@rsc-kit/core 0.20.13 → 0.21.0

package/dist/files.js.map

@@ -1 +1 @@
-{"version":3,"file":"files.js","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,4CAA4C;AAE5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,OAAO,GAAgC,IAAI,CAAA;IAE/C,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,IAAI,IAAI,GAAG,CAAC,CAAA;IAEZ,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAY,EAAQ,EAAE;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QAE5B,IAAI,IAAI,GAAG,iBAAiB,GAAG,CAAC;YAAE,OAAM;QAExC,OAAO,IAAI,GAAG,IAAI,GAAG,iBAAiB,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAA;YACrD,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,MAAM,GAAG,CAAC,CAAA;YACxC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACzB,CAAC;QAED,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACxB,IAAI,IAAI,IAAI,CAAA;IACd,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,KAAK,IAA0B,EAAE;QAC/C,OAAO,KAAK,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aAC1C,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1E,sEAAsE;YACtE,yDAAyD;aACxD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,EAAU,CAAC,CAAA;QAEjC,OAAO,MAAM,OAAO,CAAA;IACtB,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,IAAY,EAA0B,EAAE;QACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAEpC,IAAI,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEjC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;YAErD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAEpB,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;AAElE,SAAS,aAAa;IACpB,MAAM,KAAK,GAAI,UAAsC,CAAC,cAAc,CAAC,CAAA;IAErE,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,OAAe,EAAE,MAAM,GAAG,CAAC;IAC9E,IAAI,MAAM,GAA6D,IAAI,CAAA;IAE3E,MAAM,UAAU,GAAG,KAAK,IAAuD,EAAE;QAC/E,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAA;QAEhC,IAAI,QAAQ;YAAE,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;QAE3D,IAAI,GAAG,GAAkB,IAAI,CAAA;QAE7B,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;YAElD,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,sCAAsC;QACxC,CAAC;QAED,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;gBAE5D,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;oBAExB,OAAO,eAAe,CAAC,SAAS,CAAC,CAAA;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,mCAAmC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;QAEpC,IAAI,MAAM;YAAE,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAErE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,GAAG,OAAO,aAAa,EAAE,MAAM,CAAC,CAAA;QAElF,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAA;IACzE,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,IAAY,EAA0B,EAAE;QACpD,MAAM,KAAK,UAAU,EAAE,CAAA;QAEvB,OAAO,MAAM,CAAC,MAAM,MAAM,CAAC,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,OAAO,EAAE,CAAA;AAEvE,8EAA8E;AAC9E,KAAK,UAAU,aAAa;IAC1B,IAAI,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,SAAS,KAAK,oBAAoB;QAAE,OAAO,IAAI,CAAA;IAEjG,IAAI,CAAC;QACH,uEAAuE;QACvE,uBAAuB;QACvB,MAAM,SAAS,GAAG,oBAAoB,CAAA;QACtC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAwC,CAAA;QAEnG,OAAO,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAAC,MAAqB,EAAE,MAAc;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkC,CAAA;IAEvD,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAE7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;YAE7E,OAAO,GAAG,MAAM;iBACb,KAAK,CAAC,IAAI,OAAO,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;iBACnD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAEpB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1B,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,QAAgB,EAChB,MAAc;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAA;QAElD,KAAK,MAAM,SAAS,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,SAAS;gBAAE,SAAQ;YAExB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAyC,CAAA;gBAEnG,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,OAAO,CAAA;YACjF,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,IAAY;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,CACL,4CAA4C;QAC5C,0EAA0E;QAC1E,MAAM;QACN,MAAM;QACN,mFAAmF;QACnF,kFAAkF;QAClF,8EAA8E;QAC9E,iFAAiF;QACjF,4EAA4E;QAC5E,aAAa,gBAAgB,CAAC,OAAO,CAAC,MAAM;QAC5C,yBAAyB,CAC1B,CAAA;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,GAAG,OAAO,aAAa,CAAA;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC1E,MAAM,OAAO,GAA2B,EAAE,CAAA;IAE1C,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QAChD,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAErD,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;;gBACnC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;QACzD,CAAC;IACH,CAAC,CAAA;IAED,MAAM,IAAI,CAAC,EAAE,CAAC,CAAA;IAEd,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,OAAO,CACL,uFAAuF;QACvF,gBAAgB;QAChB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QACvB,KAAK;QACL,6DAA6D;QAC7D,yBAAyB,CAC1B,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,gCAAgC,CAAA;IACrE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,yBAAyB,CAAA;IAC/D,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,iCAAiC,CAAA;IACvE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,eAAe,CAAA;IACrD,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAA;IAEpD,OAAO,0BAA0B,CAAA;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,QAAgB,EAAiB,EAAE;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAE5B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC,CAAA;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,wCAAwC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,EAAU,EAAE,GAAG,GAAG,UAAU;IACnE,OAAO,KAAK,IAAmB,EAAE;QAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;QAExC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAM;QAErB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAE3B,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,SAAiB,EAAE,YAAoB;IAClG,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACtG,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,YAAY,CAAC,CAAA;IAE5E,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,KAAK,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QACjD,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;;gBACtD,MAAM,EAAE,CAAA;QACf,CAAC;IACH,CAAC,CAAA;IAED,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;IACtB,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEjE,qEAAqE;IACrE,mEAAmE;IACnE,sEAAsE;IACtE,+CAA+C;IAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAE/C,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAErD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAE1D,CAAA;QAED,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;YACjG,MAAM,OAAO,GAAG,IAAI,MAAM,IAAI,CAAA;YAE9B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,CAAA;YAElF,MAAM,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,uDAAuD;IACzD,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["// Reading built output off a disk.\n//\n// Kept apart from the host on purpose: it is the only part of serving an RSC\n// app that assumes a filesystem, and plenty of places to run one do not have\n// one. Nothing in `@rsc-kit/core/host` imports this module, so a bundle for a\n// host without a filesystem carries no reference to `node:fs` at all.\n//\n// Assets are not here any more — Nitro publishes and serves those. What is\n// left is the prerendered output: written by the build, read by the server it\n// generates, and copied by a static export.\n\nimport { cp, mkdir, readdir, readFile, writeFile } from 'node:fs/promises'\nimport { dirname, join } from 'node:path'\n\n/**\n * Read what the prerenderer wrote, from a directory.\n *\n * Missing is an answer, not an error: a partial prerender is a valid state,\n * and anything not found here is rendered on demand instead.\n */\nexport function prerenderedFrom(dir: string) {\n  /**\n   * What is on disk, listed once.\n   *\n   * A miss used to be a thrown ENOENT, and misses are the common case: the\n   * host asks for `{url}.html`, then `{url}.ppr.html`, then the route's\n   * pattern — so every request to a page served by a pattern shell threw and\n   * caught two exceptions before finding anything. Measured at 3,000 req/s\n   * against 28,000 for the same page read from memory.\n   *\n   * Contents are cached for the life of the process. A build's output does\n   * not change under a running server - a deploy restarts it, and a server\n   * that outlived a rebuild would be serving a stale engine against new\n   * pages anyway - so the first read is the only one. Under load the same\n   * page used to be opened, read and closed thousands of times a second,\n   * which a profile showed as the one cost on a stored page that was ours\n   * rather than React's. Capped by bytes, so a site with more pages than\n   * memory holds the hot ones and re-reads the rest.\n   */\n  let present: Promise<Set<string>> | null = null\n\n  const CONTENT_CAP_BYTES = 64 * 1024 * 1024\n  const contents = new Map<string, string>()\n  let held = 0\n\n  const remember = (name: string, text: string): void => {\n    const size = text.length * 2\n\n    if (size > CONTENT_CAP_BYTES / 4) return\n\n    while (held + size > CONTENT_CAP_BYTES && contents.size > 0) {\n      const oldest = contents.keys().next().value as string\n      held -= contents.get(oldest)!.length * 2\n      contents.delete(oldest)\n    }\n\n    contents.set(name, text)\n    held += size\n  }\n\n  const listing = async (): Promise<Set<string>> => {\n    present ??= readdir(dir, { recursive: true })\n      .then((names) => new Set(names.map((n) => String(n).replace(/\\\\/g, '/'))))\n      // An absent directory is an empty one: a partial prerender is a valid\n      // state, and everything falls through to being rendered.\n      .catch(() => new Set<string>())\n\n    return await present\n  }\n\n  return async (name: string): Promise<string | null> => {\n    if (name.includes('..')) return null\n\n    if (!(await listing()).has(name)) return null\n\n    const cached = contents.get(name)\n\n    if (cached !== undefined) return cached\n\n    try {\n      const text = await readFile(join(dir, name), 'utf-8')\n\n      remember(name, text)\n\n      return text\n    } catch {\n      return null\n    }\n  }\n}\n\n/**\n * The same reader, for a directory whose absolute path is not known until the\n * server runs.