@timber-js/app 0.1.4 → 0.1.6

package/dist/server/primitives.d.ts

@@ -128,4 +128,19 @@ export declare function waitUntil(promise: Promise<unknown>, adapter: WaitUntilA
  * @internal
  */
 export declare function _resetWaitUntilWarning(): void;
+/**
+ * Error thrown when SSR's renderToReadableStream fails due to an error
+ * in the decoded RSC stream (e.g., uncontained slot errors).
+ *
+ * The RSC entry checks for this error type in its catch block to avoid
+ * re-executing server components via renderDenyPage. Instead, it renders
+ * a bare deny/error page without layout wrapping.
+ *
+ * Defined in primitives.ts (not ssr-entry.ts) because ssr-entry.ts imports
+ * react-dom/server which cannot be loaded in the RSC environment.
+ */
+export declare class SsrStreamError extends Error {
+    readonly cause: unknown;
+    constructor(message: string, cause: unknown);
+}
 //# sourceMappingURL=primitives.d.ts.map

package/dist/server/primitives.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"primitives.d.ts","sourceRoot":"","sources":["../../src/server/primitives.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAEX,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;IAO1C;;;;OAIG;IACH,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAqBnC;CACF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,IAAI,CAAC,MAAM,GAAE,MAAY,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,KAAK,CAQhE;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,IAAI,KAAK,CAEhC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAIX;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM7C;AAKD;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,MAAY,GAAG,KAAK,CAWlE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,GAAE,MAAY,GAAG,KAAK,CAoB9F;AAID;;;GAGG;AACH,MAAM,WAAW,iBAAiB,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,GAAG,OAAO;IAC/E,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,KAAK,CAAC;CACb;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,WAAW,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,GAAG,OAAO,CAAE,SAAQ,KAAK;IACpF,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;CAYpE;AAID,mEAAmE;AACnE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;CAC7C;AAMD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAapF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C"}
+{"version":3,"file":"primitives.d.ts","sourceRoot":"","sources":["../../src/server/primitives.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;gBAEX,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO;IAO1C;;;;OAIG;IACH,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAqBnC;CACF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,IAAI,CAAC,MAAM,GAAE,MAAY,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,KAAK,CAQhE;AAED;;;;;;GAMG;AACH,wBAAgB,QAAQ,IAAI,KAAK,CAEhC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAIX;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAM7C;AAKD;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,MAAY,GAAG,KAAK,CAWlE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAErD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,GAAE,MAAY,GAAG,KAAK,CAoB9F;AAID;;;GAGG;AACH,MAAM,WAAW,iBAAiB,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,GAAG,OAAO;IAC/E,IAAI,EAAE,KAAK,CAAC;IACZ,IAAI,EAAE,KAAK,CAAC;CACb;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,WAAW,CAAC,KAAK,SAAS,MAAM,GAAG,MAAM,EAAE,KAAK,GAAG,OAAO,CAAE,SAAQ,KAAK;IACpF,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;CAYpE;AAID,mEAAmE;AACnE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;CAC7C;AAMD;;;;;;;;;GASG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAapF;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAE7C;AAID;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAGrB,KAAK,EAAE,OAAO;gBAD9B,OAAO,EAAE,MAAM,EACC,KAAK,EAAE,OAAO;CAKjC"}

