@nifrajs/web 5.5.1 → 5.6.0

package/dist/internal/ppr/options.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Partial prerendering limits and defaults. Internal while the feature is experimental: every
+ * number the plan names lives here once, so a deployment overrides it in one object and the request
+ * path reads the resolved copy rather than a scattered constant.
+ */
+/** Overrides for {@link PPR_DEFAULTS}. Every field is optional; an omitted one keeps its default. */
+export interface PprOptions {
+    /** A hole's deadline when its boundary sets no `timeout`. */
+    readonly holeTimeoutMs?: number;
+    /** The largest `timeout` a boundary may set, and the cap on a route's total deadline. */
+    readonly maxHoleTimeoutMs?: number;
+    /** Added to the largest hole timeout to give the route's total deadline. */
+    readonly totalDeadlineSlackMs?: number;
+    /** Dynamic plus shared boundaries one PPR route may declare. */
+    readonly maxHolesPerRoute?: number;
+    /** Shell entries one route may keep in the memory store. */
+    readonly shellEntriesPerRoute?: number;
+    /**
+     * Bytes every shell entry in the memory store may hold together: its document, an estimate of the
+     * heap its loader data holds, and its key. An entry over the whole budget is served but not kept.
+     */
+    readonly shellStoreBytes?: number;
+    /** How long a `notFound()` shell is cached. */
+    readonly notFoundTtlSeconds?: number;
+    /** Shell builds one route may run at once; requests over it get the blocking render. */
+    readonly shellBuildConcurrency?: number;
+    /**
+     * Once the store is full, requests one shell key must see before its shell is built and may push
+     * an older one out. The ones before stream the page whole, each hole as it settles, so a path
+     * visited once cannot evict a popular one. While the store has room, every key builds at once.
+     */
+    readonly shellAfterRequests?: number;
+    /** A failing rebuild keeps serving the stale shell for `revalidate` times this... */
+    readonly staleOnErrorFactor?: number;
+    /** ...but never longer than this. */
+    readonly maxStaleOnErrorSeconds?: number;
+    /** Requests that get the blocking render instead of a stream: a user-agent pattern or a predicate. */
+    readonly blockingFor?: RegExp | ((request: Request) => boolean);
+    /** Abandoned invocations at which one boundary stops being admitted. */
+    readonly boundaryAbandonedTrip?: number;
+    /** Abandoned invocations per process at which boundaries holding any stop being admitted. */
+    readonly processAbandonedTrip?: number;
+    /** Abandoned invocations per process at which no hole is admitted. */
+    readonly admissionStop?: number;
+    /** How long after its abort a still-pending invocation counts as abandoned. */
+    readonly abandonGraceMs?: number;
+    /** PPR responses per process with hole loaders still running. */
+    readonly maxHoleWork?: number;
+    /** How long after the total deadline an undrained stream is kept before it is aborted. */
+    readonly writeGraceMs?: number;
+    /** Unsent bytes one response may queue. */
+    readonly maxUnsentBytesPerResponse?: number;
+    /** Unsent bytes every PPR response in the process may queue together. */
+    readonly maxUnsentBytes?: number;
+    /** Serialized size of one hole frame. */
+    readonly frameBytes?: number;
+    /** The shell is padded to at least this many bytes; Safari holds back smaller first chunks. */
+    readonly minShellBytes?: number;
+    /**
+     * When hole HTML is checked for script, handlers and other escapes before it is framed:
+     * `"always"`, or `"development"` only. The check costs about 20 us per KB of hole HTML; turn it off
+     * in production only when a strict CSP already blocks inline script.
+     */
+    readonly holeHtmlValidation?: "always" | "development";
+    /**
+     * Whether a page left with holes pending posts a cancel beacon, so their loaders stop before their
+     * deadline. Off by default on Cloudflare Workers, where the beacon reaches another isolate.
+     */
+    readonly cancelBeacon?: boolean;
+    /**
+     * How long a process serves a shell or shared hole it wrote to or read from the shared store before
+     * reading it there again, so a purge another process made reaches this one. 0 reads it every time.
+     */
+    readonly sharedRecheckMs?: number;
+}
+export type ResolvedPprOptions = {
+    readonly [K in keyof PprOptions]-?: Exclude<PprOptions[K], undefined>;
+};
+/**
+ * Crawlers that read the document without running streamed scripts, so they get the blocking render.
+ * The same set Next.js treats as HTML-limited bots. Googlebot itself is absent on purpose: it renders
+ * JavaScript. `[\w-]-Google` matches what `[\w-]+-Google` does without backtracking at every position.
+ */
+export declare const HTML_LIMITED_BOTS: RegExp;
+export declare const PPR_DEFAULTS: ResolvedPprOptions;
+/** The latest request a shell may wait for; the canary check requests a path this many times. */
+export declare const MAX_SHELL_AFTER_REQUESTS = 8;
+/**
+ * Merge `overrides` over {@link PPR_DEFAULTS} and check the result. Unknown keys, non-integers and
+ * limits that contradict each other throw at startup, never on a request.
+ */
+export declare function resolvePprOptions(overrides?: PprOptions): ResolvedPprOptions;
+/** A route's total deadline: its largest hole timeout plus the slack, capped. */
+export declare function totalDeadlineMs(options: ResolvedPprOptions, holeTimeouts: readonly number[]): number;
+export { wantsBlockingRender } from "./contract.js";
+//# sourceMappingURL=options.d.ts.map