\n *\n * Nitro bundles the generated entry to a different depth depending on the\n * preset — `.output/server/index.mjs` for one, `.output/server/_ssr/rsc.mjs`\n * for another — so neither a fixed relative path nor a path baked in at build\n * time survives: the first is wrong for half the presets, and the second stops\n * being true the moment `.output/` is copied to the machine that serves it.\n *\n * So the caller passes its own `import.meta.url` and the directory is found by\n * walking up from it. A few levels, bounded, and resolved once.\n *\n *   prerendered: prerenderedBeside(import.meta.url, 'rsc-static')\n *\n * Not finding it is a valid state and not an error: nothing was frozen, or\n * this host has no filesystem to have frozen it on. Every page renders live,\n * which is what happens today everywhere.\n */\n/**\n * Where a compiled binary puts the frozen pages.\n *\n * `bun build --compile` embeds what is imported statically and nothing a\n * computed import names, so the walk below finds no directory and no\n * module inside a binary. The build writes `compile.mjs` beside the\n * server: it imports the inline module by name - which embeds it - and\n * hands the pages over here before importing the server. Shared as a\n * global under a registered symbol, because the wrapper and this module\n * are bundled apart.\n */\nexport const EMBEDDED_PAGES = Symbol.for('rsc-kit.embedded-pages')\n\nfunction embeddedPages(): Record<string, string> | null {\n  const pages = (globalThis as Record<symbol, unknown>)[EMBEDDED_PAGES]\n\n  return pages && typeof pages === 'object' ? (pages as Record<string, string>) : null\n}\n\nexport function prerenderedBeside(moduleUrl: string, dirName: string, levels = 4) {\n  let reader: Promise<(name: string) => Promise<string | null>> | null = null\n\n  const resolveDir = async (): Promise<(name: string) => Promise<string | null>> => {\n    const embedded = embeddedPages()\n\n    if (embedded) return async (name) => embedded[name] ?? null\n\n    let dir: string | null = null\n\n    try {\n      const { fileURLToPath } = await import('node:url')\n\n      dir = dirname(fileURLToPath(moduleUrl))\n    } catch {\n      // No filesystem, or no file: url to speak of. The inline module below\n      // is the only place the pages can be.\n    }\n\n    if (dir !== null) {\n      for (let i = 0; i <= levels; i++) {\n        const candidate = join(dir, ...Array(i).fill('..'), dirName)\n\n        try {\n          await readdir(candidate)\n\n          return prerenderedFrom(candidate)\n        } catch {\n          // Not at this level. Keep walking.\n        }\n      }\n    }\n\n    // A Worker: the pages were uploaded as static assets, under a prefix\n    // the Worker answers first, and are read back through the binding.\n    const assets = await workersAssets()\n\n    if (assets) return assetsReader(assets, `/${ASSETS_PREFIX(dirName)}`)\n\n    const inline = await inlinePrerendered(moduleUrl, `${dirName}-inline.mjs`, levels)\n\n    return inline ? async (name) => inline[name] ?? null : async () => null\n  }\n\n  return async (name: string): Promise<string | null> => {\n    reader ??= resolveDir()\n\n    return await (await reader)(name)\n  }\n}\n\n/**\n * Where the stored pages live among a Worker's static assets.\n *\n * Under a prefix, beside the app's own public files, because that is the\n * one store a Worker has that costs nothing in script size: an inline module\n * counts against the bundle's limit, and a port's 571 stored category pages\n * came to 69 MB of module against a limit of 10. The prefix is one the\n * Worker answers first - `run_worker_first` in wrangler.json, written by\n * the build - so a browser asking for `/_rsc-static/x.ppr.html` reaches the\n * app, which has no such route, rather than the asset; a stored page of a\n * guarded route is served only by the host that runs the guard.\n */\nexport const ASSETS_PREFIX = (dirName: string): string => `_${dirName}`\n\n/** The Workers assets binding, where this runs on Workers and it is bound. */\nasync function workersAssets(): Promise<AssetsBinding | null> {\n  if (typeof navigator === 'undefined' || navigator.userAgent !== 'Cloudflare-Workers') return null\n\n  try {\n    // Computed, so neither the bundler nor tsc looks for a module only the\n    // Workers runtime has.\n    const specifier = 'cloudflare:workers'\n    const { env } = (await import(/* @vite-ignore */ specifier)) as { env: { ASSETS?: AssetsBinding } }\n\n    return env.ASSETS && typeof env.ASSETS.fetch === 'function' ? env.ASSETS : null\n  } catch {\n    return null\n  }\n}\n\ninterface AssetsBinding {\n  fetch(input: Request | string): Promise<Response>\n}\n\n/**\n * Read stored pages through the assets binding, each name once per isolate.\n *\n * The host asks for `{url}.html`, then `{url}.ppr.html`, then the pattern's,\n * on every request: three asks per page, most of them misses. The binding\n * is a fetch, not a memory read, so the answers - misses included - are kept\n * for the life of the isolate, the way the disk reader keeps its listing.\n */\nexport function assetsReader(assets: AssetsBinding, prefix: string): (name: string) => Promise<string | null> {\n  const known = new Map<string, Promise<string | null>>()\n\n  return (name) => {\n    let pending = known.get(name)\n\n    if (!pending) {\n      const path = `${prefix}/${name.split('/').map(encodeURIComponent).join('/')}`\n\n      pending = assets\n        .fetch(new Request(`https://assets.invalid${path}`))\n        .then((response) => (response.ok ? response.text() : null))\n        .catch(() => null)\n\n      known.set(name, pending)\n    }\n\n    return pending\n  }\n}\n\n/**\n * The frozen pages as one module, for a runtime with no filesystem.\n *\n * A Worker cannot readdir. Its modules are what wrangler uploaded, and a\n * sibling .mjs beside the bundle is one of them - so the build writes every\n * stored file into `rsc-static-inline.mjs` as strings, and this walks up from\n * the caller the way the disk reader does, importing rather than reading.\n * The specifier is computed, and marked for the bundler to leave alone: at\n * bundle time the file does not exist yet, because it is written by the\n * prerender that runs the bundle.\n *\n * Two forms of the specifier, because runtimes disagree. workerd resolves a\n * relative string against the importing module's name and refuses a url;\n * Node and Bun want the url, since a relative string would resolve against\n * this file rather than the caller's.\n */\nasync function inlinePrerendered(\n  moduleUrl: string,\n  fileName: string,\n  levels: number,\n): Promise<Record<string, string> | null> {\n  for (let i = 0; i <= levels; i++) {\n    const relative = './' + '../'.repeat(i) + fileName\n\n    for (const specifier of [relative, safeUrl(relative, moduleUrl)]) {\n      if (!specifier) continue\n\n      try {\n        const loaded = (await import(/* @vite-ignore */ specifier)) as { default?: Record<string, string> }\n\n        if (loaded.default && typeof loaded.default === 'object') return loaded.default\n      } catch {\n        // Not there, or not at this level.\n      }\n    }\n  }\n\n  return null\n}\n\nfunction safeUrl(relative: string, base: string): string | null {\n  try {\n    return new URL(relative, base).href\n  } catch {\n    return null\n  }\n}\n\n/**\n * The entry a binary is compiled from, written beside the server.\n *\n * Two static imports, in this order: the inline module first - evaluating\n * it hands the pages over - and the server second. A module's imports are\n * evaluated in order, before its own body, so the pages are in place before\n * the server's first line runs. Bun embeds both.\n *\n * Static rather than `await import()`: a top-level await is what made Bun\n * skip `--bytecode` for this entry, silently, byte for byte - and a port\n * whose other Nitro app compiled with it asked why this one could not.\n * `bun build --compile --bytecode .output/server/compile.mjs` works now.\n */\nexport function compileEntrySource(dirName: string): string {\n  return (\n    '// The entry to compile into one binary:\\n' +\n    '//   bun build --compile .output/server/compile.mjs --outfile dist/app\\n' +\n    '//\\n' +\n    '//\\n' +\n    '// A binary carries what is imported by name. The server reads its frozen pages\\n' +\n    '// through a computed import, which a compile cannot see - imported here, they\\n' +\n    '// travel inside the binary and are handed to the server before it starts.\\n' +\n    '// Two static imports in this order, and no top-level await: imports evaluate\\n' +\n    '// in order, and an await here is what stopped --bytecode from applying.\\n' +\n    `import \"./${inlineModuleName(dirName)}\";\\n` +\n    'import \"./index.mjs\";\\n'\n  )\n}\n\n/** The name the build writes the inline module under, beside the stored pages' directory. */\nexport function inlineModuleName(dirName: string): string {\n  return `${dirName}-inline.mjs`\n}\n\n/**\n * Every stored file under `dir`, as the source of the inline module.\n * Strings only: a frozen page, its flight payload, its meta, an api answer.\n */\nexport async function inlineModuleSource(dir: string): Promise<string> {\n  const { readdir: list, readFile: read } = await import('node:fs/promises')\n  const entries: Record<string, string> = {}\n\n  const walk = async (sub: string): Promise<void> => {\n    for (const entry of await list(join(dir, sub), { withFileTypes: true })) {\n      const rel = sub ? `${sub}/${entry.name}` : entry.name\n\n      if (entry.isDirectory()) await walk(rel)\n      else entries[rel] = await read(join(dir, rel), 'utf-8')\n    }\n  }\n\n  await walk('')\n\n  // Exported for the Worker, which imports it when the directory is not\n  // there, and handed over as a global for the binary, whose compile entry\n  // imports it first for exactly this side effect. The same data either way.\n  return (\n    '// @generated by the RSC build: the stored pages, for a runtime with no filesystem.\\n' +\n    'const pages = ' +\n    JSON.stringify(entries) +\n    ';\\n' +\n    'globalThis[Symbol.for(\"rsc-kit.embedded-pages\")] = pages;\\n' +\n    'export default pages;\\n'\n  )\n}\n\nfunction contentTypeOf(pathname: string): string {\n  if (pathname.endsWith('.js')) return 'text/javascript; charset=utf-8'\n  if (pathname.endsWith('.css')) return 'text/css; charset=utf-8'\n  if (pathname.endsWith('.map')) return 'application/json; charset=utf-8'\n  if (pathname.endsWith('.svg')) return 'image/svg+xml'\n  if (pathname.endsWith('.woff2')) return 'font/woff2'\n\n  return 'application/octet-stream'\n}\n\n/**\n * Write build output into a directory.