@nifrajs/web 2.2.0 → 2.4.0

package/dist/search.js

@@ -0,0 +1,232 @@
+/** Conservative defaults: a 4 KB query, 64 keys, 6 levels of nesting. */
+export const DEFAULT_SEARCH_LIMITS = { maxLength: 4096, maxKeys: 64, maxDepth: 6 };
+// Keys that must never be written from untrusted input: a bracket-assignment to `__proto__` (or the
+// others) can pollute Object.prototype. Dropped at every level of a decoded value.
+const FORBIDDEN_KEYS = new Set(["__proto__", "prototype", "constructor"]);
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+// True when `value` nests deeper than `remaining` levels (a scalar never does). Used to reject an
+// over-deep decoded JSON value back to its raw string rather than store the graph.
+function exceedsDepth(value, remaining) {
+    if (Array.isArray(value)) {
+        if (remaining <= 0)
+            return true;
+        return value.some((item) => exceedsDepth(item, remaining - 1));
+    }
+    if (isPlainObject(value)) {
+        if (remaining <= 0)
+            return true;
+        return Object.values(value).some((item) => exceedsDepth(item, remaining - 1));
+    }
+    return false;
+}
+// Recursively strip forbidden keys from a decoded value. `JSON.parse('{"__proto__":1}')` yields an OWN
+// enumerable `__proto__` property (it does not set the prototype), but a later spread/assign of it would,
+// so it is removed here, at the source.
+function sanitize(value) {
+    if (Array.isArray(value))
+        return value.map(sanitize);
+    if (isPlainObject(value)) {
+        const out = {};
+        for (const [key, item] of Object.entries(value)) {
+            if (FORBIDDEN_KEYS.has(key))
+                continue;
+            out[key] = sanitize(item);
+        }
+        return out;
+    }
+    return value;
+}
+// One query value: JSON-decode it (so `2` is a number, `true` a boolean, `{...}` an object), falling back
+// to the raw string when it is not JSON or nests past the depth cap.
+function decodeValue(raw, limits) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return raw;
+    }
+    if ((isPlainObject(parsed) || Array.isArray(parsed)) && exceedsDepth(parsed, limits.maxDepth)) {
+        return raw;
+    }
+    return sanitize(parsed);
+}
+function encodeValue(value) {
+    if (typeof value !== "string")
+        return JSON.stringify(value);
+    // The codec is JSON-first on decode, so a raw string such as `"2"`, `"true"`, or `"null"`
+    // would otherwise change type on a serialize → parse round-trip. Quote only ambiguous strings;
+    // ordinary text stays readable (`?q=hello`, not `?q=%22hello%22`).
+    try {
+        JSON.parse(value);
+        return JSON.stringify(value);
+    }
+    catch {
+        return value;
+    }
+}
+/** The default JSON-first codec. Repeated keys (`?t=a&t=b`) decode to an array; single keys to a value. */
+const jsonCodec = {
+    parse(raw, limits) {
+        const usp = new URLSearchParams(raw.startsWith("?") ? raw.slice(1) : raw);
+        const out = {};
+        let kept = 0;
+        for (const key of new Set(usp.keys())) {
+            if (FORBIDDEN_KEYS.has(key))
+                continue;
+            if (++kept > limits.maxKeys)
+                break;
+            const decoded = usp.getAll(key).map((value) => decodeValue(value, limits));
+            out[key] = decoded.length > 1 ? decoded : decoded[0];
+        }
+        return out;
+    },
+    serialize(value) {
+        const usp = new URLSearchParams();
+        for (const [key, item] of Object.entries(value)) {
+            if (item === undefined)
+                continue;
+            if (Array.isArray(item) && item.length > 1) {
+                for (const element of item)
+                    usp.append(key, encodeValue(element));
+            }
+            else {
+                // Repeated query keys naturally preserve arrays of length >= 2. Empty and singleton arrays
+                // need one JSON value or they collapse to a missing key / scalar during decoding.
+                usp.set(key, encodeValue(item));
+            }
+        }
+        const query = usp.toString();
+        return query === "" ? "" : `?${query}`;
+    },
+};
+/**
+ * Parse a raw URL query into a structured object. Fails closed to `{}` when the raw string exceeds
+ * `limits.maxLength` (before any parsing work is done).
+ */
+export function parseSearch(raw, codec = jsonCodec, limits = DEFAULT_SEARCH_LIMITS) {
+    if (raw.length > limits.maxLength)
+        return {};
+    return codec.parse(raw, limits);
+}
+/** Serialize a structured search object back to a query string (leading `?`, or `""` when empty). */
+export function serializeSearch(value, codec = jsonCodec) {
+    return codec.serialize(value);
+}
+/**
+ * The search a route sees for a raw URL query: parsed, then validated against a single `searchSchema`
+ * when the route declares one (failing closed to its defaults), or the raw parsed query otherwise. A
+ * one-link {@link searchOfChain}; use that directly for a layout+page chain. Both the server (`renderPage`,
+ * loader ctx) and the client (the adapter mount) derive search this way, from the same URL + schema, so
+ * they produce the identical value - SSR-correct by construction, no serialization.