package/dist/server/request-context.d.ts

@@ -9,7 +9,38 @@
  * and design/11-platform.md §"AsyncLocalStorage".
  * See design/29-cookies.md for cookie mutation semantics.
  */
+import { AsyncLocalStorage } from 'node:async_hooks';
 import type { Routes } from '#/index.js';
+interface RequestContextStore {
+    /** Incoming request headers (read-only view). */
+    headers: Headers;
+    /** Raw cookie header string, parsed lazily into a Map on first access. */
+    cookieHeader: string;
+    /** Lazily-parsed cookie map (mutable — reflects write-overlay from set()). */
+    parsedCookies?: Map<string, string>;
+    /** Original (pre-overlay) frozen headers, kept for overlay merging. */
+    originalHeaders: Headers;
+    /**
+     * Promise resolving to the route's typed search params (when search-params.ts
+     * exists) or to the raw URLSearchParams. Stored as a Promise so the framework
+     * can later support partial pre-rendering where param resolution is deferred.
+     */
+    searchParamsPromise: Promise<URLSearchParams | Record<string, unknown>>;
+    /** Outgoing Set-Cookie entries (name → serialized value + options). Last write wins. */
+    cookieJar: Map<string, CookieEntry>;
+    /** Whether the response has flushed (headers committed). */
+    flushed: boolean;
+    /** Whether the current context allows cookie mutation. */
+    mutableContext: boolean;
+}
+/** A single outgoing cookie entry in the cookie jar. */
+interface CookieEntry {
+    name: string;
+    value: string;
+    options: CookieOptions;
+}
+/** @internal */
+export declare const requestContextAls: AsyncLocalStorage<RequestContextStore>;
 /**
  * Configure the cookie signing secrets.
  *
@@ -172,4 +203,5 @@ export declare function getSetCookieHeaders(): string[];
  * See design/07-routing.md §"Request Header Injection"
  */
 export declare function applyRequestHeaderOverlay(overlay: Headers): void;
+export {};
 //# sourceMappingURL=request-context.d.ts.map

package/dist/server/request-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/server/request-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AA+CzC;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAExD;AAID;;;;;GAKG;AACH,wBAAgB,OAAO,IAAI,eAAe,CASzC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,OAAO,IAAI,cAAc,CA2GxC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAC3F,wBAAgB,YAAY,IAAI,OAAO,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAYnF;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAK3E;AAID;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,OAAO,EACP,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,MAAM,CAAC,QAAQ,CACnF,CAAC;AAEF,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AASD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,gCAAgC;IAChC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,4DAA4D;IAC5D,MAAM,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,yBAAyB;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C,8FAA8F;IAC9F,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAChE,2DAA2D;IAC3D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC7E,8DAA8D;IAC9D,KAAK,IAAI,IAAI,CAAC;IACd,mDAAmD;IACnD,QAAQ,IAAI,MAAM,CAAC;CACpB;AAID;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAYrE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAK9D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAK1C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAI9C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmBhE"}
+{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../src/server/request-context.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAIzC,UAAU,mBAAmB;IAC3B,iDAAiD;IACjD,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,aAAa,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,uEAAuE;IACvE,eAAe,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,mBAAmB,EAAE,OAAO,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxE,wFAAwF;IACxF,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,4DAA4D;IAC5D,OAAO,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,wDAAwD;AACxD,UAAU,WAAW;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,gBAAgB;AAChB,eAAO,MAAM,iBAAiB,wCAA+C,CAAC;AAkB9E;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAExD;AAID;;;;;GAKG;AACH,wBAAgB,OAAO,IAAI,eAAe,CASzC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,OAAO,IAAI,cAAc,CA2GxC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAC3F,wBAAgB,YAAY,IAAI,OAAO,CAAC,eAAe,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAYnF;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAK3E;AAID;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,IAAI,CAChC,OAAO,EACP,KAAK,GAAG,KAAK,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,MAAM,CAAC,QAAQ,CACnF,CAAC;AAEF,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC,+EAA+E;IAC/E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AASD;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,oEAAoE;IACpE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,gCAAgC;IAChC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,4DAA4D;IAC5D,MAAM,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,yBAAyB;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC5C,8FAA8F;IAC9F,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAChE,2DAA2D;IAC3D,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC7E,8DAA8D;IAC9D,KAAK,IAAI,IAAI,CAAC;IACd,mDAAmD;IACnD,QAAQ,IAAI,MAAM,CAAC;CACpB;AAID;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAYrE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAK9D;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,IAAI,CAK1C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAI9C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmBhE"}

package/dist/server/rsc-entry/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/rsc-entry/index.ts"],"names":[],"mappings":"AA0EA;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAE/F;AA+lBD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;8BA3epD,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC;AA6ehD,wBAAiE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/rsc-entry/index.ts"],"names":[],"mappings":"AA2EA;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAE/F;AAkpBD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;8BA9hBpD,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC;AAgiBhD,wBAAiE"}

