@rsc-kit/core 0.30.3 → 0.30.5

package/dist/action.d.ts

@@ -1,5 +1,6 @@
 import { type StandardSchemaV1 } from './js/standardSchema.js';
 import { type QueryOptions } from './query.js';
+import { type Redirected } from './js/errors.js';
 /**
  * What an action answers with. One of `data`, `validationErrors`,
  * `serverError` and `redirected` is set; `refusal` only ever beside
@@ -55,6 +56,17 @@ export declare function isActionValidationError(error: unknown): error is Action
  * particular, which is where the form already looks for one.
  */
 export type FieldErrorsFor<Input> = Partial<Record<(Input extends object ? keyof Input & string : string) | '', string | string[]>>;
+/**
+ * What a handler's data is, without the redirect a generated stub's type adds.
+ *
+ * A stub is typed `Promise<T | Redirected>` for the browser, where a redirected
+ * call resolves with `{ redirected }`. Called from a handler it runs on the
+ * server, where the redirect is thrown and travels as one, so its result is
+ * only ever `T` - and `data` would say `T | Redirected`, a case the client
+ * reports beside `data` and never inside it. Only a member that is exactly
+ * `Redirected` goes: data that merely has a `redirected` field stays.
+ */
+export type Delivered<T> = T extends Redirected ? (Redirected extends T ? never : T) : T;
 /**
  * An action declining to do what it was asked, on purpose, with a message for
  * the person who asked and - optionally - data the page can act on: the
@@ -190,7 +202,7 @@ export interface ActionBuilder<Ctx extends Record<string, unknown>, Input, Raw =
      * reading `result.validationErrors` after a redirect reads undefined and
      * not a TypeError inside a transition, which unmounts the root.
      */
-    handler<Data>(fn: (args: HandlerArgs<Input, Ctx, Refusal>) => Promise<Data> | Data): Action<Raw, Data, Refusal>;
+    handler<Data>(fn: (args: HandlerArgs<Input, Ctx, Refusal>) => Promise<Data> | Data): Action<Raw, Delivered<Data>, Refusal>;
     /**
      * The body of a READ, sharing this client's middleware and schema.
      *
@@ -210,7 +222,7 @@ export interface ActionBuilder<Ctx extends Record<string, unknown>, Input, Raw =
     query<Data>(fn: (args: {
         input: Input;
         ctx: Ctx;
-    }) => Promise<Data> | Data, options?: QueryOptions): (input?: unknown) => Promise<Data>;
+    }) => Promise<Data> | Data, options?: QueryOptions): (input?: unknown) => Promise<Delivered<Data>>;
 }
 export interface ActionClientOptions {
     /**

package/dist/action.js

@@ -248,6 +248,8 @@ export function createActionClient(options = {}) {
                 return build(middlewares, schema, next);
             },
             handler(fn) {
+                // Delivered is a type-only difference from what the body returns:
+                // the value is passed through as it is.
                 return markClientBuilt(async (raw) => {
                     try {
                         return { data: (await pipeline(raw, fn)) };

package/dist/action.js.map

@@ -1 +1 @@
-{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,uCAAuC;AACvC,+EAA+E;AAC/E,uDAAuD;AACvD,+EAA+E;AAC/E,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,uDAAuD;AACvD,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AAExE,OAAO,EAAE,YAAY,EAAyB,MAAM,wBAAwB,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAqB,MAAM,YAAY,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAA;AAgCpF;;;;;;;GAOG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,uDAAuD;AACvD;;;;;;;;;;;GAWG;AACH,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAA;AAErE;;;;;;GAMG;AACH,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;AAE7D,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,EAAW;IACvC,OAAO,OAAO,EAAE,KAAK,UAAU,IAAK,EAAyC,CAAC,WAAW,CAAC,KAAK,IAAI,CAAA;AACrG,CAAC;AAED,SAAS,eAAe,CAAqB,EAAK;IAChD,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9B,MAAM,CAA0B;IAEhD,YAAY,MAAgC;QAC1C,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CACnB;QAAC,IAA2C,CAAC,eAAe,CAAC,GAAG,IAAI,CAAA;IACvE,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAiC,CAAC,eAAe,CAAC,KAAK,IAAI,CAC7D,CAAA;AACH,CAAC;AAYD,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,IAAI,CAAS;IAC7B,4GAA4G;IAC5F,aAAa,CAAQ;IAErC,YAAY,OAAe,EAAE,IAAc,EAAE,MAAM,GAAG,GAAG;QACvD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,aAAa,GAAG,MAAM,CAC1B;QAAC,IAA2C,CAAC,YAAY,CAAC,GAAG,IAAI,CAAA;IACpE,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAiC,CAAC,YAAY,CAAC,KAAK,IAAI,CAAA;AACjH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CAAC,OAAe,EAAE,IAAc,EAAE,OAAO,GAAwB,EAAE;IACvF,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;AACxD,CAAC;AAkCD;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyC;IACnE,MAAM,UAAU,GAA6B,EAAE,CAAA;IAE/C,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAA;AAC7C,CAAC;AA+GD,MAAM,OAAO,GAAG,uBAAuB,CAAA;AAEvC;;;GAGG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,KAAK,YAAY,yBAAyB,IAAI,KAAK,YAAY,wBAAwB,IAAI,gBAAgB,CAAC,KAAK,CAAC,CACnH,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,CAAC,IAAc,EAAE,MAAe,EAA2B,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AAE/G,MAAM,UAAU,kBAAkB,CAChC,OAAO,GAAwB,EAAE;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;IAEjD,SAAS,KAAK,CACZ,WAA6C,EAC7C,MAA+B,EAC/B,aAAa,GAA4B,IAAI;QAE3C;;;;;;;WAOG;QACL,MAAM,QAAQ,GAAG,KAAK,EACpB,GAAY,EACZ,EAAgD,EAC9B,EAAE;YACpB,MAAM,KAAK,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;YAEvE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;gBAEjD,IAAI,OAAO;oBAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAA;YACvD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM;gBACnB,CAAC,CAAE,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAe;gBAC9D,CAAC,CAAE,KAAe,CAAA;YAEpB,wEAAwE;YACxE,qEAAqE;YACrE,oBAAoB;YACpB,IAAI,GAAG,GAAG,EAAS,CAAA;YACnB,IAAI,KAAK,GAAG,CAAC,CAAA;YAEb,MAAM,GAAG,GAAG,KAAK,IAAsB,EAAE;gBACvC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,CAAA;gBAEvC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,MAAM,EAAE,CAAC;wBACd,KAAK,EAAE,MAAe;wBACtB,GAAG,EAAE,GAAY;wBACjB,kEAAkE;wBAClE,qDAAqD;wBACrD,WAAW,EAAE,WAAoB;wBACjC,MAAM,EAAE,MAAe;qBACxB,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,SAAS,GAAG,KAAK,CAAA;gBAErB,MAAM,MAAM,GAAG,MAAO,UAAwE,CAAC;oBAC7F,GAAG;oBACH,IAAI,EAAE,CAAC,KAAK,EAAE,IAAwC,EAAE,EAAE;wBACxD,SAAS,GAAG,IAAI,CAAA;wBAChB,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,EAAS,CAAA;wBAE7C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,CAAA;oBACpC,CAAC,CAAU;iBACZ,CAAC,CAAA;gBAEF,sEAAsE;gBACtE,8DAA8D;gBAC9D,uDAAuD;gBACvD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,IAAI,YAAY,CACpB,wFAAwF,CACzF,CAAA;gBACH,CAAC;gBAED,OAAQ,MAA8B,EAAE,KAAK,CAAA;YAC/C,CAAC,CAAA;YAED,OAAO,MAAM,GAAG,EAAE,CAAA;QACpB,CAAC,CAAA;QAED;;;;;;WAMG;QACH,MAAM,aAAa,GAAG,KAAK,EAAE,KAAoB,EAAiD,EAAE;YAClG,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;YAEnE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,CACX,4HAA4H,KAAK,CAAC,OAAO,EAAE,CAC5I,CAAA;gBAED,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;YACvC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAErE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,IAAI,KAAK,CACd,qEAAqE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/H,CAAA;YACH,CAAC;YAED,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;QAC/D,CAAC,CAAA;QAED,OAAO;YACL,GAAG,CAAC,UAAU;gBACZ,OAAO,KAAK,CAAC,CAAC,GAAG,WAAW,EAAE,UAAmB,CAAC,EAAE,MAAM,EAAE,aAAa,CAAU,CAAA;YACrF,CAAC;YACD,KAAK,CAAC,IAAI;gBACR,OAAO,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,CAAU,CAAA;YACzD,CAAC;YACD,OAAO,CAAC,IAAI;gBACV,OAAO,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAU,CAAA;YAClD,CAAC;YACD,OAAO,CAAC,EAAE;gBACR,OAAO,eAAe,CAAC,KAAK,EAAE,GAAa,EAAE,EAAE;oBAC7C,IAAI,CAAC;wBACH,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAmC,EAAE,CAAA;oBAC9E,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,gDAAgD;wBAChD,IAAI,KAAK,YAAY,YAAY;4BAAE,MAAM,KAAK,CAAA;wBAE9C,+DAA+D;wBAC/D,kEAAkE;wBAClE,8DAA8D;wBAC9D,iDAAiD;wBACjD,IAAI,gBAAgB,CAAC,KAAK,CAAC;4BAAE,MAAM,KAAK,CAAA;wBAExC,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;4BACnC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;wBAC3C,CAAC;wBAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;4BAC3B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;4BAE1C,OAAO,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAwB,CAAA;wBACvG,CAAC;wBAED,mEAAmE;wBACnE,kEAAkE;wBAClE,+DAA+D;wBAC/D,4DAA4D;wBAC5D,IAAI,UAAU,CAAC,KAAK,CAAC;4BAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;wBAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;oBACvC,CAAC;gBACH,CAAC,CAAC,CAAA;YACJ,CAAC;YACD,KAAK,CAAC,EAAE,EAAE,OAAO;gBACf,MAAM,IAAI,GAAG,KAAK,EAAE,GAAa,EAAE,EAAE;oBACnC,IAAI,CAAC;wBACH,OAAO,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;oBAChC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,KAAK,YAAY,YAAY;4BAAE,MAAM,KAAK,CAAA;wBAC9C,IAAI,gBAAgB,CAAC,KAAK,CAAC;4BAAE,MAAM,KAAK,CAAA;wBAExC,kEAAkE;wBAClE,mEAAmE;wBACnE,qEAAqE;wBACrE,IAAI,UAAU,CAAC,KAAK,CAAC;4BAAE,MAAM,KAAK,CAAA;wBAElC,2DAA2D;wBAC3D,kEAAkE;wBAClE,sDAAsD;wBACtD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;4BACnC,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;wBAC9C,CAAC;wBAED,8DAA8D;wBAC9D,yCAAyC;wBACzC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;4BAC3B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;4BAE1C,IAAI,OAAO,YAAY,KAAK;gCAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;4BAE9D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;gCAClD,OAAO,EAAE,OAAO,CAAC,OAAO;gCACxB,aAAa,EAAE,KAAK,CAAC,aAAa;6BACnC,CAAC,CAAA;wBACJ,CAAC;wBAED,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;oBAChC,CAAC;gBACH,CAAC,CAAA;gBAED,OAAO,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAwC,CAAA;YACzF,CAAC;SACF,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;AACxB,CAAC","sourcesContent":["// Server actions with a schema, middleware, and types that follow from both.\n//\n//     export const action = createActionClient({ onError: report })\n//\n//     export const createPost = action\n//       .use(async ({ next }) => next({ ctx: { user: await currentUser() } }))\n//       .input(z.object({ title: z.string().min(3) }))\n//       .handler(async ({ input, ctx }) => savePost(ctx.user.id, input.title))\n//\n// `input` is typed from the schema and `ctx` from every middleware that ran, so\n// the handler is checked against both without either being written down twice.\n//\n// The built action RETURNS its failures rather than throwing them, and that is\n// not a style choice. React serialises a rejected server action opaquely —\n// production strips the message and leaves a digest — so a thrown validation\n// error reaches the browser as \"an error occurred\" and the fields it named are\n// gone. A returned object crosses the boundary intact.\n//\n// Distinct from `middleware.ts` in a route directory, which decides whether a\n// page may render. This wraps one action. They are different questions: an\n// action is reachable without any page, which is why it defends itself.\n\nimport { validateWith, type StandardSchemaV1 } from './js/standardSchema.js'\nimport { decodeFormData } from './js/formEncoding.js'\nimport { markQuery, QueryValidationError, type QueryOptions } from './query.js'\nimport { isRedirectSignal } from './redirectDigest.js'\nimport { isNotFoundSignal } from './notFound.js'\nimport { ServerAuthenticationError, ServerAuthorizationError } from './js/errors.js'\n\n/**\n * What an action answers with. One of `data`, `validationErrors`,\n * `serverError` and `redirected` is set; `refusal` only ever beside\n * `serverError`.\n */\nexport interface ActionResult<Data, Refusal = never> {\n  /** What the handler returned. */\n  data?: Data\n  /** Field name to messages, in the shape a form already renders. */\n  validationErrors?: Record<string, string[]>\n  /**\n   * The action did not happen, as a message the browser may see: a refusal's\n   * own message - see `refuse()` - or something unexpected, reduced by\n   * `onError` to one that says nothing a stranger should not see.\n   */\n  serverError?: string\n  /**\n   * What a refusal said beside its message - the things blocking a delete,\n   * say - checked against the schema the action declared with `.refusal()`\n   * and typed from it. Set only by `refuse()`, here or on the backend.\n   */\n  refusal?: Refusal\n  /**\n   * Where the action sent the visitor. Set by the client, which has already\n   * started the navigation: the page is on its way there, and there is\n   * nothing for the caller to do. Never set on the server side of the call.\n   */\n  redirected?: string\n}\n\n/**\n * A middleware that neither continued nor refused.\n *\n * Never reported through `onError`: that reduces an error to a message for the\n * browser, and this one is for whoever wrote the middleware. A check that\n * forgot to call `next()` would otherwise look exactly like a check that\n * passed.\n */\nexport class ActionMisuse extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'ActionMisuse'\n  }\n}\n\n/** Refuse from inside a handler, naming the fields. */\n/**\n * Marks a refusal so it survives a bundle seam.