+ */
+export function searchOf(searchSchema, rawSearch) {
+    return searchOfChain([searchSchema], rawSearch);
+}
+/**
+ * The search for a route whose effective schema is a CHAIN - a `_layout` may declare `searchSchema` for
+ * shared keys (`?org`, `?theme`) and each page declares its own. The raw query is validated against every
+ * schema in the chain (outermost layout first, page last) and their outputs are merged, page-wins on a key
+ * conflict (nearest-wins, like `mergeHeads`): validate-each-then-combine, since Standard Schema has no
+ * `.merge()`. `undefined` links (a layout with no `searchSchema`) contribute nothing; when the whole chain
+ * is empty, the raw parsed query is returned. Fails closed per schema, same as {@link searchOf} (which is
+ * this with a one-link chain). The server and the client build the identical chain, so the value matches.
+ */
+export function searchOfChain(schemas, rawSearch) {
+    const parsed = parseSearch(rawSearch);
+    const defined = schemas.filter((s) => s !== undefined);
+    if (defined.length === 0)
+        return parsed;
+    let out = {};
+    for (const schema of defined) {
+        const validated = validateSearch(schema, parsed);
+        if (!isPlainObject(validated)) {
+            throw new TypeError("[nifra/web] a search schema must produce an object");
+        }
+        out = { ...out, ...validated };
+    }
+    return out;
+}
+/**
+ * Validate a parsed search object against a route's Standard Schema, returning the typed output. Fails
+ * CLOSED: on validation issues it retries against an empty object so the schema's per-field defaults apply,
+ * and degrades to `{}` only if even that fails - it never throws on hostile input. An async validator is a
+ * configuration error (search must validate synchronously, in the render/nav path) and throws loudly.
+ */
+export function validateSearch(schema, parsed) {
+    const result = schema["~standard"].validate(parsed);
+    if (result instanceof Promise) {
+        throw new TypeError("[nifra/web] a search schema must validate synchronously");
+    }
+    if (result.issues === undefined)
+        return result.value;
+    const fallback = schema["~standard"].validate({});
+    if (fallback instanceof Promise) {
+        throw new TypeError("[nifra/web] a search schema must validate synchronously");
+    }
+    return (fallback.issues === undefined ? fallback.value : {});
+}
+function deepEqual(a, b) {
+    if (Object.is(a, b))
+        return true;
+    if (Array.isArray(a) && Array.isArray(b)) {
+        return a.length === b.length && a.every((item, index) => deepEqual(item, b[index]));
+    }
+    if (isPlainObject(a) && isPlainObject(b)) {
+        const aKeys = Object.keys(a);
+        return (aKeys.length === Object.keys(b).length &&
+            aKeys.every((key) => key in b && deepEqual(a[key], b[key])));
+    }
+    return false;
+}
+/**
+ * Structural sharing (shallow-first): return `next`, but reuse `prev`'s reference for every top-level key
+ * whose value is deep-equal. When nothing changed, `prev` itself is returned (stable identity), so a
+ * selector like `useSearch(s => s.filters)` does not see a change - and a filters-only component does not
+ * re-render when an unrelated key (`page`) changes.
+ */
+export function shareSearch(prev, next) {
+    if (Object.is(prev, next))
+        return prev;
+    if (!isPlainObject(prev) || !isPlainObject(next))
+        return next;
+    const out = {};
+    let identical = Object.keys(prev).length === Object.keys(next).length;
+    for (const [key, after] of Object.entries(next)) {
+        if (key in prev && deepEqual(prev[key], after)) {
+            out[key] = prev[key];
+        }
+        else {
+            out[key] = after;
+            identical = false;
+        }
+    }
+    return identical ? prev : out;
+}
+/**
+ * True when two raw queries differ ONLY in keys a route declared client-only (`searchClientKeys`) - the
+ * signal a client navigation can update search WITHOUT re-running the loader (re-render, not revalidate:
+ * `?tab`, a client-side `?sort` over already-loaded rows, `?modal`). Returns false when a key OUTSIDE the
+ * allow-list changed (that key drives data, so the nav must revalidate) and when nothing changed at all (a
+ * same-URL nav still revalidates). Fail-safe by construction: an empty allow-list can never return true,
+ * so a route that declares no client keys always revalidates - the correct, never-stale default.
+ */
+export function isClientOnlySearchChange(prevRaw, nextRaw, clientKeys) {
+    if (clientKeys.length === 0)
+        return false;
+    const prev = parseSearch(prevRaw);
+    const next = parseSearch(nextRaw);
+    const allow = new Set(clientKeys);
+    let changed = false;
+    for (const key of new Set([...Object.keys(prev), ...Object.keys(next)])) {
+        if (deepEqual(prev[key], next[key]))
+            continue;
+        if (!allow.has(key))
+            return false; // a loader-affecting key changed - must revalidate
+        changed = true;
+    }
+    return changed; // only a real change to a client-only key skips the fetch (else revalidate)
+}
+//# sourceMappingURL=search.js.map