\n *\n * The sink `prerender` and `exportSite` take. Names are relative and may\n * contain directories — `docs/index.html` — so each one's parent is created\n * as it goes.\n */\nexport function writeTo(dir: string): ((name: string, contents: string) => Promise<void>) & { dir: string } {\n  const write = async (name: string, contents: string): Promise<void> => {\n    const path = join(dir, name)\n\n    await mkdir(dirname(path), { recursive: true })\n    await writeFile(path, contents)\n  }\n\n  // Where it wrote, for a caller that has to read it back. The embeddable\n  // module has to list these files, and being told the directory a second time\n  // is a second place for it to be wrong.\n  return Object.assign(write, { dir })\n}\n\n/**\n * Copy the built browser bundle into an exported site.\n *\n * Separate from the export itself because copying a tree of files is a\n * filesystem operation by nature — a deploy that uploads them to a bucket\n * has its own way to do that, and passes its own callback instead.\n */\nexport function copyAssets(from: string, to: string, url = '/assets/') {\n  return async (): Promise<void> => {\n    const at = url.replace(/^\\/+|\\/+$/g, '')\n\n    if (at === '') return\n\n    const target = join(to, at)\n\n    await mkdir(dirname(target), { recursive: true })\n    await cp(from, target, { recursive: true })\n  }\n}\n\n/**\n * Put the stored pages among a Worker's static assets, and have the Worker\n * answer their prefix first.\n *\n * Run after Nitro has written its public-asset list and wrangler.json, so\n * the copies are in neither: not served as assets ahead of the Worker, and\n * not needing a wrangler key Nitro would override. `run_worker_first` is\n * added to the written config for the one prefix. The server-side directory\n * is removed once copied, so nothing in it is uploaded twice. Returns how\n * many files were moved; none when nothing was stored.\n */\nexport async function storedPagesToAssets(staticDir: string, publicDir: string, wranglerPath: string): Promise<number> {\n  const { cp, readFile: read, writeFile: write, stat, readdir: list } = await import('node:fs/promises')\n  const prefix = ASSETS_PREFIX(staticDir.split(/[\\\\/]/).pop() || 'rsc-static')\n\n  try {\n    await stat(staticDir)\n  } catch {\n    return 0\n  }\n\n  let copied = 0\n  const count = async (dir: string): Promise<void> => {\n    for (const entry of await list(dir, { withFileTypes: true })) {\n      if (entry.isDirectory()) await count(join(dir, entry.name))\n      else copied++\n    }\n  }\n\n  await count(staticDir)\n  await cp(staticDir, join(publicDir, prefix), { recursive: true })\n\n  // Moved, not copied: wrangler's default rules upload every .html and\n  // .txt under the server directory as a text module, and 573 stored\n  // shells left beside the bundle were 55 MB of modules against a 10 MB\n  // limit - a deploy that happened to fit, once.\n  const { rm } = await import('node:fs/promises')\n\n  await rm(staticDir, { recursive: true, force: true })\n\n  try {\n    const config = JSON.parse(await read(wranglerPath, 'utf-8')) as {\n      assets?: { run_worker_first?: boolean | string[] } & Record<string, unknown>\n    }\n\n    if (config.assets && config.assets.run_worker_first !== true) {\n      const first = Array.isArray(config.assets.run_worker_first) ? config.assets.run_worker_first : []\n      const pattern = `/${prefix}/*`\n\n      if (!first.includes(pattern)) config.assets.run_worker_first = [...first, pattern]\n\n      await write(wranglerPath, JSON.stringify(config, null, 2))\n    }\n  } catch {\n    // No wrangler.json to amend: a deploy config the app writes itself, which\n    // then carries the prefix in its own run_worker_first.\n  }\n\n  return copied\n}\n"]}
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../src/files.ts"],"names":[],"mappings":"AAAA,mCAAmC;AACnC,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,sEAAsE;AACtE,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,4CAA4C;AAE5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,OAAO,GAAgC,IAAI,CAAA;IAE/C,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,IAAI,IAAI,GAAG,CAAC,CAAA;IAEZ,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAY,EAAQ,EAAE;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAA;QAE5B,IAAI,IAAI,GAAG,iBAAiB,GAAG,CAAC;YAAE,OAAM;QAExC,OAAO,IAAI,GAAG,IAAI,GAAG,iBAAiB,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAA;YACrD,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,MAAM,GAAG,CAAC,CAAA;YACxC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACzB,CAAC;QAED,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACxB,IAAI,IAAI,IAAI,CAAA;IACd,CAAC,CAAA;IAED,MAAM,OAAO,GAAG,KAAK,IAA0B,EAAE;QAC/C,OAAO,KAAK,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;aAC1C,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC1E,sEAAsE;YACtE,yDAAyD;aACxD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,EAAU,CAAC,CAAA;QAEjC,OAAO,MAAM,OAAO,CAAA;IACtB,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,IAAY,EAA0B,EAAE;QACpD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAEpC,IAAI,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAEjC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;YAErD,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;YAEpB,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;AAElE,SAAS,aAAa;IACpB,MAAM,KAAK,GAAI,UAAsC,CAAC,cAAc,CAAC,CAAA;IAErE,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,OAAe,EAAE,MAAM,GAAG,CAAC;IAC9E,IAAI,MAAM,GAA6D,IAAI,CAAA;IAE3E,MAAM,UAAU,GAAG,KAAK,IAAuD,EAAE;QAC/E,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAA;QAEhC,IAAI,QAAQ;YAAE,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;QAE3D,IAAI,GAAG,GAAkB,IAAI,CAAA;QAE7B,IAAI,CAAC;YACH,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAA;YAElD,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAA;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,sEAAsE;YACtE,sCAAsC;QACxC,CAAC;QAED,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;gBAE5D,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,SAAS,CAAC,CAAA;oBAExB,OAAO,eAAe,CAAC,SAAS,CAAC,CAAA;gBACnC,CAAC;gBAAC,MAAM,CAAC;oBACP,mCAAmC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QAED,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAA;QAEpC,IAAI,MAAM;YAAE,OAAO,YAAY,CAAC,MAAM,EAAE,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAErE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,GAAG,OAAO,aAAa,EAAE,MAAM,CAAC,CAAA;QAElF,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAA;IACzE,CAAC,CAAA;IAED,OAAO,KAAK,EAAE,IAAY,EAA0B,EAAE;QACpD,MAAM,KAAK,UAAU,EAAE,CAAA;QAEvB,OAAO,MAAM,CAAC,MAAM,MAAM,CAAC,CAAC,IAAI,CAAC,CAAA;IACnC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,OAAO,EAAE,CAAA;AAEvE,8EAA8E;AAC9E,KAAK,UAAU,aAAa;IAC1B,IAAI,OAAO,SAAS,KAAK,WAAW,IAAI,SAAS,CAAC,SAAS,KAAK,oBAAoB;QAAE,OAAO,IAAI,CAAA;IAEjG,IAAI,CAAC;QACH,uEAAuE;QACvE,uBAAuB;QACvB,MAAM,SAAS,GAAG,oBAAoB,CAAA;QACtC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAwC,CAAA;QAEnG,OAAO,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,IAAI,CAAA;AAExB,MAAM,UAAU,YAAY,CAAC,MAAqB,EAAE,MAAc;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkC,CAAA;IAEvD,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAE7B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,mEAAmE;YACnE,wEAAwE;YACxE,gEAAgE;YAChE,IAAI,KAAK,CAAC,IAAI,IAAI,WAAW;gBAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAA;YAEvE,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;YAE7E,OAAO,GAAG,MAAM;iBACb,KAAK,CAAC,IAAI,OAAO,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;iBACnD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;iBAC1D,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YAEpB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC1B,CAAC;QAED,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,QAAgB,EAChB,MAAc;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAA;QAElD,KAAK,MAAM,SAAS,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC,SAAS;gBAAE,SAAQ;YAExB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAyC,CAAA;gBAEnG,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,OAAO,CAAA;YACjF,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,IAAY;IAC7C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,CACL,4CAA4C;QAC5C,0EAA0E;QAC1E,MAAM;QACN,MAAM;QACN,mFAAmF;QACnF,kFAAkF;QAClF,8EAA8E;QAC9E,iFAAiF;QACjF,4EAA4E;QAC5E,aAAa,gBAAgB,CAAC,OAAO,CAAC,MAAM;QAC5C,yBAAyB,CAC1B,CAAA;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,GAAG,OAAO,aAAa,CAAA;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAC1E,MAAM,OAAO,GAA2B,EAAE,CAAA;IAE1C,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QAChD,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACxE,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAErD,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,CAAC,GAAG,CAAC,CAAA;;gBACnC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,OAAO,CAAC,CAAA;QACzD,CAAC;IACH,CAAC,CAAA;IAED,MAAM,IAAI,CAAC,EAAE,CAAC,CAAA;IAEd,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,OAAO,CACL,uFAAuF;QACvF,gBAAgB;QAChB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QACvB,KAAK;QACL,6DAA6D;QAC7D,yBAAyB,CAC1B,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,gCAAgC,CAAA;IACrE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,yBAAyB,CAAA;IAC/D,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,iCAAiC,CAAA;IACvE,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,eAAe,CAAA;IACrD,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAA;IAEpD,OAAO,0BAA0B,CAAA;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,MAAM,KAAK,GAAG,KAAK,EAAE,IAAY,EAAE,QAAgB,EAAiB,EAAE;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAE5B,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;IACjC,CAAC,CAAA;IAED,wEAAwE;IACxE,6EAA6E;IAC7E,wCAAwC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;AACtC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,EAAU,EAAE,GAAG,GAAG,UAAU;IACnE,OAAO,KAAK,IAAmB,EAAE;QAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;QAExC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAM;QAErB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;QAE3B,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACjD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,SAAiB,EAAE,YAAoB;IAClG,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IACtG,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,YAAY,CAAC,CAAA;IAE5E,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,CAAA;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;IAED,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,MAAM,KAAK,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QACjD,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;;gBACtD,MAAM,EAAE,CAAA;QACf,CAAC;IACH,CAAC,CAAA;IAED,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;IACtB,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAEjE,qEAAqE;IACrE,mEAAmE;IACnE,sEAAsE;IACtE,+CAA+C;IAC/C,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;IAE/C,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAErD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAE1D,CAAA;QAED,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAA;YACjG,MAAM,OAAO,GAAG,IAAI,MAAM,IAAI,CAAA;YAE9B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,GAAG,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,CAAA;YAElF,MAAM,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,uDAAuD;IACzD,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["// Reading built output off a disk.