@nifrajs/web 5.5.1 → 5.6.0

package/dist/internal/ppr/admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.js","sourceRoot":"","sources":["../../../src/internal/ppr/admission.ts"],"names":[],"mappings":"AA8CA,MAAM,aAAa,GAAoB;IACrC,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;IAC5B,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtD,oHAAoH;IACpH,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAuC,CAAC;CAChF,CAAA;AAED,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAgC,CAAA;AAE5D;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAmB,EAAE,OAAmB;IACjE,IAAI,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAc,CAAA;QACrC,QAAQ,GAAG,OAAO,CAAA;QAClB,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7B,MAAM,CAAC,gBAAgB,CACrB,OAAO,EACP,GAAG,EAAE;YACH,KAAK,MAAM,OAAO,IAAI,OAAO;gBAAE,OAAO,EAAE,CAAA;QAC1C,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAA;IACpB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAChB,OAAO,GAAG,EAAE;QACV,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACrB,CAAC,CAAA;AACH,CAAC;AAOD,MAAM,OAAO,GAAG,CAAC,MAA0B,EAAE,GAAW,EAAS,EAAE;IACjE,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAA;QAChB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,OAAO,GAAG,CAAC,MAA0B,EAA0B,EAAE;IACrE,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM;QAAE,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAA;IACxE,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAa;IACf,QAAQ,CAAkB;IAC1B,aAAa,CAA2D;IACxE,OAAO,CAAiB;IACxB,UAAU,GAAG,IAAI,GAAG,EAAiB,CAAA;IACrC,YAAY,GAAG,IAAI,GAAG,EAAiB,CAAA;IACvC,OAAO,GAAgC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;IACpF,QAAQ,GAAG,CAAC,CAAA;IACZ,UAAU,GAAG,CAAC,CAAA;IACd,WAAW,GAAG,CAAC,CAAA;IACf,KAAK,GAAG,CAAC,CAAA;IAET,YACE,OAAyB,EACzB,YAA0D,EAC1D,SAA0B,aAAa;QAEvC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAA;QACjC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAA;IACvB,CAAC;IAED,kGAAkG;IAClG,IAAI;QACF,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,CAAC,KAAK,EAAE,CAAA;YACZ,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAA;QAClB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACrD,CAAC;IAED,oFAAoF;IACpF,MAAM,CAAC,GAAW;QAChB,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa;YAAE,OAAO,MAAM,CAAA;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;QAC/C,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,SAAS,CAAA;QACvF,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,qBAAqB;YAAE,OAAO,UAAU,CAAA;QAClE,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,mCAAmC;IACnC,WAAW,CAAC,KAAkB;QAC5B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAA;IACvB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CACJ,GAAW,EACX,MAAmB,EACnB,IAA0B,EAC1B,MAAkB,EAClB,KAA0C;QAE1C,IAAI,CAAC,QAAQ,EAAE,CAAA;QACf,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC7C,OAAO,CAAC,CAAC,EAAE,CAAA;QACX,OAAO,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YACzC,IAAI,QAAQ,GAAG,KAAK,CAAA;YACpB,MAAM,MAAM,GAAG,CAAC,GAAe,EAAQ,EAAE;gBACvC,IAAI,QAAQ;oBAAE,OAAM;gBACpB,QAAQ,GAAG,IAAI,CAAA;gBACf,OAAO,CAAC,GAAG,CAAC,CAAA;YACd,CAAC,CAAA;YACD,IAAI,SAA4B,CAAA;YAChC,IAAI,SAA6B,CAAA;YACjC,IAAI,KAAc,CAAA;YAClB,MAAM,OAAO,GAAG,GAAS,EAAE;gBACzB,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA;gBAC9B,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE;oBACnC,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;oBAC3C,SAAS,CAAC,CAAC,EAAE,CAAA;oBACb,IAAI,CAAC,UAAU,EAAE,CAAA;oBACjB,MAAM,EAAE,CAAA;gBACV,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;gBAChC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAChE,CAAC,CAAA;YACD,IAAI,OAAiC,CAAA;YACrC,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAA;;gBACxB,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,CAAA;YAC7B,MAAM,MAAM,GAAG,GAAS,EAAE;gBACxB,OAAO,EAAE,EAAE,CAAA;gBACX,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;gBACzD,IAAI,CAAC,QAAQ,EAAE,CAAA;gBACf,OAAO,CAAC,CAAC,EAAE,CAAA;gBACX,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,IAAI,CAAC,UAAU,EAAE,CAAA;oBACjB,SAAS,CAAC,CAAC,EAAE,CAAA;gBACf,CAAC;gBACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;oBAC3C,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc;wBAAE,IAAI,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;gBAC1E,CAAC;gBACD,MAAM,EAAE,CAAA;YACV,CAAC,CAAA;YACD,qEAAqE;YACrE,OAAO,CAAC,OAAO,EAAE;iBACd,IAAI,CAAC,IAAI,CAAC;iBACV,IAAI,CACH,CAAC,KAAK,EAAE,EAAE;gBACR,MAAM,EAAE,CAAA;gBACR,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YAC7B,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;gBACjB,MAAM,EAAE,CAAA;gBACR,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;YAC7E,CAAC,CACF,CAAA;QACL,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK;QACH,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YACnC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;YACvC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,gBAAgB,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa;SACjE,CAAA;IACH,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