package/dist/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../src/search.ts"],"names":[],"mappings":"AA0BA,yEAAyE;AACzE,MAAM,CAAC,MAAM,qBAAqB,GAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;AAahG,oGAAoG;AACpG,mFAAmF;AACnF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAA;AAEjF,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,kGAAkG;AAClG,mFAAmF;AACnF,SAAS,YAAY,CAAC,KAAc,EAAE,SAAiB;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAA;IAChE,CAAC;IACD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,SAAS,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAC/B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,uGAAuG;AACvG,0GAA0G;AAC1G,wCAAwC;AACxC,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAQ;YACrC,GAAG,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;QAC3B,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,0GAA0G;AAC1G,qEAAqE;AACrE,SAAS,WAAW,CAAC,GAAW,EAAE,MAAoB;IACpD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9F,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC3D,0FAA0F;IAC1F,+FAA+F;IAC/F,mEAAmE;IACnE,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACjB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,MAAM,SAAS,GAAgB;IAC7B,KAAK,CAAC,GAAG,EAAE,MAAM;QACf,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzE,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,IAAI,IAAI,GAAG,CAAC,CAAA;QACZ,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACtC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAQ;YACrC,IAAI,EAAE,IAAI,GAAG,MAAM,CAAC,OAAO;gBAAE,MAAK;YAClC,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;YAC1E,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACtD,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,SAAS,CAAC,KAAK;QACb,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAA;QACjC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAQ;YAChC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3C,KAAK,MAAM,OAAO,IAAI,IAAI;oBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;YACnE,CAAC;iBAAM,CAAC;gBACN,2FAA2F;gBAC3F,kFAAkF;gBAClF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAA;YACjC,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;QAC5B,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAA;IACxC,CAAC;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,GAAW,EACX,QAAqB,SAAS,EAC9B,SAAuB,qBAAqB;IAE5C,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS;QAAE,OAAO,EAAE,CAAA;IAC5C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;AACjC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,eAAe,CAC7B,KAA8B,EAC9B,QAAqB,SAAS;IAE9B,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,YAA0C,EAC1C,SAAiB;IAEjB,OAAO,aAAa,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAA;AACjD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAkD,EAClD,SAAiB;IAEjB,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,CAAA;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;IAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IACvC,IAAI,GAAG,GAA4B,EAAE,CAAA;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAA;QAC3E,CAAC;QACD,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,SAAS,EAAE,CAAA;IAChC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,MAA+B;IAE/B,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACnD,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAA4B,CAAA;IAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACjD,IAAI,QAAQ,YAAY,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAwB,CAAA;AACrF,CAAC;AAED,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC5B,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YACtC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5D,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAI,IAAO,EAAE,IAAO;IAC7C,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7D,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;IACrE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,GAAG,IAAI,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YAChB,SAAS,GAAG,KAAK,CAAA;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,GAAS,CAAA;AACtC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,OAAe,EACf,UAA6B;IAE7B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACzC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAA;IACjC,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,SAAQ;QAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAA,CAAC,mDAAmD;QACrF,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IACD,OAAO,OAAO,CAAA,CAAC,4EAA4E;AAC7F,CAAC"}