\n//\n// Kept apart from the host on purpose: it is the only part of serving an RSC\n// app that assumes a filesystem, and plenty of places to run one do not have\n// one. Nothing in `@rsc-kit/core/host` imports this module, so a bundle for a\n// host without a filesystem carries no reference to `node:fs` at all.\n//\n// Assets are not here any more — Nitro publishes and serves those. What is\n// left is the prerendered output: written by the build, read by the server it\n// generates, and copied by a static export.\n\nimport { cp, mkdir, readdir, readFile, writeFile } from 'node:fs/promises'\nimport { dirname, join } from 'node:path'\n\n/**\n * Read what the prerenderer wrote, from a directory.\n *\n * Missing is an answer, not an error: a partial prerender is a valid state,\n * and anything not found here is rendered on demand instead.\n */\nexport function prerenderedFrom(dir: string) {\n  /**\n   * What is on disk, listed once.\n   *\n   * A miss used to be a thrown ENOENT, and misses are the common case: the\n   * host asks for `{url}.html`, then `{url}.ppr.html`, then the route's\n   * pattern — so every request to a page served by a pattern shell threw and\n   * caught two exceptions before finding anything. Measured at 3,000 req/s\n   * against 28,000 for the same page read from memory.\n   *\n   * Contents are cached for the life of the process. A build's output does\n   * not change under a running server - a deploy restarts it, and a server\n   * that outlived a rebuild would be serving a stale engine against new\n   * pages anyway - so the first read is the only one. Under load the same\n   * page used to be opened, read and closed thousands of times a second,\n   * which a profile showed as the one cost on a stored page that was ours\n   * rather than React's. Capped by bytes, so a site with more pages than\n   * memory holds the hot ones and re-reads the rest.\n   */\n  let present: Promise<Set<string>> | null = null\n\n  const CONTENT_CAP_BYTES = 64 * 1024 * 1024\n  const contents = new Map<string, string>()\n  let held = 0\n\n  const remember = (name: string, text: string): void => {\n    const size = text.length * 2\n\n    if (size > CONTENT_CAP_BYTES / 4) return\n\n    while (held + size > CONTENT_CAP_BYTES && contents.size > 0) {\n      const oldest = contents.keys().next().value as string\n      held -= contents.get(oldest)!.length * 2\n      contents.delete(oldest)\n    }\n\n    contents.set(name, text)\n    held += size\n  }\n\n  const listing = async (): Promise<Set<string>> => {\n    present ??= readdir(dir, { recursive: true })\n      .then((names) => new Set(names.map((n) => String(n).replace(/\\\\/g, '/'))))\n      // An absent directory is an empty one: a partial prerender is a valid\n      // state, and everything falls through to being rendered.\n      .catch(() => new Set<string>())\n\n    return await present\n  }\n\n  return async (name: string): Promise<string | null> => {\n    if (name.includes('..')) return null\n\n    if (!(await listing()).has(name)) return null\n\n    const cached = contents.get(name)\n\n    if (cached !== undefined) return cached\n\n    try {\n      const text = await readFile(join(dir, name), 'utf-8')\n\n      remember(name, text)\n\n      return text\n    } catch {\n      return null\n    }\n  }\n}\n\n/**\n * The same reader, for a directory whose absolute path is not known until the\n * server runs.\n *\n * Nitro bundles the generated entry to a different depth depending on the\n * preset — `.output/server/index.mjs` for one, `.output/server/_ssr/rsc.mjs`\n * for another — so neither a fixed relative path nor a path baked in at build\n * time survives: the first is wrong for half the presets, and the second stops\n * being true the moment `.output/` is copied to the machine that serves it.\n *\n * So the caller passes its own `import.meta.url` and the directory is found by\n * walking up from it. A few levels, bounded, and resolved once.\n *\n *   prerendered: prerenderedBeside(import.meta.url, 'rsc-static')\n *\n * Not finding it is a valid state and not an error: nothing was frozen, or\n * this host has no filesystem to have frozen it on. Every page renders live,\n * which is what happens today everywhere.\n */\n/**\n * Where a compiled binary puts the frozen pages.\n *\n * `bun build --compile` embeds what is imported statically and nothing a\n * computed import names, so the walk below finds no directory and no\n * module inside a binary. The build writes `compile.mjs` beside the\n * server: it imports the inline module by name - which embeds it - and\n * hands the pages over here before importing the server. Shared as a\n * global under a registered symbol, because the wrapper and this module\n * are bundled apart.\n */\nexport const EMBEDDED_PAGES = Symbol.for('rsc-kit.embedded-pages')\n\nfunction embeddedPages(): Record<string, string> | null {\n  const pages = (globalThis as Record<symbol, unknown>)[EMBEDDED_PAGES]\n\n  return pages && typeof pages === 'object' ? (pages as Record<string, string>) : null\n}\n\nexport function prerenderedBeside(moduleUrl: string, dirName: string, levels = 4) {\n  let reader: Promise<(name: string) => Promise<string | null>> | null = null\n\n  const resolveDir = async (): Promise<(name: string) => Promise<string | null>> => {\n    const embedded = embeddedPages()\n\n    if (embedded) return async (name) => embedded[name] ?? null\n\n    let dir: string | null = null\n\n    try {\n      const { fileURLToPath } = await import('node:url')\n\n      dir = dirname(fileURLToPath(moduleUrl))\n    } catch {\n      // No filesystem, or no file: url to speak of. The inline module below\n      // is the only place the pages can be.\n    }\n\n    if (dir !== null) {\n      for (let i = 0; i <= levels; i++) {\n        const candidate = join(dir, ...Array(i).fill('..'), dirName)\n\n        try {\n          await readdir(candidate)\n\n          return prerenderedFrom(candidate)\n        } catch {\n          // Not at this level. Keep walking.\n        }\n      }\n    }\n\n    // A Worker: the pages were uploaded as static assets, under a prefix\n    // the Worker answers first, and are read back through the binding.\n    const assets = await workersAssets()\n\n    if (assets) return assetsReader(assets, `/${ASSETS_PREFIX(dirName)}`)\n\n    const inline = await inlinePrerendered(moduleUrl, `${dirName}-inline.mjs`, levels)\n\n    return inline ? async (name) => inline[name] ?? null : async () => null\n  }\n\n  return async (name: string): Promise<string | null> => {\n    reader ??= resolveDir()\n\n    return await (await reader)(name)\n  }\n}\n\n/**\n * Where the stored pages live among a Worker's static assets.\n *\n * Under a prefix, beside the app's own public files, because that is the\n * one store a Worker has that costs nothing in script size: an inline module\n * counts against the bundle's limit, and a port's 571 stored category pages\n * came to 69 MB of module against a limit of 10. The prefix is one the\n * Worker answers first - `run_worker_first` in wrangler.json, written by\n * the build - so a browser asking for `/_rsc-static/x.ppr.html` reaches the\n * app, which has no such route, rather than the asset; a stored page of a\n * guarded route is served only by the host that runs the guard.\n */\nexport const ASSETS_PREFIX = (dirName: string): string => `_${dirName}`\n\n/** The Workers assets binding, where this runs on Workers and it is bound. */\nasync function workersAssets(): Promise<AssetsBinding | null> {\n  if (typeof navigator === 'undefined' || navigator.userAgent !== 'Cloudflare-Workers') return null\n\n  try {\n    // Computed, so neither the bundler nor tsc looks for a module only the\n    // Workers runtime has.\n    const specifier = 'cloudflare:workers'\n    const { env } = (await import(/* @vite-ignore */ specifier)) as { env: { ASSETS?: AssetsBinding } }\n\n    return env.ASSETS && typeof env.ASSETS.fetch === 'function' ? env.ASSETS : null\n  } catch {\n    return null\n  }\n}\n\ninterface AssetsBinding {\n  fetch(input: Request | string): Promise<Response>\n}\n\n/**\n * Read stored pages through the assets binding, each name once per isolate.\n *\n * The host asks for `{url}.html`, then `{url}.ppr.html`, then the pattern's,\n * on every request: three asks per page, most of them misses. The binding\n * is a fetch, not a memory read, so the answers - misses included - are kept\n * for the life of the isolate, the way the disk reader keeps its listing.\n */\nconst KNOWN_LIMIT = 4096\n\nexport function assetsReader(assets: AssetsBinding, prefix: string): (name: string) => Promise<string | null> {\n  const known = new Map<string, Promise<string | null>>()\n\n  return (name) => {\n    let pending = known.get(name)\n\n    if (!pending) {\n      // Bounded. Misses are kept too, and every made-up path is three of\n      // them: kept for the life of the isolate, a crawler of random urls grew\n      // this without end. Dropping the oldest costs one fetch, later.