@rshono/core 1.0.0-rc.19 → 1.0.0-rc.20

package/dist/router.js.map

@@ -1 +1 @@
-{"version":3,"file":"router.js","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAyPA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;AACnC,CAAC;AAsLD,MAAM,UAAU,YAAY,CAAC,KAAqC;IAChE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAE,KAAqB,CAAC;AAC3E,CAAC","sourcesContent":["import type { Env, Handler } from 'hono';\nimport type { ParamKeys, ParamKeyToRecord } from 'hono/types';\nimport type { ReactNode } from 'react';\n// Type-only, so importing `@rshono/core` pulls in none of `context.ts`'s runtime machinery.\nimport type { RequestContext } from './runtime/context.js';\n\ntype Simplify<T> = { [K in keyof T]: T[K] } & {};\ntype UnionToIntersection<U> = (U extends unknown ? (k: U) => void : never) extends (k: infer I) => void ? I : never;\n\n/**\n * The `params` record implied by a route path pattern — one required `string` key per `:param`\n * segment, `Record<string, never>` for a path with none. Paths use Hono's syntax, so `:id`,\n * `:id{[0-9]+}` and `*` all work.\n *\n * You rarely name this directly; {@link PageProps} applies it for you.\n *\n * @typeParam P - The literal route path, e.g. `'/users/:id/posts/:postId'`.\n *\n * @example\n * ```ts\n * type P = PathParams<'/users/:id/posts/:postId'>; // { id: string; postId: string }\n * ```\n *\n * @see {@link https://hono.dev/docs/api/routing#path-parameter | Hono — path parameters}\n */\nexport type PathParams<P extends string> =\n  ParamKeys<P> extends never ? Record<string, never> : Simplify<UnionToIntersection<ParamKeyToRecord<ParamKeys<P>>>>;\n\n/**\n * Props every page component receives. Pass the route's path as the type argument to get `params`\n * typed key-by-key; without it `params` falls back to an open `Record<string, string>`.\n *\n * `defineRoutes` checks each page's props against `PageProps<path>`, so a mismatched path literal is\n * a type error at the route definition. `url` and `params` mirror what `useNavigation()` gives a\n * `'use client'` component, so a read moves across the server/client line unchanged.\n *\n * @typeParam Path - The literal path this page is mounted at, e.g. `'/profile/:id'`.\n * @typeParam E - The app's Hono {@link Env}, to type {@link RequestContext.var} and\n *   {@link RequestContext.env} on {@link PageProps.ctx}.\n *\n * @example\n * ```tsx\n * import type { PageProps } from '@rshono/core';\n *\n * export default async function Profile({ params, url }: PageProps<'/profile/:id'>) {\n *   const user = await db.getUser(params.id); // params.id is string\n *   const tab = url.searchParams.get('tab') ?? 'overview';\n *   return <Layout>{user.name} — {tab}</Layout>;\n * }\n * ```\n *\n * @see {@link https://www.rshono.com/docs/pages#page-props | Docs — page props}\n */\nexport interface PageProps<Path extends string = string, E extends Env = Env> {\n  /**\n   * The absolute browser-facing request {@link URL}, proxy-header aware (`X-Forwarded-Host` /\n   * `-Proto`). A fresh instance per request, so mutating it is local to the page; it is not\n   * serializable, so hand a `'use client'` component `url.href` rather than `url`.\n   *\n   * On a `render: 'static'` route this is the build-time URL — rendered once against `siteUrl`, so\n   * `url.searchParams` is always empty. Read the query from `useNavigation().url` in a `'use client'`\n   * component instead, or mark the route `render: 'dynamic'`.\n   */\n  url: URL;\n  /** Matched route params for this request, e.g. `{ id: '42' }` for `/profile/:id`. */\n  params: string extends Path ? Record<string, string> : PathParams<Path>;\n  /**\n   * The request context — the object `getRequestContext()` returns, handed to the page so cookies,\n   * headers, env and middleware variables are reachable without an import.\n   *\n   * Server-only, non-enumerable (a `{...props}` spread and `JSON.stringify` both skip it) and never\n   * serialized. Passing it to a `'use client'` component fails the render, because it wraps the live\n   * request — read what you need here and pass plain values down.\n   *\n   * Non-enumerable is the one place this API breaks a JavaScript expectation, and it is unavoidable: an\n   * enumerable `ctx` would put `ctx.hono.env` — every binding and secret — into React's dev-only\n   * serialization of a server component's props, which walks own enumerable properties. So `<Child\n   * {...props} />` hands a **server** child `ctx: undefined` with no error, while the type says otherwise.\n   * Nested server components are meant to call `getRequestContext()` for the same object rather than\n   * receive it, which is also the fix if a spread has already cost you an afternoon.\n   *\n   * Reading it on a `render: 'static'` route throws: a prerendered page has no per-request context.\n   * Mark the route `render: 'dynamic'`, or use the `url` / `params` props.\n   *\n   * @example\n   * ```tsx\n   * export default function Dashboard({ ctx }: PageProps) {\n   *   const session = ctx.cookies.get('session');\n   *   if (!session) redirect('/login');\n   *   return <Layout>Signed in as {session}</Layout>;\n   * }\n   * ```\n   */\n  ctx: RequestContext<E>;\n}\n\n/**\n * A page: a React **server component** rendering the entire document (`<html>…</html>`), usually via\n * a shared layout. It may be `async` and await data directly.\n *\n * Each page module default-exports exactly one. Interactive parts belong in `'use client'` components\n * the page imports — only those ship JS.\n *\n * @typeParam P - The component's props; for a page these are {@link PageProps}.\n *\n * @see {@link https://react.dev/reference/rsc/server-components | React — Server Components}\n * @see {@link https://www.rshono.com/docs/pages | Docs — pages}\n */\n// `any`, not `unknown`: this default is what an unparameterised `PageComponent` means in a user's own\n// annotation, and `unknown` props would reject every component that declares the props it actually takes.\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type PageComponent<P = any> = (props: P) => ReactNode | Promise<ReactNode>;\n\n/**\n * The shape an `{ type: 'endpoint' }` route's server module must have: a single named `handler`\n * export. It only ever loads on the server, so importing a database client or reading secrets from it\n * is safe.\n *\n * @example\n * ```ts\n * // src/health.ts\n * import type { Handler } from 'hono';\n *\n * export const handler: Handler = (c) => c.json({ ok: true });\n * ```\n *\n * @see {@link https://www.rshono.com/docs/routing#endpoint-routes | Docs — endpoint routes}\n */\nexport interface EndpointServerModule {\n  /**\n   * A Hono {@link Handler} for every request the route matches. It is passed Hono's `Context`, so the\n   * request, the response builders (`c.json`, `c.text`, `c.body`) and middleware variables are all\n   * reached through it.\n   *\n   * @see {@link https://hono.dev/docs/api/context | Hono — Context}\n   */\n  handler: Handler;\n}\n\n/**\n * A page route — a path rendered by a server component. This is the default\n * route kind, so `type` can be omitted.\n *\n * @example\n * ```ts\n * { path: '/profile/:id', component: () => import('./components/profile') }\n * ```\n */\nexport interface PageRoute {\n  /** Discriminates a page from an endpoint; optional because `'page'` is the default. */\n  type?: 'page';\n  /**\n   * Hono-style path pattern, e.g. `/`, `/profile/:id`, `/files/*`. Routes are matched in\n   * declaration order.\n   *\n   * @see {@link https://hono.dev/docs/api/routing | Hono — routing}\n   */\n  path: string;\n  /**\n   * Dynamic import of the page module, whose default export is the {@link PageComponent}.\n   *\n   * Write it inline as `() => import('…')`: the framework detects that exact form and injects the\n   * `'use server-entry'` directive that attaches the page's client JS and CSS. Wire the component up\n   * any other way — a variable, a barrel re-export, a computed specifier — and you have to put\n   * `'use server-entry'` on the page module's first line yourself.\n   *\n   * @example\n   * ```ts\n   * component: () => import('./components/profile')\n   * ```\n   *\n   * @see {@link https://www.rshono.com/docs/pages#the-use-server-entry-directive | Docs — the `'use server-entry'` directive}\n   */\n  component: () => Promise<{ default: PageComponent }>;\n  /** `'static'` prerenders the route at build time; `'dynamic'` (the default) renders per request. */\n  render?: 'static' | 'dynamic';\n  /**\n   * For a `render: 'static'` route with params: the param sets to prerender, one page each. Runs at\n   * build time on the server, so it may hit a database or read the filesystem.\n   *\n   * A parameterised static route without this falls back to rendering per request, with a build\n   * warning. Wildcard (`*`), optional and regex params cannot be prerendered.\n   *\n   * @example\n   * ```ts\n   * {\n   *   path: '/docs/:slug',\n   *   render: 'static',\n   *   component: () => import('./components/documentation'),\n   *   staticPaths: async () => (await db.docs.all()).map((d) => ({ slug: d.slug })),\n   * }\n   * ```\n   *\n   * @see {@link https://www.rshono.com/docs/routing#static-rendering | Docs — static rendering}\n   */\n  staticPaths?: () => Array<Record<string, string>> | Promise<Array<Record<string, string>>>;\n}\n\n/**\n * An endpoint route — a path served by a raw Hono handler instead of a React\n * component. Use it for JSON APIs, webhooks, redirects, feeds, or anything that\n * isn't an HTML page.\n *\n * @example\n * ```ts\n * { type: 'endpoint', path: '/api/health', server: () => import('./health') }\n * ```\n *\n * @see {@link https://www.rshono.com/docs/routing#endpoint-routes | Docs — endpoint routes}\n */\nexport interface EndpointRoute {\n  /** Marks this route as an endpoint rather than a page. Required. */\n  type: 'endpoint';\n  /**\n   * Hono-style path pattern, e.g. `/api/health`, `/api/users/:id`.\n   *\n   * @see {@link https://hono.dev/docs/api/routing | Hono — routing}\n   */\n  path: string;\n  /**\n   * HTTP method to match, or a list of them. Defaults to `'all'` — every method.\n   *\n   * There is no `'head'`: Hono dispatches a `HEAD` as a `GET` and strips the body off the response, so a\n   * `HEAD` is already answered by the `'get'` handler (and by `'all'`), and a route registered for `HEAD`\n   * alone would never be reached.\n   *\n   * A list is how a two-method endpoint says so; `'all'` inside one is refused, since it is either the\n   * whole thing or a mistake. A method the route does not name gets Hono's 404 rather than the handler.\n   *\n   * @example\n   * ```ts\n   * { type: 'endpoint', path: '/api/session', method: ['get', 'delete'], server: () => import('./session') }\n   * ```\n   */\n  method?: HTTPMethod | readonly HTTPMethod[];\n  /** Dynamic import of the {@link EndpointServerModule} exporting `handler`. */\n  server: () => Promise<EndpointServerModule>;\n}\n\n/**\n * HTTP methods an {@link EndpointRoute} can match. `'all'` matches every method.\n *\n * No `'head'`, deliberately — see {@link EndpointRoute.method}. A `HEAD` reaches the `'get'` handler.\n */\nexport type HTTPMethod = 'get' | 'post' | 'put' | 'patch' | 'delete' | 'options' | 'all';\n\n/** Any entry in the `routes` array: a {@link PageRoute} or an {@link EndpointRoute}. */\nexport type Route = PageRoute | EndpointRoute;\n\n/**\n * Narrows a {@link Route} to a {@link PageRoute} — `type` is optional on page routes, so anything not\n * explicitly `'endpoint'` is one.\n *\n * @internal\n */\nexport function isPageRoute(route: Route): route is PageRoute {\n  return route.type !== 'endpoint';\n}\n\n/**\n * A page the framework falls back to rather than routes to — `notFound` and `error` in\n * {@link RouteConfig}. Same contract as a {@link PageRoute} `component`, without a path of its own.\n */\nexport interface FallbackPage {\n  /** Dynamic import of the page module; its default export is the {@link PageComponent}. */\n  component: () => Promise<{ default: PageComponent }>;\n}\n\n/**\n * The error detail handed to the `error` page. Redacted in production — a generic\n * `'Internal Server Error'` and no `stack`; in dev, the real message and stack.\n */\nexport interface ErrorPageInfo {\n  /** The thrown error's message in dev; `'Internal Server Error'` in production. */\n  message: string;\n  /**\n   * The stack trace — **dev only**, and `undefined` in every build. Optional for that reason rather than\n   * because some errors lack one, so a page that renders it should guard on it, not on a mode flag.\n   */\n  stack?: string;\n}\n\n/**\n * Props for the `error` page declared in {@link RouteConfig.error} — the usual {@link PageProps} plus\n * the redaction-aware {@link ErrorPageInfo}.\n *\n * In a build `error.message` is the generic `'Internal Server Error'` and `error.stack` is `undefined`, so\n * the page below guards on the stack rather than on a mode flag — there is no mode flag to guard on.\n *\n * @typeParam E - The app's Hono {@link Env}, forwarded to {@link PageProps.ctx}.\n *\n * @example\n * ```tsx\n * import type { ErrorPageProps } from '@rshono/core';\n *\n * export default function ServerError({ error }: ErrorPageProps) {\n *   return (\n *     <html>\n *       <body>\n *         <h1>Something went wrong</h1>\n *         <p>{error.message}</p>\n *         {error.stack && <pre>{error.stack}</pre>}\n *       </body>\n *     </html>\n *   );\n * }\n * ```\n */\nexport type ErrorPageProps<E extends Env = Env> = PageProps<string, E> & {\n  /** The error that failed the request, redacted in production — see {@link ErrorPageInfo}. */\n  error: ErrorPageInfo;\n};\n\n/**\n * The object form accepted by {@link defineRoutes}: the route table plus the two\n * optional framework-owned pages.\n *\n * @typeParam TRoutes - Inferred tuple of route literals, which is what makes the\n *   per-route `path` → props check possible.\n *\n * @see {@link https://www.rshono.com/docs/routing#notfound-and-error | Docs — notFound and error pages}\n */\nexport interface RouteConfig<TRoutes extends readonly Route[] = readonly Route[]> {\n  /** Every page and endpoint in the app, matched in order. */\n  routes: TRoutes;\n  /** Page rendered with a 404 status for unmatched paths and for `notFound()` calls. */\n  notFound?: FallbackPage;\n  /** Page rendered with a 500 status when a request throws. Receives {@link ErrorPageProps}. */\n  error?: FallbackPage;\n}\n\n/**\n * The same check for `staticPaths`, whose param sets have to fill the route's own path: a key that does not\n * is otherwise a build-time throw from `interpolatePath` rather than a type error.\n *\n * Keys only, not full assignability, because the declared field type is `Record<string, string>` and a\n * `staticPaths` annotated as returning exactly that has to stay accepted — an index signature carries no\n * key to check, so it passes. Skipped where the path has no params, because `staticPaths` is not called for\n * such a route at all and an error there would be about the wrong thing.\n */\ntype ValidateStaticPaths<R, P extends string> =\n  ParamKeys<P> extends never\n    ? R\n    : R extends { staticPaths: () => infer Sets }\n      ? Awaited<Sets> extends ReadonlyArray<infer Set>\n        ? [keyof PathParams<P>] extends [keyof Set]\n          ? R\n          : R & { staticPaths: `every param set staticPaths returns needs the params of '${P}'` }\n        : R\n      : R;\n\n// `PageProps<P, any>`, not `PageProps<P>`: only the *path* is being checked, and pinning the Env would\n// fail every page that declares its own (`PageProps<'/x', MyEnv>`, to type `ctx.var`).\ntype ValidateRoute<R> = R extends {\n  path: infer P extends string;\n  component: () => Promise<{ default: PageComponent<infer CP> }>;\n}\n  ? // eslint-disable-next-line @typescript-eslint/no-explicit-any -- the Env is deliberately unpinned; see above.\n    [PageProps<P, any>] extends [CP]\n    ? ValidateStaticPaths<R, P>\n    : R & { component: `component props are not satisfied by PageProps<'${P}'>` }\n  : R;\n\ntype ValidateRoutes<TRoutes extends readonly Route[]> = { [K in keyof TRoutes]: ValidateRoute<TRoutes[K]> };\n\n/**\n * Refuses a key that is not a {@link RouteConfig} field — a typo'd `notfound` is otherwise a fallback page\n * that never renders, and nothing at runtime looks for one.\n *\n * Excess-property checking did this while the object form was an overload of its own with a concrete\n * parameter type. It cannot once the parameter is generic and inferred from the argument, because the\n * inferred type *has* the extra key. The message here is the better one anyway: it lands on the field.\n */\ntype ValidateConfigKeys<T> =\n  Exclude<keyof T, keyof RouteConfig> extends never\n    ? T\n    : T & Record<Exclude<keyof T, keyof RouteConfig>, 'not a defineRoutes field — the fields are routes, notFound and error'>;\n\n/** The check for whichever of the two accepted shapes was passed. */\ntype ValidateInput<T> = T extends readonly Route[]\n  ? ValidateRoutes<T>\n  : T extends { routes: infer R extends readonly Route[] }\n    ? ValidateConfigKeys<T> & { routes: ValidateRoutes<R> }\n    : T;\n\n/** The route tuple inside either shape, so the return type carries the literals through both. */\ntype RoutesOf<T> = T extends readonly Route[] ? T : T extends { routes: infer R extends readonly Route[] } ? R : readonly Route[];\n\n/**\n * Declares the app's route table. Export the result as `routes` from `src/routes.ts` — the one file\n * rshono requires. It only ever runs on the server, so importing server-only modules from it (inside\n * `staticPaths`, say) is safe.\n *\n * Takes a {@link RouteConfig} — the `routes` array plus the optional `notFound` and `error` pages — or a\n * bare {@link Route} array as shorthand for an app with neither.\n *\n * Beyond typing the config, every page is cross-checked against its own path: props not satisfied by\n * `PageProps<'<its path>'>` make the `component` field a type error, and a `staticPaths` whose param sets do\n * not fill the path makes that field one.\n *\n * **One signature over both shapes, deliberately.** The array form used to be a second overload, which meant\n * a mistake inside a bare array was reported as an overload-resolution failure whose *first* line was the\n * object form's complaint — \"Property 'routes' is missing\" — pointing at a change the author should not make.\n * The real message was on line 8. A single signature reports the argument once, at the field that is wrong.\n *\n * @param input - A {@link RouteConfig}, or the bare `routes` array.\n * @returns The config, unchanged and fully typed; an array is wrapped as `{ routes }`.\n *\n * @example\n * ```ts\n * // src/routes.ts\n * import { defineRoutes } from '@rshono/core';\n *\n * export const routes = defineRoutes({\n *   routes: [\n *     { path: '/', component: () => import('./components/home') },\n *     { path: '/profile/:id', component: () => import('./components/profile') },\n *     {\n *       path: '/docs/:slug',\n *       render: 'static',\n *       component: () => import('./components/documentation'),\n *       staticPaths: async () => [{ slug: 'getting-started' }, { slug: 'deployment' }],\n *     },\n *     { type: 'endpoint', path: '/api/health', server: () => import('./health') },\n *   ],\n *   notFound: { component: () => import('./components/404') },\n *   error: { component: () => import('./components/500') },\n * });\n * ```\n *\n * @example\n * ```ts\n * // The shorthand, for an app with no notFound or error page.\n * export const routes = defineRoutes([{ path: '/', component: () => import('./components/home') }]);\n * ```\n *\n * @see {@link https://www.rshono.com/docs/routing | Docs — routing}\n */\nexport function defineRoutes<const T extends readonly Route[] | RouteConfig<readonly Route[]>>(input: T & ValidateInput<T>): RouteConfig<RoutesOf<T>>;\nexport function defineRoutes(input: readonly Route[] | RouteConfig): RouteConfig {\n  return Array.isArray(input) ? { routes: input } : (input as RouteConfig);\n}\n"]}