package/dist/server-only.d.ts

@@ -1,21 +1,21 @@
 /**
- * `@nifrajs/web/server-only` — the **explicit, opt-in poison-import marker** (Next's `import
- * "server-only"`). A module of PURE server logic that carries no `node:` import — a secret-bearing
- * constant, a server-only API call — can't be caught by nifra's other two client-leak guards: the
+ * `@nifrajs/web/server-only` - the **explicit, opt-in poison-import marker** (Next's `import
+ * "server-only"`). A module of PURE server logic that carries no `node:` import - a secret-bearing
+ * constant, a server-only API call - can't be caught by nifra's other two client-leak guards: the
  * `.server` convention (which empties `*.server` modules in the client build) needs the file to be
  * NAMED `*.server`, and the node-builtin guard only fires when a `node:` import actually reaches a
- * client chunk. This marker closes that gap: drop a side-effect import at the top of the module —
+ * client chunk. This marker closes that gap: drop a side-effect import at the top of the module -
  *
  *     import "@nifrajs/web/server-only"
  *
- * — and the CLIENT build ({@link buildClient}) FAILS LOUD, naming the import chain, if that module
+ * - and the CLIENT build ({@link buildClient}) FAILS LOUD, naming the import chain, if that module
  * ever lands in a browser chunk. On the SERVER build/runtime it's a harmless no-op (this empty
  * module), so the same file runs untouched server-side.
  *
  * Pair it with the type-level {@link ServerOnly} brand (from `@nifrajs/web`) on the module's exports
  * to signal intent to readers + the compiler; this runtime import is what actually fails the build.
  *
- * @see ServerOnly — the type-level intent marker that complements this runtime import.
+ * @see ServerOnly - the type-level intent marker that complements this runtime import.
  */
 export {};
 //# sourceMappingURL=server-only.d.ts.map

package/dist/server-only.js

@@ -1,25 +1,25 @@
 /**
- * `@nifrajs/web/server-only` — the **explicit, opt-in poison-import marker** (Next's `import
- * "server-only"`). A module of PURE server logic that carries no `node:` import — a secret-bearing
- * constant, a server-only API call — can't be caught by nifra's other two client-leak guards: the
+ * `@nifrajs/web/server-only` - the **explicit, opt-in poison-import marker** (Next's `import
+ * "server-only"`). A module of PURE server logic that carries no `node:` import - a secret-bearing
+ * constant, a server-only API call - can't be caught by nifra's other two client-leak guards: the
  * `.server` convention (which empties `*.server` modules in the client build) needs the file to be
  * NAMED `*.server`, and the node-builtin guard only fires when a `node:` import actually reaches a
- * client chunk. This marker closes that gap: drop a side-effect import at the top of the module —
+ * client chunk. This marker closes that gap: drop a side-effect import at the top of the module -
  *
  *     import "@nifrajs/web/server-only"
  *
- * — and the CLIENT build ({@link buildClient}) FAILS LOUD, naming the import chain, if that module
+ * - and the CLIENT build ({@link buildClient}) FAILS LOUD, naming the import chain, if that module
  * ever lands in a browser chunk. On the SERVER build/runtime it's a harmless no-op (this empty
  * module), so the same file runs untouched server-side.
  *
  * Pair it with the type-level {@link ServerOnly} brand (from `@nifrajs/web`) on the module's exports
  * to signal intent to readers + the compiler; this runtime import is what actually fails the build.
  *
- * @see ServerOnly — the type-level intent marker that complements this runtime import.
+ * @see ServerOnly - the type-level intent marker that complements this runtime import.
  */
 // Intentionally empty. The marker is the IMPORT itself: `buildClient` detects any module that imports
 // this specifier and lands in a client chunk (via the same Bun metafile graph the node-builtin guard
-// walks) and fails the build. There is no value to export and nothing to run — on the server it's a
+// walks) and fails the build. There is no value to export and nothing to run - on the server it's a
 // no-op so the marked module behaves normally; on the client the build never completes.
 export {};
 //# sourceMappingURL=server-only.js.map