\n *\n * A property rather than `instanceof`, for the reason this project keeps\n * running into: an app's actions are bundled separately from the engine, so\n * each gets its own copy of this module and its own copy of the class.\n * `instanceof` compares identity across that seam and is simply false — and\n * the refusal is then reported as a server error, so the form shows \"Something\n * went wrong\" instead of naming the fields. Everything works; nothing logs.\n *\n * Symbol.for, so the two copies agree on the key as well as the value.\n */\nconst VALIDATION_MARK = Symbol.for('@rsc-kit/core.action-validation')\n\n/**\n * Set on every function a client builds, so the build can tell them from a\n * bare \"use server\" export. The difference is the middleware: a bare export\n * runs with nothing checking who called it, and nothing else in the app\n * would ever say so. Symbol.for, because the build reads the mark from the\n * bundled copy of this module and the app's actions were built by another.\n */\nconst CLIENT_MARK = Symbol.for('@rsc-kit/core.action-client')\n\n/** Whether a server action was built by createActionClient, and so ran its chain. */\nexport function isClientBuilt(fn: unknown): boolean {\n  return typeof fn === 'function' && (fn as unknown as Record<symbol, unknown>)[CLIENT_MARK] === true\n}\n\nfunction markClientBuilt<F extends Function>(fn: F): F {\n  Object.defineProperty(fn, CLIENT_MARK, { value: true })\n\n  return fn\n}\n\nexport class ActionValidationError extends Error {\n  public readonly errors: Record<string, string[]>\n\n  constructor(errors: Record<string, string[]>) {\n    super('Validation failed')\n    this.name = 'ActionValidationError'\n    this.errors = errors\n    ;(this as unknown as Record<symbol, boolean>)[VALIDATION_MARK] = true\n  }\n}\n\n/** Whether this is a refusal, whichever copy of the class built it. */\nexport function isActionValidationError(error: unknown): error is ActionValidationError {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    (error as Record<symbol, unknown>)[VALIDATION_MARK] === true\n  )\n}\n\n/**\n * The field errors a handler may report, keyed by its own input's fields.\n *\n * `''` is the whole submission — for a refusal that is about no field in\n * particular, which is where the form already looks for one.\n */\nexport type FieldErrorsFor<Input> = Partial<\n  Record<(Input extends object ? keyof Input & string : string) | '', string | string[]>\n>\n\nconst REFUSAL_MARK = Symbol.for('@rsc-kit/core.action-refusal')\n\n/**\n * An action declining to do what it was asked, on purpose, with a message for\n * the person who asked and - optionally - data the page can act on: the\n * records blocking a delete, the plan a quota belongs to.\n *\n * Not a validation error: the input was fine, the state of things says no.\n * And not a failure: its message is meant to be seen, so it is never\n * replaced by `onError`'s \"Something went wrong.\". It arrives as the result's\n * `serverError`, which is where a form's `formError` already reads, and its\n * data as `refusal`.\n */\nexport class ActionRefusal extends Error {\n  public readonly data: unknown\n  /** The status a request that is not an action - a page, a form posted without javascript - answers with. */\n  public readonly refusalStatus: number\n\n  constructor(message: string, data?: unknown, status = 409) {\n    super(message)\n    this.name = 'ActionRefusal'\n    this.data = data\n    this.refusalStatus = status\n    ;(this as unknown as Record<symbol, boolean>)[REFUSAL_MARK] = true\n  }\n}\n\n/** Whether this is a refusal, whichever copy of the class built it. */\nexport function isActionRefusal(error: unknown): error is ActionRefusal {\n  return typeof error === 'object' && error !== null && (error as Record<symbol, unknown>)[REFUSAL_MARK] === true\n}\n\n/**\n * Decline, with a message to show and optional data to act on. Throws.\n *\n *     if (attached.length) refuse('Still in use', { blockers: attached })\n *\n * From a handler, a middleware or anything they call. The data reaches the\n * page only when the action declares its shape with `.refusal(schema)`, and\n * only once it matches - see ActionResult.refusal. Inside a handler, the\n * `refuse` it is given is typed to that schema; this one takes anything.\n */\nexport function refuse(message: string, data?: unknown, options: { status?: number } = {}): never {\n  throw new ActionRefusal(message, data, options.status)\n}\n\n/**\n * What a handler is given.\n *\n * `fieldErrors` is here as well as exported on its own, and the one here is\n * the one to use: it is typed to this handler's input, so a field the schema\n * does not have is a type error rather than an error the form never shows.\n * The bare export takes any string, for the rare check that runs outside a\n * handler.\n */\nexport interface HandlerArgs<Input, Ctx, Refusal = never> {\n  input: Input\n  ctx: Ctx\n  /**\n   * Decline, with a message and the data the action declared with\n   * `.refusal(schema)`. Throws; write `return refuse(...)`, as with\n   * fieldErrors.\n   */\n  refuse: [Refusal] extends [never]\n    ? (message: string) => never\n    : (message: string, data: Refusal, options?: { status?: number }) => never\n  /**\n   * Fail with errors on this input's fields. Throws; nothing after it runs.\n   *\n   * Write `return fieldErrors(...)`. It throws either way, but TypeScript does\n   * not treat a never-return as terminating when the callee is a destructured\n   * binding — only a declaration or an explicitly annotated variable — so\n   * without the return, a value checked on the line above is still possibly\n   * undefined on the line below. The return is what lets the type narrow.\n   */\n  fieldErrors: (errors: FieldErrorsFor<Input>) => never\n}\n\n/**\n * Fail with field errors the form can show.\n *\n * For what a schema cannot know — a name already taken, a balance too low.\n * Throws, so the handler stops where it is; the action turns it into a\n * returned result on the way out.\n *\n * Untyped by field, because it has no handler to take the input from. Inside\n * one, use the `fieldErrors` the handler is given instead.\n */\nexport function fieldErrors(errors: Record<string, string[] | string>): never {\n  const normalised: Record<string, string[]> = {}\n\n  for (const [field, message] of Object.entries(errors)) {\n    normalised[field] = Array.isArray(message) ? message : [message]\n  }\n\n  throw new ActionValidationError(normalised)\n}\n\n/**\n * What `next()` hands back, carrying what the step added.\n *\n * The context a middleware contributes cannot be inferred from the arguments\n * it passes to `next` — TypeScript infers from a function's return, not from a\n * call inside it. So `next` returns this, the middleware returns it, and the\n * addition is read off the middleware's own return type.\n */\nexport interface MiddlewareResult<Extra> {\n  readonly ctx: Extra\n  readonly value: unknown\n}\n\n/**\n * A step that runs before the handler.\n *\n * It calls `next` to continue, optionally adding to the context, and what it\n * adds shows up in the handler's types. Returning without calling `next` — or\n * throwing — stops the action, which is how a check refuses.\n */\nexport type ActionMiddleware<Ctx, Extra extends Record<string, unknown>> = (args: {\n  ctx: Ctx\n  next: <E extends Record<string, unknown> = Record<string, never>>(\n    opts?: { ctx?: E },\n  ) => Promise<MiddlewareResult<E>>\n}) => Promise<MiddlewareResult<Extra>>\n\ntype Output<S> = S extends StandardSchemaV1<unknown, infer O> ? O : never\n\n/** What a caller may pass, before the schema parses it. */\ntype InputOf<S> = S extends StandardSchemaV1<infer I, unknown> ? I : unknown\n\n/**\n * A built action, as its callers see it.\n *\n * Typed from the schema's input when there is one, so a call with the wrong\n * shape fails the typecheck rather than the validation - and FormData beside\n * it, which is how a form calls the same action. Without a schema, anything.\n */\nexport type Action<Raw, Data, Refusal = never> = unknown extends Raw\n  ? (input?: unknown) => Promise<ActionResult<Data, Refusal>>\n  : undefined extends Raw\n    ? (input?: Raw | FormData) => Promise<ActionResult<Data, Refusal>>\n    : (input: Raw | FormData) => Promise<ActionResult<Data, Refusal>>\n\nexport interface ActionBuilder<Ctx extends Record<string, unknown>, Input, Raw = unknown, Refusal = never> {\n  /** Add a step, and whatever context it contributes. */\n  use<Extra extends Record<string, unknown> = Record<string, never>>(\n    middleware: (args: {\n      ctx: Ctx\n      next: <E extends Record<string, unknown> = Record<string, never>>(\n        opts?: { ctx?: E },\n      ) => Promise<MiddlewareResult<E>>\n    }) => Promise<MiddlewareResult<Extra>>,\n  ): ActionBuilder<Ctx & Extra, Input, Raw, Refusal>\n  /** Parse and check what the caller sent. The handler's `input` follows. */\n  input<S extends StandardSchemaV1>(schema: S): ActionBuilder<Ctx, Output<S>, InputOf<S>, Refusal>\n  /**\n   * The shape of what a refusal may carry - see `refuse()`. The page gets\n   * `result.refusal` typed from it, and only data that matches it: data that\n   * does not is a bug in the server, answered as one.\n   */\n  refusal<S extends StandardSchemaV1>(schema: S): ActionBuilder<Ctx, Input, Raw, Output<S>>\n  /**\n   * The body.\n   *\n   * What the caller gets is always the result object: `data`, or a\n   * refusal, or - when the action redirected - `redirected`, set by the\n   * client once the navigation is under way. Always an object, so a caller\n   * reading `result.validationErrors` after a redirect reads undefined and\n   * not a TypeError inside a transition, which unmounts the root.\n   */\n  handler<Data>(\n    fn: (args: HandlerArgs<Input, Ctx, Refusal>) => Promise<Data> | Data,\n  ): Action<Raw, Data, Refusal>\n  /**\n   * The body of a READ, sharing this client's middleware and schema.\n   *\n   *     export const getPosts = client.input(filter).query(async ({ input, ctx }) =>\n   *       db.posts(ctx.user.id, input))\n   *\n   * The same builder as `handler`, and deliberately so: an app configures its\n   * auth check and its error reporting once, and both a mutation and a read go\n   * through them.\n   *\n   * It fails differently, though, and that is not an oversight. An action\n   * RETURNS its failures because React serialises a rejection opaquely. A query\n   * is handed to a cache library as a fetcher, and every one of them reports\n   * failure by rejection — so this returns the data directly and throws, and\n   * the endpoint carries the message across for it.\n   */\n  query<Data>(\n    fn: (args: { input: Input; ctx: Ctx }) => Promise<Data> | Data,\n    options?: QueryOptions,\n  ): (input?: unknown) => Promise<Data>\n}\n\nexport interface ActionClientOptions {\n  /**\n   * What the browser is told when something unexpected throws.\n   *\n   * Everything reaching here is a bug or an outage, and its message may say\n   * more than a stranger should see — a query, a path, a host. Returning a\n   * fixed string is the safe default; return the message only for errors you\n   * raised deliberately.\n   */\n  onError?: (error: unknown) => string\n}\n\nconst GENERIC = 'Something went wrong.'\n\n/**\n * Whether the backend turned this caller away: not signed in, not allowed, or\n * nothing there for them. Each carries a message written for the person.\n */\nfunction turnedAway(error: unknown): error is Error {\n  return (\n    error instanceof ServerAuthenticationError || error instanceof ServerAuthorizationError || isNotFoundSignal(error)\n  )\n}\n\n/**\n * FormData in, a plain object out — what a schema expects to be handed.\n *\n * The form's own decoder, so the object validated here is the object the\n * browser validated. This had a flat decoder of its own: `items[0].name`\n * stayed a key spelled exactly that, `<Form>` had already parsed it into an\n * array, and a nested form passed in the browser and failed on the server\n * with the fields it named gone.\n */\nconst fromFormData = (body: FormData, schema: unknown): Record<string, unknown> => decodeFormData(body, schema)\n\nexport function createActionClient(\n  options: ActionClientOptions = {},\n): ActionBuilder<Record<never, never>, undefined> {\n  const report = options.onError ?? (() => GENERIC)\n\n  function build<Ctx extends Record<string, unknown>, Input>(\n    middlewares: ActionMiddleware<never, never>[],\n    schema: StandardSchemaV1 | null,\n    refusalSchema: StandardSchemaV1 | null = null,\n  ): ActionBuilder<Ctx, Input> {\n      /**\n       * Validate, run the chain, call the body.\n       *\n       * Shared by both terminals, which is the point of putting a read on this\n       * builder at all: one set of middleware, one schema, one place the auth\n       * check lives. Refusals leave by throwing, and each terminal decides what\n       * that should look like from the outside.