,QAAQ;IACV,UAAU,CAAe;IACzB,QAAQ,CAAY;IAC7B,YAAY,GAAG,CAAC,CAAA;IAChB,OAAO,GAAG,KAAK,CAAA;IACf,SAAS,GAAG,KAAK,CAAA;IAEjB,YAAY,SAAwB,EAAE,OAAmB;QACvD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAA;QAC3B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;IACzB,CAAC;IAED;;;;OAIG;IACH,GAAG,CACD,GAAW,EACX,MAAmB,EACnB,IAA0B,EAC1B,QAA6C,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC;QAErF,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;QAC5F,IAAI,MAAM,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;QAC5E,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;YAClC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAC3B,GAAG,EACH,MAAM,EACN,IAAI,EACJ,GAAG,EAAE;YACH,IAAI,IAAI;gBAAE,OAAM;YAChB,IAAI,GAAG,IAAI,CAAA;YACX,IAAI,CAAC,YAAY,EAAE,CAAA;YACnB,IAAI,CAAC,aAAa,EAAE,CAAA;QACtB,CAAC,EACD,KAAK,CACN,CAAA;IACH,CAAC;IAED,iGAAiG;IACjG,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,CAAC,aAAa,EAAE,CAAA;IACtB,CAAC;IAED,aAAa;QACX,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC;YAAE,OAAM;QACpE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,QAAQ,EAAE,CAAA;IACjB,CAAC;CACF"}

package/dist/internal/ppr/canary.d.ts

@@ -0,0 +1,24 @@
+/** Where a canary value went into the request whose shell carried it. */
+export type CanaryCarrier = "cookie" | "authorization" | "header" | "query";
+export interface ShellCanaryFinding {
+    readonly path: string;
+    readonly via: CanaryCarrier;
+    /** The shared hole whose frame carried it; absent when the shell did. */
+    readonly hole?: string;
+}
+export interface ShellCanaryOptions {
+    /** The origin the requests are made against. Default `http://canary.invalid`. */
+    readonly origin?: string;
+}
+/**
+ * The canary check. Each path is requested through the app's own middleware and gates with a
+ * unique value in a cookie, an `Authorization` header, a custom header and the query, until a
+ * response carries a shell (`shellAfterRequests` decides which request builds it) and a built frame
+ * for each shared hole, and those are scanned for every value the path's requests carried. It
+ * catches visitor data the app keeps in module state, which no import check sees. Run it against a
+ * fresh app before it serves traffic: a shell or frame already cached was built without the canaries.
+ */
+export declare function checkShellCanaries(app: {
+    fetch(request: Request): Response | Promise<Response>;
+}, paths: readonly string[], options?: ShellCanaryOptions): Promise<readonly ShellCanaryFinding[]>;
+//# sourceMappingURL=canary.d.ts.map

package/dist/internal/ppr/canary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canary.d.ts","sourceRoot":"","sources":["../../../src/internal/ppr/canary.ts"],"names":[],"mappings":"AAEA,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,eAAe,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE3E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAA;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,iFAAiF;IACjF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAoDD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE;IAAE,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;CAAE,EAC9D,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CA0CxC"}

package/dist/internal/ppr/canary.js

@@ -0,0 +1,102 @@
+import { MAX_SHELL_AFTER_REQUESTS } from "./options.js";
+const CARRIERS = ["cookie", "authorization", "header", "query"];
+/** Where a streamed document's per-response part starts: everything before it is the shared shell. */
+const REQUEST_SCRIPT = '<script type="application/json" id="nifra-ppr-req">';
+const SCRIPT_END = "</script>";
+/** Requests per path: enough for a shell to be built, then for each shared hole's entry. */
+const MAX_ATTEMPTS = 2 * MAX_SHELL_AFTER_REQUESTS;
+/** The JSON text of the inert script element opened by `opener`, or `undefined` without one. */
+const scriptText = (html, opener) => {
+    const start = html.indexOf(opener);
+    if (start === -1)
+        return undefined;
+    const end = html.indexOf(SCRIPT_END, start + opener.length);
+    return end === -1 ? undefined : html.slice(start + opener.length, end);
+};
+const parsed = (text) => {
+    if (text === undefined)
+        return undefined;
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+};
+/** The shared holes' frames a response carries, by name, when every one carries its entry. */
+function sharedFrames(html) {
+    const request = parsed(scriptText(html, REQUEST_SCRIPT));
+    const names = typeof request === "object" && request !== null ? Reflect.get(request, "shared") : undefined;
+    const frames = new Map();
+    if (!Array.isArray(names))
+        return frames;
+    for (const name of names) {
+        if (typeof name !== "string")
+            return undefined;
+        const text = scriptText(html, `<script type="application/json" id="nifra-ppr:${name}">`);
+        const frame = parsed(text);
+        // An error frame holds nothing built: the entry is not there yet.
