@rangojs/router 0.0.0-experimental.39 → 0.0.0-experimental.39528925

package/skills/testing/response-routes.md

@@ -0,0 +1,95 @@
+# Testing a response route / redirect — dispatch
+
+**Layer:** integration (node) · **Import:** `@rangojs/router/testing` · **DSL it tests:** response routes (json/text/html/xml/md), redirects, 404 (see `/response-routes`, `/mime-routes`)
+
+`dispatch` runs the router's REAL matching (reusing `previewMatch`) and the real global + route-level middleware chain, with no RSC render — so redirects, 404s, response routes, content negotiation, and middleware short-circuits behave exactly as in production. You SEED the request and `env`; everything else (matching, middleware, header/cookie merge) is real machinery.
+
+## API
+
+### Options — `DispatchOptions<TEnv>`
+
+| Field                | Type                | Meaning                                                                            |
+| -------------------- | ------------------- | ---------------------------------------------------------------------------------- |
+| `request` (required) | `Request \| string` | The request to dispatch: a `Request`, or a URL string (absolute or path).          |
+| `env`                | `TEnv`              | Environment bindings forwarded to matching and middleware (surfaced as `ctx.env`). |
+
+### Context — response-handler `ctx` (what your code receives)
+
+The lightweight context a RESPONSE-route handler reads (mirrors the production `handleResponseRoute` shape). Notable fields:
+
+| Field                 | Type                     | Meaning                                                                                                     |
+| --------------------- | ------------------------ | ----------------------------------------------------------------------------------------------------------- |
+| `request`             | `Request`                | The dispatched request.                                                                                     |
+| `params`              | `Record<string, string>` | URL params from the matched route.                                                                          |
+| `env`                 | `TEnv`                   | Bindings from `opts.env`.                                                                                   |
+| `searchParams`        | `URLSearchParams`        | Query params with internal `_rsc*` params stripped.                                                         |
+| `url`                 | `URL`                    | Cleaned request URL (internal `_rsc*` params removed).                                                      |
+| `pathname`            | `string`                 | Matched pathname.                                                                                           |
+| `reverse`             | `ReverseFunction`        | URL-from-name. Map-only (NO auto-fill from current params), matching the production response-route handler. |
+| `get`                 | fn                       | Read context vars set by prior middleware.                                                                  |
+| `header(name, value)` | fn                       | Set a response header; surfaces on the returned `Response`.                                                 |
+| `waitUntil`           | fn                       | Register a deferred task (no-op fidelity in tests).                                                         |
+
+### Returns — `dispatch(router, opts) -> Promise<Response>`
+
+```ts
+function dispatch<TEnv = any>(
+  router: Rango<TEnv, any>,
+  opts: DispatchOptions<TEnv>,
+): Promise<Response>;
+```
+
+A real `Response`: response-route body, a 308 redirect (`Location`), a 404, or a middleware short-circuit. A `path.json` handler that returns a bare value is serialized verbatim (no envelope); a returned or thrown `Response` uses the same control-flow path; cookies and `ctx.header(...)` surface on the `Response`. `dispatch` accepts your public router type directly (no cast).
+
+## Recipe
+
+```ts
+import { describe, it, expect } from "vitest";
+import { dispatch } from "@rangojs/router/testing";
+import { createRouter } from "@rangojs/router";
+import { apiPatterns } from "../src/api/urls"; // path.json(...) routes, no Prerender
+
+const router = createRouter().routes(apiPatterns);
+
+describe("api routes via dispatch", () => {
+  it("serializes a JSON response route as the bare handler value", async () => {
+    const res = await dispatch(router, { request: "/health" });
+    expect(res.status).toBe(200);
+    expect(res.headers.get("content-type")).toBe(
+      "application/json;charset=utf-8",
+    );
+    expect(await res.json()).toEqual({ status: "ok" });
+  });
+
+  it("maps a thrown RouterError to its status + RFC 9457 problem+json", async () => {
+    const res = await dispatch(router, { request: "/products/999" }); // handler throws RouterError 404
+    expect(res.status).toBe(404);
+    expect(res.headers.get("content-type")).toBe(
+      "application/problem+json;charset=utf-8",
+    );
+    expect((await res.json()).code).toBe("NOT_FOUND"); // { title, status, detail, code }
+  });
+
+  it("returns 404 for an unmatched path", async () => {
+    expect((await dispatch(router, { request: "/nope" })).status).toBe(404);
+  });
+});
+```
+
+`dispatch` also covers trailing-slash/redirect targets (`findMatch`) — a redirected path returns a 308 with the `Location` (query preserved). Pass `env` via `{ env }`.
+
+## Caveats
+
+- Hitting a COMPONENT (RSC) route throws a clear directive error: `dispatch` is for response routes + redirects + 404 + content negotiation, plus the global + route-level middleware guard stack on RESPONSE routes — it never renders React. Use Flight primitives or e2e to exercise component rendering.
+- A COMPONENT route's guard stack cannot run here. Assert it at e2e, or extract the middleware fn and unit-test it with `runMiddleware` (see `./middleware.md`).
