@gyral/core 0.2.0 → 0.3.1

package/dist/view/render/warn.js

@@ -0,0 +1,114 @@
+// Development-only errors and warnings of the renderer (view/02-bindings.md "Child values",
+// view/03-lists.md "Keys", view/09-template-rules.md "Warnings"). Every call site is guarded by
+// `if (DEV)`, so production bundles drop this module. Messages say what to write instead.
+const SPEC = 'docs/design-docs/view';
+const warned = new WeakSet();
+const describe = (value) => typeof value === 'function'
+    ? 'a function'
+    : Array.isArray(value)
+        ? 'an array'
+        : typeof value === 'object'
+            ? `an object (${Object.prototype.toString.call(value).slice(8, -1)})`
+            : `a ${typeof value}`;
+/** A child hole got a value it can't render: an error in development. */
+export function badChild(value) {
+    throw new TypeError(`gyral: a child hole got ${describe(value)}, which it can't render. Child holes take ` +
+        `text, numbers, html\`…\` results, each(…), arrays, raw(…), or null/undefined/false/` +
+        `nothing for nothing. Format the value as text, or render it with a template ` +
+        `(${SPEC}/02-bindings.md "Child values").`);
+}
+/** `true` in a child hole, once per part: usually a `cond && x` slip. */
+export function warnTrue(part) {
+    if (warned.has(part))
+        return;
+    warned.add(part);
+    console.warn('gyral: `true` in a child hole renders nothing. It is usually a `cond && x` slip where ' +
+        'cond is a boolean and x is missing; write `cond ? x : nothing` ' +
+        `(${SPEC}/02-bindings.md "Child values").`);
+}
+/** An attribute or text-content hole got an object or function, once per part. */
+export function warnValue(part, value, where) {
+    if (warned.has(part))
+        return;
+    warned.add(part);
+    console.warn(`gyral: ${where} got ${describe(value)}; it is written as String(value). Pass a string, ` +
+        `number or boolean, or null/undefined/nothing to leave it out ` +
+        `(${SPEC}/02-bindings.md "Attribute values").`);
+}
+/**
+ * A property binding got a function, once per part (02 "Properties"): views attach no
+ * closures. Built-in elements and Gyral components warn; other custom elements may take a
+ * callback (a third-party widget's API), so they don't.
+ */
+export function warnFunctionProp(part, el, name) {
+    const gyral = el.constructor.spec !== undefined;
+    if (warned.has(part) || (el.localName.includes('-') && !gyral))
+        return;
+    warned.add(part);
+    console.warn(`gyral: .${name}=\${…} on <${el.localName}> got a function. Views attach no closures: ` +
+        (gyral
+            ? 'props are data (they travel in hydration seeds); pass data and let the component ' +
+                'decide what to do with it, and hear back from it through its outputs'
+            : 'name an intent with data-intent=${i.Name} for events, and put behaviour on an ' +
+                'element in a hook (defineHook)') +
+        ` (${SPEC}/02-bindings.md "Properties").`);
+}
+let rawWarned = false;
+/** `raw()` parsed in the browser, once per page. */
+export function warnRaw() {
+    if (rawWarned)
+        return;
+    rawWarned = true;
+    console.warn('gyral: raw() rendered in the browser. It works, but every change re-parses the markup; ' +
+        'prefer templates for content that changes, and keep raw() for server-rendered markup ' +
+        `(${SPEC}/09-template-rules.md "Warnings").`);
+}
+/** Keys must be unique strings or numbers: an error in development. */
+export function badKey(key, index, duplicate) {
+    const problem = duplicate
+        ? `the key ${JSON.stringify(key)} appears twice (again at index ${String(index)})`
+        : `the key at index ${String(index)} is ${describe(key)}`;
+    throw new Error(`gyral: each(): ${problem}. Keys must be unique strings or numbers within a list, such ` +
+        `as a stable id: each(items, (x) => x.id, Row) (${SPEC}/03-lists.md "Keys").`);
+}
+/** A skipped row would render differently: it reads something besides `item` and `pick`. */
+export function warnImpureRow(row) {
+    const name = row.name === '' ? 'a row function' : `the row function ${row.name}`;
+    console.warn(`gyral: each(): ${name} depends on something not passed through \`item\` or \`pick\`, so ` +
+        'skipped rows would show stale content. Return what it reads from `pick` and take it as ' +
+        `the second argument (${SPEC}/03-lists.md "Rows must be pure").`);
+}
+/** A hook hole got something other than a hook result. */
+/** `?modal`/`?popover-open` with the bindings' code left out of the build (toggles.ts). */
+export function warnToggle(el, name) {
+    if (warned.has(el))
+        return;
+    warned.add(el);
+    console.warn(`gyral: ?${name} on <${el.localName}> does nothing: the build left its code out ` +
+        `(${SPEC}/05-element.md "Features register themselves").`);
+}
+export function badHook(value) {
+    throw new TypeError(`gyral: an element hook position (\${…} inside a start tag) got ${describe(value)}. Only ` +
+        `hooks made with defineHook() go there, e.g. <input \${invalid(errors)}> ` +
+        `(${SPEC}/02-bindings.md "Element hooks").`);
+}
+/**
+ * An svg template renders only in SVG content: an SVG element other than <foreignObject>,
+ * <desc> or <title>, whose content is HTML (01 "svg templates"). A detached fragment (an
+ * instance being built) isn't checked: its place is known only when it is inserted.
+ */
+export function checkSvgParent(parent) {
+    if (parent.nodeType === 11 && !('host' in parent))
+        return;
+    const el = parent;
+    if (el.namespaceURI === 'http://www.w3.org/2000/svg' &&
+        !/^(foreignObject|desc|title)$/.test(el.localName)) {
+        return;
+    }
+    const where = el.nodeType === 1 ? `<${el.localName}>` : 'a shadow root';
+    throw new Error(`gyral: an svg template is rendered into ${where}, which isn't SVG content. svg\`…\` ` +
+        'fragments are SVG elements: render them inside an <svg> (or another SVG element, not ' +
+        '<foreignObject>) of an html template, html`<svg viewBox="…">${svg`…`}</svg>`, or write ' +
+        `the whole graphic with html (${SPEC}/01-templates.md "svg templates").`);
+}
+//# sourceMappingURL=warn.js.map