+        if (text === undefined || typeof frame !== "object" || frame === null)
+            return undefined;
+        if (Reflect.get(frame, "error") === true)
+            return undefined;
+        frames.set(name, text);
+    }
+    return frames;
+}
+const randomHex = () => Array.from(crypto.getRandomValues(new Uint8Array(12)), (byte) => byte.toString(16).padStart(2, "0")).join("");
+/**
+ * The canary check. Each path is requested through the app's own middleware and gates with a
+ * unique value in a cookie, an `Authorization` header, a custom header and the query, until a
+ * response carries a shell (`shellAfterRequests` decides which request builds it) and a built frame
+ * for each shared hole, and those are scanned for every value the path's requests carried. It
+ * catches visitor data the app keeps in module state, which no import check sees. Run it against a
+ * fresh app before it serves traffic: a shell or frame already cached was built without the canaries.
+ */
+export async function checkShellCanaries(app, paths, options = {}) {
+    const findings = [];
+    for (const path of paths) {
+        const sent = [];
+        // A route that renders whole every time reports nothing.
+        for (let attempt = 0; attempt < MAX_ATTEMPTS; attempt++) {
+            const values = {
+                cookie: `nifra-canary-${randomHex()}`,
+                authorization: `nifra-canary-${randomHex()}`,
+                header: `nifra-canary-${randomHex()}`,
+                query: `nifra-canary-${randomHex()}`,
+            };
+            sent.push(values);
+            const url = new URL(path, options.origin ?? "http://canary.invalid");
+            url.searchParams.set("nifra_canary", values.query);
+            const response = await app.fetch(new Request(url.href, {
+                headers: {
+                    cookie: `nifra_canary=${values.cookie}`,
+                    authorization: `Bearer ${values.authorization}`,
+                    "x-nifra-canary": values.header,
+                },
+            }));
+            const html = await response.text();
+            const end = html.indexOf(REQUEST_SCRIPT);
+            // No shared shell yet: this request rendered whole, so nothing it saw is shared.
+            if (end === -1)
+                continue;
+            const frames = sharedFrames(html);
+            // A shared hole whose entry is still being built: a later request gets it.
+            if (frames === undefined && attempt < MAX_ATTEMPTS - 1)
+                continue;
+            const shell = html.slice(0, end);
+            const carried = (text, via) => sent.some((earlier) => text.includes(earlier[via]));
+            for (const via of CARRIERS)
+                if (carried(shell, via))
+                    findings.push({ path, via });
+            for (const [hole, frame] of frames ?? []) {
+                for (const via of CARRIERS)
+                    if (carried(frame, via))
+                        findings.push({ path, via, hole });
+            }
+            break;
+        }
+    }
+    return findings;
+}
+//# sourceMappingURL=canary.js.map

package/dist/internal/ppr/canary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canary.js","sourceRoot":"","sources":["../../../src/internal/ppr/canary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAA;AAiBvD,MAAM,QAAQ,GAA6B,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AAEzF,sGAAsG;AACtG,MAAM,cAAc,GAAG,qDAAqD,CAAA;AAC5E,MAAM,UAAU,GAAG,WAAW,CAAA;AAE9B,4FAA4F;AAC5F,MAAM,YAAY,GAAG,CAAC,GAAG,wBAAwB,CAAA;AAEjD,gGAAgG;AAChG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,MAAc,EAAsB,EAAE;IACtE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAClC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAA;IAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAC3D,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACxE,CAAC,CAAA;AAED,MAAM,MAAM,GAAG,CAAC,IAAwB,EAAW,EAAE;IACnD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC,CAAA;AAED,8FAA8F;AAC9F,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAA;IACxD,MAAM,KAAK,GACT,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC9F,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAA;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAA;QAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,iDAAiD,IAAI,IAAI,CAAC,CAAA;QACxF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QAC1B,kEAAkE;QAClE,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QACvF,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QAC1D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,SAAS,GAAG,GAAW,EAAE,CAC7B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAC9D,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACnC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAEZ;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAA8D,EAC9D,KAAwB,EACxB,UAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAyB,EAAE,CAAA;IACzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAyC,EAAE,CAAA;QACrD,yDAAyD;QACzD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC;YACxD,MAAM,MAAM,GAAkC;gBAC5C,MAAM,EAAE,gBAAgB,SAAS,EAAE,EAAE;gBACrC,aAAa,EAAE,gBAAgB,SAAS,EAAE,EAAE;gBAC5C,MAAM,EAAE,gBAAgB,SAAS,EAAE,EAAE;gBACrC,KAAK,EAAE,gBAAgB,SAAS,EAAE,EAAE;aACrC,CAAA;YACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,IAAI,uBAAuB,CAAC,CAAA;YACpE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;YAClD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;gBACpB,OAAO,EAAE;oBACP,MAAM,EAAE,gBAAgB,MAAM,CAAC,MAAM,EAAE;oBACvC,aAAa,EAAE,UAAU,MAAM,CAAC,aAAa,EAAE;oBAC/C,gBAAgB,EAAE,MAAM,CAAC,MAAM;iBAChC;aACF,CAAC,CACH,CAAA;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;YACxC,iFAAiF;YACjF,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,SAAQ;YACxB,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;YACjC,2EAA2E;YAC3E,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,GAAG,YAAY,GAAG,CAAC;gBAAE,SAAQ;YAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YAChC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,GAAkB,EAAW,EAAE,CAC5D,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACrD,KAAK,MAAM,GAAG,IAAI,QAAQ;gBAAE,IAAI,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;YACjF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;gBACzC,KAAK,MAAM,GAAG,IAAI,QAAQ;oBAAE,IAAI,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;YACzF,CAAC;YACD,MAAK;QACP,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}

package/dist/internal/ppr/compile-shell.d.ts

@@ -0,0 +1,39 @@
+import type { Manifest } from "../../manifest.js";
+/**
+ * Which routes passed the shell check for one deployment. The server shares a shell only for a route
+ * listed here under its own deployment; anything else renders blocking (fail closed).