+- JSON serialization is bare, applied in `response-route-handler.ts`: a `path.json` handler that returns a value is serialized verbatim (`JSON.stringify(value)`, status 200, `application/json`) — no envelope. Returning or throwing a `Response` (e.g. `Response.json(x)`) uses the same control-flow path. Any other thrown error yields an RFC 9457 problem+json body `{ title, status, detail, code }` (`application/problem+json`) with the error's status (`RouterError.status`, else 500, or a non-200 `ctx.res.status` already set upstream in the request pipeline); `code` is the `RouterError.code`, else `"INTERNAL"`. The `type` member is omitted this phase. Assert the shape matching what your handler returns.
+- Setup: needs the preset (alias + virtual stubs) or a Vite-RSC env (see `./setup.md`); a bare router import throws on Vite virtuals.
+- A router using `Prerender()`/`createLoader()`/`Static()` now constructs in a bare test (each assigns a runtime fallback `$$id`). Importing the whole router _file_ may still need the plugin (its page modules pull app deps / `virtual:` modules) — build from a focused include (your API routes) for whole-router dispatch.
+- A `_rsc_partial` request to a response route runs global middleware first (an auth gate can still 401/redirect), then returns `X-RSC-Reload` — route-level middleware is skipped, exactly like production.
+- `dispatch` does NOT execute server actions (`?_rsc_action`), but it DOES run the global middleware chain on an action request — middleware can still 401/redirect it, and any 3xx redirect on a partial OR action request becomes a `204` + `X-RSC-Redirect` (fetch-safe interception), the raw `Location` dropped.
+
+## See also
+
+- `/response-routes`, `/mime-routes` — the DSL this tests
+- Siblings: `./middleware.md`, `./setup.md`, `./cache-prerender.md`
+- Long-form prose: [docs/testing.md](https://github.com/ivogt/vite-rsc/blob/main/packages/rangojs-router/docs/testing.md) — section "dispatch — request to Response" (the `rangoTestConfig` preset stubs `@vitejs/plugin-rsc/rsc`, so no per-file `vi.mock` is needed)

package/skills/testing/reverse-and-types.md

@@ -0,0 +1,85 @@
+# Testing reverse/href and type-level contracts
+
+**Layer:** unit (node) + typecheck · **Import:** `@rangojs/router/client` (useReverse), `@rangojs/router/testing` (assertGeneratedRoutesMatch) · **DSL it tests:** `reverse`/`href`/`useReverse` (see `/typesafety`, `/links`)
+
+The reverse/href/params/env types are a real contract: a wrong route name, a missing param, or an unknown env binding should be a COMPILE error, not a runtime surprise. The type-test recipes have no runtime API — `tsc --noEmit` IS the assertion. `assertGeneratedRoutesMatch` is the one runtime helper here: it runs the router's real matching to expand lazy includes, then diffs the live `routeMap` against the generated named-routes map you seed. It (and `diffGeneratedRoutes`) are **async — `await` them** — because expanding an async `include(prefix, () => import("./routes"))` group means importing that module first.
+
+## API
+
+### Options — `assertGeneratedRoutesMatch(router, generatedMap?)`
+
+| Field          | Type                                 | Meaning                                                                                                                                                    |
+| -------------- | ------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `router`       | `{ routeMap; findMatch? }`           | Your router (real impl). `routeMap` is the live name→pattern map; `findMatch` (when present) is called to force-expand lazy `include()`d routes.           |
+| `generatedMap` | `Record<string, unknown>` (optional) | The imported `*.named-routes.gen.ts` map (name→pattern, or `{ path }` objects). Omit to diff against the global route map (`getGlobalRouteMap()`) instead. |
+
+### Context — `GeneratedRoutesDiff` (what `diffGeneratedRoutes` resolves to)
+
+| Field      | Type                           | Meaning                                                                                                                                     |
+| ---------- | ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------- |
+| `missing`  | `string[]`                     | Names in the generated map but absent at runtime (stale generated entry).                                                                   |
+| `extra`    | `string[]`                     | Names at runtime but absent from the generated map (ungenerated route). Auto-generated internal names (`$path_*`/`$prefix_*`) are excluded. |
+| `mismatch` | `[name, generated, runtime][]` | Names in both whose patterns differ.                                                                                                        |
+| `ok`       | `boolean`                      | True when `missing`, `extra`, and `mismatch` are all empty.                                                                                 |
+
+### Returns — `assertGeneratedRoutesMatch`
+
+`Promise<void>` — **await it**. Resolves on match; on drift the promise REJECTS with an `Error` listing every missing, extra, and mismatched route plus a "regenerate the `*.named-routes.gen.ts` file" hint. (`diffGeneratedRoutes` resolves to the `GeneratedRoutesDiff` above and never rejects.) Both are async so an async `include(() => import())` group is imported and spliced into `routeMap` before the diff — call them without `await` and every route in that group reads as a false `missing`.
+
+## Recipe
+
+```ts
+// 1. Negative assertions inline with @ts-expect-error — the directive ERRORS if
+//    the line below it ever starts compiling (i.e. if the type guard regresses).
+//    Validated by `tsc --noEmit`; a runtime test cannot assert this.