package/dist/internal/ppr/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../src/internal/ppr/options.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,qGAAqG;AACrG,MAAM,WAAW,UAAU;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,yFAAyF;IACzF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,4DAA4D;IAC5D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,+CAA+C;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,wFAAwF;IACxF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IACvC;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,qFAAqF;IACrF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;IACpC,qCAAqC;IACrC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;IACxC,sGAAsG;IACtG,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAA;IAC/D,wEAAwE;IACxE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;IACvC,6FAA6F;IAC7F,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;IACtC,sEAAsE;IACtE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,iEAAiE;IACjE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,0FAA0F;IAC1F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,2CAA2C;IAC3C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAC3C,yEAAyE;IACzE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,yCAAyC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,+FAA+F;IAC/F,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,GAAG,aAAa,CAAA;IACtD;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;IAC/B;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,EAAE,CAAC,IAAI,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;CACtE,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,MACqR,CAAA;AAIrT,eAAO,MAAM,YAAY,EAAE,kBA0BzB,CAAA;AA2BF,iGAAiG;AACjG,eAAO,MAAM,wBAAwB,IAAI,CAAA;AAEzC;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,GAAE,UAAe,GAAG,kBAAkB,CAyDhF;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAC3B,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,MAAM,CAIR;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA"}

package/dist/internal/ppr/options.js

@@ -0,0 +1,125 @@
+/**
+ * Partial prerendering limits and defaults. Internal while the feature is experimental: every
+ * number the plan names lives here once, so a deployment overrides it in one object and the request
+ * path reads the resolved copy rather than a scattered constant.
+ */
+/**
+ * Crawlers that read the document without running streamed scripts, so they get the blocking render.
+ * The same set Next.js treats as HTML-limited bots. Googlebot itself is absent on purpose: it renders
+ * JavaScript. `[\w-]-Google` matches what `[\w-]+-Google` does without backtracking at every position.
+ */
+export const HTML_LIMITED_BOTS = /[\w-]-Google|Google-[\w-]|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight/i;
+const MB = 1024 * 1024;
+export const PPR_DEFAULTS = Object.freeze({
+    holeTimeoutMs: 5_000,
+    maxHoleTimeoutMs: 30_000,
+    totalDeadlineSlackMs: 1_000,
+    maxHolesPerRoute: 32,
+    shellEntriesPerRoute: 10_000,
+    shellStoreBytes: 64 * MB,
+    notFoundTtlSeconds: 60,
+    shellBuildConcurrency: 4,
+    shellAfterRequests: 2,
+    staleOnErrorFactor: 10,
+    maxStaleOnErrorSeconds: 86_400,
+    blockingFor: HTML_LIMITED_BOTS,
+    boundaryAbandonedTrip: 64,
+    processAbandonedTrip: 1_024,
+    admissionStop: 4_096,
+    abandonGraceMs: 100,
+    maxHoleWork: 1_024,
+    writeGraceMs: 5_000,
+    maxUnsentBytesPerResponse: MB,
+    maxUnsentBytes: 64 * MB,
+    frameBytes: 256 * 1024,
+    minShellBytes: 1_024,
+    holeHtmlValidation: "always",
+    cancelBeacon: true,
+    sharedRecheckMs: 1_000,
+});
+/**
+ * On Cloudflare Workers an isolate's memory is shared by everything it runs, and a beacon almost
+ * always reaches another isolate than the one running the holes.
+ */
+const WORKERS_DEFAULTS = Object.freeze({
+    shellStoreBytes: 8 * MB,
