@real-router/hash-plugin 0.7.9 → 0.7.11

package/dist/cjs/index.d.ts

@@ -43,15 +43,18 @@ declare function hashPluginFactory(opts?: Partial<HashPluginOptions>, browser?:
 //#endregion
 //#region ../type-guards/dist/esm/index.d.mts
 /**
- * Enhanced type guard for State with deep validation.
- * Checks not only presence but also types of all required fields.
- * Validates params using isParams and meta structure if present.
+ * Type guard for State. Performs the same required-field check as {@link isState}
+ * (`name` via `isRouteName`, `path` is a string, `params` via `isParams`) — the
+ * "Strict" in the name is historical: there is no deeper meta-field validation,
+ * and `meta.id` is intentionally NOT type-checked (history.state restores
+ * serialize it as a string — see the backward-compat property test). Re-exported
+ * as `isState` by the browser and hash plugins for validating `history.state`.
  *
  * @param value - Value to check
- * @returns true if value is a valid State object with correct types
+ * @returns true if value has the required State fields with valid types
  *
  * @example
- * isStateStrict({ name: 'home', params: {}, path: '/', meta: { id: 1 } }); // true
+ * isStateStrict({ name: 'home', params: {}, path: '/' }); // true
  * isStateStrict({ name: 'home', params: 'invalid', path: '/' }); // false
  */
 declare function isStateStrict<P extends Params$1 = Params$1>(value: unknown): value is State$1<P>; //#endregion

package/dist/cjs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":["value","NavigationOptions","name","P","Params","State","T","key","obj","Extract","methodName","state","method"],"sources":["../../../../shared/browser-env/types.ts","../../src/types.ts","../../src/factory.ts","../../../type-guards/dist/esm/index.d.mts","../../src/index.ts"],"mappings":";;;;UAAiB,cAAA;EACf,SAAA,GAAY,KAAA,WAAgB,IAAA;EAC5B,YAAA,GAAe,KAAA,WAAgB,IAAA;EAC/B,mBAAA,GAAsB,EAAA,GAAK,GAAA,EAAK,aAAa;EAC7C,OAAA;AAAA;AAAA,UAGe,OAAA,SAAgB,cAAc;EAC7C,WAAW;AAAA;;;;;;;UCFI,iBAAA;EDNA;;;;;ECYf,UAAA;EDX4B;;;;;ECkB5B,IAAA;EDhB2B;;;;AACpB;ECsBP,eAAA;AAAA;;;iBCdc,iBAAA,CACd,IAAA,GAAO,OAAA,CAAQ,iBAAA,GACf,OAAA,GAAU,OAAA,GACT,aAAA;;;;;;;;;;;;;ACkEwF;;iBAA1E,aAAA,WAAwB,QAAA,GAAS,QAAA,EAAQA,KAAAA,YAAiBA,KAAAA,IAAS,OAAA,CAAM,CAAA;AAAA;;;;;;;;;AHjF1F;;;;;;;;AAAA;EAAA,UI0BY,iBAAA;IJvBV;;;;;II6BE,IAAA;IJ5BK;II8BL,UAAA;EAAA;AAAA;AAAA;EAAA,UAKQ,MAAA;;;;AHjCZ;;;;;;IG2CI,QAAA,CACE,IAAA,UACA,MAAA,GAAS,MAAA,EACT,OAAA;MAAY,IAAA;IAAA;;;;AFxClB;IE+CI,QAAA,CAAS,GAAA,WAAc,KAAA;IF/CM;;;;;IEsD7B,mBAAA,CACE,IAAA,UACA,MAAA,GAAS,MAAA,EACT,OAAA;MAAY,IAAA;IAAA;IAGd,KAAA,CAAM,IAAA,YAAgB,OAAA,CAAQ,KAAA;EAAA;AAAA"}
+{"version":3,"file":"index.d.ts","names":["value","NavigationOptions","name","P","Params","State","T","key","obj","Extract","methodName","state","method"],"sources":["../../../../shared/browser-env/types.ts","../../src/types.ts","../../src/factory.ts","../../../type-guards/dist/esm/index.d.mts","../../src/index.ts"],"mappings":";;;;UAAiB,cAAA;EACf,SAAA,GAAY,KAAA,WAAgB,IAAA;EAC5B,YAAA,GAAe,KAAA,WAAgB,IAAA;EAC/B,mBAAA,GAAsB,EAAA,GAAK,GAAA,EAAK,aAAa;EAC7C,OAAA;AAAA;AAAA,UAGe,OAAA,SAAgB,cAAc;EAC7C,WAAW;AAAA;;;;;;;UCFI,iBAAA;EDNA;;;;;ECYf,UAAA;EDX4B;;;;;ECkB5B,IAAA;EDhB2B;;;;AACpB;ECsBP,eAAA;AAAA;;;iBCdc,iBAAA,CACd,IAAA,GAAO,OAAA,CAAQ,iBAAA,GACf,OAAA,GAAU,OAAA,GACT,aAAA;;;;;;;;;;;;;ACqEwF;;;;ACrEpC;iBDqEtC,aAAA,WAAwB,QAAA,GAAS,QAAA,EAAQA,KAAAA,YAAiBA,KAAAA,IAAS,OAAA,CAAM,CAAA;AAAA;;;;;;AClD5E;;;AJlCd;;;;;;;;AAAA;EAAA,UI0BY,iBAAA;IJvBV;;;;;II6BE,IAAA;IJ5BK;II8BL,UAAA;EAAA;AAAA;AAAA;EAAA,UAKQ,MAAA;;;;AHjCZ;;;;;;IG2CI,QAAA,CACE,IAAA,UACA,MAAA,GAAS,MAAA,EACT,OAAA;MAAY,IAAA;IAAA;;;;AFxClB;IE+CI,QAAA,CAAS,GAAA,WAAc,KAAA;IF/CM;;;;;IEsD7B,mBAAA,CACE,IAAA,UACA,MAAA,GAAS,MAAA,EACT,OAAA;MAAY,IAAA;IAAA;IAGd,KAAA,CAAM,IAAA,YAAgB,OAAA,CAAQ,KAAA;EAAA;AAAA"}

package/dist/cjs/index.js

@@ -1,2 +1,2 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require("@real-router/core/api"),t=require("@real-router/core");function n(e){if(!e)return e;let t=e.replaceAll(/\/+/g,`/`);return t.startsWith(`/`)||(t=`/${t}`),t.length>1&&t.endsWith(`/`)&&(t=t.slice(0,-1)),t===`/`?``:t}const r=e=>{try{return encodeURI(decodeURI(e))}catch(t){return console.warn(`[browser-env] Could not encode path "${e}"`,t),e}},i=/^[A-Z_a-z][\w-]*(?:\.[A-Z_a-z][\w-]*)*$/;function a(e){return typeof e==`string`?e===``?!0:e.length>1e4?!1:e.startsWith(`@@`)?!0:i.test(e):!1}function o(e,t=new WeakSet){if(e==null)return!0;let n=typeof e;if(n===`string`||n===`boolean`)return!0;if(n===`number`)return Number.isFinite(e);if(n===`function`||n===`symbol`)return!1;if(Array.isArray(e))return t.has(e)?!1:(t.add(e),e.every(e=>o(e,t)));if(n===`object`){if(t.has(e))return!1;t.add(e);let n=Object.getPrototypeOf(e);return n!==null&&n!==Object.prototype?!1:Object.values(e).every(e=>o(e,t))}return!1}function s(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}function c(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;let n=!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let r=e[t];if(!s(r)){let e=typeof r;if(e===`function`||e===`symbol`)return!1;n=!0;break}}return n?o(e):!0}function l(e){return a(e.name)&&typeof e.path==`string`&&c(e.params)}function u(e){return!(typeof e!=`object`||!e||!l(e))}function d(e,t,n){return u(e.state)?t.makeState(e.state.name,e.state.params,e.state.path):t.matchPath(n)}function f(e,t,n,r){let i={name:e.name,params:e.params,path:e.path};n?r.replaceState(i,t):r.pushState(i,t)}function p(e,t,n){return r=>{if(r)for(let i of Object.keys(r)){if(!(i in e))continue;let a=r[i];if(a===void 0)continue;let o=typeof e[i],s=typeof a;if(s!==o)throw Error(`[${t}] Invalid type for '${i}': expected ${o}, got ${s}`);let c=n?.[i];if(c){let e=c.validate(a);if(e!==null)throw Error(`[${t}] Invalid '${i}': ${e}`)}}}}const m=/[\u0000-\u001F\u007F]/,h={validate:e=>m.test(e)?`must not contain control characters`:e.split(`/`).includes(`..`)?`must not contain '..' segments`:null},g={validate:e=>m.test(e)?`must not contain control characters`:e.includes(`/`)?`must not contain '/' (slash is added before the path automatically)`:e.includes(`#`)?`must not contain '#' (it is added as the hash delimiter)`:e.includes(`?`)?`must not contain '?' (it conflicts with the query delimiter)`:null},_=()=>globalThis.window!==void 0&&!!globalThis.history,v=(e,t)=>{globalThis.history.pushState(e,``,t)},y=(e,t)=>{globalThis.history.replaceState(e,``,t)},b=e=>(globalThis.addEventListener(`popstate`,e),()=>{globalThis.removeEventListener(`popstate`,e)}),x=()=>globalThis.location.hash,S=()=>{},C=e=>{let t=!1;return n=>{t||=(console.warn(`[browser-env] Browser API is running in a non-browser environment (context: "${e}"). Method "${n}" is a no-op. This is expected for SSR, but may indicate misconfiguration if you expected browser behavior.`),!0)}},w=e=>{let t=C(e);return{pushState:()=>{t(`pushState`)},replaceState:()=>{t(`replaceState`)},addPopstateListener:()=>(t(`addPopstateListener`),S),getHash:()=>(t(`getHash`),``)}};function T(e,t){if(_())return{pushState:v,replaceState:y,addPopstateListener:b,getLocation:e,getHash:x};let n=C(t);return{...w(t),getLocation:()=>(n(`getLocation`),``)}}function E(e,t){if(!e.getCurrentHash)return{};let n=e.getCurrentHash();return n!==(e.getCurrentContextHash?e.getCurrentContextHash():``)&&e.router.getState()?.path===t?{hash:n,force:!0,hashChange:!0}:{hash:n}}function D(e){let n=!1,r=null;function i(){if(r){let{evt:t,location:n}=r;r=null,console.warn(`[${e.loggerContext}] Processing deferred popstate event`),s(t,n)}}function a(){let t=e.router.getState();if(!t)return;let n=t.context?.url?.hash,r=e.buildUrl(t.name,t.params,n?{hash:n}:void 0);e.browser.replaceState(t,r)}function o(t){console.error(`[${e.loggerContext}] Critical error in onPopState`,t);try{a()}catch(t){console.error(`[${e.loggerContext}] Failed to recover from critical error`,t)}}async function s(s,c){if(n){console.warn(`[${e.loggerContext}] Transition in progress, deferring popstate event`),r={evt:s,location:c};return}n=!0;try{let n=d(s,e.api,c);if(n)await e.api.navigateToState(n,{...e.transitionOptions,...E(e,n.path)});else if(e.allowNotFound)e.router.navigateToNotFound(c);else{let n=new t.RouterError(t.errorCodes.ROUTE_NOT_FOUND,{path:c});e.api.emitTransitionError(n),a()}}catch(e){if(e instanceof t.RouterError)try{a()}catch{}else o(e)}finally{n=!1,i()}}return t=>void s(t,e.browser.getLocation())}function O(e){return{onStart:()=>{e.shared.removePopStateListener&&e.shared.removePopStateListener(),e.shared.removePopStateListener=e.browser.addPopstateListener(e.handler)},onStop:()=>{e.shared.removePopStateListener&&(e.shared.removePopStateListener(),e.shared.removePopStateListener=void 0)},teardown:()=>{e.shared.removePopStateListener&&(e.shared.removePopStateListener(),e.shared.removePopStateListener=void 0),e.cleanup()}}}function k(e){return encodeURI(e).replaceAll(`#`,`%23`)}function A(e){try{return decodeURIComponent(e)}catch{return e}}function j(e){let t=e;for(;t.startsWith(`#`);)t=t.slice(1);return A(t)}const M=new Set([`/`,`?`,`#`]);function N(e){let t=e,n=t.indexOf(`://`);if(n!==-1){let e=n+3,r=t.length;for(let n=e;n<t.length;n++){let e=t[n];if(M.has(e)){r=n;break}}t=r===t.length?`/`:t.slice(r),(t.startsWith(`?`)||t.startsWith(`#`))&&(t=`/${t}`)}let r=t.indexOf(`#`),i=r===-1?``:t.slice(r),a=r===-1?t:t.slice(0,r),o=a.indexOf(`?`),s=o===-1?``:a.slice(o);return{pathname:o===-1?a:a.slice(0,o),search:s,hash:i}}function P(e,t){return e.addInterceptor(`start`,(e,n)=>e(n??t.getLocation()))}function F(e,t,n,r,i=!0){let a={name:``,params:{},path:``};return(o,s={},c)=>{let l=e.buildState(o,s);if(!l)throw Error(`[real-router] Cannot replace state: route "${o}" is not found`);let u=e.makeState(l.name,l.params,t.buildPath(l.name,l.params),{params:l.meta}),d;if(c?.hash!==void 0){let e=j(c.hash);d=e?`#${k(e)}`:``}else d=i?n.getHash():``;let f=r(o,s)+d;a.name=u.name,a.params=u.params,a.path=u.path,n.replaceState(a,f)}}function I(e,t,n){return e.replace===!0?!0:n?!!e.reload&&t.path===n.path:e.replace!==!1}const L={hashPrefix:``,base:``,forceDeactivate:!0},R=`hash-plugin`;function z(e){return e.replaceAll(/[$()*+.?[\\\]^{|}-]/g,String.raw`\$&`)}function B(e){return e?RegExp(`^#${z(e)}`):null}function V(e,t){return e===``||e===`#`?`/`:(t?e.replace(t,``):e.slice(1))||`/`}function H(e,t){let n=N(e),r=V(n.hash,t);return r.includes(`?`)?r:r+n.search}function U(e,t,n){let i=r(V(e,n));return i.includes(`?`)?i:i+t}var W=class{#e;#t;#n;#r;#i;#a;constructor(e,t,n,r,i,a,o){this.#e=e,this.#t=r,this.#n=P(t,r);let s=!1,c=()=>{s||(s=!0,console.warn("[@real-router/hash-plugin] `hash` option is ignored — `#` is reserved for the route delimiter. URL fragments are not supported with hash-plugin; use @real-router/browser-plugin or @real-router/navigation-plugin if you need them."))},l=`${n.base}#${n.hashPrefix}`,u=(t,n,r)=>(r?.hash!==void 0&&c(),l+e.buildPath(t,n));this.#a=c,this.#r=t.extendRouter({buildUrl:u,matchUrl:e=>t.matchPath(H(e,i))??void 0,replaceHistoryState:F(t,e,r,u,!1)});let d=D({router:e,api:t,browser:r,allowNotFound:t.getOptions().allowNotFound,transitionOptions:a,loggerContext:R,buildUrl:u});this.#i=O({browser:r,shared:o,handler:d,cleanup:()=>{this.#n(),this.#r()}})}getPlugin(){return{...this.#i,onTransitionSuccess:(e,t,n)=>{n.hash!==void 0&&this.#a();let r=I(n,e,t);f(e,this.#e.buildUrl(e.name,e.params),r,this.#t)}}}};const G=p(L,R,{base:h,hashPrefix:g});function K(t,r){G(t);let i=t?Object.fromEntries(Object.entries(t).filter(([,e])=>e!==void 0)):{},a={...L,...i};a.base=n(a.base);let o=B(a.hashPrefix),s=r??T(()=>U(globalThis.location.hash,globalThis.location.search,o),`hash-plugin`),c={forceDeactivate:a.forceDeactivate,source:`popstate`,replace:!0},l={removePopStateListener:void 0};return function(t){return new W(t,(0,e.getPluginApi)(t),a,s,o,c,l).getPlugin()}}exports.hashPluginFactory=K,exports.isState=u;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require("@real-router/core/api"),t=require("@real-router/core");function n(e){if(!e)return e;let t=e.replaceAll(/\/+/g,`/`);return t.startsWith(`/`)||(t=`/${t}`),t.length>1&&t.endsWith(`/`)&&(t=t.slice(0,-1)),t===`/`?``:t}const r=e=>{try{return encodeURI(decodeURI(e))}catch(t){return console.warn(`[browser-env] Could not encode path "${e}"`,t),e}},i=/^[A-Z_a-z][\w-]*(?:\.[A-Z_a-z][\w-]*)*$/;function a(e){return typeof e==`string`?e===``?!0:e.length>1e4?!1:e.startsWith(`@@`)?!0:i.test(e):!1}function o(e){if(Array.isArray(e))return!0;let t=Object.getPrototypeOf(e);return t===null||t===Object.prototype}function s(e,t){let n=Array.isArray(e)?e:Object.values(e);for(let e of n)t.push(e)}function c(e){let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}var l=class{container;constructor(e){this.container=e}};function u(e,t,n,r){return n.has(e)?!1:r.has(e)?!0:o(e)?(n.add(e),t.push(new l(e)),s(e,t),!0):!1}function d(e){let t=[e],n=new WeakSet,r=new WeakSet;for(;t.length>0;){let e=t.pop();if(e instanceof l){n.delete(e.container),r.add(e.container);continue}if(e!=null){if(typeof e==`object`){if(!u(e,t,n,r))return!1;continue}if(!c(e))return!1}}return!0}function f(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}function p(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;let n=!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let r=e[t];if(!f(r)){let e=typeof r;if(e===`function`||e===`symbol`)return!1;n=!0;break}}return n?d(e):!0}function m(e){return a(e.name)&&typeof e.path==`string`&&p(e.params)}function h(e){return!(typeof e!=`object`||!e||!m(e))}function g(e,t,n){return h(e.state)?t.makeState(e.state.name,e.state.params,e.state.path):t.matchPath(n)}function _(e,t,n,r){let i={name:e.name,params:e.params,path:e.path};n?r.replaceState(i,t):r.pushState(i,t)}function v(e,t,n){return r=>{if(r)for(let i of Object.keys(r)){if(!(i in e))continue;let a=r[i];if(a===void 0)continue;let o=typeof e[i],s=typeof a;if(s!==o)throw Error(`[${t}] Invalid type for '${i}': expected ${o}, got ${s}`);let c=n?.[i];if(c){let e=c.validate(a);if(e!==null)throw Error(`[${t}] Invalid '${i}': ${e}`)}}}}const y=/[\u0000-\u001F\u007F]/,b={validate:e=>y.test(e)?`must not contain control characters`:e.split(`/`).includes(`..`)?`must not contain '..' segments`:null},x={validate:e=>y.test(e)?`must not contain control characters`:e.includes(`/`)?`must not contain '/' (slash is added before the path automatically)`:e.includes(`#`)?`must not contain '#' (it is added as the hash delimiter)`:e.includes(`?`)?`must not contain '?' (it conflicts with the query delimiter)`:null},S=()=>globalThis.window!==void 0&&!!globalThis.history,C=(e,t)=>{globalThis.history.pushState(e,``,t)},w=(e,t)=>{globalThis.history.replaceState(e,``,t)},T=e=>(globalThis.addEventListener(`popstate`,e),()=>{globalThis.removeEventListener(`popstate`,e)}),E=()=>globalThis.location.hash,D=()=>{},O=e=>{let t=!1;return n=>{t||=(console.warn(`[browser-env] Browser API is running in a non-browser environment (context: "${e}"). Method "${n}" is a no-op. This is expected for SSR, but may indicate misconfiguration if you expected browser behavior.`),!0)}},k=e=>{let t=O(e);return{pushState:()=>{t(`pushState`)},replaceState:()=>{t(`replaceState`)},addPopstateListener:()=>(t(`addPopstateListener`),D),getHash:()=>(t(`getHash`),``)}};function A(e,t){if(S())return{pushState:C,replaceState:w,addPopstateListener:T,getLocation:e,getHash:E};let n=O(t);return{...k(t),getLocation:()=>(n(`getLocation`),``)}}function j(e,t){if(!e.getCurrentHash)return{};let n=e.getCurrentHash();return n!==(e.getCurrentContextHash?e.getCurrentContextHash():``)&&e.router.getState()?.path===t?{hash:n,force:!0,hashChange:!0}:{hash:n}}function M(e){let n=!1,r=null;function i(){if(r){let{evt:t,location:n}=r;r=null,console.warn(`[${e.loggerContext}] Processing deferred popstate event`),s(t,n)}}function a(){let t=e.router.getState();if(!t)return;let n=t.context?.url?.hash,r=e.buildUrl(t.name,t.params,n?{hash:n}:void 0);e.browser.replaceState(t,r)}function o(t){console.error(`[${e.loggerContext}] Critical error in onPopState`,t);try{a()}catch(t){console.error(`[${e.loggerContext}] Failed to recover from critical error`,t)}}async function s(s,c){if(n){console.warn(`[${e.loggerContext}] Transition in progress, deferring popstate event`),r={evt:s,location:c};return}n=!0;try{let n=g(s,e.api,c);if(n)await e.api.navigateToState(n,{...e.transitionOptions,...j(e,n.path)});else if(e.allowNotFound)e.router.navigateToNotFound(c);else{let n=new t.RouterError(t.errorCodes.ROUTE_NOT_FOUND,{path:c});e.api.emitTransitionError(n),a()}}catch(e){if(e instanceof t.RouterError)try{a()}catch{}else o(e)}finally{n=!1,i()}}return t=>void s(t,e.browser.getLocation())}function N(e){return{onStart:()=>{e.shared.removePopStateListener&&e.shared.removePopStateListener(),e.shared.removePopStateListener=e.browser.addPopstateListener(e.handler)},onStop:()=>{e.shared.removePopStateListener&&(e.shared.removePopStateListener(),e.shared.removePopStateListener=void 0)},teardown:()=>{e.shared.removePopStateListener&&(e.shared.removePopStateListener(),e.shared.removePopStateListener=void 0),e.cleanup()}}}function P(e){return encodeURI(e).replaceAll(`#`,`%23`)}function F(e){try{return decodeURIComponent(e)}catch{return e}}function I(e){let t=e;for(;t.startsWith(`#`);)t=t.slice(1);return F(t)}const L=new Set([`/`,`?`,`#`]);function R(e){let t=e,n=t.indexOf(`://`);if(n!==-1){let e=n+3,r=t.length;for(let n=e;n<t.length;n++){let e=t[n];if(L.has(e)){r=n;break}}t=r===t.length?`/`:t.slice(r),(t.startsWith(`?`)||t.startsWith(`#`))&&(t=`/${t}`)}let r=t.indexOf(`#`),i=r===-1?``:t.slice(r),a=r===-1?t:t.slice(0,r),o=a.indexOf(`?`),s=o===-1?``:a.slice(o);return{pathname:o===-1?a:a.slice(0,o),search:s,hash:i}}function z(e,t){return e.addInterceptor(`start`,(e,n)=>e(n??t.getLocation()))}function B(e,t,n,r,i=!0){let a={name:``,params:{},path:``};return(o,s={},c)=>{let l=e.buildState(o,s);if(!l)throw Error(`[real-router] Cannot replace state: route "${o}" is not found`);let u=e.makeState(l.name,l.params,t.buildPath(l.name,l.params),{params:l.meta}),d;if(c?.hash!==void 0){let e=I(c.hash);d=e?`#${P(e)}`:``}else d=i?n.getHash():``;let f=r(o,s)+d;a.name=u.name,a.params=u.params,a.path=u.path,n.replaceState(a,f)}}function V(e,t,n){return e.replace===!0?!0:n?!!e.reload&&t.path===n.path:e.replace!==!1}const H={hashPrefix:``,base:``,forceDeactivate:!0},U=`hash-plugin`;function W(e){return e.replaceAll(/[$()*+.?[\\\]^{|}-]/g,String.raw`\$&`)}function G(e){return e?RegExp(`^#${W(e)}`):null}function K(e,t){return e===``||e===`#`?`/`:(t?e.replace(t,``):e.slice(1))||`/`}function q(e,t){let n=R(e),r=K(n.hash,t);return r.includes(`?`)?r:r+n.search}function J(e,t,n){let i=r(K(e,n));return i.includes(`?`)?i:i+t}var Y=class{#e;#t;#n;#r;#i;#a;constructor(e,t,n,r,i,a,o){this.#e=e,this.#t=r,this.#n=z(t,r);let s=!1,c=()=>{s||(s=!0,console.warn("[@real-router/hash-plugin] `hash` option is ignored — `#` is reserved for the route delimiter. URL fragments are not supported with hash-plugin; use @real-router/browser-plugin or @real-router/navigation-plugin if you need them."))},l=`${n.base}#${n.hashPrefix}`,u=(t,n,r)=>(r?.hash!==void 0&&c(),l+e.buildPath(t,n));this.#a=c,this.#r=t.extendRouter({buildUrl:u,matchUrl:e=>t.matchPath(q(e,i))??void 0,replaceHistoryState:B(t,e,r,u,!1)});let d=M({router:e,api:t,browser:r,allowNotFound:t.getOptions().allowNotFound,transitionOptions:a,loggerContext:U,buildUrl:u});this.#i=N({browser:r,shared:o,handler:d,cleanup:()=>{this.#n(),this.#r()}})}getPlugin(){return{...this.#i,onTransitionSuccess:(e,t,n)=>{n.hash!==void 0&&this.#a();let r=V(n,e,t);_(e,this.#e.buildUrl(e.name,e.params),r,this.#t)}}}};const X=v(H,U,{base:b,hashPrefix:x});function Z(t,r){X(t);let i=t?Object.fromEntries(Object.entries(t).filter(([,e])=>e!==void 0)):{},a={...H,...i};a.base=n(a.base);let o=G(a.hashPrefix),s=r??A(()=>J(globalThis.location.hash,globalThis.location.search,o),`hash-plugin`),c={forceDeactivate:a.forceDeactivate,source:`popstate`,replace:!0},l={removePopStateListener:void 0};return function(t){return new Y(t,(0,e.getPluginApi)(t),a,s,o,c,l).getPlugin()}}exports.hashPluginFactory=Z,exports.isState=h;
 //# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["isState","RouterError","errorCodes","#router","#browser","#removeStartInterceptor","#removeExtensions","#lifecycle","#warnHashIgnored"],"sources":["../../../../shared/browser-env/utils.ts","../../../type-guards/dist/esm/index.mjs","../../../../shared/browser-env/popstate-utils.ts","../../../../shared/browser-env/validation.ts","../../../../shared/browser-env/detect.ts","../../../../shared/browser-env/history-api.ts","../../../../shared/browser-env/ssr-fallback.ts","../../../../shared/browser-env/safe-browser.ts","../../../../shared/browser-env/popstate-handler.ts","../../../../shared/browser-env/url-context.ts","../../../../shared/browser-env/url-parsing.ts","../../../../shared/browser-env/plugin-utils.ts","../../src/constants.ts","../../src/hash-utils.ts","../../src/plugin.ts","../../src/validation.ts","../../src/factory.ts"],"sourcesContent":["/**\n * Normalizes base path to canonical form: leading slash, no trailing slash,\n * no repeated slashes. Isolated \"/\" collapses to \"\".\n *\n * @example\n * normalizeBase(\"app\")     // \"/app\"\n * normalizeBase(\"/app/\")   // \"/app\"\n * normalizeBase(\"//app//\") // \"/app\"\n * normalizeBase(\"\")        // \"\"\n * normalizeBase(\"/\")       // \"\"\n */\nexport function normalizeBase(base: string): string {\n  if (!base) {\n    return base;\n  }\n\n  let result = base.replaceAll(/\\/+/g, \"/\");\n\n  if (!result.startsWith(\"/\")) {\n    result = `/${result}`;\n  }\n\n  if (result.length > 1 && result.endsWith(\"/\")) {\n    result = result.slice(0, -1);\n  }\n\n  return result === \"/\" ? \"\" : result;\n}\n\nexport const safelyEncodePath = (path: string): string => {\n  try {\n    return encodeURI(decodeURI(path));\n  } catch (error) {\n    console.warn(`[browser-env] Could not encode path \"${path}\"`, error);\n\n    return path;\n  }\n};\n","const e=[`replace`,`reload`,`force`,`forceDeactivate`,`redirected`];function t(t){if(typeof t!=`object`||!t||Array.isArray(t))return!1;let n=t;for(let t of e){let e=n[t];if(e!==void 0&&typeof e!=`boolean`)return!1}let r=n.signal;return!(r!==void 0&&!(r instanceof AbortSignal))}const n=/\\S/,r=/^[A-Z_a-z][\\w-]*(?:\\.[A-Z_a-z][\\w-]*)*$/;function i(e,t){return TypeError(`[router.${e}] ${t}`)}function a(e){return typeof e==`string`?e===``?!0:e.length>1e4?!1:e.startsWith(`@@`)?!0:r.test(e):!1}function o(e,t=new WeakSet){if(e==null)return!0;let n=typeof e;if(n===`string`||n===`boolean`)return!0;if(n===`number`)return Number.isFinite(e);if(n===`function`||n===`symbol`)return!1;if(Array.isArray(e))return t.has(e)?!1:(t.add(e),e.every(e=>o(e,t)));if(n===`object`){if(t.has(e))return!1;t.add(e);let n=Object.getPrototypeOf(e);return n!==null&&n!==Object.prototype?!1:Object.values(e).every(e=>o(e,t))}return!1}function s(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}function c(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;let n=!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let r=e[t];if(!s(r)){let e=typeof r;if(e===`function`||e===`symbol`)return!1;n=!0;break}}return n?o(e):!0}function l(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):Array.isArray(e)?e.every(e=>{let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}):!1}function u(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let n=e[t];if(!l(n))return!1}return!0}function d(e){return a(e.name)&&typeof e.path==`string`&&c(e.params)}function f(e){return typeof e!=`object`||!e?!1:d(e)}function p(e){return!(typeof e!=`object`||!e||!d(e))}function m(e){return typeof e==`string`}function h(e){return typeof e==`boolean`}function g(e,t){return e in t}function _(e){return typeof e==`number`?Number.isFinite(e):typeof e==`string`||typeof e==`boolean`}function v(e,t){if(typeof e!=`string`)throw i(t,`Route name must be a string, got ${typeof e}`);if(e!==``){if(!n.test(e))throw i(t,`Route name cannot contain only whitespace`);if(e.length>1e4)throw i(t,`Route name exceeds maximum length of 10000 characters. This is a technical safety limit.`);if(!e.startsWith(`@@`)&&!r.test(e))throw i(t,`Invalid route name \"${e}\". Each segment must start with a letter or underscore, followed by letters, numbers, underscores, or hyphens. Segments are separated by dots (e.g., \"users.profile\").`)}}function y(e){return e===null?`null`:Array.isArray(e)?`array[${e.length}]`:typeof e==`object`?`constructor`in e&&e.constructor.name!==`Object`?e.constructor.name:`object`:typeof e}function b(e,t){if(!f(e))throw TypeError(`[${t}] Invalid state structure: ${y(e)}. Expected State object with name, params, and path properties.`)}export{y as getTypeDescription,h as isBoolean,t as isNavigationOptions,g as isObjKey,c as isParams,u as isParamsStrict,_ as isPrimitiveValue,a as isRouteName,f as isState,p as isStateStrict,m as isString,v as validateRouteName,b as validateState};\n//# sourceMappingURL=index.mjs.map","import { isStateStrict as isState } from \"type-guards\";\n\nimport type { Browser } from \"./types.js\";\nimport type { State, Params } from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\n/**\n * Resolves the popstate event into a navigation-ready `State`.\n *\n * - If `history.state` is a valid router state ({name, params, path} written\n *   by browser-plugin/hash-plugin during their previous navigation), it is\n *   the source of truth — synthesize a fully-typed `State` from it via\n *   `api.makeState`. The synthesized `transition`/`context` fields are\n *   placeholders; the navigation pipeline (`completeTransition` and plugin\n *   claim writes) replaces them.\n * - Otherwise (e.g. manually entered URL with no recorded state), fall back\n *   to `api.matchPath(location)`. `location` is the route location the caller\n *   captured when the popstate event fired — each plugin derives it from its\n *   own `browser.getLocation()` (URL pathname for browser-plugin, hash-derived\n *   path for hash-plugin), so the fallback works for both.\n * - `undefined` when neither path produces a match.\n *\n * The caller passes the location it snapshotted at event time rather than\n * letting this function re-read `browser.getLocation()`: a deferred popstate\n * is processed only after the in-flight navigation's `replaceState` has\n * already overwritten the live location, so a late read would resolve the\n * wrong target (#757).\n *\n * Replaces the previous `{ name, params }` shape so the caller can hand\n * the State directly to `router.navigateToState(state, opts)` and skip\n * the redundant `forwardState`/`buildPath` round-trip in\n * `buildNavigateState` (issue #525).\n */\nexport function getRouteFromEvent(\n  evt: PopStateEvent,\n  api: PluginApi,\n  location: string,\n): State | undefined {\n  if (isState(evt.state)) {\n    return api.makeState(evt.state.name, evt.state.params, evt.state.path);\n  }\n\n  return api.matchPath(location);\n}\n\n/**\n * Updates browser state (pushState or replaceState)\n *\n * @param state - Router state\n * @param url - URL to set\n * @param replace - Whether to replace instead of push\n * @param browser - Browser API instance\n */\nexport function updateBrowserState(\n  state: State,\n  url: string,\n  replace: boolean,\n  browser: Browser,\n): void {\n  const historyState = {\n    name: state.name,\n    params: state.params,\n    path: state.path,\n  };\n\n  if (replace) {\n    browser.replaceState(historyState, url);\n  } else {\n    browser.pushState(historyState, url);\n  }\n}\n\n/**\n * Creates a `updateBrowserState` closure that reuses a single mutable buffer\n * across calls instead of allocating a fresh `{ name, params, path }` object\n * per push/replace.\n *\n * Why: Browsers structured-clone `history.state` synchronously inside\n * `pushState`/`replaceState`, so the caller never sees the buffer escape —\n * it can be safely overwritten before the next call. Eliminates one\n * allocation per navigation on the hot path.\n *\n * Each plugin instance must own its own buffer (do not share across plugins).\n */\nexport function createUpdateBrowserState(): (\n  state: State,\n  url: string,\n  replace: boolean,\n  browser: Browser,\n) => void {\n  const buffer = {\n    name: \"\",\n    params: {} as Params,\n    path: \"\",\n  };\n\n  return (state, url, replace, browser) => {\n    buffer.name = state.name;\n    buffer.params = state.params;\n    buffer.path = state.path;\n\n    if (replace) {\n      browser.replaceState(buffer, url);\n    } else {\n      browser.pushState(buffer, url);\n    }\n  };\n}\n","export interface OptionRule<T> {\n  validate: (value: T) => string | null;\n}\n\nexport type OptionRules<T extends object> = {\n  [K in keyof T]?: OptionRule<NonNullable<T[K]>>;\n};\n\nexport function createOptionsValidator<T extends object>(\n  defaults: Required<T>,\n  loggerContext: string,\n  rules?: OptionRules<T>,\n): (opts: Partial<T> | undefined) => void {\n  return (opts) => {\n    if (!opts) {\n      return;\n    }\n\n    for (const key of Object.keys(opts)) {\n      if (!(key in defaults)) {\n        continue;\n      }\n\n      const value = opts[key as keyof typeof opts];\n\n      if (value === undefined) {\n        continue;\n      }\n\n      const expected = typeof defaults[key as keyof typeof defaults];\n      const actual = typeof value;\n\n      if (actual !== expected) {\n        throw new Error(\n          `[${loggerContext}] Invalid type for '${key}': expected ${expected}, got ${actual}`,\n        );\n      }\n\n      const rule = rules?.