+import { useReverse } from "@rangojs/router/client";
+
+const reverse = useReverse({ post: "/blog/:slug" });
+reverse("post", { slug: "hi" }); // ok
+// @ts-expect-error - missing required :slug param
+reverse("post", {});
+// @ts-expect-error - "comment" is not a route in this map
+reverse("comment", { id: "1" });
+```
+
+```ts
+// 2. Positive assertions with vitest's expectTypeOf — pin an INFERRED type
+//    (loader return, parsed search schema, RouteParams) inside a normal *.test.ts.
+import { expectTypeOf } from "vitest";
+import type { RouteParams } from "@rangojs/router";
+
+// RouteParams takes a route NAME and a route map (defaulting to the global map).
+// Pass an explicit map to keep the type test self-contained.
+expectTypeOf<
+  RouteParams<"blogPost", { blogPost: "/blog/:slug" }>
+>().toEqualTypeOf<{ slug: string }>();
+```
+
+```ts
+// 3. assertGeneratedRoutesMatch — a one-liner whole-app drift test. Real
+//    matching expands lazy include()d routes before the diff. It is async
+//    (it awaits findMatch to import async include groups), so await it.
+import { it } from "vitest";
+import { assertGeneratedRoutesMatch } from "@rangojs/router/testing";
+import { router } from "../src/router";
+import generated from "../src/router.named-routes.gen";
+
+it("generated named-routes map is in sync with the router", async () => {
+  await assertGeneratedRoutesMatch(router, generated);
+});
+```
+
+For a large type-only suite, collect recipe-1/2 assertions in `*.test-d.ts` files and add a `tsconfig.types.json` that `extends` your base config and `include`s only those files, then run `tsc -p tsconfig.types.json --noEmit` in CI. This is how the repo pins its own augmentation contracts. Recipe 1 is enough for most apps; reach for the dedicated tsconfig only when inline assertions clutter runtime tests.
+
+## Caveats
+
+- Type tests run at TYPECHECK time (`tsc --noEmit`), NOT in the vitest runner. They are their own layer — wire them into CI as a real step (`pnpm run typecheck`). A type test nobody runs is just a comment.
+- `@ts-expect-error` ERRORS if the line below it ever starts compiling, so a regressed guard fails the typecheck. A runtime test cannot assert "this should not type-check".
+- `assertGeneratedRoutesMatch` force-expands lazy `include()`d routes (awaits `findMatch` on a concrete path derived from each generated pattern) before diffing — otherwise every included route reads as a false `missing`. It is **async** so it can await the module import behind an async `include(() => import())` group; `await` the call (or the async group's routes read as `missing`). This makes the whole-app drift check work in a plain unit test. Routers without `findMatch` (a bare `{ routeMap }`) are left as-is.
+- MULTI-APP route-map isolation. `href()`/`reverse()` typing is GLOBAL — each app's generated file augments the one `Rango.GeneratedRouteMap` interface. A `renderRoute` suite that imports a client component from app B (which calls `href("/b-route")`) won't typecheck if the same tsconfig program also carries app A's augmentation: A's route union rejects B's name. `renderRoute` is app-agnostic at RUNTIME; the collision is purely the global `href` typing. Keep a `renderRoute` suite single-app, or give each app its OWN tsconfig program (see `/typesafety`); a quick sidestep is to probe `useMount`/`useHref` inline instead of importing the cross-app component.
+
+## See also
+
+- `/typesafety`, `/links` — the DSL this tests
+- Siblings: `./client-components.md`, `./loader.md`
+- Long-form prose: [docs/testing.md](https://github.com/ivogt/vite-rsc/blob/main/packages/rangojs-router/docs/testing.md) — section "Type-level tests — make misuse fail to compile"

package/skills/testing/server-actions.md

@@ -0,0 +1,107 @@
+# Testing a server action — runInRequestContext
+
+**Layer:** unit (node) · **Import:** `@rangojs/router/testing` · **DSL it tests:** `"use server"` action (see `/server-actions`)
+
+`runInRequestContext(fn, opts)` builds a real `RequestContext` (the same `createRequestContext` the RSC handler uses) AND enters it around `fn`, so an action that calls `getRequestContext()` / `cookies()` / `ctx.get(var)` runs with production fidelity. You SEED the request, env, and vars; the REAL machinery is cookie/header accumulation, location-state, and redirect/notFound throwing.