+    cancelBeacon: false,
+});
+const onWorkers = () => globalThis.navigator?.userAgent === "Cloudflare-Workers";
+const optionError = (message) => new TypeError(`[nifra/web] ppr: ${message}`);
+function assertOrdered(options, smaller, larger) {
+    if (options[smaller] > options[larger]) {
+        throw optionError(`${smaller} (${options[smaller]}) must not exceed ${larger} (${options[larger]})`);
+    }
+}
+/** The latest request a shell may wait for; the canary check requests a path this many times. */
+export const MAX_SHELL_AFTER_REQUESTS = 8;
+/**
+ * Merge `overrides` over {@link PPR_DEFAULTS} and check the result. Unknown keys, non-integers and
+ * limits that contradict each other throw at startup, never on a request.
+ */
+export function resolvePprOptions(overrides = {}) {
+    for (const key of Object.keys(overrides)) {
+        if (!Object.hasOwn(PPR_DEFAULTS, key))
+            throw optionError(`unknown option "${key}"`);
+    }
+    const defined = Object.fromEntries(Object.entries(overrides).filter(([, value]) => value !== undefined));
+    const resolved = {
+        ...PPR_DEFAULTS,
+        ...(onWorkers() ? WORKERS_DEFAULTS : undefined),
+        ...defined,
+    };
+    for (const [key, value] of Object.entries(resolved)) {
+        if (key === "blockingFor" || key === "holeHtmlValidation" || key === "cancelBeacon")
+            continue;
+        if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
+            throw optionError(`${key} must be a non-negative integer, got ${String(value)}`);
+        }
+    }
+    for (const key of [
+        "holeTimeoutMs",
+        "maxHolesPerRoute",
+        "shellBuildConcurrency",
+        "shellAfterRequests",
+        "boundaryAbandonedTrip",
+        "maxHoleWork",
+        "maxUnsentBytesPerResponse",
+        "frameBytes",
+    ]) {
+        if (resolved[key] === 0)
+            throw optionError(`${key} must be at least 1`);
+    }
+    if (resolved.shellAfterRequests > MAX_SHELL_AFTER_REQUESTS) {
+        throw optionError(`shellAfterRequests must be at most ${MAX_SHELL_AFTER_REQUESTS}, got ${resolved.shellAfterRequests}`);
+    }
+    const blockingFor = resolved.blockingFor;
+    if (!(blockingFor instanceof RegExp) && typeof blockingFor !== "function") {
+        throw optionError("blockingFor must be a RegExp or a function of the request");
+    }
+    if (resolved.holeHtmlValidation !== "always" && resolved.holeHtmlValidation !== "development") {
+        throw optionError(`holeHtmlValidation must be "always" or "development", got ${String(resolved.holeHtmlValidation)}`);
+    }
+    if (typeof resolved.cancelBeacon !== "boolean") {
+        throw optionError(`cancelBeacon must be a boolean, got ${String(resolved.cancelBeacon)}`);
+    }
+    // A global or sticky pattern keeps `lastIndex` between `test` calls, so one bot would alternate.
+    if (blockingFor instanceof RegExp && (blockingFor.global || blockingFor.sticky)) {
+        throw optionError("blockingFor must not use the g or y flag");
+    }
+    assertOrdered(resolved, "holeTimeoutMs", "maxHoleTimeoutMs");
+    assertOrdered(resolved, "boundaryAbandonedTrip", "processAbandonedTrip");
+    assertOrdered(resolved, "processAbandonedTrip", "admissionStop");
+    assertOrdered(resolved, "frameBytes", "maxUnsentBytesPerResponse");
+    assertOrdered(resolved, "maxUnsentBytesPerResponse", "maxUnsentBytes");
+    return Object.freeze(resolved);
+}
+/** A route's total deadline: its largest hole timeout plus the slack, capped. */
+export function totalDeadlineMs(options, holeTimeouts) {
+    let largest = 0;
+    for (const timeout of holeTimeouts)
+        if (timeout > largest)
+            largest = timeout;
+    return Math.min(largest + options.totalDeadlineSlackMs, options.maxHoleTimeoutMs);
+}
+export { wantsBlockingRender } from "./contract.js";
+//# sourceMappingURL=options.js.map