[key as keyof T];\n\n      if (rule) {\n        const msg = (rule.validate as (input: unknown) => string | null)(value);\n\n        if (msg !== null) {\n          throw new Error(`[${loggerContext}] Invalid '${key}': ${msg}`);\n        }\n      }\n    }\n  };\n}\n\n// eslint-disable-next-line no-control-regex -- control characters are exactly what this rule rejects\nconst CONTROL_CHARS = /[\\u0000-\\u001F\\u007F]/;\n\nexport const safeBaseRule: OptionRule<string> = {\n  validate: (value) => {\n    if (CONTROL_CHARS.test(value)) {\n      return \"must not contain control characters\";\n    }\n\n    if (value.split(\"/\").includes(\"..\")) {\n      return \"must not contain '..' segments\";\n    }\n\n    return null;\n  },\n};\n\nexport const safeHashPrefixRule: OptionRule<string> = {\n  validate: (value) => {\n    if (CONTROL_CHARS.test(value)) {\n      return \"must not contain control characters\";\n    }\n\n    if (value.includes(\"/\")) {\n      return \"must not contain '/' (slash is added before the path automatically)\";\n    }\n\n    if (value.includes(\"#\")) {\n      return \"must not contain '#' (it is added as the hash delimiter)\";\n    }\n\n    if (value.includes(\"?\")) {\n      return \"must not contain '?' (it conflicts with the query delimiter)\";\n    }\n\n    return null;\n  },\n};\n\nexport const nonNegativeIntegerRule: OptionRule<number> = {\n  validate: (value) => {\n    if (!Number.isFinite(value)) {\n      return `expected finite number, got ${String(value)}`;\n    }\n\n    if (!Number.isInteger(value)) {\n      return `expected integer, got ${String(value)}`;\n    }\n\n    if (value < 0) {\n      return `expected non-negative integer, got ${value}`;\n    }\n\n    return null;\n  },\n};\n","export const isBrowserEnvironment = (): boolean =>\n  typeof globalThis.window !== \"undefined\" && !!globalThis.history;\n","import type { HistoryBrowser } from \"./types.js\";\n\nexport const pushState = (state: unknown, path: string): void => {\n  globalThis.history.pushState(state, \"\", path);\n};\n\nexport const replaceState = (state: unknown, path: string): void => {\n  globalThis.history.replaceState(state, \"\", path);\n};\n\nexport const addPopstateListener: HistoryBrowser[\"addPopstateListener\"] = (\n  fn,\n) => {\n  globalThis.addEventListener(\"popstate\", fn);\n\n  return () => {\n    globalThis.removeEventListener(\"popstate\", fn);\n  };\n};\n\nexport const getHash = (): string => globalThis.location.hash;\n","import type { HistoryBrowser } from \"./types.js\";\n\nconst NOOP = (): void => {};\n\nexport const createWarnOnce = (context: string) => {\n  let hasWarned = false;\n\n  return (method: string): void => {\n    if (!hasWarned) {\n      console.warn(\n        `[browser-env] Browser API is running in a non-browser environment (context: \"${context}\"). ` +\n          `Method \"${method}\" is a no-op. ` +\n          `This is expected for SSR, but may indicate misconfiguration if you expected browser behavior.`,\n      );\n      hasWarned = true;\n    }\n  };\n};\n\nexport const createHistoryFallbackBrowser = (\n  context: string,\n): HistoryBrowser => {\n  const warnOnce = createWarnOnce(context);\n\n  return {\n    pushState: () => {\n      warnOnce(\"pushState\");\n    },\n    replaceState: () => {\n      warnOnce(\"replaceState\");\n    },\n    addPopstateListener: () => {\n      warnOnce(\"addPopstateListener\");\n\n      return NOOP;\n    },\n    getHash: () => {\n      warnOnce(\"getHash\");\n\n      return \"\";\n    },\n  };\n};\n","import { isBrowserEnvironment } from \"./detect.js\";\nimport {\n  pushState,\n  replaceState,\n  addPopstateListener,\n  getHash,\n} from \"./history-api.js\";\nimport {\n  createWarnOnce,\n  createHistoryFallbackBrowser,\n} from \"./ssr-fallback.js\";\n\nimport type { Browser } from \"./types.js\";\n\nexport function createSafeBrowser(\n  getLocation: () => string,\n  context: string,\n): Browser {\n  if (isBrowserEnvironment()) {\n    return {\n      pushState,\n      replaceState,\n      addPopstateListener,\n      getLocation,\n      getHash,\n    };\n  }\n\n  const warnOnce = createWarnOnce(context);\n\n  return {\n    ...createHistoryFallbackBrowser(context),\n    getLocation: () => {\n      warnOnce(\"getLocation\");\n\n      return \"\";\n    },\n  };\n}\n","import { errorCodes, RouterError } from \"@real-router/core\";\n\nimport { getRouteFromEvent } from \"./popstate-utils.js\";\n\nimport type { Browser, SharedFactoryState } from \"./types.js\";\nimport type { Params, Plugin, Router } from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\n/**\n * Navigation options used by the popstate handler to trigger a\n * router.navigate() call from a back/forward event. `source` identifies\n * the origin of the transition to downstream context consumers;\n * `replace: true` keeps the history stack in sync with the browser.\n */\nexport interface PopstateTransitionOptions {\n  source: string;\n  replace: true;\n  forceDeactivate?: boolean;\n}\n\nexport interface PopstateHandlerDeps {\n  router: Router;\n  api: PluginApi;\n  browser: Browser;\n  allowNotFound: boolean;\n  transitionOptions: PopstateTransitionOptions;\n  loggerContext: string;\n  buildUrl: (\n    name: string,\n    params?: Params,\n    options?: { hash?: string },\n  ) => string;\n  /**\n   * Decoded hash of the current browser location (no leading \"#\"). Defaults\n   * to a no-op (returns \"\") for plugins that do not participate in URL\n   * fragment tracking — namely hash-plugin, where `#` is the route delimiter.\n   * (#532)\n   */\n  getCurrentHash?: () => string;\n  /**\n   * Decoded hash from the previous transition's `state.context.url.hash`\n   * (no leading \"#\"). Used by the popstate handler to detect hash-only\n   * navigation and add `force: true, hashChange: true` to bypass SAME_STATES.\n   * Defaults to no-op (returns \"\") for hash-plugin. (#532)\n   */\n  getCurrentContextHash?: () => string;\n}\n\n/**\n * Hash augmentation for popstate-driven navigateToState (#532).\n * Returns a partial options object that the caller spreads on top of\n * `deps.transitionOptions`. When the handler is wired without hash support\n * (hash-plugin), both deps default to undefined and an empty object is\n * returned — preserving the legacy behavior for that plugin.\n */\nfunction resolveHashOptions(\n  deps: PopstateHandlerDeps,\n  matchedPath: string,\n): { hash?: string; force?: true; hashChange?: true } {\n  if (!deps.getCurrentHash) {\n    return {};\n  }\n\n  const newHash = deps.getCurrentHash();\n  const prevHash = deps.getCurrentContextHash\n    ? deps.getCurrentContextHash()\n    : \"\";\n  const hashChange =\n    newHash !== prevHash && deps.router.getState()?.path === matchedPath;\n\n  return hashChange\n    ? { hash: newHash, force: true, hashChange: true }\n    : { hash: newHash };\n}\n\nexport function createPopstateHandler(\n  deps: PopstateHandlerDeps,\n): (evt: PopStateEvent) => void {\n  let isTransitioning = false;\n  // Snapshot the route location alongside the event: a deferred popstate is\n  // replayed only after the in-flight navigation's onTransitionSuccess →\n  // replaceState has overwritten the live location, so re-reading it at\n  // replay time would resolve the wrong target (#757).\n  let deferred: { evt: PopStateEvent; location: string } | null = null;\n\n  function processDeferredEvent(): void {\n    if (deferred) {\n      const { evt, location } = deferred;\n\n      deferred = null;\n      console.warn(\n        `[${deps.loggerContext}] Processing deferred popstate event`,\n      );\n      void onPopState(evt, location);\n    }\n  }\n\n  function rollbackUrlToCurrentState(): void {\n    const currentState = deps.router.getState();\n\n    /* v8 ignore next -- @preserve: router always has state after start(); defensive guard for edge cases */\n    if (!currentState) {\n      return;\n    }\n\n    // Preserve hash on rollback so guard rejection / unmatched URL on\n    // popstate doesn't strip the fragment from the visible URL (#532).\n    const ctxHash = (\n      currentState.context as { url?: { hash?: string } } | undefined\n    )?.url?.hash;\n    const url = deps.buildUrl(\n      currentState.name,\n      currentState.params,\n      ctxHash ? { hash: ctxHash } : undefined,\n    );\n\n    deps.browser.replaceState(currentState, url);\n  }\n\n  function recoverFromCriticalError(error: unknown): void {\n    console.error(\n      `[${deps.loggerContext}] Critical error in onPopState`,\n      error,\n    );\n\n    try {\n      rollbackUrlToCurrentState();\n    } catch (recoveryError) {\n      console.error(\n        `[${deps.loggerContext}] Failed to recover from critical error`,\n        recoveryError,\n      );\n    }\n  }\n\n  async function onPopState(\n    evt: PopStateEvent,\n    location: string,\n  ): Promise<void> {\n    if (isTransitioning) {\n      console.warn(\n        `[${deps.loggerContext}] Transition in progress, deferring popstate event`,\n      );\n      deferred = { evt, location };\n\n      return;\n    }\n\n    isTransitioning = true;\n\n    try {\n      const matched = getRouteFromEvent(evt, deps.api, location);\n\n      if (matched) {\n        // api.navigateToState — plugin-only entry point. Preserves\n        // matchSourceTrailingSlash output and skips the redundant\n        // forwardState/buildPath round-trip (#525). Hash augmentation (#532)\n        // extracted into resolveHashOptions so this branch stays readable.\n        await deps.api.navigateToState(matched, {\n          ...deps.transitionOptions,\n          ...resolveHashOptions(deps, matched.path),\n        });\n      } else if (deps.allowNotFound) {\n        deps.router.navigateToNotFound(location);\n      } else {\n        // Strict mode — unmatched URL is an error. Emit $$error and sync URL\n        // back to the current router state (no silent fallback to defaultRoute).\n        const err = new RouterError(errorCodes.ROUTE_NOT_FOUND, {\n          path: location,\n        });\n\n        deps.api.emitTransitionError(err);\n        rollbackUrlToCurrentState();\n      }\n    } catch (error) {\n      if (error instanceof RouterError) {\n        // navigate() already emitted $$error — just sync URL with router state.\n        // Swallow rollback errors: teardown races may remove router.buildUrl\n        // while a popstate event is still queued.\n        try {\n          rollbackUrlToCurrentState();\n        } catch {\n          // noop — nothing safe to do here\n        }\n      } else {\n        recoverFromCriticalError(error);\n      }\n    } finally {\n      isTransitioning = false;\n      processDeferredEvent();\n    }\n  }\n\n  // Snapshot the location the instant the event fires — before any in-flight\n  // navigation can overwrite it via replaceState (#757).\n  return (evt: PopStateEvent) =>\n    void onPopState(evt, deps.browser.getLocation());\n}\n\nexport interface PopstateLifecycleDeps {\n  browser: Browser;\n  shared: SharedFactoryState;\n  handler: (evt: PopStateEvent) => void;\n  cleanup: () => void;\n}\n\nexport function createPopstateLifecycle(\n  deps: PopstateLifecycleDeps,\n): Pick<Plugin, \"onStart\" | \"onStop\" | \"teardown\"> {\n  return {\n    onStart: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n      }\n\n      deps.shared.removePopStateListener = deps.browser.addPopstateListener(\n        deps.handler,\n      );\n    },\n\n    onStop: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n        deps.shared.removePopStateListener = undefined;\n      }\n    },\n\n    teardown: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n        deps.shared.removePopStateListener = undefined;\n      }\n\n      deps.cleanup();\n    },\n  };\n}\n","/**\n * URL fragment (\"hash\") shared layer (#532).\n *\n * Both URL plugins (navigation-plugin, browser-plugin) claim the `\"url\"`\n * `state.context` namespace and write `UrlContext` on every transition.\n * Mutually exclusive at runtime — only one URL plugin is installed per router.\n *\n * Hash form: decoded, no leading \"#\" — symmetric to `params` (no leading \"?\").\n * Encoding to/from URL form happens at the boundary (URL build / URL parse).\n */\n\nexport interface UrlContext {\n  /** Decoded fragment, no leading \"#\". Empty string when URL has no fragment. */\n  hash: string;\n  /** Whether `hash` differs from the previous transition's `state.context.url.hash`. */\n  hashChanged: boolean;\n}\n\n/**\n * Encode for URL fragment per RFC 3986: preserves sub-delims (`&`, `=`, `?`,\n * `:`, etc.) and the path/query characters that `encodeURI` already leaves\n * alone. Defensively percent-escapes `#` (a stray `#` in a decoded fragment\n * would otherwise terminate the fragment in the rendered URL).\n *\n * `encodeURIComponent` over-encodes RFC-3986 sub-delims (`&` → `%26`) and is\n * therefore wrong for fragments.\n */\nexport function encodeHashFragment(decoded: string): string {\n  return encodeURI(decoded).replaceAll(\"#\", \"%23\");\n}\n\n/**\n * Decode a percent-encoded fragment. Falls back to the raw input on malformed\n * escapes — matches the resilience pattern in scroll-restore.\n */\nexport function decodeHashFragment(encoded: string): string {\n  try {\n    return decodeURIComponent(encoded);\n  } catch {\n    return encoded;\n  }\n}\n\n/**\n * Normalize user-provided hash input: strip ALL leading \"#\" characters, then\n * decode. Defensive against `<Link hash=\"#section\">` — the prop is documented\n * to accept the fragment name without \"#\", but we accept both gracefully.\n *\n * Stripping a single \"#\" would leave the function non-idempotent on\n * pathological inputs like `\"##section\"` (caller's accidental double-hash,\n * concatenation bugs). Property test G9 in `hash-encoding.properties.ts`\n * locks in idempotence — `normalize(normalize(x)) === normalize(x)`.\n */\nexport function normalizeHashInput(input: string): string {\n  let stripped = input;\n\n  while (stripped.startsWith(\"#\")) {\n    stripped = stripped.slice(1);\n  }\n\n  return decodeHashFragment(stripped);\n}\n\n/**\n * Read the current browser hash in decoded form, no leading \"#\".\n * Accepts any object with a `getHash()` method — works for both `Browser`\n * (History API) and `NavigationBrowser` (Navigation API). SSR-safe via the\n * abstractions, which return `\"\"` outside a real browser.\n */\nexport function getDecodedHash(browser: { getHash: () => string }): string {\n  const raw = browser.getHash();\n\n  if (!raw) {\n    return \"\";\n  }\n\n  const stripped = raw.startsWith(\"#\") ? raw.slice(1) : raw;\n\n  return decodeHashFragment(stripped);\n}\n","export interface ParsedUrl {\n  pathname: string;\n  search: string;\n  hash: string;\n}\n\n/**\n * Scheme-agnostic URL parser.\n *\n * Extracts `pathname`, `search`, and `hash` from any string — absolute\n * (`scheme://authority/path?q#h`), path-relative (`/path?q#h`), or opaque\n * (`data:...`, `javascript:...`). Never throws, never returns null.\n *\n * Routing does not care about scheme or authority, only about the path part.\n * This keeps `browser-plugin`, `navigation-plugin`, and `hash-plugin` working\n * in Electron (`file://`, `app://`), Tauri (`tauri://`, `https://`), and any\n * other webview that may ship with non-HTTP origins. See issue #496.\n */\nconst URL_DELIMITERS: ReadonlySet<string> = new Set([\"/\", \"?\", \"#\"]);\n\nexport function safeParseUrl(url: string): ParsedUrl {\n  let rest = url;\n\n  const schemeIdx = rest.indexOf(\"://\");\n\n  if (schemeIdx !== -1) {\n    const authorityStart = schemeIdx + 3;\n    let pathStart = rest.length;\n\n    for (let i = authorityStart; i < rest.length; i++) {\n      const ch = rest[i];\n\n      if (URL_DELIMITERS.has(ch)) {\n        pathStart = i;\n\n        break;\n      }\n    }\n\n    rest = pathStart === rest.length ? \"/\" : rest.slice(pathStart);\n\n    if (rest.startsWith(\"?\") || rest.startsWith(\"#\")) {\n      rest = `/${rest}`;\n    }\n  }\n\n  const hashIdx = rest.indexOf(\"#\");\n  const hash = hashIdx === -1 ? \"\" : rest.slice(hashIdx);\n  const beforeHash = hashIdx === -1 ? rest : rest.slice(0, hashIdx);\n\n  const queryIdx = beforeHash.indexOf(\"?\");\n  const search = queryIdx === -1 ? \"\" : beforeHash.slice(queryIdx);\n  const pathname = queryIdx === -1 ? beforeHash : beforeHash.slice(0, queryIdx);\n\n  return { pathname, search, hash };\n}\n","import { encodeHashFragment, normalizeHashInput } from \"./url-context.js\";\nimport { buildUrl } from \"./url-utils.js\";\n\nimport type {\n  NavigationOptions,\n  Params,\n  Router,\n  State,\n} from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\nexport interface LocationSource {\n  getLocation: () => string;\n}\n\n/**\n * Minimal browser surface needed by `createReplaceHistoryState`.\n *\n * Both `Browser` (History API) and navigation-plugin's `NavigationBrowser`\n * (Navigation API) satisfy this structurally — the function never needs\n * `pushState`/`addPopstateListener`, only the replace path.\n */\nexport interface ReplaceStateBrowser {\n  replaceState: (state: unknown, url: string) => void;\n  getHash: () => string;\n}\n\n/**\n * Hash override option for `replaceHistoryState` (#532). Tri-state semantics:\n *   `undefined`  — preserve the current browser hash (legacy behavior, default)\n *   `\"\"`         — explicitly clear the fragment\n *   non-empty    — explicitly set the fragment (decoded form, no leading \"#\")\n */\nexport interface ReplaceHistoryStateOptions {\n  hash?: string;\n}\n\nexport function createStartInterceptor(\n  api: PluginApi,\n  browser: LocationSource,\n): () => void {\n  return api.addInterceptor(\"start\", (next, path) =>\n    next(path ?? browser.getLocation()),\n  );\n}\n\n// Shared `buildUrl` extension for browser-plugin and navigation-plugin.\n// Composes router.buildPath + base prefixing + tri-state hash (#532) into the\n// single function the plugins register via `api.extendRouter({ buildUrl })`.\nexport function createPluginBuildUrl(\n  router: Router,\n  base: string,\n): (route: string, params?: Params, opts?: { hash?: string }) => string {\n  return (route, params, opts) => {\n    const path = router.buildPath(route, params);\n    const url = buildUrl(path, base);\n\n    if (opts?.hash === undefined) {\n      return url;\n    }\n\n    const norm = normalizeHashInput(opts.hash);\n\n    return norm ? `${url}#${encodeHashFragment(norm)}` : url;\n  };\n}\n\nexport function createReplaceHistoryState(\n  api: PluginApi,\n  router: Router,\n  browser: ReplaceStateBrowser,\n  buildUrlFn: (\n    name: string,\n    params?: Params,\n    options?: ReplaceHistoryStateOptions,\n  ) => string,\n  preserveHash = true,\n): (\n  name: string,\n  params?: Params,\n  options?: ReplaceHistoryStateOptions,\n) => void {\n  // Reusable buffer — browsers structured-clone state synchronously inside\n  // replaceState, so the buffer never escapes. Eliminates one allocation per\n  // navigation on the hot path. (Mirrors createUpdateBrowserState.)\n  const buffer = {\n    name: \"\",\n    params: {} as Params,\n    path: \"\",\n  };\n\n  return (\n    name: string,\n    params: Params = {},\n    options?: ReplaceHistoryStateOptions,\n  ) => {\n    const state = api.buildState(name, params);\n\n    if (!state) {\n      throw new Error(\n        `[real-router] Cannot replace state: route \"${name}\" is not found`,\n      );\n    }\n\n    const builtState = api.makeState(\n      state.name,\n      state.params,\n      router.buildPath(state.name, state.params),\n      {\n        params: state.meta,\n      },\n    );\n\n    // Tri-state hash semantics (#532):\n    //   options.hash === undefined → preserve (legacy behavior, controlled by\n    //                                preserveHash flag — true for browser/\n    //                                navigation plugins, false for hash-plugin)\n    //   options.hash === \"\"        → explicitly clear\n    //   options.hash === \"value\"   → explicitly set\n    let hashSegment: string;\n\n    if (options?.hash !== undefined) {\n      const norm = normalizeHashInput(options.hash);\n\n      hashSegment = norm ? `#${encodeHashFragment(norm)}` : \"\";\n    } else if (preserveHash) {\n      hashSegment = browser.getHash();\n    } else {\n      hashSegment = \"\";\n    }\n\n    // Pass hash through buildUrl when the plugin understands it (avoids\n    // double-append). Hash-plugin's buildUrl ignores the option and warns,\n    // so call without options here for semantic clarity — but the result is\n    // identical because hashSegment is \"\" in that branch (preserveHash=false).\n    const url = buildUrlFn(name, params) + hashSegment;\n\n    buffer.name = builtState.name;\n    buffer.params = builtState.params;\n    buffer.path = builtState.path;\n\n    browser.replaceState(buffer, url);\n  };\n}\n\nexport function shouldReplaceHistory(\n  navOptions: NavigationOptions,\n  toState: State,\n  fromState: State | undefined,\n): boolean {\n  if (navOptions.replace === true) {\n    return true;\n  }\n\n  if (!fromState) {\n    return navOptions.replace !== false;\n  }\n\n  return !!navOptions.reload && toState.path === fromState.path;\n}\n","// packages/hash-plugin/src/constants.ts\n\nimport type { HashPluginOptions } from \"./types\";\n\nexport const defaultOptions: Required<HashPluginOptions> = {\n  hashPrefix: \"\",\n  base: \"\",\n  forceDeactivate: true,\n};\n\n/**\n * Source identifier for transitions triggered by browser events.\n */\nexport const source = \"popstate\";\n\nexport const LOGGER_CONTEXT = \"hash-plugin\";\n","// packages/hash-plugin/src/hash-utils.ts\n\nimport { safelyEncodePath, safeParseUrl } from \"./browser-env\";\n\nfunction escapeRegExp(str: string): string {\n  return str.replaceAll(/[$()*+.?[\\\\\\]^{|}-]/g, String.raw`\\$&`);\n}\n\nexport function createHashPrefixRegex(hashPrefix: string): RegExp | null {\n  if (!hashPrefix) {\n    return null;\n  }\n\n  return new RegExp(`^#${escapeRegExp(hashPrefix)}`);\n}\n\n/**\n * Extract path from URL hash, stripping hash prefix.\n *\n * @param hash - URL hash (e.g., \"#/path\" or \"#!/path\")\n * @param prefixRegex - Pre-compiled regex for prefix stripping (null if no prefix)\n * @returns Extracted path (e.g., \"/path\")\n */\nexport function extractHashPath(\n  hash: string,\n  prefixRegex: RegExp | null,\n): string {\n  if (hash === \"\" || hash === \"#\") {\n    return \"/\";\n  }\n\n  const path = prefixRegex ? hash.replace(prefixRegex, \"\") : hash.slice(1);\n\n  return path || \"/\";\n}\n\nexport function hashUrlToPath(url: string, prefixRegex: RegExp | null): string {\n  const parsedUrl = safeParseUrl(url);\n  const hashPath = extractHashPath(parsedUrl.hash, prefixRegex);\n\n  return hashPath.includes(\"?\") ? hashPath : hashPath + parsedUrl.search;\n}\n\n/**\n * Build the router-side location string from a hash + query pair.\n *\n * Encodes the hash path via `safelyEncodePath` after stripping the\n * configured prefix, then appends the outer `search` only when the hash\n * path itself does not already carry a `?` — otherwise the outer search\n * would be duplicated (see `url.test.ts` — \"well-formed path (no double '?')\").\n *\n * Used by the `createSafeBrowser` `getLocation` callback both in the\n * production factory and in functional/stress test helpers. Extracting\n * here keeps the production path and test mocks aligned; a regression in\n * this logic previously slipped between the two.\n */\nexport function buildHashLocation(\n  hash: string,\n  search: string,\n  prefixRegex: RegExp | null,\n): string {\n  const hashPath = safelyEncodePath(extractHashPath(hash, prefixRegex));\n\n  return hashPath.includes(\"?\") ? hashPath : hashPath + search;\n}\n","import {\n  createPopstateHandler,\n  createPopstateLifecycle,\n  createStartInterceptor,\n  createReplaceHistoryState,\n  shouldReplaceHistory,\n  updateBrowserState,\n} from \"./browser-env\";\nimport { LOGGER_CONTEXT } from \"./constants\";\nimport { hashUrlToPath } from \"./hash-utils\";\n\nimport type { Browser, SharedFactoryState } from \"./browser-env\";\nimport type { HashPluginOptions } from \"./types\";\nimport type {\n  NavigationOptions,\n  Params,\n  Router,\n  State,\n  Plugin,\n} from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\nexport class HashPlugin {\n  readonly #router: Router;\n  readonly #browser: Browser;\n  readonly #removeStartInterceptor: () => void;\n  readonly #removeExtensions: () => void;\n  readonly #lifecycle: Pick<Plugin, \"onStart\" | \"onStop\" | \"teardown\">;\n  readonly #warnHashIgnored!: () => void;\n\n  constructor(\n    router: Router,\n    api: PluginApi,\n    options: Required<HashPluginOptions>,\n    browser: Browser,\n    prefixRegex: RegExp | null,\n    transitionOptions: {\n      source: string;\n      replace: true;\n      forceDeactivate?: boolean;\n    },\n    shared: SharedFactoryState,\n  ) {\n    this.#router = router;\n    this.#browser = browser;\n\n    this.#removeStartInterceptor = createStartInterceptor(api, browser);\n\n    // Hash limitation warn-once (#532). hash-plugin uses `#` as the route\n    // delimiter, so URL fragments are structurally incompatible. Plugin\n    // accepts the `hash` option for typing parity with browser/navigation\n    // plugins, ignores it, and emits a single console.warn the first time\n    // any consumer surfaces a hash. Existing `createWarnOnce` in browser-env\n    // is SSR-specific (different signature) — inline pattern here.\n    let hashWarned = false;\n    const warnHashIgnored = (): void => {\n      if (hashWarned) {\n        return;\n      }\n\n      hashWarned = true;\n      console.warn(\n        \"[@real-router/hash-plugin] `hash` option is ignored — `#` is reserved for the route delimiter. \" +\n          \"URL fragments are not supported with hash-plugin; use @real-router/browser-plugin or \" +\n          \"@real-router/navigation-plugin if you need them.\",\n      );\n    };\n\n    const urlPrefix = `${options.base}#${options.hashPrefix}`;\n    const pluginBuildUrl = (\n      route: string,\n      params?: Params,\n      opts?: { hash?: string },\n    ) => {\n      if (opts?.hash !== undefined) {\n        warnHashIgnored();\n      }\n\n      return urlPrefix + router.buildPath(route, params);\n    };\n\n    this.#warnHashIgnored = warnHashIgnored;\n\n    this.#removeExtensions = api.extendRouter({\n      buildUrl: pluginBuildUrl,\n      matchUrl: (url: string) =>\n        api.matchPath(hashUrlToPath(url, prefixRegex)) ?? undefined,\n      replaceHistoryState: createReplaceHistoryState(\n        api,\n        router,\n        browser,\n        pluginBuildUrl,\n        false,\n      ),\n    });\n\n    const handler = createPopstateHandler({\n      router,\n      api,\n      browser,\n      allowNotFound: api.getOptions().allowNotFound,\n      transitionOptions,\n      loggerContext: LOGGER_CONTEXT,\n      buildUrl: pluginBuildUrl,\n    });\n\n    this.#lifecycle = createPopstateLifecycle({\n      browser,\n      shared,\n      handler,\n      cleanup: () => {\n        this.#removeStartInterceptor();\n        this.#removeExtensions();\n      },\n    });\n  }\n\n  getPlugin(): Plugin {\n    return {\n      ...this.#lifecycle,\n\n      onTransitionSuccess: (\n        toState: State,\n        fromState: State | undefined,\n        navOptions: NavigationOptions,\n      ) => {\n        // Hash limitation (#532): warn once if a consumer programmatically\n        // requested a fragment via `router.navigate(..., { hash })`.\n        if (navOptions.hash !== undefined) {\n          this.#warnHashIgnored();\n        }\n\n        const replaceHistory = shouldReplaceHistory(\n          navOptions,\n          toState,\n          fromState,\n        );\n\n        const url = this.#router.buildUrl(toState.name, toState.params);\n\n        updateBrowserState(toState, url, replaceHistory, this.#browser);\n      },\n    };\n  }\n}\n","import {\n  createOptionsValidator,\n  safeBaseRule,\n  safeHashPrefixRule,\n} from \"./browser-env\";\nimport { LOGGER_CONTEXT, defaultOptions } from \"./constants\";\n\nimport type { HashPluginOptions } from \"./types\";\n\nexport const validateOptions = createOptionsValidator<HashPluginOptions>(\n  defaultOptions,\n  LOGGER_CONTEXT,\n  { base: safeBaseRule, hashPrefix: safeHashPrefixRule },\n);\n","import { getPluginApi } from \"@real-router/core/api\";\n\nimport { createSafeBrowser, normalizeBase } from \"./browser-env\";\nimport { defaultOptions, source } from \"./constants\";\nimport { buildHashLocation, createHashPrefixRegex } from \"./hash-utils\";\nimport { HashPlugin } from \"./plugin\";\nimport { validateOptions } from \"./validation\";\n\nimport type { Browser, SharedFactoryState } from \"./browser-env\";\nimport type { HashPluginOptions } from \"./types\";\nimport type { PluginFactory, Router } from \"@real-router/core\";\n\nexport function hashPluginFactory(\n  opts?: Partial<HashPluginOptions>,\n  browser?: Browser,\n): PluginFactory {\n  validateOptions(opts);\n\n  const definedOpts = opts\n    ? Object.fromEntries(\n        Object.entries(opts).filter(\n          // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- runtime may receive explicit undefined via conditional spreads (exactOptionalPropertyTypes does not apply here)\n          ([, value]) => value !