+
+## API
+
+### Options — `CreateTestContextOptions<TEnv>`
+
+| Field           | Type                                                   | Meaning                                                                                                                                                                                                                                                                                                                                               |
+| --------------- | ------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `env`           | `TEnv`                                                 | Platform bindings the action reads (`ctx.env`). Default `{}`. Double them yourself (see `./bindings.md`).                                                                                                                                                                                                                                             |
+| `request`       | `Request \| string`                                    | The request to run under. A `string` becomes `new Request(url)`; pass a full `Request` to seed a `Cookie` header. Default origin `http://localhost/`.                                                                                                                                                                                                 |
+| `requestInit`   | `RequestInit`                                          | Init merged when `request` is a string (e.g. `{ method, headers, body }`).                                                                                                                                                                                                                                                                            |
+| `variables`     | `Record<string, unknown>`                              | Raw backing store for `ctx.get()` / `ctx.set()`, pre-seeded from `vars`.                                                                                                                                                                                                                                                                              |
+| `vars`          | `VarsInit`                                             | Vars a prior middleware would have set (object or `[token, value]` list).                                                                                                                                                                                                                                                                             |
+| `routeMap`      | `Record<string, string>`                               | Route name -> pattern map enabling `ctx.reverse()` without global state.                                                                                                                                                                                                                                                                              |
+| `routeName`     | `string`                                               | Current route name (drives `ctx.reverse()` self-references).                                                                                                                                                                                                                                                                                          |
+| `params`        | `Record<string, string>`                               | Route params on `ctx.params`.                                                                                                                                                                                                                                                                                                                         |
+| `basename`      | `string`                                               | Router basename, normalized exactly like `createRouter({ basename })`; drives `redirect()` prefixing. Default `undefined`.                                                                                                                                                                                                                            |
+| `cacheStore`    | `SegmentCacheStore`                                    | Backing store for `use cache` functions (same shape as `createRouter({ cache })`). Without it, cached functions run uncached and their guards never fire.                                                                                                                                                                                             |
+| `cacheProfiles` | `Record<string, CacheProfile>`                         | Profiles for `use cache: "name"`, same shape as `createRouter({ cacheProfiles })`. An unknown profile throws.                                                                                                                                                                                                                                         |
+| `theme`         | `ThemeConfig \| true`                                  | Theme config (same shape as `createRouter({ theme })`). Without it `ctx.theme` / `ctx.setTheme` are inert.                                                                                                                                                                                                                                            |
+| `stateCookie`   | `StateCookieSeed` (`{ prefix?, routerId?, version? }`) | Customize the rango state cookie an action calling `invalidateClientCache()` rotates. The name is ALWAYS seeded (default `rango-state_router_0`) so the rotation `Set-Cookie` fires like production; override `prefix`/`routerId` to match `createRouter({ stateCookiePrefix, id })`, or `version` (value is `{version}:{timestamp}`, default `"0"`). |
+
+### Context — `RequestContext<TEnv>` (what your code receives)
+
+`fn` receives `ctx`, the full entered `RequestContext`; the same object resolves via `getRequestContext()` inside `fn`. Notable fields:
+
+| Field                          | Type                     | Meaning                                                                                                                                                                                                           |
+| ------------------------------ | ------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `env`                          | `TEnv`                   | The seeded platform bindings.                                                                                                                                                                                     |
+| `request`                      | `Request`                | The concrete request the run is bound to.                                                                                                                                                                         |
+| `cookies()`                    | `Record<string, string>` | @internal effective cookie view. To read or queue cookies inside the action, use the standalone `cookies()` from `@rangojs/router` (`cookies().get(name)` / `cookies().set(...)`), which returns a `CookieStore`. |
+| `get(token)` / `set(token, v)` | accessor                 | Read/write request-scoped vars (seeded from `vars` / `variables`).                                                                                                                                                |
+| `params`                       | `Record<string, string>` | Seeded route params.                                                                                                                                                                                              |
+| `reverse(name, params?)`       | function                 | Build a URL from `routeMap` (when seeded).                                                                                                                                                                        |
+| `header(name, value)`          | function                 | Queue a response header.                                                                                                                                                                                          |
+| `setLocationState(...)`        | function                 | Set the flash / location state the client reads.                                                                                                                                                                  |
+| `theme`/`setTheme`             | —                        | Theme accessors, inert unless `theme` is seeded.                                                                                                                                                                  |
+
+### Returns — `RunInRequestContextResult<T>`
+
+| Field             | Type                      | Meaning                                                                                                                                                                                           |
+| ----------------- | ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `result`          | `T \| undefined`          | `fn`'s awaited return, or `undefined` if it threw.                                                                                                                                                |
+| `thrown`          | `unknown`                 | What `fn` threw (a redirect / `notFound` `Response` on the success path), or `undefined`. Captured, NOT re-thrown — assert on it.                                                                 |
+| `response`        | `Response`                | The merged `Response` (status + headers + Set-Cookie). On a thrown redirect, that redirect's `Location` merged with the accumulated cookies/headers.                                              |
+| `cookies`         | `Record<string, string>`  | Effective cookie view: request cookies + run mutations, last-write-wins.                                                                                                                          |
+| `headers`         | `Record<string, string>`  | Response headers the run set (plus a thrown redirect's `Location`), EXCLUDING `set-cookie` (use `cookies`). Names lowercased. A `keepClientCache()` call shows here as `x-rango-keep-cache: "1"`. |
+| `stateCookieName` | `string`                  | The resolved rango state cookie name this run seeded (default `rango-state_router_0`). Assert an `invalidateClientCache()` rotation against it without recomputing.                               |
+| `locationState`   | `Record<string, unknown>` | The flash set via `ctx.setLocationState()` / `redirect({ state })`, as the flat `{ key: value }` the client reads.                                                                                |
+
+Low-level variant: when you already hold a context from `createTestRequestContext(opts)`, call `runWithRequestContext(ctx, fn)` (re-exported from `@rangojs/router/testing`) to enter it directly. `runInRequestContext` is the one-call convenience over `createTestRequestContext` + `runWithRequestContext`.
