@pwa-platform/entry-resilience 0.1.0

package/dist/update.js

@@ -0,0 +1,52 @@
+// Write path behind spec/pwa-entry-resilience.md's revised page-side API, `updateEntryManifest(data)`: validates
+// the plain object the application hands in (src/manifest.ts), decides whether it beats what is already stored
+// (src/select.ts), and writes it if so. Not part of the package's public API on its own — src/client/index.ts
+// wires the exported `updateEntryManifest` to this function, supplying the real browser ports (IndexedDB,
+// `Date.now`) via src/browser/index.ts's `createEntryRuntimePorts`.
+import { diagnostic } from "./diagnostics.js";
+import { parseEntryManifest } from "./manifest.js";
+import { selectManifest } from "./select.js";
+/**
+ * Validates `data`, compares it against the stored record, and writes it when it wins. Never throws: every port
+ * failure (an unavailable clock, a failed read, a failed write) becomes `{ accepted: false, diagnostics }` rather
+ * than a rejection — there is no room for a diagnostic on the `accepted: true` branch, so any failure that cannot
+ * be represented there must reject instead of silently pretending to have succeeded.
+ */
+export async function runEntryManifestUpdate(data, config, ports) {
+    let now;
+    try {
+        now = ports.now();
+    }
+    catch {
+        return { accepted: false, diagnostics: [diagnostic("entry.runtime-unavailable", "")] };
+    }
+    if (!Number.isFinite(now)) {
+        return { accepted: false, diagnostics: [diagnostic("entry.runtime-unavailable", "")] };
+    }
+    const parsed = parseEntryManifest(data, {
+        appId: config.appId,
+        environment: config.environment,
+        maxValidityDays: config.maxValidityDays,
+        now,
+    });
+    if (!parsed.ok)
+        return { accepted: false, diagnostics: parsed.diagnostics };
+    let stored;
+    try {
+        stored = await ports.loadStored();
+    }
+    catch {
+        return { accepted: false, diagnostics: [diagnostic("entry.storage-unavailable", "")] };
+    }
+    const selection = selectManifest({ stored, incoming: parsed.manifest });
+    if (selection.kind === "rejected")
+        return { accepted: false, diagnostics: selection.diagnostics };
+    try {
+        await ports.saveStored(selection.manifest);
+    }
+    catch {
+        return { accepted: false, diagnostics: [diagnostic("entry.storage-write-failed", "")] };
+    }
+    return { accepted: true, sequence: selection.manifest.sequence };
+}
+//# sourceMappingURL=update.js.map

package/dist/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,+GAA+G;AAC/G,8GAA8G;AAC9G,0GAA0G;AAC1G,oEAAoE;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAoB7C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAa,EACb,MAAiC,EACjC,KAA+B;IAE/B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,EAAE;QACtC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,GAAG;KACJ,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IAE5E,IAAI,MAA4B,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC;IAElG,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;IAC1F,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;AACnE,CAAC"}

package/dist/vite/default-style.d.ts

@@ -0,0 +1,2 @@
+export declare const DEFAULT_RECOVERY_PAGE_STYLE = ".pwa-entry {\n  --pwa-entry-bg: #ffffff;\n  --pwa-entry-fg: #1f2328;\n  --pwa-entry-muted: #5b6470;\n  --pwa-entry-accent: #0b5cd5;\n  --pwa-entry-accent-fg: #ffffff;\n  --pwa-entry-radius: 0.5rem;\n  --pwa-entry-max-width: 34rem;\n  --pwa-entry-font: -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n  /* Covers the whole viewport, whatever the body's default margin: until 2026-09-24 the root was a centred\n     max-width column, so in dark mode only that column was dark and the rest of the page stayed white. The content\n     keeps its width through the inline padding instead of a max-width on the root. */\n  display: block;\n  position: fixed;\n  inset: 0;\n  overflow-y: auto;\n  box-sizing: border-box;\n  color-scheme: light;\n  padding: 3rem max(1.5rem, calc((100% - var(--pwa-entry-max-width)) / 2));\n  font-family: var(--pwa-entry-font);\n  line-height: 1.5;\n  color: var(--pwa-entry-fg);\n  background: var(--pwa-entry-bg);\n}\n@media (prefers-color-scheme: dark) {\n  .pwa-entry:not([data-theme=\"light\"]) {\n    --pwa-entry-bg: #0f1419;\n    --pwa-entry-fg: #e6e9ec;\n    --pwa-entry-muted: #9aa4b0;\n    --pwa-entry-accent: #4c93ff;\n    --pwa-entry-accent-fg: #0b1220;\n    color-scheme: dark;\n  }\n}\n.pwa-entry[data-theme=\"dark\"] {\n  --pwa-entry-bg: #0f1419;\n  --pwa-entry-fg: #e6e9ec;\n  --pwa-entry-muted: #9aa4b0;\n  --pwa-entry-accent: #4c93ff;\n  --pwa-entry-accent-fg: #0b1220;\n  color-scheme: dark;\n}\n.pwa-entry__headline {\n  margin: 0 0 0.75rem;\n  font-size: 1.375rem;\n  font-weight: 600;\n}\n.pwa-entry__message,\n.pwa-entry__expiry {\n  margin: 0 0 0.75rem;\n  color: var(--pwa-entry-muted);\n}\n.pwa-entry__list {\n  display: grid;\n  gap: 0.75rem;\n  margin: 1.5rem 0 0;\n  padding: 0;\n  list-style: none;\n}\n.pwa-entry__item {\n  margin: 0;\n  padding: 0;\n}\n.pwa-entry__button {\n  display: block;\n  box-sizing: border-box;\n  width: 100%;\n  min-height: 44px;\n  padding: 0.75rem 1rem;\n  border: none;\n  border-radius: var(--pwa-entry-radius);\n  background: var(--pwa-entry-accent);\n  color: var(--pwa-entry-accent-fg);\n  font: inherit;\n  font-weight: 600;\n  cursor: pointer;\n}\n.pwa-entry__button:active {\n  /* A brightness shift rather than a different background: swapping in a surface colour while the label keeps\n     --pwa-entry-accent-fg leaves white text on a near-white fill for the light theme. */\n  filter: brightness(0.92);\n}\n.pwa-entry__empty,\n.pwa-entry__loading {\n  color: var(--pwa-entry-muted);\n}\n@media print {\n  .pwa-entry {\n    position: static;\n    overflow: visible;\n  }\n}\n";
+//# sourceMappingURL=default-style.d.ts.map