package/dist/view/render/warn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"warn.js","sourceRoot":"","sources":["../../../src/view/render/warn.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gGAAgG;AAChG,0FAA0F;AAE1F,MAAM,IAAI,GAAG,uBAAuB,CAAC;AACrC,MAAM,MAAM,GAAG,IAAI,OAAO,EAAU,CAAC;AAErC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAU,EAAE,CAC1C,OAAO,KAAK,KAAK,UAAU;IACzB,CAAC,CAAC,YAAY;IACd,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,cAAc,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG;YACrE,CAAC,CAAC,KAAK,OAAO,KAAK,EAAE,CAAC;AAE9B,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,MAAM,IAAI,SAAS,CACjB,2BAA2B,QAAQ,CAAC,KAAK,CAAC,4CAA4C;QACpF,qFAAqF;QACrF,8EAA8E;QAC9E,IAAI,IAAI,kCAAkC,CAC7C,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,CACV,wFAAwF;QACtF,iEAAiE;QACjE,IAAI,IAAI,kCAAkC,CAC7C,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAAc,EAAE,KAAa;IACnE,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO;IAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,CACV,UAAU,KAAK,QAAQ,QAAQ,CAAC,KAAK,CAAC,mDAAmD;QACvF,+DAA+D;QAC/D,IAAI,IAAI,sCAAsC,CACjD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,EAAW,EAAE,IAAY;IACtE,MAAM,KAAK,GAAI,EAAE,CAAC,WAA2C,CAAC,IAAI,KAAK,SAAS,CAAC;IACjF,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO;IACvE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,CAAC,IAAI,CACV,WAAW,IAAI,cAAc,EAAE,CAAC,SAAS,8CAA8C;QACrF,CAAC,KAAK;YACJ,CAAC,CAAC,mFAAmF;gBACnF,sEAAsE;YACxE,CAAC,CAAC,gFAAgF;gBAChF,gCAAgC,CAAC;QACrC,KAAK,IAAI,gCAAgC,CAC5C,CAAC;AACJ,CAAC;AAED,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB,oDAAoD;AACpD,MAAM,UAAU,OAAO;IACrB,IAAI,SAAS;QAAE,OAAO;IACtB,SAAS,GAAG,IAAI,CAAC;IACjB,OAAO,CAAC,IAAI,CACV,yFAAyF;QACvF,uFAAuF;QACvF,IAAI,IAAI,oCAAoC,CAC/C,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,MAAM,CAAC,GAAY,EAAE,KAAa,EAAE,SAAkB;IACpE,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kCAAkC,MAAM,CAAC,KAAK,CAAC,GAAG;QAClF,CAAC,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5D,MAAM,IAAI,KAAK,CACb,kBAAkB,OAAO,+DAA+D;QACtF,kDAAkD,IAAI,uBAAuB,CAChF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAAC,GAAkC;IAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,IAAI,EAAE,CAAC;IACjF,OAAO,CAAC,IAAI,CACV,kBAAkB,IAAI,oEAAoE;QACxF,yFAAyF;QACzF,wBAAwB,IAAI,oCAAoC,CACnE,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,EAAW,EAAE,IAAY;IAClD,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO;IAC3B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,CAAC,IAAI,CACV,WAAW,IAAI,QAAQ,EAAE,CAAC,SAAS,8CAA8C;QAC/E,IAAI,IAAI,iDAAiD,CAC5D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,MAAM,IAAI,SAAS,CACjB,kEAAkE,QAAQ,CAAC,KAAK,CAAC,SAAS;QACxF,0EAA0E;QAC1E,IAAI,IAAI,mCAAmC,CAC9C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAY;IACzC,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;QAAE,OAAO;IAC1D,MAAM,EAAE,GAAG,MAAiB,CAAC;IAC7B,IACE,EAAE,CAAC,YAAY,KAAK,4BAA4B;QAChD,CAAC,8BAA8B,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAClD,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC;IACxE,MAAM,IAAI,KAAK,CACb,2CAA2C,KAAK,sCAAsC;QACpF,uFAAuF;QACvF,yFAAyF;QACzF,gCAAgC,IAAI,oCAAoC,CAC3E,CAAC;AACJ,CAAC","sourcesContent":["// Development-only errors and warnings of the renderer (view/02-bindings.md \"Child values\",\n// view/03-lists.md \"Keys\", view/09-template-rules.md \"Warnings\"). Every call site is guarded by\n// `if (DEV)`, so production bundles drop this module. Messages say what to write instead.\n\nconst SPEC = 'docs/design-docs/view';\nconst warned = new WeakSet<object>();\n\nconst describe = (value: unknown): string =>\n  typeof value === 'function'\n    ? 'a function'\n    : Array.isArray(value)\n      ? 'an array'\n      : typeof value === 'object'\n        ? `an object (${Object.prototype.toString.call(value).slice(8, -1)})`\n        : `a ${typeof value}`;\n\n/** A child hole got a value it can't render: an error in development. */\nexport function badChild(value: unknown): never {\n  throw new TypeError(\n    `gyral: a child hole got ${describe(value)}, which it can't render. Child holes take ` +\n      `text, numbers, html\\`…\\` results, each(…), arrays, raw(…), or null/undefined/false/` +\n      `nothing for nothing. Format the value as text, or render it with a template ` +\n      `(${SPEC}/02-bindings.md \"Child values\").`,\n  );\n}\n\n/** `true` in a child hole, once per part: usually a `cond && x` slip. */\nexport function warnTrue(part: object): void {\n  if (warned.has(part)) return;\n  warned.add(part);\n  console.warn(\n    'gyral: `true` in a child hole renders nothing. It is usually a `cond && x` slip where ' +\n      'cond is a boolean and x is missing; write `cond ? x : nothing` ' +\n      `(${SPEC}/02-bindings.md \"Child values\").`,\n  );\n}\n\n/** An attribute or text-content hole got an object or function, once per part. */\nexport function warnValue(part: object, value: unknown, where: string): void {\n  if (warned.has(part)) return;\n  warned.add(part);\n  console.warn(\n    `gyral: ${where} got ${describe(value)}; it is written as String(value). Pass a string, ` +\n      `number or boolean, or null/undefined/nothing to leave it out ` +\n      `(${SPEC}/02-bindings.md \"Attribute values\").`,\n  );\n}\n\n/**\n * A property binding got a function, once per part (02 \"Properties\"): views attach no\n * closures. Built-in elements and Gyral components warn; other custom elements may take a\n * callback (a third-party widget's API), so they don't.\n */\nexport function warnFunctionProp(part: object, el: Element, name: string): void {\n  const gyral = (el.constructor as { readonly spec?: unknown }).spec !== undefined;\n  if (warned.has(part) || (el.localName.includes('-') && !gyral)) return;\n  warned.add(part);\n  console.warn(\n    `gyral: .${name}=\\${…} on <${el.localName}> got a function. Views attach no closures: ` +\n      (gyral\n        ? 'props are data (they travel in hydration seeds); pass data and let the component ' +\n          'decide what to do with it, and hear back from it through its outputs'\n        : 'name an intent with data-intent=${i.Name} for events, and put behaviour on an ' +\n          'element in a hook (defineHook)') +\n      ` (${SPEC}/02-bindings.md \"Properties\").`,\n  );\n}\n\nlet rawWarned = false;\n\n/** `raw()` parsed in the browser, once per page. */\nexport function warnRaw(): void {\n  if (rawWarned) return;\n  rawWarned = true;\n  console.warn(\n    'gyral: raw() rendered in the browser. It works, but every change re-parses the markup; ' +\n      'prefer templates for content that changes, and keep raw() for server-rendered markup ' +\n      `(${SPEC}/09-template-rules.md \"Warnings\").`,\n  );\n}\n\n/** Keys must be unique strings or numbers: an error in development. */\nexport function badKey(key: unknown, index: number, duplicate: boolean): never {\n  const problem = duplicate\n    ? `the key ${JSON.stringify(key)} appears twice (again at index ${String(index)})`\n    : `the key at index ${String(index)} is ${describe(key)}`;\n  throw new Error(\n    `gyral: each(): ${problem}. Keys must be unique strings or numbers within a list, such ` +\n      `as a stable id: each(items, (x) => x.id, Row) (${SPEC}/03-lists.md \"Keys\").`,\n  );\n}\n\n/** A skipped row would render differently: it reads something besides `item` and `pick`. */\nexport function warnImpureRow(row: (...args: never[]) => unknown): void {\n  const name = row.name === '' ? 'a row function' : `the row function ${row.name}`;\n  console.warn(\n    `gyral: each(): ${name} depends on something not passed through \\`item\\` or \\`pick\\`, so ` +\n      'skipped rows would show stale content. Return what it reads from `pick` and take it as ' +\n      `the second argument (${SPEC}/03-lists.md \"Rows must be pure\").`,\n  );\n}\n\n/** A hook hole got something other than a hook result. */\n/** `?modal`/`?popover-open` with the bindings' code left out of the build (toggles.ts). */\nexport function warnToggle(el: Element, name: string): void {\n  if (warned.has(el)) return;\n  warned.add(el);\n  console.warn(\n    `gyral: ?${name} on <${el.localName}> does nothing: the build left its code out ` +\n      `(${SPEC}/05-element.md \"Features register themselves\").`,\n  );\n}\n\nexport function badHook(value: unknown): never {\n  throw new TypeError(\n    `gyral: an element hook position (\\${…} inside a start tag) got ${describe(value)}. Only ` +\n      `hooks made with defineHook() go there, e.g. <input \\${invalid(errors)}> ` +\n      `(${SPEC}/02-bindings.md \"Element hooks\").`,\n  );\n}\n\n/**\n * An svg template renders only in SVG content: an SVG element other than <foreignObject>,\n * <desc> or <title>, whose content is HTML (01 \"svg templates\"). A detached fragment (an\n * instance being built) isn't checked: its place is known only when it is inserted.\n */\nexport function checkSvgParent(parent: Node): void {\n  if (parent.nodeType === 11 && !('host' in parent)) return;\n  const el = parent as Element;\n  if (\n    el.namespaceURI === 'http://www.w3.org/2000/svg' &&\n    !/^(foreignObject|desc|title)$/.test(el.localName)\n  ) {\n    return;\n  }\n  const where = el.nodeType === 1 ? `<${el.localName}>` : 'a shadow root';\n  throw new Error(\n    `gyral: an svg template is rendered into ${where}, which isn't SVG content. svg\\`…\\` ` +\n      'fragments are SVG elements: render them inside an <svg> (or another SVG element, not ' +\n      '<foreignObject>) of an html template, html`<svg viewBox=\"…\">${svg`…`}</svg>`, or write ' +\n      `the whole graphic with html (${SPEC}/01-templates.md \"svg templates\").`,\n  );\n}\n"]}