\n      if (known.size >= KNOWN_LIMIT) known.delete(known.keys().next().value!)\n\n      const path = `${prefix}/${name.split('/').map(encodeURIComponent).join('/')}`\n\n      pending = assets\n        .fetch(new Request(`https://assets.invalid${path}`))\n        .then((response) => (response.ok ? response.text() : null))\n        .catch(() => null)\n\n      known.set(name, pending)\n    }\n\n    return pending\n  }\n}\n\n/**\n * The frozen pages as one module, for a runtime with no filesystem.\n *\n * A Worker cannot readdir. Its modules are what wrangler uploaded, and a\n * sibling .mjs beside the bundle is one of them - so the build writes every\n * stored file into `rsc-static-inline.mjs` as strings, and this walks up from\n * the caller the way the disk reader does, importing rather than reading.\n * The specifier is computed, and marked for the bundler to leave alone: at\n * bundle time the file does not exist yet, because it is written by the\n * prerender that runs the bundle.\n *\n * Two forms of the specifier, because runtimes disagree. workerd resolves a\n * relative string against the importing module's name and refuses a url;\n * Node and Bun want the url, since a relative string would resolve against\n * this file rather than the caller's.\n */\nasync function inlinePrerendered(\n  moduleUrl: string,\n  fileName: string,\n  levels: number,\n): Promise<Record<string, string> | null> {\n  for (let i = 0; i <= levels; i++) {\n    const relative = './' + '../'.repeat(i) + fileName\n\n    for (const specifier of [relative, safeUrl(relative, moduleUrl)]) {\n      if (!specifier) continue\n\n      try {\n        const loaded = (await import(/* @vite-ignore */ specifier)) as { default?: Record<string, string> }\n\n        if (loaded.default && typeof loaded.default === 'object') return loaded.default\n      } catch {\n        // Not there, or not at this level.\n      }\n    }\n  }\n\n  return null\n}\n\nfunction safeUrl(relative: string, base: string): string | null {\n  try {\n    return new URL(relative, base).href\n  } catch {\n    return null\n  }\n}\n\n/**\n * The entry a binary is compiled from, written beside the server.\n *\n * Two static imports, in this order: the inline module first - evaluating\n * it hands the pages over - and the server second. A module's imports are\n * evaluated in order, before its own body, so the pages are in place before\n * the server's first line runs. Bun embeds both.\n *\n * Static rather than `await import()`: a top-level await is what made Bun\n * skip `--bytecode` for this entry, silently, byte for byte - and a port\n * whose other Nitro app compiled with it asked why this one could not.\n * `bun build --compile --bytecode .output/server/compile.mjs` works now.\n */\nexport function compileEntrySource(dirName: string): string {\n  return (\n    '// The entry to compile into one binary:\\n' +\n    '//   bun build --compile .output/server/compile.mjs --outfile dist/app\\n' +\n    '//\\n' +\n    '//\\n' +\n    '// A binary carries what is imported by name. The server reads its frozen pages\\n' +\n    '// through a computed import, which a compile cannot see - imported here, they\\n' +\n    '// travel inside the binary and are handed to the server before it starts.\\n' +\n    '// Two static imports in this order, and no top-level await: imports evaluate\\n' +\n    '// in order, and an await here is what stopped --bytecode from applying.\\n' +\n    `import \"./${inlineModuleName(dirName)}\";\\n` +\n    'import \"./index.mjs\";\\n'\n  )\n}\n\n/** The name the build writes the inline module under, beside the stored pages' directory. */\nexport function inlineModuleName(dirName: string): string {\n  return `${dirName}-inline.mjs`\n}\n\n/**\n * Every stored file under `dir`, as the source of the inline module.\n * Strings only: a frozen page, its flight payload, its meta, an api answer.\n */\nexport async function inlineModuleSource(dir: string): Promise<string> {\n  const { readdir: list, readFile: read } = await import('node:fs/promises')\n  const entries: Record<string, string> = {}\n\n  const walk = async (sub: string): Promise<void> => {\n    for (const entry of await list(join(dir, sub), { withFileTypes: true })) {\n      const rel = sub ? `${sub}/${entry.name}` : entry.name\n\n      if (entry.isDirectory()) await walk(rel)\n      else entries[rel] = await read(join(dir, rel), 'utf-8')\n    }\n  }\n\n  await walk('')\n\n  // Exported for the Worker, which imports it when the directory is not\n  // there, and handed over as a global for the binary, whose compile entry\n  // imports it first for exactly this side effect. The same data either way.\n  return (\n    '// @generated by the RSC build: the stored pages, for a runtime with no filesystem.\\n' +\n    'const pages = ' +\n    JSON.stringify(entries) +\n    ';\\n' +\n    'globalThis[Symbol.for(\"rsc-kit.embedded-pages\")] = pages;\\n' +\n    'export default pages;\\n'\n  )\n}\n\nfunction contentTypeOf(pathname: string): string {\n  if (pathname.endsWith('.js')) return 'text/javascript; charset=utf-8'\n  if (pathname.endsWith('.css')) return 'text/css; charset=utf-8'\n  if (pathname.endsWith('.map')) return 'application/json; charset=utf-8'\n  if (pathname.endsWith('.svg')) return 'image/svg+xml'\n  if (pathname.endsWith('.woff2')) return 'font/woff2'\n\n  return 'application/octet-stream'\n}\n\n/**\n * Write build output into a directory.\n *\n * The sink `prerender` and `exportSite` take. Names are relative and may\n * contain directories — `docs/index.html` — so each one's parent is created\n * as it goes.\n */\nexport function writeTo(dir: string): ((name: string, contents: string) => Promise<void>) & { dir: string } {\n  const write = async (name: string, contents: string): Promise<void> => {\n    const path = join(dir, name)\n\n    await mkdir(dirname(path), { recursive: true })\n    await writeFile(path, contents)\n  }\n\n  // Where it wrote, for a caller that has to read it back. The embeddable\n  // module has to list these files, and being told the directory a second time\n  // is a second place for it to be wrong.\n  return Object.assign(write, { dir })\n}\n\n/**\n * Copy the built browser bundle into an exported site.\n *\n * Separate from the export itself because copying a tree of files is a\n * filesystem operation by nature — a deploy that uploads them to a bucket\n * has its own way to do that, and passes its own callback instead.\n */\nexport function copyAssets(from: string, to: string, url = '/assets/') {\n  return async (): Promise<void> => {\n    const at = url.replace(/^\\/+|\\/+$/g, '')\n\n    if (at === '') return\n\n    const target = join(to, at)\n\n    await mkdir(dirname(target), { recursive: true })\n    await cp(from, target, { recursive: true })\n  }\n}\n\n/**\n * Put the stored pages among a Worker's static assets, and have the Worker\n * answer their prefix first.\n *\n * Run after Nitro has written its public-asset list and wrangler.json, so\n * the copies are in neither: not served as assets ahead of the Worker, and\n * not needing a wrangler key Nitro would override. `run_worker_first` is\n * added to the written config for the one prefix. The server-side directory\n * is removed once copied, so nothing in it is uploaded twice. Returns how\n * many files were moved; none when nothing was stored.\n */\nexport async function storedPagesToAssets(staticDir: string, publicDir: string, wranglerPath: string): Promise<number> {\n  const { cp, readFile: read, writeFile: write, stat, readdir: list } = await import('node:fs/promises')\n  const prefix = ASSETS_PREFIX(staticDir.split(/[\\\\/]/).pop() || 'rsc-static')\n\n  try {\n    await stat(staticDir)\n  } catch {\n    return 0\n  }\n\n  let copied = 0\n  const count = async (dir: string): Promise<void> => {\n    for (const entry of await list(dir, { withFileTypes: true })) {\n      if (entry.isDirectory()) await count(join(dir, entry.name))\n      else copied++\n    }\n  }\n\n  await count(staticDir)\n  await cp(staticDir, join(publicDir, prefix), { recursive: true })\n\n  // Moved, not copied: wrangler's default rules upload every .html and\n  // .txt under the server directory as a text module, and 573 stored\n  // shells left beside the bundle were 55 MB of modules against a 10 MB\n  // limit - a deploy that happened to fit, once.\n  const { rm } = await import('node:fs/promises')\n\n  await rm(staticDir, { recursive: true, force: true })\n\n  try {\n    const config = JSON.parse(await read(wranglerPath, 'utf-8')) as {\n      assets?: { run_worker_first?: boolean | string[] } & Record<string, unknown>\n    }\n\n    if (config.assets && config.assets.run_worker_first !== true) {\n      const first = Array.isArray(config.assets.run_worker_first) ? config.assets.run_worker_first : []\n      const pattern = `/${prefix}/*`\n\n      if (!first.includes(pattern)) config.assets.run_worker_first = [...first, pattern]\n\n      await write(wranglerPath, JSON.stringify(config, null, 2))\n    }\n  } catch {\n    // No wrangler.json to amend: a deploy config the app writes itself, which\n    // then carries the prefix in its own run_worker_first.\n  }\n\n  return copied\n}\n"]}

package/dist/headers.d.ts

@@ -102,3 +102,11 @@ export declare const PER_CLIENT = "private, no-store";
  * direction.
  */
 export declare const REVALIDATE = "public, max-age=0, must-revalidate";
+/**
+ * And what a page rendered for one request says.
+ *
+ * It may have read the visitor's cookies, and nothing in the headers - which
+ * leave before the render has finished - can know whether it did. So a shared
+ * cache may not keep it; the visitor's own browser may, and must ask again.
+ */
+export declare const PER_REQUEST = "private, max-age=0, must-revalidate";

package/dist/headers.js

@@ -117,4 +117,12 @@ export const PER_CLIENT = 'private, no-store';
  * direction.
  */
 export const REVALIDATE = 'public, max-age=0, must-revalidate';
+/**
+ * And what a page rendered for one request says.
+ *
+ * It may have read the visitor's cookies, and nothing in the headers - which
+ * leave before the render has finished - can know whether it did. So a shared
+ * cache may not keep it; the visitor's own browser may, and must ask again.