package/dist/vite/default-style.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-style.d.ts","sourceRoot":"","sources":["../../src/vite/default-style.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,2BAA2B,yjFA4FvC,CAAC"}

package/dist/vite/default-style.js

@@ -0,0 +1,109 @@
+// The recovery page's default stylesheet — spec/pwa-entry-resilience.md's "修订：恢复页的默认样式与宿主定制". A
+// single constant, not inlined into src/vite/index.ts's HTML string, so it can be reviewed on its own and hashed
+// for CSP there (see that module's generateBundle). Fixed text only: nothing here comes from plugin configuration
+// — a host's own CSS is appended separately, verbatim, by the `css` option (src/vite/options.ts).
+//
+// Colour tokens are CSS custom properties so a host can re-skin the page by resetting them alone (spec's "宿主换肤
+// 的写法"): light values live directly on `.pwa-entry` (also carrying the page's only layout rules — system font
+// stack, a constrained max width, block-level buttons with a comfortable tap target; no icons, web fonts, images or
+// animations), dark values are redefined under `prefers-color-scheme: dark` unless `data-theme="light"` overrides
+// it, and `[data-theme="dark"]` overrides the system preference outright — the exact three-selector precedence
+// contract the spec pins, and the values in both tables, character for character. `data-theme` itself is set by
+// src/page/main.ts before the first render, from the stored preference `setPwaTheme` (src/client/index.ts) writes.
+//
+// Every class selector below must be exactly the set src/page/render.ts's renderPage produces — see this module's
+// own class-table comment and test/page/class-alignment.test.ts, which checks both directions mechanically.
+export const DEFAULT_RECOVERY_PAGE_STYLE = `.pwa-entry {
+  --pwa-entry-bg: #ffffff;
+  --pwa-entry-fg: #1f2328;
+  --pwa-entry-muted: #5b6470;
+  --pwa-entry-accent: #0b5cd5;
+  --pwa-entry-accent-fg: #ffffff;
+  --pwa-entry-radius: 0.5rem;
+  --pwa-entry-max-width: 34rem;
+  --pwa-entry-font: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+  /* Covers the whole viewport, whatever the body's default margin: until 2026-09-24 the root was a centred
+     max-width column, so in dark mode only that column was dark and the rest of the page stayed white. The content
+     keeps its width through the inline padding instead of a max-width on the root. */
+  display: block;
+  position: fixed;
+  inset: 0;
+  overflow-y: auto;
+  box-sizing: border-box;
+  color-scheme: light;
+  padding: 3rem max(1.5rem, calc((100% - var(--pwa-entry-max-width)) / 2));
+  font-family: var(--pwa-entry-font);
+  line-height: 1.5;
+  color: var(--pwa-entry-fg);
+  background: var(--pwa-entry-bg);
+}
+@media (prefers-color-scheme: dark) {
+  .pwa-entry:not([data-theme="light"]) {
+    --pwa-entry-bg: #0f1419;
+    --pwa-entry-fg: #e6e9ec;
+    --pwa-entry-muted: #9aa4b0;
+    --pwa-entry-accent: #4c93ff;
+    --pwa-entry-accent-fg: #0b1220;
+    color-scheme: dark;
+  }
+}
+.pwa-entry[data-theme="dark"] {
+  --pwa-entry-bg: #0f1419;
+  --pwa-entry-fg: #e6e9ec;
+  --pwa-entry-muted: #9aa4b0;
+  --pwa-entry-accent: #4c93ff;
+  --pwa-entry-accent-fg: #0b1220;
+  color-scheme: dark;
+}
+.pwa-entry__headline {
+  margin: 0 0 0.75rem;
+  font-size: 1.375rem;
+  font-weight: 600;
+}
+.pwa-entry__message,
+.pwa-entry__expiry {
+  margin: 0 0 0.75rem;
+  color: var(--pwa-entry-muted);
+}
+.pwa-entry__list {
+  display: grid;
+  gap: 0.75rem;
+  margin: 1.5rem 0 0;
+  padding: 0;
+  list-style: none;
+}
+.pwa-entry__item {
+  margin: 0;
+  padding: 0;
+}
+.pwa-entry__button {
+  display: block;
+  box-sizing: border-box;
+  width: 100%;
+  min-height: 44px;
+  padding: 0.75rem 1rem;
+  border: none;
+  border-radius: var(--pwa-entry-radius);
+  background: var(--pwa-entry-accent);
+  color: var(--pwa-entry-accent-fg);
+  font: inherit;
+  font-weight: 600;
+  cursor: pointer;
+}
+.pwa-entry__button:active {
+  /* A brightness shift rather than a different background: swapping in a surface colour while the label keeps
+     --pwa-entry-accent-fg leaves white text on a near-white fill for the light theme. */
+  filter: brightness(0.92);
+}
+.pwa-entry__empty,
+.pwa-entry__loading {
+  color: var(--pwa-entry-muted);
+}
+@media print {
+  .pwa-entry {
+    position: static;
+    overflow: visible;
+  }
+}
+`;
+//# sourceMappingURL=default-style.js.map