package/dist/server/slot-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slot-resolver.d.ts","sourceRoot":"","sources":["../../src/server/slot-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAIrE,KAAK,eAAe,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,mBAAmB,EAC7B,KAAK,EAAE,UAAU,EACjB,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,EACzD,CAAC,EAAE,eAAe,EAClB,YAAY,CAAC,EAAE,mBAAmB,GACjC,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAqHpC"}
+{"version":3,"file":"slot-resolver.d.ts","sourceRoot":"","sources":["../../src/server/slot-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAMrE,KAAK,eAAe,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,KAAK,CAAC,YAAY,CAAC;AAElE;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,mBAAmB,EAC7B,KAAK,EAAE,UAAU,EACjB,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC,EACzD,CAAC,EAAE,eAAe,EAClB,YAAY,CAAC,EAAE,mBAAmB,GACjC,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAiIpC"}

package/dist/server/ssr-entry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ssr-entry.d.ts","sourceRoot":"","sources":["../../src/server/ssr-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA2BH;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,eAAe,EAAE,OAAO,CAAC;IACzB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,SAAS,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACvC;;;0DAGsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;iFAE6E;IAC7E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;4DACwD;IACxD,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,SAAS,CAC7B,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC,EACrC,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,QAAQ,CAAC,CA0DnB;AAED,eAAe,SAAS,CAAC"}
+{"version":3,"file":"ssr-entry.d.ts","sourceRoot":"","sources":["../../src/server/ssr-entry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AA6BH;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1C,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,eAAe,EAAE,OAAO,CAAC;IACzB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,SAAS,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACvC;;;0DAGsD;IACtD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;iFAE6E;IAC7E,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;4DACwD;IACxD,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,SAAS,CAC7B,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC,EACrC,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,QAAQ,CAAC,CAwEnB;AAED,eAAe,SAAS,CAAC"}

package/dist/shims/headers.d.ts

@@ -1,11 +1,9 @@
 /**
- * Shim: next/headers → timber request context
+ * Shim: next/headers → timber server
  *
- * Re-exports timber's ALS-backed headers() and cookies() for libraries
- * that import from next/headers. These are real implementations backed
- * by AsyncLocalStorage, not stubs.
- *
- * See design/14-ecosystem.md §"next/headers" for the full shim audit.
+ * Imports from @timber-js/app/server which Vite resolves to dist/server/index.js
+ * via native package.json exports. This ensures the same ALS singleton as the
+ * pipeline (both import from the same shared request-context chunk in dist/).
  */
-export { headers, cookies } from '#/server/request-context.js';
+export { headers, cookies } from '@timber-js/app/server';
 //# sourceMappingURL=headers.d.ts.map

package/dist/shims/headers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/shims/headers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAC"}
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../src/shims/headers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/shims/link.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../src/shims/link.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../../src/shims/link.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,IAAI,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/shims/navigation.d.ts

@@ -1,25 +1,15 @@
 /**
  * Shim: next/navigation → timber navigation primitives
  *
- * Re-exports timber's navigation hooks and functions for libraries
- * that import from next/navigation. Covers the App Router API surface
- * used by ecosystem libraries (nuqs, next-intl, etc.).
- *
- * Note: nuqs imports next/navigation.js (with .js extension).
- * The timber-shims plugin strips .js before matching.
- *
- * Intentional divergences from Next.js:
- * - useRouter().replace() currently uses pushState (same as push) —
- *   timber's router doesn't distinguish push/replace yet.
- * - redirect() does not accept a RedirectType argument — timber
- *   always uses replace semantics for redirects.
- * - permanentRedirect() delegates to redirect(path, 308).
- * See design/14-ecosystem.md for the full shim audit.
+ * Client hooks use #/ source imports (individual files with 'use client' directives
+ * that the RSC plugin detects).
+ * Server functions use @timber-js/app/server (resolved to dist/ via native exports)
+ * for ALS singleton consistency.
  */
 export { useParams } from '#/client/use-params.js';
 export { usePathname } from '#/client/use-pathname.js';
 export { useSearchParams } from '#/client/use-search-params.js';
 export { useRouter } from '#/client/use-router.js';
 export { useSelectedLayoutSegment, useSelectedLayoutSegments, } from '#/client/use-selected-layout-segment.js';
-export { redirect, permanentRedirect, notFound, RedirectType } from '#/server/primitives.js';
+export { redirect, permanentRedirect, notFound, RedirectType } from '@timber-js/app/server';
 //# sourceMappingURL=navigation.d.ts.map