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAkQA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC;AACnC,CAAC;AA6LD,MAAM,UAAU,YAAY,CAAC,KAAqC;IAChE,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAE,KAAqB,CAAC;AAC3E,CAAC","sourcesContent":["import type { Env, Handler } from 'hono';\nimport type { ParamKeys, ParamKeyToRecord } from 'hono/types';\nimport type { ReactNode } from 'react';\n// Type-only, so importing `@rshono/core` pulls in none of `context.ts`'s runtime machinery.\nimport type { RequestContext } from './runtime/context.js';\n\ntype Simplify<T> = { [K in keyof T]: T[K] } & {};\ntype UnionToIntersection<U> = (U extends unknown ? (k: U) => void : never) extends (k: infer I) => void ? I : never;\n\n/**\n * The `params` record implied by a route path pattern — one required `string` key per `:param`\n * segment, `Record<string, never>` for a path with none. Paths use Hono's syntax, so `:id`,\n * `:id{[0-9]+}` and `*` all work.\n *\n * You rarely name this directly; {@link PageProps} applies it for you.\n *\n * @typeParam P - The literal route path, e.g. `'/users/:id/posts/:postId'`.\n *\n * @example\n * ```ts\n * type P = PathParams<'/users/:id/posts/:postId'>; // { id: string; postId: string }\n * ```\n *\n * @see {@link https://hono.dev/docs/api/routing#path-parameter | Hono — path parameters}\n */\nexport type PathParams<P extends string> =\n  ParamKeys<P> extends never ? Record<string, never> : Simplify<UnionToIntersection<ParamKeyToRecord<ParamKeys<P>>>>;\n\n/**\n * Props every page component receives. Pass the route's path as the type argument to get `params`\n * typed key-by-key; without it `params` falls back to an open `Record<string, string>`.\n *\n * `defineRoutes` checks each page's props against `PageProps<path>`, so a mismatched path literal is\n * a type error at the route definition. `url` and `params` mirror what `useNavigation()` gives a\n * `'use client'` component, so a read moves across the server/client line unchanged.\n *\n * @typeParam Path - The literal path this page is mounted at, e.g. `'/profile/:id'`.\n * @typeParam E - The app's Hono {@link Env}, to type {@link RequestContext.var} and\n *   {@link RequestContext.env} on {@link PageProps.ctx}.\n *\n * @example\n * ```tsx\n * import type { PageProps } from '@rshono/core';\n *\n * export default async function Profile({ params, url }: PageProps<'/profile/:id'>) {\n *   const user = await db.getUser(params.id); // params.id is string\n *   const tab = url.searchParams.get('tab') ?? 'overview';\n *   return <Layout>{user.name} — {tab}</Layout>;\n * }\n * ```\n *\n * @see {@link https://www.rshono.com/docs/pages#page-props | Docs — page props}\n */\nexport interface PageProps<Path extends string = string, E extends Env = Env> {\n  /**\n   * The absolute browser-facing request {@link URL}, proxy-header aware (`X-Forwarded-Host` /\n   * `-Proto`). A fresh instance per request, so mutating it is local to the page; it is not\n   * serializable, so hand a `'use client'` component `url.href` rather than `url`.\n   *\n   * On a `render: 'static'` route this is the build-time URL — rendered once against `siteUrl`, so the\n   * origin is `siteUrl`'s and `url.searchParams` is always empty, on first paint and after a soft\n   * navigation alike. **`useNavigation().url` is the same frozen URL, not a way around it**: the payload\n   * carries one `href` and both readings come from it. Mark the route `render: 'dynamic'` if the page\n   * depends on the query; a `'use client'` component that only wants it after hydration can read\n   * `location.search` in an effect.\n   */\n  url: URL;\n  /** Matched route params for this request, e.g. `{ id: '42' }` for `/profile/:id`. */\n  params: string extends Path ? Record<string, string> : PathParams<Path>;\n  /**\n   * The request context — the object `getRequestContext()` returns, handed to the page so cookies,\n   * headers, env and middleware variables are reachable without an import.\n   *\n   * Server-only, non-enumerable (a `{...props}` spread and `JSON.stringify` both skip it) and never\n   * serialized. Passing it to a `'use client'` component fails the render, because it wraps the live\n   * request — read what you need here and pass plain values down.\n   *\n   * Non-enumerable is the one place this API breaks a JavaScript expectation, and it is unavoidable: an\n   * enumerable `ctx` would put `ctx.hono.env` — every binding and secret — into React's dev-only\n   * serialization of a server component's props, which walks own enumerable properties. So `<Child\n   * {...props} />` hands a **server** child `ctx: undefined` with no error, while the type says otherwise.\n   * Nested server components are meant to call `getRequestContext()` for the same object rather than\n   * receive it, which is also the fix if a spread has already cost you an afternoon.\n   *\n   * Reading it on a `render: 'static'` route throws: a prerendered page has no per-request context.\n   * Mark the route `render: 'dynamic'`, or use the `url` / `params` props.\n   *\n   * @example\n   * ```tsx\n   * export default function Dashboard({ ctx }: PageProps) {\n   *   const session = ctx.cookies.get('session');\n   *   if (!session) redirect('/login');\n   *   return <Layout>Signed in as {session}</Layout>;\n   * }\n   * ```\n   */\n  ctx: RequestContext<E>;\n}\n\n/**\n * A page: a React **server component** rendering the entire document (`<html>…</html>`), usually via\n * a shared layout. It may be `async` and await data directly.\n *\n * Each page module default-exports exactly one. Interactive parts belong in `'use client'` components\n * the page imports — only those ship JS.\n *\n * @typeParam P - The component's props; for a page these are {@link PageProps}.\n *\n * @see {@link https://react.dev/reference/rsc/server-components | React — Server Components}\n * @see {@link https://www.rshono.com/docs/pages | Docs — pages}\n */\n// `any`, not `unknown`: this default is what an unparameterised `PageComponent` means in a user's own\n// annotation, and `unknown` props would reject every component that declares the props it actually takes.\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nexport type PageComponent<P = any> = (props: P) => ReactNode | Promise<ReactNode>;\n\n/**\n * The shape an `{ type: 'endpoint' }` route's server module must have: a single named `handler`\n * export. It only ever loads on the server, so importing a database client or reading secrets from it\n * is safe.\n *\n * @example\n * ```ts\n * // src/health.ts\n * import type { Handler } from 'hono';\n *\n * export const handler: Handler = (c) => c.json({ ok: true });\n * ```\n *\n * @see {@link https://www.rshono.com/docs/routing#endpoint-routes | Docs — endpoint routes}\n */\nexport interface EndpointServerModule {\n  /**\n   * A Hono {@link Handler} for every request the route matches. It is passed Hono's `Context`, so the\n   * request, the response builders (`c.json`, `c.text`, `c.body`) and middleware variables are all\n   * reached through it.\n   *\n   * @see {@link https://hono.dev/docs/api/context | Hono — Context}\n   */\n  handler: Handler;\n}\n\n/**\n * A page route — a path rendered by a server component. This is the default\n * route kind, so `type` can be omitted.\n *\n * @example\n * ```ts\n * { path: '/profile/:id', component: () => import('./components/profile') }\n * ```\n */\nexport interface PageRoute {\n  /** Discriminates a page from an endpoint; optional because `'page'` is the default. */\n  type?: 'page';\n  /**\n   * Hono-style path pattern, e.g. `/`, `/profile/:id`, `/files/*`. Routes are matched in\n   * declaration order.\n   *\n   * @see {@link https://hono.dev/docs/api/routing | Hono — routing}\n   */\n  path: string;\n  /**\n   * Dynamic import of the page module, whose default export is the {@link PageComponent}.\n   *\n   * Write it inline as `() => import('…')`: the framework detects that exact form and injects the\n   * `'use server-entry'` directive that attaches the page's client JS and CSS. Wire the component up\n   * any other way — a variable, a barrel re-export, a computed specifier — and you have to put\n   * `'use server-entry'` on the page module's first line yourself.\n   *\n   * @example\n   * ```ts\n   * component: () => import('./components/profile')\n   * ```\n   *\n   * @see {@link https://www.rshono.com/docs/pages#the-use-server-entry-directive | Docs — the `'use server-entry'` directive}\n   */\n  component: () => Promise<{ default: PageComponent }>;\n  /** `'static'` prerenders the route at build time; `'dynamic'` (the default) renders per request. */\n  render?: 'static' | 'dynamic';\n  /**\n   * For a `render: 'static'` route with params: the param sets to prerender, one page each. Runs at\n   * build time on the server, so it may hit a database or read the filesystem.\n   *\n   * A parameterised static route without this falls back to rendering per request, with a build\n   * warning. Wildcard (`*`), optional and regex params cannot be prerendered.\n   *\n   * **Every value has to be one portable file name**, since that is what a prerendered page is stored as,\n   * and the build fails naming the value rather than writing a page nothing will serve. So: no\n   * `\\ / : * ? \" < > |` or control characters, no trailing `.` or space, and not a reserved Windows device\n   * name (`CON`, `NUL`, `COM1`, …) — the last two enforced everywhere, so a build that works on macOS is\n   * not one that fails in CI on Windows.\n   *\n   * @example\n   * ```ts\n   * {\n   *   path: '/docs/:slug',\n   *   render: 'static',\n   *   component: () => import('./components/documentation'),\n   *   staticPaths: async () => (await db.docs.all()).map((d) => ({ slug: d.slug })),\n   * }\n   * ```\n   *\n   * @see {@link https://www.rshono.com/docs/routing#static-rendering | Docs — static rendering}\n   */\n  staticPaths?: () => Array<Record<string, string>> | Promise<Array<Record<string, string>>>;\n}\n\n/**\n * An endpoint route — a path served by a raw Hono handler instead of a React\n * component. Use it for JSON APIs, webhooks, redirects, feeds, or anything that\n * isn't an HTML page.\n *\n * @example\n * ```ts\n * { type: 'endpoint', path: '/api/health', server: () => import('./health') }\n * ```\n *\n * @see {@link https://www.rshono.com/docs/routing#endpoint-routes | Docs — endpoint routes}\n */\nexport interface EndpointRoute {\n  /** Marks this route as an endpoint rather than a page. Required. */\n  type: 'endpoint';\n  /**\n   * Hono-style path pattern, e.g. `/api/health`, `/api/users/:id`.\n   *\n   * @see {@link https://hono.dev/docs/api/routing | Hono — routing}\n   */\n  path: string;\n  /**\n   * HTTP method to match, or a list of them. Defaults to `'all'` — every method.\n   *\n   * There is no `'head'`: Hono dispatches a `HEAD` as a `GET` and strips the body off the response, so a\n   * `HEAD` is already answered by the `'get'` handler (and by `'all'`), and a route registered for `HEAD`\n   * alone would never be reached.\n   *\n   * A list is how a two-method endpoint says so; `'all'` inside one is refused, since it is either the\n   * whole thing or a mistake. A method the route does not name gets Hono's 404 rather than the handler.\n   *\n   * @example\n   * ```ts\n   * { type: 'endpoint', path: '/api/session', method: ['get', 'delete'], server: () => import('./session') }\n   * ```\n   */\n  method?: HTTPMethod | readonly HTTPMethod[];\n  /** Dynamic import of the {@link EndpointServerModule} exporting `handler`. */\n  server: () => Promise<EndpointServerModule>;\n}\n\n/**\n * HTTP methods an {@link EndpointRoute} can match. `'all'` matches every method.\n *\n * No `'head'`, deliberately — see {@link EndpointRoute.method}. A `HEAD` reaches the `'get'` handler.\n */\nexport type HTTPMethod = 'get' | 'post' | 'put' | 'patch' | 'delete' | 'options' | 'all';\n\n/** Any entry in the `routes` array: a {@link PageRoute} or an {@link EndpointRoute}. */\nexport type Route = PageRoute | EndpointRoute;\n\n/**\n * Narrows a {@link Route} to a {@link PageRoute} — `type` is optional on page routes, so anything not\n * explicitly `'endpoint'` is one.\n *\n * @internal\n */\nexport function isPageRoute(route: Route): route is PageRoute {\n  return route.type !== 'endpoint';\n}\n\n/**\n * A page the framework falls back to rather than routes to — `notFound` and `error` in\n * {@link RouteConfig}. Same contract as a {@link PageRoute} `component`, without a path of its own.\n */\nexport interface FallbackPage {\n  /** Dynamic import of the page module; its default export is the {@link PageComponent}. */\n  component: () => Promise<{ default: PageComponent }>;\n}\n\n/**\n * The error detail handed to the `error` page. Redacted in production — a generic\n * `'Internal Server Error'` and no `stack`; in dev, the real message and stack.\n */\nexport interface ErrorPageInfo {\n  /** The thrown error's message in dev; `'Internal Server Error'` in production. */\n  message: string;\n  /**\n   * The stack trace — **dev only**, and `undefined` in every build. Optional for that reason rather than\n   * because some errors lack one, so a page that renders it should guard on it, not on a mode flag.\n   */\n  stack?: string;\n}\n\n/**\n * Props for the `error` page declared in {@link RouteConfig.error} — the usual {@link PageProps} plus\n * the redaction-aware {@link ErrorPageInfo}.\n *\n * In a build `error.message` is the generic `'Internal Server Error'` and `error.stack` is `undefined`, so\n * the page below guards on the stack rather than on a mode flag — there is no mode flag to guard on.\n *\n * @typeParam E - The app's Hono {@link Env}, forwarded to {@link PageProps.ctx}.\n *\n * @example\n * ```tsx\n * import type { ErrorPageProps } from '@rshono/core';\n *\n * export default function ServerError({ error }: ErrorPageProps) {\n *   return (\n *     <html>\n *       <body>\n *         <h1>Something went wrong</h1>\n *         <p>{error.message}</p>\n *         {error.stack && <pre>{error.stack}</pre>}\n *       </body>\n *     </html>\n *   );\n * }\n * ```\n */\nexport type ErrorPageProps<E extends Env = Env> = PageProps<string, E> & {\n  /** The error that failed the request, redacted in production — see {@link ErrorPageInfo}. */\n  error: ErrorPageInfo;\n};\n\n/**\n * The object form accepted by {@link defineRoutes}: the route table plus the two\n * optional framework-owned pages.\n *\n * @typeParam TRoutes - Inferred tuple of route literals, which is what makes the\n *   per-route `path` → props check possible.\n *\n * @see {@link https://www.rshono.com/docs/routing#notfound-and-error | Docs — notFound and error pages}\n */\nexport interface RouteConfig<TRoutes extends readonly Route[] = readonly Route[]> {\n  /** Every page and endpoint in the app, matched in order. */\n  routes: TRoutes;\n  /** Page rendered with a 404 status for unmatched paths and for `notFound()` calls. */\n  notFound?: FallbackPage;\n  /**\n   * Page rendered with a 500 status when a request throws — a page component, a page module that will not\n   * load, an endpoint, a server action, or middleware. Receives {@link ErrorPageProps}.\n   *\n   * It is a *fresh* render, with its own flight payload, so it hydrates and behaves like any other page.\n   * An app that declares none gets the framework's plain 500 document instead. If the `error` page itself\n   * throws, that is reported too and the framework's document answers.\n   */\n  error?: FallbackPage;\n}\n\n/**\n * The same check for `staticPaths`, whose param sets have to fill the route's own path: a key that does not\n * is otherwise a build-time throw from `interpolatePath` rather than a type error.\n *\n * Keys only, not full assignability, because the declared field type is `Record<string, string>` and a\n * `staticPaths` annotated as returning exactly that has to stay accepted — an index signature carries no\n * key to check, so it passes. Skipped where the path has no params, because `staticPaths` is not called for\n * such a route at all and an error there would be about the wrong thing.\n */\ntype ValidateStaticPaths<R, P extends string> =\n  ParamKeys<P> extends never\n    ? R\n    : R extends { staticPaths: () => infer Sets }\n      ? Awaited<Sets> extends ReadonlyArray<infer Set>\n        ? [keyof PathParams<P>] extends [keyof Set]\n          ? R\n          : R & { staticPaths: `every param set staticPaths returns needs the params of '${P}'` }\n        : R\n      : R;\n\n// `PageProps<P, any>`, not `PageProps<P>`: only the *path* is being checked, and pinning the Env would\n// fail every page that declares its own (`PageProps<'/x', MyEnv>`, to type `ctx.var`).\ntype ValidateRoute<R> = R extends {\n  path: infer P extends string;\n  component: () => Promise<{ default: PageComponent<infer CP> }>;\n}\n  ? // eslint-disable-next-line @typescript-eslint/no-explicit-any -- the Env is deliberately unpinned; see above.\n    [PageProps<P, any>] extends [CP]\n    ? ValidateStaticPaths<R, P>\n    : R & { component: `component props are not satisfied by PageProps<'${P}'>` }\n  : R;\n\ntype ValidateRoutes<TRoutes extends readonly Route[]> = { [K in keyof TRoutes]: ValidateRoute<TRoutes[K]> };\n\n/**\n * Refuses a key that is not a {@link RouteConfig} field — a typo'd `notfound` is otherwise a fallback page\n * that never renders, and nothing at runtime looks for one.\n *\n * Excess-property checking did this while the object form was an overload of its own with a concrete\n * parameter type. It cannot once the parameter is generic and inferred from the argument, because the\n * inferred type *has* the extra key. The message here is the better one anyway: it lands on the field.\n */\ntype ValidateConfigKeys<T> =\n  Exclude<keyof T, keyof RouteConfig> extends never\n    ? T\n    : T & Record<Exclude<keyof T, keyof RouteConfig>, 'not a defineRoutes field — the fields are routes, notFound and error'>;\n\n/** The check for whichever of the two accepted shapes was passed. */\ntype ValidateInput<T> = T extends readonly Route[]\n  ? ValidateRoutes<T>\n  : T extends { routes: infer R extends readonly Route[] }\n    ? ValidateConfigKeys<T> & { routes: ValidateRoutes<R> }\n    : T;\n\n/** The route tuple inside either shape, so the return type carries the literals through both. */\ntype RoutesOf<T> = T extends readonly Route[] ? T : T extends { routes: infer R extends readonly Route[] } ? R : readonly Route[];\n\n/**\n * Declares the app's route table. Export the result as `routes` from `src/routes.ts` — the one file\n * rshono requires. It only ever runs on the server, so importing server-only modules from it (inside\n * `staticPaths`, say) is safe.\n *\n * Takes a {@link RouteConfig} — the `routes` array plus the optional `notFound` and `error` pages — or a\n * bare {@link Route} array as shorthand for an app with neither.\n *\n * Beyond typing the config, every page is cross-checked against its own path: props not satisfied by\n * `PageProps<'<its path>'>` make the `component` field a type error, and a `staticPaths` whose param sets do\n * not fill the path makes that field one.\n *\n * **One signature over both shapes, deliberately.** The array form used to be a second overload, which meant\n * a mistake inside a bare array was reported as an overload-resolution failure whose *first* line was the\n * object form's complaint — \"Property 'routes' is missing\" — pointing at a change the author should not make.\n * The real message was on line 8. A single signature reports the argument once, at the field that is wrong.\n *\n * @param input - A {@link RouteConfig}, or the bare `routes` array.\n * @returns The config, unchanged and fully typed; an array is wrapped as `{ routes }`.\n *\n * @example\n * ```ts\n * // src/routes.ts\n * import { defineRoutes } from '@rshono/core';\n *\n * export const routes = defineRoutes({\n *   routes: [\n *     { path: '/', component: () => import('./components/home') },\n *     { path: '/profile/:id', component: () => import('./components/profile') },\n *     {\n *       path: '/docs/:slug',\n *       render: 'static',\n *       component: () => import('./components/documentation'),\n *       staticPaths: async () => [{ slug: 'getting-started' }, { slug: 'deployment' }],\n *     },\n *     { type: 'endpoint', path: '/api/health', server: () => import('./health') },\n *   ],\n *   notFound: { component: () => import('./components/404') },\n *   error: { component: () => import('./components/500') },\n * });\n * ```\n *\n * @example\n * ```ts\n * // The shorthand, for an app with no notFound or error page.\n * export const routes = defineRoutes([{ path: '/', component: () => import('./components/home') }]);\n * ```\n *\n * @see {@link https://www.rshono.com/docs/routing | Docs — routing}\n */\nexport function defineRoutes<const T extends readonly Route[] | RouteConfig<readonly Route[]>>(input: T & ValidateInput<T>): RouteConfig<RoutesOf<T>>;\nexport function defineRoutes(input: readonly Route[] | RouteConfig): RouteConfig {\n  return Array.isArray(input) ? { routes: input } : (input as RouteConfig);\n}\n"]}