package/dist/vite/default-style.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-style.js","sourceRoot":"","sources":["../../src/vite/default-style.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,iHAAiH;AACjH,kHAAkH;AAClH,kGAAkG;AAClG,EAAE;AACF,+GAA+G;AAC/G,8GAA8G;AAC9G,oHAAoH;AACpH,kHAAkH;AAClH,+GAA+G;AAC/G,gHAAgH;AAChH,mHAAmH;AACnH,EAAE;AACF,kHAAkH;AAClH,4GAA4G;AAC5G,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4F1C,CAAC"}

package/dist/vite/entry-page.d.ts

@@ -0,0 +1,6 @@
+/**
+ * `moduleUrl` is the caller's own `import.meta.url`, passed in rather than read here so this stays a plain
+ * function a test can call with either extension without needing two real files on disk.
+ */
+export declare function resolveEntryPageId(moduleUrl: string): string;
+//# sourceMappingURL=entry-page.d.ts.map

package/dist/vite/entry-page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-page.d.ts","sourceRoot":"","sources":["../../src/vite/entry-page.ts"],"names":[],"mappings":"AAcA;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG5D"}

package/dist/vite/entry-page.js

@@ -0,0 +1,22 @@
+// Resolves the recovery page script's build entry (`src/page/main.ts`) to an absolute path the plugin can hand to
+// `this.emitFile({ type: "chunk", ... })`.
+//
+// This module's own `import.meta.url` tells the whole story: under Vitest the plugin runs straight from
+// `src/vite/index.ts`, so its sibling `../page/main.ts` exists on disk and TypeScript's own extension is `.ts`;
+// inside a real build the plugin runs from the compiled `dist/vite/index.js`, whose sibling is the compiled
+// `../page/main.js`, and `dist/page/main.ts` does not exist at all — `tsc` only ever emits `.js`/`.d.ts` there.
+// Both cases turn on the same fact: this module's own extension. `src/` may not import `node:fs` (see
+// ADR-0018, "src/ 环境中立"), so the sibling's existence cannot be checked directly, but it never needs to be —
+// this module's own URL already carries the same information a filesystem check would.
+const TS_EXTENSION = ".ts";
+const ENTRY_PAGE_TS = "../page/main.ts";
+const ENTRY_PAGE_JS = "../page/main.js";
+/**
+ * `moduleUrl` is the caller's own `import.meta.url`, passed in rather than read here so this stays a plain
+ * function a test can call with either extension without needing two real files on disk.
+ */
+export function resolveEntryPageId(moduleUrl) {
+    const sibling = moduleUrl.endsWith(TS_EXTENSION) ? ENTRY_PAGE_TS : ENTRY_PAGE_JS;
+    return decodeURIComponent(new URL(sibling, moduleUrl).pathname);
+}
+//# sourceMappingURL=entry-page.js.map

package/dist/vite/entry-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-page.js","sourceRoot":"","sources":["../../src/vite/entry-page.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,2CAA2C;AAC3C,EAAE;AACF,wGAAwG;AACxG,gHAAgH;AAChH,4GAA4G;AAC5G,gHAAgH;AAChH,sGAAsG;AACtG,4GAA4G;AAC5G,uFAAuF;AACvF,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAExC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;IACjF,OAAO,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC;AAClE,CAAC"}

package/dist/vite/index.d.ts

@@ -0,0 +1,24 @@
+import type { Plugin } from "vite";
+import type { EntryCheckerConfig } from "../browser/index.js";
+import type { PwaEntryPageLocale, PwaEntryPageMessages } from "../page/messages.js";
+import type { PwaEntryResilienceOptions } from "./options.js";
+export type { PwaEntryResilienceOptions } from "./options.js";
+export type { PwaEntryPageLocale, PwaEntryPageMessages } from "../page/messages.js";
+/** The virtual module's full shape: `EntryCheckerConfig` (what `createEntryRuntimePorts` needs) plus the resolved
+ *  `locale` and fully-merged `messages` the recovery page (`src/page/main.ts`) renders with. */
+export type EntryPageVirtualConfig = EntryCheckerConfig & {
+    readonly locale: PwaEntryPageLocale;
+    readonly messages: PwaEntryPageMessages;
+};
+/**
+ * Creates the entry-resilience Vite plugin.
+ *
+ * Options are validated here (see src/vite/options.ts: a bad `maxValidityDays` should fail while the developer is
+ * still looking at vite.config).
+ *
+ * `configResolved` finds `pwa()` by its published `PWA_PLUGIN_NAME` rather than by requiring the app to pass a
+ * reference to it: `pwa()` returns `Plugin<PwaPluginApi>`, but nothing in this plugin's own options threads that
+ * object through, and looking it up by name is exactly what `PWA_PLUGIN_NAME` publishes it for.
+ */
+export declare function pwaEntryResilience(options: PwaEntryResilienceOptions): Plugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/vite/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACnC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAI9D,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAIpF,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAE9D,YAAY,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAC9D,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEpF;gGACgG;AAChG,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG;IACxD,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;CACzC,CAAC;AA8DF;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,MAAM,CAuH7E"}