+ */
+export const PER_REQUEST = 'private, max-age=0, must-revalidate';
 //# sourceMappingURL=headers.js.map

package/dist/headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"headers.js","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,wEAAwE;AACxE,2EAA2E;AAC3E,gCAAgC;AAChC,EAAE;AACF,gFAAgF;AAEhF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB;;;OAGG;IACH,GAAG,EAAE,OAAO;IAEZ,iFAAiF;IACjF,QAAQ,EAAE,gBAAgB;IAE1B,kEAAkE;IAClE,YAAY,EAAE,qBAAqB;IAEnC,wCAAwC;IACxC,OAAO,EAAE,eAAe;IAExB,gFAAgF;IAChF,OAAO,EAAE,eAAe;IAExB,uDAAuD;IACvD,SAAS,EAAE,iBAAiB;IAE5B,gDAAgD;IAChD,OAAO,EAAE,eAAe;IAExB,uEAAuE;IACvE,UAAU,EAAE,kBAAkB;IAE9B,0CAA0C;IAC1C,MAAM,EAAE,cAAc;IAEtB;;;;;;;OAOG;IACH,QAAQ,EAAE,gBAAgB;IAE1B;;;;;;OAMG;IACH,WAAW,EAAE,oBAAoB;IAEjC;;;;;OAKG;IACH,UAAU,EAAE,cAAc;IAC1B;;;;;;;;;OASG;IACH;;;;;;;OAOG;IACH,KAAK,EAAE,aAAa;IAEpB,SAAS,EAAE,aAAa;IACxB,mEAAmE;IACnE,YAAY,EAAE,iBAAiB;IAC/B,uDAAuD;IACvD,aAAa,EAAE,kBAAkB;CACzB,CAAA;AAEV,sBAAsB;AACtB,MAAM,CAAC,MAAM,WAAW,GAAG,iCAAiC,CAAA;AAE5D,2BAA2B;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,0BAA0B,CAAA;AAEnD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,CAAC,GAAG;IACV,MAAM,CAAC,QAAQ;IACf,MAAM,CAAC,UAAU;IACjB,MAAM,CAAC,SAAS;IAChB,MAAM,CAAC,OAAO;CACf,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAA;AAE7C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,oCAAoC,CAAA","sourcesContent":["// The wire protocol, as names rather than string literals.\n//\n// A host writing these out by hand is how they drift. Two of them are not\n// negotiable at all — the client sends them or asks for them at fixed\n// addresses, and a host that spells one differently fails silently: the\n// request falls through, the decoder never runs, and a button does nothing\n// with no error on either side.\n//\n// PROTOCOL.md describes what each one means. This is the same list, importable.\n\nexport const HEADER = {\n  /**\n   * Present on a request for a Flight payload rather than the document. One\n   * url serves both, which is why every answer must Vary on it.\n   */\n  rsc: 'X-RSC',\n\n  /** The layout chain the client has mounted, outermost first, comma-separated. */\n  segments: 'X-RSC-Segments',\n\n  /** The boundary the answer replaces. 0 means a whole document. */\n  segmentDepth: 'X-RSC-Segment-Depth',\n\n  /** The chain to send back next time. */\n  layouts: 'X-RSC-Layouts',\n\n  /** Identifies the build, so a client can notice it is talking to an old one. */\n  version: 'X-RSC-Version',\n\n  /** The slot an intercepted navigation is targeting. */\n  intercept: 'X-RSC-Intercept',\n\n  /** Where the navigation or action came from. */\n  referer: 'X-RSC-Referer',\n\n  /** One named region of the current page to render and return alone. */\n  revalidate: 'X-RSC-Revalidate',\n\n  /** The server reference being invoked. */\n  action: 'X-RSC-Action',\n\n  /**\n   * Go here instead.\n   *\n   * Used for a redirect the client has to perform itself: a failed action, and\n   * a navigation whose render redirected. Never a 3xx for those — `fetch`\n   * follows one transparently, so the client would get the destination's HTML\n   * where it expected a Flight payload and decode it as one.\n   */\n  redirect: 'X-RSC-Redirect',\n\n  /**\n   * The body's real type.\n   *\n   * The body itself goes out as application/octet-stream so a host that parses\n   * multipart cannot consume it before the action does — reading Content-Type\n   * instead leaves an upload undecodable.\n   */\n  contentType: 'X-RSC-Content-Type',\n\n  /**\n   * Where the browser posts server actions.\n   *\n   * Not a convention this can choose: the client runtime posts here\n   * unconditionally.\n   */\n  actionPath: '/_rsc/action',\n  /**\n   * Where the browser reads queries.\n   *\n   * A GET, and that is the whole point of it being a separate address: a POST\n   * is cacheable by nothing, so a read routed through the action endpoint can\n   * never be kept by an HTTP cache, a CDN or a service worker. Only functions\n   * declared with `query()` are reachable here — the endpoint checks the mark\n   * before invoking anything, because otherwise this address would run any\n   * registered action over GET.\n   */\n  /**\n   * Sent on every read, and required by the query endpoint.\n   *\n   * A GET with no unusual header is a simple request, so any page could\n   * trigger one with an <img> and the visitor's cookies would ride along.\n   * This header is not CORS-safelisted, so the browser preflights it — the\n   * same thing that makes a POST carrying X-RSC-Action safe.\n   */\n  query: 'X-RSC-Query',\n\n  queryPath: '/_rsc/query',\n  /** Build-time shell for a PPR route, for an edge cache to hold. */\n  pprShellPath: '/_rsc/ppr-shell',\n  /** Finish a shell an edge cache is already serving. */\n  pprResumePath: '/_rsc/ppr-resume',\n} as const\n\n/** Flight payload. */\nexport const FLIGHT_TYPE = 'text/x-component; charset=utf-8'\n\n/** A rendered document. */\nexport const HTML_TYPE = 'text/html; charset=utf-8'\n\n/**\n * Every request header that changes what a response body contains.\n *\n * One url answers with a whole document, a partial payload, a named region or\n * an interceptor depending on these — so a cache keyed on the url alone, or on\n * `X-RSC` alone, will hand one client another's answer. They are materially\n * different bodies, not variations in presentation.\n */\nexport const VARY_ON_RSC = [\n  HEADER.rsc,\n  HEADER.segments,\n  HEADER.revalidate,\n  HEADER.intercept,\n  HEADER.referer,\n].join(', ')\n\n/**\n * What a response says about being stored, when it must not be.\n *\n * `Vary` alone is not enough on the platform this targets. Cloudflare ignores\n * `Vary` for everything except `Accept-Encoding`, and this package ships a\n * Workers story as a headline feature — so one url answering with a document,\n * a Flight payload, a segment and an interceptor, keyed only on the url, hands\n * one visitor another's body. Anything narrowed by a request header, and\n * anything behind a guard, says outright that it is not to be stored.\n */\nexport const PER_CLIENT = 'private, no-store'\n\n/**\n * And what a frozen, unguarded page says.\n *\n * Explicit rather than absent: with no directive at all, whether an\n * intermediary stores it comes down to that intermediary's heuristics, which\n * is not a decision this package should be leaving to chance in either\n * direction.\n */\nexport const REVALIDATE = 'public, max-age=0, must-revalidate'\n"]}
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../src/headers.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,wEAAwE;AACxE,2EAA2E;AAC3E,gCAAgC;AAChC,EAAE;AACF,gFAAgF;AAEhF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB;;;OAGG;IACH,GAAG,EAAE,OAAO;IAEZ,iFAAiF;IACjF,QAAQ,EAAE,gBAAgB;IAE1B,kEAAkE;IAClE,YAAY,EAAE,qBAAqB;IAEnC,wCAAwC;IACxC,OAAO,EAAE,eAAe;IAExB,gFAAgF;IAChF,OAAO,EAAE,eAAe;IAExB,uDAAuD;IACvD,SAAS,EAAE,iBAAiB;IAE5B,gDAAgD;IAChD,OAAO,EAAE,eAAe;IAExB,uEAAuE;IACvE,UAAU,EAAE,kBAAkB;IAE9B,0CAA0C;IAC1C,MAAM,EAAE,cAAc;IAEtB;;;;;;;OAOG;IACH,QAAQ,EAAE,gBAAgB;IAE1B;;;;;;OAMG;IACH,WAAW,EAAE,oBAAoB;IAEjC;;;;;OAKG;IACH,UAAU,EAAE,cAAc;IAC1B;;;;;;;;;OASG;IACH;;;;;;;OAOG;IACH,KAAK,EAAE,aAAa;IAEpB,SAAS,EAAE,aAAa;IACxB,mEAAmE;IACnE,YAAY,EAAE,iBAAiB;IAC/B,uDAAuD;IACvD,aAAa,EAAE,kBAAkB;CACzB,CAAA;AAEV,sBAAsB;AACtB,MAAM,CAAC,MAAM,WAAW,GAAG,iCAAiC,CAAA;AAE5D,2BAA2B;AAC3B,MAAM,CAAC,MAAM,SAAS,GAAG,0BAA0B,CAAA;AAEnD;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,CAAC,GAAG;IACV,MAAM,CAAC,QAAQ;IACf,MAAM,CAAC,UAAU;IACjB,MAAM,CAAC,SAAS;IAChB,MAAM,CAAC,OAAO;CACf,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AAEZ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAA;AAE7C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,oCAAoC,CAAA;AAE9D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,qCAAqC,CAAA","sourcesContent":["// The wire protocol, as names rather than string literals.\n//\n// A host writing these out by hand is how they drift. Two of them are not\n// negotiable at all — the client sends them or asks for them at fixed\n// addresses, and a host that spells one differently fails silently: the\n// request falls through, the decoder never runs, and a button does nothing\n// with no error on either side.\n//\n// PROTOCOL.md describes what each one means. This is the same list, importable.\n\nexport const HEADER = {\n  /**\n   * Present on a request for a Flight payload rather than the document. One\n   * url serves both, which is why every answer must Vary on it.\n   */\n  rsc: 'X-RSC',\n\n  /** The layout chain the client has mounted, outermost first, comma-separated. */\n  segments: 'X-RSC-Segments',\n\n  /** The boundary the answer replaces. 0 means a whole document. */\n  segmentDepth: 'X-RSC-Segment-Depth',\n\n  /** The chain to send back next time. */\n  layouts: 'X-RSC-Layouts',\n\n  /** Identifies the build, so a client can notice it is talking to an old one. */\n  version: 'X-RSC-Version',\n\n  /** The slot an intercepted navigation is targeting. */\n  intercept: 'X-RSC-Intercept',\n\n  /** Where the navigation or action came from. */\n  referer: 'X-RSC-Referer',\n\n  /** One named region of the current page to render and return alone. */\n  revalidate: 'X-RSC-Revalidate',\n\n  /** The server reference being invoked. */\n  action: 'X-RSC-Action',\n\n  /**\n   * Go here instead.