompatibilityKey, } from './vercel-edge-projection-v1.js';
 export { FragmentNotFoundError, PageNotFoundError, LayoutNotFoundError };
-const releaseObjectReaderSymbol = Symbol.for('aci.releaseObjectReader');
+const releaseObjectReaderSymbol = Symbol.for('@gradial/aci.release-object-reader');
+const objectProviders = new WeakMap();
+let vercelReleaseObjectReader;
 export function setReleaseObjectReader(reader) {
     const scope = globalThis;
     if (reader)
@@ -339,6 +343,29 @@ async function resolveS3Provider(config) {
 }
 async function resolveProviderWithFallback(config) {
     const injected = getInjectedReader();
+    const pageRef = config.pageRef;
+    const hostedReaderConfigured = injected || config.roleArn || process.env.AWS_ROLE_ARN;
+    if (pageRef && hostedReaderConfigured) {
+        const releaseId = config.releaseId || process.env.ACI_RELEASE_ID || 'test';
+        let provider = objectProviders.get(config);
+        if (!provider) {
+            if (!injected && !vercelReleaseObjectReader) {
+                vercelReleaseObjectReader = new VercelReleaseObjectReader({
+                    bucket: config.bucket,
+                    keyPrefix: config.keyPrefix,
+                    region: config.region,
+                    roleArn: config.roleArn,
+                    endpoint: config.endpoint,
+                });
+            }
+            const reader = injected || vercelReleaseObjectReader;
+            if (!reader)
+                throw new Error('ACI hosted page reader is unavailable');
+            provider = new ObjectContentProvider({ releaseId, pageRef, reader });
+            objectProviders.set(config, provider);
+        }
+        return provider;
+    }
     if (injected) {
         const releaseId = config.releaseId || process.env.ACI_RELEASE_ID || 'test';
         return new InjectedReaderProvider(releaseId, injected);

package/dist/next/vercel-edge-projection-v1.d.ts

@@ -1,7 +1,3 @@
-import type { EdgeRouteManifest } from './personalization-host.js';
-export declare const VERCEL_EDGE_PROJECTION_SCHEMA_V1 = "gradial.vercel.edgeRoutes.v1";
-export declare const VERCEL_EDGE_PROJECTION_ENCODING_V1 = "gzip+base64";
-export declare const MAX_VERCEL_EDGE_MANIFEST_BYTES_V1: number;
 export interface ActiveReleasePointerV1 {
     releaseId: string;
     sequence: bigint;
@@ -13,12 +9,7 @@ export interface DeploymentCompatibilityV1 {
     maxSequence?: bigint;
 }
 export declare function activeReleaseV1Key(siteId: string): string;
-export declare function edgeRoutesV1Key(siteId: string, releaseId: string): string;
 export declare function deploymentCompatibilityKey(siteId: string, deploymentId: string): string;
 export declare function decodeActiveReleaseV1(value: unknown): ActiveReleasePointerV1;
 export declare function decodeDeploymentCompatibilityV1(value: unknown): DeploymentCompatibilityV1;
 export declare function clampDeploymentCompatibleReleaseV1(active: ActiveReleasePointerV1, compatibility: DeploymentCompatibilityV1): string;
-export declare function decodeEdgeRouteProjectionV1(value: unknown, expected: {
-    siteId: string;
-    releaseId: string;
-}): EdgeRouteManifest;