== undefined,\n        ),\n      )\n    : {};\n  const options: Required<HashPluginOptions> = {\n    ...defaultOptions,\n    ...definedOpts,\n  };\n\n  options.base = normalizeBase(options.base);\n\n  const prefixRegex = createHashPrefixRegex(options.hashPrefix);\n  const resolvedBrowser =\n    browser ??\n    createSafeBrowser(\n      () =>\n        buildHashLocation(\n          globalThis.location.hash,\n          globalThis.location.search,\n          prefixRegex,\n        ),\n      \"hash-plugin\",\n    );\n\n  const transitionOptions = {\n    forceDeactivate: options.forceDeactivate,\n    source,\n    replace: true as const,\n  };\n\n  const shared: SharedFactoryState = { removePopStateListener: undefined };\n\n  return function hashPlugin(routerBase) {\n    const plugin = new HashPlugin(\n      routerBase as Router,\n      getPluginApi(routerBase),\n      options,\n      resolvedBrowser,\n      prefixRegex,\n      transitionOptions,\n      shared,\n    );\n\n    return plugin.getPlugin();\n  };\n}\n"],"mappings":"yIAWA,SAAgB,EAAc,EAAsB,CAClD,GAAI,CAAC,EACH,OAAO,EAGT,IAAI,EAAS,EAAK,WAAW,OAAQ,GAAG,EAUxC,OARK,EAAO,WAAW,GAAG,IACxB,EAAS,IAAI,KAGX,EAAO,OAAS,GAAK,EAAO,SAAS,GAAG,IAC1C,EAAS,EAAO,MAAM,EAAG,EAAE,GAGtB,IAAW,IAAM,GAAK,CAC/B,CAEA,MAAa,EAAoB,GAAyB,CACxD,GAAI,CACF,OAAO,UAAU,UAAU,CAAI,CAAC,CAClC,OAAS,EAAO,CAGd,OAFA,QAAQ,KAAK,wCAAwC,EAAK,GAAI,CAAK,EAE5D,CACT,CACF,ECrCmS,EAAE,0CAAiG,SAAS,EAAE,EAAE,CAAC,OAAO,OAAO,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,QAAQ,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,UAAU,IAAI,UAAU,MAAM,CAAC,EAAE,GAAG,IAAI,SAAS,OAAO,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,eAAe,CAAC,EAAE,OAAO,IAAI,MAAM,IAAI,OAAO,UAAU,CAAC,EAAE,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,IAAI,UAAU,CAAC,EAAE,IAAI,SAAS,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,OAAO,GAAG,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,eAAe,CAAC,EAAE,GAAG,IAAI,MAAM,IAAI,OAAO,UAAU,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,EAAE,SAAS,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAA2Y,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,GAAG,OAAO,EAAE,MAAM,UAAU,EAAE,EAAE,MAAM,CAAC,CAAqD,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CCiC72D,SAAgB,EACd,EACA,EACA,EACmB,CAKnB,OAJIA,EAAQ,EAAI,KAAK,EACZ,EAAI,UAAU,EAAI,MAAM,KAAM,EAAI,MAAM,OAAQ,EAAI,MAAM,IAAI,EAGhE,EAAI,UAAU,CAAQ,CAC/B,CAUA,SAAgB,EACd,EACA,EACA,EACA,EACM,CACN,IAAM,EAAe,CACnB,KAAM,EAAM,KACZ,OAAQ,EAAM,OACd,KAAM,EAAM,IACd,EAEI,EACF,EAAQ,aAAa,EAAc,CAAG,EAEtC,EAAQ,UAAU,EAAc,CAAG,CAEvC,CC9DA,SAAgB,EACd,EACA,EACA,EACwC,CACxC,MAAQ,IAAS,CACV,KAIL,IAAK,IAAM,KAAO,OAAO,KAAK,CAAI,EAAG,CACnC,GAAI,EAAE,KAAO,GACX,SAGF,IAAM,EAAQ,EAAK,GAEnB,GAAI,IAAU,IAAA,GACZ,SAGF,IAAM,EAAW,OAAO,EAAS,GAC3B,EAAS,OAAO,EAEtB,GAAI,IAAW,EACb,MAAU,MACR,IAAI,EAAc,sBAAsB,EAAI,cAAc,EAAS,QAAQ,GAC7E,EAGF,IAAM,EAAO,IAAQ,GAErB,GAAI,EAAM,CACR,IAAM,EAAO,EAAK,SAA+C,CAAK,EAEtE,GAAI,IAAQ,KACV,MAAU,MAAM,IAAI,EAAc,aAAa,EAAI,KAAK,GAAK,CAEjE,CACF,CACF,CACF,CAGA,MAAM,EAAgB,wBAET,EAAmC,CAC9C,SAAW,GACL,EAAc,KAAK,CAAK,EACnB,sCAGL,EAAM,MAAM,GAAG,CAAC,CAAC,SAAS,IAAI,EACzB,iCAGF,IAEX,EAEa,EAAyC,CACpD,SAAW,GACL,EAAc,KAAK,CAAK,EACnB,sCAGL,EAAM,SAAS,GAAG,EACb,sEAGL,EAAM,SAAS,GAAG,EACb,2DAGL,EAAM,SAAS,GAAG,EACb,+DAGF,IAEX,ECxFa,MACJ,WAAW,SAAW,QAAe,CAAC,CAAC,WAAW,QCC9C,GAAa,EAAgB,IAAuB,CAC/D,WAAW,QAAQ,UAAU,EAAO,GAAI,CAAI,CAC9C,EAEa,GAAgB,EAAgB,IAAuB,CAClE,WAAW,QAAQ,aAAa,EAAO,GAAI,CAAI,CACjD,EAEa,EACX,IAEA,WAAW,iBAAiB,WAAY,CAAE,MAE7B,CACX,WAAW,oBAAoB,WAAY,CAAE,CAC/C,GAGW,MAAwB,WAAW,SAAS,KClBnD,MAAmB,CAAC,EAEb,EAAkB,GAAoB,CACjD,IAAI,EAAY,GAEhB,MAAQ,IAAyB,CAC/B,AAME,KALA,QAAQ,KACN,gFAAgF,EAAQ,cAC3E,EAAO,4GAEtB,EACY,GAEhB,CACF,EAEa,EACX,GACmB,CACnB,IAAM,EAAW,EAAe,CAAO,EAEvC,MAAO,CACL,cAAiB,CACf,EAAS,WAAW,CACtB,EACA,iBAAoB,CAClB,EAAS,cAAc,CACzB,EACA,yBACE,EAAS,qBAAqB,EAEvB,GAET,aACE,EAAS,SAAS,EAEX,GAEX,CACF,EC5BA,SAAgB,EACd,EACA,EACS,CACT,GAAI,EAAqB,EACvB,MAAO,CACL,YACA,eACA,sBACA,cACA,SACF,EAGF,IAAM,EAAW,EAAe,CAAO,EAEvC,MAAO,CACL,GAAG,EAA6B,CAAO,EACvC,iBACE,EAAS,aAAa,EAEf,GAEX,CACF,CCiBA,SAAS,EACP,EACA,EACoD,CACpD,GAAI,CAAC,EAAK,eACR,MAAO,CAAC,EAGV,IAAM,EAAU,EAAK,eAAe,EAOpC,OAFE,KAJe,EAAK,sBAClB,EAAK,sBAAsB,EAC3B,KAEsB,EAAK,OAAO,SAAS,CAAC,EAAE,OAAS,EAGvD,CAAE,KAAM,EAAS,MAAO,GAAM,WAAY,EAAK,EAC/C,CAAE,KAAM,CAAQ,CACtB,CAEA,SAAgB,EACd,EAC8B,CAC9B,IAAI,EAAkB,GAKlB,EAA4D,KAEhE,SAAS,GAA6B,CACpC,GAAI,EAAU,CACZ,GAAM,CAAE,MAAK,YAAa,EAE1B,EAAW,KACX,QAAQ,KACN,IAAI,EAAK,cAAc,qCACzB,EACA,EAAgB,EAAK,CAAQ,CAC/B,CACF,CAEA,SAAS,GAAkC,CACzC,IAAM,EAAe,EAAK,OAAO,SAAS,EAG1C,GAAI,CAAC,EACH,OAKF,IAAM,EACJ,EAAa,SACZ,KAAK,KACF,EAAM,EAAK,SACf,EAAa,KACb,EAAa,OACb,EAAU,CAAE,KAAM,CAAQ,EAAI,IAAA,EAChC,EAEA,EAAK,QAAQ,aAAa,EAAc,CAAG,CAC7C,CAEA,SAAS,EAAyB,EAAsB,CACtD,QAAQ,MACN,IAAI,EAAK,cAAc,gCACvB,CACF,EAEA,GAAI,CACF,EAA0B,CAC5B,OAAS,EAAe,CACtB,QAAQ,MACN,IAAI,EAAK,cAAc,yCACvB,CACF,CACF,CACF,CAEA,eAAe,EACb,EACA,EACe,CACf,GAAI,EAAiB,CACnB,QAAQ,KACN,IAAI,EAAK,cAAc,mDACzB,EACA,EAAW,CAAE,MAAK,UAAS,EAE3B,MACF,CAEA,EAAkB,GAElB,GAAI,CACF,IAAM,EAAU,EAAkB,EAAK,EAAK,IAAK,CAAQ,EAEzD,GAAI,EAKF,MAAM,EAAK,IAAI,gBAAgB,EAAS,CACtC,GAAG,EAAK,kBACR,GAAG,EAAmB,EAAM,EAAQ,IAAI,CAC1C,CAAC,OACI,GAAI,EAAK,cACd,EAAK,OAAO,mBAAmB,CAAQ,MAClC,CAGL,IAAM,EAAM,IAAIC,EAAAA,YAAYC,EAAAA,WAAW,gBAAiB,CACtD,KAAM,CACR,CAAC,EAED,EAAK,IAAI,oBAAoB,CAAG,EAChC,EAA0B,CAC5B,CACF,OAAS,EAAO,CACd,GAAI,aAAiBD,EAAAA,YAInB,GAAI,CACF,EAA0B,CAC5B,MAAQ,CAER,MAEA,EAAyB,CAAK,CAElC,QAAU,CACR,EAAkB,GAClB,EAAqB,CACvB,CACF,CAIA,MAAQ,IACN,KAAK,EAAW,EAAK,EAAK,QAAQ,YAAY,CAAC,CACnD,CASA,SAAgB,EACd,EACiD,CACjD,MAAO,CACL,YAAe,CACT,EAAK,OAAO,wBACd,EAAK,OAAO,uBAAuB,EAGrC,EAAK,OAAO,uBAAyB,EAAK,QAAQ,oBAChD,EAAK,OACP,CACF,EAEA,WAAc,CACR,EAAK,OAAO,yBACd,EAAK,OAAO,uBAAuB,EACnC,EAAK,OAAO,uBAAyB,IAAA,GAEzC,EAEA,aAAgB,CACV,EAAK,OAAO,yBACd,EAAK,OAAO,uBAAuB,EACnC,EAAK,OAAO,uBAAyB,IAAA,IAGvC,EAAK,QAAQ,CACf,CACF,CACF,CCjNA,SAAgB,EAAmB,EAAyB,CAC1D,OAAO,UAAU,CAAO,CAAC,CAAC,WAAW,IAAK,KAAK,CACjD,CAMA,SAAgB,EAAmB,EAAyB,CAC1D,GAAI,CACF,OAAO,mBAAmB,CAAO,CACnC,MAAQ,CACN,OAAO,CACT,CACF,CAYA,SAAgB,EAAmB,EAAuB,CACxD,IAAI,EAAW,EAEf,KAAO,EAAS,WAAW,GAAG,GAC5B,EAAW,EAAS,MAAM,CAAC,EAG7B,OAAO,EAAmB,CAAQ,CACpC,CC3CA,MAAM,EAAsC,IAAI,IAAI,CAAC,IAAK,IAAK,GAAG,CAAC,EAEnE,SAAgB,EAAa,EAAwB,CACnD,IAAI,EAAO,EAEL,EAAY,EAAK,QAAQ,KAAK,EAEpC,GAAI,IAAc,GAAI,CACpB,IAAM,EAAiB,EAAY,EAC/B,EAAY,EAAK,OAErB,IAAK,IAAI,EAAI,EAAgB,EAAI,EAAK,OAAQ,IAAK,CACjD,IAAM,EAAK,EAAK,GAEhB,GAAI,EAAe,IAAI,CAAE,EAAG,CAC1B,EAAY,EAEZ,KACF,CACF,CAEA,EAAO,IAAc,EAAK,OAAS,IAAM,EAAK,MAAM,CAAS,GAEzD,EAAK,WAAW,GAAG,GAAK,EAAK,WAAW,GAAG,KAC7C,EAAO,IAAI,IAEf,CAEA,IAAM,EAAU,EAAK,QAAQ,GAAG,EAC1B,EAAO,IAAY,GAAK,GAAK,EAAK,MAAM,CAAO,EAC/C,EAAa,IAAY,GAAK,EAAO,EAAK,MAAM,EAAG,CAAO,EAE1D,EAAW,EAAW,QAAQ,GAAG,EACjC,EAAS,IAAa,GAAK,GAAK,EAAW,MAAM,CAAQ,EAG/D,MAAO,CAAE,SAFQ,IAAa,GAAK,EAAa,EAAW,MAAM,EAAG,CAAQ,EAEzD,SAAQ,MAAK,CAClC,CClBA,SAAgB,EACd,EACA,EACY,CACZ,OAAO,EAAI,eAAe,SAAU,EAAM,IACxC,EAAK,GAAQ,EAAQ,YAAY,CAAC,CACpC,CACF,CAuBA,SAAgB,EACd,EACA,EACA,EACA,EAKA,EAAe,GAKP,CAIR,IAAM,EAAS,CACb,KAAM,GACN,OAAQ,CAAC,EACT,KAAM,EACR,EAEA,OACE,EACA,EAAiB,CAAC,EAClB,IACG,CACH,IAAM,EAAQ,EAAI,WAAW,EAAM,CAAM,EAEzC,GAAI,CAAC,EACH,MAAU,MACR,8CAA8C,EAAK,eACrD,EAGF,IAAM,EAAa,EAAI,UACrB,EAAM,KACN,EAAM,OACN,EAAO,UAAU,EAAM,KAAM,EAAM,MAAM,EACzC,CACE,OAAQ,EAAM,IAChB,CACF,EAQI,EAEJ,GAAI,GAAS,OAAS,IAAA,GAAW,CAC/B,IAAM,EAAO,EAAmB,EAAQ,IAAI,EAE5C,EAAc,EAAO,IAAI,EAAmB,CAAI,IAAM,EACxD,MAAO,AAGL,EAHS,EACK,EAAQ,QAAQ,EAEhB,GAOhB,IAAM,EAAM,EAAW,EAAM,CAAM,EAAI,EAEvC,EAAO,KAAO,EAAW,KACzB,EAAO,OAAS,EAAW,OAC3B,EAAO,KAAO,EAAW,KAEzB,EAAQ,aAAa,EAAQ,CAAG,CAClC,CACF,CAEA,SAAgB,EACd,EACA,EACA,EACS,CAST,OARI,EAAW,UAAY,GAClB,GAGJ,EAIE,CAAC,CAAC,EAAW,QAAU,EAAQ,OAAS,EAAU,KAHhD,EAAW,UAAY,EAIlC,CC3JA,MAAa,EAA8C,CACzD,WAAY,GACZ,KAAM,GACN,gBAAiB,EACnB,EAOa,EAAiB,cCX9B,SAAS,EAAa,EAAqB,CACzC,OAAO,EAAI,WAAW,uBAAwB,OAAO,GAAG,KAAK,CAC/D,CAEA,SAAgB,EAAsB,EAAmC,CAKvE,OAJK,EAIM,OAAO,KAAK,EAAa,CAAU,GAAG,EAHxC,IAIX,CASA,SAAgB,EACd,EACA,EACQ,CAOR,OANI,IAAS,IAAM,IAAS,IACnB,KAGI,EAAc,EAAK,QAAQ,EAAa,EAAE,EAAI,EAAK,MAAM,CAAC,IAExD,GACjB,CAEA,SAAgB,EAAc,EAAa,EAAoC,CAC7E,IAAM,EAAY,EAAa,CAAG,EAC5B,EAAW,EAAgB,EAAU,KAAM,CAAW,EAE5D,OAAO,EAAS,SAAS,GAAG,EAAI,EAAW,EAAW,EAAU,MAClE,CAeA,SAAgB,EACd,EACA,EACA,EACQ,CACR,IAAM,EAAW,EAAiB,EAAgB,EAAM,CAAW,CAAC,EAEpE,OAAO,EAAS,SAAS,GAAG,EAAI,EAAW,EAAW,CACxD,CC1CA,IAAa,EAAb,KAAwB,CACtB,GACA,GACA,GACA,GACA,GACA,GAEA,YACE,EACA,EACA,EACA,EACA,EACA,EAKA,EACA,CACA,KAAKE,GAAU,EACf,KAAKC,GAAW,EAEhB,KAAKC,GAA0B,EAAuB,EAAK,CAAO,EAQlE,IAAI,EAAa,GACX,MAA8B,CAC9B,IAIJ,EAAa,GACb,QAAQ,KACN,sOAGF,EACF,EAEM,EAAY,GAAG,EAAQ,KAAK,GAAG,EAAQ,aACvC,GACJ,EACA,EACA,KAEI,GAAM,OAAS,IAAA,IACjB,EAAgB,EAGX,EAAY,EAAO,UAAU,EAAO,CAAM,GAGnD,KAAKG,GAAmB,EAExB,KAAKF,GAAoB,EAAI,aAAa,CACxC,SAAU,EACV,SAAW,GACT,EAAI,UAAU,EAAc,EAAK,CAAW,CAAC,GAAK,IAAA,GACpD,oBAAqB,EACnB,EACA,EACA,EACA,EACA,EACF,CACF,CAAC,EAED,IAAM,EAAU,EAAsB,CACpC,SACA,MACA,UACA,cAAe,EAAI,WAAW,CAAC,CAAC,cAChC,oBACA,cAAe,EACf,SAAU,CACZ,CAAC,EAED,KAAKC,GAAa,EAAwB,CACxC,UACA,SACA,UACA,YAAe,CACb,KAAKF,GAAwB,EAC7B,KAAKC,GAAkB,CACzB,CACF,CAAC,CACH,CAEA,WAAoB,CAClB,MAAO,CACL,GAAG,KAAKC,GAER,qBACE,EACA,EACA,IACG,CAGC,EAAW,OAAS,IAAA,IACtB,KAAKC,GAAiB,EAGxB,IAAM,EAAiB,EACrB,EACA,EACA,CACF,EAIA,EAAmB,EAFP,KAAKL,GAAQ,SAAS,EAAQ,KAAM,EAAQ,MAE1B,EAAG,EAAgB,KAAKC,EAAQ,CAChE,CACF,CACF,CACF,ECvIA,MAAa,EAAkB,EAC7B,EACA,EACA,CAAE,KAAM,EAAc,WAAY,CAAmB,CACvD,ECDA,SAAgB,EACd,EACA,EACe,CACf,EAAgB,CAAI,EAEpB,IAAM,EAAc,EAChB,OAAO,YACL,OAAO,QAAQ,CAAI,CAAC,CAAC,QAElB,EAAG,KAAW,IAAU,IAAA,EAC3B,CACF,EACA,CAAC,EACC,EAAuC,CAC3C,GAAG,EACH,GAAG,CACL,EAEA,EAAQ,KAAO,EAAc,EAAQ,IAAI,EAEzC,IAAM,EAAc,EAAsB,EAAQ,UAAU,EACtD,EACJ,GACA,MAEI,EACE,WAAW,SAAS,KACpB,WAAW,SAAS,OACpB,CACF,EACF,aACF,EAEI,EAAoB,CACxB,gBAAiB,EAAQ,gBACzB,kBACA,QAAS,EACX,EAEM,EAA6B,CAAE,uBAAwB,IAAA,EAAU,EAEvE,OAAO,SAAoB,EAAY,CAWrC,OAAO,IAVY,EACjB,GAAA,EAAA,EAAA,aAAA,CACa,CAAU,EACvB,EACA,EACA,EACA,EACA,CAGU,CAAC,CAAC,UAAU,CAC1B,CACF"}
+{"version":3,"file":"index.js","names":["isState","RouterError","errorCodes","#router","#browser","#removeStartInterceptor","#removeExtensions","#lifecycle","#warnHashIgnored"],"sources":["../../../../shared/browser-env/utils.ts","../../../type-guards/dist/esm/index.mjs","../../../../shared/browser-env/popstate-utils.ts","../../../../shared/browser-env/validation.ts","../../../../shared/browser-env/detect.ts","../../../../shared/browser-env/history-api.ts","../../../../shared/browser-env/ssr-fallback.ts","../../../../shared/browser-env/safe-browser.ts","../../../../shared/browser-env/popstate-handler.ts","../../../../shared/browser-env/url-context.ts","../../../../shared/browser-env/url-parsing.ts","../../../../shared/browser-env/plugin-utils.ts","../../src/constants.ts","../../src/hash-utils.ts","../../src/plugin.ts","../../src/validation.ts","../../src/factory.ts"],"sourcesContent":["/**\n * Normalizes base path to canonical form: leading slash, no trailing slash,\n * no repeated slashes. Isolated \"/\" collapses to \"\".\n *\n * @example\n * normalizeBase(\"app\")     // \"/app\"\n * normalizeBase(\"/app/\")   // \"/app\"\n * normalizeBase(\"//app//\") // \"/app\"\n * normalizeBase(\"\")        // \"\"\n * normalizeBase(\"/\")       // \"\"\n */\nexport function normalizeBase(base: string): string {\n  if (!base) {\n    return base;\n  }\n\n  let result = base.replaceAll(/\\/+/g, \"/\");\n\n  if (!result.startsWith(\"/\")) {\n    result = `/${result}`;\n  }\n\n  if (result.length > 1 && result.endsWith(\"/\")) {\n    result = result.slice(0, -1);\n  }\n\n  return result === \"/\" ? \"\" : result;\n}\n\nexport const safelyEncodePath = (path: string): string => {\n  try {\n    return encodeURI(decodeURI(path));\n  } catch (error) {\n    console.warn(`[browser-env] Could not encode path \"${path}\"`, error);\n\n    return path;\n  }\n};\n","const e=[`replace`,`reload`,`force`,`forceDeactivate`,`redirected`];function t(t){if(typeof t!=`object`||!t||Array.isArray(t))return!1;let n=t;for(let t of e){let e=n[t];if(e!==void 0&&typeof e!=`boolean`)return!1}let r=n.signal;return!(r!==void 0&&!(r instanceof AbortSignal))}const n=/\\S/,r=/^[A-Z_a-z][\\w-]*(?:\\.[A-Z_a-z][\\w-]*)*$/;function i(e,t){return TypeError(`[router.${e}] ${t}`)}function a(e){return typeof e==`string`?e===``?!0:e.length>1e4?!1:e.startsWith(`@@`)?!0:r.test(e):!1}function o(e){if(Array.isArray(e))return!0;let t=Object.getPrototypeOf(e);return t===null||t===Object.prototype}function s(e,t){let n=Array.isArray(e)?e:Object.values(e);for(let e of n)t.push(e)}function c(e){let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}var l=class{container;constructor(e){this.container=e}};function u(e,t,n,r){return n.has(e)?!1:r.has(e)?!0:o(e)?(n.add(e),t.push(new l(e)),s(e,t),!0):!1}function d(e){let t=[e],n=new WeakSet,r=new WeakSet;for(;t.length>0;){let e=t.pop();if(e instanceof l){n.delete(e.container),r.add(e.container);continue}if(e!=null){if(typeof e==`object`){if(!u(e,t,n,r))return!1;continue}if(!c(e))return!1}}return!0}function f(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}function p(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;let n=!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let r=e[t];if(!f(r)){let e=typeof r;if(e===`function`||e===`symbol`)return!1;n=!0;break}}return n?d(e):!0}function m(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):Array.isArray(e)?e.every(e=>{let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}):!1}function h(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let n=e[t];if(!m(n))return!1}return!0}function g(e){return a(e.name)&&typeof e.path==`string`&&p(e.params)}function _(e){return typeof e!=`object`||!e?!1:g(e)}function v(e){return!(typeof e!=`object`||!e||!g(e))}function y(e){return typeof e==`string`}function b(e){return typeof e==`boolean`}function x(e,t){return e in t}function S(e){return typeof e==`number`?Number.isFinite(e):typeof e==`string`||typeof e==`boolean`}function C(e,t){if(typeof e!=`string`)throw i(t,`Route name must be a string, got ${typeof e}`);if(e!==``){if(!n.test(e))throw i(t,`Route name cannot contain only whitespace`);if(e.length>1e4)throw i(t,`Route name exceeds maximum length of 10000 characters. This is a technical safety limit.`);if(!e.startsWith(`@@`)&&!r.test(e))throw i(t,`Invalid route name \"${e}\". Each segment must start with a letter or underscore, followed by letters, numbers, underscores, or hyphens. Segments are separated by dots (e.g., \"users.profile\").`)}}function w(e){if(e===null)return`null`;if(Array.isArray(e))return`array[${e.length}]`;if(typeof e==`object`){let t=e.constructor;return typeof t==`function`&&t.name!==`Object`&&t.name||`object`}return typeof e}function T(e,t){if(!_(e))throw TypeError(`[${t}] Invalid state structure: ${w(e)}. Expected State object with name, params, and path properties.`)}export{w as getTypeDescription,b as isBoolean,t as isNavigationOptions,x as isObjKey,p as isParams,h as isParamsStrict,S as isPrimitiveValue,a as isRouteName,_ as isState,v as isStateStrict,y as isString,C as validateRouteName,T as validateState};\n//# sourceMappingURL=index.mjs.map","import { isStateStrict as isState } from \"type-guards\";\n\nimport type { Browser } from \"./types.js\";\nimport type { State, Params } from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\n/**\n * Resolves the popstate event into a navigation-ready `State`.\n *\n * - If `history.state` is a valid router state ({name, params, path} written\n *   by browser-plugin/hash-plugin during their previous navigation), it is\n *   the source of truth — synthesize a fully-typed `State` from it via\n *   `api.makeState`. The synthesized `transition`/`context` fields are\n *   placeholders; the navigation pipeline (`completeTransition` and plugin\n *   claim writes) replaces them.\n * - Otherwise (e.g. manually entered URL with no recorded state), fall back\n *   to `api.matchPath(location)`. `location` is the route location the caller\n *   captured when the popstate event fired — each plugin derives it from its\n *   own `browser.getLocation()` (URL pathname for browser-plugin, hash-derived\n *   path for hash-plugin), so the fallback works for both.\n * - `undefined` when neither path produces a match.\n *\n * The caller passes the location it snapshotted at event time rather than\n * letting this function re-read `browser.getLocation()`: a deferred popstate\n * is processed only after the in-flight navigation's `replaceState` has\n * already overwritten the live location, so a late read would resolve the\n * wrong target (#757).\n *\n * Replaces the previous `{ name, params }` shape so the caller can hand\n * the State directly to `router.navigateToState(state, opts)` and skip\n * the redundant `forwardState`/`buildPath` round-trip in\n * `buildNavigateState` (issue #525).\n */\nexport function getRouteFromEvent(\n  evt: PopStateEvent,\n  api: PluginApi,\n  location: string,\n): State | undefined {\n  if (isState(evt.state)) {\n    return api.makeState(evt.state.name, evt.state.params, evt.state.path);\n  }\n\n  return api.matchPath(location);\n}\n\n/**\n * Updates browser state (pushState or replaceState)\n *\n * @param state - Router state\n * @param url - URL to set\n * @param replace - Whether to replace instead of push\n * @param browser - Browser API instance\n */\nexport function updateBrowserState(\n  state: State,\n  url: string,\n  replace: boolean,\n  browser: Browser,\n): void {\n  const historyState = {\n    name: state.name,\n    params: state.params,\n    path: state.path,\n  };\n\n  if (replace) {\n    browser.replaceState(historyState, url);\n  } else {\n    browser.pushState(historyState, url);\n  }\n}\n\n/**\n * Creates a `updateBrowserState` closure that reuses a single mutable buffer\n * across calls instead of allocating a fresh `{ name, params, path }` object\n * per push/replace.\n *\n * Why: Browsers structured-clone `history.state` synchronously inside\n * `pushState`/`replaceState`, so the caller never sees the buffer escape —\n * it can be safely overwritten before the next call. Eliminates one\n * allocation per navigation on the hot path.\n *\n * Each plugin instance must own its own buffer (do not share across plugins).\n */\nexport function createUpdateBrowserState(): (\n  state: State,\n  url: string,\n  replace: boolean,\n  browser: Browser,\n) => void {\n  const buffer = {\n    name: \"\",\n    params: {} as Params,\n    path: \"\",\n  };\n\n  return (state, url, replace, browser) => {\n    buffer.name = state.name;\n    buffer.params = state.params;\n    buffer.path = state.path;\n\n    if (replace) {\n      browser.replaceState(buffer, url);\n    } else {\n      browser.pushState(buffer, url);\n    }\n  };\n}\n","export interface OptionRule<T> {\n  validate: (value: T) => string | null;\n}\n\nexport type OptionRules<T extends object> = {\n  [K in keyof T]?: OptionRule<NonNullable<T[K]>>;\n};\n\nexport function createOptionsValidator<T extends object>(\n  defaults: Required<T>,\n  loggerContext: string,\n  rules?: OptionRules<T>,\n): (opts: Partial<T> | undefined) => void {\n  return (opts) => {\n    if (!opts) {\n      return;\n    }\n\n    for (const key of Object.keys(opts)) {\n      if (!(key in defaults)) {\n        continue;\n      }\n\n      const value = opts[key as keyof typeof opts];\n\n      if (value === undefined) {\n        continue;\n      }\n\n      const expected = typeof defaults[key as keyof typeof defaults];\n      const actual = typeof value;\n\n      if (actual !== expected) {\n        throw new Error(\n          `[${loggerContext}] Invalid type for '${key}': expected ${expected}, got ${actual}`,\n        );\n      }\n\n      const rule = rules?.[key as keyof T];\n\n      if (rule) {\n        const msg = (rule.validate as (input: unknown) => string | null)(value);\n\n        if (msg !== null) {\n          throw new Error(`[${loggerContext}] Invalid '${key}': ${msg}`);\n        }\n      }\n    }\n  };\n}\n\n// eslint-disable-next-line no-control-regex -- control characters are exactly what this rule rejects\nconst CONTROL_CHARS = /[\\u0000-\\u001F\\u007F]/;\n\nexport const safeBaseRule: OptionRule<string> = {\n  validate: (value) => {\n    if (CONTROL_CHARS.test(value)) {\n      return \"must not contain control characters\";\n    }\n\n    if (value.split(\"/\").includes(\"..\")) {\n      return \"must not contain '..' segments\";\n    }\n\n    return null;\n  },\n};\n\nexport const safeHashPrefixRule: OptionRule<string> = {\n  validate: (value) => {\n    if (CONTROL_CHARS.test(value)) {\n      return \"must not contain control characters\";\n    }\n\n    if (value.includes(\"/\")) {\n      return \"must not contain '/' (slash is added before the path automatically)\";\n    }\n\n    if (value.includes(\"#\")) {\n      return \"must not contain '#' (it is added as the hash delimiter)\";\n    }\n\n    if (value.includes(\"?\")) {\n      return \"must not contain '?' (it conflicts with the query delimiter)\";\n    }\n\n    return null;\n  },\n};\n\nexport const nonNegativeIntegerRule: OptionRule<number> = {\n  validate: (value) => {\n    if (!Number.isFinite(value)) {\n      return `expected finite number, got ${String(value)}`;\n    }\n\n    if (!Number.isInteger(value)) {\n      return `expected integer, got ${String(value)}`;\n    }\n\n    if (value < 0) {\n      return `expected non-negative integer, got ${value}`;\n    }\n\n    return null;\n  },\n};\n","export const isBrowserEnvironment = (): boolean =>\n  typeof globalThis.window !== \"undefined\" && !!globalThis.history;\n","import type { HistoryBrowser } from \"./types.js\";\n\nexport const pushState = (state: unknown, path: string): void => {\n  globalThis.history.pushState(state, \"\", path);\n};\n\nexport const replaceState = (state: unknown, path: string): void => {\n  globalThis.history.replaceState(state, \"\", path);\n};\n\nexport const addPopstateListener: HistoryBrowser[\"addPopstateListener\"] = (\n  fn,\n) => {\n  globalThis.addEventListener(\"popstate\", fn);\n\n  return () => {\n    globalThis.removeEventListener(\"popstate\", fn);\n  };\n};\n\nexport const getHash = (): string => globalThis.location.hash;\n","import type { HistoryBrowser } from \"./types.js\";\n\nconst NOOP = (): void => {};\n\nexport const createWarnOnce = (context: string) => {\n  let hasWarned = false;\n\n  return (method: string): void => {\n    if (!hasWarned) {\n      console.warn(\n        `[browser-env] Browser API is running in a non-browser environment (context: \"${context}\"). ` +\n          `Method \"${method}\" is a no-op. ` +\n          `This is expected for SSR, but may indicate misconfiguration if you expected browser behavior.`,\n      );\n      hasWarned = true;\n    }\n  };\n};\n\nexport const createHistoryFallbackBrowser = (\n  context: string,\n): HistoryBrowser => {\n  const warnOnce = createWarnOnce(context);\n\n  return {\n    pushState: () => {\n      warnOnce(\"pushState\");\n    },\n    replaceState: () => {\n      warnOnce(\"replaceState\");\n    },\n    addPopstateListener: () => {\n      warnOnce(\"addPopstateListener\");\n\n      return NOOP;\n    },\n    getHash: () => {\n      warnOnce(\"getHash\");\n\n      return \"\";\n    },\n  };\n};\n","import { isBrowserEnvironment } from \"./detect.js\";\nimport {\n  pushState,\n  replaceState,\n  addPopstateListener,\n  getHash,\n} from \"./history-api.js\";\nimport {\n  createWarnOnce,\n  createHistoryFallbackBrowser,\n} from \"./ssr-fallback.js\";\n\nimport type { Browser } from \"./types.js\";\n\nexport function createSafeBrowser(\n  getLocation: () => string,\n  context: string,\n): Browser {\n  if (isBrowserEnvironment()) {\n    return {\n      pushState,\n      replaceState,\n      addPopstateListener,\n      getLocation,\n      getHash,\n    };\n  }\n\n  const warnOnce = createWarnOnce(context);\n\n  return {\n    ...createHistoryFallbackBrowser(context),\n    getLocation: () => {\n      warnOnce(\"getLocation\");\n\n      return \"\";\n    },\n  };\n}\n","import { errorCodes, RouterError } from \"@real-router/core\";\n\nimport { getRouteFromEvent } from \"./popstate-utils.js\";\n\nimport type { Browser, SharedFactoryState } from \"./types.js\";\nimport type { Params, Plugin, Router } from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\n/**\n * Navigation options used by the popstate handler to trigger a\n * router.navigate() call from a back/forward event. `source` identifies\n * the origin of the transition to downstream context consumers;\n * `replace: true` keeps the history stack in sync with the browser.\n */\nexport interface PopstateTransitionOptions {\n  source: string;\n  replace: true;\n  forceDeactivate?: boolean;\n}\n\nexport interface PopstateHandlerDeps {\n  router: Router;\n  api: PluginApi;\n  browser: Browser;\n  allowNotFound: boolean;\n  transitionOptions: PopstateTransitionOptions;\n  loggerContext: string;\n  buildUrl: (\n    name: string,\n    params?: Params,\n    options?: { hash?: string },\n  ) => string;\n  /**\n   * Decoded hash of the current browser location (no leading \"#\"). Defaults\n   * to a no-op (returns \"\") for plugins that do not participate in URL\n   * fragment tracking — namely hash-plugin, where `#` is the route delimiter.\n   * (#532)\n   */\n  getCurrentHash?: () => string;\n  /**\n   * Decoded hash from the previous transition's `state.context.url.hash`\n   * (no leading \"#\"). Used by the popstate handler to detect hash-only\n   * navigation and add `force: true, hashChange: true` to bypass SAME_STATES.\n   * Defaults to no-op (returns \"\") for hash-plugin. (#532)\n   */\n  getCurrentContextHash?: () => string;\n}\n\n/**\n * Hash augmentation for popstate-driven navigateToState (#532).\n * Returns a partial options object that the caller spreads on top of\n * `deps.transitionOptions`. When the handler is wired without hash support\n * (hash-plugin), both deps default to undefined and an empty object is\n * returned — preserving the legacy behavior for that plugin.\n */\nfunction resolveHashOptions(\n  deps: PopstateHandlerDeps,\n  matchedPath: string,\n): { hash?: string; force?: true; hashChange?: true } {\n  if (!deps.getCurrentHash) {\n    return {};\n  }\n\n  const newHash = deps.getCurrentHash();\n  const prevHash = deps.getCurrentContextHash\n    ? deps.getCurrentContextHash()\n    : \"\";\n  const hashChange =\n    newHash !== prevHash && deps.router.getState()?.path === matchedPath;\n\n  return hashChange\n    ? { hash: newHash, force: true, hashChange: true }\n    : { hash: newHash };\n}\n\nexport function createPopstateHandler(\n  deps: PopstateHandlerDeps,\n): (evt: PopStateEvent) => void {\n  let isTransitioning = false;\n  // Snapshot the route location alongside the event: a deferred popstate is\n  // replayed only after the in-flight navigation's onTransitionSuccess →\n  // replaceState has overwritten the live location, so re-reading it at\n  // replay time would resolve the wrong target (#757).\n  let deferred: { evt: PopStateEvent; location: string } | null = null;\n\n  function processDeferredEvent(): void {\n    if (deferred) {\n      const { evt, location } = deferred;\n\n      deferred = null;\n      console.warn(\n        `[${deps.loggerContext}] Processing deferred popstate event`,\n      );\n      void onPopState(evt, location);\n    }\n  }\n\n  function rollbackUrlToCurrentState(): void {\n    const currentState = deps.router.getState();\n\n    /* v8 ignore next -- @preserve: router always has state after start(); defensive guard for edge cases */\n    if (!currentState) {\n      return;\n    }\n\n    // Preserve hash on rollback so guard rejection / unmatched URL on\n    // popstate doesn't strip the fragment from the visible URL (#532).\n    const ctxHash = (\n      currentState.context as { url?: { hash?: string } } | undefined\n    )?.url?.hash;\n    const url = deps.buildUrl(\n      currentState.name,\n      currentState.params,\n      ctxHash ? { hash: ctxHash } : undefined,\n    );\n\n    deps.browser.replaceState(currentState, url);\n  }\n\n  function recoverFromCriticalError(error: unknown): void {\n    console.error(\n      `[${deps.loggerContext}] Critical error in onPopState`,\n      error,\n    );\n\n    try {\n      rollbackUrlToCurrentState();\n    } catch (recoveryError) {\n      console.error(\n        `[${deps.loggerContext}] Failed to recover from critical error`,\n        recoveryError,\n      );\n    }\n  }\n\n  async function onPopState(\n    evt: PopStateEvent,\n    location: string,\n  ): Promise<void> {\n    if (isTransitioning) {\n      console.warn(\n        `[${deps.loggerContext}] Transition in progress, deferring popstate event`,\n      );\n      deferred = { evt, location };\n\n      return;\n    }\n\n    isTransitioning = true;\n\n    try {\n      const matched = getRouteFromEvent(evt, deps.api, location);\n\n      if (matched) {\n        // api.navigateToState — plugin-only entry point. Preserves\n        // matchSourceTrailingSlash output and skips the redundant\n        // forwardState/buildPath round-trip (#525). Hash augmentation (#532)\n        // extracted into resolveHashOptions so this branch stays readable.\n        await deps.api.navigateToState(matched, {\n          ...deps.transitionOptions,\n          ...resolveHashOptions(deps, matched.path),\n        });\n      } else if (deps.allowNotFound) {\n        deps.router.navigateToNotFound(location);\n      } else {\n        // Strict mode — unmatched URL is an error. Emit $$error and sync URL\n        // back to the current router state (no silent fallback to defaultRoute).