+ */
+export interface ShellCheckRecord {
+    readonly v: 1;
+    readonly deployment: string;
+    /** Route id to the sha256 of the checked shell bundle. */
+    readonly routes: Readonly<Record<string, string>>;
+    /** Route id to the shared holes whose loaders were checked in that bundle: only these are stored. */
+    readonly sharedHoles?: Readonly<Record<string, readonly string[]>>;
+}
+export declare class ShellCheckError extends Error {
+    readonly routeId: string;
+    readonly chain: readonly string[];
+    readonly name = "ShellCheckError";
+    constructor(routeId: string, chain: readonly string[]);
+}
+export interface CompileShellsOptions {
+    readonly routesDir: string;
+    readonly manifest: Manifest;
+    /** The deployment the record is for: the server refuses a record made for another one. */
+    readonly deployment: string;
+    /** True for a module (absolute path, `/` separators) whose code reads the visitor's request. */
+    readonly requestScoped: (moduleId: string) => boolean;
+    /** Called for each route that fails; the route is left out of the record. Default: rethrow. */
+    readonly onFailure?: (routeId: string, error: unknown) => void;
+    /** Bun plugins the server build uses for route files, such as `svelteBunPlugin("ssr")`. */
+    readonly plugins?: readonly import("bun").BunPlugin[];
+}
+/**
+ * Bundle each route's shell (its page and layout modules, its backend `shellLoader`, and nothing else)
+ * and refuse it when the emitted code reaches a request-scoped module. A module counts only
+ * when its code reached the output, so an import only a hole loader uses is not a leak. Routes whose
+ * backend half has no `shellLoader` are skipped. Bun only.
+ */
+export declare function compileShells(options: CompileShellsOptions): Promise<ShellCheckRecord>;
+//# sourceMappingURL=compile-shell.d.ts.map

package/dist/internal/ppr/compile-shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile-shell.d.ts","sourceRoot":"","sources":["../../../src/internal/ppr/compile-shell.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAc,MAAM,mBAAmB,CAAA;AAI7D;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,qGAAqG;IACrG,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAA;CACnE;AAED,qBAAa,eAAgB,SAAQ,KAAK;IAGtC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE;IAHnC,SAAkB,IAAI,qBAAoB;gBAE/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,SAAS,MAAM,EAAE;CAMpC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAA;IAC3B,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,gGAAgG;IAChG,QAAQ,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAA;IACrD,+FAA+F;IAC/F,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;IAC9D,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,KAAK,EAAE,SAAS,EAAE,CAAA;CACtD;AAgDD;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4B5F"}

package/dist/internal/ppr/compile-shell.js

@@ -0,0 +1,298 @@
+import { createRequire } from "node:module";
+import { basename, join, resolve } from "node:path";
+import { fromBunMetafile } from "../../module-graph.js";
+import { isTypeScriptCompiler } from "../typescript-api.js";
+export class ShellCheckError extends Error {
+    routeId;
+    chain;
+    name = "ShellCheckError";
+    constructor(routeId, chain) {
+        super(`[nifra/web] ppr: the shell of route "${routeId}" reaches request-scoped module "${chain.at(-1)}" through ${chain.join(" -> ")}. Move that read into a dynamic boundary's loader: a shared boundary's loader is part of the shell`);
+        this.routeId = routeId;
+        this.chain = chain;
+    }
+}
+const NAMESPACE = "nifra-ppr-shell";
+const toPosix = (path) => path.replaceAll("\\", "/");
+const escapeRegExp = (text) => text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+/**
+ * nifra's own modules that read the visitor's request from async context. Packages stay external in
+ * the shell bundle, so these are bundled in instead: the output graph then shows whether shell code
+ * calls them, not merely whether a module beside it imports them.
+ */
+const NIFRA_REQUEST_SCOPED = ["@nifrajs/middleware/context-storage"];
+const NIFRA_REQUEST_SCOPED_FILTER = new RegExp(`^(?:${NIFRA_REQUEST_SCOPED.map(escapeRegExp).join("|")})$`);
+/** Hands any module the Worker's `env`, its secrets included, with no request in sight. */
+const PLATFORM_ENV = /^cloudflare:workers$/;
+/** The import chain from `root` to the first request-scoped module it reaches, breadth first. */
+function requestScopedChain(root, next, scoped) {
+    const parent = new Map([[root, undefined]]);
+    const queue = [root];
+    for (let cursor = 0; cursor < queue.length; cursor++) {
+        const module = queue[cursor];
+        if (module === undefined)
+            break;
+        if (scoped.has(module)) {
+            const chain = [];
+            for (let at = module; at !== undefined; at = parent.get(at))
+                chain.push(at);
+            return chain.reverse();
+        }
+        for (const child of next.get(module) ?? []) {
+            if (!parent.has(child)) {
+                parent.set(child, module);
+                queue.push(child);
+            }
+        }
+    }
+    return undefined;
+}
+/**
+ * Bundle each route's shell (its page and layout modules, its backend `shellLoader`, and nothing else)
+ * and refuse it when the emitted code reaches a request-scoped module. A module counts only
+ * when its code reached the output, so an import only a hole loader uses is not a leak. Routes whose
+ * backend half has no `shellLoader` are skipped. Bun only.