package/dist/internal/ppr/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../../src/internal/ppr/options.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA6EH;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAC5B,mTAAmT,CAAA;AAErT,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAEtB,MAAM,CAAC,MAAM,YAAY,GAAuB,MAAM,CAAC,MAAM,CAAC;IAC5D,aAAa,EAAE,KAAK;IACpB,gBAAgB,EAAE,MAAM;IACxB,oBAAoB,EAAE,KAAK;IAC3B,gBAAgB,EAAE,EAAE;IACpB,oBAAoB,EAAE,MAAM;IAC5B,eAAe,EAAE,EAAE,GAAG,EAAE;IACxB,kBAAkB,EAAE,EAAE;IACtB,qBAAqB,EAAE,CAAC;IACxB,kBAAkB,EAAE,CAAC;IACrB,kBAAkB,EAAE,EAAE;IACtB,sBAAsB,EAAE,MAAM;IAC9B,WAAW,EAAE,iBAAiB;IAC9B,qBAAqB,EAAE,EAAE;IACzB,oBAAoB,EAAE,KAAK;IAC3B,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,GAAG;IACnB,WAAW,EAAE,KAAK;IAClB,YAAY,EAAE,KAAK;IACnB,yBAAyB,EAAE,EAAE;IAC7B,cAAc,EAAE,EAAE,GAAG,EAAE;IACvB,UAAU,EAAE,GAAG,GAAG,IAAI;IACtB,aAAa,EAAE,KAAK;IACpB,kBAAkB,EAAE,QAAQ;IAC5B,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,KAAK;CACvB,CAAC,CAAA;AAEF;;;GAGG;AACH,MAAM,gBAAgB,GAAgC,MAAM,CAAC,MAAM,CAAC;IAClE,eAAe,EAAE,CAAC,GAAG,EAAE;IACvB,YAAY,EAAE,KAAK;CACpB,CAAC,CAAA;AAEF,MAAM,SAAS,GAAG,GAAY,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,KAAK,oBAAoB,CAAA;AAMzF,MAAM,WAAW,GAAG,CAAC,OAAe,EAAa,EAAE,CAAC,IAAI,SAAS,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAA;AAEhG,SAAS,aAAa,CAAC,OAA2B,EAAE,OAAmB,EAAE,MAAkB;IACzF,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,MAAM,WAAW,CACf,GAAG,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,qBAAqB,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,CAClF,CAAA;IACH,CAAC;AACH,CAAC;AAED,iGAAiG;AACjG,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAA;AAEzC;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAwB,EAAE;IAC1D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC;YAAE,MAAM,WAAW,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAA;IACrF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAChC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CACrE,CAAA;IACD,MAAM,QAAQ,GAAuB;QACnC,GAAG,YAAY;QACf,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/C,GAAG,OAAO;KACX,CAAA;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,oBAAoB,IAAI,GAAG,KAAK,cAAc;YAAE,SAAQ;QAC7F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,WAAW,CAAC,GAAG,GAAG,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI;QAChB,eAAe;QACf,kBAAkB;QAClB,uBAAuB;QACvB,oBAAoB;QACpB,uBAAuB;QACvB,aAAa;QACb,2BAA2B;QAC3B,YAAY;KACJ,EAAE,CAAC;QACX,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,WAAW,CAAC,GAAG,GAAG,qBAAqB,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAC3D,MAAM,WAAW,CACf,sCAAsC,wBAAwB,SAAS,QAAQ,CAAC,kBAAkB,EAAE,CACrG,CAAA;IACH,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAA;IACxC,IAAI,CAAC,CAAC,WAAW,YAAY,MAAM,CAAC,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;QAC1E,MAAM,WAAW,CAAC,2DAA2D,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,QAAQ,CAAC,kBAAkB,KAAK,QAAQ,IAAI,QAAQ,CAAC,kBAAkB,KAAK,aAAa,EAAE,CAAC;QAC9F,MAAM,WAAW,CACf,6DAA6D,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CACnG,CAAA;IACH,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,WAAW,CAAC,uCAAuC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IAC3F,CAAC;IACD,iGAAiG;IACjG,IAAI,WAAW,YAAY,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAChF,MAAM,WAAW,CAAC,0CAA0C,CAAC,CAAA;IAC/D,CAAC;IACD,aAAa,CAAC,QAAQ,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAA;IAC5D,aAAa,CAAC,QAAQ,EAAE,uBAAuB,EAAE,sBAAsB,CAAC,CAAA;IACxE,aAAa,CAAC,QAAQ,EAAE,sBAAsB,EAAE,eAAe,CAAC,CAAA;IAChE,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,2BAA2B,CAAC,CAAA;IAClE,aAAa,CAAC,QAAQ,EAAE,2BAA2B,EAAE,gBAAgB,CAAC,CAAA;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;AAChC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,eAAe,CAC7B,OAA2B,EAC3B,YAA+B;IAE/B,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,KAAK,MAAM,OAAO,IAAI,YAAY;QAAE,IAAI,OAAO,GAAG,OAAO;YAAE,OAAO,GAAG,OAAO,CAAA;IAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;AACnF,CAAC;AAED,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA"}