package/dist/runtime/boundaries.d.ts

@@ -114,4 +114,3 @@ export interface AsyncBoundaryProps {
  */
 export declare function AsyncBoundary({ loading, error, onError, resetKeys, children }: AsyncBoundaryProps): ReactNode;
 export {};
-//# sourceMappingURL=boundaries.d.ts.map

package/dist/runtime/client.d.ts

@@ -23,4 +23,3 @@
  */
 export { useNavigation, type NavigationRouter, type NavigationState } from './navigation.js';
 export { AsyncBoundary, CatchBoundary, type AsyncBoundaryProps, type CatchBoundaryProps, type ErrorFallback } from './boundaries.js';
-//# sourceMappingURL=client.d.ts.map

package/dist/runtime/context.d.ts

@@ -187,7 +187,13 @@ export declare class RequestContext<E extends Env = Env> {
     get var(): Readonly<E['Variables']>;
     /**
      * Environment for the request: process env vars, merged on a bindings platform with the bindings, which
-     * win on conflict. Computed once and cached.
+     * win on conflict.
+     *
+     * The `process.env` half is snapshotted **once per process**, not per request — enumerating it crosses
+     * into the host environment, and doing that on every request is a cost with nothing to show for it. So a
+     * `process.env` mutation made after the first `ctx.env` read anywhere in the process is never seen here.
+     * Read `process.env` directly if you have one. The bindings half is per request, since it comes off the
+     * request's own Hono context.
      *
      * Bindings are merged **only where the platform supplies them** — `deploy: 'cloudflare'`, today. Hono's
      * `c.env` is whatever the host passed as the second argument to `app.fetch`, and off Workers that is the
@@ -340,6 +346,14 @@ export declare function redirect(location: string, status?: RedirectStatus): nev
  * Like {@link redirect} it throws a control signal and never returns, so TypeScript narrows away
  * everything after the call. Don't catch-and-swallow it.
  *
+ * **A real 404 status is only possible on a document load.** A soft navigation asks for a flight payload,
+ * and that response is committed as `200 text/x-component` the moment the render hands its stream back —
+ * before anything is awaited — so there is no shell to beat and calling this from the first line of a page
+ * is already too late. The signal still reaches the browser as a digest, and the client recovers by
+ * reloading the page for real: correct, but an extra round trip and a full document parse every time. Unlike
+ * {@link redirect}, which the same client turns into a soft navigation and which costs nothing. Where the
+ * status matters — a crawler, a monitor — decide in Hono middleware, ahead of the render.
+ *
  * @example
  * ```tsx
  * export default async function Page({ params }: PageProps<'/users/:id'>) {
@@ -436,4 +450,3 @@ export declare function reportServerError(error: unknown, info: {
     hono: Context;
     message: string;
 }): void;
-//# sourceMappingURL=context.d.ts.map

package/dist/runtime/context.js

@@ -259,7 +259,13 @@ export class RequestContext {
     }
     /**
      * Environment for the request: process env vars, merged on a bindings platform with the bindings, which
-     * win on conflict. Computed once and cached.
+     * win on conflict.
+     *
+     * The `process.env` half is snapshotted **once per process**, not per request — enumerating it crosses
+     * into the host environment, and doing that on every request is a cost with nothing to show for it. So a
+     * `process.env` mutation made after the first `ctx.env` read anywhere in the process is never seen here.
+     * Read `process.env` directly if you have one. The bindings half is per request, since it comes off the
+     * request's own Hono context.
      *
      * Bindings are merged **only where the platform supplies them** — `deploy: 'cloudflare'`, today. Hono's
      * `c.env` is whatever the host passed as the second argument to `app.fetch`, and off Workers that is the
@@ -467,6 +473,14 @@ export function redirect(location, status = 303) {
  * Like {@link redirect} it throws a control signal and never returns, so TypeScript narrows away
  * everything after the call. Don't catch-and-swallow it.
  *
+ * **A real 404 status is only possible on a document load.** A soft navigation asks for a flight payload,
+ * and that response is committed as `200 text/x-component` the moment the render hands its stream back —
+ * before anything is awaited — so there is no shell to beat and calling this from the first line of a page
+ * is already too late. The signal still reaches the browser as a digest, and the client recovers by
+ * reloading the page for real: correct, but an extra round trip and a full document parse every time. Unlike
+ * {@link redirect}, which the same client turns into a soft navigation and which costs nothing. Where the
+ * status matters — a crawler, a monitor — decide in Hono middleware, ahead of the render.
+ *
  * @example
  * ```tsx
  * export default async function Page({ params }: PageProps<'/users/:id'>) {