+ */
+export async function compileShells(options) {
+    const dir = resolve(options.routesDir);
+    const routes = {};
+    const sharedHoles = {};
+    const parser = typeScriptFor(dir);
+    for (const route of options.manifest.routes) {
+        if (route.backend === undefined)
+            continue;
+        try {
+            const checked = await compileShell(dir, options.manifest, route, route.backend, options.requestScoped, options.plugins ?? [], parser);
+            if (checked === undefined)
+                continue;
+            routes[route.id] = checked.hash;
+            if (checked.sharedHoles.length > 0)
+                sharedHoles[route.id] = checked.sharedHoles;
+        }
+        catch (error) {
+            if (options.onFailure === undefined)
+                throw error;
+            options.onFailure(route.id, error);
+        }
+    }
+    return Object.keys(sharedHoles).length === 0
+        ? { v: 1, deployment: options.deployment, routes }
+        : { v: 1, deployment: options.deployment, routes, sharedHoles };
+}
+/** The app's TypeScript compiler, read only when a backend half has boundary loaders to sort. */
+function typeScriptFor(dir) {
+    let loaded;
+    let tried = false;
+    return () => {
+        if (tried)
+            return loaded;
+        tried = true;
+        let ts;
+        try {
+            ts = createRequire(join(dir, "package.json"))("typescript");
+        }
+        catch {
+            ts = undefined;
+        }
+        if (isTypeScriptCompiler(ts))
+            loaded = ts;
+        else {
+            console.warn("[nifra/web] ppr: no shared hole's loader is checked, so each loads for every visitor: finding them reads boundaryLoaders with the TypeScript compiler API, which the app's TypeScript does not have (TypeScript 7 ships none; install typescript@^6 as a dev dependency)");
+        }
+        return loaded;
+    };
+}
+/** `node` without the `satisfies`, `as` and parentheses around it. */
+function unwrapped(ts, node) {
+    let at = node;
+    while (ts.isSatisfiesExpression(at) || ts.isAsExpression(at) || ts.isParenthesizedExpression(at))
+        at = at.expression;
+    return at;
+}
+/**
+ * The backend half with `boundaryLoaders` cut down to its shared entries, and their names. A shared
+ * entry is one written inline with `revalidate`, which only a shared boundary's entry may have; one the
+ * source does not spell out that way is left out, so its hole is not stored (fail closed). A per-visitor
+ * entry's loader may read the request, so it never joins the shell bundle.
+ */
+function sharedLoaders(ts, module) {
+    const file = ts.createSourceFile(module.path, module.source, ts.ScriptTarget.Latest, true, module.loader === "tsx" ? ts.ScriptKind.TSX : ts.ScriptKind.TS);
+    for (const statement of file.statements) {
+        if (!ts.isVariableStatement(statement))
+            continue;
+        for (const declaration of statement.declarationList.declarations) {
+            if (!ts.isIdentifier(declaration.name) || declaration.name.text !== "boundaryLoaders")
+                continue;
+            const initializer = declaration.initializer && unwrapped(ts, declaration.initializer);
+            if (initializer === undefined || !ts.isObjectLiteralExpression(initializer))
+                return undefined;
+            const names = [];
+            const kept = [];
+            for (const property of initializer.properties) {
+                if (!ts.isPropertyAssignment(property))
+                    continue;
+                const { name } = property;
+                if (!ts.isIdentifier(name) && !ts.isStringLiteral(name))
+                    continue;
+                const entry = unwrapped(ts, property.initializer);
+                if (!ts.isObjectLiteralExpression(entry))
+                    continue;
+                const shared = entry.properties.some((field) => field.name !== undefined &&
+                    (ts.isIdentifier(field.name) || ts.isStringLiteral(field.name)) &&
+                    field.name.text === "revalidate");
+                if (!shared)
+                    continue;
+                names.push(name.text);
+                kept.push(module.source.slice(property.getStart(file), property.getEnd()));
+            }
+            if (names.length === 0)
+                return undefined;
+            const source = `${module.source.slice(0, initializer.getStart(file))}{ ${kept.join(", ")} }${module.source.slice(initializer.getEnd())}`;
+            return { source, names };
+        }
+    }
+    return undefined;
+}
+async function readModule(dir, file) {
+    const path = toPosix(resolve(dir, file));
+    const loader = /\.[cm]?tsx$|\.jsx$/.test(path) ? "tsx" : "ts";
+    const source = await Bun.file(path).text();
+    return { path, loader, source, exports: new Bun.Transpiler({ loader }).scan(source).exports };
+}
+async function compileShell(dir, manifest, route, backend, requestScoped, plugins, parser) {
+    const backendModule = await readModule(dir, backend);
+    if (!backendModule.exports.includes("shellLoader"))
+        return undefined;
+    const ts = backendModule.exports.includes("boundaryLoaders") ? parser() : undefined;
+    const shared = ts === undefined ? undefined : sharedLoaders(ts, backendModule);
+    const kept = shared === undefined ? ["shellLoader"] : ["shellLoader", "boundaryLoaders"];
+    // A gate's loader runs for its redirect or refusal and its data never reaches the shell; any other
+    // layout loader reads the request for data the shell would show every visitor.
