@rsc-kit/core 0.1.0

package/README.md

@@ -0,0 +1,95 @@
+# @rsc-kit/core
+
+The engine: a Vite plugin that discovers the route tree, and a host adapter that serves it.
+
+This is the library. Most people want [`rsc-kit`](https://www.npmjs.com/package/rsc-kit) (the command line) or `bun create rsc-kit` (a new app).
+
+```sh
+bun create rsc-kit my-app
+```
+
+## Why not just use Next?
+
+That is the right first question, and the honest answer is that the routing
+conventions here *are* Next's — `app/`, `page`/`layout`/`loading`, `@slot`,
+`(.)` interception, `"use client"`, server actions, `generateMetadata`.
+Inventing different names for the same ideas would cost every reader a
+translation table and buy nothing.
+
+The difference is what sits underneath.
+
+**It is a Vite plugin, not a bundler.** You keep your `vite.config.ts`, your
+plugins, your ecosystem. Adding RSC to an existing app is one entry in the
+plugins array — not a migration.
+
+**It runs on your server.** Hono, Elysia, `Bun.serve`, `node:http`,
+Cloudflare Workers. The adapter is a `Request` in and a `Response` out, so
+binding it is one line and anything it does not claim falls through to your
+own routes.
+
+```ts
+app.all('*', async (c) => (await rsc(c.req.raw)) ?? c.notFound())
+```
+
+**A route can ship no JavaScript at all.** `clientJs = false` renders to HTML
+and stops — no bootstrap, no React in the browser, no router. That is about
+70 kB gzipped back on a page with nothing to hydrate, of which react-dom alone
+is ~54 kB. The build refuses the combination rather than shipping a button that
+does nothing.
+
+**And the framework itself is small, because most of what ships is React.**
+Measured on the example app: 74.7 kB gzipped of JavaScript, of which this
+framework's own runtime is 17 kB — 7.3%. React, react-dom, the Flight client
+and the scheduler are 90%. A frozen page is served in 27 µs and the host
+adapter costs about 9 µs per request.
+
+**It compiles to a single binary.** `bun build --compile` with the assets and
+frozen pages inside it.
+
+**And it is not only JavaScript.** The same engine drives a Laravel host over a
+socket, which is where this started.
+
+## What you get
+
+- File-based routing with layouts, loading boundaries, parallel routes and
+  route interception
+- Streaming SSR with Suspense, and partial prerendering — the static shell is
+  stored, the part that needs the request is rendered per visit
+- Server actions, with an optional builder that gives you validation
+  (any Standard Schema library — Zod, Valibot, ArkType) and middleware
+- Typed routes: every build writes the routes it found, so a link to a page
+  that does not exist stops compiling
+- `middleware.ts` that runs before every render below it, on every path
+- Request and response access — `headers()`, `cookies()`, `responseHeaders()`
+
+## Status
+
+**0.x. Early, and honest about it.** The API will change before 1.0, and
+`@vitejs/plugin-rsc` — which this builds on — is itself pre-1.0.
+
+It is tested (500+ tests across the engine, the client router and the build),
+it has had an adversarial security review, and it runs a real documentation
+site in production. It has not been used by anyone but its author. Issues and
+questions are welcome; promises are not being made yet.
+
+See [SECURITY.md](./SECURITY.md) for the threat model and how to report
+something.
+
+## Getting started
+
+```sh
+bun create rsc-kit my-app     # a new app
+cd my-app && bun run dev
+```
+
+Adding it to a project you already have:
+
+```sh
+bunx create-rsc-kit --init
+```
+
+Docs: https://rsc-kit.dev
+
+## Licence
+
+MIT