\n   *\n   * Used for a redirect the client has to perform itself: a failed action, and\n   * a navigation whose render redirected. Never a 3xx for those — `fetch`\n   * follows one transparently, so the client would get the destination's HTML\n   * where it expected a Flight payload and decode it as one.\n   */\n  redirect: 'X-RSC-Redirect',\n\n  /**\n   * The body's real type.\n   *\n   * The body itself goes out as application/octet-stream so a host that parses\n   * multipart cannot consume it before the action does — reading Content-Type\n   * instead leaves an upload undecodable.\n   */\n  contentType: 'X-RSC-Content-Type',\n\n  /**\n   * Where the browser posts server actions.\n   *\n   * Not a convention this can choose: the client runtime posts here\n   * unconditionally.\n   */\n  actionPath: '/_rsc/action',\n  /**\n   * Where the browser reads queries.\n   *\n   * A GET, and that is the whole point of it being a separate address: a POST\n   * is cacheable by nothing, so a read routed through the action endpoint can\n   * never be kept by an HTTP cache, a CDN or a service worker. Only functions\n   * declared with `query()` are reachable here — the endpoint checks the mark\n   * before invoking anything, because otherwise this address would run any\n   * registered action over GET.\n   */\n  /**\n   * Sent on every read, and required by the query endpoint.\n   *\n   * A GET with no unusual header is a simple request, so any page could\n   * trigger one with an <img> and the visitor's cookies would ride along.\n   * This header is not CORS-safelisted, so the browser preflights it — the\n   * same thing that makes a POST carrying X-RSC-Action safe.\n   */\n  query: 'X-RSC-Query',\n\n  queryPath: '/_rsc/query',\n  /** Build-time shell for a PPR route, for an edge cache to hold. */\n  pprShellPath: '/_rsc/ppr-shell',\n  /** Finish a shell an edge cache is already serving. */\n  pprResumePath: '/_rsc/ppr-resume',\n} as const\n\n/** Flight payload. */\nexport const FLIGHT_TYPE = 'text/x-component; charset=utf-8'\n\n/** A rendered document. */\nexport const HTML_TYPE = 'text/html; charset=utf-8'\n\n/**\n * Every request header that changes what a response body contains.\n *\n * One url answers with a whole document, a partial payload, a named region or\n * an interceptor depending on these — so a cache keyed on the url alone, or on\n * `X-RSC` alone, will hand one client another's answer. They are materially\n * different bodies, not variations in presentation.\n */\nexport const VARY_ON_RSC = [\n  HEADER.rsc,\n  HEADER.segments,\n  HEADER.revalidate,\n  HEADER.intercept,\n  HEADER.referer,\n].join(', ')\n\n/**\n * What a response says about being stored, when it must not be.\n *\n * `Vary` alone is not enough on the platform this targets. Cloudflare ignores\n * `Vary` for everything except `Accept-Encoding`, and this package ships a\n * Workers story as a headline feature — so one url answering with a document,\n * a Flight payload, a segment and an interceptor, keyed only on the url, hands\n * one visitor another's body. Anything narrowed by a request header, and\n * anything behind a guard, says outright that it is not to be stored.\n */\nexport const PER_CLIENT = 'private, no-store'\n\n/**\n * And what a frozen, unguarded page says.\n *\n * Explicit rather than absent: with no directive at all, whether an\n * intermediary stores it comes down to that intermediary's heuristics, which\n * is not a decision this package should be leaving to chance in either\n * direction.\n */\nexport const REVALIDATE = 'public, max-age=0, must-revalidate'\n\n/**\n * And what a page rendered for one request says.\n *\n * It may have read the visitor's cookies, and nothing in the headers - which\n * leave before the render has finished - can know whether it did. So a shared\n * cache may not keep it; the visitor's own browser may, and must ask again.\n */\nexport const PER_REQUEST = 'private, max-age=0, must-revalidate'\n"]}

package/dist/host.d.ts

@@ -224,4 +224,13 @@ export interface RscHostOptions {
  * the preflight.
  */
 export declare function actionOriginAllowed(request: Request, url: URL): boolean;
+/**
+ * A page's props from its url: the query, then the route's params over it.
+ *
+ * Params last, because a query string may add props and must never replace a
+ * param. It did: `?domain=acme` was [domain] - which binds only from the host
+ * the request arrived on - set by whoever wrote the link, and a page or guard
+ * that trusted it acted for a tenant the visitor was not on.
+ */
+export declare function queryAndParams(match: MatchedRoute, request: Request): Record<string, unknown>;
 export declare function createRscHandler(options: RscHostOptions): (request: Request) => Promise<Response | null>;

package/dist/host.js

@@ -40,7 +40,7 @@ export { redirect } from "./redirect.js";
 // public surface so a host imports from one place.
 /** @internal For a host adapter. An app never matches its own routes. */
 export { matchIntercept, matchRoute, sharedDepth } from "./routing.js";
-import { FLIGHT_TYPE, HEADER, HTML_TYPE, PER_CLIENT, REVALIDATE, VARY_ON_RSC, } from "./headers.js";
+import { FLIGHT_TYPE, HEADER, HTML_TYPE, PER_CLIENT, PER_REQUEST, REVALIDATE, VARY_ON_RSC, } from "./headers.js";
 import { ServerAuthenticationError, ServerAuthorizationError, } from "./js/errors.js";
 /**
  * The answer to a redirect that was decided before anything was written.
@@ -212,6 +212,8 @@ export function actionOriginAllowed(request, url) {
     }
 }
 const DEFAULT_MAX_ACTION_BODY = 8 * 1024 * 1024;
+/** A form post whose body passed the ceiling: answered 413, never rendered. */
+const TOO_LARGE = Symbol("too large");
 /**
  * The body, read whole, or null once it has passed the ceiling.
  *
@@ -284,9 +286,56 @@ const MAX_QUERY = 8_000;
  * are keyed by, and the matcher alone is told the leading part is the host's.
  */
 const hostOf = new WeakMap();
+/** The stored file a response was read from, which is what its compressed bytes are kept under. */
+const storedAs = new WeakMap();
 function matchPage(routes, url) {
     return matchRoute(routes, url.pathname, hostOf.get(url) ?? null);
 }
+/**
+ * Whether anything decides who may see a route: a `middleware.ts` of the
+ * engine's, or middleware the host runs (`export const middleware = ['auth']`).
+ *
+ * One answer for every place that asks. Several asked only about the engine's,
+ * so a route guarded in the host's vocabulary - the one a Laravel app uses -
+ * had its shell handed out by the edge endpoint, was marked public, and was
+ * kept by the service worker.
+ */
+function isGuarded(match) {
+    return (match?.route.middleware?.length ?? 0) > 0 || (match?.route.hostMiddleware?.length ?? 0) > 0;
+}
+/** What a stored file's name may end in beyond its url, which a url must not name itself. */
+const STORED_SUFFIX = /\.(?:ppr|seg\d+|redirect|postponed|ppr-meta|meta)$/;
+/**
+ * The name a url's stored files are under, or null when it may not read any.
+ *
+ * A stored page is found by name, and its guard by matching the url - so any
+ * url that NAMES another page's file without matching that page's route read
+ * it past its guard. `/admin.ppr` named the shell of the guarded `/admin`, and
+ * `/index` named the root page, skipping the root's middleware. So: only a url
+ * that matched a route reads anything, never one that spells the root's name,
+ * and never one ending in a suffix the build adds to a name.
+ */
+function storedKeyFor(pathname, match) {
+    if (!match)
+        return null;
+    const key = pathKey(pathname);
+    if (key === "index" && pathname.replace(/\//g, "") !== "")
+        return null;
+    if (STORED_SUFFIX.test(key.slice(key.lastIndexOf("/") + 1)))
+        return null;
+    return key;
+}
+/**
+ * A page's props from its url: the query, then the route's params over it.
+ *
+ * Params last, because a query string may add props and must never replace a
+ * param. It did: `?domain=acme` was [domain] - which binds only from the host
+ * the request arrived on - set by whoever wrote the link, and a page or guard
+ * that trusted it acted for a tenant the visitor was not on.
+ */
+export function queryAndParams(match, request) {
+    return { ...Object.fromEntries(new URL(request.url).searchParams), ...match.params };
+}
 export function createRscHandler(options) {
     const { engine, assets } = options;
     // The build's own id, which is also what every document says it is - the
@@ -334,7 +383,9 @@ export function createRscHandler(options) {
         const source = options.prerendered;
         if (!source)
             return false;
-        const key = pathKey(url.pathname);
+        const key = storedKeyFor(url.pathname, match);
+        if (key === null)
+            return false;
         if ((await source(`${key}.html`)) !== null)
             return false;
         if ((await source(`${key}.ppr.html`)) !== null)
@@ -430,8 +481,15 @@ export function createRscHandler(options) {
             return null;
         if (!actionOriginAllowed(request, url))
             return null;
+        // Through the same ceiling as an action. This path is reached with no
+        // guard and no session - any page url - and formData() reads whatever
+        // arrives: 50 MB posted to / was held whole while the action endpoint
+        // refused the same body with 413.