+    for (const id of route.layoutIds) {
+        const layoutBackend = manifest.layouts[id]?.backend;
+        if (layoutBackend === undefined)
+            continue;
+        const names = (await readModule(dir, layoutBackend)).exports;
+        if (names.includes("loader") && !names.includes("gate")) {
+            throw new Error(`[nifra/web] ppr: route "${route.id}" has a shellLoader, but its layout "${id}" has a loader that is not a gate. Its output would be in a shell shared by every visitor; move that data into a dynamic boundary, or mark the layout \`gate\` if it loads only to redirect or refuse`);
+        }
+    }
+    const at = (file) => JSON.stringify(toPosix(resolve(dir, file)));
+    // A page's and each layout's module whole: the shell runs `meta`, `handle` and `searchSchema` as
+    // well as the component, and an import only one of them uses must not escape the check.
+    const lines = [
+        `export { ${kept.join(", ")} } from ${at(backend)}`,
+        `export * as page from ${at(route.file)}`,
+    ];
+    route.layoutIds.forEach((id, index) => {
+        const layout = manifest.layouts[id];
+        if (layout !== undefined)
+            lines.push(`export * as layout${index} from ${at(layout.file)}`);
+    });
+    const nifraScoped = new Set();
+    const envImporters = new Set();
+    const result = await Bun.build({
+        // Bun reads a `/` in an entry name as a directory, and route ids have them.
+        entrypoints: [`${NAMESPACE}:${encodeURIComponent(route.id)}`],
+        target: "bun",
+        packages: "external",
+        metafile: true,
+        throw: false,
+        plugins: [
+            // Ours first: its resolve and load hooks claim the entry and the backend half before theirs.
+            {
+                name: NAMESPACE,
+                setup(build) {
+                    build.onResolve({ filter: new RegExp(`^${NAMESPACE}:`) }, (args) => ({
+                        path: args.path,
+                        namespace: NAMESPACE,
+                    }));
+                    build.onLoad({ filter: /.*/, namespace: NAMESPACE }, () => ({
+                        loader: "ts",
+                        contents: lines.join("\n"),
+                    }));
+                    build.onResolve({ filter: NIFRA_REQUEST_SCOPED_FILTER }, (args) => {
+                        let path;
+                        try {
+                            path = toPosix(Bun.resolveSync(args.path, args.resolveDir));
+                        }
+                        catch {
+                            // Not installed, so no shell code can call it.
+                            return undefined;
+                        }
+                        nifraScoped.add(path);
+                        return { path };
+                    });
+                    build.onResolve({ filter: PLATFORM_ENV }, (args) => {
+                        envImporters.add(toPosix(resolve(args.importer)));
+                        return { path: args.path, external: true };
+                    });
+                    // The backend half's other exports are not shell code. A hole loader's `output: t.object()`
+                    // is a call into a package, which the bundler must keep, and with it every import the
+                    // hole uses. Eliminating them first scopes the check to `shellLoader` and the shared
+                    // holes' loaders; their imports stay as bare imports, so a module with top-level effects
+                    // still counts. The file is matched by its `/` form: Bun hands a plugin `\` on Windows.
+                    build.onLoad({ filter: new RegExp(`${escapeRegExp(basename(backendModule.path))}$`) }, (args) => toPosix(args.path) !== backendModule.path
+                        ? undefined
+                        : {
+                            loader: "js",
+                            contents: new Bun.Transpiler({
+                                loader: backendModule.loader,
+                                trimUnusedImports: true,
+                                exports: {
+                                    eliminate: backendModule.exports.filter((name) => !kept.includes(name)),
+                                },
+                            }).transformSync(shared?.source ?? backendModule.source),
+                        });
+                },
+            },
+            ...plugins,
+        ],
+    });
+    if (!result.success) {
+        throw new AggregateError(result.logs, `[nifra/web] ppr: the shell of "${route.id}" failed to build`);
+    }
+    // biome-ignore lint/plugin/noChainedTypeAssertions: Bun returns the metafile when `metafile: true`; @types/bun does not name it yet, and fromBunMetafile fails closed on a missing one.
+    // biome-ignore lint/plugin/requireSafetyCommentForTypeAssertion: Bun returns the metafile when `metafile: true`; @types/bun does not name it yet, and fromBunMetafile fails closed on a missing one.
+    const meta = result.metafile;
+    const graph = fromBunMetafile(meta);
+    const entry = Object.values(meta?.outputs ?? {}).find((output) => output.entryPoint?.startsWith(`${NAMESPACE}:`));
+    if (entry === undefined)
+        throw new Error(`[nifra/web] ppr: no output for the shell of "${route.id}"`);
+    // Re-exports and the virtual entry have zero bytes too, so every edge stays and only the
+    // request-scoped test reads bytes.