package/dist/view/server/component.d.ts

@@ -0,0 +1,12 @@
+import type { ServerComponent } from '../registry.js';
+import { type Deferred, type Item, type StyleValues } from './writer.js';
+/**
+ * The text of a shadow component's `<style>` (its CSS texts joined by newlines, `</style`
+ * escaped), exactly as written, so `styleHashes()` hashes what the browser sees. `''`: none.
+ */
+export declare function styleText(component: ServerComponent): string;
+/**
+ * Writes a deferred component; nested components are deferred again. A component that fails
+ * (ADR 0024) writes its error view instead, marked `data-gyral-error`, and `onError` hears it.
+ */
+export declare function expand({ component, input }: Deferred, dev: boolean, styles: StyleValues | undefined, onError: (error: unknown) => void): Item[];

package/dist/view/server/component.js

@@ -0,0 +1,64 @@
+// Rendering one Gyral component in place (view/06-server.md "Components"): the end of its start
+// tag (light mark, seed, island attributes), then its view, inside a declarative shadow root
+// with the component's CSS (08 "Server") or as light-DOM children (ADR 0014). The parent's
+// children of a shadow component follow in the parent's walk, after the `<template>`.
+import { ERROR_ATTRIBUTE, ISLAND_ATTRIBUTE, LIGHT_ATTRIBUTE, SEED_ATTRIBUTE, } from '../attributes.js';
+import { escapeSeed, styleSafe } from './escape.js';
+import { ROOT, Writer } from './writer.js';
+const styleTexts = new WeakMap();
+/**
+ * The text of a shadow component's `<style>` (its CSS texts joined by newlines, `</style`
+ * escaped), exactly as written, so `styleHashes()` hashes what the browser sees. `''`: none.
+ */
+export function styleText(component) {
+    let text = styleTexts.get(component);
+    if (text === undefined) {
+        text = styleSafe(component.styles.join('\n'));
+        styleTexts.set(component, text);
+    }
+    return text;
+}
+/**
+ * Writes a deferred component; nested components are deferred again. A component that fails
+ * (ADR 0024) writes its error view instead, marked `data-gyral-error`, and `onError` hears it.
+ */
+export function expand({ component, input }, dev, styles, onError) {
+    let rendering = component.render(input);
+    let items;
+    try {
+        items = write(component, input.scope, rendering, dev, styles);
+    }
+    catch (cause) {
+        if (component.fallback === undefined || rendering.failed !== undefined)
+            throw cause;
+        rendering = component.fallback(cause);
+        items = write(component, input.scope, rendering, dev, styles);
+    }
+    if (rendering.failed !== undefined)
+        onError(rendering.failed);
+    return items;
+}
+function write(component, scope, { view, seed, failed }, dev, styles) {
+    const w = new Writer(dev, scope, styles);
+    let tail = component.light ? ` ${LIGHT_ATTRIBUTE}` : '';
+    // Single-quoted, so the JSON's double quotes stay raw (ADR 0012).
+    if (failed === undefined)
+        tail += ` ${SEED_ATTRIBUTE}='${escapeSeed(JSON.stringify(seed))}'`;
+    else
+        tail += ` ${ERROR_ATTRIBUTE}`;
+    if (component.hydrate !== 'load') {
+        tail += ` defer-hydration ${ISLAND_ATTRIBUTE}="${component.hydrate}"`;
+    }
+    w.write(`${tail}>`);
+    if (component.light) {
+        w.child(view, undefined, ROOT);
+        return w.done();
+    }
+    const css = styleText(component);
+    const focus = component.delegatesFocus === true ? ' shadowrootdelegatesfocus' : '';
+    w.write(`<template shadowrootmode="open"${focus}>${css === '' ? '' : `<style>${css}</style>`}`);
+    w.child(view, undefined, ROOT);
+    w.write('</template>');
+    return w.done();
+}
+//# sourceMappingURL=component.js.map