package/dist/shims/navigation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../src/shims/navigation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"navigation.d.ts","sourceRoot":"","sources":["../../src/shims/navigation.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timber-js/app",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Vite-native React framework for Cloudflare Workers — correct HTTP semantics, real status codes, pages that work without JavaScript",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",

package/src/client/link.tsx

@@ -1,3 +1,5 @@
+'use client';
+
 // Link component — client-side navigation with progressive enhancement
 // See design/19-client-navigation.md § Progressive Enhancement
 //

package/src/client/slot-error-fallback.tsx

@@ -0,0 +1,16 @@
+'use client';
+
+/**
+ * Null fallback component for the slot catch-all error boundary.
+ *
+ * When a slot throws an error that isn't caught by a user-defined error.tsx,
+ * this boundary renders nothing — the slot gracefully degrades per
+ * design/02-rendering-pipeline.md §"Slot Access Failure = Graceful Degradation".
+ *
+ * This must be a 'use client' component because TimberErrorBoundary passes it
+ * as a prop (fallbackComponent), and server component functions cannot be
+ * passed directly to client components.
+ */
+export default function SlotErrorFallback(): null {
+  return null;
+}

package/src/plugins/shims.ts

@@ -5,6 +5,11 @@
  * shim implementations. This enables Next.js-compatible libraries
  * (nuqs, next-intl, etc.) to work unmodified.
  *
+ * NOTE: This plugin does NOT resolve @timber-js/app/* subpath imports.
+ * Those are handled by Vite's native package.json `exports` resolution,
+ * which maps them to dist/ files. This ensures a single module instance
+ * for shared modules like request-context (ALS singleton).
+ *
  * Design doc: 18-build-system.md §"Shim Map"
  */
 
@@ -14,7 +19,14 @@ import { fileURLToPath } from 'node:url';
 import type { PluginContext } from '#/index.js';
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
-const SHIMS_DIR = resolve(__dirname, '..', 'shims');
+// Detect whether we're running from source (src/plugins/) or dist (dist/).
+// From src/plugins/: go up 2 levels to package root.
+// From dist/: go up 1 level to package root.
+// When Rollup bundles into dist/index.js, __dirname is dist/, not src/plugins/.
+const PKG_ROOT = __dirname.endsWith('plugins')
+  ? resolve(__dirname, '..', '..')
+  : resolve(__dirname, '..');
+const SHIMS_DIR = resolve(PKG_ROOT, 'src', 'shims');
 
 /**
  * Virtual module IDs for server-only and client-only poison pills.
@@ -55,20 +67,6 @@ const CLIENT_SHIM_OVERRIDES: Record<string, string> = {
   'next/navigation': resolve(SHIMS_DIR, 'navigation-client.ts'),
 };
 
-/**
- * Map from @timber-js/app/* subpath imports to real source files.
- *
- * These resolve subpath imports like `@timber-js/app/server` to the
- * real entry files in the package source.
- */
-const TIMBER_SUBPATH_MAP: Record<string, string> = {
-  '@timber-js/app/server': resolve(__dirname, '..', 'server', 'index.ts'),
-  '@timber-js/app/client': resolve(__dirname, '..', 'client', 'index.ts'),
-  '@timber-js/app/cache': resolve(__dirname, '..', 'cache', 'index.ts'),
-  '@timber-js/app/search-params': resolve(__dirname, '..', 'search-params', 'index.ts'),
-  '@timber-js/app/routing': resolve(__dirname, '..', 'routing', 'index.ts'),
-};
-
 /**
  * Strip .js extension from an import specifier.
  *
@@ -94,14 +92,20 @@ export function timberShims(_ctx: PluginContext): Plugin {
     enforce: 'pre',
 