package/dist/runtime/context.js.map

@@ -1 +1 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/runtime/context.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,6FAA6F;AAC7F,qEAAqE;AACrE,oDAAoD;AACpD;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAc9D,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAW,CAAC;AAExD,2HAA2H;AAC3H,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA2B,CAAC;AAExD,sGAAsG;AACtG,iDAAiD;AACjD,MAAM,SAAS,GAAG,IAAI,OAAO,EAAW,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,kHAAkH;AAClH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,gFAAgF;QAC9F,iGAAiG;QACjG,kGAAkG;QAClG,oGAAoG;QACpG,mGAAmG,CACtG,CAAC;AACJ,CAAC;AAED,wHAAwH;AACxH,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,qFAAqF;QACvG,0DAA0D,OAAO,EAAE,CACtE,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,kGAAkG;AAClG,4DAA4D;AAC5D,IAAI,WAA2D,CAAC;AAEhE,SAAS,UAAU;IACjB,OAAO,CAAC,WAAW,KAAK,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,qGAAqG;AACrG,+EAA+E;AAC/E,MAAM,YAAY,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAEvF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAI,CAAU,EAAE,EAAW;IACvD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,SAAS,mBAAmB,CAAC,MAA0B;IACrD,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5C,OAAO,KAAK,IAAI,SAAS,CAAC;AAC5B,CAAC;AAED,sGAAsG;AACtG,oGAAoG;AACpG,MAAM,UAAU,GAAG,OAAO,iBAAiB,KAAK,WAAW,IAAI,iBAAiB,CAAC,UAAU,CAAC;AAE5F,yGAAyG;AACzG,MAAM,WAAW,GAAG,OAAO,iBAAiB,KAAK,WAAW,IAAI,iBAAiB,CAAC,WAAW,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU;QAAE,OAAO,GAAG,CAAC;IAE5B,MAAM,aAAa,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC5E,uGAAuG;IACvG,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAClC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,8FAA8F;IAC9F,MAAM,cAAc,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC9E,IAAI,cAAc,KAAK,MAAM,IAAI,cAAc,KAAK,OAAO;QAAE,GAAG,CAAC,QAAQ,GAAG,cAAc,CAAC;IAE3F,OAAO,GAAG,CAAC;AACb,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,OAAO,cAAc;IACzB,IAAI,CAAa;IACjB,IAAI,CAAO;IACX,IAAI,CAAc;IAClB,OAAO,CAA0B;IAEjC;;;;;OAKG;IACH,YAAY,CAAa;QACvB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,qGAAqG;IACrG,sGAAsG;IACtG,qGAAqG;IACrG,yCAAyC;IACzC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,MAAM;QACR,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,IAAI,CAAC,IAAe,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;;OAUG;IACH,IAAI,GAAG;QACL,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAe,CAAC,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,IAAI,GAAG;QACL,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,GAA2C,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAe,CAAC,CAAC;IAClG,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,OAAO,GAAG;QACR,+FAA+F;QAC/F,GAAG,EAAE,CAAC,IAAY,EAAsB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACrE,wFAAwF;QACxF,GAAG,EAAE,GAA2B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QACvD;;;;;;;;;;;WAWG;QACH,GAAG,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,OAAuB,EAAQ,EAAE;YAClE,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD;;;;;WAKG;QACH,MAAM,EAAE,CAAC,IAAY,EAAE,OAAuB,EAAQ,EAAE;YACtD,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;YAC7C,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;IAEF,eAAe,CAAC,IAAY;QAC1B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAe,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,SAAS,CAAC,IAAY,EAAE,KAAa,EAAE,OAA8B;QACnE,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,qGAAqG;IACrG,uGAAuG;IACvG,qGAAqG;IACrG,6CAA6C;IAE7C,mGAAmG;IACnG,QAAQ,CAAC,GAAG,KAAgB;QAC1B,OAAO,YAAY,CACjB,6BAA6B,EAC7B,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IAED,mGAAmG;IACnG,QAAQ,CAAC,GAAG,KAAgB;QAC1B,OAAO,YAAY,CAAC,YAAY,EAAE,0GAA0G,CAAC,CAAC;IAChJ,CAAC;IAED,gGAAgG;IAChG,IAAI,CAAC,GAAG,KAAgB;QACtB,OAAO,YAAY,CAAC,cAAc,EAAE,uGAAuG,CAAC,CAAC;IAC/I,CAAC;IAED,gGAAgG;IAChG,IAAI,CAAC,GAAG,KAAgB;QACtB,OAAO,YAAY,CAAC,cAAc,EAAE,uGAAuG,CAAC,CAAC;IAC/I,CAAC;IAED,mFAAmF;IACnF,IAAI,CAAC,GAAG,KAAgB;QACtB,OAAO,YAAY,CAAC,cAAc,EAAE,qGAAqG,CAAC,CAAC;IAC7I,CAAC;IAED,8FAA8F;IAC9F,IAAI,CAAC,GAAG,KAAgB;QACtB,OAAO,YAAY,CACjB,eAAe,EACf,oJAAoJ,CACrJ,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,MAAM,CAAC,GAAG,KAAgB;QACxB,OAAO,YAAY,CACjB,cAAc,EACd,0IAA0I,CAC3I,CAAC;IACJ,CAAC;IAED,2GAA2G;IAC3G,MAAM,CAAC,GAAG,KAAgB;QACxB,OAAO,YAAY,CACjB,qBAAqB,EACrB,mIAAmI,CACpI,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,uGAAuG;YACrG,0FAA0F;YAC1F,+FAA+F;YAC/F,+BAA+B,CAClC,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CACb,4IAA4I,CAC7I,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAmC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,MAAM,GAAmB,GAAG;IACrE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,QAAQ;IACtB,MAAM,IAAI,cAAc,EAAE,CAAC;AAC7B,CAAC;AAkDD,IAAI,YAA4C,CAAC;AAEjD;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,CAAU,EAAE,OAAyB;IACtD,wGAAwG;IACxG,iFAAiF;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACvD,OAAO,CAAC,KAAK,CAAC,oEAAoE,EAAE,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;IAC5F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,OAAO,EAAU,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,aAAa,CAAsB,OAA8B;IAC/E,YAAY,GAAG,OAAwC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,IAAmE;IACnH,wGAAwG;IACxG,2DAA2D;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACvC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAC1B,qGAAqG;YACrG,sGAAsG;YACtG,IAAI,EAAE,IAAI,CAAC,IAAoB;YAC/B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,YAAY,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC","sourcesContent":["// `__RSHONO_CONFIG__` is a global const, and an `import` cannot bring one into scope — a path reference is\n// the only way to reach it, which is the whole reason that file is separate. See its header.\n// eslint-disable-next-line @typescript-eslint/triple-slash-reference\n/// <reference path=\"../types/rshono-config.d.ts\" />\n/**\n * The request context: {@link getRequestContext} and the {@link RequestContext} it returns, the\n * {@link redirect} / {@link notFound} control-flow helpers, and the {@link onServerError} reporting\n * funnel — plus the `@internal` plumbing that binds a request to the async context.\n *\n * The public half is re-exported by `runtime/server.ts`, which is what `@rshono/core/server` resolves\n * to; an app imports that.\n */\n\nimport type { Context, Env } from 'hono';\nimport { deleteCookie, getCookie, setCookie } from 'hono/cookie';\nimport type { CookieOptions } from 'hono/utils/cookie';\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { NotFoundSignal, RedirectSignal } from './control.js';\n\n/**\n * HTTP status codes accepted by {@link redirect}.\n *\n * - `301` Moved Permanently, `308` Permanent Redirect — cacheable, permanent.\n * - `302` Found, `307` Temporary Redirect — temporary.\n * - `303` See Other — the default; forces a `GET` on the target, which is what you almost always want\n *   after a form action (post/redirect/get).\n *\n * @see {@link https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Status#redirection_messages | MDN — redirection status codes}\n */\nexport type RedirectStatus = 301 | 302 | 303 | 307 | 308;\n\nconst contextStorage = new AsyncLocalStorage<Context>();\n\n/** One {@link RequestContext} per Hono {@link Context}, so repeated `getRequestContext()` calls share its lazy getters. */\nconst wrappers = new WeakMap<Context, RequestContext>();\n\n// Keyed on the Hono context rather than held as a field, so marking a request never forces the lazily\n// built `RequestContext` wrapper into existence.\nconst rendering = new WeakSet<Context>();\n\n/**\n * Marks the request as having entered its page render, which is what makes\n * {@link RequestContext.setHeader} and `ctx.cookies.set()` start throwing.\n *\n * @internal\n */\nexport function beginPageRender(c: Context): void {\n  rendering.add(c);\n}\n\n/** The shared refusal for a response write that arrived too late — the message names where it belongs instead. */\nfunction tooLateToWrite(call: string): never {\n  throw new Error(\n    `[rshono] ${call} was called while rendering a page, which is too late to affect the response. ` +\n      'A page streams, so its response head is already committed by the time the component runs — the ' +\n      'write would land on a full page load and be silently dropped on a soft navigation. Do it from a ' +\n      \"'use server' action instead; or, in middleware and { type: 'endpoint' } routes — which are handed \" +\n      \"Hono's `c` directly and run outside the request context — with `c.header(…)` / `setCookie(c, …)`.\",\n  );\n}\n\n/** The shared refusal for a Hono `Context` member a page has no way to use. See the stubs on {@link RequestContext}. */\nfunction notOnContext(call: string, instead: string): never {\n  throw new Error(\n    `[rshono] ctx.${call} does not exist. A page returns JSX and the framework builds the response from it, ` +\n      `so Hono's response builders have nothing to return to. ${instead}`,\n  );\n}\n\n// Snapshotted rather than spread per request: enumerating `process.env` crosses into the host\n// environment (~20µs). Lazily, because `loadEnvFiles()` runs after this module is imported — so a\n// mutation after the first `ctx.env` read is not picked up.\nlet envSnapshot: Record<string, string | undefined> | undefined;\n\nfunction processEnv(): Record<string, string | undefined> {\n  return (envSnapshot ??= typeof process !== 'undefined' && process.env ? { ...process.env } : {});\n}\n\n// Set by `build.ts` before it imports the app bundle, which inlines its own copy of this module — so\n// `process.env` is what crosses that boundary rather than a module-level flag.\nconst prerendering = typeof process !== 'undefined' && !!process.env?.RSHONO_PRERENDER;\n\n/**\n * Runs `fn` with `c` bound as the ambient request context, so {@link getRequestContext} resolves to it\n * anywhere in the call tree.\n *\n * @internal\n */\nexport function runWithContext<T>(c: Context, fn: () => T): T {\n  return contextStorage.run(c, fn);\n}\n\n/**\n * The matched route params, or an empty object when there is no active match.\n *\n * @internal\n */\nexport function readParams(c: Context): Record<string, string> {\n  try {\n    return c.req.param();\n  } catch {\n    return {};\n  }\n}\n\n/** A proxy chain appends to these headers, so the client-facing value is the first entry. */\nfunction firstForwardedValue(header: string | undefined): string | undefined {\n  const first = header?.split(',')[0]?.trim();\n  return first || undefined;\n}\n\n// Read through `typeof`: DefinePlugin inlines this into the server bundle, but the module is also the\n// public `@rshono/core/server` entry, which tooling can load without one. Absent means don't trust.\nconst trustProxy = typeof __RSHONO_CONFIG__ !== 'undefined' && __RSHONO_CONFIG__.trustProxy;\n\n// Read the same way, for the same reason. Absent means the platform passes no bindings — see the getter.\nconst envBindings = typeof __RSHONO_CONFIG__ !== 'undefined' && __RSHONO_CONFIG__.envBindings;\n\n/**\n * The browser-facing {@link URL} for a request, resolved from Hono's {@link Context} — a fresh\n * instance per call.\n *\n * `c.req.url` is the internal address the server was reached on, which is wrong behind a proxy;\n * `X-Forwarded-Host` / `-Proto` correct it, but only when `trustProxy` is enabled in\n * `rshono.config.ts` — they are client-supplied, so trusting them unconditionally would let anyone\n * dictate the origin of every absolute URL the app builds.\n *\n * This is the form for **middleware**, which is handed `c` and runs outside the request context — and\n * so the way to give Hono's own middleware the origin the browser actually used. In a server component\n * or action, prefer {@link RequestContext.url}, the same value cached per request.\n *\n * @param c - The Hono {@link Context} for the request.\n * @returns The browser-facing URL — proxy-corrected under `trustProxy`, `c.req.url` otherwise.\n *\n * @example\n * ```ts\n * // src/server.ts — a CSRF check that still works behind a proxy that rewrites Host\n * import { publicUrl } from '@rshono/core/server';\n * import { csrf } from 'hono/csrf';\n *\n * server.use(csrf({ origin: (origin, c) => origin === publicUrl(c).origin }));\n * ```\n *\n * @see {@link https://www.rshono.com/docs/configuration#proxy-headers | Docs — proxy headers}\n */\nexport function publicUrl(c: Context): URL {\n  const url = new URL(c.req.url);\n  if (!trustProxy) return url;\n\n  const forwardedHost = firstForwardedValue(c.req.header('x-forwarded-host'));\n  // Parsed, not assigned to `url.host`: that setter keeps the existing port when the new value has none.\n  const forwarded = forwardedHost ? URL.parse(`http://${forwardedHost}`) : null;\n  if (forwarded) {\n    url.hostname = forwarded.hostname;\n    url.port = forwarded.port;\n  }\n\n  // Only the two schemes a browser could have requested; anything else leaves the scheme alone.\n  const forwardedProto = firstForwardedValue(c.req.header('x-forwarded-proto'));\n  if (forwardedProto === 'http' || forwardedProto === 'https') url.protocol = forwardedProto;\n\n  return url;\n}\n\n/**\n * The environment available to a request: Workers `Bindings` merged with process env vars. Values not\n * declared in `Bindings` are typed as `string | undefined`. See {@link RequestContext.env}.\n *\n * @see {@link https://hono.dev/docs/getting-started/cloudflare-workers#bindings | Hono — bindings}\n */\nexport type EnvVars<E extends Env> = E['Bindings'] & Record<string, string | undefined>;\n\n/**\n * Read-mostly wrapper around Hono's {@link Context}, for server components and server actions.\n *\n * Obtain one with {@link getRequestContext}, or take it off a page's `ctx` prop — the same object.\n * Never construct it yourself. One instance is reused for the whole request, so its lazy getters\n * ({@link RequestContext.url}, {@link RequestContext.env}) are computed at most once.\n *\n * The eight members that only throw — `redirect`, `notFound`, `json`, `text`, `html`, `body`, `status`,\n * `header` — are **permanent, and exist to throw**. Every one of them is a silent no-op when reached through\n * {@link RequestContext.hono} from a page, so a stub that names the thing that does work is the difference\n * between a message and a page that renders while quietly ignoring half of what it was asked for. They carry\n * `@deprecated` for the strike-through an editor draws with it, not because they are on the way out: nothing\n * will un-deprecate or remove them, and dropping them would leave `ctx.redirect('/x')` as\n * \"property does not exist\", which says what is wrong and not what to do.\n *\n * @typeParam E - The Hono {@link Env} describing this app's `Bindings` and `Variables`, so\n *   {@link RequestContext.var} and {@link RequestContext.env} stay typed.\n *\n * @example\n * ```tsx\n * import { getRequestContext } from '@rshono/core/server';\n *\n * export default async function Whoami() {\n *   const ctx = getRequestContext();\n *   const session = ctx.cookies.get('session');\n *   return <p>{ctx.url.pathname} — {session ?? 'anonymous'}</p>;\n * }\n * ```\n *\n * @see {@link https://www.rshono.com/docs/api#rshonocoreserver | Docs — `@rshono/core/server`}\n * @see {@link https://hono.dev/docs/api/context | Hono — Context}, reachable in full via {@link RequestContext.hono}\n */\nexport class RequestContext<E extends Env = Env> {\n  #raw: Context<E>;\n  #url?: URL;\n  #env?: EnvVars<E>;\n  #params?: Record<string, string>;\n\n  /**\n   * One instance is created per request and handed out by {@link getRequestContext} or the `ctx` page\n   * prop. Application code never calls this.\n   *\n   * @internal\n   */\n  constructor(c: Context<E>) {\n    this.#raw = c;\n  }\n\n  /**\n   * The underlying Hono {@link Context} — the escape hatch for what this wrapper does not expose, such\n   * as `executionCtx.waitUntil()` on Workers.\n   *\n   * Its response builders (`redirect`, `json`, `body`, `status`, …) still do nothing from inside a\n   * page: reaching them through here bypasses the errors the stubs on this class throw, it does not\n   * make them work.\n   *\n   * @example\n   * ```ts\n   * getRequestContext().hono.executionCtx.waitUntil(logAsync()); // Workers\n   * ```\n   *\n   * @see {@link https://hono.dev/docs/api/context | Hono — Context}\n   */\n  // Every member here is a getter or method so that none is *own enumerable*: React's \"you cannot pass\n  // this to a client component\" diagnostic walks `Object.keys` recursively with no cycle guard, and the\n  // Hono context graph reaches the socket through `req.raw`. `cookies` is the one own property, and it\n  // is a shallow object of four functions.\n  get hono(): Context<E> {\n    return this.#raw;\n  }\n\n  /**\n   * The parsed request — method, headers, path params, query and the body readers. Hono's\n   * {@link Context.req}, unwrapped, so `ctx.req.header('authorization')` rather than\n   * `ctx.hono.req.header(…)`.\n   *\n   * Reads only; setting a *response* header is {@link RequestContext.setHeader}, deliberately spelled\n   * differently.\n   *\n   * @example\n   * ```ts\n   * const ctx = getRequestContext();\n   * ctx.req.method;                     // 'GET'\n   * ctx.req.header('authorization');    // string | undefined\n   * ctx.req.query('tab');               // string | undefined\n   * ```\n   *\n   * @see {@link https://hono.dev/docs/api/request | Hono — HonoRequest}\n   */\n  get req(): Context<E>['req'] {\n    return this.#raw.req;\n  }\n\n  /**\n   * Matched route params for this request, e.g. `{ id: '42' }` for `/profile/:id`. Empty when no route\n   * matched.\n   *\n   * A page is handed the same record as its `params` prop, typed key-by-key from its route path, and\n   * that is the better read where it exists. This is for everywhere else — a nested server component,\n   * or a `'use server'` action.\n   */\n  get params(): Record<string, string> {\n    return (this.#params ??= readParams(this.#raw as Context));\n  }\n\n  /**\n   * The browser-facing request URL. Parsed once and cached, so every read within a request returns the\n   * same instance — treat it as read-only.\n   *\n   * `X-Forwarded-Host` / `-Proto` are honoured only when `trustProxy` is enabled in\n   * `rshono.config.ts`, since any client can send them.\n   *\n   * @example `const tab = getRequestContext().url.searchParams.get('tab');`\n   *\n   * @see {@link https://www.rshono.com/docs/configuration#proxy-headers | Docs — proxy headers}\n   */\n  get url(): URL {\n    return (this.#url ??= publicUrl(this.#raw as Context));\n  }\n\n  /**\n   * Typed variables set by middleware via `c.set('user', …)`, read here as `ctx.var.user`. Type them by\n   * parameterising this class's {@link Env}.\n   *\n   * @example\n   * ```ts\n   * type AppEnv = { Variables: { user: { id: string } } };\n   * const { user } = getRequestContext<AppEnv>().var; // typed, set by your middleware\n   * ```\n   *\n   * @see {@link https://hono.dev/docs/api/context#var | Hono — c.var}\n   * @see {@link https://www.rshono.com/docs/hono#typing-the-context | Docs — typing the context}\n   */\n  get var(): Readonly<E['Variables']> {\n    return this.