+
+## Recipe
+
+```ts
+import { it, expect } from "vitest";
+import { runInRequestContext } from "@rangojs/router/testing";
+import { loginAction } from "../src/actions/login"; // sets a session cookie + flash, then throw redirect("/app")
+
+it("sets the session cookie + flash and redirects", async () => {
+  const { thrown, cookies, locationState } = await runInRequestContext(
+    () => loginAction(input),
+    {
+      env,
+      request: new Request("https://app.test/admin", {
+        headers: { Cookie: "sid=abc" },
+      }),
+    },
+  );
+  expect((thrown as Response).headers.get("Location")).toBe("/app"); // redirected
+  expect(cookies.session).toBeDefined(); // cookie set before the throw, no @internal cast
+  expect(locationState).toEqual({ flash: { text: "Welcome back" } });
+});
+
+it("asserts the client-cache directives an action issued", async () => {
+  // invalidateClientCache() rotates the state cookie -> a Set-Cookie on response.
+  const { response, stateCookieName } = await runInRequestContext(() =>
+    logoutAction(),
+  );
+  expect(
+    response.headers
+      .getSetCookie()
+      .some((c) => c.startsWith(stateCookieName + "=")),
+  ).toBe(true);
+
+  // keepClientCache() sets the suppression directive header (no cookie).
+  const { headers } = await runInRequestContext(() => dismissBannerAction());
+  expect(headers["x-rango-keep-cache"]).toBe("1");
+});
+```
+
+## Caveats
+
+- The snapshot fires whether `fn` RETURNS or THROWS. A `throw redirect("/app")` on the success path is captured on `thrown` (NOT re-thrown), so no try/catch is needed; assert on `thrown` for a throwing action.
+- There is no cookies / headers option. Seed a request cookie by passing a full `Request` with the `Cookie` header (as in the recipe).
+- `runWithRequestContext(ctx, fn)` is the low-level entry when you already hold a context; `runInRequestContext` is the one-call convenience over `createTestRequestContext` + `runWithRequestContext`.
+- Platform bindings are yours to double via `env` (see `./bindings.md`).
+
+## See also
+
+- `/server-actions` — the DSL this tests
+- Siblings: `./render-handler.md`, `./middleware.md`, `./loader.md`, `./bindings.md`
+- Long-form prose: [docs/testing.md](https://github.com/ivogt/vite-rsc/blob/main/packages/rangojs-router/docs/testing.md) — section "runInRequestContext — the handler / server-action test primitive"

package/skills/testing/server-tree.md

@@ -0,0 +1,128 @@
+# Inspecting the rendered tree — renderServerTree, findClientBoundaries, findElements
+
+**Layer:** RSC unit (react-server project) · **Import:** `@rangojs/router/testing/flight` · **DSL it tests:** client islands across the boundary + server-rendered host content (see `/route`)
+
+`renderServerTree` is the DEFAULT way to assert on a Flight render; `renderToFlightString` (see [`./flight.md`](./flight.md)) is the escape hatch for pinning the raw wire bytes. It serializes the real Flight (identical bytes to `renderToFlightString`) and then deserializes it back to an inspectable React element tree you traverse — that serialize/deserialize round-trip is REAL; what you SEED is the element you render plus the request context (`request`/`headers`/`params`/`vars`/`env`). The win over the wire string: a client boundary's props come back as real JS values (a `Date` is a `Date`, not the opaque `$D...` encoding) and you can confirm a `"use client"` component actually crossed the boundary (an `I` row) instead of being inlined. There is NO hydration and NO interaction — boundaries are inert placeholders carrying props.
+
+## API
+
+### Options — `RenderServerTreeOptions` (extends `RenderToFlightStringOptions`)
+
+| Field              | Type                      | Meaning                                                                                                                                                                                                                                                                                                                                |
+| ------------------ | ------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `request`          | `Request \| string`       | The request the render runs under (absolute URL, path, or a `Request`). Defaults to `http://localhost/`. A server component reading `getRequestContext()` sees this url/cookies. A passed `Request`'s headers win; `headers` is then ignored.                                                                                          |
+| `headers`          | `HeadersInit`             | Request headers (e.g. `Cookie`) visible to the server tree, when `request` is a string.                                                                                                                                                                                                                                                |
+| `env`              | `unknown`                 | Env / bindings exposed as `ctx.env`. Defaults to `{}`.                                                                                                                                                                                                                                                                                 |
+| `params`           | `Record<string, string>`  | Route params exposed via `ctx.params` and loader contexts.                                                                                                                                                                                                                                                                             |
+| `routeName`        | `string`                  | Matched route name (drives `ctx.routeName` and scoped reverse).                                                                                                                                                                                                                                                                        |
+| `vars`             | `VarsInit`                | Context variables visible via `ctx.get(...)`, as a prior middleware would have set them. Object form (`{ user }`) or `[key, value]` tuples.                                                                                                                                                                                            |
+| `clientComponents` | `Record<string, unknown>` | The `"use client"` components reachable from the tree, keyed by the boundary name to register each as a client reference (in place) so it serializes as an `I` row. Omit when `rangoUseClientTransform()` auto-discovers them, or for pure server-only trees. First-wins per worker; already-registered references are left untouched. |
+
+### Context — what your code receives
+
+A server component rendered here runs under a real request context: `getRequestContext()` resolves, `ctx.params`/`ctx.routeName`/`ctx.env` reflect the options, `ctx.get(MyVar)` reads a seeded `var`, and cookies come off the request. Same seeding as the handler-test primitives — you render an **element** you build (`<Page />`); to run a route **handler** `(ctx) => rsc` use `renderHandler` (see `./render-handler.md`).