package/dist/service-worker.d.ts

@@ -0,0 +1,56 @@
+/**
+ * `@nifrajs/web/service-worker` - generate a service worker from a build manifest.
+ *
+ * A service worker is the one piece of an app that outlives a deploy, keeps serving after you have
+ * stopped, and can hand one user a response produced for another. So the generated worker is
+ * deliberately narrow, and every rule below exists because the permissive version of it is a bug:
+ *
+ *   - **Only content-hashed assets are precached.** A hashed URL names its bytes, so serving it from
+ *     cache forever is correct by construction. Anything unhashed is left to the network.
+ *   - **Documents are never cached.** Only navigations that FAIL are answered, and only with the
+ *     offline page you nominate. A cached HTML document is how a service worker serves one signed-in
+ *     user the page rendered for another; there is no per-user story here worth that risk.
+ *   - **GET, same-origin, `ok`, and not `no-store`.** Anything else goes straight to the network.
+ *   - **The cache name carries the build id.** A deploy that changed the assets gets a new cache, and
+ *     activation deletes every older one, so a stale worker cannot pin an old build indefinitely.
+ *
+ * It is opt-in and generated at build time; an app that does not call this ships nothing.
+ */
+/** The parts of a `BuildManifest` a worker needs. Structural, so a caller can pass extra fields. */
+export interface ServiceWorkerManifest {
+    readonly entry: string;
+    readonly assets: readonly string[];
+    readonly css?: readonly string[];
+}
+export interface ServiceWorkerOptions {
+    /**
+     * Distinguishes this build's cache from the last one. Use something that changes exactly when the
+     * assets do - a content hash, a commit sha, a release version.
+     */
+    readonly buildId: string;
+    /**
+     * URL of a page to serve when a navigation fails and the network is unreachable. It must be a
+     * static, user-independent document (a prerendered `/offline`), because every visitor gets the same
+     * bytes. Omit it and failed navigations simply fail, which is the honest default.
+     */
+    readonly offlineUrl?: string;
+    /** Cache name prefix. Default `nifra`. */
+    readonly cacheName?: string;
+    /** Extra same-origin URLs to precache. Only pass immutable ones. */
+    readonly additionalPrecache?: readonly string[];
+}
+/**
+ * Generate the service worker source for a build.
+ *
+ * Write the result to a file served from the ORIGIN ROOT (`/sw.js`): a worker's default scope is its
+ * own directory, so one served from `/assets/` could never control the pages it exists for.
+ */
+export declare function generateServiceWorker(manifest: ServiceWorkerManifest, options: ServiceWorkerOptions): string;
+/**
+ * The registration snippet, for a `<script>` in your document shell.
+ *
+ * Registration is deliberately deferred to `load`: a worker installing during first paint competes
+ * with the page it is meant to speed up.
+ */
+export declare function serviceWorkerRegistration(scriptUrl?: string): string;
+//# sourceMappingURL=service-worker.d.ts.map

package/dist/service-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-worker.d.ts","sourceRoot":"","sources":["../src/service-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,oGAAoG;AACpG,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAChD;AAqBD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,oBAAoB,GAC5B,MAAM,CAiFR;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,SAAW,GAAG,MAAM,CAGtE"}