package/dist/view/server/component.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"component.js","sourceRoot":"","sources":["../../../src/view/server/component.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,6FAA6F;AAC7F,2FAA2F;AAC3F,sFAAsF;AACtF,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,EACf,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAA8C,MAAM,aAAa,CAAC;AAEvF,MAAM,UAAU,GAAG,IAAI,OAAO,EAA2B,CAAC;AAE1D;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,SAA0B;IAClD,IAAI,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CACpB,EAAE,SAAS,EAAE,KAAK,EAAY,EAC9B,GAAY,EACZ,MAA+B,EAC/B,OAAiC;IAEjC,IAAI,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC;QACpF,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtC,KAAK,GAAG,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CACZ,SAA0B,EAC1B,KAAc,EACd,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAmB,EACvC,GAAY,EACZ,MAA+B;IAE/B,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,kEAAkE;IAClE,IAAI,MAAM,KAAK,SAAS;QAAE,IAAI,IAAI,IAAI,cAAc,KAAK,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;;QACxF,IAAI,IAAI,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,SAAS,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACjC,IAAI,IAAI,oBAAoB,gBAAgB,KAAK,SAAS,CAAC,OAAO,GAAG,CAAC;IACxE,CAAC;IACD,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;IACpB,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,SAAS,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC,CAAC,KAAK,CAAC,kCAAkC,KAAK,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,UAAU,EAAE,CAAC,CAAC;IAChG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAClB,CAAC","sourcesContent":["// Rendering one Gyral component in place (view/06-server.md \"Components\"): the end of its start\n// tag (light mark, seed, island attributes), then its view, inside a declarative shadow root\n// with the component's CSS (08 \"Server\") or as light-DOM children (ADR 0014). The parent's\n// children of a shadow component follow in the parent's walk, after the `<template>`.\nimport {\n  ERROR_ATTRIBUTE,\n  ISLAND_ATTRIBUTE,\n  LIGHT_ATTRIBUTE,\n  SEED_ATTRIBUTE,\n} from '../attributes.js';\nimport type { ServerComponent, ServerRendering } from '../registry.js';\nimport { escapeSeed, styleSafe } from './escape.js';\nimport { ROOT, Writer, type Deferred, type Item, type StyleValues } from './writer.js';\n\nconst styleTexts = new WeakMap<ServerComponent, string>();\n\n/**\n * The text of a shadow component's `<style>` (its CSS texts joined by newlines, `</style`\n * escaped), exactly as written, so `styleHashes()` hashes what the browser sees. `''`: none.\n */\nexport function styleText(component: ServerComponent): string {\n  let text = styleTexts.get(component);\n  if (text === undefined) {\n    text = styleSafe(component.styles.join('\\n'));\n    styleTexts.set(component, text);\n  }\n  return text;\n}\n\n/**\n * Writes a deferred component; nested components are deferred again. A component that fails\n * (ADR 0024) writes its error view instead, marked `data-gyral-error`, and `onError` hears it.\n */\nexport function expand(\n  { component, input }: Deferred,\n  dev: boolean,\n  styles: StyleValues | undefined,\n  onError: (error: unknown) => void,\n): Item[] {\n  let rendering = component.render(input);\n  let items: Item[];\n  try {\n    items = write(component, input.scope, rendering, dev, styles);\n  } catch (cause) {\n    if (component.fallback === undefined || rendering.failed !== undefined) throw cause;\n    rendering = component.fallback(cause);\n    items = write(component, input.scope, rendering, dev, styles);\n  }\n  if (rendering.failed !== undefined) onError(rendering.failed);\n  return items;\n}\n\nfunction write(\n  component: ServerComponent,\n  scope: unknown,\n  { view, seed, failed }: ServerRendering,\n  dev: boolean,\n  styles: StyleValues | undefined,\n): Item[] {\n  const w = new Writer(dev, scope, styles);\n  let tail = component.light ? ` ${LIGHT_ATTRIBUTE}` : '';\n  // Single-quoted, so the JSON's double quotes stay raw (ADR 0012).\n  if (failed === undefined) tail += ` ${SEED_ATTRIBUTE}='${escapeSeed(JSON.stringify(seed))}'`;\n  else tail += ` ${ERROR_ATTRIBUTE}`;\n  if (component.hydrate !== 'load') {\n    tail += ` defer-hydration ${ISLAND_ATTRIBUTE}=\"${component.hydrate}\"`;\n  }\n  w.write(`${tail}>`);\n  if (component.light) {\n    w.child(view, undefined, ROOT);\n    return w.done();\n  }\n  const css = styleText(component);\n  const focus = component.delegatesFocus === true ? ' shadowrootdelegatesfocus' : '';\n  w.write(`<template shadowrootmode=\"open\"${focus}>${css === '' ? '' : `<style>${css}</style>`}`);\n  w.child(view, undefined, ROOT);\n  w.write('</template>');\n  return w.done();\n}\n"]}

package/dist/view/server/escape.d.ts

@@ -0,0 +1,10 @@
+/** Text content (child holes, `<textarea>`/`<title>` content). */
+export declare function escapeText(text: string): string;
+/** A double-quoted attribute value. */
+export declare function escapeAttr(value: string): string;
+/** A single-quoted attribute value: the `data-gyral-seed` JSON. */
+export declare const escapeSeed: (json: string) => string;
+/** CSS for a `<style>` element: `</style` (any case) would end it; `<\/style` is the same CSS. */
+export declare const styleSafe: (css: string) => string;
+/** HTML whitespace (WHATWG "ASCII whitespace"): text made only of it stays in table structure. */
+export declare const onlyWhitespace: (text: string) => boolean;