package/SECURITY.md

@@ -0,0 +1,60 @@
+# Security policy
+
+## Reporting a vulnerability
+
+**Please do not open a public issue.**
+
+Use GitHub's private vulnerability reporting: the **Security** tab on this
+repository → **Report a vulnerability**. It is private to the maintainers and
+gives us somewhere to discuss a fix before it is public.
+
+> Enable it once, per repository: Settings → Code security → Private
+> vulnerability reporting. Until it is on, the Security tab shows no report
+> button and a reporter's only option is a public issue.
+
+What helps, roughly in order:
+
+- The request that demonstrates it — a `curl` line is ideal, since most of the surface here is HTTP headers.
+- What you expected the server to refuse, and what it did instead.
+- Which host you ran (`createRscHandler` on Bun/Node/Workers, or the Laravel adapter), and the version.
+
+You will get an acknowledgement within a few days. If a report is valid we will
+agree a disclosure date with you and credit you in the advisory unless you would
+rather we did not.
+
+## Supported versions
+
+Pre-1.0. Only the latest published version of `@rsc-kit/core` receives fixes;
+there are no backports yet.
+
+## What is in scope
+
+Anything that lets a request do something the application did not intend:
+
+- Reaching content or an action past a check the app wrote.
+- Making the server run code the app did not ask it to run.
+- Reading files outside the directories a host handed to `assets` or `prerendered`.
+- Making one user's response reachable by another — through a cache, a shared
+  scope, or state that outlives a request.
+- Crashing or hanging a server from an unauthenticated request.
+
+The protocol headers (`X-RSC-*`) are the largest surface and the most
+interesting place to look. They are all attacker-controlled and none of them is
+verifiable — see **Part 3b: the trust boundary** in
+[`PROTOCOL.md`](./PROTOCOL.md) for the rule they are supposed to obey, and
+`packages/core/tests/js/protocolAbuse.test.ts` for the cases already covered.
+
+## What is not
+
+- An application's own bugs — an app that puts a secret in a client component ships it to the browser, and that is the app's decision, not this package's.
+- Server actions being callable without a session. That is what a server action *is*: a public endpoint whose id is not a secret. The check belongs inside the action, and [the docs say so](https://rsc-kit.dev/guides/authorization).
+- Anything requiring the attacker to already control the server, the build, or a dependency.
+- Denial of service by volume.
+
+## Known, documented, unfixed
+
+Kept here so a reporter does not spend time on something we already know:
+
+- **A check written in a layout is skippable.** A navigation says which layouts it holds and the server trusts it. Checks belong in `guard.ts`, which is never skipped; a layout is chrome and may be skipped by design. The docs say so, but nothing stops an app writing one in the wrong place.
+- **No `Cache-Control` on rendered responses.** `Vary: X-RSC` is set, so a shared cache will not serve a payload as a document, but the absence of an explicit directive leaves heuristic caching to the intermediary. Not audited.
+- **`X-RSC-Redirect` is followed without an origin check.** An app that redirects to a value it took from user input has an open redirect; the client does not second-guess the destination.

package/dist/action.d.ts

@@ -0,0 +1,90 @@
+import { type StandardSchemaV1 } from './js/standardSchema.js';
+/** What an action answers with. Exactly one of the three is set. */
+export interface ActionResult<Data> {
+    /** What the handler returned. */
+    data?: Data;
+    /** Field name to messages, in the shape a form already renders. */
+    validationErrors?: Record<string, string[]>;
+    /** Something else went wrong, reduced to a message the browser may see. */
+    serverError?: string;
+}
+/**
+ * A middleware that neither continued nor refused.
+ *
+ * Never reported through `onError`: that reduces an error to a message for the
+ * browser, and this one is for whoever wrote the middleware. A check that
+ * forgot to call `next()` would otherwise look exactly like a check that
+ * passed.
+ */
+export declare class ActionMisuse extends Error {
+    constructor(message: string);
+}
+/** Refuse from inside a handler, naming the fields. */
+export declare class ActionValidationError extends Error {
+    readonly errors: Record<string, string[]>;
+    constructor(errors: Record<string, string[]>);
+}
+/**
+ * Fail with field errors the form can show.
+ *
+ * For what a schema cannot know — a name already taken, a balance too low.
+ * Throws, so the handler stops where it is; the action turns it into a
+ * returned result on the way out.
+ */
+export declare function fieldErrors(errors: Record<string, string[] | string>): never;
+/**
+ * What `next()` hands back, carrying what the step added.
+ *
+ * The context a middleware contributes cannot be inferred from the arguments
+ * it passes to `next` — TypeScript infers from a function's return, not from a
+ * call inside it. So `next` returns this, the middleware returns it, and the
+ * addition is read off the middleware's own return type.
+ */
+export interface MiddlewareResult<Extra> {
+    readonly ctx: Extra;
+    readonly value: unknown;
+}
+/**
+ * A step that runs before the handler.
+ *
+ * It calls `next` to continue, optionally adding to the context, and what it
+ * adds shows up in the handler's types. Returning without calling `next` — or
+ * throwing — stops the action, which is how a check refuses.
+ */
+export type ActionMiddleware<Ctx, Extra extends Record<string, unknown>> = (args: {
+    ctx: Ctx;
+    next: <E extends Record<string, unknown> = Record<string, never>>(opts?: {
+        ctx?: E;
+    }) => Promise<MiddlewareResult<E>>;
+}) => Promise<MiddlewareResult<Extra>>;
+type Output<S> = S extends StandardSchemaV1<unknown, infer O> ? O : never;
+export interface ActionBuilder<Ctx extends Record<string, unknown>, Input> {
+    /** Add a step, and whatever context it contributes. */
+    use<Extra extends Record<string, unknown> = Record<string, never>>(middleware: (args: {
+        ctx: Ctx;
+        next: <E extends Record<string, unknown> = Record<string, never>>(opts?: {
+            ctx?: E;
+        }) => Promise<MiddlewareResult<E>>;
+    }) => Promise<MiddlewareResult<Extra>>): ActionBuilder<Ctx & Extra, Input>;
+    /** Parse and check what the caller sent. The handler's `input` follows. */
+    input<S extends StandardSchemaV1>(schema: S): ActionBuilder<Ctx, Output<S>>;
+    /** The body. */
+    handler<Data>(fn: (args: {
+        input: Input;
+        ctx: Ctx;
+    }) => Promise<Data> | Data): (input?: unknown) => Promise<ActionResult<Data>>;
+}
+export interface ActionClientOptions {
+    /**
+     * What the browser is told when something unexpected throws.
+     *
+     * Everything reaching here is a bug or an outage, and its message may say
+     * more than a stranger should see — a query, a path, a host. Returning a
+     * fixed string is the safe default; return the message only for errors you
+     * raised deliberately.
+     */
+    onError?: (error: unknown) => string;
+}
+export declare function createActionClient(options?: ActionClientOptions): ActionBuilder<Record<never, never>, undefined>;
+export {};
+//# sourceMappingURL=action.d.ts.map