     /**
-     * Resolve next/* and @timber-js/app/* imports to shim/source files.
+     * Resolve next/* imports to shim files.
      *
      * Resolution order:
      * 1. Check server-only / client-only poison pill packages
      * 2. Strip .js extension from the import specifier
      * 3. Check next/* shim map
-     * 4. Check @timber-js/app/* subpath map
-     * 5. Return null (pass through) for unrecognized imports
+     * 4. Return null (pass through) for everything else
+     *
+     * @timber-js/app/server is resolved to src/ so it shares the same module
+     * instance as framework internals (which import via #/). This ensures
+     * a single requestContextAls and _getRscFallback variable.
+     *
+     * @timber-js/app/client is NOT mapped here — it resolves to dist/ via
+     * package.json exports, where 'use client' is preserved on the entry.
      */
     resolveId(id: string) {
       // Poison pill packages — resolve to virtual modules handled by load()
@@ -121,9 +125,16 @@ export function timberShims(_ctx: PluginContext): Plugin {
         return SHIM_MAP[cleanId];
       }
 
-      // Check @timber-js/app/* subpath map
-      if (cleanId in TIMBER_SUBPATH_MAP) {
-        return TIMBER_SUBPATH_MAP[cleanId];
+      // @timber-js/app/server → src/ in server environments so user code
+      // shares the same module instance as framework internals (single ALS).
+      // In the client environment, return a virtual empty module — server
+      // code must never be bundled into the browser.
+      if (cleanId === '@timber-js/app/server') {
+        const envName = (this as unknown as { environment?: { name?: string } }).environment?.name;
+        if (envName === 'client') {
+          return '\0timber:server-empty';
+        }
+        return resolve(PKG_ROOT, 'src', 'server', 'index.ts');
       }
 
       return null;
@@ -162,7 +173,22 @@ export function timberShims(_ctx: PluginContext): Plugin {
         return 'export {};';
       }
 
-      return null;
+      // Stub for @timber-js/app/server in client environment.
+      // Exports throw-on-call stubs so named imports resolve but
+      // calling them gives a clear error instead of crashing the bundle.
+      if (id === '\0timber:server-empty') {
+        return `
+const stub = (name) => () => { throw new Error(name + "() is a server-only function and cannot be called in client code."); };
+export const headers = stub("headers");
+export const cookies = stub("cookies");
+export const notFound = stub("notFound");
+export const redirect = stub("redirect");
+export const permanentRedirect = stub("permanentRedirect");
+export const deny = stub("deny");
+export const searchParams = stub("searchParams");
+export const RedirectType = { push: "push", replace: "replace" };
+`;
+      }
     },
   };
 }

package/src/server/error-formatter.ts

@@ -147,6 +147,18 @@ function extractErrorHint(message: string): string | null {
     return 'A component resolved to undefined/null — check default exports and import paths';
   }
 
+  // "Invalid hook call" — hooks called outside React's render context.
+  // In RSC, this typically means a 'use client' component was executed as a
+  // server component instead of being serialized as a client reference.
+  if (message.includes('Invalid hook call')) {
+    return (
+      'A hook was called outside of a React component render. ' +
+      'If this is a \'use client\' component, ensure the directive is at the very top of the file ' +
+      '(before any imports) and that @vitejs/plugin-rsc is loaded correctly. ' +
+      'Barrel re-exports from non-\'use client\' files do not propagate the directive.'
+    );
+  }
+
   return null;
 }
 

package/src/server/primitives.ts

@@ -1,4 +1,4 @@
-// Server-side primitives: deny, redirect, redirectExternal, RenderError, waitUntil
+// Server-side primitives: deny, redirect, redirectExternal, RenderError, waitUntil, SsrStreamError
 //
 // These are the core runtime signals that components, middleware, and access gates
 // use to control request flow. See design/10-error-handling.md.
@@ -262,3 +262,26 @@ export function waitUntil(promise: Promise<unknown>, adapter: WaitUntilAdapter):
 export function _resetWaitUntilWarning(): void {
   _waitUntilWarned = false;
 }
+
+// ─── SsrStreamError ─────────────────────────────────────────────────────────
+
+/**
+ * Error thrown when SSR's renderToReadableStream fails due to an error
+ * in the decoded RSC stream (e.g., uncontained slot errors).
+ *
+ * The RSC entry checks for this error type in its catch block to avoid
+ * re-executing server components via renderDenyPage. Instead, it renders
+ * a bare deny/error page without layout wrapping.
+ *
+ * Defined in primitives.ts (not ssr-entry.ts) because ssr-entry.ts imports
+ * react-dom/server which cannot be loaded in the RSC environment.
+ */
+export class SsrStreamError extends Error {
+  constructor(
+    message: string,
+    public readonly cause: unknown
+  ) {
+    super(message);
+    this.name = 'SsrStreamError';
+  }
+}