package/dist/internal/ppr/route-rules.d.ts

@@ -0,0 +1,12 @@
+import type { BoundaryRegistration } from "../../boundary.js";
+import type { RouteEntry, RouteModule } from "../../manifest.js";
+import type { LoadedLayoutModules } from "../render-document.js";
+import type { ResolvedPprOptions } from "./options.js";
+/**
+ * The declared variations `search` selects. A parameter given twice, or a value outside its set,
+ * selects nothing, so every spelling of one choice maps to one shell.
+ */
+export declare function variationsOf(declared: RouteModule["shellVariations"], search: string): Readonly<Record<string, string>>;
+/** The PPR eligibility rules a route's own files cannot check: its layouts and boundary modes. */
+export declare function assertPprRoute(route: RouteEntry, layouts: LoadedLayoutModules, boundaries: readonly BoundaryRegistration[], limits: ResolvedPprOptions): void;
+//# sourceMappingURL=route-rules.d.ts.map

package/dist/internal/ppr/route-rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-rules.d.ts","sourceRoot":"","sources":["../../../src/internal/ppr/route-rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAEhE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAEtD;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,WAAW,CAAC,iBAAiB,CAAC,EACxC,MAAM,EAAE,MAAM,GACb,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAWlC;AAED,kGAAkG;AAClG,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,mBAAmB,EAC5B,UAAU,EAAE,SAAS,oBAAoB,EAAE,EAC3C,MAAM,EAAE,kBAAkB,GACzB,IAAI,CA4CN"}

package/dist/internal/ppr/route-rules.js

@@ -0,0 +1,53 @@
+import { isHole, serverHoleComponent } from "./contract.js";
+/**
+ * The declared variations `search` selects. A parameter given twice, or a value outside its set,
+ * selects nothing, so every spelling of one choice maps to one shell.
+ */
+export function variationsOf(declared, search) {
+    const lists = declared?.search;
+    if (lists === undefined || search === "")
+        return {};
+    const query = new URLSearchParams(search);
+    const chosen = {};
+    for (const [name, allowed] of Object.entries(lists)) {
+        const values = query.getAll(name);
+        const value = values[0];
+        if (values.length === 1 && value !== undefined && allowed.includes(value))
+            chosen[name] = value;
+    }
+    return chosen;
+}
+/** The PPR eligibility rules a route's own files cannot check: its layouts and boundary modes. */
+export function assertPprRoute(route, layouts, boundaries, limits) {
+    // `compileShells` refuses the same chain at startup; this catches a record made from other files.
+    layouts.forEach((layout, index) => {
+        if (layout.loader !== undefined && layout.gate !== true) {
+            throw new Error(`[nifra/web] ppr: route "${route.id}" has a shellLoader, but its layout "${route.layoutIds[index]}" has a loader that is not a gate. A layout loader reads the request, so its output cannot be in a shared shell`);
+        }
+    });
+    let holes = 0;
+    for (const boundary of boundaries) {
+        if (typeof boundary.mode === "object") {
+            throw new Error(`[nifra/web] ppr: route "${route.id}" has a shellLoader and an intercepting boundary "${boundary.name}", which partial prerendering does not support yet`);
+        }
+        if (!isHole(boundary))
+            continue;
+        holes++;
+        if (typeof boundary.load !== "function") {
+            throw new Error(`[nifra/web] ppr: boundary "${boundary.name}" of route "${route.id}" has no boundaryLoaders entry; a hole is filled from its own loader`);
+        }
+        if (serverHoleComponent(boundary.render) !== undefined &&
+            (boundary.mode !== "dynamic" || boundary.interactive === true)) {
+            throw new Error(`[nifra/web] ppr: boundary "${boundary.name}" of route "${route.id}" shows a server component, so it must be a dynamic hole that is not interactive: the component runs for each visitor, and its client islands hydrate`);
+        }
+        const { timeout } = boundary;
+        const max = limits.maxHoleTimeoutMs;
+        if (timeout !== undefined && !(Number.isInteger(timeout) && timeout >= 1 && timeout <= max)) {
+            throw new RangeError(`[nifra/web] ppr: boundary "${boundary.name}" of route "${route.id}" has timeout ${String(timeout)}; it must be a whole number of milliseconds from 1 to ${max}`);
+        }
+    }
+    if (holes === 0 || holes > limits.maxHolesPerRoute) {
+        throw new RangeError(`[nifra/web] ppr: route "${route.id}" has a shellLoader and ${holes} dynamic or shared boundaries; it needs 1 to ${limits.maxHolesPerRoute}. A page with no per-visitor or fast-changing part needs no shell: prerender it or give it \`revalidate\``);
+    }
+}
+//# sourceMappingURL=route-rules.js.map