+
+### Returns — `RenderServerTreeResult`
+
+```ts
+renderServerTree(element, opts?): Promise<{ flight: string; tree: unknown }>
+```
+
+| Field    | Type      | Meaning                                                                                                                                                                                                  |
+| -------- | --------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `flight` | `string`  | The raw Flight wire string (so `toMatchFlight` assertions still apply).                                                                                                                                  |
+| `tree`   | `unknown` | The deserialized React element tree. Server elements are plain React elements; each client boundary is an inert placeholder whose `props` are the real deserialized JS values that crossed the boundary. |
+
+#### `findClientBoundaries(tree, selector?) -> ClientBoundary[]`
+
+Every client boundary in document order; always an array (no throw on zero/many — destructure `const [tag] = ...` and assert `.length` when the count matters; no match yields `[]`). `selector` is a STRING (match by export name) or a `BoundarySelector` object, criteria AND-ed.
+
+| `BoundarySelector` | Type                                    | Meaning                                                                                    |
+| ------------------ | --------------------------------------- | ------------------------------------------------------------------------------------------ |
+| `name`             | `string`                                | Match the boundary's export name (same as a bare string).                                  |
+| `testId`           | `string`                                | Match `props["data-testid"]` exactly (a `data-testid` you passed AS A PROP to the island). |
+| `props`            | `Record<string, unknown>`               | Subset deep-equal match (Date/Map/Set/array/nested-object aware); unlisted props ignored.  |
+| `where`            | `(boundary: ClientBoundary) => boolean` | Arbitrary predicate.                                                                       |
+
+`ClientBoundary` = `{ id, name, props (excludes children), children, element }`.
+
+#### `findElements(tree, selector?) -> FoundElement[]`
+
+Every SERVER/HOST element a server component produced (`<article>`, `<h2>`), in document order; always an array. `selector` is a host TAG string (`"h2"`) or an `ElementSelector` object, criteria AND-ed.
+
+| `ElementSelector` | Type                                 | Meaning                                                                            |
+| ----------------- | ------------------------------------ | ---------------------------------------------------------------------------------- |
+| `tag`             | `string`                             | Match the host tag name (`"article"`, `"h2"`).                                     |
+| `testId`          | `string`                             | Match `props["data-testid"]` exactly (on a host element).                          |
+| `props`           | `Record<string, unknown>`            | Subset deep-equal match (Date/Map/Set/array/nested aware).                         |
+| `text`            | `string \| RegExp`                   | Match the element's text content (substring for a string, `.test()` for a RegExp). |
+| `where`           | `(element: FoundElement) => boolean` | Arbitrary predicate.                                                               |
+
+`FoundElement` = `{ tag, props (excludes children), children, text, element }`.
+
+#### `textContent(node) -> string`
+
+Concatenates every string/number leaf of a node's subtree in document order — the clean way to assert rendered text, instead of `JSON.stringify(tree).toContain(...)`.
+
+## Recipe
+
+```tsx
+import { it, expect } from "vitest";
+import {
+  renderServerTree,
+  findClientBoundaries,
+  findElements,
+  textContent,
+} from "@rangojs/router/testing/flight";
+import { PriceTag } from "./PriceTag.js"; // a "use client" component (any filename)
+
+async function ProductPanel({ amount, asOf }: { amount: number; asOf: Date }) {
+  await Promise.resolve();
+  return (
+    <article>
+      <h2>Wine</h2>
+      <PriceTag amount={amount} currency="USD" asOf={asOf} />
+    </article>
+  );
+}
+
+it("client props survive the serialize -> deserialize round trip", async () => {
+  const { flight, tree } = await renderServerTree(
+    <ProductPanel amount={19.5} asOf={new Date("2026-01-02T00:00:00Z")} />,
+    // Omit clientComponents when rangoUseClientTransform() is wired (see ./setup.md);
+    // otherwise register islands explicitly:
+    { clientComponents: { PriceTag } },
+  );
+  expect(flight).toMatchFlight("PriceTag"); // wire assertions still work
+
+  const [tag] = findClientBoundaries(tree, "PriceTag");
+  expect(tag.props.amount).toBe(19.5); // a real number
+  expect(tag.props.asOf).toBeInstanceOf(Date); // a real Date, not "$D..."