package/dist/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAgB,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAE5E,oEAAoE;AACpE,MAAM,WAAW,YAAY,CAAC,IAAI;IAChC,iCAAiC;IACjC,IAAI,CAAC,EAAE,IAAI,CAAA;IACX,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAC3C,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;;GAOG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,uDAAuD;AACvD,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,SAAgB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;IAEhD,YAAY,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAI3C;CACF;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAQ5E;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB,CAAC,KAAK;IACrC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CACxB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,gBAAgB,CAAC,GAAG,EAAE,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE;IAChF,GAAG,EAAE,GAAG,CAAA;IACR,IAAI,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAC9D,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,CAAC,CAAA;KAAE,KACf,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAA;CAClC,KAAK,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;AAEtC,KAAK,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;AAEzE,MAAM,WAAW,aAAa,CAAC,GAAG,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK;IACvE,uDAAuD;IACvD,GAAG,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAC/D,UAAU,EAAE,CAAC,IAAI,EAAE;QACjB,GAAG,EAAE,GAAG,CAAA;QACR,IAAI,EAAE,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAC9D,IAAI,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,CAAC,CAAA;SAAE,KACf,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAA;KAClC,KAAK,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,GACrC,aAAa,CAAC,GAAG,GAAG,KAAK,EAAE,KAAK,CAAC,CAAA;IACpC,2EAA2E;IAC3E,KAAK,CAAC,CAAC,SAAS,gBAAgB,EAAE,MAAM,EAAE,CAAC,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3E,gBAAgB;IAChB,OAAO,CAAC,IAAI,EACV,EAAE,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAC7D,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAA;CACrC;AAmBD,wBAAgB,kBAAkB,CAChC,OAAO,GAAE,mBAAwB,GAChC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAiFhD"}