package/dist/internal/ppr/route-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-rules.js","sourceRoot":"","sources":["../../../src/internal/ppr/route-rules.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAG3D;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAwC,EACxC,MAAc;IAEd,MAAM,KAAK,GAAG,QAAQ,EAAE,MAAM,CAAA;IAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,EAAE,CAAA;IACnD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAA;IACzC,MAAM,MAAM,GAA2B,EAAE,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IACjG,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,cAAc,CAC5B,KAAiB,EACjB,OAA4B,EAC5B,UAA2C,EAC3C,MAA0B;IAE1B,kGAAkG;IAClG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAChC,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,CAAC,EAAE,wCAAwC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,iHAAiH,CACnN,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IACF,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,CAAC,EAAE,qDAAqD,QAAQ,CAAC,IAAI,oDAAoD,CAC1J,CAAA;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,SAAQ;QAC/B,KAAK,EAAE,CAAA;QACP,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,IAAI,eAAe,KAAK,CAAC,EAAE,sEAAsE,CACzI,CAAA;QACH,CAAC;QACD,IACE,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS;YAClD,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,EAC9D,CAAC;YACD,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,IAAI,eAAe,KAAK,CAAC,EAAE,uJAAuJ,CAC1N,CAAA;QACH,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAA;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAA;QACnC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,UAAU,CAClB,8BAA8B,QAAQ,CAAC,IAAI,eAAe,KAAK,CAAC,EAAE,iBAAiB,MAAM,CAAC,OAAO,CAAC,yDAAyD,GAAG,EAAE,CACjK,CAAA;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACnD,MAAM,IAAI,UAAU,CAClB,2BAA2B,KAAK,CAAC,EAAE,2BAA2B,KAAK,gDAAgD,MAAM,CAAC,gBAAgB,2GAA2G,CACtP,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/internal/ppr/runtime.d.ts

@@ -0,0 +1,29 @@
+/**
+ * The PPR client runtime: one inline script in the shell, constant per release, listed in the CSP by
+ * hash. It fills each hole host from that hole's inert JSON frame, keeps interactive holes' props for
+ * the adapter, with a server component's record and HTML for the islands inside it, and on leaving
+ * the route sends the response's cancel token. `put` is how an adapter refills a host from a data
+ * request's fill, through the same sink; it writes only into a host of the hole it names, so the
+ * global cannot carry a string into any other element under the policy.
+ *
+ * `__nifraPpr(name)` is the only entry point a frame calls, so every invoker is constant per hole name
+ * and hashable at build. Hole HTML goes in through `innerHTML`, where a `<script>` never runs, under a
+ * Trusted Types policy named `nifra-ppr` when the browser has the API. The server has validated that
+ * HTML before framing it; the policy only names the one sink.
+ */
+export declare const PPR_RUNTIME = "(()=>{var w=window,d=document,h={},s={},dead=0,p;var pol=function(){if(!p){try{p=w.trustedTypes?w.trustedTypes.createPolicy(\"nifra-ppr\",{createHTML:function(x){return x}}):null}catch(_){}p=p||{createHTML:function(x){return x}}}return p};var ap=function(t,n,v){t.innerHTML=pol().createHTML(typeof v.html===\"string\"?v.html:\"\");t.setAttribute(\"data-nifra-filled\",\"\");t.setAttribute(\"aria-busy\",\"false\");if(v.error)t.setAttribute(\"data-nifra-hole-error\",\"\");else t.removeAttribute(\"data-nifra-hole-error\");var o={props:v.props,error:!!v.error};if(v.component){o.component=v.component;o.html=v.html}h[n]=o;return o};var f=function(n){if(dead)return;var e=d.getElementById(\"nifra-ppr:\"+n);if(!e)return;var v;try{v=JSON.parse(e.textContent)}catch(_){return}e.remove();var t=d.querySelector('[data-nifra-hole=\"'+n+'\"]');if(!t||t.hasAttribute(\"data-nifra-filled\"))return;var o=ap(t,n,v);(s[n]||[]).slice().forEach(function(c){c(o)})};f.put=function(n,v,t){if(v&&typeof v===\"object\"&&t&&t.getAttribute&&t.getAttribute(\"data-nifra-hole\")===n)ap(t,n,v)};f.get=function(n){return h[n]};f.subscribe=function(n,c){(s[n]||(s[n]=[])).push(c);return function(){s[n]=(s[n]||[]).filter(function(x){return x!==c})}};f.leave=function(){if(dead)return;dead=1;s={};var r=d.getElementById(\"nifra-ppr-req\");if(!r)return;var q;try{q=JSON.parse(r.textContent)}catch(_){return}if(q.cancel&&q.holes.some(function(n){return!h[n]})&&navigator.sendBeacon)navigator.sendBeacon(q.cancel,q.token)};f.dead=function(){return!!dead};f.boot=function(){var c=d.currentScript,e=c&&c.previousElementSibling;if(e&&e.rel===\"modulepreload\"&&e.href)import(e.href)};w.__nifraPpr=f})()";
+/**
+ * What loads each module script of a shell, after a `<link rel="modulepreload">` naming it. WebKit
+ * evaluates a module script, `async` or not, only once the parser finishes, which on a streamed page
+ * is after the slowest hole, and a dynamic import of the same URL waits with it. A dynamic import
+ * from a classic script with no such element evaluates at once in every engine.
+ */
+export declare const PPR_BOOT = "__nifraPpr.boot()";
+/** The script a frame runs to fill hole `name`. Constant per name, so it is listed by hash. */
+export declare const holeInvoker: (name: string) => string;
+/**
+ * The `script-src` hash sources a PPR route needs: the runtime, the boot call and one invoker per hole. Computed once
+ * per route at startup, never per request.
+ */
+export declare function pprScriptHashes(holeNames: readonly string[]): Promise<readonly string[]>;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/internal/ppr/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/internal/ppr/runtime.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,WAAW,2oDAColD,CAAA;AAE5mD;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,sBAAsB,CAAA;AAE3C,+FAA+F;AAC/F,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,KAAG,MAA+C,CAAA;AAE1F;;;GAGG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAE9F"}