\n       */\n    const pipeline = async (\n      raw: unknown,\n      fn: (args: HandlerArgs<never, never>) => unknown,\n    ): Promise<unknown> => {\n      const value = raw instanceof FormData ? fromFormData(raw, schema) : raw\n\n      if (schema) {\n        const invalid = await validateWith(schema, value)\n\n        if (invalid) throw new ActionValidationError(invalid)\n      }\n\n      const parsed = schema\n        ? ((await schema['~standard'].validate(value)).value as Input)\n        : (value as Input)\n\n      // Composed inside-out so the first `use` is the outermost — it sees the\n      // others run, which is what makes timing and cleanup possible rather\n      // than only checks.\n      let ctx = {} as Ctx\n      let index = 0\n\n      const run = async (): Promise<unknown> => {\n        const middleware = middlewares[index++]\n\n        if (!middleware) {\n          return await fn({\n            input: parsed as never,\n            ctx: ctx as never,\n            // The same function as the export; the type on the way in is what\n            // is different, and the type is the handler's input.\n            fieldErrors: fieldErrors as never,\n            refuse: refuse as never,\n          })\n        }\n\n        let continued = false\n\n        const result = await (middleware as unknown as ActionMiddleware<Ctx, Record<string, unknown>>)({\n          ctx,\n          next: (async (opts?: { ctx?: Record<string, unknown> }) => {\n            continued = true\n            ctx = { ...ctx, ...(opts?.ctx ?? {}) } as Ctx\n\n            return { ctx, value: await run() }\n          }) as never,\n        })\n\n        // Silence is not refusal. A middleware that neither called next() nor\n        // threw has done nothing, and guessing which it meant turns a\n        // forgotten `return` into a check that quietly passes.\n        if (!continued) {\n          throw new ActionMisuse(\n            'A middleware returned without calling next(). Call it to continue, or throw to refuse.',\n          )\n        }\n\n        return (result as { value?: unknown })?.value\n      }\n\n      return await run()\n    }\n\n    /**\n     * A refusal as the page gets it: its message, always - it was written to\n     * be seen - and its data only once the declared schema has checked it.\n     * Data with no schema to check it, or that fails the schema, never\n     * reaches the browser: the first is said in the server's log, the second\n     * is a bug in the server, returned as the error each terminal reports.\n     */\n    const refusalResult = async (error: ActionRefusal): Promise<ActionResult<never, unknown> | Error> => {\n      if (error.data === undefined) return { serverError: error.message }\n\n      if (!refusalSchema) {\n        console.error(\n          `[rsc-kit] An action refused with data, and declares no .refusal(schema) for it - the message was sent, the data was not: ${error.message}`,\n        )\n\n        return { serverError: error.message }\n      }\n\n      const checked = await refusalSchema['~standard'].validate(error.data)\n\n      if (checked.issues) {\n        return new Error(\n          `An action refused with data its .refusal(schema) does not accept: ${checked.issues.map((issue) => issue.message).join('; ')}`,\n        )\n      }\n\n      return { serverError: error.message, refusal: checked.value }\n    }\n\n    return {\n      use(middleware) {\n        return build([...middlewares, middleware as never], schema, refusalSchema) as never\n      },\n      input(next) {\n        return build(middlewares, next, refusalSchema) as never\n      },\n      refusal(next) {\n        return build(middlewares, schema, next) as never\n      },\n      handler(fn) {\n        return markClientBuilt(async (raw?: unknown) => {\n          try {\n            return { data: (await pipeline(raw, fn)) as Awaited<ReturnType<typeof fn>> }\n          } catch (error) {\n            // Past onError deliberately — see ActionMisuse.\n            if (error instanceof ActionMisuse) throw error\n\n            // A redirect is an instruction, not a failure: it has to reach\n            // the host, which answers the action with the destination. Caught\n            // here it became { serverError: 'Something went wrong.' } - a\n            // login that succeeded and then showed an error.\n            if (isRedirectSignal(error)) throw error\n\n            if (isActionValidationError(error)) {\n              return { validationErrors: error.errors }\n            }\n\n            if (isActionRefusal(error)) {\n              const refused = await refusalResult(error)\n\n              return (refused instanceof Error ? { serverError: report(refused) } : refused) as ActionResult<never>\n            }\n\n            // Turned away by the backend - not signed in, not allowed, no such\n            // record - is an answer too, and its message is meant to be seen.\n            // Not rethrown as a redirect is: the action endpoint answers a\n            // throw with a 500, and the form would show nothing at all.\n            if (turnedAway(error)) return { serverError: error.message }\n\n            return { serverError: report(error) }\n          }\n        })\n      },\n      query(fn, options) {\n        const read = async (raw?: unknown) => {\n          try {\n            return await pipeline(raw, fn)\n          } catch (error) {\n            if (error instanceof ActionMisuse) throw error\n            if (isRedirectSignal(error)) throw error\n\n            // Left as they are, as a redirect is. A page that reads through a\n            // query answers 401, 403 or its not-found page, as it does calling\n            // the backend directly; the read endpoint answers the same statuses.\n            if (turnedAway(error)) throw error\n\n            // Thrown, not returned. A cache library reports failure by\n            // rejection, so a query that answered with an error-shaped object\n            // would look like a successful read of something odd.\n            if (isActionValidationError(error)) {\n              throw new QueryValidationError(error.errors)\n            }\n\n            // Its own message, as an action's is, and its checked data on\n            // the error for a fetcher that wants it.\n            if (isActionRefusal(error)) {\n              const refused = await refusalResult(error)\n\n              if (refused instanceof Error) throw new Error(report(refused))\n\n              throw Object.assign(new Error(refused.serverError), {\n                refusal: refused.refusal,\n                refusalStatus: error.refusalStatus,\n              })\n            }\n\n            throw new Error(report(error))\n          }\n        }\n\n        return markClientBuilt(markQuery(read, options)) as (input?: unknown) => Promise<never>\n      },\n    }\n  }\n\n  return build([], null)\n}\n"]}
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../src/action.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,uCAAuC;AACvC,+EAA+E;AAC/E,uDAAuD;AACvD,+EAA+E;AAC/E,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,uDAAuD;AACvD,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AAExE,OAAO,EAAE,YAAY,EAAyB,MAAM,wBAAwB,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAqB,MAAM,YAAY,CAAA;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAmB,MAAM,gBAAgB,CAAA;AAgCrG;;;;;;;GAOG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAED,uDAAuD;AACvD;;;;;;;;;;;GAWG;AACH,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAA;AAErE;;;;;;GAMG;AACH,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAA;AAE7D,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,EAAW;IACvC,OAAO,OAAO,EAAE,KAAK,UAAU,IAAK,EAAyC,CAAC,WAAW,CAAC,KAAK,IAAI,CAAA;AACrG,CAAC;AAED,SAAS,eAAe,CAAqB,EAAK;IAChD,MAAM,CAAC,cAAc,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAEvD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9B,MAAM,CAA0B;IAEhD,YAAY,MAAgC;QAC1C,KAAK,CAAC,mBAAmB,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CACnB;QAAC,IAA2C,CAAC,eAAe,CAAC,GAAG,IAAI,CAAA;IACvE,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAAiC,CAAC,eAAe,CAAC,KAAK,IAAI,CAC7D,CAAA;AACH,CAAC;AAYD,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;AAc/D;;;;;;;;;;GAUG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtB,IAAI,CAAS;IAC7B,4GAA4G;IAC5F,aAAa,CAAQ;IAErC,YAAY,OAAe,EAAE,IAAc,EAAE,MAAM,GAAG,GAAG;QACvD,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,aAAa,GAAG,MAAM,CAC1B;QAAC,IAA2C,CAAC,YAAY,CAAC,GAAG,IAAI,CAAA;IACpE,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAAiC,CAAC,YAAY,CAAC,KAAK,IAAI,CAAA;AACjH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CAAC,OAAe,EAAE,IAAc,EAAE,OAAO,GAAwB,EAAE;IACvF,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;AACxD,CAAC;AAkCD;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,MAAyC;IACnE,MAAM,UAAU,GAA6B,EAAE,CAAA;IAE/C,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAClE,CAAC;IAED,MAAM,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAA;AAC7C,CAAC;AA+GD,MAAM,OAAO,GAAG,uBAAuB,CAAA;AAEvC;;;GAGG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,CACL,KAAK,YAAY,yBAAyB,IAAI,KAAK,YAAY,wBAAwB,IAAI,gBAAgB,CAAC,KAAK,CAAC,CACnH,CAAA;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,YAAY,GAAG,CAAC,IAAc,EAAE,MAAe,EAA2B,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AAE/G,MAAM,UAAU,kBAAkB,CAChC,OAAO,GAAwB,EAAE;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAA;IAEjD,SAAS,KAAK,CACZ,WAA6C,EAC7C,MAA+B,EAC/B,aAAa,GAA4B,IAAI;QAE3C;;;;;;;WAOG;QACL,MAAM,QAAQ,GAAG,KAAK,EACpB,GAAY,EACZ,EAAgD,EAC9B,EAAE;YACpB,MAAM,KAAK,GAAG,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;YAEvE,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;gBAEjD,IAAI,OAAO;oBAAE,MAAM,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAA;YACvD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM;gBACnB,CAAC,CAAE,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAe;gBAC9D,CAAC,CAAE,KAAe,CAAA;YAEpB,wEAAwE;YACxE,qEAAqE;YACrE,oBAAoB;YACpB,IAAI,GAAG,GAAG,EAAS,CAAA;YACnB,IAAI,KAAK,GAAG,CAAC,CAAA;YAEb,MAAM,GAAG,GAAG,KAAK,IAAsB,EAAE;gBACvC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,CAAA;gBAEvC,IAAI,CAAC,UAAU,EAAE,CAAC;oBAChB,OAAO,MAAM,EAAE,CAAC;wBACd,KAAK,EAAE,MAAe;wBACtB,GAAG,EAAE,GAAY;wBACjB,kEAAkE;wBAClE,qDAAqD;wBACrD,WAAW,EAAE,WAAoB;wBACjC,MAAM,EAAE,MAAe;qBACxB,CAAC,CAAA;gBACJ,CAAC;gBAED,IAAI,SAAS,GAAG,KAAK,CAAA;gBAErB,MAAM,MAAM,GAAG,MAAO,UAAwE,CAAC;oBAC7F,GAAG;oBACH,IAAI,EAAE,CAAC,KAAK,EAAE,IAAwC,EAAE,EAAE;wBACxD,SAAS,GAAG,IAAI,CAAA;wBAChB,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC,EAAS,CAAA;wBAE7C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,CAAA;oBACpC,CAAC,CAAU;iBACZ,CAAC,CAAA;gBAEF,sEAAsE;gBACtE,8DAA8D;gBAC9D,uDAAuD;gBACvD,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,IAAI,YAAY,CACpB,wFAAwF,CACzF,CAAA;gBACH,CAAC;gBAED,OAAQ,MAA8B,EAAE,KAAK,CAAA;YAC/C,CAAC,CAAA;YAED,OAAO,MAAM,GAAG,EAAE,CAAA;QACpB,CAAC,CAAA;QAED;;;;;;WAMG;QACH,MAAM,aAAa,GAAG,KAAK,EAAE,KAAoB,EAAiD,EAAE;YAClG,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;YAEnE,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,CAAC,KAAK,CACX,4HAA4H,KAAK,CAAC,OAAO,EAAE,CAC5I,CAAA;gBAED,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;YACvC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAErE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,OAAO,IAAI,KAAK,CACd,qEAAqE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC/H,CAAA;YACH,CAAC;YAED,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;QAC/D,CAAC,CAAA;QAED,OAAO;YACL,GAAG,CAAC,UAAU;gBACZ,OAAO,KAAK,CAAC,CAAC,GAAG,WAAW,EAAE,UAAmB,CAAC,EAAE,MAAM,EAAE,aAAa,CAAU,CAAA;YACrF,CAAC;YACD,KAAK,CAAC,IAAI;gBACR,OAAO,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,aAAa,CAAU,CAAA;YACzD,CAAC;YACD,OAAO,CAAC,IAAI;gBACV,OAAO,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAU,CAAA;YAClD,CAAC;YACD,OAAO,CAAC,EAAE;gBACR,kEAAkE;gBAClE,wCAAwC;gBACxC,OAAO,eAAe,CAAC,KAAK,EAAE,GAAa,EAAE,EAAE;oBAC7C,IAAI,CAAC;wBACH,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAmC,EAAE,CAAA;oBAC9E,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,gDAAgD;wBAChD,IAAI,KAAK,YAAY,YAAY;4BAAE,MAAM,KAAK,CAAA;wBAE9C,+DAA+D;wBAC/D,kEAAkE;wBAClE,8DAA8D;wBAC9D,iDAAiD;wBACjD,IAAI,gBAAgB,CAAC,KAAK,CAAC;4BAAE,MAAM,KAAK,CAAA;wBAExC,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;4BACnC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAA;wBAC3C,CAAC;wBAED,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;4BAC3B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;4BAE1C,OAAO,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAwB,CAAA;wBACvG,CAAC;wBAED,mEAAmE;wBACnE,kEAAkE;wBAClE,+DAA+D;wBAC/D,4DAA4D;wBAC5D,IAAI,UAAU,CAAC,KAAK,CAAC;4BAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAA;wBAE5D,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;oBACvC,CAAC;gBACH,CAAC,CAAU,CAAA;YACb,CAAC;YACD,KAAK,CAAC,EAAE,EAAE,OAAO;gBACf,MAAM,IAAI,GAAG,KAAK,EAAE,GAAa,EAAE,EAAE;oBACnC,IAAI,CAAC;wBACH,OAAO,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;oBAChC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,KAAK,YAAY,YAAY;4BAAE,MAAM,KAAK,CAAA;wBAC9C,IAAI,gBAAgB,CAAC,KAAK,CAAC;4BAAE,MAAM,KAAK,CAAA;wBAExC,kEAAkE;wBAClE,mEAAmE;wBACnE,qEAAqE;wBACrE,IAAI,UAAU,CAAC,KAAK,CAAC;4BAAE,MAAM,KAAK,CAAA;wBAElC,2DAA2D;wBAC3D,kEAAkE;wBAClE,sDAAsD;wBACtD,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;4BACnC,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;wBAC9C,CAAC;wBAED,8DAA8D;wBAC9D,yCAAyC;wBACzC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;4BAC3B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAA;4BAE1C,IAAI,OAAO,YAAY,KAAK;gCAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;4BAE9D,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE;gCAClD,OAAO,EAAE,OAAO,CAAC,OAAO;gCACxB,aAAa,EAAE,KAAK,CAAC,aAAa;6BACnC,CAAC,CAAA;wBACJ,CAAC;wBAED,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;oBAChC,CAAC;gBACH,CAAC,CAAA;gBAED,OAAO,eAAe,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAwC,CAAA;YACzF,CAAC;SACF,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;AACxB,CAAC","sourcesContent":["// Server actions with a schema, middleware, and types that follow from both.