package/dist/action.js

@@ -0,0 +1,137 @@
+// Server actions with a schema, middleware, and types that follow from both.
+//
+//     export const action = createActionClient({ onError: report })
+//
+//     export const createPost = action
+//       .use(async ({ next }) => next({ ctx: { user: await currentUser() } }))
+//       .input(z.object({ title: z.string().min(3) }))
+//       .handler(async ({ input, ctx }) => savePost(ctx.user.id, input.title))
+//
+// `input` is typed from the schema and `ctx` from every middleware that ran, so
+// the handler is checked against both without either being written down twice.
+//
+// The built action RETURNS its failures rather than throwing them, and that is
+// not a style choice. React serialises a rejected server action opaquely —
+// production strips the message and leaves a digest — so a thrown validation
+// error reaches the browser as "an error occurred" and the fields it named are
+// gone. A returned object crosses the boundary intact.
+//
+// Distinct from `middleware.ts` in a route directory, which decides whether a
+// page may render. This wraps one action. They are different questions: an
+// action is reachable without any page, which is why it defends itself.
+import { validateWith } from './js/standardSchema.js';
+/**
+ * A middleware that neither continued nor refused.
+ *
+ * Never reported through `onError`: that reduces an error to a message for the
+ * browser, and this one is for whoever wrote the middleware. A check that
+ * forgot to call `next()` would otherwise look exactly like a check that
+ * passed.
+ */
+export class ActionMisuse extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ActionMisuse';
+    }
+}
+/** Refuse from inside a handler, naming the fields. */
+export class ActionValidationError extends Error {
+    errors;
+    constructor(errors) {
+        super('Validation failed');
+        this.name = 'ActionValidationError';
+        this.errors = errors;
+    }
+}
+/**
+ * Fail with field errors the form can show.
+ *
+ * For what a schema cannot know — a name already taken, a balance too low.
+ * Throws, so the handler stops where it is; the action turns it into a
+ * returned result on the way out.
+ */
+export function fieldErrors(errors) {
+    const normalised = {};
+    for (const [field, message] of Object.entries(errors)) {
+        normalised[field] = Array.isArray(message) ? message : [message];
+    }
+    throw new ActionValidationError(normalised);
+}
+const GENERIC = 'Something went wrong.';
+/** FormData in, a plain object out — what a schema expects to be handed. */
+function fromFormData(body) {
+    const out = {};
+    for (const key of new Set(body.keys())) {
+        const values = body.getAll(key);
+        // One value stays a value. Several stay several — a multi-select that
+        // collapsed to its last entry would be a silent data loss.
+        out[key] = values.length > 1 ? values : values[0];
+    }
+    return out;
+}
+export function createActionClient(options = {}) {
+    const report = options.onError ?? (() => GENERIC);
+    function build(middlewares, schema) {
+        return {
+            use(middleware) {
+                return build([...middlewares, middleware], schema);
+            },
+            input(next) {
+                return build(middlewares, next);
+            },
+            handler(fn) {
+                return async (raw) => {
+                    try {
+                        const value = raw instanceof FormData ? fromFormData(raw) : raw;
+                        if (schema) {
+                            const invalid = await validateWith(schema, value);
+                            if (invalid)
+                                return { validationErrors: invalid };
+                        }
+                        const parsed = schema
+                            ? (await schema['~standard'].validate(value)).value
+                            : value;
+                        // Composed inside-out so the first `use` is the outermost — it
+                        // sees the others run, which is what makes timing and cleanup
+                        // possible rather than only checks.
+                        let ctx = {};
+                        let index = 0;
+                        const run = async () => {
+                            const middleware = middlewares[index++];
+                            if (!middleware)
+                                return await fn({ input: parsed, ctx });
+                            let continued = false;
+                            const result = await middleware({
+                                ctx,
+                                next: (async (opts) => {
+                                    continued = true;
+                                    ctx = { ...ctx, ...(opts?.ctx ?? {}) };
+                                    return { ctx, value: await run() };
+                                }),
+                            });
+                            // Silence is not refusal. A middleware that neither called
+                            // next() nor threw has done nothing, and guessing which it meant
+                            // turns a forgotten `return` into a check that quietly passes.
+                            if (!continued) {
+                                throw new ActionMisuse('A middleware returned without calling next(). Call it to continue, or throw to refuse.');
+                            }
+                            return result?.value;
+                        };
+                        return { data: (await run()) };
+                    }
+                    catch (error) {
+                        // Past onError deliberately — see ActionMisuse.
+                        if (error instanceof ActionMisuse)
+                            throw error;
+                        if (error instanceof ActionValidationError) {
+                            return { validationErrors: error.errors };
+                        }
+                        return { serverError: report(error) };
+                    }
+                };
+            },
+        };
+    }
+    return build([], null);
+}
+//# sourceMappingURL=action.js.map