+        const body = await readBodyUpTo(request, maxActionBody);
+        if (body === null)
+            return TOO_LARGE;
         try {
-            return await request.formData();
+            return await new Response(body, { headers: { "content-type": type } }).formData();
         }
         catch {
             return null;
@@ -447,14 +505,21 @@ export function createRscHandler(options) {
      * as Flight, silently, on every stored page in production.
      */
     function storedKey(request, response) {
-        const url = new URL(request.url);
+        // The file that was served, not the url that asked for it. Keyed by url,
+        // two hosts routed to different pages - admin.example.com/ and
+        // example.com/ - shared one entry, and whichever was compressed first was
+        // what both got: the admin page, to anyone. And every distinct query was
+        // a new entry, so a thousand ?x= requests emptied the cache on demand.
+        const file = storedAs.get(response);
+        if (file === undefined)
+            return undefined;
         const varies = (response.headers.get("Vary") ?? "")
             .split(",")
             .map((name) => name.trim().toLowerCase())
             .filter((name) => name && name !== "*" && name !== "accept-encoding")
             .sort()
             .map((name) => `${name}=${request.headers.get(name) ?? ""}`);
-        return [version ?? "", url.pathname + url.search, ...varies].join("\n");
+        return [version ?? "", file, ...varies].join("\n");
     }
     return async function handle(request) {
         if (version === undefined && engine.buildId)
@@ -628,7 +693,11 @@ export function createRscHandler(options) {
         // what the guide promises for a form that had to work without
         // javascript. Same-origin, as an action is; anything else that is not
         // a read is not this host's.
-        const formPost = await formPostOf(request, url);
+        const posted = await formPostOf(request, url);
+        if (posted === TOO_LARGE) {
+            return new Response(`Form body over ${maxActionBody} bytes`, { status: 413 });
+        }
+        const formPost = posted;
         if (!formPost && request.method !== "GET" && request.method !== "HEAD")
             return null;
         // A client saying which build it runs, and it is not this one: its
@@ -674,7 +743,7 @@ export function createRscHandler(options) {
             const refusal = await refuseUnlessAllowed(request, match);
             if (refusal)
                 return refusal;
-            const frozen = await servePrerendered(request, url, options.prerendered);
+            const frozen = await servePrerendered(request, url, match, options.prerendered);
             // A whole page from a file, or a shell of one with the holes rendered
             // now: the header says which. servePrerendered marks the shell.
             if (frozen && !servedFrom.has(frozen))
@@ -757,11 +826,13 @@ export function createRscHandler(options) {
                         Vary: VARY_ON_RSC,
                         // The answer to a post is the result of something that happened
                         // once; nothing may keep it.
+                        // Rendered for this request, so it may be this visitor's: never
+                        // public. A guarded one is not kept at all.
                         "Cache-Control": formPost
                             ? "no-store"
-                            : match.route.middleware?.length
+                            : isGuarded(match)
                                 ? PER_CLIENT
-                                : REVALIDATE,
+                                : PER_REQUEST,
                     }),
                 });
             });
@@ -862,9 +933,10 @@ export function createRscHandler(options) {
             return null;
         if (request.method !== "GET" && request.method !== "HEAD")
             return null;
-        if (api.route.middleware.length > 0)
+        if (isGuarded(api))
             return null;
-        const stored = await options.prerendered(apiKey(url.pathname));
+        const storedName = apiKey(url.pathname);
+        const stored = await options.prerendered(storedName);
         if (stored === null)
             return null;
         let frozen;
@@ -891,6 +963,7 @@ export function createRscHandler(options) {
             headers: withVersion(Object.fromEntries(frozen.headers)),
         });
         servedFrom.set(answer, "stored");
+        storedAs.set(answer, storedName);
         return answer;
     }
     async function servePprShell(request, url, read) {
@@ -904,10 +977,12 @@ export function createRscHandler(options) {
         const route = matchRoute(routes, new URL(target, url.origin).pathname);
         if (!route)
             return new Response("No such page", { status: 404 });
-        if (route.route.middleware?.length) {
+        if (isGuarded(route)) {
             return new Response("This route is not edge-cacheable", { status: 404 });
         }
-        const key = pathKey(new URL(target, url.origin).pathname);
+        const key = storedKeyFor(new URL(target, url.origin).pathname, route);
+        if (key === null)
+            return new Response("No such page", { status: 404 });
         const shell = (await read(`${key}.ppr.html`)) ??
             (await read(`${patternKey(route.route)}.ppr.html`));
         if (shell === null)
@@ -960,7 +1035,9 @@ export function createRscHandler(options) {
         if (!engine.handleRscResume) {
             return new Response("This engine cannot resume", { status: 500 });
         }
-        const key = pathKey(pathname);
+        const key = storedKeyFor(pathname, route);
+        if (key === null)
+            return new Response("No such page", { status: 404 });
         const pattern = patternKey(route.route);
         let shellKey = null;
         if ((await read(`${key}.ppr.html`)) !== null)
@@ -986,8 +1063,10 @@ export function createRscHandler(options) {
             }),
         });
     }
-    async function servePrerendered(request, url, source) {
-        const key = pathKey(url.pathname);
+    async function servePrerendered(request, url, route, source) {
+        const key = storedKeyFor(url.pathname, route);
+        if (key === null)
+            return null;
         const read = async (name) => await source(name);
         // Before anything else: a route that only redirects was frozen as the
         // redirect itself, so there is no page under this url and never will be.
@@ -1001,7 +1080,6 @@ export function createRscHandler(options) {
             // pattern. Nothing in a shell varies by param, so one shell serves every
             // url its route matches — which is the only way a route whose urls were
             // never listed gets anything frozen at all.
-            const route = matchPage(routes, url);
             const whole = await read(`${key}.html`);
             // A whole page is finished. Nothing to resume, nothing to render.
             if (whole !== null) {
@@ -1009,9 +1087,10 @@ export function createRscHandler(options) {
                     headers: withVersion({
                         "Content-Type": HTML_TYPE,
                         Vary: VARY_ON_RSC,
-                        "Cache-Control": route?.route.middleware?.length
-                            ? PER_CLIENT
-                            : REVALIDATE,
+                        // A guarded page is still stored - the content is the same for
+                        // everyone allowed to see it - but it is never public: the guard
+                        // ran for this visitor, and no cache between may answer the next.
+                        "Cache-Control": isGuarded(route) ? PER_CLIENT : REVALIDATE,
                     }),
                 });
                 // Its head is in hand, so its fonts are too. Read once per file.
@@ -1021,6 +1100,7 @@ export function createRscHandler(options) {
                     hintsByKey.set(key, found);
                 }
                 hinted.set(response, found);
+                storedAs.set(response, `${key}.html`);
                 return response;
             }
             // Then a shell, under this url or under the route's pattern. Which of the
@@ -1130,9 +1210,9 @@ export function createRscHandler(options) {
                             unresumable.add(shellKey);
                             console.warn(`[rsc-kit] The stored shell for ${shellKey} cannot be finished by this server: React found different ` +
                                 "components in the slots it recorded, so its holes were left to the browser. Pages under it will be " +
-                                "rendered whole from now on. A second bundler between the build and the server is the usual cause - " +
-                                "bun build --compile merges module scopes and renames components, and a name is how a replay matches " +
-                                "a slot. Prerender and serve the same bundle, or run the built server rather than a compiled binary.");
+                                "rendered whole from now on. A replay matches a slot by component name, so something renamed a " +
+                                "component between the build and this server - a bundler run over the build's output, or code that " +
+                                "renders a different component above a <Suspense> than it did at build.");
                         }
                     }
                 },
@@ -1179,8 +1259,8 @@ export function createRscHandler(options) {
         // Marked no-store, the service worker refused to keep it, and a
         // precached page rendered offline and never hydrated - the markup was
         // there and the payload it boots from was not.
-        const guarded = matchPage(routes, url)?.route.middleware?.length ?? 0;
-        return new Response(payload, {
+        const guarded = isGuarded(route);
+        const answer = new Response(payload, {
             headers: withVersion({
                 "Content-Type": FLIGHT_TYPE,
                 [HEADER.segmentDepth]: String(variant ? shared : 0),
@@ -1189,6 +1269,8 @@ export function createRscHandler(options) {
                 "Cache-Control": guarded ? PER_CLIENT : REVALIDATE,
             }),
         });
+        storedAs.set(answer, variant ? `${key}.seg${shared}.flight` : `${key}.flight`);
+        return answer;
     }
     /**
      * The middleware of a route, or null to go ahead.
@@ -1207,9 +1289,7 @@ export function createRscHandler(options) {
         // until the build froze the page, then silently stop.
         if (!match)
             return null;
-        const guarded = (match.route.middleware?.length ?? 0) > 0 ||
-            (match.route.hostMiddleware?.length ?? 0) > 0;
-        if (!guarded)
+        if (!isGuarded(match))
             return null;
         // A route that declares middleware and an engine that cannot run it is not
         // "no middleware" — it is a check that silently does not happen. Refusing
@@ -1363,7 +1443,7 @@ export function createRscHandler(options) {
      * HTML as though it were the api's answer.
      */
     async function refuseApiUnlessAllowed(request, api) {
-        if (!(api.route.middleware?.length ?? 0))
+        if (!isGuarded(api))
             return null;
         // A route that declares middleware and an engine that cannot run it is not
         // "no middleware" — it is a check that silently does not happen.