\n//\n//     export const action = createActionClient({ onError: report })\n//\n//     export const createPost = action\n//       .use(async ({ next }) => next({ ctx: { user: await currentUser() } }))\n//       .input(z.object({ title: z.string().min(3) }))\n//       .handler(async ({ input, ctx }) => savePost(ctx.user.id, input.title))\n//\n// `input` is typed from the schema and `ctx` from every middleware that ran, so\n// the handler is checked against both without either being written down twice.\n//\n// The built action RETURNS its failures rather than throwing them, and that is\n// not a style choice. React serialises a rejected server action opaquely —\n// production strips the message and leaves a digest — so a thrown validation\n// error reaches the browser as \"an error occurred\" and the fields it named are\n// gone. A returned object crosses the boundary intact.\n//\n// Distinct from `middleware.ts` in a route directory, which decides whether a\n// page may render. This wraps one action. They are different questions: an\n// action is reachable without any page, which is why it defends itself.\n\nimport { validateWith, type StandardSchemaV1 } from './js/standardSchema.js'\nimport { decodeFormData } from './js/formEncoding.js'\nimport { markQuery, QueryValidationError, type QueryOptions } from './query.js'\nimport { isRedirectSignal } from './redirectDigest.js'\nimport { isNotFoundSignal } from './notFound.js'\nimport { ServerAuthenticationError, ServerAuthorizationError, type Redirected } from './js/errors.js'\n\n/**\n * What an action answers with. One of `data`, `validationErrors`,\n * `serverError` and `redirected` is set; `refusal` only ever beside\n * `serverError`.\n */\nexport interface ActionResult<Data, Refusal = never> {\n  /** What the handler returned. */\n  data?: Data\n  /** Field name to messages, in the shape a form already renders. */\n  validationErrors?: Record<string, string[]>\n  /**\n   * The action did not happen, as a message the browser may see: a refusal's\n   * own message - see `refuse()` - or something unexpected, reduced by\n   * `onError` to one that says nothing a stranger should not see.\n   */\n  serverError?: string\n  /**\n   * What a refusal said beside its message - the things blocking a delete,\n   * say - checked against the schema the action declared with `.refusal()`\n   * and typed from it. Set only by `refuse()`, here or on the backend.\n   */\n  refusal?: Refusal\n  /**\n   * Where the action sent the visitor. Set by the client, which has already\n   * started the navigation: the page is on its way there, and there is\n   * nothing for the caller to do. Never set on the server side of the call.\n   */\n  redirected?: string\n}\n\n/**\n * A middleware that neither continued nor refused.\n *\n * Never reported through `onError`: that reduces an error to a message for the\n * browser, and this one is for whoever wrote the middleware. A check that\n * forgot to call `next()` would otherwise look exactly like a check that\n * passed.\n */\nexport class ActionMisuse extends Error {\n  constructor(message: string) {\n    super(message)\n    this.name = 'ActionMisuse'\n  }\n}\n\n/** Refuse from inside a handler, naming the fields. */\n/**\n * Marks a refusal so it survives a bundle seam.\n *\n * A property rather than `instanceof`, for the reason this project keeps\n * running into: an app's actions are bundled separately from the engine, so\n * each gets its own copy of this module and its own copy of the class.\n * `instanceof` compares identity across that seam and is simply false — and\n * the refusal is then reported as a server error, so the form shows \"Something\n * went wrong\" instead of naming the fields. Everything works; nothing logs.\n *\n * Symbol.for, so the two copies agree on the key as well as the value.\n */\nconst VALIDATION_MARK = Symbol.for('@rsc-kit/core.action-validation')\n\n/**\n * Set on every function a client builds, so the build can tell them from a\n * bare \"use server\" export. The difference is the middleware: a bare export\n * runs with nothing checking who called it, and nothing else in the app\n * would ever say so. Symbol.for, because the build reads the mark from the\n * bundled copy of this module and the app's actions were built by another.\n */\nconst CLIENT_MARK = Symbol.for('@rsc-kit/core.action-client')\n\n/** Whether a server action was built by createActionClient, and so ran its chain. */\nexport function isClientBuilt(fn: unknown): boolean {\n  return typeof fn === 'function' && (fn as unknown as Record<symbol, unknown>)[CLIENT_MARK] === true\n}\n\nfunction markClientBuilt<F extends Function>(fn: F): F {\n  Object.defineProperty(fn, CLIENT_MARK, { value: true })\n\n  return fn\n}\n\nexport class ActionValidationError extends Error {\n  public readonly errors: Record<string, string[]>\n\n  constructor(errors: Record<string, string[]>) {\n    super('Validation failed')\n    this.name = 'ActionValidationError'\n    this.errors = errors\n    ;(this as unknown as Record<symbol, boolean>)[VALIDATION_MARK] = true\n  }\n}\n\n/** Whether this is a refusal, whichever copy of the class built it. */\nexport function isActionValidationError(error: unknown): error is ActionValidationError {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    (error as Record<symbol, unknown>)[VALIDATION_MARK] === true\n  )\n}\n\n/**\n * The field errors a handler may report, keyed by its own input's fields.\n *\n * `''` is the whole submission — for a refusal that is about no field in\n * particular, which is where the form already looks for one.\n */\nexport type FieldErrorsFor<Input> = Partial<\n  Record<(Input extends object ? keyof Input & string : string) | '', string | string[]>\n>\n\nconst REFUSAL_MARK = Symbol.for('@rsc-kit/core.action-refusal')\n\n/**\n * What a handler's data is, without the redirect a generated stub's type adds.\n *\n * A stub is typed `Promise<T | Redirected>` for the browser, where a redirected\n * call resolves with `{ redirected }`. Called from a handler it runs on the\n * server, where the redirect is thrown and travels as one, so its result is\n * only ever `T` - and `data` would say `T | Redirected`, a case the client\n * reports beside `data` and never inside it. Only a member that is exactly\n * `Redirected` goes: data that merely has a `redirected` field stays.\n */\nexport type Delivered<T> = T extends Redirected ? (Redirected extends T ? never : T) : T\n\n/**\n * An action declining to do what it was asked, on purpose, with a message for\n * the person who asked and - optionally - data the page can act on: the\n * records blocking a delete, the plan a quota belongs to.\n *\n * Not a validation error: the input was fine, the state of things says no.\n * And not a failure: its message is meant to be seen, so it is never\n * replaced by `onError`'s \"Something went wrong.\". It arrives as the result's\n * `serverError`, which is where a form's `formError` already reads, and its\n * data as `refusal`.\n */\nexport class ActionRefusal extends Error {\n  public readonly data: unknown\n  /** The status a request that is not an action - a page, a form posted without javascript - answers with. */\n  public readonly refusalStatus: number\n\n  constructor(message: string, data?: unknown, status = 409) {\n    super(message)\n    this.name = 'ActionRefusal'\n    this.data = data\n    this.refusalStatus = status\n    ;(this as unknown as Record<symbol, boolean>)[REFUSAL_MARK] = true\n  }\n}\n\n/** Whether this is a refusal, whichever copy of the class built it. */\nexport function isActionRefusal(error: unknown): error is ActionRefusal {\n  return typeof error === 'object' && error !== null && (error as Record<symbol, unknown>)[REFUSAL_MARK] === true\n}\n\n/**\n * Decline, with a message to show and optional data to act on. Throws.\n *\n *     if (attached.length) refuse('Still in use', { blockers: attached })\n *\n * From a handler, a middleware or anything they call. The data reaches the\n * page only when the action declares its shape with `.refusal(schema)`, and\n * only once it matches - see ActionResult.refusal. Inside a handler, the\n * `refuse` it is given is typed to that schema; this one takes anything.\n */\nexport function refuse(message: string, data?: unknown, options: { status?: number } = {}): never {\n  throw new ActionRefusal(message, data, options.status)\n}\n\n/**\n * What a handler is given.\n *\n * `fieldErrors` is here as well as exported on its own, and the one here is\n * the one to use: it is typed to this handler's input, so a field the schema\n * does not have is a type error rather than an error the form never shows.\n * The bare export takes any string, for the rare check that runs outside a\n * handler.\n */\nexport interface HandlerArgs<Input, Ctx, Refusal = never> {\n  input: Input\n  ctx: Ctx\n  /**\n   * Decline, with a message and the data the action declared with\n   * `.refusal(schema)`. Throws; write `return refuse(...)`, as with\n   * fieldErrors.\n   */\n  refuse: [Refusal] extends [never]\n    ? (message: string) => never\n    : (message: string, data: Refusal, options?: { status?: number }) => never\n  /**\n   * Fail with errors on this input's fields. Throws; nothing after it runs.\n   *\n   * Write `return fieldErrors(...)`. It throws either way, but TypeScript does\n   * not treat a never-return as terminating when the callee is a destructured\n   * binding — only a declaration or an explicitly annotated variable — so\n   * without the return, a value checked on the line above is still possibly\n   * undefined on the line below. The return is what lets the type narrow.\n   */\n  fieldErrors: (errors: FieldErrorsFor<Input>) => never\n}\n\n/**\n * Fail with field errors the form can show.\n *\n * For what a schema cannot know — a name already taken, a balance too low.\n * Throws, so the handler stops where it is; the action turns it into a\n * returned result on the way out.\n *\n * Untyped by field, because it has no handler to take the input from. Inside\n * one, use the `fieldErrors` the handler is given instead.\n */\nexport function fieldErrors(errors: Record<string, string[] | string>): never {\n  const normalised: Record<string, string[]> = {}\n\n  for (const [field, message] of Object.entries(errors)) {\n    normalised[field] = Array.isArray(message) ? message : [message]\n  }\n\n  throw new ActionValidationError(normalised)\n}\n\n/**\n * What `next()` hands back, carrying what the step added.\n *\n * The context a middleware contributes cannot be inferred from the arguments\n * it passes to `next` — TypeScript infers from a function's return, not from a\n * call inside it. So `next` returns this, the middleware returns it, and the\n * addition is read off the middleware's own return type.\n */\nexport interface MiddlewareResult<Extra> {\n  readonly ctx: Extra\n  readonly value: unknown\n}\n\n/**\n * A step that runs before the handler.\n *\n * It calls `next` to continue, optionally adding to the context, and what it\n * adds shows up in the handler's types. Returning without calling `next` — or\n * throwing — stops the action, which is how a check refuses.\n */\nexport type ActionMiddleware<Ctx, Extra extends Record<string, unknown>> = (args: {\n  ctx: Ctx\n  next: <E extends Record<string, unknown> = Record<string, never>>(\n    opts?: { ctx?: E },\n  ) => Promise<MiddlewareResult<E>>\n}) => Promise<MiddlewareResult<Extra>>\n\ntype Output<S> = S extends StandardSchemaV1<unknown, infer O> ? O : never\n\n/** What a caller may pass, before the schema parses it. */\ntype InputOf<S> = S extends StandardSchemaV1<infer I, unknown> ? I : unknown\n\n/**\n * A built action, as its callers see it.\n *\n * Typed from the schema's input when there is one, so a call with the wrong\n * shape fails the typecheck rather than the validation - and FormData beside\n * it, which is how a form calls the same action. Without a schema, anything.