#raw.var;\n  }\n\n  /**\n   * Environment for the request: process env vars, merged on a bindings platform with the bindings, which\n   * win on conflict. Computed once and cached.\n   *\n   * Bindings are merged **only where the platform supplies them** — `deploy: 'cloudflare'`, today. Hono's\n   * `c.env` is whatever the host passed as the second argument to `app.fetch`, and off Workers that is the\n   * adapter's own private state: `{ incoming, outgoing }` on Node and Vercel, the entire invocation —\n   * headers, cookies, `authorization` — on Lambda. Merging it would make `ctx.env` uncloneable on one and\n   * a disclosure vector on the other, both behind names this type declares `string | undefined`. Reach for\n   * {@link RequestContext.hono}`.env` if you really do want the adapter's argument.\n   *\n   * @example `const key = getRequestContext().env.STRIPE_SECRET_KEY;`\n   *\n   * @see {@link https://hono.dev/docs/api/context#env | Hono — c.env}\n   * @see {@link https://www.rshono.com/docs/configuration#environment-and-secrets | Docs — environment and secrets}\n   */\n  get env(): EnvVars<E> {\n    if (this.#env) return this.#env;\n    const bindings = envBindings ? (this.#raw.env as Record<string, unknown> | undefined) : undefined;\n    return (this.#env = (bindings ? { ...processEnv(), ...bindings } : processEnv()) as EnvVars<E>);\n  }\n\n  /**\n   * Read and write request/response cookies.\n   *\n   * @example\n   * ```ts\n   * const ctx = getRequestContext();\n   * ctx.cookies.get('session');                       // string | undefined\n   * ctx.cookies.set('session', id, { httpOnly: true, sameSite: 'Lax', path: '/' });\n   * ctx.cookies.delete('session', { path: '/' });\n   * ```\n   *\n   * @see {@link https://hono.dev/docs/helpers/cookie | Hono — cookie helper}, which this wraps\n   */\n  cookies = {\n    /** Reads a single cookie by name, or `undefined` if absent. Safe anywhere, a page included. */\n    get: (name: string): string | undefined => getCookie(this.#raw, name),\n    /** Reads every cookie as a `{ name: value }` record. Safe anywhere, a page included. */\n    all: (): Record<string, string> => getCookie(this.#raw),\n    /**\n     * Sets a cookie on the response. See Hono's {@link CookieOptions} for `path`, `httpOnly`, `maxAge`\n     * and the rest.\n     *\n     * **Throws inside a page render** — a `Set-Cookie` is a special case of\n     * {@link RequestContext.setHeader}. Set cookies from a `'use server'` action, or with Hono's\n     * `setCookie(c, …)` in middleware and endpoint routes.\n     *\n     * @throws If called while a page is rendering, where it could not reach the browser reliably.\n     *\n     * @see {@link https://hono.dev/docs/helpers/cookie#options | Hono — cookie options}\n     */\n    set: (name: string, value: string, options?: CookieOptions): void => {\n      this.#assertWritable('ctx.cookies.set()');\n      setCookie(this.#raw, name, value, options);\n    },\n    /**\n     * Clears a cookie. Pass the same `path`/`domain` it was set with so the browser matches it.\n     * Throws inside a page render, exactly as `set` does.\n     *\n     * @throws If called while a page is rendering.\n     */\n    delete: (name: string, options?: CookieOptions): void => {\n      this.#assertWritable('ctx.cookies.delete()');\n      deleteCookie(this.#raw, name, options);\n    },\n  };\n\n  #assertWritable(call: string): void {\n    if (rendering.has(this.#raw as Context)) tooLateToWrite(call);\n  }\n\n  /**\n   * Sets a header on the response — from a `'use server'` action, which is the one place a request\n   * context exists *and* the response is still open.\n   *\n   * From inside a page it throws: a page streams, so its response head is already committed by then,\n   * and the write would land on a full page load but vanish on a soft navigation.\n   *\n   * Middleware and `{ type: 'endpoint' }` routes are handed Hono's `c` directly and use `c.header(…)`.\n   * That is also where a header belonging to the *page* goes — `Cache-Control`, `X-Robots-Tag` — since\n   * middleware runs before the render.\n   *\n   * @param name - Header name, case-insensitive.\n   * @param value - Header value.\n   * @param options - `{ append: true }` to add another value rather than replace.\n   * @throws If called while a page is rendering, where it could not reach the browser reliably.\n   *\n   * @example\n   * ```ts\n   * 'use server';\n   * export async function logout() {\n   *   const ctx = getRequestContext();\n   *   ctx.cookies.delete('session', { path: '/' });\n   *   ctx.setHeader('clear-site-data', '\"cache\", \"storage\"');\n   *   redirect('/');\n   * }\n   * ```\n   */\n  setHeader(name: string, value: string, options?: { append?: boolean }): void {\n    this.#assertWritable('ctx.setHeader()');\n    this.#raw.header(name, value, options);\n  }\n\n  // Hono's response builders, restated as errors naming what to use instead — through `ctx.hono` every\n  // one of them is a silent no-op from a page. Permanent, deliberately: see the class doc. `@deprecated`\n  // strikes them through in autocomplete; the unread `..._args` is so `ctx.redirect('/x')` reaches the\n  // thrown message rather than an arity error.\n\n  /** @deprecated Not available on a page's context — use `redirect()` from `@rshono/core/server`. */\n  redirect(..._args: unknown[]): never {\n    return notOnContext(\n      'redirect(location, status?)',\n      \"Use `redirect()` from '@rshono/core/server', which throws a signal the framework turns into a real redirect.\",\n    );\n  }\n\n  /** @deprecated Not available on a page's context — use `notFound()` from `@rshono/core/server`. */\n  notFound(..._args: unknown[]): never {\n    return notOnContext('notFound()', \"Use `notFound()` from '@rshono/core/server', which aborts the render and shows the app's not-found page.\");\n  }\n\n  /** @deprecated A page renders JSX. For a JSON response, use an `{ type: 'endpoint' }` route. */\n  json(..._args: unknown[]): never {\n    return notOnContext('json(object)', \"For a JSON response use an { type: 'endpoint' } route; to read the request body use `ctx.req.json()`.\");\n  }\n\n  /** @deprecated A page renders JSX. For a text response, use an `{ type: 'endpoint' }` route. */\n  text(..._args: unknown[]): never {\n    return notOnContext('text(string)', \"For a text response use an { type: 'endpoint' } route; to read the request body use `ctx.req.text()`.\");\n  }\n\n  /** @deprecated A page renders JSX, which the framework turns into HTML for you. */\n  html(..._args: unknown[]): never {\n    return notOnContext('html(string)', \"A page's JSX is already its HTML; for a hand-built HTML response use an { type: 'endpoint' } route.\");\n  }\n\n  /** @deprecated Not available on a page's context. To read the request body, use `ctx.req`. */\n  body(..._args: unknown[]): never {\n    return notOnContext(\n      'body(data, …)',\n      \"To read the *request* body use `ctx.req.json()` / `ctx.req.text()` / `ctx.req.formData()`; to build a response, use an { type: 'endpoint' } route.\",\n    );\n  }\n\n  /** @deprecated A page's status is set by the framework — use `notFound()`, or an endpoint route. */\n  status(..._args: unknown[]): never {\n    return notOnContext(\n      'status(code)',\n      \"A page's status is the framework's: 200, 404 via `notFound()`, 500 when it throws. For any other code use an { type: 'endpoint' } route.\",\n    );\n  }\n\n  /** @deprecated Renamed — use `ctx.setHeader(name, value)`, which is valid from a `'use server'` action. */\n  header(..._args: unknown[]): never {\n    return notOnContext(\n      'header(name, value)',\n      \"Use `ctx.setHeader(name, value)` from a 'use server' action, or `c.header(…)` in middleware — a page renders too late to set one.\",\n    );\n  }\n}\n\n/**\n * The {@link RequestContext} for the current request — URL, cookies, params, env and middleware\n * variables — read from a server component or a server action. Memoised per request, so repeated calls\n * return the same instance.\n *\n * A page is handed that same object as its `ctx` prop, so this import is for everywhere else: a nested\n * server component, or a `'use server'` action module.\n *\n * @typeParam E - The app's Hono {@link Env}, to type {@link RequestContext.var} and {@link RequestContext.env}.\n * @throws If called at module load, where there is no ambient context to resolve.\n * @throws If called while prerendering a `render: 'static'` route, which has no\n *   per-request context at build time — mark the route `render: 'dynamic'` instead.\n *\n * @example\n * ```ts\n * 'use server';\n * import { getRequestContext, redirect } from '@rshono/core/server';\n *\n * export async function login(form: FormData) {\n *   getRequestContext().cookies.set('session', String(form.get('email')), { httpOnly: true });\n *   redirect('/dashboard');\n * }\n * ```\n *\n * @see {@link https://www.rshono.com/docs/api#rshonocoreserver | Docs — `@rshono/core/server`}\n */\nexport function getRequestContext<E extends Env = Env>(): RequestContext<E> {\n  if (prerendering) {\n    throw new Error(\n      \"[rshono] getRequestContext() was called while prerendering a `render: 'static'` route. A static page \" +\n        'is rendered once at build time, so it has no per-request context to read (URL, cookies, ' +\n        \"headers, env). Change this route to `render: 'dynamic'` so it renders per request, or remove \" +\n        'the getRequestContext() call.',\n    );\n  }\n  const c = contextStorage.getStore();\n  if (!c) {\n    throw new Error(\n      '[rshono] getRequestContext() was called outside a request. It only works inside a server component or a server action, not at module load.',\n    );\n  }\n  let ctx = wrappers.get(c);\n  if (!ctx) {\n    ctx = new RequestContext(c);\n    wrappers.set(c, ctx);\n  }\n  return ctx as unknown as RequestContext<E>;\n}\n\n/**\n * Redirects the request to `location`, by throwing a control signal the framework turns into an HTTP\n * redirect.\n *\n * Because it throws it never returns, so TypeScript narrows away everything after the call and there\n * is nothing to `return`. Don't wrap it in a `try/catch` that swallows the signal.\n *\n * @param location - Absolute path or URL to redirect to, e.g. `/dashboard`.\n * @param status - Redirect {@link RedirectStatus}; defaults to `303` (See Other), which is what makes\n *   the browser follow up with a `GET` after a form action.\n *\n * @example\n * ```ts\n * const session = getRequestContext().cookies.get('session');\n * if (!session) redirect('/login');\n * // session is defined below this line\n * ```\n */\nexport function redirect(location: string, status: RedirectStatus = 303): never {\n  throw new RedirectSignal(location, status);\n}\n\n/**\n * Aborts the current render with a 404, rendering the app's `notFound` page.\n *\n * Like {@link redirect} it throws a control signal and never returns, so TypeScript narrows away\n * everything after the call. Don't catch-and-swallow it.\n *\n * @example\n * ```tsx\n * export default async function Page({ params }: PageProps<'/users/:id'>) {\n *   const user = await db.user.find(params.id);\n *   if (!user) notFound();\n *   return <Profile user={user} />; // user is non-null here\n * }\n * ```\n */\nexport function notFound(): never {\n  throw new NotFoundSignal();\n}\n\n/**\n * Which stage of a request produced an error handed to a {@link ServerErrorHandler}.\n *\n * - `action` — a `'use server'` function threw. React sends the client an opaque marker with no\n *   message in production, so this is the only place the real error is visible.\n * - `render` — a server component threw while the flight payload was being produced.\n * - `ssr` — SSR failed before the HTML shell could be sent, so the `error` page was unreachable too.\n * - `request` — anything else that reached the top-level handler, a thrown endpoint route included.\n */\nexport type ServerErrorSource = 'action' | 'render' | 'ssr' | 'request';\n\n/**\n * What an {@link ServerErrorHandler} is told about an error, beyond the error itself.\n *\n * @typeParam E - The app's Hono {@link Env}, to type {@link ServerErrorContext.hono}'s `var` and `env`.\n */\nexport interface ServerErrorContext<E extends Env = Env> {\n  /** The stage that produced it — see {@link ServerErrorSource}. */\n  source: ServerErrorSource;\n  /** The request being served, for the URL, method and headers. */\n  request: Request;\n  /**\n   * The Hono {@link Context} for this request — `hono.var` for whatever middleware put there, such as a\n   * request id to correlate the report on, and `hono.env` for a platform that passes bindings.\n   *\n   * Handed over rather than left to {@link getRequestContext}, which a handler cannot reach: an error with\n   * `source: 'request'` is reported from the top-level handler, which runs outside the ambient context.\n   */\n  hono: Context<E>;\n  /**\n   * Holds the invocation open until `promise` settles, where the platform has something to ask.\n   *\n   * Reporting is what this hook exists for, and on a serverless platform a report started here is cut off\n   * the moment the response ends unless something keeps the invocation alive. On Cloudflare Workers that is\n   * `executionCtx.waitUntil`, which this calls. On the `node` and `vercel` targets there is nothing to hold\n   * open — the process outlives the response — so it is a no-op and the report finishes on its own. On\n   * `aws-lambda` it is a no-op as well, because `hono/aws-lambda`'s streaming handler exposes no execution\n   * context to ask; a slow report there is best-effort, so prefer a tracker that batches over one that\n   * round-trips per error.\n   *\n   * A rejection is logged rather than propagated: reporting can never fail a request.\n   */\n  waitUntil: (promise: Promise<unknown>) => void;\n}\n\n/** Handler registered with {@link onServerError}. Called for the side effect; its return value is ignored. */\nexport type ServerErrorHandler<E extends Env = Env> = (error: unknown, context: ServerErrorContext<E>) => void;\n\nlet errorHandler: ServerErrorHandler | undefined;\n\n/**\n * The platform's \"keep this invocation alive\" hook, or a no-op where there is none.\n *\n * `c.executionCtx` *throws* rather than answering `undefined` where a platform has no execution context, so\n * a handler that reached for it itself would have its report swallowed by the guard in\n * {@link reportServerError} — on exactly the platforms where nothing needed holding open.\n */\nfunction keepAlive(c: Context, promise: Promise<unknown>): void {\n  // Caught here rather than left to the platform: under `--unhandled-rejections=strict` a rejected report\n  // would end the process, and a failed report must never be worse than no report.\n  const settled = Promise.resolve(promise).catch((error) => {\n    console.error('[rshono] a promise passed to the onServerError waitUntil rejected:', error);\n  });\n  try {\n    c.executionCtx.waitUntil(settled);\n  } catch {\n    // No execution context: nothing here cuts the work off, so there is nothing to hold open.\n  }\n}\n\n/**\n * Errors already forwarded, so one fault is reported once however many stages it crosses.\n *\n * A thrown server action is reported where it is known to be an action and then re-thrown, which lands it in\n * the top-level handler as well — and a funnel that counts the same error twice, under two different\n * `source`s, is worse than one that only ever names the outer stage.\n */\nconst alreadyReported = new WeakSet<object>();\n\n/**\n * Registers a handler for every error the framework catches, so they can reach an error tracker\n * (Sentry, Datadog, a log pipeline) instead of only `stderr`.\n *\n * Call it once, at the top level of `src/server.ts`, which is imported as the server starts.\n * Registering again replaces the previous handler. Errors still go to `stderr` either way, and a\n * handler that throws is caught and logged — reporting can never fail a request.\n *\n * @typeParam E - The app's Hono {@link Env}, to type the `hono` context the handler is given.\n *\n * @example\n * ```ts\n * // src/server.ts\n * import * as Sentry from '@sentry/node';\n * import { onServerError } from '@rshono/core/server';\n *\n * onServerError((error, { source, request, hono, waitUntil }) => {\n *   // `waitUntil` so a serverless invocation is not frozen before the report is sent.\n *   waitUntil(\n *     Sentry.captureException(error, {\n *       tags: { source, requestId: hono.var.requestId },\n *       extra: { url: request.url },\n *     }),\n *   );\n * });\n * ```\n *\n * @see {@link https://www.rshono.com/docs/hono#error-reporting | Docs — error reporting}\n */\nexport function onServerError<E extends Env = Env>(handler: ServerErrorHandler<E>): void {\n  errorHandler = handler as unknown as ServerErrorHandler;\n}\n\n/**\n * Logs an error and forwards it to the registered {@link ServerErrorHandler} — the single funnel every\n * caught server-side error goes through.\n *\n * @internal\n */\nexport function reportServerError(error: unknown, info: { source: ServerErrorSource; hono: Context; message: string }): void {\n  // The first stage to recognise it wins, since that is the one that knows what it was. A primitive throw\n  // cannot be tracked and is reported wherever it is caught.\n  if (typeof error === 'object' && error !== null) {\n    if (alreadyReported.has(error)) return;\n    alreadyReported.add(error);\n  }\n  console.error(info.message, error);\n  if (!errorHandler) return;\n  try {\n    errorHandler(error, {\n      source: info.source,\n      request: info.hono.req.raw,\n      // The handler was registered for the app's own `Env`, which `onServerError` erased to store it; this\n      // puts the context back in the shape it was registered with. Same trade as {@link getRequestContext}.\n      hono: info.hono as Context<Env>,\n      waitUntil: (promise) => keepAlive(info.hono, promise),\n    });\n  } catch (handlerError) {\n    console.error('[rshono] the onServerError handler threw:', handlerError);\n  }\n}\n"]}