package/src/server/request-context.ts

@@ -46,7 +46,13 @@ interface CookieEntry {
   options: CookieOptions;
 }
 
-const requestContextAls = new AsyncLocalStorage<RequestContextStore>();
+/** @internal */
+export const requestContextAls = new AsyncLocalStorage<RequestContextStore>();
+
+// No fallback needed — we use enterWith() instead of run() to ensure
+// the ALS context persists for the entire request lifecycle including
+// async stream consumption by React's renderToReadableStream.
+
 
 // ─── Cookie Signing Secrets ──────────────────────────────────────────────
 

package/src/server/rsc-entry/index.ts

@@ -24,6 +24,7 @@ import buildManifest from 'virtual:timber-build-manifest';
 
 import { renderToReadableStream } from '@vitejs/plugin-rsc/rsc';
 
+import React, { createElement } from 'react';
 import { createPipeline } from '#/server/pipeline.js';
 import { initDevTracing } from '#/server/tracing.js';
 import type { PipelineConfig, RouteMatch, InterceptionContext } from '#/server/pipeline.js';
@@ -31,7 +32,7 @@ import { logRenderError } from '#/server/logger.js';
 import { resolveLogMode } from '#/server/dev-logger.js';
 import { createRouteMatcher, createMetadataRouteMatcher } from '#/server/route-matcher.js';
 import type { ManifestSegmentNode } from '#/server/route-matcher.js';
-import { DenySignal, RedirectSignal, RenderError } from '#/server/primitives.js';
+import { DenySignal, RedirectSignal, RenderError, SsrStreamError } from '#/server/primitives.js';
 import { buildClientScripts } from '#/server/html-injectors.js';
 import type { ClientBootstrapConfig } from '#/server/html-injectors.js';
 import { renderDenyPage, renderDenyPageAsRsc } from '#/server/deny-renderer.js';
@@ -372,6 +373,7 @@ async function renderRoute(
   let redirectSignal: RedirectSignal | null = null;
   let renderError: { error: unknown; status: number } | null = null;
   let rscStream: ReadableStream<Uint8Array> | undefined;
+
   try {
     rscStream = renderToReadableStream(
       element,
@@ -407,6 +409,30 @@ async function renderRoute(
               status: error.status,
             });
           }
+          // Dev diagnostic: detect "Invalid hook call" errors which indicate
+          // a 'use client' component is being executed during RSC rendering
+          // instead of being serialized as a client reference. This happens when
+          // the RSC plugin's transform doesn't detect the directive — e.g., the
+          // directive isn't at the very top of the file, or the component is
+          // re-exported through a barrel file without 'use client'.
+          // See LOCAL-297.
+          if (
+            process.env.NODE_ENV !== 'production' &&
+            error instanceof Error &&
+            error.message.includes('Invalid hook call')
+          ) {
+            console.error(
+              '[timber] A React hook was called during RSC rendering. This usually means a ' +
+                "'use client' component is being executed as a server component instead of " +
+                'being serialized as a client reference.\n\n' +
+                'Common causes:\n' +
+                "  1. The 'use client' directive is not the FIRST statement in the file (before any imports)\n" +
+                "  2. The component is re-exported through a barrel file (index.ts) that lacks 'use client'\n" +
+                '  3. @vitejs/plugin-rsc is not loaded or is misconfigured\n\n' +
+                `Request: ${_req.method} ${new URL(_req.url).pathname}`
+            );
+          }
+
           // Track unhandled errors for pre-flush handling (500 status)
           if (!renderError) {
             renderError = { error, status: 500 };
@@ -675,6 +701,32 @@ async function renderRoute(
       return new Response(null, { status: 499 });
     }
 