\n        const err = new RouterError(errorCodes.ROUTE_NOT_FOUND, {\n          path: location,\n        });\n\n        deps.api.emitTransitionError(err);\n        rollbackUrlToCurrentState();\n      }\n    } catch (error) {\n      if (error instanceof RouterError) {\n        // navigate() already emitted $$error — just sync URL with router state.\n        // Swallow rollback errors: teardown races may remove router.buildUrl\n        // while a popstate event is still queued.\n        try {\n          rollbackUrlToCurrentState();\n        } catch {\n          // noop — nothing safe to do here\n        }\n      } else {\n        recoverFromCriticalError(error);\n      }\n    } finally {\n      isTransitioning = false;\n      processDeferredEvent();\n    }\n  }\n\n  // Snapshot the location the instant the event fires — before any in-flight\n  // navigation can overwrite it via replaceState (#757).\n  return (evt: PopStateEvent) =>\n    void onPopState(evt, deps.browser.getLocation());\n}\n\nexport interface PopstateLifecycleDeps {\n  browser: Browser;\n  shared: SharedFactoryState;\n  handler: (evt: PopStateEvent) => void;\n  cleanup: () => void;\n}\n\nexport function createPopstateLifecycle(\n  deps: PopstateLifecycleDeps,\n): Pick<Plugin, \"onStart\" | \"onStop\" | \"teardown\"> {\n  return {\n    onStart: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n      }\n\n      deps.shared.removePopStateListener = deps.browser.addPopstateListener(\n        deps.handler,\n      );\n    },\n\n    onStop: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n        deps.shared.removePopStateListener = undefined;\n      }\n    },\n\n    teardown: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n        deps.shared.removePopStateListener = undefined;\n      }\n\n      deps.cleanup();\n    },\n  };\n}\n","/**\n * URL fragment (\"hash\") shared layer (#532).\n *\n * Both URL plugins (navigation-plugin, browser-plugin) claim the `\"url\"`\n * `state.context` namespace and write `UrlContext` on every transition.\n * Mutually exclusive at runtime — only one URL plugin is installed per router.\n *\n * Hash form: decoded, no leading \"#\" — symmetric to `params` (no leading \"?\").\n * Encoding to/from URL form happens at the boundary (URL build / URL parse).\n */\n\nexport interface UrlContext {\n  /** Decoded fragment, no leading \"#\". Empty string when URL has no fragment. */\n  hash: string;\n  /** Whether `hash` differs from the previous transition's `state.context.url.hash`. */\n  hashChanged: boolean;\n}\n\n/**\n * Encode for URL fragment per RFC 3986: preserves sub-delims (`&`, `=`, `?`,\n * `:`, etc.) and the path/query characters that `encodeURI` already leaves\n * alone. Defensively percent-escapes `#` (a stray `#` in a decoded fragment\n * would otherwise terminate the fragment in the rendered URL).\n *\n * `encodeURIComponent` over-encodes RFC-3986 sub-delims (`&` → `%26`) and is\n * therefore wrong for fragments.\n */\nexport function encodeHashFragment(decoded: string): string {\n  return encodeURI(decoded).replaceAll(\"#\", \"%23\");\n}\n\n/**\n * Decode a percent-encoded fragment. Falls back to the raw input on malformed\n * escapes — matches the resilience pattern in scroll-restore.\n */\nexport function decodeHashFragment(encoded: string): string {\n  try {\n    return decodeURIComponent(encoded);\n  } catch {\n    return encoded;\n  }\n}\n\n/**\n * Normalize user-provided hash input: strip ALL leading \"#\" characters, then\n * decode. Defensive against `<Link hash=\"#section\">` — the prop is documented\n * to accept the fragment name without \"#\", but we accept both gracefully.\n *\n * Stripping a single \"#\" would leave the function non-idempotent on\n * pathological inputs like `\"##section\"` (caller's accidental double-hash,\n * concatenation bugs). Property test G9 in `hash-encoding.properties.ts`\n * locks in idempotence — `normalize(normalize(x)) === normalize(x)`.\n */\nexport function normalizeHashInput(input: string): string {\n  let stripped = input;\n\n  while (stripped.startsWith(\"#\")) {\n    stripped = stripped.slice(1);\n  }\n\n  return decodeHashFragment(stripped);\n}\n\n/**\n * Read the current browser hash in decoded form, no leading \"#\".\n * Accepts any object with a `getHash()` method — works for both `Browser`\n * (History API) and `NavigationBrowser` (Navigation API). SSR-safe via the\n * abstractions, which return `\"\"` outside a real browser.\n */\nexport function getDecodedHash(browser: { getHash: () => string }): string {\n  const raw = browser.getHash();\n\n  if (!raw) {\n    return \"\";\n  }\n\n  const stripped = raw.startsWith(\"#\") ? raw.slice(1) : raw;\n\n  return decodeHashFragment(stripped);\n}\n","export interface ParsedUrl {\n  pathname: string;\n  search: string;\n  hash: string;\n}\n\n/**\n * Scheme-agnostic URL parser.\n *\n * Extracts `pathname`, `search`, and `hash` from any string — absolute\n * (`scheme://authority/path?q#h`), path-relative (`/path?q#h`), or opaque\n * (`data:...`, `javascript:...`). Never throws, never returns null.\n *\n * Routing does not care about scheme or authority, only about the path part.\n * This keeps `browser-plugin`, `navigation-plugin`, and `hash-plugin` working\n * in Electron (`file://`, `app://`), Tauri (`tauri://`, `https://`), and any\n * other webview that may ship with non-HTTP origins. See issue #496.\n */\nconst URL_DELIMITERS: ReadonlySet<string> = new Set([\"/\", \"?\", \"#\"]);\n\nexport function safeParseUrl(url: string): ParsedUrl {\n  let rest = url;\n\n  const schemeIdx = rest.indexOf(\"://\");\n\n  if (schemeIdx !== -1) {\n    const authorityStart = schemeIdx + 3;\n    let pathStart = rest.length;\n\n    for (let i = authorityStart; i < rest.length; i++) {\n      const ch = rest[i];\n\n      if (URL_DELIMITERS.has(ch)) {\n        pathStart = i;\n\n        break;\n      }\n    }\n\n    rest = pathStart === rest.length ? \"/\" : rest.slice(pathStart);\n\n    if (rest.startsWith(\"?\") || rest.startsWith(\"#\")) {\n      rest = `/${rest}`;\n    }\n  }\n\n  const hashIdx = rest.indexOf(\"#\");\n  const hash = hashIdx === -1 ? \"\" : rest.slice(hashIdx);\n  const beforeHash = hashIdx === -1 ? rest : rest.slice(0, hashIdx);\n\n  const queryIdx = beforeHash.indexOf(\"?\");\n  const search = queryIdx === -1 ? \"\" : beforeHash.slice(queryIdx);\n  const pathname = queryIdx === -1 ? beforeHash : beforeHash.slice(0, queryIdx);\n\n  return { pathname, search, hash };\n}\n","import { encodeHashFragment, normalizeHashInput } from \"./url-context.js\";\nimport { buildUrl } from \"./url-utils.js\";\n\nimport type {\n  NavigationOptions,\n  Params,\n  Router,\n  State,\n} from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\nexport interface LocationSource {\n  getLocation: () => string;\n}\n\n/**\n * Minimal browser surface needed by `createReplaceHistoryState`.\n *\n * Both `Browser` (History API) and navigation-plugin's `NavigationBrowser`\n * (Navigation API) satisfy this structurally — the function never needs\n * `pushState`/`addPopstateListener`, only the replace path.\n */\nexport interface ReplaceStateBrowser {\n  replaceState: (state: unknown, url: string) => void;\n  getHash: () => string;\n}\n\n/**\n * Hash override option for `replaceHistoryState` (#532). Tri-state semantics:\n *   `undefined`  — preserve the current browser hash (legacy behavior, default)\n *   `\"\"`         — explicitly clear the fragment\n *   non-empty    — explicitly set the fragment (decoded form, no leading \"#\")\n */\nexport interface ReplaceHistoryStateOptions {\n  hash?: string;\n}\n\nexport function createStartInterceptor(\n  api: PluginApi,\n  browser: LocationSource,\n): () => void {\n  return api.addInterceptor(\"start\", (next, path) =>\n    next(path ?? browser.getLocation()),\n  );\n}\n\n// Shared `buildUrl` extension for browser-plugin and navigation-plugin.\n// Composes router.buildPath + base prefixing + tri-state hash (#532) into the\n// single function the plugins register via `api.extendRouter({ buildUrl })`.\nexport function createPluginBuildUrl(\n  router: Router,\n  base: string,\n): (route: string, params?: Params, opts?: { hash?: string }) => string {\n  return (route, params, opts) => {\n    const path = router.buildPath(route, params);\n    const url = buildUrl(path, base);\n\n    if (opts?.hash === undefined) {\n      return url;\n    }\n\n    const norm = normalizeHashInput(opts.hash);\n\n    return norm ? `${url}#${encodeHashFragment(norm)}` : url;\n  };\n}\n\nexport function createReplaceHistoryState(\n  api: PluginApi,\n  router: Router,\n  browser: ReplaceStateBrowser,\n  buildUrlFn: (\n    name: string,\n    params?: Params,\n    options?: ReplaceHistoryStateOptions,\n  ) => string,\n  preserveHash = true,\n): (\n  name: string,\n  params?: Params,\n  options?: ReplaceHistoryStateOptions,\n) => void {\n  // Reusable buffer — browsers structured-clone state synchronously inside\n  // replaceState, so the buffer never escapes. Eliminates one allocation per\n  // navigation on the hot path. (Mirrors createUpdateBrowserState.)\n  const buffer = {\n    name: \"\",\n    params: {} as Params,\n    path: \"\",\n  };\n\n  return (\n    name: string,\n    params: Params = {},\n    options?: ReplaceHistoryStateOptions,\n  ) => {\n    const state = api.buildState(name, params);\n\n    if (!state) {\n      throw new Error(\n        `[real-router] Cannot replace state: route \"${name}\" is not found`,\n      );\n    }\n\n    const builtState = api.makeState(\n      state.name,\n      state.params,\n      router.buildPath(state.name, state.params),\n      {\n        params: state.meta,\n      },\n    );\n\n    // Tri-state hash semantics (#532):\n    //   options.hash === undefined → preserve (legacy behavior, controlled by\n    //                                preserveHash flag — true for browser/\n    //                                navigation plugins, false for hash-plugin)\n    //   options.hash === \"\"        → explicitly clear\n    //   options.hash === \"value\"   → explicitly set\n    let hashSegment: string;\n\n    if (options?.hash !== undefined) {\n      const norm = normalizeHashInput(options.hash);\n\n      hashSegment = norm ? `#${encodeHashFragment(norm)}` : \"\";\n    } else if (preserveHash) {\n      hashSegment = browser.getHash();\n    } else {\n      hashSegment = \"\";\n    }\n\n    // Pass hash through buildUrl when the plugin understands it (avoids\n    // double-append). Hash-plugin's buildUrl ignores the option and warns,\n    // so call without options here for semantic clarity — but the result is\n    // identical because hashSegment is \"\" in that branch (preserveHash=false).\n    const url = buildUrlFn(name, params) + hashSegment;\n\n    buffer.name = builtState.name;\n    buffer.params = builtState.params;\n    buffer.path = builtState.path;\n\n    browser.replaceState(buffer, url);\n  };\n}\n\nexport function shouldReplaceHistory(\n  navOptions: NavigationOptions,\n  toState: State,\n  fromState: State | undefined,\n): boolean {\n  if (navOptions.replace === true) {\n    return true;\n  }\n\n  if (!fromState) {\n    return navOptions.replace !== false;\n  }\n\n  return !!navOptions.reload && toState.path === fromState.path;\n}\n","// packages/hash-plugin/src/constants.ts\n\nimport type { HashPluginOptions } from \"./types\";\n\nexport const defaultOptions: Required<HashPluginOptions> = {\n  hashPrefix: \"\",\n  base: \"\",\n  forceDeactivate: true,\n};\n\n/**\n * Source identifier for transitions triggered by browser events.\n */\nexport const source = \"popstate\";\n\nexport const LOGGER_CONTEXT = \"hash-plugin\";\n","// packages/hash-plugin/src/hash-utils.ts\n\nimport { safelyEncodePath, safeParseUrl } from \"./browser-env\";\n\nfunction escapeRegExp(str: string): string {\n  return str.replaceAll(/[$()*+.?[\\\\\\]^{|}-]/g, String.raw`\\$&`);\n}\n\nexport function createHashPrefixRegex(hashPrefix: string): RegExp | null {\n  if (!hashPrefix) {\n    return null;\n  }\n\n  return new RegExp(`^#${escapeRegExp(hashPrefix)}`);\n}\n\n/**\n * Extract path from URL hash, stripping hash prefix.\n *\n * @param hash - URL hash (e.g., \"#/path\" or \"#!/path\")\n * @param prefixRegex - Pre-compiled regex for prefix stripping (null if no prefix)\n * @returns Extracted path (e.g., \"/path\")\n */\nexport function extractHashPath(\n  hash: string,\n  prefixRegex: RegExp | null,\n): string {\n  if (hash === \"\" || hash === \"#\") {\n    return \"/\";\n  }\n\n  const path = prefixRegex ? hash.replace(prefixRegex, \"\") : hash.slice(1);\n\n  return path || \"/\";\n}\n\nexport function hashUrlToPath(url: string, prefixRegex: RegExp | null): string {\n  const parsedUrl = safeParseUrl(url);\n  const hashPath = extractHashPath(parsedUrl.hash, prefixRegex);\n\n  return hashPath.includes(\"?\") ? hashPath : hashPath + parsedUrl.search;\n}\n\n/**\n * Build the router-side location string from a hash + query pair.\n *\n * Encodes the hash path via `safelyEncodePath` after stripping the\n * configured prefix, then appends the outer `search` only when the hash\n * path itself does not already carry a `?` — otherwise the outer search\n * would be duplicated (see `url.test.ts` — \"well-formed path (no double '?')\").\n *\n * Used by the `createSafeBrowser` `getLocation` callback both in the\n * production factory and in functional/stress test helpers. Extracting\n * here keeps the production path and test mocks aligned; a regression in\n * this logic previously slipped between the two.\n */\nexport function buildHashLocation(\n  hash: string,\n  search: string,\n  prefixRegex: RegExp | null,\n): string {\n  const hashPath = safelyEncodePath(extractHashPath(hash, prefixRegex));\n\n  return hashPath.includes(\"?\") ? hashPath : hashPath + search;\n}\n","import {\n  createPopstateHandler,\n  createPopstateLifecycle,\n  createStartInterceptor,\n  createReplaceHistoryState,\n  shouldReplaceHistory,\n  updateBrowserState,\n} from \"./browser-env\";\nimport { LOGGER_CONTEXT } from \"./constants\";\nimport { hashUrlToPath } from \"./hash-utils\";\n\nimport type { Browser, SharedFactoryState } from \"./browser-env\";\nimport type { HashPluginOptions } from \"./types\";\nimport type {\n  NavigationOptions,\n  Params,\n  Router,\n  State,\n  Plugin,\n} from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\nexport class HashPlugin {\n  readonly #router: Router;\n  readonly #browser: Browser;\n  readonly #removeStartInterceptor: () => void;\n  readonly #removeExtensions: () => void;\n  readonly #lifecycle: Pick<Plugin, \"onStart\" | \"onStop\" | \"teardown\">;\n  readonly #warnHashIgnored!: () => void;\n\n  constructor(\n    router: Router,\n    api: PluginApi,\n    options: Required<HashPluginOptions>,\n    browser: Browser,\n    prefixRegex: RegExp | null,\n    transitionOptions: {\n      source: string;\n      replace: true;\n      forceDeactivate?: boolean;\n    },\n    shared: SharedFactoryState,\n  ) {\n    this.#router = router;\n    this.#browser = browser;\n\n    this.#removeStartInterceptor = createStartInterceptor(api, browser);\n\n    // Hash limitation warn-once (#532). hash-plugin uses `#` as the route\n    // delimiter, so URL fragments are structurally incompatible. Plugin\n    // accepts the `hash` option for typing parity with browser/navigation\n    // plugins, ignores it, and emits a single console.warn the first time\n    // any consumer surfaces a hash. Existing `createWarnOnce` in browser-env\n    // is SSR-specific (different signature) — inline pattern here.\n    let hashWarned = false;\n    const warnHashIgnored = (): void => {\n      if (hashWarned) {\n        return;\n      }\n\n      hashWarned = true;\n      console.warn(\n        \"[@real-router/hash-plugin] `hash` option is ignored — `#` is reserved for the route delimiter. \" +\n          \"URL fragments are not supported with hash-plugin; use @real-router/browser-plugin or \" +\n          \"@real-router/navigation-plugin if you need them.\",\n      );\n    };\n\n    const urlPrefix = `${options.base}#${options.hashPrefix}`;\n    const pluginBuildUrl = (\n      route: string,\n      params?: Params,\n      opts?: { hash?: string },\n    ) => {\n      if (opts?.hash !== undefined) {\n        warnHashIgnored();\n      }\n\n      return urlPrefix + router.buildPath(route, params);\n    };\n\n    this.#warnHashIgnored = warnHashIgnored;\n\n    this.#removeExtensions = api.extendRouter({\n      buildUrl: pluginBuildUrl,\n      matchUrl: (url: string) =>\n        api.matchPath(hashUrlToPath(url, prefixRegex)) ?? undefined,\n      replaceHistoryState: createReplaceHistoryState(\n        api,\n        router,\n        browser,\n        pluginBuildUrl,\n        false,\n      ),\n    });\n\n    const handler = createPopstateHandler({\n      router,\n      api,\n      browser,\n      allowNotFound: api.getOptions().allowNotFound,\n      transitionOptions,\n      loggerContext: LOGGER_CONTEXT,\n      buildUrl: pluginBuildUrl,\n    });\n\n    this.#lifecycle = createPopstateLifecycle({\n      browser,\n      shared,\n      handler,\n      cleanup: () => {\n        this.#removeStartInterceptor();\n        this.#removeExtensions();\n      },\n    });\n  }\n\n  getPlugin(): Plugin {\n    return {\n      ...this.#lifecycle,\n\n      onTransitionSuccess: (\n        toState: State,\n        fromState: State | undefined,\n        navOptions: NavigationOptions,\n      ) => {\n        // Hash limitation (#532): warn once if a consumer programmatically\n        // requested a fragment via `router.navigate(..., { hash })`.\n        if (navOptions.hash !== undefined) {\n          this.#warnHashIgnored();\n        }\n\n        const replaceHistory = shouldReplaceHistory(\n          navOptions,\n          toState,\n          fromState,\n        );\n\n        const url = this.#router.buildUrl(toState.name, toState.params);\n\n        updateBrowserState(toState, url, replaceHistory, this.#browser);\n      },\n    };\n  }\n}\n","import {\n  createOptionsValidator,\n  safeBaseRule,\n  safeHashPrefixRule,\n} from \"./browser-env\";\nimport { LOGGER_CONTEXT, defaultOptions } from \"./constants\";\n\nimport type { HashPluginOptions } from \"./types\";\n\nexport const validateOptions = createOptionsValidator<HashPluginOptions>(\n  defaultOptions,\n  LOGGER_CONTEXT,\n  { base: safeBaseRule, hashPrefix: safeHashPrefixRule },\n);\n","import { getPluginApi } from \"@real-router/core/api\";\n\nimport { createSafeBrowser, normalizeBase } from \"./browser-env\";\nimport { defaultOptions, source } from \"./constants\";\nimport { buildHashLocation, createHashPrefixRegex } from \"./hash-utils\";\nimport { HashPlugin } from \"./plugin\";\nimport { validateOptions } from \"./validation\";\n\nimport type { Browser, SharedFactoryState } from \"./browser-env\";\nimport type { HashPluginOptions } from \"./types\";\nimport type { PluginFactory, Router } from \"@real-router/core\";\n\nexport function hashPluginFactory(\n  opts?: Partial<HashPluginOptions>,\n  browser?: Browser,\n): PluginFactory {\n  validateOptions(opts);\n\n  const definedOpts = opts\n    ? Object.fromEntries(\n        Object.entries(opts).filter(\n          // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- runtime may receive explicit undefined via conditional spreads (exactOptionalPropertyTypes does not apply here)\n          ([, value]) => value !== undefined,\n        ),\n      )\n    : {};\n  const options: Required<HashPluginOptions> = {\n    ...defaultOptions,\n    ...definedOpts,\n  };\n\n  options.base = normalizeBase(options.base);\n\n  const prefixRegex = createHashPrefixRegex(options.hashPrefix);\n  const resolvedBrowser =\n    browser ??\n    createSafeBrowser(\n      () =>\n        buildHashLocation(\n          globalThis.location.hash,\n          globalThis.location.search,\n          prefixRegex,\n        ),\n      \"hash-plugin\",\n    );\n\n  const transitionOptions = {\n    forceDeactivate: options.forceDeactivate,\n    source,\n    replace: true as const,\n  };\n\n  const shared: SharedFactoryState = { removePopStateListener: undefined };\n\n  return function hashPlugin(routerBase) {\n    const plugin = new HashPlugin(\n      routerBase as Router,\n      getPluginApi(routerBase),\n      options,\n      resolvedBrowser,\n      prefixRegex,\n      transitionOptions,\n      shared,\n    );\n\n    return plugin.getPlugin();\n  };\n}\n"],"mappings":"yIAWA,SAAgB,EAAc,EAAsB,CAClD,GAAI,CAAC,EACH,OAAO,EAGT,IAAI,EAAS,EAAK,WAAW,OAAQ,GAAG,EAUxC,OARK,EAAO,WAAW,GAAG,IACxB,EAAS,IAAI,KAGX,EAAO,OAAS,GAAK,EAAO,SAAS,GAAG,IAC1C,EAAS,EAAO,MAAM,EAAG,EAAE,GAGtB,IAAW,IAAM,GAAK,CAC/B,CAEA,MAAa,EAAoB,GAAyB,CACxD,GAAI,CACF,OAAO,UAAU,UAAU,CAAI,CAAC,CAClC,OAAS,EAAO,CAGd,OAFA,QAAQ,KAAK,wCAAwC,EAAK,GAAI,CAAK,EAE5D,CACT,CACF,ECrCmS,EAAE,0CAAiG,SAAS,EAAE,EAAE,CAAC,OAAO,OAAO,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,eAAe,CAAC,EAAE,OAAO,IAAI,MAAM,IAAI,OAAO,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,IAAI,UAAU,CAAC,EAAE,IAAI,SAAS,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,YAAY,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,QAAQ,EAAE,IAAI,QAAQ,KAAK,EAAE,OAAO,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,IAAI,UAAU,CAAC,EAAE,IAAI,SAAS,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,OAAO,GAAG,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,eAAe,CAAC,EAAE,GAAG,IAAI,MAAM,IAAI,OAAO,UAAU,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,EAAE,SAAS,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAqd,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,GAAG,OAAO,EAAE,MAAM,UAAU,EAAE,EAAE,MAAM,CAAC,CAAqD,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CCiCjtE,SAAgB,EACd,EACA,EACA,EACmB,CAKnB,OAJIA,EAAQ,EAAI,KAAK,EACZ,EAAI,UAAU,EAAI,MAAM,KAAM,EAAI,MAAM,OAAQ,EAAI,MAAM,IAAI,EAGhE,EAAI,UAAU,CAAQ,CAC/B,CAUA,SAAgB,EACd,EACA,EACA,EACA,EACM,CACN,IAAM,EAAe,CACnB,KAAM,EAAM,KACZ,OAAQ,EAAM,OACd,KAAM,EAAM,IACd,EAEI,EACF,EAAQ,aAAa,EAAc,CAAG,EAEtC,EAAQ,UAAU,EAAc,CAAG,CAEvC,CC9DA,SAAgB,EACd,EACA,EACA,EACwC,CACxC,MAAQ,IAAS,CACV,KAIL,IAAK,IAAM,KAAO,OAAO,KAAK,CAAI,EAAG,CACnC,GAAI,EAAE,KAAO,GACX,SAGF,IAAM,EAAQ,EAAK,GAEnB,GAAI,IAAU,IAAA,GACZ,SAGF,IAAM,EAAW,OAAO,EAAS,GAC3B,EAAS,OAAO,EAEtB,GAAI,IAAW,EACb,MAAU,MACR,IAAI,EAAc,sBAAsB,EAAI,cAAc,EAAS,QAAQ,GAC7E,EAGF,IAAM,EAAO,IAAQ,GAErB,GAAI,EAAM,CACR,IAAM,EAAO,EAAK,SAA+C,CAAK,EAEtE,GAAI,IAAQ,KACV,MAAU,MAAM,IAAI,EAAc,aAAa,EAAI,KAAK,GAAK,CAEjE,CACF,CACF,CACF,CAGA,MAAM,EAAgB,wBAET,EAAmC,CAC9C,SAAW,GACL,EAAc,KAAK,CAAK,EACnB,sCAGL,EAAM,MAAM,GAAG,CAAC,CAAC,SAAS,IAAI,EACzB,iCAGF,IAEX,EAEa,EAAyC,CACpD,SAAW,GACL,EAAc,KAAK,CAAK,EACnB,sCAGL,EAAM,SAAS,GAAG,EACb,sEAGL,EAAM,SAAS,GAAG,EACb,2DAGL,EAAM,SAAS,GAAG,EACb,+DAGF,IAEX,ECxFa,MACJ,WAAW,SAAW,QAAe,CAAC,CAAC,WAAW,QCC9C,GAAa,EAAgB,IAAuB,CAC/D,WAAW,QAAQ,UAAU,EAAO,GAAI,CAAI,CAC9C,EAEa,GAAgB,EAAgB,IAAuB,CAClE,WAAW,QAAQ,aAAa,EAAO,GAAI,CAAI,CACjD,EAEa,EACX,IAEA,WAAW,iBAAiB,WAAY,CAAE,MAE7B,CACX,WAAW,oBAAoB,WAAY,CAAE,CAC/C,GAGW,MAAwB,WAAW,SAAS,KClBnD,MAAmB,CAAC,EAEb,EAAkB,GAAoB,CACjD,IAAI,EAAY,GAEhB,MAAQ,IAAyB,CAC/B,AAME,KALA,QAAQ,KACN,gFAAgF,EAAQ,cAC3E,EAAO,4GAEtB,EACY,GAEhB,CACF,EAEa,EACX,GACmB,CACnB,IAAM,EAAW,EAAe,CAAO,EAEvC,MAAO,CACL,cAAiB,CACf,EAAS,WAAW,CACtB,EACA,iBAAoB,CAClB,EAAS,cAAc,CACzB,EACA,yBACE,EAAS,qBAAqB,EAEvB,GAET,aACE,EAAS,SAAS,EAEX,GAEX,CACF,EC5BA,SAAgB,EACd,EACA,EACS,CACT,GAAI,EAAqB,EACvB,MAAO,CACL,YACA,eACA,sBACA,cACA,SACF,EAGF,IAAM,EAAW,EAAe,CAAO,EAEvC,MAAO,CACL,GAAG,EAA6B,CAAO,EACvC,iBACE,EAAS,aAAa,EAEf,GAEX,CACF,CCiBA,SAAS,EACP,EACA,EACoD,CACpD,GAAI,CAAC,EAAK,eACR,MAAO,CAAC,EAGV,IAAM,EAAU,EAAK,eAAe,EAOpC,OAFE,KAJe,EAAK,sBAClB,EAAK,sBAAsB,EAC3B,KAEsB,EAAK,OAAO,SAAS,CAAC,EAAE,OAAS,EAGvD,CAAE,KAAM,EAAS,MAAO,GAAM,WAAY,EAAK,EAC/C,CAAE,KAAM,CAAQ,CACtB,CAEA,SAAgB,EACd,EAC8B,CAC9B,IAAI,EAAkB,GAKlB,EAA4D,KAEhE,SAAS,GAA6B,CACpC,GAAI,EAAU,CACZ,GAAM,CAAE,MAAK,YAAa,EAE1B,EAAW,KACX,QAAQ,KACN,IAAI,EAAK,cAAc,qCACzB,EACA,EAAgB,EAAK,CAAQ,CAC/B,CACF,CAEA,SAAS,GAAkC,CACzC,IAAM,EAAe,EAAK,OAAO,SAAS,EAG1C,GAAI,CAAC,EACH,OAKF,IAAM,EACJ,EAAa,SACZ,KAAK,KACF,EAAM,EAAK,SACf,EAAa,KACb,EAAa,OACb,EAAU,CAAE,KAAM,CAAQ,EAAI,IAAA,EAChC,EAEA,EAAK,QAAQ,aAAa,EAAc,CAAG,CAC7C,CAEA,SAAS,EAAyB,EAAsB,CACtD,QAAQ,MACN,IAAI,EAAK,cAAc,gCACvB,CACF,EAEA,GAAI,CACF,EAA0B,CAC5B,OAAS,EAAe,CACtB,QAAQ,MACN,IAAI,EAAK,cAAc,yCACvB,CACF,CACF,CACF,CAEA,eAAe,EACb,EACA,EACe,CACf,GAAI,EAAiB,CACnB,QAAQ,KACN,IAAI,EAAK,cAAc,mDACzB,EACA,EAAW,CAAE,MAAK,UAAS,EAE3B,MACF,CAEA,EAAkB,GAElB,GAAI,CACF,IAAM,EAAU,EAAkB,EAAK,EAAK,IAAK,CAAQ,EAEzD,GAAI,EAKF,MAAM,EAAK,IAAI,gBAAgB,EAAS,CACtC,GAAG,EAAK,kBACR,GAAG,EAAmB,EAAM,EAAQ,IAAI,CAC1C,CAAC,OACI,GAAI,EAAK,cACd,EAAK,OAAO,mBAAmB,CAAQ,MAClC,CAGL,IAAM,EAAM,IAAIC,EAAAA,YAAYC,EAAAA,WAAW,gBAAiB,CACtD,KAAM,CACR,CAAC,EAED,EAAK,IAAI,oBAAoB,CAAG,EAChC,EAA0B,CAC5B,CACF,OAAS,EAAO,CACd,GAAI,aAAiBD,EAAAA,YAInB,GAAI,CACF,EAA0B,CAC5B,MAAQ,CAER,MAEA,EAAyB,CAAK,CAElC,QAAU,CACR,EAAkB,GAClB,EAAqB,CACvB,CACF,CAIA,MAAQ,IACN,KAAK,EAAW,EAAK,EAAK,QAAQ,YAAY,CAAC,CACnD,CASA,SAAgB,EACd,EACiD,CACjD,MAAO,CACL,YAAe,CACT,EAAK,OAAO,wBACd,EAAK,OAAO,uBAAuB,EAGrC,EAAK,OAAO,uBAAyB,EAAK,QAAQ,oBAChD,EAAK,OACP,CACF,EAEA,WAAc,CACR,EAAK,OAAO,yBACd,EAAK,OAAO,uBAAuB,EACnC,EAAK,OAAO,uBAAyB,IAAA,GAEzC,EAEA,aAAgB,CACV,EAAK,OAAO,yBACd,EAAK,OAAO,uBAAuB,EACnC,EAAK,OAAO,uBAAyB,IAAA,IAGvC,EAAK,QAAQ,CACf,CACF,CACF,CCjNA,SAAgB,EAAmB,EAAyB,CAC1D,OAAO,UAAU,CAAO,CAAC,CAAC,WAAW,IAAK,KAAK,CACjD,CAMA,SAAgB,EAAmB,EAAyB,CAC1D,GAAI,CACF,OAAO,mBAAmB,CAAO,CACnC,MAAQ,CACN,OAAO,CACT,CACF,CAYA,SAAgB,EAAmB,EAAuB,CACxD,IAAI,EAAW,EAEf,KAAO,EAAS,WAAW,GAAG,GAC5B,EAAW,EAAS,MAAM,CAAC,EAG7B,OAAO,EAAmB,CAAQ,CACpC,CC3CA,MAAM,EAAsC,IAAI,IAAI,CAAC,IAAK,IAAK,GAAG,CAAC,EAEnE,SAAgB,EAAa,EAAwB,CACnD,IAAI,EAAO,EAEL,EAAY,EAAK,QAAQ,KAAK,EAEpC,GAAI,IAAc,GAAI,CACpB,IAAM,EAAiB,EAAY,EAC/B,EAAY,EAAK,OAErB,IAAK,IAAI,EAAI,EAAgB,EAAI,EAAK,OAAQ,IAAK,CACjD,IAAM,EAAK,EAAK,GAEhB,GAAI,EAAe,IAAI,CAAE,EAAG,CAC1B,EAAY,EAEZ,KACF,CACF,CAEA,EAAO,IAAc,EAAK,OAAS,IAAM,EAAK,MAAM,CAAS,GAEzD,EAAK,WAAW,GAAG,GAAK,EAAK,WAAW,GAAG,KAC7C,EAAO,IAAI,IAEf,CAEA,IAAM,EAAU,EAAK,QAAQ,GAAG,EAC1B,EAAO,IAAY,GAAK,GAAK,EAAK,MAAM,CAAO,EAC/C,EAAa,IAAY,GAAK,EAAO,EAAK,MAAM,EAAG,CAAO,EAE1D,EAAW,EAAW,QAAQ,GAAG,EACjC,EAAS,IAAa,GAAK,GAAK,EAAW,MAAM,CAAQ,EAG/D,MAAO,CAAE,SAFQ,IAAa,GAAK,EAAa,EAAW,MAAM,EAAG,CAAQ,EAEzD,SAAQ,MAAK,CAClC,CClBA,SAAgB,EACd,EACA,EACY,CACZ,OAAO,EAAI,eAAe,SAAU,EAAM,IACxC,EAAK,GAAQ,EAAQ,YAAY,CAAC,CACpC,CACF,CAuBA,SAAgB,EACd,EACA,EACA,EACA,EAKA,EAAe,GAKP,CAIR,IAAM,EAAS,CACb,KAAM,GACN,OAAQ,CAAC,EACT,KAAM,EACR,EAEA,OACE,EACA,EAAiB,CAAC,EAClB,IACG,CACH,IAAM,EAAQ,EAAI,WAAW,EAAM,CAAM,EAEzC,GAAI,CAAC,EACH,MAAU,MACR,8CAA8C,EAAK,eACrD,EAGF,IAAM,EAAa,EAAI,UACrB,EAAM,KACN,EAAM,OACN,EAAO,UAAU,EAAM,KAAM,EAAM,MAAM,EACzC,CACE,OAAQ,EAAM,IAChB,CACF,EAQI,EAEJ,GAAI,GAAS,OAAS,IAAA,GAAW,CAC/B,IAAM,EAAO,EAAmB,EAAQ,IAAI,EAE5C,EAAc,EAAO,IAAI,EAAmB,CAAI,IAAM,EACxD,MAAO,AAGL,EAHS,EACK,EAAQ,QAAQ,EAEhB,GAOhB,IAAM,EAAM,EAAW,EAAM,CAAM,EAAI,EAEvC,EAAO,KAAO,EAAW,KACzB,EAAO,OAAS,EAAW,OAC3B,EAAO,KAAO,EAAW,KAEzB,EAAQ,aAAa,EAAQ,CAAG,CAClC,CACF,CAEA,SAAgB,EACd,EACA,EACA,EACS,CAST,OARI,EAAW,UAAY,GAClB,GAGJ,EAIE,CAAC,CAAC,EAAW,QAAU,EAAQ,OAAS,EAAU,KAHhD,EAAW,UAAY,EAIlC,CC3JA,MAAa,EAA8C,CACzD,WAAY,GACZ,KAAM,GACN,gBAAiB,EACnB,EAOa,EAAiB,cCX9B,SAAS,EAAa,EAAqB,CACzC,OAAO,EAAI,WAAW,uBAAwB,OAAO,GAAG,KAAK,CAC/D,CAEA,SAAgB,EAAsB,EAAmC,CAKvE,OAJK,EAIM,OAAO,KAAK,EAAa,CAAU,GAAG,EAHxC,IAIX,CASA,SAAgB,EACd,EACA,EACQ,CAOR,OANI,IAAS,IAAM,IAAS,IACnB,KAGI,EAAc,EAAK,QAAQ,EAAa,EAAE,EAAI,EAAK,MAAM,CAAC,IAExD,GACjB,CAEA,SAAgB,EAAc,EAAa,EAAoC,CAC7E,IAAM,EAAY,EAAa,CAAG,EAC5B,EAAW,EAAgB,EAAU,KAAM,CAAW,EAE5D,OAAO,EAAS,SAAS,GAAG,EAAI,EAAW,EAAW,EAAU,MAClE,CAeA,SAAgB,EACd,EACA,EACA,EACQ,CACR,IAAM,EAAW,EAAiB,EAAgB,EAAM,CAAW,CAAC,EAEpE,OAAO,EAAS,SAAS,GAAG,EAAI,EAAW,EAAW,CACxD,CC1CA,IAAa,EAAb,KAAwB,CACtB,GACA,GACA,GACA,GACA,GACA,GAEA,YACE,EACA,EACA,EACA,EACA,EACA,EAKA,EACA,CACA,KAAKE,GAAU,EACf,KAAKC,GAAW,EAEhB,KAAKC,GAA0B,EAAuB,EAAK,CAAO,EAQlE,IAAI,EAAa,GACX,MAA8B,CAC9B,IAIJ,EAAa,GACb,QAAQ,KACN,sOAGF,EACF,EAEM,EAAY,GAAG,EAAQ,KAAK,GAAG,EAAQ,aACvC,GACJ,EACA,EACA,KAEI,GAAM,OAAS,IAAA,IACjB,EAAgB,EAGX,EAAY,EAAO,UAAU,EAAO,CAAM,GAGnD,KAAKG,GAAmB,EAExB,KAAKF,GAAoB,EAAI,aAAa,CACxC,SAAU,EACV,SAAW,GACT,EAAI,UAAU,EAAc,EAAK,CAAW,CAAC,GAAK,IAAA,GACpD,oBAAqB,EACnB,EACA,EACA,EACA,EACA,EACF,CACF,CAAC,EAED,IAAM,EAAU,EAAsB,CACpC,SACA,MACA,UACA,cAAe,EAAI,WAAW,CAAC,CAAC,cAChC,oBACA,cAAe,EACf,SAAU,CACZ,CAAC,EAED,KAAKC,GAAa,EAAwB,CACxC,UACA,SACA,UACA,YAAe,CACb,KAAKF,GAAwB,EAC7B,KAAKC,GAAkB,CACzB,CACF,CAAC,CACH,CAEA,WAAoB,CAClB,MAAO,CACL,GAAG,KAAKC,GAER,qBACE,EACA,EACA,IACG,CAGC,EAAW,OAAS,IAAA,IACtB,KAAKC,GAAiB,EAGxB,IAAM,EAAiB,EACrB,EACA,EACA,CACF,EAIA,EAAmB,EAFP,KAAKL,GAAQ,SAAS,EAAQ,KAAM,EAAQ,MAE1B,EAAG,EAAgB,KAAKC,EAAQ,CAChE,CACF,CACF,CACF,ECvIA,MAAa,EAAkB,EAC7B,EACA,EACA,CAAE,KAAM,EAAc,WAAY,CAAmB,CACvD,ECDA,SAAgB,EACd,EACA,EACe,CACf,EAAgB,CAAI,EAEpB,IAAM,EAAc,EAChB,OAAO,YACL,OAAO,QAAQ,CAAI,CAAC,CAAC,QAElB,EAAG,KAAW,IAAU,IAAA,EAC3B,CACF,EACA,CAAC,EACC,EAAuC,CAC3C,GAAG,EACH,GAAG,CACL,EAEA,EAAQ,KAAO,EAAc,EAAQ,IAAI,EAEzC,IAAM,EAAc,EAAsB,EAAQ,UAAU,EACtD,EACJ,GACA,MAEI,EACE,WAAW,SAAS,KACpB,WAAW,SAAS,OACpB,CACF,EACF,aACF,EAEI,EAAoB,CACxB,gBAAiB,EAAQ,gBACzB,kBACA,QAAS,EACX,EAEM,EAA6B,CAAE,uBAAwB,IAAA,EAAU,EAEvE,OAAO,SAAoB,EAAY,CAWrC,OAAO,IAVY,EACjB,GAAA,EAAA,EAAA,aAAA,CACa,CAAU,EACvB,EACA,EACA,EACA,EACA,CAGU,CAAC,CAAC,UAAU,CAC1B,CACF"}

package/dist/esm/index.d.mts

@@ -43,15 +43,18 @@ declare function hashPluginFactory(opts?: Partial<HashPluginOptions>, browser?:
 //#endregion
 //#region ../type-guards/dist/esm/index.d.mts
 /**
- * Enhanced type guard for State with deep validation.
- * Checks not only presence but also types of all required fields.
- * Validates params using isParams and meta structure if present.