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/runtime/context.ts"],"names":[],"mappings":"AAAA,2GAA2G;AAC3G,6FAA6F;AAC7F,qEAAqE;AACrE,oDAAoD;AACpD;;;;;;;GAOG;AAGH,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAc9D,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAW,CAAC;AAExD,2HAA2H;AAC3H,MAAM,QAAQ,GAAG,IAAI,OAAO,EAA2B,CAAC;AAExD,sGAAsG;AACtG,iDAAiD;AACjD,MAAM,SAAS,GAAG,IAAI,OAAO,EAAW,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,kHAAkH;AAClH,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,gFAAgF;QAC9F,iGAAiG;QACjG,kGAAkG;QAClG,oGAAoG;QACpG,mGAAmG,CACtG,CAAC;AACJ,CAAC;AAED,wHAAwH;AACxH,SAAS,YAAY,CAAC,IAAY,EAAE,OAAe;IACjD,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,qFAAqF;QACvG,0DAA0D,OAAO,EAAE,CACtE,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,kGAAkG;AAClG,4DAA4D;AAC5D,IAAI,WAA2D,CAAC;AAEhE,SAAS,UAAU;IACjB,OAAO,CAAC,WAAW,KAAK,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACnG,CAAC;AAED,qGAAqG;AACrG,+EAA+E;AAC/E,MAAM,YAAY,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC;AAEvF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAI,CAAU,EAAE,EAAW;IACvD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,SAAS,mBAAmB,CAAC,MAA0B;IACrD,MAAM,KAAK,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5C,OAAO,KAAK,IAAI,SAAS,CAAC;AAC5B,CAAC;AAED,sGAAsG;AACtG,oGAAoG;AACpG,MAAM,UAAU,GAAG,OAAO,iBAAiB,KAAK,WAAW,IAAI,iBAAiB,CAAC,UAAU,CAAC;AAE5F,yGAAyG;AACzG,MAAM,WAAW,GAAG,OAAO,iBAAiB,KAAK,WAAW,IAAI,iBAAiB,CAAC,WAAW,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,SAAS,CAAC,CAAU;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,UAAU;QAAE,OAAO,GAAG,CAAC;IAE5B,MAAM,aAAa,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC5E,uGAAuG;IACvG,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,IAAI,SAAS,EAAE,CAAC;QACd,GAAG,CAAC,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC;QAClC,GAAG,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,8FAA8F;IAC9F,MAAM,cAAc,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC9E,IAAI,cAAc,KAAK,MAAM,IAAI,cAAc,KAAK,OAAO;QAAE,GAAG,CAAC,QAAQ,GAAG,cAAc,CAAC;IAE3F,OAAO,GAAG,CAAC;AACb,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,OAAO,cAAc;IACzB,IAAI,CAAa;IACjB,IAAI,CAAO;IACX,IAAI,CAAc;IAClB,OAAO,CAA0B;IAEjC;;;;;OAKG;IACH,YAAY,CAAa;QACvB,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,qGAAqG;IACrG,sGAAsG;IACtG,qGAAqG;IACrG,yCAAyC;IACzC,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvB,CAAC;IAED;;;;;;;OAOG;IACH,IAAI,MAAM;QACR,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,UAAU,CAAC,IAAI,CAAC,IAAe,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;;;;;;;;;OAUG;IACH,IAAI,GAAG;QACL,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAe,CAAC,CAAC,CAAC;IACzD,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,IAAI,GAAG;QACL,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC;QAChC,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,CAAC,GAA2C,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAe,CAAC,CAAC;IAClG,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,OAAO,GAAG;QACR,+FAA+F;QAC/F,GAAG,EAAE,CAAC,IAAY,EAAsB,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;QACrE,wFAAwF;QACxF,GAAG,EAAE,GAA2B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QACvD;;;;;;;;;;;WAWG;QACH,GAAG,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,OAAuB,EAAQ,EAAE;YAClE,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD;;;;;WAKG;QACH,MAAM,EAAE,CAAC,IAAY,EAAE,OAAuB,EAAQ,EAAE;YACtD,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;YAC7C,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;IAEF,eAAe,CAAC,IAAY;QAC1B,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAe,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,SAAS,CAAC,IAAY,EAAE,KAAa,EAAE,OAA8B;QACnE,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,qGAAqG;IACrG,uGAAuG;IACvG,qGAAqG;IACrG,6CAA6C;IAE7C,mGAAmG;IACnG,QAAQ,CAAC,GAAG,KAAgB;QAC1B,OAAO,YAAY,CACjB,6BAA6B,EAC7B,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IAED,mGAAmG;IACnG,QAAQ,CAAC,GAAG,KAAgB;QAC1B,OAAO,YAAY,CAAC,YAAY,EAAE,0GAA0G,CAAC,CAAC;IAChJ,CAAC;IAED,gGAAgG;IAChG,IAAI,CAAC,GAAG,KAAgB;QACtB,OAAO,YAAY,CAAC,cAAc,EAAE,uGAAuG,CAAC,CAAC;IAC/I,CAAC;IAED,gGAAgG;IAChG,IAAI,CAAC,GAAG,KAAgB;QACtB,OAAO,YAAY,CAAC,cAAc,EAAE,uGAAuG,CAAC,CAAC;IAC/I,CAAC;IAED,mFAAmF;IACnF,IAAI,CAAC,GAAG,KAAgB;QACtB,OAAO,YAAY,CAAC,cAAc,EAAE,qGAAqG,CAAC,CAAC;IAC7I,CAAC;IAED,8FAA8F;IAC9F,IAAI,CAAC,GAAG,KAAgB;QACtB,OAAO,YAAY,CACjB,eAAe,EACf,oJAAoJ,CACrJ,CAAC;IACJ,CAAC;IAED,oGAAoG;IACpG,MAAM,CAAC,GAAG,KAAgB;QACxB,OAAO,YAAY,CACjB,cAAc,EACd,0IAA0I,CAC3I,CAAC;IACJ,CAAC;IAED,2GAA2G;IAC3G,MAAM,CAAC,GAAG,KAAgB;QACxB,OAAO,YAAY,CACjB,qBAAqB,EACrB,mIAAmI,CACpI,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,uGAAuG;YACrG,0FAA0F;YAC1F,+FAA+F;YAC/F,+BAA+B,CAClC,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,cAAc,CAAC,QAAQ,EAAE,CAAC;IACpC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CACb,4IAA4I,CAC7I,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,GAAG,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,GAAmC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,QAAQ,CAAC,QAAgB,EAAE,MAAM,GAAmB,GAAG;IACrE,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,QAAQ;IACtB,MAAM,IAAI,cAAc,EAAE,CAAC;AAC7B,CAAC;AAkDD,IAAI,YAA4C,CAAC;AAEjD;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,CAAU,EAAE,OAAyB;IACtD,wGAAwG;IACxG,iFAAiF;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACvD,OAAO,CAAC,KAAK,CAAC,oEAAoE,EAAE,KAAK,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,0FAA0F;IAC5F,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,IAAI,OAAO,EAAU,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,aAAa,CAAsB,OAA8B;IAC/E,YAAY,GAAG,OAAwC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,IAAmE;IACnH,wGAAwG;IACxG,2DAA2D;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACvC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,YAAY;QAAE,OAAO;IAC1B,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE;YAClB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;YAC1B,qGAAqG;YACrG,sGAAsG;YACtG,IAAI,EAAE,IAAI,CAAC,IAAoB;YAC/B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,YAAY,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC","sourcesContent":["// `__RSHONO_CONFIG__` is a global const, and an `import` cannot bring one into scope — a path reference is\n// the only way to reach it, which is the whole reason that file is separate. See its header.\n// eslint-disable-next-line @typescript-eslint/triple-slash-reference\n/// <reference path=\"../types/rshono-config.d.ts\" />\n/**\n * The request context: {@link getRequestContext} and the {@link RequestContext} it returns, the\n * {@link redirect} / {@link notFound} control-flow helpers, and the {@link onServerError} reporting\n * funnel — plus the `@internal` plumbing that binds a request to the async context.\n *\n * The public half is re-exported by `runtime/server.ts`, which is what `@rshono/core/server` resolves\n * to; an app imports that.\n */\n\nimport type { Context, Env } from 'hono';\nimport { deleteCookie, getCookie, setCookie } from 'hono/cookie';\nimport type { CookieOptions } from 'hono/utils/cookie';\nimport { AsyncLocalStorage } from 'node:async_hooks';\nimport { NotFoundSignal, RedirectSignal } from './control.js';\n\n/**\n * HTTP status codes accepted by {@link redirect}.\n *\n * - `301` Moved Permanently, `308` Permanent Redirect — cacheable, permanent.\n * - `302` Found, `307` Temporary Redirect — temporary.\n * - `303` See Other — the default; forces a `GET` on the target, which is what you almost always want\n *   after a form action (post/redirect/get).\n *\n * @see {@link https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Status#redirection_messages | MDN — redirection status codes}\n */\nexport type RedirectStatus = 301 | 302 | 303 | 307 | 308;\n\nconst contextStorage = new AsyncLocalStorage<Context>();\n\n/** One {@link RequestContext} per Hono {@link Context}, so repeated `getRequestContext()` calls share its lazy getters. */\nconst wrappers = new WeakMap<Context, RequestContext>();\n\n// Keyed on the Hono context rather than held as a field, so marking a request never forces the lazily\n// built `RequestContext` wrapper into existence.\nconst rendering = new WeakSet<Context>();\n\n/**\n * Marks the request as having entered its page render, which is what makes\n * {@link RequestContext.setHeader} and `ctx.cookies.set()` start throwing.\n *\n * @internal\n */\nexport function beginPageRender(c: Context): void {\n  rendering.add(c);\n}\n\n/** The shared refusal for a response write that arrived too late — the message names where it belongs instead. */\nfunction tooLateToWrite(call: string): never {\n  throw new Error(\n    `[rshono] ${call} was called while rendering a page, which is too late to affect the response. ` +\n      'A page streams, so its response head is already committed by the time the component runs — the ' +\n      'write would land on a full page load and be silently dropped on a soft navigation. Do it from a ' +\n      \"'use server' action instead; or, in middleware and { type: 'endpoint' } routes — which are handed \" +\n      \"Hono's `c` directly and run outside the request context — with `c.header(…)` / `setCookie(c, …)`.\",\n  );\n}\n\n/** The shared refusal for a Hono `Context` member a page has no way to use. See the stubs on {@link RequestContext}. */\nfunction notOnContext(call: string, instead: string): never {\n  throw new Error(\n    `[rshono] ctx.${call} does not exist. A page returns JSX and the framework builds the response from it, ` +\n      `so Hono's response builders have nothing to return to. ${instead}`,\n  );\n}\n\n// Snapshotted rather than spread per request: enumerating `process.env` crosses into the host\n// environment (~20µs). Lazily, because `loadEnvFiles()` runs after this module is imported — so a\n// mutation after the first `ctx.env` read is not picked up.\nlet envSnapshot: Record<string, string | undefined> | undefined;\n\nfunction processEnv(): Record<string, string | undefined> {\n  return (envSnapshot ??= typeof process !== 'undefined' && process.env ? { ...process.env } : {});\n}\n\n// Set by `build.ts` before it imports the app bundle, which inlines its own copy of this module — so\n// `process.env` is what crosses that boundary rather than a module-level flag.\nconst prerendering = typeof process !== 'undefined' && !!process.env?.RSHONO_PRERENDER;\n\n/**\n * Runs `fn` with `c` bound as the ambient request context, so {@link getRequestContext} resolves to it\n * anywhere in the call tree.\n *\n * @internal\n */\nexport function runWithContext<T>(c: Context, fn: () => T): T {\n  return contextStorage.run(c, fn);\n}\n\n/**\n * The matched route params, or an empty object when there is no active match.\n *\n * @internal\n */\nexport function readParams(c: Context): Record<string, string> {\n  try {\n    return c.req.param();\n  } catch {\n    return {};\n  }\n}\n\n/** A proxy chain appends to these headers, so the client-facing value is the first entry. */\nfunction firstForwardedValue(header: string | undefined): string | undefined {\n  const first = header?.split(',')[0]?.trim();\n  return first || undefined;\n}\n\n// Read through `typeof`: DefinePlugin inlines this into the server bundle, but the module is also the\n// public `@rshono/core/server` entry, which tooling can load without one. Absent means don't trust.\nconst trustProxy = typeof __RSHONO_CONFIG__ !== 'undefined' && __RSHONO_CONFIG__.trustProxy;\n\n// Read the same way, for the same reason. Absent means the platform passes no bindings — see the getter.\nconst envBindings = typeof __RSHONO_CONFIG__ !== 'undefined' && __RSHONO_CONFIG__.envBindings;\n\n/**\n * The browser-facing {@link URL} for a request, resolved from Hono's {@link Context} — a fresh\n * instance per call.\n *\n * `c.req.url` is the internal address the server was reached on, which is wrong behind a proxy;\n * `X-Forwarded-Host` / `-Proto` correct it, but only when `trustProxy` is enabled in\n * `rshono.config.ts` — they are client-supplied, so trusting them unconditionally would let anyone\n * dictate the origin of every absolute URL the app builds.\n *\n * This is the form for **middleware**, which is handed `c` and runs outside the request context — and\n * so the way to give Hono's own middleware the origin the browser actually used. In a server component\n * or action, prefer {@link RequestContext.url}, the same value cached per request.\n *\n * @param c - The Hono {@link Context} for the request.\n * @returns The browser-facing URL — proxy-corrected under `trustProxy`, `c.req.url` otherwise.\n *\n * @example\n * ```ts\n * // src/server.ts — a CSRF check that still works behind a proxy that rewrites Host\n * import { publicUrl } from '@rshono/core/server';\n * import { csrf } from 'hono/csrf';\n *\n * server.use(csrf({ origin: (origin, c) => origin === publicUrl(c).origin }));\n * ```\n *\n * @see {@link https://www.rshono.com/docs/configuration#proxy-headers | Docs — proxy headers}\n */\nexport function publicUrl(c: Context): URL {\n  const url = new URL(c.req.url);\n  if (!trustProxy) return url;\n\n  const forwardedHost = firstForwardedValue(c.req.header('x-forwarded-host'));\n  // Parsed, not assigned to `url.host`: that setter keeps the existing port when the new value has none.\n  const forwarded = forwardedHost ? URL.parse(`http://${forwardedHost}`) : null;\n  if (forwarded) {\n    url.hostname = forwarded.hostname;\n    url.port = forwarded.port;\n  }\n\n  // Only the two schemes a browser could have requested; anything else leaves the scheme alone.\n  const forwardedProto = firstForwardedValue(c.req.header('x-forwarded-proto'));\n  if (forwardedProto === 'http' || forwardedProto === 'https') url.protocol = forwardedProto;\n\n  return url;\n}\n\n/**\n * The environment available to a request: Workers `Bindings` merged with process env vars. Values not\n * declared in `Bindings` are typed as `string | undefined`. See {@link RequestContext.env}.\n *\n * @see {@link https://hono.dev/docs/getting-started/cloudflare-workers#bindings | Hono — bindings}\n */\nexport type EnvVars<E extends Env> = E['Bindings'] & Record<string, string | undefined>;\n\n/**\n * Read-mostly wrapper around Hono's {@link Context}, for server components and server actions.\n *\n * Obtain one with {@link getRequestContext}, or take it off a page's `ctx` prop — the same object.\n * Never construct it yourself. One instance is reused for the whole request, so its lazy getters\n * ({@link RequestContext.url}, {@link RequestContext.env}) are computed at most once.\n *\n * The eight members that only throw — `redirect`, `notFound`, `json`, `text`, `html`, `body`, `status`,\n * `header` — are **permanent, and exist to throw**. Every one of them is a silent no-op when reached through\n * {@link RequestContext.hono} from a page, so a stub that names the thing that does work is the difference\n * between a message and a page that renders while quietly ignoring half of what it was asked for. They carry\n * `@deprecated` for the strike-through an editor draws with it, not because they are on the way out: nothing\n * will un-deprecate or remove them, and dropping them would leave `ctx.redirect('/x')` as\n * \"property does not exist\", which says what is wrong and not what to do.\n *\n * @typeParam E - The Hono {@link Env} describing this app's `Bindings` and `Variables`, so\n *   {@link RequestContext.var} and {@link RequestContext.env} stay typed.\n *\n * @example\n * ```tsx\n * import { getRequestContext } from '@rshono/core/server';\n *\n * export default async function Whoami() {\n *   const ctx = getRequestContext();\n *   const session = ctx.cookies.get('session');\n *   return <p>{ctx.url.pathname} — {session ?? 'anonymous'}</p>;\n * }\n * ```\n *\n * @see {@link https://www.rshono.com/docs/api#rshonocoreserver | Docs — `@rshono/core/server`}\n * @see {@link https://hono.dev/docs/api/context | Hono — Context}, reachable in full via {@link RequestContext.hono}\n */\nexport class RequestContext<E extends Env = Env> {\n  #raw: Context<E>;\n  #url?: URL;\n  #env?: EnvVars<E>;\n  #params?: Record<string, string>;\n\n  /**\n   * One instance is created per request and handed out by {@link getRequestContext} or the `ctx` page\n   * prop. Application code never calls this.\n   *\n   * @internal\n   */\n  constructor(c: Context<E>) {\n    this.#raw = c;\n  }\n\n  /**\n   * The underlying Hono {@link Context} — the escape hatch for what this wrapper does not expose, such\n   * as `executionCtx.waitUntil()` on Workers.\n   *\n   * Its response builders (`redirect`, `json`, `body`, `status`, …) still do nothing from inside a\n   * page: reaching them through here bypasses the errors the stubs on this class throw, it does not\n   * make them work.\n   *\n   * @example\n   * ```ts\n   * getRequestContext().hono.executionCtx.waitUntil(logAsync()); // Workers\n   * ```\n   *\n   * @see {@link https://hono.dev/docs/api/context | Hono — Context}\n   */\n  // Every member here is a getter or method so that none is *own enumerable*: React's \"you cannot pass\n  // this to a client component\" diagnostic walks `Object.keys` recursively with no cycle guard, and the\n  // Hono context graph reaches the socket through `req.raw`. `cookies` is the one own property, and it\n  // is a shallow object of four functions.\n  get hono(): Context<E> {\n    return this.#raw;\n  }\n\n  /**\n   * The parsed request — method, headers, path params, query and the body readers. Hono's\n   * {@link Context.req}, unwrapped, so `ctx.req.header('authorization')` rather than\n   * `ctx.hono.req.header(…)`.\n   *\n   * Reads only; setting a *response* header is {@link RequestContext.setHeader}, deliberately spelled\n   * differently.\n   *\n   * @example\n   * ```ts\n   * const ctx = getRequestContext();\n   * ctx.req.method;                     // 'GET'\n   * ctx.req.header('authorization');    // string | undefined\n   * ctx.req.query('tab');               // string | undefined\n   * ```\n   *\n   * @see {@link https://hono.dev/docs/api/request | Hono — HonoRequest}\n   */\n  get req(): Context<E>['req'] {\n    return this.#raw.req;\n  }\n\n  /**\n   * Matched route params for this request, e.g. `{ id: '42' }` for `/profile/:id`. Empty when no route\n   * matched.\n   *\n   * A page is handed the same record as its `params` prop, typed key-by-key from its route path, and\n   * that is the better read where it exists. This is for everywhere else — a nested server component,\n   * or a `'use server'` action.\n   */\n  get params(): Record<string, string> {\n    return (this.#params ??= readParams(this.#raw as Context));\n  }\n\n  /**\n   * The browser-facing request URL. Parsed once and cached, so every read within a request returns the\n   * same instance — treat it as read-only.\n   *\n   * `X-Forwarded-Host` / `-Proto` are honoured only when `trustProxy` is enabled in\n   * `rshono.config.ts`, since any client can send them.\n   *\n   * @example `const tab = getRequestContext().url.searchParams.get('tab');`\n   *\n   * @see {@link https://www.rshono.com/docs/configuration#proxy-headers | Docs — proxy headers}\n   */\n  get url(): URL {\n    return (this.#url ??= publicUrl(this.#raw as Context));\n  }\n\n  /**\n   * Typed variables set by middleware via `c.set('user', …)`, read here as `ctx.var.user`. Type them by\n   * parameterising this class's {@link Env}.\n   *\n   * @example\n   * ```ts\n   * type AppEnv = { Variables: { user: { id: string } } };\n   * const { user } = getRequestContext<AppEnv>().var; // typed, set by your middleware\n   * ```\n   *\n   * @see {@link https://hono.dev/docs/api/context#var | Hono — c.var}\n   * @see {@link https://www.rshono.com/docs/hono#typing-the-context | Docs — typing the context}\n   */\n  get var(): Readonly<E['Variables']> {\n    return this.#raw.var;\n  }\n\n  /**\n   * Environment for the request: process env vars, merged on a bindings platform with the bindings, which\n   * win on conflict.