+});
+
+it("asserts the server-rendered host content", async () => {
+  const { tree } = await renderServerTree(
+    <ProductPanel amount={19.5} asOf={new Date("2026-01-02T00:00:00Z")} />,
+    { clientComponents: { PriceTag } },
+  );
+  const [h2] = findElements(tree, "h2");
+  expect(h2.text).toBe("Wine");
+  expect(textContent(tree)).toContain("Wine"); // instead of JSON.stringify(tree)
+});
+```
+
+## Caveats
+
+- This renders an ELEMENT you build (`<Page />`). To test a route HANDLER (a `(ctx) => rsc` function registered via `path(...)`), use `renderHandler` (see [`./render-handler.md`](./render-handler.md)) — handlers have their own util. Do NOT wrap a handler in `createElement` and render it here: a handler is not a component, so React would invoke it with `props` as its argument instead of the real `HandlerContext`, and the seeded `params`/`vars` plus `ctx.use`/`ctx.reverse`/`ctx.get`/`cookies()` would all be absent.
+- Island auto-discovery from the server tree's imports needs `rangoUseClientTransform()` in the rsc project (see `./setup.md`). Without it a plainly-imported island is just a function the serializer renders server-side — register islands explicitly via `{ clientComponents: { PriceTag } }`.
+- Same alias requirement as `./flight.md`: a rendered component (or handler) that reads `getRequestContext()`/`cookies()` from the `@rangojs/router` barrel needs the `index.rsc.ts` alias (see `./setup.md`), or it hits the throwing out-of-react-server stub.
+- A client boundary's props come back as REAL JS values after deserialization (a `Date` is a `Date`, not a `$D...` encoding) — but there is NO hydration and NO interaction; boundaries are inert placeholders carrying props.
+- Server COMPONENTS do not survive Flight as identities (they are executed during serialization), so `findElements` matches the host elements they PRODUCED, not the component function. Client islands keep identity — use `findClientBoundaries` for those.
+- `findClientBoundaries` finds islands (`I` rows); `findElements` finds host elements. A `testId` on an island matches with `findClientBoundaries`; a `testId` on a host element matches with `findElements`. Use `textContent(node)` in place of `JSON.stringify(tree).toContain`.
+- A true interactive, clickable DOM `renderServer` is intentionally NOT shipped: in-process happy-dom hydration re-tests React more than your app and misses server/client divergence (the only hydration bug worth a dedicated test, which needs a real browser). Test interaction at e2e.
+
+## See also
+
+- `/route` — the DSL this tests
+- Siblings: `./flight.md`, `./render-handler.md`, `./setup.md`
+- Long-form prose: [docs/testing.md](https://github.com/ivogt/vite-rsc/blob/main/packages/rangojs-router/docs/testing.md) — section "renderServerTree — serialize then deserialize to an inspectable tree" (and the "findElements / textContent" subsection)

package/skills/testing/setup.md

@@ -0,0 +1,123 @@
+# Testing setup — the two vitest projects
+
+**Layer:** cross-cutting (vitest config) · **Import:** `@rangojs/router/testing/vitest`
+
+Real machinery: Vite transpiles `@rangojs/router`'s shipped TS source and resolves the bare specifier to its react-server impls so your app's router / loaders / middleware import in a bare Vitest process. You SEED nothing here — this file only wires the two projects every other recipe builds on. The node/DOM project keeps React on its CLIENT build; the Flight project flips to the `react-server` condition.
+
+## API
+
+### Options — `RangoTestAliasOptions`
+
+| Field    | Type                     | Meaning                                                                                                                                                                                                                                                                                      |
+| -------- | ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `preset` | `"node" \| "cloudflare"` | Deployment preset, matching `rango({ preset })` in the Vite plugin. `"cloudflare"` additionally stubs the `cloudflare:workers` / `cloudflare:email` runtime virtuals a CF route tree imports. A string (not a boolean) so more presets can be added without an API change. Default `"node"`. |
+
+### Functions
+
+| Function                    | Returns                                   | Use                                                                                                                                                                                                         |
+| --------------------------- | ----------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `rangoTestConfig(opts?)`    | `{ alias, server: { deps: { inline } } }` | Recommended. Spread into the node/DOM project's `test` block. Bundles the resolve aliases AND `server.deps.inline`.                                                                                         |
+| `rangoTestAliases(opts?)`   | `TestAlias[]` (`{ find, replacement }[]`) | Lower-level. The bare `@rangojs/router` -> `index.rsc.ts` alias plus the `:version` / `@vitejs/plugin-rsc/rsc` stubs (and CF stubs under `preset:"cloudflare"`). Used in the rsc project's `resolve.alias`. |
+| `rangoUseClientTransform()` | a Vite plugin (`{ name, transform }`)     | Add to the rsc project `plugins`. Applies the `"use client"` transform so `renderServerTree` auto-discovers client islands from the server tree's imports.                                                  |
+
+### Returns — `RangoTestConfig` (from `rangoTestConfig`)
+
+```ts
+interface RangoTestConfig {
+  alias: TestAlias[]; // -> test.alias
+  server: { deps: { inline: RegExp[] } }; // [/@rangojs[/\\]router/] -> test.server.deps.inline
+}
+```
+
+## Recipe
+
+```ts
+// vitest.config.ts — the node + DOM project (keeps React on its CLIENT build)
+import { defineConfig } from "vitest/config";
+import { rangoTestConfig } from "@rangojs/router/testing/vitest";
+
+export default defineConfig({
+  test: {
+    globals: true,
+    include: ["test/**/*.test.{ts,tsx}"],
+    environment: "node", // renderRoute tests add a `// @vitest-environment happy-dom` pragma
+    // `preset: "cloudflare"` also stubs cloudflare:workers / cloudflare:email (default "node").