+ * Type guard for State. Performs the same required-field check as {@link isState}
+ * (`name` via `isRouteName`, `path` is a string, `params` via `isParams`) — the
+ * "Strict" in the name is historical: there is no deeper meta-field validation,
+ * and `meta.id` is intentionally NOT type-checked (history.state restores
+ * serialize it as a string — see the backward-compat property test). Re-exported
+ * as `isState` by the browser and hash plugins for validating `history.state`.
  *
  * @param value - Value to check
- * @returns true if value is a valid State object with correct types
+ * @returns true if value has the required State fields with valid types
  *
  * @example
- * isStateStrict({ name: 'home', params: {}, path: '/', meta: { id: 1 } }); // true
+ * isStateStrict({ name: 'home', params: {}, path: '/' }); // true
  * isStateStrict({ name: 'home', params: 'invalid', path: '/' }); // false
  */
 declare function isStateStrict<P extends Params$1 = Params$1>(value: unknown): value is State$1<P>; //#endregion

package/dist/esm/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":["value","NavigationOptions","name","P","Params","State","T","key","obj","Extract","methodName","state","method"],"sources":["../../../../shared/browser-env/types.ts","../../src/types.ts","../../src/factory.ts","../../../type-guards/dist/esm/index.d.mts","../../src/index.ts"],"mappings":";;;;UAAiB,cAAA;EACf,SAAA,GAAY,KAAA,WAAgB,IAAA;EAC5B,YAAA,GAAe,KAAA,WAAgB,IAAA;EAC/B,mBAAA,GAAsB,EAAA,GAAK,GAAA,EAAK,aAAa;EAC7C,OAAA;AAAA;AAAA,UAGe,OAAA,SAAgB,cAAc;EAC7C,WAAW;AAAA;;;;;;;UCFI,iBAAA;EDNA;;;;;ECYf,UAAA;EDX4B;;;;;ECkB5B,IAAA;EDhB2B;;;;AACpB;ECsBP,eAAA;AAAA;;;iBCdc,iBAAA,CACd,IAAA,GAAO,OAAA,CAAQ,iBAAA,GACf,OAAA,GAAU,OAAA,GACT,aAAA;;;;;;;;;;;;;ACkEwF;;iBAA1E,aAAA,WAAwB,QAAA,GAAS,QAAA,EAAQA,KAAAA,YAAiBA,KAAAA,IAAS,OAAA,CAAM,CAAA;AAAA;;;;;;;;;AHjF1F;;;;;;;;AAAA;EAAA,UI0BY,iBAAA;IJvBV;;;;;II6BE,IAAA;IJ5BK;II8BL,UAAA;EAAA;AAAA;AAAA;EAAA,UAKQ,MAAA;;;;AHjCZ;;;;;;IG2CI,QAAA,CACE,IAAA,UACA,MAAA,GAAS,MAAA,EACT,OAAA;MAAY,IAAA;IAAA;;;;AFxClB;IE+CI,QAAA,CAAS,GAAA,WAAc,KAAA;IF/CM;;;;;IEsD7B,mBAAA,CACE,IAAA,UACA,MAAA,GAAS,MAAA,EACT,OAAA;MAAY,IAAA;IAAA;IAGd,KAAA,CAAM,IAAA,YAAgB,OAAA,CAAQ,KAAA;EAAA;AAAA"}
+{"version":3,"file":"index.d.mts","names":["value","NavigationOptions","name","P","Params","State","T","key","obj","Extract","methodName","state","method"],"sources":["../../../../shared/browser-env/types.ts","../../src/types.ts","../../src/factory.ts","../../../type-guards/dist/esm/index.d.mts","../../src/index.ts"],"mappings":";;;;UAAiB,cAAA;EACf,SAAA,GAAY,KAAA,WAAgB,IAAA;EAC5B,YAAA,GAAe,KAAA,WAAgB,IAAA;EAC/B,mBAAA,GAAsB,EAAA,GAAK,GAAA,EAAK,aAAa;EAC7C,OAAA;AAAA;AAAA,UAGe,OAAA,SAAgB,cAAc;EAC7C,WAAW;AAAA;;;;;;;UCFI,iBAAA;EDNA;;;;;ECYf,UAAA;EDX4B;;;;;ECkB5B,IAAA;EDhB2B;;;;AACpB;ECsBP,eAAA;AAAA;;;iBCdc,iBAAA,CACd,IAAA,GAAO,OAAA,CAAQ,iBAAA,GACf,OAAA,GAAU,OAAA,GACT,aAAA;;;;;;;;;;;;;ACqEwF;;;;ACrEpC;iBDqEtC,aAAA,WAAwB,QAAA,GAAS,QAAA,EAAQA,KAAAA,YAAiBA,KAAAA,IAAS,OAAA,CAAM,CAAA;AAAA;;;;;;AClD5E;;;AJlCd;;;;;;;;AAAA;EAAA,UI0BY,iBAAA;IJvBV;;;;;II6BE,IAAA;IJ5BK;II8BL,UAAA;EAAA;AAAA;AAAA;EAAA,UAKQ,MAAA;;;;AHjCZ;;;;;;IG2CI,QAAA,CACE,IAAA,UACA,MAAA,GAAS,MAAA,EACT,OAAA;MAAY,IAAA;IAAA;;;;AFxClB;IE+CI,QAAA,CAAS,GAAA,WAAc,KAAA;IF/CM;;;;;IEsD7B,mBAAA,CACE,IAAA,UACA,MAAA,GAAS,MAAA,EACT,OAAA;MAAY,IAAA;IAAA;IAGd,KAAA,CAAM,IAAA,YAAgB,OAAA,CAAQ,KAAA;EAAA;AAAA"}

package/dist/esm/index.mjs

@@ -1,2 +1,2 @@
-import{getPluginApi as e}from"@real-router/core/api";import{RouterError as t,errorCodes as n}from"@real-router/core";function r(e){if(!e)return e;let t=e.replaceAll(/\/+/g,`/`);return t.startsWith(`/`)||(t=`/${t}`),t.length>1&&t.endsWith(`/`)&&(t=t.slice(0,-1)),t===`/`?``:t}const i=e=>{try{return encodeURI(decodeURI(e))}catch(t){return console.warn(`[browser-env] Could not encode path "${e}"`,t),e}},a=/^[A-Z_a-z][\w-]*(?:\.[A-Z_a-z][\w-]*)*$/;function o(e){return typeof e==`string`?e===``?!0:e.length>1e4?!1:e.startsWith(`@@`)?!0:a.test(e):!1}function s(e,t=new WeakSet){if(e==null)return!0;let n=typeof e;if(n===`string`||n===`boolean`)return!0;if(n===`number`)return Number.isFinite(e);if(n===`function`||n===`symbol`)return!1;if(Array.isArray(e))return t.has(e)?!1:(t.add(e),e.every(e=>s(e,t)));if(n===`object`){if(t.has(e))return!1;t.add(e);let n=Object.getPrototypeOf(e);return n!==null&&n!==Object.prototype?!1:Object.values(e).every(e=>s(e,t))}return!1}function c(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}function l(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;let n=!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let r=e[t];if(!c(r)){let e=typeof r;if(e===`function`||e===`symbol`)return!1;n=!0;break}}return n?s(e):!0}function u(e){return o(e.name)&&typeof e.path==`string`&&l(e.params)}function d(e){return!(typeof e!=`object`||!e||!u(e))}function f(e,t,n){return d(e.state)?t.makeState(e.state.name,e.state.params,e.state.path):t.matchPath(n)}function p(e,t,n,r){let i={name:e.name,params:e.params,path:e.path};n?r.replaceState(i,t):r.pushState(i,t)}function m(e,t,n){return r=>{if(r)for(let i of Object.keys(r)){if(!(i in e))continue;let a=r[i];if(a===void 0)continue;let o=typeof e[i],s=typeof a;if(s!==o)throw Error(`[${t}] Invalid type for '${i}': expected ${o}, got ${s}`);let c=n?.[i];if(c){let e=c.validate(a);if(e!==null)throw Error(`[${t}] Invalid '${i}': ${e}`)}}}}const h=/[\u0000-\u001F\u007F]/,g={validate:e=>h.test(e)?`must not contain control characters`:e.split(`/`).includes(`..`)?`must not contain '..' segments`:null},_={validate:e=>h.test(e)?`must not contain control characters`:e.includes(`/`)?`must not contain '/' (slash is added before the path automatically)`:e.includes(`#`)?`must not contain '#' (it is added as the hash delimiter)`:e.includes(`?`)?`must not contain '?' (it conflicts with the query delimiter)`:null},v=()=>globalThis.window!==void 0&&!!globalThis.history,y=(e,t)=>{globalThis.history.pushState(e,``,t)},b=(e,t)=>{globalThis.history.replaceState(e,``,t)},x=e=>(globalThis.addEventListener(`popstate`,e),()=>{globalThis.removeEventListener(`popstate`,e)}),S=()=>globalThis.location.hash,C=()=>{},w=e=>{let t=!1;return n=>{t||=(console.warn(`[browser-env] Browser API is running in a non-browser environment (context: "${e}"). Method "${n}" is a no-op. This is expected for SSR, but may indicate misconfiguration if you expected browser behavior.`),!0)}},T=e=>{let t=w(e);return{pushState:()=>{t(`pushState`)},replaceState:()=>{t(`replaceState`)},addPopstateListener:()=>(t(`addPopstateListener`),C),getHash:()=>(t(`getHash`),``)}};function E(e,t){if(v())return{pushState:y,replaceState:b,addPopstateListener:x,getLocation:e,getHash:S};let n=w(t);return{...T(t),getLocation:()=>(n(`getLocation`),``)}}function D(e,t){if(!e.getCurrentHash)return{};let n=e.getCurrentHash();return n!==(e.getCurrentContextHash?e.getCurrentContextHash():``)&&e.router.getState()?.path===t?{hash:n,force:!0,hashChange:!0}:{hash:n}}function O(e){let r=!1,i=null;function a(){if(i){let{evt:t,location:n}=i;i=null,console.warn(`[${e.loggerContext}] Processing deferred popstate event`),c(t,n)}}function o(){let t=e.router.getState();if(!t)return;let n=t.context?.url?.hash,r=e.buildUrl(t.name,t.params,n?{hash:n}:void 0);e.browser.replaceState(t,r)}function s(t){console.error(`[${e.loggerContext}] Critical error in onPopState`,t);try{o()}catch(t){console.error(`[${e.loggerContext}] Failed to recover from critical error`,t)}}async function c(c,l){if(r){console.warn(`[${e.loggerContext}] Transition in progress, deferring popstate event`),i={evt:c,location:l};return}r=!0;try{let r=f(c,e.api,l);if(r)await e.api.navigateToState(r,{...e.transitionOptions,...D(e,r.path)});else if(e.allowNotFound)e.router.navigateToNotFound(l);else{let r=new t(n.ROUTE_NOT_FOUND,{path:l});e.api.emitTransitionError(r),o()}}catch(e){if(e instanceof t)try{o()}catch{}else s(e)}finally{r=!1,a()}}return t=>void c(t,e.browser.getLocation())}function k(e){return{onStart:()=>{e.shared.removePopStateListener&&e.shared.removePopStateListener(),e.shared.removePopStateListener=e.browser.addPopstateListener(e.handler)},onStop:()=>{e.shared.removePopStateListener&&(e.shared.removePopStateListener(),e.shared.removePopStateListener=void 0)},teardown:()=>{e.shared.removePopStateListener&&(e.shared.removePopStateListener(),e.shared.removePopStateListener=void 0),e.cleanup()}}}function A(e){return encodeURI(e).replaceAll(`#`,`%23`)}function j(e){try{return decodeURIComponent(e)}catch{return e}}function M(e){let t=e;for(;t.startsWith(`#`);)t=t.slice(1);return j(t)}const N=new Set([`/`,`?`,`#`]);function P(e){let t=e,n=t.indexOf(`://`);if(n!==-1){let e=n+3,r=t.length;for(let n=e;n<t.length;n++){let e=t[n];if(N.has(e)){r=n;break}}t=r===t.length?`/`:t.slice(r),(t.startsWith(`?`)||t.startsWith(`#`))&&(t=`/${t}`)}let r=t.indexOf(`#`),i=r===-1?``:t.slice(r),a=r===-1?t:t.slice(0,r),o=a.indexOf(`?`),s=o===-1?``:a.slice(o);return{pathname:o===-1?a:a.slice(0,o),search:s,hash:i}}function F(e,t){return e.addInterceptor(`start`,(e,n)=>e(n??t.getLocation()))}function I(e,t,n,r,i=!0){let a={name:``,params:{},path:``};return(o,s={},c)=>{let l=e.buildState(o,s);if(!l)throw Error(`[real-router] Cannot replace state: route "${o}" is not found`);let u=e.makeState(l.name,l.params,t.buildPath(l.name,l.params),{params:l.meta}),d;if(c?.hash!==void 0){let e=M(c.hash);d=e?`#${A(e)}`:``}else d=i?n.getHash():``;let f=r(o,s)+d;a.name=u.name,a.params=u.params,a.path=u.path,n.replaceState(a,f)}}function L(e,t,n){return e.replace===!0?!0:n?!!e.reload&&t.path===n.path:e.replace!==!1}const R={hashPrefix:``,base:``,forceDeactivate:!0},z=`hash-plugin`;function B(e){return e.replaceAll(/[$()*+.?[\\\]^{|}-]/g,String.raw`\$&`)}function V(e){return e?RegExp(`^#${B(e)}`):null}function H(e,t){return e===``||e===`#`?`/`:(t?e.replace(t,``):e.slice(1))||`/`}function U(e,t){let n=P(e),r=H(n.hash,t);return r.includes(`?`)?r:r+n.search}function W(e,t,n){let r=i(H(e,n));return r.includes(`?`)?r:r+t}var G=class{#e;#t;#n;#r;#i;#a;constructor(e,t,n,r,i,a,o){this.#e=e,this.#t=r,this.#n=F(t,r);let s=!1,c=()=>{s||(s=!0,console.warn("[@real-router/hash-plugin] `hash` option is ignored — `#` is reserved for the route delimiter. URL fragments are not supported with hash-plugin; use @real-router/browser-plugin or @real-router/navigation-plugin if you need them."))},l=`${n.base}#${n.hashPrefix}`,u=(t,n,r)=>(r?.hash!==void 0&&c(),l+e.buildPath(t,n));this.#a=c,this.#r=t.extendRouter({buildUrl:u,matchUrl:e=>t.matchPath(U(e,i))??void 0,replaceHistoryState:I(t,e,r,u,!1)});let d=O({router:e,api:t,browser:r,allowNotFound:t.getOptions().allowNotFound,transitionOptions:a,loggerContext:z,buildUrl:u});this.#i=k({browser:r,shared:o,handler:d,cleanup:()=>{this.#n(),this.#r()}})}getPlugin(){return{...this.#i,onTransitionSuccess:(e,t,n)=>{n.hash!==void 0&&this.#a();let r=L(n,e,t);p(e,this.#e.buildUrl(e.name,e.params),r,this.#t)}}}};const K=m(R,z,{base:g,hashPrefix:_});function q(t,n){K(t);let i=t?Object.fromEntries(Object.entries(t).filter(([,e])=>e!==void 0)):{},a={...R,...i};a.base=r(a.base);let o=V(a.hashPrefix),s=n??E(()=>W(globalThis.location.hash,globalThis.location.search,o),`hash-plugin`),c={forceDeactivate:a.forceDeactivate,source:`popstate`,replace:!0},l={removePopStateListener:void 0};return function(t){return new G(t,e(t),a,s,o,c,l).getPlugin()}}export{q as hashPluginFactory,d as isState};
+import{getPluginApi as e}from"@real-router/core/api";import{RouterError as t,errorCodes as n}from"@real-router/core";function r(e){if(!e)return e;let t=e.replaceAll(/\/+/g,`/`);return t.startsWith(`/`)||(t=`/${t}`),t.length>1&&t.endsWith(`/`)&&(t=t.slice(0,-1)),t===`/`?``:t}const i=e=>{try{return encodeURI(decodeURI(e))}catch(t){return console.warn(`[browser-env] Could not encode path "${e}"`,t),e}},a=/^[A-Z_a-z][\w-]*(?:\.[A-Z_a-z][\w-]*)*$/;function o(e){return typeof e==`string`?e===``?!0:e.length>1e4?!1:e.startsWith(`@@`)?!0:a.test(e):!1}function s(e){if(Array.isArray(e))return!0;let t=Object.getPrototypeOf(e);return t===null||t===Object.prototype}function c(e,t){let n=Array.isArray(e)?e:Object.values(e);for(let e of n)t.push(e)}function l(e){let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}var u=class{container;constructor(e){this.container=e}};function d(e,t,n,r){return n.has(e)?!1:r.has(e)?!0:s(e)?(n.add(e),t.push(new u(e)),c(e,t),!0):!1}function f(e){let t=[e],n=new WeakSet,r=new WeakSet;for(;t.length>0;){let e=t.pop();if(e instanceof u){n.delete(e.container),r.add(e.container);continue}if(e!=null){if(typeof e==`object`){if(!d(e,t,n,r))return!1;continue}if(!l(e))return!1}}return!0}function p(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}function m(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;let n=!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let r=e[t];if(!p(r)){let e=typeof r;if(e===`function`||e===`symbol`)return!1;n=!0;break}}return n?f(e):!0}function h(e){return o(e.name)&&typeof e.path==`string`&&m(e.params)}function g(e){return!(typeof e!=`object`||!e||!h(e))}function _(e,t,n){return g(e.state)?t.makeState(e.state.name,e.state.params,e.state.path):t.matchPath(n)}function v(e,t,n,r){let i={name:e.name,params:e.params,path:e.path};n?r.replaceState(i,t):r.pushState(i,t)}function y(e,t,n){return r=>{if(r)for(let i of Object.keys(r)){if(!(i in e))continue;let a=r[i];if(a===void 0)continue;let o=typeof e[i],s=typeof a;if(s!==o)throw Error(`[${t}] Invalid type for '${i}': expected ${o}, got ${s}`);let c=n?.[i];if(c){let e=c.validate(a);if(e!==null)throw Error(`[${t}] Invalid '${i}': ${e}`)}}}}const b=/[\u0000-\u001F\u007F]/,x={validate:e=>b.test(e)?`must not contain control characters`:e.split(`/`).includes(`..`)?`must not contain '..' segments`:null},S={validate:e=>b.test(e)?`must not contain control characters`:e.includes(`/`)?`must not contain '/' (slash is added before the path automatically)`:e.includes(`#`)?`must not contain '#' (it is added as the hash delimiter)`:e.includes(`?`)?`must not contain '?' (it conflicts with the query delimiter)`:null},C=()=>globalThis.window!==void 0&&!!globalThis.history,w=(e,t)=>{globalThis.history.pushState(e,``,t)},T=(e,t)=>{globalThis.history.replaceState(e,``,t)},E=e=>(globalThis.addEventListener(`popstate`,e),()=>{globalThis.removeEventListener(`popstate`,e)}),D=()=>globalThis.location.hash,O=()=>{},k=e=>{let t=!1;return n=>{t||=(console.warn(`[browser-env] Browser API is running in a non-browser environment (context: "${e}"). Method "${n}" is a no-op. This is expected for SSR, but may indicate misconfiguration if you expected browser behavior.`),!0)}},A=e=>{let t=k(e);return{pushState:()=>{t(`pushState`)},replaceState:()=>{t(`replaceState`)},addPopstateListener:()=>(t(`addPopstateListener`),O),getHash:()=>(t(`getHash`),``)}};function j(e,t){if(C())return{pushState:w,replaceState:T,addPopstateListener:E,getLocation:e,getHash:D};let n=k(t);return{...A(t),getLocation:()=>(n(`getLocation`),``)}}function M(e,t){if(!e.getCurrentHash)return{};let n=e.getCurrentHash();return n!==(e.getCurrentContextHash?e.getCurrentContextHash():``)&&e.router.getState()?.path===t?{hash:n,force:!0,hashChange:!0}:{hash:n}}function N(e){let r=!1,i=null;function a(){if(i){let{evt:t,location:n}=i;i=null,console.warn(`[${e.loggerContext}] Processing deferred popstate event`),c(t,n)}}function o(){let t=e.router.getState();if(!t)return;let n=t.context?.url?.hash,r=e.buildUrl(t.name,t.params,n?{hash:n}:void 0);e.browser.replaceState(t,r)}function s(t){console.error(`[${e.loggerContext}] Critical error in onPopState`,t);try{o()}catch(t){console.error(`[${e.loggerContext}] Failed to recover from critical error`,t)}}async function c(c,l){if(r){console.warn(`[${e.loggerContext}] Transition in progress, deferring popstate event`),i={evt:c,location:l};return}r=!0;try{let r=_(c,e.api,l);if(r)await e.api.navigateToState(r,{...e.transitionOptions,...M(e,r.path)});else if(e.allowNotFound)e.router.navigateToNotFound(l);else{let r=new t(n.ROUTE_NOT_FOUND,{path:l});e.api.emitTransitionError(r),o()}}catch(e){if(e instanceof t)try{o()}catch{}else s(e)}finally{r=!1,a()}}return t=>void c(t,e.browser.getLocation())}function P(e){return{onStart:()=>{e.shared.removePopStateListener&&e.shared.removePopStateListener(),e.shared.removePopStateListener=e.browser.addPopstateListener(e.handler)},onStop:()=>{e.shared.removePopStateListener&&(e.shared.removePopStateListener(),e.shared.removePopStateListener=void 0)},teardown:()=>{e.shared.removePopStateListener&&(e.shared.removePopStateListener(),e.shared.removePopStateListener=void 0),e.cleanup()}}}function F(e){return encodeURI(e).replaceAll(`#`,`%23`)}function I(e){try{return decodeURIComponent(e)}catch{return e}}function L(e){let t=e;for(;t.startsWith(`#`);)t=t.slice(1);return I(t)}const R=new Set([`/`,`?`,`#`]);function z(e){let t=e,n=t.indexOf(`://`);if(n!==-1){let e=n+3,r=t.length;for(let n=e;n<t.length;n++){let e=t[n];if(R.has(e)){r=n;break}}t=r===t.length?`/`:t.slice(r),(t.startsWith(`?`)||t.startsWith(`#`))&&(t=`/${t}`)}let r=t.indexOf(`#`),i=r===-1?``:t.slice(r),a=r===-1?t:t.slice(0,r),o=a.indexOf(`?`),s=o===-1?``:a.slice(o);return{pathname:o===-1?a:a.slice(0,o),search:s,hash:i}}function B(e,t){return e.addInterceptor(`start`,(e,n)=>e(n??t.getLocation()))}function V(e,t,n,r,i=!0){let a={name:``,params:{},path:``};return(o,s={},c)=>{let l=e.buildState(o,s);if(!l)throw Error(`[real-router] Cannot replace state: route "${o}" is not found`);let u=e.makeState(l.name,l.params,t.buildPath(l.name,l.params),{params:l.meta}),d;if(c?.hash!==void 0){let e=L(c.hash);d=e?`#${F(e)}`:``}else d=i?n.getHash():``;let f=r(o,s)+d;a.name=u.name,a.params=u.params,a.path=u.path,n.replaceState(a,f)}}function H(e,t,n){return e.replace===!0?!0:n?!!e.reload&&t.path===n.path:e.replace!==!1}const U={hashPrefix:``,base:``,forceDeactivate:!0},W=`hash-plugin`;function G(e){return e.replaceAll(/[$()*+.?[\\\]^{|}-]/g,String.raw`\$&`)}function K(e){return e?RegExp(`^#${G(e)}`):null}function q(e,t){return e===``||e===`#`?`/`:(t?e.replace(t,``):e.slice(1))||`/`}function J(e,t){let n=z(e),r=q(n.hash,t);return r.includes(`?`)?r:r+n.search}function Y(e,t,n){let r=i(q(e,n));return r.includes(`?`)?r:r+t}var X=class{#e;#t;#n;#r;#i;#a;constructor(e,t,n,r,i,a,o){this.#e=e,this.#t=r,this.#n=B(t,r);let s=!1,c=()=>{s||(s=!0,console.warn("[@real-router/hash-plugin] `hash` option is ignored — `#` is reserved for the route delimiter. URL fragments are not supported with hash-plugin; use @real-router/browser-plugin or @real-router/navigation-plugin if you need them."))},l=`${n.base}#${n.hashPrefix}`,u=(t,n,r)=>(r?.hash!==void 0&&c(),l+e.buildPath(t,n));this.#a=c,this.#r=t.extendRouter({buildUrl:u,matchUrl:e=>t.matchPath(J(e,i))??void 0,replaceHistoryState:V(t,e,r,u,!1)});let d=N({router:e,api:t,browser:r,allowNotFound:t.getOptions().allowNotFound,transitionOptions:a,loggerContext:W,buildUrl:u});this.#i=P({browser:r,shared:o,handler:d,cleanup:()=>{this.#n(),this.#r()}})}getPlugin(){return{...this.#i,onTransitionSuccess:(e,t,n)=>{n.hash!==void 0&&this.#a();let r=H(n,e,t);v(e,this.#e.buildUrl(e.name,e.params),r,this.#t)}}}};const Z=y(U,W,{base:x,hashPrefix:S});function Q(t,n){Z(t);let i=t?Object.fromEntries(Object.entries(t).filter(([,e])=>e!==void 0)):{},a={...U,...i};a.base=r(a.base);let o=K(a.hashPrefix),s=n??j(()=>Y(globalThis.location.hash,globalThis.location.search,o),`hash-plugin`),c={forceDeactivate:a.forceDeactivate,source:`popstate`,replace:!0},l={removePopStateListener:void 0};return function(t){return new X(t,e(t),a,s,o,c,l).getPlugin()}}export{Q as hashPluginFactory,g as isState};
 //# sourceMappingURL=index.mjs.map

package/dist/esm/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["isState","#router","#browser","#removeStartInterceptor","#removeExtensions","#lifecycle","#warnHashIgnored"],"sources":["../../../../shared/browser-env/utils.ts","../../../type-guards/dist/esm/index.mjs","../../../../shared/browser-env/popstate-utils.ts","../../../../shared/browser-env/validation.ts","../../../../shared/browser-env/detect.ts","../../../../shared/browser-env/history-api.ts","../../../../shared/browser-env/ssr-fallback.ts","../../../../shared/browser-env/safe-browser.ts","../../../../shared/browser-env/popstate-handler.ts","../../../../shared/browser-env/url-context.ts","../../../../shared/browser-env/url-parsing.ts","../../../../shared/browser-env/plugin-utils.ts","../../src/constants.ts","../../src/hash-utils.ts","../../src/plugin.ts","../../src/validation.ts","../../src/factory.ts"],"sourcesContent":["/**\n * Normalizes base path to canonical form: leading slash, no trailing slash,\n * no repeated slashes. Isolated \"/\" collapses to \"\".\n *\n * @example\n * normalizeBase(\"app\")     // \"/app\"\n * normalizeBase(\"/app/\")   // \"/app\"\n * normalizeBase(\"//app//\") // \"/app\"\n * normalizeBase(\"\")        // \"\"\n * normalizeBase(\"/\")       // \"\"\n */\nexport function normalizeBase(base: string): string {\n  if (!base) {\n    return base;\n  }\n\n  let result = base.replaceAll(/\\/+/g, \"/\");\n\n  if (!result.startsWith(\"/\")) {\n    result = `/${result}`;\n  }\n\n  if (result.length > 1 && result.endsWith(\"/\")) {\n    result = result.slice(0, -1);\n  }\n\n  return result === \"/\" ? \"\" : result;\n}\n\nexport const safelyEncodePath = (path: string): string => {\n  try {\n    return encodeURI(decodeURI(path));\n  } catch (error) {\n    console.warn(`[browser-env] Could not encode path \"${path}\"`, error);\n\n    return path;\n  }\n};\n","const e=[`replace`,`reload`,`force`,`forceDeactivate`,`redirected`];function t(t){if(typeof t!=`object`||!t||Array.isArray(t))return!1;let n=t;for(let t of e){let e=n[t];if(e!==void 0&&typeof e!=`boolean`)return!1}let r=n.signal;return!(r!==void 0&&!(r instanceof AbortSignal))}const n=/\\S/,r=/^[A-Z_a-z][\\w-]*(?:\\.[A-Z_a-z][\\w-]*)*$/;function i(e,t){return TypeError(`[router.${e}] ${t}`)}function a(e){return typeof e==`string`?e===``?!0:e.length>1e4?!1:e.startsWith(`@@`)?!0:r.test(e):!1}function o(e,t=new WeakSet){if(e==null)return!0;let n=typeof e;if(n===`string`||n===`boolean`)return!0;if(n===`number`)return Number.isFinite(e);if(n===`function`||n===`symbol`)return!1;if(Array.isArray(e))return t.has(e)?!1:(t.add(e),e.every(e=>o(e,t)));if(n===`object`){if(t.has(e))return!1;t.add(e);let n=Object.getPrototypeOf(e);return n!==null&&n!==Object.prototype?!1:Object.values(e).every(e=>o(e,t))}return!1}function s(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}function c(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;let n=!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let r=e[t];if(!s(r)){let e=typeof r;if(e===`function`||e===`symbol`)return!1;n=!0;break}}return n?o(e):!0}function l(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):Array.isArray(e)?e.every(e=>{let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}):!1}function u(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let n=e[t];if(!l(n))return!1}return!0}function d(e){return a(e.name)&&typeof e.path==`string`&&c(e.params)}function f(e){return typeof e!=`object`||!e?!1:d(e)}function p(e){return!(typeof e!=`object`||!e||!d(e))}function m(e){return typeof e==`string`}function h(e){return typeof e==`boolean`}function g(e,t){return e in t}function _(e){return typeof e==`number`?Number.isFinite(e):typeof e==`string`||typeof e==`boolean`}function v(e,t){if(typeof e!=`string`)throw i(t,`Route name must be a string, got ${typeof e}`);if(e!==``){if(!n.test(e))throw i(t,`Route name cannot contain only whitespace`);if(e.length>1e4)throw i(t,`Route name exceeds maximum length of 10000 characters. This is a technical safety limit.`);if(!e.startsWith(`@@`)&&!r.test(e))throw i(t,`Invalid route name \"${e}\". Each segment must start with a letter or underscore, followed by letters, numbers, underscores, or hyphens. Segments are separated by dots (e.g., \"users.profile\").`)}}function y(e){return e===null?`null`:Array.isArray(e)?`array[${e.length}]`:typeof e==`object`?`constructor`in e&&e.constructor.name!==`Object`?e.constructor.name:`object`:typeof e}function b(e,t){if(!f(e))throw TypeError(`[${t}] Invalid state structure: ${y(e)}. Expected State object with name, params, and path properties.`)}export{y as getTypeDescription,h as isBoolean,t as isNavigationOptions,g as isObjKey,c as isParams,u as isParamsStrict,_ as isPrimitiveValue,a as isRouteName,f as isState,p as isStateStrict,m as isString,v as validateRouteName,b as validateState};\n//# sourceMappingURL=index.mjs.map","import { isStateStrict as isState } from \"type-guards\";\n\nimport type { Browser } from \"./types.js\";\nimport type { State, Params } from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\n/**\n * Resolves the popstate event into a navigation-ready `State`.\n *\n * - If `history.state` is a valid router state ({name, params, path} written\n *   by browser-plugin/hash-plugin during their previous navigation), it is\n *   the source of truth — synthesize a fully-typed `State` from it via\n *   `api.makeState`. The synthesized `transition`/`context` fields are\n *   placeholders; the navigation pipeline (`completeTransition` and plugin\n *   claim writes) replaces them.\n * - Otherwise (e.g. manually entered URL with no recorded state), fall back\n *   to `api.matchPath(location)`. `location` is the route location the caller\n *   captured when the popstate event fired — each plugin derives it from its\n *   own `browser.getLocation()` (URL pathname for browser-plugin, hash-derived\n *   path for hash-plugin), so the fallback works for both.\n * - `undefined` when neither path produces a match.\n *\n * The caller passes the location it snapshotted at event time rather than\n * letting this function re-read `browser.getLocation()`: a deferred popstate\n * is processed only after the in-flight navigation's `replaceState` has\n * already overwritten the live location, so a late read would resolve the\n * wrong target (#757).\n *\n * Replaces the previous `{ name, params }` shape so the caller can hand\n * the State directly to `router.navigateToState(state, opts)` and skip\n * the redundant `forwardState`/`buildPath` round-trip in\n * `buildNavigateState` (issue #525).\n */\nexport function getRouteFromEvent(\n  evt: PopStateEvent,\n  api: PluginApi,\n  location: string,\n): State | undefined {\n  if (isState(evt.state)) {\n    return api.makeState(evt.state.name, evt.state.params, evt.state.path);\n  }\n\n  return api.matchPath(location);\n}\n\n/**\n * Updates browser state (pushState or replaceState)\n *\n * @param state - Router state\n * @param url - URL to set\n * @param replace - Whether to replace instead of push\n * @param browser - Browser API instance\n */\nexport function updateBrowserState(\n  state: State,\n  url: string,\n  replace: boolean,\n  browser: Browser,\n): void {\n  const historyState = {\n    name: state.name,\n    params: state.params,\n    path: state.path,\n  };\n\n  if (replace) {\n    browser.replaceState(historyState, url);\n  } else {\n    browser.pushState(historyState, url);\n  }\n}\n\n/**\n * Creates a `updateBrowserState` closure that reuses a single mutable buffer\n * across calls instead of allocating a fresh `{ name, params, path }` object\n * per push/replace.\n *\n * Why: Browsers structured-clone `history.state` synchronously inside\n * `pushState`/`replaceState`, so the caller never sees the buffer escape —\n * it can be safely overwritten before the next call. Eliminates one\n * allocation per navigation on the hot path.\n *\n * Each plugin instance must own its own buffer (do not share across plugins).\n */\nexport function createUpdateBrowserState(): (\n  state: State,\n  url: string,\n  replace: boolean,\n  browser: Browser,\n) => void {\n  const buffer = {\n    name: \"\",\n    params: {} as Params,\n    path: \"\",\n  };\n\n  return (state, url, replace, browser) => {\n    buffer.name = state.name;\n    buffer.params = state.params;\n    buffer.path = state.path;\n\n    if (replace) {\n      browser.replaceState(buffer, url);\n    } else {\n      browser.pushState(buffer, url);\n    }\n  };\n}\n","export interface OptionRule<T> {\n  validate: (value: T) => string | null;\n}\n\nexport type OptionRules<T extends object> = {\n  [K in keyof T]?: OptionRule<NonNullable<T[K]>>;\n};\n\nexport function createOptionsValidator<T extends object>(\n  defaults: Required<T>,\n  loggerContext: string,\n  rules?: OptionRules<T>,\n): (opts: Partial<T> | undefined) => void {\n  return (opts) => {\n    if (!opts) {\n      return;\n    }\n\n    for (const key of Object.keys(opts)) {\n      if (!(key in defaults)) {\n        continue;\n      }\n\n      const value = opts[key as keyof typeof opts];\n\n      if (value === undefined) {\n        continue;\n      }\n\n      const expected = typeof defaults[key as keyof typeof defaults];\n      const actual = typeof value;\n\n      if (actual !== expected) {\n        throw new Error(\n          `[${loggerContext}] Invalid type for '${key}': expected ${expected}, got ${actual}`,\n        );\n      }\n\n      const rule = rules?.[key as keyof T];\n\n      if (rule) {\n        const msg = (rule.validate as (input: unknown) => string | null)(value);\n\n        if (msg !== null) {\n          throw new Error(`[${loggerContext}] Invalid '${key}': ${msg}`);\n        }\n      }\n    }\n  };\n}\n\n// eslint-disable-next-line no-control-regex -- control characters are exactly what this rule rejects\nconst CONTROL_CHARS = /[\\u0000-\\u001F\\u007F]/;\n\nexport const safeBaseRule: OptionRule<string> = {\n  validate: (value) => {\n    if (CONTROL_CHARS.test(value)) {\n      return \"must not contain control characters\";\n    }\n\n    if (value.split(\"/\").includes(\"..