package/dist/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,uCAAuC;AACvC,+EAA+E;AAC/E,uDAAuD;AACvD,+EAA+E;AAC/E,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,uDAAuD;AACvD,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AAExE,OAAO,EAAE,YAAY,EAAyB,MAAM,wBAAwB,CAAA;AAY5E;;;;;;;GAOG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,uDAAuD;AACvD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9B,MAAM,CAA0B;IAEhD,YAAY,MAAgC;QAC1C,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyC;IACnE,MAAM,UAAU,GAA6B,EAAE,CAAA;IAE/C,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAA;AAC7C,CAAC;AA6DD,MAAM,OAAO,GAAG,uBAAuB,CAAA;AAEvC,4EAA4E;AAC5E,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,GAAG,GAA4B,EAAE,CAAA;IAEvC,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAE/B,sEAAsE;QACtE,2DAA2D;QAC3D,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IACnD,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAAO,GAAwB,EAAE;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;IAEjD,SAAS,KAAK,CACZ,WAA6C,EAC7C,MAA+B;QAE/B,OAAO;YACL,GAAG,CAAC,UAAU;gBACZ,OAAO,KAAK,CAAC,CAAC,GAAG,WAAW,EAAE,UAAmB,CAAC,EAAE,MAAM,CAAU,CAAA;YACtE,CAAC;YACD,KAAK,CAAC,IAAI;gBACR,OAAO,KAAK,CAAC,WAAW,EAAE,IAAI,CAAU,CAAA;YAC1C,CAAC;YACD,OAAO,CAAC,EAAE;gBACR,OAAO,KAAK,EAAE,GAAa,EAAE,EAAE;oBAC7B,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;wBAE/D,IAAI,MAAM,EAAE,CAAC;4BACX,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;4BAEjD,IAAI,OAAO;gCAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAA;wBACnD,CAAC;wBAED,MAAM,MAAM,GAAG,MAAM;4BACnB,CAAC,CAAE,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAe;4BAC9D,CAAC,CAAE,KAAe,CAAA;wBAEpB,+DAA+D;wBAC/D,8DAA8D;wBAC9D,oCAAoC;wBACpC,IAAI,GAAG,GAAG,EAAS,CAAA;wBACnB,IAAI,KAAK,GAAG,CAAC,CAAA;wBAEb,MAAM,GAAG,GAAG,KAAK,IAAsB,EAAE;4BACvC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,CAAA;4BAEvC,IAAI,CAAC,UAAU;gCAAE,OAAO,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;4BAExD,IAAI,SAAS,GAAG,KAAK,CAAA;4BAErB,MAAM,MAAM,GAAG,MAAO,UAAwE,CAAC;gCAC7F,GAAG;gCACH,IAAI,EAAE,CAAC,KAAK,EAAE,IAAwC,EAAE,EAAE;oCACxD,SAAS,GAAG,IAAI,CAAA;oCAChB,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,EAAS,CAAA;oCAE7C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,CAAA;gCACpC,CAAC,CAAU;6BACZ,CAAC,CAAA;4BAEF,2DAA2D;4BAC3D,iEAAiE;4BACjE,+DAA+D;4BAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;gCACf,MAAM,IAAI,YAAY,CACpB,wFAAwF,CACzF,CAAA;4BACH,CAAC;4BAED,OAAQ,MAA8B,EAAE,KAAK,CAAA;wBAC/C,CAAC,CAAA;wBAED,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE,CAAmC,EAAE,CAAA;oBAClE,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,gDAAgD;wBAChD,IAAI,KAAK,YAAY,YAAY;4BAAE,MAAM,KAAK,CAAA;wBAE9C,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;4BAC3C,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;wBAC3C,CAAC;wBAED,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;oBACvC,CAAC;gBACH,CAAC,CAAA;YACH,CAAC;SACF,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;AACxB,CAAC"}

package/dist/build-rsc-vite.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Config names, most specific first.
+ *
+ * A project's Vite config belongs at its root, so the ordinary case is the
+ * root vite.config.* with rscRoutes() in its plugins. The vite.rsc.config.*
+ * names exist for apps whose root config already drives a separate asset
+ * pipeline — a Laravel app running laravel-vite-plugin, say, whose input,
+ * outDir and manifest settings would otherwise apply to the RSC build too.
+ */
+export declare const USER_CONFIG_NAMES: readonly ['vite.rsc.config.ts', 'vite.rsc.config.mts', 'vite.rsc.config.js', 'vite.rsc.config.mjs', 'vite.config.ts', 'vite.config.mts', 'vite.config.js', 'vite.config.mjs'];
+/**
+ * Find the Vite config for the RSC build.
+ *
+ * Nothing is generated: the build runs the project's own config, so what it
+ * does is visible in the repo and anything the app wants in it — Tailwind, the
+ * React Compiler, extra aliases — is declared there like any Vite project.
+ */
+export declare function findUserViteConfig(root: string): string | null;
+/**
+ * Packages the generated entries import directly, which the project must have.
+ *
+ * Without this the build fails deep inside the bundler — a missing
+ * @vitejs/plugin-rsc surfaces as `Rolldown failed to resolve import
+ * "@vitejs/plugin-rsc/rsc"` from a generated file the user never wrote.
+ */
+export declare const REQUIRED_PEERS: readonly ['@vitejs/plugin-rsc', 'vite', 'react', 'react-dom'];
+/**
+ * Whether a package is installed in the project's node_modules, or a parent's.
+ *
+ * A plain directory walk rather than require.resolve: Bun resolves packages
+ * from its global cache when a project has no node_modules at all, so the
+ * resolver reports success for something the build will not find.
+ */
+export declare function isInstalled(root: string, name: string): boolean;
+/** Required packages the project does not have, in declaration order. */
+export declare function missingPeers(root: string): string[];
+/** Shown when a project has no Vite config at all. */
+export declare function missingConfigMessage(root: string): string;
+//# sourceMappingURL=build-rsc-vite.d.ts.map