package/dist/view/server/escape.js

@@ -0,0 +1,34 @@
+// Escaping for the server renderer (view/06-server.md "Escaping"). Text escapes `&`, `<` and
+// `>`; double-quoted attribute values escape `&`, `"`, `<` and `>`; the single-quoted seed
+// attribute escapes `&`, `'`, `<` and `>` (so its JSON's double quotes stay raw). Only `&` and
+// the quote can end a quoted value; `<` and `>` are escaped too (as newer revisions of WHATWG
+// HTML's "Serializing HTML fragments" do), so no markup appears raw in an attribute, whatever
+// later reads the page (raw-text contexts, naive tooling, filters).
+const TEXT = /[&<>]/g;
+const ATTR = /[&"<>]/g;
+const SEED = /[&'<>]/g;
+const ENTITY = {
+    '&': '&amp;',
+    '<': '&lt;',
+    '>': '&gt;',
+    '"': '&quot;',
+    "'": '&#39;',
+};
+const entity = (c) => ENTITY[c] ?? c;
+/** Text content (child holes, `<textarea>`/`<title>` content). */
+export function escapeText(text) {
+    TEXT.lastIndex = 0;
+    return TEXT.test(text) ? text.replace(TEXT, entity) : text;
+}
+/** A double-quoted attribute value. */
+export function escapeAttr(value) {
+    ATTR.lastIndex = 0;
+    return ATTR.test(value) ? value.replace(ATTR, entity) : value;
+}
+/** A single-quoted attribute value: the `data-gyral-seed` JSON. */
+export const escapeSeed = (json) => json.replace(SEED, entity);
+/** CSS for a `<style>` element: `</style` (any case) would end it; `<\/style` is the same CSS. */
+export const styleSafe = (css) => css.replace(/<\/(style)/gi, '<\\/$1');
+/** HTML whitespace (WHATWG "ASCII whitespace"): text made only of it stays in table structure. */
+export const onlyWhitespace = (text) => !/[^\t\n\f\r ]/.test(text);
+//# sourceMappingURL=escape.js.map

package/dist/view/server/escape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escape.js","sourceRoot":"","sources":["../../../src/view/server/escape.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,2FAA2F;AAC3F,+FAA+F;AAC/F,8FAA8F;AAC9F,8FAA8F;AAC9F,oEAAoE;AAEpE,MAAM,IAAI,GAAG,QAAQ,CAAC;AACtB,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,IAAI,GAAG,SAAS,CAAC;AAEvB,MAAM,MAAM,GAAqC;IAC/C,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAO;CACb,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAErD,kEAAkE;AAClE,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACnB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAChE,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAE/E,kGAAkG;AAClG,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;AAExF,kGAAkG;AAClG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC","sourcesContent":["// Escaping for the server renderer (view/06-server.md \"Escaping\"). Text escapes `&`, `<` and\n// `>`; double-quoted attribute values escape `&`, `\"`, `<` and `>`; the single-quoted seed\n// attribute escapes `&`, `'`, `<` and `>` (so its JSON's double quotes stay raw). Only `&` and\n// the quote can end a quoted value; `<` and `>` are escaped too (as newer revisions of WHATWG\n// HTML's \"Serializing HTML fragments\" do), so no markup appears raw in an attribute, whatever\n// later reads the page (raw-text contexts, naive tooling, filters).\n\nconst TEXT = /[&<>]/g;\nconst ATTR = /[&\"<>]/g;\nconst SEED = /[&'<>]/g;\n\nconst ENTITY: Readonly<Record<string, string>> = {\n  '&': '&amp;',\n  '<': '&lt;',\n  '>': '&gt;',\n  '\"': '&quot;',\n  \"'\": '&#39;',\n};\n\nconst entity = (c: string): string => ENTITY[c] ?? c;\n\n/** Text content (child holes, `<textarea>`/`<title>` content). */\nexport function escapeText(text: string): string {\n  TEXT.lastIndex = 0;\n  return TEXT.test(text) ? text.replace(TEXT, entity) : text;\n}\n\n/** A double-quoted attribute value. */\nexport function escapeAttr(value: string): string {\n  ATTR.lastIndex = 0;\n  return ATTR.test(value) ? value.replace(ATTR, entity) : value;\n}\n\n/** A single-quoted attribute value: the `data-gyral-seed` JSON. */\nexport const escapeSeed = (json: string): string => json.replace(SEED, entity);\n\n/** CSS for a `<style>` element: `</style` (any case) would end it; `<\\/style` is the same CSS. */\nexport const styleSafe = (css: string): string => css.replace(/<\\/(style)/gi, '<\\\\/$1');\n\n/** HTML whitespace (WHATWG \"ASCII whitespace\"): text made only of it stays in table structure. */\nexport const onlyWhitespace = (text: string): boolean => !/[^\\t\\n\\f\\r ]/.test(text);\n"]}

package/dist/view/server/index.d.ts

@@ -0,0 +1,48 @@
+import type { ChildValue } from '../render/values.js';
+import { type StyleValues } from './writer.js';
+export type { StyleValues };
+export interface ServerRenderOptions {
+    /**
+     * Development markers (`<!--gyral:ID-->` before each template instance, for hydration's
+     * checks, 07) and development checks. Default: on in development builds (the `development`
+     * export condition, as for the client), off otherwise.
+     */
+    readonly dev?: boolean;
+    /**
+     * Collects every `style` attribute value the render writes, decoded (as the DOM sees it),
+     * each mapped to where it was first written (template `loc` or id): static, bound,
+     * multi-part and element-hook values; not `raw()` markup. For hashing them into a CSP
+     * (ADR 0020). The markup is the same with or without it.
+     */
+    readonly styleAttributes?: StyleValues;
+    /**
+     * Hears each component whose `init` or view threw (ADR 0024; core's `GyralError`): the page
+     * goes on with that component's error view, or nothing. Default `console.error`. Throwing
+     * from it ends the render with that error.
+     */
+    readonly onError?: (error: unknown) => void;
+    /**
+     * Collects the tag of every Gyral component the render writes, in document order, so a page
+     * can load exactly those components' client modules (automatic component loading).
+     */
+    readonly tags?: Set<string>;
+}
+/**
+ * Renders `value` to HTML chunks, lazily: each step writes up to the next component boundary.
+ * Every component's `init` and view run in the step that writes it, so a caller can wrap each
+ * step in a per-request scope (ADR 0013).
+ */
+export declare function render(value: ChildValue, options?: ServerRenderOptions): Iterable<string>;
+/** Renders `value` to one string. */
+export declare function renderToString(value: ChildValue, options?: ServerRenderOptions): string;
+/**
+ * `'sha256-…'` of a `<style>` element's text, for a CSP `style-src` (cached per text).
+ * Synchronous (sha256.ts), so a page can build its policy while it renders.
+ */
+export declare function styleHashSync(text: string): string;
+/** `styleHashSync`, as a promise (the API before it existed). */
+export declare const styleHash: (text: string) => Promise<string>;
+/** Tag → `<style>` text of every registered shadow component with CSS (08 "Server"). */
+export declare function componentStyles(): ReadonlyMap<string, string>;
+/** The hashes of every registered shadow component's `<style>` (08 "Server"), deduplicated. */
+export declare function styleHashes(): Promise<readonly string[]>;