package/dist/vite/index.js

@@ -0,0 +1,190 @@
+// The Vite plugin that publishes the entry-recovery page's build-time half: the recovery page, its fingerprinted
+// script, and the virtual config module every page-side entry reads. Runs alongside `pwa()` (`@pwa-platform/vite`),
+// never in place of it — see spec/pwa-entry-resilience.md's "构建集成" and ADR-0018's "构建集成是与 pwa() 并列的独
+// 立 Vite 插件".
+//
+// ADR-0033 (2026-09-23) removed the build-time seed and its signature verification: the platform no longer holds a
+// trust root, so there is nothing left to verify in `buildStart` before emitting the recovery page's chunk.
+import { PWA_PLUGIN_NAME } from "@pwa-platform/vite";
+import { diagnostic } from "../diagnostics.js";
+import { mergeEntryPageMessages } from "../page/messages.js";
+import { DEFAULT_RECOVERY_PAGE_STYLE } from "./default-style.js";
+import { resolveEntryPageId } from "./entry-page.js";
+import { failWithDiagnostic, validatePwaEntryResilienceOptions } from "./options.js";
+const PLUGIN_NAME = "pwa-platform-entry-resilience";
+const ENTRY_CONFIG_MODULE_ID = "virtual:pwa-entry-config";
+const ENTRY_CONFIG_RESOLVED_ID = `\0${ENTRY_CONFIG_MODULE_ID}`;
+const RECOVERY_PAGE_ASSET_NAME = "pwa-entry.html";
+const RECOVERY_PAGE_CHUNK_NAME = "pwa-entry";
+function formatDiagnostics(diagnostics) {
+    return diagnostics.map(({ code, path }) => `${code} at ${path === "" ? "(root)" : path}`).join(", ");
+}
+/**
+ * `sha256-<base64>`, the exact form CSP's `style-src` expects, for one inline style block's text — see
+ * spec/pwa-entry-resilience.md's "CSP 支持". `crypto` and `btoa` are Web APIs Node exposes globally (no import),
+ * the same reason ADR-0018's "src/ 环境中立" let this package's now-removed signature verification use
+ * `crypto.subtle` directly; `btoa` only encodes these locally-computed, trusted digest bytes for a build log, never
+ * decodes untrusted input (contrast src/internal/base64url.ts, which avoids `atob` for exactly that reason).
+ */
+async function inlineStyleHash(text) {
+    const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(text));
+    let binary = "";
+    for (const byte of new Uint8Array(digest))
+        binary += String.fromCharCode(byte);
+    return `sha256-${btoa(binary)}`;
+}
+const HTML_ESCAPES = {
+    "&": "&amp;",
+    "<": "&lt;",
+    ">": "&gt;",
+    '"': "&quot;",
+    "'": "&#39;",
+};
+/** Escapes the five HTML-significant characters — used only for `<title>`, the one place plugin-configured text
+ *  (`documentTitle`) is written into the shell itself rather than through the page's own `textContent`-only
+ *  rendering (src/page/render.ts). Mirrors packages/vite/src/offline-page.ts's `escapeHtml`; not shared, per this
+ *  revision's "同一套选项形态与校验方式，但不共享代码". */
+function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, (char) => HTML_ESCAPES[char] ?? char);
+}
+/** Every chunk the recovery page script statically imports, transitively, including the entry chunk itself. */
+function collectStaticImportClosure(bundle, entryFileName) {
+    const visited = new Set();
+    const stack = [entryFileName];
+    for (;;) {
+        const fileName = stack.pop();
+        if (fileName === undefined)
+            break;
+        if (visited.has(fileName))
+            continue;
+        visited.add(fileName);
+        const chunk = bundle[fileName];
+        if (chunk !== undefined && chunk.type === "chunk")
+            stack.push(...chunk.imports);
+    }
+    return visited;
+}
+/**
+ * Creates the entry-resilience Vite plugin.
+ *
+ * Options are validated here (see src/vite/options.ts: a bad `maxValidityDays` should fail while the developer is
+ * still looking at vite.config).
+ *
+ * `configResolved` finds `pwa()` by its published `PWA_PLUGIN_NAME` rather than by requiring the app to pass a
+ * reference to it: `pwa()` returns `Plugin<PwaPluginApi>`, but nothing in this plugin's own options threads that
+ * object through, and looking it up by name is exactly what `PWA_PLUGIN_NAME` publishes it for.
+ */
+export function pwaEntryResilience(options) {
+    const validated = validatePwaEntryResilienceOptions(options);
+    const { identity, maxValidityDays, css, locale, messages } = validated;
+    const resolvedMessages = mergeEntryPageMessages(locale, messages);
+    let base = "";
+    let platformApi;
+    // Set once `buildStart` has emitted the recovery page's script chunk; `generateBundle` resolves its published
+    // file name from the reference id, and `writeBundle` reuses that resolved name rather than re-resolving it.
+    let entryPageChunkRefId;
+    let entryPageFileName;
+    return {
+        name: PLUGIN_NAME,
+        apply: "build",
+        configResolved(config) {
+            // `base` is read once, here, for the same reason `@pwa-platform/vite`'s own plugin reads it in this hook
+            // rather than later: a later plugin mutating the resolved config must not change what this plugin checks.
+            base = config.base;
+            if (base !== identity.mountPath)
+                failWithDiagnostic("entry.base-mismatch", "/base");
+            const platformPlugin = config.plugins.find((plugin) => plugin.name === PWA_PLUGIN_NAME);
+            if (platformPlugin === undefined)
+                failWithDiagnostic("entry.platform-plugin-missing", "");
+            platformApi = platformPlugin.api;
+        },
+        buildStart() {
+            entryPageChunkRefId = this.emitFile({
+                type: "chunk",
+                id: resolveEntryPageId(import.meta.url),
+                name: RECOVERY_PAGE_CHUNK_NAME,
+            });
+        },
+        resolveId(id) {
+            return id === ENTRY_CONFIG_MODULE_ID ? ENTRY_CONFIG_RESOLVED_ID : null;
+        },
+        load(id) {
+            if (id !== ENTRY_CONFIG_RESOLVED_ID)
+                return null;
+            // Built from the validated options alone: like `@pwa-platform/vite`'s own client-config virtual module, this
+            // runs while the module graph is assembled, long before `generateBundle` or `writeBundle` produce anything
+            // this config could otherwise have read.
+            const config = {
+                appId: identity.appId,
+                environment: identity.environment,
+                scope: identity.scope,
+                mountPath: identity.mountPath,
+                maxValidityDays,
+                recoveryPagePath: `${identity.mountPath}${RECOVERY_PAGE_ASSET_NAME}`,
+                locale,
+                messages: resolvedMessages,
+            };
+            return `export default Object.freeze(${JSON.stringify(config)});\n`;
+        },
+        async generateBundle() {
+            // `buildStart` failing calls `this.error`, which always throws, so the build never reaches this hook without
+            // a ref id — this guard only documents that invariant, it does not paper over a real failure.
+            if (entryPageChunkRefId === undefined)
+                return;
+            entryPageFileName = this.getFileName(entryPageChunkRefId);
+            // Default style first, host `css` (already validated in src/vite/options.ts) appended verbatim right after
+            // it — spec's "构建时作为第二段内联 <style>，紧随默认样式之后写入同一文档". Each block's CSP hash is logged
+            // through Vite's `this.info`, never written to a file (spec's "不生成额外文件").
+            //
+            // A CSP hash covers the element's whole text content, and the parser keeps the newline right after `<style>`
+            // (it drops it only for <pre>, <listing> and <textarea>). Each hash is therefore taken over exactly the string