package/dist/service-worker.js

@@ -0,0 +1,127 @@
+/**
+ * `@nifrajs/web/service-worker` - generate a service worker from a build manifest.
+ *
+ * A service worker is the one piece of an app that outlives a deploy, keeps serving after you have
+ * stopped, and can hand one user a response produced for another. So the generated worker is
+ * deliberately narrow, and every rule below exists because the permissive version of it is a bug:
+ *
+ *   - **Only content-hashed assets are precached.** A hashed URL names its bytes, so serving it from
+ *     cache forever is correct by construction. Anything unhashed is left to the network.
+ *   - **Documents are never cached.** Only navigations that FAIL are answered, and only with the
+ *     offline page you nominate. A cached HTML document is how a service worker serves one signed-in
+ *     user the page rendered for another; there is no per-user story here worth that risk.
+ *   - **GET, same-origin, `ok`, and not `no-store`.** Anything else goes straight to the network.
+ *   - **The cache name carries the build id.** A deploy that changed the assets gets a new cache, and
+ *     activation deletes every older one, so a stale worker cannot pin an old build indefinitely.
+ *
+ * It is opt-in and generated at build time; an app that does not call this ships nothing.
+ */
+const SW_URL = /^\/[\w\-./@%]*$/;
+/** A precache URL has to be same-origin, rooted, and free of anything that could break out of a list. */
+function assertPrecachable(url, label) {
+    if (typeof url !== "string" || url === "") {
+        throw new Error(`[nifra/service-worker] ${label} must be a non-empty string`);
+    }
+    if (!url.startsWith("/") || url.startsWith("//")) {
+        throw new Error(`[nifra/service-worker] ${label} must be a root-relative same-origin path, got ${JSON.stringify(url)}`);
+    }
+    if (!SW_URL.test(url)) {
+        throw new Error(`[nifra/service-worker] ${label} contains characters that are not valid in an asset path: ${JSON.stringify(url)}`);
+    }
+}
+/**
+ * Generate the service worker source for a build.
+ *
+ * Write the result to a file served from the ORIGIN ROOT (`/sw.js`): a worker's default scope is its
+ * own directory, so one served from `/assets/` could never control the pages it exists for.
+ */
+export function generateServiceWorker(manifest, options) {
+    if (typeof options.buildId !== "string" || options.buildId.trim() === "") {
+        throw new Error("[nifra/service-worker] buildId is required and must be non-empty");
+    }
+    if (/[^\w.-]/.test(options.buildId)) {
+        throw new Error(`[nifra/service-worker] buildId must be word characters, dots or hyphens, got ${JSON.stringify(options.buildId)}`);
+    }
+    const prefix = options.cacheName ?? "nifra";
+    if (/[^\w.-]/.test(prefix)) {
+        throw new Error(`[nifra/service-worker] cacheName must be word characters, dots or hyphens`);
+    }
+    const precache = [
+        manifest.entry,
+        ...manifest.assets,
+        ...(manifest.css ?? []),
+        ...(options.additionalPrecache ?? []),
+    ];
+    for (const url of precache)
+        assertPrecachable(url, "precache url");
+    const offline = options.offlineUrl;
+    if (offline !== undefined)
+        assertPrecachable(offline, "offlineUrl");
+    // De-duped and sorted so an unchanged build produces an unchanged worker - a byte-identical file
+    // means the browser does not treat it as an update.
+    const urls = [...new Set(offline === undefined ? precache : [...precache, offline])].sort();
+    return `// Generated by @nifrajs/web/service-worker. Do not edit.
+const CACHE = ${JSON.stringify(`${prefix}-${options.buildId}`)}
+const PRECACHE = ${JSON.stringify(urls)}
+const OFFLINE = ${offline === undefined ? "null" : JSON.stringify(offline)}
+
+self.addEventListener("install", (event) => {
+  // Take over as soon as the new assets are stored; the activate handler drops the old cache, so
+  // waiting would only serve stale bytes for longer.
+  event.waitUntil(caches.open(CACHE).then((c) => c.addAll(PRECACHE)).then(() => self.skipWaiting()))
+})
+
+self.addEventListener("activate", (event) => {
+  event.waitUntil(
+    caches
+      .keys()
+      .then((keys) => Promise.all(keys.filter((k) => k !== CACHE).map((k) => caches.delete(k))))
+      .then(() => self.clients.claim()),
+  )
+})
+
+self.addEventListener("fetch", (event) => {
+  const request = event.request
+  if (request.method !== "GET") return
+  const url = new URL(request.url)
+  if (url.origin !== self.location.origin) return
+
+  // Navigations: network only, with the offline document as a last resort. A cached HTML response is
+  // how one user gets served the page rendered for another, so nothing is stored here.
+  if (request.mode === "navigate") {
+    if (OFFLINE === null) return
+    event.respondWith(fetch(request).catch(() => caches.match(OFFLINE).then((r) => r ?? Response.error())))
+    return
+  }
+
+  // Assets: cache first, because every precached URL is content-hashed and therefore immutable.
+  event.respondWith(
+    caches.match(request).then((hit) => {
+      if (hit !== undefined) return hit
+      return fetch(request).then((response) => {
+        const cacheable =
+          response.ok &&
+          response.type === "basic" &&
+          !(response.headers.get("cache-control") ?? "").includes("no-store")
+        if (cacheable && PRECACHE.includes(url.pathname)) {
+          const copy = response.clone()
+          void caches.open(CACHE).then((c) => c.put(request, copy))
+        }
+        return response
+      })
+    }),
+  )
+})
+`;
+}
+/**
+ * The registration snippet, for a `<script>` in your document shell.
+ *
+ * Registration is deliberately deferred to `load`: a worker installing during first paint competes
+ * with the page it is meant to speed up.
+ */
+export function serviceWorkerRegistration(scriptUrl = "/sw.js") {
+    assertPrecachable(scriptUrl, "scriptUrl");
+    return `if("serviceWorker"in navigator){addEventListener("load",function(){navigator.serviceWorker.register(${JSON.stringify(scriptUrl)}).catch(function(){})})}`;
+}
+//# sourceMappingURL=service-worker.js.map

package/dist/service-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-worker.js","sourceRoot":"","sources":["../src/service-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA2BH,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAEhC,yGAAyG;AACzG,SAAS,iBAAiB,CAAC,GAAW,EAAE,KAAa;IACnD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,KAAK,6BAA6B,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,kDAAkD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CACvG,CAAA;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,6DAA6D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAClH,CAAA;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,QAA+B,EAC/B,OAA6B;IAE7B,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,gFAAgF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAClH,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAA;IAC3C,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;IAC9F,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,QAAQ,CAAC,KAAK;QACd,GAAG,QAAQ,CAAC,MAAM;QAClB,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;KACtC,CAAA;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ;QAAE,iBAAiB,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IAClE,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAA;IAClC,IAAI,OAAO,KAAK,SAAS;QAAE,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IAEnE,iGAAiG;IACjG,oDAAoD;IACpD,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAE3F,OAAO;gBACO,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;mBAC3C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;kBACrB,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiDzE,CAAA;AACD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,SAAS,GAAG,QAAQ;IAC5D,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IACzC,OAAO,uGAAuG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,0BAA0B,CAAA;AACnK,CAAC"}