package/dist/view/server/index.js

@@ -0,0 +1,80 @@
+// The server renderer (view/06-server.md "API"): synchronous, chunked, runtime-agnostic (no
+// DOM, no Node-only APIs: a JavaScript SHA-256 for the style hashes). `@gyral/core/internal/server` wraps these,
+// registering recorded specs first; code outside view/ may import only this module of view/server/.
+import { DEV } from '../flags.js';
+import { serverComponents } from '../registry.js';
+import { expand, styleText } from './component.js';
+import { sha256 } from './sha256.js';
+import { ROOT, Writer } from './writer.js';
+const logError = (error) => {
+    console.error(error);
+};
+function push(stack, items) {
+    for (let i = items.length - 1; i >= 0; i--)
+        stack.push(items[i]);
+}
+/**
+ * Renders `value` to HTML chunks, lazily: each step writes up to the next component boundary.
+ * Every component's `init` and view run in the step that writes it, so a caller can wrap each
+ * step in a per-request scope (ADR 0013).
+ */
+export function* render(value, options = {}) {
+    const dev = options.dev ?? DEV;
+    const styles = options.styleAttributes;
+    const onError = options.onError ?? logError;
+    const tags = options.tags;
+    const root = new Writer(dev, undefined, styles);
+    root.child(value, undefined, ROOT);
+    const stack = [];
+    push(stack, root.done());
+    for (let item = stack.pop(); item !== undefined; item = stack.pop()) {
+        if (typeof item === 'string')
+            yield item;
+        else {
+            tags?.add(item.component.tag);
+            push(stack, expand(item, dev, styles, onError));
+        }
+    }
+}
+/** Renders `value` to one string. */
+export function renderToString(value, options) {
+    let html = '';
+    for (const chunk of render(value, options))
+        html += chunk;
+    return html;
+}
+const hashes = new Map();
+/**
+ * `'sha256-…'` of a `<style>` element's text, for a CSP `style-src` (cached per text).
+ * Synchronous (sha256.ts), so a page can build its policy while it renders.
+ */
+export function styleHashSync(text) {
+    let hash = hashes.get(text);
+    if (hash === undefined) {
+        // The parser turns CR and CRLF into LF before the browser hashes the element's text.
+        const digest = sha256(new TextEncoder().encode(text.replace(/\r\n?/g, '\n')));
+        let binary = '';
+        for (const byte of digest)
+            binary += String.fromCharCode(byte);
+        hash = `'sha256-${btoa(binary)}'`;
+        hashes.set(text, hash);
+    }
+    return hash;
+}
+/** `styleHashSync`, as a promise (the API before it existed). */
+export const styleHash = (text) => Promise.resolve(styleHashSync(text));
+/** Tag → `<style>` text of every registered shadow component with CSS (08 "Server"). */
+export function componentStyles() {
+    const styles = new Map();
+    for (const component of serverComponents()) {
+        const text = styleText(component);
+        if (text !== '')
+            styles.set(component.tag, text);
+    }
+    return styles;
+}
+/** The hashes of every registered shadow component's `<style>` (08 "Server"), deduplicated. */
+export function styleHashes() {
+    return Promise.resolve([...new Set([...componentStyles().values()].map(styleHashSync))]);
+}
+//# sourceMappingURL=index.js.map

package/dist/view/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/view/server/index.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,iHAAiH;AACjH,oGAAoG;AACpG,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,EAA+B,MAAM,aAAa,CAAC;AA+BxE,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAQ,EAAE;IACxC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,SAAS,IAAI,CAAC,KAAa,EAAE,KAAsB;IACjD,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAS,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,SAAS,CAAC,CAAC,MAAM,CAAC,KAAiB,EAAE,UAA+B,EAAE;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;IAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACzB,KAAK,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,KAAK,SAAS,EAAE,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;QACpE,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,CAAC;aACpC,CAAC;YACJ,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,cAAc,CAAC,KAAiB,EAAE,OAA6B;IAC7E,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,IAAI,IAAI,KAAK,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,qFAAqF;QACrF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,MAAM,IAAI,IAAI,MAAM;YAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAmB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AAEjG,wFAAwF;AACxF,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,WAAW;IACzB,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,eAAe,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC","sourcesContent":["// The server renderer (view/06-server.md \"API\"): synchronous, chunked, runtime-agnostic (no\n// DOM, no Node-only APIs: a JavaScript SHA-256 for the style hashes). `@gyral/core/internal/server` wraps these,\n// registering recorded specs first; code outside view/ may import only this module of view/server/.\nimport { DEV } from '../flags.js';\nimport { serverComponents } from '../registry.js';\nimport type { ChildValue } from '../render/values.js';\nimport { expand, styleText } from './component.js';\nimport { sha256 } from './sha256.js';\nimport { ROOT, Writer, type Item, type StyleValues } from './writer.js';\n\nexport type { StyleValues };\n\nexport interface ServerRenderOptions {\n  /**\n   * Development markers (`<!--gyral:ID-->` before each template instance, for hydration's\n   * checks, 07) and development checks. Default: on in development builds (the `development`\n   * export condition, as for the client), off otherwise.\n   */\n  readonly dev?: boolean;\n  /**\n   * Collects every `style` attribute value the render writes, decoded (as the DOM sees it),\n   * each mapped to where it was first written (template `loc` or id): static, bound,\n   * multi-part and element-hook values; not `raw()` markup. For hashing them into a CSP\n   * (ADR 0020). The markup is the same with or without it.\n   */\n  readonly styleAttributes?: StyleValues;\n  /**\n   * Hears each component whose `init` or view threw (ADR 0024; core's `GyralError`): the page\n   * goes on with that component's error view, or nothing. Default `console.error`. Throwing\n   * from it ends the render with that error.\n   */\n  readonly onError?: (error: unknown) => void;\n  /**\n   * Collects the tag of every Gyral component the render writes, in document order, so a page\n   * can load exactly those components' client modules (automatic component loading).\n   */\n  readonly tags?: Set<string>;\n}\n\nconst logError = (error: unknown): void => {\n  console.error(error);\n};\n\nfunction push(stack: Item[], items: readonly Item[]): void {\n  for (let i = items.length - 1; i >= 0; i--) stack.push(items[i] as Item);\n}\n\n/**\n * Renders `value` to HTML chunks, lazily: each step writes up to the next component boundary.\n * Every component's `init` and view run in the step that writes it, so a caller can wrap each\n * step in a per-request scope (ADR 0013).\n */\nexport function* render(value: ChildValue, options: ServerRenderOptions = {}): Iterable<string> {\n  const dev = options.dev ?? DEV;\n  const styles = options.styleAttributes;\n  const onError = options.onError ?? logError;\n  const tags = options.tags;\n  const root = new Writer(dev, undefined, styles);\n  root.child(value, undefined, ROOT);\n  const stack: Item[] = [];\n  push(stack, root.done());\n  for (let item = stack.pop(); item !== undefined; item = stack.pop()) {\n    if (typeof item === 'string') yield item;\n    else {\n      tags?.add(item.component.tag);\n      push(stack, expand(item, dev, styles, onError));\n    }\n  }\n}\n\n/** Renders `value` to one string. */\nexport function renderToString(value: ChildValue, options?: ServerRenderOptions): string {\n  let html = '';\n  for (const chunk of render(value, options)) html += chunk;\n  return html;\n}\n\nconst hashes = new Map<string, string>();\n\n/**\n * `'sha256-…'` of a `<style>` element's text, for a CSP `style-src` (cached per text).\n * Synchronous (sha256.ts), so a page can build its policy while it renders.\n */\nexport function styleHashSync(text: string): string {\n  let hash = hashes.get(text);\n  if (hash === undefined) {\n    // The parser turns CR and CRLF into LF before the browser hashes the element's text.\n    const digest = sha256(new TextEncoder().encode(text.replace(/\\r\\n?/g, '\\n')));\n    let binary = '';\n    for (const byte of digest) binary += String.fromCharCode(byte);\n    hash = `'sha256-${btoa(binary)}'`;\n    hashes.set(text, hash);\n  }\n  return hash;\n}\n\n/** `styleHashSync`, as a promise (the API before it existed). */\nexport const styleHash = (text: string): Promise<string> => Promise.resolve(styleHashSync(text));\n\n/** Tag → `<style>` text of every registered shadow component with CSS (08 \"Server\"). */\nexport function componentStyles(): ReadonlyMap<string, string> {\n  const styles = new Map<string, string>();\n  for (const component of serverComponents()) {\n    const text = styleText(component);\n    if (text !== '') styles.set(component.tag, text);\n  }\n  return styles;\n}\n\n/** The hashes of every registered shadow component's `<style>` (08 \"Server\"), deduplicated. */\nexport function styleHashes(): Promise<readonly string[]> {\n  return Promise.resolve([...new Set([...componentStyles().values()].map(styleHashSync))]);\n}\n"]}