\n */\nexport type Action<Raw, Data, Refusal = never> = unknown extends Raw\n  ? (input?: unknown) => Promise<ActionResult<Data, Refusal>>\n  : undefined extends Raw\n    ? (input?: Raw | FormData) => Promise<ActionResult<Data, Refusal>>\n    : (input: Raw | FormData) => Promise<ActionResult<Data, Refusal>>\n\nexport interface ActionBuilder<Ctx extends Record<string, unknown>, Input, Raw = unknown, Refusal = never> {\n  /** Add a step, and whatever context it contributes. */\n  use<Extra extends Record<string, unknown> = Record<string, never>>(\n    middleware: (args: {\n      ctx: Ctx\n      next: <E extends Record<string, unknown> = Record<string, never>>(\n        opts?: { ctx?: E },\n      ) => Promise<MiddlewareResult<E>>\n    }) => Promise<MiddlewareResult<Extra>>,\n  ): ActionBuilder<Ctx & Extra, Input, Raw, Refusal>\n  /** Parse and check what the caller sent. The handler's `input` follows. */\n  input<S extends StandardSchemaV1>(schema: S): ActionBuilder<Ctx, Output<S>, InputOf<S>, Refusal>\n  /**\n   * The shape of what a refusal may carry - see `refuse()`. The page gets\n   * `result.refusal` typed from it, and only data that matches it: data that\n   * does not is a bug in the server, answered as one.\n   */\n  refusal<S extends StandardSchemaV1>(schema: S): ActionBuilder<Ctx, Input, Raw, Output<S>>\n  /**\n   * The body.\n   *\n   * What the caller gets is always the result object: `data`, or a\n   * refusal, or - when the action redirected - `redirected`, set by the\n   * client once the navigation is under way. Always an object, so a caller\n   * reading `result.validationErrors` after a redirect reads undefined and\n   * not a TypeError inside a transition, which unmounts the root.\n   */\n  handler<Data>(\n    fn: (args: HandlerArgs<Input, Ctx, Refusal>) => Promise<Data> | Data,\n  ): Action<Raw, Delivered<Data>, Refusal>\n  /**\n   * The body of a READ, sharing this client's middleware and schema.\n   *\n   *     export const getPosts = client.input(filter).query(async ({ input, ctx }) =>\n   *       db.posts(ctx.user.id, input))\n   *\n   * The same builder as `handler`, and deliberately so: an app configures its\n   * auth check and its error reporting once, and both a mutation and a read go\n   * through them.\n   *\n   * It fails differently, though, and that is not an oversight. An action\n   * RETURNS its failures because React serialises a rejection opaquely. A query\n   * is handed to a cache library as a fetcher, and every one of them reports\n   * failure by rejection — so this returns the data directly and throws, and\n   * the endpoint carries the message across for it.\n   */\n  query<Data>(\n    fn: (args: { input: Input; ctx: Ctx }) => Promise<Data> | Data,\n    options?: QueryOptions,\n  ): (input?: unknown) => Promise<Delivered<Data>>\n}\n\nexport interface ActionClientOptions {\n  /**\n   * What the browser is told when something unexpected throws.\n   *\n   * Everything reaching here is a bug or an outage, and its message may say\n   * more than a stranger should see — a query, a path, a host. Returning a\n   * fixed string is the safe default; return the message only for errors you\n   * raised deliberately.\n   */\n  onError?: (error: unknown) => string\n}\n\nconst GENERIC = 'Something went wrong.'\n\n/**\n * Whether the backend turned this caller away: not signed in, not allowed, or\n * nothing there for them. Each carries a message written for the person.\n */\nfunction turnedAway(error: unknown): error is Error {\n  return (\n    error instanceof ServerAuthenticationError || error instanceof ServerAuthorizationError || isNotFoundSignal(error)\n  )\n}\n\n/**\n * FormData in, a plain object out — what a schema expects to be handed.\n *\n * The form's own decoder, so the object validated here is the object the\n * browser validated. This had a flat decoder of its own: `items[0].name`\n * stayed a key spelled exactly that, `<Form>` had already parsed it into an\n * array, and a nested form passed in the browser and failed on the server\n * with the fields it named gone.\n */\nconst fromFormData = (body: FormData, schema: unknown): Record<string, unknown> => decodeFormData(body, schema)\n\nexport function createActionClient(\n  options: ActionClientOptions = {},\n): ActionBuilder<Record<never, never>, undefined> {\n  const report = options.onError ?? (() => GENERIC)\n\n  function build<Ctx extends Record<string, unknown>, Input>(\n    middlewares: ActionMiddleware<never, never>[],\n    schema: StandardSchemaV1 | null,\n    refusalSchema: StandardSchemaV1 | null = null,\n  ): ActionBuilder<Ctx, Input> {\n      /**\n       * Validate, run the chain, call the body.\n       *\n       * Shared by both terminals, which is the point of putting a read on this\n       * builder at all: one set of middleware, one schema, one place the auth\n       * check lives. Refusals leave by throwing, and each terminal decides what\n       * that should look like from the outside.\n       */\n    const pipeline = async (\n      raw: unknown,\n      fn: (args: HandlerArgs<never, never>) => unknown,\n    ): Promise<unknown> => {\n      const value = raw instanceof FormData ? fromFormData(raw, schema) : raw\n\n      if (schema) {\n        const invalid = await validateWith(schema, value)\n\n        if (invalid) throw new ActionValidationError(invalid)\n      }\n\n      const parsed = schema\n        ? ((await schema['~standard'].validate(value)).value as Input)\n        : (value as Input)\n\n      // Composed inside-out so the first `use` is the outermost — it sees the\n      // others run, which is what makes timing and cleanup possible rather\n      // than only checks.\n      let ctx = {} as Ctx\n      let index = 0\n\n      const run = async (): Promise<unknown> => {\n        const middleware = middlewares[index++]\n\n        if (!middleware) {\n          return await fn({\n            input: parsed as never,\n            ctx: ctx as never,\n            // The same function as the export; the type on the way in is what\n            // is different, and the type is the handler's input.\n            fieldErrors: fieldErrors as never,\n            refuse: refuse as never,\n          })\n        }\n\n        let continued = false\n\n        const result = await (middleware as unknown as ActionMiddleware<Ctx, Record<string, unknown>>)({\n          ctx,\n          next: (async (opts?: { ctx?: Record<string, unknown> }) => {\n            continued = true\n            ctx = { ...ctx, ...(opts?.ctx ?? {}) } as Ctx\n\n            return { ctx, value: await run() }\n          }) as never,\n        })\n\n        // Silence is not refusal. A middleware that neither called next() nor\n        // threw has done nothing, and guessing which it meant turns a\n        // forgotten `return` into a check that quietly passes.\n        if (!continued) {\n          throw new ActionMisuse(\n            'A middleware returned without calling next(). Call it to continue, or throw to refuse.',\n          )\n        }\n\n        return (result as { value?: unknown })?.value\n      }\n\n      return await run()\n    }\n\n    /**\n     * A refusal as the page gets it: its message, always - it was written to\n     * be seen - and its data only once the declared schema has checked it.\n     * Data with no schema to check it, or that fails the schema, never\n     * reaches the browser: the first is said in the server's log, the second\n     * is a bug in the server, returned as the error each terminal reports.\n     */\n    const refusalResult = async (error: ActionRefusal): Promise<ActionResult<never, unknown> | Error> => {\n      if (error.data === undefined) return { serverError: error.message }\n\n      if (!refusalSchema) {\n        console.error(\n          `[rsc-kit] An action refused with data, and declares no .refusal(schema) for it - the message was sent, the data was not: ${error.message}`,\n        )\n\n        return { serverError: error.message }\n      }\n\n      const checked = await refusalSchema['~standard'].validate(error.data)\n\n      if (checked.issues) {\n        return new Error(\n          `An action refused with data its .refusal(schema) does not accept: ${checked.issues.map((issue) => issue.message).join('; ')}`,\n        )\n      }\n\n      return { serverError: error.message, refusal: checked.value }\n    }\n\n    return {\n      use(middleware) {\n        return build([...middlewares, middleware as never], schema, refusalSchema) as never\n      },\n      input(next) {\n        return build(middlewares, next, refusalSchema) as never\n      },\n      refusal(next) {\n        return build(middlewares, schema, next) as never\n      },\n      handler(fn) {\n        // Delivered is a type-only difference from what the body returns:\n        // the value is passed through as it is.\n        return markClientBuilt(async (raw?: unknown) => {\n          try {\n            return { data: (await pipeline(raw, fn)) as Awaited<ReturnType<typeof fn>> }\n          } catch (error) {\n            // Past onError deliberately — see ActionMisuse.\n            if (error instanceof ActionMisuse) throw error\n\n            // A redirect is an instruction, not a failure: it has to reach\n            // the host, which answers the action with the destination. Caught\n            // here it became { serverError: 'Something went wrong.' } - a\n            // login that succeeded and then showed an error.\n            if (isRedirectSignal(error)) throw error\n\n            if (isActionValidationError(error)) {\n              return { validationErrors: error.errors }\n            }\n\n            if (isActionRefusal(error)) {\n              const refused = await refusalResult(error)\n\n              return (refused instanceof Error ? { serverError: report(refused) } : refused) as ActionResult<never>\n            }\n\n            // Turned away by the backend - not signed in, not allowed, no such\n            // record - is an answer too, and its message is meant to be seen.\n            // Not rethrown as a redirect is: the action endpoint answers a\n            // throw with a 500, and the form would show nothing at all.\n            if (turnedAway(error)) return { serverError: error.message }\n\n            return { serverError: report(error) }\n          }\n        }) as never\n      },\n      query(fn, options) {\n        const read = async (raw?: unknown) => {\n          try {\n            return await pipeline(raw, fn)\n          } catch (error) {\n            if (error instanceof ActionMisuse) throw error\n            if (isRedirectSignal(error)) throw error\n\n            // Left as they are, as a redirect is. A page that reads through a\n            // query answers 401, 403 or its not-found page, as it does calling\n            // the backend directly; the read endpoint answers the same statuses.\n            if (turnedAway(error)) throw error\n\n            // Thrown, not returned. A cache library reports failure by\n            // rejection, so a query that answered with an error-shaped object\n            // would look like a successful read of something odd.\n            if (isActionValidationError(error)) {\n              throw new QueryValidationError(error.errors)\n            }\n\n            // Its own message, as an action's is, and its checked data on\n            // the error for a fetcher that wants it.\n            if (isActionRefusal(error)) {\n              const refused = await refusalResult(error)\n\n              if (refused instanceof Error) throw new Error(report(refused))\n\n              throw Object.assign(new Error(refused.serverError), {\n                refusal: refused.refusal,\n                refusalStatus: error.refusalStatus,\n              })\n            }\n\n            throw new Error(report(error))\n          }\n        }\n\n        return markClientBuilt(markQuery(read, options)) as (input?: unknown) => Promise<never>\n      },\n    }\n  }\n\n  return build([], null)\n}\n"]}

package/dist/testing.d.ts

@@ -84,11 +84,4 @@ export declare function staticFile(root: string, request: Request): Response | n
  */
 /** @internal Exported for its test. */
 export declare function buildCommand(root: string): [string, string[]];
-/**
- * Build the app if it needs it, load it, and hand back something to fetch from.
- *
- * Memoised per root: every test file in a run shares one build and one loaded
- * module, which is both the fast path and the correct one — two copies of the
- * server bundle in one process would be two client-reference registries.
- */
 export declare function createTestApp(options?: TestAppOptions): Promise<TestApp>;

package/dist/testing.js

@@ -187,7 +187,30 @@ async function ensureBuilt(root, build) {
  * module, which is both the fast path and the correct one — two copies of the
  * server bundle in one process would be two client-reference registries.
  */
+/**
+ * Whether Request is the runtime's, told apart from a browser's by behaviour.