package/dist/build-rsc-vite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-rsc-vite.d.ts","sourceRoot":"","sources":["../src/build-rsc-vite.ts"],"names":[],"mappings":"AAqBA;;;;;;;;GAQG;AACH,eAAO,MAAM,iBAAiB,YAC5B,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,CACT,CAAA;AAEV;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe9D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,YAAI,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAU,CAAA;AAE3F;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAU/D;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAEnD;AAED,sDAAsD;AACtD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAczD"}

package/dist/build-rsc-vite.js

@@ -0,0 +1,172 @@
+// CLI behind `php artisan rsc:build`.
+//
+// The build itself lives in the Vite plugin (resources/vite.ts). This only
+// decides which config Vite runs: the app's own vite.rsc.config if it has one,
+// otherwise a minimal generated config that just uses the plugin. Either way
+// Vite runs that config directly — nothing is merged on top of it.
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { isBun } from './runtime.js';
+const projectRoot = resolve(process.env.RSC_PROJECT_ROOT || process.cwd());
+// Mirrors the plugin's default so the completion message names the
+// directory the build actually wrote to.
+const outDir = resolve(process.env.RSC_OUT_DIR || join(projectRoot, '.rsc'));
+function log(...args) {
+    console.error('[laravel-rsc]', ...args);
+}
+/**
+ * Config names, most specific first.
+ *
+ * A project's Vite config belongs at its root, so the ordinary case is the
+ * root vite.config.* with rscRoutes() in its plugins. The vite.rsc.config.*
+ * names exist for apps whose root config already drives a separate asset
+ * pipeline — a Laravel app running laravel-vite-plugin, say, whose input,
+ * outDir and manifest settings would otherwise apply to the RSC build too.
+ */
+export const USER_CONFIG_NAMES = [
+    'vite.rsc.config.ts',
+    'vite.rsc.config.mts',
+    'vite.rsc.config.js',
+    'vite.rsc.config.mjs',
+    'vite.config.ts',
+    'vite.config.mts',
+    'vite.config.js',
+    'vite.config.mjs',
+];
+/**
+ * Find the Vite config for the RSC build.
+ *
+ * Nothing is generated: the build runs the project's own config, so what it
+ * does is visible in the repo and anything the app wants in it — Tailwind, the
+ * React Compiler, extra aliases — is declared there like any Vite project.
+ */
+export function findUserViteConfig(root) {
+    const explicit = process.env.RSC_VITE_CONFIG;
+    if (explicit) {
+        const path = resolve(explicit);
+        return existsSync(path) ? path : null;
+    }
+    for (const name of USER_CONFIG_NAMES) {
+        const path = join(root, name);
+        if (existsSync(path))
+            return path;
+    }
+    return null;
+}
+/**
+ * Packages the generated entries import directly, which the project must have.
+ *
+ * Without this the build fails deep inside the bundler — a missing
+ * @vitejs/plugin-rsc surfaces as `Rolldown failed to resolve import
+ * "@vitejs/plugin-rsc/rsc"` from a generated file the user never wrote.
+ */
+export const REQUIRED_PEERS = ['@vitejs/plugin-rsc', 'vite', 'react', 'react-dom'];
+/**
+ * Whether a package is installed in the project's node_modules, or a parent's.
+ *
+ * A plain directory walk rather than require.resolve: Bun resolves packages
+ * from its global cache when a project has no node_modules at all, so the
+ * resolver reports success for something the build will not find.
+ */
+export function isInstalled(root, name) {
+    let dir = resolve(root);
+    while (true) {
+        if (existsSync(join(dir, 'node_modules', name, 'package.json')))
+            return true;
+        const parent = dirname(dir);
+        if (parent === dir)
+            return false;
+        dir = parent;
+    }
+}
+/** Required packages the project does not have, in declaration order. */
+export function missingPeers(root) {