package/dist/view/server/sha256.d.ts

@@ -0,0 +1,2 @@
+/** The SHA-256 digest of `bytes` (32 bytes). */
+export declare function sha256(bytes: Uint8Array): Uint8Array;

package/dist/view/server/sha256.js

@@ -0,0 +1,75 @@
+// SHA-256 (FIPS 180-4) in plain JavaScript, for CSP style hashes (view/06-server.md "CSP").
+// Synchronous, unlike WebCrypto's `digest`, so `@gyral/ssr`'s `renderPage` can build the
+// policy at render time, after the page's components are registered, and still return its
+// Response synchronously. Runtime-agnostic (no `node:crypto`); server-only, never in client
+// bundles. Checked against `node:crypto` (sha256.node.test.ts).
+/** Round constants: the first 32 bits of the fractional parts of the cube roots of the first 64 primes. */
+const K = new Uint32Array([
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+]);
+/** Initial hash: the first 32 bits of the fractional parts of the square roots of the first 8 primes. */
+const H0 = [
+    0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
+];
+const rotr = (x, n) => (x >>> n) | (x << (32 - n));
+/** The SHA-256 digest of `bytes` (32 bytes). */
+export function sha256(bytes) {
+    // Padding: 0x80, zeros, then the bit length as a 64-bit big-endian number.
+    const blocks = (bytes.length + 9 + 63) >> 6;
+    const m = new Uint8Array(blocks * 64);
+    m.set(bytes);
+    m[bytes.length] = 0x80;
+    const view = new DataView(m.buffer);
+    const bits = bytes.length * 8;
+    view.setUint32(m.length - 8, Math.floor(bits / 0x100000000));
+    view.setUint32(m.length - 4, bits >>> 0);
+    const h = new Uint32Array(H0);
+    const w = new Uint32Array(64);
+    for (let off = 0; off < m.length; off += 64) {
+        for (let t = 0; t < 16; t++)
+            w[t] = view.getUint32(off + t * 4);
+        for (let t = 16; t < 64; t++) {
+            const x = w[t - 15];
+            const y = w[t - 2];
+            const s0 = rotr(x, 7) ^ rotr(x, 18) ^ (x >>> 3);
+            const s1 = rotr(y, 17) ^ rotr(y, 19) ^ (y >>> 10);
+            w[t] = w[t - 16] + s0 + w[t - 7] + s1;
+        }
+        let [a, b, c, d, e, f, g, k] = Array.from(h);
+        for (let t = 0; t < 64; t++) {
+            const s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+            const t1 = (k + s1 + ((e & f) ^ (~e & g)) + K[t] + w[t]) | 0;
+            const s0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+            const t2 = (s0 + ((a & b) ^ (a & c) ^ (b & c))) | 0;
+            k = g;
+            g = f;
+            f = e;
+            e = (d + t1) | 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (t1 + t2) | 0;
+        }
+        h[0] = h[0] + a;
+        h[1] = h[1] + b;
+        h[2] = h[2] + c;
+        h[3] = h[3] + d;
+        h[4] = h[4] + e;
+        h[5] = h[5] + f;
+        h[6] = h[6] + g;
+        h[7] = h[7] + k;
+    }
+    const out = new Uint8Array(32);
+    const outView = new DataView(out.buffer);
+    for (let i = 0; i < 8; i++)
+        outView.setUint32(i * 4, h[i]);
+    return out;
+}
+//# sourceMappingURL=sha256.js.map