package/dist/vite.d.ts

@@ -1,4 +1,4 @@
-/** Minimal app surface — `createWebApp(...)` satisfies it. */
+/** Minimal app surface - `createWebApp(...)` satisfies it. */
 interface FetchApp {
     fetch(request: Request): Response | Promise<Response>;
 }
@@ -17,10 +17,10 @@ export interface ViteDevServerOptions {
      * crash. Vite re-evaluates on change, so no `importQuery` cache-buster is needed alongside it.
      */
     readonly createApp: (clientEntry: string, load: (absolutePath: string) => Promise<unknown>) => FetchApp | Promise<FetchApp>;
-    /** Vite plugins — inject your framework's official plugin, e.g. `[react()]`. */
+    /** Vite plugins - inject your framework's official plugin, e.g. `[react()]`. */
     readonly plugins?: readonly unknown[];
     /**
-     * Extra `resolve.conditions` prepended ahead of nifra's defaults — some frameworks need their own
+     * Extra `resolve.conditions` prepended ahead of nifra's defaults - some frameworks need their own
      * (e.g. Solid's `"solid"` condition routes `solid-js` to its source/JSX-dev build).
      */
     readonly conditions?: readonly string[];
@@ -35,18 +35,21 @@ export interface ViteDevServerOptions {
     readonly port?: number;
     /**
      * Use polling for the file watcher. Native fs events (fsevents/inotify) are unreliable inside
-     * containers, networked filesystems, and some sandboxes — there, HMR silently never fires. Set
+     * containers, networked filesystems, and some sandboxes - there, HMR silently never fires. Set
      * `true` (or the env var `CHOKIDAR_USEPOLLING=1`) to poll instead. Default: off (native events).
      */
     readonly poll?: boolean;
     /** Vite public directory. Defaults to `<root>/public`; `false` disables it. */
     readonly publicDir?: string | false;
+    /** Client-visible environment prefix (default `"PUBLIC_"`; empty disables exposure). */
+    readonly publicEnvPrefix?: string;
 }
 export interface ViteDevServer {
     readonly port: number;
     stop(): Promise<void>;
 }
-/** The bits of a Node ServerResponse `pipeWebBodyToNode` touches — structural, to avoid a node:http dep here. */
+export { LAST_ERROR_PATH } from "./diagnostic.js";
+/** The bits of a Node ServerResponse `pipeWebBodyToNode` touches - structural, to avoid a node:http dep here. */
 interface NodeResLike {
     flushHeaders?(): void;
     on(event: "close", cb: () => void): void;
@@ -59,30 +62,30 @@ interface NodeHeaderSink {
 }
 /**
  * Copy a Web `Response`'s headers onto a Node response, emitting EACH `Set-Cookie` as its own header. The
- * `Headers` iterator (and `.get`) join multiple set-cookie values with ", ", which corrupts cookies — e.g.
+ * `Headers` iterator (and `.get`) join multiple set-cookie values with ", ", which corrupts cookies - e.g.
  * better-auth's `session_token` + `session_data` collapse into one unparseable cookie and the session is
  * silently lost. `getSetCookie()` returns them split; Node's `setHeader` emits one header per array element.
  */
 export declare function applyResponseHeaders(headers: Headers, res: NodeHeaderSink): void;
 /**
  * Stream a Web `Response` body to a Node response chunk-by-chunk. Buffering the whole body (e.g.
- * `arrayBuffer()`) waits for the stream to END — which an open-ended SSE (`text/event-stream`) body never
+ * `arrayBuffer()`) waits for the stream to END - which an open-ended SSE (`text/event-stream`) body never
  * does, so it hung `nifra dev` (the Bun production server streamed it fine). This flushes each chunk as it
  * arrives and cancels the reader if the client disconnects; a finite body just streams its chunk(s) + ends.
  */
 export declare function pipeWebBodyToNode(body: ReadableStream<Uint8Array> | null, res: NodeResLike): Promise<void>;
 /**
  * Strip `optimizeDeps.rollupOptions.jsx` from a plugin's `config` hook output when running under
- * rolldown-vite — the source of the scary, harmless `Warning: Invalid input options … "jsx" Invalid
+ * rolldown-vite - the source of the scary, harmless `Warning: Invalid input options … "jsx" Invalid
  * key: Expected never but received "jsx"` on `nifra dev`.
  *
  * Why it happens: `@vitejs/plugin-react@4.x` (and peers) target an *older* rolldown-vite optimizeDeps
- * API — they inject `optimizeDeps.rollupOptions.jsx` to tell the dep pre-bundler to transform JSX. Vite
+ * API - they inject `optimizeDeps.rollupOptions.jsx` to tell the dep pre-bundler to transform JSX. Vite
  * 8's rolldown dep-optimizer renamed that surface to `optimizeDeps.rolldownOptions` (and moved jsx under
  * `transform.jsx`), so the stale `rollupOptions.jsx` is an unrecognized input option → the warning. It's
  * a version-skew artifact, not a real misconfig: the route source JSX transform runs through the
  * plugin's own `transform` hook (untouched here), and node_modules deps that get pre-bundled almost
- * never contain raw JSX — so dropping the dead key changes no behavior and keeps HMR/Fast Refresh
+ * never contain raw JSX - so dropping the dead key changes no behavior and keeps HMR/Fast Refresh
  * intact. We *strip* (rather than translate to `rolldownOptions`) so the fix is version-agnostic: a
  * plugin already emitting the correct `rolldownOptions` is left untouched, and a future plugin bump that
  * stops emitting `rollupOptions.jsx` makes this a no-op.
@@ -90,12 +93,12 @@ export declare function pipeWebBodyToNode(body: ReadableStream<Uint8Array> | nul
  * Scoped narrowly: only the `optimizeDeps.rollupOptions.jsx` key is removed, only under rolldown-vite,
  * and only from the value a plugin's `config` hook returns. Non-rolldown Vite is passed through verbatim.
  *
- * FLATTEN FIRST: a Vite plugin factory may return an ARRAY of plugins — `@vitejs/plugin-react`'s `react()`
+ * FLATTEN FIRST: a Vite plugin factory may return an ARRAY of plugins - `@vitejs/plugin-react`'s `react()`
  * returns `[vite:react-babel, vite:react-refresh]`, and it's `react:react-babel`'s `config` hook that emits
  * the offending `optimizeDeps.rollupOptions.jsx`. `nifra.config.ts` writes `vitePlugins = [react()]`, so the
  * plugin list arrives NESTED (`[[babel, refresh]]`). Without flattening, `.map` sees the inner array (which
- * has no `config`), leaves it untouched, and Vite — which flattens plugin arrays itself before running them
- * — then executes the un-stripped babel hook, so the warning survives. Flattening here (Vite accepts a flat
+ * has no `config`), leaves it untouched, and Vite - which flattens plugin arrays itself before running them
+ * - then executes the un-stripped babel hook, so the warning survives. Flattening here (Vite accepts a flat
  * list identically) is what lets the strip reach every real plugin.
  */
 export declare function normalizeRolldownPlugins(plugins: readonly unknown[], isRolldown: boolean): readonly unknown[];
@@ -104,5 +107,4 @@ export declare function normalizeRolldownPlugins(plugins: readonly unknown[], is
  * injects its HMR client + the framework refresh preamble via `transformIndexHtml`.
  */
 export declare function createViteDevServer(options: ViteDevServerOptions): Promise<ViteDevServer>;
-export {};
 //# sourceMappingURL=vite.d.ts.map