\")) {\n      return \"must not contain '..' segments\";\n    }\n\n    return null;\n  },\n};\n\nexport const safeHashPrefixRule: OptionRule<string> = {\n  validate: (value) => {\n    if (CONTROL_CHARS.test(value)) {\n      return \"must not contain control characters\";\n    }\n\n    if (value.includes(\"/\")) {\n      return \"must not contain '/' (slash is added before the path automatically)\";\n    }\n\n    if (value.includes(\"#\")) {\n      return \"must not contain '#' (it is added as the hash delimiter)\";\n    }\n\n    if (value.includes(\"?\")) {\n      return \"must not contain '?' (it conflicts with the query delimiter)\";\n    }\n\n    return null;\n  },\n};\n\nexport const nonNegativeIntegerRule: OptionRule<number> = {\n  validate: (value) => {\n    if (!Number.isFinite(value)) {\n      return `expected finite number, got ${String(value)}`;\n    }\n\n    if (!Number.isInteger(value)) {\n      return `expected integer, got ${String(value)}`;\n    }\n\n    if (value < 0) {\n      return `expected non-negative integer, got ${value}`;\n    }\n\n    return null;\n  },\n};\n","export const isBrowserEnvironment = (): boolean =>\n  typeof globalThis.window !== \"undefined\" && !!globalThis.history;\n","import type { HistoryBrowser } from \"./types.js\";\n\nexport const pushState = (state: unknown, path: string): void => {\n  globalThis.history.pushState(state, \"\", path);\n};\n\nexport const replaceState = (state: unknown, path: string): void => {\n  globalThis.history.replaceState(state, \"\", path);\n};\n\nexport const addPopstateListener: HistoryBrowser[\"addPopstateListener\"] = (\n  fn,\n) => {\n  globalThis.addEventListener(\"popstate\", fn);\n\n  return () => {\n    globalThis.removeEventListener(\"popstate\", fn);\n  };\n};\n\nexport const getHash = (): string => globalThis.location.hash;\n","import type { HistoryBrowser } from \"./types.js\";\n\nconst NOOP = (): void => {};\n\nexport const createWarnOnce = (context: string) => {\n  let hasWarned = false;\n\n  return (method: string): void => {\n    if (!hasWarned) {\n      console.warn(\n        `[browser-env] Browser API is running in a non-browser environment (context: \"${context}\"). ` +\n          `Method \"${method}\" is a no-op. ` +\n          `This is expected for SSR, but may indicate misconfiguration if you expected browser behavior.`,\n      );\n      hasWarned = true;\n    }\n  };\n};\n\nexport const createHistoryFallbackBrowser = (\n  context: string,\n): HistoryBrowser => {\n  const warnOnce = createWarnOnce(context);\n\n  return {\n    pushState: () => {\n      warnOnce(\"pushState\");\n    },\n    replaceState: () => {\n      warnOnce(\"replaceState\");\n    },\n    addPopstateListener: () => {\n      warnOnce(\"addPopstateListener\");\n\n      return NOOP;\n    },\n    getHash: () => {\n      warnOnce(\"getHash\");\n\n      return \"\";\n    },\n  };\n};\n","import { isBrowserEnvironment } from \"./detect.js\";\nimport {\n  pushState,\n  replaceState,\n  addPopstateListener,\n  getHash,\n} from \"./history-api.js\";\nimport {\n  createWarnOnce,\n  createHistoryFallbackBrowser,\n} from \"./ssr-fallback.js\";\n\nimport type { Browser } from \"./types.js\";\n\nexport function createSafeBrowser(\n  getLocation: () => string,\n  context: string,\n): Browser {\n  if (isBrowserEnvironment()) {\n    return {\n      pushState,\n      replaceState,\n      addPopstateListener,\n      getLocation,\n      getHash,\n    };\n  }\n\n  const warnOnce = createWarnOnce(context);\n\n  return {\n    ...createHistoryFallbackBrowser(context),\n    getLocation: () => {\n      warnOnce(\"getLocation\");\n\n      return \"\";\n    },\n  };\n}\n","import { errorCodes, RouterError } from \"@real-router/core\";\n\nimport { getRouteFromEvent } from \"./popstate-utils.js\";\n\nimport type { Browser, SharedFactoryState } from \"./types.js\";\nimport type { Params, Plugin, Router } from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\n/**\n * Navigation options used by the popstate handler to trigger a\n * router.navigate() call from a back/forward event. `source` identifies\n * the origin of the transition to downstream context consumers;\n * `replace: true` keeps the history stack in sync with the browser.\n */\nexport interface PopstateTransitionOptions {\n  source: string;\n  replace: true;\n  forceDeactivate?: boolean;\n}\n\nexport interface PopstateHandlerDeps {\n  router: Router;\n  api: PluginApi;\n  browser: Browser;\n  allowNotFound: boolean;\n  transitionOptions: PopstateTransitionOptions;\n  loggerContext: string;\n  buildUrl: (\n    name: string,\n    params?: Params,\n    options?: { hash?: string },\n  ) => string;\n  /**\n   * Decoded hash of the current browser location (no leading \"#\"). Defaults\n   * to a no-op (returns \"\") for plugins that do not participate in URL\n   * fragment tracking — namely hash-plugin, where `#` is the route delimiter.\n   * (#532)\n   */\n  getCurrentHash?: () => string;\n  /**\n   * Decoded hash from the previous transition's `state.context.url.hash`\n   * (no leading \"#\"). Used by the popstate handler to detect hash-only\n   * navigation and add `force: true, hashChange: true` to bypass SAME_STATES.\n   * Defaults to no-op (returns \"\") for hash-plugin. (#532)\n   */\n  getCurrentContextHash?: () => string;\n}\n\n/**\n * Hash augmentation for popstate-driven navigateToState (#532).\n * Returns a partial options object that the caller spreads on top of\n * `deps.transitionOptions`. When the handler is wired without hash support\n * (hash-plugin), both deps default to undefined and an empty object is\n * returned — preserving the legacy behavior for that plugin.\n */\nfunction resolveHashOptions(\n  deps: PopstateHandlerDeps,\n  matchedPath: string,\n): { hash?: string; force?: true; hashChange?: true } {\n  if (!deps.getCurrentHash) {\n    return {};\n  }\n\n  const newHash = deps.getCurrentHash();\n  const prevHash = deps.getCurrentContextHash\n    ? deps.getCurrentContextHash()\n    : \"\";\n  const hashChange =\n    newHash !== prevHash && deps.router.getState()?.path === matchedPath;\n\n  return hashChange\n    ? { hash: newHash, force: true, hashChange: true }\n    : { hash: newHash };\n}\n\nexport function createPopstateHandler(\n  deps: PopstateHandlerDeps,\n): (evt: PopStateEvent) => void {\n  let isTransitioning = false;\n  // Snapshot the route location alongside the event: a deferred popstate is\n  // replayed only after the in-flight navigation's onTransitionSuccess →\n  // replaceState has overwritten the live location, so re-reading it at\n  // replay time would resolve the wrong target (#757).\n  let deferred: { evt: PopStateEvent; location: string } | null = null;\n\n  function processDeferredEvent(): void {\n    if (deferred) {\n      const { evt, location } = deferred;\n\n      deferred = null;\n      console.warn(\n        `[${deps.loggerContext}] Processing deferred popstate event`,\n      );\n      void onPopState(evt, location);\n    }\n  }\n\n  function rollbackUrlToCurrentState(): void {\n    const currentState = deps.router.getState();\n\n    /* v8 ignore next -- @preserve: router always has state after start(); defensive guard for edge cases */\n    if (!currentState) {\n      return;\n    }\n\n    // Preserve hash on rollback so guard rejection / unmatched URL on\n    // popstate doesn't strip the fragment from the visible URL (#532).\n    const ctxHash = (\n      currentState.context as { url?: { hash?: string } } | undefined\n    )?.url?.hash;\n    const url = deps.buildUrl(\n      currentState.name,\n      currentState.params,\n      ctxHash ? { hash: ctxHash } : undefined,\n    );\n\n    deps.browser.replaceState(currentState, url);\n  }\n\n  function recoverFromCriticalError(error: unknown): void {\n    console.error(\n      `[${deps.loggerContext}] Critical error in onPopState`,\n      error,\n    );\n\n    try {\n      rollbackUrlToCurrentState();\n    } catch (recoveryError) {\n      console.error(\n        `[${deps.loggerContext}] Failed to recover from critical error`,\n        recoveryError,\n      );\n    }\n  }\n\n  async function onPopState(\n    evt: PopStateEvent,\n    location: string,\n  ): Promise<void> {\n    if (isTransitioning) {\n      console.warn(\n        `[${deps.loggerContext}] Transition in progress, deferring popstate event`,\n      );\n      deferred = { evt, location };\n\n      return;\n    }\n\n    isTransitioning = true;\n\n    try {\n      const matched = getRouteFromEvent(evt, deps.api, location);\n\n      if (matched) {\n        // api.navigateToState — plugin-only entry point. Preserves\n        // matchSourceTrailingSlash output and skips the redundant\n        // forwardState/buildPath round-trip (#525). Hash augmentation (#532)\n        // extracted into resolveHashOptions so this branch stays readable.\n        await deps.api.navigateToState(matched, {\n          ...deps.transitionOptions,\n          ...resolveHashOptions(deps, matched.path),\n        });\n      } else if (deps.allowNotFound) {\n        deps.router.navigateToNotFound(location);\n      } else {\n        // Strict mode — unmatched URL is an error. Emit $$error and sync URL\n        // back to the current router state (no silent fallback to defaultRoute).\n        const err = new RouterError(errorCodes.ROUTE_NOT_FOUND, {\n          path: location,\n        });\n\n        deps.api.emitTransitionError(err);\n        rollbackUrlToCurrentState();\n      }\n    } catch (error) {\n      if (error instanceof RouterError) {\n        // navigate() already emitted $$error — just sync URL with router state.\n        // Swallow rollback errors: teardown races may remove router.buildUrl\n        // while a popstate event is still queued.\n        try {\n          rollbackUrlToCurrentState();\n        } catch {\n          // noop — nothing safe to do here\n        }\n      } else {\n        recoverFromCriticalError(error);\n      }\n    } finally {\n      isTransitioning = false;\n      processDeferredEvent();\n    }\n  }\n\n  // Snapshot the location the instant the event fires — before any in-flight\n  // navigation can overwrite it via replaceState (#757).\n  return (evt: PopStateEvent) =>\n    void onPopState(evt, deps.browser.getLocation());\n}\n\nexport interface PopstateLifecycleDeps {\n  browser: Browser;\n  shared: SharedFactoryState;\n  handler: (evt: PopStateEvent) => void;\n  cleanup: () => void;\n}\n\nexport function createPopstateLifecycle(\n  deps: PopstateLifecycleDeps,\n): Pick<Plugin, \"onStart\" | \"onStop\" | \"teardown\"> {\n  return {\n    onStart: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n      }\n\n      deps.shared.removePopStateListener = deps.browser.addPopstateListener(\n        deps.handler,\n      );\n    },\n\n    onStop: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n        deps.shared.removePopStateListener = undefined;\n      }\n    },\n\n    teardown: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n        deps.shared.removePopStateListener = undefined;\n      }\n\n      deps.cleanup();\n    },\n  };\n}\n","/**\n * URL fragment (\"hash\") shared layer (#532).\n *\n * Both URL plugins (navigation-plugin, browser-plugin) claim the `\"url\"`\n * `state.context` namespace and write `UrlContext` on every transition.\n * Mutually exclusive at runtime — only one URL plugin is installed per router.\n *\n * Hash form: decoded, no leading \"#\" — symmetric to `params` (no leading \"?\").\n * Encoding to/from URL form happens at the boundary (URL build / URL parse).\n */\n\nexport interface UrlContext {\n  /** Decoded fragment, no leading \"#\". Empty string when URL has no fragment. */\n  hash: string;\n  /** Whether `hash` differs from the previous transition's `state.context.url.hash`. */\n  hashChanged: boolean;\n}\n\n/**\n * Encode for URL fragment per RFC 3986: preserves sub-delims (`&`, `=`, `?`,\n * `:`, etc.) and the path/query characters that `encodeURI` already leaves\n * alone. Defensively percent-escapes `#` (a stray `#` in a decoded fragment\n * would otherwise terminate the fragment in the rendered URL).\n *\n * `encodeURIComponent` over-encodes RFC-3986 sub-delims (`&` → `%26`) and is\n * therefore wrong for fragments.\n */\nexport function encodeHashFragment(decoded: string): string {\n  return encodeURI(decoded).replaceAll(\"#\", \"%23\");\n}\n\n/**\n * Decode a percent-encoded fragment. Falls back to the raw input on malformed\n * escapes — matches the resilience pattern in scroll-restore.\n */\nexport function decodeHashFragment(encoded: string): string {\n  try {\n    return decodeURIComponent(encoded);\n  } catch {\n    return encoded;\n  }\n}\n\n/**\n * Normalize user-provided hash input: strip ALL leading \"#\" characters, then\n * decode. Defensive against `<Link hash=\"#section\">` — the prop is documented\n * to accept the fragment name without \"#\", but we accept both gracefully.\n *\n * Stripping a single \"#\" would leave the function non-idempotent on\n * pathological inputs like `\"##section\"` (caller's accidental double-hash,\n * concatenation bugs). Property test G9 in `hash-encoding.properties.ts`\n * locks in idempotence — `normalize(normalize(x)) === normalize(x)`.\n */\nexport function normalizeHashInput(input: string): string {\n  let stripped = input;\n\n  while (stripped.startsWith(\"#\")) {\n    stripped = stripped.slice(1);\n  }\n\n  return decodeHashFragment(stripped);\n}\n\n/**\n * Read the current browser hash in decoded form, no leading \"#\".\n * Accepts any object with a `getHash()` method — works for both `Browser`\n * (History API) and `NavigationBrowser` (Navigation API). SSR-safe via the\n * abstractions, which return `\"\"` outside a real browser.\n */\nexport function getDecodedHash(browser: { getHash: () => string }): string {\n  const raw = browser.getHash();\n\n  if (!raw) {\n    return \"\";\n  }\n\n  const stripped = raw.startsWith(\"#\") ? raw.slice(1) : raw;\n\n  return decodeHashFragment(stripped);\n}\n","export interface ParsedUrl {\n  pathname: string;\n  search: string;\n  hash: string;\n}\n\n/**\n * Scheme-agnostic URL parser.\n *\n * Extracts `pathname`, `search`, and `hash` from any string — absolute\n * (`scheme://authority/path?q#h`), path-relative (`/path?q#h`), or opaque\n * (`data:...`, `javascript:...`). Never throws, never returns null.\n *\n * Routing does not care about scheme or authority, only about the path part.\n * This keeps `browser-plugin`, `navigation-plugin`, and `hash-plugin` working\n * in Electron (`file://`, `app://`), Tauri (`tauri://`, `https://`), and any\n * other webview that may ship with non-HTTP origins. See issue #496.\n */\nconst URL_DELIMITERS: ReadonlySet<string> = new Set([\"/\", \"?\", \"#\"]);\n\nexport function safeParseUrl(url: string): ParsedUrl {\n  let rest = url;\n\n  const schemeIdx = rest.indexOf(\"://\");\n\n  if (schemeIdx !== -1) {\n    const authorityStart = schemeIdx + 3;\n    let pathStart = rest.length;\n\n    for (let i = authorityStart; i < rest.length; i++) {\n      const ch = rest[i];\n\n      if (URL_DELIMITERS.has(ch)) {\n        pathStart = i;\n\n        break;\n      }\n    }\n\n    rest = pathStart === rest.length ? \"/\" : rest.slice(pathStart);\n\n    if (rest.startsWith(\"?\") || rest.startsWith(\"#\")) {\n      rest = `/${rest}`;\n    }\n  }\n\n  const hashIdx = rest.indexOf(\"#\");\n  const hash = hashIdx === -1 ? \"\" : rest.slice(hashIdx);\n  const beforeHash = hashIdx === -1 ? rest : rest.slice(0, hashIdx);\n\n  const queryIdx = beforeHash.indexOf(\"?\");\n  const search = queryIdx === -1 ? \"\" : beforeHash.slice(queryIdx);\n  const pathname = queryIdx === -1 ? beforeHash : beforeHash.slice(0, queryIdx);\n\n  return { pathname, search, hash };\n}\n","import { encodeHashFragment, normalizeHashInput } from \"./url-context.js\";\nimport { buildUrl } from \"./url-utils.js\";\n\nimport type {\n  NavigationOptions,\n  Params,\n  Router,\n  State,\n} from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\nexport interface LocationSource {\n  getLocation: () => string;\n}\n\n/**\n * Minimal browser surface needed by `createReplaceHistoryState`.\n *\n * Both `Browser` (History API) and navigation-plugin's `NavigationBrowser`\n * (Navigation API) satisfy this structurally — the function never needs\n * `pushState`/`addPopstateListener`, only the replace path.\n */\nexport interface ReplaceStateBrowser {\n  replaceState: (state: unknown, url: string) => void;\n  getHash: () => string;\n}\n\n/**\n * Hash override option for `replaceHistoryState` (#532). Tri-state semantics:\n *   `undefined`  — preserve the current browser hash (legacy behavior, default)\n *   `\"\"`         — explicitly clear the fragment\n *   non-empty    — explicitly set the fragment (decoded form, no leading \"#\")\n */\nexport interface ReplaceHistoryStateOptions {\n  hash?: string;\n}\n\nexport function createStartInterceptor(\n  api: PluginApi,\n  browser: LocationSource,\n): () => void {\n  return api.addInterceptor(\"start\", (next, path) =>\n    next(path ?? browser.getLocation()),\n  );\n}\n\n// Shared `buildUrl` extension for browser-plugin and navigation-plugin.\n// Composes router.buildPath + base prefixing + tri-state hash (#532) into the\n// single function the plugins register via `api.extendRouter({ buildUrl })`.\nexport function createPluginBuildUrl(\n  router: Router,\n  base: string,\n): (route: string, params?: Params, opts?: { hash?: string }) => string {\n  return (route, params, opts) => {\n    const path = router.buildPath(route, params);\n    const url = buildUrl(path, base);\n\n    if (opts?.hash === undefined) {\n      return url;\n    }\n\n    const norm = normalizeHashInput(opts.hash);\n\n    return norm ? `${url}#${encodeHashFragment(norm)}` : url;\n  };\n}\n\nexport function createReplaceHistoryState(\n  api: PluginApi,\n  router: Router,\n  browser: ReplaceStateBrowser,\n  buildUrlFn: (\n    name: string,\n    params?: Params,\n    options?: ReplaceHistoryStateOptions,\n  ) => string,\n  preserveHash = true,\n): (\n  name: string,\n  params?: Params,\n  options?: ReplaceHistoryStateOptions,\n) => void {\n  // Reusable buffer — browsers structured-clone state synchronously inside\n  // replaceState, so the buffer never escapes. Eliminates one allocation per\n  // navigation on the hot path. (Mirrors createUpdateBrowserState.)\n  const buffer = {\n    name: \"\",\n    params: {} as Params,\n    path: \"\",\n  };\n\n  return (\n    name: string,\n    params: Params = {},\n    options?: ReplaceHistoryStateOptions,\n  ) => {\n    const state = api.buildState(name, params);\n\n    if (!state) {\n      throw new Error(\n        `[real-router] Cannot replace state: route \"${name}\" is not found`,\n      );\n    }\n\n    const builtState = api.makeState(\n      state.name,\n      state.params,\n      router.buildPath(state.name, state.params),\n      {\n        params: state.meta,\n      },\n    );\n\n    // Tri-state hash semantics (#532):\n    //   options.hash === undefined → preserve (legacy behavior, controlled by\n    //                                preserveHash flag — true for browser/\n    //                                navigation plugins, false for hash-plugin)\n    //   options.hash === \"\"        → explicitly clear\n    //   options.hash === \"value\"   → explicitly set\n    let hashSegment: string;\n\n    if (options?.hash !== undefined) {\n      const norm = normalizeHashInput(options.hash);\n\n      hashSegment = norm ? `#${encodeHashFragment(norm)}` : \"\";\n    } else if (preserveHash) {\n      hashSegment = browser.getHash();\n    } else {\n      hashSegment = \"\";\n    }\n\n    // Pass hash through buildUrl when the plugin understands it (avoids\n    // double-append). Hash-plugin's buildUrl ignores the option and warns,\n    // so call without options here for semantic clarity — but the result is\n    // identical because hashSegment is \"\" in that branch (preserveHash=false).\n    const url = buildUrlFn(name, params) + hashSegment;\n\n    buffer.name = builtState.name;\n    buffer.params = builtState.params;\n    buffer.path = builtState.path;\n\n    browser.replaceState(buffer, url);\n  };\n}\n\nexport function shouldReplaceHistory(\n  navOptions: NavigationOptions,\n  toState: State,\n  fromState: State | undefined,\n): boolean {\n  if (navOptions.replace === true) {\n    return true;\n  }\n\n  if (!fromState) {\n    return navOptions.replace !== false;\n  }\n\n  return !!navOptions.reload && toState.path === fromState.path;\n}\n","// packages/hash-plugin/src/constants.ts\n\nimport type { HashPluginOptions } from \"./types\";\n\nexport const defaultOptions: Required<HashPluginOptions> = {\n  hashPrefix: \"\",\n  base: \"\",\n  forceDeactivate: true,\n};\n\n/**\n * Source identifier for transitions triggered by browser events.\n */\nexport const source = \"popstate\";\n\nexport const LOGGER_CONTEXT = \"hash-plugin\";\n","// packages/hash-plugin/src/hash-utils.ts\n\nimport { safelyEncodePath, safeParseUrl } from \"./browser-env\";\n\nfunction escapeRegExp(str: string): string {\n  return str.replaceAll(/[$()*+.?[\\\\\\]^{|}-]/g, String.raw`\\$&`);\n}\n\nexport function createHashPrefixRegex(hashPrefix: string): RegExp | null {\n  if (!hashPrefix) {\n    return null;\n  }\n\n  return new RegExp(`^#${escapeRegExp(hashPrefix)}`);\n}\n\n/**\n * Extract path from URL hash, stripping hash prefix.\n *\n * @param hash - URL hash (e.g., \"#/path\" or \"#!/path\")\n * @param prefixRegex - Pre-compiled regex for prefix stripping (null if no prefix)\n * @returns Extracted path (e.g., \"/path\")\n */\nexport function extractHashPath(\n  hash: string,\n  prefixRegex: RegExp | null,\n): string {\n  if (hash === \"\" || hash === \"#\") {\n    return \"/\";\n  }\n\n  const path = prefixRegex ? hash.replace(prefixRegex, \"\") : hash.slice(1);\n\n  return path || \"/\";\n}\n\nexport function hashUrlToPath(url: string, prefixRegex: RegExp | null): string {\n  const parsedUrl = safeParseUrl(url);\n  const hashPath = extractHashPath(parsedUrl.hash, prefixRegex);\n\n  return hashPath.includes(\"?\") ? hashPath : hashPath + parsedUrl.search;\n}\n\n/**\n * Build the router-side location string from a hash + query pair.\n *\n * Encodes the hash path via `safelyEncodePath` after stripping the\n * configured prefix, then appends the outer `search` only when the hash\n * path itself does not already carry a `?` — otherwise the outer search\n * would be duplicated (see `url.test.ts` — \"well-formed path (no double '?')\").\n *\n * Used by the `createSafeBrowser` `getLocation` callback both in the\n * production factory and in functional/stress test helpers. Extracting\n * here keeps the production path and test mocks aligned; a regression in\n * this logic previously slipped between the two.\n */\nexport function buildHashLocation(\n  hash: string,\n  search: string,\n  prefixRegex: RegExp | null,\n): string {\n  const hashPath = safelyEncodePath(extractHashPath(hash, prefixRegex));\n\n  return hashPath.includes(\"?\") ? hashPath : hashPath + search;\n}\n","import {\n  createPopstateHandler,\n  createPopstateLifecycle,\n  createStartInterceptor,\n  createReplaceHistoryState,\n  shouldReplaceHistory,\n  updateBrowserState,\n} from \"./browser-env\";\nimport { LOGGER_CONTEXT } from \"./constants\";\nimport { hashUrlToPath } from \"./hash-utils\";\n\nimport type { Browser, SharedFactoryState } from \"./browser-env\";\nimport type { HashPluginOptions } from \"./types\";\nimport type {\n  NavigationOptions,\n  Params,\n  Router,\n  State,\n  Plugin,\n} from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\nexport class HashPlugin {\n  readonly #router: Router;\n  readonly #browser: Browser;\n  readonly #removeStartInterceptor: () => void;\n  readonly #removeExtensions: () => void;\n  readonly #lifecycle: Pick<Plugin, \"onStart\" | \"onStop\" | \"teardown\">;\n  readonly #warnHashIgnored!: () => void;\n\n  constructor(\n    router: Router,\n    api: PluginApi,\n    options: Required<HashPluginOptions>,\n    browser: Browser,\n    prefixRegex: RegExp | null,\n    transitionOptions: {\n      source: string;\n      replace: true;\n      forceDeactivate?: boolean;\n    },\n    shared: SharedFactoryState,\n  ) {\n    this.#router = router;\n    this.#browser = browser;\n\n    this.#removeStartInterceptor = createStartInterceptor(api, browser);\n\n    // Hash limitation warn-once (#532). hash-plugin uses `#` as the route\n    // delimiter, so URL fragments are structurally incompatible. Plugin\n    // accepts the `hash` option for typing parity with browser/navigation\n    // plugins, ignores it, and emits a single console.warn the first time\n    // any consumer surfaces a hash. Existing `createWarnOnce` in browser-env\n    // is SSR-specific (different signature) — inline pattern here.\n    let hashWarned = false;\n    const warnHashIgnored = (): void => {\n      if (hashWarned) {\n        return;\n      }\n\n      hashWarned = true;\n      console.warn(\n        \"[@real-router/hash-plugin] `hash` option is ignored — `#` is reserved for the route delimiter. \" +\n          \"URL fragments are not supported with hash-plugin; use @real-router/browser-plugin or \" +\n          \"@real-router/navigation-plugin if you need them.\",\n      );\n    };\n\n    const urlPrefix = `${options.base}#${options.hashPrefix}`;\n    const pluginBuildUrl = (\n      route: string,\n      params?: Params,\n      opts?: { hash?: string },\n    ) => {\n      if (opts?.hash !== undefined) {\n        warnHashIgnored();\n      }\n\n      return urlPrefix + router.buildPath(route, params);\n    };\n\n    this.#warnHashIgnored = warnHashIgnored;\n\n    this.#removeExtensions = api.extendRouter({\n      buildUrl: pluginBuildUrl,\n      matchUrl: (url: string) =>\n        api.matchPath(hashUrlToPath(url, prefixRegex)) ?? undefined,\n      replaceHistoryState: createReplaceHistoryState(\n        api,\n        router,\n        browser,\n        pluginBuildUrl,\n        false,\n      ),\n    });\n\n    const handler = createPopstateHandler({\n      router,\n      api,\n      browser,\n      allowNotFound: api.getOptions().allowNotFound,\n      transitionOptions,\n      loggerContext: LOGGER_CONTEXT,\n      buildUrl: pluginBuildUrl,\n    });\n\n    this.#lifecycle = createPopstateLifecycle({\n      browser,\n      shared,\n      handler,\n      cleanup: () => {\n        this.#removeStartInterceptor();\n        this.#removeExtensions();\n      },\n    });\n  }\n\n  getPlugin(): Plugin {\n    return {\n      ...this.#lifecycle,\n\n      onTransitionSuccess: (\n        toState: State,\n        fromState: State | undefined,\n        navOptions: NavigationOptions,\n      ) => {\n        // Hash limitation (#532): warn once if a consumer programmatically\n        // requested a fragment via `router.navigate(..., { hash })`.\n        if (navOptions.hash !== undefined) {\n          this.#warnHashIgnored();\n        }\n\n        const replaceHistory = shouldReplaceHistory(\n          navOptions,\n          toState,\n          fromState,\n        );\n\n        const url = this.#router.buildUrl(toState.name, toState.params);\n\n        updateBrowserState(toState, url, replaceHistory, this.#browser);\n      },\n    };\n  }\n}\n","import {\n  createOptionsValidator,\n  safeBaseRule,\n  safeHashPrefixRule,\n} from \"./browser-env\";\nimport { LOGGER_CONTEXT, defaultOptions } from \"./constants\";\n\nimport type { HashPluginOptions } from \"./types\";\n\nexport const validateOptions = createOptionsValidator<HashPluginOptions>(\n  defaultOptions,\n  LOGGER_CONTEXT,\n  { base: safeBaseRule, hashPrefix: safeHashPrefixRule },\n);\n","import { getPluginApi } from \"@real-router/core/api\";\n\nimport { createSafeBrowser, normalizeBase } from \"./browser-env\";\nimport { defaultOptions, source } from \"./constants\";\nimport { buildHashLocation, createHashPrefixRegex } from \"./hash-utils\";\nimport { HashPlugin } from \"./plugin\";\nimport { validateOptions } from \"./validation\";\n\nimport type { Browser, SharedFactoryState } from \"./browser-env\";\nimport type { HashPluginOptions } from \"./types\";\nimport type { PluginFactory, Router } from \"@real-router/core\";\n\nexport function hashPluginFactory(\n  opts?: Partial<HashPluginOptions>,\n  browser?: Browser,\n): PluginFactory {\n  validateOptions(opts);\n\n  const definedOpts = opts\n    ? Object.fromEntries(\n        Object.entries(opts).filter(\n          // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- runtime may receive explicit undefined via conditional spreads (exactOptionalPropertyTypes does not apply here)\n          ([, value]) => value !== undefined,\n        ),\n      )\n    : {};\n  const options: Required<HashPluginOptions> = {\n    ...defaultOptions,\n    ...definedOpts,\n  };\n\n  options.base = normalizeBase(options.base);\n\n  const prefixRegex = createHashPrefixRegex(options.hashPrefix);\n  const resolvedBrowser =\n    browser ??