package/dist/view/server/sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.js","sourceRoot":"","sources":["../../../src/view/server/sha256.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,yFAAyF;AACzF,0FAA0F;AAC1F,4FAA4F;AAC5F,gEAAgE;AAEhE,2GAA2G;AAC3G,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;IACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/F,CAAC,CAAC;AAEH,yGAAyG;AACzG,MAAM,EAAE,GAAG;IACT,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/F,CAAC;AAKF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAE3E,gDAAgD;AAChD,MAAM,UAAU,MAAM,CAAC,KAAiB;IACtC,2EAA2E;IAC3E,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACb,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAW,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAW,CAAC;YAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAY,GAAG,EAAE,GAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAY,GAAG,EAAE,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAU,CAAC;QACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAI,CAAC,CAAC,CAAC,CAAY,CAAC,GAAG,CAAC,CAAC;YACrF,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACpD,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;YACjB,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,CAAC;YACN,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QACD,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAI,CAAC,CAAC,CAAC,CAAY,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["// SHA-256 (FIPS 180-4) in plain JavaScript, for CSP style hashes (view/06-server.md \"CSP\").\n// Synchronous, unlike WebCrypto's `digest`, so `@gyral/ssr`'s `renderPage` can build the\n// policy at render time, after the page's components are registered, and still return its\n// Response synchronously. Runtime-agnostic (no `node:crypto`); server-only, never in client\n// bundles. Checked against `node:crypto` (sha256.node.test.ts).\n\n/** Round constants: the first 32 bits of the fractional parts of the cube roots of the first 64 primes. */\nconst K = new Uint32Array([\n  0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,\n  0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,\n  0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,\n  0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,\n  0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,\n  0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,\n  0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,\n  0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,\n]);\n\n/** Initial hash: the first 32 bits of the fractional parts of the square roots of the first 8 primes. */\nconst H0 = [\n  0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,\n];\n\n/** The eight working variables. */\ntype Words = [number, number, number, number, number, number, number, number];\n\nconst rotr = (x: number, n: number): number => (x >>> n) | (x << (32 - n));\n\n/** The SHA-256 digest of `bytes` (32 bytes). */\nexport function sha256(bytes: Uint8Array): Uint8Array {\n  // Padding: 0x80, zeros, then the bit length as a 64-bit big-endian number.\n  const blocks = (bytes.length + 9 + 63) >> 6;\n  const m = new Uint8Array(blocks * 64);\n  m.set(bytes);\n  m[bytes.length] = 0x80;\n  const view = new DataView(m.buffer);\n  const bits = bytes.length * 8;\n  view.setUint32(m.length - 8, Math.floor(bits / 0x100000000));\n  view.setUint32(m.length - 4, bits >>> 0);\n  const h = new Uint32Array(H0);\n  const w = new Uint32Array(64);\n  for (let off = 0; off < m.length; off += 64) {\n    for (let t = 0; t < 16; t++) w[t] = view.getUint32(off + t * 4);\n    for (let t = 16; t < 64; t++) {\n      const x = w[t - 15] as number;\n      const y = w[t - 2] as number;\n      const s0 = rotr(x, 7) ^ rotr(x, 18) ^ (x >>> 3);\n      const s1 = rotr(y, 17) ^ rotr(y, 19) ^ (y >>> 10);\n      w[t] = (w[t - 16] as number) + s0 + (w[t - 7] as number) + s1;\n    }\n    let [a, b, c, d, e, f, g, k] = Array.from(h) as Words;\n    for (let t = 0; t < 64; t++) {\n      const s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);\n      const t1 = (k + s1 + ((e & f) ^ (~e & g)) + (K[t] as number) + (w[t] as number)) | 0;\n      const s0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);\n      const t2 = (s0 + ((a & b) ^ (a & c) ^ (b & c))) | 0;\n      k = g;\n      g = f;\n      f = e;\n      e = (d + t1) | 0;\n      d = c;\n      c = b;\n      b = a;\n      a = (t1 + t2) | 0;\n    }\n    h[0] = (h[0] as number) + a;\n    h[1] = (h[1] as number) + b;\n    h[2] = (h[2] as number) + c;\n    h[3] = (h[3] as number) + d;\n    h[4] = (h[4] as number) + e;\n    h[5] = (h[5] as number) + f;\n    h[6] = (h[6] as number) + g;\n    h[7] = (h[7] as number) + k;\n  }\n  const out = new Uint8Array(32);\n  const outView = new DataView(out.buffer);\n  for (let i = 0; i < 8; i++) outView.setUint32(i * 4, h[i] as number);\n  return out;\n}\n"]}

package/dist/view/server/tags.d.ts

@@ -0,0 +1,68 @@
+import type { Segment } from '../normalize/types.js';
+import { type ServerComponent, type ServerProvider, type ServerRenderInput } from '../registry.js';
+/** A component whose content is written later, in its own render step. */
+export interface Deferred {
+    readonly component: ServerComponent;
+    readonly input: ServerRenderInput;
+}
+/**
+ * A render's `style` attribute values for a CSP (ADR 0020): each distinct value as the DOM sees
+ * it (decoded), mapped to where it was first written (the template's `loc` or id; `''` when
+ * neither is known).
+ */
+export type StyleValues = Map<string, string>;
+/** What a walk produces: markup, with deferred components in document order. */
+export type Item = string | Deferred;
+/** A custom element's start tag while its attribute holes are written. */
+export interface Opening {
+    readonly tag: string;
+    readonly component: ServerComponent | undefined;
+    readonly provider: ServerProvider | undefined;
+    readonly attributes: Record<string, string>;
+    readonly properties: Record<string, unknown>;
+}
+/** An open custom element until its end tag: plain, a provider, or a light component. */
+export type Frame = {
+    readonly k: 'plain';
+} | {
+    readonly k: 'provider';
+    readonly outer: unknown;
+} | {
+    readonly k: 'light';
+    readonly tag: string;
+    readonly items: number;
+};
+export declare const PLAIN: Frame;
+export declare class Markup {
+    protected readonly dev: boolean;
+    protected scope: unknown;
+    protected readonly styles?: StyleValues | undefined;
+    protected buf: string;
+    protected readonly items: Item[];
+    /** The template being written, for `styles` (its `loc` or id). */
+    protected where: string;
+    /**
+     * `dev`: development markers and checks. `scope`: the nearest provider's scope, passed to
+     * components (undefined: the request's). `styles`: collects every `style` value written.
+     */
+    constructor(dev: boolean, scope: unknown, styles?: StyleValues | undefined);
+    /** Records a `style` value the DOM will see (empty values declare nothing). */
+    protected style(value: string): void;
+    write(markup: string): void;
+    /** The markup and deferred components written so far. */
+    done(): Item[];
+    private flush;
+    /** `name=${v}` or `name="a ${v} b"`; returns the index of the next value. */
+    protected attr(s: Extract<Segment, {
+        k: 'attr';
+    }>, values: readonly unknown[], at: number, opening: Opening | undefined): number;
+    private valued;
+    /** A present boolean attribute (`?name`, or `true` from a hook's server half). */
+    protected bare(name: string, opening: Opening | undefined): void;
+    /** An element hook: its server half's attributes (02 "Element hooks"). */
+    protected hook(v: unknown, opening: Opening | undefined): void;
+    /** A custom element's start tag: a Gyral component, a provider, or a plain element. */
+    protected open(tag: string, html: string, attrs: readonly (readonly [string, string])[]): Opening | undefined;
+    protected openEnd(opening: Opening | undefined): Frame;
+    protected close(frame: Frame, tag: string): void;
+}