+    ...rangoTestConfig({ preset: "cloudflare" }),
+  },
+});
+```
+
+```ts
+// vitest.rsc.config.ts — the Flight project (react-server condition)
+import { defineConfig } from "vitest/config";
+import {
+  rangoTestAliases,
+  rangoUseClientTransform,
+  rangoInlineDeps,
+} from "@rangojs/router/testing/vitest";
+
+// Production React in this process AND any forked worker (forks inherit env).
+process.env.NODE_ENV = "production";
+
+export default defineConfig({
+  plugins: [rangoUseClientTransform()],
+  resolve: {
+    conditions: ["react-server"],
+    alias: rangoTestAliases({ preset: "cloudflare" }), // or { preset: "node" }
+  },
+  test: {
+    globals: true,
+    include: ["**/*.rsc-test.{ts,tsx}"],
+    pool: "forks",
+    execArgv: ["--conditions=react-server"], // or React throws "react-server condition must be enabled"
+    // Required for an installed consumer on Node >= 23 (rango ships TS source).
+    server: { deps: { inline: rangoInlineDeps } },
+  },
+});
+```
+
+```ts
+// example.test.ts — one test in the node/DOM project, importing real app code
+import { describe, it, expect } from "vitest";
+import { dispatch } from "@rangojs/router/testing";
+import { createRouter } from "@rangojs/router";
+import { apiPatterns } from "../src/api/urls"; // path.json(...) routes only, no Prerender()
+
+const router = createRouter().routes(apiPatterns);
+
+describe("api", () => {
+  it("serializes a JSON response route", async () => {
+    const res = await dispatch(router, { request: "/health" });
+    expect(res.status).toBe(200);
+    expect(await res.json()).toEqual({ status: "ok" });
+  });
+});
+```
+
+Scripts:
+
+```jsonc
+{
+  "scripts": {
+    "test:unit": "vitest run",
+    "test:unit:rsc": "vitest run --config vitest.rsc.config.ts",
+  },
+}
+```
+
+## Caveats
+
+- Node >= 23 requires `rangoTestConfig()`, not bare `rangoTestAliases()`. `@rangojs/router` is consumed as SOURCE (exports -> `./src/*.ts`), and Node >= 23 refuses to type-strip `.ts` under `node_modules` (`ERR_UNSUPPORTED_NODE_MODULES_TYPE_STRIPPING`). `rangoTestConfig` ships as compiled JS AND adds `server.deps.inline: [/@rangojs[/\\]router/]` so Vite (not Node) transpiles rango source. With bare `rangoTestAliases` you must wire `deps.inline` yourself.
+- Two separate projects. The node/DOM project keeps React on its CLIENT build; the Flight project uses the `react-server` condition in a separate `vitest.rsc.config.ts`. The main project must NOT set `react-server` — it flips React to the no-hooks server build and breaks every `renderRoute` / client test.
+- The rsc project needs BOTH `resolve.conditions: ["react-server"]` AND the bare `@rangojs/router` -> `index.rsc.ts` alias from `rangoTestAliases({ preset })`. `resolve.conditions` alone is not reliably applied to bare-package export resolution; without the alias a handler/component reading `getRequestContext()` / `cookies()` resolves the throwing out-of-react-server stub (symptom: `renderHandler` returns `tree: undefined`). `renderToFlightString` / `renderServerTree` now self-diagnose this exact misconfiguration — they reject with an actionable message naming `rangoTestAliases`, rather than surfacing the opaque stub error.
+- `NODE_ENV` must be `"production"` in the rsc project. Dev `NODE_ENV` crashes the bare worker (jsxDEV owner-stack machinery uninitialized) and emits volatile debug rows that defeat stable Flight snapshots.
+- The forked rsc worker (`pool: "forks"`) must force the condition via `execArgv: ["--conditions=react-server"]`, or React throws "the react-server condition must be enabled".
+- The `@rangojs/router:version` and `@vitejs/plugin-rsc/rsc` virtuals must be stubbed; the preset does it. A bare router import without stubbing throws.
+- The rango fragment goes under `test` (`test.alias` + `test.server.deps.inline`, both returned by `rangoTestConfig`), NOT under top-level `resolve`.
+- Wire `rangoUseClientTransform()` into the rsc project `plugins` so islands auto-discover from the server tree imports (see `./server-tree.md`); without it, register islands explicitly with `clientComponents`.
+
+## See also
+
+- (cross-cutting)
+- Siblings: `./flight.md`, `./server-tree.md`, `./render-handler.md`, `./response-routes.md`
+- Long-form prose: [docs/testing.md](https://github.com/ivogt/vite-rsc/blob/main/packages/rangojs-router/docs/testing.md) — section "Setup" (and the subsections "Resolving @rangojs/router in a unit test — use the preset" and "Two vitest projects")

package/skills/theme/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: theme
-description: Opt-in theme system with FOUC prevention for light/dark mode
+description: Opt-in theme system with FOUC prevention for light/dark mode. Use when adding a light/dark mode toggle, or the page flashes the wrong theme on load (FOUC).
 argument-hint: [setup]
 ---