+    const emitted = (id) => {
+        const input = entry.inputs?.[id];
+        return (typeof input === "object" &&
+            input !== null &&
+            "bytesInOutput" in input &&
+            typeof input.bytesInOutput === "number" &&
+            input.bytesInOutput > 0);
+    };
+    const absolute = (id) => id.startsWith(`${NAMESPACE}:`) ? id : toPosix(resolve(id));
+    const next = new Map();
+    const scoped = new Set();
+    let root;
+    for (const [id, module] of Object.entries(graph.modules)) {
+        const from = absolute(id);
+        if (id.startsWith(`${NAMESPACE}:`))
+            root = from;
+        if (emitted(id) && (nifraScoped.has(from) || envImporters.has(from) || requestScoped(from)))
+            scoped.add(from);
+        next.set(from, module.imports.flatMap((edge) => (edge.path === undefined ? [] : [absolute(edge.path)])));
+    }
+    if (root === undefined)
+        throw new Error(`[nifra/web] ppr: no entry module for "${route.id}"`);
+    const chain = requestScopedChain(root, next, scoped);
+    if (chain !== undefined)
+        throw new ShellCheckError(route.id, chain.slice(1));
+    const output = result.outputs.find((artifact) => artifact.kind === "entry-point");
+    if (output === undefined)
+        throw new Error(`[nifra/web] ppr: no bundle for the shell of "${route.id}"`);
+    const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(await output.text())));
+    return {
+        hash: Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join(""),
+        sharedHoles: shared?.names ?? [],
+    };
+}
+//# sourceMappingURL=compile-shell.js.map

package/dist/internal/ppr/compile-shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile-shell.js","sourceRoot":"","sources":["../../../src/internal/ppr/compile-shell.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGnD,OAAO,EAAwB,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAe3D,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAG7B;IACA;IAHO,IAAI,GAAG,iBAAiB,CAAA;IAC1C,YACW,OAAe,EACf,KAAwB;QAEjC,KAAK,CACH,wCAAwC,OAAO,oCAAoC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,oGAAoG,CACnO,CAAA;QALQ,YAAO,GAAP,OAAO,CAAQ;QACf,UAAK,GAAL,KAAK,CAAmB;IAKnC,CAAC;CACF;AAeD,MAAM,SAAS,GAAG,iBAAiB,CAAA;AAEnC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AAEpE,MAAM,YAAY,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAA;AAE1F;;;;GAIG;AACH,MAAM,oBAAoB,GAAsB,CAAC,qCAAqC,CAAC,CAAA;AACvF,MAAM,2BAA2B,GAAG,IAAI,MAAM,CAC5C,OAAO,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAC5D,CAAA;AAED,2FAA2F;AAC3F,MAAM,YAAY,GAAG,sBAAsB,CAAA;AAE3C,iGAAiG;AACjG,SAAS,kBAAkB,CACzB,IAAY,EACZ,IAA4C,EAC5C,MAA2B;IAE3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAA6B,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAA;IACpB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAA;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAK;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,KAAK,IAAI,EAAE,GAAuB,MAAM,EAAE,EAAE,KAAK,SAAS,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAChB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAA;QACxB,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;gBACzB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,MAAM,WAAW,GAAsC,EAAE,CAAA;IACzD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IACjC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,SAAQ;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,YAAY,CAChC,GAAG,EACH,OAAO,CAAC,QAAQ,EAChB,KAAK,EACL,KAAK,CAAC,OAAO,EACb,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,OAAO,IAAI,EAAE,EACrB,MAAM,CACP,CAAA;YACD,IAAI,OAAO,KAAK,SAAS;gBAAE,SAAQ;YACnC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAA;YAC/B,IAAI,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;gBAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,WAAW,CAAA;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,KAAK,CAAA;YAChD,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;QACpC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC;QAC1C,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE;QAClD,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,CAAA;AACnE,CAAC;AAED,iGAAiG;AACjG,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,MAA6B,CAAA;IACjC,IAAI,KAAK,GAAG,KAAK,CAAA;IACjB,OAAO,GAAG,EAAE;QACV,IAAI,KAAK;YAAE,OAAO,MAAM,CAAA;QACxB,KAAK,GAAG,IAAI,CAAA;QACZ,IAAI,EAAW,CAAA;QACf,IAAI,CAAC;YACH,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;QAC7D,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,SAAS,CAAA;QAChB,CAAC;QACD,IAAI,oBAAoB,CAAC,EAAE,CAAC;YAAE,MAAM,GAAG,EAAE,CAAA;aACpC,CAAC;YACJ,OAAO,CAAC,IAAI,CACV,0QAA0Q,CAC3Q,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC,CAAA;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,SAAS,CAAC,EAAa,EAAE,IAAmB;IACnD,IAAI,EAAE,GAAG,IAAI,CAAA;IACb,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9F,EAAE,GAAG,EAAE,CAAC,UAAU,CAAA;IACpB,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,EAAa,EACb,MAAoB;IAEpB,MAAM,IAAI,GAAG,EAAE,CAAC,gBAAgB,CAC9B,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,MAAM,EACb,EAAE,CAAC,YAAY,CAAC,MAAM,EACtB,IAAI,EACJ,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAC/D,CAAA;IACD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,SAAS,CAAC;YAAE,SAAQ;QAChD,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;YACjE,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,iBAAiB;gBACnF,SAAQ;YACV,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,IAAI,SAAS,CAAC,EAAE,EAAE,WAAW,CAAC,WAAW,CAAC,CAAA;YACrF,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,WAAW,CAAC;gBAAE,OAAO,SAAS,CAAA;YAC7F,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,MAAM,IAAI,GAAa,EAAE,CAAA;YACzB,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;