+            // written between the tags. Until 2026-09-24 the hash left that newline out, so a site copying the logged
+            // values into a hash-only `style-src` had the stylesheet blocked (measured in Chrome 153); the page bytes are
+            // unchanged by the fix, only the logged values are.
+            const defaultStyleContent = `\n${DEFAULT_RECOVERY_PAGE_STYLE}`;
+            let styleBlocks = `<style>${defaultStyleContent}</style>`;
+            this.info(`pwa-entry.html style (default): ${await inlineStyleHash(defaultStyleContent)}`);
+            if (css !== undefined) {
+                const hostStyleContent = `\n${css}`;
+                styleBlocks += `\n<style>${hostStyleContent}</style>`;
+                this.info(`pwa-entry.html style (host css): ${await inlineStyleHash(hostStyleContent)}`);
+            }
+            // Fixed shell otherwise, aside from `lang` and `<title>`: everything else reaches the page solely through the
+            // virtual module `src/page/main.ts` imports, never written into this shell. The charset is declared in the
+            // document because the page can render non-ASCII text and the platform cannot rely on every deployment
+            // sending a charset in Content-Type.
+            const html = "<!doctype html>\n" +
+                `<html lang="${locale}">\n` +
+                "<head>\n" +
+                '<meta charset="utf-8">\n' +
+                '<meta name="viewport" content="width=device-width, initial-scale=1">\n' +
+                `<title>${escapeHtml(resolvedMessages.documentTitle)}</title>\n` +
+                `${styleBlocks}\n` +
+                "</head>\n" +
+                "<body>\n" +
+                '<main id="pwa-entry"></main>\n' +
+                `<script type="module" src="${base}${entryPageFileName}"></script>\n` +
+                "</body>\n" +
+                "</html>\n";
+            this.emitFile({ type: "asset", fileName: RECOVERY_PAGE_ASSET_NAME, source: html });
+        },
+        writeBundle(_outputOptions, bundle) {
+            if (entryPageFileName === undefined)
+                return;
+            // Read here, not in `generateBundle`: `@pwa-platform/vite`'s own plugin only exposes its compiled plan once
+            // its `generateBundle` has run, and hook order between sibling plugins within one phase is not guaranteed.
+            const plan = platformApi?.getPlan() ?? null;
+            if (plan === null)
+                throw new Error(formatDiagnostics([diagnostic("entry.platform-plan-unavailable", "")]));
+            const closure = collectStaticImportClosure(bundle, entryPageFileName);
+            const requiredUrls = [
+                `${base}${RECOVERY_PAGE_ASSET_NAME}`,
+                ...[...closure].map((fileName) => `${base}${fileName}`),
+            ];
+            const missing = requiredUrls.some((url) => !plan.precache.some((entry) => entry.url === url));
+            if (missing)
+                throw new Error(formatDiagnostics([diagnostic("entry.recovery-page-not-precached", "/precache")]));
+        },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/vite/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vite/index.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,oHAAoH;AACpH,qGAAqG;AACrG,cAAc;AACd,EAAE;AACF,mHAAmH;AACnH,4GAA4G;AAC5G,OAAO,EAAE,eAAe,EAAqB,MAAM,oBAAoB,CAAC;AAGxE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,iCAAiC,EAAE,MAAM,cAAc,CAAC;AAarF,MAAM,WAAW,GAAG,+BAA+B,CAAC;AACpD,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AAC1D,MAAM,wBAAwB,GAAG,KAAK,sBAAsB,EAAE,CAAC;AAC/D,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAClD,MAAM,wBAAwB,GAAG,WAAW,CAAC;AAO7C,SAAS,iBAAiB,CAAC,WAAuC;IAChE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvG,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrF,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/E,OAAO,UAAU,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,YAAY,GAAqC;IACrD,GAAG,EAAE,OAAO;IACZ,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,MAAM;IACX,GAAG,EAAE,QAAQ;IACb,GAAG,EAAE,OAAO;CACb,CAAC;AAEF;;;wCAGwC;AACxC,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;AACzE,CAAC;AAED,+GAA+G;AAC/G,SAAS,0BAA0B,CAAC,MAAwB,EAAE,aAAqB;IACjF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAa,CAAC,aAAa,CAAC,CAAC;IACxC,SAAS,CAAC;QACR,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM;QAClC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS;QACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAkC;IACnE,MAAM,SAAS,GAAG,iCAAiC,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,SAAS,CAAC;IACvE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAElE,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,WAAqC,CAAC;IAC1C,8GAA8G;IAC9G,4GAA4G;IAC5G,IAAI,mBAAuC,CAAC;IAC5C,IAAI,iBAAqC,CAAC;IAE1C,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,OAAO;QAEd,cAAc,CAAC,MAAM;YACnB,yGAAyG;YACzG,0GAA0G;YAC1G,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACnB,IAAI,IAAI,KAAK,QAAQ,CAAC,SAAS;gBAAE,kBAAkB,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;YAEpF,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC;YACxF,IAAI,cAAc,KAAK,SAAS;gBAAE,kBAAkB,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC;YAC1F,WAAW,GAAG,cAAc,CAAC,GAAmB,CAAC;QACnD,CAAC;QAED,UAAU;YACR,mBAAmB,GAAG,IAAI,CAAC,QAAQ,CAAC;gBAClC,IAAI,EAAE,OAAO;gBACb,EAAE,EAAE,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;gBACvC,IAAI,EAAE,wBAAwB;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,SAAS,CAAC,EAAE;YACV,OAAO,EAAE,KAAK,sBAAsB,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,EAAE;YACL,IAAI,EAAE,KAAK,wBAAwB;gBAAE,OAAO,IAAI,CAAC;YACjD,6GAA6G;YAC7G,2GAA2G;YAC3G,yCAAyC;YACzC,MAAM,MAAM,GAA2B;gBACrC,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,eAAe;gBACf,gBAAgB,EAAE,GAAG,QAAQ,CAAC,SAAS,GAAG,wBAAwB,EAAE;gBACpE,MAAM;gBACN,QAAQ,EAAE,gBAAgB;aAC3B,CAAC;YACF,OAAO,gCAAgC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;QACtE,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,6GAA6G;YAC7G,8FAA8F;YAC9F,IAAI,mBAAmB,KAAK,SAAS;gBAAE,OAAO;YAC9C,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;YAE1D,2GAA2G;YAC3G,mFAAmF;YACnF,0EAA0E;YAC1E,EAAE;YACF,6GAA6G;YAC7G,+GAA+G;YAC/G,0GAA0G;YAC1G,8GAA8G;YAC9G,oDAAoD;YACpD,MAAM,mBAAmB,GAAG,KAAK,2BAA2B,EAAE,CAAC;YAC/D,IAAI,WAAW,GAAG,UAAU,mBAAmB,UAAU,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,mCAAmC,MAAM,eAAe,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;YAC3F,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,gBAAgB,GAAG,KAAK,GAAG,EAAE,CAAC;gBACpC,WAAW,IAAI,YAAY,gBAAgB,UAAU,CAAC;gBACtD,IAAI,CAAC,IAAI,CAAC,oCAAoC,MAAM,eAAe,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YAC3F,CAAC;YAED,8GAA8G;YAC9G,2GAA2G;YAC3G,uGAAuG;YACvG,qCAAqC;YACrC,MAAM,IAAI,GACR,mBAAmB;gBACnB,eAAe,MAAM,MAAM;gBAC3B,UAAU;gBACV,0BAA0B;gBAC1B,wEAAwE;gBACxE,UAAU,UAAU,CAAC,gBAAgB,CAAC,aAAa,CAAC,YAAY;gBAChE,GAAG,WAAW,IAAI;gBAClB,WAAW;gBACX,UAAU;gBACV,gCAAgC;gBAChC,8BAA8B,IAAI,GAAG,iBAAiB,eAAe;gBACrE,WAAW;gBACX,WAAW,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,WAAW,CAAC,cAAc,EAAE,MAAM;YAChC,IAAI,iBAAiB,KAAK,SAAS;gBAAE,OAAO;YAE5C,4GAA4G;YAC5G,2GAA2G;YAC3G,MAAM,IAAI,GAAG,WAAW,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC;YAC5C,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3G,MAAM,OAAO,GAAG,0BAA0B,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;YACtE,MAAM,YAAY,GAAG;gBACnB,GAAG,IAAI,GAAG,wBAAwB,EAAE;gBACpC,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,QAAQ,EAAE,CAAC;aACxD,CAAC;YACF,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9F,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,UAAU,CAAC,mCAAmC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/vite/options.d.ts