\n   *\n   * The `process.env` half is snapshotted **once per process**, not per request — enumerating it crosses\n   * into the host environment, and doing that on every request is a cost with nothing to show for it. So a\n   * `process.env` mutation made after the first `ctx.env` read anywhere in the process is never seen here.\n   * Read `process.env` directly if you have one. The bindings half is per request, since it comes off the\n   * request's own Hono context.\n   *\n   * Bindings are merged **only where the platform supplies them** — `deploy: 'cloudflare'`, today. Hono's\n   * `c.env` is whatever the host passed as the second argument to `app.fetch`, and off Workers that is the\n   * adapter's own private state: `{ incoming, outgoing }` on Node and Vercel, the entire invocation —\n   * headers, cookies, `authorization` — on Lambda. Merging it would make `ctx.env` uncloneable on one and\n   * a disclosure vector on the other, both behind names this type declares `string | undefined`. Reach for\n   * {@link RequestContext.hono}`.env` if you really do want the adapter's argument.\n   *\n   * @example `const key = getRequestContext().env.STRIPE_SECRET_KEY;`\n   *\n   * @see {@link https://hono.dev/docs/api/context#env | Hono — c.env}\n   * @see {@link https://www.rshono.com/docs/configuration#environment-and-secrets | Docs — environment and secrets}\n   */\n  get env(): EnvVars<E> {\n    if (this.#env) return this.#env;\n    const bindings = envBindings ? (this.#raw.env as Record<string, unknown> | undefined) : undefined;\n    return (this.#env = (bindings ? { ...processEnv(), ...bindings } : processEnv()) as EnvVars<E>);\n  }\n\n  /**\n   * Read and write request/response cookies.\n   *\n   * @example\n   * ```ts\n   * const ctx = getRequestContext();\n   * ctx.cookies.get('session');                       // string | undefined\n   * ctx.cookies.set('session', id, { httpOnly: true, sameSite: 'Lax', path: '/' });\n   * ctx.cookies.delete('session', { path: '/' });\n   * ```\n   *\n   * @see {@link https://hono.dev/docs/helpers/cookie | Hono — cookie helper}, which this wraps\n   */\n  cookies = {\n    /** Reads a single cookie by name, or `undefined` if absent. Safe anywhere, a page included. */\n    get: (name: string): string | undefined => getCookie(this.#raw, name),\n    /** Reads every cookie as a `{ name: value }` record. Safe anywhere, a page included. */\n    all: (): Record<string, string> => getCookie(this.#raw),\n    /**\n     * Sets a cookie on the response. See Hono's {@link CookieOptions} for `path`, `httpOnly`, `maxAge`\n     * and the rest.\n     *\n     * **Throws inside a page render** — a `Set-Cookie` is a special case of\n     * {@link RequestContext.setHeader}. Set cookies from a `'use server'` action, or with Hono's\n     * `setCookie(c, …)` in middleware and endpoint routes.\n     *\n     * @throws If called while a page is rendering, where it could not reach the browser reliably.\n     *\n     * @see {@link https://hono.dev/docs/helpers/cookie#options | Hono — cookie options}\n     */\n    set: (name: string, value: string, options?: CookieOptions): void => {\n      this.#assertWritable('ctx.cookies.set()');\n      setCookie(this.#raw, name, value, options);\n    },\n    /**\n     * Clears a cookie. Pass the same `path`/`domain` it was set with so the browser matches it.\n     * Throws inside a page render, exactly as `set` does.\n     *\n     * @throws If called while a page is rendering.\n     */\n    delete: (name: string, options?: CookieOptions): void => {\n      this.#assertWritable('ctx.cookies.delete()');\n      deleteCookie(this.#raw, name, options);\n    },\n  };\n\n  #assertWritable(call: string): void {\n    if (rendering.has(this.#raw as Context)) tooLateToWrite(call);\n  }\n\n  /**\n   * Sets a header on the response — from a `'use server'` action, which is the one place a request\n   * context exists *and* the response is still open.\n   *\n   * From inside a page it throws: a page streams, so its response head is already committed by then,\n   * and the write would land on a full page load but vanish on a soft navigation.\n   *\n   * Middleware and `{ type: 'endpoint' }` routes are handed Hono's `c` directly and use `c.header(…)`.\n   * That is also where a header belonging to the *page* goes — `Cache-Control`, `X-Robots-Tag` — since\n   * middleware runs before the render.\n   *\n   * @param name - Header name, case-insensitive.\n   * @param value - Header value.\n   * @param options - `{ append: true }` to add another value rather than replace.\n   * @throws If called while a page is rendering, where it could not reach the browser reliably.\n   *\n   * @example\n   * ```ts\n   * 'use server';\n   * export async function logout() {\n   *   const ctx = getRequestContext();\n   *   ctx.cookies.delete('session', { path: '/' });\n   *   ctx.setHeader('clear-site-data', '\"cache\", \"storage\"');\n   *   redirect('/');\n   * }\n   * ```\n   */\n  setHeader(name: string, value: string, options?: { append?: boolean }): void {\n    this.#assertWritable('ctx.setHeader()');\n    this.#raw.header(name, value, options);\n  }\n\n  // Hono's response builders, restated as errors naming what to use instead — through `ctx.hono` every\n  // one of them is a silent no-op from a page. Permanent, deliberately: see the class doc. `@deprecated`\n  // strikes them through in autocomplete; the unread `..._args` is so `ctx.redirect('/x')` reaches the\n  // thrown message rather than an arity error.\n\n  /** @deprecated Not available on a page's context — use `redirect()` from `@rshono/core/server`. */\n  redirect(..._args: unknown[]): never {\n    return notOnContext(\n      'redirect(location, status?)',\n      \"Use `redirect()` from '@rshono/core/server', which throws a signal the framework turns into a real redirect.\",\n    );\n  }\n\n  /** @deprecated Not available on a page's context — use `notFound()` from `@rshono/core/server`. */\n  notFound(..._args: unknown[]): never {\n    return notOnContext('notFound()', \"Use `notFound()` from '@rshono/core/server', which aborts the render and shows the app's not-found page.\");\n  }\n\n  /** @deprecated A page renders JSX. For a JSON response, use an `{ type: 'endpoint' }` route. */\n  json(..._args: unknown[]): never {\n    return notOnContext('json(object)', \"For a JSON response use an { type: 'endpoint' } route; to read the request body use `ctx.req.json()`.\");\n  }\n\n  /** @deprecated A page renders JSX. For a text response, use an `{ type: 'endpoint' }` route. */\n  text(..._args: unknown[]): never {\n    return notOnContext('text(string)', \"For a text response use an { type: 'endpoint' } route; to read the request body use `ctx.req.text()`.\");\n  }\n\n  /** @deprecated A page renders JSX, which the framework turns into HTML for you. */\n  html(..._args: unknown[]): never {\n    return notOnContext('html(string)', \"A page's JSX is already its HTML; for a hand-built HTML response use an { type: 'endpoint' } route.\");\n  }\n\n  /** @deprecated Not available on a page's context. To read the request body, use `ctx.req`. */\n  body(..._args: unknown[]): never {\n    return notOnContext(\n      'body(data, …)',\n      \"To read the *request* body use `ctx.req.json()` / `ctx.req.text()` / `ctx.req.formData()`; to build a response, use an { type: 'endpoint' } route.\",\n    );\n  }\n\n  /** @deprecated A page's status is set by the framework — use `notFound()`, or an endpoint route. */\n  status(..._args: unknown[]): never {\n    return notOnContext(\n      'status(code)',\n      \"A page's status is the framework's: 200, 404 via `notFound()`, 500 when it throws. For any other code use an { type: 'endpoint' } route.\",\n    );\n  }\n\n  /** @deprecated Renamed — use `ctx.setHeader(name, value)`, which is valid from a `'use server'` action. */\n  header(..._args: unknown[]): never {\n    return notOnContext(\n      'header(name, value)',\n      \"Use `ctx.setHeader(name, value)` from a 'use server' action, or `c.header(…)` in middleware — a page renders too late to set one.\",\n    );\n  }\n}\n\n/**\n * The {@link RequestContext} for the current request — URL, cookies, params, env and middleware\n * variables — read from a server component or a server action. Memoised per request, so repeated calls\n * return the same instance.\n *\n * A page is handed that same object as its `ctx` prop, so this import is for everywhere else: a nested\n * server component, or a `'use server'` action module.\n *\n * @typeParam E - The app's Hono {@link Env}, to type {@link RequestContext.var} and {@link RequestContext.env}.\n * @throws If called at module load, where there is no ambient context to resolve.\n * @throws If called while prerendering a `render: 'static'` route, which has no\n *   per-request context at build time — mark the route `render: 'dynamic'` instead.\n *\n * @example\n * ```ts\n * 'use server';\n * import { getRequestContext, redirect } from '@rshono/core/server';\n *\n * export async function login(form: FormData) {\n *   getRequestContext().cookies.set('session', String(form.get('email')), { httpOnly: true });\n *   redirect('/dashboard');\n * }\n * ```\n *\n * @see {@link https://www.rshono.com/docs/api#rshonocoreserver | Docs — `@rshono/core/server`}\n */\nexport function getRequestContext<E extends Env = Env>(): RequestContext<E> {\n  if (prerendering) {\n    throw new Error(\n      \"[rshono] getRequestContext() was called while prerendering a `render: 'static'` route. A static page \" +\n        'is rendered once at build time, so it has no per-request context to read (URL, cookies, ' +\n        \"headers, env). Change this route to `render: 'dynamic'` so it renders per request, or remove \" +\n        'the getRequestContext() call.',\n    );\n  }\n  const c = contextStorage.getStore();\n  if (!c) {\n    throw new Error(\n      '[rshono] getRequestContext() was called outside a request. It only works inside a server component or a server action, not at module load.',\n    );\n  }\n  let ctx = wrappers.get(c);\n  if (!ctx) {\n    ctx = new RequestContext(c);\n    wrappers.set(c, ctx);\n  }\n  return ctx as unknown as RequestContext<E>;\n}\n\n/**\n * Redirects the request to `location`, by throwing a control signal the framework turns into an HTTP\n * redirect.\n *\n * Because it throws it never returns, so TypeScript narrows away everything after the call and there\n * is nothing to `return`. Don't wrap it in a `try/catch` that swallows the signal.\n *\n * @param location - Absolute path or URL to redirect to, e.g. `/dashboard`.\n * @param status - Redirect {@link RedirectStatus}; defaults to `303` (See Other), which is what makes\n *   the browser follow up with a `GET` after a form action.\n *\n * @example\n * ```ts\n * const session = getRequestContext().cookies.get('session');\n * if (!session) redirect('/login');\n * // session is defined below this line\n * ```\n */\nexport function redirect(location: string, status: RedirectStatus = 303): never {\n  throw new RedirectSignal(location, status);\n}\n\n/**\n * Aborts the current render with a 404, rendering the app's `notFound` page.\n *\n * Like {@link redirect} it throws a control signal and never returns, so TypeScript narrows away\n * everything after the call. Don't catch-and-swallow it.\n *\n * **A real 404 status is only possible on a document load.** A soft navigation asks for a flight payload,\n * and that response is committed as `200 text/x-component` the moment the render hands its stream back —\n * before anything is awaited — so there is no shell to beat and calling this from the first line of a page\n * is already too late. The signal still reaches the browser as a digest, and the client recovers by\n * reloading the page for real: correct, but an extra round trip and a full document parse every time. Unlike\n * {@link redirect}, which the same client turns into a soft navigation and which costs nothing. Where the\n * status matters — a crawler, a monitor — decide in Hono middleware, ahead of the render.\n *\n * @example\n * ```tsx\n * export default async function Page({ params }: PageProps<'/users/:id'>) {\n *   const user = await db.user.find(params.id);\n *   if (!user) notFound();\n *   return <Profile user={user} />; // user is non-null here\n * }\n * ```\n */\nexport function notFound(): never {\n  throw new NotFoundSignal();\n}\n\n/**\n * Which stage of a request produced an error handed to a {@link ServerErrorHandler}.\n *\n * - `action` — a `'use server'` function threw. React sends the client an opaque marker with no\n *   message in production, so this is the only place the real error is visible.\n * - `render` — a server component threw while the flight payload was being produced.\n * - `ssr` — SSR failed before the HTML shell could be sent, so the `error` page was unreachable too.\n * - `request` — anything else that reached the top-level handler, a thrown endpoint route included.\n */\nexport type ServerErrorSource = 'action' | 'render' | 'ssr' | 'request';\n\n/**\n * What an {@link ServerErrorHandler} is told about an error, beyond the error itself.\n *\n * @typeParam E - The app's Hono {@link Env}, to type {@link ServerErrorContext.hono}'s `var` and `env`.\n */\nexport interface ServerErrorContext<E extends Env = Env> {\n  /** The stage that produced it — see {@link ServerErrorSource}. */\n  source: ServerErrorSource;\n  /** The request being served, for the URL, method and headers. */\n  request: Request;\n  /**\n   * The Hono {@link Context} for this request — `hono.var` for whatever middleware put there, such as a\n   * request id to correlate the report on, and `hono.env` for a platform that passes bindings.\n   *\n   * Handed over rather than left to {@link getRequestContext}, which a handler cannot reach: an error with\n   * `source: 'request'` is reported from the top-level handler, which runs outside the ambient context.\n   */\n  hono: Context<E>;\n  /**\n   * Holds the invocation open until `promise` settles, where the platform has something to ask.\n   *\n   * Reporting is what this hook exists for, and on a serverless platform a report started here is cut off\n   * the moment the response ends unless something keeps the invocation alive. On Cloudflare Workers that is\n   * `executionCtx.waitUntil`, which this calls. On the `node` and `vercel` targets there is nothing to hold\n   * open — the process outlives the response — so it is a no-op and the report finishes on its own. On\n   * `aws-lambda` it is a no-op as well, because `hono/aws-lambda`'s streaming handler exposes no execution\n   * context to ask; a slow report there is best-effort, so prefer a tracker that batches over one that\n   * round-trips per error.\n   *\n   * A rejection is logged rather than propagated: reporting can never fail a request.\n   */\n  waitUntil: (promise: Promise<unknown>) => void;\n}\n\n/** Handler registered with {@link onServerError}. Called for the side effect; its return value is ignored. */\nexport type ServerErrorHandler<E extends Env = Env> = (error: unknown, context: ServerErrorContext<E>) => void;\n\nlet errorHandler: ServerErrorHandler | undefined;\n\n/**\n * The platform's \"keep this invocation alive\" hook, or a no-op where there is none.\n *\n * `c.executionCtx` *throws* rather than answering `undefined` where a platform has no execution context, so\n * a handler that reached for it itself would have its report swallowed by the guard in\n * {@link reportServerError} — on exactly the platforms where nothing needed holding open.\n */\nfunction keepAlive(c: Context, promise: Promise<unknown>): void {\n  // Caught here rather than left to the platform: under `--unhandled-rejections=strict` a rejected report\n  // would end the process, and a failed report must never be worse than no report.\n  const settled = Promise.resolve(promise).catch((error) => {\n    console.error('[rshono] a promise passed to the onServerError waitUntil rejected:', error);\n  });\n  try {\n    c.executionCtx.waitUntil(settled);\n  } catch {\n    // No execution context: nothing here cuts the work off, so there is nothing to hold open.\n  }\n}\n\n/**\n * Errors already forwarded, so one fault is reported once however many stages it crosses.\n *\n * A thrown server action is reported where it is known to be an action and then re-thrown, which lands it in\n * the top-level handler as well — and a funnel that counts the same error twice, under two different\n * `source`s, is worse than one that only ever names the outer stage.\n */\nconst alreadyReported = new WeakSet<object>();\n\n/**\n * Registers a handler for every error the framework catches, so they can reach an error tracker\n * (Sentry, Datadog, a log pipeline) instead of only `stderr`.\n *\n * Call it once, at the top level of `src/server.ts`, which is imported as the server starts.\n * Registering again replaces the previous handler. Errors still go to `stderr` either way, and a\n * handler that throws is caught and logged — reporting can never fail a request.\n *\n * @typeParam E - The app's Hono {@link Env}, to type the `hono` context the handler is given.\n *\n * @example\n * ```ts\n * // src/server.ts\n * import * as Sentry from '@sentry/node';\n * import { onServerError } from '@rshono/core/server';\n *\n * onServerError((error, { source, request, hono, waitUntil }) => {\n *   // `waitUntil` so a serverless invocation is not frozen before the report is sent.\n *   waitUntil(\n *     Sentry.captureException(error, {\n *       tags: { source, requestId: hono.var.requestId },\n *       extra: { url: request.url },\n *     }),\n *   );\n * });\n * ```\n *\n * @see {@link https://www.rshono.com/docs/hono#error-reporting | Docs — error reporting}\n */\nexport function onServerError<E extends Env = Env>(handler: ServerErrorHandler<E>): void {\n  errorHandler = handler as unknown as ServerErrorHandler;\n}\n\n/**\n * Logs an error and forwards it to the registered {@link ServerErrorHandler} — the single funnel every\n * caught server-side error goes through.\n *\n * @internal\n */\nexport function reportServerError(error: unknown, info: { source: ServerErrorSource; hono: Context; message: string }): void {\n  // The first stage to recognise it wins, since that is the one that knows what it was. A primitive throw\n  // cannot be tracked and is reported wherever it is caught.\n  if (typeof error === 'object' && error !== null) {\n    if (alreadyReported.has(error)) return;\n    alreadyReported.add(error);\n  }\n  console.error(info.message, error);\n  if (!errorHandler) return;\n  try {\n    errorHandler(error, {\n      source: info.source,\n      request: info.hono.req.raw,\n      // The handler was registered for the app's own `Env`, which `onServerError` erased to store it; this\n      // puts the context back in the shape it was registered with. Same trade as {@link getRequestContext}.\n      hono: info.hono as Context<Env>,\n      waitUntil: (promise) => keepAlive(info.hono, promise),\n    });\n  } catch (handlerError) {\n    console.error('[rshono] the onServerError handler threw:', handlerError);\n  }\n}\n"]}