+    return REQUIRED_PEERS.filter((name) => !isInstalled(root, name));
+}
+/** Shown when a project has no Vite config at all. */
+export function missingConfigMessage(root) {
+    return [
+        `No Vite config found in ${root}.`,
+        '',
+        'Create vite.config.ts:',
+        '',
+        "  import { rscRoutes } from 'laravel-rsc/vite'",
+        "  import { defineConfig } from 'vite'",
+        '',
+        '  export default defineConfig({ plugins: [rscRoutes()] })',
+        '',
+        'If your root config already drives another asset pipeline (laravel-vite-plugin),',
+        'put the RSC build in vite.rsc.config.ts instead so the two do not share settings.',
+    ].join('\n');
+}
+/** This file's directory — import.meta.dir is Bun-only. */
+function packageDir() {
+    return resolve(new URL('.', import.meta.url).pathname);
+}
+function main() {
+    const missing = missingPeers(projectRoot);
+    if (missing.length > 0) {
+        log(`Missing required package(s): ${missing.join(', ')}`);
+        log(`Install them in ${projectRoot}:`);
+        log('');
+        log(`  npm install ${missing.join(' ')}`);
+        log('');
+        log('rscRoutes() composes @vitejs/plugin-rsc itself — it only has to be installed,');
+        log('not added to your Vite config.');
+        process.exit(1);
+    }
+    const configPath = findUserViteConfig(projectRoot);
+    if (!configPath) {
+        log(missingConfigMessage(projectRoot));
+        process.exit(1);
+    }
+    log(`Using Vite config: ${configPath}`);
+    const watch = process.env.RSC_WATCH === '1';
+    // A host driving the build from outside prerenders on its own terms, and has
+    // to: its pages call back into it, and that callback does not exist inside a
+    // `vite build`. Prerendering here would render every such page into an error
+    // and fail a build that is perfectly fine. `RSC_PRERENDER=1` opts back in for
+    // a host whose pages need nothing from it.
+    process.env.RSC_PRERENDER ??= '0';
+    // A development build keeps React's development bundle, so a failure reads
+    // as "Maximum update depth exceeded" rather than "Minified React error #185"
+    // and a link to look it up. Implied by watching, and available on its own for
+    // reproducing something a production build only reports by number.
+    const dev = watch || process.env.RSC_DEV === '1';
+    const viteArgs = ['build', '--config', configPath];
+    if (watch)
+        viteArgs.push('--watch');
+    // Vite's build command is production mode unless told otherwise, whatever
+    // NODE_ENV says — without this the dev build still resolves React's
+    // production entry.
+    if (dev)
+        viteArgs.push('--mode', 'development');
+    // Under Bun, `bun x --bun vite` keeps Vite itself on the Bun runtime. Under
+    // Node there is no such wrapper, so invoke the locally installed binary.
+    const [command, args] = isBun
+        ? [process.execPath, ['x', '--bun', 'vite', ...viteArgs]]
+        : [join(projectRoot, 'node_modules/.bin/vite'), viteArgs];
+    log(`Running vite build${watch ? ' --watch' : ''}${dev ? ' (development)' : ''}...`);
+    const proc = spawnSync(command, args, {
+        cwd: projectRoot,
+        env: {
+            ...process.env,
+            NODE_ENV: dev ? 'development' : 'production',
+            // Vite stages the config through node_modules/.vite-temp, so the plugin
+            // cannot locate this package from its own import.meta. Pass it through.
+            RSC_PACKAGE_DIR: packageDir(),
+        },
+        stdio: 'inherit',
+    });
+    if (proc.status !== 0) {
+        log('vite build failed');
+        process.exit(proc.status ?? 1);
+    }
+    log(`Build complete → ${join(outDir, 'dist')}`);
+}
+// Run only when invoked directly, not when imported for its helpers.
+if (process.argv[1] && resolve(process.argv[1]) === resolve(new URL(import.meta.url).pathname)) {
+    main();
+}
+//# sourceMappingURL=build-rsc-vite.js.map