package/dist/internal/ppr/runtime.js

@@ -0,0 +1,32 @@
+import { hashSource } from "../../csp.js";
+/**
+ * The PPR client runtime: one inline script in the shell, constant per release, listed in the CSP by
+ * hash. It fills each hole host from that hole's inert JSON frame, keeps interactive holes' props for
+ * the adapter, with a server component's record and HTML for the islands inside it, and on leaving
+ * the route sends the response's cancel token. `put` is how an adapter refills a host from a data
+ * request's fill, through the same sink; it writes only into a host of the hole it names, so the
+ * global cannot carry a string into any other element under the policy.
+ *
+ * `__nifraPpr(name)` is the only entry point a frame calls, so every invoker is constant per hole name
+ * and hashable at build. Hole HTML goes in through `innerHTML`, where a `<script>` never runs, under a
+ * Trusted Types policy named `nifra-ppr` when the browser has the API. The server has validated that
+ * HTML before framing it; the policy only names the one sink.
+ */
+export const PPR_RUNTIME = '(()=>{var w=window,d=document,h={},s={},dead=0,p;var pol=function(){if(!p){try{p=w.trustedTypes?w.trustedTypes.createPolicy("nifra-ppr",{createHTML:function(x){return x}}):null}catch(_){}p=p||{createHTML:function(x){return x}}}return p};var ap=function(t,n,v){t.innerHTML=pol().createHTML(typeof v.html==="string"?v.html:"");t.setAttribute("data-nifra-filled","");t.setAttribute("aria-busy","false");if(v.error)t.setAttribute("data-nifra-hole-error","");else t.removeAttribute("data-nifra-hole-error");var o={props:v.props,error:!!v.error};if(v.component){o.component=v.component;o.html=v.html}h[n]=o;return o};var f=function(n){if(dead)return;var e=d.getElementById("nifra-ppr:"+n);if(!e)return;var v;try{v=JSON.parse(e.textContent)}catch(_){return}e.remove();var t=d.querySelector(\'[data-nifra-hole="\'+n+\'"]\');if(!t||t.hasAttribute("data-nifra-filled"))return;var o=ap(t,n,v);(s[n]||[]).slice().forEach(function(c){c(o)})};f.put=function(n,v,t){if(v&&typeof v==="object"&&t&&t.getAttribute&&t.getAttribute("data-nifra-hole")===n)ap(t,n,v)};f.get=function(n){return h[n]};f.subscribe=function(n,c){(s[n]||(s[n]=[])).push(c);return function(){s[n]=(s[n]||[]).filter(function(x){return x!==c})}};f.leave=function(){if(dead)return;dead=1;s={};var r=d.getElementById("nifra-ppr-req");if(!r)return;var q;try{q=JSON.parse(r.textContent)}catch(_){return}if(q.cancel&&q.holes.some(function(n){return!h[n]})&&navigator.sendBeacon)navigator.sendBeacon(q.cancel,q.token)};f.dead=function(){return!!dead};f.boot=function(){var c=d.currentScript,e=c&&c.previousElementSibling;if(e&&e.rel==="modulepreload"&&e.href)import(e.href)};w.__nifraPpr=f})()';
+/**
+ * What loads each module script of a shell, after a `<link rel="modulepreload">` naming it. WebKit
+ * evaluates a module script, `async` or not, only once the parser finishes, which on a streamed page
+ * is after the slowest hole, and a dynamic import of the same URL waits with it. A dynamic import
+ * from a classic script with no such element evaluates at once in every engine.
+ */
+export const PPR_BOOT = "__nifraPpr.boot()";
+/** The script a frame runs to fill hole `name`. Constant per name, so it is listed by hash. */
+export const holeInvoker = (name) => `__nifraPpr(${JSON.stringify(name)})`;
+/**
+ * The `script-src` hash sources a PPR route needs: the runtime, the boot call and one invoker per hole. Computed once
+ * per route at startup, never per request.
+ */
+export async function pprScriptHashes(holeNames) {
+    return Promise.all([PPR_RUNTIME, PPR_BOOT, ...holeNames.map(holeInvoker)].map(hashSource));
+}
+//# sourceMappingURL=runtime.js.map