\n    createSafeBrowser(\n      () =>\n        buildHashLocation(\n          globalThis.location.hash,\n          globalThis.location.search,\n          prefixRegex,\n        ),\n      \"hash-plugin\",\n    );\n\n  const transitionOptions = {\n    forceDeactivate: options.forceDeactivate,\n    source,\n    replace: true as const,\n  };\n\n  const shared: SharedFactoryState = { removePopStateListener: undefined };\n\n  return function hashPlugin(routerBase) {\n    const plugin = new HashPlugin(\n      routerBase as Router,\n      getPluginApi(routerBase),\n      options,\n      resolvedBrowser,\n      prefixRegex,\n      transitionOptions,\n      shared,\n    );\n\n    return plugin.getPlugin();\n  };\n}\n"],"mappings":"qHAWA,SAAgB,EAAc,EAAsB,CAClD,GAAI,CAAC,EACH,OAAO,EAGT,IAAI,EAAS,EAAK,WAAW,OAAQ,GAAG,EAUxC,OARK,EAAO,WAAW,GAAG,IACxB,EAAS,IAAI,KAGX,EAAO,OAAS,GAAK,EAAO,SAAS,GAAG,IAC1C,EAAS,EAAO,MAAM,EAAG,EAAE,GAGtB,IAAW,IAAM,GAAK,CAC/B,CAEA,MAAa,EAAoB,GAAyB,CACxD,GAAI,CACF,OAAO,UAAU,UAAU,CAAI,CAAC,CAClC,OAAS,EAAO,CAGd,OAFA,QAAQ,KAAK,wCAAwC,EAAK,GAAI,CAAK,EAE5D,CACT,CACF,ECrCmS,EAAE,0CAAiG,SAAS,EAAE,EAAE,CAAC,OAAO,OAAO,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,IAAI,QAAQ,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,UAAU,IAAI,UAAU,MAAM,CAAC,EAAE,GAAG,IAAI,SAAS,OAAO,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,eAAe,CAAC,EAAE,OAAO,IAAI,MAAM,IAAI,OAAO,UAAU,CAAC,EAAE,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,IAAI,UAAU,CAAC,EAAE,IAAI,SAAS,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,OAAO,GAAG,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,eAAe,CAAC,EAAE,GAAG,IAAI,MAAM,IAAI,OAAO,UAAU,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,EAAE,SAAS,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAA2Y,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,GAAG,OAAO,EAAE,MAAM,UAAU,EAAE,EAAE,MAAM,CAAC,CAAqD,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CCiC72D,SAAgB,EACd,EACA,EACA,EACmB,CAKnB,OAJIA,EAAQ,EAAI,KAAK,EACZ,EAAI,UAAU,EAAI,MAAM,KAAM,EAAI,MAAM,OAAQ,EAAI,MAAM,IAAI,EAGhE,EAAI,UAAU,CAAQ,CAC/B,CAUA,SAAgB,EACd,EACA,EACA,EACA,EACM,CACN,IAAM,EAAe,CACnB,KAAM,EAAM,KACZ,OAAQ,EAAM,OACd,KAAM,EAAM,IACd,EAEI,EACF,EAAQ,aAAa,EAAc,CAAG,EAEtC,EAAQ,UAAU,EAAc,CAAG,CAEvC,CC9DA,SAAgB,EACd,EACA,EACA,EACwC,CACxC,MAAQ,IAAS,CACV,KAIL,IAAK,IAAM,KAAO,OAAO,KAAK,CAAI,EAAG,CACnC,GAAI,EAAE,KAAO,GACX,SAGF,IAAM,EAAQ,EAAK,GAEnB,GAAI,IAAU,IAAA,GACZ,SAGF,IAAM,EAAW,OAAO,EAAS,GAC3B,EAAS,OAAO,EAEtB,GAAI,IAAW,EACb,MAAU,MACR,IAAI,EAAc,sBAAsB,EAAI,cAAc,EAAS,QAAQ,GAC7E,EAGF,IAAM,EAAO,IAAQ,GAErB,GAAI,EAAM,CACR,IAAM,EAAO,EAAK,SAA+C,CAAK,EAEtE,GAAI,IAAQ,KACV,MAAU,MAAM,IAAI,EAAc,aAAa,EAAI,KAAK,GAAK,CAEjE,CACF,CACF,CACF,CAGA,MAAM,EAAgB,wBAET,EAAmC,CAC9C,SAAW,GACL,EAAc,KAAK,CAAK,EACnB,sCAGL,EAAM,MAAM,GAAG,CAAC,CAAC,SAAS,IAAI,EACzB,iCAGF,IAEX,EAEa,EAAyC,CACpD,SAAW,GACL,EAAc,KAAK,CAAK,EACnB,sCAGL,EAAM,SAAS,GAAG,EACb,sEAGL,EAAM,SAAS,GAAG,EACb,2DAGL,EAAM,SAAS,GAAG,EACb,+DAGF,IAEX,ECxFa,MACJ,WAAW,SAAW,QAAe,CAAC,CAAC,WAAW,QCC9C,GAAa,EAAgB,IAAuB,CAC/D,WAAW,QAAQ,UAAU,EAAO,GAAI,CAAI,CAC9C,EAEa,GAAgB,EAAgB,IAAuB,CAClE,WAAW,QAAQ,aAAa,EAAO,GAAI,CAAI,CACjD,EAEa,EACX,IAEA,WAAW,iBAAiB,WAAY,CAAE,MAE7B,CACX,WAAW,oBAAoB,WAAY,CAAE,CAC/C,GAGW,MAAwB,WAAW,SAAS,KClBnD,MAAmB,CAAC,EAEb,EAAkB,GAAoB,CACjD,IAAI,EAAY,GAEhB,MAAQ,IAAyB,CAC/B,AAME,KALA,QAAQ,KACN,gFAAgF,EAAQ,cAC3E,EAAO,4GAEtB,EACY,GAEhB,CACF,EAEa,EACX,GACmB,CACnB,IAAM,EAAW,EAAe,CAAO,EAEvC,MAAO,CACL,cAAiB,CACf,EAAS,WAAW,CACtB,EACA,iBAAoB,CAClB,EAAS,cAAc,CACzB,EACA,yBACE,EAAS,qBAAqB,EAEvB,GAET,aACE,EAAS,SAAS,EAEX,GAEX,CACF,EC5BA,SAAgB,EACd,EACA,EACS,CACT,GAAI,EAAqB,EACvB,MAAO,CACL,YACA,eACA,sBACA,cACA,SACF,EAGF,IAAM,EAAW,EAAe,CAAO,EAEvC,MAAO,CACL,GAAG,EAA6B,CAAO,EACvC,iBACE,EAAS,aAAa,EAEf,GAEX,CACF,CCiBA,SAAS,EACP,EACA,EACoD,CACpD,GAAI,CAAC,EAAK,eACR,MAAO,CAAC,EAGV,IAAM,EAAU,EAAK,eAAe,EAOpC,OAFE,KAJe,EAAK,sBAClB,EAAK,sBAAsB,EAC3B,KAEsB,EAAK,OAAO,SAAS,CAAC,EAAE,OAAS,EAGvD,CAAE,KAAM,EAAS,MAAO,GAAM,WAAY,EAAK,EAC/C,CAAE,KAAM,CAAQ,CACtB,CAEA,SAAgB,EACd,EAC8B,CAC9B,IAAI,EAAkB,GAKlB,EAA4D,KAEhE,SAAS,GAA6B,CACpC,GAAI,EAAU,CACZ,GAAM,CAAE,MAAK,YAAa,EAE1B,EAAW,KACX,QAAQ,KACN,IAAI,EAAK,cAAc,qCACzB,EACA,EAAgB,EAAK,CAAQ,CAC/B,CACF,CAEA,SAAS,GAAkC,CACzC,IAAM,EAAe,EAAK,OAAO,SAAS,EAG1C,GAAI,CAAC,EACH,OAKF,IAAM,EACJ,EAAa,SACZ,KAAK,KACF,EAAM,EAAK,SACf,EAAa,KACb,EAAa,OACb,EAAU,CAAE,KAAM,CAAQ,EAAI,IAAA,EAChC,EAEA,EAAK,QAAQ,aAAa,EAAc,CAAG,CAC7C,CAEA,SAAS,EAAyB,EAAsB,CACtD,QAAQ,MACN,IAAI,EAAK,cAAc,gCACvB,CACF,EAEA,GAAI,CACF,EAA0B,CAC5B,OAAS,EAAe,CACtB,QAAQ,MACN,IAAI,EAAK,cAAc,yCACvB,CACF,CACF,CACF,CAEA,eAAe,EACb,EACA,EACe,CACf,GAAI,EAAiB,CACnB,QAAQ,KACN,IAAI,EAAK,cAAc,mDACzB,EACA,EAAW,CAAE,MAAK,UAAS,EAE3B,MACF,CAEA,EAAkB,GAElB,GAAI,CACF,IAAM,EAAU,EAAkB,EAAK,EAAK,IAAK,CAAQ,EAEzD,GAAI,EAKF,MAAM,EAAK,IAAI,gBAAgB,EAAS,CACtC,GAAG,EAAK,kBACR,GAAG,EAAmB,EAAM,EAAQ,IAAI,CAC1C,CAAC,OACI,GAAI,EAAK,cACd,EAAK,OAAO,mBAAmB,CAAQ,MAClC,CAGL,IAAM,EAAM,IAAI,EAAY,EAAW,gBAAiB,CACtD,KAAM,CACR,CAAC,EAED,EAAK,IAAI,oBAAoB,CAAG,EAChC,EAA0B,CAC5B,CACF,OAAS,EAAO,CACd,GAAI,aAAiB,EAInB,GAAI,CACF,EAA0B,CAC5B,MAAQ,CAER,MAEA,EAAyB,CAAK,CAElC,QAAU,CACR,EAAkB,GAClB,EAAqB,CACvB,CACF,CAIA,MAAQ,IACN,KAAK,EAAW,EAAK,EAAK,QAAQ,YAAY,CAAC,CACnD,CASA,SAAgB,EACd,EACiD,CACjD,MAAO,CACL,YAAe,CACT,EAAK,OAAO,wBACd,EAAK,OAAO,uBAAuB,EAGrC,EAAK,OAAO,uBAAyB,EAAK,QAAQ,oBAChD,EAAK,OACP,CACF,EAEA,WAAc,CACR,EAAK,OAAO,yBACd,EAAK,OAAO,uBAAuB,EACnC,EAAK,OAAO,uBAAyB,IAAA,GAEzC,EAEA,aAAgB,CACV,EAAK,OAAO,yBACd,EAAK,OAAO,uBAAuB,EACnC,EAAK,OAAO,uBAAyB,IAAA,IAGvC,EAAK,QAAQ,CACf,CACF,CACF,CCjNA,SAAgB,EAAmB,EAAyB,CAC1D,OAAO,UAAU,CAAO,CAAC,CAAC,WAAW,IAAK,KAAK,CACjD,CAMA,SAAgB,EAAmB,EAAyB,CAC1D,GAAI,CACF,OAAO,mBAAmB,CAAO,CACnC,MAAQ,CACN,OAAO,CACT,CACF,CAYA,SAAgB,EAAmB,EAAuB,CACxD,IAAI,EAAW,EAEf,KAAO,EAAS,WAAW,GAAG,GAC5B,EAAW,EAAS,MAAM,CAAC,EAG7B,OAAO,EAAmB,CAAQ,CACpC,CC3CA,MAAM,EAAsC,IAAI,IAAI,CAAC,IAAK,IAAK,GAAG,CAAC,EAEnE,SAAgB,EAAa,EAAwB,CACnD,IAAI,EAAO,EAEL,EAAY,EAAK,QAAQ,KAAK,EAEpC,GAAI,IAAc,GAAI,CACpB,IAAM,EAAiB,EAAY,EAC/B,EAAY,EAAK,OAErB,IAAK,IAAI,EAAI,EAAgB,EAAI,EAAK,OAAQ,IAAK,CACjD,IAAM,EAAK,EAAK,GAEhB,GAAI,EAAe,IAAI,CAAE,EAAG,CAC1B,EAAY,EAEZ,KACF,CACF,CAEA,EAAO,IAAc,EAAK,OAAS,IAAM,EAAK,MAAM,CAAS,GAEzD,EAAK,WAAW,GAAG,GAAK,EAAK,WAAW,GAAG,KAC7C,EAAO,IAAI,IAEf,CAEA,IAAM,EAAU,EAAK,QAAQ,GAAG,EAC1B,EAAO,IAAY,GAAK,GAAK,EAAK,MAAM,CAAO,EAC/C,EAAa,IAAY,GAAK,EAAO,EAAK,MAAM,EAAG,CAAO,EAE1D,EAAW,EAAW,QAAQ,GAAG,EACjC,EAAS,IAAa,GAAK,GAAK,EAAW,MAAM,CAAQ,EAG/D,MAAO,CAAE,SAFQ,IAAa,GAAK,EAAa,EAAW,MAAM,EAAG,CAAQ,EAEzD,SAAQ,MAAK,CAClC,CClBA,SAAgB,EACd,EACA,EACY,CACZ,OAAO,EAAI,eAAe,SAAU,EAAM,IACxC,EAAK,GAAQ,EAAQ,YAAY,CAAC,CACpC,CACF,CAuBA,SAAgB,EACd,EACA,EACA,EACA,EAKA,EAAe,GAKP,CAIR,IAAM,EAAS,CACb,KAAM,GACN,OAAQ,CAAC,EACT,KAAM,EACR,EAEA,OACE,EACA,EAAiB,CAAC,EAClB,IACG,CACH,IAAM,EAAQ,EAAI,WAAW,EAAM,CAAM,EAEzC,GAAI,CAAC,EACH,MAAU,MACR,8CAA8C,EAAK,eACrD,EAGF,IAAM,EAAa,EAAI,UACrB,EAAM,KACN,EAAM,OACN,EAAO,UAAU,EAAM,KAAM,EAAM,MAAM,EACzC,CACE,OAAQ,EAAM,IAChB,CACF,EAQI,EAEJ,GAAI,GAAS,OAAS,IAAA,GAAW,CAC/B,IAAM,EAAO,EAAmB,EAAQ,IAAI,EAE5C,EAAc,EAAO,IAAI,EAAmB,CAAI,IAAM,EACxD,MAAO,AAGL,EAHS,EACK,EAAQ,QAAQ,EAEhB,GAOhB,IAAM,EAAM,EAAW,EAAM,CAAM,EAAI,EAEvC,EAAO,KAAO,EAAW,KACzB,EAAO,OAAS,EAAW,OAC3B,EAAO,KAAO,EAAW,KAEzB,EAAQ,aAAa,EAAQ,CAAG,CAClC,CACF,CAEA,SAAgB,EACd,EACA,EACA,EACS,CAST,OARI,EAAW,UAAY,GAClB,GAGJ,EAIE,CAAC,CAAC,EAAW,QAAU,EAAQ,OAAS,EAAU,KAHhD,EAAW,UAAY,EAIlC,CC3JA,MAAa,EAA8C,CACzD,WAAY,GACZ,KAAM,GACN,gBAAiB,EACnB,EAOa,EAAiB,cCX9B,SAAS,EAAa,EAAqB,CACzC,OAAO,EAAI,WAAW,uBAAwB,OAAO,GAAG,KAAK,CAC/D,CAEA,SAAgB,EAAsB,EAAmC,CAKvE,OAJK,EAIM,OAAO,KAAK,EAAa,CAAU,GAAG,EAHxC,IAIX,CASA,SAAgB,EACd,EACA,EACQ,CAOR,OANI,IAAS,IAAM,IAAS,IACnB,KAGI,EAAc,EAAK,QAAQ,EAAa,EAAE,EAAI,EAAK,MAAM,CAAC,IAExD,GACjB,CAEA,SAAgB,EAAc,EAAa,EAAoC,CAC7E,IAAM,EAAY,EAAa,CAAG,EAC5B,EAAW,EAAgB,EAAU,KAAM,CAAW,EAE5D,OAAO,EAAS,SAAS,GAAG,EAAI,EAAW,EAAW,EAAU,MAClE,CAeA,SAAgB,EACd,EACA,EACA,EACQ,CACR,IAAM,EAAW,EAAiB,EAAgB,EAAM,CAAW,CAAC,EAEpE,OAAO,EAAS,SAAS,GAAG,EAAI,EAAW,EAAW,CACxD,CC1CA,IAAa,EAAb,KAAwB,CACtB,GACA,GACA,GACA,GACA,GACA,GAEA,YACE,EACA,EACA,EACA,EACA,EACA,EAKA,EACA,CACA,KAAKC,GAAU,EACf,KAAKC,GAAW,EAEhB,KAAKC,GAA0B,EAAuB,EAAK,CAAO,EAQlE,IAAI,EAAa,GACX,MAA8B,CAC9B,IAIJ,EAAa,GACb,QAAQ,KACN,sOAGF,EACF,EAEM,EAAY,GAAG,EAAQ,KAAK,GAAG,EAAQ,aACvC,GACJ,EACA,EACA,KAEI,GAAM,OAAS,IAAA,IACjB,EAAgB,EAGX,EAAY,EAAO,UAAU,EAAO,CAAM,GAGnD,KAAKG,GAAmB,EAExB,KAAKF,GAAoB,EAAI,aAAa,CACxC,SAAU,EACV,SAAW,GACT,EAAI,UAAU,EAAc,EAAK,CAAW,CAAC,GAAK,IAAA,GACpD,oBAAqB,EACnB,EACA,EACA,EACA,EACA,EACF,CACF,CAAC,EAED,IAAM,EAAU,EAAsB,CACpC,SACA,MACA,UACA,cAAe,EAAI,WAAW,CAAC,CAAC,cAChC,oBACA,cAAe,EACf,SAAU,CACZ,CAAC,EAED,KAAKC,GAAa,EAAwB,CACxC,UACA,SACA,UACA,YAAe,CACb,KAAKF,GAAwB,EAC7B,KAAKC,GAAkB,CACzB,CACF,CAAC,CACH,CAEA,WAAoB,CAClB,MAAO,CACL,GAAG,KAAKC,GAER,qBACE,EACA,EACA,IACG,CAGC,EAAW,OAAS,IAAA,IACtB,KAAKC,GAAiB,EAGxB,IAAM,EAAiB,EACrB,EACA,EACA,CACF,EAIA,EAAmB,EAFP,KAAKL,GAAQ,SAAS,EAAQ,KAAM,EAAQ,MAE1B,EAAG,EAAgB,KAAKC,EAAQ,CAChE,CACF,CACF,CACF,ECvIA,MAAa,EAAkB,EAC7B,EACA,EACA,CAAE,KAAM,EAAc,WAAY,CAAmB,CACvD,ECDA,SAAgB,EACd,EACA,EACe,CACf,EAAgB,CAAI,EAEpB,IAAM,EAAc,EAChB,OAAO,YACL,OAAO,QAAQ,CAAI,CAAC,CAAC,QAElB,EAAG,KAAW,IAAU,IAAA,EAC3B,CACF,EACA,CAAC,EACC,EAAuC,CAC3C,GAAG,EACH,GAAG,CACL,EAEA,EAAQ,KAAO,EAAc,EAAQ,IAAI,EAEzC,IAAM,EAAc,EAAsB,EAAQ,UAAU,EACtD,EACJ,GACA,MAEI,EACE,WAAW,SAAS,KACpB,WAAW,SAAS,OACpB,CACF,EACF,aACF,EAEI,EAAoB,CACxB,gBAAiB,EAAQ,gBACzB,kBACA,QAAS,EACX,EAEM,EAA6B,CAAE,uBAAwB,IAAA,EAAU,EAEvE,OAAO,SAAoB,EAAY,CAWrC,OAAO,IAVY,EACjB,EACA,EAAa,CAAU,EACvB,EACA,EACA,EACA,EACA,CAGU,CAAC,CAAC,UAAU,CAC1B,CACF"}
+{"version":3,"file":"index.mjs","names":["isState","#router","#browser","#removeStartInterceptor","#removeExtensions","#lifecycle","#warnHashIgnored"],"sources":["../../../../shared/browser-env/utils.ts","../../../type-guards/dist/esm/index.mjs","../../../../shared/browser-env/popstate-utils.ts","../../../../shared/browser-env/validation.ts","../../../../shared/browser-env/detect.ts","../../../../shared/browser-env/history-api.ts","../../../../shared/browser-env/ssr-fallback.ts","../../../../shared/browser-env/safe-browser.ts","../../../../shared/browser-env/popstate-handler.ts","../../../../shared/browser-env/url-context.ts","../../../../shared/browser-env/url-parsing.ts","../../../../shared/browser-env/plugin-utils.ts","../../src/constants.ts","../../src/hash-utils.ts","../../src/plugin.ts","../../src/validation.ts","../../src/factory.ts"],"sourcesContent":["/**\n * Normalizes base path to canonical form: leading slash, no trailing slash,\n * no repeated slashes. Isolated \"/\" collapses to \"\".\n *\n * @example\n * normalizeBase(\"app\")     // \"/app\"\n * normalizeBase(\"/app/\")   // \"/app\"\n * normalizeBase(\"//app//\") // \"/app\"\n * normalizeBase(\"\")        // \"\"\n * normalizeBase(\"/\")       // \"\"\n */\nexport function normalizeBase(base: string): string {\n  if (!base) {\n    return base;\n  }\n\n  let result = base.replaceAll(/\\/+/g, \"/\");\n\n  if (!result.startsWith(\"/\")) {\n    result = `/${result}`;\n  }\n\n  if (result.length > 1 && result.endsWith(\"/\")) {\n    result = result.slice(0, -1);\n  }\n\n  return result === \"/\" ? \"\" : result;\n}\n\nexport const safelyEncodePath = (path: string): string => {\n  try {\n    return encodeURI(decodeURI(path));\n  } catch (error) {\n    console.warn(`[browser-env] Could not encode path \"${path}\"`, error);\n\n    return path;\n  }\n};\n","const e=[`replace`,`reload`,`force`,`forceDeactivate`,`redirected`];function t(t){if(typeof t!=`object`||!t||Array.isArray(t))return!1;let n=t;for(let t of e){let e=n[t];if(e!==void 0&&typeof e!=`boolean`)return!1}let r=n.signal;return!(r!==void 0&&!(r instanceof AbortSignal))}const n=/\\S/,r=/^[A-Z_a-z][\\w-]*(?:\\.[A-Z_a-z][\\w-]*)*$/;function i(e,t){return TypeError(`[router.${e}] ${t}`)}function a(e){return typeof e==`string`?e===``?!0:e.length>1e4?!1:e.startsWith(`@@`)?!0:r.test(e):!1}function o(e){if(Array.isArray(e))return!0;let t=Object.getPrototypeOf(e);return t===null||t===Object.prototype}function s(e,t){let n=Array.isArray(e)?e:Object.values(e);for(let e of n)t.push(e)}function c(e){let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}var l=class{container;constructor(e){this.container=e}};function u(e,t,n,r){return n.has(e)?!1:r.has(e)?!0:o(e)?(n.add(e),t.push(new l(e)),s(e,t),!0):!1}function d(e){let t=[e],n=new WeakSet,r=new WeakSet;for(;t.length>0;){let e=t.pop();if(e instanceof l){n.delete(e.container),r.add(e.container);continue}if(e!=null){if(typeof e==`object`){if(!u(e,t,n,r))return!1;continue}if(!c(e))return!1}}return!0}function f(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}function p(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;let n=!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let r=e[t];if(!f(r)){let e=typeof r;if(e===`function`||e===`symbol`)return!1;n=!0;break}}return n?d(e):!0}function m(e){if(e==null)return!0;let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):Array.isArray(e)?e.every(e=>{let t=typeof e;return t===`string`||t===`boolean`?!0:t===`number`?Number.isFinite(e):!1}):!1}function h(e){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let t=Object.getPrototypeOf(e);if(t!==null&&t!==Object.prototype)return!1;for(let t in e){if(!Object.hasOwn(e,t))continue;let n=e[t];if(!m(n))return!1}return!0}function g(e){return a(e.name)&&typeof e.path==`string`&&p(e.params)}function _(e){return typeof e!=`object`||!e?!1:g(e)}function v(e){return!(typeof e!=`object`||!e||!g(e))}function y(e){return typeof e==`string`}function b(e){return typeof e==`boolean`}function x(e,t){return e in t}function S(e){return typeof e==`number`?Number.isFinite(e):typeof e==`string`||typeof e==`boolean`}function C(e,t){if(typeof e!=`string`)throw i(t,`Route name must be a string, got ${typeof e}`);if(e!==``){if(!n.test(e))throw i(t,`Route name cannot contain only whitespace`);if(e.length>1e4)throw i(t,`Route name exceeds maximum length of 10000 characters. This is a technical safety limit.`);if(!e.startsWith(`@@`)&&!r.test(e))throw i(t,`Invalid route name \"${e}\". Each segment must start with a letter or underscore, followed by letters, numbers, underscores, or hyphens. Segments are separated by dots (e.g., \"users.profile\").`)}}function w(e){if(e===null)return`null`;if(Array.isArray(e))return`array[${e.length}]`;if(typeof e==`object`){let t=e.constructor;return typeof t==`function`&&t.name!==`Object`&&t.name||`object`}return typeof e}function T(e,t){if(!_(e))throw TypeError(`[${t}] Invalid state structure: ${w(e)}. Expected State object with name, params, and path properties.`)}export{w as getTypeDescription,b as isBoolean,t as isNavigationOptions,x as isObjKey,p as isParams,h as isParamsStrict,S as isPrimitiveValue,a as isRouteName,_ as isState,v as isStateStrict,y as isString,C as validateRouteName,T as validateState};\n//# sourceMappingURL=index.mjs.map","import { isStateStrict as isState } from \"type-guards\";\n\nimport type { Browser } from \"./types.js\";\nimport type { State, Params } from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\n/**\n * Resolves the popstate event into a navigation-ready `State`.\n *\n * - If `history.state` is a valid router state ({name, params, path} written\n *   by browser-plugin/hash-plugin during their previous navigation), it is\n *   the source of truth — synthesize a fully-typed `State` from it via\n *   `api.makeState`. The synthesized `transition`/`context` fields are\n *   placeholders; the navigation pipeline (`completeTransition` and plugin\n *   claim writes) replaces them.\n * - Otherwise (e.g. manually entered URL with no recorded state), fall back\n *   to `api.matchPath(location)`. `location` is the route location the caller\n *   captured when the popstate event fired — each plugin derives it from its\n *   own `browser.getLocation()` (URL pathname for browser-plugin, hash-derived\n *   path for hash-plugin), so the fallback works for both.\n * - `undefined` when neither path produces a match.\n *\n * The caller passes the location it snapshotted at event time rather than\n * letting this function re-read `browser.getLocation()`: a deferred popstate\n * is processed only after the in-flight navigation's `replaceState` has\n * already overwritten the live location, so a late read would resolve the\n * wrong target (#757).\n *\n * Replaces the previous `{ name, params }` shape so the caller can hand\n * the State directly to `router.navigateToState(state, opts)` and skip\n * the redundant `forwardState`/`buildPath` round-trip in\n * `buildNavigateState` (issue #525).\n */\nexport function getRouteFromEvent(\n  evt: PopStateEvent,\n  api: PluginApi,\n  location: string,\n): State | undefined {\n  if (isState(evt.state)) {\n    return api.makeState(evt.state.name, evt.state.params, evt.state.path);\n  }\n\n  return api.matchPath(location);\n}\n\n/**\n * Updates browser state (pushState or replaceState)\n *\n * @param state - Router state\n * @param url - URL to set\n * @param replace - Whether to replace instead of push\n * @param browser - Browser API instance\n */\nexport function updateBrowserState(\n  state: State,\n  url: string,\n  replace: boolean,\n  browser: Browser,\n): void {\n  const historyState = {\n    name: state.name,\n    params: state.params,\n    path: state.path,\n  };\n\n  if (replace) {\n    browser.replaceState(historyState, url);\n  } else {\n    browser.pushState(historyState, url);\n  }\n}\n\n/**\n * Creates a `updateBrowserState` closure that reuses a single mutable buffer\n * across calls instead of allocating a fresh `{ name, params, path }` object\n * per push/replace.\n *\n * Why: Browsers structured-clone `history.state` synchronously inside\n * `pushState`/`replaceState`, so the caller never sees the buffer escape —\n * it can be safely overwritten before the next call. Eliminates one\n * allocation per navigation on the hot path.\n *\n * Each plugin instance must own its own buffer (do not share across plugins).\n */\nexport function createUpdateBrowserState(): (\n  state: State,\n  url: string,\n  replace: boolean,\n  browser: Browser,\n) => void {\n  const buffer = {\n    name: \"\",\n    params: {} as Params,\n    path: \"\",\n  };\n\n  return (state, url, replace, browser) => {\n    buffer.name = state.name;\n    buffer.params = state.params;\n    buffer.path = state.path;\n\n    if (replace) {\n      browser.replaceState(buffer, url);\n    } else {\n      browser.pushState(buffer, url);\n    }\n  };\n}\n","export interface OptionRule<T> {\n  validate: (value: T) => string | null;\n}\n\nexport type OptionRules<T extends object> = {\n  [K in keyof T]?: OptionRule<NonNullable<T[K]>>;\n};\n\nexport function createOptionsValidator<T extends object>(\n  defaults: Required<T>,\n  loggerContext: string,\n  rules?: OptionRules<T>,\n): (opts: Partial<T> | undefined) => void {\n  return (opts) => {\n    if (!opts) {\n      return;\n    }\n\n    for (const key of Object.keys(opts)) {\n      if (!(key in defaults)) {\n        continue;\n      }\n\n      const value = opts[key as keyof typeof opts];\n\n      if (value === undefined) {\n        continue;\n      }\n\n      const expected = typeof defaults[key as keyof typeof defaults];\n      const actual = typeof value;\n\n      if (actual !== expected) {\n        throw new Error(\n          `[${loggerContext}] Invalid type for '${key}': expected ${expected}, got ${actual}`,\n        );\n      }\n\n      const rule = rules?.[key as keyof T];\n\n      if (rule) {\n        const msg = (rule.validate as (input: unknown) => string | null)(value);\n\n        if (msg !== null) {\n          throw new Error(`[${loggerContext}] Invalid '${key}': ${msg}`);\n        }\n      }\n    }\n  };\n}\n\n// eslint-disable-next-line no-control-regex -- control characters are exactly what this rule rejects\nconst CONTROL_CHARS = /[\\u0000-\\u001F\\u007F]/;\n\nexport const safeBaseRule: OptionRule<string> = {\n  validate: (value) => {\n    if (CONTROL_CHARS.test(value)) {\n      return \"must not contain control characters\";\n    }\n\n    if (value.split(\"/\").includes(\"..\")) {\n      return \"must not contain '..' segments\";\n    }\n\n    return null;\n  },\n};\n\nexport const safeHashPrefixRule: OptionRule<string> = {\n  validate: (value) => {\n    if (CONTROL_CHARS.test(value)) {\n      return \"must not contain control characters\";\n    }\n\n    if (value.includes(\"/\")) {\n      return \"must not contain '/' (slash is added before the path automatically)\";\n    }\n\n    if (value.includes(\"#\")) {\n      return \"must not contain '#' (it is added as the hash delimiter)\";\n    }\n\n    if (value.includes(\"?\")) {\n      return \"must not contain '?' (it conflicts with the query delimiter)\";\n    }\n\n    return null;\n  },\n};\n\nexport const nonNegativeIntegerRule: OptionRule<number> = {\n  validate: (value) => {\n    if (!Number.isFinite(value)) {\n      return `expected finite number, got ${String(value)}`;\n    }\n\n    if (!Number.isInteger(value)) {\n      return `expected integer, got ${String(value)}`;\n    }\n\n    if (value < 0) {\n      return `expected non-negative integer, got ${value}`;\n    }\n\n    return null;\n  },\n};\n","export const isBrowserEnvironment = (): boolean =>\n  typeof globalThis.window !== \"undefined\" && !!globalThis.history;\n","import type { HistoryBrowser } from \"./types.js\";\n\nexport const pushState = (state: unknown, path: string): void => {\n  globalThis.history.pushState(state, \"\", path);\n};\n\nexport const replaceState = (state: unknown, path: string): void => {\n  globalThis.history.replaceState(state, \"\", path);\n};\n\nexport const addPopstateListener: HistoryBrowser[\"addPopstateListener\"] = (\n  fn,\n) => {\n  globalThis.addEventListener(\"popstate\", fn);\n\n  return () => {\n    globalThis.removeEventListener(\"popstate\", fn);\n  };\n};\n\nexport const getHash = (): string => globalThis.location.hash;\n","import type { HistoryBrowser } from \"./types.js\";\n\nconst NOOP = (): void => {};\n\nexport const createWarnOnce = (context: string) => {\n  let hasWarned = false;\n\n  return (method: string): void => {\n    if (!hasWarned) {\n      console.warn(\n        `[browser-env] Browser API is running in a non-browser environment (context: \"${context}\"). ` +\n          `Method \"${method}\" is a no-op. ` +\n          `This is expected for SSR, but may indicate misconfiguration if you expected browser behavior.`,\n      );\n      hasWarned = true;\n    }\n  };\n};\n\nexport const createHistoryFallbackBrowser = (\n  context: string,\n): HistoryBrowser => {\n  const warnOnce = createWarnOnce(context);\n\n  return {\n    pushState: () => {\n      warnOnce(\"pushState\");\n    },\n    replaceState: () => {\n      warnOnce(\"replaceState\");\n    },\n    addPopstateListener: () => {\n      warnOnce(\"addPopstateListener\");\n\n      return NOOP;\n    },\n    getHash: () => {\n      warnOnce(\"getHash\");\n\n      return \"\";\n    },\n  };\n};\n","import { isBrowserEnvironment } from \"./detect.js\";\nimport {\n  pushState,\n  replaceState,\n  addPopstateListener,\n  getHash,\n} from \"./history-api.js\";\nimport {\n  createWarnOnce,\n  createHistoryFallbackBrowser,\n} from \"./ssr-fallback.js\";\n\nimport type { Browser } from \"./types.js\";\n\nexport function createSafeBrowser(\n  getLocation: () => string,\n  context: string,\n): Browser {\n  if (isBrowserEnvironment()) {\n    return {\n      pushState,\n      replaceState,\n      addPopstateListener,\n      getLocation,\n      getHash,\n    };\n  }\n\n  const warnOnce = createWarnOnce(context);\n\n  return {\n    ...createHistoryFallbackBrowser(context),\n    getLocation: () => {\n      warnOnce(\"getLocation\");\n\n      return \"\";\n    },\n  };\n}\n","import { errorCodes, RouterError } from \"@real-router/core\";\n\nimport { getRouteFromEvent } from \"./popstate-utils.js\";\n\nimport type { Browser, SharedFactoryState } from \"./types.js\";\nimport type { Params, Plugin, Router } from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\n/**\n * Navigation options used by the popstate handler to trigger a\n * router.navigate() call from a back/forward event. `source` identifies\n * the origin of the transition to downstream context consumers;\n * `replace: true` keeps the history stack in sync with the browser.\n */\nexport interface PopstateTransitionOptions {\n  source: string;\n  replace: true;\n  forceDeactivate?: boolean;\n}\n\nexport interface PopstateHandlerDeps {\n  router: Router;\n  api: PluginApi;\n  browser: Browser;\n  allowNotFound: boolean;\n  transitionOptions: PopstateTransitionOptions;\n  loggerContext: string;\n  buildUrl: (\n    name: string,\n    params?: Params,\n    options?: { hash?: string },\n  ) => string;\n  /**\n   * Decoded hash of the current browser location (no leading \"#\"). Defaults\n   * to a no-op (returns \"\") for plugins that do not participate in URL\n   * fragment tracking — namely hash-plugin, where `#` is the route delimiter.\n   * (#532)\n   */\n  getCurrentHash?: () => string;\n  /**\n   * Decoded hash from the previous transition's `state.context.url.hash`\n   * (no leading \"#\"). Used by the popstate handler to detect hash-only\n   * navigation and add `force: true, hashChange: true` to bypass SAME_STATES.\n   * Defaults to no-op (returns \"\") for hash-plugin. (#532)\n   */\n  getCurrentContextHash?: () => string;\n}\n\n/**\n * Hash augmentation for popstate-driven navigateToState (#532).\n * Returns a partial options object that the caller spreads on top of\n * `deps.transitionOptions`. When the handler is wired without hash support\n * (hash-plugin), both deps default to undefined and an empty object is\n * returned — preserving the legacy behavior for that plugin.\n */\nfunction resolveHashOptions(\n  deps: PopstateHandlerDeps,\n  matchedPath: string,\n): { hash?: string; force?: true; hashChange?: true } {\n  if (!deps.getCurrentHash) {\n    return {};\n  }\n\n  const newHash = deps.getCurrentHash();\n  const prevHash = deps.getCurrentContextHash\n    ? deps.getCurrentContextHash()\n    : \"\";\n  const hashChange =\n    newHash !== prevHash && deps.router.getState()?.path === matchedPath;\n\n  return hashChange\n    ? { hash: newHash, force: true, hashChange: true }\n    : { hash: newHash };\n}\n\nexport function createPopstateHandler(\n  deps: PopstateHandlerDeps,\n): (evt: PopStateEvent) => void {\n  let isTransitioning = false;\n  // Snapshot the route location alongside the event: a deferred popstate is\n  // replayed only after the in-flight navigation's onTransitionSuccess →\n  // replaceState has overwritten the live location, so re-reading it at\n  // replay time would resolve the wrong target (#757).\n  let deferred: { evt: PopStateEvent; location: string } | null = null;\n\n  function processDeferredEvent(): void {\n    if (deferred) {\n      const { evt, location } = deferred;\n\n      deferred = null;\n      console.warn(\n        `[${deps.loggerContext}] Processing deferred popstate event`,\n      );\n      void onPopState(evt, location);\n    }\n  }\n\n  function rollbackUrlToCurrentState(): void {\n    const currentState = deps.router.getState();\n\n    /* v8 ignore next -- @preserve: router always has state after start(); defensive guard for edge cases */\n    if (!currentState) {\n      return;\n    }\n\n    // Preserve hash on rollback so guard rejection / unmatched URL on\n    // popstate doesn't strip the fragment from the visible URL (#532).\n    const ctxHash = (\n      currentState.context as { url?: { hash?: string } } | undefined\n    )?.url?.hash;\n    const url = deps.buildUrl(\n      currentState.name,\n      currentState.params,\n      ctxHash ? { hash: ctxHash } : undefined,\n    );\n\n    deps.browser.replaceState(currentState, url);\n  }\n\n  function recoverFromCriticalError(error: unknown): void {\n    console.error(\n      `[${deps.loggerContext}] Critical error in onPopState`,\n      error,\n    );\n\n    try {\n      rollbackUrlToCurrentState();\n    } catch (recoveryError) {\n      console.error(\n        `[${deps.loggerContext}] Failed to recover from critical error`,\n        recoveryError,\n      );\n    }\n  }\n\n  async function onPopState(\n    evt: PopStateEvent,\n    location: string,\n  ): Promise<void> {\n    if (isTransitioning) {\n      console.warn(\n        `[${deps.loggerContext}] Transition in progress, deferring popstate event`,\n      );\n      deferred = { evt, location };\n\n      return;\n    }\n\n    isTransitioning = true;\n\n    try {\n      const matched = getRouteFromEvent(evt, deps.api, location);\n\n      if (matched) {\n        // api.navigateToState — plugin-only entry point. Preserves\n        // matchSourceTrailingSlash output and skips the redundant\n        // forwardState/buildPath round-trip (#525). Hash augmentation (#532)\n        // extracted into resolveHashOptions so this branch stays readable.\n        await deps.api.navigateToState(matched, {\n          ...deps.transitionOptions,\n          ...resolveHashOptions(deps, matched.path),\n        });\n      } else if (deps.allowNotFound) {\n        deps.router.navigateToNotFound(location);\n      } else {\n        // Strict mode — unmatched URL is an error. Emit $$error and sync URL\n        // back to the current router state (no silent fallback to defaultRoute).\n        const err = new RouterError(errorCodes.ROUTE_NOT_FOUND, {\n          path: location,\n        });\n\n        deps.api.emitTransitionError(err);\n        rollbackUrlToCurrentState();\n      }\n    } catch (error) {\n      if (error instanceof RouterError) {\n        // navigate() already emitted $$error — just sync URL with router state.\n        // Swallow rollback errors: teardown races may remove router.buildUrl\n        // while a popstate event is still queued.