package/dist/build-rsc-vite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-rsc-vite.js","sourceRoot":"","sources":["../src/build-rsc-vite.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,+EAA+E;AAC/E,6EAA6E;AAC7E,mEAAmE;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAA;AAEpC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;AAC1E,mEAAmE;AACnE,yCAAyC;AACzC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAA;AAE5E,SAAS,GAAG,CAAC,GAAG,IAAe;IAC7B,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,oBAAoB;IACpB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,iBAAiB;CACT,CAAA;AAEV;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;IAE5C,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;QAE9B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACvC,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC7B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;IACnC,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,oBAAoB,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAU,CAAA;AAE3F;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,IAAY;IACpD,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEvB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;YAAE,OAAO,IAAI,CAAA;QAE5E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAA;QAChC,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO;QACL,2BAA2B,IAAI,GAAG;QAClC,EAAE;QACF,wBAAwB;QACxB,EAAE;QACF,gDAAgD;QAChD,uCAAuC;QACvC,EAAE;QACF,2DAA2D;QAC3D,EAAE;QACF,kFAAkF;QAClF,mFAAmF;KACpF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED,2DAA2D;AAC3D,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;AACxD,CAAC;AAED,SAAS,IAAI;IACX,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;IAEzC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACzD,GAAG,CAAC,mBAAmB,WAAW,GAAG,CAAC,CAAA;QACtC,GAAG,CAAC,EAAE,CAAC,CAAA;QACP,GAAG,CAAC,iBAAiB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACzC,GAAG,CAAC,EAAE,CAAC,CAAA;QACP,GAAG,CAAC,+EAA+E,CAAC,CAAA;QACpF,GAAG,CAAC,gCAAgC,CAAC,CAAA;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAA;IAElD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAA;QACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,GAAG,CAAC,sBAAsB,UAAU,EAAE,CAAC,CAAA;IAEvC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,GAAG,CAAA;IAE3C,6EAA6E;IAC7E,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,2CAA2C;IAC3C,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,GAAG,CAAA;IAEjC,2EAA2E;IAC3E,6EAA6E;IAC7E,8EAA8E;IAC9E,mEAAmE;IACnE,MAAM,GAAG,GAAG,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,GAAG,CAAA;IAEhD,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAA;IAClD,IAAI,KAAK;QAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACnC,0EAA0E;IAC1E,oEAAoE;IACpE,oBAAoB;IACpB,IAAI,GAAG;QAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA;IAE/C,4EAA4E;IAC5E,yEAAyE;IACzE,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,KAAK;QAC3B,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,wBAAwB,CAAC,EAAE,QAAQ,CAAC,CAAA;IAE3D,GAAG,CAAC,qBAAqB,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAEpF,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACpC,GAAG,EAAE,WAAW;QAChB,GAAG,EAAE;YACH,GAAG,OAAO,CAAC,GAAG;YACd,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY;YAC5C,wEAAwE;YACxE,wEAAwE;YACxE,eAAe,EAAE,UAAU,EAAE;SAC9B;QACD,KAAK,EAAE,SAAS;KACjB,CAAC,CAAA;IAEF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,mBAAmB,CAAC,CAAA;QACxB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAA;IAChC,CAAC;IAED,GAAG,CAAC,oBAAoB,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;AACjD,CAAC;AAED,qEAAqE;AACrE,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC/F,IAAI,EAAE,CAAA;AACR,CAAC"}

package/dist/cache.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Memoise a function for the length of one request.
+ *
+ * The *promise* is cached, not the value, so callers that arrive while the
+ * first is still in flight wait on it rather than starting a second. A
+ * rejection is cached too: within one request the answer to a question does
+ * not change because you asked again.
+ *
+ * Outside a request this calls straight through. Nothing is stored, nothing
+ * leaks between requests, and shared code does not have to know which side of
+ * the boundary it is on — the same reason revalidate() is a no-op outside an
+ * action.
+ */
+export declare function cache<A extends unknown[], R>(fn: (...args: A) => R): (...args: A) => R;
+/** Whether anything is listening, for code that wants to know. */
+export declare function isCaching(): boolean;
+/**
+ * Run one request with a memo table of its own.
+ *
+ * Opened by whoever owns the request. Nesting is harmless and does not create a
+ * second table — an inner call reuses the one already open, so a host that
+ * wraps and an engine that also wraps do not end up with two.
+ */
+export declare function withCache<T>(run: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=cache.d.ts.map

package/dist/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../src/cache.ts"],"names":[],"mappings":"AA2FA;;;;;;;;;;;;GAYG;AACH,wBAAgB,KAAK,CAAC,CAAC,SAAS,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,CAAC,CAuBtF;AAED,kEAAkE;AAClE,wBAAgB,SAAS,IAAI,OAAO,CAEnC;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAcpE"}