package/dist/internal/ppr/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/internal/ppr/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,WAAW,GACtB,0mDAA0mD,CAAA;AAE5mD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,mBAAmB,CAAA;AAE3C,+FAA+F;AAC/F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAA;AAE1F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAA4B;IAChE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAA;AAC5F,CAAC"}

package/dist/internal/ppr/server.d.ts

@@ -0,0 +1,29 @@
+import { type CspPolicy } from "../../csp.js";
+import type { RenderAdapter } from "../../render-seam.js";
+import type { ShellCheckRecord } from "./compile-shell.js";
+import { type PprServer } from "./contract.js";
+import { type ResolvedPprOptions } from "./options.js";
+import type { SharedShellStore } from "./shell-store.js";
+export { type DynamicHole, type HoleRegistration, type HoleStatesMode, PPR_CANCEL_PATH, PPR_SERVER, type PprRequest, type PprServer, type PprServerStats, PprShellBusy, PprShellCold, PprShellUnavailable, PprShellUnchecked, type SharedHole, variationQuery, } from "./contract.js";
+export interface PprServerConfig {
+    readonly options: ResolvedPprOptions;
+    readonly adapter: RenderAdapter;
+    readonly csp?: CspPolicy;
+    /** Part of every shell key, so a shell built by one deployment is never served by another. */
+    readonly deployment: string;
+    /** The client entry `shellChecks` was recorded for; `deployment` when not given. */
+    readonly clientEntry?: string;
+    readonly cancelUrl: string;
+    /**
+     * The routes whose shell import check passed, for this deployment. A route not listed, or a record
+     * made for another deployment, gets no shared shell (fail closed). `"unchecked-development"` waives
+     * the check and is refused in production.
+     */
+    readonly shellChecks: ShellCheckRecord | "unchecked-development";
+    /** Milliseconds, for shell freshness. Tests pass their own clock. */
+    readonly now?: () => number;
+    /** Shells shared with other processes, behind this process's own; signed entries only. */
+    readonly shared?: SharedShellStore | undefined;
+}
+export declare function createPprServer(config: PprServerConfig): PprServer;
+//# sourceMappingURL=server.d.ts.map

package/dist/internal/ppr/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/internal/ppr/server.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,SAAS,EAA0C,MAAM,cAAc,CAAA;AAErF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAIzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAGL,KAAK,SAAS,EAOf,MAAM,eAAe,CAAA;AAStB,OAAO,EAAE,KAAK,kBAAkB,EAAmB,MAAM,cAAc,CAAA;AAEvE,OAAO,KAAK,EAAE,gBAAgB,EAAe,MAAM,kBAAkB,CAAA;AAErE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,eAAe,EACf,UAAU,EACV,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,YAAY,EACZ,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,UAAU,EACf,cAAc,GACf,MAAM,eAAe,CAAA;AA0DtB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAA;IACpC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,CAAA;IACxB,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,gBAAgB,GAAG,uBAAuB,CAAA;IAChE,qEAAqE;IACrE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;CAC/C;AAsWD,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,SAAS,CA2vClE"}