gBAC9C,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC;oBAAE,SAAQ;gBAChD,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAA;gBACzB,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;oBAAE,SAAQ;gBACjE,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAA;gBACjD,IAAI,CAAC,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC;oBAAE,SAAQ;gBAClD,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAClC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,SAAS;oBACxB,CAAC,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC/D,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CACnC,CAAA;gBACD,IAAI,CAAC,MAAM;oBAAE,SAAQ;gBACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;YAC5E,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAA;YACxC,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,CAAA;YACxI,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAUD,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IAC7D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;IAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAA;AAC/F,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAW,EACX,QAAkB,EAClB,KAAiB,EACjB,OAAe,EACf,aAA4C,EAC5C,OAA2C,EAC3C,MAAmC;IAEnC,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;IACpD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAA;IACpE,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACnF,MAAM,MAAM,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,aAAa,CAAC,CAAA;IAC9E,MAAM,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;IACxF,mGAAmG;IACnG,+EAA+E;IAC/E,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,OAAO,CAAA;QACnD,IAAI,aAAa,KAAK,SAAS;YAAE,SAAQ;QACzC,MAAM,KAAK,GAAG,CAAC,MAAM,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAA;QAC5D,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,CAAC,EAAE,wCAAwC,EAAE,uMAAuM,CACrR,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IAChF,iGAAiG;IACjG,wFAAwF;IACxF,MAAM,KAAK,GAAG;QACZ,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE;QACnD,yBAAyB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;KAC1C,CAAA;IACD,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE;QACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5F,CAAC,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAA;IACrC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IACtC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC;QAC7B,4EAA4E;QAC5E,WAAW,EAAE,CAAC,GAAG,SAAS,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7D,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE;YACP,6FAA6F;YAC7F;gBACE,IAAI,EAAE,SAAS;gBACf,KAAK,CAAC,KAAK;oBACT,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;wBACnE,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,SAAS,EAAE,SAAS;qBACrB,CAAC,CAAC,CAAA;oBACH,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;wBAC1D,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;qBAC3B,CAAC,CAAC,CAAA;oBACH,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;wBAChE,IAAI,IAAY,CAAA;wBAChB,IAAI,CAAC;4BACH,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;wBAC7D,CAAC;wBAAC,MAAM,CAAC;4BACP,+CAA+C;4BAC/C,OAAO,SAAS,CAAA;wBAClB,CAAC;wBACD,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;wBACrB,OAAO,EAAE,IAAI,EAAE,CAAA;oBACjB,CAAC,CAAC,CAAA;oBACF,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;wBACjD,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;wBACjD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;oBAC5C,CAAC,CAAC,CAAA;oBACF,4FAA4F;oBAC5F,sFAAsF;oBACtF,qFAAqF;oBACrF,yFAAyF;oBACzF,wFAAwF;oBACxF,KAAK,CAAC,MAAM,CACV,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,EACxE,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,IAAI;wBACvC,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC;4BACE,MAAM,EAAE,IAAI;4BACZ,QAAQ,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC;gCAC3B,MAAM,EAAE,aAAa,CAAC,MAAM;gCAC5B,iBAAiB,EAAE,IAAI;gCACvB,OAAO,EAAE;oCACP,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;iCACxE;6BACF,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC;yBACzD,CACR,CAAA;gBACH,CAAC;aACF;YACD,GAAG,OAAO;SACX;KACF,CAAC,CAAA;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,cAAc,CACtB,MAAM,CAAC,IAAI,EACX,kCAAkC,KAAK,CAAC,EAAE,mBAAmB,CAC9D,CAAA;IACH,CAAC;IACD,wLAAwL;IACxL,qMAAqM;IACrM,MAAM,IAAI,GAAI,MAA6D,CAAC,QAAQ,CAAA;IACpF,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/D,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAC/C,CAAA;IACD,IAAI,KAAK,KAAK,SAAS;QACrB,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;IAC9E,yFAAyF;IACzF,mCAAmC;IACnC,MAAM,OAAO,GAAG,CAAC,EAAU,EAAW,EAAE;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;QAChC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,eAAe,IAAI,KAAK;YACxB,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;YACvC,KAAK,CAAC,aAAa,GAAG,CAAC,CACxB,CAAA;IACH,CAAC,CAAA;IACD,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAU,EAAE,CACtC,EAAE,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,IAAI,IAAwB,CAAA;IAC5B,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAA;QACzB,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,CAAA;QAC/C,IAAI,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;YACzF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAClB,IAAI,CAAC,GAAG,CACN,IAAI,EACJ,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACzF,CAAA;IACH,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;IAC7F,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,CAAA;IACjF,IAAI,MAAM,KAAK,SAAS;QACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,CAAC,EAAE,GAAG,CAAC,CAAA;IAC9E,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CACrF,CAAA;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,WAAW,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE;KACjC,CAAA;AACH,CAAC"}