package/dist/vite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAwBA,8DAA8D;AAC9D,UAAU,QAAQ;IAChB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACtD;AAuBD,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,0FAA0F;IAC1F,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,CAClB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,KAC7C,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IACrC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,mDAAmD;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AA6CD,iHAAiH;AACjH,UAAU,WAAW;IACnB,YAAY,CAAC,IAAI,IAAI,CAAA;IACrB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,CAAA;IACxC,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAA;IACjC,GAAG,IAAI,IAAI,CAAA;CACZ;AAED,8DAA8D;AAC9D,UAAU,cAAc;IACtB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CACjE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,CAOhF;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EACvC,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,UAAU,EAAE,OAAO,GAClB,SAAS,OAAO,EAAE,CAkCpB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAwI/F"}
+{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AA4BA,8DAA8D;AAC9D,UAAU,QAAQ;IAChB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CACtD;AAuBD,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,0FAA0F;IAC1F,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,EAAE,CAClB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,KAC7C,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IACrC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACvC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAClD,mDAAmD;IACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAA;IACnC,wFAAwF;IACxF,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AA6CjD,iHAAiH;AACjH,UAAU,WAAW;IACnB,YAAY,CAAC,IAAI,IAAI,CAAA;IACrB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,CAAA;IACxC,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAA;IACjC,GAAG,IAAI,IAAI,CAAA;CACZ;AAED,8DAA8D;AAC9D,UAAU,cAAc;IACtB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;CACjE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,IAAI,CAOhF;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EACvC,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,SAAS,OAAO,EAAE,EAC3B,UAAU,EAAE,OAAO,GAClB,SAAS,OAAO,EAAE,CAkCpB;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CA6J/F"}