+ *
+ * A browser forbids a script from setting Cookie, so happy-dom's Request drops
+ * it from an init - and every signed-in request a test makes arrives with no
+ * session, bounces to sign-in, and fails far from the cause. Behaviour rather
+ * than identity, because identity depends on which file loaded first.
+ */
+function runtimeRequest() {
+    try {
+        return new Request('http://probe.test/', { headers: { cookie: 'probe=1' } }).headers.has('cookie');
+    }
+    catch {
+        return false;
+    }
+}
 export async function createTestApp(options = {}) {
+    if (!runtimeRequest()) {
+        throw new Error("[rsc-kit] createTestApp is running against a browser's Request: a DOM is registered globally " +
+            '(happy-dom, in a preload or an earlier test file), and it replaces Request, Response, Headers and fetch. ' +
+            'A browser cannot set Cookie, so every signed-in request would arrive with no session. ' +
+            'Register the DOM only in the component test file and `GlobalRegistrator.unregister()` after it, ' +
+            'and run the suites isolated (`bun test --isolate`). See the testing guide, "Components".');
+    }
     const root = resolve(options.root ?? process.cwd());
     const origin = options.origin ?? 'https://app.test';
     built.set(root, built.get(root) ?? ensureBuilt(root, options.build ?? true));

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,0DAA0D;AAC1D,EAAE;AACF,sCAAsC;AACtC,oFAAoF;AACpF,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gBAAgB;AAChB,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,gEAAgE;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAiB,MAAM,eAAe,CAAA;AAE5D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAuD,MAAM,eAAe,CAAA;AAkE5H;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,EAAE,gDAAgD,CAAC;QAC5D,mDAAmD;QACnD,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC;KACtC,CAAA;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG;QACZ,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB;QACxE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,WAAW;KAC5F,CAAA;IACD,IAAI,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAE7B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAA;IACzE,CAAC;IAED,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAA;IAE5D,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAA;IAE9B,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEzE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAA;QAExE,IAAI,IAAI,GAAG,MAAM;YAAE,MAAM,GAAG,IAAI,CAAA;IAClC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAA;AAEhD,sFAAsF;AACtF,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,cAAc,EAAE,2BAA2B;IAC3C,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,kBAAkB;CAC3B,CAAA;AAED;;;;;;;;;;;GAWG;AACH,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAgB;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAEtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAA;IAE/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAA;IAEnG,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAA;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAElE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE;KAC3F,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,uCAAuC;AACvC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAA;IAEtD,IAAI,OAAO,GAA2B,EAAE,CAAA;IAExC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAA;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AACjF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAc;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,8EAA8E,CAC/H,CAAA;QACH,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAExE,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAA;IAE1B,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACnC,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE;KAChD,CAAC,CAAA;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qEAAqE,IAAI,+BAA+B,CACzG,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAO,GAAmB,EAAE;IAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAA;IAEnD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAA;IAE5E,yEAAyE;IACzE,iFAAiF;IACjF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACpC,gBAAgB,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;IACrC,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAItD,CAAA;IAED,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,qCAAqC,CAAC,CAAA;IAC3E,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;QACvB,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kCAAkC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrH,CAAC,CAAC,IAAI,CAAA;IAER,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,iEAAiE,CAAC,CAAA;IACvG,CAAC;IAED,MAAM,KAAK,GAAqB,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;QAExD,oEAAoE;QACpE,2CAA2C;QAC3C,IAAI,IAAI;YAAE,KAAK,CAAC,aAAc,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,oEAAoE,CAAC,CAAA;QAC1G,CAAC;QACD,KAAK,CAAC,qBAAqB,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA;QAEtD,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5D,CAAC,CAAA;IAED,OAAO;QACL,MAAM;QACN,KAAK;QACL,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAEnD,sEAAsE;YACtE,kDAAkD;YAClD,OAAO,IAAI,CAAC,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAA;QAChE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC5B,qEAAqE;YACrE,qEAAqE;YACrE,MAAM,SAAS,GAA6B,EAAE,CAAA;YAC9C,MAAM,IAAI,GAAG,UAAsD,CAAA;YAEnE,IAAI,CAAC,OAAO,CAAC,GAAG,SAAS,CAAA;YAEzB,IAAI,CAAC;gBACH,kEAAkE;gBAClE,+CAA+C;gBAC/C,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACxC,CAAC;oBAAS,CAAC;gBACT,OAAO,IAAI,CAAC,OAAO,CAAC,CAAA;YACtB,CAAC;YAED,OAAO,SAAS,CAAA;QAClB,CAAC;KACF,CAAA;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA","sourcesContent":["// The whole app as a function, for tests.\n//\n//   import { createTestApp } from '@rsc-kit/core/testing'\n//\n//   const app = await createTestApp()\n//   const res = await app.fetch('/api/orders', { headers: { Cookie: 'user=ada' } })\n//\n// No port, no browser, no server process. The built entry already exports the\n// same Request → Response handler the dev server and the production server\n// both call, so a test can hand it a Request and read the Response — through\n// the real router, the real middleware, the real api routes, and the pages the\n// build stored.\n//\n// That is the tier between a unit test and a browser. An action or a route is\n// a function and can be imported and called; a browser test proves the page\n// works; this proves the app answers a url the way it is deployed, which is\n// where a route that renders fine and is served wrong shows up.\n\nimport { spawnSync } from 'node:child_process'\nimport { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'\nimport { extname, join, resolve, sep } from 'node:path'\nimport { pathToFileURL } from 'node:url'\nimport { httpHostCalls } from './hostCalls.js'\nimport { configureChanged } from './changed.js'\nimport { testHostFetch, type TestHost } from './testHost.js'\n\nexport { hostReply, testChanges, HOST_MIDDLEWARE, type HostCallInput, type HostHandler, type TestHost } from './testHost.js'\n\nexport interface TestApp {\n  /** A path, not a url. The origin is whatever the app was told it is. */\n  fetch(path: string, init?: RequestInit): Promise<Response>\n  /**\n   * What each region of the page at `path` refreshes on, rendered for this\n   * request: `{ page: ['ledger'], repos: ['team:1:repos'] }` - `page` for the\n   * page's own `refreshOn`, a section's name for each section's. A region\n   * whose refreshOn gave no names is there with `[]`; one with no refreshOn\n   * is not there at all.\n   *\n   *     expect(await app.watched('/teams/1')).toMatchObject({ repos: ['team:1:repos'] })\n   *\n   * The names a tab would be handed, without reading them out of the payload.\n   */\n  watched(path: string, init?: RequestInit): Promise<Record<string, string[]>>\n  /**\n   * The page at `path` as markup: the whole streamed document, with every\n   * `<script>` taken out.\n   *\n   * The document carries the page's payload for the browser to hydrate from,\n   * and the payload holds everything the page was given - a client\n   * component's props included, shown or not. A test asserting that something\n   * is NOT on the page reads this, not `fetch`:\n   *\n   *     expect(await app.markup('/teams/1')).not.toContain('internal note')\n   *\n   * Regions that streamed in later are included where they arrived; a\n   * Suspense fallback they replaced is still in the markup too, as the\n   * server sent it.\n   */\n  markup(path: string, init?: RequestInit): Promise<string>\n  /** Where the build was read from, for a test that wants to look. */\n  bundle: string\n}\n\nexport interface TestAppOptions {\n  /** The project. Defaults to the working directory. */\n  root?: string\n  /**\n   * Whether to build first.\n   *\n   * `true` builds when the source is newer than the last build, which is what\n   * a test run wants: the first run pays for it, the rest do not, and an edit\n   * is picked up. `false` never builds and fails loudly if there is nothing to\n   * read — for a ci step that already built.\n   */\n  build?: boolean\n  /** The origin requests are made against. Nothing reads it; it is a url. */\n  origin?: string\n  /**\n   * The backend, answered in the test: rpc() calls and host guards by name.\n   * The app reaches it through the same client it uses against a real one,\n   * so nothing listens and RSC_BACKEND is not called. See `hostReply`.\n   */\n  host?: TestHost\n  /**\n   * What answers a url this app does not own - a Go route, a Laravel page,\n   * /login - in place of the backend the app forwards it to. Handed the\n   * request as the backend would receive it. Without one, such a url is\n   * forwarded to RSC_BACKEND, and in a test that is usually a 502.\n   */\n  backend?: (request: Request) => Response | Promise<Response>\n}\n\n/**\n * Where the build put the server bundle.\n *\n * Two layouts, because two ways of building. Under Nitro — every scaffolded\n * app — it is inside Nitro's own directory. On its own the plugin writes\n * <outDir>/dist/rsc. The first that exists wins.\n */\nfunction findBundle(root: string): string | null {\n  const candidates = [\n    join(root, 'node_modules/.nitro/vite/services/rsc/index.js'),\n    // The default outDir since 0.29.8; .rsc before it.\n    join(root, '.rsc-kit/dist/rsc/index.js'),\n    join(root, '.rsc/dist/rsc/index.js'),\n    join(root, 'build/dist/rsc/index.js'),\n  ]\n\n  return candidates.find((path) => existsSync(path)) ?? null\n}\n\n/**\n * When anything a build is made from last changed: the app's source, its\n * Vite config, its dependencies - package.json, the lockfile, and the\n * installed engine itself. Only src/ used to count, so an app that upgraded\n * @rsc-kit/core kept testing the build the old one made, and passed.\n */\nfunction newestInput(root: string): number {\n  const files = [\n    'vite.config.ts', 'vite.config.mts', 'vite.config.js', 'vite.config.mjs',\n    'package.json', 'bun.lock', 'bun.lockb', 'package-lock.json', 'pnpm-lock.yaml', 'yarn.lock',\n  ]\n  let latest = newest(join(root, 'src'))\n\n  for (const file of files) {\n    const path = join(root, file)\n\n    if (existsSync(path)) latest = Math.max(latest, statSync(path).mtimeMs)\n  }\n\n  // The engine as installed: a workspace link changes without the lockfile.\n  const engine = join(root, 'node_modules/@rsc-kit/core/dist')\n\n  return Math.max(latest, newest(engine))\n}\n\n/** The newest mtime under a directory, for deciding whether a build is stale. */\nfunction newest(dir: string): number {\n  if (!existsSync(dir)) return 0\n\n  let latest = 0\n\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    if (entry.name === 'node_modules' || entry.name.startsWith('.')) continue\n\n    const path = join(dir, entry.name)\n    const time = entry.isDirectory() ? newest(path) : statSync(path).mtimeMs\n\n    if (time > latest) latest = time\n  }\n\n  return latest\n}\n\n/** One build per process per root, however many test files ask. */\nconst built = new Map<string, Promise<string>>()\n\n/** The content types a test is likely to assert on; anything else is octet-stream. */\nconst CONTENT_TYPES: Record<string, string> = {\n  '.html': 'text/html; charset=utf-8',\n  '.js': 'text/javascript; charset=utf-8',\n  '.mjs': 'text/javascript; charset=utf-8',\n  '.css': 'text/css; charset=utf-8',\n  '.json': 'application/json; charset=utf-8',\n  '.webmanifest': 'application/manifest+json',\n  '.xml': 'application/xml',\n  '.txt': 'text/plain; charset=utf-8',\n  '.svg': 'image/svg+xml',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.webp': 'image/webp',\n  '.avif': 'image/avif',\n  '.gif': 'image/gif',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.wasm': 'application/wasm',\n  '.map': 'application/json',\n}\n\n/**\n * A file the build put in .output/public, answered the way Nitro's static\n * layer would - which the handler this harness loads does not include. The\n * handler is the rsc service: routing, pages, actions, api routes. Assets,\n * the service worker, the manifest and the icons are files Nitro serves in\n * production from .output/public, and a test that asked for /sw.js used to\n * get the router's 404 for a file the deployment serves fine - the one\n * shape this harness exists to catch, in the other direction.\n *\n * Files only, for GET and HEAD, within the directory: a path that escapes it\n * is a request for the handler, not a file.\n */\n/** @internal Exported for its test. */\nexport function staticFile(root: string, request: Request): Response | null {\n  if (request.method !== 'GET' && request.method !