+    // SsrStreamError: SSR's renderToReadableStream failed because the RSC
+    // stream contained an uncontained error (e.g., slot without error boundary).
+    // Render the deny/error page WITHOUT layout wrapping to avoid re-executing
+    // server components (which call headers()/cookies() and fail in SSR's
+    // separate ALS scope). See LOCAL-293.
+    if (ssrError instanceof SsrStreamError) {
+      const sig = redirectSignal as RedirectSignal | null;
+      if (sig) return buildRedirectResponse(_req, sig, responseHeaders);
+      if (denySignal) {
+        // Render deny page without layouts — pass empty layout list
+        return renderDenyPage(
+          denySignal, segments, [] as LayoutEntry[],
+          _req, match, responseHeaders, clientBootstrap, createDebugChannelSink, callSsr
+        );
+      }
+      const err = renderError as { error: unknown; status: number } | null;
+      if (err) {
+        return renderErrorPage(
+          err.error, err.status, segments, [] as LayoutEntry[],
+          _req, match, responseHeaders, clientBootstrap
+        );
+      }
+      // No captured signal — return bare 500
+      return new Response(null, { status: 500, headers: responseHeaders });
+    }
+
     // SSR shell rendering failed — the error was outside Suspense.
     // Check captured signals (redirect, deny, render error).
     const signalResponse = checkCapturedSignals();

package/src/server/slot-resolver.ts

@@ -20,6 +20,8 @@ import type { ManifestSegmentNode } from './route-matcher.js';
 import type { RouteMatch, InterceptionContext } from './pipeline.js';
 import { SlotAccessGate } from './access-gate.js';
 import { wrapSegmentWithErrorBoundaries } from './error-boundary-wrapper.js';
+import { TimberErrorBoundary } from '#/client/error-boundary.js';
+import SlotErrorFallback from '#/client/slot-error-fallback.js';
 
 type CreateElementFn = (...args: unknown[]) => React.ReactElement;
 
@@ -142,6 +144,18 @@ export async function resolveSlotElement(
       // Wrap with slot root's error boundaries (outermost)
       element = await wrapSegmentWithErrorBoundaries(slotNode, element, h);
 
+      // Catch-all error boundary: ensures slot errors NEVER propagate to the
+      // parent layout. Without this, a slot without error.tsx that throws
+      // causes SSR's renderToReadableStream to reject, triggering renderDenyPage
+      // which re-executes all layout server components (including headers() calls
+      // that fail in the SSR environment). The null fallback means the slot
+      // degrades to nothing — consistent with the slot access denial behavior.
+      // See design/02-rendering-pipeline.md §"Slot Access Failure = Graceful Degradation"
+      element = h(TimberErrorBoundary, {
+        fallbackComponent: SlotErrorFallback,
+        children: element,
+      });
+
       return element;
     }
   }
@@ -187,9 +201,14 @@ function findSlotMatch(slotNode: ManifestSegmentNode, match: RouteMatch): SlotMa
 
   // Find the parent segment that owns this slot by comparing urlPaths.
   // The slot's urlPath matches its parent's urlPath (slots don't add URL depth).
+  // Search BACKWARDS to find the deepest (last) matching segment. Multiple
+  // segments can share the same urlPath when route groups are involved (e.g.,
+  // Root urlPath='/' and (browse) urlPath='/'). The slot's parent is always
+  // the deepest one — searching forward would incorrectly pick the root,
+  // making remainingSegments too long and breaking slot matching.
   const slotUrlPath = slotNode.urlPath;
   let parentIndex = -1;
-  for (let i = 0; i < segments.length; i++) {
+  for (let i = segments.length - 1; i >= 0; i--) {
     if (segments[i].urlPath === slotUrlPath) {
       parentIndex = i;
       break;

package/src/server/ssr-entry.ts

@@ -18,6 +18,8 @@ import { createFromReadableStream } from '@vitejs/plugin-rsc/ssr';
 import { AsyncLocalStorage } from 'node:async_hooks';
 