@@ -0,0 +1,31 @@
+import type { PwaIdentity } from "@pwa-platform/contracts";
+import type { EntryDiagnosticCode, EntryDiagnosticPath } from "../diagnostics.js";
+import type { PwaEntryPageLocale, PwaEntryPageMessages } from "../page/messages.js";
+export type PwaEntryResilienceOptions = {
+    readonly identity: PwaIdentity;
+    /** Integer 1-90; defaults to 30. */
+    readonly maxValidityDays?: number;
+    /** Host CSS appended verbatim, as a second inline `<style>`, right after the platform's default stylesheet —
+     *  see spec/pwa-entry-resilience.md's "修订：恢复页的默认样式与宿主定制". The platform does not parse or clean
+     *  it: the host is responsible for it being valid CSS. The only rule enforced here is that it must not contain
+     *  the literal sequence `</style`, which would close the style block early. */
+    readonly css?: string;
+    /** Fixed at build time; no runtime switching. Defaults to `"zh-CN"` — see spec/pwa-entry-resilience.md's "修
+     *  订：恢复页的构建期语言与文案覆盖". */
+    readonly locale?: PwaEntryPageLocale;
+    /** Overrides some or all of the chosen locale's built-in copy (src/page/messages.ts). */
+    readonly messages?: Partial<PwaEntryPageMessages>;
+};
+export type PwaEntryResilienceValidatedOptions = {
+    readonly identity: PwaIdentity;
+    readonly maxValidityDays: number;
+    readonly css: string | undefined;
+    readonly locale: PwaEntryPageLocale;
+    readonly messages: Partial<PwaEntryPageMessages> | undefined;
+};
+/** Throws a `TypeError` naming a diagnostic code and path; never returns. `detail`, when given, is appended for a
+ *  code whose fix isn't obvious from the code and path alone. */
+export declare function failWithDiagnostic(code: EntryDiagnosticCode, path: EntryDiagnosticPath, detail?: string): never;
+/** Validates and normalizes the plugin's options, throwing for anything a build would reject later. */
+export declare function validatePwaEntryResilienceOptions(options: PwaEntryResilienceOptions): PwaEntryResilienceValidatedOptions;
+//# sourceMappingURL=options.d.ts.map