== 'HEAD') return null\n\n  const publicDir = join(root, '.output/public')\n  const pathname = decodeURIComponent(new URL(request.url).pathname)\n  const file = resolve(publicDir, '.' + pathname)\n\n  if (!file.startsWith(publicDir + sep) || !existsSync(file) || !statSync(file).isFile()) return null\n\n  const type = CONTENT_TYPES[extname(file).toLowerCase()] ?? 'application/octet-stream'\n  const body = request.method === 'HEAD' ? null : readFileSync(file)\n\n  return new Response(body, {\n    status: 200,\n    headers: { 'Content-Type': type, 'Cache-Control': 'no-store', 'X-RSC-Kit-Test': 'static' },\n  })\n}\n\n/**\n * How this project builds: its own `build` script, run by the package manager\n * this test is running under. Without a script, Vite directly - on Bun's\n * runtime when the tests are, since a bin's node shebang would otherwise\n * start it under Node.\n */\n/** @internal Exported for its test. */\nexport function buildCommand(root: string): [string, string[]] {\n  const onBun = typeof process.versions.bun === 'string'\n\n  let scripts: Record<string, string> = {}\n\n  try {\n    scripts = JSON.parse(readFileSync(join(root, 'package.json'), 'utf-8')).scripts ?? {}\n  } catch {\n    // No package.json, or not JSON: there is no script to run.\n  }\n\n  if (typeof scripts.build === 'string') {\n    return onBun ? ['bun', ['run', 'build']] : ['npm', ['run', 'build']]\n  }\n\n  return onBun ? ['bun', ['--bun', 'vite', 'build']] : ['npx', ['vite', 'build']]\n}\n\nasync function ensureBuilt(root: string, build: boolean): Promise<string> {\n  const existing = findBundle(root)\n\n  if (!build) {\n    if (!existing) {\n      throw new Error(\n        `[rsc-kit] No build to test against under ${root}. Run the build first, or let createTestApp() do it by leaving \\`build\\` on.`,\n      )\n    }\n\n    return existing\n  }\n\n  const fresh = existing && statSync(existing).mtimeMs > newestInput(root)\n\n  if (fresh) return existing\n\n  // The user's own build command, so what is tested is what ships. A test\n  // that built some other way would pass against a bundle nobody deploys -\n  // and used to: this ran `npx vite build` whatever package.json said, which\n  // on a Bun project built under Node and failed on the first `import 'bun'`.\n  const [command, args] = buildCommand(root)\n  const run = spawnSync(command, args, {\n    cwd: root,\n    stdio: ['ignore', 'pipe', 'pipe'],\n    env: { ...process.env, NODE_ENV: 'production' },\n  })\n\n  if (run.status !== 0) {\n    throw new Error(`[rsc-kit] The build failed, so there is nothing to test:\\n${run.stderr}`)\n  }\n\n  const bundle = findBundle(root)\n\n  if (!bundle) {\n    throw new Error(\n      `[rsc-kit] The build finished but no server bundle was found under ${root}. Is rscKit() in vite.config?`,\n    )\n  }\n\n  return bundle\n}\n\n/**\n * Build the app if it needs it, load it, and hand back something to fetch from.\n *\n * Memoised per root: every test file in a run shares one build and one loaded\n * module, which is both the fast path and the correct one — two copies of the\n * server bundle in one process would be two client-reference registries.\n */\nexport async function createTestApp(options: TestAppOptions = {}): Promise<TestApp> {\n  const root = resolve(options.root ?? process.cwd())\n  const origin = options.origin ?? 'https://app.test'\n\n  built.set(root, built.get(root) ?? ensureBuilt(root, options.build ?? true))\n\n  // The app is built for production, which refuses to sign refreshOn names\n  // without a key. One process, one key: a fixed one, unless the test set its own.\n  if (!process.env.RSC_SIGNING_SECRET) {\n    configureChanged({ secret: 'rsc-kit-test' })\n  }\n\n  const bundle = await built.get(root)!\n  const entry = (await import(pathToFileURL(bundle).href)) as {\n    default: (request: Request) => Promise<Response>\n    installHostFn?: (fn: (name: string, ...args: unknown[]) => Promise<unknown>) => () => void\n    installBackendForward?: (fn: ((request: Request) => Response | Promise<Response>) | null) => void\n  }\n\n  if (typeof entry.default !== 'function') {\n    throw new Error(`[rsc-kit] ${bundle} does not export a request handler.`)\n  }\n\n  const host = options.host\n    ? httpHostCalls({ endpoint: 'http://test-host/__rsc/host-call', secret: 'test', fetch: testHostFetch(options.host) })\n    : null\n\n  if (host && !entry.installHostFn) {\n    throw new Error(`[rsc-kit] ${bundle} cannot take a host. Rebuild against the current @rsc-kit/core.`)\n  }\n\n  const fetch: TestApp['fetch'] = async (path, init) => {\n    const request = new Request(new URL(path, origin), init)\n\n    // Per request, not once: the loaded bundle is shared by every app a\n    // run creates, and the host is this app's.\n    if (host) entry.installHostFn!(host)\n    if (options.backend && !entry.installBackendForward) {\n      throw new Error(`[rsc-kit] ${bundle} cannot take a backend. Rebuild against the current @rsc-kit/core.`)\n    }\n    entry.installBackendForward?.(options.backend ?? null)\n\n    return staticFile(root, request) ?? entry.default(request)\n  }\n\n  return {\n    bundle,\n    fetch,\n    markup: async (path, init) => {\n      const html = await (await fetch(path, init)).text()\n\n      // A script's body never holds its own closing tag: the payload writes\n      // \"<\" as \\u003c, and React's scripts are its own.\n      return html.replace(/<script\\b[^>]*>[\\s\\S]*?<\\/script>/gi, '')\n    },\n    watched: async (path, init) => {\n      // The render records what each region resolves to while this is set:\n      // the app's bundle runs in this process, so it sees the same global.\n      const recording: Record<string, string[]> = {}\n      const into = globalThis as { [WATCHED]?: Record<string, string[]> }\n\n      into[WATCHED] = recording\n\n      try {\n        // Read to the end: the names resolve under their own Suspense, so\n        // they are in the stream's tail, not its head.\n        await (await fetch(path, init)).text()\n      } finally {\n        delete into[WATCHED]\n      }\n\n      return recording\n    },\n  }\n}\n\n/** Where a render records what its regions refresh on, while watched() asks (js/refreshOn). */\nconst WATCHED = Symbol.for('rsc-kit.test-watched')\n"]}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,0DAA0D;AAC1D,EAAE;AACF,sCAAsC;AACtC,oFAAoF;AACpF,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,+EAA+E;AAC/E,gBAAgB;AAChB,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,gEAAgE;AAEhE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAiB,MAAM,eAAe,CAAA;AAE5D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAuD,MAAM,eAAe,CAAA;AAkE5H;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,EAAE,gDAAgD,CAAC;QAC5D,mDAAmD;QACnD,IAAI,CAAC,IAAI,EAAE,4BAA4B,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC;QACpC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC;KACtC,CAAA;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAA;AAC5D,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG;QACZ,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB;QACxE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,WAAW;KAC5F,CAAA;IACD,IAAI,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAA;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAE7B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAA;IACzE,CAAC;IAED,0EAA0E;IAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,iCAAiC,CAAC,CAAA;IAE5D,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,iFAAiF;AACjF,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAA;IAE9B,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAEzE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAA;QAExE,IAAI,IAAI,GAAG,MAAM;YAAE,MAAM,GAAG,IAAI,CAAA;IAClC,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,mEAAmE;AACnE,MAAM,KAAK,GAAG,IAAI,GAAG,EAA2B,CAAA;AAEhD,sFAAsF;AACtF,MAAM,aAAa,GAA2B;IAC5C,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,cAAc,EAAE,2BAA2B;IAC3C,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,2BAA2B;IACnC,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,kBAAkB;CAC3B,CAAA;AAED;;;;;;;;;;;GAWG;AACH,uCAAuC;AACvC,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAgB;IACvD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IAEtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,GAAG,QAAQ,CAAC,CAAA;IAE/C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAA;IAEnG,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAA;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IAElE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE;KAC3F,CAAC,CAAA;AACJ,CAAC;AAED;;;;;GAKG;AACH,uCAAuC;AACvC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,KAAK,GAAG,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAA;IAEtD,IAAI,OAAO,GAA2B,EAAE,CAAA;IAExC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAA;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,2DAA2D;IAC7D,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AACjF,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAc;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,8EAA8E,CAC/H,CAAA;QACH,CAAC;QAED,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IAExE,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAA;IAE1B,wEAAwE;IACxE,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;QACnC,GAAG,EAAE,IAAI;QACT,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE;KAChD,CAAC,CAAA;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;IAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,qEAAqE,IAAI,+BAA+B,CACzG,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED;;;;;;GAMG;AACH;;;;;;;GAOG;AACH,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,OAAO,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAO,GAAmB,EAAE;IAC9D,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,+FAA+F;YAC7F,2GAA2G;YAC3G,wFAAwF;YACxF,kGAAkG;YAClG,0FAA0F,CAC7F,CAAA;IACH,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAA;IAEnD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAA;IAE5E,yEAAyE;IACzE,iFAAiF;IACjF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACpC,gBAAgB,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;IACrC,MAAM,KAAK,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAItD,CAAA;IAED,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,qCAAqC,CAAC,CAAA;IAC3E,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI;QACvB,CAAC,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,kCAAkC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrH,CAAC,CAAC,IAAI,CAAA;IAER,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,iEAAiE,CAAC,CAAA;IACvG,CAAC;IAED,MAAM,KAAK,GAAqB,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACnD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAA;QAExD,oEAAoE;QACpE,2CAA2C;QAC3C,IAAI,IAAI;YAAE,KAAK,CAAC,aAAc,CAAC,IAAI,CAAC,CAAA;QACpC,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,aAAa,MAAM,oEAAoE,CAAC,CAAA;QAC1G,CAAC;QACD,KAAK,CAAC,qBAAqB,EAAE,CAAC,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA;QAEtD,OAAO,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5D,CAAC,CAAA;IAED,OAAO;QACL,MAAM;QACN,KAAK;QACL,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAEnD,sEAAsE;YACtE,kDAAkD;YAClD,OAAO,IAAI,CAAC,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAA;QAChE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC5B,qEAAqE;YACrE,qEAAqE;YACrE,MAAM,SAAS,GAA6B,EAAE,CAAA;YAC9C,MAAM,IAAI,GAAG,UAAsD,CAAA;YAEnE,IAAI,CAAC,OAAO,CAAC,GAAG,SAAS,CAAA;YAEzB,IAAI,CAAC;gBACH,kEAAkE;gBAClE,+CAA+C;gBAC/C,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YACxC,CAAC;oBAAS,CAAC;gBACT,OAAO,IAAI,CAAC,OAAO,CAAC,CAAA;YACtB,CAAC;YAED,OAAO,SAAS,CAAA;QAClB,CAAC;KACF,CAAA;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA","sourcesContent":["// The whole app as a function, for tests.\n//\n//   import { createTestApp } from '@rsc-kit/core/testing'\n//\n//   const app = await createTestApp()\n//   const res = await app.fetch('/api/orders', { headers: { Cookie: 'user=ada' } })\n//\n// No port, no browser, no server process. The built entry already exports the\n// same Request → Response handler the dev server and the production server\n// both call, so a test can hand it a Request and read the Response — through\n// the real router, the real middleware, the real api routes, and the pages the\n// build stored.\n//\n// That is the tier between a unit test and a browser. An action or a route is\n// a function and can be imported and called; a browser test proves the page\n// works; this proves the app answers a url the way it is deployed, which is\n// where a route that renders fine and is served wrong shows up.\n\nimport { spawnSync } from 'node:child_process'\nimport { existsSync, readFileSync, readdirSync, statSync } from 'node:fs'\nimport { extname, join, resolve, sep } from 'node:path'\nimport { pathToFileURL } from 'node:url'\nimport { httpHostCalls } from './hostCalls.js'\nimport { configureChanged } from './changed.js'\nimport { testHostFetch, type TestHost } from './testHost.js'\n\nexport { hostReply, testChanges, HOST_MIDDLEWARE, type HostCallInput, type HostHandler, type TestHost } from './testHost.js'\n\nexport interface TestApp {\n  /** A path, not a url. The origin is whatever the app was told it is. */\n  fetch(path: string, init?: RequestInit): Promise<Response>\n  /**\n   * What each region of the page at `path` refreshes on, rendered for this\n   * request: `{ page: ['ledger'], repos: ['team:1:repos'] }` - `page` for the\n   * page's own `refreshOn`, a section's name for each section's. A region\n   * whose refreshOn gave no names is there with `[]`; one with no refreshOn\n   * is not there at all.\n   *\n   *     expect(await app.watched('/teams/1')).toMatchObject({ repos: ['team:1:repos'] })\n   *\n   * The names a tab would be handed, without reading them out of the payload.