 import { renderSsrStream, buildSsrResponse } from './ssr-render.js';
+import { formatSsrError } from './error-formatter.js';
+import { SsrStreamError } from './primitives.js';
 import { injectHead, injectRscPayload } from './html-injectors.js';
 import { withNuqsSsrAdapter } from './nuqs-ssr-provider.js';
 import { withSpan } from './tracing.js';
@@ -141,11 +143,25 @@ export async function handleSsr(
       // in the shell HTML. This executes immediately during parsing — even
       // while Suspense boundaries are still streaming — triggering module
       // loading via dynamic import() so hydration can start early.
-      const htmlStream = await renderSsrStream(wrappedElement, {
-        bootstrapScriptContent: navContext.bootstrapScriptContent || undefined,
-        deferSuspenseFor: navContext.deferSuspenseFor,
-        signal: navContext.signal,
-      });
+      let htmlStream: ReadableStream<Uint8Array>;
+      try {
+        htmlStream = await renderSsrStream(wrappedElement, {
+          bootstrapScriptContent: navContext.bootstrapScriptContent || undefined,
+          deferSuspenseFor: navContext.deferSuspenseFor,
+          signal: navContext.signal,
+        });
+      } catch (renderError) {
+        // SSR shell rendering failed — the RSC stream contained an error
+        // that wasn't caught by any error boundary in the decoded tree.
+        // Wrap in SsrStreamError so the RSC entry can handle it without
+        // re-executing server components via renderDenyPage.
+        // See LOCAL-293.
+        console.error('[timber] SSR shell failed from RSC stream error:', formatSsrError(renderError));
+        throw new SsrStreamError(
+          'SSR renderToReadableStream failed due to RSC stream error',
+          renderError
+        );
+      }
 
       // Inject metadata into <head>, then interleave RSC payload chunks
       // into the body as they arrive from the tee'd RSC stream.

package/src/shims/headers.ts

@@ -1,11 +1,9 @@
 /**
- * Shim: next/headers → timber request context
+ * Shim: next/headers → timber server
  *
- * Re-exports timber's ALS-backed headers() and cookies() for libraries
- * that import from next/headers. These are real implementations backed
- * by AsyncLocalStorage, not stubs.
- *
- * See design/14-ecosystem.md §"next/headers" for the full shim audit.
+ * Imports from @timber-js/app/server which Vite resolves to dist/server/index.js
+ * via native package.json exports. This ensures the same ALS singleton as the
+ * pipeline (both import from the same shared request-context chunk in dist/).
  */
 
-export { headers, cookies } from '#/server/request-context.js';
+export { headers, cookies } from '@timber-js/app/server';

package/src/shims/link.ts

@@ -1,3 +1,5 @@
+'use client';
+
 /**
  * Shim: next/link → @timber-js/app/client Link
  *

package/src/shims/navigation.ts

@@ -1,23 +1,13 @@
 /**
  * Shim: next/navigation → timber navigation primitives
  *
- * Re-exports timber's navigation hooks and functions for libraries
- * that import from next/navigation. Covers the App Router API surface
- * used by ecosystem libraries (nuqs, next-intl, etc.).
- *
- * Note: nuqs imports next/navigation.js (with .js extension).
- * The timber-shims plugin strips .js before matching.
- *
- * Intentional divergences from Next.js:
- * - useRouter().replace() currently uses pushState (same as push) —
- *   timber's router doesn't distinguish push/replace yet.
- * - redirect() does not accept a RedirectType argument — timber
- *   always uses replace semantics for redirects.
- * - permanentRedirect() delegates to redirect(path, 308).
- * See design/14-ecosystem.md for the full shim audit.
+ * Client hooks use #/ source imports (individual files with 'use client' directives
+ * that the RSC plugin detects).
+ * Server functions use @timber-js/app/server (resolved to dist/ via native exports)
+ * for ALS singleton consistency.
  */
 
-// Hooks (client-side)
+// Hooks (client-side — must use source imports for RSC 'use client' detection)
 export { useParams } from '#/client/use-params.js';
 export { usePathname } from '#/client/use-pathname.js';
 export { useSearchParams } from '#/client/use-search-params.js';
@@ -27,5 +17,5 @@ export {
   useSelectedLayoutSegments,
 } from '#/client/use-selected-layout-segment.js';
 
-// Functions (server-side)
-export { redirect, permanentRedirect, notFound, RedirectType } from '#/server/primitives.js';
+// Functions (server-side — resolved to dist/ for ALS singleton consistency)
+export { redirect, permanentRedirect, notFound, RedirectType } from '@timber-js/app/server';