package/dist/vite/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/vite/options.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAElF,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEpF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,oCAAoC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;mFAG+E;IAC/E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;6BACyB;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC,yFAAyF;IACzF,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACnD,CAAC;AAEF,MAAM,MAAM,kCAAkC,GAAG;IAC/C,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC;CAC9D,CAAC;AAaF;iEACiE;AACjE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,CAG/G;AAsGD,uGAAuG;AACvG,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,yBAAyB,GACjC,kCAAkC,CAapC"}

package/dist/vite/options.js

@@ -0,0 +1,118 @@
+import { ENTRY_PAGE_MESSAGE_KEYS } from "../page/messages.js";
+const DEFAULT_MAX_VALIDITY_DAYS = 30;
+const MIN_MAX_VALIDITY_DAYS = 1;
+const MAX_MAX_VALIDITY_DAYS = 90;
+/** Options ADR-0033 (2026-09-23) removed along with the package's cryptographic trust root: `keys` and `seed`
+ *  backed the build-time signature verification, `approvedOrigins` was the Origin allow-list, `discoveryUrl`
+ *  pointed at the discovery-source fetch. Rejected explicitly, not just left out of the type, because a caller
+ *  without strict type-checking on `vite.config` (plain JS, a stale `.d.ts`, an `as any`) would otherwise have
+ *  them silently ignored. */
+const REMOVED_OPTION_NAMES = ["keys", "seed", "approvedOrigins", "discoveryUrl"];
+/** Throws a `TypeError` naming a diagnostic code and path; never returns. `detail`, when given, is appended for a
+ *  code whose fix isn't obvious from the code and path alone. */
+export function failWithDiagnostic(code, path, detail) {
+    const message = `The pwaEntryResilience plugin's options are not valid: ${code} at ${path === "" ? "(root)" : path}`;
+    throw new TypeError(detail === undefined ? message : `${message} (${detail})`);
+}
+/** Throws for any of `REMOVED_OPTION_NAMES` present on `options`, naming ADR-0033 in the message. */
+function checkForRemovedOptions(options) {
+    for (const name of REMOVED_OPTION_NAMES) {
+        if (name in options) {
+            failWithDiagnostic("entry.option-removed", `/${name}`, `"${name}" was removed by ADR-0033 — see docs/adr/0033-entry-manifest-supplied-by-the-application.md`);
+        }
+    }
+}
+function validateMaxValidityDays(value) {
+    if (value === undefined)
+        return DEFAULT_MAX_VALIDITY_DAYS;
+    if (typeof value !== "number" ||
+        !Number.isInteger(value) ||
+        value < MIN_MAX_VALIDITY_DAYS ||
+        value > MAX_MAX_VALIDITY_DAYS) {
+        failWithDiagnostic("entry.max-validity-days-invalid", "/maxValidityDays");
+    }
+    return value;
+}
+/** `undefined` when the option is absent; otherwise the string, rejected if it is not a string at all or contains
+ *  `</style` (spec's "插件只做一处安全校验"). */
+function validateCss(value) {
+    if (value === undefined)
+        return undefined;
+    // Case-insensitive: the HTML tokenizer lowercases end-tag names, so `</STYLE` closes the block just as well.
+    if (typeof value !== "string" || /<\/style/i.test(value)) {
+        failWithDiagnostic("entry.css-invalid", "/css");
+    }
+    // Line endings normalized before the text is written or hashed: the HTML parser turns CRLF and lone CR into LF,
+    // and CSP hashes the normalized text, so a CRLF file would otherwise log a hash no browser would match.
+    return value.replace(/\r\n?/g, "\n");
+}
+const LOCALES = ["zh-CN", "en"];
+const MAX_MESSAGE_LENGTH = 200;
+/** `undefined` when the option is absent; otherwise the locale, rejected if it is not one of `LOCALES`. */
+function validateLocale(value) {
+    if (value === undefined)
+        return "zh-CN";
+    if (typeof value !== "string" || !LOCALES.includes(value)) {
+        failWithDiagnostic("entry.locale-invalid", "/locale");
+    }
+    return value;
+}
+/** Number of non-overlapping occurrences of `token` in `text`. */
+function countOccurrences(text, token) {
+    let count = 0;
+    let index = 0;
+    for (;;) {
+        const found = text.indexOf(token, index);
+        if (found === -1)
+            break;
+        count += 1;
+        index = found + token.length;
+    }
+    return count;
+}
+/** Validates one already-known message key's value; throws `entry.message-invalid` at `/messages/<key>` for
+ *  anything a build would reject — never a string, empty, too long, or (for `expiry`/`go`) missing or duplicating
+ *  its required placeholder. Never echoes the value itself, per this package's "never echo input" rule. */
+function validateMessageValue(key, value) {
+    const path = `/messages/${key}`;
+    if (typeof value !== "string" || value.length === 0 || value.length > MAX_MESSAGE_LENGTH) {
+        failWithDiagnostic("entry.message-invalid", path);
+    }
+    if (key === "expiry" && countOccurrences(value, "{expiresAt}") !== 1) {
+        failWithDiagnostic("entry.message-invalid", path, "must contain {expiresAt} exactly once");
+    }
+    if (key === "go" && countOccurrences(value, "{host}") !== 1) {
+        failWithDiagnostic("entry.message-invalid", path, "must contain {host} exactly once");
+    }
+}
+/** `undefined` when the option is absent; otherwise the override object, rejected as a whole if it is not a plain
+ *  object, and key by key for an unknown key (any key outside `ENTRY_PAGE_MESSAGE_KEYS`) or an invalid value. */
+function validateMessages(value) {
+    if (value === undefined)
+        return undefined;
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        failWithDiagnostic("entry.message-invalid", "/messages");
+    }
+    const record = value;
+    for (const key of Object.keys(record)) {
+        // Reported at the object's own path: the unknown key name is the caller's input, and diagnostics never carry it.
+        if (!ENTRY_PAGE_MESSAGE_KEYS.includes(key)) {
+            failWithDiagnostic("entry.message-invalid", "/messages");
+        }
+        validateMessageValue(key, record[key]);
+    }
+    return value;
+}
+/** Validates and normalizes the plugin's options, throwing for anything a build would reject later. */
+export function validatePwaEntryResilienceOptions(options) {
+    if (options === null || typeof options !== "object") {
+        throw new TypeError("The pwaEntryResilience plugin requires an options object");
+    }
+    checkForRemovedOptions(options);
+    const maxValidityDays = validateMaxValidityDays(options.maxValidityDays);
+    const css = validateCss(options.css);
+    const locale = validateLocale(options.locale);
+    const messages = validateMessages(options.messages);
+    return { identity: options.identity, maxValidityDays, css, locale, messages };
+}
+//# sourceMappingURL=options.js.map