\n   */\n  watched(path: string, init?: RequestInit): Promise<Record<string, string[]>>\n  /**\n   * The page at `path` as markup: the whole streamed document, with every\n   * `<script>` taken out.\n   *\n   * The document carries the page's payload for the browser to hydrate from,\n   * and the payload holds everything the page was given - a client\n   * component's props included, shown or not. A test asserting that something\n   * is NOT on the page reads this, not `fetch`:\n   *\n   *     expect(await app.markup('/teams/1')).not.toContain('internal note')\n   *\n   * Regions that streamed in later are included where they arrived; a\n   * Suspense fallback they replaced is still in the markup too, as the\n   * server sent it.\n   */\n  markup(path: string, init?: RequestInit): Promise<string>\n  /** Where the build was read from, for a test that wants to look. */\n  bundle: string\n}\n\nexport interface TestAppOptions {\n  /** The project. Defaults to the working directory. */\n  root?: string\n  /**\n   * Whether to build first.\n   *\n   * `true` builds when the source is newer than the last build, which is what\n   * a test run wants: the first run pays for it, the rest do not, and an edit\n   * is picked up. `false` never builds and fails loudly if there is nothing to\n   * read — for a ci step that already built.\n   */\n  build?: boolean\n  /** The origin requests are made against. Nothing reads it; it is a url. */\n  origin?: string\n  /**\n   * The backend, answered in the test: rpc() calls and host guards by name.\n   * The app reaches it through the same client it uses against a real one,\n   * so nothing listens and RSC_BACKEND is not called. See `hostReply`.\n   */\n  host?: TestHost\n  /**\n   * What answers a url this app does not own - a Go route, a Laravel page,\n   * /login - in place of the backend the app forwards it to. Handed the\n   * request as the backend would receive it. Without one, such a url is\n   * forwarded to RSC_BACKEND, and in a test that is usually a 502.\n   */\n  backend?: (request: Request) => Response | Promise<Response>\n}\n\n/**\n * Where the build put the server bundle.\n *\n * Two layouts, because two ways of building. Under Nitro — every scaffolded\n * app — it is inside Nitro's own directory. On its own the plugin writes\n * <outDir>/dist/rsc. The first that exists wins.\n */\nfunction findBundle(root: string): string | null {\n  const candidates = [\n    join(root, 'node_modules/.nitro/vite/services/rsc/index.js'),\n    // The default outDir since 0.29.8; .rsc before it.\n    join(root, '.rsc-kit/dist/rsc/index.js'),\n    join(root, '.rsc/dist/rsc/index.js'),\n    join(root, 'build/dist/rsc/index.js'),\n  ]\n\n  return candidates.find((path) => existsSync(path)) ?? null\n}\n\n/**\n * When anything a build is made from last changed: the app's source, its\n * Vite config, its dependencies - package.json, the lockfile, and the\n * installed engine itself. Only src/ used to count, so an app that upgraded\n * @rsc-kit/core kept testing the build the old one made, and passed.\n */\nfunction newestInput(root: string): number {\n  const files = [\n    'vite.config.ts', 'vite.config.mts', 'vite.config.js', 'vite.config.mjs',\n    'package.json', 'bun.lock', 'bun.lockb', 'package-lock.json', 'pnpm-lock.yaml', 'yarn.lock',\n  ]\n  let latest = newest(join(root, 'src'))\n\n  for (const file of files) {\n    const path = join(root, file)\n\n    if (existsSync(path)) latest = Math.max(latest, statSync(path).mtimeMs)\n  }\n\n  // The engine as installed: a workspace link changes without the lockfile.\n  const engine = join(root, 'node_modules/@rsc-kit/core/dist')\n\n  return Math.max(latest, newest(engine))\n}\n\n/** The newest mtime under a directory, for deciding whether a build is stale. */\nfunction newest(dir: string): number {\n  if (!existsSync(dir)) return 0\n\n  let latest = 0\n\n  for (const entry of readdirSync(dir, { withFileTypes: true })) {\n    if (entry.name === 'node_modules' || entry.name.startsWith('.')) continue\n\n    const path = join(dir, entry.name)\n    const time = entry.isDirectory() ? newest(path) : statSync(path).mtimeMs\n\n    if (time > latest) latest = time\n  }\n\n  return latest\n}\n\n/** One build per process per root, however many test files ask. */\nconst built = new Map<string, Promise<string>>()\n\n/** The content types a test is likely to assert on; anything else is octet-stream. */\nconst CONTENT_TYPES: Record<string, string> = {\n  '.html': 'text/html; charset=utf-8',\n  '.js': 'text/javascript; charset=utf-8',\n  '.mjs': 'text/javascript; charset=utf-8',\n  '.css': 'text/css; charset=utf-8',\n  '.json': 'application/json; charset=utf-8',\n  '.webmanifest': 'application/manifest+json',\n  '.xml': 'application/xml',\n  '.txt': 'text/plain; charset=utf-8',\n  '.svg': 'image/svg+xml',\n  '.png': 'image/png',\n  '.jpg': 'image/jpeg',\n  '.jpeg': 'image/jpeg',\n  '.webp': 'image/webp',\n  '.avif': 'image/avif',\n  '.gif': 'image/gif',\n  '.ico': 'image/x-icon',\n  '.woff': 'font/woff',\n  '.woff2': 'font/woff2',\n  '.wasm': 'application/wasm',\n  '.map': 'application/json',\n}\n\n/**\n * A file the build put in .output/public, answered the way Nitro's static\n * layer would - which the handler this harness loads does not include. The\n * handler is the rsc service: routing, pages, actions, api routes. Assets,\n * the service worker, the manifest and the icons are files Nitro serves in\n * production from .output/public, and a test that asked for /sw.js used to\n * get the router's 404 for a file the deployment serves fine - the one\n * shape this harness exists to catch, in the other direction.\n *\n * Files only, for GET and HEAD, within the directory: a path that escapes it\n * is a request for the handler, not a file.\n */\n/** @internal Exported for its test. */\nexport function staticFile(root: string, request: Request): Response | null {\n  if (request.method !== 'GET' && request.method !== 'HEAD') return null\n\n  const publicDir = join(root, '.output/public')\n  const pathname = decodeURIComponent(new URL(request.url).pathname)\n  const file = resolve(publicDir, '.' + pathname)\n\n  if (!file.startsWith(publicDir + sep) || !existsSync(file) || !statSync(file).isFile()) return null\n\n  const type = CONTENT_TYPES[extname(file).toLowerCase()] ?? 'application/octet-stream'\n  const body = request.method === 'HEAD' ? null : readFileSync(file)\n\n  return new Response(body, {\n    status: 200,\n    headers: { 'Content-Type': type, 'Cache-Control': 'no-store', 'X-RSC-Kit-Test': 'static' },\n  })\n}\n\n/**\n * How this project builds: its own `build` script, run by the package manager\n * this test is running under. Without a script, Vite directly - on Bun's\n * runtime when the tests are, since a bin's node shebang would otherwise\n * start it under Node.\n */\n/** @internal Exported for its test. */\nexport function buildCommand(root: string): [string, string[]] {\n  const onBun = typeof process.versions.bun === 'string'\n\n  let scripts: Record<string, string> = {}\n\n  try {\n    scripts = JSON.parse(readFileSync(join(root, 'package.json'), 'utf-8')).scripts ?? {}\n  } catch {\n    // No package.json, or not JSON: there is no script to run.\n  }\n\n  if (typeof scripts.build === 'string') {\n    return onBun ? ['bun', ['run', 'build']] : ['npm', ['run', 'build']]\n  }\n\n  return onBun ? ['bun', ['--bun', 'vite', 'build']] : ['npx', ['vite', 'build']]\n}\n\nasync function ensureBuilt(root: string, build: boolean): Promise<string> {\n  const existing = findBundle(root)\n\n  if (!build) {\n    if (!existing) {\n      throw new Error(\n        `[rsc-kit] No build to test against under ${root}. Run the build first, or let createTestApp() do it by leaving \\`build\\` on.`,\n      )\n    }\n\n    return existing\n  }\n\n  const fresh = existing && statSync(existing).mtimeMs > newestInput(root)\n\n  if (fresh) return existing\n\n  // The user's own build command, so what is tested is what ships. A test\n  // that built some other way would pass against a bundle nobody deploys -\n  // and used to: this ran `npx vite build` whatever package.json said, which\n  // on a Bun project built under Node and failed on the first `import 'bun'`.\n  const [command, args] = buildCommand(root)\n  const run = spawnSync(command, args, {\n    cwd: root,\n    stdio: ['ignore', 'pipe', 'pipe'],\n    env: { ...process.env, NODE_ENV: 'production' },\n  })\n\n  if (run.status !== 0) {\n    throw new Error(`[rsc-kit] The build failed, so there is nothing to test:\\n${run.stderr}`)\n  }\n\n  const bundle = findBundle(root)\n\n  if (!bundle) {\n    throw new Error(\n      `[rsc-kit] The build finished but no server bundle was found under ${root}. Is rscKit() in vite.config?`,\n    )\n  }\n\n  return bundle\n}\n\n/**\n * Build the app if it needs it, load it, and hand back something to fetch from.\n *\n * Memoised per root: every test file in a run shares one build and one loaded\n * module, which is both the fast path and the correct one — two copies of the\n * server bundle in one process would be two client-reference registries.\n */\n/**\n * Whether Request is the runtime's, told apart from a browser's by behaviour.\n *\n * A browser forbids a script from setting Cookie, so happy-dom's Request drops\n * it from an init - and every signed-in request a test makes arrives with no\n * session, bounces to sign-in, and fails far from the cause. Behaviour rather\n * than identity, because identity depends on which file loaded first.\n */\nfunction runtimeRequest(): boolean {\n  try {\n    return new Request('http://probe.test/', { headers: { cookie: 'probe=1' } }).headers.has('cookie')\n  } catch {\n    return false\n  }\n}\n\nexport async function createTestApp(options: TestAppOptions = {}): Promise<TestApp> {\n  if (!runtimeRequest()) {\n    throw new Error(\n      \"[rsc-kit] createTestApp is running against a browser's Request: a DOM is registered globally \" +\n        '(happy-dom, in a preload or an earlier test file), and it replaces Request, Response, Headers and fetch. ' +\n        'A browser cannot set Cookie, so every signed-in request would arrive with no session. ' +\n        'Register the DOM only in the component test file and `GlobalRegistrator.unregister()` after it, ' +\n        'and run the suites isolated (`bun test --isolate`). See the testing guide, \"Components\".',\n    )\n  }\n\n  const root = resolve(options.root ?? process.cwd())\n  const origin = options.origin ?? 'https://app.test'\n\n  built.set(root, built.get(root) ?? ensureBuilt(root, options.build ?? true))\n\n  // The app is built for production, which refuses to sign refreshOn names\n  // without a key. One process, one key: a fixed one, unless the test set its own.\n  if (!process.env.RSC_SIGNING_SECRET) {\n    configureChanged({ secret: 'rsc-kit-test' })\n  }\n\n  const bundle = await built.get(root)!\n  const entry = (await import(pathToFileURL(bundle).href)) as {\n    default: (request: Request) => Promise<Response>\n    installHostFn?: (fn: (name: string, ...args: unknown[]) => Promise<unknown>) => () => void\n    installBackendForward?: (fn: ((request: Request) => Response | Promise<Response>) | null) => void\n  }\n\n  if (typeof entry.default !== 'function') {\n    throw new Error(`[rsc-kit] ${bundle} does not export a request handler.`)\n  }\n\n  const host = options.host\n    ? httpHostCalls({ endpoint: 'http://test-host/__rsc/host-call', secret: 'test', fetch: testHostFetch(options.host) })\n    : null\n\n  if (host && !entry.installHostFn) {\n    throw new Error(`[rsc-kit] ${bundle} cannot take a host. Rebuild against the current @rsc-kit/core.`)\n  }\n\n  const fetch: TestApp['fetch'] = async (path, init) => {\n    const request = new Request(new URL(path, origin), init)\n\n    // Per request, not once: the loaded bundle is shared by every app a\n    // run creates, and the host is this app's.\n    if (host) entry.installHostFn!(host)\n    if (options.backend && !entry.installBackendForward) {\n      throw new Error(`[rsc-kit] ${bundle} cannot take a backend. Rebuild against the current @rsc-kit/core.`)\n    }\n    entry.installBackendForward?.(options.backend ?? null)\n\n    return staticFile(root, request) ?? entry.default(request)\n  }\n\n  return {\n    bundle,\n    fetch,\n    markup: async (path, init) => {\n      const html = await (await fetch(path, init)).text()\n\n      // A script's body never holds its own closing tag: the payload writes\n      // \"<\" as \\u003c, and React's scripts are its own.\n      return html.replace(/<script\\b[^>]*>[\\s\\S]*?<\\/script>/gi, '')\n    },\n    watched: async (path, init) => {\n      // The render records what each region resolves to while this is set:\n      // the app's bundle runs in this process, so it sees the same global.\n      const recording: Record<string, string[]> = {}\n      const into = globalThis as { [WATCHED]?: Record<string, string[]> }\n\n      into[WATCHED] = recording\n\n      try {\n        // Read to the end: the names resolve under their own Suspense, so\n        // they are in the stream's tail, not its head.\n        await (await fetch(path, init)).text()\n      } finally {\n        delete into[WATCHED]\n      }\n\n      return recording\n    },\n  }\n}\n\n/** Where a render records what its regions refresh on, while watched() asks (js/refreshOn). */\nconst WATCHED = Symbol.for('rsc-kit.test-watched')\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rsc-kit/core",
-  "version": "0.30.3",
+  "version": "0.30.5",
   "description": "React Server Components as a Vite plugin. Routing, streaming, server actions, typed urls and build-time prerendering — deploy to Bun, Node, Workers, Vercel or Deno.",
   "license": "MIT",
   "type": "module",