\n        try {\n          rollbackUrlToCurrentState();\n        } catch {\n          // noop — nothing safe to do here\n        }\n      } else {\n        recoverFromCriticalError(error);\n      }\n    } finally {\n      isTransitioning = false;\n      processDeferredEvent();\n    }\n  }\n\n  // Snapshot the location the instant the event fires — before any in-flight\n  // navigation can overwrite it via replaceState (#757).\n  return (evt: PopStateEvent) =>\n    void onPopState(evt, deps.browser.getLocation());\n}\n\nexport interface PopstateLifecycleDeps {\n  browser: Browser;\n  shared: SharedFactoryState;\n  handler: (evt: PopStateEvent) => void;\n  cleanup: () => void;\n}\n\nexport function createPopstateLifecycle(\n  deps: PopstateLifecycleDeps,\n): Pick<Plugin, \"onStart\" | \"onStop\" | \"teardown\"> {\n  return {\n    onStart: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n      }\n\n      deps.shared.removePopStateListener = deps.browser.addPopstateListener(\n        deps.handler,\n      );\n    },\n\n    onStop: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n        deps.shared.removePopStateListener = undefined;\n      }\n    },\n\n    teardown: () => {\n      if (deps.shared.removePopStateListener) {\n        deps.shared.removePopStateListener();\n        deps.shared.removePopStateListener = undefined;\n      }\n\n      deps.cleanup();\n    },\n  };\n}\n","/**\n * URL fragment (\"hash\") shared layer (#532).\n *\n * Both URL plugins (navigation-plugin, browser-plugin) claim the `\"url\"`\n * `state.context` namespace and write `UrlContext` on every transition.\n * Mutually exclusive at runtime — only one URL plugin is installed per router.\n *\n * Hash form: decoded, no leading \"#\" — symmetric to `params` (no leading \"?\").\n * Encoding to/from URL form happens at the boundary (URL build / URL parse).\n */\n\nexport interface UrlContext {\n  /** Decoded fragment, no leading \"#\". Empty string when URL has no fragment. */\n  hash: string;\n  /** Whether `hash` differs from the previous transition's `state.context.url.hash`. */\n  hashChanged: boolean;\n}\n\n/**\n * Encode for URL fragment per RFC 3986: preserves sub-delims (`&`, `=`, `?`,\n * `:`, etc.) and the path/query characters that `encodeURI` already leaves\n * alone. Defensively percent-escapes `#` (a stray `#` in a decoded fragment\n * would otherwise terminate the fragment in the rendered URL).\n *\n * `encodeURIComponent` over-encodes RFC-3986 sub-delims (`&` → `%26`) and is\n * therefore wrong for fragments.\n */\nexport function encodeHashFragment(decoded: string): string {\n  return encodeURI(decoded).replaceAll(\"#\", \"%23\");\n}\n\n/**\n * Decode a percent-encoded fragment. Falls back to the raw input on malformed\n * escapes — matches the resilience pattern in scroll-restore.\n */\nexport function decodeHashFragment(encoded: string): string {\n  try {\n    return decodeURIComponent(encoded);\n  } catch {\n    return encoded;\n  }\n}\n\n/**\n * Normalize user-provided hash input: strip ALL leading \"#\" characters, then\n * decode. Defensive against `<Link hash=\"#section\">` — the prop is documented\n * to accept the fragment name without \"#\", but we accept both gracefully.\n *\n * Stripping a single \"#\" would leave the function non-idempotent on\n * pathological inputs like `\"##section\"` (caller's accidental double-hash,\n * concatenation bugs). Property test G9 in `hash-encoding.properties.ts`\n * locks in idempotence — `normalize(normalize(x)) === normalize(x)`.\n */\nexport function normalizeHashInput(input: string): string {\n  let stripped = input;\n\n  while (stripped.startsWith(\"#\")) {\n    stripped = stripped.slice(1);\n  }\n\n  return decodeHashFragment(stripped);\n}\n\n/**\n * Read the current browser hash in decoded form, no leading \"#\".\n * Accepts any object with a `getHash()` method — works for both `Browser`\n * (History API) and `NavigationBrowser` (Navigation API). SSR-safe via the\n * abstractions, which return `\"\"` outside a real browser.\n */\nexport function getDecodedHash(browser: { getHash: () => string }): string {\n  const raw = browser.getHash();\n\n  if (!raw) {\n    return \"\";\n  }\n\n  const stripped = raw.startsWith(\"#\") ? raw.slice(1) : raw;\n\n  return decodeHashFragment(stripped);\n}\n","export interface ParsedUrl {\n  pathname: string;\n  search: string;\n  hash: string;\n}\n\n/**\n * Scheme-agnostic URL parser.\n *\n * Extracts `pathname`, `search`, and `hash` from any string — absolute\n * (`scheme://authority/path?q#h`), path-relative (`/path?q#h`), or opaque\n * (`data:...`, `javascript:...`). Never throws, never returns null.\n *\n * Routing does not care about scheme or authority, only about the path part.\n * This keeps `browser-plugin`, `navigation-plugin`, and `hash-plugin` working\n * in Electron (`file://`, `app://`), Tauri (`tauri://`, `https://`), and any\n * other webview that may ship with non-HTTP origins. See issue #496.\n */\nconst URL_DELIMITERS: ReadonlySet<string> = new Set([\"/\", \"?\", \"#\"]);\n\nexport function safeParseUrl(url: string): ParsedUrl {\n  let rest = url;\n\n  const schemeIdx = rest.indexOf(\"://\");\n\n  if (schemeIdx !== -1) {\n    const authorityStart = schemeIdx + 3;\n    let pathStart = rest.length;\n\n    for (let i = authorityStart; i < rest.length; i++) {\n      const ch = rest[i];\n\n      if (URL_DELIMITERS.has(ch)) {\n        pathStart = i;\n\n        break;\n      }\n    }\n\n    rest = pathStart === rest.length ? \"/\" : rest.slice(pathStart);\n\n    if (rest.startsWith(\"?\") || rest.startsWith(\"#\")) {\n      rest = `/${rest}`;\n    }\n  }\n\n  const hashIdx = rest.indexOf(\"#\");\n  const hash = hashIdx === -1 ? \"\" : rest.slice(hashIdx);\n  const beforeHash = hashIdx === -1 ? rest : rest.slice(0, hashIdx);\n\n  const queryIdx = beforeHash.indexOf(\"?\");\n  const search = queryIdx === -1 ? \"\" : beforeHash.slice(queryIdx);\n  const pathname = queryIdx === -1 ? beforeHash : beforeHash.slice(0, queryIdx);\n\n  return { pathname, search, hash };\n}\n","import { encodeHashFragment, normalizeHashInput } from \"./url-context.js\";\nimport { buildUrl } from \"./url-utils.js\";\n\nimport type {\n  NavigationOptions,\n  Params,\n  Router,\n  State,\n} from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\nexport interface LocationSource {\n  getLocation: () => string;\n}\n\n/**\n * Minimal browser surface needed by `createReplaceHistoryState`.\n *\n * Both `Browser` (History API) and navigation-plugin's `NavigationBrowser`\n * (Navigation API) satisfy this structurally — the function never needs\n * `pushState`/`addPopstateListener`, only the replace path.\n */\nexport interface ReplaceStateBrowser {\n  replaceState: (state: unknown, url: string) => void;\n  getHash: () => string;\n}\n\n/**\n * Hash override option for `replaceHistoryState` (#532). Tri-state semantics:\n *   `undefined`  — preserve the current browser hash (legacy behavior, default)\n *   `\"\"`         — explicitly clear the fragment\n *   non-empty    — explicitly set the fragment (decoded form, no leading \"#\")\n */\nexport interface ReplaceHistoryStateOptions {\n  hash?: string;\n}\n\nexport function createStartInterceptor(\n  api: PluginApi,\n  browser: LocationSource,\n): () => void {\n  return api.addInterceptor(\"start\", (next, path) =>\n    next(path ?? browser.getLocation()),\n  );\n}\n\n// Shared `buildUrl` extension for browser-plugin and navigation-plugin.\n// Composes router.buildPath + base prefixing + tri-state hash (#532) into the\n// single function the plugins register via `api.extendRouter({ buildUrl })`.\nexport function createPluginBuildUrl(\n  router: Router,\n  base: string,\n): (route: string, params?: Params, opts?: { hash?: string }) => string {\n  return (route, params, opts) => {\n    const path = router.buildPath(route, params);\n    const url = buildUrl(path, base);\n\n    if (opts?.hash === undefined) {\n      return url;\n    }\n\n    const norm = normalizeHashInput(opts.hash);\n\n    return norm ? `${url}#${encodeHashFragment(norm)}` : url;\n  };\n}\n\nexport function createReplaceHistoryState(\n  api: PluginApi,\n  router: Router,\n  browser: ReplaceStateBrowser,\n  buildUrlFn: (\n    name: string,\n    params?: Params,\n    options?: ReplaceHistoryStateOptions,\n  ) => string,\n  preserveHash = true,\n): (\n  name: string,\n  params?: Params,\n  options?: ReplaceHistoryStateOptions,\n) => void {\n  // Reusable buffer — browsers structured-clone state synchronously inside\n  // replaceState, so the buffer never escapes. Eliminates one allocation per\n  // navigation on the hot path. (Mirrors createUpdateBrowserState.)\n  const buffer = {\n    name: \"\",\n    params: {} as Params,\n    path: \"\",\n  };\n\n  return (\n    name: string,\n    params: Params = {},\n    options?: ReplaceHistoryStateOptions,\n  ) => {\n    const state = api.buildState(name, params);\n\n    if (!state) {\n      throw new Error(\n        `[real-router] Cannot replace state: route \"${name}\" is not found`,\n      );\n    }\n\n    const builtState = api.makeState(\n      state.name,\n      state.params,\n      router.buildPath(state.name, state.params),\n      {\n        params: state.meta,\n      },\n    );\n\n    // Tri-state hash semantics (#532):\n    //   options.hash === undefined → preserve (legacy behavior, controlled by\n    //                                preserveHash flag — true for browser/\n    //                                navigation plugins, false for hash-plugin)\n    //   options.hash === \"\"        → explicitly clear\n    //   options.hash === \"value\"   → explicitly set\n    let hashSegment: string;\n\n    if (options?.hash !== undefined) {\n      const norm = normalizeHashInput(options.hash);\n\n      hashSegment = norm ? `#${encodeHashFragment(norm)}` : \"\";\n    } else if (preserveHash) {\n      hashSegment = browser.getHash();\n    } else {\n      hashSegment = \"\";\n    }\n\n    // Pass hash through buildUrl when the plugin understands it (avoids\n    // double-append). Hash-plugin's buildUrl ignores the option and warns,\n    // so call without options here for semantic clarity — but the result is\n    // identical because hashSegment is \"\" in that branch (preserveHash=false).\n    const url = buildUrlFn(name, params) + hashSegment;\n\n    buffer.name = builtState.name;\n    buffer.params = builtState.params;\n    buffer.path = builtState.path;\n\n    browser.replaceState(buffer, url);\n  };\n}\n\nexport function shouldReplaceHistory(\n  navOptions: NavigationOptions,\n  toState: State,\n  fromState: State | undefined,\n): boolean {\n  if (navOptions.replace === true) {\n    return true;\n  }\n\n  if (!fromState) {\n    return navOptions.replace !== false;\n  }\n\n  return !!navOptions.reload && toState.path === fromState.path;\n}\n","// packages/hash-plugin/src/constants.ts\n\nimport type { HashPluginOptions } from \"./types\";\n\nexport const defaultOptions: Required<HashPluginOptions> = {\n  hashPrefix: \"\",\n  base: \"\",\n  forceDeactivate: true,\n};\n\n/**\n * Source identifier for transitions triggered by browser events.\n */\nexport const source = \"popstate\";\n\nexport const LOGGER_CONTEXT = \"hash-plugin\";\n","// packages/hash-plugin/src/hash-utils.ts\n\nimport { safelyEncodePath, safeParseUrl } from \"./browser-env\";\n\nfunction escapeRegExp(str: string): string {\n  return str.replaceAll(/[$()*+.?[\\\\\\]^{|}-]/g, String.raw`\\$&`);\n}\n\nexport function createHashPrefixRegex(hashPrefix: string): RegExp | null {\n  if (!hashPrefix) {\n    return null;\n  }\n\n  return new RegExp(`^#${escapeRegExp(hashPrefix)}`);\n}\n\n/**\n * Extract path from URL hash, stripping hash prefix.\n *\n * @param hash - URL hash (e.g., \"#/path\" or \"#!/path\")\n * @param prefixRegex - Pre-compiled regex for prefix stripping (null if no prefix)\n * @returns Extracted path (e.g., \"/path\")\n */\nexport function extractHashPath(\n  hash: string,\n  prefixRegex: RegExp | null,\n): string {\n  if (hash === \"\" || hash === \"#\") {\n    return \"/\";\n  }\n\n  const path = prefixRegex ? hash.replace(prefixRegex, \"\") : hash.slice(1);\n\n  return path || \"/\";\n}\n\nexport function hashUrlToPath(url: string, prefixRegex: RegExp | null): string {\n  const parsedUrl = safeParseUrl(url);\n  const hashPath = extractHashPath(parsedUrl.hash, prefixRegex);\n\n  return hashPath.includes(\"?\") ? hashPath : hashPath + parsedUrl.search;\n}\n\n/**\n * Build the router-side location string from a hash + query pair.\n *\n * Encodes the hash path via `safelyEncodePath` after stripping the\n * configured prefix, then appends the outer `search` only when the hash\n * path itself does not already carry a `?` — otherwise the outer search\n * would be duplicated (see `url.test.ts` — \"well-formed path (no double '?')\").\n *\n * Used by the `createSafeBrowser` `getLocation` callback both in the\n * production factory and in functional/stress test helpers. Extracting\n * here keeps the production path and test mocks aligned; a regression in\n * this logic previously slipped between the two.\n */\nexport function buildHashLocation(\n  hash: string,\n  search: string,\n  prefixRegex: RegExp | null,\n): string {\n  const hashPath = safelyEncodePath(extractHashPath(hash, prefixRegex));\n\n  return hashPath.includes(\"?\") ? hashPath : hashPath + search;\n}\n","import {\n  createPopstateHandler,\n  createPopstateLifecycle,\n  createStartInterceptor,\n  createReplaceHistoryState,\n  shouldReplaceHistory,\n  updateBrowserState,\n} from \"./browser-env\";\nimport { LOGGER_CONTEXT } from \"./constants\";\nimport { hashUrlToPath } from \"./hash-utils\";\n\nimport type { Browser, SharedFactoryState } from \"./browser-env\";\nimport type { HashPluginOptions } from \"./types\";\nimport type {\n  NavigationOptions,\n  Params,\n  Router,\n  State,\n  Plugin,\n} from \"@real-router/core\";\nimport type { PluginApi } from \"@real-router/core/api\";\n\nexport class HashPlugin {\n  readonly #router: Router;\n  readonly #browser: Browser;\n  readonly #removeStartInterceptor: () => void;\n  readonly #removeExtensions: () => void;\n  readonly #lifecycle: Pick<Plugin, \"onStart\" | \"onStop\" | \"teardown\">;\n  readonly #warnHashIgnored!: () => void;\n\n  constructor(\n    router: Router,\n    api: PluginApi,\n    options: Required<HashPluginOptions>,\n    browser: Browser,\n    prefixRegex: RegExp | null,\n    transitionOptions: {\n      source: string;\n      replace: true;\n      forceDeactivate?: boolean;\n    },\n    shared: SharedFactoryState,\n  ) {\n    this.#router = router;\n    this.#browser = browser;\n\n    this.#removeStartInterceptor = createStartInterceptor(api, browser);\n\n    // Hash limitation warn-once (#532). hash-plugin uses `#` as the route\n    // delimiter, so URL fragments are structurally incompatible. Plugin\n    // accepts the `hash` option for typing parity with browser/navigation\n    // plugins, ignores it, and emits a single console.warn the first time\n    // any consumer surfaces a hash. Existing `createWarnOnce` in browser-env\n    // is SSR-specific (different signature) — inline pattern here.\n    let hashWarned = false;\n    const warnHashIgnored = (): void => {\n      if (hashWarned) {\n        return;\n      }\n\n      hashWarned = true;\n      console.warn(\n        \"[@real-router/hash-plugin] `hash` option is ignored — `#` is reserved for the route delimiter. \" +\n          \"URL fragments are not supported with hash-plugin; use @real-router/browser-plugin or \" +\n          \"@real-router/navigation-plugin if you need them.\",\n      );\n    };\n\n    const urlPrefix = `${options.base}#${options.hashPrefix}`;\n    const pluginBuildUrl = (\n      route: string,\n      params?: Params,\n      opts?: { hash?: string },\n    ) => {\n      if (opts?.hash !== undefined) {\n        warnHashIgnored();\n      }\n\n      return urlPrefix + router.buildPath(route, params);\n    };\n\n    this.#warnHashIgnored = warnHashIgnored;\n\n    this.#removeExtensions = api.extendRouter({\n      buildUrl: pluginBuildUrl,\n      matchUrl: (url: string) =>\n        api.matchPath(hashUrlToPath(url, prefixRegex)) ?? undefined,\n      replaceHistoryState: createReplaceHistoryState(\n        api,\n        router,\n        browser,\n        pluginBuildUrl,\n        false,\n      ),\n    });\n\n    const handler = createPopstateHandler({\n      router,\n      api,\n      browser,\n      allowNotFound: api.getOptions().allowNotFound,\n      transitionOptions,\n      loggerContext: LOGGER_CONTEXT,\n      buildUrl: pluginBuildUrl,\n    });\n\n    this.#lifecycle = createPopstateLifecycle({\n      browser,\n      shared,\n      handler,\n      cleanup: () => {\n        this.#removeStartInterceptor();\n        this.#removeExtensions();\n      },\n    });\n  }\n\n  getPlugin(): Plugin {\n    return {\n      ...this.#lifecycle,\n\n      onTransitionSuccess: (\n        toState: State,\n        fromState: State | undefined,\n        navOptions: NavigationOptions,\n      ) => {\n        // Hash limitation (#532): warn once if a consumer programmatically\n        // requested a fragment via `router.navigate(..., { hash })`.\n        if (navOptions.hash !== undefined) {\n          this.#warnHashIgnored();\n        }\n\n        const replaceHistory = shouldReplaceHistory(\n          navOptions,\n          toState,\n          fromState,\n        );\n\n        const url = this.#router.buildUrl(toState.name, toState.params);\n\n        updateBrowserState(toState, url, replaceHistory, this.#browser);\n      },\n    };\n  }\n}\n","import {\n  createOptionsValidator,\n  safeBaseRule,\n  safeHashPrefixRule,\n} from \"./browser-env\";\nimport { LOGGER_CONTEXT, defaultOptions } from \"./constants\";\n\nimport type { HashPluginOptions } from \"./types\";\n\nexport const validateOptions = createOptionsValidator<HashPluginOptions>(\n  defaultOptions,\n  LOGGER_CONTEXT,\n  { base: safeBaseRule, hashPrefix: safeHashPrefixRule },\n);\n","import { getPluginApi } from \"@real-router/core/api\";\n\nimport { createSafeBrowser, normalizeBase } from \"./browser-env\";\nimport { defaultOptions, source } from \"./constants\";\nimport { buildHashLocation, createHashPrefixRegex } from \"./hash-utils\";\nimport { HashPlugin } from \"./plugin\";\nimport { validateOptions } from \"./validation\";\n\nimport type { Browser, SharedFactoryState } from \"./browser-env\";\nimport type { HashPluginOptions } from \"./types\";\nimport type { PluginFactory, Router } from \"@real-router/core\";\n\nexport function hashPluginFactory(\n  opts?: Partial<HashPluginOptions>,\n  browser?: Browser,\n): PluginFactory {\n  validateOptions(opts);\n\n  const definedOpts = opts\n    ? Object.fromEntries(\n        Object.entries(opts).filter(\n          // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- runtime may receive explicit undefined via conditional spreads (exactOptionalPropertyTypes does not apply here)\n          ([, value]) => value !== undefined,\n        ),\n      )\n    : {};\n  const options: Required<HashPluginOptions> = {\n    ...defaultOptions,\n    ...definedOpts,\n  };\n\n  options.base = normalizeBase(options.base);\n\n  const prefixRegex = createHashPrefixRegex(options.hashPrefix);\n  const resolvedBrowser =\n    browser ??\n    createSafeBrowser(\n      () =>\n        buildHashLocation(\n          globalThis.location.hash,\n          globalThis.location.search,\n          prefixRegex,\n        ),\n      \"hash-plugin\",\n    );\n\n  const transitionOptions = {\n    forceDeactivate: options.forceDeactivate,\n    source,\n    replace: true as const,\n  };\n\n  const shared: SharedFactoryState = { removePopStateListener: undefined };\n\n  return function hashPlugin(routerBase) {\n    const plugin = new HashPlugin(\n      routerBase as Router,\n      getPluginApi(routerBase),\n      options,\n      resolvedBrowser,\n      prefixRegex,\n      transitionOptions,\n      shared,\n    );\n\n    return plugin.getPlugin();\n  };\n}\n"],"mappings":"qHAWA,SAAgB,EAAc,EAAsB,CAClD,GAAI,CAAC,EACH,OAAO,EAGT,IAAI,EAAS,EAAK,WAAW,OAAQ,GAAG,EAUxC,OARK,EAAO,WAAW,GAAG,IACxB,EAAS,IAAI,KAGX,EAAO,OAAS,GAAK,EAAO,SAAS,GAAG,IAC1C,EAAS,EAAO,MAAM,EAAG,EAAE,GAGtB,IAAW,IAAM,GAAK,CAC/B,CAEA,MAAa,EAAoB,GAAyB,CACxD,GAAI,CACF,OAAO,UAAU,UAAU,CAAI,CAAC,CAClC,OAAS,EAAO,CAGd,OAFA,QAAQ,KAAK,wCAAwC,EAAK,GAAI,CAAK,EAE5D,CACT,CACF,ECrCmS,EAAE,0CAAiG,SAAS,EAAE,EAAE,CAAC,OAAO,OAAO,GAAG,SAAS,IAAI,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,eAAe,CAAC,EAAE,OAAO,IAAI,MAAM,IAAI,OAAO,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,EAAE,EAAE,OAAO,OAAO,CAAC,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,IAAI,UAAU,CAAC,EAAE,IAAI,SAAS,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,YAAY,EAAE,CAAC,KAAK,UAAU,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,QAAQ,EAAE,IAAI,QAAQ,KAAK,EAAE,OAAO,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,IAAI,UAAU,CAAC,EAAE,IAAI,SAAS,OAAO,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,OAAO,GAAG,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,eAAe,CAAC,EAAE,GAAG,IAAI,MAAM,IAAI,OAAO,UAAU,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,OAAO,EAAE,CAAC,EAAE,SAAS,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,YAAY,IAAI,SAAS,MAAM,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAqd,SAAS,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,IAAI,GAAG,OAAO,EAAE,MAAM,UAAU,EAAE,EAAE,MAAM,CAAC,CAAqD,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CCiCjtE,SAAgB,EACd,EACA,EACA,EACmB,CAKnB,OAJIA,EAAQ,EAAI,KAAK,EACZ,EAAI,UAAU,EAAI,MAAM,KAAM,EAAI,MAAM,OAAQ,EAAI,MAAM,IAAI,EAGhE,EAAI,UAAU,CAAQ,CAC/B,CAUA,SAAgB,EACd,EACA,EACA,EACA,EACM,CACN,IAAM,EAAe,CACnB,KAAM,EAAM,KACZ,OAAQ,EAAM,OACd,KAAM,EAAM,IACd,EAEI,EACF,EAAQ,aAAa,EAAc,CAAG,EAEtC,EAAQ,UAAU,EAAc,CAAG,CAEvC,CC9DA,SAAgB,EACd,EACA,EACA,EACwC,CACxC,MAAQ,IAAS,CACV,KAIL,IAAK,IAAM,KAAO,OAAO,KAAK,CAAI,EAAG,CACnC,GAAI,EAAE,KAAO,GACX,SAGF,IAAM,EAAQ,EAAK,GAEnB,GAAI,IAAU,IAAA,GACZ,SAGF,IAAM,EAAW,OAAO,EAAS,GAC3B,EAAS,OAAO,EAEtB,GAAI,IAAW,EACb,MAAU,MACR,IAAI,EAAc,sBAAsB,EAAI,cAAc,EAAS,QAAQ,GAC7E,EAGF,IAAM,EAAO,IAAQ,GAErB,GAAI,EAAM,CACR,IAAM,EAAO,EAAK,SAA+C,CAAK,EAEtE,GAAI,IAAQ,KACV,MAAU,MAAM,IAAI,EAAc,aAAa,EAAI,KAAK,GAAK,CAEjE,CACF,CACF,CACF,CAGA,MAAM,EAAgB,wBAET,EAAmC,CAC9C,SAAW,GACL,EAAc,KAAK,CAAK,EACnB,sCAGL,EAAM,MAAM,GAAG,CAAC,CAAC,SAAS,IAAI,EACzB,iCAGF,IAEX,EAEa,EAAyC,CACpD,SAAW,GACL,EAAc,KAAK,CAAK,EACnB,sCAGL,EAAM,SAAS,GAAG,EACb,sEAGL,EAAM,SAAS,GAAG,EACb,2DAGL,EAAM,SAAS,GAAG,EACb,+DAGF,IAEX,ECxFa,MACJ,WAAW,SAAW,QAAe,CAAC,CAAC,WAAW,QCC9C,GAAa,EAAgB,IAAuB,CAC/D,WAAW,QAAQ,UAAU,EAAO,GAAI,CAAI,CAC9C,EAEa,GAAgB,EAAgB,IAAuB,CAClE,WAAW,QAAQ,aAAa,EAAO,GAAI,CAAI,CACjD,EAEa,EACX,IAEA,WAAW,iBAAiB,WAAY,CAAE,MAE7B,CACX,WAAW,oBAAoB,WAAY,CAAE,CAC/C,GAGW,MAAwB,WAAW,SAAS,KClBnD,MAAmB,CAAC,EAEb,EAAkB,GAAoB,CACjD,IAAI,EAAY,GAEhB,MAAQ,IAAyB,CAC/B,AAME,KALA,QAAQ,KACN,gFAAgF,EAAQ,cAC3E,EAAO,4GAEtB,EACY,GAEhB,CACF,EAEa,EACX,GACmB,CACnB,IAAM,EAAW,EAAe,CAAO,EAEvC,MAAO,CACL,cAAiB,CACf,EAAS,WAAW,CACtB,EACA,iBAAoB,CAClB,EAAS,cAAc,CACzB,EACA,yBACE,EAAS,qBAAqB,EAEvB,GAET,aACE,EAAS,SAAS,EAEX,GAEX,CACF,EC5BA,SAAgB,EACd,EACA,EACS,CACT,GAAI,EAAqB,EACvB,MAAO,CACL,YACA,eACA,sBACA,cACA,SACF,EAGF,IAAM,EAAW,EAAe,CAAO,EAEvC,MAAO,CACL,GAAG,EAA6B,CAAO,EACvC,iBACE,EAAS,aAAa,EAEf,GAEX,CACF,CCiBA,SAAS,EACP,EACA,EACoD,CACpD,GAAI,CAAC,EAAK,eACR,MAAO,CAAC,EAGV,IAAM,EAAU,EAAK,eAAe,EAOpC,OAFE,KAJe,EAAK,sBAClB,EAAK,sBAAsB,EAC3B,KAEsB,EAAK,OAAO,SAAS,CAAC,EAAE,OAAS,EAGvD,CAAE,KAAM,EAAS,MAAO,GAAM,WAAY,EAAK,EAC/C,CAAE,KAAM,CAAQ,CACtB,CAEA,SAAgB,EACd,EAC8B,CAC9B,IAAI,EAAkB,GAKlB,EAA4D,KAEhE,SAAS,GAA6B,CACpC,GAAI,EAAU,CACZ,GAAM,CAAE,MAAK,YAAa,EAE1B,EAAW,KACX,QAAQ,KACN,IAAI,EAAK,cAAc,qCACzB,EACA,EAAgB,EAAK,CAAQ,CAC/B,CACF,CAEA,SAAS,GAAkC,CACzC,IAAM,EAAe,EAAK,OAAO,SAAS,EAG1C,GAAI,CAAC,EACH,OAKF,IAAM,EACJ,EAAa,SACZ,KAAK,KACF,EAAM,EAAK,SACf,EAAa,KACb,EAAa,OACb,EAAU,CAAE,KAAM,CAAQ,EAAI,IAAA,EAChC,EAEA,EAAK,QAAQ,aAAa,EAAc,CAAG,CAC7C,CAEA,SAAS,EAAyB,EAAsB,CACtD,QAAQ,MACN,IAAI,EAAK,cAAc,gCACvB,CACF,EAEA,GAAI,CACF,EAA0B,CAC5B,OAAS,EAAe,CACtB,QAAQ,MACN,IAAI,EAAK,cAAc,yCACvB,CACF,CACF,CACF,CAEA,eAAe,EACb,EACA,EACe,CACf,GAAI,EAAiB,CACnB,QAAQ,KACN,IAAI,EAAK,cAAc,mDACzB,EACA,EAAW,CAAE,MAAK,UAAS,EAE3B,MACF,CAEA,EAAkB,GAElB,GAAI,CACF,IAAM,EAAU,EAAkB,EAAK,EAAK,IAAK,CAAQ,EAEzD,GAAI,EAKF,MAAM,EAAK,IAAI,gBAAgB,EAAS,CACtC,GAAG,EAAK,kBACR,GAAG,EAAmB,EAAM,EAAQ,IAAI,CAC1C,CAAC,OACI,GAAI,EAAK,cACd,EAAK,OAAO,mBAAmB,CAAQ,MAClC,CAGL,IAAM,EAAM,IAAI,EAAY,EAAW,gBAAiB,CACtD,KAAM,CACR,CAAC,EAED,EAAK,IAAI,oBAAoB,CAAG,EAChC,EAA0B,CAC5B,CACF,OAAS,EAAO,CACd,GAAI,aAAiB,EAInB,GAAI,CACF,EAA0B,CAC5B,MAAQ,CAER,MAEA,EAAyB,CAAK,CAElC,QAAU,CACR,EAAkB,GAClB,EAAqB,CACvB,CACF,CAIA,MAAQ,IACN,KAAK,EAAW,EAAK,EAAK,QAAQ,YAAY,CAAC,CACnD,CASA,SAAgB,EACd,EACiD,CACjD,MAAO,CACL,YAAe,CACT,EAAK,OAAO,wBACd,EAAK,OAAO,uBAAuB,EAGrC,EAAK,OAAO,uBAAyB,EAAK,QAAQ,oBAChD,EAAK,OACP,CACF,EAEA,WAAc,CACR,EAAK,OAAO,yBACd,EAAK,OAAO,uBAAuB,EACnC,EAAK,OAAO,uBAAyB,IAAA,GAEzC,EAEA,aAAgB,CACV,EAAK,OAAO,yBACd,EAAK,OAAO,uBAAuB,EACnC,EAAK,OAAO,uBAAyB,IAAA,IAGvC,EAAK,QAAQ,CACf,CACF,CACF,CCjNA,SAAgB,EAAmB,EAAyB,CAC1D,OAAO,UAAU,CAAO,CAAC,CAAC,WAAW,IAAK,KAAK,CACjD,CAMA,SAAgB,EAAmB,EAAyB,CAC1D,GAAI,CACF,OAAO,mBAAmB,CAAO,CACnC,MAAQ,CACN,OAAO,CACT,CACF,CAYA,SAAgB,EAAmB,EAAuB,CACxD,IAAI,EAAW,EAEf,KAAO,EAAS,WAAW,GAAG,GAC5B,EAAW,EAAS,MAAM,CAAC,EAG7B,OAAO,EAAmB,CAAQ,CACpC,CC3CA,MAAM,EAAsC,IAAI,IAAI,CAAC,IAAK,IAAK,GAAG,CAAC,EAEnE,SAAgB,EAAa,EAAwB,CACnD,IAAI,EAAO,EAEL,EAAY,EAAK,QAAQ,KAAK,EAEpC,GAAI,IAAc,GAAI,CACpB,IAAM,EAAiB,EAAY,EAC/B,EAAY,EAAK,OAErB,IAAK,IAAI,EAAI,EAAgB,EAAI,EAAK,OAAQ,IAAK,CACjD,IAAM,EAAK,EAAK,GAEhB,GAAI,EAAe,IAAI,CAAE,EAAG,CAC1B,EAAY,EAEZ,KACF,CACF,CAEA,EAAO,IAAc,EAAK,OAAS,IAAM,EAAK,MAAM,CAAS,GAEzD,EAAK,WAAW,GAAG,GAAK,EAAK,WAAW,GAAG,KAC7C,EAAO,IAAI,IAEf,CAEA,IAAM,EAAU,EAAK,QAAQ,GAAG,EAC1B,EAAO,IAAY,GAAK,GAAK,EAAK,MAAM,CAAO,EAC/C,EAAa,IAAY,GAAK,EAAO,EAAK,MAAM,EAAG,CAAO,EAE1D,EAAW,EAAW,QAAQ,GAAG,EACjC,EAAS,IAAa,GAAK,GAAK,EAAW,MAAM,CAAQ,EAG/D,MAAO,CAAE,SAFQ,IAAa,GAAK,EAAa,EAAW,MAAM,EAAG,CAAQ,EAEzD,SAAQ,MAAK,CAClC,CClBA,SAAgB,EACd,EACA,EACY,CACZ,OAAO,EAAI,eAAe,SAAU,EAAM,IACxC,EAAK,GAAQ,EAAQ,YAAY,CAAC,CACpC,CACF,CAuBA,SAAgB,EACd,EACA,EACA,EACA,EAKA,EAAe,GAKP,CAIR,IAAM,EAAS,CACb,KAAM,GACN,OAAQ,CAAC,EACT,KAAM,EACR,EAEA,OACE,EACA,EAAiB,CAAC,EAClB,IACG,CACH,IAAM,EAAQ,EAAI,WAAW,EAAM,CAAM,EAEzC,GAAI,CAAC,EACH,MAAU,MACR,8CAA8C,EAAK,eACrD,EAGF,IAAM,EAAa,EAAI,UACrB,EAAM,KACN,EAAM,OACN,EAAO,UAAU,EAAM,KAAM,EAAM,MAAM,EACzC,CACE,OAAQ,EAAM,IAChB,CACF,EAQI,EAEJ,GAAI,GAAS,OAAS,IAAA,GAAW,CAC/B,IAAM,EAAO,EAAmB,EAAQ,IAAI,EAE5C,EAAc,EAAO,IAAI,EAAmB,CAAI,IAAM,EACxD,MAAO,AAGL,EAHS,EACK,EAAQ,QAAQ,EAEhB,GAOhB,IAAM,EAAM,EAAW,EAAM,CAAM,EAAI,EAEvC,EAAO,KAAO,EAAW,KACzB,EAAO,OAAS,EAAW,OAC3B,EAAO,KAAO,EAAW,KAEzB,EAAQ,aAAa,EAAQ,CAAG,CAClC,CACF,CAEA,SAAgB,EACd,EACA,EACA,EACS,CAST,OARI,EAAW,UAAY,GAClB,GAGJ,EAIE,CAAC,CAAC,EAAW,QAAU,EAAQ,OAAS,EAAU,KAHhD,EAAW,UAAY,EAIlC,CC3JA,MAAa,EAA8C,CACzD,WAAY,GACZ,KAAM,GACN,gBAAiB,EACnB,EAOa,EAAiB,cCX9B,SAAS,EAAa,EAAqB,CACzC,OAAO,EAAI,WAAW,uBAAwB,OAAO,GAAG,KAAK,CAC/D,CAEA,SAAgB,EAAsB,EAAmC,CAKvE,OAJK,EAIM,OAAO,KAAK,EAAa,CAAU,GAAG,EAHxC,IAIX,CASA,SAAgB,EACd,EACA,EACQ,CAOR,OANI,IAAS,IAAM,IAAS,IACnB,KAGI,EAAc,EAAK,QAAQ,EAAa,EAAE,EAAI,EAAK,MAAM,CAAC,IAExD,GACjB,CAEA,SAAgB,EAAc,EAAa,EAAoC,CAC7E,IAAM,EAAY,EAAa,CAAG,EAC5B,EAAW,EAAgB,EAAU,KAAM,CAAW,EAE5D,OAAO,EAAS,SAAS,GAAG,EAAI,EAAW,EAAW,EAAU,MAClE,CAeA,SAAgB,EACd,EACA,EACA,EACQ,CACR,IAAM,EAAW,EAAiB,EAAgB,EAAM,CAAW,CAAC,EAEpE,OAAO,EAAS,SAAS,GAAG,EAAI,EAAW,EAAW,CACxD,CC1CA,IAAa,EAAb,KAAwB,CACtB,GACA,GACA,GACA,GACA,GACA,GAEA,YACE,EACA,EACA,EACA,EACA,EACA,EAKA,EACA,CACA,KAAKC,GAAU,EACf,KAAKC,GAAW,EAEhB,KAAKC,GAA0B,EAAuB,EAAK,CAAO,EAQlE,IAAI,EAAa,GACX,MAA8B,CAC9B,IAIJ,EAAa,GACb,QAAQ,KACN,sOAGF,EACF,EAEM,EAAY,GAAG,EAAQ,KAAK,GAAG,EAAQ,aACvC,GACJ,EACA,EACA,KAEI,GAAM,OAAS,IAAA,IACjB,EAAgB,EAGX,EAAY,EAAO,UAAU,EAAO,CAAM,GAGnD,KAAKG,GAAmB,EAExB,KAAKF,GAAoB,EAAI,aAAa,CACxC,SAAU,EACV,SAAW,GACT,EAAI,UAAU,EAAc,EAAK,CAAW,CAAC,GAAK,IAAA,GACpD,oBAAqB,EACnB,EACA,EACA,EACA,EACA,EACF,CACF,CAAC,EAED,IAAM,EAAU,EAAsB,CACpC,SACA,MACA,UACA,cAAe,EAAI,WAAW,CAAC,CAAC,cAChC,oBACA,cAAe,EACf,SAAU,CACZ,CAAC,EAED,KAAKC,GAAa,EAAwB,CACxC,UACA,SACA,UACA,YAAe,CACb,KAAKF,GAAwB,EAC7B,KAAKC,GAAkB,CACzB,CACF,CAAC,CACH,CAEA,WAAoB,CAClB,MAAO,CACL,GAAG,KAAKC,GAER,qBACE,EACA,EACA,IACG,CAGC,EAAW,OAAS,IAAA,IACtB,KAAKC,GAAiB,EAGxB,IAAM,EAAiB,EACrB,EACA,EACA,CACF,EAIA,EAAmB,EAFP,KAAKL,GAAQ,SAAS,EAAQ,KAAM,EAAQ,MAE1B,EAAG,EAAgB,KAAKC,EAAQ,CAChE,CACF,CACF,CACF,ECvIA,MAAa,EAAkB,EAC7B,EACA,EACA,CAAE,KAAM,EAAc,WAAY,CAAmB,CACvD,ECDA,SAAgB,EACd,EACA,EACe,CACf,EAAgB,CAAI,EAEpB,IAAM,EAAc,EAChB,OAAO,YACL,OAAO,QAAQ,CAAI,CAAC,CAAC,QAElB,EAAG,KAAW,IAAU,IAAA,EAC3B,CACF,EACA,CAAC,EACC,EAAuC,CAC3C,GAAG,EACH,GAAG,CACL,EAEA,EAAQ,KAAO,EAAc,EAAQ,IAAI,EAEzC,IAAM,EAAc,EAAsB,EAAQ,UAAU,EACtD,EACJ,GACA,MAEI,EACE,WAAW,SAAS,KACpB,WAAW,SAAS,OACpB,CACF,EACF,aACF,EAEI,EAAoB,CACxB,gBAAiB,EAAQ,gBACzB,kBACA,QAAS,EACX,EAEM,EAA6B,CAAE,uBAAwB,IAAA,EAAU,EAEvE,OAAO,SAAoB,EAAY,CAWrC,OAAO,IAVY,EACjB,EACA,EAAa,CAAU,EACvB,EACA,EACA,EACA,EACA,CAGU,CAAC,CAAC,UAAU,CAC1B,CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@real-router/hash-plugin",
-  "version": "0.7.9",
+  "version": "0.7.11",
   "type": "commonjs",
   "description": "Hash-based routing plugin for Real-Router",
   "main": "./dist/cjs/index.js",
@@ -42,8 +42,8 @@
   },
   "sideEffects": false,
   "dependencies": {
-    "@real-router/core": "^0.59.0",
-    "@real-router/types": "^0.36.0"
+    "@real-router/core": "^0.60.0",
+    "@real-router/types": "^0.36.1"
   },
   "devDependencies": {
     "@testing-library/jest-dom": "6.9.1",