package/dist/vite/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/vite/options.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AA2B9D,MAAM,yBAAyB,GAAG,EAAE,CAAC;AACrC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,qBAAqB,GAAG,EAAE,CAAC;AAEjC;;;;6BAI6B;AAC7B,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,cAAc,CAAU,CAAC;AAE1F;iEACiE;AACjE,MAAM,UAAU,kBAAkB,CAAC,IAAyB,EAAE,IAAyB,EAAE,MAAe;IACtG,MAAM,OAAO,GAAG,0DAA0D,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrH,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC;AACjF,CAAC;AAED,qGAAqG;AACrG,SAAS,sBAAsB,CAAC,OAAgC;IAC9D,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACpB,kBAAkB,CAChB,sBAAsB,EACtB,IAAI,IAAI,EAAE,EACV,IAAI,IAAI,6FAA6F,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,yBAAyB,CAAC;IAC1D,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACxB,KAAK,GAAG,qBAAqB;QAC7B,KAAK,GAAG,qBAAqB,EAC7B,CAAC;QACD,kBAAkB,CAAC,iCAAiC,EAAE,kBAAkB,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;uCACuC;AACvC,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,6GAA6G;IAC7G,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,kBAAkB,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,gHAAgH;IAChH,wGAAwG;IACxG,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,CAAU,CAAC;AACzC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,2GAA2G;AAC3G,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,kBAAkB,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,KAA2B,CAAC;AACrC,CAAC;AAED,kEAAkE;AAClE,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM;QACxB,KAAK,IAAI,CAAC,CAAC;QACX,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;2GAE2G;AAC3G,SAAS,oBAAoB,CAAC,GAA+B,EAAE,KAAc;IAC3E,MAAM,IAAI,GAAwB,aAAa,GAAG,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACzF,kBAAkB,CAAC,uBAAuB,EAAE,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ,IAAI,gBAAgB,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,kBAAkB,CAAC,uBAAuB,EAAE,IAAI,EAAE,uCAAuC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,IAAI,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5D,kBAAkB,CAAC,uBAAuB,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED;iHACiH;AACjH,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,kBAAkB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,iHAAiH;QACjH,IAAI,CAAE,uBAA6C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,kBAAkB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;QAC3D,CAAC;QACD,oBAAoB,CAAC,GAAiC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,KAAsC,CAAC;AAChD,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,iCAAiC,CAC/C,OAAkC;IAElC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAC;IAClF,CAAC;IAED,sBAAsB,CAAC,OAA6C,CAAC,CAAC;IAEtE,MAAM,eAAe,GAAG,uBAAuB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACzE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEpD,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAChF,CAAC"}