package/dist/runtime/control.d.ts

@@ -11,8 +11,22 @@ export declare class NotFoundSignal extends Error {
 export type ControlSignal = RedirectSignal | NotFoundSignal;
 export declare function isControlSignal(error: unknown): error is ControlSignal;
 export declare function isControlDigest(digest: unknown): digest is string;
+/**
+ * Whether an error is React's stand-in for one that came out of a flight payload, rather than one that
+ * started life where it was caught. Here, beside {@link isControlDigest}, because both are the same
+ * question — what a `digest` tells you about where an error has been.
+ *
+ * A `digest` is what React puts on the far side of a payload boundary in place of the real error, so its
+ * presence *is* the provenance: the layer that wrote the payload met the original and reported it in full.
+ * Reporting the stand-in as well tags one fault with a second `source`, and in a build the copy carries no
+ * message at all — React redacts it — so the second line says nothing the first did not.
+ *
+ * `reportServerError` cannot see this for itself: it de-duplicates on object identity, and a stand-in is a
+ * different object. Every place a payload error can be reported a second time makes this test — the SSR
+ * shell path, the top-level handler, and the `error` page's own catch.
+ */
+export declare function cameFromPayload(error: unknown): boolean;
 export declare function parseRedirectDigest(digest: string): {
     location: string;
     status: number;
 } | null;
-//# sourceMappingURL=control.d.ts.map

package/dist/runtime/control.js

@@ -32,6 +32,23 @@ export function isControlSignal(error) {
 export function isControlDigest(digest) {
     return typeof digest === 'string' && (digest === NOT_FOUND_DIGEST || digest.startsWith(REDIRECT_PREFIX));
 }
+/**
+ * Whether an error is React's stand-in for one that came out of a flight payload, rather than one that
+ * started life where it was caught. Here, beside {@link isControlDigest}, because both are the same
+ * question — what a `digest` tells you about where an error has been.
+ *
+ * A `digest` is what React puts on the far side of a payload boundary in place of the real error, so its
+ * presence *is* the provenance: the layer that wrote the payload met the original and reported it in full.
+ * Reporting the stand-in as well tags one fault with a second `source`, and in a build the copy carries no
+ * message at all — React redacts it — so the second line says nothing the first did not.
+ *
+ * `reportServerError` cannot see this for itself: it de-duplicates on object identity, and a stand-in is a
+ * different object. Every place a payload error can be reported a second time makes this test — the SSR
+ * shell path, the top-level handler, and the `error` page's own catch.
+ */
+export function cameFromPayload(error) {
+    return typeof error?.digest === 'string';
+}
 export function parseRedirectDigest(digest) {
     if (!digest.startsWith(REDIRECT_PREFIX))
         return null;

package/dist/runtime/control.js.map

@@ -1 +1 @@
-{"version":3,"file":"control.js","sourceRoot":"","sources":["../../src/runtime/control.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,MAAM,OAAO,cAAe,SAAQ,KAAK;IAG5B,QAAQ;IACR,MAAM;IAHR,MAAM,CAAS;IACxB,YACW,QAAgB,EAChB,MAAc;QAEvB,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;wBAHjC,QAAQ;sBACR,MAAM;QAGf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,GAAG,eAAe,GAAG,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC9E,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,GAAG,gBAAgB,CAAC;IACnC;QACE,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAID,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,cAAc,IAAI,KAAK,YAAY,cAAc,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACtE,CAAC","sourcesContent":["/**\n * `redirect()` and `notFound()` as thrown errors, and the `digest` string that carries them.\n *\n * The digest is the only part that survives React — a server component's error reaches the browser as a\n * digest with no message — so the redirect target is encoded into it. The server matches the class, the\n * client matches the string.\n */\nconst REDIRECT_PREFIX = 'RSHONO_REDIRECT;';\nconst NOT_FOUND_DIGEST = 'RSHONO_NOT_FOUND';\n\nexport class RedirectSignal extends Error {\n  readonly digest: string;\n  constructor(\n    readonly location: string,\n    readonly status: number,\n  ) {\n    super(`[rshono] redirect to ${location}`);\n    this.name = 'RedirectSignal';\n    this.digest = `${REDIRECT_PREFIX}${status};${encodeURIComponent(location)}`;\n  }\n}\n\nexport class NotFoundSignal extends Error {\n  readonly digest = NOT_FOUND_DIGEST;\n  constructor() {\n    super('[rshono] notFound');\n    this.name = 'NotFoundSignal';\n  }\n}\n\nexport type ControlSignal = RedirectSignal | NotFoundSignal;\n\nexport function isControlSignal(error: unknown): error is ControlSignal {\n  return error instanceof RedirectSignal || error instanceof NotFoundSignal;\n}\n\nexport function isControlDigest(digest: unknown): digest is string {\n  return typeof digest === 'string' && (digest === NOT_FOUND_DIGEST || digest.startsWith(REDIRECT_PREFIX));\n}\n\nexport function parseRedirectDigest(digest: string): { location: string; status: number } | null {\n  if (!digest.startsWith(REDIRECT_PREFIX)) return null;\n  const rest = digest.slice(REDIRECT_PREFIX.length);\n  const sep = rest.indexOf(';');\n  if (sep === -1) return null;\n  const status = Number(rest.slice(0, sep));\n  const location = decodeURIComponent(rest.slice(sep + 1));\n  return { location, status: Number.isFinite(status) ? status : 307 };\n}\n"]}
+{"version":3,"file":"control.js","sourceRoot":"","sources":["../../src/runtime/control.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,MAAM,OAAO,cAAe,SAAQ,KAAK;IAG5B,QAAQ;IACR,MAAM;IAHR,MAAM,CAAS;IACxB,YACW,QAAgB,EAChB,MAAc;QAEvB,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;wBAHjC,QAAQ;sBACR,MAAM;QAGf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,GAAG,eAAe,GAAG,MAAM,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC9E,CAAC;CACF;AAED,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,MAAM,GAAG,gBAAgB,CAAC;IACnC;QACE,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAID,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,cAAc,IAAI,KAAK,YAAY,cAAc,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAe;IAC7C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,OAAQ,KAAqC,EAAE,MAAM,KAAK,QAAQ,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACtE,CAAC","sourcesContent":["/**\n * `redirect()` and `notFound()` as thrown errors, and the `digest` string that carries them.\n *\n * The digest is the only part that survives React — a server component's error reaches the browser as a\n * digest with no message — so the redirect target is encoded into it. The server matches the class, the\n * client matches the string.\n */\nconst REDIRECT_PREFIX = 'RSHONO_REDIRECT;';\nconst NOT_FOUND_DIGEST = 'RSHONO_NOT_FOUND';\n\nexport class RedirectSignal extends Error {\n  readonly digest: string;\n  constructor(\n    readonly location: string,\n    readonly status: number,\n  ) {\n    super(`[rshono] redirect to ${location}`);\n    this.name = 'RedirectSignal';\n    this.digest = `${REDIRECT_PREFIX}${status};${encodeURIComponent(location)}`;\n  }\n}\n\nexport class NotFoundSignal extends Error {\n  readonly digest = NOT_FOUND_DIGEST;\n  constructor() {\n    super('[rshono] notFound');\n    this.name = 'NotFoundSignal';\n  }\n}\n\nexport type ControlSignal = RedirectSignal | NotFoundSignal;\n\nexport function isControlSignal(error: unknown): error is ControlSignal {\n  return error instanceof RedirectSignal || error instanceof NotFoundSignal;\n}\n\nexport function isControlDigest(digest: unknown): digest is string {\n  return typeof digest === 'string' && (digest === NOT_FOUND_DIGEST || digest.startsWith(REDIRECT_PREFIX));\n}\n\n/**\n * Whether an error is React's stand-in for one that came out of a flight payload, rather than one that\n * started life where it was caught. Here, beside {@link isControlDigest}, because both are the same\n * question — what a `digest` tells you about where an error has been.\n *\n * A `digest` is what React puts on the far side of a payload boundary in place of the real error, so its\n * presence *is* the provenance: the layer that wrote the payload met the original and reported it in full.\n * Reporting the stand-in as well tags one fault with a second `source`, and in a build the copy carries no\n * message at all — React redacts it — so the second line says nothing the first did not.\n *\n * `reportServerError` cannot see this for itself: it de-duplicates on object identity, and a stand-in is a\n * different object. Every place a payload error can be reported a second time makes this test — the SSR\n * shell path, the top-level handler, and the `error` page's own catch.\n */\nexport function cameFromPayload(error: unknown): boolean {\n  return typeof (error as { digest?: unknown } | null)?.digest === 'string';\n}\n\nexport function parseRedirectDigest(digest: string): { location: string; status: number } | null {\n  if (!digest.startsWith(REDIRECT_PREFIX)) return null;\n  const rest = digest.slice(REDIRECT_PREFIX.length);\n  const sep = rest.indexOf(';');\n  if (sep === -1) return null;\n  const status = Number(rest.slice(0, sep));\n  const location = decodeURIComponent(rest.slice(sep + 1));\n  return { location, status: Number.isFinite(status) ? status : 307 };\n}\n"]}

package/dist/runtime/dev-protocol.d.ts

@@ -15,4 +15,3 @@ export type DevMessage = {
 } | {
     type: 'rsc-update';
 };
-//# sourceMappingURL=dev-protocol.d.ts.map

package/dist/runtime/empty-server-app.d.ts

@@ -1,3 +1,2 @@
 declare const _default: null;
 export default _default;
-//# sourceMappingURL=empty-server-app.d.ts.map

package/dist/runtime/entry.client.d.ts

@@ -3,4 +3,3 @@ declare global {
     var __FLIGHT_DATA: Array<string | Uint8Array> | undefined;
 }
 export {};
-//# sourceMappingURL=entry.client.d.ts.map

package/dist/runtime/entry.client.js

@@ -237,6 +237,8 @@ function refresh() {
 }
 /** How long the recovery reload is given to replace this document before the panel is painted instead. */
 const RELOAD_GRACE_MS = 2000;
+/** The `sessionStorage` key bounding the recovery reload for one URL. Spent here, released in {@link main}. */
+const lateNotFoundKey = () => `rshono:late-not-found:${documentUrl()}`;
 /**
  * Spends the one reload a late `notFound()` gets, or paints if it has already been spent for this URL.
  *
@@ -253,7 +255,7 @@ const RELOAD_GRACE_MS = 2000;
  * second page's late signal still gets its own attempt.
  */
 function reloadOnceForLateNotFound() {
-    const key = `rshono:late-not-found:${documentUrl()}`;
+    const key = lateNotFoundKey();
     let spent;
     try {
         spent = sessionStorage.getItem(key) !== null;
@@ -415,6 +417,22 @@ async function main() {
     if (cspMeta?.nonce)
         __webpack_nonce__ = cspMeta.nonce;
     const initialPayload = await createFromReadableStream(flightStream);
+    // The recovery reload landed: this document *is* the `notFound` page, so the signal that could only be a
+    // digest on the `RSC: 1` request became a real 404 on the document request. The one-reload bound was spent
+    // on a recovery that worked and has to be released — otherwise the *next* soft navigation to this URL sees a
+    // spent key and paints {@link showLateNotFound} over a page the app can still render.
+    //
+    // This is the discriminator the bound was missing. A structurally late `notFound()` commits its 200 before
+    // it signals, so its reloaded document is the page itself and carries no `notFound`: the key survives and
+    // that loop stays bounded at one reload, which is the whole reason the bound exists.
+    if (initialPayload.notFound) {
+        try {
+            sessionStorage.removeItem(lateNotFoundKey());
+        }
+        catch {
+            // Blocked site data. `reloadOnceForLateNotFound` already treats that as the terminating case.
+        }
+    }
     function BrowserRoot() {
         const [payload, setPayloadState] = React.useState(initialPayload);
         const [pending, startTransition] = React.useTransition();
@@ -474,9 +492,18 @@ async function main() {
         const result = payload.returnValue;
         if (!result) {
             // A payload that is not this action's own reply: the server rendered a page in its place. An action
-            // that had already run has its result carried across (see `actionResults` in entry.rsc.tsx), so
-            // reaching here means the request failed before it ran at all — an undecodable body, most likely.
-            // Reading `.ok` off it used to hand the caller `Cannot read properties of undefined`.
+            // that had already run has its result carried across (see `actionResults` in entry.rsc.tsx), and the
+            // ways a *caller* can get a request wrong are refused ahead of any render — an unknown id or an
+            // undecodable body is a `text/plain` 400, which `payloadResponse` turns into an error of its own
+            // before this.
+            //
+            // What is left is the server failing before the action ran, which is answered with the `error` page —
+            // a flight payload, so it arrives here rather than at `payloadResponse`, with no `returnValue` in it.
+            // A module the deployment no longer holds is the reachable case: `loadServerAction` throws, the
+            // framework reports it and 500s, and this is what the caller has to go on. Hence the message: the
+            // failure is on the server and its log is where the error is. Below that it is still the defensive
+            // floor for a payload shaped by another deployment or replaced by a proxy — reading `.ok` off it used
+            // to hand the caller `Cannot read properties of undefined`.
             throw new Error('[rshono] the server action produced no result — the request failed around it and the server answered with a page instead. Its log has the error.');
         }
         if (!result.ok)